@tangle-network/sandbox 0.34.4 → 0.36.1

package/dist/index.js

@@ -1,10 +1,10 @@
-import { _ as backendTypeSchema, g as deriveAgentRunOutcome, h as deriveAgentResultOutcome, m as createAgentRunOutcomeTracker, p as normalizeRuntimeBackendConfig, u as parseSSEStream, v as parseBackendType } from "./runtime-api-paApH4-W.js";
+import { _ as backendTypeSchema, g as deriveAgentRunOutcome, h as deriveAgentResultOutcome, m as createAgentRunOutcomeTracker, p as normalizeRuntimeBackendConfig, u as parseSSEStream, v as parseBackendType } from "./runtime-api-ClXF8k_q.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, r as EgressProxyRecoveryError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-C6kn-3zt.js";
-import { _ as parseBackendRegistryResponseBody, a as splitInlineProfileSkills, c as SandboxFleetClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as splitInlineProfileFileMounts, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryInteractionKindSchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-CPsnVEj0.js";
+import { _ as parseBackendRegistryResponse, a as splitInlineProfileSkills, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as splitInlineProfileFileMounts, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryEntrySchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-CX3LB-64.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, c as createInteractiveControlHolderId, l as interactiveSessionIdentityDigest, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, t as BrowserInteractiveSessionControlController } from "./browser-interactive-control-controller-Dv0gbFMu.js";
-import { A as toOtelJson, C as collectAgentResponseText, D as buildTraceExportPayload, O as exportTraceBundle, S as collectAgentFinalMessageText, T as isToolBearingEvent, _ as TerminalStream, a as WorkspaceImages, c as SandboxTaskSession, d as agentInteractiveSessionPromptRequestDigest, f as InteractiveTerminalFrameLog, g as InteractiveSessionController, h as BrowserInteractiveSessionController, k as otelTraceIdForTangleTrace, l as SandboxSession, m as createInteractiveTerminalSession, o as GPU_LEASE_PROVIDER_NAMES, p as createInteractiveTerminalCapture, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as InteractiveSessionHandle, v as TerminalStreamError, w as getSandboxEventText, x as applySandboxEventText, y as TERMINAL_WS_ECHO_SUBPROTOCOL } from "./sandbox-B70BzvzR.js";
+import { A as toOtelJson, C as collectAgentResponseText, D as buildTraceExportPayload, O as exportTraceBundle, S as collectAgentFinalMessageText, T as isToolBearingEvent, _ as TerminalStream, a as WorkspaceImages, c as SandboxTaskSession, d as agentInteractiveSessionPromptRequestDigest, f as InteractiveTerminalFrameLog, g as InteractiveSessionController, h as BrowserInteractiveSessionController, k as otelTraceIdForTangleTrace, l as SandboxSession, m as createInteractiveTerminalSession, o as GPU_LEASE_PROVIDER_NAMES, p as createInteractiveTerminalCapture, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as InteractiveSessionHandle, v as TerminalStreamError, w as getSandboxEventText, x as applySandboxEventText, y as TERMINAL_WS_ECHO_SUBPROTOCOL } from "./sandbox-CzKxUiYj.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DQD9kCdN.js";
-import { t as TangleSandboxClient } from "./tangle-Cj1fDoJ7.js";
+import { t as TangleSandboxClient } from "./tangle-BhLq6l2G.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts
@@ -681,6 +681,7 @@ const createFragmentSchema = z.strictObject({
 		depth: z.number().int().positive().optional(),
 		sparse: z.array(nonEmptyStringSchema).optional()
 	}).optional(),
+	cwd: runtimeWorkspaceCwdSchema.optional(),
 	resources: resourcesSchema.optional(),
 	env: envSchema.optional(),
 	maxLifetimeSeconds: z.number().int().positive().optional(),

package/dist/{runtime-api-paApH4-W.js → runtime-api-ClXF8k_q.js}

@@ -1022,6 +1022,29 @@ function appendSessionIdQuery(params, sessionId) {
 }
 //#endregion
 //#region src/runtime-api.ts
+function isModelCredentialSuperseded(error) {
+	return error instanceof SandboxError && error.status === 503 && error.code === "MODEL_CREDENTIAL_SUPERSEDED";
+}
+function waitForRetryAfter(delayMs, signal) {
+	if (delayMs <= 0) return Promise.resolve();
+	return new Promise((resolve, reject) => {
+		let timer;
+		const onAbort = () => {
+			if (timer) clearTimeout(timer);
+			signal?.removeEventListener("abort", onAbort);
+			reject(signal?.reason ?? new DOMException("The operation was aborted", "AbortError"));
+		};
+		if (signal?.aborted) {
+			onAbort();
+			return;
+		}
+		timer = setTimeout(() => {
+			signal?.removeEventListener("abort", onAbort);
+			resolve();
+		}, delayMs);
+		signal?.addEventListener("abort", onAbort, { once: true });
+	});
+}
 /** Internal typed client for routes served by a sandbox runtime. */
 var SandboxRuntimeApi = class {
 	terminals;
@@ -1087,6 +1110,27 @@ var SandboxRuntimeApi = class {
 		}
 		if (options.executionId !== void 0 && !sawTerminal) throw new NetworkError("event stream ended before a terminal event — the connection dropped mid-turn");
 	}
+	/**
+	* List the durable execution records for one session.
+	*
+	* The sidecar owns this ledger and returns records newest first. Validate
+	* the response here so malformed payloads cannot become false run evidence.
+	*/
+	async runs(sessionId) {
+		await this.transport.ensureRunning();
+		const endpoint = `/agents/sessions/${encodeURIComponent(sessionId)}/runs`;
+		const payload = await this.json(endpoint, { method: "GET" });
+		if (payload.success !== true || !Array.isArray(payload.executions)) throw new ServerError("Session runs response has an invalid shape", 502, {
+			origin: "runtime",
+			endpoint
+		});
+		const executions = payload.executions.map((value) => normalizeSessionExecutionInfo(value, sessionId));
+		if (executions.some((execution) => execution === null)) throw new ServerError("Session runs response has an invalid execution", 502, {
+			origin: "runtime",
+			endpoint
+		});
+		return executions.filter((execution) => execution !== null);
+	}
 	async readFiles(paths, options = {}) {
 		const params = new URLSearchParams();
 		appendSessionIdQuery(params, options.sessionId);
@@ -1278,7 +1322,8 @@ var SandboxRuntimeApi = class {
 		if (options.credentials?.baseUrl) headers.set("X-Backend-Base-Url", options.credentials.baseUrl);
 		const timeoutSignal = options.timeoutMs !== void 0 ? AbortSignal.timeout(options.timeoutMs) : void 0;
 		const signal = options.signal && timeoutSignal ? combineAbortSignals([options.signal, timeoutSignal]) : options.signal ?? timeoutSignal;
-		return this.json(`/agents/sessions/${encodeURIComponent(id)}/messages`, {
+		const path = `/agents/sessions/${encodeURIComponent(id)}/messages`;
+		const init = {
 			method: "POST",
 			headers,
 			signal,
@@ -1298,7 +1343,14 @@ var SandboxRuntimeApi = class {
 				...request.turnId !== void 0 ? { turnId: request.turnId } : {},
 				...request.interactions !== void 0 ? { interactions: request.interactions } : {}
 			})
-		});
+		};
+		try {
+			return await this.json(path, init);
+		} catch (error) {
+			if (!isModelCredentialSuperseded(error)) throw error;
+			await waitForRetryAfter(error.retryAfterMs ?? 1e3, signal);
+			return this.json(path, init);
+		}
 	}
 	async deleteSession(id) {
 		await this.transport.ensureRunning();
@@ -1410,6 +1462,30 @@ function normalizeSessionFailureReason(value) {
 		...executionId ? { executionId } : {}
 	};
 }
+function normalizeSessionExecutionInfo(value, expectedSessionId) {
+	if (!value || typeof value !== "object") return null;
+	const raw = value;
+	const executionId = raw.executionId;
+	const sessionId = raw.sessionId;
+	const status = raw.status;
+	const startedAt = raw.startedAt;
+	const completedAt = raw.completedAt;
+	const eventCount = raw.eventCount;
+	const lastEventId = raw.lastEventId;
+	const normalizedStartedAt = typeof startedAt === "number" && Number.isFinite(startedAt) ? startedAt : void 0;
+	const normalizedCompletedAt = typeof completedAt === "number" && Number.isFinite(completedAt) ? completedAt : void 0;
+	const validCompletion = status === "active" ? completedAt === void 0 : normalizedCompletedAt !== void 0 && normalizedStartedAt !== void 0 && normalizedCompletedAt >= normalizedStartedAt;
+	if (typeof executionId !== "string" || executionId.length === 0 || typeof sessionId !== "string" || sessionId.length === 0 || sessionId !== expectedSessionId || status !== "active" && status !== "completed" && status !== "failed" && status !== "cancelled" || normalizedStartedAt === void 0 || !validCompletion || typeof eventCount !== "number" || !Number.isInteger(eventCount) || eventCount < 0 || typeof lastEventId !== "string" || lastEventId.length === 0) return null;
+	return {
+		executionId,
+		sessionId,
+		status,
+		startedAt: normalizedStartedAt,
+		...normalizedCompletedAt !== void 0 ? { completedAt: normalizedCompletedAt } : {},
+		eventCount,
+		lastEventId
+	};
+}
 function normalizeSessionInfo(raw) {
 	const id = raw.id;
 	if (typeof id !== "string") return null;

package/dist/runtime.d.ts

@@ -1,6 +1,6 @@
-import { C as ChunkedUploadResult, Fi as TaskSessionCommitResult, Gn as RenameOptions, Kr as SandboxRuntimeHealth, L as CreateSessionOptions, Li as TaskSessionInfo, O as CommitTaskSessionOptions, Pi as TaskSessionChanges, Qr as SandboxTerminalRequestOptions, R as CreateTaskSessionOptions, S as ChunkedUploadOptions, St as FileWriteResult, Vr as SandboxPortBinding, Xr as SandboxTerminalInfo, Yi as UploadProgress, Yr as SandboxTerminalCreateOptions, Zr as SandboxTerminalManager, bt as FileUsageOptions, di as SentSessionMessage, dt as FileReadBatchOptions, ea as WriteFileOptions, ft as FileReadBatchResult, gi as SessionInfo, ht as FileRenameResult, li as SendSessionMessageOptions, pi as SessionEventStreamOptions, sn as ListMessagesOptions, ui as SendSessionMessageRequest, ur as SandboxEvent, vt as FileTreeOptions, xt as FileUsageResult, yi as SessionMessage, yt as FileTreeResult } from "./types-CsDzg6PB.js";
+import { $i as UploadProgress, $r as SandboxTerminalManager, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Ci as SessionMessage, Ct as FileUsageResult, Jr as SandboxRuntimeHealth, Qr as SandboxTerminalInfo, Ri as TaskSessionChanges, St as FileUsageOptions, T as ChunkedUploadResult, Ur as SandboxPortBinding, Vi as TaskSessionInfo, Zr as SandboxTerminalCreateOptions, _i as SessionExecutionStatus, _t as FileRenameResult, bi as SessionInfo, bt as FileTreeOptions, di as SendSessionMessageOptions, ei as SandboxTerminalRequestOptions, fi as SendSessionMessageRequest, fr as SandboxEvent, gi as SessionExecutionInfo, hi as SessionEventStreamOptions, ia as WriteFileOptions, ln as ListMessagesOptions, mt as FileReadBatchResult, pi as SentSessionMessage, pt as FileReadBatchOptions, qn as RenameOptions, w as ChunkedUploadOptions, wt as FileWriteResult, xt as FileTreeResult, z as CreateSessionOptions, zi as TaskSessionCommitResult } from "./types-B00bLoQR.js";
 import { a as NetworkError, c as QuotaError, d as SandboxFailureDetail, f as ServerError, h as ValidationError, i as FileWriteConflictError, l as SandboxError, m as TimeoutError, n as CapabilityError, o as NotFoundError, p as StateError, s as PartialFailureError, t as AuthError, u as SandboxErrorJson } from "./errors-CQOvGddH.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-CW49Y_lY.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C0T6t4zn.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}
@@ -55,6 +55,13 @@ declare class SandboxRuntimeApi {
    * the token for.
    */
   events(sessionId: string, options?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
+  /**
+   * List the durable execution records for one session.
+   *
+   * The sidecar owns this ledger and returns records newest first. Validate
+   * the response here so malformed payloads cannot become false run evidence.
