@tangle-network/sandbox 0.28.0 → 0.29.0-develop.20260819083239.92e9b26

package/README.md

@@ -33,6 +33,42 @@ export SANDBOX_BASE_URL=https://sandbox.tangle.tools
 
 Install an optional peer dependency only when the selected integration requires it.
 
+## Credential boundary
+
+`TANGLE_API_KEY` is an account-level control-plane credential. Keep it in a
+trusted server, CI secret store, or CLI configuration. Never ship it, a sandbox
+connection token, or provider credentials to browser JavaScript.
+
+Mint a short-lived delegated token on the server:
+
+```typescript
+const scoped = await box.mintScopedToken({
+  scope: "session-runtime",
+  sessionId: ownedRuntimeSessionId,
+  ttlMinutes: 5,
+});
+```
+
+Give the browser only `scoped.token`, `scoped.expiresAt`, and
+`scoped.sidecarProxyUrl`, then construct the browser-safe client:
+
+```typescript
+import { createSandboxRuntimeClient } from "@tangle-network/sandbox/runtime";
+
+const runtime = createSandboxRuntimeClient({
+  baseUrl: delegated.sidecarProxyUrl,
+  token: delegated.token,
+});
+```
+
+Use `scope: "session"` plus an authorized `runtimeSessionId` for
+`SessionGatewayClient` reconnect and replay. Use `scope: "read-only"` for
+runtime reads that need no workspace or terminal mutation. The server must
+authorize every sandbox and session identifier before minting.
+
+See the public `/docs/authentication` guide and
+`examples/browser-streaming-resume.ts`.
+
 ## Quick start
 
 ```typescript
@@ -182,7 +218,12 @@ const changes = await reviewer.changes();
 await reviewer.commit({ message: "Apply reviewer changes" });
 ```
 
-An isolated Agent requires a Git repository and returns `SandboxTaskSession`.
+An isolated Agent requires a Git repository and returns
+`SandboxTaskSession`. `commit()` applies the changes and removes the owned
+worktree and task branch. `box.agents.stop(id)` discards an uncommitted isolated
+generation and removes those owned Git resources before its durable session
+record; cleanup failure leaves the record intact for a safe retry.
+
 Agents in one Sandbox share a broad trust and resource boundary. Use separate
 Sandboxes for mutually untrusted Agents, separate tenants, or hard resource
 isolation.

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BpmHeBK1.js";
-import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, fi as SessionInfo, mi as SessionListOptions, s as BackendConfig, x as CodeExecutionResult } from "../types-jfr4fgD3.js";
-import { i as Sandbox } from "../client-CtbXjqd2.js";
+import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BE2GsJZ3.js";
+import { C as CodeResultPart, S as CodeLanguage, b as CodeExecutionOptions, gi as SessionListOptions, mi as SessionInfo, s as BackendConfig, x as CodeExecutionResult } from "../types-CA5phY-u.js";
+import { i as Sandbox } from "../client-Bt8gTWsD.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/instances.d.ts

package/dist/agent/index.js

@@ -1,7 +1,7 @@
 import { f as assertCurrentBackendType } from "../runtime-api-CK-4S7oA.js";
 import { d as StateError, o as NotFoundError, p as ValidationError } from "../errors-C6kn-3zt.js";
-import { n as Sandbox } from "../client-BBKAFyDE.js";
-import { t as SandboxInstance } from "../sandbox-NvbxFwTv.js";
+import { n as Sandbox } from "../client-BiSZSmdt.js";
+import { t as SandboxInstance } from "../sandbox-BwIaQcE7.js";
 import { createRequire } from "node:module";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/{client-BBKAFyDE.js → client-BiSZSmdt.js}

@@ -1,6 +1,6 @@
 import { c as combineAbortSignals, d as applyRequestedModel, f as assertCurrentBackendType, l as encodePromptForWire, m as backendTypeSchema, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, u as encodeTextForWire } from "./runtime-api-CK-4S7oA.js";
 import { a as NetworkError, f as TimeoutError, l as SandboxError, m as parseErrorResponse, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-C6kn-3zt.js";
-import { S as parseSSEStream, _ as normalizeConnection, i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt, y as exportTraceBundle } from "./sandbox-NvbxFwTv.js";
+import { i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt, w as parseSSEStream, x as exportTraceBundle, y as normalizeConnection } from "./sandbox-BwIaQcE7.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/backend-registry.ts

package/dist/{client-CtbXjqd2.d.ts → client-Bt8gTWsD.d.ts}

@@ -1,5 +1,5 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BpmHeBK1.js";
-import { $t as IntelligenceReportWindow, A as CreateSandboxFleetTokenOptions, Ar as SandboxFleetWorkspaceRestoreResult, Bi as TokenRefreshHandler, Cr as SandboxFleetTraceBundle, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Dr as SandboxFleetUsage, Dt as FleetPromptDispatchResult, En as PromptResult, Er as SandboxFleetTraceOptions, Et as FleetPromptDispatchOptions, Fn as ReapExpiredSandboxFleetsOptions, In as ReapExpiredSandboxFleetsResult, Ki as UsageInfo, Ln as ReconcileSandboxFleetsOptions, M as CreateSandboxOptions, Mn as PublicTemplateVersionInfo, Mr as SandboxIdentity, Nn as PublishPublicTemplateOptions, Nr as SandboxInfo, O as CreateRequestOptions, Pn as PublishPublicTemplateVersionOptions, Rn as ReconcileSandboxFleetsResult, Sr as SandboxFleetToken, St as FleetDriveTurnRequest, Ti as SshKeysManager, Tn as PromptOptions, Tt as FleetMachineId, Xt as IntelligenceReportBudget, Yt as IntelligenceReport, Zn as SandboxConfig, Zt as IntelligenceReportCompareTo, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetArtifact, br as SandboxFleetOperationsSummary, bt as FleetDispatchStreamOptions, ea as BatchEvent, f as BatchResult, fr as SandboxFleetInfo, gr as SandboxFleetMachineRecord, ii as SecretsManager, in as ListSandboxOptions, j as CreateSandboxFleetWithCoordinatorOptions, jn as PublicTemplateInfo, jr as SandboxFleetWorkspaceSnapshotResult, k as CreateSandboxFleetOptions, ki as SubscriptionInfo, kr as SandboxFleetWorkspaceReconcileResult, lr as SandboxFleetDispatchResponse, m as BatchRunRequest, nt as ExecOptions, or as SandboxFleetArtifactSpec, p as BatchRunOptions, rn as ListSandboxFleetOptions, rr as SandboxEnvironment, rt as ExecResult, sr as SandboxFleetCostEstimate, ur as SandboxFleetDriverCapability, vr as SandboxFleetManifest, vt as FleetDispatchResultBuffer, wn as PromptInputPart, wt as FleetExecDispatchResult, xt as FleetDriveTurnOutcome, yt as FleetDispatchResultBufferOptions } from "./types-jfr4fgD3.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BE2GsJZ3.js";
+import { $n as SandboxConfig, A as CreateSandboxFleetTokenOptions, Bn as ReconcileSandboxFleetsResult, Ct as FleetDriveTurnRequest, D as CreateIntelligenceReportOptions, Di as SshKeysManager, Dn as PromptOptions, Dt as FleetPromptDispatchOptions, En as PromptInputPart, Et as FleetMachineId, Fn as PublishPublicTemplateOptions, Fr as SandboxInfo, Hi as TokenRefreshHandler, In as PublishPublicTemplateVersionOptions, Ji as UsageInfo, Ln as ReapExpiredSandboxFleetsOptions, M as CreateSandboxOptions, Mr as SandboxFleetWorkspaceRestoreResult, Nn as PublicTemplateInfo, Nr as SandboxFleetWorkspaceSnapshotResult, O as CreateRequestOptions, On as PromptResult, Or as SandboxFleetTraceOptions, Ot as FleetPromptDispatchResult, Pn as PublicTemplateVersionInfo, Pr as SandboxIdentity, Qt as IntelligenceReportCompareTo, Rn as ReapExpiredSandboxFleetsResult, Sr as SandboxFleetOperationsSummary, St as FleetDriveTurnOutcome, Tr as SandboxFleetTraceBundle, Tt as FleetExecDispatchResult, Xt as IntelligenceReport, Zt as IntelligenceReportBudget, a as AttachSandboxFleetMachineOptions, an as ListSandboxOptions, ar as SandboxEnvironment, br as SandboxFleetManifest, bt as FleetDispatchResultBufferOptions, cr as SandboxFleetArtifactSpec, dr as SandboxFleetDispatchResponse, en as IntelligenceReportWindow, f as BatchResult, fr as SandboxFleetDriverCapability, in as ListSandboxFleetOptions, it as ExecResult, j as CreateSandboxFleetWithCoordinatorOptions, ji as SubscriptionInfo, jr as SandboxFleetWorkspaceReconcileResult, k as CreateSandboxFleetOptions, kr as SandboxFleetUsage, lr as SandboxFleetCostEstimate, m as BatchRunRequest, mr as SandboxFleetInfo, na as BatchEvent, oi as SecretsManager, p as BatchRunOptions, rt as ExecOptions, sr as SandboxFleetArtifact, vr as SandboxFleetMachineRecord, vt as FleetDispatchCancelResult, wr as SandboxFleetToken, wt as FleetExecDispatchOptions, xt as FleetDispatchStreamOptions, yt as FleetDispatchResultBuffer, zn as ReconcileSandboxFleetsOptions } from "./types-CA5phY-u.js";
 import { z } from "zod";
 
 //#region src/backend-registry.d.ts

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BpmHeBK1.js";
-import { M as CreateSandboxOptions, Nr as SandboxInfo, Vr as SandboxStatus, Zn as SandboxConfig, cn as NetworkConfig, hn as PreviewLinkWaitOptions, mn as PreviewLinkManager, nt as ExecOptions, pn as PreviewLinkInfo, rt as ExecResult, wn as PromptInputPart } from "./types-jfr4fgD3.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-CtbXjqd2.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BE2GsJZ3.js";
+import { $n as SandboxConfig, En as PromptInputPart, Fr as SandboxInfo, M as CreateSandboxOptions, Ur as SandboxStatus, _n as PreviewLinkWaitOptions, gn as PreviewLinkManager, hn as PreviewLinkInfo, it as ExecResult, rt as ExecOptions, un as NetworkConfig } from "./types-CA5phY-u.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-Bt8gTWsD.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/core.js

@@ -1,4 +1,4 @@
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-C6kn-3zt.js";
-import { _ as parseBackendRegistryResponseBody, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, m as backendRegistryResponseSchema, n as Sandbox, p as backendRegistryInteractionKindSchema } from "./client-BBKAFyDE.js";
-import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-NvbxFwTv.js";
+import { _ as parseBackendRegistryResponseBody, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, m as backendRegistryResponseSchema, n as Sandbox, p as backendRegistryInteractionKindSchema } from "./client-BiSZSmdt.js";
+import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-BwIaQcE7.js";
 export { AuthError, CapabilityError, FileWriteConflictError, NetworkError, NotFoundError, PartialFailureError, QuotaError, Sandbox, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/{index-DweQWp1c.d.ts → index-BAhkXUaK.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-BpmHeBK1.js";
-import { M as CreateSandboxOptions } from "./types-jfr4fgD3.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-BE2GsJZ3.js";
+import { M as CreateSandboxOptions } from "./types-CA5phY-u.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { A as BuildControlPlaneMcpConfigOptions, C as InterruptResult, D as SandboxInteractionConflict, E as SandboxInteractionCommandResult, F as SandboxMcpEndpoint, I as SandboxMcpServerEntry, L as buildControlPlaneMcpConfig, M as CONTROL_PLANE_MCP_SERVER_NAME, N as SANDBOX_MCP_SERVER_NAME, O as SandboxInteractionResolution, P as SandboxMcpConfig, R as buildSandboxMcpConfig, S as InteractiveSessionStatus, T as StartInteractiveOptions, _ as InteractiveAttachOptions, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionHost, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as BuildSandboxMcpConfigOptions, k as SandboxInteractionResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as InteractiveAuthFile, w as RespondToPermissionOptions, x as InteractiveSessionInfo, y as InteractiveSessionHandle } from "./sandbox-BpmHeBK1.js";
-import { $ as EnsureDevServerOptions, $i as BatchBackendStats, $n as SandboxCreateOutcome, $r as ScopedToken, $t as IntelligenceReportWindow, Ai as TaskSessionChanges, An as ProvisionStep, Ar as SandboxFleetWorkspaceRestoreResult, At as ForkLookupOptions, B as DownloadOptions, Bi as TokenRefreshHandler, Br as SandboxRuntimeHealth, Bt as GpuLeaseCommandResult, Ci as SnapshotOptions, Cn as ProcessStatus, Cr as SandboxFleetTraceBundle, Ct as FleetExecDispatchOptions, D as CreateIntelligenceReportOptions, Di as StartupOperation, Dn as ProvisionEvent, Dr as SandboxFleetUsage, E as CreateGpuLeaseOptions, Ei as StartupDiagnostics, En as PromptResult, Er as SandboxFleetTraceOptions, Et as FleetPromptDispatchOptions, F as DeleteOptions, Fi as TeeAttestationOptions, Fn as ReapExpiredSandboxFleetsOptions, Fr as SandboxPortBinding, Ft as GitConfig, G as DriverType, Gi as UploadProgress, Gn as RolloutScorer, Gr as SandboxTerminalManager, Gt as GpuLeaseStatus, H as DriveTurnOptions, Hi as TurnDriveResult, Hn as Rollout, Hr as SandboxTerminalAttachOptions, Ht as GpuLeaseExecResult, I as DevServerInfo, Ii as TeeAttestationReport, In as ReapExpiredSandboxFleetsResult, Ir as SandboxPortPreviewLink, It as GitDiff, J as EffectiveBackend, Ji as WaitForRolloutOptions, Jn as RolloutTurnPart, Jr as SandboxTraceBundle, Jt as InstalledTool, K as DurablePlan, Ki as UsageInfo, Kn as RolloutStartResult, Kr as SandboxTerminalRequestOptions, Kt as HostAgentDriverConfig, L as DirectoryPermission, Li as TeeAttestationResponse, Ln as ReconcileSandboxFleetsOptions, Lr as SandboxResourceUsage, Lt as GitStatus, M as CreateSandboxOptions, Mi as TaskSessionFileChange, Mn as PublicTemplateVersionInfo, Mr as SandboxIdentity, Mt as GitAuth, N as CreateSessionOptions, Ni as TaskSessionInfo, Nn as PublishPublicTemplateOptions, Nr as SandboxInfo, Nt as GitBranch, O as CreateRequestOptions, Oi as StorageConfig, On as ProvisionResult, Or as SandboxFleetWorkspace, Ot as ForkCounts, P as CreateTaskSessionOptions, Pi as TaskSessionProfile, Pn as PublishPublicTemplateVersionOptions, Pr as SandboxIntelligenceEnvelope, Pt as GitCommit, Q as EgressPolicy, Qi as WriteManyOptions, Qn as SandboxConnection, Qr as SandboxUser, Qt as IntelligenceReportSubjectType, R as DispatchPromptOptions, Ri as TeePublicKey, Rn as ReconcileSandboxFleetsResult, Rr as SandboxResources, Rt as GpuLease, Si as SnapshotInfo, Sn as ProcessSpawnOptions, Sr as SandboxFleetToken, St as FleetDriveTurnRequest, T as CompletedTurnResult, Tn as PromptOptions, Tr as SandboxFleetTraceExport, Tt as FleetMachineId, U as DriverConfig, Ui as UpdateUserOptions, Un as RolloutChildResult, Ur as SandboxTerminalCreateOptions, Ut as GpuLeaseManager, V as DownloadProgress, Vi as TokenUsage, Vr as SandboxStatus, Vt as GpuLeaseExecOptions, W as DriverInfo, Wi as UploadOptions, Wn as RolloutOptions, Wr as SandboxTerminalInfo, Wt as GpuLeaseProviderName, X as EffectiveBackendSource, Xi as WriteFileOptions, Xn as SSHCredentials, Xr as SandboxTraceExport, Xt as IntelligenceReportBudget, Y as EffectiveBackendProfile, Yi as WorkspaceOperationLookup, Yn as SSHCommandDescriptor, Yr as SandboxTraceEvent, Yt as IntelligenceReport, Z as EgressManager, Zi as WriteManyFile, Zn as SandboxConfig, Zr as SandboxTraceOptions, Zt as IntelligenceReportCompareTo, _ as BranchOptions, _i as SessionResultOptions, _n as ProcessInfo, _r as SandboxFleetMachineSpec, _t as FleetDispatchCancelResult, a as AttachSandboxFleetMachineOptions, aa as BackendType, ai as SendSessionMessageOptions, an as McpServerConfig, ar as SandboxFleetArtifact, at as FileReadBatchOptions, bi as SnapshotDeleteOutcome, bn as ProcessManager, br as SandboxFleetOperationsSummary, bt as FleetDispatchStreamOptions, c as BackendInfo, ca as TerminalExitInfo, ci as SessionBackendCredentials, cn as NetworkConfig, cr as SandboxFleetDispatchFailureClass, ct as FileReadResult, d as BatchBackend, da as TerminalStreamAuthFormat, di as SessionForkOptions, dn as PermissionLevel, dr as SandboxFleetDriverTimings, dt as FileTreeFile, ea as BatchEvent, ei as ScopedTokenScope, er as SandboxCreateReceipt, et as EventStreamOptions, f as BatchResult, fa as TerminalStreamError, fi as SessionInfo, fn as PermissionsManager, fr as SandboxFleetInfo, ft as FileTreeOptions, g as BatchTaskResult, gi as SessionMessageInputPart, gn as Process, gr as SandboxFleetMachineRecord, gt as FileWriteResult, h as BatchTask, ha as TerminalStreamToken, hi as SessionMessage, hn as PreviewLinkWaitOptions, hr as SandboxFleetMachineMeteredUsage, ht as FileUsageResult, i as AttachGpuLeaseOptions, ia as PublicBatchRunRequest, ii as SecretsManager, in as ListSandboxOptions, ir as SandboxEvent, it as FileInfo, j as CreateSandboxFleetWithCoordinatorOptions, ji as TaskSessionCommitResult, jn as PublicTemplateInfo, jr as SandboxFleetWorkspaceSnapshotResult, jt as GPU_LEASE_PROVIDER_NAMES, k as CreateSandboxFleetOptions, ki as SubscriptionInfo, kn as ProvisionStatus, kr as SandboxFleetWorkspaceReconcileResult, kt as ForkIdempotency, l as BackendManager, la as TerminalReadyInfo, li as SessionEventStreamOptions, ln as NetworkManager, lr as SandboxFleetDispatchResponse, lt as FileRenameResult, m as BatchRunRequest, ma as TerminalStreamOptions, mi as SessionListOptions, mn as PreviewLinkManager, mr as SandboxFleetMachine, mt as FileUsageOptions, n as AccessPolicyRule, na as BatchSidecarGroup, ni as SearchOptions, nn as ListOptions, nr as SandboxDeleteOutcome, nt as ExecOptions, o as BackendCapabilities, oa as parseBackendType, oi as SendSessionMessageRequest, on as MintScopedTokenOptions, or as SandboxFleetArtifactSpec, ot as FileReadBatchResult, p as BatchRunOptions, pa as TerminalStreamHandlers, pi as SessionInterruptOptions, pn as PreviewLinkInfo, pr as SandboxFleetIntelligenceEnvelope, pt as FileTreeResult, q as DurablePlanDecisionResult, qi as WaitForOptions, qn as RolloutStatus, qr as SandboxTerminals, qt as HostAgentRuntimeBackend, r as AddUserOptions, ra as BatchTaskUsage, ri as SecretInfo, rn as ListSandboxFleetOptions, rr as SandboxEnvironment, rt as ExecResult, s as BackendConfig, sa as TERMINAL_WS_ECHO_SUBPROTOCOL, si as SentSessionMessage, sn as MkdirOptions, sr as SandboxFleetCostEstimate, st as FileReadError, t as AcceleratorKind, ta as BatchEventDataMap, ti as SearchMatch, tn as ListMessagesOptions, tr as SandboxDeleteAcknowledgement, tt as ExactProcessSpawnOptions, u as BackendStatus, ua as TerminalStream, ui as SessionFailureReason, un as NonHostAgentDriverConfig, ur as SandboxFleetDriverCapability, ut as FileSystem, v as ChunkedUploadOptions, vi as SessionStatus, vn as ProcessListOptions, vr as SandboxFleetManifest, vt as FleetDispatchResultBuffer, w as CommitTaskSessionOptions, wi as SnapshotResult, wn as PromptInputPart, wr as SandboxFleetTraceEvent, xi as SnapshotIdempotency, xn as ProcessSignal, xr as SandboxFleetPolicy, xt as FleetDriveTurnOutcome, y as ChunkedUploadResult, yi as SnapshotDeleteAcknowledgement, yn as ProcessLogEntry, yr as SandboxFleetManifestMachine, yt as FleetDispatchResultBufferOptions, z as DispatchedSession, zi as TeePublicKeyResponse, zn as RenameOptions, zr as SandboxRuntimeCapabilities, zt as GpuLeaseBilling } from "./types-jfr4fgD3.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-CtbXjqd2.js";
+import { A as BuildControlPlaneMcpConfigOptions, C as InterruptResult, D as SandboxInteractionConflict, E as SandboxInteractionCommandResult, F as SandboxMcpEndpoint, I as SandboxMcpServerEntry, L as buildControlPlaneMcpConfig, M as CONTROL_PLANE_MCP_SERVER_NAME, N as SANDBOX_MCP_SERVER_NAME, O as SandboxInteractionResolution, P as SandboxMcpConfig, R as buildSandboxMcpConfig, S as InteractiveSessionStatus, T as StartInteractiveOptions, _ as InteractiveAttachOptions, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionHost, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as BuildSandboxMcpConfigOptions, k as SandboxInteractionResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as InteractiveAuthFile, w as RespondToPermissionOptions, x as InteractiveSessionInfo, y as InteractiveSessionHandle } from "./sandbox-BE2GsJZ3.js";
+import { $ as EgressPolicy, $i as WriteManyFile, $n as SandboxConfig, $r as SandboxTraceOptions, $t as IntelligenceReportSubjectType, Ai as StorageConfig, An as ProvisionResult, Ar as SandboxFleetWorkspace, At as ForkIdempotency, B as DownloadOptions, Bi as TeePublicKey, Bn as ReconcileSandboxFleetsResult, Br as SandboxResources, Bt as GpuLeaseBilling, Ci as SnapshotIdempotency, Cn as ProcessSignal, Cr as SandboxFleetPolicy, Ct as FleetDriveTurnRequest, D as CreateIntelligenceReportOptions, Dn as PromptOptions, Dr as SandboxFleetTraceExport, Dt as FleetPromptDispatchOptions, E as CreateGpuLeaseOptions, Ei as SnapshotResult, En as PromptInputPart, Er as SandboxFleetTraceEvent, Et as FleetMachineId, F as DeleteOptions, Fi as TaskSessionInfo, Fn as PublishPublicTemplateOptions, Fr as SandboxInfo, Ft as GitCommit, G as DriverType, Gi as UpdateUserOptions, Gn as RolloutChildResult, Gr as SandboxTerminalCreateOptions, Gt as GpuLeaseProviderName, H as DriveTurnOptions, Hi as TokenRefreshHandler, Hr as SandboxRuntimeHealth, Ht as GpuLeaseExecOptions, I as DevServerInfo, Ii as TaskSessionProfile, In as PublishPublicTemplateVersionOptions, Ir as SandboxIntelligenceEnvelope, It as GitConfig, J as EffectiveBackend, Ji as UsageInfo, Jn as RolloutStartResult, Jr as SandboxTerminalRequestOptions, Jt as HostAgentRuntimeBackend, K as DurablePlan, Ki as UploadOptions, Kn as RolloutOptions, Kr as SandboxTerminalInfo, Kt as GpuLeaseStatus, L as DirectoryPermission, Li as TeeAttestationOptions, Ln as ReapExpiredSandboxFleetsOptions, Lr as SandboxPortBinding, Lt as GitDiff, M as CreateSandboxOptions, Mi as TaskSessionChanges, Mn as ProvisionStep, Mr as SandboxFleetWorkspaceRestoreResult, Mt as GPU_LEASE_PROVIDER_NAMES, N as CreateSessionOptions, Ni as TaskSessionCommitResult, Nn as PublicTemplateInfo, Nr as SandboxFleetWorkspaceSnapshotResult, Nt as GitAuth, O as CreateRequestOptions, Oi as StartupDiagnostics, On as PromptResult, Or as SandboxFleetTraceOptions, P as CreateTaskSessionOptions, Pi as TaskSessionFileChange, Pn as PublicTemplateVersionInfo, Pr as SandboxIdentity, Pt as GitBranch, Q as EgressManager, Qi as WriteFileOptions, Qn as SSHCredentials, Qr as SandboxTraceExport, Qt as IntelligenceReportCompareTo, R as DispatchPromptOptions, Ri as TeeAttestationReport, Rn as ReapExpiredSandboxFleetsResult, Rr as SandboxPortPreviewLink, Rt as GitStatus, Si as SnapshotDeleteOutcome, Sn as ProcessManager, Sr as SandboxFleetOperationsSummary, St as FleetDriveTurnOutcome, T as CompletedTurnResult, Ti as SnapshotOptions, Tn as ProcessStatus, Tr as SandboxFleetTraceBundle, U as DriverConfig, Ui as TokenUsage, Ur as SandboxStatus, Ut as GpuLeaseExecResult, V as DownloadProgress, Vi as TeePublicKeyResponse, Vn as RenameOptions, Vr as SandboxRuntimeCapabilities, Vt as GpuLeaseCommandResult, W as DriverInfo, Wi as TurnDriveResult, Wn as Rollout, Wr as SandboxTerminalAttachOptions, Wt as GpuLeaseManager, X as EffectiveBackendSource, Xi as WaitForRolloutOptions, Xn as RolloutTurnPart, Xr as SandboxTraceBundle, Xt as IntelligenceReport, Y as EffectiveBackendProfile, Yi as WaitForOptions, Yn as RolloutStatus, Yr as SandboxTerminals, Yt as InstalledTool, Z as EgressDenial, Zi as WorkspaceOperationLookup, Zn as SSHCommandDescriptor, Zr as SandboxTraceEvent, Zt as IntelligenceReportBudget, _ as BranchOptions, _a as TerminalStreamToken, _i as SessionMessage, _n as PreviewLinkWaitOptions, _r as SandboxFleetMachineMeteredUsage, _t as FileWriteResult, a as AttachSandboxFleetMachineOptions, aa as BatchTaskUsage, ai as SecretInfo, an as ListSandboxOptions, ar as SandboxEnvironment, at as FileInfo, bi as SessionStatus, bn as ProcessListOptions, br as SandboxFleetManifest, bt as FleetDispatchResultBufferOptions, c as BackendInfo, ca as parseBackendType, ci as SendSessionMessageRequest, cn as MintScopedTokenOptions, cr as SandboxFleetArtifactSpec, ct as FileReadError, d as BatchBackend, da as TerminalReadyInfo, di as SessionEventStreamOptions, dn as NetworkManager, dr as SandboxFleetDispatchResponse, dt as FileSystem, ea as WriteManyOptions, ei as SandboxUser, en as IntelligenceReportWindow, er as SandboxConnection, et as EnsureDevServerOptions, f as BatchResult, fa as TerminalStream, fi as SessionFailureReason, fn as NonHostAgentDriverConfig, fr as SandboxFleetDriverCapability, ft as FileTreeFile, g as BatchTaskResult, ga as TerminalStreamOptions, gi as SessionListOptions, gn as PreviewLinkManager, gr as SandboxFleetMachine, gt as FileUsageResult, h as BatchTask, ha as TerminalStreamHandlers, hi as SessionInterruptOptions, hn as PreviewLinkInfo, hr as SandboxFleetIntelligenceEnvelope, ht as FileUsageOptions, i as AttachGpuLeaseOptions, ia as BatchSidecarGroup, ii as SearchOptions, in as ListSandboxFleetOptions, ir as SandboxDeleteOutcome, it as ExecResult, j as CreateSandboxFleetWithCoordinatorOptions, ji as SubscriptionInfo, jn as ProvisionStatus, jr as SandboxFleetWorkspaceReconcileResult, jt as ForkLookupOptions, k as CreateSandboxFleetOptions, ki as StartupOperation, kn as ProvisionEvent, kr as SandboxFleetUsage, kt as ForkCounts, l as BackendManager, la as TERMINAL_WS_ECHO_SUBPROTOCOL, li as SentSessionMessage, ln as MkdirOptions, lr as SandboxFleetCostEstimate, lt as FileReadResult, m as BatchRunRequest, ma as TerminalStreamError, mi as SessionInfo, mn as PermissionsManager, mr as SandboxFleetInfo, mt as FileTreeResult, n as AccessPolicyRule, na as BatchEvent, ni as ScopedTokenScope, nn as ListMessagesOptions, nr as SandboxCreateReceipt, nt as ExactProcessSpawnOptions, o as BackendCapabilities, oa as PublicBatchRunRequest, oi as SecretsManager, on as MAX_EGRESS_DENIALS_LIMIT, or as SandboxEvent, ot as FileReadBatchOptions, p as BatchRunOptions, pa as TerminalStreamAuthFormat, pi as SessionForkOptions, pn as PermissionLevel, pr as SandboxFleetDriverTimings, pt as FileTreeOptions, q as DurablePlanDecisionResult, qi as UploadProgress, qn as RolloutScorer, qr as SandboxTerminalManager, qt as HostAgentDriverConfig, r as AddUserOptions, ra as BatchEventDataMap, ri as SearchMatch, rn as ListOptions, rr as SandboxDeleteAcknowledgement, rt as ExecOptions, s as BackendConfig, sa as BackendType, si as SendSessionMessageOptions, sn as McpServerConfig, sr as SandboxFleetArtifact, st as FileReadBatchResult, t as AcceleratorKind, ta as BatchBackendStats, ti as ScopedToken, tr as SandboxCreateOutcome, tt as EventStreamOptions, u as BackendStatus, ua as TerminalExitInfo, ui as SessionBackendCredentials, un as NetworkConfig, ur as SandboxFleetDispatchFailureClass, ut as FileRenameResult, v as ChunkedUploadOptions, vi as SessionMessageInputPart, vn as Process, vr as SandboxFleetMachineRecord, vt as FleetDispatchCancelResult, w as CommitTaskSessionOptions, wi as SnapshotInfo, wn as ProcessSpawnOptions, wr as SandboxFleetToken, wt as FleetExecDispatchOptions, xi as SnapshotDeleteAcknowledgement, xn as ProcessLogEntry, xr as SandboxFleetManifestMachine, xt as FleetDispatchStreamOptions, y as ChunkedUploadResult, yi as SessionResultOptions, yn as ProcessInfo, yr as SandboxFleetMachineSpec, yt as FleetDispatchResultBuffer, z as DispatchedSession, zi as TeeAttestationResponse, zn as ReconcileSandboxFleetsOptions, zr as SandboxResourceUsage, zt as GpuLease } from "./types-CA5phY-u.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-Bt8gTWsD.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-DtRFVx5U.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-Cp1KYanB.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DweQWp1c.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-BAhkXUaK.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -4425,4 +4425,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InteractiveSessionStatus, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createBatchResultAccumulator, createConfidentialSandbox, createManageSandboxesTool, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InteractiveSessionStatus, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createBatchResultAccumulator, createConfidentialSandbox, createManageSandboxesTool, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/index.js

@@ -1,9 +1,9 @@
 import { h as parseBackendType, m as backendTypeSchema, p as normalizeRuntimeBackendConfig } from "./runtime-api-CK-4S7oA.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-C6kn-3zt.js";
-import { _ as parseBackendRegistryResponseBody, a as splitInlineProfileSkills, c as SandboxFleetClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryInteractionKindSchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-BBKAFyDE.js";
-import { S as parseSSEStream, a as WorkspaceImages, b as otelTraceIdForTangleTrace, c as TerminalStreamError, d as InteractiveSessionHandle, f as applySandboxEventText, g as isToolBearingEvent, h as getSandboxEventText, l as SandboxTaskSession, m as collectAgentResponseText, o as TERMINAL_WS_ECHO_SUBPROTOCOL, p as collectAgentFinalMessageText, s as TerminalStream, t as SandboxInstance, u as SandboxSession, v as buildTraceExportPayload, x as toOtelJson, y as exportTraceBundle } from "./sandbox-NvbxFwTv.js";
+import { _ as parseBackendRegistryResponseBody, a as splitInlineProfileSkills, c as SandboxFleetClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryInteractionKindSchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-BiSZSmdt.js";
+import { C as toOtelJson, S as otelTraceIdForTangleTrace, _ as getSandboxEventText, a as WorkspaceImages, b as buildTraceExportPayload, c as TERMINAL_WS_ECHO_SUBPROTOCOL, d as SandboxTaskSession, f as SandboxSession, g as collectAgentResponseText, h as collectAgentFinalMessageText, l as TerminalStream, m as applySandboxEventText, o as GPU_LEASE_PROVIDER_NAMES, p as InteractiveSessionHandle, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as TerminalStreamError, v as isToolBearingEvent, w as parseSSEStream, x as exportTraceBundle } from "./sandbox-BwIaQcE7.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-COCXdRrk.js";
-import { t as TangleSandboxClient } from "./tangle-DfKDt5Nz.js";
+import { t as TangleSandboxClient } from "./tangle-CGzEfYFL.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts
@@ -597,20 +597,6 @@ function generateDockerfile(spec) {
 	return lines.join("\n");
 }
 //#endregion
-//#region src/types.ts
-const GPU_LEASE_PROVIDER_NAMES = [
-	"runpod",
-	"vast-ai",
-	"lambda-labs",
-	"tensordock",
-	"paperspace",
-	"aws",
-	"gcp",
-	"azure",
-	"crusoe",
-	"fluidstack"
-];
-//#endregion
 //#region src/manage-sandboxes.ts
 const MANAGE_SANDBOXES_TOOL_NAME = "manageSandboxes";
 const nonEmptyStringSchema = z.string().min(1);
@@ -1483,4 +1469,4 @@ function stripUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0).map(([k, v]) => [k, stripUndefined(v)]));
 }
 //#endregion
-export { AuthError, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, CollaborationClient, CollaborationFileBridge, DEFAULT_SANDBOX_SIZE, EgressProxyRecoveryError, FileWriteConflictError, GPU_LEASE_PROVIDER_NAMES, Image, ImageBuilder, IntelligenceClient, InteractiveSessionHandle, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, NetworkError, NotFoundError, PartialFailureError, QuotaError, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, Sandbox, SandboxError, SandboxFleet, SandboxFleetClient, SandboxInstance, SandboxSession, SandboxTaskSession, ServerError, StateError, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, TerminalStream, TerminalStreamError, TimeoutError, ValidationError, WorkspaceImages, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createBatchResultAccumulator, createConfidentialSandbox, createManageSandboxesTool, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { AuthError, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, CollaborationClient, CollaborationFileBridge, DEFAULT_SANDBOX_SIZE, EgressProxyRecoveryError, FileWriteConflictError, GPU_LEASE_PROVIDER_NAMES, Image, ImageBuilder, IntelligenceClient, InteractiveSessionHandle, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, NetworkError, NotFoundError, PartialFailureError, QuotaError, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, Sandbox, SandboxError, SandboxFleet, SandboxFleetClient, SandboxInstance, SandboxSession, SandboxTaskSession, ServerError, StateError, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, TerminalStream, TerminalStreamError, TimeoutError, ValidationError, WorkspaceImages, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createBatchResultAccumulator, createConfidentialSandbox, createManageSandboxesTool, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-import { Ai as TaskSessionChanges, Br as SandboxRuntimeHealth, Fr as SandboxPortBinding, Gi as UploadProgress, Gr as SandboxTerminalManager, Kr as SandboxTerminalRequestOptions, N as CreateSessionOptions, Ni as TaskSessionInfo, P as CreateTaskSessionOptions, Ur as SandboxTerminalCreateOptions, Wr as SandboxTerminalInfo, Xi as WriteFileOptions, ai as SendSessionMessageOptions, at as FileReadBatchOptions, fi as SessionInfo, ft as FileTreeOptions, gt as FileWriteResult, hi as SessionMessage, ht as FileUsageResult, ji as TaskSessionCommitResult, lt as FileRenameResult, mt as FileUsageOptions, oi as SendSessionMessageRequest, ot as FileReadBatchResult, pt as FileTreeResult, si as SentSessionMessage, tn as ListMessagesOptions, v as ChunkedUploadOptions, w as CommitTaskSessionOptions, y as ChunkedUploadResult, zn as RenameOptions } from "./types-jfr4fgD3.js";
+import { Fi as TaskSessionInfo, Gr as SandboxTerminalCreateOptions, Hr as SandboxRuntimeHealth, Jr as SandboxTerminalRequestOptions, Kr as SandboxTerminalInfo, Lr as SandboxPortBinding, Mi as TaskSessionChanges, N as CreateSessionOptions, Ni as TaskSessionCommitResult, P as CreateTaskSessionOptions, Qi as WriteFileOptions, Vn as RenameOptions, _i as SessionMessage, _t as FileWriteResult, ci as SendSessionMessageRequest, gt as FileUsageResult, ht as FileUsageOptions, li as SentSessionMessage, mi as SessionInfo, mt as FileTreeResult, nn as ListMessagesOptions, ot as FileReadBatchOptions, pt as FileTreeOptions, qi as UploadProgress, qr as SandboxTerminalManager, si as SendSessionMessageOptions, st as FileReadBatchResult, ut as FileRenameResult, v as ChunkedUploadOptions, w as CommitTaskSessionOptions, y as ChunkedUploadResult } from "./types-CA5phY-u.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-Bdy5jXzc.js";
 
 //#region src/lib/chunked-upload.d.ts

package/dist/{sandbox-BpmHeBK1.d.ts → sandbox-BE2GsJZ3.d.ts}

@@ -1,4 +1,4 @@
-import { $r as ScopedToken, $t as IntelligenceReportWindow, Ai as TaskSessionChanges, At as ForkLookupOptions, Bn as RestoreSnapshotOptions, Br as SandboxRuntimeHealth, Ci as SnapshotOptions, Cr as SandboxFleetTraceBundle, Dn as ProvisionEvent, Ei as StartupDiagnostics, En as PromptResult, Fi as TeeAttestationOptions, Fr as SandboxPortBinding, H as DriveTurnOptions, Hi as TurnDriveResult, Hn as Rollout, Hr as SandboxTerminalAttachOptions, It as GitDiff, Ji as WaitForRolloutOptions, Jr as SandboxTraceBundle, Jt as InstalledTool, K as DurablePlan, Kn as RolloutStartResult, Li as TeeAttestationResponse, Lr as SandboxResourceUsage, Lt as GitStatus, N as CreateSessionOptions, Ni as TaskSessionInfo, Nr as SandboxInfo, Nt as GitBranch, On as ProvisionResult, Ot as ForkCounts, P as CreateTaskSessionOptions, Pt as GitCommit, Qi as WriteManyOptions, Qn as SandboxConnection, R as DispatchPromptOptions, Rt as GpuLease, S as CodeLanguage, Si as SnapshotInfo, T as CompletedTurnResult, Tn as PromptOptions, Ut as GpuLeaseManager, Vn as ResumeOptions, Vr as SandboxStatus, W as DriverInfo, Wn as RolloutOptions, Xi as WriteFileOptions, Xn as SSHCredentials, Xt as IntelligenceReportBudget, Yi as WorkspaceOperationLookup, Yn as SSHCommandDescriptor, Yt as IntelligenceReport, Z as EgressManager, Zi as WriteManyFile, Zr as SandboxTraceOptions, Zt as IntelligenceReportCompareTo, _ as BranchOptions, _i as SessionResultOptions, aa as BackendType, ai as SendSessionMessageOptions, b as CodeExecutionOptions, bn as ProcessManager, di as SessionForkOptions, en as JsonValue, er as SandboxCreateReceipt, et as EventStreamOptions, fi as SessionInfo, fn as PermissionsManager, gt as FileWriteResult, hi as SessionMessage, ir as SandboxEvent, ji as TaskSessionCommitResult, kt as ForkIdempotency, l as BackendManager, li as SessionEventStreamOptions, ln as NetworkManager, mi as SessionListOptions, mn as PreviewLinkManager, ni as SearchOptions, nt as ExecOptions, oi as SendSessionMessageRequest, on as MintScopedTokenOptions, pa as TerminalStreamHandlers, pi as SessionInterruptOptions, q as DurablePlanDecisionResult, qi as WaitForOptions, qr as SandboxTerminals, rt as ExecResult, s as BackendConfig, si as SentSessionMessage, ti as SearchMatch, tn as ListMessagesOptions, tr as SandboxDeleteAcknowledgement, ua as TerminalStream, ut as FileSystem, w as CommitTaskSessionOptions, wi as SnapshotResult, wn as PromptInputPart, x as CodeExecutionResult, yi as SnapshotDeleteAcknowledgement, z as DispatchedSession, zi as TeePublicKeyResponse, zr as SandboxRuntimeCapabilities } from "./types-jfr4fgD3.js";
+import { $i as WriteManyFile, $r as SandboxTraceOptions, An as ProvisionResult, At as ForkIdempotency, Dn as PromptOptions, Ei as SnapshotResult, En as PromptInputPart, Fi as TaskSessionInfo, Fr as SandboxInfo, Ft as GitCommit, H as DriveTurnOptions, Hn as RestoreSnapshotOptions, Hr as SandboxRuntimeHealth, Jn as RolloutStartResult, K as DurablePlan, Kn as RolloutOptions, Li as TeeAttestationOptions, Lr as SandboxPortBinding, Lt as GitDiff, Mi as TaskSessionChanges, N as CreateSessionOptions, Ni as TaskSessionCommitResult, Oi as StartupDiagnostics, On as PromptResult, P as CreateTaskSessionOptions, Pt as GitBranch, Q as EgressManager, Qi as WriteFileOptions, Qn as SSHCredentials, Qt as IntelligenceReportCompareTo, R as DispatchPromptOptions, Rt as GitStatus, S as CodeLanguage, Sn as ProcessManager, T as CompletedTurnResult, Ti as SnapshotOptions, Tr as SandboxFleetTraceBundle, Un as ResumeOptions, Ur as SandboxStatus, Vi as TeePublicKeyResponse, Vr as SandboxRuntimeCapabilities, W as DriverInfo, Wi as TurnDriveResult, Wn as Rollout, Wr as SandboxTerminalAttachOptions, Wt as GpuLeaseManager, Xi as WaitForRolloutOptions, Xr as SandboxTraceBundle, Xt as IntelligenceReport, Yi as WaitForOptions, Yr as SandboxTerminals, Yt as InstalledTool, Zi as WorkspaceOperationLookup, Zn as SSHCommandDescriptor, Zt as IntelligenceReportBudget, _ as BranchOptions, _i as SessionMessage, _t as FileWriteResult, b as CodeExecutionOptions, ci as SendSessionMessageRequest, cn as MintScopedTokenOptions, di as SessionEventStreamOptions, dn as NetworkManager, dt as FileSystem, ea as WriteManyOptions, en as IntelligenceReportWindow, er as SandboxConnection, fa as TerminalStream, gi as SessionListOptions, gn as PreviewLinkManager, ha as TerminalStreamHandlers, hi as SessionInterruptOptions, ii as SearchOptions, it as ExecResult, jt as ForkLookupOptions, kn as ProvisionEvent, kt as ForkCounts, l as BackendManager, li as SentSessionMessage, mi as SessionInfo, mn as PermissionsManager, nn as ListMessagesOptions, nr as SandboxCreateReceipt, or as SandboxEvent, pi as SessionForkOptions, q as DurablePlanDecisionResult, ri as SearchMatch, rr as SandboxDeleteAcknowledgement, rt as ExecOptions, s as BackendConfig, sa as BackendType, si as SendSessionMessageOptions, ti as ScopedToken, tn as JsonValue, tt as EventStreamOptions, w as CommitTaskSessionOptions, wi as SnapshotInfo, x as CodeExecutionResult, xi as SnapshotDeleteAcknowledgement, yi as SessionResultOptions, z as DispatchedSession, zi as TeeAttestationResponse, zr as SandboxResourceUsage, zt as GpuLease } from "./types-CA5phY-u.js";
 import { AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -821,14 +821,26 @@ declare class SandboxInstance {
    *
    * When `attestationNonce` is supplied, the runtime must return evidence bound
    * to that challenge or fail closed if the selected TEE backend cannot support
-   * nonce-bound report data.
+   * nonce-bound report data.   *
+   * Throws `CapabilityError` (`TEE_UNSUPPORTED`) when the deployment does not
+   * serve the TEE intercept — these paths are answered by a Tangle
+   * confidential operator ahead of the sandbox API, which registers no route
+   * for them. That refusal is recognised from the API's own unmatched-route
+   * answer, so an intermediary that rewrites 404 bodies leaves the ordinary
+   * `NotFoundError` in its place rather than the named refusal.
    */
   getTeeAttestation(options?: TeeAttestationOptions): Promise<TeeAttestationResponse>;
   /**
    * Fetch the TEE-bound public key used for sealed-secret encryption.
    *
    * The returned key includes an attestation report. Verify that report before
-   * encrypting secrets to the key.
+   * encrypting secrets to the key.   *
+   * Throws `CapabilityError` (`TEE_UNSUPPORTED`) when the deployment does not
+   * serve the TEE intercept — these paths are answered by a Tangle
+   * confidential operator ahead of the sandbox API, which registers no route
+   * for them. That refusal is recognised from the API's own unmatched-route
+   * answer, so an intermediary that rewrites 404 bodies leaves the ordinary
+   * `NotFoundError` in its place rather than the named refusal.
    */
   getTeePublicKey(): Promise<TeePublicKeyResponse>;
   /**
@@ -1382,6 +1394,7 @@ declare class SandboxInstance {
   private networkGetConfig;
   private egressGet;
   private egressUpdate;
+  private egressDenials;
   private gpuAttach;
   private gpuList;
   private gpuExec;

package/dist/{sandbox-NvbxFwTv.js → sandbox-BwIaQcE7.js}

@@ -1154,6 +1154,37 @@ var SandboxSession = class SandboxSession {
 	}
 };
 //#endregion
+//#region src/tangle/tee-intercept.ts
+/** hono's default unmatched-route body. */
+const HONO_NOT_FOUND_BODY = "404 Not Found";
+/**
+* A 404 carrying hono's own unmatched-route body came from the router.
+*
+* hono answers an unmatched route with exactly "404 Not Found", so that body
+* is the deployment saying it has no such route — which for `/tee` means the
+* operator intercept is absent, not that the sandbox is missing.
+* `ensureRunning()` has already confirmed the sandbox at this point, which is
+* what makes the distinction safe to draw.
+*/
+function isRouterNotFound(body) {
+	return body === HONO_NOT_FOUND_BODY;
+}
+/**
+* Request a TEE surface, refusing by name when the deployment cannot serve it.
+*
+* Returns the successful response for the caller to parse. Throws
+* `CapabilityError` when the intercept is absent, and otherwise the same
+* parsed error every other SDK call throws.
+*/
+async function fetchTeeSurface(client, sandboxId, surface, init) {
+	const path = `/v1/sandboxes/${encodeURIComponent(sandboxId)}/tee/${surface}`;
+	const response = await client.fetch(path, init);
+	if (response.ok) return response;
+	const body = await response.text();
+	if (response.status === 404 && isRouterNotFound(body)) throw new CapabilityError(`TEE ${surface} is not served by this deployment. The /tee paths are answered by a Tangle confidential operator that intercepts them before the sandbox API; a sandbox reached through the public API has no such route. Point the client at the operator, or create the sandbox with driver.type "tangle" on a deployment that fronts it.`, "TEE_UNSUPPORTED", 404, void 0, "tee");
+	throw parseErrorResponse(response.status, body, void 0, response.headers);
+}
+//#endregion
 //#region src/task-session.ts
 /** A background task session with isolated changeset operations. */
 var SandboxTaskSession = class extends SandboxSession {
@@ -1483,6 +1514,22 @@ var TerminalStream = class TerminalStream {
 	}
 };
 //#endregion
+//#region src/types.ts
+const GPU_LEASE_PROVIDER_NAMES = [
+	"runpod",
+	"vast-ai",
+	"lambda-labs",
+	"tensordock",
+	"paperspace",
+	"aws",
+	"gcp",
+	"azure",
+	"crusoe",
+	"fluidstack"
+];
+/** Largest `limit` the denials route accepts; it rejects anything above. */
+const MAX_EGRESS_DENIALS_LIMIT = 50;
+//#endregion
 //#region src/workspace-images.ts
 const DEFAULT_WORKSPACE_IMAGE_CLIENT_TIMEOUT_MS = 99e4;
 const WORKSPACE_IMAGE_REQUEST_ATTEMPTS = 2;
@@ -2418,20 +2465,21 @@ var SandboxInstance = class SandboxInstance {
 	*
 	* When `attestationNonce` is supplied, the runtime must return evidence bound
 	* to that challenge or fail closed if the selected TEE backend cannot support
-	* nonce-bound report data.
+	* nonce-bound report data.   *
+	* Throws `CapabilityError` (`TEE_UNSUPPORTED`) when the deployment does not
+	* serve the TEE intercept — these paths are answered by a Tangle
+	* confidential operator ahead of the sandbox API, which registers no route
+	* for them. That refusal is recognised from the API's own unmatched-route
+	* answer, so an intermediary that rewrites 404 bodies leaves the ordinary
+	* `NotFoundError` in its place rather than the named refusal.
 	*/
 	async getTeeAttestation(options) {
 		await this.ensureRunning();
 		const hasNonce = Boolean(options?.attestationNonce);
-		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/tee/attestation`, {
+		const data = await (await fetchTeeSurface(this.client, this.id, "attestation", {
 			method: hasNonce ? "POST" : "GET",
 			body: hasNonce ? JSON.stringify({ attestation_nonce: options?.attestationNonce }) : void 0
-		});
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
-		const data = await response.json();
+		})).json();
 		if (hasNonce) data.attestationNonce = options?.attestationNonce;
 		this.info = {
 			...this.info,
@@ -2447,16 +2495,17 @@ var SandboxInstance = class SandboxInstance {
 	* Fetch the TEE-bound public key used for sealed-secret encryption.
 	*
 	* The returned key includes an attestation report. Verify that report before
-	* encrypting secrets to the key.
+	* encrypting secrets to the key.   *
+	* Throws `CapabilityError` (`TEE_UNSUPPORTED`) when the deployment does not
+	* serve the TEE intercept — these paths are answered by a Tangle
+	* confidential operator ahead of the sandbox API, which registers no route
+	* for them. That refusal is recognised from the API's own unmatched-route
+	* answer, so an intermediary that rewrites 404 bodies leaves the ordinary
+	* `NotFoundError` in its place rather than the named refusal.
 	*/
 	async getTeePublicKey() {
 		await this.ensureRunning();
-		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/tee/public-key`, { method: "GET" });
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
-		const data = await response.json();
+		const data = await (await fetchTeeSurface(this.client, this.id, "public-key", { method: "GET" })).json();
 		this.info = {
 			...this.info,
 			metadata: {
@@ -4606,7 +4655,8 @@ var SandboxInstance = class SandboxInstance {
 	get egress() {
 		return {
 			get: () => this.egressGet(),
-			update: (policy) => this.egressUpdate(policy)
+			update: (policy) => this.egressUpdate(policy),
+			denials: (options) => this.egressDenials(options)
 		};
 	}
 	/**
@@ -4700,6 +4750,47 @@ var SandboxInstance = class SandboxInstance {
 			source: data.source
 		};
 	}
+	async egressDenials(options) {
+		const limit = options?.limit;
+		if (limit !== void 0) {
+			if (!Number.isInteger(limit) || limit < 1) throw new ValidationError(`egress denials limit must be a positive integer, got ${limit}`);
+			if (limit > 50) throw new ValidationError(`egress denials limit must be at most 50, got ${limit}`);
+		}
+		const query = limit === void 0 ? "" : `?limit=${encodeURIComponent(limit)}`;
+		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/egress/denials${query}`);
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		}
+		let body;
+		try {
+			body = await response.json();
+		} catch (cause) {
+			const error = new ServerError("Egress denials response was malformed: body is not valid JSON", 502);
+			error.cause = cause;
+			throw error;
+		}
+		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress denials response was malformed: body is not an object", 502);
+		const raw = body.denials;
+		if (raw === void 0 || raw === null) return [];
+		if (!Array.isArray(raw)) throw new ServerError("Egress denials response was malformed: denials is not a list", 502);
+		const denials = [];
+		for (const [index, entry] of raw.entries()) {
+			const row = entry;
+			if (typeof row !== "object" || row === null || typeof row.host !== "string" || typeof row.rejectedBy !== "string" || typeof row.count !== "number" || !Number.isInteger(row.count) || row.count < 0 || row.lastAt !== void 0 && row.lastAt !== null && typeof row.lastAt !== "string") throw new ServerError(`Egress denials response was malformed: entry ${index} is not a denial`, 502);
+			denials.push(row.lastAt === void 0 || row.lastAt === null ? {
+				host: row.host,
+				rejectedBy: row.rejectedBy,
+				count: row.count
+			} : {
+				host: row.host,
+				rejectedBy: row.rejectedBy,
+				count: row.count,
+				lastAt: row.lastAt
+			});
+		}
+		return denials;
+	}
 	async gpuAttach(options) {
 		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/gpu/leases`, {
 			method: "POST",
@@ -6759,4 +6850,4 @@ function quoteForShell(value) {
 	return `'${value.replace(/'/g, "'\\''")}'`;
 }
 //#endregion
-export { parseSSEStream as S, normalizeConnection as _, WorkspaceImages as a, otelTraceIdForTangleTrace as b, TerminalStreamError as c, InteractiveSessionHandle as d, applySandboxEventText as f, isToolBearingEvent as g, getSandboxEventText as h, normalizeStartupDiagnostics as i, SandboxTaskSession as l, collectAgentResponseText as m, createSandboxInstanceFromResponse as n, TERMINAL_WS_ECHO_SUBPROTOCOL as o, collectAgentFinalMessageText as p, normalizeSandboxCreateReceipt as r, TerminalStream as s, SandboxInstance as t, SandboxSession as u, buildTraceExportPayload as v, toOtelJson as x, exportTraceBundle as y };
+export { toOtelJson as C, otelTraceIdForTangleTrace as S, getSandboxEventText as _, WorkspaceImages as a, buildTraceExportPayload as b, TERMINAL_WS_ECHO_SUBPROTOCOL as c, SandboxTaskSession as d, SandboxSession as f, collectAgentResponseText as g, collectAgentFinalMessageText as h, normalizeStartupDiagnostics as i, TerminalStream as l, applySandboxEventText as m, createSandboxInstanceFromResponse as n, GPU_LEASE_PROVIDER_NAMES as o, InteractiveSessionHandle as p, normalizeSandboxCreateReceipt as r, MAX_EGRESS_DENIALS_LIMIT as s, SandboxInstance as t, TerminalStreamError as u, isToolBearingEvent as v, parseSSEStream as w, exportTraceBundle as x, normalizeConnection as y };

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DweQWp1c.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-BAhkXUaK.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-DfKDt5Nz.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-CGzEfYFL.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-DfKDt5Nz.js → tangle-CGzEfYFL.js}

@@ -1,5 +1,5 @@
 import { m as parseErrorResponse } from "./errors-C6kn-3zt.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-NvbxFwTv.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-BwIaQcE7.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-jfr4fgD3.d.ts → types-CA5phY-u.d.ts}

@@ -4693,24 +4693,30 @@ interface DriverInfo {
   available: boolean;
   /** Driver version string */
   version: string;
-  /** Driver capabilities */
+  /**
+   * Driver capabilities.
+   *
+   * Every field is required because `GET /v1/sandboxes/{id}/driver` declares
+   * them required on a strict schema, so the API always sends all of them.
+   */
   capabilities: {
     /** Checkpoint/restore support */criu: boolean; /** GPU support */
-    gpu: boolean; /** Filesystem snapshots */
+    gpu: boolean; /** vsock guest-host socket support. True only for the firecracker driver. */
+    vsock: boolean; /** Filesystem snapshots */
     snapshots: boolean; /** Multi-user management */
     userManagement: boolean; /** Network isolation */
     networkIsolation: boolean;
   };
+  /**
+   * Hosts in the fleet backing this driver. Only the host-agent driver has a
+   * registry to count; the other drivers are single-host and omit it.
+   */
+  hosts?: number;
   /** Current capacity */
   capacity?: {
     available: number;
     total: number;
   };
-  acceleratorCapacity?: {
-    available: number;
-    total: number;
-    kinds: AcceleratorKind[];
-  };
 }
 /**
  * MCP (Model Context Protocol) server configuration.
@@ -5016,6 +5022,21 @@ interface EgressPolicy {
    */
   includeImplicitDomains?: boolean;
 }
+/**
+ * A destination the egress policy refused, with how often it was tried.
+ */
+interface EgressDenial {
+  /** Destination host the sandbox tried to reach. */
+  host: string;
+  /** Which rule refused it — the policy layer that produced the denial. */
+  rejectedBy: string;
+  /** How many times this host was refused. */
+  count: number;
+  /** ISO-8601 time of the most recent refusal, when the proxy recorded one. */
+  lastAt?: string;
+}
+/** Largest `limit` the denials route accepts; it rejects anything above. */
+declare const MAX_EGRESS_DENIALS_LIMIT = 50;
 /**
  * Egress policy manager for runtime egress configuration.
  * Access via `sandbox.egress`.
@@ -5031,6 +5052,13 @@ interface EgressPolicy {
  * // strict reaches these plus the sandbox's own model endpoint, nothing else.
  * await box.egress.update({ mode: "strict", allowDomains: ["api.github.com"] });
  * ```
+ *
+ * @example Find out why a request was refused
+ * ```typescript
+ * for (const denial of await box.egress.denials()) {
+ *   console.log(`${denial.host} refused by ${denial.rejectedBy}`);
+ * }
+ * ```
  */
 interface EgressManager {
   /**
@@ -5054,6 +5082,24 @@ interface EgressManager {
     policy: EgressPolicy;
     source: "sandbox" | "team" | "platform";
   }>;
+  /**
+   * Destinations this sandbox tried to reach that its egress policy refused,
+   * newest first.
+   *
+   * The proxy answers a blocked request with a bodyless 403, so code inside
+   * the sandbox cannot tell an allowlist refusal from a broken network. This
+   * is where that reason surfaces.
+   *
+   * Best-effort by design: an empty list means either that nothing was
+   * refused or that the proxy is no longer readable, and the two are not
+   * distinguishable from here.
+   *
+   * @param options.limit - Most denials to return, 1 to
+   *   {@link MAX_EGRESS_DENIALS_LIMIT}. Omit to let the server choose.
+   */
+  denials(options?: {
+    limit?: number;
+  }): Promise<EgressDenial[]>;
 }
 /**
  * Port exposure and runtime network state for a sandbox.
@@ -6421,4 +6467,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EnsureDevServerOptions as $, BatchBackendStats as $i, SandboxCreateOutcome as $n, ScopedToken as $r, IntelligenceReportWindow as $t, CreateSandboxFleetTokenOptions as A, TaskSessionChanges as Ai, ProvisionStep as An, SandboxFleetWorkspaceRestoreResult as Ar, ForkLookupOptions as At, DownloadOptions as B, TokenRefreshHandler as Bi, RestoreSnapshotOptions as Bn, SandboxRuntimeHealth as Br, GpuLeaseCommandResult as Bt, CodeResultPart as C, SnapshotOptions as Ci, ProcessStatus as Cn, SandboxFleetTraceBundle as Cr, FleetExecDispatchOptions as Ct, CreateIntelligenceReportOptions as D, StartupOperation as Di, ProvisionEvent as Dn, SandboxFleetUsage as Dr, FleetPromptDispatchResult as Dt, CreateGpuLeaseOptions as E, StartupDiagnostics as Ei, PromptResult as En, SandboxFleetTraceOptions as Er, FleetPromptDispatchOptions as Et, DeleteOptions as F, TeeAttestationOptions as Fi, ReapExpiredSandboxFleetsOptions as Fn, SandboxPortBinding as Fr, GitConfig as Ft, DriverType as G, UploadProgress as Gi, RolloutScorer as Gn, SandboxTerminalManager as Gr, GpuLeaseStatus as Gt, DriveTurnOptions as H, TurnDriveResult as Hi, Rollout as Hn, SandboxTerminalAttachOptions as Hr, GpuLeaseExecResult as Ht, DevServerInfo as I, TeeAttestationReport as Ii, ReapExpiredSandboxFleetsResult as In, SandboxPortPreviewLink as Ir, GitDiff as It, EffectiveBackend as J, WaitForRolloutOptions as Ji, RolloutTurnPart as Jn, SandboxTraceBundle as Jr, InstalledTool as Jt, DurablePlan as K, UsageInfo as Ki, RolloutStartResult as Kn, SandboxTerminalRequestOptions as Kr, HostAgentDriverConfig as Kt, DirectoryPermission as L, TeeAttestationResponse as Li, ReconcileSandboxFleetsOptions as Ln, SandboxResourceUsage as Lr, GitStatus as Lt, CreateSandboxOptions as M, TaskSessionFileChange as Mi, PublicTemplateVersionInfo as Mn, SandboxIdentity as Mr, GitAuth as Mt, CreateSessionOptions as N, TaskSessionInfo as Ni, PublishPublicTemplateOptions as Nn, SandboxInfo as Nr, GitBranch as Nt, CreateRequestOptions as O, StorageConfig as Oi, ProvisionResult as On, SandboxFleetWorkspace as Or, ForkCounts as Ot, CreateTaskSessionOptions as P, TaskSessionProfile as Pi, PublishPublicTemplateVersionOptions as Pn, SandboxIntelligenceEnvelope as Pr, GitCommit as Pt, EgressPolicy as Q, WriteManyOptions as Qi, SandboxConnection as Qn, SandboxUser as Qr, IntelligenceReportSubjectType as Qt, DispatchPromptOptions as R, TeePublicKey as Ri, ReconcileSandboxFleetsResult as Rn, SandboxResources as Rr, GpuLease as Rt, CodeLanguage as S, SnapshotInfo as Si, ProcessSpawnOptions as Sn, SandboxFleetToken as Sr, FleetDriveTurnRequest as St, CompletedTurnResult as T, SshKeysManager as Ti, PromptOptions as Tn, SandboxFleetTraceExport as Tr, FleetMachineId as Tt, DriverConfig as U, UpdateUserOptions as Ui, RolloutChildResult as Un, SandboxTerminalCreateOptions as Ur, GpuLeaseManager as Ut, DownloadProgress as V, TokenUsage as Vi, ResumeOptions as Vn, SandboxStatus as Vr, GpuLeaseExecOptions as Vt, DriverInfo as W, UploadOptions as Wi, RolloutOptions as Wn, SandboxTerminalInfo as Wr, GpuLeaseProviderName as Wt, EffectiveBackendSource as X, WriteFileOptions as Xi, SSHCredentials as Xn, SandboxTraceExport as Xr, IntelligenceReportBudget as Xt, EffectiveBackendProfile as Y, WorkspaceOperationLookup as Yi, SSHCommandDescriptor as Yn, SandboxTraceEvent as Yr, IntelligenceReport as Yt, EgressManager as Z, WriteManyFile as Zi, SandboxConfig as Zn, SandboxTraceOptions as Zr, IntelligenceReportCompareTo as Zt, BranchOptions as _, SessionResultOptions as _i, ProcessInfo as _n, SandboxFleetMachineSpec as _r, FleetDispatchCancelResult as _t, AttachSandboxFleetMachineOptions as a, BackendType as aa, SendSessionMessageOptions as ai, McpServerConfig as an, SandboxFleetArtifact as ar, FileReadBatchOptions as at, CodeExecutionOptions as b, SnapshotDeleteOutcome as bi, ProcessManager as bn, SandboxFleetOperationsSummary as br, FleetDispatchStreamOptions as bt, BackendInfo as c, TerminalExitInfo as ca, SessionBackendCredentials as ci, NetworkConfig as cn, SandboxFleetDispatchFailureClass as cr, FileReadResult as ct, BatchBackend as d, TerminalStreamAuthFormat as da, SessionForkOptions as di, PermissionLevel as dn, SandboxFleetDriverTimings as dr, FileTreeFile as dt, BatchEvent as ea, ScopedTokenScope as ei, JsonValue as en, SandboxCreateReceipt as er, EventStreamOptions as et, BatchResult as f, TerminalStreamError as fa, SessionInfo as fi, PermissionsManager as fn, SandboxFleetInfo as fr, FileTreeOptions as ft, BatchTaskResult as g, SessionMessageInputPart as gi, Process as gn, SandboxFleetMachineRecord as gr, FileWriteResult as gt, BatchTask as h, TerminalStreamToken as ha, SessionMessage as hi, PreviewLinkWaitOptions as hn, SandboxFleetMachineMeteredUsage as hr, FileUsageResult as ht, AttachGpuLeaseOptions as i, PublicBatchRunRequest as ia, SecretsManager as ii, ListSandboxOptions as in, SandboxEvent as ir, FileInfo as it, CreateSandboxFleetWithCoordinatorOptions as j, TaskSessionCommitResult as ji, PublicTemplateInfo as jn, SandboxFleetWorkspaceSnapshotResult as jr, GPU_LEASE_PROVIDER_NAMES as jt, CreateSandboxFleetOptions as k, SubscriptionInfo as ki, ProvisionStatus as kn, SandboxFleetWorkspaceReconcileResult as kr, ForkIdempotency as kt, BackendManager as l, TerminalReadyInfo as la, SessionEventStreamOptions as li, NetworkManager as ln, SandboxFleetDispatchResponse as lr, FileRenameResult as lt, BatchRunRequest as m, TerminalStreamOptions as ma, SessionListOptions as mi, PreviewLinkManager as mn, SandboxFleetMachine as mr, FileUsageOptions as mt, AccessPolicyRule as n, BatchSidecarGroup as na, SearchOptions as ni, ListOptions as nn, SandboxDeleteOutcome as nr, ExecOptions as nt, BackendCapabilities as o, parseBackendType as oa, SendSessionMessageRequest as oi, MintScopedTokenOptions as on, SandboxFleetArtifactSpec as or, FileReadBatchResult as ot, BatchRunOptions as p, TerminalStreamHandlers as pa, SessionInterruptOptions as pi, PreviewLinkInfo as pn, SandboxFleetIntelligenceEnvelope as pr, FileTreeResult as pt, DurablePlanDecisionResult as q, WaitForOptions as qi, RolloutStatus as qn, SandboxTerminals as qr, HostAgentRuntimeBackend as qt, AddUserOptions as r, BatchTaskUsage as ra, SecretInfo as ri, ListSandboxFleetOptions as rn, SandboxEnvironment as rr, ExecResult as rt, BackendConfig as s, TERMINAL_WS_ECHO_SUBPROTOCOL as sa, SentSessionMessage as si, MkdirOptions as sn, SandboxFleetCostEstimate as sr, FileReadError as st, AcceleratorKind as t, BatchEventDataMap as ta, SearchMatch as ti, ListMessagesOptions as tn, SandboxDeleteAcknowledgement as tr, ExactProcessSpawnOptions as tt, BackendStatus as u, TerminalStream as ua, SessionFailureReason as ui, NonHostAgentDriverConfig as un, SandboxFleetDriverCapability as ur, FileSystem as ut, ChunkedUploadOptions as v, SessionStatus as vi, ProcessListOptions as vn, SandboxFleetManifest as vr, FleetDispatchResultBuffer as vt, CommitTaskSessionOptions as w, SnapshotResult as wi, PromptInputPart as wn, SandboxFleetTraceEvent as wr, FleetExecDispatchResult as wt, CodeExecutionResult as x, SnapshotIdempotency as xi, ProcessSignal as xn, SandboxFleetPolicy as xr, FleetDriveTurnOutcome as xt, ChunkedUploadResult as y, SnapshotDeleteAcknowledgement as yi, ProcessLogEntry as yn, SandboxFleetManifestMachine as yr, FleetDispatchResultBufferOptions as yt, DispatchedSession as z, TeePublicKeyResponse as zi, RenameOptions as zn, SandboxRuntimeCapabilities as zr, GpuLeaseBilling as zt };
+export { EgressPolicy as $, WriteManyFile as $i, SandboxConfig as $n, SandboxTraceOptions as $r, IntelligenceReportSubjectType as $t, CreateSandboxFleetTokenOptions as A, StorageConfig as Ai, ProvisionResult as An, SandboxFleetWorkspace as Ar, ForkIdempotency as At, DownloadOptions as B, TeePublicKey as Bi, ReconcileSandboxFleetsResult as Bn, SandboxResources as Br, GpuLeaseBilling as Bt, CodeResultPart as C, SnapshotIdempotency as Ci, ProcessSignal as Cn, SandboxFleetPolicy as Cr, FleetDriveTurnRequest as Ct, CreateIntelligenceReportOptions as D, SshKeysManager as Di, PromptOptions as Dn, SandboxFleetTraceExport as Dr, FleetPromptDispatchOptions as Dt, CreateGpuLeaseOptions as E, SnapshotResult as Ei, PromptInputPart as En, SandboxFleetTraceEvent as Er, FleetMachineId as Et, DeleteOptions as F, TaskSessionInfo as Fi, PublishPublicTemplateOptions as Fn, SandboxInfo as Fr, GitCommit as Ft, DriverType as G, UpdateUserOptions as Gi, RolloutChildResult as Gn, SandboxTerminalCreateOptions as Gr, GpuLeaseProviderName as Gt, DriveTurnOptions as H, TokenRefreshHandler as Hi, RestoreSnapshotOptions as Hn, SandboxRuntimeHealth as Hr, GpuLeaseExecOptions as Ht, DevServerInfo as I, TaskSessionProfile as Ii, PublishPublicTemplateVersionOptions as In, SandboxIntelligenceEnvelope as Ir, GitConfig as It, EffectiveBackend as J, UsageInfo as Ji, RolloutStartResult as Jn, SandboxTerminalRequestOptions as Jr, HostAgentRuntimeBackend as Jt, DurablePlan as K, UploadOptions as Ki, RolloutOptions as Kn, SandboxTerminalInfo as Kr, GpuLeaseStatus as Kt, DirectoryPermission as L, TeeAttestationOptions as Li, ReapExpiredSandboxFleetsOptions as Ln, SandboxPortBinding as Lr, GitDiff as Lt, CreateSandboxOptions as M, TaskSessionChanges as Mi, ProvisionStep as Mn, SandboxFleetWorkspaceRestoreResult as Mr, GPU_LEASE_PROVIDER_NAMES as Mt, CreateSessionOptions as N, TaskSessionCommitResult as Ni, PublicTemplateInfo as Nn, SandboxFleetWorkspaceSnapshotResult as Nr, GitAuth as Nt, CreateRequestOptions as O, StartupDiagnostics as Oi, PromptResult as On, SandboxFleetTraceOptions as Or, FleetPromptDispatchResult as Ot, CreateTaskSessionOptions as P, TaskSessionFileChange as Pi, PublicTemplateVersionInfo as Pn, SandboxIdentity as Pr, GitBranch as Pt, EgressManager as Q, WriteFileOptions as Qi, SSHCredentials as Qn, SandboxTraceExport as Qr, IntelligenceReportCompareTo as Qt, DispatchPromptOptions as R, TeeAttestationReport as Ri, ReapExpiredSandboxFleetsResult as Rn, SandboxPortPreviewLink as Rr, GitStatus as Rt, CodeLanguage as S, SnapshotDeleteOutcome as Si, ProcessManager as Sn, SandboxFleetOperationsSummary as Sr, FleetDriveTurnOutcome as St, CompletedTurnResult as T, SnapshotOptions as Ti, ProcessStatus as Tn, SandboxFleetTraceBundle as Tr, FleetExecDispatchResult as Tt, DriverConfig as U, TokenUsage as Ui, ResumeOptions as Un, SandboxStatus as Ur, GpuLeaseExecResult as Ut, DownloadProgress as V, TeePublicKeyResponse as Vi, RenameOptions as Vn, SandboxRuntimeCapabilities as Vr, GpuLeaseCommandResult as Vt, DriverInfo as W, TurnDriveResult as Wi, Rollout as Wn, SandboxTerminalAttachOptions as Wr, GpuLeaseManager as Wt, EffectiveBackendSource as X, WaitForRolloutOptions as Xi, RolloutTurnPart as Xn, SandboxTraceBundle as Xr, IntelligenceReport as Xt, EffectiveBackendProfile as Y, WaitForOptions as Yi, RolloutStatus as Yn, SandboxTerminals as Yr, InstalledTool as Yt, EgressDenial as Z, WorkspaceOperationLookup as Zi, SSHCommandDescriptor as Zn, SandboxTraceEvent as Zr, IntelligenceReportBudget as Zt, BranchOptions as _, TerminalStreamToken as _a, SessionMessage as _i, PreviewLinkWaitOptions as _n, SandboxFleetMachineMeteredUsage as _r, FileWriteResult as _t, AttachSandboxFleetMachineOptions as a, BatchTaskUsage as aa, SecretInfo as ai, ListSandboxOptions as an, SandboxEnvironment as ar, FileInfo as at, CodeExecutionOptions as b, SessionStatus as bi, ProcessListOptions as bn, SandboxFleetManifest as br, FleetDispatchResultBufferOptions as bt, BackendInfo as c, parseBackendType as ca, SendSessionMessageRequest as ci, MintScopedTokenOptions as cn, SandboxFleetArtifactSpec as cr, FileReadError as ct, BatchBackend as d, TerminalReadyInfo as da, SessionEventStreamOptions as di, NetworkManager as dn, SandboxFleetDispatchResponse as dr, FileSystem as dt, WriteManyOptions as ea, SandboxUser as ei, IntelligenceReportWindow as en, SandboxConnection as er, EnsureDevServerOptions as et, BatchResult as f, TerminalStream as fa, SessionFailureReason as fi, NonHostAgentDriverConfig as fn, SandboxFleetDriverCapability as fr, FileTreeFile as ft, BatchTaskResult as g, TerminalStreamOptions as ga, SessionListOptions as gi, PreviewLinkManager as gn, SandboxFleetMachine as gr, FileUsageResult as gt, BatchTask as h, TerminalStreamHandlers as ha, SessionInterruptOptions as hi, PreviewLinkInfo as hn, SandboxFleetIntelligenceEnvelope as hr, FileUsageOptions as ht, AttachGpuLeaseOptions as i, BatchSidecarGroup as ia, SearchOptions as ii, ListSandboxFleetOptions as in, SandboxDeleteOutcome as ir, ExecResult as it, CreateSandboxFleetWithCoordinatorOptions as j, SubscriptionInfo as ji, ProvisionStatus as jn, SandboxFleetWorkspaceReconcileResult as jr, ForkLookupOptions as jt, CreateSandboxFleetOptions as k, StartupOperation as ki, ProvisionEvent as kn, SandboxFleetUsage as kr, ForkCounts as kt, BackendManager as l, TERMINAL_WS_ECHO_SUBPROTOCOL as la, SentSessionMessage as li, MkdirOptions as ln, SandboxFleetCostEstimate as lr, FileReadResult as lt, BatchRunRequest as m, TerminalStreamError as ma, SessionInfo as mi, PermissionsManager as mn, SandboxFleetInfo as mr, FileTreeResult as mt, AccessPolicyRule as n, BatchEvent as na, ScopedTokenScope as ni, ListMessagesOptions as nn, SandboxCreateReceipt as nr, ExactProcessSpawnOptions as nt, BackendCapabilities as o, PublicBatchRunRequest as oa, SecretsManager as oi, MAX_EGRESS_DENIALS_LIMIT as on, SandboxEvent as or, FileReadBatchOptions as ot, BatchRunOptions as p, TerminalStreamAuthFormat as pa, SessionForkOptions as pi, PermissionLevel as pn, SandboxFleetDriverTimings as pr, FileTreeOptions as pt, DurablePlanDecisionResult as q, UploadProgress as qi, RolloutScorer as qn, SandboxTerminalManager as qr, HostAgentDriverConfig as qt, AddUserOptions as r, BatchEventDataMap as ra, SearchMatch as ri, ListOptions as rn, SandboxDeleteAcknowledgement as rr, ExecOptions as rt, BackendConfig as s, BackendType as sa, SendSessionMessageOptions as si, McpServerConfig as sn, SandboxFleetArtifact as sr, FileReadBatchResult as st, AcceleratorKind as t, BatchBackendStats as ta, ScopedToken as ti, JsonValue as tn, SandboxCreateOutcome as tr, EventStreamOptions as tt, BackendStatus as u, TerminalExitInfo as ua, SessionBackendCredentials as ui, NetworkConfig as un, SandboxFleetDispatchFailureClass as ur, FileRenameResult as ut, ChunkedUploadOptions as v, SessionMessageInputPart as vi, Process as vn, SandboxFleetMachineRecord as vr, FleetDispatchCancelResult as vt, CommitTaskSessionOptions as w, SnapshotInfo as wi, ProcessSpawnOptions as wn, SandboxFleetToken as wr, FleetExecDispatchOptions as wt, CodeExecutionResult as x, SnapshotDeleteAcknowledgement as xi, ProcessLogEntry as xn, SandboxFleetManifestMachine as xr, FleetDispatchStreamOptions as xt, ChunkedUploadResult as y, SessionResultOptions as yi, ProcessInfo as yn, SandboxFleetMachineSpec as yr, FleetDispatchResultBuffer as yt, DispatchedSession as z, TeeAttestationResponse as zi, ReconcileSandboxFleetsOptions as zn, SandboxResourceUsage as zr, GpuLease as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.28.0",
+  "version": "0.29.0-develop.20260819083239.92e9b26",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [