@tangle-network/sandbox 0.11.1-develop.20260718000408.b3f0f2a → 0.11.1-develop.20260718023623.c7df56e

package/README.md

@@ -160,14 +160,22 @@ The decision tree:
 ### Dispatch + reconnect (the "Worker restart" pattern)
 
 ```typescript
-import { Sandbox } from "@tangle-network/sandbox";
+import { Sandbox } from "@tangle-network/sandbox/core";
 
 const client = new Sandbox({ apiKey: process.env.TANGLE_API_KEY! });
 
-// In your /chat handler:
-const sessionId = req.headers.get("x-turn-id") ?? crypto.randomUUID();
+// In your /chat handler, authenticate first. Derive this stable runtime
+// session ID from the authenticated user, conversation, and turn with a
+// server-side HMAC; never accept a caller-selected runtime session ID.
+const turnId = requireStableTurnId(req);
+const sessionId = await deriveOwnedTurnSessionId(
+  user.id,
+  conversationId,
+  turnId,
+);
 const { sessionId: id, alreadyExisted } = await box.dispatchPrompt(prompt, {
-  sessionId, // idempotent: a retry with the same id is a lookup, not a re-execute
+  sessionId,
+  turnId,
 });
 
 // Stream to the browser; if the client comes back later with the same sessionId
@@ -179,32 +187,43 @@ for await (const event of box.session(id).events({
 }
 ```
 
-### Browser-direct streaming (without proxying tokens through your server)
+### Browser-direct streaming (without proxying the stream through your server)
 
 ```typescript
 import { SessionGatewayClient } from "@tangle-network/sandbox/session-gateway";
 
-const client = new SessionGatewayClient({
+const sessionId =
+  localStorage.getItem("sandbox-browser-session") ?? crypto.randomUUID();
+localStorage.setItem("sandbox-browser-session", sessionId);
+
+// The browser sends only sessionId. Your authenticated backend looks up the
+// owned runtime session and mints with both sessionId and runtimeSessionId:
+// box.mintScopedToken({ scope: "session", sessionId, runtimeSessionId })
+const scoped = await fetchScopedToken({ sessionId });
+let client: SessionGatewayClient;
+client = new SessionGatewayClient({
   url: "wss://your-sandbox-api.example.com/session",
-  token: await fetchScopedToken(),   // mint via box.mintScopedToken({ scope: 'session', sessionId })
+  token: scoped.token,
   sessionId,
+  onTokenRefresh: () => fetchScopedToken({ sessionId }),
   autoReconnect: true,
-  enableReplayPersistence: true,     // remembers lastEventId across reloads
-  replayStorage: { /* localStorage adapter, see session-gateway docs */ },
+  enableReplayPersistence: true,
+  replayStorage: window.localStorage,
   handlers: {
-    onMessage: (event) => render(event),
-    onReplayStart: ({ since }) => showSpinner(`replaying from ${since}`),
+    onAgentEvent: (_channel, event, seq) => render(event, seq),
+    onReplayStart: (total) => showSpinner(`replaying ${total} events`),
     onReplayComplete: () => hideSpinner(),
-    onBackpressureWarning: ({ droppedCount, suggestReplay }) =>
-      suggestReplay && client.replay(client.stats.replay.lastEventId),
+    onBackpressureWarning: (_droppedCount, since) => void client.replay(since),
   },
 });
 client.connect();
 ```
 
-`SessionGatewayClient` handles auto-reconnect with exponential backoff, sequence-gap
-detection, replay-on-reconnect, and `lastEventId` persistence. None of this requires a
-Durable Object.
+`SessionGatewayClient` handles auto-reconnect with exponential backoff, event deduplication, replay-on-reconnect, and `lastEventId` persistence.
+None of this requires a Durable Object.
+The initial scoped token must be fetched before `connect()`; `onTokenRefresh` only handles later rotation.
+Public operations reject if `connection.established` does not arrive within `connectionEstablishmentTimeoutMs` (10 seconds by default).
+Use `handlers.onMessage` to observe every non-duplicate normalized frame after the client processes it; its `id` and canonical `seq` fields cover runtime, project, terminal, and control messages, while `onAgentEvent` is the agent-event convenience callback.
 
 Server-originated product events can arrive before the browser connects:
 
@@ -219,6 +238,10 @@ The public API binds that pending queue to the authenticated product and Sandbox
 A later connection by the same owner leases and acknowledges the ordered queue; another owner receives none of it.
 A gateway crash before acknowledgement redelivers the same event IDs, which the default `SessionGatewayClient` deduplicates before invoking handlers.
 
+The Worker example authenticates before touching the account-key-backed Sandbox client and derives a user-owned runtime session ID from the user, conversation, and turn.
+A retry with the same `x-conversation-id` and `x-turn-id` reuses one execution; a distinct turn gets a distinct execution.
+The detached run survives a Worker or browser response ending; reconnect with the same conversation ID, turn ID, and `Last-Event-ID` to resume.
+
 See `examples/cf-worker-chat.ts`, `examples/browser-streaming-resume.ts`, and
 `examples/reconnect-from-last-event-id.ts` for end-to-end patterns.
 

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { D as CodeExecutionOptions, O as CodeExecutionResult, j as CodeResultPart, k as CodeLanguage } from "../types-Di5KUpoc.js";
-import { n as SandboxInstance } from "../sandbox-BhbAxbub.js";
-import { i as SandboxClient } from "../client-mpqiRmdi.js";
+import { D as CodeExecutionOptions, O as CodeExecutionResult, j as CodeResultPart, k as CodeLanguage } from "../types-D6WC8r4K.js";
+import { n as SandboxInstance } from "../sandbox-BBkFvFe6.js";
+import { i as SandboxClient } from "../client-ChixG64E.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-1LKomw8A.js → client-BYpjTOO7.js}

@@ -1,6 +1,6 @@
 import { c as encodeTextForWire, i as SANDBOX_PROXY_REQUEST_MAX_BYTES, o as combineAbortSignals, s as encodePromptForWire } from "./runtime-api-fqaQ3CN2.js";
 import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, o as PartialFailureError, p as parseErrorResponse, t as AuthError } from "./errors-Cbs78OlF.js";
-import { d as exportTraceBundle, l as normalizeConnection, m as parseSSEStream, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-Cf25Dgrc.js";
+import { d as exportTraceBundle, l as normalizeConnection, m as parseSSEStream, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-Ban9d-wW.js";
 //#region src/resources.ts
 /**
 * Compute tiers, ordered smallest → largest. Defined HERE (not imported from

package/dist/{client-mpqiRmdi.d.ts → client-ChixG64E.d.ts}

@@ -1,5 +1,5 @@
-import { $n as SandboxFleetArtifactSpec, An as PublishPublicTemplateVersionOptions, Ar as SandboxProfileSummary, B as CreateSandboxOptions, Cr as SandboxFleetWorkspaceRestoreResult, Ct as FleetExecDispatchOptions, Dn as PublicTemplateInfo, Dt as FleetPromptDispatchResult, Et as FleetPromptDispatchOptions, F as CreateIntelligenceReportOptions, Fi as UsageInfo, I as CreateRequestOptions, Jn as SandboxClientConfig, Jt as IntelligenceReportBudget, L as CreateSandboxFleetOptions, Mn as ReapExpiredSandboxFleetsResult, Nn as ReconcileSandboxFleetsOptions, On as PublicTemplateVersionInfo, Pn as ReconcileSandboxFleetsResult, Qn as SandboxFleetArtifact, R as CreateSandboxFleetTokenOptions, Sn as PromptResult, Sr as SandboxFleetWorkspaceReconcileResult, St as FleetDispatchStreamOptions, Tr as SandboxInfo, Tt as FleetMachineId, Xn as SandboxEnvironment, Yt as IntelligenceReportCompareTo, Zr as SecretsManager, Zt as IntelligenceReportWindow, _ as BatchResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetInfo, bn as PromptInputPart, br as SandboxFleetUsage, bt as FleetDispatchResultBuffer, dr as SandboxFleetManifest, er as SandboxFleetCostEstimate, fi as SshKeysManager, g as BatchOptions, gi as SubscriptionInfo, gr as SandboxFleetTraceBundle, hr as SandboxFleetToken, jn as ReapExpiredSandboxFleetsOptions, ki as TokenRefreshHandler, kn as PublishPublicTemplateOptions, lr as SandboxFleetMachineRecord, m as BatchEvent, nn as ListSandboxOptions, nr as SandboxFleetDispatchResponse, ot as ExecOptions, pr as SandboxFleetOperationsSummary, qt as IntelligenceReport, rr as SandboxFleetDriverCapability, st as ExecResult, tn as ListSandboxFleetOptions, v as BatchRunOptions, wr as SandboxFleetWorkspaceSnapshotResult, wt as FleetExecDispatchResult, x as BatchTask, xn as PromptOptions, xt as FleetDispatchResultBufferOptions, y as BatchRunRequest, yr as SandboxFleetTraceOptions, yt as FleetDispatchCancelResult, z as CreateSandboxFleetWithCoordinatorOptions } from "./types-Di5KUpoc.js";
-import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BhbAxbub.js";
+import { $n as SandboxFleetArtifactSpec, An as PublishPublicTemplateVersionOptions, Ar as SandboxProfileSummary, B as CreateSandboxOptions, Cr as SandboxFleetWorkspaceRestoreResult, Ct as FleetExecDispatchOptions, Dn as PublicTemplateInfo, Dt as FleetPromptDispatchResult, Et as FleetPromptDispatchOptions, F as CreateIntelligenceReportOptions, Fi as UsageInfo, I as CreateRequestOptions, Jn as SandboxClientConfig, Jt as IntelligenceReportBudget, L as CreateSandboxFleetOptions, Mn as ReapExpiredSandboxFleetsResult, Nn as ReconcileSandboxFleetsOptions, On as PublicTemplateVersionInfo, Pn as ReconcileSandboxFleetsResult, Qn as SandboxFleetArtifact, R as CreateSandboxFleetTokenOptions, Sn as PromptResult, Sr as SandboxFleetWorkspaceReconcileResult, St as FleetDispatchStreamOptions, Tr as SandboxInfo, Tt as FleetMachineId, Xn as SandboxEnvironment, Yt as IntelligenceReportCompareTo, Zr as SecretsManager, Zt as IntelligenceReportWindow, _ as BatchResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetInfo, bn as PromptInputPart, br as SandboxFleetUsage, bt as FleetDispatchResultBuffer, dr as SandboxFleetManifest, er as SandboxFleetCostEstimate, fi as SshKeysManager, g as BatchOptions, gi as SubscriptionInfo, gr as SandboxFleetTraceBundle, hr as SandboxFleetToken, jn as ReapExpiredSandboxFleetsOptions, ki as TokenRefreshHandler, kn as PublishPublicTemplateOptions, lr as SandboxFleetMachineRecord, m as BatchEvent, nn as ListSandboxOptions, nr as SandboxFleetDispatchResponse, ot as ExecOptions, pr as SandboxFleetOperationsSummary, qt as IntelligenceReport, rr as SandboxFleetDriverCapability, st as ExecResult, tn as ListSandboxFleetOptions, v as BatchRunOptions, wr as SandboxFleetWorkspaceSnapshotResult, wt as FleetExecDispatchResult, x as BatchTask, xn as PromptOptions, xt as FleetDispatchResultBufferOptions, y as BatchRunRequest, yr as SandboxFleetTraceOptions, yt as FleetDispatchCancelResult, z as CreateSandboxFleetWithCoordinatorOptions } from "./types-D6WC8r4K.js";
+import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BBkFvFe6.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { B as CreateSandboxOptions, Ir as SandboxStatus, Jn as SandboxClientConfig, Tr as SandboxInfo, dn as PreviewLinkInfo, fn as PreviewLinkManager, on as NetworkConfig, ot as ExecOptions, st as ExecResult } from "./types-Di5KUpoc.js";
-import { n as SandboxInstance } from "./sandbox-BhbAxbub.js";
-import { i as SandboxClient } from "./client-mpqiRmdi.js";
+import { B as CreateSandboxOptions, Ir as SandboxStatus, Jn as SandboxClientConfig, Tr as SandboxInfo, dn as PreviewLinkInfo, fn as PreviewLinkManager, on as NetworkConfig, ot as ExecOptions, st as ExecResult } from "./types-D6WC8r4K.js";
+import { n as SandboxInstance } from "./sandbox-BBkFvFe6.js";
+import { i as SandboxClient } from "./client-ChixG64E.js";
 import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-ntvaf0_F.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
 import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-Cbs78OlF.js";
-import { t as SandboxInstance } from "./sandbox-Cf25Dgrc.js";
-import { n as SandboxClient } from "./client-1LKomw8A.js";
+import { t as SandboxInstance } from "./sandbox-Ban9d-wW.js";
+import { n as SandboxClient } from "./client-BYpjTOO7.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{index-DD8we2b9.d.ts → index-CmLkWZDA.d.ts}

@@ -1,5 +1,5 @@
-import { B as CreateSandboxOptions } from "./types-Di5KUpoc.js";
-import { n as SandboxInstance, t as HttpClient } from "./sandbox-BhbAxbub.js";
+import { B as CreateSandboxOptions } from "./types-D6WC8r4K.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-BBkFvFe6.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as DriverType, $i as AgentProfileValidationIssue, $n as SandboxFleetArtifactSpec, $r as SendSessionMessageRequest, $t as ListMessagesOptions, A as CodeResult, Ai as ToolsConfig, An as PublishPublicTemplateVersionOptions, Ar as SandboxProfileSummary, At as GitBranch, B as CreateSandboxOptions, Bi as WriteManyOptions, Bn as RolloutOptions, Br as SandboxTerminalRequestOptions, Bt as GpuLeaseManager, C as BatchTaskUsage, Ci as TaskSessionProfile, Cn as ProvisionEvent, Cr as SandboxFleetWorkspaceRestoreResult, Ct as FleetExecDispatchOptions, Di as TeePublicKey, Dn as PublicTemplateInfo, Dr as SandboxPermissionsConfig, E as ChunkedUploadResult, Ei as TeeAttestationResponse, En as ProvisionStep, Er as SandboxIntelligenceEnvelope, Et as FleetPromptDispatchOptions, F as CreateIntelligenceReportOptions, Fi as UsageInfo, Fn as RenameOptions, Fr as SandboxRuntimeProfileList, Ft as GpuLease, G as DirectoryPermission, Gi as AgentProfileFileMount, Gn as RunCodeOptions, Gr as SandboxUser, Gt as HostAgentRuntimeBackend, H as CreateTaskSessionOptions, Hi as AgentProfileCapabilities, Hn as RolloutStartResult, Hr as SandboxTraceEvent, Ht as GpuLeaseStatus, I as CreateRequestOptions, Ii as WaitForOptions, Ir as SandboxStatus, It as GpuLeaseBilling, J as DownloadOptions, Ji as AgentProfilePermissionValue, Jn as SandboxClientConfig, Jr as SearchMatch, Jt as IntelligenceReportBudget, K as DispatchPromptOptions, Ki as AgentProfileMcpServer, Kn as SSHCommandDescriptor, Kr as ScopedToken, Kt as InstalledTool, L as CreateSandboxFleetOptions, Li as WaitForRolloutOptions, Lr as SandboxTerminalCreateOptions, Lt as GpuLeaseCommandResult, M as CommitTaskSessionOptions, Mi as UpdateUserOptions, Mn as ReapExpiredSandboxFleetsResult, Mr as SandboxResources, Mt as GitConfig, N as CompletedTurnResult, Ni as UploadOptions, Nn as ReconcileSandboxFleetsOptions, Nr as SandboxRuntimeHealth, Nt as GitDiff, Oi as TeePublicKeyResponse, On as PublicTemplateVersionInfo, Or as SandboxPortBinding, Ot as GPU_LEASE_PROVIDER_NAMES, P as CreateGpuLeaseOptions, Pi as UploadProgress, Pn as ReconcileSandboxFleetsResult, Pr as SandboxRuntimeProfile, Pt as GitStatus, Q as DriverInfo, Qi as AgentProfileSecurityPolicy, Qn as SandboxFleetArtifact, Qr as SendSessionMessageOptions, Ri as WriteFileOptions, Rn as Rollout, Rr as SandboxTerminalInfo, Rt as GpuLeaseExecOptions, S as BatchTaskResult, Si as TaskSessionInfo, Sn as PromptResult, Sr as SandboxFleetWorkspaceReconcileResult, St as FleetDispatchStreamOptions, T as ChunkedUploadOptions, Ti as TeeAttestationReport, Tn as ProvisionStatus, Tr as SandboxInfo, Tt as FleetMachineId, U as DeleteOptions, Ui as AgentProfileConfidential, Un as RolloutStatus, Ur as SandboxTraceExport, Ut as GpuType, V as CreateSessionOptions, Vi as AgentProfile, Vn as RolloutScorer, Vr as SandboxTraceBundle, Vt as GpuLeaseProviderName, W as DevServerInfo, Wi as AgentProfileConnection, Wn as RolloutTurnPart, Wr as SandboxTraceOptions, Wt as HostAgentDriverConfig, X as DriveTurnOptions, Xi as AgentProfileResourceRef, Xn as SandboxEnvironment, Xr as SecretInfo, Xt as IntelligenceReportSubjectType, Y as DownloadProgress, Yi as AgentProfilePrompt, Yn as SandboxConnection, Yr as SearchOptions, Yt as IntelligenceReportCompareTo, Z as DriverConfig, Zi as AgentProfileResources, Zn as SandboxEvent, Zr as SecretsManager, Zt as IntelligenceReportWindow, _ as BatchResult, _i as TaskOptions, _n as ProcessSignal, _r as SandboxFleetTraceEvent, _t as FileTreeResult, a as AttachSandboxFleetMachineOptions, aa as defineAgentProfile, ai as SessionListOptions, an as MkdirOptions, ar as SandboxFleetInfo, at as ExactProcessSpawnOptions, b as BatchSidecarGroup, bi as TaskSessionCommitResult, br as SandboxFleetUsage, bt as FleetDispatchResultBuffer, c as BackendInfo, ca as mergeAgentProfiles, ci as SessionStatus, cn as NonHostAgentDriverConfig, cr as SandboxFleetMachineMeteredUsage, ct as FileInfo, d as BackendType, di as SnapshotResult, dn as PreviewLinkInfo, dr as SandboxFleetManifest, dt as FileReadError, ea as AgentProfileValidationResult, ei as SentSessionMessage, en as ListOptions, er as SandboxFleetCostEstimate, f as BatchBackend, fn as PreviewLinkManager, fr as SandboxFleetManifestMachine, ft as FileReadResult, g as BatchOptions, gi as SubscriptionInfo, gn as ProcessManager, gr as SandboxFleetTraceBundle, gt as FileTreeOptions, h as BatchEventDataMap, hi as StorageConfig, hn as ProcessLogEntry, hr as SandboxFleetToken, ht as FileTreeFile, i as AttachGpuLeaseOptions, ia as capabilitySchema, ii as SessionInfo, in as MintScopedTokenOptions, ir as SandboxFleetDriverTimings, it as EventStreamOptions, ji as TurnDriveResult, jn as ReapExpiredSandboxFleetsOptions, jr as SandboxResourceUsage, jt as GitCommit, ki as TokenRefreshHandler, kn as PublishPublicTemplateOptions, kr as SandboxPortPreviewLink, kt as GitAuth, l as BackendManager, la as validateAgentProfileSecurity, li as SnapshotInfo, ln as PermissionLevel, lr as SandboxFleetMachineRecord, lt as FileReadBatchOptions, m as BatchEvent, mi as StartupOperation, mn as ProcessInfo, mr as SandboxFleetPolicy, mt as FileSystem, n as AccessPolicyRule, na as Capability, ni as SessionEventStreamOptions, nn as ListSandboxOptions, nr as SandboxFleetDispatchResponse, nt as EgressPolicy, o as BackendCapabilities, oa as defineGitHubResource, oi as SessionMessage, on as NetworkConfig, or as SandboxFleetIntelligenceEnvelope, ot as ExecOptions, p as BatchBackendStats, pi as StartupDiagnostics, pn as Process, pr as SandboxFleetOperationsSummary, pt as FileRenameResult, q as DispatchedSession, qi as AgentProfileModelHints, qn as SSHCredentials, qr as ScopedTokenScope, qt as IntelligenceReport, r as AddUserOptions, ra as agentProfileSchema, ri as SessionForkOptions, rn as McpServerConfig, rr as SandboxFleetDriverCapability, rt as EnsureDevServerOptions, s as BackendConfig, sa as defineInlineResource, si as SessionMessageInputPart, sn as NetworkManager, sr as SandboxFleetMachine, st as ExecResult, t as AcceleratorKind, ta as AgentSubagentProfile, ti as SessionBackendCredentials, tn as ListSandboxFleetOptions, tr as SandboxFleetDispatchFailureClass, tt as EgressManager, u as BackendStatus, ui as SnapshotOptions, un as PermissionsManager, ur as SandboxFleetMachineSpec, ut as FileReadBatchResult, v as BatchRunOptions, vi as TaskResult, vn as ProcessSpawnOptions, vr as SandboxFleetTraceExport, vt as FileWriteResult, w as BranchOptions, wi as TeeAttestationOptions, wn as ProvisionResult, wr as SandboxFleetWorkspaceSnapshotResult, x as BatchTask, xi as TaskSessionFileChange, xn as PromptOptions, xr as SandboxFleetWorkspace, xt as FleetDispatchResultBufferOptions, y as BatchRunRequest, yi as TaskSessionChanges, yn as ProcessStatus, yr as SandboxFleetTraceOptions, yt as FleetDispatchCancelResult, z as CreateSandboxFleetWithCoordinatorOptions, zi as WriteManyFile, zn as RolloutChildResult, zr as SandboxTerminalManager, zt as GpuLeaseExecResult } from "./types-Di5KUpoc.js";
-import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BhbAxbub.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-mpqiRmdi.js";
+import { $ as DriverType, $i as AgentProfileValidationIssue, $n as SandboxFleetArtifactSpec, $r as SendSessionMessageRequest, $t as ListMessagesOptions, A as CodeResult, Ai as ToolsConfig, An as PublishPublicTemplateVersionOptions, Ar as SandboxProfileSummary, At as GitBranch, B as CreateSandboxOptions, Bi as WriteManyOptions, Bn as RolloutOptions, Br as SandboxTerminalRequestOptions, Bt as GpuLeaseManager, C as BatchTaskUsage, Ci as TaskSessionProfile, Cn as ProvisionEvent, Cr as SandboxFleetWorkspaceRestoreResult, Ct as FleetExecDispatchOptions, Di as TeePublicKey, Dn as PublicTemplateInfo, Dr as SandboxPermissionsConfig, E as ChunkedUploadResult, Ei as TeeAttestationResponse, En as ProvisionStep, Er as SandboxIntelligenceEnvelope, Et as FleetPromptDispatchOptions, F as CreateIntelligenceReportOptions, Fi as UsageInfo, Fn as RenameOptions, Fr as SandboxRuntimeProfileList, Ft as GpuLease, G as DirectoryPermission, Gi as AgentProfileFileMount, Gn as RunCodeOptions, Gr as SandboxUser, Gt as HostAgentRuntimeBackend, H as CreateTaskSessionOptions, Hi as AgentProfileCapabilities, Hn as RolloutStartResult, Hr as SandboxTraceEvent, Ht as GpuLeaseStatus, I as CreateRequestOptions, Ii as WaitForOptions, Ir as SandboxStatus, It as GpuLeaseBilling, J as DownloadOptions, Ji as AgentProfilePermissionValue, Jn as SandboxClientConfig, Jr as SearchMatch, Jt as IntelligenceReportBudget, K as DispatchPromptOptions, Ki as AgentProfileMcpServer, Kn as SSHCommandDescriptor, Kr as ScopedToken, Kt as InstalledTool, L as CreateSandboxFleetOptions, Li as WaitForRolloutOptions, Lr as SandboxTerminalCreateOptions, Lt as GpuLeaseCommandResult, M as CommitTaskSessionOptions, Mi as UpdateUserOptions, Mn as ReapExpiredSandboxFleetsResult, Mr as SandboxResources, Mt as GitConfig, N as CompletedTurnResult, Ni as UploadOptions, Nn as ReconcileSandboxFleetsOptions, Nr as SandboxRuntimeHealth, Nt as GitDiff, Oi as TeePublicKeyResponse, On as PublicTemplateVersionInfo, Or as SandboxPortBinding, Ot as GPU_LEASE_PROVIDER_NAMES, P as CreateGpuLeaseOptions, Pi as UploadProgress, Pn as ReconcileSandboxFleetsResult, Pr as SandboxRuntimeProfile, Pt as GitStatus, Q as DriverInfo, Qi as AgentProfileSecurityPolicy, Qn as SandboxFleetArtifact, Qr as SendSessionMessageOptions, Ri as WriteFileOptions, Rn as Rollout, Rr as SandboxTerminalInfo, Rt as GpuLeaseExecOptions, S as BatchTaskResult, Si as TaskSessionInfo, Sn as PromptResult, Sr as SandboxFleetWorkspaceReconcileResult, St as FleetDispatchStreamOptions, T as ChunkedUploadOptions, Ti as TeeAttestationReport, Tn as ProvisionStatus, Tr as SandboxInfo, Tt as FleetMachineId, U as DeleteOptions, Ui as AgentProfileConfidential, Un as RolloutStatus, Ur as SandboxTraceExport, Ut as GpuType, V as CreateSessionOptions, Vi as AgentProfile, Vn as RolloutScorer, Vr as SandboxTraceBundle, Vt as GpuLeaseProviderName, W as DevServerInfo, Wi as AgentProfileConnection, Wn as RolloutTurnPart, Wr as SandboxTraceOptions, Wt as HostAgentDriverConfig, X as DriveTurnOptions, Xi as AgentProfileResourceRef, Xn as SandboxEnvironment, Xr as SecretInfo, Xt as IntelligenceReportSubjectType, Y as DownloadProgress, Yi as AgentProfilePrompt, Yn as SandboxConnection, Yr as SearchOptions, Yt as IntelligenceReportCompareTo, Z as DriverConfig, Zi as AgentProfileResources, Zn as SandboxEvent, Zr as SecretsManager, Zt as IntelligenceReportWindow, _ as BatchResult, _i as TaskOptions, _n as ProcessSignal, _r as SandboxFleetTraceEvent, _t as FileTreeResult, a as AttachSandboxFleetMachineOptions, aa as defineAgentProfile, ai as SessionListOptions, an as MkdirOptions, ar as SandboxFleetInfo, at as ExactProcessSpawnOptions, b as BatchSidecarGroup, bi as TaskSessionCommitResult, br as SandboxFleetUsage, bt as FleetDispatchResultBuffer, c as BackendInfo, ca as mergeAgentProfiles, ci as SessionStatus, cn as NonHostAgentDriverConfig, cr as SandboxFleetMachineMeteredUsage, ct as FileInfo, d as BackendType, di as SnapshotResult, dn as PreviewLinkInfo, dr as SandboxFleetManifest, dt as FileReadError, ea as AgentProfileValidationResult, ei as SentSessionMessage, en as ListOptions, er as SandboxFleetCostEstimate, f as BatchBackend, fn as PreviewLinkManager, fr as SandboxFleetManifestMachine, ft as FileReadResult, g as BatchOptions, gi as SubscriptionInfo, gn as ProcessManager, gr as SandboxFleetTraceBundle, gt as FileTreeOptions, h as BatchEventDataMap, hi as StorageConfig, hn as ProcessLogEntry, hr as SandboxFleetToken, ht as FileTreeFile, i as AttachGpuLeaseOptions, ia as capabilitySchema, ii as SessionInfo, in as MintScopedTokenOptions, ir as SandboxFleetDriverTimings, it as EventStreamOptions, ji as TurnDriveResult, jn as ReapExpiredSandboxFleetsOptions, jr as SandboxResourceUsage, jt as GitCommit, ki as TokenRefreshHandler, kn as PublishPublicTemplateOptions, kr as SandboxPortPreviewLink, kt as GitAuth, l as BackendManager, la as validateAgentProfileSecurity, li as SnapshotInfo, ln as PermissionLevel, lr as SandboxFleetMachineRecord, lt as FileReadBatchOptions, m as BatchEvent, mi as StartupOperation, mn as ProcessInfo, mr as SandboxFleetPolicy, mt as FileSystem, n as AccessPolicyRule, na as Capability, ni as SessionEventStreamOptions, nn as ListSandboxOptions, nr as SandboxFleetDispatchResponse, nt as EgressPolicy, o as BackendCapabilities, oa as defineGitHubResource, oi as SessionMessage, on as NetworkConfig, or as SandboxFleetIntelligenceEnvelope, ot as ExecOptions, p as BatchBackendStats, pi as StartupDiagnostics, pn as Process, pr as SandboxFleetOperationsSummary, pt as FileRenameResult, q as DispatchedSession, qi as AgentProfileModelHints, qn as SSHCredentials, qr as ScopedTokenScope, qt as IntelligenceReport, r as AddUserOptions, ra as agentProfileSchema, ri as SessionForkOptions, rn as McpServerConfig, rr as SandboxFleetDriverCapability, rt as EnsureDevServerOptions, s as BackendConfig, sa as defineInlineResource, si as SessionMessageInputPart, sn as NetworkManager, sr as SandboxFleetMachine, st as ExecResult, t as AcceleratorKind, ta as AgentSubagentProfile, ti as SessionBackendCredentials, tn as ListSandboxFleetOptions, tr as SandboxFleetDispatchFailureClass, tt as EgressManager, u as BackendStatus, ui as SnapshotOptions, un as PermissionsManager, ur as SandboxFleetMachineSpec, ut as FileReadBatchResult, v as BatchRunOptions, vi as TaskResult, vn as ProcessSpawnOptions, vr as SandboxFleetTraceExport, vt as FileWriteResult, w as BranchOptions, wi as TeeAttestationOptions, wn as ProvisionResult, wr as SandboxFleetWorkspaceSnapshotResult, x as BatchTask, xi as TaskSessionFileChange, xn as PromptOptions, xr as SandboxFleetWorkspace, xt as FleetDispatchResultBufferOptions, y as BatchRunRequest, yi as TaskSessionChanges, yn as ProcessStatus, yr as SandboxFleetTraceOptions, yt as FleetDispatchCancelResult, z as CreateSandboxFleetWithCoordinatorOptions, zi as WriteManyFile, zn as RolloutChildResult, zr as SandboxTerminalManager, zt as GpuLeaseExecResult } from "./types-D6WC8r4K.js";
+import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BBkFvFe6.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-ChixG64E.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CyHojkuA.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DKzapw-9.js";
 import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-ntvaf0_F.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DD8we2b9.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-CmLkWZDA.js";
 
 //#region src/attestation-heartbeat.d.ts
 interface TeeAttestationHeartbeatSample {

package/dist/index.js

@@ -1,9 +1,9 @@
 import { d as serializeForSidecar, l as normalizeRuntimeBackendConfig } from "./runtime-api-fqaQ3CN2.js";
 import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-Cbs78OlF.js";
-import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, i as SandboxSession, m as parseSSEStream, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-Cf25Dgrc.js";
-import { a as validateDeferredProfileFileMounts, c as DEFAULT_SANDBOX_SIZE, d as resolveSandboxResources, f as sandboxResourcesForSize, i as splitInlineProfileFileMounts, l as SANDBOX_SIZE_PRESETS, n as SandboxClient, o as SandboxFleet, r as materializeProfileFileMounts, s as SandboxFleetClient, t as IntelligenceClient, u as SANDBOX_SIZE_PRESET_NAMES } from "./client-1LKomw8A.js";
+import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, i as SandboxSession, m as parseSSEStream, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-Ban9d-wW.js";
+import { a as validateDeferredProfileFileMounts, c as DEFAULT_SANDBOX_SIZE, d as resolveSandboxResources, f as sandboxResourcesForSize, i as splitInlineProfileFileMounts, l as SANDBOX_SIZE_PRESETS, n as SandboxClient, o as SandboxFleet, r as materializeProfileFileMounts, s as SandboxFleetClient, t as IntelligenceClient, u as SANDBOX_SIZE_PRESET_NAMES } from "./client-BYpjTOO7.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DDnuTcZd.js";
-import { t as TangleSandboxClient } from "./tangle-DcGiYTx3.js";
+import { t as TangleSandboxClient } from "./tangle-BbC2o7B8.js";
 import { agentProfileSchema, capabilitySchema, defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 //#region src/confidential.ts
 function generateAttestationNonce(bytes = 32) {

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-import { $r as SendSessionMessageRequest, $t as ListMessagesOptions, Br as SandboxTerminalRequestOptions, E as ChunkedUploadResult, Fn as RenameOptions, Fr as SandboxRuntimeProfileList, H as CreateTaskSessionOptions, Lr as SandboxTerminalCreateOptions, M as CommitTaskSessionOptions, Nr as SandboxRuntimeHealth, Or as SandboxPortBinding, Pi as UploadProgress, Qr as SendSessionMessageOptions, Ri as WriteFileOptions, Rr as SandboxTerminalInfo, Si as TaskSessionInfo, T as ChunkedUploadOptions, V as CreateSessionOptions, _t as FileTreeResult, bi as TaskSessionCommitResult, ei as SentSessionMessage, gt as FileTreeOptions, ii as SessionInfo, lt as FileReadBatchOptions, oi as SessionMessage, pt as FileRenameResult, ut as FileReadBatchResult, vt as FileWriteResult, yi as TaskSessionChanges, zr as SandboxTerminalManager } from "./types-Di5KUpoc.js";
+import { $r as SendSessionMessageRequest, $t as ListMessagesOptions, Br as SandboxTerminalRequestOptions, E as ChunkedUploadResult, Fn as RenameOptions, Fr as SandboxRuntimeProfileList, H as CreateTaskSessionOptions, Lr as SandboxTerminalCreateOptions, M as CommitTaskSessionOptions, Nr as SandboxRuntimeHealth, Or as SandboxPortBinding, Pi as UploadProgress, Qr as SendSessionMessageOptions, Ri as WriteFileOptions, Rr as SandboxTerminalInfo, Si as TaskSessionInfo, T as ChunkedUploadOptions, V as CreateSessionOptions, _t as FileTreeResult, bi as TaskSessionCommitResult, ei as SentSessionMessage, gt as FileTreeOptions, ii as SessionInfo, lt as FileReadBatchOptions, oi as SessionMessage, pt as FileRenameResult, ut as FileReadBatchResult, vt as FileWriteResult, yi as TaskSessionChanges, zr as SandboxTerminalManager } from "./types-D6WC8r4K.js";
 import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-ntvaf0_F.js";
 
 //#region src/lib/chunked-upload.d.ts

package/dist/{sandbox-BhbAxbub.d.ts → sandbox-BBkFvFe6.d.ts}

@@ -1,4 +1,4 @@
-import { $r as SendSessionMessageRequest, $t as ListMessagesOptions, At as GitBranch, Bi as WriteManyOptions, Bn as RolloutOptions, Bt as GpuLeaseManager, Cn as ProvisionEvent, D as CodeExecutionOptions, Ei as TeeAttestationResponse, Fr as SandboxRuntimeProfileList, Ft as GpuLease, H as CreateTaskSessionOptions, Hn as RolloutStartResult, Ii as WaitForOptions, In as RestoreSnapshotOptions, Ir as SandboxStatus, Jr as SearchMatch, Jt as IntelligenceReportBudget, K as DispatchPromptOptions, Kn as SSHCommandDescriptor, Kr as ScopedToken, Kt as InstalledTool, Li as WaitForRolloutOptions, Ln as ResumeOptions, M as CommitTaskSessionOptions, N as CompletedTurnResult, Nr as SandboxRuntimeHealth, Nt as GitDiff, O as CodeExecutionResult, Oi as TeePublicKeyResponse, Or as SandboxPortBinding, Pt as GitStatus, Q as DriverInfo, Qr as SendSessionMessageOptions, Qt as JsonValue, Ri as WriteFileOptions, Rn as Rollout, Si as TaskSessionInfo, Sn as PromptResult, Tr as SandboxInfo, V as CreateSessionOptions, Vr as SandboxTraceBundle, Wr as SandboxTraceOptions, X as DriveTurnOptions, Yn as SandboxConnection, Yr as SearchOptions, Yt as IntelligenceReportCompareTo, Zn as SandboxEvent, Zt as IntelligenceReportWindow, _i as TaskOptions, ai as SessionListOptions, bi as TaskSessionCommitResult, bn as PromptInputPart, di as SnapshotResult, ei as SentSessionMessage, et as DurablePlan, fn as PreviewLinkManager, gn as ProcessManager, gr as SandboxFleetTraceBundle, ii as SessionInfo, in as MintScopedTokenOptions, it as EventStreamOptions, ji as TurnDriveResult, jr as SandboxResourceUsage, jt as GitCommit, k as CodeLanguage, l as BackendManager, li as SnapshotInfo, mt as FileSystem, ni as SessionEventStreamOptions, oi as SessionMessage, ot as ExecOptions, pi as StartupDiagnostics, q as DispatchedSession, qn as SSHCredentials, qt as IntelligenceReport, ri as SessionForkOptions, s as BackendConfig, sn as NetworkManager, st as ExecResult, tt as EgressManager, ui as SnapshotOptions, un as PermissionsManager, vi as TaskResult, vt as FileWriteResult, w as BranchOptions, wi as TeeAttestationOptions, wn as ProvisionResult, xn as PromptOptions, yi as TaskSessionChanges, zi as WriteManyFile, zr as SandboxTerminalManager } from "./types-Di5KUpoc.js";
+import { $r as SendSessionMessageRequest, $t as ListMessagesOptions, At as GitBranch, Bi as WriteManyOptions, Bn as RolloutOptions, Bt as GpuLeaseManager, Cn as ProvisionEvent, D as CodeExecutionOptions, Ei as TeeAttestationResponse, Fr as SandboxRuntimeProfileList, Ft as GpuLease, H as CreateTaskSessionOptions, Hn as RolloutStartResult, Ii as WaitForOptions, In as RestoreSnapshotOptions, Ir as SandboxStatus, Jr as SearchMatch, Jt as IntelligenceReportBudget, K as DispatchPromptOptions, Kn as SSHCommandDescriptor, Kr as ScopedToken, Kt as InstalledTool, Li as WaitForRolloutOptions, Ln as ResumeOptions, M as CommitTaskSessionOptions, N as CompletedTurnResult, Nr as SandboxRuntimeHealth, Nt as GitDiff, O as CodeExecutionResult, Oi as TeePublicKeyResponse, Or as SandboxPortBinding, Pt as GitStatus, Q as DriverInfo, Qr as SendSessionMessageOptions, Qt as JsonValue, Ri as WriteFileOptions, Rn as Rollout, Si as TaskSessionInfo, Sn as PromptResult, Tr as SandboxInfo, V as CreateSessionOptions, Vr as SandboxTraceBundle, Wr as SandboxTraceOptions, X as DriveTurnOptions, Yn as SandboxConnection, Yr as SearchOptions, Yt as IntelligenceReportCompareTo, Zn as SandboxEvent, Zt as IntelligenceReportWindow, _i as TaskOptions, ai as SessionListOptions, bi as TaskSessionCommitResult, bn as PromptInputPart, di as SnapshotResult, ei as SentSessionMessage, et as DurablePlan, fn as PreviewLinkManager, gn as ProcessManager, gr as SandboxFleetTraceBundle, ii as SessionInfo, in as MintScopedTokenOptions, it as EventStreamOptions, ji as TurnDriveResult, jr as SandboxResourceUsage, jt as GitCommit, k as CodeLanguage, l as BackendManager, li as SnapshotInfo, mt as FileSystem, ni as SessionEventStreamOptions, oi as SessionMessage, ot as ExecOptions, pi as StartupDiagnostics, q as DispatchedSession, qn as SSHCredentials, qt as IntelligenceReport, ri as SessionForkOptions, s as BackendConfig, sn as NetworkManager, st as ExecResult, tt as EgressManager, ui as SnapshotOptions, un as PermissionsManager, vi as TaskResult, vt as FileWriteResult, w as BranchOptions, wi as TeeAttestationOptions, wn as ProvisionResult, xn as PromptOptions, yi as TaskSessionChanges, zi as WriteManyFile, zr as SandboxTerminalManager } from "./types-D6WC8r4K.js";
 
 //#region src/mcp.d.ts
 /**
@@ -1390,13 +1390,13 @@ declare class SandboxInstance {
    * ```typescript
    * await box.registerSessionMapping({
    *   sessionId: "sess_abc",
-   *   userId: "user_123",
+   *   runtimeSessionId: "runtime_abc",
    * });
    * ```
    */
   registerSessionMapping(opts: {
-    sessionId: string;
-    userId: string; /** The runtime (sidecar) session id this agent session routes to. */
+    sessionId: string; /** @deprecated Ownership is derived from the Sandbox API key. */
+    userId?: string; /** The runtime (sidecar) session id this agent session routes to. */
     runtimeSessionId: string; /** Optional container id for direct routing. */
     sidecarId?: string; /** Optional projectRef so the server can detect a stale sidecar. */
     projectRef?: string;
@@ -1407,8 +1407,8 @@ declare class SandboxInstance {
    * sandbox stays alive.
    */
   unregisterSessionMapping(opts: {
-    sessionId: string;
-    userId: string;
+    sessionId: string; /** @deprecated Ownership is derived from the Sandbox API key. */
+    userId?: string;
   }): Promise<{
     success: boolean;
     sessionId: string;

package/dist/{sandbox-Cf25Dgrc.js → sandbox-Ban9d-wW.js}

@@ -4242,17 +4242,16 @@ var SandboxInstance = class SandboxInstance {
 	* ```typescript
 	* await box.registerSessionMapping({
 	*   sessionId: "sess_abc",
-	*   userId: "user_123",
+	*   runtimeSessionId: "runtime_abc",
 	* });
 	* ```
 	*/
 	async registerSessionMapping(opts) {
 		const response = await this.client.fetch(`/v1/session/${encodeURIComponent(opts.sessionId)}/mapping`, {
 			method: "PUT",
-			headers: { "x-user-id": opts.userId },
 			body: JSON.stringify({
 				sidecarSessionId: opts.runtimeSessionId,
-				...opts.sidecarId ? { sidecarId: opts.sidecarId } : {},
+				sidecarId: opts.sidecarId ?? this.id,
 				...opts.projectRef ? { projectRef: opts.projectRef } : {}
 			})
 		});
@@ -4281,10 +4280,7 @@ var SandboxInstance = class SandboxInstance {
 	* sandbox stays alive.
 	*/
 	async unregisterSessionMapping(opts) {
-		const response = await this.client.fetch(`/v1/session/${encodeURIComponent(opts.sessionId)}/mapping`, {
-			method: "DELETE",
-			headers: { "x-user-id": opts.userId }
-		});
+		const response = await this.client.fetch(`/v1/session/${encodeURIComponent(opts.sessionId)}/mapping`, { method: "DELETE" });
 		if (!response.ok) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
@@ -4566,12 +4562,14 @@ var SandboxInstance = class SandboxInstance {
 	*/
 	async mintScopedToken(opts) {
 		if ((opts.scope === "session" || opts.scope === "session-runtime") && !opts.sessionId) throw new ValidationError(`${opts.scope} scope requires a sessionId`);
+		if (opts.scope === "session" && !opts.runtimeSessionId) throw new ValidationError("session scope requires the actual runtimeSessionId");
 		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/scoped-token`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify({
 				scope: opts.scope,
 				...opts.sessionId ? { sessionId: opts.sessionId } : {},
+				...opts.scope === "session" ? { runtimeSessionId: opts.runtimeSessionId } : {},
 				...opts.ttlMinutes ? { ttlMinutes: opts.ttlMinutes } : {}
 			})
 		});

package/dist/session-gateway/index.d.ts

@@ -40,16 +40,24 @@ interface ReplayOptions {
   lastEventId?: string;
   /** Execution ID to replay events for */
   executionId?: string;
-  /** Session ID context for replay */
+  /** Actual runtime session ID used to scope replayed agent events */
   sessionId?: string;
 }
+interface SubscriptionDenial {
+  channel: string;
+  reason: string;
+}
+interface SubscriptionAcknowledgement {
+  channels: string[];
+  denied?: SubscriptionDenial[];
+}
 /**
  * Base fields present on all server messages.
  */
 interface ServerMessageBase {
   id?: string;
   timestamp?: number;
-  /** Monotonic sequence number for gap detection (per session) */
+  /** Monotonic per-session sequence number for consumers to detect gaps. */
   seq?: number;
 }
 /**
@@ -60,12 +68,11 @@ type ServerMessage = (ServerMessageBase & {
   messageType?: string;
   data: {
     sessionId: string;
+    hydratedCount?: number;
   };
 }) | (ServerMessageBase & {
   type: "subscribed";
-  data: {
-    channels: string[];
-  };
+  data: SubscriptionAcknowledgement;
 }) | (ServerMessageBase & {
   type: "unsubscribed";
   data: {
@@ -86,6 +93,19 @@ type ServerMessage = (ServerMessageBase & {
     sandboxId: string;
     error?: string;
   };
+}) | (ServerMessageBase & {
+  type: "runtime.reconnecting";
+  data: {
+    sandboxId: string;
+    attempt: number;
+    delayMs: number;
+  };
+}) | (ServerMessageBase & {
+  type: "runtime.removed";
+  data: {
+    sandboxId: string;
+    reason: string;
+  };
 }) | (ServerMessageBase & {
   type: "runtime.not_found";
   data: {
@@ -122,7 +142,7 @@ type ServerMessage = (ServerMessageBase & {
 }) | (ServerMessageBase & {
   type: "agent.event";
   channel: string;
-  data: unknown;
+  data: unknown; /** @deprecated The server emits `seq`; retained for older deployments. */
   sequenceId?: number;
 }) | (ServerMessageBase & {
   type: "replay.start";
@@ -156,6 +176,20 @@ type ServerMessage = (ServerMessageBase & {
     totalDropped: number; /** Hint that client should request a replay */
     suggestReplay: boolean;
   };
+}) | (ServerMessageBase & {
+  type: "terminal.input.error";
+  data: {
+    terminalId: string;
+    code: string;
+    message: string;
+  };
+}) | (ServerMessageBase & {
+  type: `project.${string}`;
+  channel?: string;
+  data: unknown;
+}) | (ServerMessageBase & {
+  type: "heartbeat";
+  data?: unknown;
 });
 interface PortEventData {
   type: "opened" | "closed";
@@ -163,6 +197,30 @@ interface PortEventData {
   protocol: string;
   processName?: string;
 }
+/**
+ * Inbound WebSocket frame before normalization. The server may emit a
+ * legacy `messageType` discriminant instead of `type`, and may carry a
+ * top-level `channel` plus arbitrary extra fields. `handleMessage`
+ * normalizes a `RawWireMessage` into a `ServerMessage` before dispatch:
+ * `type` and `data` are mutable here because normalization rewrites them.
+ */
+interface RawWireMessage {
+  type?: string;
+  messageType?: string;
+  channel?: string;
+  data?: unknown;
+  id?: string;
+  message?: string;
+  code?: string;
+  timestamp?: number;
+  seq?: number;
+  sequenceId?: number;
+  [key: string]: unknown;
+}
+/** Every inbound frame after legacy names and sequence fields are normalized. */
+interface NormalizedServerMessage extends RawWireMessage {
+  type: string;
+}
 /**
  * Connection state for the WebSocket client.
  */
@@ -215,6 +273,8 @@ interface TokenRefreshResult {
  * Event handlers for session gateway events.
  */
 interface SessionGatewayEventHandlers {
+  /** Called after internal processing for every non-duplicate normalized frame. */
+  onMessage?: (message: NormalizedServerMessage) => void;
   onConnect?: (sessionId: string) => void;
   onDisconnect?: (code: number, reason: string) => void;
   onReconnect?: () => void;
@@ -237,7 +297,7 @@ interface SessionGatewayEventHandlers {
   }) => void;
   onPortOpened?: (port: number, protocol: string, processName?: string) => void;
   onPortClosed?: (port: number) => void;
-  onAgentEvent?: (channel: string, data: unknown, sequenceId?: number) => void;
+  onAgentEvent?: (channel: string, data: unknown, seq?: number) => void;
   onError?: (message: string, code?: string) => void;
   onStateChange?: (state: ConnectionState) => void;
   onMetricsChange?: (metrics: ConnectionMetrics) => void;
@@ -270,11 +330,11 @@ interface SessionGatewayClientConfig {
   token: string;
   /** Callback to refresh the token when it's about to expire */
   onTokenRefresh?: () => Promise<TokenRefreshResult>;
-  /** Session ID to connect to */
+  /** Browser session ID embedded in the session-scoped read token */
   sessionId: string;
   /** Transport mode (default: "websocket") */
   transport?: TransportMode;
-  /** Channels to subscribe to (default: ["*"]) */
+  /** Additional channels to subscribe to; server-authorized channels are used by default. */
   channels?: string[];
   /** Auto-reconnect on disconnect (default: true) */
   autoReconnect?: boolean;
@@ -302,6 +362,8 @@ interface SessionGatewayClientConfig {
   replayStorageKeyPrefix?: string;
   /** Number of latency samples to track for averaging (default: 10) */
   latencyHistorySize?: number;
+  /** Maximum wait for `connection.established` (default: 10000 ms) */
+  connectionEstablishmentTimeoutMs?: number;
   /** Event handlers */
   handlers?: SessionGatewayEventHandlers;
 }
@@ -335,11 +397,13 @@ declare class SessionGatewayClient {
   private ws;
   private readonly config;
   private readonly handlers;
+  private readonly replayStateStore;
+  private readonly tokenRefresher;
   private currentToken;
-  private isRefreshingToken;
   private state;
   private connectedAt;
   private hasConnectedBefore;
+  private connectionEstablishedForSocket;
   private lastPingAt;
   private lastPongAt;
   private lastPingSentAt;
@@ -353,6 +417,7 @@ declare class SessionGatewayClient {
   private pingInterval;
   private pongTimeout;
   private pendingCallbacks;
+  private readonly connectionWaiters;
   private messageIdCounter;
   private processedEventIds;
   private pingLatencyHistory;
@@ -387,7 +452,7 @@ declare class SessionGatewayClient {
   /**
    * Request replay of events since a timestamp.
    */
-  replay(since: number): void;
+  replay(since: number): Promise<void>;
   /**
    * Send terminal input via WebSocket.
    */
@@ -423,14 +488,18 @@ declare class SessionGatewayClient {
   getToken(): string;
   private setState;
   private handleOpen;
+  private handleConnectionEstablished;
   private handleClose;
+  private handleError;
+  private closeBeforeEstablishment;
   private handleMessage;
   private handlePong;
   private dispatchMessage;
+  private deliverMessage;
   private trackExecutionContext;
-  private handleTokenExpiring;
   private send;
   private sendWithResponse;
+  private waitForConnectionEstablished;
   private restoreSubscriptions;
   private startPingInterval;
   private stopPingInterval;
@@ -445,4 +514,4 @@ declare class SessionGatewayClient {
   private saveReplayState;
 }
 //#endregion
-export { type ClientMessage, type ConnectionMetrics, type ConnectionQuality, type ConnectionState, INITIAL_METRICS, type PortEventData, type ReplayOptions, type ReplayState, type ReplayStateStorage, type ServerMessage, SessionGatewayClient, type SessionGatewayClientConfig, type SessionGatewayEventHandlers, type SessionGatewayStats, type TokenRefreshResult, type TransportMode, calculateConnectionQuality };
+export { type ClientMessage, type ConnectionMetrics, type ConnectionQuality, type ConnectionState, INITIAL_METRICS, type NormalizedServerMessage, type PortEventData, type ReplayOptions, type ReplayState, type ReplayStateStorage, type ServerMessage, SessionGatewayClient, type SessionGatewayClientConfig, type SessionGatewayEventHandlers, type SessionGatewayStats, type SubscriptionAcknowledgement, type SubscriptionDenial, type TokenRefreshResult, type TransportMode, calculateConnectionQuality };