+   */
+  runs(sessionId: string): Promise<SessionExecutionInfo[]>;
   readFiles(paths: string[], options?: FileReadBatchOptions): Promise<FileReadBatchResult>;
   writeFile(path: string, content: string, options?: WriteFileOptions): Promise<FileWriteResult>;
   /**
@@ -120,4 +127,4 @@ declare class SandboxRuntimeClient extends SandboxRuntimeApi {
 }
 declare function createSandboxRuntimeClient(config: SandboxRuntimeClientConfig): SandboxRuntimeClient;
 //#endregion
-export { type AgentRunOutcome, type AgentRunOutcomeTracker, AuthError, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type ChunkedUploadTransport, type FileReadBatchOptions, type FileReadBatchResult, type FileRenameResult, type FileTreeOptions, type FileTreeResult, FileWriteConflictError, type FileWriteResult, type ListMessagesOptions, NetworkError, NotFoundError, PartialFailureError, QuotaError, type RenameOptions, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxRuntimeClient, type SandboxRuntimeClientConfig, type SandboxRuntimeHealth, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, ServerError, type SessionEventStreamOptions, type SessionMessage, StateError, TimeoutError, type UploadProgress, ValidationError, type WriteFileOptions, createAgentRunOutcomeTracker, createSandboxRuntimeClient, deriveAgentResultOutcome, deriveAgentRunOutcome, uploadChunked };
+export { type AgentRunOutcome, type AgentRunOutcomeTracker, AuthError, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type ChunkedUploadTransport, type FileReadBatchOptions, type FileReadBatchResult, type FileRenameResult, type FileTreeOptions, type FileTreeResult, FileWriteConflictError, type FileWriteResult, type ListMessagesOptions, NetworkError, NotFoundError, PartialFailureError, QuotaError, type RenameOptions, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxRuntimeClient, type SandboxRuntimeClientConfig, type SandboxRuntimeHealth, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, ServerError, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionMessage, StateError, TimeoutError, type UploadProgress, ValidationError, type WriteFileOptions, createAgentRunOutcomeTracker, createSandboxRuntimeClient, deriveAgentResultOutcome, deriveAgentRunOutcome, uploadChunked };

package/dist/runtime.js

@@ -1,4 +1,4 @@
-import { a as uploadChunked, g as deriveAgentRunOutcome, h as deriveAgentResultOutcome, m as createAgentRunOutcomeTracker, t as SandboxRuntimeApi } from "./runtime-api-paApH4-W.js";
+import { a as uploadChunked, g as deriveAgentRunOutcome, h as deriveAgentResultOutcome, m as createAgentRunOutcomeTracker, t as SandboxRuntimeApi } from "./runtime-api-ClXF8k_q.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, i as FileWriteConflictError, l as SandboxError, n as CapabilityError, o as NotFoundError, p as ValidationError, s as PartialFailureError, t as AuthError, u as ServerError } from "./errors-C6kn-3zt.js";
 import { n as combineAbortSignals } from "./abort-signal-si1WMfJb.js";
 //#region src/runtime-client.ts

package/dist/{sandbox-B70BzvzR.js → sandbox-CzKxUiYj.js}

@@ -1,4 +1,4 @@
-import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, h as deriveAgentResultOutcome, i as sessionHeaders, m as createAgentRunOutcomeTracker, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-paApH4-W.js";
+import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, h as deriveAgentResultOutcome, i as sessionHeaders, m as createAgentRunOutcomeTracker, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-ClXF8k_q.js";
 import { a as NetworkError, c as QuotaError, d as StateError, f as TimeoutError, l as SandboxError, m as parseErrorResponse, n as CapabilityError, o as NotFoundError, p as ValidationError, t as AuthError, u as ServerError } from "./errors-C6kn-3zt.js";
 import { c as createInteractiveControlHolderId, d as interactiveSessionControlReleaseResponseSchema, f as interactiveSessionControlValidationResponseSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, p as interactiveSessionStatusResponseSchema, r as browserInteractiveTerminalEndpoint, s as assertInteractiveSessionRef, u as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-Dv0gbFMu.js";
 import { n as combineAbortSignals, t as awaitWithAbort } from "./abort-signal-si1WMfJb.js";
@@ -2756,6 +2756,15 @@ var SandboxSession = class SandboxSession {
 		return this.box._sessionEvents(this.id, opts);
 	}
 	/**
+	* List the durable executions recorded for this session, newest first.
+	*
+	* This is the runtime's authoritative execution ledger. It lets callers
+	* count provider runs without inferring execution from model-written files.
+	*/
+	async runs() {
+		return this.box._sessionRuns(this.id);
+	}
+	/**
 	* Await a terminal result. With `executionId`, drains only that execution;
 	* without it, reads status and selects the latest execution. Event replay
 	* makes either form safe after the execution has already finished.
@@ -5213,7 +5222,12 @@ var SandboxInstance = class SandboxInstance {
 			const buffer = await response.arrayBuffer();
 			await fs.writeFile(tempTarPath, Buffer.from(buffer));
 			await fs.mkdir(localDir, { recursive: true });
-			execSync(`tar -xzf "${tempTarPath}" -C "${localDir}"`, { stdio: "pipe" });
+			try {
+				execSync(`tar -xzf "${tempTarPath}" -C "${localDir}"`, { stdio: "pipe" });
+			} catch (error) {
+				const stderr = error.stderr?.toString().trim();
+				throw new Error(`downloadDir: host tar failed to extract the archive${stderr ? ` — ${stderr}` : ""}`);
+			}
 		} finally {
 			await fs.rm(tempDir, { recursive: true }).catch(() => {});
 		}
@@ -5488,12 +5502,9 @@ var SandboxInstance = class SandboxInstance {
 	* console.log(`Backend: ${status.type}, Status: ${status.status}`);
 	* ```
 	*
-	* @example Add MCP server at runtime
+	* @example Point the backend at a different model
 	* ```typescript
-	* await box.backend.addMcp("web-search", {
-	*   command: "npx",
-	*   args: ["-y", "@anthropic/web-search"],
-	* });
+	* await box.backend.updateConfig({ model: "openai/gpt-5-mini" });
 	* ```
 	*
 	* @example Read provider-native Cursor metadata
@@ -5506,8 +5517,6 @@ var SandboxInstance = class SandboxInstance {
 	get backend() {
 		return {
 			status: () => this.backendStatus(),
-			capabilities: () => this.backendCapabilities(),
-			addMcp: (name, config) => this.backendAddMcp(name, config),
 			getMcpStatus: () => this.backendGetMcpStatus(),
 			updateConfig: (config) => this.backendUpdateConfig(config),
 			account: () => this.backendAccount(),
@@ -5528,36 +5537,13 @@ var SandboxInstance = class SandboxInstance {
 	}
 	async backendStatus() {
 		await this.ensureRunning();
-		const response = await this.runtimeFetch("/backend/status", { method: "GET" });
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
-		return await response.json();
-	}
-	async backendCapabilities() {
-		await this.ensureRunning();
-		const response = await this.runtimeFetch("/backend/capabilities", { method: "GET" });
+		const response = await this.runtimeFetch("/backend", { method: "GET" });
 		if (!response.ok) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 		return await response.json();
 	}
-	async backendAddMcp(name, config) {
-		await this.ensureRunning();
-		const response = await this.runtimeFetch("/backend/mcp", {
-			method: "POST",
-			body: JSON.stringify({
-				name,
-				config
-			})
-		});
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
-	}
 	async backendGetMcpStatus() {
 		await this.ensureRunning();
 		const response = await this.runtimeFetch("/backend/mcp", { method: "GET" });
@@ -5569,9 +5555,9 @@ var SandboxInstance = class SandboxInstance {
 	}
 	async backendUpdateConfig(config) {
 		await this.ensureRunning();
-		const response = await this.runtimeFetch("/backend/config", {
-			method: "PATCH",
-			body: JSON.stringify(normalizeRuntimeBackendConfig(config))
+		const response = await this.runtimeFetch("/backend/configure", {
+			method: "POST",
+			body: JSON.stringify(config)
 		});
 		if (!response.ok) {
 			const body = await response.text();
@@ -7599,6 +7585,10 @@ var SandboxInstance = class SandboxInstance {
 		}
 		return normalizeSessionInfo(await response.json());
 	}
+	/** @internal — invoked by SandboxSession.runs(). */
+	async _sessionRuns(id) {
+		return this.runtime.runs(id);
+	}
 	/** @internal — invoked by SandboxSession.events(). */
 	async *_sessionEvents(id, opts, stopOnTurnTerminal = false) {
 		await this.ensureRunning();

package/dist/{sandbox-yn4s4Q2t.d.ts → sandbox-DWTay6Ou.d.ts}

@@ -1,6 +1,6 @@
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-5GNLCsms.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, s as InteractiveSessionControlTransport } from "./browser-interactive-control-controller-lRfzpg9t.js";
-import { $i as WorkspaceOperationLookup, $r as SandboxTerminals, Ai as StartupDiagnostics, An as PromptInputPart, Bt as GitCommit, Ci as SnapshotDeleteAcknowledgement, Di as SnapshotOptions, E as CodeLanguage, Ei as SnapshotInfo, En as ProcessManager, Fi as TaskSessionCommitResult, Ft as ForkIdempotency, Gr as SandboxRuntimeCapabilities, H as DispatchPromptOptions, Ht as GitDiff, It as ForkLookupOptions, J as DriverInfo, Jn as Rollout, Jr as SandboxTerminalAttachOptions, K as DriveTurnOptions, Ki as TurnDriveResult, Kn as RestoreSnapshotOptions, Kr as SandboxRuntimeHealth, L as CreateSessionOptions, Li as TaskSessionInfo, Mn as PromptResult, Nn as ProvisionEvent, O as CommitTaskSessionOptions, Oi as SnapshotResult, Pi as TaskSessionChanges, Pn as ProvisionResult, Pt as ForkCounts, Qi as WaitForRolloutOptions, Qn as RolloutStartResult, R as CreateTaskSessionOptions, St as FileWriteResult, T as CodeExecutionResult, U as DispatchedSession, Ui as TeePublicKeyResponse, Ur as SandboxResourceUsage, Ut as GitStatus, Vi as TeeAttestationResponse, Vr as SandboxPortBinding, Wt as GpuLease, X as DurablePlan, Xn as RolloutOptions, Yt as GpuLeaseManager, Z as DurablePlanDecisionResult, Zi as WaitForOptions, _i as SessionInterruptOptions, ai as SearchMatch, an as IntelligenceReportWindow, bn as PreviewLinkManager, ct as ExecOptions, d as BackendConfig, di as SentSessionMessage, ea as WriteFileOptions, ei as SandboxTraceBundle, en as InstalledTool, gi as SessionInfo, gt as FileSystem, hi as SessionForkOptions, hn as NetworkManager, ir as SandboxConnection, jn as PromptOptions, k as CompletedTurnResult, kr as SandboxFleetTraceBundle, li as SendSessionMessageOptions, lt as ExecResult, na as WriteManyOptions, nn as IntelligenceReportBudget, nr as SSHCredentials, oi as SearchOptions, on as JsonValue, or as SandboxCreateReceipt, ot as EventStreamOptions, p as BackendManager, pi as SessionEventStreamOptions, qn as ResumeOptions, qr as SandboxStatus, ri as SandboxTraceOptions, rn as IntelligenceReportCompareTo, rt as EgressManager, sn as ListMessagesOptions, sr as SandboxDeleteAcknowledgement, ta as WriteManyFile, tn as IntelligenceReport, tr as SSHCommandDescriptor, ui as SendSessionMessageRequest, ur as SandboxEvent, vi as SessionListOptions, vn as PermissionsManager, w as CodeExecutionOptions, x as BranchOptions, xi as SessionResultOptions, yi as SessionMessage, zi as TeeAttestationOptions, zr as SandboxInfo, zt as GitBranch } from "./types-CsDzg6PB.js";
+import { $ as DurablePlanDecisionResult, A as CommitTaskSessionOptions, Ai as SnapshotInfo, B as CreateTaskSessionOptions, C as BranchOptions, Ci as SessionMessage, D as CodeExecutionResult, Di as SnapshotDeleteAcknowledgement, E as CodeExecutionOptions, Fn as ProvisionEvent, G as DispatchedSession, Gi as TeeAttestationResponse, Gr as SandboxResourceUsage, Gt as GitStatus, Ht as GitCommit, In as ProvisionResult, It as ForkCounts, J as DriveTurnOptions, Jn as RestoreSnapshotOptions, Jr as SandboxRuntimeHealth, Kt as GpuLease, Lt as ForkIdempotency, Mi as SnapshotResult, Mn as PromptInputPart, Nn as PromptOptions, O as CodeLanguage, On as ProcessManager, Pi as StartupDiagnostics, Pn as PromptResult, Q as DurablePlan, Qn as RolloutOptions, Ri as TaskSessionChanges, Rt as ForkLookupOptions, Si as SessionListOptions, Sn as PreviewLinkManager, Ti as SessionResultOptions, Ui as TeeAttestationOptions, Ur as SandboxPortBinding, Vi as TaskSessionInfo, Vr as SandboxInfo, Vt as GitBranch, W as DispatchPromptOptions, Wt as GitDiff, X as DriverInfo, Xi as TurnDriveResult, Xn as Rollout, Xr as SandboxTerminalAttachOptions, Yn as ResumeOptions, Yr as SandboxStatus, Zt as GpuLeaseManager, _n as NetworkManager, aa as WriteManyFile, ai as SandboxTraceOptions, an as IntelligenceReportCompareTo, at as EgressManager, bi as SessionInfo, bn as PermissionsManager, ci as SearchOptions, cn as JsonValue, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, di as SendSessionMessageOptions, dt as ExecResult, er as RolloutStartResult, fi as SendSessionMessageRequest, fr as SandboxEvent, gi as SessionExecutionInfo, hi as SessionEventStreamOptions, ia as WriteFileOptions, in as IntelligenceReportBudget, ir as SSHCredentials, j as CompletedTurnResult, ji as SnapshotOptions, jr as SandboxFleetTraceBundle, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, na as WaitForRolloutOptions, ni as SandboxTraceBundle, nn as InstalledTool, oa as WriteManyOptions, or as SandboxConnection, p as BackendManager, pi as SentSessionMessage, qi as TeePublicKeyResponse, qr as SandboxRuntimeCapabilities, ra as WorkspaceOperationLookup, rn as IntelligenceReport, rr as SSHCommandDescriptor, si as SearchMatch, sn as IntelligenceReportWindow, ta as WaitForOptions, ti as SandboxTerminals, ut as ExecOptions, vt as FileSystem, wt as FileWriteResult, xi as SessionInterruptOptions, yi as SessionForkOptions, z as CreateSessionOptions, zi as TaskSessionCommitResult } from "./types-B00bLoQR.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -397,6 +397,7 @@ interface SandboxSessionHost extends InteractiveSessionHost {
   prompt(message: string | PromptInputPart[], options?: PromptOptions): Promise<PromptResult>;
   _sessionStatus(id: string): Promise<SessionInfo | null>;
   _sessionEvents(id: string, opts?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
+  _sessionRuns(id: string): Promise<SessionExecutionInfo[]>;
   _sessionResult(id: string, options?: SessionResultOptions, session?: SessionInfo): Promise<PromptResult>;
   _sessionDelete(id: string): Promise<void>;
   _sessionSendMessage(id: string, request: SendSessionMessageRequest, options?: SendSessionMessageOptions): Promise<SentSessionMessage>;
@@ -457,6 +458,13 @@ declare class SandboxSession {
    * terminal event has been yielded, OR when the caller's signal aborts.
    */
   events(opts?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
+  /**
+   * List the durable executions recorded for this session, newest first.
+   *
+   * This is the runtime's authoritative execution ledger. It lets callers
+   * count provider runs without inferring execution from model-written files.
+   */
+  runs(): Promise<SessionExecutionInfo[]>;
   /**
    * Await a terminal result. With `executionId`, drains only that execution;
    * without it, reads status and selects the latest execution. Event replay
@@ -1329,12 +1337,9 @@ declare class SandboxInstance {
    * console.log(`Backend: ${status.type}, Status: ${status.status}`);
    * ```
    *
-   * @example Add MCP server at runtime
+   * @example Point the backend at a different model
    * ```typescript
-   * await box.backend.addMcp("web-search", {
-   *   command: "npx",
-   *   args: ["-y", "@anthropic/web-search"],
-   * });
+   * await box.backend.updateConfig({ model: "openai/gpt-5-mini" });
    * ```
    *
    * @example Read provider-native Cursor metadata
@@ -1346,8 +1351,6 @@ declare class SandboxInstance {
    */
   get backend(): BackendManager;
   private backendStatus;
-  private backendCapabilities;
-  private backendAddMcp;
   private backendGetMcpStatus;
   private backendUpdateConfig;
   private backendControlData;
@@ -1960,6 +1963,8 @@ declare class SandboxInstance {
   mintScopedToken(opts: MintScopedTokenOptions): Promise<ScopedToken>;
   /** @internal — invoked by SandboxSession.status(). */
   _sessionStatus(id: string): Promise<SessionInfo | null>;
+  /** @internal — invoked by SandboxSession.runs(). */
+  _sessionRuns(id: string): Promise<SessionExecutionInfo[]>;
   /** @internal — invoked by SandboxSession.events(). */
   _sessionEvents(id: string, opts?: SessionEventStreamOptions, stopOnTurnTerminal?: boolean): AsyncGenerator<SandboxEvent>;
   /** Replay one execution without subscribing to other runs on its session. */

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DMAaPk_u.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-CtmbhfdA.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-Cj1fDoJ7.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-BhLq6l2G.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-Cj1fDoJ7.js → tangle-BhLq6l2G.js}

@@ -1,5 +1,5 @@
 import { m as parseErrorResponse } from "./errors-C6kn-3zt.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-B70BzvzR.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-CzKxUiYj.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-CsDzg6PB.d.ts → types-B00bLoQR.d.ts}

@@ -1492,6 +1492,13 @@ interface CreateSandboxOptions {
    * @example { url: "https://github.com/user/repo.git", ref: "main" }
    */
   git?: GitConfig;
+  /**
+   * Initial working directory below the realized workspace root.
+   *
+   * Use a relative POSIX path. When `git` is set, `.` means the repository
+   * root. Otherwise, `.` means the sandbox workspace root.
+   */
+  cwd?: string;
   /** Human-readable name for the sandbox */
   name?: string;
   /** Resource limits (CPU cores, memory, disk) */
@@ -3036,6 +3043,23 @@ interface SandboxRuntimeCapabilities {
  * Lifecycle state of an agent session inside a sandbox.
  */
 type SessionStatus = "queued" | "running" | "completed" | "failed" | "cancelled";
+/** Lifecycle state of an execution retained in the session replay ledger. */
+type SessionExecutionStatus = "active" | "completed" | "failed" | "cancelled";
+/**
+ * Durable metadata for one session execution.
+ *
+ * The values come from the runtime replay ledger, not from a provider
+ * response or an inferred model result.
+ */
+interface SessionExecutionInfo {
+  executionId: string;
+  sessionId: string;
+  status: SessionExecutionStatus;
+  startedAt: number;
+  completedAt?: number;
+  eventCount: number;
+  lastEventId: string;
+}
 /** Secret-free model tuple selected by the sandbox runtime. */
 /**
  * Which layer supplied the model id that executed. `request` means the model
@@ -4674,8 +4698,24 @@ interface BackendStatus {
   version?: string;
   /** Error message if failed */
   error?: string;
-  /** Additional metadata */
-  metadata?: Record<string, unknown>;
+  /** Capabilities the running backend reports, when it reports them */
+  capabilities?: BackendCapabilities;
+}
+/** Status of one MCP server, as the runtime reports it. */
+interface BackendMcpServerStatus {
+  name: string;
+  status: "connected" | "disconnected" | "error" | "unknown";
+  type?: "local" | "remote" | "stdio" | "http";
+  error?: string;
+}
+/**
+ * The runtime-adjustable backend settings. Thinking-token budgets are
+ * per-run (`backend.model.maxThinkingTokens` on the run request), not part
+ * of the durable config, and the server refuses them here.
+ */
+interface BackendRuntimeConfigUpdate {
+  /** Model id for the running backend */
+  model?: string;
 }
 /**
  * Backend information.
@@ -5187,19 +5227,12 @@ interface PermissionsManager {
  * Access via `sandbox.backend`.
  */
 interface BackendManager {
-  /** Get current backend status */
+  /** Get current backend status, including reported capabilities */
   status(): Promise<BackendStatus>;
-  /** Get backend capabilities */
-  capabilities(): Promise<BackendCapabilities>;
-  /** Add MCP server at runtime (opencode only) */
-  addMcp(name: string, config: McpServerConfig): Promise<void>;
   /** Get MCP server status */
-  getMcpStatus(): Promise<Record<string, {
-    status: "running" | "stopped" | "error";
-    error?: string;
-  }>>;
-  /** Update backend configuration */
-  updateConfig(config: Partial<BackendConfig>): Promise<void>;
+  getMcpStatus(): Promise<Record<string, BackendMcpServerStatus>>;
+  /** Update the runtime-adjustable backend settings */
+  updateConfig(config: BackendRuntimeConfigUpdate): Promise<void>;
   /** Provider account metadata, when exposed by the backend SDK */
   account(): Promise<BackendAccount>;
   /** Provider model catalog, when exposed by the backend SDK */
@@ -6279,4 +6312,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EffectiveBackend as $, WorkspaceOperationLookup as $i, RolloutStatus as $n, SandboxTerminals as $r, HostAgentRuntimeBackend as $t, CreateGpuLeaseOptions as A, StartupDiagnostics as Ai, PromptInputPart as An, SandboxFleetTraceEvent as Ar, FleetExecDispatchResult as At, DevServerInfo as B, TeeAttestationReport as Bi, PublishPublicTemplateVersionOptions as Bn, SandboxIntelligenceEnvelope as Br, GitCommit as Bt, ChunkedUploadResult as C, SnapshotDeleteAcknowledgement as Ci, ProcessInfo as Cn, SandboxFleetMachineSpec as Cr, FleetDispatchCancelResult as Ct, CodeResultPart as D, SnapshotOptions as Di, ProcessSignal as Dn, SandboxFleetPolicy as Dr, FleetDriveTurnOutcome as Dt, CodeLanguage as E, SnapshotInfo as Ei, ProcessManager as En, SandboxFleetOperationsSummary as Er, FleetDispatchStreamOptions as Et, CreateSandboxFleetWithCoordinatorOptions as F, TaskSessionCommitResult as Fi, ProvisionStatus as Fn, SandboxFleetWorkspaceReconcileResult as Fr, ForkIdempotency as Ft, DownloadProgress as G, TokenUsage as Gi, RenameOptions as Gn, SandboxRuntimeCapabilities as Gr, GpuLeaseBilling as Gt, DispatchPromptOptions as H, TeePublicKey as Hi, ReapExpiredSandboxFleetsResult as Hn, SandboxPortPreviewLink as Hr, GitDiff as Ht, CreateSandboxOptions as I, TaskSessionFileChange as Ii, ProvisionStep as In, SandboxFleetWorkspaceRestoreResult as Ir, ForkLookupOptions as It, DriverInfo as J, UploadOptions as Ji, Rollout as Jn, SandboxTerminalAttachOptions as Jr, GpuLeaseExecResult as Jt, DriveTurnOptions as K, TurnDriveResult as Ki, RestoreSnapshotOptions as Kn, SandboxRuntimeHealth as Kr, GpuLeaseCommandResult as Kt, CreateSessionOptions as L, TaskSessionInfo as Li, PublicTemplateInfo as Ln, SandboxFleetWorkspaceSnapshotResult as Lr, GPU_LEASE_PROVIDER_NAMES as Lt, CreateRequestOptions as M, StorageConfig as Mi, PromptResult as Mn, SandboxFleetTraceOptions as Mr, FleetPromptDispatchOptions as Mt, CreateSandboxFleetOptions as N, SubscriptionInfo as Ni, ProvisionEvent as Nn, SandboxFleetUsage as Nr, FleetPromptDispatchResult as Nt, CommitTaskSessionOptions as O, SnapshotResult as Oi, ProcessSpawnOptions as On, SandboxFleetToken as Or, FleetDriveTurnRequest as Ot, CreateSandboxFleetTokenOptions as P, TaskSessionChanges as Pi, ProvisionResult as Pn, SandboxFleetWorkspace as Pr, ForkCounts as Pt, DurablePlanSnapshot as Q, WaitForRolloutOptions as Qi, RolloutStartResult as Qn, SandboxTerminalRequestOptions as Qr, HostAgentDriverConfig as Qt, CreateTaskSessionOptions as R, TaskSessionProfile as Ri, PublicTemplateVersionInfo as Rn, SandboxIdentity as Rr, GitAuth as Rt, ChunkedUploadOptions as S, SessionStatus as Si, Process as Sn, SandboxFleetMachineRecord as Sr, FileWriteResult as St, CodeExecutionResult as T, SnapshotIdempotency as Ti, ProcessLogEntry as Tn, SandboxFleetManifestMachine as Tr, FleetDispatchResultBufferOptions as Tt, DispatchedSession as U, TeePublicKeyResponse as Ui, ReconcileSandboxFleetsOptions as Un, SandboxResourceUsage as Ur, GitStatus as Ut, DirectoryPermission as V, TeeAttestationResponse as Vi, ReapExpiredSandboxFleetsOptions as Vn, SandboxPortBinding as Vr, GitConfig as Vt, DownloadOptions as W, TokenRefreshHandler as Wi, ReconcileSandboxFleetsResult as Wn, SandboxResources as Wr, GpuLease as Wt, DurablePlan as X, UsageInfo as Xi, RolloutOptions as Xn, SandboxTerminalInfo as Xr, GpuLeaseProviderName as Xt, DriverType as Y, UploadProgress as Yi, RolloutChildResult as Yn, SandboxTerminalCreateOptions as Yr, GpuLeaseManager as Yt, DurablePlanDecisionResult as Z, WaitForOptions as Zi, RolloutScorer as Zn, SandboxTerminalManager as Zr, GpuLeaseStatus as Zt, BatchRunOptions as _, SessionInterruptOptions as _i, PermissionLevel as _n, SandboxFleetDriverTimings as _r, FileTreeFile as _t, AgentQuestionRequest as a, BatchEventDataMap as aa, SearchMatch as ai, IntelligenceReportWindow as an, SandboxCreateOutcome as ar, EnsureDevServerOptions as at, BatchTaskResult as b, SessionMessageInputPart as bi, PreviewLinkManager as bn, SandboxFleetMachine as br, FileUsageOptions as bt, AttachGpuLeaseOptions as c, PublicBatchRunRequest as ca, SecretsManager as ci, ListOptions as cn, SandboxDeleteOutcome as cr, ExecOptions as ct, BackendConfig as d, SentSessionMessage as di, MAX_EGRESS_DENIALS_LIMIT as dn, SandboxFleetArtifact as dr, FileReadBatchOptions as dt, WriteFileOptions as ea, SandboxTraceBundle as ei, InstalledTool as en, RolloutTurnPart as er, EffectiveBackendProfile as et, BackendInfo as f, SessionBackendCredentials as fi, McpServerConfig as fn, SandboxFleetArtifactSpec as fr, FileReadBatchResult as ft, BatchResult as g, SessionInfo as gi, NonHostAgentDriverConfig as gn, SandboxFleetDriverCapability as gr, FileSystem as gt, BatchBackend as h, SessionForkOptions as hi, NetworkManager as hn, SandboxFleetDispatchResponse as hr, FileRenameResult as ht, AgentApprovalRequirement as i, BatchEvent as ia, SandboxUser as ii, IntelligenceReportSubjectType as in, SandboxConnection as ir, EgressPolicy as it, CreateIntelligenceReportOptions as j, StartupOperation as ji, PromptOptions as jn, SandboxFleetTraceExport as jr, FleetMachineId as jt, CompletedTurnResult as k, SshKeysManager as ki, ProcessStatus as kn, SandboxFleetTraceBundle as kr, FleetExecDispatchOptions as kt, AttachSandboxFleetMachineOptions as l, BackendType as la, SendSessionMessageOptions as li, ListSandboxFleetOptions as ln, SandboxEnvironment as lr, ExecResult as lt, BackendStatus as m, SessionFailureReason as mi, NetworkConfig as mn, SandboxFleetDispatchFailureClass as mr, FileReadResult as mt, AccessPolicyRule as n, WriteManyOptions as na, SandboxTraceExport as ni, IntelligenceReportBudget as nn, SSHCredentials as nr, EgressDenial as nt, AgentRunStatus as o, BatchSidecarGroup as oa, SearchOptions as oi, JsonValue as on, SandboxCreateReceipt as or, EventStreamOptions as ot, BackendManager as p, SessionEventStreamOptions as pi, MkdirOptions as pn, SandboxFleetCostEstimate as pr, FileReadError as pt, DriverConfig as q, UpdateUserOptions as qi, ResumeOptions as qn, SandboxStatus as qr, GpuLeaseExecOptions as qt, AddUserOptions as r, BatchBackendStats as ra, SandboxTraceOptions as ri, IntelligenceReportCompareTo as rn, SandboxConfig as rr, EgressManager as rt, AgentToolInvocation as s, BatchTaskUsage as sa, SecretInfo as si, ListMessagesOptions as sn, SandboxDeleteAcknowledgement as sr, ExactProcessSpawnOptions as st, AcceleratorKind as t, WriteManyFile as ta, SandboxTraceEvent as ti, IntelligenceReport as tn, SSHCommandDescriptor as tr, EffectiveBackendSource as tt, BackendCapabilities as u, parseBackendType as ua, SendSessionMessageRequest as ui, ListSandboxOptions as un, SandboxEvent as ur, FileInfo as ut, BatchRunRequest as v, SessionListOptions as vi, PermissionsManager as vn, SandboxFleetInfo as vr, FileTreeOptions as vt, CodeExecutionOptions as w, SnapshotDeleteOutcome as wi, ProcessListOptions as wn, SandboxFleetManifest as wr, FleetDispatchResultBuffer as wt, BranchOptions as x, SessionResultOptions as xi, PreviewLinkWaitOptions as xn, SandboxFleetMachineMeteredUsage as xr, FileUsageResult as xt, BatchTask as y, SessionMessage as yi, PreviewLinkInfo as yn, SandboxFleetIntelligenceEnvelope as yr, FileTreeResult as yt, DeleteOptions as z, TeeAttestationOptions as zi, PublishPublicTemplateOptions as zn, SandboxInfo as zr, GitBranch as zt };
+export { DurablePlanDecisionResult as $, UploadProgress as $i, RolloutScorer as $n, SandboxTerminalManager as $r, GpuLeaseStatus as $t, CommitTaskSessionOptions as A, SnapshotInfo as Ai, ProcessSpawnOptions as An, SandboxFleetToken as Ar, FleetDriveTurnRequest as At, CreateTaskSessionOptions as B, TaskSessionFileChange as Bi, PublicTemplateVersionInfo as Bn, SandboxIdentity as Br, GitAuth as Bt, BranchOptions as C, SessionMessage as Ci, PreviewLinkWaitOptions as Cn, SandboxFleetMachineMeteredUsage as Cr, FileUsageResult as Ct, CodeExecutionResult as D, SnapshotDeleteAcknowledgement as Di, ProcessLogEntry as Dn, SandboxFleetManifestMachine as Dr, FleetDispatchResultBufferOptions as Dt, CodeExecutionOptions as E, SessionStatus as Ei, ProcessListOptions as En, SandboxFleetManifest as Er, FleetDispatchResultBuffer as Et, CreateSandboxFleetOptions as F, StartupOperation as Fi, ProvisionEvent as Fn, SandboxFleetUsage as Fr, FleetPromptDispatchResult as Ft, DispatchedSession as G, TeeAttestationResponse as Gi, ReconcileSandboxFleetsOptions as Gn, SandboxResourceUsage as Gr, GitStatus as Gt, DevServerInfo as H, TaskSessionProfile as Hi, PublishPublicTemplateVersionOptions as Hn, SandboxIntelligenceEnvelope as Hr, GitCommit as Ht, CreateSandboxFleetTokenOptions as I, StorageConfig as Ii, ProvisionResult as In, SandboxFleetWorkspace as Ir, ForkCounts as It, DriveTurnOptions as J, TokenRefreshHandler as Ji, RestoreSnapshotOptions as Jn, SandboxRuntimeHealth as Jr, GpuLeaseCommandResult as Jt, DownloadOptions as K, TeePublicKey as Ki, ReconcileSandboxFleetsResult as Kn, SandboxResources as Kr, GpuLease as Kt, CreateSandboxFleetWithCoordinatorOptions as L, SubscriptionInfo as Li, ProvisionStatus as Ln, SandboxFleetWorkspaceReconcileResult as Lr, ForkIdempotency as Lt, CreateGpuLeaseOptions as M, SnapshotResult as Mi, PromptInputPart as Mn, SandboxFleetTraceEvent as Mr, FleetExecDispatchResult as Mt, CreateIntelligenceReportOptions as N, SshKeysManager as Ni, PromptOptions as Nn, SandboxFleetTraceExport as Nr, FleetMachineId as Nt, CodeLanguage as O, SnapshotDeleteOutcome as Oi, ProcessManager as On, SandboxFleetOperationsSummary as Or, FleetDispatchStreamOptions as Ot, CreateRequestOptions as P, StartupDiagnostics as Pi, PromptResult as Pn, SandboxFleetTraceOptions as Pr, FleetPromptDispatchOptions as Pt, DurablePlan as Q, UploadOptions as Qi, RolloutOptions as Qn, SandboxTerminalInfo as Qr, GpuLeaseProviderName as Qt, CreateSandboxOptions as R, TaskSessionChanges as Ri, ProvisionStep as Rn, SandboxFleetWorkspaceRestoreResult as Rr, ForkLookupOptions as Rt, BatchTaskResult as S, SessionListOptions as Si, PreviewLinkManager as Sn, SandboxFleetMachine as Sr, FileUsageOptions as St, ChunkedUploadResult as T, SessionResultOptions as Ti, ProcessInfo as Tn, SandboxFleetMachineSpec as Tr, FleetDispatchCancelResult as Tt, DirectoryPermission as U, TeeAttestationOptions as Ui, ReapExpiredSandboxFleetsOptions as Un, SandboxPortBinding as Ur, GitConfig as Ut, DeleteOptions as V, TaskSessionInfo as Vi, PublishPublicTemplateOptions as Vn, SandboxInfo as Vr, GitBranch as Vt, DispatchPromptOptions as W, TeeAttestationReport as Wi, ReapExpiredSandboxFleetsResult as Wn, SandboxPortPreviewLink as Wr, GitDiff as Wt, DriverInfo as X, TurnDriveResult as Xi, Rollout as Xn, SandboxTerminalAttachOptions as Xr, GpuLeaseExecResult as Xt, DriverConfig as Y, TokenUsage as Yi, ResumeOptions as Yn, SandboxStatus as Yr, GpuLeaseExecOptions as Yt, DriverType as Z, UpdateUserOptions as Zi, RolloutChildResult as Zn, SandboxTerminalCreateOptions as Zr, GpuLeaseManager as Zt, BatchBackend as _, SessionExecutionStatus as _i, NetworkManager as _n, SandboxFleetDispatchResponse as _r, FileRenameResult as _t, AgentQuestionRequest as a, WriteManyFile as aa, SandboxTraceOptions as ai, IntelligenceReportCompareTo as an, SandboxConfig as ar, EgressManager as at, BatchRunRequest as b, SessionInfo as bi, PermissionsManager as bn, SandboxFleetInfo as br, FileTreeOptions as bt, AttachGpuLeaseOptions as c, BatchEvent as ca, SearchOptions as ci, JsonValue as cn, SandboxCreateReceipt as cr, EventStreamOptions as ct, BackendConfig as d, BatchTaskUsage as da, SendSessionMessageOptions as di, ListSandboxFleetOptions as dn, SandboxEnvironment as dr, ExecResult as dt, UsageInfo as ea, SandboxTerminalRequestOptions as ei, HostAgentDriverConfig as en, RolloutStartResult as er, DurablePlanSnapshot as et, BackendInfo as f, PublicBatchRunRequest as fa, SendSessionMessageRequest as fi, ListSandboxOptions as fn, SandboxEvent as fr, FileInfo as ft, BackendStatus as g, SessionExecutionInfo as gi, NetworkConfig as gn, SandboxFleetDispatchFailureClass as gr, FileReadResult as gt, BackendRuntimeConfigUpdate as h, SessionEventStreamOptions as hi, MkdirOptions as hn, SandboxFleetCostEstimate as hr, FileReadError as ht, AgentApprovalRequirement as i, WriteFileOptions as ia, SandboxTraceExport as ii, IntelligenceReportBudget as in, SSHCredentials as ir, EgressDenial as it, CompletedTurnResult as j, SnapshotOptions as ji, ProcessStatus as jn, SandboxFleetTraceBundle as jr, FleetExecDispatchOptions as jt, CodeResultPart as k, SnapshotIdempotency as ki, ProcessSignal as kn, SandboxFleetPolicy as kr, FleetDriveTurnOutcome as kt, AttachSandboxFleetMachineOptions as l, BatchEventDataMap as la, SecretInfo as li, ListMessagesOptions as ln, SandboxDeleteAcknowledgement as lr, ExactProcessSpawnOptions as lt, BackendMcpServerStatus as m, parseBackendType as ma, SessionBackendCredentials as mi, McpServerConfig as mn, SandboxFleetArtifactSpec as mr, FileReadBatchResult as mt, AccessPolicyRule as n, WaitForRolloutOptions as na, SandboxTraceBundle as ni, InstalledTool as nn, RolloutTurnPart as nr, EffectiveBackendProfile as nt, AgentRunStatus as o, WriteManyOptions as oa, SandboxUser as oi, IntelligenceReportSubjectType as on, SandboxConnection as or, EgressPolicy as ot, BackendManager as p, BackendType as pa, SentSessionMessage as pi, MAX_EGRESS_DENIALS_LIMIT as pn, SandboxFleetArtifact as pr, FileReadBatchOptions as pt, DownloadProgress as q, TeePublicKeyResponse as qi, RenameOptions as qn, SandboxRuntimeCapabilities as qr, GpuLeaseBilling as qt, AddUserOptions as r, WorkspaceOperationLookup as ra, SandboxTraceEvent as ri, IntelligenceReport as rn, SSHCommandDescriptor as rr, EffectiveBackendSource as rt, AgentToolInvocation as s, BatchBackendStats as sa, SearchMatch as si, IntelligenceReportWindow as sn, SandboxCreateOutcome as sr, EnsureDevServerOptions as st, AcceleratorKind as t, WaitForOptions as ta, SandboxTerminals as ti, HostAgentRuntimeBackend as tn, RolloutStatus as tr, EffectiveBackend as tt, BackendCapabilities as u, BatchSidecarGroup as ua, SecretsManager as ui, ListOptions as un, SandboxDeleteOutcome as ur, ExecOptions as ut, BatchResult as v, SessionFailureReason as vi, NonHostAgentDriverConfig as vn, SandboxFleetDriverCapability as vr, FileSystem as vt, ChunkedUploadOptions as w, SessionMessageInputPart as wi, Process as wn, SandboxFleetMachineRecord as wr, FileWriteResult as wt, BatchTask as x, SessionInterruptOptions as xi, PreviewLinkInfo as xn, SandboxFleetIntelligenceEnvelope as xr, FileTreeResult as xt, BatchRunOptions as y, SessionForkOptions as yi, PermissionLevel as yn, SandboxFleetDriverTimings as yr, FileTreeFile as yt, CreateSessionOptions as z, TaskSessionCommitResult as zi, PublicTemplateInfo as zn, SandboxFleetWorkspaceSnapshotResult as zr, GPU_LEASE_PROVIDER_NAMES as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.34.4",
+  "version": "0.36.1",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -95,9 +95,9 @@
     "url": "https://github.com/tangle-network/agent-dev-container/issues"
   },
   "dependencies": {
-    "@tangle-network/agent-core": "0.9.5",
-    "@tangle-network/agent-interface": "^1.6.0",
-    "zod": "4.4.3"
+    "@tangle-network/agent-core": "0.9.6",
+    "@tangle-network/agent-interface": "2.0.0",
+    "zod": "4.5.4"
   },
   "peerDependencies": {
     "@mastra/core": "^1.36.0",
@@ -136,8 +136,8 @@
     "ws": "^8.20.0",
     "yjs": "13.6.30",
     "@repo/shared": "0.0.0",
-    "@tangle-network/cli-agent-registry": "0.3.12",
-    "@tangle-network/runtime-contracts": "0.6.2",
+    "@tangle-network/cli-agent-registry": "0.3.14",
+    "@tangle-network/runtime-contracts": "0.6.4",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {