@tangle-network/sandbox 0.10.5 → 0.11.1-develop.20260717054349.4472dd9

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DF36P3Ew.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DD8we2b9.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-Bqbf3dA8.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-DcGiYTx3.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-Bqbf3dA8.js → tangle-DcGiYTx3.js}

@@ -1,5 +1,5 @@
-import { p as parseErrorResponse } from "./errors-DSz87Rkk.js";
-import { t as SandboxInstance } from "./sandbox-Vh7Aog8b.js";
+import { p as parseErrorResponse } from "./errors-Cbs78OlF.js";
+import { t as SandboxInstance } from "./sandbox-Cf25Dgrc.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-BGGfKALh.d.ts → types-Di5KUpoc.d.ts}

@@ -1,4 +1,4 @@
-import { AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConnection, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile, defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
+import { AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConnection, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile, Capability, agentProfileSchema, capabilitySchema, defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 
 //#region src/types.d.ts
 type JsonValue = string | number | boolean | null | JsonValue[] | {
@@ -662,6 +662,25 @@ interface CreateSandboxOptions {
    * timeout-driven retries.
    */
   idempotencyKey?: string;
+  /**
+   * Auto-split inline file mounts out of an inline `backend.profile` object
+   * at create time, send the lean profile (mount refs stripped) in the
+   * create request, then write the deferred files back once the sandbox is
+   * running.
+   *
+   * When `true` (the default), a profile with sizeable inline mounts (e.g.
+   * skills, tool scripts) does not bloat the create POST; the SDK
+   * materializes those files via {@link FileSystem.writeMany} /
+   * {@link FileSystem.uploadData} after the sandbox reaches `running`. Only
+   * applies to an inline `AgentProfile` object on `backend.profile` — a
+   * named-profile string is never split, and the deprecated untyped
+   * `backend.inlineProfile` passthrough is not split either. Set `false`
+   * to send the full profile inline in the create request (no post-create
+   * materialization step).
+   *
+   * @default true
+   */
+  autoMaterializeProfileFiles?: boolean;
 }
 /**
  * Per-call overrides for {@link SandboxClient.create}.
@@ -984,10 +1003,10 @@ interface ExecResult {
  * Options for executing a command.
  */
 interface ExecOptions {
-  /** Working directory for the command. When `sessionId` is set the
-   *  runtime remaps well-known absolute sandbox paths to the task's
-   *  real workspace; without `sessionId`, absolute paths pass through
-   *  verbatim and may not resolve to the task's actual filesystem. */
+  /** Working directory for the command. It must resolve within the active
+   *  workspace; paths outside that boundary are rejected. When `sessionId`
+   *  is set, the runtime resolves the path against that task's isolated
+   *  workspace. */
   cwd?: string;
   /** Environment variables */
   env?: Record<string, string>;
@@ -1139,7 +1158,32 @@ interface InstalledTool {
  * - `awaiting_question` — the agent asked a question and the turn ended without
  *   an answer. See {@link AgentQuestionRequest}.
  */
-type AgentRunStatus = "success" | "failed" | "blocked_on_approval" | "awaiting_question";
+type AgentRunStatus = "success" | "failed" | "blocked_on_approval" | "awaiting_question" | "awaiting_plan_decision";
+interface DurablePlanSnapshot {
+  id: string;
+  revision: number;
+  title?: string;
+  body: string;
+  submittedAt: string;
+}
+type DurablePlan = DurablePlanSnapshot & ({
+  status: "pending";
+} | {
+  status: "approved";
+  decidedAt: string;
+} | {
+  status: "rejected";
+  decidedAt: string;
+  feedback: string;
+} | {
+  status: "superseded";
+  supersededAt: string;
+  supersededByPlanId: string;
+} | {
+  status: "withdrawn";
+  withdrawnAt: string;
+  reason: string;
+});
 /**
  * A tool the agent invoked during a run. `isError` flags a failed call
  * (errored, timed out, or rejected — e.g. a hub approval gate). Failed tools
@@ -1201,6 +1245,8 @@ interface PromptResult {
   approval?: AgentApprovalRequirement;
   /** Set when `status === "awaiting_question"`. */
   question?: AgentQuestionRequest;
+  /** Set when `status === "awaiting_plan_decision"`. */
+  plan?: DurablePlanSnapshot;
   /** Trace ID for debugging */
   traceId?: string;
   /** Duration in milliseconds */
@@ -1254,18 +1300,19 @@ interface PromptOptions {
   /** AbortSignal for cancellation */
   signal?: AbortSignal;
   /**
-   * Stable execution id for cross-process reconnect. When passed, the same
-   * id on a retry lands on the same substrate execution — the platform
-   * replays its buffered event stream instead of spawning a duplicate run.
-   * Forwarded as the `X-Execution-ID` header. Omit to let the SDK extract
-   * one from the response stream's `execution.started` event (in-call
-   * reconnect only).
+   * Stable execution id for tracing a first dispatch or selecting an existing
+   * execution for replay. Forwarded as `X-Execution-ID` on a first dispatch.
+   * When combined with `lastEventId`, the SDK replays the existing execution
+   * without sending the prompt again. An execution ID alone does not make a
+   * repeated POST idempotent; use `turnId` for application-level retries.
+   * Omit to let the SDK read the id from `execution.started` for in-call
+   * reconnects.
    */
   executionId?: string;
   /**
-   * Last event id the caller has already acknowledged. The substrate
-   * replays strictly after this id on reconnect. Forwarded as the
-   * `Last-Event-ID` header. Omit on first attempt.
+   * Last event id the caller has already acknowledged. Requires `executionId`;
+   * the SDK replays strictly after this id without dispatching a new prompt.
+   * Omit on the first attempt.
    */
   lastEventId?: string;
   /**
@@ -1863,6 +1910,9 @@ interface SessionEventStreamOptions {
   /** Replay starting from this event id (inclusive). Omit to start at
    * the live tail. Useful for reconnect-after-disconnect flows. */
   since?: string;
+  /** Restrict replay to one execution within the session. Required with
+   * `since` when attaching after a server-dispatched turn has already begun. */
+  executionId?: string;
   /** Cancel the stream by aborting this signal. */
   signal?: AbortSignal;
 }
@@ -2013,6 +2063,10 @@ type TurnDriveResult = {
   state: "completed"; /** Final assistant text of the turn. */
   text: string; /** The full turn payload (text, toolInvocations, tokenUsage, etc.). */
   result: Record<string, unknown>;
+} | {
+  state: "awaiting_plan_decision";
+  plan: DurablePlanSnapshot;
+  result: Record<string, unknown>;
 } | {
   state: "running"; /** When the session began executing, if the runtime reported it. */
   startedAt?: Date; /** Milliseconds since `startedAt` at the moment of the poll. */
@@ -2022,18 +2076,18 @@ type TurnDriveResult = {
   error: string;
 };
 /**
- * Scope of a `box.mintScopedToken()` request. Each value narrows the token's
- * authority compared to the full sandbox bearer. `session-runtime` permits
- * only typed message, workspace-file, and terminal operations for one session.
+ * Scope of a `box.mintScopedToken()` request. `session` and `project` mint
+ * SessionGateway read tokens. `session-runtime` and `read-only` mint sidecar
+ * capability tokens for browser-safe runtime access.
  */
 type ScopedTokenScope = "session" | "session-runtime" | "project" | "read-only";
 /**
  * Options for `box.mintScopedToken()`.
  */
 interface MintScopedTokenOptions {
-  /** Scope to mint. `session` narrows to a single session id; `project`
-   * grants read access to the whole sandbox; `read-only` is a project
-   * scope without prompt-dispatch capabilities. */
+  /** Scope to mint. `session` and `project` are for SessionGateway streams;
+   * `session-runtime` permits typed files, messages, and terminals for one
+   * session; `read-only` permits read-only runtime requests. */
   scope: ScopedTokenScope;
   /** Required when `scope` is `session` or `session-runtime`. */
   sessionId?: string;
@@ -2043,18 +2097,17 @@ interface MintScopedTokenOptions {
   ttlMinutes?: number;
 }
 /**
- * Returned by `box.mintScopedToken()`. The token verifies against the
- * same sidecar middleware that already gates ProductTokenIssuer-issued
- * JWTs — no new sidecar surface.
+ * Returned by `box.mintScopedToken()`. Use session/project tokens with
+ * `SessionGatewayClient`; use session-runtime/read-only tokens with
+ * `SandboxRuntimeClient`.
  */
 interface ScopedToken {
-  /** Bearer token (JWT). Send as `Authorization: Bearer <token>` or
-   * via the `EventSource` URL with token query param. */
+  /** Bearer token (JWT) for the consumer selected by `scope`. */
   token: string;
   /** When the token expires. */
   expiresAt: Date;
-  /** The runtime's direct edge URL. Matches `SandboxConnection.runtimeUrl`
-   *  (the SDK's canonical public name for this URL). */
+  /** The runtime's direct edge URL. Use with runtime scopes; session/project
+   * tokens instead connect to the Sandbox API's `/session` WebSocket. */
   runtimeUrl: string;
   /** Browser-safe Sandbox API proxy base for terminal and runtime requests. */
   sidecarProxyUrl: string;
@@ -2586,7 +2639,7 @@ interface SandboxFleetArtifactSpec {
    */
   path: string;
   label?: string;
-  /** Maximum allowed artifact content size in bytes. Defaults to 5 MiB. */
+  /** Maximum allowed artifact content size in bytes. Defaults to 10 MiB. */
   maxBytes?: number;
 }
 interface SandboxFleetArtifact extends SandboxFleetArtifactSpec {
@@ -3585,8 +3638,6 @@ interface EgressPolicy {
    * Ignored in `open` and `blocked` modes.
    */
   allowDomains?: string[];
-  /** Include platform-default and secret-derived domains. Defaults to true. */
-  includeImplicitDomains?: boolean;
   /**
    * Denied domains. Only enforced when the proxy supports denylist transforms.
    * @deprecated Deferred — not supported by iron-proxy v0.41.
@@ -3974,15 +4025,10 @@ interface ProcessSpawnOptions {
   /** Timeout in milliseconds (0 = no timeout) */
   timeoutMs?: number;
 }
-interface ExactProcessSpawnOptions {
-  /** Working directory for the process. */
-  cwd?: string;
-  /** The complete process environment. Host variables are not inherited. */
-  env?: Record<string, string>;
-  /** Optional UTF-8 stdin. The stream is always closed after spawn. */
+/** Options for an exact argv spawn with optional initial stdin bytes. */
+interface ExactProcessSpawnOptions extends ProcessSpawnOptions {
+  /** UTF-8 bytes written before stdin is closed. */
   stdin?: string;
-  /** Timeout in milliseconds. */
-  timeoutMs?: number;
 }
 /**
  * Options for running Python code.
@@ -4031,6 +4077,31 @@ interface ProcessInfo extends ProcessStatus {
   /** Environment variables used */
   env?: Record<string, string>;
 }
+/** A development server started and tracked by the sandbox runtime. */
+interface DevServerInfo {
+  /** Supervisor process ID. */
+  pid: number;
+  /** Detected project family, such as node-npm or rust-cargo. */
+  family: string;
+  /** Command managed by the runtime. */
+  command: string;
+  /** Canonical workspace root used for project detection. */
+  workspaceRoot: string;
+  /** When the managed process started. */
+  startedAt: Date;
+  /** True when this call started the process; false when it reused one. */
+  startedNow: boolean;
+  /** True when dependency installation ran before startup. */
+  installRan: boolean;
+  /** Time spent installing dependencies during this call. */
+  installDurationMs: number;
+  /** Assigned listening port, once the server is ready. */
+  port?: number;
+}
+interface EnsureDevServerOptions {
+  /** Agent session whose isolated workspace contains the project. */
+  sessionId?: string;
+}
 /**
  * A log entry from process stdout/stderr.
  */
@@ -4177,6 +4248,12 @@ interface Process {
  * ```
  */
 interface ProcessManager {
+  /**
+   * Detect the workspace project and idempotently start its development server.
+   * The runtime owns installation, process tracking, port assignment, and
+   * stale-Vite compatibility handling.
+   */
+  ensureDevServer(options?: EnsureDevServerOptions): Promise<DevServerInfo>;
   /**
    * Spawn a process without blocking.
    * Returns immediately with a Process handle.
@@ -4186,7 +4263,7 @@ interface ProcessManager {
    * @returns Process handle for control and monitoring
    */
   spawn(command: string, options?: ProcessSpawnOptions): Promise<Process>;
-  /** Spawn without shell parsing or inherited environment variables. */
+  /** Spawn an executable with exact argument boundaries and no shell parsing. */
   spawnExact(executable: string, args: readonly string[], options?: ExactProcessSpawnOptions): Promise<Process>;
   /**
    * Run Python code directly.
@@ -4466,6 +4543,36 @@ interface UploadProgress {
   /** Percentage complete (0-100) */
   percentage: number;
 }
+/**
+ * Options for {@link FileSystem.uploadData}.
+ */
+interface ChunkedUploadOptions {
+  /** Unix mode bits applied to the file after upload, e.g. 0o644. */
+  mode?: number;
+  /** Progress callback fired after each part completes. On the rare
+   *  checksum-mismatch recovery (one automatic full re-upload),
+   *  `bytesUploaded` restarts from 0 for the second pass. */
+  onProgress?: (progress: UploadProgress) => void;
+  /** Cancel the upload. A pending upload session is best-effort deleted
+   *  server-side when the signal fires mid-flow. */
+  signal?: AbortSignal;
+  /** Delay between part PUTs (ms) to pace bursts. 0 disables pacing (default). */
+  paceMs?: number;
+  /** Max retries per part on a transient error before failing loud. Default 4. */
+  maxRetries?: number;
+}
+/**
+ * Result of a successful {@link FileSystem.uploadData} call — the
+ * upload-session commit response.
+ */
+interface ChunkedUploadResult {
+  /** The path the runtime wrote the assembled payload to. */
+  path: string;
+  /** Total assembled size in bytes. */
+  size: number;
+  /** Server-computed content hash of the assembled payload. */
+  hash: string;
+}
 /**
  * Options for downloading files.
  */
@@ -4574,10 +4681,12 @@ interface RenameOptions {
 interface WriteManyFile {
   /** Destination path. Relative paths resolve from the workspace root. */
   path: string;
-  /** File content (UTF-8). */
+  /** File content: UTF-8 by default, or base64 when `encoding: "base64"` (for binary payloads). */
   content: string;
   /** Unix mode bits applied after write, e.g. 0o755. */
   mode?: number;
+  /** Encoding of `content` on the wire. */
+  encoding?: "utf8" | "base64";
 }
 /** Options for {@link FileSystem.write}. */
 interface WriteFileOptions {
@@ -4668,6 +4777,35 @@ interface FileSystem {
    * ```
    */
   upload(localPath: string, remotePath: string, options?: UploadOptions): Promise<void>;
+  /**
+   * Upload in-memory binary or text data to the sandbox over the chunked
+   * upload-session protocol, without touching the local filesystem.
+   *
+   * Browser/Worker-safe (no `node:` APIs) — this is the sanctioned path for
+   * delivering payloads over ~1 MiB from a browser tab, a Worker, or any
+   * runtime without `node:fs`, where {@link FileSystem.upload}'s local-file
+   * read isn't available. Binary-safe: accepts a `Blob`, `ArrayBuffer`,
+   * `ArrayBufferView`, or UTF-8 `string`. The upload is chunked into
+   * server-sized parts transparently — callers see one call and one
+   * awaited result — and verified end-to-end with a whole-payload SHA-256
+   * at commit. Works identically whether the sandbox is reached through
+   * the gateway proxy or a direct sidecar connection.
+   *
+   * @param remotePath - Destination path in the sandbox.
+   * @param data - Payload to upload. Strings encode as UTF-8.
+   * @param options - Chunking, retry, progress, and cancellation options.
+   * @throws {SandboxError} `PAYLOAD_TOO_LARGE` immediately, before any
+   *   request, if the payload exceeds the chunked-upload session cap.
+   *
+   * @example
+   * ```typescript
+   * const blob = await fetch("https://example.com/model.bin").then((r) => r.blob());
+   * await box.fs.uploadData("/workspace/models/model.bin", blob, {
+   *   onProgress: (p) => console.log(`${p.percentage.toFixed(1)}%`),
+   * });
+   * ```
+   */
+  uploadData(remotePath: string, data: Blob | ArrayBuffer | ArrayBufferView | string, options?: ChunkedUploadOptions): Promise<ChunkedUploadResult>;
   /**
    * Download a file from the sandbox.
    * Handles binary files correctly.
@@ -4894,4 +5032,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EventStreamOptions as $, SandboxFleetInfo as $n, SessionListOptions as $r, MkdirOptions as $t, CommitTaskSessionOptions as A, WaitForOptions as Ai, RestoreSnapshotOptions as An, SandboxStatus as Ar, GpuLeaseBilling as At, CreateTaskSessionOptions as B, AgentProfileMcpServer as Bi, SSHCommandDescriptor as Bn, ScopedToken as Br, InstalledTool as Bt, BatchTaskUsage as C, TokenRefreshHandler as Ci, PublishPublicTemplateOptions as Cn, SandboxPortPreviewLink as Cr, GitAuth as Ct, CodeLanguage as D, UploadOptions as Di, ReconcileSandboxFleetsOptions as Dn, SandboxRuntimeHealth as Dr, GitDiff as Dt, CodeExecutionResult as E, UpdateUserOptions as Ei, ReapExpiredSandboxFleetsResult as En, SandboxResources as Er, GitConfig as Et, CreateSandboxFleetOptions as F, AgentProfile as Fi, RolloutScorer as Fn, SandboxTraceBundle as Fr, GpuLeaseProviderName as Ft, DownloadOptions as G, AgentProfileResources as Gi, SandboxEvent as Gn, SecretsManager as Gr, IntelligenceReportWindow as Gt, DirectoryPermission as H, AgentProfilePermissionValue as Hi, SandboxClientConfig as Hn, SearchMatch as Hr, IntelligenceReportBudget as Ht, CreateSandboxFleetTokenOptions as I, AgentProfileCapabilities as Ii, RolloutStartResult as In, SandboxTraceEvent as Ir, GpuLeaseStatus as It, DriverConfig as J, AgentSubagentProfile as Ji, SandboxFleetCostEstimate as Jn, SentSessionMessage as Jr, ListOptions as Jt, DownloadProgress as K, AgentProfileValidationIssue as Ki, SandboxFleetArtifact as Kn, SendSessionMessageOptions as Kr, JsonValue as Kt, CreateSandboxFleetWithCoordinatorOptions as L, AgentProfileConfidential as Li, RolloutStatus as Ln, SandboxTraceExport as Lr, GpuType as Lt, CreateGpuLeaseOptions as M, WriteFileOptions as Mi, Rollout as Mn, SandboxTerminalInfo as Mr, GpuLeaseExecOptions as Mt, CreateIntelligenceReportOptions as N, WriteManyFile as Ni, RolloutChildResult as Nn, SandboxTerminalManager as Nr, GpuLeaseExecResult as Nt, CodeResult as O, UploadProgress as Oi, ReconcileSandboxFleetsResult as On, SandboxRuntimeProfile as Or, GitStatus as Ot, CreateRequestOptions as P, WriteManyOptions as Pi, RolloutOptions as Pn, SandboxTerminalRequestOptions as Pr, GpuLeaseManager as Pt, EgressPolicy as Q, mergeAgentProfiles as Qi, SandboxFleetDriverTimings as Qn, SessionInfo as Qr, MintScopedTokenOptions as Qt, CreateSandboxOptions as R, AgentProfileConnection as Ri, RolloutTurnPart as Rn, SandboxTraceOptions as Rr, HostAgentDriverConfig as Rt, BatchTaskResult as S, TeePublicKeyResponse as Si, PublicTemplateVersionInfo as Sn, SandboxPortBinding as Sr, GPU_LEASE_PROVIDER_NAMES as St, CodeExecutionOptions as T, TurnDriveResult as Ti, ReapExpiredSandboxFleetsOptions as Tn, SandboxResourceUsage as Tr, GitCommit as Tt, DispatchPromptOptions as U, AgentProfilePrompt as Ui, SandboxConnection as Un, SearchOptions as Ur, IntelligenceReportCompareTo as Ut, DeleteOptions as V, AgentProfileModelHints as Vi, SSHCredentials as Vn, ScopedTokenScope as Vr, IntelligenceReport as Vt, DispatchedSession as W, AgentProfileResourceRef as Wi, SandboxEnvironment as Wn, SecretInfo as Wr, IntelligenceReportSubjectType as Wt, DriverType as X, defineGitHubResource as Xi, SandboxFleetDispatchResponse as Xn, SessionEventStreamOptions as Xr, ListSandboxOptions as Xt, DriverInfo as Y, defineAgentProfile as Yi, SandboxFleetDispatchFailureClass as Yn, SessionBackendCredentials as Yr, ListSandboxFleetOptions as Yt, EgressManager as Z, defineInlineResource as Zi, SandboxFleetDriverCapability as Zn, SessionForkOptions as Zr, McpServerConfig as Zt, BatchResult as _, TaskSessionProfile as _i, ProvisionEvent as _n, SandboxFleetWorkspaceRestoreResult as _r, FleetExecDispatchOptions as _t, AttachSandboxFleetMachineOptions as a, SnapshotResult as ai, PreviewLinkInfo as an, SandboxFleetManifest as ar, FileReadError as at, BatchSidecarGroup as b, TeeAttestationResponse as bi, ProvisionStep as bn, SandboxIntelligenceEnvelope as br, FleetPromptDispatchOptions as bt, BackendInfo as c, StartupOperation as ci, ProcessInfo as cn, SandboxFleetPolicy as cr, FileSystem as ct, BackendType as d, TaskOptions as di, ProcessSignal as dn, SandboxFleetTraceEvent as dr, FileTreeResult as dt, SessionMessage as ei, NetworkConfig as en, SandboxFleetIntelligenceEnvelope as er, ExecOptions as et, BatchBackend as f, TaskResult as fi, ProcessSpawnOptions as fn, SandboxFleetTraceExport as fr, FileWriteResult as ft, BatchOptions as g, TaskSessionInfo as gi, PromptResult as gn, SandboxFleetWorkspaceReconcileResult as gr, FleetDispatchStreamOptions as gt, BatchEventDataMap as h, TaskSessionFileChange as hi, PromptOptions as hn, SandboxFleetWorkspace as hr, FleetDispatchResultBufferOptions as ht, AttachGpuLeaseOptions as i, SnapshotOptions as ii, PermissionsManager as in, SandboxFleetMachineSpec as ir, FileReadBatchResult as it, CompletedTurnResult as j, WaitForRolloutOptions as ji, ResumeOptions as jn, SandboxTerminalCreateOptions as jr, GpuLeaseCommandResult as jt, CodeResultPart as k, UsageInfo as ki, RenameOptions as kn, SandboxRuntimeProfileList as kr, GpuLease as kt, BackendManager as l, StorageConfig as li, ProcessLogEntry as ln, SandboxFleetToken as lr, FileTreeFile as lt, BatchEvent as m, TaskSessionCommitResult as mi, PromptInputPart as mn, SandboxFleetUsage as mr, FleetDispatchResultBuffer as mt, AccessPolicyRule as n, SessionStatus as ni, NonHostAgentDriverConfig as nn, SandboxFleetMachineMeteredUsage as nr, FileInfo as nt, BackendCapabilities as o, SshKeysManager as oi, PreviewLinkManager as on, SandboxFleetManifestMachine as or, FileReadResult as ot, BatchBackendStats as p, TaskSessionChanges as pi, ProcessStatus as pn, SandboxFleetTraceOptions as pr, FleetDispatchCancelResult as pt, DriveTurnOptions as q, AgentProfileValidationResult as qi, SandboxFleetArtifactSpec as qn, SendSessionMessageRequest as qr, ListMessagesOptions as qt, AddUserOptions as r, SnapshotInfo as ri, PermissionLevel as rn, SandboxFleetMachineRecord as rr, FileReadBatchOptions as rt, BackendConfig as s, StartupDiagnostics as si, Process as sn, SandboxFleetOperationsSummary as sr, FileRenameResult as st, AcceleratorKind as t, SessionMessageInputPart as ti, NetworkManager as tn, SandboxFleetMachine as tr, ExecResult as tt, BackendStatus as u, SubscriptionInfo as ui, ProcessManager as un, SandboxFleetTraceBundle as ur, FileTreeOptions as ut, BatchRunOptions as v, TeeAttestationOptions as vi, ProvisionResult as vn, SandboxFleetWorkspaceSnapshotResult as vr, FleetExecDispatchResult as vt, BranchOptions as w, ToolsConfig as wi, PublishPublicTemplateVersionOptions as wn, SandboxProfileSummary as wr, GitBranch as wt, BatchTask as x, TeePublicKey as xi, PublicTemplateInfo as xn, SandboxPermissionsConfig as xr, FleetPromptDispatchResult as xt, BatchRunRequest as y, TeeAttestationReport as yi, ProvisionStatus as yn, SandboxInfo as yr, FleetMachineId as yt, CreateSessionOptions as z, AgentProfileFileMount as zi, RunCodeOptions as zn, SandboxUser as zr, HostAgentRuntimeBackend as zt };
+export { DriverType as $, AgentProfileValidationIssue as $i, SandboxFleetArtifactSpec as $n, SendSessionMessageRequest as $r, ListMessagesOptions as $t, CodeResult as A, ToolsConfig as Ai, PublishPublicTemplateVersionOptions as An, SandboxProfileSummary as Ar, GitBranch as At, CreateSandboxOptions as B, WriteManyOptions as Bi, RolloutOptions as Bn, SandboxTerminalRequestOptions as Br, GpuLeaseManager as Bt, BatchTaskUsage as C, TaskSessionProfile as Ci, ProvisionEvent as Cn, SandboxFleetWorkspaceRestoreResult as Cr, FleetExecDispatchOptions as Ct, CodeExecutionOptions as D, TeePublicKey as Di, PublicTemplateInfo as Dn, SandboxPermissionsConfig as Dr, FleetPromptDispatchResult as Dt, ChunkedUploadResult as E, TeeAttestationResponse as Ei, ProvisionStep as En, SandboxIntelligenceEnvelope as Er, FleetPromptDispatchOptions as Et, CreateIntelligenceReportOptions as F, UsageInfo as Fi, RenameOptions as Fn, SandboxRuntimeProfileList as Fr, GpuLease as Ft, DirectoryPermission as G, AgentProfileFileMount as Gi, RunCodeOptions as Gn, SandboxUser as Gr, HostAgentRuntimeBackend as Gt, CreateTaskSessionOptions as H, AgentProfileCapabilities as Hi, RolloutStartResult as Hn, SandboxTraceEvent as Hr, GpuLeaseStatus as Ht, CreateRequestOptions as I, WaitForOptions as Ii, RestoreSnapshotOptions as In, SandboxStatus as Ir, GpuLeaseBilling as It, DownloadOptions as J, AgentProfilePermissionValue as Ji, SandboxClientConfig as Jn, SearchMatch as Jr, IntelligenceReportBudget as Jt, DispatchPromptOptions as K, AgentProfileMcpServer as Ki, SSHCommandDescriptor as Kn, ScopedToken as Kr, InstalledTool as Kt, CreateSandboxFleetOptions as L, WaitForRolloutOptions as Li, ResumeOptions as Ln, SandboxTerminalCreateOptions as Lr, GpuLeaseCommandResult as Lt, CommitTaskSessionOptions as M, UpdateUserOptions as Mi, ReapExpiredSandboxFleetsResult as Mn, SandboxResources as Mr, GitConfig as Mt, CompletedTurnResult as N, UploadOptions as Ni, ReconcileSandboxFleetsOptions as Nn, SandboxRuntimeHealth as Nr, GitDiff as Nt, CodeExecutionResult as O, TeePublicKeyResponse as Oi, PublicTemplateVersionInfo as On, SandboxPortBinding as Or, GPU_LEASE_PROVIDER_NAMES as Ot, CreateGpuLeaseOptions as P, UploadProgress as Pi, ReconcileSandboxFleetsResult as Pn, SandboxRuntimeProfile as Pr, GitStatus as Pt, DriverInfo as Q, AgentProfileSecurityPolicy as Qi, SandboxFleetArtifact as Qn, SendSessionMessageOptions as Qr, JsonValue as Qt, CreateSandboxFleetTokenOptions as R, WriteFileOptions as Ri, Rollout as Rn, SandboxTerminalInfo as Rr, GpuLeaseExecOptions as Rt, BatchTaskResult as S, TaskSessionInfo as Si, PromptResult as Sn, SandboxFleetWorkspaceReconcileResult as Sr, FleetDispatchStreamOptions as St, ChunkedUploadOptions as T, TeeAttestationReport as Ti, ProvisionStatus as Tn, SandboxInfo as Tr, FleetMachineId as Tt, DeleteOptions as U, AgentProfileConfidential as Ui, RolloutStatus as Un, SandboxTraceExport as Ur, GpuType as Ut, CreateSessionOptions as V, AgentProfile as Vi, RolloutScorer as Vn, SandboxTraceBundle as Vr, GpuLeaseProviderName as Vt, DevServerInfo as W, AgentProfileConnection as Wi, RolloutTurnPart as Wn, SandboxTraceOptions as Wr, HostAgentDriverConfig as Wt, DriveTurnOptions as X, AgentProfileResourceRef as Xi, SandboxEnvironment as Xn, SecretInfo as Xr, IntelligenceReportSubjectType as Xt, DownloadProgress as Y, AgentProfilePrompt as Yi, SandboxConnection as Yn, SearchOptions as Yr, IntelligenceReportCompareTo as Yt, DriverConfig as Z, AgentProfileResources as Zi, SandboxEvent as Zn, SecretsManager as Zr, IntelligenceReportWindow as Zt, BatchResult as _, TaskOptions as _i, ProcessSignal as _n, SandboxFleetTraceEvent as _r, FileTreeResult as _t, AttachSandboxFleetMachineOptions as a, defineAgentProfile as aa, SessionListOptions as ai, MkdirOptions as an, SandboxFleetInfo as ar, ExactProcessSpawnOptions as at, BatchSidecarGroup as b, TaskSessionCommitResult as bi, PromptInputPart as bn, SandboxFleetUsage as br, FleetDispatchResultBuffer as bt, BackendInfo as c, mergeAgentProfiles as ca, SessionStatus as ci, NonHostAgentDriverConfig as cn, SandboxFleetMachineMeteredUsage as cr, FileInfo as ct, BackendType as d, SnapshotResult as di, PreviewLinkInfo as dn, SandboxFleetManifest as dr, FileReadError as dt, AgentProfileValidationResult as ea, SentSessionMessage as ei, ListOptions as en, SandboxFleetCostEstimate as er, DurablePlan as et, BatchBackend as f, SshKeysManager as fi, PreviewLinkManager as fn, SandboxFleetManifestMachine as fr, FileReadResult as ft, BatchOptions as g, SubscriptionInfo as gi, ProcessManager as gn, SandboxFleetTraceBundle as gr, FileTreeOptions as gt, BatchEventDataMap as h, StorageConfig as hi, ProcessLogEntry as hn, SandboxFleetToken as hr, FileTreeFile as ht, AttachGpuLeaseOptions as i, capabilitySchema as ia, SessionInfo as ii, MintScopedTokenOptions as in, SandboxFleetDriverTimings as ir, EventStreamOptions as it, CodeResultPart as j, TurnDriveResult as ji, ReapExpiredSandboxFleetsOptions as jn, SandboxResourceUsage as jr, GitCommit as jt, CodeLanguage as k, TokenRefreshHandler as ki, PublishPublicTemplateOptions as kn, SandboxPortPreviewLink as kr, GitAuth as kt, BackendManager as l, validateAgentProfileSecurity as la, SnapshotInfo as li, PermissionLevel as ln, SandboxFleetMachineRecord as lr, FileReadBatchOptions as lt, BatchEvent as m, StartupOperation as mi, ProcessInfo as mn, SandboxFleetPolicy as mr, FileSystem as mt, AccessPolicyRule as n, Capability as na, SessionEventStreamOptions as ni, ListSandboxOptions as nn, SandboxFleetDispatchResponse as nr, EgressPolicy as nt, BackendCapabilities as o, defineGitHubResource as oa, SessionMessage as oi, NetworkConfig as on, SandboxFleetIntelligenceEnvelope as or, ExecOptions as ot, BatchBackendStats as p, StartupDiagnostics as pi, Process as pn, SandboxFleetOperationsSummary as pr, FileRenameResult as pt, DispatchedSession as q, AgentProfileModelHints as qi, SSHCredentials as qn, ScopedTokenScope as qr, IntelligenceReport as qt, AddUserOptions as r, agentProfileSchema as ra, SessionForkOptions as ri, McpServerConfig as rn, SandboxFleetDriverCapability as rr, EnsureDevServerOptions as rt, BackendConfig as s, defineInlineResource as sa, SessionMessageInputPart as si, NetworkManager as sn, SandboxFleetMachine as sr, ExecResult as st, AcceleratorKind as t, AgentSubagentProfile as ta, SessionBackendCredentials as ti, ListSandboxFleetOptions as tn, SandboxFleetDispatchFailureClass as tr, EgressManager as tt, BackendStatus as u, SnapshotOptions as ui, PermissionsManager as un, SandboxFleetMachineSpec as ur, FileReadBatchResult as ut, BatchRunOptions as v, TaskResult as vi, ProcessSpawnOptions as vn, SandboxFleetTraceExport as vr, FileWriteResult as vt, BranchOptions as w, TeeAttestationOptions as wi, ProvisionResult as wn, SandboxFleetWorkspaceSnapshotResult as wr, FleetExecDispatchResult as wt, BatchTask as x, TaskSessionFileChange as xi, PromptOptions as xn, SandboxFleetWorkspace as xr, FleetDispatchResultBufferOptions as xt, BatchRunRequest as y, TaskSessionChanges as yi, ProcessStatus as yn, SandboxFleetTraceOptions as yr, FleetDispatchCancelResult as yt, CreateSandboxFleetWithCoordinatorOptions as z, WriteManyFile as zi, RolloutChildResult as zn, SandboxTerminalManager as zr, GpuLeaseExecResult as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.10.5",
+  "version": "0.11.1-develop.20260717054349.4472dd9",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",
@@ -88,7 +88,7 @@
   },
   "dependencies": {
     "@tangle-network/agent-core": "^0.4.0",
-    "@tangle-network/agent-interface": "^0.21.0"
+    "@tangle-network/agent-interface": "0.30.0"
   },
   "peerDependencies": {
     "@mastra/core": "^1.36.0",
@@ -124,7 +124,8 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.5",
     "ws": "^8.20.0",
-    "yjs": "13.6.30"
+    "yjs": "13.6.30",
+    "@tangle-network/runtime-contracts": "0.1.0"
   },
   "scripts": {
     "build": "tsdown",