@tangle-network/sandbox 0.33.1 → 0.34.0

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-C85FdpsD.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-DeKTFfoQ.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-C85FdpsD.js → tangle-DeKTFfoQ.js}

@@ -1,5 +1,5 @@
 import { m as parseErrorResponse } from "./errors-C6kn-3zt.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-sU-uwrYh.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-Dg4nXKd9.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{terminal-stream-4KNJ6SmL.d.ts → terminal-stream-5GNLCsms.d.ts}

@@ -10,9 +10,21 @@ declare const terminalReadyMessageSchema: z.ZodObject<{
   sessionId: z.ZodString;
   restored: z.ZodBoolean;
   detachTimeoutMs: z.ZodNumber;
+  attachCount: z.ZodOptional<z.ZodNumber>;
+  cursors: z.ZodOptional<z.ZodObject<{
+    earliest: z.ZodNumber;
+    latest: z.ZodNumber;
+  }, z.core.$strip>>;
 }, z.core.$strip>;
 type TerminalReadyMessage = z.infer<typeof terminalReadyMessageSchema>;
 type TerminalReadyInfo = Omit<TerminalReadyMessage, "type">;
+/** One sequenced output frame for an exact interactive terminal. */
+declare const terminalOutputMessageSchema: z.ZodObject<{
+  type: z.ZodLiteral<"output">;
+  seq: z.ZodNumber;
+  data: z.ZodString;
+}, z.core.$strip>;
+type TerminalOutputMessage = z.infer<typeof terminalOutputMessageSchema>;
 declare const terminalExitMessageSchema: z.ZodObject<{
   type: z.ZodLiteral<"exit">;
   exitCode: z.ZodOptional<z.ZodNumber>;
@@ -97,6 +109,8 @@ declare class TerminalStreamError extends Error {
 interface TerminalStreamHandlers {
   /** Raw PTY output bytes (both live output and reattach history replay). */
   onData?: (data: Uint8Array) => void;
+  /** Server-sequenced output for exact interactive terminal sessions. */
+  onOutput?: (seq: number, data: Uint8Array) => void;
   onReady?: (info: TerminalReadyInfo) => void;
   onExit?: (info: TerminalExitInfo) => void;
   /** Protocol `error` frames and post-connect transport failures. */
@@ -253,4 +267,4 @@ declare class TerminalStream {
   private assertOpen;
 }
 //#endregion
-export { TerminalStreamReconnectAuthority as a, MintScopedTokenOptions as c, TERMINAL_WS_ECHO_SUBPROTOCOL as d, TerminalExitInfo as f, TerminalStreamAuthFormat as h, TerminalStreamOptions as i, ScopedToken as l, TerminalReadyInfo as m, TerminalStreamError as n, TerminalStreamToken as o, TerminalInteractiveSessionIdentity as p, TerminalStreamHandlers as r, MintInteractiveSessionTokenOptions as s, TerminalStream as t, ScopedTokenScope as u };
+export { TerminalStreamReconnectAuthority as a, MintScopedTokenOptions as c, TERMINAL_WS_ECHO_SUBPROTOCOL as d, TerminalExitInfo as f, TerminalStreamAuthFormat as g, TerminalReadyInfo as h, TerminalStreamOptions as i, ScopedToken as l, TerminalOutputMessage as m, TerminalStreamError as n, TerminalStreamToken as o, TerminalInteractiveSessionIdentity as p, TerminalStreamHandlers as r, MintInteractiveSessionTokenOptions as s, TerminalStream as t, ScopedTokenScope as u };

package/dist/{types-CSVMTw4A.d.ts → types-ltmlQ9Y1.d.ts}

@@ -1,4 +1,4 @@
-import { r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-4KNJ6SmL.js";
+import { r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-5GNLCsms.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentExactRunControlRef, AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileValidationResult, HarnessType, ReasoningEffort } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -1630,11 +1630,18 @@ interface CreateSandboxOptions {
   /** Pin sandbox creation to a specific published public-template version. */
   publicTemplateVersionId?: string;
   /**
-   * Names of secrets to inject as environment variables.
+   * Names of secrets to inject as environment variables, or `"all"` for every
+   * secret the account stores.
    *
    * Secrets must be created via `client.secrets.create()` before use.
    * They are injected as environment variables with the same name.
    *
+   * Anything running in the sandbox reads an injected secret in plaintext, so
+   * name the secrets the box needs. A create that omits this field selects no
+   * stored secret, and the box still receives the secrets an auto-applied
+   * startup script names plus a stored Hub credential.
+   * `createReceipt.injectedSecrets` reports every name the create decrypted.
+   *
    * @example
    * ```typescript
    * // First, create the secrets
@@ -1650,7 +1657,7 @@ interface CreateSandboxOptions {
    * const result = await box.exec("echo $HF_TOKEN");
    * ```
    */
-  secrets?: string[];
+  secrets?: string[] | "all";
   /** Custom metadata to store with the sandbox */
   metadata?: Record<string, unknown>;
   /**
@@ -1926,6 +1933,15 @@ type SandboxCreateOutcome = "created" | "idempotent_replay" | "unknown";
 interface SandboxCreateReceipt {
   outcome: SandboxCreateOutcome;
   idempotencyKeyApplied: boolean;
+  /**
+   * Names of the stored secrets this call decrypted into the sandbox.
+   * Read it to size what the box can read. The set is sorted and
+   * de-duplicated, and it also counts the names a startup script or a Hub
+   * credential pulled in, so it is a superset of the `secrets` the create
+   * asked for rather than the same list. Absent on an idempotent replay, and
+   * on a platform old enough not to report the set.
+   */
+  injectedSecrets?: string[];
 }
 /**
  * Full sandbox information returned from the API.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.33.1",
+  "version": "0.34.0",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -96,7 +96,7 @@
   },
   "dependencies": {
     "@tangle-network/agent-core": "0.9.5",
-    "@tangle-network/agent-interface": "^1.3.0",
+    "@tangle-network/agent-interface": "^1.6.0",
     "zod": "4.4.3"
   },
   "peerDependencies": {
@@ -135,9 +135,9 @@
     "vitest": "^4.1.5",
     "ws": "^8.20.0",
     "yjs": "13.6.30",
-    "@tangle-network/runtime-contracts": "0.6.2",
-    "@tangle-network/cli-agent-registry": "0.3.11",
     "@repo/shared": "0.0.0",
+    "@tangle-network/cli-agent-registry": "0.3.11",
+    "@tangle-network/runtime-contracts": "0.6.2",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {