@tangle-network/sandbox 0.27.2 → 0.28.0-develop.20260819001319.32159f4

package/README.md

@@ -28,7 +28,7 @@ export SANDBOX_BASE_URL=https://sandbox.tangle.tools
 | Collaborative document clients and file bridging | `@tangle-network/sandbox/collaboration` |
 | Browser WebSocket session streaming and replay | `@tangle-network/sandbox/session-gateway` |
 | OpenAI-compatible request and event translation | `@tangle-network/sandbox/openai` |
-| Agent framework tool packs and the local MCP bridge | `@tangle-network/sandbox/agent` |
+| Multiple managed Agents, framework tool packs, and the local MCP bridge | `@tangle-network/sandbox/agent` |
 | Browser-safe trace reads from Tangle Intelligence | `@tangle-network/sandbox/intelligence` |
 
 Install an optional peer dependency only when the selected integration requires it.
@@ -109,6 +109,93 @@ for (const environment of environments) {
 Use `bare: true` for a minimal container with command execution and lifecycle controls.
 Use `agent: false` for managed files, processes, and telemetry without configuring an agent backend.
 
+## Run several Agents in one Sandbox
+
+Import the Agent entrypoint when one Sandbox should host several AgentProfiles.
+It re-exports the main client and installs the typed `box.agents` namespace.
+
+```typescript
+import type { AgentProfile } from "@tangle-network/agent-interface";
+import { Sandbox } from "@tangle-network/sandbox/agent";
+
+const client = new Sandbox({
+  apiKey: process.env.TANGLE_API_KEY!,
+  baseUrl: process.env.SANDBOX_BASE_URL!,
+});
+
+const plannerProfile = {
+  name: "planner",
+  harness: "opencode",
+  prompt: { appendSystemPrompt: "Plan before editing files." },
+} satisfies AgentProfile;
+
+const implementerProfile = {
+  name: "implementer",
+  harness: "claude-code",
+  prompt: { appendSystemPrompt: "Implement the request and run tests." },
+} satisfies AgentProfile;
+
+const box = await client.create({
+  environment: "universal",
+  agent: false,
+});
+
+try {
+  const [planner, implementer] = await box.agents.startMany([
+    {
+      id: "planner-v1",
+      backend: { type: "opencode", profile: plannerProfile },
+    },
+    {
+      id: "implementer-v1",
+      backend: { type: "claude-code", profile: implementerProfile },
+    },
+  ]);
+
+  const [plan, implementation] = await Promise.all([
+    planner.prompt("Inspect the repository and produce a precise plan."),
+    implementer.prompt("Inspect the repository and implement the request."),
+  ]);
+
+  console.log(plan.response);
+  console.log(implementation.response);
+} finally {
+  await box.delete();
+}
+```
+
+Each returned Agent is the existing durable `SandboxSession` handle. Different
+session ids may run in parallel; turns inside one session remain serialized.
+Use a stable id and `box.agents.get(id)` to reattach from another process.
+
+Shared workspace is the default. Use the existing task-session Git-worktree
+path when file changes or profile control files must remain isolated:
+
+```typescript
+const reviewer = await box.agents.start({
+  id: "reviewer",
+  backend: { type: "codex", profile: reviewerProfile },
+  workspace: { mode: "isolated", parentSessionId: "implementer-v1" },
+});
+
+const changes = await reviewer.changes();
+await reviewer.commit({ message: "Apply reviewer changes" });
+```
+
+An isolated Agent requires a Git repository and returns `SandboxTaskSession`.
+Agents in one Sandbox share a broad trust and resource boundary. Use separate
+Sandboxes for mutually untrusted Agents, separate tenants, or hard resource
+isolation.
+
+Applications that already import from the root can install the namespace with:
+
+```typescript
+import { Sandbox } from "@tangle-network/sandbox";
+import "@tangle-network/sandbox/agent";
+```
+
+See `examples/multi-agent-sandbox.ts` for a complete runnable example.
+
 ## Lifecycle
 
 The active states are `pending`, `provisioning`, `running`, `stopped`, `failed`, and `expired`.
@@ -409,6 +496,7 @@ The root entrypoint exports the primary client, instance, session, fleet, image,
 |---|---|
 | Account client | `Sandbox` |
 | One environment | `SandboxInstance` |
+| One or more managed Agents in a Sandbox | `box.agents` from the `/agent` entrypoint |
 | Continued conversation | `SandboxSession` |
 | Coordinated environments | `SandboxFleetClient`, `SandboxFleet` |
 | Reusable images | `Image`, `ImageBuilder` |

package/dist/agent/index.d.ts

@@ -1,8 +1,98 @@
-import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, x as CodeExecutionResult } from "../types-DL7FzacJ.js";
-import { r as SandboxInstance } from "../sandbox-BoBp6F83.js";
-import { i as Sandbox } from "../client-DZxBi30R.js";
+import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BpmHeBK1.js";
+import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, fi as SessionInfo, mi as SessionListOptions, s as BackendConfig, x as CodeExecutionResult } from "../types-jfr4fgD3.js";
+import { i as Sandbox } from "../client-CtbXjqd2.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
+//#region src/agent/instances.d.ts
+/**
+ * Workspace semantics for one managed Agent inside a Sandbox.
+ *
+ * `shared` uses the Sandbox's ordinary project workspace. `isolated` uses the
+ * existing task-session Git worktree and exposes `changes()` and `commit()`.
+ * Neither mode is a security boundary between mutually untrusted processes.
+ */
+type SandboxAgentWorkspace = {
+  mode: "shared";
+} | {
+  mode: "isolated";
+  parentSessionId?: string;
+};
+/** Start one managed Agent session inside an existing Sandbox. */
+interface SandboxAgentSpec {
+  /** Stable session id. Omit to generate one. */
+  id?: string;
+  /** Human-readable session title. */
+  name?: string;
+  /** Exact harness, profile, model, and credential configuration. */
+  backend: BackendConfig;
+  /** Defaults to `{ mode: "shared" }`. */
+  workspace?: SandboxAgentWorkspace;
+}
+/**
+ * An Agent is the SDK's existing durable session handle.
+ *
+ * Isolated Agents are `SandboxTaskSession` instances, which extend
+ * `SandboxSession` with `changes()` and `commit()`.
+ */
+type SandboxAgent = SandboxSession | SandboxTaskSession;
+/** Exact handle returned for a statically known Agent specification. */
+type SandboxAgentForSpec<Spec extends SandboxAgentSpec> = Spec extends {
+  workspace: {
+    mode: "isolated";
+  };
+} ? SandboxTaskSession : SandboxSession;
+interface SandboxAgentStopAcknowledgement {
+  agentId: string;
+  outcome: "stopped" | "not-found";
+}
+/**
+ * A thin namespace over the Sandbox's durable session APIs.
+ *
+ * The manager stores no Agent lifecycle state. The sidecar session store and
+ * backend manager remain authoritative, so a new SDK process can reattach with
+ * `get()` or the existing `box.session(id)` API.
+ */
+declare class SandboxAgentManager {
+  private readonly sandbox;
+  /** @internal Constructed by the `box.agents` getter. */
+  constructor(sandbox: SandboxInstance);
+  start<const Spec extends SandboxAgentSpec>(spec: Spec): Promise<SandboxAgentForSpec<Spec>>;
+  /**
+   * Start independent Agent sessions concurrently.
+   *
+   * This is intentionally not an atomic transaction: if one start fails,
+   * another may already have succeeded. Use stable ids and `list()`/`get()` to
+   * inspect the durable result before retrying or cleaning up.
+   */
+  startMany<const Specs extends readonly SandboxAgentSpec[]>(specs: Specs): Promise<{ -readonly [Index in keyof Specs]: SandboxAgentForSpec<Specs[Index]> }>;
+  /** Reattach to a durable Agent session from any SDK process. */
+  get(id: string): Promise<SandboxSession | null>;
+  /**
+   * Reattach to an isolated Agent when the caller knows it was created through
+   * the task-session path. The returned handle validates itself on first use.
+   */
+  task(id: string): SandboxTaskSession;
+  /** List the Sandbox's durable Agent sessions. */
+  list(options?: SessionListOptions): Promise<Array<{
+    session: SandboxSession;
+    info: SessionInfo;
+  }>>;
+  /** Stop one Agent without stopping its Sandbox or sibling sessions. */
+  stop(id: string, options?: {
+    force?: boolean;
+  }): Promise<SandboxAgentStopAcknowledgement>;
+  private startPrepared;
+}
+/**
+ * Importing `@tangle-network/sandbox/agent` installs the typed `box.agents`
+ * namespace. The getter is lazy and keeps no correctness-relevant state.
+ */
+declare module "../sandbox.js" {
+  interface SandboxInstance {
+    readonly agents: SandboxAgentManager;
+  }
+}
+//#endregion
 //#region src/agent/tools/_specs.d.ts
 /** JSON-schema-ish object describing tool inputs. Plain object literal — no Zod required. */
 type ToolJSONSchema = {
@@ -522,4 +612,4 @@ type AnyTool = unknown;
  */
 declare function vercelAiTools(box: SandboxInstance, options?: VercelAiToolPackOptions): Promise<Record<string, AnyTool>>;
 //#endregion
-export { ALL_FLEET_TOOL_SPECS, ALL_LIFECYCLE_TOOL_SPECS, ALL_TOOL_SPECS, type AnthropicFleetTool, type AnthropicFleetToolPack, type AnthropicLifecycleTool, type AnthropicLifecycleToolPack, type AnthropicTool, type AnthropicToolPack, type AnthropicToolPackOptions, type AnthropicToolResultBlock, type AnthropicToolUseBlock, type CodeExecutionOptions, type CodeExecutionResult, type CodeLanguage, type CodeResultPart, FLEET_TOOL_SPECS, type FleetToolHandlerContext, type FleetToolName, type FleetToolPackOptions, type FleetToolSpec, LIFECYCLE_TOOL_SPECS, type LifecycleToolHandlerContext, type LifecycleToolName, type LifecycleToolPackOptions, type LifecycleToolSpec, type MastraToolPackOptions, type McpServerHandle, type McpServerOptions, type OpenAIFleetTool, type OpenAIFleetToolPack, type OpenAILifecycleTool, type OpenAILifecycleToolPack, type OpenAITool, type OpenAIToolCall, type OpenAIToolPack, type OpenAIToolPackOptions, type OpenAIToolResultMessage, TOOL_SPECS, type ToolHandlerContext, type ToolName, type ToolSpec, type VercelAiToolPackOptions, anthropicFleetTools, anthropicLifecycleTools, anthropicTools, createMcpServer, mastraFleetTools, mastraTools, openaiFleetTools, openaiLifecycleTools, openaiTools, runCode, vercelAiFleetTools, vercelAiTools };
+export { ALL_FLEET_TOOL_SPECS, ALL_LIFECYCLE_TOOL_SPECS, ALL_TOOL_SPECS, type AnthropicFleetTool, type AnthropicFleetToolPack, type AnthropicLifecycleTool, type AnthropicLifecycleToolPack, type AnthropicTool, type AnthropicToolPack, type AnthropicToolPackOptions, type AnthropicToolResultBlock, type AnthropicToolUseBlock, type CodeExecutionOptions, type CodeExecutionResult, type CodeLanguage, type CodeResultPart, FLEET_TOOL_SPECS, type FleetToolHandlerContext, type FleetToolName, type FleetToolPackOptions, type FleetToolSpec, LIFECYCLE_TOOL_SPECS, type LifecycleToolHandlerContext, type LifecycleToolName, type LifecycleToolPackOptions, type LifecycleToolSpec, type MastraToolPackOptions, type McpServerHandle, type McpServerOptions, type OpenAIFleetTool, type OpenAIFleetToolPack, type OpenAILifecycleTool, type OpenAILifecycleToolPack, type OpenAITool, type OpenAIToolCall, type OpenAIToolPack, type OpenAIToolPackOptions, type OpenAIToolResultMessage, Sandbox, type SandboxAgent, type SandboxAgentForSpec, SandboxAgentManager, type SandboxAgentSpec, type SandboxAgentStopAcknowledgement, type SandboxAgentWorkspace, TOOL_SPECS, type ToolHandlerContext, type ToolName, type ToolSpec, type VercelAiToolPackOptions, anthropicFleetTools, anthropicLifecycleTools, anthropicTools, createMcpServer, mastraFleetTools, mastraTools, openaiFleetTools, openaiLifecycleTools, openaiTools, runCode, vercelAiFleetTools, vercelAiTools };

package/dist/agent/index.js

@@ -1,4 +1,142 @@
+import { f as assertCurrentBackendType } from "../runtime-api-CK-4S7oA.js";
+import { d as StateError, o as NotFoundError, p as ValidationError } from "../errors-C6kn-3zt.js";
+import { n as Sandbox } from "../client-BBKAFyDE.js";
+import { t as SandboxInstance } from "../sandbox-NvbxFwTv.js";
 import { createRequire } from "node:module";
+//#region src/agent/instances.ts
+const managers = /* @__PURE__ */ new WeakMap();
+function generateAgentId() {
+	const crypto = globalThis.crypto;
+	if (crypto?.randomUUID) return `agent-${crypto.randomUUID()}`;
+	if (crypto?.getRandomValues) {
+		const bytes = crypto.getRandomValues(new Uint8Array(16));
+		return `agent-${Array.from(bytes, (value) => value.toString(16).padStart(2, "0")).join("")}`;
+	}
+	throw new Error("Agent id generation requires global crypto");
+}
+function validateAgentId(id) {
+	const value = id.trim();
+	if (value.length < 1 || value.length > 128 || !/^[A-Za-z0-9](?:[A-Za-z0-9._:-]*[A-Za-z0-9])?$/u.test(value)) throw new ValidationError("Agent id must be 1-128 visible alphanumeric, '.', '_', ':', or '-' characters");
+	return value;
+}
+function prepareAgentSpec(spec) {
+	if (spec.backend.type !== void 0) assertCurrentBackendType(spec.backend.type);
+	const callerSelectedId = spec.id !== void 0;
+	const id = validateAgentId(spec.id ?? generateAgentId());
+	const name = spec.name?.trim();
+	if (name !== void 0 && name.length === 0) throw new ValidationError("Agent name cannot be empty");
+	return {
+		id,
+		callerSelectedId,
+		...name !== void 0 ? { name } : {},
+		backend: spec.backend,
+		workspace: spec.workspace ?? { mode: "shared" }
+	};
+}
+/**
+* A thin namespace over the Sandbox's durable session APIs.
+*
+* The manager stores no Agent lifecycle state. The sidecar session store and
+* backend manager remain authoritative, so a new SDK process can reattach with
+* `get()` or the existing `box.session(id)` API.
+*/
+var SandboxAgentManager = class {
+	/** @internal Constructed by the `box.agents` getter. */
+	constructor(sandbox) {
+		this.sandbox = sandbox;
+	}
+	async start(spec) {
+		return this.startPrepared(prepareAgentSpec(spec));
+	}
+	/**
+	* Start independent Agent sessions concurrently.
+	*
+	* This is intentionally not an atomic transaction: if one start fails,
+	* another may already have succeeded. Use stable ids and `list()`/`get()` to
+	* inspect the durable result before retrying or cleaning up.
+	*/
+	async startMany(specs) {
+		const prepared = specs.map(prepareAgentSpec);
+		const ids = /* @__PURE__ */ new Set();
+		for (const spec of prepared) {
+			if (ids.has(spec.id)) throw new ValidationError(`Duplicate Agent id in one startMany call: ${spec.id}`);
+			ids.add(spec.id);
+		}
+		return Promise.all(prepared.map((spec) => this.startPrepared(spec)));
+	}
+	/** Reattach to a durable Agent session from any SDK process. */
+	async get(id) {
+		const session = this.sandbox.session(validateAgentId(id));
+		return await session.status() ? session : null;
+	}
+	/**
+	* Reattach to an isolated Agent when the caller knows it was created through
+	* the task-session path. The returned handle validates itself on first use.
+	*/
+	task(id) {
+		return this.sandbox.taskSession(validateAgentId(id));
+	}
+	/** List the Sandbox's durable Agent sessions. */
+	list(options) {
+		return this.sandbox.sessions(options);
+	}
+	/** Stop one Agent without stopping its Sandbox or sibling sessions. */
+	async stop(id, options = {}) {
+		const agentId = validateAgentId(id);
+		const session = this.sandbox.session(agentId);
+		const current = await session.status();
+		if (!current) return {
+			agentId,
+			outcome: "not-found"
+		};
+		if (options.force === true && current.activeExecutionId) await session.interrupt({ executionId: current.activeExecutionId }).catch(() => void 0);
+		try {
+			await session.delete();
+			return {
+				agentId,
+				outcome: "stopped"
+			};
+		} catch (error) {
+			if (error instanceof NotFoundError) return {
+				agentId,
+				outcome: "not-found"
+			};
+			throw error;
+		}
+	}
+	async startPrepared(spec) {
+		if (spec.callerSelectedId) {
+			if (await this.sandbox.session(spec.id).status()) throw new StateError(`Agent ${spec.id} already exists; use box.agents.get("${spec.id}") to reattach or choose a new id`, "existing-agent", "new-agent-id");
+		}
+		if (spec.workspace.mode === "isolated") return (await this.sandbox.createTaskSession({
+			sessionId: spec.id,
+			title: spec.name ?? spec.id,
+			backend: spec.backend,
+			...spec.workspace.parentSessionId !== void 0 ? { parentSessionId: spec.workspace.parentSessionId } : {},
+			isolateFileWrites: true
+		})).session;
+		return (await this.sandbox.createSession({
+			sessionId: spec.id,
+			...spec.name !== void 0 ? { title: spec.name } : {},
+			backend: spec.backend
+		})).session;
+	}
+};
+function managerFor(sandbox) {
+	let manager = managers.get(sandbox);
+	if (!manager) {
+		manager = new SandboxAgentManager(sandbox);
+		managers.set(sandbox, manager);
+	}
+	return manager;
+}
+if (!Object.getOwnPropertyDescriptor(SandboxInstance.prototype, "agents")) Object.defineProperty(SandboxInstance.prototype, "agents", {
+	configurable: false,
+	enumerable: false,
+	get() {
+		return managerFor(this);
+	}
+});
 /**
 * Keyed registry. `as const` preserves per-tool TArgs/TResult through the
 * type system — `TOOL_SPECS.sandbox_run_code.makeHandler` returns a handler
@@ -1023,4 +1161,4 @@ async function vercelAiTools(box, options = {}) {
 	return result;
 }
 //#endregion
-export { ALL_FLEET_TOOL_SPECS, ALL_LIFECYCLE_TOOL_SPECS, ALL_TOOL_SPECS, FLEET_TOOL_SPECS, LIFECYCLE_TOOL_SPECS, TOOL_SPECS, anthropicFleetTools, anthropicLifecycleTools, anthropicTools, createMcpServer, mastraFleetTools, mastraTools, openaiFleetTools, openaiLifecycleTools, openaiTools, runCode, vercelAiFleetTools, vercelAiTools };
+export { ALL_FLEET_TOOL_SPECS, ALL_LIFECYCLE_TOOL_SPECS, ALL_TOOL_SPECS, FLEET_TOOL_SPECS, LIFECYCLE_TOOL_SPECS, Sandbox, SandboxAgentManager, TOOL_SPECS, anthropicFleetTools, anthropicLifecycleTools, anthropicTools, createMcpServer, mastraFleetTools, mastraTools, openaiFleetTools, openaiLifecycleTools, openaiTools, runCode, vercelAiFleetTools, vercelAiTools };

package/dist/{client-DZxBi30R.d.ts → client-CtbXjqd2.d.ts}

@@ -1,5 +1,5 @@
-import { $t as IntelligenceReportWindow, A as CreateSandboxFleetTokenOptions, Ar as SandboxFleetWorkspaceRestoreResult, Bi as TokenRefreshHandler, Cr as SandboxFleetTraceBundle, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Dr as SandboxFleetUsage, Dt as FleetPromptDispatchResult, En as PromptResult, Er as SandboxFleetTraceOptions, Et as FleetPromptDispatchOptions, Fn as ReapExpiredSandboxFleetsOptions, In as ReapExpiredSandboxFleetsResult, Ki as UsageInfo, Ln as ReconcileSandboxFleetsOptions, M as CreateSandboxOptions, Mn as PublicTemplateVersionInfo, Mr as SandboxIdentity, Nn as PublishPublicTemplateOptions, Nr as SandboxInfo, O as CreateRequestOptions, Pn as PublishPublicTemplateVersionOptions, Rn as ReconcileSandboxFleetsResult, Sr as SandboxFleetToken, St as FleetDriveTurnRequest, Ti as SshKeysManager, Tn as PromptOptions, Tt as FleetMachineId, Xt as IntelligenceReportBudget, Yt as IntelligenceReport, Zn as SandboxConfig, Zt as IntelligenceReportCompareTo, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetArtifact, br as SandboxFleetOperationsSummary, bt as FleetDispatchStreamOptions, f as BatchResult, fr as SandboxFleetInfo, gr as SandboxFleetMachineRecord, ii as SecretsManager, in as ListSandboxOptions, j as CreateSandboxFleetWithCoordinatorOptions, jn as PublicTemplateInfo, jr as SandboxFleetWorkspaceSnapshotResult, k as CreateSandboxFleetOptions, ki as SubscriptionInfo, kr as SandboxFleetWorkspaceReconcileResult, la as BatchEvent, lr as SandboxFleetDispatchResponse, m as BatchRunRequest, nt as ExecOptions, or as SandboxFleetArtifactSpec, p as BatchRunOptions, rn as ListSandboxFleetOptions, rr as SandboxEnvironment, rt as ExecResult, sr as SandboxFleetCostEstimate, ur as SandboxFleetDriverCapability, vr as SandboxFleetManifest, vt as FleetDispatchResultBuffer, wn as PromptInputPart, wt as FleetExecDispatchResult, xt as FleetDriveTurnOutcome, yt as FleetDispatchResultBufferOptions } from "./types-DL7FzacJ.js";
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BoBp6F83.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BpmHeBK1.js";
+import { $t as IntelligenceReportWindow, A as CreateSandboxFleetTokenOptions, Ar as SandboxFleetWorkspaceRestoreResult, Bi as TokenRefreshHandler, Cr as SandboxFleetTraceBundle, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Dr as SandboxFleetUsage, Dt as FleetPromptDispatchResult, En as PromptResult, Er as SandboxFleetTraceOptions, Et as FleetPromptDispatchOptions, Fn as ReapExpiredSandboxFleetsOptions, In as ReapExpiredSandboxFleetsResult, Ki as UsageInfo, Ln as ReconcileSandboxFleetsOptions, M as CreateSandboxOptions, Mn as PublicTemplateVersionInfo, Mr as SandboxIdentity, Nn as PublishPublicTemplateOptions, Nr as SandboxInfo, O as CreateRequestOptions, Pn as PublishPublicTemplateVersionOptions, Rn as ReconcileSandboxFleetsResult, Sr as SandboxFleetToken, St as FleetDriveTurnRequest, Ti as SshKeysManager, Tn as PromptOptions, Tt as FleetMachineId, Xt as IntelligenceReportBudget, Yt as IntelligenceReport, Zn as SandboxConfig, Zt as IntelligenceReportCompareTo, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetArtifact, br as SandboxFleetOperationsSummary, bt as FleetDispatchStreamOptions, ea as BatchEvent, f as BatchResult, fr as SandboxFleetInfo, gr as SandboxFleetMachineRecord, ii as SecretsManager, in as ListSandboxOptions, j as CreateSandboxFleetWithCoordinatorOptions, jn as PublicTemplateInfo, jr as SandboxFleetWorkspaceSnapshotResult, k as CreateSandboxFleetOptions, ki as SubscriptionInfo, kr as SandboxFleetWorkspaceReconcileResult, lr as SandboxFleetDispatchResponse, m as BatchRunRequest, nt as ExecOptions, or as SandboxFleetArtifactSpec, p as BatchRunOptions, rn as ListSandboxFleetOptions, rr as SandboxEnvironment, rt as ExecResult, sr as SandboxFleetCostEstimate, ur as SandboxFleetDriverCapability, vr as SandboxFleetManifest, vt as FleetDispatchResultBuffer, wn as PromptInputPart, wt as FleetExecDispatchResult, xt as FleetDriveTurnOutcome, yt as FleetDispatchResultBufferOptions } from "./types-jfr4fgD3.js";
 import { z } from "zod";
 
 //#region src/backend-registry.d.ts

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { M as CreateSandboxOptions, Nr as SandboxInfo, Vr as SandboxStatus, Zn as SandboxConfig, cn as NetworkConfig, hn as PreviewLinkWaitOptions, mn as PreviewLinkManager, nt as ExecOptions, pn as PreviewLinkInfo, rt as ExecResult, wn as PromptInputPart } from "./types-DL7FzacJ.js";
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BoBp6F83.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-DZxBi30R.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BpmHeBK1.js";
+import { M as CreateSandboxOptions, Nr as SandboxInfo, Vr as SandboxStatus, Zn as SandboxConfig, cn as NetworkConfig, hn as PreviewLinkWaitOptions, mn as PreviewLinkManager, nt as ExecOptions, pn as PreviewLinkInfo, rt as ExecResult, wn as PromptInputPart } from "./types-jfr4fgD3.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-CtbXjqd2.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/{index-DIuMQrlL.d.ts → index-DweQWp1c.d.ts}

@@ -1,5 +1,5 @@
-import { M as CreateSandboxOptions } from "./types-DL7FzacJ.js";
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-BoBp6F83.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-BpmHeBK1.js";
+import { M as CreateSandboxOptions } from "./types-jfr4fgD3.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as EnsureDevServerOptions, $i as TERMINAL_WS_ECHO_SUBPROTOCOL, $n as SandboxCreateOutcome, $r as ScopedToken, $t as IntelligenceReportWindow, Ai as TaskSessionChanges, An as ProvisionStep, Ar as SandboxFleetWorkspaceRestoreResult, At as ForkLookupOptions, B as DownloadOptions, Bi as TokenRefreshHandler, Br as SandboxRuntimeHealth, Bt as GpuLeaseCommandResult, Ci as SnapshotOptions, Cn as ProcessStatus, Cr as SandboxFleetTraceBundle, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Di as StartupOperation, Dn as ProvisionEvent, Dr as SandboxFleetUsage, E as CreateGpuLeaseOptions, Ei as StartupDiagnostics, En as PromptResult, Er as SandboxFleetTraceOptions, Et as FleetPromptDispatchOptions, F as DeleteOptions, Fi as TeeAttestationOptions, Fn as ReapExpiredSandboxFleetsOptions, Fr as SandboxPortBinding, Ft as GitConfig, G as DriverType, Gi as UploadProgress, Gn as RolloutScorer, Gr as SandboxTerminalManager, Gt as GpuLeaseStatus, H as DriveTurnOptions, Hi as TurnDriveResult, Hn as Rollout, Hr as SandboxTerminalAttachOptions, Ht as GpuLeaseExecResult, I as DevServerInfo, Ii as TeeAttestationReport, In as ReapExpiredSandboxFleetsResult, Ir as SandboxPortPreviewLink, It as GitDiff, J as EffectiveBackend, Ji as WaitForRolloutOptions, Jn as RolloutTurnPart, Jr as SandboxTraceBundle, Jt as InstalledTool, K as DurablePlan, Ki as UsageInfo, Kn as RolloutStartResult, Kr as SandboxTerminalRequestOptions, Kt as HostAgentDriverConfig, L as DirectoryPermission, Li as TeeAttestationResponse, Ln as ReconcileSandboxFleetsOptions, Lr as SandboxResourceUsage, Lt as GitStatus, M as CreateSandboxOptions, Mi as TaskSessionFileChange, Mn as PublicTemplateVersionInfo, Mr as SandboxIdentity, Mt as GitAuth, N as CreateSessionOptions, Ni as TaskSessionInfo, Nn as PublishPublicTemplateOptions, Nr as SandboxInfo, Nt as GitBranch, O as CreateRequestOptions, Oi as StorageConfig, On as ProvisionResult, Or as SandboxFleetWorkspace, Ot as ForkCounts, P as CreateTaskSessionOptions, Pi as TaskSessionProfile, Pn as PublishPublicTemplateVersionOptions, Pr as SandboxIntelligenceEnvelope, Pt as GitCommit, Q as EgressPolicy, Qi as WriteManyOptions, Qn as SandboxConnection, Qr as SandboxUser, Qt as IntelligenceReportSubjectType, R as DispatchPromptOptions, Ri as TeePublicKey, Rn as ReconcileSandboxFleetsResult, Rr as SandboxResources, Rt as GpuLease, Si as SnapshotInfo, Sn as ProcessSpawnOptions, Sr as SandboxFleetToken, St as FleetDriveTurnRequest, T as CompletedTurnResult, Tn as PromptOptions, Tr as SandboxFleetTraceExport, Tt as FleetMachineId, U as DriverConfig, Ui as UpdateUserOptions, Un as RolloutChildResult, Ur as SandboxTerminalCreateOptions, Ut as GpuLeaseManager, V as DownloadProgress, Vi as TokenUsage, Vr as SandboxStatus, Vt as GpuLeaseExecOptions, W as DriverInfo, Wi as UploadOptions, Wn as RolloutOptions, Wr as SandboxTerminalInfo, Wt as GpuLeaseProviderName, X as EffectiveBackendSource, Xi as WriteFileOptions, Xn as SSHCredentials, Xr as SandboxTraceExport, Xt as IntelligenceReportBudget, Y as EffectiveBackendProfile, Yi as WorkspaceOperationLookup, Yn as SSHCommandDescriptor, Yr as SandboxTraceEvent, Yt as IntelligenceReport, Z as EgressManager, Zi as WriteManyFile, Zn as SandboxConfig, Zr as SandboxTraceOptions, Zt as IntelligenceReportCompareTo, _ as BranchOptions, _i as SessionResultOptions, _n as ProcessInfo, _r as SandboxFleetMachineSpec, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, aa as TerminalStreamHandlers, ai as SendSessionMessageOptions, an as McpServerConfig, ar as SandboxFleetArtifact, at as FileReadBatchOptions, bi as SnapshotDeleteOutcome, bn as ProcessManager, br as SandboxFleetOperationsSummary, bt as FleetDispatchStreamOptions, c as BackendInfo, ca as BatchBackendStats, ci as SessionBackendCredentials, cn as NetworkConfig, cr as SandboxFleetDispatchFailureClass, ct as FileReadResult, d as BatchBackend, da as BatchSidecarGroup, di as SessionForkOptions, dn as PermissionLevel, dr as SandboxFleetDriverTimings, dt as FileTreeFile, ea as TerminalExitInfo, ei as ScopedTokenScope, er as SandboxCreateReceipt, et as EventStreamOptions, f as BatchResult, fa as BatchTaskUsage, fi as SessionInfo, fn as PermissionsManager, fr as SandboxFleetInfo, ft as FileTreeOptions, g as BatchTaskResult, gi as SessionMessageInputPart, gn as Process, gr as SandboxFleetMachineRecord, gt as FileWriteResult, h as BatchTask, ha as parseBackendType, hi as SessionMessage, hn as PreviewLinkWaitOptions, hr as SandboxFleetMachineMeteredUsage, ht as FileUsageResult, i as AttachGpuLeaseOptions, ia as TerminalStreamError, ii as SecretsManager, in as ListSandboxOptions, ir as SandboxEvent, it as FileInfo, j as CreateSandboxFleetWithCoordinatorOptions, ji as TaskSessionCommitResult, jn as PublicTemplateInfo, jr as SandboxFleetWorkspaceSnapshotResult, jt as GPU_LEASE_PROVIDER_NAMES, k as CreateSandboxFleetOptions, ki as SubscriptionInfo, kn as ProvisionStatus, kr as SandboxFleetWorkspaceReconcileResult, kt as ForkIdempotency, l as BackendManager, la as BatchEvent, li as SessionEventStreamOptions, ln as NetworkManager, lr as SandboxFleetDispatchResponse, lt as FileRenameResult, m as BatchRunRequest, ma as BackendType, mi as SessionListOptions, mn as PreviewLinkManager, mr as SandboxFleetMachine, mt as FileUsageOptions, n as AccessPolicyRule, na as TerminalStream, ni as SearchOptions, nn as ListOptions, nr as SandboxDeleteOutcome, nt as ExecOptions, o as BackendCapabilities, oa as TerminalStreamOptions, oi as SendSessionMessageRequest, on as MintScopedTokenOptions, or as SandboxFleetArtifactSpec, ot as FileReadBatchResult, p as BatchRunOptions, pa as PublicBatchRunRequest, pi as SessionInterruptOptions, pn as PreviewLinkInfo, pr as SandboxFleetIntelligenceEnvelope, pt as FileTreeResult, q as DurablePlanDecisionResult, qi as WaitForOptions, qn as RolloutStatus, qr as SandboxTerminals, qt as HostAgentRuntimeBackend, r as AddUserOptions, ra as TerminalStreamAuthFormat, ri as SecretInfo, rn as ListSandboxFleetOptions, rr as SandboxEnvironment, rt as ExecResult, s as BackendConfig, sa as TerminalStreamToken, si as SentSessionMessage, sn as MkdirOptions, sr as SandboxFleetCostEstimate, st as FileReadError, t as AcceleratorKind, ta as TerminalReadyInfo, ti as SearchMatch, tn as ListMessagesOptions, tr as SandboxDeleteAcknowledgement, tt as ExactProcessSpawnOptions, u as BackendStatus, ua as BatchEventDataMap, ui as SessionFailureReason, un as NonHostAgentDriverConfig, ur as SandboxFleetDriverCapability, ut as FileSystem, v as ChunkedUploadOptions, vi as SessionStatus, vn as ProcessListOptions, vr as SandboxFleetManifest, vt as FleetDispatchResultBuffer, w as CommitTaskSessionOptions, wi as SnapshotResult, wn as PromptInputPart, wr as SandboxFleetTraceEvent, xi as SnapshotIdempotency, xn as ProcessSignal, xr as SandboxFleetPolicy, xt as FleetDriveTurnOutcome, y as ChunkedUploadResult, yi as SnapshotDeleteAcknowledgement, yn as ProcessLogEntry, yr as SandboxFleetManifestMachine, yt as FleetDispatchResultBufferOptions, z as DispatchedSession, zi as TeePublicKeyResponse, zn as RenameOptions, zr as SandboxRuntimeCapabilities, zt as GpuLeaseBilling } from "./types-DL7FzacJ.js";
-import { A as BuildControlPlaneMcpConfigOptions, C as InterruptResult, D as SandboxInteractionConflict, E as SandboxInteractionCommandResult, F as SandboxMcpEndpoint, I as SandboxMcpServerEntry, L as buildControlPlaneMcpConfig, M as CONTROL_PLANE_MCP_SERVER_NAME, N as SANDBOX_MCP_SERVER_NAME, O as SandboxInteractionResolution, P as SandboxMcpConfig, R as buildSandboxMcpConfig, S as InteractiveSessionStatus, T as StartInteractiveOptions, _ as InteractiveAttachOptions, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionHost, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as BuildSandboxMcpConfigOptions, k as SandboxInteractionResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as InteractiveAuthFile, w as RespondToPermissionOptions, x as InteractiveSessionInfo, y as InteractiveSessionHandle } from "./sandbox-BoBp6F83.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-DZxBi30R.js";
+import { A as BuildControlPlaneMcpConfigOptions, C as InterruptResult, D as SandboxInteractionConflict, E as SandboxInteractionCommandResult, F as SandboxMcpEndpoint, I as SandboxMcpServerEntry, L as buildControlPlaneMcpConfig, M as CONTROL_PLANE_MCP_SERVER_NAME, N as SANDBOX_MCP_SERVER_NAME, O as SandboxInteractionResolution, P as SandboxMcpConfig, R as buildSandboxMcpConfig, S as InteractiveSessionStatus, T as StartInteractiveOptions, _ as InteractiveAttachOptions, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionHost, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as BuildSandboxMcpConfigOptions, k as SandboxInteractionResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as InteractiveAuthFile, w as RespondToPermissionOptions, x as InteractiveSessionInfo, y as InteractiveSessionHandle } from "./sandbox-BpmHeBK1.js";
+import { $ as EnsureDevServerOptions, $i as BatchBackendStats, $n as SandboxCreateOutcome, $r as ScopedToken, $t as IntelligenceReportWindow, Ai as TaskSessionChanges, An as ProvisionStep, Ar as SandboxFleetWorkspaceRestoreResult, At as ForkLookupOptions, B as DownloadOptions, Bi as TokenRefreshHandler, Br as SandboxRuntimeHealth, Bt as GpuLeaseCommandResult, Ci as SnapshotOptions, Cn as ProcessStatus, Cr as SandboxFleetTraceBundle, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Di as StartupOperation, Dn as ProvisionEvent, Dr as SandboxFleetUsage, E as CreateGpuLeaseOptions, Ei as StartupDiagnostics, En as PromptResult, Er as SandboxFleetTraceOptions, Et as FleetPromptDispatchOptions, F as DeleteOptions, Fi as TeeAttestationOptions, Fn as ReapExpiredSandboxFleetsOptions, Fr as SandboxPortBinding, Ft as GitConfig, G as DriverType, Gi as UploadProgress, Gn as RolloutScorer, Gr as SandboxTerminalManager, Gt as GpuLeaseStatus, H as DriveTurnOptions, Hi as TurnDriveResult, Hn as Rollout, Hr as SandboxTerminalAttachOptions, Ht as GpuLeaseExecResult, I as DevServerInfo, Ii as TeeAttestationReport, In as ReapExpiredSandboxFleetsResult, Ir as SandboxPortPreviewLink, It as GitDiff, J as EffectiveBackend, Ji as WaitForRolloutOptions, Jn as RolloutTurnPart, Jr as SandboxTraceBundle, Jt as InstalledTool, K as DurablePlan, Ki as UsageInfo, Kn as RolloutStartResult, Kr as SandboxTerminalRequestOptions, Kt as HostAgentDriverConfig, L as DirectoryPermission, Li as TeeAttestationResponse, Ln as ReconcileSandboxFleetsOptions, Lr as SandboxResourceUsage, Lt as GitStatus, M as CreateSandboxOptions, Mi as TaskSessionFileChange, Mn as PublicTemplateVersionInfo, Mr as SandboxIdentity, Mt as GitAuth, N as CreateSessionOptions, Ni as TaskSessionInfo, Nn as PublishPublicTemplateOptions, Nr as SandboxInfo, Nt as GitBranch, O as CreateRequestOptions, Oi as StorageConfig, On as ProvisionResult, Or as SandboxFleetWorkspace, Ot as ForkCounts, P as CreateTaskSessionOptions, Pi as TaskSessionProfile, Pn as PublishPublicTemplateVersionOptions, Pr as SandboxIntelligenceEnvelope, Pt as GitCommit, Q as EgressPolicy, Qi as WriteManyOptions, Qn as SandboxConnection, Qr as SandboxUser, Qt as IntelligenceReportSubjectType, R as DispatchPromptOptions, Ri as TeePublicKey, Rn as ReconcileSandboxFleetsResult, Rr as SandboxResources, Rt as GpuLease, Si as SnapshotInfo, Sn as ProcessSpawnOptions, Sr as SandboxFleetToken, St as FleetDriveTurnRequest, T as CompletedTurnResult, Tn as PromptOptions, Tr as SandboxFleetTraceExport, Tt as FleetMachineId, U as DriverConfig, Ui as UpdateUserOptions, Un as RolloutChildResult, Ur as SandboxTerminalCreateOptions, Ut as GpuLeaseManager, V as DownloadProgress, Vi as TokenUsage, Vr as SandboxStatus, Vt as GpuLeaseExecOptions, W as DriverInfo, Wi as UploadOptions, Wn as RolloutOptions, Wr as SandboxTerminalInfo, Wt as GpuLeaseProviderName, X as EffectiveBackendSource, Xi as WriteFileOptions, Xn as SSHCredentials, Xr as SandboxTraceExport, Xt as IntelligenceReportBudget, Y as EffectiveBackendProfile, Yi as WorkspaceOperationLookup, Yn as SSHCommandDescriptor, Yr as SandboxTraceEvent, Yt as IntelligenceReport, Z as EgressManager, Zi as WriteManyFile, Zn as SandboxConfig, Zr as SandboxTraceOptions, Zt as IntelligenceReportCompareTo, _ as BranchOptions, _i as SessionResultOptions, _n as ProcessInfo, _r as SandboxFleetMachineSpec, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, aa as BackendType, ai as SendSessionMessageOptions, an as McpServerConfig, ar as SandboxFleetArtifact, at as FileReadBatchOptions, bi as SnapshotDeleteOutcome, bn as ProcessManager, br as SandboxFleetOperationsSummary, bt as FleetDispatchStreamOptions, c as BackendInfo, ca as TerminalExitInfo, ci as SessionBackendCredentials, cn as NetworkConfig, cr as SandboxFleetDispatchFailureClass, ct as FileReadResult, d as BatchBackend, da as TerminalStreamAuthFormat, di as SessionForkOptions, dn as PermissionLevel, dr as SandboxFleetDriverTimings, dt as FileTreeFile, ea as BatchEvent, ei as ScopedTokenScope, er as SandboxCreateReceipt, et as EventStreamOptions, f as BatchResult, fa as TerminalStreamError, fi as SessionInfo, fn as PermissionsManager, fr as SandboxFleetInfo, ft as FileTreeOptions, g as BatchTaskResult, gi as SessionMessageInputPart, gn as Process, gr as SandboxFleetMachineRecord, gt as FileWriteResult, h as BatchTask, ha as TerminalStreamToken, hi as SessionMessage, hn as PreviewLinkWaitOptions, hr as SandboxFleetMachineMeteredUsage, ht as FileUsageResult, i as AttachGpuLeaseOptions, ia as PublicBatchRunRequest, ii as SecretsManager, in as ListSandboxOptions, ir as SandboxEvent, it as FileInfo, j as CreateSandboxFleetWithCoordinatorOptions, ji as TaskSessionCommitResult, jn as PublicTemplateInfo, jr as SandboxFleetWorkspaceSnapshotResult, jt as GPU_LEASE_PROVIDER_NAMES, k as CreateSandboxFleetOptions, ki as SubscriptionInfo, kn as ProvisionStatus, kr as SandboxFleetWorkspaceReconcileResult, kt as ForkIdempotency, l as BackendManager, la as TerminalReadyInfo, li as SessionEventStreamOptions, ln as NetworkManager, lr as SandboxFleetDispatchResponse, lt as FileRenameResult, m as BatchRunRequest, ma as TerminalStreamOptions, mi as SessionListOptions, mn as PreviewLinkManager, mr as SandboxFleetMachine, mt as FileUsageOptions, n as AccessPolicyRule, na as BatchSidecarGroup, ni as SearchOptions, nn as ListOptions, nr as SandboxDeleteOutcome, nt as ExecOptions, o as BackendCapabilities, oa as parseBackendType, oi as SendSessionMessageRequest, on as MintScopedTokenOptions, or as SandboxFleetArtifactSpec, ot as FileReadBatchResult, p as BatchRunOptions, pa as TerminalStreamHandlers, pi as SessionInterruptOptions, pn as PreviewLinkInfo, pr as SandboxFleetIntelligenceEnvelope, pt as FileTreeResult, q as DurablePlanDecisionResult, qi as WaitForOptions, qn as RolloutStatus, qr as SandboxTerminals, qt as HostAgentRuntimeBackend, r as AddUserOptions, ra as BatchTaskUsage, ri as SecretInfo, rn as ListSandboxFleetOptions, rr as SandboxEnvironment, rt as ExecResult, s as BackendConfig, sa as TERMINAL_WS_ECHO_SUBPROTOCOL, si as SentSessionMessage, sn as MkdirOptions, sr as SandboxFleetCostEstimate, st as FileReadError, t as AcceleratorKind, ta as BatchEventDataMap, ti as SearchMatch, tn as ListMessagesOptions, tr as SandboxDeleteAcknowledgement, tt as ExactProcessSpawnOptions, u as BackendStatus, ua as TerminalStream, ui as SessionFailureReason, un as NonHostAgentDriverConfig, ur as SandboxFleetDriverCapability, ut as FileSystem, v as ChunkedUploadOptions, vi as SessionStatus, vn as ProcessListOptions, vr as SandboxFleetManifest, vt as FleetDispatchResultBuffer, w as CommitTaskSessionOptions, wi as SnapshotResult, wn as PromptInputPart, wr as SandboxFleetTraceEvent, xi as SnapshotIdempotency, xn as ProcessSignal, xr as SandboxFleetPolicy, xt as FleetDriveTurnOutcome, y as ChunkedUploadResult, yi as SnapshotDeleteAcknowledgement, yn as ProcessLogEntry, yr as SandboxFleetManifestMachine, yt as FleetDispatchResultBufferOptions, z as DispatchedSession, zi as TeePublicKeyResponse, zn as RenameOptions, zr as SandboxRuntimeCapabilities, zt as GpuLeaseBilling } from "./types-jfr4fgD3.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-CtbXjqd2.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-DtRFVx5U.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-Cp1KYanB.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DIuMQrlL.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DweQWp1c.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-import { Ai as TaskSessionChanges, Br as SandboxRuntimeHealth, Fr as SandboxPortBinding, Gi as UploadProgress, Gr as SandboxTerminalManager, Kr as SandboxTerminalRequestOptions, N as CreateSessionOptions, Ni as TaskSessionInfo, P as CreateTaskSessionOptions, Ur as SandboxTerminalCreateOptions, Wr as SandboxTerminalInfo, Xi as WriteFileOptions, ai as SendSessionMessageOptions, at as FileReadBatchOptions, fi as SessionInfo, ft as FileTreeOptions, gt as FileWriteResult, hi as SessionMessage, ht as FileUsageResult, ji as TaskSessionCommitResult, lt as FileRenameResult, mt as FileUsageOptions, oi as SendSessionMessageRequest, ot as FileReadBatchResult, pt as FileTreeResult, si as SentSessionMessage, tn as ListMessagesOptions, v as ChunkedUploadOptions, w as CommitTaskSessionOptions, y as ChunkedUploadResult, zn as RenameOptions } from "./types-DL7FzacJ.js";
+import { Ai as TaskSessionChanges, Br as SandboxRuntimeHealth, Fr as SandboxPortBinding, Gi as UploadProgress, Gr as SandboxTerminalManager, Kr as SandboxTerminalRequestOptions, N as CreateSessionOptions, Ni as TaskSessionInfo, P as CreateTaskSessionOptions, Ur as SandboxTerminalCreateOptions, Wr as SandboxTerminalInfo, Xi as WriteFileOptions, ai as SendSessionMessageOptions, at as FileReadBatchOptions, fi as SessionInfo, ft as FileTreeOptions, gt as FileWriteResult, hi as SessionMessage, ht as FileUsageResult, ji as TaskSessionCommitResult, lt as FileRenameResult, mt as FileUsageOptions, oi as SendSessionMessageRequest, ot as FileReadBatchResult, pt as FileTreeResult, si as SentSessionMessage, tn as ListMessagesOptions, v as ChunkedUploadOptions, w as CommitTaskSessionOptions, y as ChunkedUploadResult, zn as RenameOptions } from "./types-jfr4fgD3.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 
 //#region src/lib/chunked-upload.d.ts

package/dist/{sandbox-BoBp6F83.d.ts → sandbox-BpmHeBK1.d.ts}

@@ -1,4 +1,4 @@
-import { $r as ScopedToken, $t as IntelligenceReportWindow, Ai as TaskSessionChanges, At as ForkLookupOptions, Bn as RestoreSnapshotOptions, Br as SandboxRuntimeHealth, Ci as SnapshotOptions, Cr as SandboxFleetTraceBundle, Dn as ProvisionEvent, Ei as StartupDiagnostics, En as PromptResult, Fi as TeeAttestationOptions, Fr as SandboxPortBinding, H as DriveTurnOptions, Hi as TurnDriveResult, Hn as Rollout, Hr as SandboxTerminalAttachOptions, It as GitDiff, Ji as WaitForRolloutOptions, Jr as SandboxTraceBundle, Jt as InstalledTool, K as DurablePlan, Kn as RolloutStartResult, Li as TeeAttestationResponse, Lr as SandboxResourceUsage, Lt as GitStatus, N as CreateSessionOptions, Ni as TaskSessionInfo, Nr as SandboxInfo, Nt as GitBranch, On as ProvisionResult, Ot as ForkCounts, P as CreateTaskSessionOptions, Pt as GitCommit, Qi as WriteManyOptions, Qn as SandboxConnection, R as DispatchPromptOptions, Rt as GpuLease, S as CodeLanguage, Si as SnapshotInfo, T as CompletedTurnResult, Tn as PromptOptions, Ut as GpuLeaseManager, Vn as ResumeOptions, Vr as SandboxStatus, W as DriverInfo, Wn as RolloutOptions, Xi as WriteFileOptions, Xn as SSHCredentials, Xt as IntelligenceReportBudget, Yi as WorkspaceOperationLookup, Yn as SSHCommandDescriptor, Yt as IntelligenceReport, Z as EgressManager, Zi as WriteManyFile, Zr as SandboxTraceOptions, Zt as IntelligenceReportCompareTo, _ as BranchOptions, _i as SessionResultOptions, aa as TerminalStreamHandlers, ai as SendSessionMessageOptions, b as CodeExecutionOptions, bn as ProcessManager, di as SessionForkOptions, en as JsonValue, er as SandboxCreateReceipt, et as EventStreamOptions, fi as SessionInfo, fn as PermissionsManager, gt as FileWriteResult, hi as SessionMessage, ir as SandboxEvent, ji as TaskSessionCommitResult, kt as ForkIdempotency, l as BackendManager, li as SessionEventStreamOptions, ln as NetworkManager, ma as BackendType, mi as SessionListOptions, mn as PreviewLinkManager, na as TerminalStream, ni as SearchOptions, nt as ExecOptions, oi as SendSessionMessageRequest, on as MintScopedTokenOptions, pi as SessionInterruptOptions, q as DurablePlanDecisionResult, qi as WaitForOptions, qr as SandboxTerminals, rt as ExecResult, s as BackendConfig, si as SentSessionMessage, ti as SearchMatch, tn as ListMessagesOptions, tr as SandboxDeleteAcknowledgement, ut as FileSystem, w as CommitTaskSessionOptions, wi as SnapshotResult, wn as PromptInputPart, x as CodeExecutionResult, yi as SnapshotDeleteAcknowledgement, z as DispatchedSession, zi as TeePublicKeyResponse, zr as SandboxRuntimeCapabilities } from "./types-DL7FzacJ.js";
+import { $r as ScopedToken, $t as IntelligenceReportWindow, Ai as TaskSessionChanges, At as ForkLookupOptions, Bn as RestoreSnapshotOptions, Br as SandboxRuntimeHealth, Ci as SnapshotOptions, Cr as SandboxFleetTraceBundle, Dn as ProvisionEvent, Ei as StartupDiagnostics, En as PromptResult, Fi as TeeAttestationOptions, Fr as SandboxPortBinding, H as DriveTurnOptions, Hi as TurnDriveResult, Hn as Rollout, Hr as SandboxTerminalAttachOptions, It as GitDiff, Ji as WaitForRolloutOptions, Jr as SandboxTraceBundle, Jt as InstalledTool, K as DurablePlan, Kn as RolloutStartResult, Li as TeeAttestationResponse, Lr as SandboxResourceUsage, Lt as GitStatus, N as CreateSessionOptions, Ni as TaskSessionInfo, Nr as SandboxInfo, Nt as GitBranch, On as ProvisionResult, Ot as ForkCounts, P as CreateTaskSessionOptions, Pt as GitCommit, Qi as WriteManyOptions, Qn as SandboxConnection, R as DispatchPromptOptions, Rt as GpuLease, S as CodeLanguage, Si as SnapshotInfo, T as CompletedTurnResult, Tn as PromptOptions, Ut as GpuLeaseManager, Vn as ResumeOptions, Vr as SandboxStatus, W as DriverInfo, Wn as RolloutOptions, Xi as WriteFileOptions, Xn as SSHCredentials, Xt as IntelligenceReportBudget, Yi as WorkspaceOperationLookup, Yn as SSHCommandDescriptor, Yt as IntelligenceReport, Z as EgressManager, Zi as WriteManyFile, Zr as SandboxTraceOptions, Zt as IntelligenceReportCompareTo, _ as BranchOptions, _i as SessionResultOptions, aa as BackendType, ai as SendSessionMessageOptions, b as CodeExecutionOptions, bn as ProcessManager, di as SessionForkOptions, en as JsonValue, er as SandboxCreateReceipt, et as EventStreamOptions, fi as SessionInfo, fn as PermissionsManager, gt as FileWriteResult, hi as SessionMessage, ir as SandboxEvent, ji as TaskSessionCommitResult, kt as ForkIdempotency, l as BackendManager, li as SessionEventStreamOptions, ln as NetworkManager, mi as SessionListOptions, mn as PreviewLinkManager, ni as SearchOptions, nt as ExecOptions, oi as SendSessionMessageRequest, on as MintScopedTokenOptions, pa as TerminalStreamHandlers, pi as SessionInterruptOptions, q as DurablePlanDecisionResult, qi as WaitForOptions, qr as SandboxTerminals, rt as ExecResult, s as BackendConfig, si as SentSessionMessage, ti as SearchMatch, tn as ListMessagesOptions, tr as SandboxDeleteAcknowledgement, ua as TerminalStream, ut as FileSystem, w as CommitTaskSessionOptions, wi as SnapshotResult, wn as PromptInputPart, x as CodeExecutionResult, yi as SnapshotDeleteAcknowledgement, z as DispatchedSession, zi as TeePublicKeyResponse, zr as SandboxRuntimeCapabilities } from "./types-jfr4fgD3.js";
 import { AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand } from "@tangle-network/agent-interface";
 import { z } from "zod";
 

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DIuMQrlL.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DweQWp1c.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/{types-DL7FzacJ.d.ts → types-jfr4fgD3.d.ts}

@@ -1,6 +1,213 @@
 import { AgentExactRunControlRef, AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileValidationResult, HarnessType, ReasoningEffort } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
+//#region src/terminal-stream.d.ts
+/**
+ * TerminalStream — typed client for the sandbox terminal WebSocket protocol.
+ *
+ * Drives a live PTY session (an interactive harness TUI or a plain shell)
+ * from the caller's own program: binary frames stream raw PTY output bytes,
+ * TEXT JSON frames carry the control protocol. The wire contract is defined
+ * by the sidecar in `apps/sidecar/src/terminal/websocket-protocol.ts` (the
+ * source of truth for these message shapes — its zod schemas cannot be
+ * imported here without pulling sidecar dependencies into the SDK bundle,
+ * so the types are mirrored locally):
+ *
+ *   client → server (TEXT JSON):
+ *     init   {connectionId?, cols, rows, command?, cwd?, env?}  — MUST be first
+ *     input  {data}
+ *     resize {cols, rows}
+ *   server → client (TEXT JSON):
+ *     ready  {connectionId, sessionId, restored, detachTimeoutMs}
+ *     exit   {exitCode?, exitSignal?}
+ *     error  {code, message}
+ *     rec / rec.done — recording tee frames for the platform's session
+ *                      capture consumer; not part of the client surface
+ *   server → client (BINARY): raw PTY output bytes
+ *
+ * Detach/reconnect: the server keeps the PTY alive for `detachTimeoutMs`
+ * (5 minutes today) after the socket closes; re-dialing with the SAME
+ * connectionId reattaches and replays the buffered output history, so a
+ * fresh client repaints the current screen.
+ *
+ * Browser-safe: uses the global `WebSocket` (browsers, Workers, Node >= 22)
+ * and never imports `ws` — the same environment contract as
+ * `session-gateway/client.ts`.
+ */
+/** Ready acknowledgement — the PTY is attached and history replay follows. */
+interface TerminalReadyInfo {
+  connectionId: string;
+  sessionId: string;
+  /** True when an existing PTY was reattached (its history is replayed). */
+  restored: boolean;
+  /** How long (ms) the server keeps the PTY alive after this socket closes. */
+  detachTimeoutMs: number;
+}
+/** Terminal process exit notification. */
+interface TerminalExitInfo {
+  exitCode?: number;
+  exitSignal?: string;
+}
+/** A protocol `error` control frame or a transport failure. */
+declare class TerminalStreamError extends Error {
+  /** Protocol error code (e.g. `INIT_FAILED`) or `TRANSPORT` for socket faults. */
+  readonly code: string;
+  constructor(message: string, code: string);
+}
+/**
+ * Event callbacks, passed at construction (the same idiom as
+ * `SessionGatewayClient`'s `handlers` config). Registering them up front is
+ * load-bearing: the server replays PTY history immediately after `ready`, so
+ * a handler attached after connect would miss the replayed screen.
+ */
+interface TerminalStreamHandlers {
+  /** Raw PTY output bytes (both live output and reattach history replay). */
+  onData?: (data: Uint8Array) => void;
+  onReady?: (info: TerminalReadyInfo) => void;
+  onExit?: (info: TerminalExitInfo) => void;
+  /** Protocol `error` frames and post-connect transport failures. */
+  onError?: (error: TerminalStreamError) => void;
+  /** Socket closed — by the server, the network, or a local `close()`. */
+  onClose?: (code: number, reason: string) => void;
+}
+/**
+ * Which WebSocket-subprotocol auth envelope to offer. A WebSocket client
+ * cannot set an Authorization header, so the bearer rides the
+ * `Sec-WebSocket-Protocol` offer — and the two dialable endpoints expect
+ * DIFFERENT envelopes:
+ *
+ * - `"edge"` (default): the public API proxy
+ *   (`wss://<api>/v1/sidecar-proxy/{sidecarId}/terminals/{id}/ws`) expects
+ *   `bearer.<base64url(token)>` — see `parseTerminalWsSubprotocolToken` in
+ *   `products/sandbox/api/src/lib/terminal-websocket.ts`. The fixed
+ *   `tangle.terminal.v1` marker is offered alongside the credential (see
+ *   {@link TERMINAL_WS_ECHO_SUBPROTOCOL}).
+ * - `"sidecar-direct"`: the sidecar's own `/terminals/{id}/ws` route expects
+ *   `tangle.bearer.<token>` plus the same `tangle.terminal.v1` echo marker —
+ *   see `apps/sidecar/src/routes/ws-subprotocol-auth.ts`. Only
+ *   platform-internal callers (and the composed integration tests) dial the
+ *   sidecar directly.
+ */
+type TerminalStreamAuthFormat = "edge" | "sidecar-direct";
+/**
+ * Bearer credential for the dial: a token string, or a provider invoked on
+ * EVERY dial (including {@link TerminalStream.reconnect}). Scoped terminal
+ * tokens are short-lived (the platform clamps them to <= 15 minutes), so a
+ * reconnect after the detach window with the original string would be
+ * rejected — a provider lets the SDK re-mint a fresh token per dial.
+ */
+type TerminalStreamToken = string | (() => Promise<string> | string);
+interface TerminalStreamOptions {
+  /**
+   * Absolute URL of the terminal WebSocket endpoint. `http(s)` URLs are
+   * converted to `ws(s)` automatically.
+   */
+  url: string;
+  /**
+   * Bearer token carried in the auth subprotocol (see `authFormat`) — a
+   * string, or a provider re-invoked on every dial so short-lived scoped
+   * tokens stay fresh across reconnects.
+   */
+  token: TerminalStreamToken;
+  /**
+   * PTY connection id — also sent in the `init` frame; the server rejects a
+   * mismatch with the URL's id. Reusing an id reattaches the existing PTY.
+   */
+  connectionId: string;
+  cols?: number;
+  rows?: number;
+  /** Command to run when the id has no live PTY (defaults to the shell). */
+  command?: string;
+  cwd?: string;
+  env?: Record<string, string>;
+  /** Auth subprotocol envelope. Default `"edge"`. */
+  authFormat?: TerminalStreamAuthFormat;
+  handlers?: TerminalStreamHandlers;
+  /** Reject `connect()` if `ready` has not arrived within this window. */
+  connectTimeoutMs?: number;
+}
+/**
+ * Fixed non-credential marker offered on EVERY dial (both auth formats),
+ * giving a spec-compliant server something safe to select into the 101's
+ * `Sec-WebSocket-Protocol`. Two reasons it exists:
+ *
+ * 1. RFC 6455 §4.1 says a client that offered subprotocols MUST fail the
+ *    connection when the server selects none. Node's WebSocket (undici,
+ *    per the WHATWG spec) enforces this strictly; browsers are lenient and
+ *    tolerate a 101 with no selected subprotocol — which is why the
+ *    browser-only reference client got away with offering just the
+ *    credential.
+ * 2. The server must never echo the token-bearing offer back (that would
+ *    leak the live credential into a response header) — so it needs a
+ *    non-credential protocol it CAN select.
+ */
+declare const TERMINAL_WS_ECHO_SUBPROTOCOL = "tangle.terminal.v1";
+/**
+ * Client for one terminal WebSocket connection. Construct via
+ * {@link TerminalStream.connect}, which resolves once the server
+ * acknowledges the attach with `ready` (history replay then streams through
+ * `handlers.onData`).
+ */
+declare class TerminalStream {
+  private readonly ws;
+  private readonly options;
+  private readonly handlers;
+  private readyInfo;
+  private closed;
+  private closeWaiters;
+  private readonly textDecoder;
+  /**
+   * Dial the endpoint, send `init` as the first frame, and resolve once the
+   * server responds `ready`. Rejects on a protocol `error` frame, a socket
+   * close/failure before `ready`, or the connect timeout — always with the
+   * reason the server gave. A token PROVIDER is awaited here, before the
+   * socket opens, so every dial (first connect and each reconnect) carries a
+   * fresh credential.
+   */
+  static connect(options: TerminalStreamOptions): Promise<TerminalStream>;
+  private constructor();
+  private establish;
+  private handleMessage;
+  /** PTY connection id this stream is attached to. */
+  get connectionId(): string;
+  /** The server's `ready` acknowledgement. Set once `connect()` resolves. */
+  get ready(): TerminalReadyInfo;
+  /** True while the socket is open. */
+  get isOpen(): boolean;
+  /**
+   * Send input keystrokes to the PTY. `Uint8Array` input is decoded as
+   * UTF-8 (the wire protocol carries input as JSON text). Input larger than
+   * the server's 1 MiB frame cap is split across multiple `input` frames in
+   * order on the same socket, so delivery order is preserved.
+   */
+  write(data: string | Uint8Array): void;
+  /** Resize the PTY. */
+  resize(cols: number, rows: number): void;
+  /**
+   * Detach cleanly: close the socket and resolve once the close completes.
+   * The PTY survives server-side for `ready.detachTimeoutMs` (5 minutes
+   * today) — reattach within that window via {@link reconnect} (or a fresh
+   * `connect()` with the same connectionId) to replay history and continue.
+   */
+  close(): Promise<void>;
+  /**
+   * Re-dial the same endpoint with the same connectionId on a fresh socket
+   * — the server reattaches the PTY and replays its buffered history. When
+   * the stream was constructed with a token PROVIDER, it is re-invoked for
+   * the new dial (scoped terminal tokens expire within minutes, so the
+   * original credential may be dead by reconnect time); with a plain string
+   * token, pass a fresh `token` override yourself when it may have expired.
+   * `handlers` rebinds callbacks for the new stream.
+   */
+  reconnect(overrides?: {
+    token?: TerminalStreamToken;
+    handlers?: TerminalStreamHandlers;
+    cols?: number;
+    rows?: number;
+  }): Promise<TerminalStream>;
+  private assertOpen;
+}
+//#endregion
 //#region ../../../packages/runtime-contracts/dist/backend-types.d.ts
 /**
  * Canonical harnesses this repo ships no provider adapter for.
@@ -1130,213 +1337,6 @@ interface BatchResult$1 {
   };
 }
 //#endregion
-//#region src/terminal-stream.d.ts
-/**
- * TerminalStream — typed client for the sandbox terminal WebSocket protocol.
- *
- * Drives a live PTY session (an interactive harness TUI or a plain shell)
- * from the caller's own program: binary frames stream raw PTY output bytes,
- * TEXT JSON frames carry the control protocol. The wire contract is defined
- * by the sidecar in `apps/sidecar/src/terminal/websocket-protocol.ts` (the
- * source of truth for these message shapes — its zod schemas cannot be
- * imported here without pulling sidecar dependencies into the SDK bundle,
- * so the types are mirrored locally):
- *
- *   client → server (TEXT JSON):
- *     init   {connectionId?, cols, rows, command?, cwd?, env?}  — MUST be first
- *     input  {data}
- *     resize {cols, rows}
- *   server → client (TEXT JSON):
- *     ready  {connectionId, sessionId, restored, detachTimeoutMs}
- *     exit   {exitCode?, exitSignal?}
- *     error  {code, message}
- *     rec / rec.done — recording tee frames for the platform's session
- *                      capture consumer; not part of the client surface
- *   server → client (BINARY): raw PTY output bytes
- *
- * Detach/reconnect: the server keeps the PTY alive for `detachTimeoutMs`
- * (5 minutes today) after the socket closes; re-dialing with the SAME
- * connectionId reattaches and replays the buffered output history, so a
- * fresh client repaints the current screen.
- *
- * Browser-safe: uses the global `WebSocket` (browsers, Workers, Node >= 22)
- * and never imports `ws` — the same environment contract as
- * `session-gateway/client.ts`.
- */
-/** Ready acknowledgement — the PTY is attached and history replay follows. */
-interface TerminalReadyInfo {
-  connectionId: string;
-  sessionId: string;
-  /** True when an existing PTY was reattached (its history is replayed). */
-  restored: boolean;
-  /** How long (ms) the server keeps the PTY alive after this socket closes. */
-  detachTimeoutMs: number;
-}
-/** Terminal process exit notification. */
-interface TerminalExitInfo {
-  exitCode?: number;
-  exitSignal?: string;
-}
-/** A protocol `error` control frame or a transport failure. */
-declare class TerminalStreamError extends Error {
-  /** Protocol error code (e.g. `INIT_FAILED`) or `TRANSPORT` for socket faults. */
-  readonly code: string;
-  constructor(message: string, code: string);
-}
-/**
- * Event callbacks, passed at construction (the same idiom as
- * `SessionGatewayClient`'s `handlers` config). Registering them up front is
- * load-bearing: the server replays PTY history immediately after `ready`, so
- * a handler attached after connect would miss the replayed screen.
- */
-interface TerminalStreamHandlers {
-  /** Raw PTY output bytes (both live output and reattach history replay). */
-  onData?: (data: Uint8Array) => void;
-  onReady?: (info: TerminalReadyInfo) => void;
-  onExit?: (info: TerminalExitInfo) => void;
-  /** Protocol `error` frames and post-connect transport failures. */
-  onError?: (error: TerminalStreamError) => void;
-  /** Socket closed — by the server, the network, or a local `close()`. */
-  onClose?: (code: number, reason: string) => void;
-}
-/**
- * Which WebSocket-subprotocol auth envelope to offer. A WebSocket client
- * cannot set an Authorization header, so the bearer rides the
- * `Sec-WebSocket-Protocol` offer — and the two dialable endpoints expect
- * DIFFERENT envelopes:
- *
- * - `"edge"` (default): the public API proxy
- *   (`wss://<api>/v1/sidecar-proxy/{sidecarId}/terminals/{id}/ws`) expects
- *   `bearer.<base64url(token)>` — see `parseTerminalWsSubprotocolToken` in
- *   `products/sandbox/api/src/lib/terminal-websocket.ts`. The fixed
- *   `tangle.terminal.v1` marker is offered alongside the credential (see
- *   {@link TERMINAL_WS_ECHO_SUBPROTOCOL}).
- * - `"sidecar-direct"`: the sidecar's own `/terminals/{id}/ws` route expects
- *   `tangle.bearer.<token>` plus the same `tangle.terminal.v1` echo marker —
- *   see `apps/sidecar/src/routes/ws-subprotocol-auth.ts`. Only
- *   platform-internal callers (and the composed integration tests) dial the
- *   sidecar directly.
- */
-type TerminalStreamAuthFormat = "edge" | "sidecar-direct";
-/**
- * Bearer credential for the dial: a token string, or a provider invoked on
- * EVERY dial (including {@link TerminalStream.reconnect}). Scoped terminal
- * tokens are short-lived (the platform clamps them to <= 15 minutes), so a
- * reconnect after the detach window with the original string would be
- * rejected — a provider lets the SDK re-mint a fresh token per dial.
- */
-type TerminalStreamToken = string | (() => Promise<string> | string);
-interface TerminalStreamOptions {
-  /**
-   * Absolute URL of the terminal WebSocket endpoint. `http(s)` URLs are
-   * converted to `ws(s)` automatically.
-   */
-  url: string;
-  /**
-   * Bearer token carried in the auth subprotocol (see `authFormat`) — a
-   * string, or a provider re-invoked on every dial so short-lived scoped
-   * tokens stay fresh across reconnects.
-   */
-  token: TerminalStreamToken;
-  /**
-   * PTY connection id — also sent in the `init` frame; the server rejects a
-   * mismatch with the URL's id. Reusing an id reattaches the existing PTY.
-   */
-  connectionId: string;
-  cols?: number;
-  rows?: number;
-  /** Command to run when the id has no live PTY (defaults to the shell). */
-  command?: string;
-  cwd?: string;
-  env?: Record<string, string>;
-  /** Auth subprotocol envelope. Default `"edge"`. */
-  authFormat?: TerminalStreamAuthFormat;
-  handlers?: TerminalStreamHandlers;
-  /** Reject `connect()` if `ready` has not arrived within this window. */
-  connectTimeoutMs?: number;
-}
-/**
- * Fixed non-credential marker offered on EVERY dial (both auth formats),
- * giving a spec-compliant server something safe to select into the 101's
- * `Sec-WebSocket-Protocol`. Two reasons it exists:
- *
- * 1. RFC 6455 §4.1 says a client that offered subprotocols MUST fail the
- *    connection when the server selects none. Node's WebSocket (undici,
- *    per the WHATWG spec) enforces this strictly; browsers are lenient and
- *    tolerate a 101 with no selected subprotocol — which is why the
- *    browser-only reference client got away with offering just the
- *    credential.
- * 2. The server must never echo the token-bearing offer back (that would
- *    leak the live credential into a response header) — so it needs a
- *    non-credential protocol it CAN select.
- */
-declare const TERMINAL_WS_ECHO_SUBPROTOCOL = "tangle.terminal.v1";
-/**
- * Client for one terminal WebSocket connection. Construct via
- * {@link TerminalStream.connect}, which resolves once the server
- * acknowledges the attach with `ready` (history replay then streams through
- * `handlers.onData`).
- */
-declare class TerminalStream {
-  private readonly ws;
-  private readonly options;
-  private readonly handlers;
-  private readyInfo;
-  private closed;
-  private closeWaiters;
-  private readonly textDecoder;
-  /**
-   * Dial the endpoint, send `init` as the first frame, and resolve once the
-   * server responds `ready`. Rejects on a protocol `error` frame, a socket
-   * close/failure before `ready`, or the connect timeout — always with the
-   * reason the server gave. A token PROVIDER is awaited here, before the
-   * socket opens, so every dial (first connect and each reconnect) carries a
-   * fresh credential.
-   */
-  static connect(options: TerminalStreamOptions): Promise<TerminalStream>;
-  private constructor();
-  private establish;
-  private handleMessage;
-  /** PTY connection id this stream is attached to. */
-  get connectionId(): string;
-  /** The server's `ready` acknowledgement. Set once `connect()` resolves. */
-  get ready(): TerminalReadyInfo;
-  /** True while the socket is open. */
-  get isOpen(): boolean;
-  /**
-   * Send input keystrokes to the PTY. `Uint8Array` input is decoded as
-   * UTF-8 (the wire protocol carries input as JSON text). Input larger than
-   * the server's 1 MiB frame cap is split across multiple `input` frames in
-   * order on the same socket, so delivery order is preserved.
-   */
-  write(data: string | Uint8Array): void;
-  /** Resize the PTY. */
-  resize(cols: number, rows: number): void;
-  /**
-   * Detach cleanly: close the socket and resolve once the close completes.
-   * The PTY survives server-side for `ready.detachTimeoutMs` (5 minutes
-   * today) — reattach within that window via {@link reconnect} (or a fresh
-   * `connect()` with the same connectionId) to replay history and continue.
-   */
-  close(): Promise<void>;
-  /**
-   * Re-dial the same endpoint with the same connectionId on a fresh socket
-   * — the server reattaches the PTY and replays its buffered history. When
-   * the stream was constructed with a token PROVIDER, it is re-invoked for
-   * the new dial (scoped terminal tokens expire within minutes, so the
-   * original credential may be dead by reconnect time); with a plain string
-   * token, pass a fresh `token` override yourself when it may have expired.
-   * `handlers` rebinds callbacks for the new stream.
-   */
-  reconnect(overrides?: {
-    token?: TerminalStreamToken;
-    handlers?: TerminalStreamHandlers;
-    cols?: number;
-    rows?: number;
-  }): Promise<TerminalStream>;
-  private assertOpen;
-}
-//#endregion
 //#region src/types.d.ts
 type JsonValue = string | number | boolean | null | JsonValue[] | {
   [key: string]: JsonValue;
@@ -6421,4 +6421,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EnsureDevServerOptions as $, TERMINAL_WS_ECHO_SUBPROTOCOL as $i, SandboxCreateOutcome as $n, ScopedToken as $r, IntelligenceReportWindow as $t, CreateSandboxFleetTokenOptions as A, TaskSessionChanges as Ai, ProvisionStep as An, SandboxFleetWorkspaceRestoreResult as Ar, ForkLookupOptions as At, DownloadOptions as B, TokenRefreshHandler as Bi, RestoreSnapshotOptions as Bn, SandboxRuntimeHealth as Br, GpuLeaseCommandResult as Bt, CodeResultPart as C, SnapshotOptions as Ci, ProcessStatus as Cn, SandboxFleetTraceBundle as Cr, FleetExecDispatchOptions as Ct, CreateIntelligenceReportOptions as D, StartupOperation as Di, ProvisionEvent as Dn, SandboxFleetUsage as Dr, FleetPromptDispatchResult as Dt, CreateGpuLeaseOptions as E, StartupDiagnostics as Ei, PromptResult as En, SandboxFleetTraceOptions as Er, FleetPromptDispatchOptions as Et, DeleteOptions as F, TeeAttestationOptions as Fi, ReapExpiredSandboxFleetsOptions as Fn, SandboxPortBinding as Fr, GitConfig as Ft, DriverType as G, UploadProgress as Gi, RolloutScorer as Gn, SandboxTerminalManager as Gr, GpuLeaseStatus as Gt, DriveTurnOptions as H, TurnDriveResult as Hi, Rollout as Hn, SandboxTerminalAttachOptions as Hr, GpuLeaseExecResult as Ht, DevServerInfo as I, TeeAttestationReport as Ii, ReapExpiredSandboxFleetsResult as In, SandboxPortPreviewLink as Ir, GitDiff as It, EffectiveBackend as J, WaitForRolloutOptions as Ji, RolloutTurnPart as Jn, SandboxTraceBundle as Jr, InstalledTool as Jt, DurablePlan as K, UsageInfo as Ki, RolloutStartResult as Kn, SandboxTerminalRequestOptions as Kr, HostAgentDriverConfig as Kt, DirectoryPermission as L, TeeAttestationResponse as Li, ReconcileSandboxFleetsOptions as Ln, SandboxResourceUsage as Lr, GitStatus as Lt, CreateSandboxOptions as M, TaskSessionFileChange as Mi, PublicTemplateVersionInfo as Mn, SandboxIdentity as Mr, GitAuth as Mt, CreateSessionOptions as N, TaskSessionInfo as Ni, PublishPublicTemplateOptions as Nn, SandboxInfo as Nr, GitBranch as Nt, CreateRequestOptions as O, StorageConfig as Oi, ProvisionResult as On, SandboxFleetWorkspace as Or, ForkCounts as Ot, CreateTaskSessionOptions as P, TaskSessionProfile as Pi, PublishPublicTemplateVersionOptions as Pn, SandboxIntelligenceEnvelope as Pr, GitCommit as Pt, EgressPolicy as Q, WriteManyOptions as Qi, SandboxConnection as Qn, SandboxUser as Qr, IntelligenceReportSubjectType as Qt, DispatchPromptOptions as R, TeePublicKey as Ri, ReconcileSandboxFleetsResult as Rn, SandboxResources as Rr, GpuLease as Rt, CodeLanguage as S, SnapshotInfo as Si, ProcessSpawnOptions as Sn, SandboxFleetToken as Sr, FleetDriveTurnRequest as St, CompletedTurnResult as T, SshKeysManager as Ti, PromptOptions as Tn, SandboxFleetTraceExport as Tr, FleetMachineId as Tt, DriverConfig as U, UpdateUserOptions as Ui, RolloutChildResult as Un, SandboxTerminalCreateOptions as Ur, GpuLeaseManager as Ut, DownloadProgress as V, TokenUsage as Vi, ResumeOptions as Vn, SandboxStatus as Vr, GpuLeaseExecOptions as Vt, DriverInfo as W, UploadOptions as Wi, RolloutOptions as Wn, SandboxTerminalInfo as Wr, GpuLeaseProviderName as Wt, EffectiveBackendSource as X, WriteFileOptions as Xi, SSHCredentials as Xn, SandboxTraceExport as Xr, IntelligenceReportBudget as Xt, EffectiveBackendProfile as Y, WorkspaceOperationLookup as Yi, SSHCommandDescriptor as Yn, SandboxTraceEvent as Yr, IntelligenceReport as Yt, EgressManager as Z, WriteManyFile as Zi, SandboxConfig as Zn, SandboxTraceOptions as Zr, IntelligenceReportCompareTo as Zt, BranchOptions as _, SessionResultOptions as _i, ProcessInfo as _n, SandboxFleetMachineSpec as _r, FleetDispatchCancelResult as _t, AttachSandboxFleetMachineOptions as a, TerminalStreamHandlers as aa, SendSessionMessageOptions as ai, McpServerConfig as an, SandboxFleetArtifact as ar, FileReadBatchOptions as at, CodeExecutionOptions as b, SnapshotDeleteOutcome as bi, ProcessManager as bn, SandboxFleetOperationsSummary as br, FleetDispatchStreamOptions as bt, BackendInfo as c, BatchBackendStats as ca, SessionBackendCredentials as ci, NetworkConfig as cn, SandboxFleetDispatchFailureClass as cr, FileReadResult as ct, BatchBackend as d, BatchSidecarGroup as da, SessionForkOptions as di, PermissionLevel as dn, SandboxFleetDriverTimings as dr, FileTreeFile as dt, TerminalExitInfo as ea, ScopedTokenScope as ei, JsonValue as en, SandboxCreateReceipt as er, EventStreamOptions as et, BatchResult as f, BatchTaskUsage as fa, SessionInfo as fi, PermissionsManager as fn, SandboxFleetInfo as fr, FileTreeOptions as ft, BatchTaskResult as g, SessionMessageInputPart as gi, Process as gn, SandboxFleetMachineRecord as gr, FileWriteResult as gt, BatchTask as h, parseBackendType as ha, SessionMessage as hi, PreviewLinkWaitOptions as hn, SandboxFleetMachineMeteredUsage as hr, FileUsageResult as ht, AttachGpuLeaseOptions as i, TerminalStreamError as ia, SecretsManager as ii, ListSandboxOptions as in, SandboxEvent as ir, FileInfo as it, CreateSandboxFleetWithCoordinatorOptions as j, TaskSessionCommitResult as ji, PublicTemplateInfo as jn, SandboxFleetWorkspaceSnapshotResult as jr, GPU_LEASE_PROVIDER_NAMES as jt, CreateSandboxFleetOptions as k, SubscriptionInfo as ki, ProvisionStatus as kn, SandboxFleetWorkspaceReconcileResult as kr, ForkIdempotency as kt, BackendManager as l, BatchEvent as la, SessionEventStreamOptions as li, NetworkManager as ln, SandboxFleetDispatchResponse as lr, FileRenameResult as lt, BatchRunRequest as m, BackendType as ma, SessionListOptions as mi, PreviewLinkManager as mn, SandboxFleetMachine as mr, FileUsageOptions as mt, AccessPolicyRule as n, TerminalStream as na, SearchOptions as ni, ListOptions as nn, SandboxDeleteOutcome as nr, ExecOptions as nt, BackendCapabilities as o, TerminalStreamOptions as oa, SendSessionMessageRequest as oi, MintScopedTokenOptions as on, SandboxFleetArtifactSpec as or, FileReadBatchResult as ot, BatchRunOptions as p, PublicBatchRunRequest as pa, SessionInterruptOptions as pi, PreviewLinkInfo as pn, SandboxFleetIntelligenceEnvelope as pr, FileTreeResult as pt, DurablePlanDecisionResult as q, WaitForOptions as qi, RolloutStatus as qn, SandboxTerminals as qr, HostAgentRuntimeBackend as qt, AddUserOptions as r, TerminalStreamAuthFormat as ra, SecretInfo as ri, ListSandboxFleetOptions as rn, SandboxEnvironment as rr, ExecResult as rt, BackendConfig as s, TerminalStreamToken as sa, SentSessionMessage as si, MkdirOptions as sn, SandboxFleetCostEstimate as sr, FileReadError as st, AcceleratorKind as t, TerminalReadyInfo as ta, SearchMatch as ti, ListMessagesOptions as tn, SandboxDeleteAcknowledgement as tr, ExactProcessSpawnOptions as tt, BackendStatus as u, BatchEventDataMap as ua, SessionFailureReason as ui, NonHostAgentDriverConfig as un, SandboxFleetDriverCapability as ur, FileSystem as ut, ChunkedUploadOptions as v, SessionStatus as vi, ProcessListOptions as vn, SandboxFleetManifest as vr, FleetDispatchResultBuffer as vt, CommitTaskSessionOptions as w, SnapshotResult as wi, PromptInputPart as wn, SandboxFleetTraceEvent as wr, FleetExecDispatchResult as wt, CodeExecutionResult as x, SnapshotIdempotency as xi, ProcessSignal as xn, SandboxFleetPolicy as xr, FleetDriveTurnOutcome as xt, ChunkedUploadResult as y, SnapshotDeleteAcknowledgement as yi, ProcessLogEntry as yn, SandboxFleetManifestMachine as yr, FleetDispatchResultBufferOptions as yt, DispatchedSession as z, TeePublicKeyResponse as zi, RenameOptions as zn, SandboxRuntimeCapabilities as zr, GpuLeaseBilling as zt };
+export { EnsureDevServerOptions as $, BatchBackendStats as $i, SandboxCreateOutcome as $n, ScopedToken as $r, IntelligenceReportWindow as $t, CreateSandboxFleetTokenOptions as A, TaskSessionChanges as Ai, ProvisionStep as An, SandboxFleetWorkspaceRestoreResult as Ar, ForkLookupOptions as At, DownloadOptions as B, TokenRefreshHandler as Bi, RestoreSnapshotOptions as Bn, SandboxRuntimeHealth as Br, GpuLeaseCommandResult as Bt, CodeResultPart as C, SnapshotOptions as Ci, ProcessStatus as Cn, SandboxFleetTraceBundle as Cr, FleetExecDispatchOptions as Ct, CreateIntelligenceReportOptions as D, StartupOperation as Di, ProvisionEvent as Dn, SandboxFleetUsage as Dr, FleetPromptDispatchResult as Dt, CreateGpuLeaseOptions as E, StartupDiagnostics as Ei, PromptResult as En, SandboxFleetTraceOptions as Er, FleetPromptDispatchOptions as Et, DeleteOptions as F, TeeAttestationOptions as Fi, ReapExpiredSandboxFleetsOptions as Fn, SandboxPortBinding as Fr, GitConfig as Ft, DriverType as G, UploadProgress as Gi, RolloutScorer as Gn, SandboxTerminalManager as Gr, GpuLeaseStatus as Gt, DriveTurnOptions as H, TurnDriveResult as Hi, Rollout as Hn, SandboxTerminalAttachOptions as Hr, GpuLeaseExecResult as Ht, DevServerInfo as I, TeeAttestationReport as Ii, ReapExpiredSandboxFleetsResult as In, SandboxPortPreviewLink as Ir, GitDiff as It, EffectiveBackend as J, WaitForRolloutOptions as Ji, RolloutTurnPart as Jn, SandboxTraceBundle as Jr, InstalledTool as Jt, DurablePlan as K, UsageInfo as Ki, RolloutStartResult as Kn, SandboxTerminalRequestOptions as Kr, HostAgentDriverConfig as Kt, DirectoryPermission as L, TeeAttestationResponse as Li, ReconcileSandboxFleetsOptions as Ln, SandboxResourceUsage as Lr, GitStatus as Lt, CreateSandboxOptions as M, TaskSessionFileChange as Mi, PublicTemplateVersionInfo as Mn, SandboxIdentity as Mr, GitAuth as Mt, CreateSessionOptions as N, TaskSessionInfo as Ni, PublishPublicTemplateOptions as Nn, SandboxInfo as Nr, GitBranch as Nt, CreateRequestOptions as O, StorageConfig as Oi, ProvisionResult as On, SandboxFleetWorkspace as Or, ForkCounts as Ot, CreateTaskSessionOptions as P, TaskSessionProfile as Pi, PublishPublicTemplateVersionOptions as Pn, SandboxIntelligenceEnvelope as Pr, GitCommit as Pt, EgressPolicy as Q, WriteManyOptions as Qi, SandboxConnection as Qn, SandboxUser as Qr, IntelligenceReportSubjectType as Qt, DispatchPromptOptions as R, TeePublicKey as Ri, ReconcileSandboxFleetsResult as Rn, SandboxResources as Rr, GpuLease as Rt, CodeLanguage as S, SnapshotInfo as Si, ProcessSpawnOptions as Sn, SandboxFleetToken as Sr, FleetDriveTurnRequest as St, CompletedTurnResult as T, SshKeysManager as Ti, PromptOptions as Tn, SandboxFleetTraceExport as Tr, FleetMachineId as Tt, DriverConfig as U, UpdateUserOptions as Ui, RolloutChildResult as Un, SandboxTerminalCreateOptions as Ur, GpuLeaseManager as Ut, DownloadProgress as V, TokenUsage as Vi, ResumeOptions as Vn, SandboxStatus as Vr, GpuLeaseExecOptions as Vt, DriverInfo as W, UploadOptions as Wi, RolloutOptions as Wn, SandboxTerminalInfo as Wr, GpuLeaseProviderName as Wt, EffectiveBackendSource as X, WriteFileOptions as Xi, SSHCredentials as Xn, SandboxTraceExport as Xr, IntelligenceReportBudget as Xt, EffectiveBackendProfile as Y, WorkspaceOperationLookup as Yi, SSHCommandDescriptor as Yn, SandboxTraceEvent as Yr, IntelligenceReport as Yt, EgressManager as Z, WriteManyFile as Zi, SandboxConfig as Zn, SandboxTraceOptions as Zr, IntelligenceReportCompareTo as Zt, BranchOptions as _, SessionResultOptions as _i, ProcessInfo as _n, SandboxFleetMachineSpec as _r, FleetDispatchCancelResult as _t, AttachSandboxFleetMachineOptions as a, BackendType as aa, SendSessionMessageOptions as ai, McpServerConfig as an, SandboxFleetArtifact as ar, FileReadBatchOptions as at, CodeExecutionOptions as b, SnapshotDeleteOutcome as bi, ProcessManager as bn, SandboxFleetOperationsSummary as br, FleetDispatchStreamOptions as bt, BackendInfo as c, TerminalExitInfo as ca, SessionBackendCredentials as ci, NetworkConfig as cn, SandboxFleetDispatchFailureClass as cr, FileReadResult as ct, BatchBackend as d, TerminalStreamAuthFormat as da, SessionForkOptions as di, PermissionLevel as dn, SandboxFleetDriverTimings as dr, FileTreeFile as dt, BatchEvent as ea, ScopedTokenScope as ei, JsonValue as en, SandboxCreateReceipt as er, EventStreamOptions as et, BatchResult as f, TerminalStreamError as fa, SessionInfo as fi, PermissionsManager as fn, SandboxFleetInfo as fr, FileTreeOptions as ft, BatchTaskResult as g, SessionMessageInputPart as gi, Process as gn, SandboxFleetMachineRecord as gr, FileWriteResult as gt, BatchTask as h, TerminalStreamToken as ha, SessionMessage as hi, PreviewLinkWaitOptions as hn, SandboxFleetMachineMeteredUsage as hr, FileUsageResult as ht, AttachGpuLeaseOptions as i, PublicBatchRunRequest as ia, SecretsManager as ii, ListSandboxOptions as in, SandboxEvent as ir, FileInfo as it, CreateSandboxFleetWithCoordinatorOptions as j, TaskSessionCommitResult as ji, PublicTemplateInfo as jn, SandboxFleetWorkspaceSnapshotResult as jr, GPU_LEASE_PROVIDER_NAMES as jt, CreateSandboxFleetOptions as k, SubscriptionInfo as ki, ProvisionStatus as kn, SandboxFleetWorkspaceReconcileResult as kr, ForkIdempotency as kt, BackendManager as l, TerminalReadyInfo as la, SessionEventStreamOptions as li, NetworkManager as ln, SandboxFleetDispatchResponse as lr, FileRenameResult as lt, BatchRunRequest as m, TerminalStreamOptions as ma, SessionListOptions as mi, PreviewLinkManager as mn, SandboxFleetMachine as mr, FileUsageOptions as mt, AccessPolicyRule as n, BatchSidecarGroup as na, SearchOptions as ni, ListOptions as nn, SandboxDeleteOutcome as nr, ExecOptions as nt, BackendCapabilities as o, parseBackendType as oa, SendSessionMessageRequest as oi, MintScopedTokenOptions as on, SandboxFleetArtifactSpec as or, FileReadBatchResult as ot, BatchRunOptions as p, TerminalStreamHandlers as pa, SessionInterruptOptions as pi, PreviewLinkInfo as pn, SandboxFleetIntelligenceEnvelope as pr, FileTreeResult as pt, DurablePlanDecisionResult as q, WaitForOptions as qi, RolloutStatus as qn, SandboxTerminals as qr, HostAgentRuntimeBackend as qt, AddUserOptions as r, BatchTaskUsage as ra, SecretInfo as ri, ListSandboxFleetOptions as rn, SandboxEnvironment as rr, ExecResult as rt, BackendConfig as s, TERMINAL_WS_ECHO_SUBPROTOCOL as sa, SentSessionMessage as si, MkdirOptions as sn, SandboxFleetCostEstimate as sr, FileReadError as st, AcceleratorKind as t, BatchEventDataMap as ta, SearchMatch as ti, ListMessagesOptions as tn, SandboxDeleteAcknowledgement as tr, ExactProcessSpawnOptions as tt, BackendStatus as u, TerminalStream as ua, SessionFailureReason as ui, NonHostAgentDriverConfig as un, SandboxFleetDriverCapability as ur, FileSystem as ut, ChunkedUploadOptions as v, SessionStatus as vi, ProcessListOptions as vn, SandboxFleetManifest as vr, FleetDispatchResultBuffer as vt, CommitTaskSessionOptions as w, SnapshotResult as wi, PromptInputPart as wn, SandboxFleetTraceEvent as wr, FleetExecDispatchResult as wt, CodeExecutionResult as x, SnapshotIdempotency as xi, ProcessSignal as xn, SandboxFleetPolicy as xr, FleetDriveTurnOutcome as xt, ChunkedUploadResult as y, SnapshotDeleteAcknowledgement as yi, ProcessLogEntry as yn, SandboxFleetManifestMachine as yr, FleetDispatchResultBufferOptions as yt, DispatchedSession as z, TeePublicKeyResponse as zi, RenameOptions as zn, SandboxRuntimeCapabilities as zr, GpuLeaseBilling as zt };

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.27.2",
+  "version": "0.28.0-develop.20260819001319.32159f4",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
+  "sideEffects": [
+    "./dist/agent/index.js"
+  ],
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {