@tangle-network/sandbox 0.10.5-develop.20260715163306.7ca6a55 → 0.11.0

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { D as CodeExecutionOptions, O as CodeExecutionResult, j as CodeResultPart, k as CodeLanguage } from "../types-LNLeU9Ub.js";
-import { n as SandboxInstance } from "../sandbox-B9P4tyt4.js";
-import { i as SandboxClient } from "../client-CSaBJ8wD.js";
+import { D as CodeExecutionOptions, O as CodeExecutionResult, j as CodeResultPart, k as CodeLanguage } from "../types-C4dFf5eL.js";
+import { n as SandboxInstance } from "../sandbox-BSsCz6nP.js";
+import { i as SandboxClient } from "../client-B2YYIsdw.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-CSaBJ8wD.d.ts → client-B2YYIsdw.d.ts}

@@ -1,5 +1,5 @@
-import { $n as SandboxFleetDriverCapability, An as ReconcileSandboxFleetsResult, B as CreateSandboxOptions, Cn as PublicTemplateInfo, Ct as FleetPromptDispatchResult, Dn as ReapExpiredSandboxFleetsOptions, En as PublishPublicTemplateVersionOptions, Er as SandboxProfileSummary, F as CreateIntelligenceReportOptions, Gt as IntelligenceReportCompareTo, I as CreateRequestOptions, Jn as SandboxFleetArtifact, Kn as SandboxEnvironment, L as CreateSandboxFleetOptions, On as ReapExpiredSandboxFleetsResult, Qn as SandboxFleetDispatchResponse, Qt as ListSandboxOptions, R as CreateSandboxFleetTokenOptions, St as FleetPromptDispatchOptions, Ti as TokenRefreshHandler, Tn as PublishPublicTemplateOptions, Ut as IntelligenceReport, Wn as SandboxClientConfig, Wt as IntelligenceReportBudget, Xn as SandboxFleetCostEstimate, Yn as SandboxFleetArtifactSpec, Zt as ListSandboxFleetOptions, _ as BatchResult, _n as PromptOptions, _t as FleetDispatchResultBufferOptions, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetMachineRecord, br as SandboxFleetWorkspaceSnapshotResult, bt as FleetExecDispatchResult, ci as SshKeysManager, dr as SandboxFleetToken, fi as SubscriptionInfo, fr as SandboxFleetTraceBundle, g as BatchOptions, gn as PromptInputPart, gr as SandboxFleetUsage, gt as FleetDispatchResultBuffer, hr as SandboxFleetTraceOptions, ht as FleetDispatchCancelResult, ji as UsageInfo, kn as ReconcileSandboxFleetsOptions, lr as SandboxFleetOperationsSummary, m as BatchEvent, nt as ExecOptions, qr as SecretsManager, qt as IntelligenceReportWindow, rt as ExecResult, sr as SandboxFleetManifest, tr as SandboxFleetInfo, v as BatchRunOptions, vn as PromptResult, vr as SandboxFleetWorkspaceReconcileResult, vt as FleetDispatchStreamOptions, wn as PublicTemplateVersionInfo, x as BatchTask, xr as SandboxInfo, xt as FleetMachineId, y as BatchRunRequest, yr as SandboxFleetWorkspaceRestoreResult, yt as FleetExecDispatchOptions, z as CreateSandboxFleetWithCoordinatorOptions } from "./types-LNLeU9Ub.js";
-import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-B9P4tyt4.js";
+import { $n as SandboxFleetDispatchResponse, $t as ListSandboxOptions, An as ReconcileSandboxFleetsOptions, B as CreateSandboxOptions, Ct as FleetPromptDispatchOptions, Dn as PublishPublicTemplateVersionOptions, Dr as SandboxProfileSummary, Ei as TokenRefreshHandler, En as PublishPublicTemplateOptions, F as CreateIntelligenceReportOptions, Gn as SandboxClientConfig, Gt as IntelligenceReportBudget, I as CreateRequestOptions, Jr as SecretsManager, Jt as IntelligenceReportWindow, Kt as IntelligenceReportCompareTo, L as CreateSandboxFleetOptions, Mi as UsageInfo, On as ReapExpiredSandboxFleetsOptions, Qt as ListSandboxFleetOptions, R as CreateSandboxFleetTokenOptions, Sr as SandboxInfo, St as FleetMachineId, Tn as PublicTemplateVersionInfo, Wt as IntelligenceReport, Xn as SandboxFleetArtifactSpec, Yn as SandboxFleetArtifact, Zn as SandboxFleetCostEstimate, _ as BatchResult, _n as PromptInputPart, _r as SandboxFleetUsage, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, br as SandboxFleetWorkspaceRestoreResult, bt as FleetExecDispatchOptions, cr as SandboxFleetManifest, er as SandboxFleetDriverCapability, fr as SandboxFleetToken, g as BatchOptions, gr as SandboxFleetTraceOptions, gt as FleetDispatchCancelResult, it as ExecResult, jn as ReconcileSandboxFleetsResult, kn as ReapExpiredSandboxFleetsResult, li as SshKeysManager, m as BatchEvent, nr as SandboxFleetInfo, or as SandboxFleetMachineRecord, pi as SubscriptionInfo, pr as SandboxFleetTraceBundle, qn as SandboxEnvironment, rt as ExecOptions, ur as SandboxFleetOperationsSummary, v as BatchRunOptions, vn as PromptOptions, vt as FleetDispatchResultBufferOptions, wn as PublicTemplateInfo, wt as FleetPromptDispatchResult, x as BatchTask, xr as SandboxFleetWorkspaceSnapshotResult, xt as FleetExecDispatchResult, y as BatchRunRequest, yn as PromptResult, yr as SandboxFleetWorkspaceReconcileResult, yt as FleetDispatchStreamOptions, z as CreateSandboxFleetWithCoordinatorOptions } from "./types-C4dFf5eL.js";
+import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BSsCz6nP.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/{client-0Zp62AKL.js → client-C2yRj_dB.js}

@@ -1,6 +1,6 @@
-import { i as SANDBOX_PROXY_REQUEST_MAX_BYTES } from "./runtime-api-DDOueAzd.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, o as PartialFailureError, p as parseErrorResponse, t as AuthError } from "./errors-wd266B9Q.js";
-import { d as exportTraceBundle, g as parseSSEStream, h as encodeTextForWire, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-C8qQicxF.js";
+import { c as encodeTextForWire, i as SANDBOX_PROXY_REQUEST_MAX_BYTES, o as combineAbortSignals, s as encodePromptForWire } from "./runtime-api-kukaWPtF.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, o as PartialFailureError, p as parseErrorResponse, t as AuthError } from "./errors-Cbs78OlF.js";
+import { d as exportTraceBundle, l as normalizeConnection, m as parseSSEStream, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-r2Lxbw8z.js";
 //#region src/resources.ts
 /**
 * Compute tiers, ordered smallest → largest. Defined HERE (not imported from
@@ -1672,7 +1672,7 @@ var SandboxClient = class {
 		}
 		const resources = normalizeSandboxResources(options?.resources, options?.driver);
 		const postDeadline = AbortSignal.timeout(timeoutMs);
-		const postSignal = requestOptions?.signal ? AbortSignal.any([requestOptions.signal, postDeadline]) : postDeadline;
+		const postSignal = requestOptions?.signal ? combineAbortSignals([requestOptions.signal, postDeadline]) : postDeadline;
 		const createRequestBody = JSON.stringify({
 			name: options?.name,
 			...resolvedEnvironment !== void 0 ? {
@@ -2037,7 +2037,7 @@ var SandboxClient = class {
 			graceMs: request.graceMs ?? 0
 		});
 		const deadline = AbortSignal.timeout(resolvedTimeoutMs + CLIENT_DEADLINE_GRACE_MS);
-		const combinedSignal = userSignal ? AbortSignal.any([userSignal, deadline]) : deadline;
+		const combinedSignal = userSignal ? combineAbortSignals([userSignal, deadline]) : deadline;
 		let response;
 		try {
 			response = await globalThis.fetch(url, {

package/dist/collaboration/index.js

@@ -1,2 +1,2 @@
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-CcZE2xMl.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-DDnuTcZd.js";
 export { CollaborationClient, CollaborationFileBridge, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/{collaboration-CcZE2xMl.js → collaboration-DDnuTcZd.js}

@@ -1,4 +1,4 @@
-import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "./errors-wd266B9Q.js";
+import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "./errors-Cbs78OlF.js";
 //#region src/collaboration/client.ts
 const DEFAULT_TIMEOUT_MS = 3e4;
 function normalizeBaseUrl(url) {

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { B as CreateSandboxOptions, Mr as SandboxStatus, Wn as SandboxClientConfig, cn as PreviewLinkManager, nn as NetworkConfig, nt as ExecOptions, rt as ExecResult, sn as PreviewLinkInfo, xr as SandboxInfo } from "./types-LNLeU9Ub.js";
-import { n as SandboxInstance } from "./sandbox-B9P4tyt4.js";
-import { i as SandboxClient } from "./client-CSaBJ8wD.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
+import { B as CreateSandboxOptions, Gn as SandboxClientConfig, Nr as SandboxStatus, Sr as SandboxInfo, cn as PreviewLinkInfo, it as ExecResult, ln as PreviewLinkManager, rn as NetworkConfig, rt as ExecOptions } from "./types-C4dFf5eL.js";
+import { n as SandboxInstance } from "./sandbox-BSsCz6nP.js";
+import { i as SandboxClient } from "./client-B2YYIsdw.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-ntvaf0_F.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
-import { t as SandboxInstance } from "./sandbox-C8qQicxF.js";
-import { n as SandboxClient } from "./client-0Zp62AKL.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-Cbs78OlF.js";
+import { t as SandboxInstance } from "./sandbox-r2Lxbw8z.js";
+import { n as SandboxClient } from "./client-C2yRj_dB.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{errors-wd266B9Q.js → errors-Cbs78OlF.js}

@@ -123,8 +123,8 @@ var StateError = class extends SandboxError {
 	currentState;
 	/** Required state for the operation */
 	requiredState;
-	constructor(message, currentState, requiredState, metadata) {
-		super(message, "INVALID_STATE", 409, metadata);
+	constructor(message, currentState, requiredState, metadata, code = "INVALID_STATE") {
+		super(message, code, 409, metadata);
 		this.name = "StateError";
 		this.currentState = currentState;
 		this.requiredState = requiredState;
@@ -259,7 +259,7 @@ function parseErrorResponse(status, body, context, headers) {
 		case 401: return new AuthError(message, metadata);
 		case 404: return new NotFoundError(data.resourceType || "Resource", data.resourceId || "unknown", metadata);
 		case 408: return new TimeoutError(data.timeoutMs || 3e4, message, metadata);
-		case 409: return new StateError(message, data.currentState || "unknown", data.requiredState, metadata);
+		case 409: return new StateError(message, data.currentState || "unknown", data.requiredState, metadata, code);
 		case 429: return new QuotaError(data.quotaType || "rate_limit", message, data.current, data.limit, metadata);
 		case 501: return new SandboxError(message, code || "NOT_IMPLEMENTED", status, metadata);
 		default:

package/dist/{errors-CNCz3Ms9.d.ts → errors-ntvaf0_F.d.ts}

@@ -100,7 +100,7 @@ declare class StateError extends SandboxError {
   readonly currentState: string;
   /** Required state for the operation */
   readonly requiredState?: string;
-  constructor(message: string, currentState: string, requiredState?: string, metadata?: SandboxErrorMetadata);
+  constructor(message: string, currentState: string, requiredState?: string, metadata?: SandboxErrorMetadata, code?: string);
 }
 declare class EgressProxyRecoveryError extends SandboxError {
   readonly phase: "egress_proxy_recovery";

package/dist/{index-CEZaPvfX.d.ts → index-V2vjBfHU.d.ts}

@@ -1,5 +1,5 @@
-import { B as CreateSandboxOptions } from "./types-LNLeU9Ub.js";
-import { n as SandboxInstance, t as HttpClient } from "./sandbox-B9P4tyt4.js";
+import { B as CreateSandboxOptions } from "./types-C4dFf5eL.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-BSsCz6nP.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as EgressManager, $i as defineInlineResource, $n as SandboxFleetDriverCapability, $r as SessionForkOptions, $t as McpServerConfig, A as CodeResult, Ai as UploadProgress, An as ReconcileSandboxFleetsResult, Ar as SandboxRuntimeProfile, At as GitStatus, B as CreateSandboxOptions, Bi as AgentProfileConnection, Bn as RolloutTurnPart, Br as SandboxTraceOptions, Bt as HostAgentDriverConfig, C as BatchTaskUsage, Ci as TeePublicKey, Cn as PublicTemplateInfo, Cr as SandboxPermissionsConfig, Di as TurnDriveResult, Dn as ReapExpiredSandboxFleetsOptions, Dr as SandboxResourceUsage, Dt as GitCommit, E as ChunkedUploadResult, Ei as ToolsConfig, En as PublishPublicTemplateVersionOptions, Er as SandboxProfileSummary, Et as GitBranch, F as CreateIntelligenceReportOptions, Fi as WriteManyFile, Fn as RolloutChildResult, Fr as SandboxTerminalManager, Ft as GpuLeaseExecResult, G as DispatchPromptOptions, Gi as AgentProfilePrompt, Gn as SandboxConnection, Gr as SearchOptions, Gt as IntelligenceReportCompareTo, H as CreateTaskSessionOptions, Hi as AgentProfileMcpServer, Hn as SSHCommandDescriptor, Hr as ScopedToken, Ht as InstalledTool, I as CreateRequestOptions, Ii as WriteManyOptions, In as RolloutOptions, Ir as SandboxTerminalRequestOptions, It as GpuLeaseManager, J as DownloadProgress, Ji as AgentProfileValidationIssue, Jn as SandboxFleetArtifact, Jr as SendSessionMessageOptions, K as DispatchedSession, Ki as AgentProfileResourceRef, Kn as SandboxEnvironment, Kr as SecretInfo, Kt as IntelligenceReportSubjectType, L as CreateSandboxFleetOptions, Li as AgentProfile, Ln as RolloutScorer, Lr as SandboxTraceBundle, Lt as GpuLeaseProviderName, M as CommitTaskSessionOptions, Mi as WaitForOptions, Mr as SandboxStatus, Mt as GpuLeaseBilling, N as CompletedTurnResult, Ni as WaitForRolloutOptions, Nr as SandboxTerminalCreateOptions, Nt as GpuLeaseCommandResult, Oi as UpdateUserOptions, On as ReapExpiredSandboxFleetsResult, Or as SandboxResources, Ot as GitConfig, P as CreateGpuLeaseOptions, Pi as WriteFileOptions, Pn as Rollout, Pr as SandboxTerminalInfo, Pt as GpuLeaseExecOptions, Q as DriverType, Qi as defineGitHubResource, Qn as SandboxFleetDispatchResponse, Qr as SessionEventStreamOptions, Qt as ListSandboxOptions, Ri as AgentProfileCapabilities, Rn as RolloutStartResult, Rr as SandboxTraceEvent, Rt as GpuLeaseStatus, S as BatchTaskResult, Si as TeeAttestationResponse, Sn as ProvisionStep, Sr as SandboxIntelligenceEnvelope, St as FleetPromptDispatchOptions, T as ChunkedUploadOptions, Ti as TokenRefreshHandler, Tn as PublishPublicTemplateOptions, Tr as SandboxPortPreviewLink, Tt as GitAuth, U as DeleteOptions, Ui as AgentProfileModelHints, Un as SSHCredentials, Ur as ScopedTokenScope, Ut as IntelligenceReport, V as CreateSessionOptions, Vi as AgentProfileFileMount, Vn as RunCodeOptions, Vr as SandboxUser, Vt as HostAgentRuntimeBackend, W as DirectoryPermission, Wi as AgentProfilePermissionValue, Wn as SandboxClientConfig, Wr as SearchMatch, Wt as IntelligenceReportBudget, X as DriverConfig, Xi as AgentSubagentProfile, Xn as SandboxFleetCostEstimate, Xr as SentSessionMessage, Xt as ListOptions, Y as DriveTurnOptions, Yi as AgentProfileValidationResult, Yn as SandboxFleetArtifactSpec, Yr as SendSessionMessageRequest, Yt as ListMessagesOptions, Z as DriverInfo, Zi as defineAgentProfile, Zn as SandboxFleetDispatchFailureClass, Zr as SessionBackendCredentials, Zt as ListSandboxFleetOptions, _ as BatchResult, _i as TaskSessionFileChange, _n as PromptOptions, _r as SandboxFleetWorkspace, _t as FleetDispatchResultBufferOptions, a as AttachSandboxFleetMachineOptions, ai as SnapshotInfo, an as PermissionLevel, ar as SandboxFleetMachineRecord, at as FileReadBatchOptions, b as BatchSidecarGroup, bi as TeeAttestationOptions, bn as ProvisionResult, br as SandboxFleetWorkspaceSnapshotResult, c as BackendInfo, cn as PreviewLinkManager, cr as SandboxFleetManifestMachine, ct as FileReadResult, d as BackendType, di as StorageConfig, dn as ProcessLogEntry, dr as SandboxFleetToken, dt as FileTreeFile, ea as mergeAgentProfiles, ei as SessionInfo, en as MintScopedTokenOptions, er as SandboxFleetDriverTimings, et as EgressPolicy, f as BatchBackend, fi as SubscriptionInfo, fn as ProcessManager, fr as SandboxFleetTraceBundle, ft as FileTreeOptions, g as BatchOptions, gi as TaskSessionCommitResult, gr as SandboxFleetUsage, gt as FleetDispatchResultBuffer, h as BatchEventDataMap, hi as TaskSessionChanges, hn as ProcessStatus, hr as SandboxFleetTraceOptions, ht as FleetDispatchCancelResult, i as AttachGpuLeaseOptions, ii as SessionStatus, in as NonHostAgentDriverConfig, ir as SandboxFleetMachineMeteredUsage, it as FileInfo, ji as UsageInfo, jn as RenameOptions, jr as SandboxRuntimeProfileList, jt as GpuLease, ki as UploadOptions, kn as ReconcileSandboxFleetsOptions, kr as SandboxRuntimeHealth, kt as GitDiff, l as BackendManager, li as StartupDiagnostics, ln as Process, lr as SandboxFleetOperationsSummary, lt as FileRenameResult, m as BatchEvent, mi as TaskResult, mn as ProcessSpawnOptions, mr as SandboxFleetTraceExport, mt as FileWriteResult, n as AccessPolicyRule, ni as SessionMessage, nn as NetworkConfig, nr as SandboxFleetIntelligenceEnvelope, nt as ExecOptions, o as BackendCapabilities, oi as SnapshotOptions, on as PermissionsManager, or as SandboxFleetMachineSpec, ot as FileReadBatchResult, p as BatchBackendStats, pi as TaskOptions, pn as ProcessSignal, pr as SandboxFleetTraceEvent, pt as FileTreeResult, q as DownloadOptions, qi as AgentProfileResources, qn as SandboxEvent, qr as SecretsManager, qt as IntelligenceReportWindow, r as AddUserOptions, ri as SessionMessageInputPart, rn as NetworkManager, rr as SandboxFleetMachine, rt as ExecResult, s as BackendConfig, si as SnapshotResult, sn as PreviewLinkInfo, sr as SandboxFleetManifest, st as FileReadError, t as AcceleratorKind, ti as SessionListOptions, tn as MkdirOptions, tr as SandboxFleetInfo, tt as EventStreamOptions, u as BackendStatus, ui as StartupOperation, un as ProcessInfo, ur as SandboxFleetPolicy, ut as FileSystem, v as BatchRunOptions, vi as TaskSessionInfo, vn as PromptResult, vr as SandboxFleetWorkspaceReconcileResult, vt as FleetDispatchStreamOptions, w as BranchOptions, wi as TeePublicKeyResponse, wn as PublicTemplateVersionInfo, wr as SandboxPortBinding, wt as GPU_LEASE_PROVIDER_NAMES, x as BatchTask, xi as TeeAttestationReport, xn as ProvisionStatus, xr as SandboxInfo, xt as FleetMachineId, y as BatchRunRequest, yi as TaskSessionProfile, yn as ProvisionEvent, yr as SandboxFleetWorkspaceRestoreResult, yt as FleetExecDispatchOptions, z as CreateSandboxFleetWithCoordinatorOptions, zi as AgentProfileConfidential, zn as RolloutStatus, zr as SandboxTraceExport, zt as GpuType } from "./types-LNLeU9Ub.js";
-import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-B9P4tyt4.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-CSaBJ8wD.js";
+import { $i as defineGitHubResource, $n as SandboxFleetDispatchResponse, $r as SessionEventStreamOptions, $t as ListSandboxOptions, A as CodeResult, Ai as UploadOptions, An as ReconcileSandboxFleetsOptions, Ar as SandboxRuntimeHealth, At as GitDiff, B as CreateSandboxOptions, Bi as AgentProfileConfidential, Bn as RolloutStatus, Br as SandboxTraceExport, Bt as GpuType, C as BatchTaskUsage, Ci as TeeAttestationResponse, Cn as ProvisionStep, Cr as SandboxIntelligenceEnvelope, Ct as FleetPromptDispatchOptions, Di as ToolsConfig, Dn as PublishPublicTemplateVersionOptions, Dr as SandboxProfileSummary, Dt as GitBranch, E as ChunkedUploadResult, Ei as TokenRefreshHandler, En as PublishPublicTemplateOptions, Er as SandboxPortPreviewLink, Et as GitAuth, F as CreateIntelligenceReportOptions, Fi as WriteFileOptions, Fn as Rollout, Fr as SandboxTerminalInfo, Ft as GpuLeaseExecOptions, G as DispatchPromptOptions, Gi as AgentProfilePermissionValue, Gn as SandboxClientConfig, Gr as SearchMatch, Gt as IntelligenceReportBudget, H as CreateTaskSessionOptions, Hi as AgentProfileFileMount, Hn as RunCodeOptions, Hr as SandboxUser, Ht as HostAgentRuntimeBackend, I as CreateRequestOptions, Ii as WriteManyFile, In as RolloutChildResult, Ir as SandboxTerminalManager, It as GpuLeaseExecResult, J as DownloadProgress, Ji as AgentProfileResources, Jn as SandboxEvent, Jr as SecretsManager, Jt as IntelligenceReportWindow, K as DispatchedSession, Ki as AgentProfilePrompt, Kn as SandboxConnection, Kr as SearchOptions, Kt as IntelligenceReportCompareTo, L as CreateSandboxFleetOptions, Li as WriteManyOptions, Ln as RolloutOptions, Lr as SandboxTerminalRequestOptions, Lt as GpuLeaseManager, M as CommitTaskSessionOptions, Mi as UsageInfo, Mn as RenameOptions, Mr as SandboxRuntimeProfileList, Mt as GpuLease, N as CompletedTurnResult, Ni as WaitForOptions, Nr as SandboxStatus, Nt as GpuLeaseBilling, Oi as TurnDriveResult, On as ReapExpiredSandboxFleetsOptions, Or as SandboxResourceUsage, Ot as GitCommit, P as CreateGpuLeaseOptions, Pi as WaitForRolloutOptions, Pr as SandboxTerminalCreateOptions, Pt as GpuLeaseCommandResult, Q as DriverType, Qi as defineAgentProfile, Qn as SandboxFleetDispatchFailureClass, Qr as SessionBackendCredentials, Qt as ListSandboxFleetOptions, Ri as AgentProfile, Rn as RolloutScorer, Rr as SandboxTraceBundle, Rt as GpuLeaseProviderName, S as BatchTaskResult, Si as TeeAttestationReport, Sn as ProvisionStatus, Sr as SandboxInfo, St as FleetMachineId, T as ChunkedUploadOptions, Ti as TeePublicKeyResponse, Tn as PublicTemplateVersionInfo, Tr as SandboxPortBinding, Tt as GPU_LEASE_PROVIDER_NAMES, U as DeleteOptions, Ui as AgentProfileMcpServer, Un as SSHCommandDescriptor, Ur as ScopedToken, Ut as InstalledTool, V as CreateSessionOptions, Vi as AgentProfileConnection, Vn as RolloutTurnPart, Vr as SandboxTraceOptions, Vt as HostAgentDriverConfig, W as DirectoryPermission, Wi as AgentProfileModelHints, Wn as SSHCredentials, Wr as ScopedTokenScope, Wt as IntelligenceReport, X as DriverConfig, Xi as AgentProfileValidationResult, Xn as SandboxFleetArtifactSpec, Xr as SendSessionMessageRequest, Xt as ListMessagesOptions, Y as DriveTurnOptions, Yi as AgentProfileValidationIssue, Yn as SandboxFleetArtifact, Yr as SendSessionMessageOptions, Z as DriverInfo, Zi as AgentSubagentProfile, Zn as SandboxFleetCostEstimate, Zr as SentSessionMessage, Zt as ListOptions, _ as BatchResult, _i as TaskSessionCommitResult, _r as SandboxFleetUsage, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, ai as SessionStatus, an as NonHostAgentDriverConfig, ar as SandboxFleetMachineMeteredUsage, at as FileInfo, b as BatchSidecarGroup, bi as TaskSessionProfile, bn as ProvisionEvent, br as SandboxFleetWorkspaceRestoreResult, bt as FleetExecDispatchOptions, c as BackendInfo, ci as SnapshotResult, cn as PreviewLinkInfo, cr as SandboxFleetManifest, ct as FileReadError, d as BackendType, di as StartupOperation, dn as ProcessInfo, dr as SandboxFleetPolicy, dt as FileSystem, ea as defineInlineResource, ei as SessionForkOptions, en as McpServerConfig, er as SandboxFleetDriverCapability, et as EgressManager, f as BatchBackend, fi as StorageConfig, fn as ProcessLogEntry, fr as SandboxFleetToken, ft as FileTreeFile, g as BatchOptions, gi as TaskSessionChanges, gn as ProcessStatus, gr as SandboxFleetTraceOptions, gt as FleetDispatchCancelResult, h as BatchEventDataMap, hi as TaskResult, hn as ProcessSpawnOptions, hr as SandboxFleetTraceExport, ht as FileWriteResult, i as AttachGpuLeaseOptions, ii as SessionMessageInputPart, in as NetworkManager, ir as SandboxFleetMachine, it as ExecResult, ji as UploadProgress, jn as ReconcileSandboxFleetsResult, jr as SandboxRuntimeProfile, jt as GitStatus, ki as UpdateUserOptions, kn as ReapExpiredSandboxFleetsResult, kr as SandboxResources, kt as GitConfig, l as BackendManager, ln as PreviewLinkManager, lr as SandboxFleetManifestMachine, lt as FileReadResult, m as BatchEvent, mi as TaskOptions, mn as ProcessSignal, mr as SandboxFleetTraceEvent, mt as FileTreeResult, n as AccessPolicyRule, ni as SessionListOptions, nn as MkdirOptions, nr as SandboxFleetInfo, nt as EventStreamOptions, o as BackendCapabilities, oi as SnapshotInfo, on as PermissionLevel, or as SandboxFleetMachineRecord, ot as FileReadBatchOptions, p as BatchBackendStats, pi as SubscriptionInfo, pn as ProcessManager, pr as SandboxFleetTraceBundle, pt as FileTreeOptions, q as DownloadOptions, qi as AgentProfileResourceRef, qn as SandboxEnvironment, qr as SecretInfo, qt as IntelligenceReportSubjectType, r as AddUserOptions, ri as SessionMessage, rn as NetworkConfig, rr as SandboxFleetIntelligenceEnvelope, rt as ExecOptions, s as BackendConfig, si as SnapshotOptions, sn as PermissionsManager, sr as SandboxFleetMachineSpec, st as FileReadBatchResult, t as AcceleratorKind, ta as mergeAgentProfiles, ti as SessionInfo, tn as MintScopedTokenOptions, tr as SandboxFleetDriverTimings, tt as EgressPolicy, u as BackendStatus, ui as StartupDiagnostics, un as Process, ur as SandboxFleetOperationsSummary, ut as FileRenameResult, v as BatchRunOptions, vi as TaskSessionFileChange, vn as PromptOptions, vr as SandboxFleetWorkspace, vt as FleetDispatchResultBufferOptions, w as BranchOptions, wi as TeePublicKey, wn as PublicTemplateInfo, wr as SandboxPermissionsConfig, x as BatchTask, xi as TeeAttestationOptions, xn as ProvisionResult, xr as SandboxFleetWorkspaceSnapshotResult, y as BatchRunRequest, yi as TaskSessionInfo, yn as PromptResult, yr as SandboxFleetWorkspaceReconcileResult, yt as FleetDispatchStreamOptions, z as CreateSandboxFleetWithCoordinatorOptions, zi as AgentProfileCapabilities, zn as RolloutStartResult, zr as SandboxTraceEvent, zt as GpuLeaseStatus } from "./types-C4dFf5eL.js";
+import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BSsCz6nP.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-B2YYIsdw.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CyHojkuA.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DKzapw-9.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-CEZaPvfX.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-ntvaf0_F.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-V2vjBfHU.js";
 
 //#region src/attestation-heartbeat.d.ts
 interface TeeAttestationHeartbeatSample {
@@ -49,21 +49,15 @@ declare function startTeeAttestationHeartbeat(sandbox: Pick<SandboxInstance, "ge
 /**
  * Normalize runtime backend config for the wire format.
  *
- * Callers set `backend.profile` (named string or portable AgentProfile).
- * This function generates the native `inlineProfile` shim automatically.
+ * Canonical profile objects are already accepted by the sidecar and are
+ * forwarded without translation.
  */
 declare function normalizeRuntimeBackendConfig(backend: Partial<BackendConfig> | undefined, options?: {
   model?: string;
 }): Record<string, unknown> | undefined;
 /**
- * Serialize a portable AgentProfile into the sidecar's canonical inline-profile
- * wire shape (validated by inlineProfileSchema in
- * apps/sidecar/src/schemas/agent-profile-schema.ts).
- *
- * Single choke point every product shares: streamPrompt →
- * normalizeRuntimeBackendConfig → toBackendProfile. Exported so callers and the
- * drift-guard test target one contract — the test parses this output with the
- * sidecar's own schema, so any future schema tightening fails here first.
+ * @deprecated Canonical profile objects can be sent directly as
+ * `backend.profile`; this compatibility export now preserves that object.
  */
 declare function serializeForSidecar(profile: Exclude<BackendConfig["profile"], string | undefined>): Record<string, unknown>;
 //#endregion

package/dist/index.js

@@ -1,9 +1,9 @@
-import { o as normalizeRuntimeBackendConfig, s as serializeForSidecar } from "./runtime-api-DDOueAzd.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
-import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-C8qQicxF.js";
-import { a as validateDeferredProfileFileMounts, c as DEFAULT_SANDBOX_SIZE, d as resolveSandboxResources, f as sandboxResourcesForSize, i as splitInlineProfileFileMounts, l as SANDBOX_SIZE_PRESETS, n as SandboxClient, o as SandboxFleet, r as materializeProfileFileMounts, s as SandboxFleetClient, t as IntelligenceClient, u as SANDBOX_SIZE_PRESET_NAMES } from "./client-0Zp62AKL.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CcZE2xMl.js";
-import { t as TangleSandboxClient } from "./tangle-Bx0V6Nt5.js";
+import { l as normalizeRuntimeBackendConfig, u as serializeForSidecar } from "./runtime-api-kukaWPtF.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-Cbs78OlF.js";
+import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, i as SandboxSession, m as parseSSEStream, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-r2Lxbw8z.js";
+import { a as validateDeferredProfileFileMounts, c as DEFAULT_SANDBOX_SIZE, d as resolveSandboxResources, f as sandboxResourcesForSize, i as splitInlineProfileFileMounts, l as SANDBOX_SIZE_PRESETS, n as SandboxClient, o as SandboxFleet, r as materializeProfileFileMounts, s as SandboxFleetClient, t as IntelligenceClient, u as SANDBOX_SIZE_PRESET_NAMES } from "./client-C2yRj_dB.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DDnuTcZd.js";
+import { t as TangleSandboxClient } from "./tangle-051CtV2b.js";
 import { defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
 //#region src/confidential.ts
 function generateAttestationNonce(bytes = 32) {
@@ -1237,11 +1237,10 @@ function buildSandboxBackend(options) {
 			network: "allow",
 			mcp: "allow"
 		},
-		mcp: { tangle_web_search: {
+		mcp: { tangle_web_search: searchProvider === "off" ? { enabled: false } : {
 			transport: "http",
 			url: options.config.mcp.streamable_http_url,
-			headers: options.config.mcp.headers,
-			enabled: searchProvider !== "off"
+			headers: options.config.mcp.headers
 		} },
 		metadata: {
 			tangleRouterSearchProvider: searchProvider,

package/dist/intelligence/index.js

@@ -1,4 +1,4 @@
-import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "../errors-wd266B9Q.js";
+import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "../errors-Cbs78OlF.js";
 //#region src/intelligence/index.ts
 /**
 * `@tangle-network/sandbox/intelligence` — browser-safe typed client for the

package/dist/{runtime-api-DDOueAzd.js → runtime-api-kukaWPtF.js}

@@ -1,4 +1,4 @@
-import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, p as parseErrorResponse, s as QuotaError } from "./errors-wd266B9Q.js";
+import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, p as parseErrorResponse, s as QuotaError } from "./errors-Cbs78OlF.js";
 //#region src/backend-config.ts
 const LEGACY_QUESTION_ALIAS_KEY = ["question", "Channel"].join("");
 function parseModelString(model) {
@@ -12,24 +12,18 @@ function parseModelString(model) {
 /**
 * Normalize runtime backend config for the wire format.
 *
-* Callers set `backend.profile` (named string or portable AgentProfile).
-* This function generates the native `inlineProfile` shim automatically.
+* Canonical profile objects are already accepted by the sidecar and are
+* forwarded without translation.
 */
 function normalizeRuntimeBackendConfig(backend, options = {}) {
 	if (!backend && !options.model) return void 0;
 	if (backend && LEGACY_QUESTION_ALIAS_KEY in backend) throw new Error(`[sandbox-sdk] backend.${LEGACY_QUESTION_ALIAS_KEY} was removed. Use backend.interactions.question instead.`);
-	const portableProfile = backend?.profile && typeof backend.profile !== "string" ? backend.profile : void 0;
-	const inlineProfile = portableProfile ? toBackendProfile(portableProfile) : void 0;
 	const callerInlineProfile = backend?.inlineProfile;
-	if (callerInlineProfile && !inlineProfile) console.warn("[sandbox-sdk] backend.inlineProfile is deprecated. Use backend.profile (AgentPortableProfile) instead.");
-	if (inlineProfile && portableProfile) {
-		const reasoningEffort = portableProfile.model?.reasoningEffort ?? portableProfile.extensions?.[backend?.type ?? ""]?.reasoningEffort;
-		if (typeof reasoningEffort === "string" && reasoningEffort !== "auto" && reasoningEffort !== "none") inlineProfile.reasoningEffort = reasoningEffort;
-	}
+	if (callerInlineProfile !== void 0) console.warn("[sandbox-sdk] backend.inlineProfile is deprecated. Use backend.profile (AgentProfile) instead.");
 	return {
 		...backend?.type ? { type: backend.type } : {},
-		...typeof backend?.profile === "string" ? { profile: backend.profile } : {},
-		...inlineProfile ? { inlineProfile } : callerInlineProfile ? { inlineProfile: callerInlineProfile } : {},
+		...backend?.profile !== void 0 ? { profile: backend.profile } : {},
+		...callerInlineProfile !== void 0 ? { inlineProfile: callerInlineProfile } : {},
 		...backend?.model ? { model: backend.model } : options.model ? { model: parseModelString(options.model) } : {},
 		...backend?.server ? { server: backend.server } : {},
 		...backend?.interactions !== void 0 ? { interactions: backend.interactions } : {},
@@ -37,120 +31,45 @@ function normalizeRuntimeBackendConfig(backend, options = {}) {
 	};
 }
 /**
-* Permission keys the sidecar's strict `permission` schema accepts
-* (apps/sidecar/src/schemas/agent-profile-schema.ts → permissionConfigSchema).
-* Any other portable-permission key is a per-tool gate, not a permission, and
-* is routed into `tools` instead of passed through — the sidecar's `.strict()`
-* schema rejects unknown permission keys with `unrecognized_keys`.
-*
-* Name must not carry an UPPERCASE `SIDECAR_`/`ORCHESTRATOR_`-style prefix:
-* obfuscate.sh runs `--rename-globals false`, so a module-global identifier
-* ships verbatim in dist/, and verify-dist.sh bans those prefixes as
-* closed-source leaks.
+* @deprecated Canonical profile objects can be sent directly as
+* `backend.profile`; this compatibility export now preserves that object.
 */
-const CANONICAL_PERMISSION_KEYS = new Set([
-	"edit",
-	"bash",
-	"webfetch",
-	"mcp",
-	"doom_loop",
-	"external_directory"
-]);
-function hasAnyProfileResource(resources) {
-	return !!(resources.files?.length || resources.tools?.length || resources.skills?.length || resources.agents?.length || resources.commands?.length || resources.instructions);
-}
-function validateProfileResources(profile) {
-	if (profile.resources !== void 0 && (profile.resources === null || typeof profile.resources !== "object" || Array.isArray(profile.resources))) throw new Error("backend.profile.resources must be an object when provided");
-	if (profile.resources?.plugins?.length) throw new Error("backend.profile.resources.plugins is not supported by the sandbox SDK profile contract; use backend-specific provider profiles for OpenCode plugin resources");
+function serializeForSidecar(profile) {
+	return profile;
 }
-function toBackendProfile(profile) {
-	validateProfileResources(profile);
-	const permission = {};
-	const derivedTools = {};
-	for (const [rawKey, value] of Object.entries(profile.permissions ?? {})) {
-		const key = rawKey === "network" ? "webfetch" : rawKey;
-		if (CANONICAL_PERMISSION_KEYS.has(key)) permission[key] = value;
-		else if (typeof value === "string") derivedTools[key] = value !== "deny";
-		else console.warn(`[sandbox-sdk] dropping unsupported permission key "${rawKey}": not a canonical sidecar permission and not a string tool gate`);
-	}
-	const tools = {
-		...derivedTools,
-		...profile.tools ?? {}
-	};
-	const mcp = profile.mcp ? Object.fromEntries(Object.entries(profile.mcp).map(([name, config]) => {
-		const c = config;
-		const transport = c.transport;
-		const command = c.command;
-		const hasCommand = Array.isArray(command) ? command.length > 0 : typeof command === "string" && command.trim().length > 0;
-		const isRemote = transport === "http" || transport === "sse" || typeof c.url === "string" && !hasCommand;
-		const enabled = c.enabled;
-		const timeout = c.timeout;
-		if (isRemote) return [name, {
-			type: "remote",
-			url: c.url,
-			...c.headers ? { headers: c.headers } : {},
-			...enabled !== void 0 ? { enabled } : {},
-			...timeout !== void 0 ? { timeout } : {}
-		}];
-		return [name, {
-			type: "local",
-			command: [...Array.isArray(command) ? command : typeof command === "string" ? command.trim().split(/\s+/).filter(Boolean) : [], ...c.args ?? []],
-			...c.env ? { environment: c.env } : {},
-			...enabled !== void 0 ? { enabled } : {},
-			...timeout !== void 0 ? { timeout } : {}
-		}];
-	})) : void 0;
-	const openCodeExtension = profile.extensions?.opencode;
-	const plugins = openCodeExtension?.plugins;
-	if (plugins !== void 0 && (!Array.isArray(plugins) || plugins.some((plugin) => typeof plugin !== "string" || !plugin.trim()))) throw new Error("backend.profile.extensions.opencode.plugins must be an array of non-empty package names");
-	const commands = openCodeExtension?.commands;
-	if (commands !== void 0 && (commands === null || typeof commands !== "object" || Array.isArray(commands))) throw new Error("backend.profile.extensions.opencode.commands must be an object");
-	const profileExtends = openCodeExtension?.extends;
-	if (profileExtends !== void 0 && typeof profileExtends !== "string" && (!Array.isArray(profileExtends) || profileExtends.some((entry) => typeof entry !== "string" || !entry.trim()))) throw new Error("backend.profile.extensions.opencode.extends must be a profile name or array of profile names");
-	const agents = profile.subagents ? Object.fromEntries(Object.entries(profile.subagents).map(([name, subagent]) => [name, {
-		description: subagent.description,
-		prompt: subagent.prompt,
-		model: subagent.model,
-		tools: subagent.tools,
-		permission: subagent.permissions,
-		maxSteps: subagent.maxSteps,
-		...subagent.metadata ?? {}
-	}])) : void 0;
-	return {
-		name: profile.name,
-		description: profile.description,
-		version: profile.version,
-		tags: profile.tags,
-		...profileExtends ? { extends: profileExtends } : {},
-		model: profile.model?.default,
-		small_model: profile.model?.small,
-		...profile.prompt?.systemPrompt ? { systemPrompt: profile.prompt.systemPrompt } : {},
-		...Object.keys(tools).length > 0 ? { tools } : {},
-		...profile.prompt?.instructions?.length ? { instructions: profile.prompt.instructions } : {},
-		...Object.keys(permission).length > 0 ? { permission } : {},
-		...mcp ? { mcp } : {},
-		...profile.connections?.length ? { connections: profile.connections } : {},
-		...agents ? { agent: agents } : {},
-		...profile.resources && hasAnyProfileResource(profile.resources) ? { resources: profile.resources } : {},
-		...profile.hooks ? { hooks: profile.hooks } : {},
-		...profile.modes ? { modes: profile.modes } : {},
-		...commands ? { command: commands } : {},
-		...plugins?.length ? { plugin: plugins } : {},
-		...profile.extensions ? { extensions: profile.extensions } : {}
-	};
+//#endregion
+//#region src/lib/wire-encoding.ts
+/**
+* Encode a prompt text part for the wire. Server decodes at the route
+* boundary; the LLM only ever sees the original UTF-8. Done
+* unconditionally because readable bodies false-positive on ingress WAF
+* rules that pattern-match shell-injection-shaped substrings (which
+* legitimate prompts routinely contain — e.g. Step-0 dev-server
+* bootstrap).
+*/
+function encodeTextForWire(text) {
+	if (typeof Buffer !== "undefined") return Buffer.from(text, "utf8").toString("base64");
+	if (typeof btoa === "function") return btoa(encodeURIComponent(text).replace(/%([0-9A-F]{2})/g, (_, h) => String.fromCharCode(Number.parseInt(h, 16))));
+	throw new Error("encodeTextForWire: no base64 encoder available (Buffer and btoa both undefined)");
 }
 /**
-* Serialize a portable AgentProfile into the sidecar's canonical inline-profile
-* wire shape (validated by inlineProfileSchema in
-* apps/sidecar/src/schemas/agent-profile-schema.ts).
-*
-* Single choke point every product shares: streamPrompt →
-* normalizeRuntimeBackendConfig → toBackendProfile. Exported so callers and the
-* drift-guard test target one contract — the test parses this output with the
-* sidecar's own schema, so any future schema tightening fails here first.
+* Convert a caller-supplied prompt (string or parts array) into the
+* wire-format parts array. Every text part is base64-encoded; non-text
+* parts pass through. A bare string is wrapped in a single text part.
 */
-function serializeForSidecar(profile) {
-	return toBackendProfile(profile);
+function encodePromptForWire(message) {
+	return (typeof message === "string" ? [{
+		type: "text",
+		text: message
+	}] : message).map((part) => part.type === "text" ? {
+		type: "text",
+		text: encodeTextForWire(part.text)
+	} : part);
+}
+//#endregion
+//#region src/lib/abort-signal.ts
+function combineAbortSignals(signals) {
+	return AbortSignal.any(signals);
 }
 //#endregion
 //#region ../../../packages/runtime-contracts/dist/file-limits.js
@@ -646,14 +565,17 @@ var SandboxRuntimeApi = class {
 		if (options.credentials?.apiKey) headers.set("X-Backend-Api-Key", options.credentials.apiKey);
 		if (options.credentials?.baseUrl) headers.set("X-Backend-Base-Url", options.credentials.baseUrl);
 		const timeoutSignal = options.timeoutMs !== void 0 ? AbortSignal.timeout(options.timeoutMs) : void 0;
-		const signal = options.signal && timeoutSignal ? AbortSignal.any([options.signal, timeoutSignal]) : options.signal ?? timeoutSignal;
+		const signal = options.signal && timeoutSignal ? combineAbortSignals([options.signal, timeoutSignal]) : options.signal ?? timeoutSignal;
 		return this.json(`/agents/sessions/${encodeURIComponent(id)}/messages`, {
 			method: "POST",
 			headers,
 			signal,
 			body: JSON.stringify({
 				...request.messageId !== void 0 ? { messageID: request.messageId } : {},
-				parts: request.parts,
+				parts: request.parts.map((part) => part.type === "text" ? {
+					...part,
+					text: encodeTextForWire(part.text)
+				} : part),
 				...request.system !== void 0 ? { system: request.system } : {},
 				...request.agent !== void 0 ? { agent: request.agent } : {},
 				...request.model !== void 0 ? { model: {
@@ -753,4 +675,4 @@ function normalizeSessionInfo(raw) {
 	};
 }
 //#endregion
-export { FILE_DECODED_WRITE_MAX_BYTES as a, SANDBOX_PROXY_REQUEST_MAX_BYTES as i, normalizeSessionInfo as n, normalizeRuntimeBackendConfig as o, uploadChunked as r, serializeForSidecar as s, SandboxRuntimeApi as t };
+export { FILE_DECODED_WRITE_MAX_BYTES as a, encodeTextForWire as c, SANDBOX_PROXY_REQUEST_MAX_BYTES as i, normalizeRuntimeBackendConfig as l, normalizeSessionInfo as n, combineAbortSignals as o, uploadChunked as r, encodePromptForWire as s, SandboxRuntimeApi as t, serializeForSidecar as u };

package/dist/runtime.d.ts

@@ -1,5 +1,5 @@
-import { Ai as UploadProgress, E as ChunkedUploadResult, Fr as SandboxTerminalManager, H as CreateTaskSessionOptions, Ir as SandboxTerminalRequestOptions, Jr as SendSessionMessageOptions, M as CommitTaskSessionOptions, Nr as SandboxTerminalCreateOptions, Pi as WriteFileOptions, Pr as SandboxTerminalInfo, T as ChunkedUploadOptions, V as CreateSessionOptions, Xr as SentSessionMessage, Yr as SendSessionMessageRequest, Yt as ListMessagesOptions, at as FileReadBatchOptions, ei as SessionInfo, ft as FileTreeOptions, gi as TaskSessionCommitResult, hi as TaskSessionChanges, jn as RenameOptions, jr as SandboxRuntimeProfileList, kr as SandboxRuntimeHealth, lt as FileRenameResult, mt as FileWriteResult, ni as SessionMessage, ot as FileReadBatchResult, pt as FileTreeResult, vi as TaskSessionInfo, wr as SandboxPortBinding } from "./types-LNLeU9Ub.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
+import { Ar as SandboxRuntimeHealth, E as ChunkedUploadResult, Fi as WriteFileOptions, Fr as SandboxTerminalInfo, H as CreateTaskSessionOptions, Ir as SandboxTerminalManager, Lr as SandboxTerminalRequestOptions, M as CommitTaskSessionOptions, Mn as RenameOptions, Mr as SandboxRuntimeProfileList, Pr as SandboxTerminalCreateOptions, T as ChunkedUploadOptions, Tr as SandboxPortBinding, V as CreateSessionOptions, Xr as SendSessionMessageRequest, Xt as ListMessagesOptions, Yr as SendSessionMessageOptions, Zr as SentSessionMessage, _i as TaskSessionCommitResult, gi as TaskSessionChanges, ht as FileWriteResult, ji as UploadProgress, mt as FileTreeResult, ot as FileReadBatchOptions, pt as FileTreeOptions, ri as SessionMessage, st as FileReadBatchResult, ti as SessionInfo, ut as FileRenameResult, yi as TaskSessionInfo } from "./types-C4dFf5eL.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-ntvaf0_F.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/runtime.js

@@ -1,5 +1,5 @@
-import { r as uploadChunked, t as SandboxRuntimeApi } from "./runtime-api-DDOueAzd.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
+import { o as combineAbortSignals, r as uploadChunked, t as SandboxRuntimeApi } from "./runtime-api-kukaWPtF.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-Cbs78OlF.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
 function requireToken(token) {
@@ -49,7 +49,7 @@ var SandboxRuntimeClient = class extends SandboxRuntimeApi {
 				const isFormData = typeof FormData !== "undefined" && init.body instanceof FormData;
 				if (init.body !== void 0 && !isFormData && !headers.has("Content-Type")) headers.set("Content-Type", "application/json");
 				const timeoutSignal = AbortSignal.timeout(timeoutMs);
-				const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal;
+				const signal = init.signal ? combineAbortSignals([init.signal, timeoutSignal]) : timeoutSignal;
 				try {
 					return await fetchImpl(`${baseUrl}${path}`, {
 						...init,

package/dist/{sandbox-B9P4tyt4.d.ts → sandbox-BSsCz6nP.d.ts}

@@ -1,4 +1,4 @@
-import { $ as EgressManager, $r as SessionForkOptions, At as GitStatus, Br as SandboxTraceOptions, D as CodeExecutionOptions, Di as TurnDriveResult, Dr as SandboxResourceUsage, Dt as GitCommit, Et as GitBranch, Fi as WriteManyFile, Fr as SandboxTerminalManager, G as DispatchPromptOptions, Gn as SandboxConnection, Gr as SearchOptions, Gt as IntelligenceReportCompareTo, H as CreateTaskSessionOptions, Hn as SSHCommandDescriptor, Hr as ScopedToken, Ht as InstalledTool, Ii as WriteManyOptions, In as RolloutOptions, It as GpuLeaseManager, Jr as SendSessionMessageOptions, Jt as JsonValue, K as DispatchedSession, Lr as SandboxTraceBundle, M as CommitTaskSessionOptions, Mi as WaitForOptions, Mn as RestoreSnapshotOptions, Mr as SandboxStatus, N as CompletedTurnResult, Ni as WaitForRolloutOptions, Nn as ResumeOptions, O as CodeExecutionResult, Pi as WriteFileOptions, Pn as Rollout, Qr as SessionEventStreamOptions, Rn as RolloutStartResult, Si as TeeAttestationResponse, Un as SSHCredentials, Ut as IntelligenceReport, V as CreateSessionOptions, Wr as SearchMatch, Wt as IntelligenceReportBudget, Xr as SentSessionMessage, Y as DriveTurnOptions, Yr as SendSessionMessageRequest, Yt as ListMessagesOptions, Z as DriverInfo, _n as PromptOptions, ai as SnapshotInfo, bi as TeeAttestationOptions, bn as ProvisionResult, cn as PreviewLinkManager, ei as SessionInfo, en as MintScopedTokenOptions, fn as ProcessManager, fr as SandboxFleetTraceBundle, gi as TaskSessionCommitResult, gn as PromptInputPart, hi as TaskSessionChanges, jr as SandboxRuntimeProfileList, jt as GpuLease, k as CodeLanguage, kr as SandboxRuntimeHealth, kt as GitDiff, l as BackendManager, li as StartupDiagnostics, mi as TaskResult, mt as FileWriteResult, ni as SessionMessage, nt as ExecOptions, oi as SnapshotOptions, on as PermissionsManager, pi as TaskOptions, qn as SandboxEvent, qt as IntelligenceReportWindow, rn as NetworkManager, rt as ExecResult, s as BackendConfig, si as SnapshotResult, ti as SessionListOptions, tt as EventStreamOptions, ut as FileSystem, vi as TaskSessionInfo, vn as PromptResult, w as BranchOptions, wi as TeePublicKeyResponse, wr as SandboxPortBinding, xr as SandboxInfo, yn as ProvisionEvent } from "./types-LNLeU9Ub.js";
+import { $ as DurablePlan, $r as SessionEventStreamOptions, Ar as SandboxRuntimeHealth, At as GitDiff, Ci as TeeAttestationResponse, D as CodeExecutionOptions, Dt as GitBranch, Fi as WriteFileOptions, Fn as Rollout, G as DispatchPromptOptions, Gr as SearchMatch, Gt as IntelligenceReportBudget, H as CreateTaskSessionOptions, Ii as WriteManyFile, Ir as SandboxTerminalManager, Jn as SandboxEvent, Jt as IntelligenceReportWindow, K as DispatchedSession, Kn as SandboxConnection, Kr as SearchOptions, Kt as IntelligenceReportCompareTo, Li as WriteManyOptions, Ln as RolloutOptions, Lt as GpuLeaseManager, M as CommitTaskSessionOptions, Mr as SandboxRuntimeProfileList, Mt as GpuLease, N as CompletedTurnResult, Ni as WaitForOptions, Nn as RestoreSnapshotOptions, Nr as SandboxStatus, O as CodeExecutionResult, Oi as TurnDriveResult, Or as SandboxResourceUsage, Ot as GitCommit, Pi as WaitForRolloutOptions, Pn as ResumeOptions, Rr as SandboxTraceBundle, Sr as SandboxInfo, Ti as TeePublicKeyResponse, Tr as SandboxPortBinding, Un as SSHCommandDescriptor, Ur as ScopedToken, Ut as InstalledTool, V as CreateSessionOptions, Vr as SandboxTraceOptions, Wn as SSHCredentials, Wt as IntelligenceReport, Xr as SendSessionMessageRequest, Xt as ListMessagesOptions, Y as DriveTurnOptions, Yr as SendSessionMessageOptions, Yt as JsonValue, Z as DriverInfo, Zr as SentSessionMessage, _i as TaskSessionCommitResult, _n as PromptInputPart, bn as ProvisionEvent, ci as SnapshotResult, dt as FileSystem, ei as SessionForkOptions, et as EgressManager, gi as TaskSessionChanges, hi as TaskResult, ht as FileWriteResult, in as NetworkManager, it as ExecResult, jt as GitStatus, k as CodeLanguage, l as BackendManager, ln as PreviewLinkManager, mi as TaskOptions, ni as SessionListOptions, nt as EventStreamOptions, oi as SnapshotInfo, pn as ProcessManager, pr as SandboxFleetTraceBundle, ri as SessionMessage, rt as ExecOptions, s as BackendConfig, si as SnapshotOptions, sn as PermissionsManager, ti as SessionInfo, tn as MintScopedTokenOptions, ui as StartupDiagnostics, vn as PromptOptions, w as BranchOptions, xi as TeeAttestationOptions, xn as ProvisionResult, yi as TaskSessionInfo, yn as PromptResult, zn as RolloutStartResult } from "./types-C4dFf5eL.js";
 
 //#region src/mcp.d.ts
 /**
@@ -221,6 +221,13 @@ interface SandboxSessionHost extends InteractiveSessionHost {
   _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<void>;
   _interrupt(id: string): Promise<InterruptResult>;
   _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
+  _currentPlan(id: string): Promise<DurablePlan | null>;
+  _decidePlan(id: string, planId: string, decision: {
+    outcome: "approved";
+  } | {
+    outcome: "rejected";
+    feedback: string;
+  }): Promise<DurablePlan>;
 }
 /**
  * A single agent session inside a sandbox. Created via
@@ -327,6 +334,13 @@ declare class SandboxSession {
    * enabled. Backends with no question support reject loudly.
    */
   answer(answers: Record<string, string[]>): Promise<void>;
+  /** Return the newest plan awaiting a decision for this session. */
+  plan(): Promise<DurablePlan | null>;
+  /** Approve a durable plan and enqueue its separate execution turn. */
+  approvePlan(planId?: string): Promise<DurablePlan>;
+  /** Reject a durable plan with required feedback and enqueue a revision turn. */
+  rejectPlan(feedback: string, planId?: string): Promise<DurablePlan>;
+  private requireCurrentPlan;
 }
 //#endregion
 //#region src/task-session.d.ts
@@ -1513,7 +1527,7 @@ declare class SandboxInstance {
   /** @internal — invoked by SandboxSession.status(). */
   _sessionStatus(id: string): Promise<SessionInfo | null>;
   /** @internal — invoked by SandboxSession.events(). */
-  _sessionEvents(id: string, opts?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
+  _sessionEvents(id: string, opts?: SessionEventStreamOptions, stopOnTurnTerminal?: boolean): AsyncGenerator<SandboxEvent>;
   /** @internal — invoked by SandboxSession.result(). */
   _sessionResult(id: string): Promise<PromptResult>;
   /**
@@ -1541,6 +1555,15 @@ declare class SandboxInstance {
    * question's `answerSpec` fields in order.
    */
   _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
+  /** @internal — invoked by SandboxSession.plan(). */
+  _currentPlan(sessionId: string): Promise<DurablePlan | null>;
+  /** @internal — invoked by SandboxSession.approvePlan()/rejectPlan(). */
+  _decidePlan(sessionId: string, planId: string, decision: {
+    outcome: "approved";
+  } | {
+    outcome: "rejected";
+    feedback: string;
+  }): Promise<DurablePlan>;
 }
 //#endregion
 export { SandboxMcpConfig as C, buildSandboxMcpConfig as D, buildControlPlaneMcpConfig as E, SANDBOX_MCP_SERVER_NAME as S, SandboxMcpServerEntry as T, RespondToPermissionOptions as _, TraceExportSink as a, BuildSandboxMcpConfigOptions as b, otelTraceIdForTangleTrace as c, SandboxSession as d, InteractiveAuthFile as f, InterruptResult as g, InteractiveSessionInfo as h, TraceExportResult as i, toOtelJson as l, InteractiveSessionHost as m, SandboxInstance as n, buildTraceExportPayload as o, InteractiveSessionHandle as p, TraceExportFormat as r, exportTraceBundle as s, HttpClient as t, SandboxTaskSession as u, StartInteractiveOptions as v, SandboxMcpEndpoint as w, CONTROL_PLANE_MCP_SERVER_NAME as x, BuildControlPlaneMcpConfigOptions as y };

package/dist/{sandbox-C8qQicxF.js → sandbox-r2Lxbw8z.js}

@@ -1,5 +1,5 @@
-import { n as normalizeSessionInfo, o as normalizeRuntimeBackendConfig, r as uploadChunked, t as SandboxRuntimeApi } from "./runtime-api-DDOueAzd.js";
-import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
+import { l as normalizeRuntimeBackendConfig, n as normalizeSessionInfo, o as combineAbortSignals, r as uploadChunked, s as encodePromptForWire, t as SandboxRuntimeApi } from "./runtime-api-kukaWPtF.js";
+import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-Cbs78OlF.js";
 import { addTokenUsage, readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
 //#region src/lib/sse-parser.ts
 /**
@@ -18,6 +18,7 @@ async function* parseSSEStream(body, options) {
 	let currentEvent = "";
 	let dataLines = [];
 	let currentId = "";
+	let completed = false;
 	const flush = function* () {
 		if (dataLines.length === 0) {
 			currentEvent = "";
@@ -61,40 +62,13 @@ async function* parseSSEStream(body, options) {
 		buffer += decoder.decode();
 		if (buffer.length > 0) processLine(buffer);
 		yield* flush();
+		completed = true;
 	} finally {
+		if (!completed) await reader.cancel().catch(() => void 0);
 		reader.releaseLock();
 	}
 }
 //#endregion
-//#region src/lib/wire-encoding.ts
-/**
-* Encode a prompt text part for the wire. Server decodes at the route
-* boundary; the LLM only ever sees the original UTF-8. Done
-* unconditionally because readable bodies false-positive on ingress WAF
-* rules that pattern-match shell-injection-shaped substrings (which
-* legitimate prompts routinely contain — e.g. Step-0 dev-server
-* bootstrap).
-*/
-function encodeTextForWire(text) {
-	if (typeof Buffer !== "undefined") return Buffer.from(text, "utf8").toString("base64");
-	if (typeof btoa === "function") return btoa(encodeURIComponent(text).replace(/%([0-9A-F]{2})/g, (_, h) => String.fromCharCode(Number.parseInt(h, 16))));
-	throw new Error("encodeTextForWire: no base64 encoder available (Buffer and btoa both undefined)");
-}
-/**
-* Convert a caller-supplied prompt (string or parts array) into the
-* wire-format parts array. Every text part is base64-encoded; non-text
-* parts pass through. A bare string is wrapped in a single text part.
-*/
-function encodePromptForWire(message) {
-	return (typeof message === "string" ? [{
-		type: "text",
-		text: message
-	}] : message).map((part) => part.type === "text" ? {
-		type: "text",
-		text: encodeTextForWire(part.text)
-	} : part);
-}
-//#endregion
 //#region src/trace-exporter.ts
 function buildTraceExportPayload(bundle, format = "tangle", serviceName = "tangle-sandbox") {
 	if (format === "tangle") return bundle;
@@ -635,6 +609,29 @@ var SandboxSession = class SandboxSession {
 	async answer(answers) {
 		return this.box._answerQuestion(this.id, answers);
 	}
+	/** Return the newest plan awaiting a decision for this session. */
+	async plan() {
+		return this.box._currentPlan(this.id);
+	}
+	/** Approve a durable plan and enqueue its separate execution turn. */
+	async approvePlan(planId) {
+		const id = planId ?? (await this.requireCurrentPlan()).id;
+		return this.box._decidePlan(this.id, id, { outcome: "approved" });
+	}
+	/** Reject a durable plan with required feedback and enqueue a revision turn. */
+	async rejectPlan(feedback, planId) {
+		if (!feedback.trim()) throw new Error("Plan rejection feedback is required");
+		const id = planId ?? (await this.requireCurrentPlan()).id;
+		return this.box._decidePlan(this.id, id, {
+			outcome: "rejected",
+			feedback: feedback.trim()
+		});
+	}
+	async requireCurrentPlan() {
+		const plan = await this.plan();
+		if (!plan) throw new Error("No durable plan is awaiting a decision");
+		return plan;
+	}
 };
 //#endregion
 //#region src/task-session.ts
@@ -767,6 +764,11 @@ function runtimeFilesystemPath(endpoint, path) {
 * requirements; a turn whose tool failed (even if narrated around) fails.
 */
 function deriveOutcome(inputs) {
+	if (inputs.plan) return {
+		status: "awaiting_plan_decision",
+		success: false,
+		error: "Agent is awaiting a durable plan decision"
+	};
 	if (inputs.question) return {
 		status: "awaiting_question",
 		success: false,
@@ -799,6 +801,18 @@ function deriveOutcome(inputs) {
 		success: true
 	};
 }
+function readAwaitingPlan(data) {
+	const direct = data.plan;
+	const outcome = data.outcome;
+	const candidate = direct && typeof direct === "object" ? direct : outcome && typeof outcome === "object" && outcome.type === "awaiting_plan_decision" ? outcome.plan : void 0;
+	if (!candidate || typeof candidate !== "object") return void 0;
+	const plan = candidate;
+	if (typeof plan.id !== "string" || typeof plan.revision !== "number" || typeof plan.body !== "string" || typeof plan.submittedAt !== "string") return;
+	return plan;
+}
+function readPlanFromEvent(event) {
+	return event.type === "result" || event.type === "done" || event.type === "plan.submitted" ? readAwaitingPlan(event.data) : void 0;
+}
 /** Read tool invocations off a `result` event payload. */
 function readToolInvocations(data) {
 	const raw = data.toolInvocations;
@@ -1441,10 +1455,11 @@ var SandboxInstance = class SandboxInstance {
 		let costUsd;
 		let toolInvocations;
 		let question;
+		let plan;
 		let terminalReached = false;
 		const controller = new AbortController();
 		try {
-			const signal = options?.signal ? AbortSignal.any([options.signal, controller.signal]) : controller.signal;
+			const signal = options?.signal ? combineAbortSignals([options.signal, controller.signal]) : controller.signal;
 			for await (const event of this.streamPrompt(message, {
 				...options,
 				signal
@@ -1454,6 +1469,7 @@ var SandboxInstance = class SandboxInstance {
 					usage = readTokenUsage(event.data) ?? usage;
 					costUsd = readTokenCostUsd(event.data) ?? costUsd;
 				}
+				plan = readPlanFromEvent(event) ?? plan;
 				if (event.type === "result") toolInvocations = readToolInvocations(event.data) ?? toolInvocations;
 				if (event.type === "result" || event.type === "done") terminalReached = true;
 				if (event.type === "interaction") question = readQuestionEvent(event.data) ?? question;
@@ -1470,7 +1486,8 @@ var SandboxInstance = class SandboxInstance {
 				runErrorCode,
 				toolInvocations,
 				approval,
-				question
+				question,
+				plan
 			});
 			return {
 				success: outcome.success,
@@ -1481,6 +1498,7 @@ var SandboxInstance = class SandboxInstance {
 				toolInvocations,
 				approval,
 				question,
+				plan,
 				traceId,
 				durationMs: Date.now() - startTime,
 				usage,
@@ -1569,7 +1587,7 @@ var SandboxInstance = class SandboxInstance {
 		await this.ensureRunning();
 		const timeoutMs = typeof options?.timeoutMs === "number" && options.timeoutMs > 0 ? options.timeoutMs : void 0;
 		const timeoutSignal = timeoutMs ? AbortSignal.timeout(timeoutMs) : void 0;
-		const streamSignal = timeoutSignal ? options?.signal ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal : options?.signal;
+		const streamSignal = timeoutSignal ? options?.signal ? combineAbortSignals([options.signal, timeoutSignal]) : timeoutSignal : options?.signal;
 		const throwIfTimedOut = () => {
 			if (!timeoutSignal?.aborted || !timeoutMs) return;
 			throw new TimeoutError(timeoutMs, `Prompt stream timed out after ${timeoutMs}ms`, {
@@ -1958,6 +1976,7 @@ var SandboxInstance = class SandboxInstance {
 		let costUsd;
 		let toolInvocations;
 		let question;
+		let plan;
 		let terminalReached = false;
 		try {
 			for await (const event of this.streamPrompt(prompt, {
@@ -1974,6 +1993,7 @@ var SandboxInstance = class SandboxInstance {
 				}
 				if (event.type === "done" && costUsd === void 0) costUsd = readTokenCostUsd(event.data);
 				if (event.type === "result" || event.type === "done") terminalReached = true;
+				plan = readPlanFromEvent(event) ?? plan;
 				if (event.type === "interaction") question = readQuestionEvent(event.data) ?? question;
 				if (event.type === "trace.id") traceId = event.data.traceId;
 				if (event.type === "error") {
@@ -1988,7 +2008,8 @@ var SandboxInstance = class SandboxInstance {
 				runErrorCode,
 				toolInvocations,
 				approval,
-				question
+				question,
+				plan
 			});
 			return {
 				success: outcome.success,
@@ -1999,6 +2020,7 @@ var SandboxInstance = class SandboxInstance {
 				toolInvocations,
 				approval,
 				question,
+				plan,
 				traceId,
 				durationMs: Date.now() - startTime,
 				usage,
@@ -3888,7 +3910,7 @@ var SandboxInstance = class SandboxInstance {
 	async resume(options = {}) {
 		if (options.timeoutMs !== void 0 && (!Number.isFinite(options.timeoutMs) || options.timeoutMs <= 0)) throw new ValidationError("resume timeoutMs must be a positive number");
 		const timeoutSignal = options.timeoutMs ? AbortSignal.timeout(options.timeoutMs) : void 0;
-		const signal = timeoutSignal ? options.signal ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal : options.signal;
+		const signal = timeoutSignal ? options.signal ? combineAbortSignals([options.signal, timeoutSignal]) : timeoutSignal : options.signal;
 		const response = await this.client.fetch(`/v1/sandboxes/${this.id}/resume`, {
 			method: "POST",
 			...signal ? { signal } : {}
@@ -4361,24 +4383,8 @@ var SandboxInstance = class SandboxInstance {
 	* abort stamps `interrupted: true` explicitly.
 	*/
 	async messages(opts) {
-		await this.ensureRunning();
-		const params = new URLSearchParams();
-		if (opts.limit !== void 0) params.set("limit", String(opts.limit));
-		if (opts.offset !== void 0) params.set("offset", String(opts.offset));
-		if (opts.since !== void 0) params.set("since", String(opts.since));
-		const query = params.toString() ? `?${params.toString()}` : "";
-		const response = await this.client.fetch(`/v1/sessions/${encodeURIComponent(opts.sessionId)}/messages${query}`, { method: "GET" });
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
-		return (await response.json()).map((m) => ({
-			id: m.info.id,
-			role: m.info.role,
-			timestamp: m.info.timestamp,
-			parts: m.parts,
-			metadata: m.info.metadata
-		}));
+		const { sessionId, ...options } = opts;
+		return this.runtime.messages(sessionId, options);
 	}
 	/** @internal — invoked by SandboxSession.sendMessage(). */
 	async _sessionSendMessage(id, request, options = {}) {
@@ -4487,11 +4493,13 @@ var SandboxInstance = class SandboxInstance {
 		}
 		if (info) {
 			const result = await this._sessionResult(opts.sessionId);
+			const settled = settleTurnDrive({ ...result });
+			if (settled.state === "awaiting_plan_decision") return settled;
 			if (!result.success) return {
 				state: "failed",
 				error: `session ${opts.sessionId} ${info.status}: ${result.error ?? "no error detail"}`
 			};
-			return settleTurnDrive({ ...result });
+			return settled;
 		}
 		await this.dispatchPrompt(message, {
 			...opts,
@@ -4542,17 +4550,22 @@ var SandboxInstance = class SandboxInstance {
 		return normalizeSessionInfo(await response.json());
 	}
 	/** @internal — invoked by SandboxSession.events(). */
-	async *_sessionEvents(id, opts) {
+	async *_sessionEvents(id, opts, stopOnTurnTerminal = false) {
 		await this.ensureRunning();
 		const search = new URLSearchParams();
 		search.set("sessionId", id);
 		if (opts?.since) search.set("since", opts.since);
+		if (opts?.executionId) search.set("executionId", opts.executionId);
 		const response = await this.runtimeFetch(`/agents/events?${search.toString()}`, { signal: opts?.signal });
 		if (!response.ok) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		yield* this.parseSSEStream(response, opts?.signal);
+		for await (const event of this.parseSSEStream(response, opts?.signal)) {
+			yield event;
+			const turnTerminal = event.type === "result" || event.type === "done" || event.type === "error";
+			if ((stopOnTurnTerminal || opts?.executionId !== void 0) && turnTerminal) return;
+		}
 	}
 	/** @internal — invoked by SandboxSession.result(). */
 	async _sessionResult(id) {
@@ -4565,14 +4578,16 @@ var SandboxInstance = class SandboxInstance {
 		let costUsd;
 		let toolInvocations;
 		let question;
+		let plan;
 		let terminalReached = false;
-		for await (const event of this._sessionEvents(id)) {
+		for await (const event of this._sessionEvents(id, void 0, true)) {
 			response = applySandboxEventText(response, event);
 			if (event.type === "result" || event.type === "done") {
 				const data = event.data;
 				usage = readTokenUsage(data) ?? usage;
 				costUsd = readTokenCostUsd(data) ?? costUsd;
 			}
+			plan = readPlanFromEvent(event) ?? plan;
 			if (event.type === "result") {
 				const data = event.data;
 				toolInvocations = readToolInvocations(data) ?? toolInvocations;
@@ -4596,7 +4611,8 @@ var SandboxInstance = class SandboxInstance {
 			runErrorCode,
 			toolInvocations,
 			approval,
-			question
+			question,
+			plan
 		});
 		return {
 			success: outcome.success,
@@ -4607,6 +4623,7 @@ var SandboxInstance = class SandboxInstance {
 			toolInvocations,
 			approval,
 			question,
+			plan,
 			traceId,
 			durationMs: Date.now() - startTime,
 			usage,
@@ -4738,8 +4755,48 @@ var SandboxInstance = class SandboxInstance {
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 	}
+	/** @internal — invoked by SandboxSession.plan(). */
+	async _currentPlan(sessionId) {
+		const path = `/v1/sandboxes/${encodeURIComponent(this.id)}/agent-sessions/${encodeURIComponent(sessionId)}/plans/current`;
+		const response = await this.client.fetch(path);
+		if (response.status === 404) return null;
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		}
+		const decoded = await response.json();
+		if (!decoded.plan) throw new ServerError("Durable plan response is missing plan", 502, {
+			endpoint: path,
+			origin: "control-plane"
+		});
+		return decoded.plan;
+	}
+	/** @internal — invoked by SandboxSession.approvePlan()/rejectPlan(). */
+	async _decidePlan(sessionId, planId, decision) {
+		const path = `/v1/sandboxes/${encodeURIComponent(this.id)}/agent-sessions/${encodeURIComponent(sessionId)}/plans/${encodeURIComponent(planId)}/decision`;
+		const response = await this.client.fetch(path, {
+			method: "POST",
+			body: JSON.stringify(decision)
+		});
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		}
+		const decoded = await response.json();
+		if (!decoded.plan) throw new ServerError("Plan decision response is missing plan", 502, {
+			endpoint: path,
+			origin: "control-plane"
+		});
+		return decoded.plan;
+	}
 };
 function settleTurnDrive(result) {
+	const plan = readAwaitingPlan(result);
+	if (plan) return {
+		state: "awaiting_plan_decision",
+		plan,
+		result
+	};
 	const text = typeof result.text === "string" ? result.text : typeof result.response === "string" ? result.response : void 0;
 	const status = typeof result.status === "string" ? result.status : deriveOutcome({
 		terminalReached: true,
@@ -4822,4 +4879,4 @@ function quoteForShell(value) {
 	return `'${value.replace(/'/g, "'\\''")}'`;
 }
 //#endregion
-export { InteractiveSessionHandle as a, getSandboxEventText as c, exportTraceBundle as d, otelTraceIdForTangleTrace as f, parseSSEStream as g, encodeTextForWire as h, SandboxSession as i, normalizeConnection as l, encodePromptForWire as m, normalizeStartupDiagnostics as n, applySandboxEventText as o, toOtelJson as p, SandboxTaskSession as r, collectAgentResponseText as s, SandboxInstance as t, buildTraceExportPayload as u };
+export { InteractiveSessionHandle as a, getSandboxEventText as c, exportTraceBundle as d, otelTraceIdForTangleTrace as f, SandboxSession as i, normalizeConnection as l, parseSSEStream as m, normalizeStartupDiagnostics as n, applySandboxEventText as o, toOtelJson as p, SandboxTaskSession as r, collectAgentResponseText as s, SandboxInstance as t, buildTraceExportPayload as u };

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-CEZaPvfX.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-V2vjBfHU.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-Bx0V6Nt5.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-051CtV2b.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-Bx0V6Nt5.js → tangle-051CtV2b.js}

@@ -1,5 +1,5 @@
-import { p as parseErrorResponse } from "./errors-wd266B9Q.js";
-import { t as SandboxInstance } from "./sandbox-C8qQicxF.js";
+import { p as parseErrorResponse } from "./errors-Cbs78OlF.js";
+import { t as SandboxInstance } from "./sandbox-r2Lxbw8z.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-LNLeU9Ub.d.ts → types-C4dFf5eL.d.ts}

@@ -1158,7 +1158,32 @@ interface InstalledTool {
  * - `awaiting_question` — the agent asked a question and the turn ended without
  *   an answer. See {@link AgentQuestionRequest}.
  */
-type AgentRunStatus = "success" | "failed" | "blocked_on_approval" | "awaiting_question";
+type AgentRunStatus = "success" | "failed" | "blocked_on_approval" | "awaiting_question" | "awaiting_plan_decision";
+interface DurablePlanSnapshot {
+  id: string;
+  revision: number;
+  title?: string;
+  body: string;
+  submittedAt: string;
+}
+type DurablePlan = DurablePlanSnapshot & ({
+  status: "pending";
+} | {
+  status: "approved";
+  decidedAt: string;
+} | {
+  status: "rejected";
+  decidedAt: string;
+  feedback: string;
+} | {
+  status: "superseded";
+  supersededAt: string;
+  supersededByPlanId: string;
+} | {
+  status: "withdrawn";
+  withdrawnAt: string;
+  reason: string;
+});
 /**
  * A tool the agent invoked during a run. `isError` flags a failed call
  * (errored, timed out, or rejected — e.g. a hub approval gate). Failed tools
@@ -1220,6 +1245,8 @@ interface PromptResult {
   approval?: AgentApprovalRequirement;
   /** Set when `status === "awaiting_question"`. */
   question?: AgentQuestionRequest;
+  /** Set when `status === "awaiting_plan_decision"`. */
+  plan?: DurablePlanSnapshot;
   /** Trace ID for debugging */
   traceId?: string;
   /** Duration in milliseconds */
@@ -1883,6 +1910,9 @@ interface SessionEventStreamOptions {
   /** Replay starting from this event id (inclusive). Omit to start at
    * the live tail. Useful for reconnect-after-disconnect flows. */
   since?: string;
+  /** Restrict replay to one execution within the session. Required with
+   * `since` when attaching after a server-dispatched turn has already begun. */
+  executionId?: string;
   /** Cancel the stream by aborting this signal. */
   signal?: AbortSignal;
 }
@@ -2033,6 +2063,10 @@ type TurnDriveResult = {
   state: "completed"; /** Final assistant text of the turn. */
   text: string; /** The full turn payload (text, toolInvocations, tokenUsage, etc.). */
   result: Record<string, unknown>;
+} | {
+  state: "awaiting_plan_decision";
+  plan: DurablePlanSnapshot;
+  result: Record<string, unknown>;
 } | {
   state: "running"; /** When the session began executing, if the runtime reported it. */
   startedAt?: Date; /** Milliseconds since `startedAt` at the moment of the poll. */
@@ -4960,4 +4994,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EgressManager as $, defineInlineResource as $i, SandboxFleetDriverCapability as $n, SessionForkOptions as $r, McpServerConfig as $t, CodeResult as A, UploadProgress as Ai, ReconcileSandboxFleetsResult as An, SandboxRuntimeProfile as Ar, GitStatus as At, CreateSandboxOptions as B, AgentProfileConnection as Bi, RolloutTurnPart as Bn, SandboxTraceOptions as Br, HostAgentDriverConfig as Bt, BatchTaskUsage as C, TeePublicKey as Ci, PublicTemplateInfo as Cn, SandboxPermissionsConfig as Cr, FleetPromptDispatchResult as Ct, CodeExecutionOptions as D, TurnDriveResult as Di, ReapExpiredSandboxFleetsOptions as Dn, SandboxResourceUsage as Dr, GitCommit as Dt, ChunkedUploadResult as E, ToolsConfig as Ei, PublishPublicTemplateVersionOptions as En, SandboxProfileSummary as Er, GitBranch as Et, CreateIntelligenceReportOptions as F, WriteManyFile as Fi, RolloutChildResult as Fn, SandboxTerminalManager as Fr, GpuLeaseExecResult as Ft, DispatchPromptOptions as G, AgentProfilePrompt as Gi, SandboxConnection as Gn, SearchOptions as Gr, IntelligenceReportCompareTo as Gt, CreateTaskSessionOptions as H, AgentProfileMcpServer as Hi, SSHCommandDescriptor as Hn, ScopedToken as Hr, InstalledTool as Ht, CreateRequestOptions as I, WriteManyOptions as Ii, RolloutOptions as In, SandboxTerminalRequestOptions as Ir, GpuLeaseManager as It, DownloadProgress as J, AgentProfileValidationIssue as Ji, SandboxFleetArtifact as Jn, SendSessionMessageOptions as Jr, JsonValue as Jt, DispatchedSession as K, AgentProfileResourceRef as Ki, SandboxEnvironment as Kn, SecretInfo as Kr, IntelligenceReportSubjectType as Kt, CreateSandboxFleetOptions as L, AgentProfile as Li, RolloutScorer as Ln, SandboxTraceBundle as Lr, GpuLeaseProviderName as Lt, CommitTaskSessionOptions as M, WaitForOptions as Mi, RestoreSnapshotOptions as Mn, SandboxStatus as Mr, GpuLeaseBilling as Mt, CompletedTurnResult as N, WaitForRolloutOptions as Ni, ResumeOptions as Nn, SandboxTerminalCreateOptions as Nr, GpuLeaseCommandResult as Nt, CodeExecutionResult as O, UpdateUserOptions as Oi, ReapExpiredSandboxFleetsResult as On, SandboxResources as Or, GitConfig as Ot, CreateGpuLeaseOptions as P, WriteFileOptions as Pi, Rollout as Pn, SandboxTerminalInfo as Pr, GpuLeaseExecOptions as Pt, DriverType as Q, defineGitHubResource as Qi, SandboxFleetDispatchResponse as Qn, SessionEventStreamOptions as Qr, ListSandboxOptions as Qt, CreateSandboxFleetTokenOptions as R, AgentProfileCapabilities as Ri, RolloutStartResult as Rn, SandboxTraceEvent as Rr, GpuLeaseStatus as Rt, BatchTaskResult as S, TeeAttestationResponse as Si, ProvisionStep as Sn, SandboxIntelligenceEnvelope as Sr, FleetPromptDispatchOptions as St, ChunkedUploadOptions as T, TokenRefreshHandler as Ti, PublishPublicTemplateOptions as Tn, SandboxPortPreviewLink as Tr, GitAuth as Tt, DeleteOptions as U, AgentProfileModelHints as Ui, SSHCredentials as Un, ScopedTokenScope as Ur, IntelligenceReport as Ut, CreateSessionOptions as V, AgentProfileFileMount as Vi, RunCodeOptions as Vn, SandboxUser as Vr, HostAgentRuntimeBackend as Vt, DirectoryPermission as W, AgentProfilePermissionValue as Wi, SandboxClientConfig as Wn, SearchMatch as Wr, IntelligenceReportBudget as Wt, DriverConfig as X, AgentSubagentProfile as Xi, SandboxFleetCostEstimate as Xn, SentSessionMessage as Xr, ListOptions as Xt, DriveTurnOptions as Y, AgentProfileValidationResult as Yi, SandboxFleetArtifactSpec as Yn, SendSessionMessageRequest as Yr, ListMessagesOptions as Yt, DriverInfo as Z, defineAgentProfile as Zi, SandboxFleetDispatchFailureClass as Zn, SessionBackendCredentials as Zr, ListSandboxFleetOptions as Zt, BatchResult as _, TaskSessionFileChange as _i, PromptOptions as _n, SandboxFleetWorkspace as _r, FleetDispatchResultBufferOptions as _t, AttachSandboxFleetMachineOptions as a, SnapshotInfo as ai, PermissionLevel as an, SandboxFleetMachineRecord as ar, FileReadBatchOptions as at, BatchSidecarGroup as b, TeeAttestationOptions as bi, ProvisionResult as bn, SandboxFleetWorkspaceSnapshotResult as br, FleetExecDispatchResult as bt, BackendInfo as c, SshKeysManager as ci, PreviewLinkManager as cn, SandboxFleetManifestMachine as cr, FileReadResult as ct, BackendType as d, StorageConfig as di, ProcessLogEntry as dn, SandboxFleetToken as dr, FileTreeFile as dt, mergeAgentProfiles as ea, SessionInfo as ei, MintScopedTokenOptions as en, SandboxFleetDriverTimings as er, EgressPolicy as et, BatchBackend as f, SubscriptionInfo as fi, ProcessManager as fn, SandboxFleetTraceBundle as fr, FileTreeOptions as ft, BatchOptions as g, TaskSessionCommitResult as gi, PromptInputPart as gn, SandboxFleetUsage as gr, FleetDispatchResultBuffer as gt, BatchEventDataMap as h, TaskSessionChanges as hi, ProcessStatus as hn, SandboxFleetTraceOptions as hr, FleetDispatchCancelResult as ht, AttachGpuLeaseOptions as i, SessionStatus as ii, NonHostAgentDriverConfig as in, SandboxFleetMachineMeteredUsage as ir, FileInfo as it, CodeResultPart as j, UsageInfo as ji, RenameOptions as jn, SandboxRuntimeProfileList as jr, GpuLease as jt, CodeLanguage as k, UploadOptions as ki, ReconcileSandboxFleetsOptions as kn, SandboxRuntimeHealth as kr, GitDiff as kt, BackendManager as l, StartupDiagnostics as li, Process as ln, SandboxFleetOperationsSummary as lr, FileRenameResult as lt, BatchEvent as m, TaskResult as mi, ProcessSpawnOptions as mn, SandboxFleetTraceExport as mr, FileWriteResult as mt, AccessPolicyRule as n, SessionMessage as ni, NetworkConfig as nn, SandboxFleetIntelligenceEnvelope as nr, ExecOptions as nt, BackendCapabilities as o, SnapshotOptions as oi, PermissionsManager as on, SandboxFleetMachineSpec as or, FileReadBatchResult as ot, BatchBackendStats as p, TaskOptions as pi, ProcessSignal as pn, SandboxFleetTraceEvent as pr, FileTreeResult as pt, DownloadOptions as q, AgentProfileResources as qi, SandboxEvent as qn, SecretsManager as qr, IntelligenceReportWindow as qt, AddUserOptions as r, SessionMessageInputPart as ri, NetworkManager as rn, SandboxFleetMachine as rr, ExecResult as rt, BackendConfig as s, SnapshotResult as si, PreviewLinkInfo as sn, SandboxFleetManifest as sr, FileReadError as st, AcceleratorKind as t, SessionListOptions as ti, MkdirOptions as tn, SandboxFleetInfo as tr, EventStreamOptions as tt, BackendStatus as u, StartupOperation as ui, ProcessInfo as un, SandboxFleetPolicy as ur, FileSystem as ut, BatchRunOptions as v, TaskSessionInfo as vi, PromptResult as vn, SandboxFleetWorkspaceReconcileResult as vr, FleetDispatchStreamOptions as vt, BranchOptions as w, TeePublicKeyResponse as wi, PublicTemplateVersionInfo as wn, SandboxPortBinding as wr, GPU_LEASE_PROVIDER_NAMES as wt, BatchTask as x, TeeAttestationReport as xi, ProvisionStatus as xn, SandboxInfo as xr, FleetMachineId as xt, BatchRunRequest as y, TaskSessionProfile as yi, ProvisionEvent as yn, SandboxFleetWorkspaceRestoreResult as yr, FleetExecDispatchOptions as yt, CreateSandboxFleetWithCoordinatorOptions as z, AgentProfileConfidential as zi, RolloutStatus as zn, SandboxTraceExport as zr, GpuType as zt };
+export { DurablePlan as $, defineGitHubResource as $i, SandboxFleetDispatchResponse as $n, SessionEventStreamOptions as $r, ListSandboxOptions as $t, CodeResult as A, UploadOptions as Ai, ReconcileSandboxFleetsOptions as An, SandboxRuntimeHealth as Ar, GitDiff as At, CreateSandboxOptions as B, AgentProfileConfidential as Bi, RolloutStatus as Bn, SandboxTraceExport as Br, GpuType as Bt, BatchTaskUsage as C, TeeAttestationResponse as Ci, ProvisionStep as Cn, SandboxIntelligenceEnvelope as Cr, FleetPromptDispatchOptions as Ct, CodeExecutionOptions as D, ToolsConfig as Di, PublishPublicTemplateVersionOptions as Dn, SandboxProfileSummary as Dr, GitBranch as Dt, ChunkedUploadResult as E, TokenRefreshHandler as Ei, PublishPublicTemplateOptions as En, SandboxPortPreviewLink as Er, GitAuth as Et, CreateIntelligenceReportOptions as F, WriteFileOptions as Fi, Rollout as Fn, SandboxTerminalInfo as Fr, GpuLeaseExecOptions as Ft, DispatchPromptOptions as G, AgentProfilePermissionValue as Gi, SandboxClientConfig as Gn, SearchMatch as Gr, IntelligenceReportBudget as Gt, CreateTaskSessionOptions as H, AgentProfileFileMount as Hi, RunCodeOptions as Hn, SandboxUser as Hr, HostAgentRuntimeBackend as Ht, CreateRequestOptions as I, WriteManyFile as Ii, RolloutChildResult as In, SandboxTerminalManager as Ir, GpuLeaseExecResult as It, DownloadProgress as J, AgentProfileResources as Ji, SandboxEvent as Jn, SecretsManager as Jr, IntelligenceReportWindow as Jt, DispatchedSession as K, AgentProfilePrompt as Ki, SandboxConnection as Kn, SearchOptions as Kr, IntelligenceReportCompareTo as Kt, CreateSandboxFleetOptions as L, WriteManyOptions as Li, RolloutOptions as Ln, SandboxTerminalRequestOptions as Lr, GpuLeaseManager as Lt, CommitTaskSessionOptions as M, UsageInfo as Mi, RenameOptions as Mn, SandboxRuntimeProfileList as Mr, GpuLease as Mt, CompletedTurnResult as N, WaitForOptions as Ni, RestoreSnapshotOptions as Nn, SandboxStatus as Nr, GpuLeaseBilling as Nt, CodeExecutionResult as O, TurnDriveResult as Oi, ReapExpiredSandboxFleetsOptions as On, SandboxResourceUsage as Or, GitCommit as Ot, CreateGpuLeaseOptions as P, WaitForRolloutOptions as Pi, ResumeOptions as Pn, SandboxTerminalCreateOptions as Pr, GpuLeaseCommandResult as Pt, DriverType as Q, defineAgentProfile as Qi, SandboxFleetDispatchFailureClass as Qn, SessionBackendCredentials as Qr, ListSandboxFleetOptions as Qt, CreateSandboxFleetTokenOptions as R, AgentProfile as Ri, RolloutScorer as Rn, SandboxTraceBundle as Rr, GpuLeaseProviderName as Rt, BatchTaskResult as S, TeeAttestationReport as Si, ProvisionStatus as Sn, SandboxInfo as Sr, FleetMachineId as St, ChunkedUploadOptions as T, TeePublicKeyResponse as Ti, PublicTemplateVersionInfo as Tn, SandboxPortBinding as Tr, GPU_LEASE_PROVIDER_NAMES as Tt, DeleteOptions as U, AgentProfileMcpServer as Ui, SSHCommandDescriptor as Un, ScopedToken as Ur, InstalledTool as Ut, CreateSessionOptions as V, AgentProfileConnection as Vi, RolloutTurnPart as Vn, SandboxTraceOptions as Vr, HostAgentDriverConfig as Vt, DirectoryPermission as W, AgentProfileModelHints as Wi, SSHCredentials as Wn, ScopedTokenScope as Wr, IntelligenceReport as Wt, DriverConfig as X, AgentProfileValidationResult as Xi, SandboxFleetArtifactSpec as Xn, SendSessionMessageRequest as Xr, ListMessagesOptions as Xt, DriveTurnOptions as Y, AgentProfileValidationIssue as Yi, SandboxFleetArtifact as Yn, SendSessionMessageOptions as Yr, JsonValue as Yt, DriverInfo as Z, AgentSubagentProfile as Zi, SandboxFleetCostEstimate as Zn, SentSessionMessage as Zr, ListOptions as Zt, BatchResult as _, TaskSessionCommitResult as _i, PromptInputPart as _n, SandboxFleetUsage as _r, FleetDispatchResultBuffer as _t, AttachSandboxFleetMachineOptions as a, SessionStatus as ai, NonHostAgentDriverConfig as an, SandboxFleetMachineMeteredUsage as ar, FileInfo as at, BatchSidecarGroup as b, TaskSessionProfile as bi, ProvisionEvent as bn, SandboxFleetWorkspaceRestoreResult as br, FleetExecDispatchOptions as bt, BackendInfo as c, SnapshotResult as ci, PreviewLinkInfo as cn, SandboxFleetManifest as cr, FileReadError as ct, BackendType as d, StartupOperation as di, ProcessInfo as dn, SandboxFleetPolicy as dr, FileSystem as dt, defineInlineResource as ea, SessionForkOptions as ei, McpServerConfig as en, SandboxFleetDriverCapability as er, EgressManager as et, BatchBackend as f, StorageConfig as fi, ProcessLogEntry as fn, SandboxFleetToken as fr, FileTreeFile as ft, BatchOptions as g, TaskSessionChanges as gi, ProcessStatus as gn, SandboxFleetTraceOptions as gr, FleetDispatchCancelResult as gt, BatchEventDataMap as h, TaskResult as hi, ProcessSpawnOptions as hn, SandboxFleetTraceExport as hr, FileWriteResult as ht, AttachGpuLeaseOptions as i, SessionMessageInputPart as ii, NetworkManager as in, SandboxFleetMachine as ir, ExecResult as it, CodeResultPart as j, UploadProgress as ji, ReconcileSandboxFleetsResult as jn, SandboxRuntimeProfile as jr, GitStatus as jt, CodeLanguage as k, UpdateUserOptions as ki, ReapExpiredSandboxFleetsResult as kn, SandboxResources as kr, GitConfig as kt, BackendManager as l, SshKeysManager as li, PreviewLinkManager as ln, SandboxFleetManifestMachine as lr, FileReadResult as lt, BatchEvent as m, TaskOptions as mi, ProcessSignal as mn, SandboxFleetTraceEvent as mr, FileTreeResult as mt, AccessPolicyRule as n, SessionListOptions as ni, MkdirOptions as nn, SandboxFleetInfo as nr, EventStreamOptions as nt, BackendCapabilities as o, SnapshotInfo as oi, PermissionLevel as on, SandboxFleetMachineRecord as or, FileReadBatchOptions as ot, BatchBackendStats as p, SubscriptionInfo as pi, ProcessManager as pn, SandboxFleetTraceBundle as pr, FileTreeOptions as pt, DownloadOptions as q, AgentProfileResourceRef as qi, SandboxEnvironment as qn, SecretInfo as qr, IntelligenceReportSubjectType as qt, AddUserOptions as r, SessionMessage as ri, NetworkConfig as rn, SandboxFleetIntelligenceEnvelope as rr, ExecOptions as rt, BackendConfig as s, SnapshotOptions as si, PermissionsManager as sn, SandboxFleetMachineSpec as sr, FileReadBatchResult as st, AcceleratorKind as t, mergeAgentProfiles as ta, SessionInfo as ti, MintScopedTokenOptions as tn, SandboxFleetDriverTimings as tr, EgressPolicy as tt, BackendStatus as u, StartupDiagnostics as ui, Process as un, SandboxFleetOperationsSummary as ur, FileRenameResult as ut, BatchRunOptions as v, TaskSessionFileChange as vi, PromptOptions as vn, SandboxFleetWorkspace as vr, FleetDispatchResultBufferOptions as vt, BranchOptions as w, TeePublicKey as wi, PublicTemplateInfo as wn, SandboxPermissionsConfig as wr, FleetPromptDispatchResult as wt, BatchTask as x, TeeAttestationOptions as xi, ProvisionResult as xn, SandboxFleetWorkspaceSnapshotResult as xr, FleetExecDispatchResult as xt, BatchRunRequest as y, TaskSessionInfo as yi, PromptResult as yn, SandboxFleetWorkspaceReconcileResult as yr, FleetDispatchStreamOptions as yt, CreateSandboxFleetWithCoordinatorOptions as z, AgentProfileCapabilities as zi, RolloutStartResult as zn, SandboxTraceEvent as zr, GpuLeaseStatus as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.10.5-develop.20260715163306.7ca6a55",
+  "version": "0.11.0",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",
@@ -88,7 +88,7 @@
   },
   "dependencies": {
     "@tangle-network/agent-core": "^0.4.0",
-    "@tangle-network/agent-interface": "^0.21.0"
+    "@tangle-network/agent-interface": "0.30.0"
   },
   "peerDependencies": {
     "@mastra/core": "^1.36.0",