@tangle-network/sandbox 0.19.4 → 0.19.5

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, x as CodeExecutionResult } from "../types-BoFtM2qv.js";
-import { n as SandboxInstance } from "../sandbox-DT-VEfRp.js";
-import { i as Sandbox } from "../client-XDKeWJx6.js";
+import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, x as CodeExecutionResult } from "../types-C7mxmAil.js";
+import { n as SandboxInstance } from "../sandbox-BEsoO8Ux.js";
+import { i as Sandbox } from "../client-BCwkh2kj.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-XDKeWJx6.d.ts → client-BCwkh2kj.d.ts}

@@ -1,5 +1,5 @@
-import { $n as SandboxFleetCostEstimate, $t as ListSandboxFleetOptions, A as CreateSandboxFleetTokenOptions, An as PublishPublicTemplateVersionOptions, Cr as SandboxFleetWorkspaceSnapshotResult, Ct as FleetExecDispatchResult, D as CreateIntelligenceReportOptions, Dn as PublicTemplateInfo, Et as FleetPromptDispatchResult, Gt as IntelligenceReport, Kt as IntelligenceReportBudget, M as CreateSandboxOptions, Mn as ReapExpiredSandboxFleetsResult, Nn as ReconcileSandboxFleetsOptions, O as CreateRequestOptions, Oi as TokenRefreshHandler, On as PublicTemplateVersionInfo, Pi as UsageInfo, Pn as ReconcileSandboxFleetsResult, Qn as SandboxFleetArtifactSpec, Sn as PromptResult, Sr as SandboxFleetWorkspaceRestoreResult, St as FleetExecDispatchOptions, Tr as SandboxInfo, Tt as FleetPromptDispatchOptions, Xi as BatchEvent, Yn as SandboxEnvironment, Yr as SecretsManager, Yt as IntelligenceReportWindow, Zn as SandboxFleetArtifact, _i as SubscriptionInfo, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, bn as PromptInputPart, bt as FleetDriveTurnOutcome, cr as SandboxFleetMachineRecord, en as ListSandboxOptions, f as BatchResult, fr as SandboxFleetOperationsSummary, gt as FleetDispatchCancelResult, hr as SandboxFleetTraceBundle, ir as SandboxFleetInfo, j as CreateSandboxFleetWithCoordinatorOptions, jn as ReapExpiredSandboxFleetsOptions, k as CreateSandboxFleetOptions, kn as PublishPublicTemplateOptions, m as BatchRunRequest, mr as SandboxFleetToken, nr as SandboxFleetDriverCapability, nt as ExecResult, p as BatchRunOptions, pi as SshKeysManager, qn as SandboxConfig, qt as IntelligenceReportCompareTo, tr as SandboxFleetDispatchResponse, tt as ExecOptions, ur as SandboxFleetManifest, vr as SandboxFleetTraceOptions, vt as FleetDispatchResultBufferOptions, wr as SandboxIdentity, wt as FleetMachineId, xn as PromptOptions, xr as SandboxFleetWorkspaceReconcileResult, xt as FleetDriveTurnRequest, yr as SandboxFleetUsage, yt as FleetDispatchStreamOptions } from "./types-BoFtM2qv.js";
-import { c as TraceExportResult, l as TraceExportSink, n as SandboxInstance, t as HttpClient } from "./sandbox-DT-VEfRp.js";
+import { $n as SandboxFleetCostEstimate, $t as ListSandboxFleetOptions, A as CreateSandboxFleetTokenOptions, An as PublishPublicTemplateVersionOptions, Cr as SandboxFleetWorkspaceSnapshotResult, Ct as FleetExecDispatchResult, D as CreateIntelligenceReportOptions, Dn as PublicTemplateInfo, Et as FleetPromptDispatchResult, Gt as IntelligenceReport, Kt as IntelligenceReportBudget, M as CreateSandboxOptions, Mn as ReapExpiredSandboxFleetsResult, Nn as ReconcileSandboxFleetsOptions, O as CreateRequestOptions, Oi as TokenRefreshHandler, On as PublicTemplateVersionInfo, Pi as UsageInfo, Pn as ReconcileSandboxFleetsResult, Qn as SandboxFleetArtifactSpec, Sn as PromptResult, Sr as SandboxFleetWorkspaceRestoreResult, St as FleetExecDispatchOptions, Tr as SandboxInfo, Tt as FleetPromptDispatchOptions, Xi as BatchEvent, Yn as SandboxEnvironment, Yr as SecretsManager, Yt as IntelligenceReportWindow, Zn as SandboxFleetArtifact, _i as SubscriptionInfo, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, bn as PromptInputPart, bt as FleetDriveTurnOutcome, cr as SandboxFleetMachineRecord, en as ListSandboxOptions, f as BatchResult, fr as SandboxFleetOperationsSummary, gt as FleetDispatchCancelResult, hr as SandboxFleetTraceBundle, ir as SandboxFleetInfo, j as CreateSandboxFleetWithCoordinatorOptions, jn as ReapExpiredSandboxFleetsOptions, k as CreateSandboxFleetOptions, kn as PublishPublicTemplateOptions, m as BatchRunRequest, mr as SandboxFleetToken, nr as SandboxFleetDriverCapability, nt as ExecResult, p as BatchRunOptions, pi as SshKeysManager, qn as SandboxConfig, qt as IntelligenceReportCompareTo, tr as SandboxFleetDispatchResponse, tt as ExecOptions, ur as SandboxFleetManifest, vr as SandboxFleetTraceOptions, vt as FleetDispatchResultBufferOptions, wr as SandboxIdentity, wt as FleetMachineId, xn as PromptOptions, xr as SandboxFleetWorkspaceReconcileResult, xt as FleetDriveTurnRequest, yr as SandboxFleetUsage, yt as FleetDispatchStreamOptions } from "./types-C7mxmAil.js";
+import { c as TraceExportResult, l as TraceExportSink, n as SandboxInstance, t as HttpClient } from "./sandbox-BEsoO8Ux.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/{client-aY82P7Ho.js → client-CPSJHnNS.js}

@@ -1,6 +1,6 @@
 import { c as combineAbortSignals, d as applyRequestedModel, f as assertCurrentBackendType, l as encodePromptForWire, m as backendTypeSchema, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, u as encodeTextForWire } from "./runtime-api-BQii48NT.js";
 import { a as NetworkError, f as TimeoutError, l as SandboxError, m as parseErrorResponse, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-Bf-A-4SA.js";
-import { g as normalizeConnection, n as createSandboxInstanceFromResponse, r as normalizeStartupDiagnostics, v as exportTraceBundle, x as parseSSEStream } from "./sandbox-Clsvx8OO.js";
+import { g as normalizeConnection, n as createSandboxInstanceFromResponse, r as normalizeStartupDiagnostics, v as exportTraceBundle, x as parseSSEStream } from "./sandbox-DVwPvdG_.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region ../../../packages/runtime-contracts/dist/git-policy.js
@@ -1885,8 +1885,9 @@ const PROFILE_FILE_MOUNT_MAX_RETRIES = 4;
 const PROFILE_FILE_MOUNT_RETRY_BASE_MS = 250;
 const PROFILE_FILE_MOUNT_RETRY_MAX_MS = 2e3;
 const PROFILE_FILE_MOUNT_EXEC_TIMEOUT_MS = 3e4;
-const PROFILE_FILE_MOUNT_PACE_MS = 150;
+const PROFILE_FILE_MOUNT_PACE_MS = 0;
 const PROFILE_BIN_DIR_RE = /(^|\/)(s?bin)\//;
+const PROFILE_AGENT_HOME = ["/home", "agent"].join("/");
 /**
 * Wire budget for a single-shot `POST /files/write` of a mount.
 * Materialization runs over whatever connection the box has — on the
@@ -1906,7 +1907,7 @@ function fitsSingleShotWrite(content, contentBytes) {
 	return new TextEncoder().encode(JSON.stringify(content)).byteLength <= PROFILE_FILE_WRITE_WIRE_BUDGET_BYTES;
 }
 const DEFAULT_PROFILE_FILE_API_ABSOLUTE_PREFIXES = [
-	["/home", "agent"].join("/"),
+	PROFILE_AGENT_HOME,
 	["/home", "user"].join("/"),
 	"/tmp",
 	"/output"
@@ -2021,7 +2022,10 @@ function isAllowedAbsoluteFileApiPath(path, prefixes) {
 	return false;
 }
 function fileApiTarget(mount, absolutePrefixes) {
-	if (mount.path.startsWith("~/")) return null;
+	if (mount.path.startsWith("~/")) {
+		const homePath = `${PROFILE_AGENT_HOME}/${mount.path.slice(2)}`;
+		return isAllowedAbsoluteFileApiPath(homePath, absolutePrefixes) ? homePath : null;
+	}
 	if (mount.path.startsWith("/")) return isAllowedAbsoluteFileApiPath(mount.path, absolutePrefixes) ? mount.path : null;
 	if (mount.path.startsWith("~")) return null;
 	if (mount.path.length === 0) return null;
@@ -2036,6 +2040,9 @@ function profileFileMode(mount) {
 function fileApiSupportsMode(box) {
 	return box.fs?.supportsWriteMode === true;
 }
+function isFileApiRootOnlyError(error) {
+	return error instanceof SandboxError && error.status === 403 && error.message.includes("Absolute path is outside allowed roots");
+}
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var ProfileFileMountExecTimeoutError = class extends Error {
 	constructor(timeoutMs) {
@@ -2176,6 +2183,7 @@ async function materializeProfileFileMounts(box, files, options = {}) {
 	const modeAwareFileApi = fileApiSupportsMode(box);
 	const uploadDataFn = fs?.uploadData;
 	const viaFileApi = [];
+	const viaHomeFileApi = [];
 	const viaExec = [];
 	const viaUpload = [];
 	for (const mount of files) {
@@ -2195,11 +2203,16 @@ async function materializeProfileFileMounts(box, files, options = {}) {
 				});
 				continue;
 			}
-			viaFileApi.push({
+			const write = {
 				path: target,
 				content,
 				...mode !== void 0 ? { mode } : {}
+			};
+			if (mount.path.startsWith("~/")) viaHomeFileApi.push({
+				mount,
+				...write
 			});
+			else viaFileApi.push(write);
 		} else viaExec.push({
 			mount,
 			content
@@ -2213,6 +2226,24 @@ async function materializeProfileFileMounts(box, files, options = {}) {
 	} catch (err) {
 		throw new Error("materializeProfileFileMounts: file API batch write failed", { cause: err });
 	}
+	let homeFilesWrittenByApi = 0;
+	if (viaHomeFileApi.length > 0) try {
+		await fs?.writeMany(viaHomeFileApi.map(({ path, content, mode }) => ({
+			path,
+			content,
+			...mode !== void 0 ? { mode } : {}
+		})), {
+			paceMs,
+			maxRetries
+		});
+		homeFilesWrittenByApi = viaHomeFileApi.length;
+	} catch (err) {
+		if (!isFileApiRootOnlyError(err)) throw new Error("materializeProfileFileMounts: home file API batch write failed", { cause: err });
+		viaExec.push(...viaHomeFileApi.map(({ mount, content }) => ({
+			mount,
+			content
+		})));
+	}
 	if (viaUpload.length > 0) {
 		if (typeof uploadDataFn !== "function") throw new Error("materializeProfileFileMounts: viaUpload entries exist but fs.uploadData is unavailable");
 		for (const item of viaUpload) try {
@@ -2232,8 +2263,8 @@ async function materializeProfileFileMounts(box, files, options = {}) {
 		maxRetries
 	}, execState);
 	return {
-		written: viaFileApi.length + viaExec.length + viaUpload.length,
-		viaFileApi: viaFileApi.length,
+		written: viaFileApi.length + homeFilesWrittenByApi + viaExec.length + viaUpload.length,
+		viaFileApi: viaFileApi.length + homeFilesWrittenByApi,
 		viaExec: viaExec.length,
 		viaUpload: viaUpload.length
 	};

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { M as CreateSandboxOptions, Mr as SandboxStatus, Tr as SandboxInfo, bn as PromptInputPart, dn as PreviewLinkWaitOptions, in as NetworkConfig, ln as PreviewLinkInfo, nt as ExecResult, qn as SandboxConfig, tt as ExecOptions, un as PreviewLinkManager } from "./types-BoFtM2qv.js";
-import { a as WorkspaceImagePublishResult, i as WorkspaceImagePublishRequestOptions, n as SandboxInstance, o as WorkspaceImages, r as WorkspaceImagePublishInput } from "./sandbox-DT-VEfRp.js";
-import { i as Sandbox } from "./client-XDKeWJx6.js";
+import { M as CreateSandboxOptions, Mr as SandboxStatus, Tr as SandboxInfo, bn as PromptInputPart, dn as PreviewLinkWaitOptions, in as NetworkConfig, ln as PreviewLinkInfo, nt as ExecResult, qn as SandboxConfig, tt as ExecOptions, un as PreviewLinkManager } from "./types-C7mxmAil.js";
+import { a as WorkspaceImagePublishResult, i as WorkspaceImagePublishRequestOptions, n as SandboxInstance, o as WorkspaceImages, r as WorkspaceImagePublishInput } from "./sandbox-BEsoO8Ux.js";
+import { i as Sandbox } from "./client-BCwkh2kj.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages };

package/dist/core.js

@@ -1,4 +1,4 @@
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-Bf-A-4SA.js";
-import { n as Sandbox } from "./client-aY82P7Ho.js";
-import { i as WorkspaceImages, t as SandboxInstance } from "./sandbox-Clsvx8OO.js";
+import { n as Sandbox } from "./client-CPSJHnNS.js";
+import { i as WorkspaceImages, t as SandboxInstance } from "./sandbox-DVwPvdG_.js";
 export { AuthError, CapabilityError, FileWriteConflictError, NetworkError, NotFoundError, PartialFailureError, QuotaError, Sandbox, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages };

package/dist/{index-CnsaBf_U.d.ts → index-CpRq1GR5.d.ts}

@@ -1,5 +1,5 @@
-import { M as CreateSandboxOptions } from "./types-BoFtM2qv.js";
-import { n as SandboxInstance, t as HttpClient } from "./sandbox-DT-VEfRp.js";
+import { M as CreateSandboxOptions } from "./types-C7mxmAil.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-BEsoO8Ux.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as EventStreamOptions, $i as BatchTaskUsage, $n as SandboxFleetCostEstimate, $r as SessionBackendCredentials, $t as ListSandboxFleetOptions, Ai as TurnDriveResult, An as PublishPublicTemplateVersionOptions, Ar as SandboxResources, At as GitCommit, B as DownloadOptions, Bi as TERMINAL_WS_ECHO_SUBPROTOCOL, Bn as RolloutOptions, Br as SandboxTraceEvent, Bt as GpuLeaseProviderName, Ci as TeeAttestationOptions, Cn as ProvisionEvent, Cr as SandboxFleetWorkspaceSnapshotResult, D as CreateIntelligenceReportOptions, Di as TeePublicKeyResponse, Dn as PublicTemplateInfo, Dr as SandboxPortBinding, Dt as GPU_LEASE_PROVIDER_NAMES, E as CreateGpuLeaseOptions, Ei as TeePublicKey, En as ProvisionStep, Er as SandboxIntelligenceEnvelope, F as DeleteOptions, Fi as WaitForOptions, Fn as RenameOptions, Fr as SandboxTerminalInfo, Ft as GpuLeaseBilling, G as DriverType, Gi as TerminalStreamError, Gn as SSHCommandDescriptor, Gr as ScopedTokenScope, Gt as IntelligenceReport, H as DriveTurnOptions, Hi as TerminalReadyInfo, Hn as RolloutStartResult, Hr as SandboxTraceOptions, Ht as HostAgentDriverConfig, I as DevServerInfo, Ii as WaitForRolloutOptions, Ir as SandboxTerminalManager, It as GpuLeaseCommandResult, J as EffectiveBackendProfile, Ji as TerminalStreamToken, Jn as SandboxConnection, Jr as SecretInfo, Jt as IntelligenceReportSubjectType, Ki as TerminalStreamHandlers, Kn as SSHCredentials, Kr as SearchMatch, Kt as IntelligenceReportBudget, L as DirectoryPermission, Li as WriteFileOptions, Lr as SandboxTerminalRequestOptions, Lt as GpuLeaseExecOptions, M as CreateSandboxOptions, Mi as UploadOptions, Mn as ReapExpiredSandboxFleetsResult, Mr as SandboxStatus, Mt as GitDiff, N as CreateSessionOptions, Ni as UploadProgress, Nn as ReconcileSandboxFleetsOptions, Nr as SandboxTerminalAttachOptions, Nt as GitStatus, O as CreateRequestOptions, Oi as TokenRefreshHandler, On as PublicTemplateVersionInfo, Or as SandboxPortPreviewLink, Ot as GitAuth, P as CreateTaskSessionOptions, Pi as UsageInfo, Pn as ReconcileSandboxFleetsResult, Pr as SandboxTerminalCreateOptions, Pt as GpuLease, Q as EnsureDevServerOptions, Qi as BatchSidecarGroup, Qn as SandboxFleetArtifactSpec, Qr as SentSessionMessage, Qt as ListOptions, R as DispatchPromptOptions, Ri as WriteManyFile, Rn as Rollout, Rr as SandboxTerminals, Rt as GpuLeaseExecResult, Si as TaskSessionProfile, Sn as PromptResult, Sr as SandboxFleetWorkspaceRestoreResult, St as FleetExecDispatchOptions, T as CompletedTurnResult, Ti as TeeAttestationResponse, Tn as ProvisionStatus, Tr as SandboxInfo, Tt as FleetPromptDispatchOptions, U as DriverConfig, Ui as TerminalStream, Un as RolloutStatus, Ur as SandboxUser, Ut as HostAgentRuntimeBackend, V as DownloadProgress, Vi as TerminalExitInfo, Vn as RolloutScorer, Vr as SandboxTraceExport, Vt as GpuLeaseStatus, W as DriverInfo, Wi as TerminalStreamAuthFormat, Wn as RolloutTurnPart, Wr as ScopedToken, Wt as InstalledTool, X as EgressManager, Xi as BatchEvent, Xn as SandboxEvent, Xr as SendSessionMessageOptions, Y as EffectiveBackendSource, Yi as BatchBackendStats, Yn as SandboxEnvironment, Yr as SecretsManager, Yt as IntelligenceReportWindow, Z as EgressPolicy, Zi as BatchEventDataMap, Zn as SandboxFleetArtifact, Zr as SendSessionMessageRequest, Zt as ListMessagesOptions, _ as BranchOptions, _i as SubscriptionInfo, _n as ProcessSignal, _r as SandboxFleetTraceExport, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, ai as SessionListOptions, an as NetworkManager, ar as SandboxFleetIntelligenceEnvelope, at as FileReadBatchResult, bi as TaskSessionFileChange, bn as PromptInputPart, br as SandboxFleetWorkspace, bt as FleetDriveTurnOutcome, c as BackendInfo, ci as SessionResultOptions, cn as PermissionsManager, cr as SandboxFleetMachineRecord, ct as FileRenameResult, d as BatchBackend, di as SnapshotOptions, dn as PreviewLinkWaitOptions, dr as SandboxFleetManifestMachine, dt as FileTreeOptions, ea as PublicBatchRunRequest, ei as SessionEventStreamOptions, en as ListSandboxOptions, er as SandboxFleetDispatchFailureClass, et as ExactProcessSpawnOptions, f as BatchResult, fi as SnapshotResult, fn as Process, fr as SandboxFleetOperationsSummary, ft as FileTreeResult, g as BatchTaskResult, gi as StorageConfig, gn as ProcessManager, gr as SandboxFleetTraceEvent, gt as FleetDispatchCancelResult, h as BatchTask, hi as StartupOperation, hn as ProcessLogEntry, hr as SandboxFleetTraceBundle, ht as FileWriteResult, i as AttachGpuLeaseOptions, ii as SessionInterruptOptions, in as NetworkConfig, ir as SandboxFleetInfo, it as FileReadBatchOptions, j as CreateSandboxFleetWithCoordinatorOptions, ji as UpdateUserOptions, jn as ReapExpiredSandboxFleetsOptions, jr as SandboxRuntimeHealth, jt as GitConfig, k as CreateSandboxFleetOptions, ki as TokenUsage, kn as PublishPublicTemplateOptions, kr as SandboxResourceUsage, kt as GitBranch, l as BackendManager, li as SessionStatus, ln as PreviewLinkInfo, lr as SandboxFleetMachineSpec, lt as FileSystem, m as BatchRunRequest, mi as StartupDiagnostics, mn as ProcessListOptions, mr as SandboxFleetToken, mt as FileUsageResult, n as AccessPolicyRule, na as parseBackendType, ni as SessionForkOptions, nn as MintScopedTokenOptions, nr as SandboxFleetDriverCapability, nt as ExecResult, o as BackendCapabilities, oi as SessionMessage, on as NonHostAgentDriverConfig, or as SandboxFleetMachine, ot as FileReadError, p as BatchRunOptions, pn as ProcessInfo, pr as SandboxFleetPolicy, pt as FileUsageOptions, q as EffectiveBackend, qi as TerminalStreamOptions, qn as SandboxConfig, qr as SearchOptions, qt as IntelligenceReportCompareTo, r as AddUserOptions, ri as SessionInfo, rn as MkdirOptions, rr as SandboxFleetDriverTimings, rt as FileInfo, s as BackendConfig, si as SessionMessageInputPart, sn as PermissionLevel, sr as SandboxFleetMachineMeteredUsage, st as FileReadResult, t as AcceleratorKind, ta as BackendType, ti as SessionFailureReason, tn as McpServerConfig, tr as SandboxFleetDispatchResponse, tt as ExecOptions, u as BackendStatus, ui as SnapshotInfo, un as PreviewLinkManager, ur as SandboxFleetManifest, ut as FileTreeFile, v as ChunkedUploadOptions, vi as TaskSessionChanges, vn as ProcessSpawnOptions, vr as SandboxFleetTraceOptions, vt as FleetDispatchResultBufferOptions, w as CommitTaskSessionOptions, wi as TeeAttestationReport, wn as ProvisionResult, wr as SandboxIdentity, wt as FleetMachineId, xi as TaskSessionInfo, xn as PromptOptions, xr as SandboxFleetWorkspaceReconcileResult, xt as FleetDriveTurnRequest, y as ChunkedUploadResult, yi as TaskSessionCommitResult, yn as ProcessStatus, yr as SandboxFleetUsage, yt as FleetDispatchStreamOptions, z as DispatchedSession, zi as WriteManyOptions, zn as RolloutChildResult, zr as SandboxTraceBundle, zt as GpuLeaseManager } from "./types-BoFtM2qv.js";
-import { A as SandboxMcpEndpoint, C as RespondToPermissionOptions, D as CONTROL_PLANE_MCP_SERVER_NAME, E as BuildSandboxMcpConfigOptions, M as buildControlPlaneMcpConfig, N as buildSandboxMcpConfig, O as SANDBOX_MCP_SERVER_NAME, S as InterruptResult, T as BuildControlPlaneMcpConfigOptions, _ as InteractiveAuthFile, a as WorkspaceImagePublishResult, b as InteractiveSessionInfo, c as TraceExportResult, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as InteractiveAttachOptions, h as SandboxSession, i as WorkspaceImagePublishRequestOptions, j as SandboxMcpServerEntry, k as SandboxMcpConfig, l as TraceExportSink, m as SandboxTaskSession, n as SandboxInstance, o as WorkspaceImages, p as toOtelJson, r as WorkspaceImagePublishInput, s as TraceExportFormat, u as buildTraceExportPayload, v as InteractiveSessionHandle, w as StartInteractiveOptions, x as InteractiveSessionStatus, y as InteractiveSessionHost } from "./sandbox-DT-VEfRp.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-XDKeWJx6.js";
+import { $ as EventStreamOptions, $i as BatchTaskUsage, $n as SandboxFleetCostEstimate, $r as SessionBackendCredentials, $t as ListSandboxFleetOptions, Ai as TurnDriveResult, An as PublishPublicTemplateVersionOptions, Ar as SandboxResources, At as GitCommit, B as DownloadOptions, Bi as TERMINAL_WS_ECHO_SUBPROTOCOL, Bn as RolloutOptions, Br as SandboxTraceEvent, Bt as GpuLeaseProviderName, Ci as TeeAttestationOptions, Cn as ProvisionEvent, Cr as SandboxFleetWorkspaceSnapshotResult, D as CreateIntelligenceReportOptions, Di as TeePublicKeyResponse, Dn as PublicTemplateInfo, Dr as SandboxPortBinding, Dt as GPU_LEASE_PROVIDER_NAMES, E as CreateGpuLeaseOptions, Ei as TeePublicKey, En as ProvisionStep, Er as SandboxIntelligenceEnvelope, F as DeleteOptions, Fi as WaitForOptions, Fn as RenameOptions, Fr as SandboxTerminalInfo, Ft as GpuLeaseBilling, G as DriverType, Gi as TerminalStreamError, Gn as SSHCommandDescriptor, Gr as ScopedTokenScope, Gt as IntelligenceReport, H as DriveTurnOptions, Hi as TerminalReadyInfo, Hn as RolloutStartResult, Hr as SandboxTraceOptions, Ht as HostAgentDriverConfig, I as DevServerInfo, Ii as WaitForRolloutOptions, Ir as SandboxTerminalManager, It as GpuLeaseCommandResult, J as EffectiveBackendProfile, Ji as TerminalStreamToken, Jn as SandboxConnection, Jr as SecretInfo, Jt as IntelligenceReportSubjectType, Ki as TerminalStreamHandlers, Kn as SSHCredentials, Kr as SearchMatch, Kt as IntelligenceReportBudget, L as DirectoryPermission, Li as WriteFileOptions, Lr as SandboxTerminalRequestOptions, Lt as GpuLeaseExecOptions, M as CreateSandboxOptions, Mi as UploadOptions, Mn as ReapExpiredSandboxFleetsResult, Mr as SandboxStatus, Mt as GitDiff, N as CreateSessionOptions, Ni as UploadProgress, Nn as ReconcileSandboxFleetsOptions, Nr as SandboxTerminalAttachOptions, Nt as GitStatus, O as CreateRequestOptions, Oi as TokenRefreshHandler, On as PublicTemplateVersionInfo, Or as SandboxPortPreviewLink, Ot as GitAuth, P as CreateTaskSessionOptions, Pi as UsageInfo, Pn as ReconcileSandboxFleetsResult, Pr as SandboxTerminalCreateOptions, Pt as GpuLease, Q as EnsureDevServerOptions, Qi as BatchSidecarGroup, Qn as SandboxFleetArtifactSpec, Qr as SentSessionMessage, Qt as ListOptions, R as DispatchPromptOptions, Ri as WriteManyFile, Rn as Rollout, Rr as SandboxTerminals, Rt as GpuLeaseExecResult, Si as TaskSessionProfile, Sn as PromptResult, Sr as SandboxFleetWorkspaceRestoreResult, St as FleetExecDispatchOptions, T as CompletedTurnResult, Ti as TeeAttestationResponse, Tn as ProvisionStatus, Tr as SandboxInfo, Tt as FleetPromptDispatchOptions, U as DriverConfig, Ui as TerminalStream, Un as RolloutStatus, Ur as SandboxUser, Ut as HostAgentRuntimeBackend, V as DownloadProgress, Vi as TerminalExitInfo, Vn as RolloutScorer, Vr as SandboxTraceExport, Vt as GpuLeaseStatus, W as DriverInfo, Wi as TerminalStreamAuthFormat, Wn as RolloutTurnPart, Wr as ScopedToken, Wt as InstalledTool, X as EgressManager, Xi as BatchEvent, Xn as SandboxEvent, Xr as SendSessionMessageOptions, Y as EffectiveBackendSource, Yi as BatchBackendStats, Yn as SandboxEnvironment, Yr as SecretsManager, Yt as IntelligenceReportWindow, Z as EgressPolicy, Zi as BatchEventDataMap, Zn as SandboxFleetArtifact, Zr as SendSessionMessageRequest, Zt as ListMessagesOptions, _ as BranchOptions, _i as SubscriptionInfo, _n as ProcessSignal, _r as SandboxFleetTraceExport, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, ai as SessionListOptions, an as NetworkManager, ar as SandboxFleetIntelligenceEnvelope, at as FileReadBatchResult, bi as TaskSessionFileChange, bn as PromptInputPart, br as SandboxFleetWorkspace, bt as FleetDriveTurnOutcome, c as BackendInfo, ci as SessionResultOptions, cn as PermissionsManager, cr as SandboxFleetMachineRecord, ct as FileRenameResult, d as BatchBackend, di as SnapshotOptions, dn as PreviewLinkWaitOptions, dr as SandboxFleetManifestMachine, dt as FileTreeOptions, ea as PublicBatchRunRequest, ei as SessionEventStreamOptions, en as ListSandboxOptions, er as SandboxFleetDispatchFailureClass, et as ExactProcessSpawnOptions, f as BatchResult, fi as SnapshotResult, fn as Process, fr as SandboxFleetOperationsSummary, ft as FileTreeResult, g as BatchTaskResult, gi as StorageConfig, gn as ProcessManager, gr as SandboxFleetTraceEvent, gt as FleetDispatchCancelResult, h as BatchTask, hi as StartupOperation, hn as ProcessLogEntry, hr as SandboxFleetTraceBundle, ht as FileWriteResult, i as AttachGpuLeaseOptions, ii as SessionInterruptOptions, in as NetworkConfig, ir as SandboxFleetInfo, it as FileReadBatchOptions, j as CreateSandboxFleetWithCoordinatorOptions, ji as UpdateUserOptions, jn as ReapExpiredSandboxFleetsOptions, jr as SandboxRuntimeHealth, jt as GitConfig, k as CreateSandboxFleetOptions, ki as TokenUsage, kn as PublishPublicTemplateOptions, kr as SandboxResourceUsage, kt as GitBranch, l as BackendManager, li as SessionStatus, ln as PreviewLinkInfo, lr as SandboxFleetMachineSpec, lt as FileSystem, m as BatchRunRequest, mi as StartupDiagnostics, mn as ProcessListOptions, mr as SandboxFleetToken, mt as FileUsageResult, n as AccessPolicyRule, na as parseBackendType, ni as SessionForkOptions, nn as MintScopedTokenOptions, nr as SandboxFleetDriverCapability, nt as ExecResult, o as BackendCapabilities, oi as SessionMessage, on as NonHostAgentDriverConfig, or as SandboxFleetMachine, ot as FileReadError, p as BatchRunOptions, pn as ProcessInfo, pr as SandboxFleetPolicy, pt as FileUsageOptions, q as EffectiveBackend, qi as TerminalStreamOptions, qn as SandboxConfig, qr as SearchOptions, qt as IntelligenceReportCompareTo, r as AddUserOptions, ri as SessionInfo, rn as MkdirOptions, rr as SandboxFleetDriverTimings, rt as FileInfo, s as BackendConfig, si as SessionMessageInputPart, sn as PermissionLevel, sr as SandboxFleetMachineMeteredUsage, st as FileReadResult, t as AcceleratorKind, ta as BackendType, ti as SessionFailureReason, tn as McpServerConfig, tr as SandboxFleetDispatchResponse, tt as ExecOptions, u as BackendStatus, ui as SnapshotInfo, un as PreviewLinkManager, ur as SandboxFleetManifest, ut as FileTreeFile, v as ChunkedUploadOptions, vi as TaskSessionChanges, vn as ProcessSpawnOptions, vr as SandboxFleetTraceOptions, vt as FleetDispatchResultBufferOptions, w as CommitTaskSessionOptions, wi as TeeAttestationReport, wn as ProvisionResult, wr as SandboxIdentity, wt as FleetMachineId, xi as TaskSessionInfo, xn as PromptOptions, xr as SandboxFleetWorkspaceReconcileResult, xt as FleetDriveTurnRequest, y as ChunkedUploadResult, yi as TaskSessionCommitResult, yn as ProcessStatus, yr as SandboxFleetUsage, yt as FleetDispatchStreamOptions, z as DispatchedSession, zi as WriteManyOptions, zn as RolloutChildResult, zr as SandboxTraceBundle, zt as GpuLeaseManager } from "./types-C7mxmAil.js";
+import { A as SandboxMcpEndpoint, C as RespondToPermissionOptions, D as CONTROL_PLANE_MCP_SERVER_NAME, E as BuildSandboxMcpConfigOptions, M as buildControlPlaneMcpConfig, N as buildSandboxMcpConfig, O as SANDBOX_MCP_SERVER_NAME, S as InterruptResult, T as BuildControlPlaneMcpConfigOptions, _ as InteractiveAuthFile, a as WorkspaceImagePublishResult, b as InteractiveSessionInfo, c as TraceExportResult, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as InteractiveAttachOptions, h as SandboxSession, i as WorkspaceImagePublishRequestOptions, j as SandboxMcpServerEntry, k as SandboxMcpConfig, l as TraceExportSink, m as SandboxTaskSession, n as SandboxInstance, o as WorkspaceImages, p as toOtelJson, r as WorkspaceImagePublishInput, s as TraceExportFormat, u as buildTraceExportPayload, v as InteractiveSessionHandle, w as StartInteractiveOptions, x as InteractiveSessionStatus, y as InteractiveSessionHost } from "./sandbox-BEsoO8Ux.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-BCwkh2kj.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-DtRFVx5U.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-Cp1KYanB.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-CnsaBf_U.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-CpRq1GR5.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -4051,7 +4051,8 @@ interface MaterializeProfileFileMountsOptions extends WriteManyOptions {
   execTimeoutMs?: number;
   /**
    * Absolute sandbox paths the file API may write directly. Relative paths are
-   * file API eligible when safe; `~/...` and other absolute paths use exec.
+   * file API eligible when safe. `~/...` resolves through the fixed agent home
+   * when that prefix is allowed. Other absolute paths use exec.
    */
   fileApiAbsolutePrefixes?: readonly string[];
 }

package/dist/index.js

@@ -1,9 +1,9 @@
 import { h as parseBackendType, m as backendTypeSchema, p as normalizeRuntimeBackendConfig } from "./runtime-api-BQii48NT.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-Bf-A-4SA.js";
-import { a as splitInlineProfileSkills, c as SandboxFleetClient, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, n as Sandbox, o as validateDeferredProfileFileMounts, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-aY82P7Ho.js";
-import { _ as buildTraceExportPayload, a as TERMINAL_WS_ECHO_SUBPROTOCOL, b as toOtelJson, c as SandboxTaskSession, d as applySandboxEventText, f as collectAgentFinalMessageText, h as isToolBearingEvent, i as WorkspaceImages, l as SandboxSession, m as getSandboxEventText, o as TerminalStream, p as collectAgentResponseText, s as TerminalStreamError, t as SandboxInstance, u as InteractiveSessionHandle, v as exportTraceBundle, x as parseSSEStream, y as otelTraceIdForTangleTrace } from "./sandbox-Clsvx8OO.js";
+import { a as splitInlineProfileSkills, c as SandboxFleetClient, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, n as Sandbox, o as validateDeferredProfileFileMounts, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-CPSJHnNS.js";
+import { _ as buildTraceExportPayload, a as TERMINAL_WS_ECHO_SUBPROTOCOL, b as toOtelJson, c as SandboxTaskSession, d as applySandboxEventText, f as collectAgentFinalMessageText, h as isToolBearingEvent, i as WorkspaceImages, l as SandboxSession, m as getSandboxEventText, o as TerminalStream, p as collectAgentResponseText, s as TerminalStreamError, t as SandboxInstance, u as InteractiveSessionHandle, v as exportTraceBundle, x as parseSSEStream, y as otelTraceIdForTangleTrace } from "./sandbox-DVwPvdG_.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CVdLf_4n.js";
-import { t as TangleSandboxClient } from "./tangle-hntZfGZ7.js";
+import { t as TangleSandboxClient } from "./tangle-CNd36MoA.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-import { Dr as SandboxPortBinding, Fn as RenameOptions, Fr as SandboxTerminalInfo, Ir as SandboxTerminalManager, Li as WriteFileOptions, Lr as SandboxTerminalRequestOptions, N as CreateSessionOptions, Ni as UploadProgress, P as CreateTaskSessionOptions, Pr as SandboxTerminalCreateOptions, Qr as SentSessionMessage, Xr as SendSessionMessageOptions, Zr as SendSessionMessageRequest, Zt as ListMessagesOptions, at as FileReadBatchResult, ct as FileRenameResult, dt as FileTreeOptions, ft as FileTreeResult, ht as FileWriteResult, it as FileReadBatchOptions, jr as SandboxRuntimeHealth, mt as FileUsageResult, oi as SessionMessage, pt as FileUsageOptions, ri as SessionInfo, v as ChunkedUploadOptions, vi as TaskSessionChanges, w as CommitTaskSessionOptions, xi as TaskSessionInfo, y as ChunkedUploadResult, yi as TaskSessionCommitResult } from "./types-BoFtM2qv.js";
+import { Dr as SandboxPortBinding, Fn as RenameOptions, Fr as SandboxTerminalInfo, Ir as SandboxTerminalManager, Li as WriteFileOptions, Lr as SandboxTerminalRequestOptions, N as CreateSessionOptions, Ni as UploadProgress, P as CreateTaskSessionOptions, Pr as SandboxTerminalCreateOptions, Qr as SentSessionMessage, Xr as SendSessionMessageOptions, Zr as SendSessionMessageRequest, Zt as ListMessagesOptions, at as FileReadBatchResult, ct as FileRenameResult, dt as FileTreeOptions, ft as FileTreeResult, ht as FileWriteResult, it as FileReadBatchOptions, jr as SandboxRuntimeHealth, mt as FileUsageResult, oi as SessionMessage, pt as FileUsageOptions, ri as SessionInfo, v as ChunkedUploadOptions, vi as TaskSessionChanges, w as CommitTaskSessionOptions, xi as TaskSessionInfo, y as ChunkedUploadResult, yi as TaskSessionCommitResult } from "./types-C7mxmAil.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 
 //#region src/lib/chunked-upload.d.ts

package/dist/{sandbox-DT-VEfRp.d.ts → sandbox-BEsoO8Ux.d.ts}

@@ -1,4 +1,4 @@
-import { $ as EventStreamOptions, Ai as TurnDriveResult, At as GitCommit, Bn as RolloutOptions, Ci as TeeAttestationOptions, Cn as ProvisionEvent, Di as TeePublicKeyResponse, Dr as SandboxPortBinding, Fi as WaitForOptions, Gn as SSHCommandDescriptor, Gt as IntelligenceReport, H as DriveTurnOptions, Hn as RolloutStartResult, Hr as SandboxTraceOptions, Ii as WaitForRolloutOptions, In as RestoreSnapshotOptions, Jn as SandboxConnection, K as DurablePlan, Ki as TerminalStreamHandlers, Kn as SSHCredentials, Kr as SearchMatch, Kt as IntelligenceReportBudget, Li as WriteFileOptions, Ln as ResumeOptions, Mr as SandboxStatus, Mt as GitDiff, N as CreateSessionOptions, Nr as SandboxTerminalAttachOptions, Nt as GitStatus, P as CreateTaskSessionOptions, Pt as GpuLease, Qr as SentSessionMessage, R as DispatchPromptOptions, Ri as WriteManyFile, Rn as Rollout, Rr as SandboxTerminals, S as CodeLanguage, Sn as PromptResult, T as CompletedTurnResult, Ti as TeeAttestationResponse, Tr as SandboxInfo, Ui as TerminalStream, W as DriverInfo, Wr as ScopedToken, Wt as InstalledTool, X as EgressManager, Xn as SandboxEvent, Xr as SendSessionMessageOptions, Xt as JsonValue, Yt as IntelligenceReportWindow, Zr as SendSessionMessageRequest, Zt as ListMessagesOptions, _ as BranchOptions, ai as SessionListOptions, an as NetworkManager, b as CodeExecutionOptions, bn as PromptInputPart, ci as SessionResultOptions, cn as PermissionsManager, di as SnapshotOptions, ei as SessionEventStreamOptions, fi as SnapshotResult, gn as ProcessManager, hr as SandboxFleetTraceBundle, ht as FileWriteResult, ii as SessionInterruptOptions, jr as SandboxRuntimeHealth, kr as SandboxResourceUsage, kt as GitBranch, l as BackendManager, lt as FileSystem, mi as StartupDiagnostics, ni as SessionForkOptions, nn as MintScopedTokenOptions, nt as ExecResult, oi as SessionMessage, qr as SearchOptions, qt as IntelligenceReportCompareTo, ri as SessionInfo, s as BackendConfig, ta as BackendType, tt as ExecOptions, ui as SnapshotInfo, un as PreviewLinkManager, vi as TaskSessionChanges, w as CommitTaskSessionOptions, wn as ProvisionResult, x as CodeExecutionResult, xi as TaskSessionInfo, xn as PromptOptions, yi as TaskSessionCommitResult, z as DispatchedSession, zi as WriteManyOptions, zr as SandboxTraceBundle, zt as GpuLeaseManager } from "./types-BoFtM2qv.js";
+import { $ as EventStreamOptions, Ai as TurnDriveResult, At as GitCommit, Bn as RolloutOptions, Ci as TeeAttestationOptions, Cn as ProvisionEvent, Di as TeePublicKeyResponse, Dr as SandboxPortBinding, Fi as WaitForOptions, Gn as SSHCommandDescriptor, Gt as IntelligenceReport, H as DriveTurnOptions, Hn as RolloutStartResult, Hr as SandboxTraceOptions, Ii as WaitForRolloutOptions, In as RestoreSnapshotOptions, Jn as SandboxConnection, K as DurablePlan, Ki as TerminalStreamHandlers, Kn as SSHCredentials, Kr as SearchMatch, Kt as IntelligenceReportBudget, Li as WriteFileOptions, Ln as ResumeOptions, Mr as SandboxStatus, Mt as GitDiff, N as CreateSessionOptions, Nr as SandboxTerminalAttachOptions, Nt as GitStatus, P as CreateTaskSessionOptions, Pt as GpuLease, Qr as SentSessionMessage, R as DispatchPromptOptions, Ri as WriteManyFile, Rn as Rollout, Rr as SandboxTerminals, S as CodeLanguage, Sn as PromptResult, T as CompletedTurnResult, Ti as TeeAttestationResponse, Tr as SandboxInfo, Ui as TerminalStream, W as DriverInfo, Wr as ScopedToken, Wt as InstalledTool, X as EgressManager, Xn as SandboxEvent, Xr as SendSessionMessageOptions, Xt as JsonValue, Yt as IntelligenceReportWindow, Zr as SendSessionMessageRequest, Zt as ListMessagesOptions, _ as BranchOptions, ai as SessionListOptions, an as NetworkManager, b as CodeExecutionOptions, bn as PromptInputPart, ci as SessionResultOptions, cn as PermissionsManager, di as SnapshotOptions, ei as SessionEventStreamOptions, fi as SnapshotResult, gn as ProcessManager, hr as SandboxFleetTraceBundle, ht as FileWriteResult, ii as SessionInterruptOptions, jr as SandboxRuntimeHealth, kr as SandboxResourceUsage, kt as GitBranch, l as BackendManager, lt as FileSystem, mi as StartupDiagnostics, ni as SessionForkOptions, nn as MintScopedTokenOptions, nt as ExecResult, oi as SessionMessage, qr as SearchOptions, qt as IntelligenceReportCompareTo, ri as SessionInfo, s as BackendConfig, ta as BackendType, tt as ExecOptions, ui as SnapshotInfo, un as PreviewLinkManager, vi as TaskSessionChanges, w as CommitTaskSessionOptions, wn as ProvisionResult, x as CodeExecutionResult, xi as TaskSessionInfo, xn as PromptOptions, yi as TaskSessionCommitResult, z as DispatchedSession, zi as WriteManyOptions, zr as SandboxTraceBundle, zt as GpuLeaseManager } from "./types-C7mxmAil.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 
 //#region src/mcp.d.ts
@@ -837,13 +837,13 @@ declare class SandboxInstance {
    * ```
    */
   write(path: string, content: string, options?: WriteFileOptions): Promise<FileWriteResult>;
+  private writeFileRequest;
+  private assertWritePreconditions;
+  private writeBatchRequest;
+  private writeManySequential;
   /**
-   * Write many files in one paced, retry-aware batch — see
-   * {@link FileSystem.writeMany}. Each file goes through {@link write}; a small
-   * pace between writes keeps a large corpus under the file-write rate limit,
-   * and transient failures (quota / server / network / timeout) retry with
-   * exponential backoff (honoring a server `retryAfterMs`). Fail-loud on the
-   * first file that cannot be written after its retries.
+   * Write many files through the runtime batch endpoint. Older runtimes that
+   * return 404 use the sequential write path with the same retry policy.
    */
   writeMany(files: WriteManyFile[], options?: WriteManyOptions): Promise<void>;
   /**

package/dist/{sandbox-Clsvx8OO.js → sandbox-DVwPvdG_.js}

@@ -1,4 +1,4 @@
-import { a as uploadChunked, c as combineAbortSignals, d as applyRequestedModel, f as assertCurrentBackendType, i as sessionHeaders, l as encodePromptForWire, n as normalizeSessionInfo, p as normalizeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi } from "./runtime-api-BQii48NT.js";
+import { a as uploadChunked, c as combineAbortSignals, d as applyRequestedModel, f as assertCurrentBackendType, i as sessionHeaders, l as encodePromptForWire, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi } from "./runtime-api-BQii48NT.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, l as SandboxError, m as parseErrorResponse, n as CapabilityError, o as NotFoundError, p as ValidationError, t as AuthError, u as ServerError } from "./errors-Bf-A-4SA.js";
 import { readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
 //#region src/lib/sse-parser.ts
@@ -1653,10 +1653,50 @@ function toStreamErrorEvent(err) {
 		}
 	};
 }
-const WRITE_MANY_DEFAULT_PACE_MS = 150;
+const WRITE_MANY_DEFAULT_PACE_MS = 0;
 const WRITE_MANY_DEFAULT_MAX_RETRIES = 4;
 const WRITE_MANY_RETRY_BASE_MS = 250;
 const WRITE_MANY_RETRY_MAX_MS = 2e3;
+const WRITE_MANY_BATCH_MAX_FILES = 100;
+const WRITE_MANY_BATCH_WIRE_BUDGET_BYTES = SANDBOX_PROXY_REQUEST_MAX_BYTES - 8 * 1024;
+function toWriteManyWireFile(file) {
+	return {
+		path: file.path,
+		content: file.content,
+		...file.mode !== void 0 ? { mode: file.mode } : {},
+		...file.encoding !== void 0 ? { encoding: file.encoding } : {},
+		...file.ifHash !== void 0 ? { expectedHash: file.ifHash } : {},
+		...file.ifAbsent !== void 0 ? { ifAbsent: file.ifAbsent } : {}
+	};
+}
+function serializeWriteManyBatch(files) {
+	return JSON.stringify({ files });
+}
+function splitWriteManyBatches(files) {
+	const batches = [];
+	let current = [];
+	for (const file of files) {
+		const candidate = [...current, file];
+		const candidateBody = serializeWriteManyBatch(candidate);
+		const exceedsCount = candidate.length > WRITE_MANY_BATCH_MAX_FILES;
+		const exceedsWireBudget = new TextEncoder().encode(candidateBody).byteLength > WRITE_MANY_BATCH_WIRE_BUDGET_BYTES;
+		if (current.length > 0 && (exceedsCount || exceedsWireBudget)) {
+			batches.push({
+				files: current,
+				body: serializeWriteManyBatch(current)
+			});
+			current = [file];
+		} else current = candidate;
+	}
+	if (current.length > 0) batches.push({
+		files: current,
+		body: serializeWriteManyBatch(current)
+	});
+	return batches;
+}
+function hasDuplicateWriteManyPaths(files) {
+	return new Set(files.map((file) => file.path)).size !== files.length;
+}
 function parseTextFileReadResponse(body) {
 	let payload;
 	try {
@@ -2210,9 +2250,12 @@ var SandboxInstance = class SandboxInstance {
 	* ```
 	*/
 	async write(path, content, options) {
+		await this.ensureRunning();
+		return this.writeFileRequest(path, content, options);
+	}
+	async writeFileRequest(path, content, options) {
 		const params = new URLSearchParams();
 		appendSessionIdQuery(params, options?.sessionId);
-		await this.ensureRunning();
 		const query = params.toString();
 		const response = await this.runtimeFetch(`/files/write${query ? `?${query}` : ""}`, {
 			method: "POST",
@@ -2230,27 +2273,65 @@ var SandboxInstance = class SandboxInstance {
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 		const data = await response.json();
-		if ([...options?.ifHash !== void 0 ? ["ifHash"] : [], ...options?.ifAbsent ? ["ifAbsent"] : []].some((precondition) => !data.data?.preconditionsApplied?.includes(precondition))) throw new CapabilityError("sidecar does not support write preconditions");
 		if (!data.data) throw new ServerError("Invalid file write response: missing data", 502);
+		this.assertWritePreconditions(data.data, {
+			expectedHash: options?.ifHash,
+			ifAbsent: options?.ifAbsent
+		});
 		return data.data;
 	}
-	/**
-	* Write many files in one paced, retry-aware batch — see
-	* {@link FileSystem.writeMany}. Each file goes through {@link write}; a small
-	* pace between writes keeps a large corpus under the file-write rate limit,
-	* and transient failures (quota / server / network / timeout) retry with
-	* exponential backoff (honoring a server `retryAfterMs`). Fail-loud on the
-	* first file that cannot be written after its retries.
-	*/
-	async writeMany(files, options = {}) {
-		const paceMs = options.paceMs ?? WRITE_MANY_DEFAULT_PACE_MS;
-		const maxRetries = options.maxRetries ?? WRITE_MANY_DEFAULT_MAX_RETRIES;
+	assertWritePreconditions(result, requested) {
+		if ([...requested.expectedHash !== void 0 ? ["ifHash"] : [], ...requested.ifAbsent ? ["ifAbsent"] : []].some((precondition) => !result.preconditionsApplied?.includes(precondition))) throw new CapabilityError("sidecar does not support write preconditions");
+	}
+	async writeBatchRequest(files, body) {
+		const response = await this.runtimeFetch("/files/write-batch", {
+			method: "POST",
+			body
+		});
+		if (response.status === 404) return false;
+		if (!response.ok) {
+			const errorBody = await response.text();
+			throw parseErrorResponse(response.status, errorBody, {
+				method: "POST",
+				path: "/files/write-batch"
+			}, response.headers);
+		}
+		const payload = await response.json().catch(() => null);
+		if (!payload?.data?.files || typeof payload.data.files !== "object") throw new ServerError("Invalid file batch write response: missing data.files", 502);
+		for (const file of files) {
+			const result = payload.data.files[file.path];
+			if (!result || typeof result !== "object") throw new ServerError(`Invalid file batch write response: missing result for ${file.path}`, 502);
+			if (result.success === false) {
+				if (typeof result.status !== "number" || typeof result.error !== "string" && (typeof result.error !== "object" || result.error === null)) throw new ServerError(`Invalid file batch write failure for ${file.path}`, 502);
+				throw parseErrorResponse(result.status, JSON.stringify({
+					success: false,
+					error: result.error
+				}), {
+					method: "POST",
+					path: "/files/write-batch"
+				}, response.headers);
+			}
+			if (result.success !== true || typeof result.path !== "string" || typeof result.hash !== "string" || typeof result.size !== "number" || typeof result.mtime !== "number" || result.preconditionsApplied !== void 0 && (!Array.isArray(result.preconditionsApplied) || !result.preconditionsApplied.every((value) => value === "ifHash" || value === "ifAbsent"))) throw new ServerError(`Invalid file batch write result for ${file.path}`, 502);
+			this.assertWritePreconditions({
+				path: result.path,
+				hash: result.hash,
+				size: result.size,
+				mtime: result.mtime,
+				...result.preconditionsApplied !== void 0 ? { preconditionsApplied: result.preconditionsApplied } : {}
+			}, {
+				expectedHash: file.expectedHash,
+				ifAbsent: file.ifAbsent
+			});
+		}
+		return true;
+	}
+	async writeManySequential(files, paceMs, maxRetries) {
 		let started = false;
 		for (const file of files) for (let attempt = 0;; attempt++) {
 			if (started && paceMs > 0) await delay(paceMs);
 			started = true;
 			try {
-				await this.write(file.path, file.content, {
+				await this.writeFileRequest(file.path, file.content, {
 					mode: file.mode,
 					encoding: file.encoding,
 					ifHash: file.ifHash,
@@ -2268,6 +2349,29 @@ var SandboxInstance = class SandboxInstance {
 		}
 	}
 	/**
+	* Write many files through the runtime batch endpoint. Older runtimes that
+	* return 404 use the sequential write path with the same retry policy.
+	*/
+	async writeMany(files, options = {}) {
+		if (files.length === 0) return;
+		const paceMs = options.paceMs ?? WRITE_MANY_DEFAULT_PACE_MS;
+		const maxRetries = options.maxRetries ?? WRITE_MANY_DEFAULT_MAX_RETRIES;
+		await this.ensureRunning();
+		if (hasDuplicateWriteManyPaths(files)) {
+			await this.writeManySequential(files, paceMs, maxRetries);
+			return;
+		}
+		const batches = splitWriteManyBatches(files.map(toWriteManyWireFile));
+		for (const [index, batch] of batches.entries()) {
+			if (index > 0 && paceMs > 0) await delay(paceMs);
+			if (!await this.writeBatchRequest(batch.files, batch.body)) {
+				if (index > 0) throw new ServerError("Runtime removed file batch support during writeMany", 502);
+				await this.writeManySequential(files, paceMs, maxRetries);
+				return;
+			}
+		}
+	}
+	/**
 	* Send a prompt to the agent running in the sandbox.
 	* Returns the complete response after the agent finishes.
 	*/
@@ -5047,8 +5151,11 @@ var SandboxInstance = class SandboxInstance {
 		this.assertFilesystemIncarnationReady();
 		const url = `/v1/sandboxes/${encodeURIComponent(this.id)}/runtime${path}`;
 		try {
-			if (fetchOptions) return await this.client.fetch(url, options, fetchOptions);
-			return options ? await this.client.fetch(url, options) : await this.client.fetch(url);
+			let response;
+			if (fetchOptions) response = await this.client.fetch(url, options, fetchOptions);
+			else response = options ? await this.client.fetch(url, options) : await this.client.fetch(url);
+			if (response.ok) sandboxStatusObservedAt.set(this, Date.now());
+			return response;
 		} catch (err) {
 			throw new NetworkError(`Failed to connect to sandbox: ${err instanceof Error ? err.message : String(err)}`, err instanceof Error ? err : void 0, {
 				endpoint: path,

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-CnsaBf_U.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-CpRq1GR5.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-hntZfGZ7.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-CNd36MoA.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-hntZfGZ7.js → tangle-CNd36MoA.js}

@@ -1,5 +1,5 @@
 import { m as parseErrorResponse } from "./errors-Bf-A-4SA.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-Clsvx8OO.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-DVwPvdG_.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-BoFtM2qv.d.ts → types-C7mxmAil.d.ts}

@@ -5911,10 +5911,9 @@ interface WriteFileOptions {
 }
 /** Options for {@link FileSystem.writeMany}. */
 interface WriteManyOptions {
-  /** Delay between writes (ms) to stay under the file-write rate limit.
-   *  Default 150; 0 disables pacing. */
+  /** Delay between batch requests or compatibility writes. Default 0. */
   paceMs?: number;
-  /** Max retries per file on a transient error before failing loud. Default 4. */
+  /** Max retries per compatibility write on a transient error. Default 4. */
   maxRetries?: number;
 }
 interface FileSystem {
@@ -5950,16 +5949,16 @@ interface FileSystem {
    */
   write(path: string, content: string, options?: WriteFileOptions): Promise<FileWriteResult>;
   /**
-   * Write many files in one paced, retry-aware batch.
+   * Write many files through bounded runtime batch requests.
    *
    * For materializing a large file corpus (skills, tool scripts, config) into
-   * the sandbox without tripping the file-write rate limit. Each file goes
-   * through the same `/files/write` endpoint as {@link FileSystem.write}, with a
-   * small pace between writes and exponential-backoff retry on transient errors
-   * (quota / server / network / timeout, honoring a server `retryAfterMs`).
-   * Fail-loud: the first file that cannot be written after its retries throws,
-   * and the rest are not attempted. Relative paths resolve from the workspace
-   * root. Pass `mode: 0o755` on files that should be executable.
+   * the sandbox without one network round trip per file. The SDK splits large
+   * corpora by runtime count and gateway wire limits. An older runtime that
+   * returns 404 uses sequential `/files/write` requests with retry. Batch writes
+   * are not atomic. A per-file failure throws after the runtime reports all
+   * results for that request, so sibling files can already be written. Relative
+   * paths resolve from the workspace root. Pass `mode: 0o755` on executable
+   * files.
    *
    * @example
    * ```typescript

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.19.4",
+  "version": "0.19.5",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",
@@ -87,8 +87,8 @@
     "url": "https://github.com/tangle-network/agent-dev-container/issues"
   },
   "dependencies": {
-    "@tangle-network/agent-core": "0.5.4",
-    "@tangle-network/agent-interface": "0.46.1",
+    "@tangle-network/agent-core": "0.6.0",
+    "@tangle-network/agent-interface": "0.47.0",
     "zod": "4.4.3"
   },
   "peerDependencies": {