@tangle-network/sandbox 0.28.0-develop.20260819071312.197e010 → 0.29.0-develop.20260819083239.92e9b26

package/README.md

@@ -33,6 +33,42 @@ export SANDBOX_BASE_URL=https://sandbox.tangle.tools
 
 Install an optional peer dependency only when the selected integration requires it.
 
+## Credential boundary
+
+`TANGLE_API_KEY` is an account-level control-plane credential. Keep it in a
+trusted server, CI secret store, or CLI configuration. Never ship it, a sandbox
+connection token, or provider credentials to browser JavaScript.
+
+Mint a short-lived delegated token on the server:
+
+```typescript
+const scoped = await box.mintScopedToken({
+  scope: "session-runtime",
+  sessionId: ownedRuntimeSessionId,
+  ttlMinutes: 5,
+});
+```
+
+Give the browser only `scoped.token`, `scoped.expiresAt`, and
+`scoped.sidecarProxyUrl`, then construct the browser-safe client:
+
+```typescript
+import { createSandboxRuntimeClient } from "@tangle-network/sandbox/runtime";
+
+const runtime = createSandboxRuntimeClient({
+  baseUrl: delegated.sidecarProxyUrl,
+  token: delegated.token,
+});
+```
+
+Use `scope: "session"` plus an authorized `runtimeSessionId` for
+`SessionGatewayClient` reconnect and replay. Use `scope: "read-only"` for
+runtime reads that need no workspace or terminal mutation. The server must
+authorize every sandbox and session identifier before minting.
+
+See the public `/docs/authentication` guide and
+`examples/browser-streaming-resume.ts`.
+
 ## Quick start
 
 ```typescript
@@ -182,7 +218,12 @@ const changes = await reviewer.changes();
 await reviewer.commit({ message: "Apply reviewer changes" });
 ```
 
-An isolated Agent requires a Git repository and returns `SandboxTaskSession`.
+An isolated Agent requires a Git repository and returns
+`SandboxTaskSession`. `commit()` applies the changes and removes the owned
+worktree and task branch. `box.agents.stop(id)` discards an uncommitted isolated
+generation and removes those owned Git resources before its durable session
+record; cleanup failure leaves the record intact for a safe retry.
+
 Agents in one Sandbox share a broad trust and resource boundary. Use separate
 Sandboxes for mutually untrusted Agents, separate tenants, or hard resource
 isolation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.28.0-develop.20260819071312.197e010",
+  "version": "0.29.0-develop.20260819083239.92e9b26",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [