@tangle-network/sandbox 0.22.0 → 0.23.0-develop.20260814092444.5f93bc1

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, x as CodeExecutionResult } from "../types-KcG-gz1O.js";
-import { n as SandboxInstance } from "../sandbox-DqA_HkI0.js";
-import { i as Sandbox } from "../client-DZA6-Gwg.js";
+import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, x as CodeExecutionResult } from "../types-Dpj6Unaq.js";
+import { n as SandboxInstance } from "../sandbox-S1ayJN7d.js";
+import { i as Sandbox } from "../client-QSo4goVc.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-CV2xqPAw.js → client-CLn6Tzx8.js}

@@ -1,6 +1,6 @@
 import { c as combineAbortSignals, d as applyRequestedModel, f as assertCurrentBackendType, l as encodePromptForWire, m as backendTypeSchema, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, u as encodeTextForWire } from "./runtime-api-Co-Ow_VR.js";
 import { a as NetworkError, f as TimeoutError, l as SandboxError, m as parseErrorResponse, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-D2aWy99l.js";
-import { g as normalizeConnection, n as createSandboxInstanceFromResponse, r as normalizeStartupDiagnostics, v as exportTraceBundle, x as parseSSEStream } from "./sandbox-EcY9ibhA.js";
+import { S as parseSSEStream, _ as normalizeConnection, i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt, y as exportTraceBundle } from "./sandbox-D2wREqmA.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region ../../../packages/runtime-contracts/dist/git-policy.js
@@ -3100,7 +3100,8 @@ var Sandbox = class {
 			expiresAt: data.expiresAt ? new Date(data.expiresAt) : void 0,
 			error: data.error,
 			gpuLease: data.gpuLease,
-			startupDiagnostics: normalizeStartupDiagnostics(data.startupDiagnostics) ?? void 0
+			startupDiagnostics: normalizeStartupDiagnostics(data.startupDiagnostics) ?? void 0,
+			createReceipt: normalizeSandboxCreateReceipt(data.createReceipt) ?? void 0
 		};
 	}
 	_tokenRefreshHandlers = /* @__PURE__ */ new Set();

package/dist/{client-DZA6-Gwg.d.ts → client-QSo4goVc.d.ts}

@@ -1,5 +1,5 @@
-import { $n as SandboxFleetCostEstimate, $t as ListSandboxFleetOptions, A as CreateSandboxFleetTokenOptions, An as PublishPublicTemplateVersionOptions, Cr as SandboxFleetWorkspaceSnapshotResult, Ct as FleetExecDispatchResult, D as CreateIntelligenceReportOptions, Dn as PublicTemplateInfo, Et as FleetPromptDispatchResult, Fi as UsageInfo, Gt as IntelligenceReport, Kt as IntelligenceReportBudget, M as CreateSandboxOptions, Mn as ReapExpiredSandboxFleetsResult, Nn as ReconcileSandboxFleetsOptions, O as CreateRequestOptions, On as PublicTemplateVersionInfo, Pn as ReconcileSandboxFleetsResult, Qn as SandboxFleetArtifactSpec, Sn as PromptResult, Sr as SandboxFleetWorkspaceRestoreResult, St as FleetExecDispatchOptions, Tr as SandboxInfo, Tt as FleetPromptDispatchOptions, Xr as SecretsManager, Yn as SandboxEnvironment, Yt as IntelligenceReportWindow, Zi as BatchEvent, Zn as SandboxFleetArtifact, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, bn as PromptInputPart, bt as FleetDriveTurnOutcome, cr as SandboxFleetMachineRecord, en as ListSandboxOptions, f as BatchResult, fr as SandboxFleetOperationsSummary, gt as FleetDispatchCancelResult, hr as SandboxFleetTraceBundle, ir as SandboxFleetInfo, j as CreateSandboxFleetWithCoordinatorOptions, jn as ReapExpiredSandboxFleetsOptions, k as CreateSandboxFleetOptions, ki as TokenRefreshHandler, kn as PublishPublicTemplateOptions, m as BatchRunRequest, mi as SshKeysManager, mr as SandboxFleetToken, nr as SandboxFleetDriverCapability, nt as ExecResult, p as BatchRunOptions, qn as SandboxConfig, qt as IntelligenceReportCompareTo, tr as SandboxFleetDispatchResponse, tt as ExecOptions, ur as SandboxFleetManifest, vi as SubscriptionInfo, vr as SandboxFleetTraceOptions, vt as FleetDispatchResultBufferOptions, wr as SandboxIdentity, wt as FleetMachineId, xn as PromptOptions, xr as SandboxFleetWorkspaceReconcileResult, xt as FleetDriveTurnRequest, yr as SandboxFleetUsage, yt as FleetDispatchStreamOptions } from "./types-KcG-gz1O.js";
-import { c as TraceExportResult, l as TraceExportSink, n as SandboxInstance, t as HttpClient } from "./sandbox-DqA_HkI0.js";
+import { $r as SecretsManager, A as CreateSandboxFleetTokenOptions, An as PublishPublicTemplateOptions, Cn as PromptResult, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Dr as SandboxIdentity, Dt as FleetPromptDispatchResult, Er as SandboxFleetWorkspaceSnapshotResult, Et as FleetPromptDispatchOptions, Fn as ReconcileSandboxFleetsResult, Jn as SandboxConfig, Jt as IntelligenceReportCompareTo, Kt as IntelligenceReport, M as CreateSandboxOptions, Mi as TokenRefreshHandler, Mn as ReapExpiredSandboxFleetsOptions, Nn as ReapExpiredSandboxFleetsResult, O as CreateRequestOptions, On as PublicTemplateInfo, Or as SandboxInfo, Pn as ReconcileSandboxFleetsOptions, Qn as SandboxEnvironment, Ri as UsageInfo, Sn as PromptOptions, Sr as SandboxFleetUsage, St as FleetDriveTurnRequest, Tr as SandboxFleetWorkspaceRestoreResult, Tt as FleetMachineId, Xt as IntelligenceReportWindow, _i as SshKeysManager, _r as SandboxFleetToken, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetDriverCapability, bt as FleetDispatchStreamOptions, dr as SandboxFleetMachineRecord, ea as BatchEvent, en as ListSandboxFleetOptions, er as SandboxFleetArtifact, f as BatchResult, hr as SandboxFleetOperationsSummary, ir as SandboxFleetDispatchResponse, j as CreateSandboxFleetWithCoordinatorOptions, jn as PublishPublicTemplateVersionOptions, k as CreateSandboxFleetOptions, kn as PublicTemplateVersionInfo, m as BatchRunRequest, nr as SandboxFleetCostEstimate, nt as ExecOptions, p as BatchRunOptions, pr as SandboxFleetManifest, qt as IntelligenceReportBudget, rt as ExecResult, sr as SandboxFleetInfo, tn as ListSandboxOptions, tr as SandboxFleetArtifactSpec, vr as SandboxFleetTraceBundle, vt as FleetDispatchResultBuffer, wr as SandboxFleetWorkspaceReconcileResult, wt as FleetExecDispatchResult, xi as SubscriptionInfo, xn as PromptInputPart, xr as SandboxFleetTraceOptions, xt as FleetDriveTurnOutcome, yt as FleetDispatchResultBufferOptions } from "./types-Dpj6Unaq.js";
+import { c as TraceExportResult, l as TraceExportSink, n as SandboxInstance, t as HttpClient } from "./sandbox-S1ayJN7d.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { M as CreateSandboxOptions, Nr as SandboxStatus, Tr as SandboxInfo, bn as PromptInputPart, dn as PreviewLinkWaitOptions, in as NetworkConfig, ln as PreviewLinkInfo, nt as ExecResult, qn as SandboxConfig, tt as ExecOptions, un as PreviewLinkManager } from "./types-KcG-gz1O.js";
-import { a as WorkspaceImagePublishResult, i as WorkspaceImagePublishRequestOptions, n as SandboxInstance, o as WorkspaceImages, r as WorkspaceImagePublishInput } from "./sandbox-DqA_HkI0.js";
-import { i as Sandbox } from "./client-DZA6-Gwg.js";
+import { Ir as SandboxStatus, Jn as SandboxConfig, M as CreateSandboxOptions, Or as SandboxInfo, an as NetworkConfig, dn as PreviewLinkManager, fn as PreviewLinkWaitOptions, nt as ExecOptions, rt as ExecResult, un as PreviewLinkInfo, xn as PromptInputPart } from "./types-Dpj6Unaq.js";
+import { a as WorkspaceImagePublishResult, i as WorkspaceImagePublishRequestOptions, n as SandboxInstance, o as WorkspaceImages, r as WorkspaceImagePublishInput } from "./sandbox-S1ayJN7d.js";
+import { i as Sandbox } from "./client-QSo4goVc.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages };

package/dist/core.js

@@ -1,4 +1,4 @@
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-D2aWy99l.js";
-import { n as Sandbox } from "./client-CV2xqPAw.js";
-import { i as WorkspaceImages, t as SandboxInstance } from "./sandbox-EcY9ibhA.js";
+import { n as Sandbox } from "./client-CLn6Tzx8.js";
+import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-D2wREqmA.js";
 export { AuthError, CapabilityError, FileWriteConflictError, NetworkError, NotFoundError, PartialFailureError, QuotaError, Sandbox, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages };

package/dist/{index-D8gFjIat.d.ts → index-BBZKkva-.d.ts}

@@ -1,5 +1,5 @@
-import { M as CreateSandboxOptions } from "./types-KcG-gz1O.js";
-import { n as SandboxInstance, t as HttpClient } from "./sandbox-DqA_HkI0.js";
+import { M as CreateSandboxOptions } from "./types-Dpj6Unaq.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-S1ayJN7d.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as EventStreamOptions, $i as BatchSidecarGroup, $n as SandboxFleetCostEstimate, $r as SentSessionMessage, $t as ListSandboxFleetOptions, Ai as TokenUsage, An as PublishPublicTemplateVersionOptions, Ar as SandboxResources, At as GitCommit, B as DownloadOptions, Bi as WriteManyOptions, Bn as RolloutOptions, Br as SandboxTraceBundle, Bt as GpuLeaseProviderName, Ci as TaskSessionProfile, Cn as ProvisionEvent, Cr as SandboxFleetWorkspaceSnapshotResult, D as CreateIntelligenceReportOptions, Di as TeePublicKey, Dn as PublicTemplateInfo, Dr as SandboxPortBinding, Dt as GPU_LEASE_PROVIDER_NAMES, E as CreateGpuLeaseOptions, Ei as TeeAttestationResponse, En as ProvisionStep, Er as SandboxIntelligenceEnvelope, F as DeleteOptions, Fi as UsageInfo, Fn as RenameOptions, Fr as SandboxTerminalCreateOptions, Ft as GpuLeaseBilling, G as DriverType, Gi as TerminalStreamAuthFormat, Gn as SSHCommandDescriptor, Gr as ScopedToken, Gt as IntelligenceReport, H as DriveTurnOptions, Hi as TerminalExitInfo, Hn as RolloutStartResult, Hr as SandboxTraceExport, Ht as HostAgentDriverConfig, I as DevServerInfo, Ii as WaitForOptions, Ir as SandboxTerminalInfo, It as GpuLeaseCommandResult, J as EffectiveBackendProfile, Ji as TerminalStreamOptions, Jn as SandboxConnection, Jr as SearchOptions, Jt as IntelligenceReportSubjectType, Ki as TerminalStreamError, Kn as SSHCredentials, Kr as ScopedTokenScope, Kt as IntelligenceReportBudget, L as DirectoryPermission, Li as WaitForRolloutOptions, Lr as SandboxTerminalManager, Lt as GpuLeaseExecOptions, M as CreateSandboxOptions, Mi as UpdateUserOptions, Mn as ReapExpiredSandboxFleetsResult, Mr as SandboxRuntimeHealth, Mt as GitDiff, N as CreateSessionOptions, Ni as UploadOptions, Nn as ReconcileSandboxFleetsOptions, Nr as SandboxStatus, Nt as GitStatus, O as CreateRequestOptions, Oi as TeePublicKeyResponse, On as PublicTemplateVersionInfo, Or as SandboxPortPreviewLink, Ot as GitAuth, P as CreateTaskSessionOptions, Pi as UploadProgress, Pn as ReconcileSandboxFleetsResult, Pr as SandboxTerminalAttachOptions, Pt as GpuLease, Q as EnsureDevServerOptions, Qi as BatchEventDataMap, Qn as SandboxFleetArtifactSpec, Qr as SendSessionMessageRequest, Qt as ListOptions, R as DispatchPromptOptions, Ri as WriteFileOptions, Rn as Rollout, Rr as SandboxTerminalRequestOptions, Rt as GpuLeaseExecResult, Si as TaskSessionInfo, Sn as PromptResult, Sr as SandboxFleetWorkspaceRestoreResult, St as FleetExecDispatchOptions, T as CompletedTurnResult, Ti as TeeAttestationReport, Tn as ProvisionStatus, Tr as SandboxInfo, Tt as FleetPromptDispatchOptions, U as DriverConfig, Ui as TerminalReadyInfo, Un as RolloutStatus, Ur as SandboxTraceOptions, Ut as HostAgentRuntimeBackend, V as DownloadProgress, Vi as TERMINAL_WS_ECHO_SUBPROTOCOL, Vn as RolloutScorer, Vr as SandboxTraceEvent, Vt as GpuLeaseStatus, W as DriverInfo, Wi as TerminalStream, Wn as RolloutTurnPart, Wr as SandboxUser, Wt as InstalledTool, X as EgressManager, Xi as BatchBackendStats, Xn as SandboxEvent, Xr as SecretsManager, Y as EffectiveBackendSource, Yi as TerminalStreamToken, Yn as SandboxEnvironment, Yr as SecretInfo, Yt as IntelligenceReportWindow, Z as EgressPolicy, Zi as BatchEvent, Zn as SandboxFleetArtifact, Zr as SendSessionMessageOptions, Zt as ListMessagesOptions, _ as BranchOptions, _i as StorageConfig, _n as ProcessSignal, _r as SandboxFleetTraceExport, _t as FleetDispatchResultBuffer, a as AttachSandboxFleetMachineOptions, ai as SessionInterruptOptions, an as NetworkManager, ar as SandboxFleetIntelligenceEnvelope, at as FileReadBatchResult, bi as TaskSessionCommitResult, bn as PromptInputPart, br as SandboxFleetWorkspace, bt as FleetDriveTurnOutcome, c as BackendInfo, ci as SessionMessageInputPart, cn as PermissionsManager, cr as SandboxFleetMachineRecord, ct as FileRenameResult, d as BatchBackend, di as SnapshotInfo, dn as PreviewLinkWaitOptions, dr as SandboxFleetManifestMachine, dt as FileTreeOptions, ea as BatchTaskUsage, ei as SessionBackendCredentials, en as ListSandboxOptions, er as SandboxFleetDispatchFailureClass, et as ExactProcessSpawnOptions, f as BatchResult, fi as SnapshotOptions, fn as Process, fr as SandboxFleetOperationsSummary, ft as FileTreeResult, g as BatchTaskResult, gi as StartupOperation, gn as ProcessManager, gr as SandboxFleetTraceEvent, gt as FleetDispatchCancelResult, h as BatchTask, hi as StartupDiagnostics, hn as ProcessLogEntry, hr as SandboxFleetTraceBundle, ht as FileWriteResult, i as AttachGpuLeaseOptions, ii as SessionInfo, in as NetworkConfig, ir as SandboxFleetInfo, it as FileReadBatchOptions, j as CreateSandboxFleetWithCoordinatorOptions, ji as TurnDriveResult, jn as ReapExpiredSandboxFleetsOptions, jr as SandboxRuntimeCapabilities, jt as GitConfig, k as CreateSandboxFleetOptions, ki as TokenRefreshHandler, kn as PublishPublicTemplateOptions, kr as SandboxResourceUsage, kt as GitBranch, l as BackendManager, li as SessionResultOptions, ln as PreviewLinkInfo, lr as SandboxFleetMachineSpec, lt as FileSystem, m as BatchRunRequest, mn as ProcessListOptions, mr as SandboxFleetToken, mt as FileUsageResult, n as AccessPolicyRule, na as BackendType, ni as SessionFailureReason, nn as MintScopedTokenOptions, nr as SandboxFleetDriverCapability, nt as ExecResult, o as BackendCapabilities, oi as SessionListOptions, on as NonHostAgentDriverConfig, or as SandboxFleetMachine, ot as FileReadError, p as BatchRunOptions, pi as SnapshotResult, pn as ProcessInfo, pr as SandboxFleetPolicy, pt as FileUsageOptions, q as EffectiveBackend, qi as TerminalStreamHandlers, qn as SandboxConfig, qr as SearchMatch, qt as IntelligenceReportCompareTo, r as AddUserOptions, ra as parseBackendType, ri as SessionForkOptions, rn as MkdirOptions, rr as SandboxFleetDriverTimings, rt as FileInfo, s as BackendConfig, si as SessionMessage, sn as PermissionLevel, sr as SandboxFleetMachineMeteredUsage, st as FileReadResult, t as AcceleratorKind, ta as PublicBatchRunRequest, ti as SessionEventStreamOptions, tn as McpServerConfig, tr as SandboxFleetDispatchResponse, tt as ExecOptions, u as BackendStatus, ui as SessionStatus, un as PreviewLinkManager, ur as SandboxFleetManifest, ut as FileTreeFile, v as ChunkedUploadOptions, vi as SubscriptionInfo, vn as ProcessSpawnOptions, vr as SandboxFleetTraceOptions, vt as FleetDispatchResultBufferOptions, w as CommitTaskSessionOptions, wi as TeeAttestationOptions, wn as ProvisionResult, wr as SandboxIdentity, wt as FleetMachineId, xi as TaskSessionFileChange, xn as PromptOptions, xr as SandboxFleetWorkspaceReconcileResult, xt as FleetDriveTurnRequest, y as ChunkedUploadResult, yi as TaskSessionChanges, yn as ProcessStatus, yr as SandboxFleetUsage, yt as FleetDispatchStreamOptions, z as DispatchedSession, zi as WriteManyFile, zn as RolloutChildResult, zr as SandboxTerminals, zt as GpuLeaseManager } from "./types-KcG-gz1O.js";
-import { A as SandboxMcpEndpoint, C as RespondToPermissionOptions, D as CONTROL_PLANE_MCP_SERVER_NAME, E as BuildSandboxMcpConfigOptions, M as buildControlPlaneMcpConfig, N as buildSandboxMcpConfig, O as SANDBOX_MCP_SERVER_NAME, S as InterruptResult, T as BuildControlPlaneMcpConfigOptions, _ as InteractiveAuthFile, a as WorkspaceImagePublishResult, b as InteractiveSessionInfo, c as TraceExportResult, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as InteractiveAttachOptions, h as SandboxSession, i as WorkspaceImagePublishRequestOptions, j as SandboxMcpServerEntry, k as SandboxMcpConfig, l as TraceExportSink, m as SandboxTaskSession, n as SandboxInstance, o as WorkspaceImages, p as toOtelJson, r as WorkspaceImagePublishInput, s as TraceExportFormat, u as buildTraceExportPayload, v as InteractiveSessionHandle, w as StartInteractiveOptions, x as InteractiveSessionStatus, y as InteractiveSessionHost } from "./sandbox-DqA_HkI0.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-DZA6-Gwg.js";
+import { $ as EnsureDevServerOptions, $i as BatchBackendStats, $n as SandboxEvent, $r as SecretsManager, $t as ListOptions, Ai as TeePublicKey, An as PublishPublicTemplateOptions, Ar as SandboxPortBinding, At as GitBranch, B as DownloadOptions, Bi as WaitForRolloutOptions, Bn as RolloutChildResult, Br as SandboxTerminalManager, Bt as GpuLeaseManager, Ci as TaskSessionCommitResult, Cn as PromptResult, Cr as SandboxFleetWorkspace, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Di as TeeAttestationOptions, Dn as ProvisionStep, Dr as SandboxIdentity, E as CreateGpuLeaseOptions, Ei as TaskSessionProfile, En as ProvisionStatus, Er as SandboxFleetWorkspaceSnapshotResult, Et as FleetPromptDispatchOptions, F as DeleteOptions, Fi as UpdateUserOptions, Fn as ReconcileSandboxFleetsResult, Fr as SandboxRuntimeHealth, Ft as GpuLease, G as DriverType, Gi as TerminalExitInfo, Gn as RolloutTurnPart, Gr as SandboxTraceExport, Gt as InstalledTool, H as DriveTurnOptions, Hi as WriteManyFile, Hn as RolloutScorer, Hr as SandboxTerminals, Ht as GpuLeaseStatus, I as DevServerInfo, Ii as UploadOptions, In as RenameOptions, Ir as SandboxStatus, It as GpuLeaseBilling, J as EffectiveBackend, Ji as TerminalStreamAuthFormat, Jn as SandboxConfig, Jr as ScopedToken, Jt as IntelligenceReportCompareTo, K as DurablePlan, Ki as TerminalReadyInfo, Kn as SSHCommandDescriptor, Kr as SandboxTraceOptions, Kt as IntelligenceReport, L as DirectoryPermission, Li as UploadProgress, Lr as SandboxTerminalAttachOptions, Lt as GpuLeaseCommandResult, M as CreateSandboxOptions, Mi as TokenRefreshHandler, Mn as ReapExpiredSandboxFleetsOptions, Mr as SandboxResourceUsage, Mt as GitConfig, N as CreateSessionOptions, Ni as TokenUsage, Nn as ReapExpiredSandboxFleetsResult, Nr as SandboxResources, Nt as GitDiff, O as CreateRequestOptions, Oi as TeeAttestationReport, On as PublicTemplateInfo, Or as SandboxInfo, Ot as GPU_LEASE_PROVIDER_NAMES, P as CreateTaskSessionOptions, Pi as TurnDriveResult, Pn as ReconcileSandboxFleetsOptions, Pr as SandboxRuntimeCapabilities, Pt as GitStatus, Q as EgressPolicy, Qi as TerminalStreamToken, Qn as SandboxEnvironment, Qr as SecretInfo, Qt as ListMessagesOptions, R as DispatchPromptOptions, Ri as UsageInfo, Rr as SandboxTerminalCreateOptions, Rt as GpuLeaseExecOptions, Si as TaskSessionChanges, Sn as PromptOptions, Sr as SandboxFleetUsage, St as FleetDriveTurnRequest, T as CompletedTurnResult, Ti as TaskSessionInfo, Tn as ProvisionResult, Tr as SandboxFleetWorkspaceRestoreResult, Tt as FleetMachineId, U as DriverConfig, Ui as WriteManyOptions, Un as RolloutStartResult, Ur as SandboxTraceBundle, Ut as HostAgentDriverConfig, V as DownloadProgress, Vi as WriteFileOptions, Vn as RolloutOptions, Vr as SandboxTerminalRequestOptions, Vt as GpuLeaseProviderName, W as DriverInfo, Wi as TERMINAL_WS_ECHO_SUBPROTOCOL, Wn as RolloutStatus, Wr as SandboxTraceEvent, Wt as HostAgentRuntimeBackend, X as EffectiveBackendSource, Xi as TerminalStreamHandlers, Xn as SandboxCreateOutcome, Xr as SearchMatch, Xt as IntelligenceReportWindow, Y as EffectiveBackendProfile, Yi as TerminalStreamError, Yn as SandboxConnection, Yr as ScopedTokenScope, Yt as IntelligenceReportSubjectType, Z as EgressManager, Zi as TerminalStreamOptions, Zn as SandboxCreateReceipt, Zr as SearchOptions, _ as BranchOptions, _n as ProcessManager, _r as SandboxFleetToken, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, aa as BackendType, ai as SessionFailureReason, an as NetworkConfig, ar as SandboxFleetDriverCapability, at as FileReadBatchOptions, bi as StorageConfig, bn as ProcessStatus, br as SandboxFleetTraceExport, bt as FleetDispatchStreamOptions, c as BackendInfo, ci as SessionInterruptOptions, cn as PermissionLevel, cr as SandboxFleetIntelligenceEnvelope, ct as FileReadResult, d as BatchBackend, di as SessionMessageInputPart, dn as PreviewLinkManager, dr as SandboxFleetMachineRecord, dt as FileTreeFile, ea as BatchEvent, ei as SendSessionMessageOptions, en as ListSandboxFleetOptions, er as SandboxFleetArtifact, et as EventStreamOptions, f as BatchResult, fi as SessionResultOptions, fn as PreviewLinkWaitOptions, fr as SandboxFleetMachineSpec, ft as FileTreeOptions, g as BatchTaskResult, gi as SnapshotResult, gn as ProcessLogEntry, gr as SandboxFleetPolicy, gt as FileWriteResult, h as BatchTask, hi as SnapshotOptions, hn as ProcessListOptions, hr as SandboxFleetOperationsSummary, ht as FileUsageResult, i as AttachGpuLeaseOptions, ia as PublicBatchRunRequest, ii as SessionEventStreamOptions, in as MkdirOptions, ir as SandboxFleetDispatchResponse, it as FileInfo, j as CreateSandboxFleetWithCoordinatorOptions, ji as TeePublicKeyResponse, jn as PublishPublicTemplateVersionOptions, jr as SandboxPortPreviewLink, jt as GitCommit, k as CreateSandboxFleetOptions, ki as TeeAttestationResponse, kn as PublicTemplateVersionInfo, kr as SandboxIntelligenceEnvelope, kt as GitAuth, l as BackendManager, li as SessionListOptions, ln as PermissionsManager, lr as SandboxFleetMachine, lt as FileRenameResult, m as BatchRunRequest, mi as SnapshotInfo, mn as ProcessInfo, mr as SandboxFleetManifestMachine, mt as FileUsageOptions, n as AccessPolicyRule, na as BatchSidecarGroup, ni as SentSessionMessage, nn as McpServerConfig, nr as SandboxFleetCostEstimate, nt as ExecOptions, o as BackendCapabilities, oa as parseBackendType, oi as SessionForkOptions, on as NetworkManager, or as SandboxFleetDriverTimings, ot as FileReadBatchResult, p as BatchRunOptions, pi as SessionStatus, pn as Process, pr as SandboxFleetManifest, pt as FileTreeResult, q as DurablePlanDecisionResult, qi as TerminalStream, qn as SSHCredentials, qr as SandboxUser, qt as IntelligenceReportBudget, r as AddUserOptions, ra as BatchTaskUsage, ri as SessionBackendCredentials, rn as MintScopedTokenOptions, rr as SandboxFleetDispatchFailureClass, rt as ExecResult, s as BackendConfig, si as SessionInfo, sn as NonHostAgentDriverConfig, sr as SandboxFleetInfo, st as FileReadError, t as AcceleratorKind, ta as BatchEventDataMap, ti as SendSessionMessageRequest, tn as ListSandboxOptions, tr as SandboxFleetArtifactSpec, tt as ExactProcessSpawnOptions, u as BackendStatus, ui as SessionMessage, un as PreviewLinkInfo, ur as SandboxFleetMachineMeteredUsage, ut as FileSystem, v as ChunkedUploadOptions, vi as StartupDiagnostics, vn as ProcessSignal, vr as SandboxFleetTraceBundle, vt as FleetDispatchResultBuffer, w as CommitTaskSessionOptions, wi as TaskSessionFileChange, wn as ProvisionEvent, wr as SandboxFleetWorkspaceReconcileResult, xi as SubscriptionInfo, xn as PromptInputPart, xr as SandboxFleetTraceOptions, xt as FleetDriveTurnOutcome, y as ChunkedUploadResult, yi as StartupOperation, yn as ProcessSpawnOptions, yr as SandboxFleetTraceEvent, yt as FleetDispatchResultBufferOptions, z as DispatchedSession, zi as WaitForOptions, zn as Rollout, zr as SandboxTerminalInfo, zt as GpuLeaseExecResult } from "./types-Dpj6Unaq.js";
+import { A as BuildSandboxMcpConfigOptions, C as RespondToPermissionOptions, D as SandboxInteractionResolution, E as SandboxInteractionConflict, F as SandboxMcpServerEntry, I as buildControlPlaneMcpConfig, L as buildSandboxMcpConfig, M as SANDBOX_MCP_SERVER_NAME, N as SandboxMcpConfig, O as SandboxInteractionResult, P as SandboxMcpEndpoint, S as InterruptResult, T as SandboxInteractionCommandResult, _ as InteractiveAuthFile, a as WorkspaceImagePublishResult, b as InteractiveSessionInfo, c as TraceExportResult, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as InteractiveAttachOptions, h as SandboxSession, i as WorkspaceImagePublishRequestOptions, j as CONTROL_PLANE_MCP_SERVER_NAME, k as BuildControlPlaneMcpConfigOptions, l as TraceExportSink, m as SandboxTaskSession, n as SandboxInstance, o as WorkspaceImages, p as toOtelJson, r as WorkspaceImagePublishInput, s as TraceExportFormat, u as buildTraceExportPayload, v as InteractiveSessionHandle, w as StartInteractiveOptions, x as InteractiveSessionStatus, y as InteractiveSessionHost } from "./sandbox-S1ayJN7d.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-QSo4goVc.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-DtRFVx5U.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-Cp1KYanB.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-D8gFjIat.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-BBZKkva-.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -614,6 +614,9 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -939,6 +942,9 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -1274,6 +1280,9 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -1594,6 +1603,9 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -1919,6 +1931,9 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -2349,6 +2364,9 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -2674,6 +2692,9 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -3009,6 +3030,9 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -3329,6 +3353,9 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -3654,6 +3681,9 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
               xhigh: "xhigh";
               ultracode: "ultracode";
             }>>;
+            maxVisibleOutputTokens: z.ZodOptional<z.ZodNumber>;
+            maxReasoningTokens: z.ZodOptional<z.ZodNumber>;
+            maxTotalOutputTokens: z.ZodOptional<z.ZodNumber>;
             metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
           }, z.core.$strict>>;
           harness: z.ZodOptional<z.ZodEnum<{
@@ -4395,4 +4425,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InteractiveSessionStatus, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createBatchResultAccumulator, createConfidentialSandbox, createManageSandboxesTool, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InteractiveSessionStatus, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createBatchResultAccumulator, createConfidentialSandbox, createManageSandboxesTool, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/index.js

@@ -1,9 +1,9 @@
 import { h as parseBackendType, m as backendTypeSchema, p as normalizeRuntimeBackendConfig } from "./runtime-api-Co-Ow_VR.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-D2aWy99l.js";
-import { a as splitInlineProfileSkills, c as SandboxFleetClient, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, n as Sandbox, o as validateDeferredProfileFileMounts, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-CV2xqPAw.js";
-import { _ as buildTraceExportPayload, a as TERMINAL_WS_ECHO_SUBPROTOCOL, b as toOtelJson, c as SandboxTaskSession, d as applySandboxEventText, f as collectAgentFinalMessageText, h as isToolBearingEvent, i as WorkspaceImages, l as SandboxSession, m as getSandboxEventText, o as TerminalStream, p as collectAgentResponseText, s as TerminalStreamError, t as SandboxInstance, u as InteractiveSessionHandle, v as exportTraceBundle, x as parseSSEStream, y as otelTraceIdForTangleTrace } from "./sandbox-EcY9ibhA.js";
+import { a as splitInlineProfileSkills, c as SandboxFleetClient, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, n as Sandbox, o as validateDeferredProfileFileMounts, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-CLn6Tzx8.js";
+import { S as parseSSEStream, a as WorkspaceImages, b as otelTraceIdForTangleTrace, c as TerminalStreamError, d as InteractiveSessionHandle, f as applySandboxEventText, g as isToolBearingEvent, h as getSandboxEventText, l as SandboxTaskSession, m as collectAgentResponseText, o as TERMINAL_WS_ECHO_SUBPROTOCOL, p as collectAgentFinalMessageText, s as TerminalStream, t as SandboxInstance, u as SandboxSession, v as buildTraceExportPayload, x as toOtelJson, y as exportTraceBundle } from "./sandbox-D2wREqmA.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CqPA0kar.js";
-import { t as TangleSandboxClient } from "./tangle-B37vhbje.js";
+import { t as TangleSandboxClient } from "./tangle-CzFPb4Jm.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-import { $r as SentSessionMessage, Dr as SandboxPortBinding, Fn as RenameOptions, Fr as SandboxTerminalCreateOptions, Ir as SandboxTerminalInfo, Lr as SandboxTerminalManager, Mr as SandboxRuntimeHealth, N as CreateSessionOptions, P as CreateTaskSessionOptions, Pi as UploadProgress, Qr as SendSessionMessageRequest, Ri as WriteFileOptions, Rr as SandboxTerminalRequestOptions, Si as TaskSessionInfo, Zr as SendSessionMessageOptions, Zt as ListMessagesOptions, at as FileReadBatchResult, bi as TaskSessionCommitResult, ct as FileRenameResult, dt as FileTreeOptions, ft as FileTreeResult, ht as FileWriteResult, ii as SessionInfo, it as FileReadBatchOptions, mt as FileUsageResult, pt as FileUsageOptions, si as SessionMessage, v as ChunkedUploadOptions, w as CommitTaskSessionOptions, y as ChunkedUploadResult, yi as TaskSessionChanges } from "./types-KcG-gz1O.js";
+import { Ar as SandboxPortBinding, Br as SandboxTerminalManager, Ci as TaskSessionCommitResult, Fr as SandboxRuntimeHealth, In as RenameOptions, Li as UploadProgress, N as CreateSessionOptions, P as CreateTaskSessionOptions, Qt as ListMessagesOptions, Rr as SandboxTerminalCreateOptions, Si as TaskSessionChanges, Ti as TaskSessionInfo, Vi as WriteFileOptions, Vr as SandboxTerminalRequestOptions, at as FileReadBatchOptions, ei as SendSessionMessageOptions, ft as FileTreeOptions, gt as FileWriteResult, ht as FileUsageResult, lt as FileRenameResult, mt as FileUsageOptions, ni as SentSessionMessage, ot as FileReadBatchResult, pt as FileTreeResult, si as SessionInfo, ti as SendSessionMessageRequest, ui as SessionMessage, v as ChunkedUploadOptions, w as CommitTaskSessionOptions, y as ChunkedUploadResult, zr as SandboxTerminalInfo } from "./types-Dpj6Unaq.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 
 //#region src/lib/chunked-upload.d.ts

package/dist/{sandbox-EcY9ibhA.js → sandbox-D2wREqmA.js}

@@ -1,6 +1,7 @@
 import { a as uploadChunked, c as combineAbortSignals, d as applyRequestedModel, f as assertCurrentBackendType, i as sessionHeaders, l as encodePromptForWire, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi } from "./runtime-api-Co-Ow_VR.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, l as SandboxError, m as parseErrorResponse, n as CapabilityError, o as NotFoundError, p as ValidationError, t as AuthError, u as ServerError } from "./errors-D2aWy99l.js";
-import { AgentExactRunControlRefSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
+import { AgentExactRunControlRefSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, sha256DigestSchema } from "@tangle-network/agent-interface";
+import { z } from "zod";
 import { readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
 //#region src/lib/sse-parser.ts
 /**
@@ -498,6 +499,226 @@ function validateAcceptedDispatchRunRef(raw, expected, sandboxId, sessionId, exe
 	return accepted;
 }
 //#endregion
+//#region src/interaction-response.ts
+const APPLIED_INTERACTION_STATUS = z.enum(["accepted", "already_resolved_same"]);
+const REFUSED_INTERACTION_STATUS = z.enum(["already_resolved_different", "binding_mismatch"]);
+const InteractionResolutionSchema = z.strictObject({
+	status: APPLIED_INTERACTION_STATUS,
+	operationId: z.string().min(1),
+	responseDigest: sha256DigestSchema,
+	interactionId: z.string().min(1),
+	sessionId: z.string().min(1),
+	outcome: z.enum([
+		"accepted",
+		"declined",
+		"cancelled"
+	]),
+	delivered: z.boolean(),
+	resolvedAt: z.string().min(1),
+	binding: InteractionBindingSchema.optional()
+});
+const InteractionResolutionEnvelopeSchema = z.object({
+	success: z.literal(true),
+	resolution: InteractionResolutionSchema
+});
+const InteractionConflictEnvelopeSchema = z.object({
+	success: z.literal(false),
+	currentState: REFUSED_INTERACTION_STATUS,
+	error: z.object({
+		code: z.string().min(1),
+		message: z.string().min(1),
+		status: REFUSED_INTERACTION_STATUS,
+		existingResponseDigest: sha256DigestSchema.optional(),
+		existingOperationId: z.string().min(1).optional(),
+		resolvedAt: z.string().min(1).optional()
+	})
+});
+const InteractionListEnvelopeSchema = z.object({
+	success: z.literal(true),
+	data: z.object({ interactions: z.array(InteractionRequestSchema) })
+});
+function invalidRuntimeResponse(message, response, endpoint) {
+	return new ServerError(message, 502, {
+		origin: "runtime",
+		endpoint,
+		sidecarVersion: response.headers.get("x-sidecar-version") ?? void 0,
+		containerImage: response.headers.get("x-sidecar-image") ?? response.headers.get("x-sidecar-image-tag") ?? void 0
+	});
+}
+function parseJson(body, response, endpoint) {
+	try {
+		return JSON.parse(body);
+	} catch {
+		throw invalidRuntimeResponse("Sidecar returned an invalid interaction response", response, endpoint);
+	}
+}
+function bindingsEqual(left, right) {
+	return left.requestDigest === right.requestDigest && left.runId === right.runId && left.provider === right.provider && left.environmentId === right.environmentId && left.sessionId === right.sessionId && left.executionId === right.executionId && left.interactionId === right.interactionId;
+}
+function assertResolutionMatches(resolution, sessionId, submitted, response, endpoint) {
+	const expectedDigest = canonicalCandidateDigest(submitted);
+	if (resolution.sessionId !== sessionId || resolution.interactionId !== submitted.id || resolution.outcome !== submitted.outcome || resolution.responseDigest !== expectedDigest) throw invalidRuntimeResponse("Sidecar returned a resolution for another interaction response", response, endpoint);
+}
+/** Parse one interaction response without discarding replay information. */
+async function readInteractionResult(response, endpoint, sessionId, submitted) {
+	const body = await response.text();
+	if (response.ok) {
+		const parsed = InteractionResolutionEnvelopeSchema.safeParse(parseJson(body, response, endpoint));
+		if (!parsed.success) throw invalidRuntimeResponse("Sidecar returned an invalid interaction resolution", response, endpoint);
+		assertResolutionMatches(parsed.data.resolution, sessionId, submitted, response, endpoint);
+		return parsed.data.resolution;
+	}
+	if (response.status === 409) {
+		const parsed = InteractionConflictEnvelopeSchema.safeParse(parseJson(body, response, endpoint));
+		if (!parsed.success || parsed.data.currentState !== parsed.data.error.status) throw invalidRuntimeResponse("Sidecar returned an invalid interaction conflict", response, endpoint);
+		return {
+			status: parsed.data.error.status,
+			message: parsed.data.error.message,
+			...parsed.data.error.existingResponseDigest === void 0 ? {} : { existingResponseDigest: parsed.data.error.existingResponseDigest },
+			...parsed.data.error.existingOperationId === void 0 ? {} : { existingOperationId: parsed.data.error.existingOperationId },
+			...parsed.data.error.resolvedAt === void 0 ? {} : { resolvedAt: parsed.data.error.resolvedAt }
+		};
+	}
+	throw parseErrorResponse(response.status, body, {
+		method: "POST",
+		path: endpoint
+	}, response.headers);
+}
+/** Convert a command result into the shared retry-safe acknowledgement. */
+function interactionAcknowledgement(command, result) {
+	if ("interactionId" in result && (result.binding === void 0 || !bindingsEqual(result.binding, command.binding))) throw new ServerError("Sidecar did not return the exact interaction binding for this command", 502, {
+		origin: "runtime",
+		endpoint: "/agents/sessions/:id/interactions"
+	});
+	const status = "delivered" in result && !result.delivered ? "transport_failure" : result.status;
+	const message = status === "transport_failure" ? `Interaction ${command.binding.interactionId} is recorded but delivery is not confirmed` : "message" in result ? result.message : void 0;
+	return {
+		acknowledgement: commandAcknowledgement(command, status, {
+			...message === void 0 ? {} : { message },
+			...status === "transport_failure" ? { retryable: true } : {}
+		}),
+		serverResult: result
+	};
+}
+function commandAcknowledgement(command, status, extras = {}) {
+	return InteractionAcknowledgementSchema.parse({
+		operationId: command.operationId,
+		binding: command.binding,
+		commandDigest: command.commandDigest,
+		status,
+		...extras.message === void 0 ? {} : { message: extras.message },
+		...extras.retryable === void 0 ? {} : { retryable: extras.retryable }
+	});
+}
+function commandHttpFailure(command, error) {
+	const message = error.message;
+	switch (error.status) {
+		case 400: return { acknowledgement: commandAcknowledgement(command, "invalid_response", { message }) };
+		case 404: return { acknowledgement: commandAcknowledgement(command, error.code === "SESSION_NOT_FOUND" ? "unknown_run" : "unknown_interaction", { message }) };
+		case 408:
+		case 429: return { acknowledgement: commandAcknowledgement(command, "transport_failure", {
+			message,
+			retryable: true
+		}) };
+		case 410: return { acknowledgement: commandAcknowledgement(command, "expired", { message }) };
+		case 501: return { acknowledgement: commandAcknowledgement(command, "transport_failure", {
+			message,
+			retryable: false
+		}) };
+		default: return error.status !== void 0 && error.status >= 500 ? { acknowledgement: commandAcknowledgement(command, "transport_failure", {
+			message,
+			retryable: true
+		}) } : void 0;
+	}
+}
+/** Parse and validate the outstanding interaction set returned by a session. */
+async function readOutstandingInteractions(response, endpoint) {
+	const body = await response.text();
+	if (!response.ok) throw parseErrorResponse(response.status, body, {
+		method: "GET",
+		path: endpoint
+	}, response.headers);
+	const parsed = InteractionListEnvelopeSchema.safeParse(parseJson(body, response, endpoint));
+	if (!parsed.success) throw invalidRuntimeResponse("Sidecar returned an invalid interaction list", response, endpoint);
+	return parsed.data.data.interactions;
+}
+async function prepareTransport(transport, signal) {
+	signal?.throwIfAborted();
+	await transport.ensureRunning();
+	signal?.throwIfAborted();
+}
+function interactionEndpoint(sessionId) {
+	return `/agents/sessions/${encodeURIComponent(sessionId)}/interactions`;
+}
+/** Read the exact outstanding set through one validated transport path. */
+async function listSandboxInteractions(transport, sessionId, options) {
+	await prepareTransport(transport, options?.signal);
+	const endpoint = interactionEndpoint(sessionId);
+	return readOutstandingInteractions(await transport.fetch(endpoint, {
+		method: "GET",
+		...options?.signal === void 0 ? {} : { signal: options.signal }
+	}), endpoint);
+}
+/** Submit a plain response and preserve the server's durable result. */
+async function submitSandboxInteractionResponse(transport, sessionId, submitted, options) {
+	const parsed = InteractionResponseSchema.safeParse(submitted);
+	if (!parsed.success) throw new ValidationError("Invalid interaction response", { response: parsed.error.message });
+	await prepareTransport(transport, options?.signal);
+	const endpoint = interactionEndpoint(sessionId);
+	return readInteractionResult(await transport.fetch(endpoint, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify(parsed.data),
+		...options?.signal === void 0 ? {} : { signal: options.signal }
+	}), endpoint, sessionId, parsed.data);
+}
+/** Submit one digest-bound command and return the shared acknowledgement. */
+async function submitSandboxInteractionCommand(transport, sessionId, command, options) {
+	const parsed = InteractionResponseCommandSchema.safeParse(command);
+	if (!parsed.success) throw new ValidationError("Invalid interaction response command", { commandDigest: parsed.error.message });
+	if (parsed.data.binding.sessionId !== sessionId) throw new ValidationError("Interaction response command does not belong to this session", { "binding.sessionId": `Expected ${sessionId}` });
+	if (parsed.data.binding.environmentId !== transport.environmentId) throw new ValidationError("Interaction response command does not belong to this sandbox", { "binding.environmentId": `Expected ${transport.environmentId}` });
+	try {
+		await prepareTransport(transport, options?.signal);
+	} catch (error) {
+		options?.signal?.throwIfAborted();
+		if (error instanceof NetworkError) return { acknowledgement: commandAcknowledgement(parsed.data, "transport_failure", {
+			message: error.message,
+			retryable: true
+		}) };
+		throw error;
+	}
+	const endpoint = interactionEndpoint(sessionId);
+	let response;
+	try {
+		response = await transport.fetch(endpoint, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(parsed.data),
+			...options?.signal === void 0 ? {} : { signal: options.signal }
+		});
+	} catch (error) {
+		options?.signal?.throwIfAborted();
+		if (error instanceof NetworkError) return { acknowledgement: commandAcknowledgement(parsed.data, "transport_failure", {
+			message: error.message,
+			retryable: true
+		}) };
+		throw error;
+	}
+	if (!response.ok && response.status !== 409) {
+		const body = await response.text();
+		const error = parseErrorResponse(response.status, body, {
+			method: "POST",
+			path: endpoint
+		}, response.headers);
+		const acknowledgement = commandHttpFailure(parsed.data, error);
+		if (acknowledgement) return acknowledgement;
+		throw error;
+	}
+	const result = await readInteractionResult(response, endpoint, sessionId, parsed.data.response);
+	return interactionAcknowledgement(parsed.data, result);
+}
+//#endregion
 //#region src/lib/agent-response-text.ts
 /**
 * Canonical extraction of an agent's response text from its sandbox event
@@ -879,6 +1100,14 @@ var SandboxSession = class SandboxSession {
 	async respondToPermission(permissionID, options) {
 		return this.box._respondToPermission(this.id, permissionID, options);
 	}
+	/** Return every interaction that still awaits a response on this session. */
+	async interactions(options) {
+		return this.box._listInteractions(this.id, options);
+	}
+	/** Respond to one exact interaction with a retry-safe command. */
+	async respondToInteraction(command, options) {
+		return this.box._respondToInteraction(this.id, command, options);
+	}
 	/**
 	* Interrupt an execution without deleting the session. Pass `executionId`
 	* to make the cancellation exact: a newer run on the same session is never
@@ -896,15 +1125,9 @@ var SandboxSession = class SandboxSession {
 	async cancelRun(request, options) {
 		return this.box._cancelRun(this.id, request, options);
 	}
-	/**
-	* Answer a question the agent asked via a question tool invocation. `answers`
-	* maps each question id to the selected option(s). Backend-agnostic: works
-	* with any backend that raises kind:"question" interactions — OpenCode
-	* natively, or CLI backends with `BackendConfig.interactions.question`
-	* enabled. Backends with no question support reject loudly.
-	*/
-	async answer(answers) {
-		return this.box._answerQuestion(this.id, answers);
+	/** Answer one exact question without selecting another outstanding ask. */
+	async answer(interactionId, answers, options) {
+		return this.box._answerQuestion(this.id, interactionId, answers, options);
 	}
 	/** Return the newest plan awaiting a decision for this session. */
 	async plan() {
@@ -1531,6 +1754,30 @@ function normalizeStartupDiagnostics(raw) {
 		phases
 	};
 }
+const SANDBOX_CREATE_OUTCOMES = [
+	"created",
+	"idempotent_replay",
+	"unknown"
+];
+/**
+* Normalize the raw `createReceipt` field from a sandbox API response into a
+* {@link SandboxCreateReceipt}. Returns `null` when the payload is absent or
+* carries no boolean `idempotencyKeyApplied` — the platform emits the receipt
+* only on the create response, so most reads have no payload to normalize.
+*
+* An outcome this SDK version does not know becomes `unknown`: only a known
+* `created` proves that the call allocated the environment.
+*/
+function normalizeSandboxCreateReceipt(raw) {
+	if (!raw || typeof raw !== "object") return null;
+	const record = raw;
+	const idempotencyKeyApplied = record.idempotencyKeyApplied;
+	if (typeof idempotencyKeyApplied !== "boolean") return null;
+	return {
+		outcome: SANDBOX_CREATE_OUTCOMES.includes(record.outcome) ? record.outcome : "unknown",
+		idempotencyKeyApplied
+	};
+}
 /**
 * Replace bearer-secret fields on a `SandboxConnection` with a sentinel
 * before serialization. The serialized shape is preserved (so external
@@ -2026,6 +2273,25 @@ var SandboxInstance = class SandboxInstance {
 		return this.info.startupDiagnostics ?? null;
 	}
 	/**
+	* The platform verdict for the create call that returned this sandbox: did
+	* the call allocate the environment, or did it replay an earlier create that
+	* carried the same idempotency key.
+	*
+	* Present only on a freshly created box; `null` for a box resolved by id and
+	* `null` when the platform reported no receipt. Delete the environment only
+	* on a `created` outcome — every other value permits another caller to hold
+	* it, and a delete then destroys work that caller depends on.
+	*
+	* @example
+	* ```typescript
+	* const receipt = box.createReceipt();
+	* if (receipt?.outcome === "created") await box.delete();
+	* ```
+	*/
+	createReceipt() {
+		return this.info.createReceipt ?? null;
+	}
+	/**
 	* Serialize to the public sandbox shape for logs and structured
 	* output. Secrets in `connection` (currently `authToken`) are
 	* redacted so that `JSON.stringify(box)` is safe to ship to log
@@ -2143,7 +2409,7 @@ var SandboxInstance = class SandboxInstance {
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 		const data = await response.json();
-		this.info = this.parseInfo(data);
+		this.info = this.parseInfo(data, this.info);
 		sandboxStatusObservedAt.set(this, Date.now());
 	}
 	/**
@@ -5435,7 +5701,18 @@ var SandboxInstance = class SandboxInstance {
 			sessionId: data.sessionId ?? opts.sessionId
 		};
 	}
-	parseInfo(data) {
+	/**
+	* Parse a sandbox API payload into `SandboxInfo`.
+	*
+	* `carryCreateFacts` supplies the create-time facts a refresh must keep:
+	* the GPU lease, the startup diagnostics, and the create receipt each arrive
+	* once on the create response and are absent from every later payload. They
+	* describe ONE environment's creation, so they travel only when the payload
+	* describes that same environment. A payload for a different sandbox — a
+	* branch child parsed through its parent — passes no carry, or the child
+	* would report its parent's create verdict.
+	*/
+	parseInfo(data, carryCreateFacts) {
 		const id = data.id ?? this.id;
 		const incarnation = readFilesystemIncarnationTuple(data);
 		const incarnationComplete = incarnation.complete;
@@ -5455,8 +5732,9 @@ var SandboxInstance = class SandboxInstance {
 			lastActivityAt: data.lastActivityAt ? new Date(data.lastActivityAt) : void 0,
 			expiresAt: data.expiresAt ? new Date(data.expiresAt) : void 0,
 			error: data.error,
-			gpuLease: data.gpuLease ?? this.info.gpuLease,
-			startupDiagnostics: normalizeStartupDiagnostics(data.startupDiagnostics) ?? this.info?.startupDiagnostics
+			gpuLease: data.gpuLease ?? carryCreateFacts?.gpuLease,
+			startupDiagnostics: normalizeStartupDiagnostics(data.startupDiagnostics) ?? carryCreateFacts?.startupDiagnostics,
+			createReceipt: normalizeSandboxCreateReceipt(data.createReceipt) ?? carryCreateFacts?.createReceipt
 		};
 	}
 	sleep(ms) {
@@ -6093,10 +6371,24 @@ var SandboxInstance = class SandboxInstance {
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 	}
+	interactionTransport() {
+		return {
+			environmentId: this.id,
+			ensureRunning: () => this.ensureRunning(),
+			fetch: (endpoint, request) => this.runtimeFetch(endpoint, request)
+		};
+	}
+	/** @internal — invoked by SandboxSession.interactions(). */
+	async _listInteractions(id, options) {
+		return listSandboxInteractions(this.interactionTransport(), id, options);
+	}
+	/** @internal — invoked by SandboxSession.respondToInteraction(). */
+	async _respondToInteraction(id, command, options) {
+		return submitSandboxInteractionCommand(this.interactionTransport(), id, command, options);
+	}
 	/** @internal — invoked by SandboxSession.respondToPermission(). */
 	async _respondToPermission(id, permissionID, options) {
-		await this.ensureRunning();
-		const body = options.response === "allow" ? {
+		const response = options.response === "allow" ? {
 			id: permissionID,
 			outcome: "accepted",
 			data: { grant: ["allow_once"] }
@@ -6104,14 +6396,7 @@ var SandboxInstance = class SandboxInstance {
 			id: permissionID,
 			outcome: "declined"
 		};
-		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/interactions`, {
-			method: "POST",
-			body: JSON.stringify(body)
-		});
-		if (!response.ok) {
-			const errBody = await response.text();
-			throw parseErrorResponse(response.status, errBody, void 0, response.headers);
-		}
+		return submitSandboxInteractionResponse(this.interactionTransport(), id, response, options.signal === void 0 ? void 0 : { signal: options.signal });
 	}
 	/** @internal — invoked by SandboxSession.interrupt(). */
 	async _interrupt(id, options) {
@@ -6172,50 +6457,13 @@ var SandboxInstance = class SandboxInstance {
 		}
 		throw parseErrorResponse(response.status, body, void 0, response.headers);
 	}
-	/**
-	* @internal — invoked by SandboxSession.answer(). Resolves the session's
-	* outstanding question interaction and posts the answer through the
-	* interaction response route. The positional answer arrays map onto the
-	* question's `answerSpec` fields in order.
-	*/
-	async _answerQuestion(id, answers) {
-		await this.ensureRunning();
-		const listResp = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/interactions`, { method: "GET" });
-		if (!listResp.ok) {
-			const body = await listResp.text();
-			throw parseErrorResponse(listResp.status, body, void 0, listResp.headers);
-		}
-		const outstanding = ((await listResp.json()).data?.interactions ?? []).find((r) => r.kind === "question");
-		if (!outstanding) throw new Error("No outstanding question to answer for this session");
-		const positional = Object.values(answers);
-		const data = {};
-		outstanding.answerSpec.fields.forEach((field, index) => {
-			const raw = answers[field.name] ?? answers[String(index)] ?? positional[index] ?? [];
-			switch (field.type) {
-				case "select":
-					data[field.name] = raw;
-					break;
-				case "number":
-					data[field.name] = Number(raw[0] ?? 0);
-					break;
-				case "boolean":
-					data[field.name] = raw[0] === "true";
-					break;
-				default: data[field.name] = raw[0] ?? "";
-			}
-		});
-		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/interactions`, {
-			method: "POST",
-			body: JSON.stringify({
-				id: outstanding.id,
-				outcome: "accepted",
-				data
-			})
-		});
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
+	/** @internal — invoked by SandboxSession.answer(). */
+	async _answerQuestion(id, interactionId, answers, options) {
+		return submitSandboxInteractionResponse(this.interactionTransport(), id, {
+			id: interactionId,
+			outcome: "accepted",
+			data: answers
+		}, options);
 	}
 	/** @internal — invoked by SandboxSession.plan(). */
 	async _currentPlan(sessionId) {
@@ -6245,11 +6493,25 @@ var SandboxInstance = class SandboxInstance {
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 		const decoded = await response.json();
-		if (!decoded.plan) throw new ServerError("Plan decision response is missing plan", 502, {
+		const followUpState = decoded.followUp?.state;
+		if (!decoded.plan || typeof decoded.followUp?.turnId !== "string" || ![
+			"queued",
+			"leased",
+			"started",
+			"completed",
+			"failed"
+		].includes(String(followUpState)) || typeof decoded.idempotent !== "boolean") throw new ServerError("Plan decision response is invalid", 502, {
 			endpoint: path,
 			origin: "control-plane"
 		});
-		return decoded.plan;
+		return {
+			plan: decoded.plan,
+			followUp: {
+				turnId: decoded.followUp.turnId,
+				state: followUpState
+			},
+			idempotent: decoded.idempotent
+		};
 	}
 };
 function isSessionAwaitingFirstTurn(info) {
@@ -6350,4 +6612,4 @@ function quoteForShell(value) {
 	return `'${value.replace(/'/g, "'\\''")}'`;
 }
 //#endregion
-export { buildTraceExportPayload as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, toOtelJson as b, SandboxTaskSession as c, applySandboxEventText as d, collectAgentFinalMessageText as f, normalizeConnection as g, isToolBearingEvent as h, WorkspaceImages as i, SandboxSession as l, getSandboxEventText as m, createSandboxInstanceFromResponse as n, TerminalStream as o, collectAgentResponseText as p, normalizeStartupDiagnostics as r, TerminalStreamError as s, SandboxInstance as t, InteractiveSessionHandle as u, exportTraceBundle as v, parseSSEStream as x, otelTraceIdForTangleTrace as y };
+export { parseSSEStream as S, normalizeConnection as _, WorkspaceImages as a, otelTraceIdForTangleTrace as b, TerminalStreamError as c, InteractiveSessionHandle as d, applySandboxEventText as f, isToolBearingEvent as g, getSandboxEventText as h, normalizeStartupDiagnostics as i, SandboxTaskSession as l, collectAgentResponseText as m, createSandboxInstanceFromResponse as n, TERMINAL_WS_ECHO_SUBPROTOCOL as o, collectAgentFinalMessageText as p, normalizeSandboxCreateReceipt as r, TerminalStream as s, SandboxInstance as t, SandboxSession as u, buildTraceExportPayload as v, toOtelJson as x, exportTraceBundle as y };

package/dist/{sandbox-DqA_HkI0.d.ts → sandbox-S1ayJN7d.d.ts}

@@ -1,5 +1,6 @@
-import { $ as EventStreamOptions, $r as SentSessionMessage, At as GitCommit, Bi as WriteManyOptions, Bn as RolloutOptions, Br as SandboxTraceBundle, Cn as ProvisionEvent, Dr as SandboxPortBinding, Ei as TeeAttestationResponse, Gn as SSHCommandDescriptor, Gr as ScopedToken, Gt as IntelligenceReport, H as DriveTurnOptions, Hn as RolloutStartResult, Ii as WaitForOptions, In as RestoreSnapshotOptions, Jn as SandboxConnection, Jr as SearchOptions, K as DurablePlan, Kn as SSHCredentials, Kt as IntelligenceReportBudget, Li as WaitForRolloutOptions, Ln as ResumeOptions, Mr as SandboxRuntimeHealth, Mt as GitDiff, N as CreateSessionOptions, Nr as SandboxStatus, Nt as GitStatus, Oi as TeePublicKeyResponse, P as CreateTaskSessionOptions, Pr as SandboxTerminalAttachOptions, Pt as GpuLease, Qr as SendSessionMessageRequest, R as DispatchPromptOptions, Ri as WriteFileOptions, Rn as Rollout, S as CodeLanguage, Si as TaskSessionInfo, Sn as PromptResult, T as CompletedTurnResult, Tr as SandboxInfo, Ur as SandboxTraceOptions, W as DriverInfo, Wi as TerminalStream, Wt as InstalledTool, X as EgressManager, Xn as SandboxEvent, Xt as JsonValue, Yt as IntelligenceReportWindow, Zr as SendSessionMessageOptions, Zt as ListMessagesOptions, _ as BranchOptions, ai as SessionInterruptOptions, an as NetworkManager, b as CodeExecutionOptions, bi as TaskSessionCommitResult, bn as PromptInputPart, cn as PermissionsManager, di as SnapshotInfo, fi as SnapshotOptions, gn as ProcessManager, hi as StartupDiagnostics, hr as SandboxFleetTraceBundle, ht as FileWriteResult, ii as SessionInfo, ji as TurnDriveResult, jr as SandboxRuntimeCapabilities, kr as SandboxResourceUsage, kt as GitBranch, l as BackendManager, li as SessionResultOptions, lt as FileSystem, na as BackendType, nn as MintScopedTokenOptions, nt as ExecResult, oi as SessionListOptions, pi as SnapshotResult, qi as TerminalStreamHandlers, qr as SearchMatch, qt as IntelligenceReportCompareTo, ri as SessionForkOptions, s as BackendConfig, si as SessionMessage, ti as SessionEventStreamOptions, tt as ExecOptions, un as PreviewLinkManager, w as CommitTaskSessionOptions, wi as TeeAttestationOptions, wn as ProvisionResult, x as CodeExecutionResult, xn as PromptOptions, yi as TaskSessionChanges, z as DispatchedSession, zi as WriteManyFile, zr as SandboxTerminals, zt as GpuLeaseManager } from "./types-KcG-gz1O.js";
-import { AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest } from "@tangle-network/agent-interface";
+import { $n as SandboxEvent, Ar as SandboxPortBinding, At as GitBranch, Bi as WaitForRolloutOptions, Bt as GpuLeaseManager, Ci as TaskSessionCommitResult, Cn as PromptResult, Di as TeeAttestationOptions, Fr as SandboxRuntimeHealth, Ft as GpuLease, Gt as InstalledTool, H as DriveTurnOptions, Hi as WriteManyFile, Hr as SandboxTerminals, Ir as SandboxStatus, Jr as ScopedToken, Jt as IntelligenceReportCompareTo, K as DurablePlan, Kn as SSHCommandDescriptor, Kr as SandboxTraceOptions, Kt as IntelligenceReport, Ln as RestoreSnapshotOptions, Lr as SandboxTerminalAttachOptions, Mr as SandboxResourceUsage, N as CreateSessionOptions, Nt as GitDiff, Or as SandboxInfo, P as CreateTaskSessionOptions, Pi as TurnDriveResult, Pr as SandboxRuntimeCapabilities, Pt as GitStatus, Qt as ListMessagesOptions, R as DispatchPromptOptions, Rn as ResumeOptions, S as CodeLanguage, Si as TaskSessionChanges, Sn as PromptOptions, T as CompletedTurnResult, Ti as TaskSessionInfo, Tn as ProvisionResult, Ui as WriteManyOptions, Un as RolloutStartResult, Ur as SandboxTraceBundle, Vi as WriteFileOptions, Vn as RolloutOptions, W as DriverInfo, Xi as TerminalStreamHandlers, Xr as SearchMatch, Xt as IntelligenceReportWindow, Yn as SandboxConnection, Z as EgressManager, Zn as SandboxCreateReceipt, Zr as SearchOptions, Zt as JsonValue, _ as BranchOptions, _n as ProcessManager, aa as BackendType, b as CodeExecutionOptions, ci as SessionInterruptOptions, dn as PreviewLinkManager, ei as SendSessionMessageOptions, et as EventStreamOptions, fi as SessionResultOptions, gi as SnapshotResult, gt as FileWriteResult, hi as SnapshotOptions, ii as SessionEventStreamOptions, ji as TeePublicKeyResponse, jt as GitCommit, ki as TeeAttestationResponse, l as BackendManager, li as SessionListOptions, ln as PermissionsManager, mi as SnapshotInfo, ni as SentSessionMessage, nt as ExecOptions, oi as SessionForkOptions, on as NetworkManager, q as DurablePlanDecisionResult, qi as TerminalStream, qn as SSHCredentials, qt as IntelligenceReportBudget, rn as MintScopedTokenOptions, rt as ExecResult, s as BackendConfig, si as SessionInfo, ti as SendSessionMessageRequest, ui as SessionMessage, ut as FileSystem, vi as StartupDiagnostics, vr as SandboxFleetTraceBundle, w as CommitTaskSessionOptions, wn as ProvisionEvent, x as CodeExecutionResult, xn as PromptInputPart, z as DispatchedSession, zi as WaitForOptions, zn as Rollout } from "./types-Dpj6Unaq.js";
+import { AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand } from "@tangle-network/agent-interface";
+import { z } from "zod";
 
 //#region src/mcp.d.ts
 /**
@@ -112,6 +113,52 @@ declare function buildControlPlaneMcpConfig(options: BuildControlPlaneMcpConfigO
   config: SandboxMcpConfig;
 };
 //#endregion
+//#region src/interaction-response.d.ts
+declare const REFUSED_INTERACTION_STATUS: z.ZodEnum<{
+  already_resolved_different: "already_resolved_different";
+  binding_mismatch: "binding_mismatch";
+}>;
+declare const InteractionResolutionSchema: z.ZodObject<{
+  status: z.ZodEnum<{
+    accepted: "accepted";
+    already_resolved_same: "already_resolved_same";
+  }>;
+  operationId: z.ZodString;
+  responseDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+  interactionId: z.ZodString;
+  sessionId: z.ZodString;
+  outcome: z.ZodEnum<{
+    accepted: "accepted";
+    declined: "declined";
+    cancelled: "cancelled";
+  }>;
+  delivered: z.ZodBoolean;
+  resolvedAt: z.ZodString;
+  binding: z.ZodOptional<z.ZodObject<{
+    requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+    runId: z.ZodString;
+    provider: z.ZodString;
+    environmentId: z.ZodString;
+    sessionId: z.ZodString;
+    executionId: z.ZodString;
+    interactionId: z.ZodString;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+type SandboxInteractionResolution = z.infer<typeof InteractionResolutionSchema>;
+type SandboxInteractionConflict = {
+  status: z.infer<typeof REFUSED_INTERACTION_STATUS>;
+  message: string;
+  existingResponseDigest?: `sha256:${string}`;
+  existingOperationId?: string;
+  resolvedAt?: string;
+};
+type SandboxInteractionResult = SandboxInteractionResolution | SandboxInteractionConflict;
+/** Canonical acknowledgement and the exact durable server result, when one exists. */
+interface SandboxInteractionCommandResult {
+  acknowledgement: InteractionAcknowledgement;
+  serverResult?: SandboxInteractionResult;
+}
+//#endregion
 //#region src/interactive.d.ts
 /** CLI auth file materialized into the harness's auth home before launch. */
 interface InteractiveAuthFile {
@@ -207,6 +254,7 @@ interface InteractiveAttachOptions {
 interface RespondToPermissionOptions {
   /** The human's decision for the awaiting permission interaction. */
   response: "allow" | "deny";
+  signal?: AbortSignal;
 }
 /** Result of `interrupt`. */
 interface InterruptResult {
@@ -300,19 +348,27 @@ interface SandboxSessionHost extends InteractiveSessionHost {
   _sessionSendMessage(id: string, request: SendSessionMessageRequest, options?: SendSessionMessageOptions): Promise<SentSessionMessage>;
   messages(opts: ListMessagesOptions): Promise<SessionMessage[]>;
   _sessionFork(id: string, opts?: SessionForkOptions): Promise<SessionInfo>;
-  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<void>;
+  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<SandboxInteractionResult>;
+  _listInteractions(id: string, options?: {
+    signal?: AbortSignal;
+  }): Promise<InteractionRequest[]>;
+  _respondToInteraction(id: string, command: InteractionResponseCommand, options?: {
+    signal?: AbortSignal;
+  }): Promise<SandboxInteractionCommandResult>;
   _interrupt(id: string, options?: SessionInterruptOptions): Promise<InterruptResult>;
   _cancelRun(id: string, request: AgentRunCancellationRequest, options?: {
     signal?: AbortSignal;
   }): Promise<AgentRunCancellationAcknowledgement>;
-  _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
+  _answerQuestion(id: string, interactionId: string, answers: InteractionData, options?: {
+    signal?: AbortSignal;
+  }): Promise<SandboxInteractionResult>;
   _currentPlan(id: string): Promise<DurablePlan | null>;
   _decidePlan(id: string, planId: string, decision: {
     outcome: "approved";
   } | {
     outcome: "rejected";
     feedback: string;
-  }): Promise<DurablePlan>;
+  }): Promise<DurablePlanDecisionResult>;
 }
 /**
  * A single agent session inside a sandbox. Created via
@@ -397,7 +453,15 @@ declare class SandboxSession {
    * forwarding `allow`/`deny` to the blocked agent through the unified
    * interaction channel. Throws if no matching permission is outstanding.
    */
-  respondToPermission(permissionID: string, options: RespondToPermissionOptions): Promise<void>;
+  respondToPermission(permissionID: string, options: RespondToPermissionOptions): Promise<SandboxInteractionResult>;
+  /** Return every interaction that still awaits a response on this session. */
+  interactions(options?: {
+    signal?: AbortSignal;
+  }): Promise<InteractionRequest[]>;
+  /** Respond to one exact interaction with a retry-safe command. */
+  respondToInteraction(command: InteractionResponseCommand, options?: {
+    signal?: AbortSignal;
+  }): Promise<SandboxInteractionCommandResult>;
   /**
    * Interrupt an execution without deleting the session. Pass `executionId`
    * to make the cancellation exact: a newer run on the same session is never
@@ -413,20 +477,16 @@ declare class SandboxSession {
   cancelRun(request: AgentRunCancellationRequest, options?: {
     signal?: AbortSignal;
   }): Promise<AgentRunCancellationAcknowledgement>;
-  /**
-   * Answer a question the agent asked via a question tool invocation. `answers`
-   * maps each question id to the selected option(s). Backend-agnostic: works
-   * with any backend that raises kind:"question" interactions — OpenCode
-   * natively, or CLI backends with `BackendConfig.interactions.question`
-   * enabled. Backends with no question support reject loudly.
-   */
-  answer(answers: Record<string, string[]>): Promise<void>;
+  /** Answer one exact question without selecting another outstanding ask. */
+  answer(interactionId: string, answers: InteractionData, options?: {
+    signal?: AbortSignal;
+  }): Promise<SandboxInteractionResult>;
   /** Return the newest plan awaiting a decision for this session. */
   plan(): Promise<DurablePlan | null>;
   /** Approve a durable plan and enqueue its separate execution turn. */
-  approvePlan(planId?: string): Promise<DurablePlan>;
+  approvePlan(planId?: string): Promise<DurablePlanDecisionResult>;
   /** Reject a durable plan with required feedback and enqueue a revision turn. */
-  rejectPlan(feedback: string, planId?: string): Promise<DurablePlan>;
+  rejectPlan(feedback: string, planId?: string): Promise<DurablePlanDecisionResult>;
   private requireCurrentPlan;
 }
 //#endregion
@@ -668,6 +728,23 @@ declare class SandboxInstance {
    * ```
    */
   startupDiagnostics(): StartupDiagnostics | null;
+  /**
+   * The platform verdict for the create call that returned this sandbox: did
+   * the call allocate the environment, or did it replay an earlier create that
+   * carried the same idempotency key.
+   *
+   * Present only on a freshly created box; `null` for a box resolved by id and
+   * `null` when the platform reported no receipt. Delete the environment only
+   * on a `created` outcome — every other value permits another caller to hold
+   * it, and a delete then destroys work that caller depends on.
+   *
+   * @example
+   * ```typescript
+   * const receipt = box.createReceipt();
+   * if (receipt?.outcome === "created") await box.delete();
+   * ```
+   */
+  createReceipt(): SandboxCreateReceipt | null;
   /**
    * Serialize to the public sandbox shape for logs and structured
    * output. Secrets in `connection` (currently `authToken`) are
@@ -1594,6 +1671,17 @@ declare class SandboxInstance {
     success: boolean;
     sessionId: string;
   }>;
+  /**
+   * Parse a sandbox API payload into `SandboxInfo`.
+   *
+   * `carryCreateFacts` supplies the create-time facts a refresh must keep:
+   * the GPU lease, the startup diagnostics, and the create receipt each arrive
+   * once on the create response and are absent from every later payload. They
+   * describe ONE environment's creation, so they travel only when the payload
+   * describes that same environment. A payload for a different sandbox — a
+   * branch child parsed through its parent — passes no carry, or the child
+   * would report its parent's create verdict.
+   */
   private parseInfo;
   private sleep;
   /**
@@ -1774,21 +1862,27 @@ declare class SandboxInstance {
   _attachTerminal(connectionId: string, options?: SandboxTerminalAttachOptions): Promise<TerminalStream>;
   /** @internal — invoked by InteractiveSessionHandle.stop(). */
   _stopInteractive(id: string): Promise<void>;
+  private interactionTransport;
+  /** @internal — invoked by SandboxSession.interactions(). */
+  _listInteractions(id: string, options?: {
+    signal?: AbortSignal;
+  }): Promise<InteractionRequest[]>;
+  /** @internal — invoked by SandboxSession.respondToInteraction(). */
+  _respondToInteraction(id: string, command: InteractionResponseCommand, options?: {
+    signal?: AbortSignal;
+  }): Promise<SandboxInteractionCommandResult>;
   /** @internal — invoked by SandboxSession.respondToPermission(). */
-  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<void>;
+  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<SandboxInteractionResult>;
   /** @internal — invoked by SandboxSession.interrupt(). */
   _interrupt(id: string, options?: SessionInterruptOptions): Promise<InterruptResult>;
   /** @internal — invoked by SandboxSession.cancelRun(). */
   _cancelRun(id: string, request: AgentRunCancellationRequest, options?: {
     signal?: AbortSignal;
   }): Promise<AgentRunCancellationAcknowledgement>;
-  /**
-   * @internal — invoked by SandboxSession.answer(). Resolves the session's
-   * outstanding question interaction and posts the answer through the
-   * interaction response route. The positional answer arrays map onto the
-   * question's `answerSpec` fields in order.
-   */
-  _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
+  /** @internal — invoked by SandboxSession.answer(). */
+  _answerQuestion(id: string, interactionId: string, answers: InteractionData, options?: {
+    signal?: AbortSignal;
+  }): Promise<SandboxInteractionResult>;
   /** @internal — invoked by SandboxSession.plan(). */
   _currentPlan(sessionId: string): Promise<DurablePlan | null>;
   /** @internal — invoked by SandboxSession.approvePlan()/rejectPlan(). */
@@ -1797,7 +1891,7 @@ declare class SandboxInstance {
   } | {
     outcome: "rejected";
     feedback: string;
-  }): Promise<DurablePlan>;
+  }): Promise<DurablePlanDecisionResult>;
 }
 //#endregion
-export { SandboxMcpEndpoint as A, RespondToPermissionOptions as C, CONTROL_PLANE_MCP_SERVER_NAME as D, BuildSandboxMcpConfigOptions as E, buildControlPlaneMcpConfig as M, buildSandboxMcpConfig as N, SANDBOX_MCP_SERVER_NAME as O, InterruptResult as S, BuildControlPlaneMcpConfigOptions as T, InteractiveAuthFile as _, WorkspaceImagePublishResult as a, InteractiveSessionInfo as b, TraceExportResult as c, exportTraceBundle as d, otelTraceIdForTangleTrace as f, InteractiveAttachOptions as g, SandboxSession as h, WorkspaceImagePublishRequestOptions as i, SandboxMcpServerEntry as j, SandboxMcpConfig as k, TraceExportSink as l, SandboxTaskSession as m, SandboxInstance as n, WorkspaceImages as o, toOtelJson as p, WorkspaceImagePublishInput as r, TraceExportFormat as s, HttpClient as t, buildTraceExportPayload as u, InteractiveSessionHandle as v, StartInteractiveOptions as w, InteractiveSessionStatus as x, InteractiveSessionHost as y };
+export { BuildSandboxMcpConfigOptions as A, RespondToPermissionOptions as C, SandboxInteractionResolution as D, SandboxInteractionConflict as E, SandboxMcpServerEntry as F, buildControlPlaneMcpConfig as I, buildSandboxMcpConfig as L, SANDBOX_MCP_SERVER_NAME as M, SandboxMcpConfig as N, SandboxInteractionResult as O, SandboxMcpEndpoint as P, InterruptResult as S, SandboxInteractionCommandResult as T, InteractiveAuthFile as _, WorkspaceImagePublishResult as a, InteractiveSessionInfo as b, TraceExportResult as c, exportTraceBundle as d, otelTraceIdForTangleTrace as f, InteractiveAttachOptions as g, SandboxSession as h, WorkspaceImagePublishRequestOptions as i, CONTROL_PLANE_MCP_SERVER_NAME as j, BuildControlPlaneMcpConfigOptions as k, TraceExportSink as l, SandboxTaskSession as m, SandboxInstance as n, WorkspaceImages as o, toOtelJson as p, WorkspaceImagePublishInput as r, TraceExportFormat as s, HttpClient as t, buildTraceExportPayload as u, InteractiveSessionHandle as v, StartInteractiveOptions as w, InteractiveSessionStatus as x, InteractiveSessionHost as y };

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-D8gFjIat.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-BBZKkva-.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-B37vhbje.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-CzFPb4Jm.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-B37vhbje.js → tangle-CzFPb4Jm.js}

@@ -1,5 +1,5 @@
 import { m as parseErrorResponse } from "./errors-D2aWy99l.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-EcY9ibhA.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-D2wREqmA.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-KcG-gz1O.d.ts → types-Dpj6Unaq.d.ts}

@@ -2077,6 +2077,28 @@ interface StartupDiagnostics {
   /** Derived map of operation name → measured duration in milliseconds. */
   phases: Record<string, number>;
 }
+/**
+ * What one `create()` call did to the sandbox environment.
+ *
+ * - `created`: the call allocated the environment. The platform states this
+ *   only when the create identity belonged to the call alone.
+ * - `idempotent_replay`: the platform returned the environment that an earlier
+ *   call with the same idempotency key allocated. The call allocated nothing.
+ * - `unknown`: the platform cannot prove either outcome, so another caller can
+ *   hold the environment.
+ */
+type SandboxCreateOutcome = "created" | "idempotent_replay" | "unknown";
+/**
+ * The platform verdict for one create call.
+ *
+ * Delete the environment only on a `created` outcome. `idempotencyKeyApplied`
+ * reports whether the idempotency key selected the environment: a false value
+ * means a retry of the same request allocates a second sandbox.
+ */
+interface SandboxCreateReceipt {
+  outcome: SandboxCreateOutcome;
+  idempotencyKeyApplied: boolean;
+}
 /**
  * Full sandbox information returned from the API.
  */
@@ -2116,6 +2138,13 @@ interface SandboxInfo {
    * directly.
    */
   startupDiagnostics?: StartupDiagnostics;
+  /**
+   * The platform verdict for the create call that returned this sandbox.
+   * Present only on the create response. An absent value means the platform
+   * reported no receipt: treat it as `unknown`, never as `created`. Use
+   * {@link SandboxInstance.createReceipt} rather than reading this directly.
+   */
+  createReceipt?: SandboxCreateReceipt;
   /** Resolved egress policy */
   egressPolicy?: EgressPolicy;
   /** Source of the egress policy */
@@ -2495,6 +2524,15 @@ type DurablePlan = DurablePlanSnapshot & ({
   withdrawnAt: string;
   reason: string;
 });
+interface DurablePlanDecisionResult {
+  plan: DurablePlan;
+  followUp: {
+    turnId: string;
+    state: "queued" | "leased" | "started" | "completed" | "failed";
+  };
+  /** True when the server replayed a decision it had already recorded. */
+  idempotent: boolean;
+}
 /**
  * A tool the agent invoked during a run. `isError` flags a failed call
  * (errored, timed out, or rejected — e.g. a hub approval gate). Failed tools
@@ -2526,10 +2564,10 @@ interface AgentApprovalRequirement {
 /**
  * A question the agent asked mid-run. Present on a result when
  * `status === "awaiting_question"`. Answer via
- * `box.session(id).answer({ [questionId]: [...selected] })`, then re-run.
+ * `box.session(id).answer(questionId, { [field]: value })`, then re-run.
  */
 interface AgentQuestionRequest {
-  /** Question id to pass to `session.answer`. */
+  /** Exact interaction id to pass as the first argument to `session.answer`. */
   questionId: string;
   /** The questions payload the agent emitted (prompt + options per entry). */
   questions: unknown;
@@ -3127,7 +3165,12 @@ interface SandboxRuntimeCapabilities {
     eventReplay: boolean;
   };
   interactions: {
-    /** Interaction-response dedupe. Absent until the feature ships. */responseDedupe?: boolean;
+    /** Every acknowledged interaction resolution is recorded: repeating a
+     *  response replays the recorded resolution, and a different answer for
+     *  a recorded resolution raises a 409 `StateError`. The deployment
+     *  refuses with 503 rather than acknowledge a resolution it cannot
+     *  record. Absent on an image that predates the flag. */
+    responseDedupe?: boolean;
   };
 }
 /**
@@ -6260,4 +6303,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EventStreamOptions as $, BatchSidecarGroup as $i, SandboxFleetCostEstimate as $n, SentSessionMessage as $r, ListSandboxFleetOptions as $t, CreateSandboxFleetTokenOptions as A, TokenUsage as Ai, PublishPublicTemplateVersionOptions as An, SandboxResources as Ar, GitCommit as At, DownloadOptions as B, WriteManyOptions as Bi, RolloutOptions as Bn, SandboxTraceBundle as Br, GpuLeaseProviderName as Bt, CodeResultPart as C, TaskSessionProfile as Ci, ProvisionEvent as Cn, SandboxFleetWorkspaceSnapshotResult as Cr, FleetExecDispatchResult as Ct, CreateIntelligenceReportOptions as D, TeePublicKey as Di, PublicTemplateInfo as Dn, SandboxPortBinding as Dr, GPU_LEASE_PROVIDER_NAMES as Dt, CreateGpuLeaseOptions as E, TeeAttestationResponse as Ei, ProvisionStep as En, SandboxIntelligenceEnvelope as Er, FleetPromptDispatchResult as Et, DeleteOptions as F, UsageInfo as Fi, RenameOptions as Fn, SandboxTerminalCreateOptions as Fr, GpuLeaseBilling as Ft, DriverType as G, TerminalStreamAuthFormat as Gi, SSHCommandDescriptor as Gn, ScopedToken as Gr, IntelligenceReport as Gt, DriveTurnOptions as H, TerminalExitInfo as Hi, RolloutStartResult as Hn, SandboxTraceExport as Hr, HostAgentDriverConfig as Ht, DevServerInfo as I, WaitForOptions as Ii, RestoreSnapshotOptions as In, SandboxTerminalInfo as Ir, GpuLeaseCommandResult as It, EffectiveBackendProfile as J, TerminalStreamOptions as Ji, SandboxConnection as Jn, SearchOptions as Jr, IntelligenceReportSubjectType as Jt, DurablePlan as K, TerminalStreamError as Ki, SSHCredentials as Kn, ScopedTokenScope as Kr, IntelligenceReportBudget as Kt, DirectoryPermission as L, WaitForRolloutOptions as Li, ResumeOptions as Ln, SandboxTerminalManager as Lr, GpuLeaseExecOptions as Lt, CreateSandboxOptions as M, UpdateUserOptions as Mi, ReapExpiredSandboxFleetsResult as Mn, SandboxRuntimeHealth as Mr, GitDiff as Mt, CreateSessionOptions as N, UploadOptions as Ni, ReconcileSandboxFleetsOptions as Nn, SandboxStatus as Nr, GitStatus as Nt, CreateRequestOptions as O, TeePublicKeyResponse as Oi, PublicTemplateVersionInfo as On, SandboxPortPreviewLink as Or, GitAuth as Ot, CreateTaskSessionOptions as P, UploadProgress as Pi, ReconcileSandboxFleetsResult as Pn, SandboxTerminalAttachOptions as Pr, GpuLease as Pt, EnsureDevServerOptions as Q, BatchEventDataMap as Qi, SandboxFleetArtifactSpec as Qn, SendSessionMessageRequest as Qr, ListOptions as Qt, DispatchPromptOptions as R, WriteFileOptions as Ri, Rollout as Rn, SandboxTerminalRequestOptions as Rr, GpuLeaseExecResult as Rt, CodeLanguage as S, TaskSessionInfo as Si, PromptResult as Sn, SandboxFleetWorkspaceRestoreResult as Sr, FleetExecDispatchOptions as St, CompletedTurnResult as T, TeeAttestationReport as Ti, ProvisionStatus as Tn, SandboxInfo as Tr, FleetPromptDispatchOptions as Tt, DriverConfig as U, TerminalReadyInfo as Ui, RolloutStatus as Un, SandboxTraceOptions as Ur, HostAgentRuntimeBackend as Ut, DownloadProgress as V, TERMINAL_WS_ECHO_SUBPROTOCOL as Vi, RolloutScorer as Vn, SandboxTraceEvent as Vr, GpuLeaseStatus as Vt, DriverInfo as W, TerminalStream as Wi, RolloutTurnPart as Wn, SandboxUser as Wr, InstalledTool as Wt, EgressManager as X, BatchBackendStats as Xi, SandboxEvent as Xn, SecretsManager as Xr, JsonValue as Xt, EffectiveBackendSource as Y, TerminalStreamToken as Yi, SandboxEnvironment as Yn, SecretInfo as Yr, IntelligenceReportWindow as Yt, EgressPolicy as Z, BatchEvent as Zi, SandboxFleetArtifact as Zn, SendSessionMessageOptions as Zr, ListMessagesOptions as Zt, BranchOptions as _, StorageConfig as _i, ProcessSignal as _n, SandboxFleetTraceExport as _r, FleetDispatchResultBuffer as _t, AttachSandboxFleetMachineOptions as a, SessionInterruptOptions as ai, NetworkManager as an, SandboxFleetIntelligenceEnvelope as ar, FileReadBatchResult as at, CodeExecutionOptions as b, TaskSessionCommitResult as bi, PromptInputPart as bn, SandboxFleetWorkspace as br, FleetDriveTurnOutcome as bt, BackendInfo as c, SessionMessageInputPart as ci, PermissionsManager as cn, SandboxFleetMachineRecord as cr, FileRenameResult as ct, BatchBackend as d, SnapshotInfo as di, PreviewLinkWaitOptions as dn, SandboxFleetManifestMachine as dr, FileTreeOptions as dt, BatchTaskUsage as ea, SessionBackendCredentials as ei, ListSandboxOptions as en, SandboxFleetDispatchFailureClass as er, ExactProcessSpawnOptions as et, BatchResult as f, SnapshotOptions as fi, Process as fn, SandboxFleetOperationsSummary as fr, FileTreeResult as ft, BatchTaskResult as g, StartupOperation as gi, ProcessManager as gn, SandboxFleetTraceEvent as gr, FleetDispatchCancelResult as gt, BatchTask as h, StartupDiagnostics as hi, ProcessLogEntry as hn, SandboxFleetTraceBundle as hr, FileWriteResult as ht, AttachGpuLeaseOptions as i, SessionInfo as ii, NetworkConfig as in, SandboxFleetInfo as ir, FileReadBatchOptions as it, CreateSandboxFleetWithCoordinatorOptions as j, TurnDriveResult as ji, ReapExpiredSandboxFleetsOptions as jn, SandboxRuntimeCapabilities as jr, GitConfig as jt, CreateSandboxFleetOptions as k, TokenRefreshHandler as ki, PublishPublicTemplateOptions as kn, SandboxResourceUsage as kr, GitBranch as kt, BackendManager as l, SessionResultOptions as li, PreviewLinkInfo as ln, SandboxFleetMachineSpec as lr, FileSystem as lt, BatchRunRequest as m, SshKeysManager as mi, ProcessListOptions as mn, SandboxFleetToken as mr, FileUsageResult as mt, AccessPolicyRule as n, BackendType as na, SessionFailureReason as ni, MintScopedTokenOptions as nn, SandboxFleetDriverCapability as nr, ExecResult as nt, BackendCapabilities as o, SessionListOptions as oi, NonHostAgentDriverConfig as on, SandboxFleetMachine as or, FileReadError as ot, BatchRunOptions as p, SnapshotResult as pi, ProcessInfo as pn, SandboxFleetPolicy as pr, FileUsageOptions as pt, EffectiveBackend as q, TerminalStreamHandlers as qi, SandboxConfig as qn, SearchMatch as qr, IntelligenceReportCompareTo as qt, AddUserOptions as r, parseBackendType as ra, SessionForkOptions as ri, MkdirOptions as rn, SandboxFleetDriverTimings as rr, FileInfo as rt, BackendConfig as s, SessionMessage as si, PermissionLevel as sn, SandboxFleetMachineMeteredUsage as sr, FileReadResult as st, AcceleratorKind as t, PublicBatchRunRequest as ta, SessionEventStreamOptions as ti, McpServerConfig as tn, SandboxFleetDispatchResponse as tr, ExecOptions as tt, BackendStatus as u, SessionStatus as ui, PreviewLinkManager as un, SandboxFleetManifest as ur, FileTreeFile as ut, ChunkedUploadOptions as v, SubscriptionInfo as vi, ProcessSpawnOptions as vn, SandboxFleetTraceOptions as vr, FleetDispatchResultBufferOptions as vt, CommitTaskSessionOptions as w, TeeAttestationOptions as wi, ProvisionResult as wn, SandboxIdentity as wr, FleetMachineId as wt, CodeExecutionResult as x, TaskSessionFileChange as xi, PromptOptions as xn, SandboxFleetWorkspaceReconcileResult as xr, FleetDriveTurnRequest as xt, ChunkedUploadResult as y, TaskSessionChanges as yi, ProcessStatus as yn, SandboxFleetUsage as yr, FleetDispatchStreamOptions as yt, DispatchedSession as z, WriteManyFile as zi, RolloutChildResult as zn, SandboxTerminals as zr, GpuLeaseManager as zt };
+export { EnsureDevServerOptions as $, BatchBackendStats as $i, SandboxEvent as $n, SecretsManager as $r, ListOptions as $t, CreateSandboxFleetTokenOptions as A, TeePublicKey as Ai, PublishPublicTemplateOptions as An, SandboxPortBinding as Ar, GitBranch as At, DownloadOptions as B, WaitForRolloutOptions as Bi, RolloutChildResult as Bn, SandboxTerminalManager as Br, GpuLeaseManager as Bt, CodeResultPart as C, TaskSessionCommitResult as Ci, PromptResult as Cn, SandboxFleetWorkspace as Cr, FleetExecDispatchOptions as Ct, CreateIntelligenceReportOptions as D, TeeAttestationOptions as Di, ProvisionStep as Dn, SandboxIdentity as Dr, FleetPromptDispatchResult as Dt, CreateGpuLeaseOptions as E, TaskSessionProfile as Ei, ProvisionStatus as En, SandboxFleetWorkspaceSnapshotResult as Er, FleetPromptDispatchOptions as Et, DeleteOptions as F, UpdateUserOptions as Fi, ReconcileSandboxFleetsResult as Fn, SandboxRuntimeHealth as Fr, GpuLease as Ft, DriverType as G, TerminalExitInfo as Gi, RolloutTurnPart as Gn, SandboxTraceExport as Gr, InstalledTool as Gt, DriveTurnOptions as H, WriteManyFile as Hi, RolloutScorer as Hn, SandboxTerminals as Hr, GpuLeaseStatus as Ht, DevServerInfo as I, UploadOptions as Ii, RenameOptions as In, SandboxStatus as Ir, GpuLeaseBilling as It, EffectiveBackend as J, TerminalStreamAuthFormat as Ji, SandboxConfig as Jn, ScopedToken as Jr, IntelligenceReportCompareTo as Jt, DurablePlan as K, TerminalReadyInfo as Ki, SSHCommandDescriptor as Kn, SandboxTraceOptions as Kr, IntelligenceReport as Kt, DirectoryPermission as L, UploadProgress as Li, RestoreSnapshotOptions as Ln, SandboxTerminalAttachOptions as Lr, GpuLeaseCommandResult as Lt, CreateSandboxOptions as M, TokenRefreshHandler as Mi, ReapExpiredSandboxFleetsOptions as Mn, SandboxResourceUsage as Mr, GitConfig as Mt, CreateSessionOptions as N, TokenUsage as Ni, ReapExpiredSandboxFleetsResult as Nn, SandboxResources as Nr, GitDiff as Nt, CreateRequestOptions as O, TeeAttestationReport as Oi, PublicTemplateInfo as On, SandboxInfo as Or, GPU_LEASE_PROVIDER_NAMES as Ot, CreateTaskSessionOptions as P, TurnDriveResult as Pi, ReconcileSandboxFleetsOptions as Pn, SandboxRuntimeCapabilities as Pr, GitStatus as Pt, EgressPolicy as Q, TerminalStreamToken as Qi, SandboxEnvironment as Qn, SecretInfo as Qr, ListMessagesOptions as Qt, DispatchPromptOptions as R, UsageInfo as Ri, ResumeOptions as Rn, SandboxTerminalCreateOptions as Rr, GpuLeaseExecOptions as Rt, CodeLanguage as S, TaskSessionChanges as Si, PromptOptions as Sn, SandboxFleetUsage as Sr, FleetDriveTurnRequest as St, CompletedTurnResult as T, TaskSessionInfo as Ti, ProvisionResult as Tn, SandboxFleetWorkspaceRestoreResult as Tr, FleetMachineId as Tt, DriverConfig as U, WriteManyOptions as Ui, RolloutStartResult as Un, SandboxTraceBundle as Ur, HostAgentDriverConfig as Ut, DownloadProgress as V, WriteFileOptions as Vi, RolloutOptions as Vn, SandboxTerminalRequestOptions as Vr, GpuLeaseProviderName as Vt, DriverInfo as W, TERMINAL_WS_ECHO_SUBPROTOCOL as Wi, RolloutStatus as Wn, SandboxTraceEvent as Wr, HostAgentRuntimeBackend as Wt, EffectiveBackendSource as X, TerminalStreamHandlers as Xi, SandboxCreateOutcome as Xn, SearchMatch as Xr, IntelligenceReportWindow as Xt, EffectiveBackendProfile as Y, TerminalStreamError as Yi, SandboxConnection as Yn, ScopedTokenScope as Yr, IntelligenceReportSubjectType as Yt, EgressManager as Z, TerminalStreamOptions as Zi, SandboxCreateReceipt as Zn, SearchOptions as Zr, JsonValue as Zt, BranchOptions as _, SshKeysManager as _i, ProcessManager as _n, SandboxFleetToken as _r, FleetDispatchCancelResult as _t, AttachSandboxFleetMachineOptions as a, BackendType as aa, SessionFailureReason as ai, NetworkConfig as an, SandboxFleetDriverCapability as ar, FileReadBatchOptions as at, CodeExecutionOptions as b, StorageConfig as bi, ProcessStatus as bn, SandboxFleetTraceExport as br, FleetDispatchStreamOptions as bt, BackendInfo as c, SessionInterruptOptions as ci, PermissionLevel as cn, SandboxFleetIntelligenceEnvelope as cr, FileReadResult as ct, BatchBackend as d, SessionMessageInputPart as di, PreviewLinkManager as dn, SandboxFleetMachineRecord as dr, FileTreeFile as dt, BatchEvent as ea, SendSessionMessageOptions as ei, ListSandboxFleetOptions as en, SandboxFleetArtifact as er, EventStreamOptions as et, BatchResult as f, SessionResultOptions as fi, PreviewLinkWaitOptions as fn, SandboxFleetMachineSpec as fr, FileTreeOptions as ft, BatchTaskResult as g, SnapshotResult as gi, ProcessLogEntry as gn, SandboxFleetPolicy as gr, FileWriteResult as gt, BatchTask as h, SnapshotOptions as hi, ProcessListOptions as hn, SandboxFleetOperationsSummary as hr, FileUsageResult as ht, AttachGpuLeaseOptions as i, PublicBatchRunRequest as ia, SessionEventStreamOptions as ii, MkdirOptions as in, SandboxFleetDispatchResponse as ir, FileInfo as it, CreateSandboxFleetWithCoordinatorOptions as j, TeePublicKeyResponse as ji, PublishPublicTemplateVersionOptions as jn, SandboxPortPreviewLink as jr, GitCommit as jt, CreateSandboxFleetOptions as k, TeeAttestationResponse as ki, PublicTemplateVersionInfo as kn, SandboxIntelligenceEnvelope as kr, GitAuth as kt, BackendManager as l, SessionListOptions as li, PermissionsManager as ln, SandboxFleetMachine as lr, FileRenameResult as lt, BatchRunRequest as m, SnapshotInfo as mi, ProcessInfo as mn, SandboxFleetManifestMachine as mr, FileUsageOptions as mt, AccessPolicyRule as n, BatchSidecarGroup as na, SentSessionMessage as ni, McpServerConfig as nn, SandboxFleetCostEstimate as nr, ExecOptions as nt, BackendCapabilities as o, parseBackendType as oa, SessionForkOptions as oi, NetworkManager as on, SandboxFleetDriverTimings as or, FileReadBatchResult as ot, BatchRunOptions as p, SessionStatus as pi, Process as pn, SandboxFleetManifest as pr, FileTreeResult as pt, DurablePlanDecisionResult as q, TerminalStream as qi, SSHCredentials as qn, SandboxUser as qr, IntelligenceReportBudget as qt, AddUserOptions as r, BatchTaskUsage as ra, SessionBackendCredentials as ri, MintScopedTokenOptions as rn, SandboxFleetDispatchFailureClass as rr, ExecResult as rt, BackendConfig as s, SessionInfo as si, NonHostAgentDriverConfig as sn, SandboxFleetInfo as sr, FileReadError as st, AcceleratorKind as t, BatchEventDataMap as ta, SendSessionMessageRequest as ti, ListSandboxOptions as tn, SandboxFleetArtifactSpec as tr, ExactProcessSpawnOptions as tt, BackendStatus as u, SessionMessage as ui, PreviewLinkInfo as un, SandboxFleetMachineMeteredUsage as ur, FileSystem as ut, ChunkedUploadOptions as v, StartupDiagnostics as vi, ProcessSignal as vn, SandboxFleetTraceBundle as vr, FleetDispatchResultBuffer as vt, CommitTaskSessionOptions as w, TaskSessionFileChange as wi, ProvisionEvent as wn, SandboxFleetWorkspaceReconcileResult as wr, FleetExecDispatchResult as wt, CodeExecutionResult as x, SubscriptionInfo as xi, PromptInputPart as xn, SandboxFleetTraceOptions as xr, FleetDriveTurnOutcome as xt, ChunkedUploadResult as y, StartupOperation as yi, ProcessSpawnOptions as yn, SandboxFleetTraceEvent as yr, FleetDispatchResultBufferOptions as yt, DispatchedSession as z, WaitForOptions as zi, Rollout as zn, SandboxTerminalInfo as zr, GpuLeaseExecResult as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.22.0",
+  "version": "0.23.0-develop.20260814092444.5f93bc1",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",
@@ -87,8 +87,8 @@
     "url": "https://github.com/tangle-network/agent-dev-container/issues"
   },
   "dependencies": {
-    "@tangle-network/agent-core": "0.6.1",
-    "@tangle-network/agent-interface": "0.47.0",
+    "@tangle-network/agent-core": "0.7.3",
+    "@tangle-network/agent-interface": "0.51.0",
     "zod": "4.4.3"
   },
   "peerDependencies": {