@tangle-network/sandbox 0.38.2 → 0.39.1-develop.20260912191433.b31d83f

package/dist/{sandbox-CzBWptVE.js → sandbox-BFZa_Gx-.js}

@@ -1,5 +1,5 @@
-import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, h as deriveAgentResultOutcome, i as sessionHeaders, m as createAgentRunOutcomeTracker, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as normalizeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-CrjcDtUw.js";
-import { d as ServerError, f as StateError, h as parseErrorResponse, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, r as EdgeNotReadyError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-MMMPY4T6.js";
+import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, i as sessionHeaders, m as normalizeRuntimeBackendConfig, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as mergeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-DokfzHVX.js";
+import { d as ServerError, f as StateError, h as parseErrorResponse, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, r as EdgeNotReadyError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-V6uPkjfJ.js";
 import { c as createInteractiveControlHolderId, d as interactiveSessionControlReleaseResponseSchema, f as interactiveSessionControlValidationResponseSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, p as interactiveSessionStatusResponseSchema, r as browserInteractiveTerminalEndpoint, s as assertInteractiveSessionRef, u as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-Dv0gbFMu.js";
 import { n as combineAbortSignals, t as awaitWithAbort } from "./abort-signal-si1WMfJb.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
@@ -4001,12 +4001,13 @@ var SandboxInstance = class SandboxInstance {
 	*/
 	async exec(command, options) {
 		const headers = sessionHeaders(options?.sessionId);
-		await this.ensureRunning();
+		await this.ensureRunning(options?.signal);
 		const timeoutMs = options?.timeoutMs ?? EXEC_DEFAULT_TIMEOUT_MS;
 		if (!Number.isInteger(timeoutMs) || timeoutMs < EXEC_MIN_TIMEOUT_MS || timeoutMs > EXEC_MAX_TIMEOUT_MS) throw new ValidationError(`exec timeoutMs must be an integer between ${EXEC_MIN_TIMEOUT_MS} and ${EXEC_MAX_TIMEOUT_MS}`);
 		const response = await this.runtimeFetch("/process/spawn", {
 			method: "POST",
 			headers,
+			...options?.signal ? { signal: options.signal } : {},
 			body: JSON.stringify({
 				executable: SANDBOX_COMMAND_SHELL,
 				args: sandboxShellCommandArgs(command),
@@ -4379,7 +4380,7 @@ var SandboxInstance = class SandboxInstance {
 	* content references by hash, changed content sends inline.
 	*/
 	buildRunBackendBody(overrideBackend, forceFullProfile, requestedModel) {
-		const normalized = normalizeRuntimeBackendConfig(applyRequestedModel(overrideBackend ?? this.defaultRuntimeBackend, requestedModel));
+		const normalized = normalizeRuntimeBackendConfig(applyRequestedModel(mergeRuntimeBackendConfig(this.defaultRuntimeBackend, overrideBackend), requestedModel));
 		if (!normalized) return normalized;
 		const deferred = this.deferredProfileReference;
 		if (!forceFullProfile && deferred !== void 0 && normalized.profile !== void 0 && serializeProfileSnapshot(normalized.profile) === deferred.snapshot) {
@@ -5213,28 +5214,18 @@ var SandboxInstance = class SandboxInstance {
 	}
 	async fsUpload(localPath, remotePath, options) {
 		await this.ensureRunning();
-		const fs = await import("node:fs/promises");
-		const path = await import("node:path");
-		const fileBuffer = await fs.readFile(localPath);
-		const fileName = path.basename(localPath);
+		const fileBuffer = await (await import("node:fs/promises")).readFile(localPath);
 		if (options?.onProgress) options.onProgress({
 			bytesUploaded: 0,
 			totalBytes: fileBuffer.length,
 			percentage: 0
 		});
-		const formData = new FormData();
-		formData.append("file", new Blob([new Uint8Array(fileBuffer)]), fileName);
-		formData.append("path", remotePath);
-		if (options?.permissions !== void 0) formData.append("mode", String(options.permissions));
-		const response = await this.runtimeFetch("/fs/upload", {
-			method: "POST",
-			body: formData,
-			headers: {}
+		await this.fsUploadData(remotePath, fileBuffer, {
+			mode: options?.permissions,
+			onProgress: options?.onProgress ? (progress) => {
+				if (progress.percentage < 100) options.onProgress?.(progress);
+			} : void 0
 		});
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
-		}
 		if (options?.onProgress) options.onProgress({
 			bytesUploaded: fileBuffer.length,
 			totalBytes: fileBuffer.length,
@@ -6933,7 +6924,7 @@ var SandboxInstance = class SandboxInstance {
 			return attempt;
 		}, signal ? { signal } : {});
 		const data = await this.readLifecycleResponse(response);
-		if (!this.applyLifecycleResponse(data)) await this.refresh();
+		if (!this.applyLifecycleResponse(data)) await this.refresh(signal);
 		const diagnostics = data ? normalizeStartupDiagnostics(data.startupDiagnostics) : null;
 		if (diagnostics) this.info.startupDiagnostics = diagnostics;
 	}
@@ -6949,12 +6940,16 @@ var SandboxInstance = class SandboxInstance {
 	* {@link startupDiagnostics} returns it for post-mortem reads on the
 	* now-gone sandbox.
 	*/
-	async delete() {
+	async delete(options) {
+		options?.signal?.throwIfAborted();
 		let sawLifecycleConflict = false;
 		let response;
 		try {
 			response = await withLifecycleConflictRetry(async () => {
-				const attempt = await this.client.fetch(`/v1/sandboxes/${this.id}`, { method: "DELETE" });
+				const attempt = await this.client.fetch(`/v1/sandboxes/${this.id}`, {
+					method: "DELETE",
+					...options?.signal ? { signal: options.signal } : {}
+				});
 				if (!attempt.ok) {
 					const body = await attempt.text();
 					const refusal = parseErrorResponse(attempt.status, body, void 0, attempt.headers);
@@ -6962,7 +6957,7 @@ var SandboxInstance = class SandboxInstance {
 					throw refusal;
 				}
 				return attempt;
-			});
+			}, options);
 		} catch (caught) {
 			if (!sawLifecycleConflict || !(caught instanceof NotFoundError)) throw caught;
 			sandboxStatusObservedAt.delete(this);
@@ -6972,6 +6967,7 @@ var SandboxInstance = class SandboxInstance {
 			};
 		}
 		const data = await response.json().catch(() => null);
+		options?.signal?.throwIfAborted();
 		const diagnostics = data ? normalizeStartupDiagnostics(data.startupDiagnostics) : null;
 		if (diagnostics) this.info.startupDiagnostics = diagnostics;
 		sandboxStatusObservedAt.delete(this);
@@ -7124,19 +7120,27 @@ var SandboxInstance = class SandboxInstance {
 		const timeoutMs = options?.timeoutMs ?? 12e4;
 		const pollIntervalMs = options?.pollIntervalMs ?? 2e3;
 		const startTime = Date.now();
+		const timeoutSignal = AbortSignal.timeout(timeoutMs);
+		const signal = options?.signal ? combineAbortSignals([options.signal, timeoutSignal]) : timeoutSignal;
+		const rethrowWaitError = (error) => {
+			if (timeoutSignal.aborted) throw new TimeoutError(timeoutMs, `Timed out waiting for sandbox to reach ${statuses.join(" or ")}`);
+			if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted");
+			throw error;
+		};
 		if (options?.onProgress && (this.status === "provisioning" || this.status === "pending")) try {
-			if (await this.waitForWithSSE(statuses, timeoutMs, options.onProgress, options.signal)) return;
+			if (await this.waitForWithSSE(statuses, timeoutMs, options.onProgress, signal)) return;
 		} catch (err) {
+			if (signal.aborted) rethrowWaitError(err);
 			if (err instanceof StateError || err instanceof TimeoutError) throw err;
 		}
 		if (this.hasFreshStatus() && this.hasReachedWaitTarget(statuses)) return;
 		while (true) {
-			if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted");
-			await this.refresh();
+			if (signal.aborted) rethrowWaitError(signal.reason);
+			await this.refresh(signal).catch(rethrowWaitError);
 			if (this.hasReachedWaitTarget(statuses)) return;
 			if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", this.status);
 			if (Date.now() - startTime > timeoutMs) throw new TimeoutError(timeoutMs, `Timed out waiting for sandbox to reach ${statuses.join(" or ")}`);
-			await this.sleep(pollIntervalMs);
+			await delayUntilAborted(pollIntervalMs, signal).catch(rethrowWaitError);
 		}
 	}
 	/**
@@ -7173,14 +7177,14 @@ var SandboxInstance = class SandboxInstance {
 					timestamp: d.timestamp ?? (/* @__PURE__ */ new Date()).toISOString()
 				});
 			} else if (event.type === "provision_failed") {
-				await this.refresh();
+				await this.refresh(abortController.signal);
 				throw new StateError(event.data.error ?? "Provisioning failed", this.status);
 			} else if (event.type === "provision_complete" || event.type === "status_change") {
-				await this.refresh();
+				await this.refresh(abortController.signal);
 				if (this.hasReachedWaitTarget(statuses)) return true;
 				if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", this.status);
 			}
-			await this.refresh();
+			await this.refresh(abortController.signal);
 			if (this.hasReachedWaitTarget(statuses)) return true;
 			if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", this.status);
 			if (statuses.includes("running") && this.status === "running") return false;
@@ -7632,9 +7636,9 @@ var SandboxInstance = class SandboxInstance {
 	* Drive a detached turn forward by exactly one settle → poll → dispatch
 	* pass and report where it stands. Built for tick-based callers —
 	* Cloudflare Workflows steps, queue consumers, crons — that re-invoke
-	* on their own schedule instead of holding a stream open. One
-	* invocation never loops, never sleeps, and never keeps a connection
-	* alive past the pass.
+	* on their own schedule instead of holding a stream open.
+	* The pass does not poll repeatedly or keep a connection alive.
+	* Session admission may retry one classified pre-dispatch credential refusal.
 	*
 	* The pass resolves to the first of:
 	*   1. The completed-turn cache has `turnId` → `completed`, or `failed`
@@ -7659,7 +7663,7 @@ var SandboxInstance = class SandboxInstance {
 		if (turn) return settleTurnDrive(turn.result);
 		const info = await this._sessionStatus(opts.sessionId);
 		const hasExplicitBackend = opts.backend !== void 0 || opts.model !== void 0;
-		const backend = applyRequestedModel(opts.backend ?? this.defaultRuntimeBackend, opts.model);
+		const backend = applyRequestedModel(mergeRuntimeBackendConfig(this.defaultRuntimeBackend, opts.backend), opts.model);
 		if (info?.status === "queued" && hasExplicitBackend) await this.createSession({
 			sessionId: opts.sessionId,
 			...backend !== void 0 ? { backend } : {}

package/dist/{sandbox-DQmu7a6M.d.ts → sandbox-C8xeDrlS.d.ts}

@@ -1,6 +1,6 @@
-import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-5GNLCsms.js";
-import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, s as InteractiveSessionControlTransport } from "./browser-interactive-control-controller-lRfzpg9t.js";
-import { $ as DurablePlanDecisionResult, A as CommitTaskSessionOptions, Ai as SnapshotInfo, B as CreateTaskSessionOptions, C as BranchOptions, Ci as SessionMessage, D as CodeExecutionResult, Di as SnapshotDeleteAcknowledgement, E as CodeExecutionOptions, Fn as ProvisionEvent, G as DispatchedSession, Gi as TeeAttestationResponse, Gr as SandboxResourceUsage, Gt as GitStatus, Ht as GitCommit, In as ProvisionResult, It as ForkCounts, J as DriveTurnOptions, Jn as RestoreSnapshotOptions, Jr as SandboxRuntimeHealth, Kt as GpuLease, Lt as ForkIdempotency, Mi as SnapshotResult, Mn as PromptInputPart, Nn as PromptOptions, O as CodeLanguage, On as ProcessManager, Pi as StartupDiagnostics, Pn as PromptResult, Q as DurablePlan, Qn as RolloutOptions, Ri as TaskSessionChanges, Rt as ForkLookupOptions, Si as SessionListOptions, Sn as PreviewLinkManager, Ti as SessionResultOptions, Ui as TeeAttestationOptions, Ur as SandboxPortBinding, Vi as TaskSessionInfo, Vr as SandboxInfo, Vt as GitBranch, W as DispatchPromptOptions, Wt as GitDiff, X as DriverInfo, Xi as TurnDriveResult, Xn as Rollout, Xr as SandboxTerminalAttachOptions, Yn as ResumeOptions, Yr as SandboxStatus, Zt as GpuLeaseManager, _n as NetworkManager, aa as WriteManyFile, ai as SandboxTraceOptions, an as IntelligenceReportCompareTo, at as EgressManager, bi as SessionInfo, bn as PermissionsManager, ci as SearchOptions, cn as JsonValue, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, di as SendSessionMessageOptions, dt as ExecResult, er as RolloutStartResult, fi as SendSessionMessageRequest, fr as SandboxEvent, gi as SessionExecutionInfo, hi as SessionEventStreamOptions, ia as WriteFileOptions, in as IntelligenceReportBudget, ir as SSHCredentials, j as CompletedTurnResult, ji as SnapshotOptions, jr as SandboxFleetTraceBundle, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, na as WaitForRolloutOptions, ni as SandboxTraceBundle, nn as InstalledTool, oa as WriteManyOptions, or as SandboxConnection, p as BackendManager, pi as SentSessionMessage, qi as TeePublicKeyResponse, qr as SandboxRuntimeCapabilities, ra as WorkspaceOperationLookup, rn as IntelligenceReport, rr as SSHCommandDescriptor, si as SearchMatch, sn as IntelligenceReportWindow, ta as WaitForOptions, ti as SandboxTerminals, ut as ExecOptions, vt as FileSystem, wt as FileWriteResult, xi as SessionInterruptOptions, yi as SessionForkOptions, z as CreateSessionOptions, zi as TaskSessionCommitResult } from "./types-DTDI3kek.js";
+import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-CcaBTVg3.js";
+import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, s as InteractiveSessionControlTransport } from "./browser-interactive-control-controller-BELrFH4f.js";
+import { $ as DurablePlanDecisionResult, A as CommitTaskSessionOptions, Ai as SnapshotInfo, B as CreateTaskSessionOptions, C as BranchOptions, Ci as SessionMessage, D as CodeExecutionResult, Di as SnapshotDeleteAcknowledgement, E as CodeExecutionOptions, Fn as ProvisionEvent, G as DispatchedSession, Gi as TeeAttestationResponse, Gr as SandboxResourceUsage, Gt as GitStatus, Ht as GitCommit, In as ProvisionResult, It as ForkCounts, J as DriveTurnOptions, Jn as RestoreSnapshotOptions, Jr as SandboxRuntimeHealth, Kt as GpuLease, Lt as ForkIdempotency, Mi as SnapshotResult, Mn as PromptInputPart, Nn as PromptOptions, O as CodeLanguage, On as ProcessManager, Pi as StartupDiagnostics, Pn as PromptResult, Q as DurablePlan, Qn as RolloutOptions, Ri as TaskSessionChanges, Rt as ForkLookupOptions, Si as SessionListOptions, Sn as PreviewLinkManager, Ti as SessionResultOptions, Ui as TeeAttestationOptions, Ur as SandboxPortBinding, Vi as TaskSessionInfo, Vr as SandboxInfo, Vt as GitBranch, W as DispatchPromptOptions, Wt as GitDiff, X as DriverInfo, Xi as TurnDriveResult, Xn as Rollout, Xr as SandboxTerminalAttachOptions, Yn as ResumeOptions, Yr as SandboxStatus, Zt as GpuLeaseManager, _n as NetworkManager, aa as WriteManyFile, ai as SandboxTraceOptions, an as IntelligenceReportCompareTo, at as EgressManager, bi as SessionInfo, bn as PermissionsManager, ci as SearchOptions, cn as JsonValue, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, di as SendSessionMessageOptions, dt as ExecResult, er as RolloutStartResult, fi as SendSessionMessageRequest, fr as SandboxEvent, gi as SessionExecutionInfo, hi as SessionEventStreamOptions, ia as WriteFileOptions, in as IntelligenceReportBudget, ir as SSHCredentials, j as CompletedTurnResult, ji as SnapshotOptions, jr as SandboxFleetTraceBundle, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, na as WaitForRolloutOptions, ni as SandboxTraceBundle, nn as InstalledTool, oa as WriteManyOptions, or as SandboxConnection, p as BackendManager, pi as SentSessionMessage, qi as TeePublicKeyResponse, qr as SandboxRuntimeCapabilities, ra as WorkspaceOperationLookup, rn as IntelligenceReport, rr as SSHCommandDescriptor, si as SearchMatch, sn as IntelligenceReportWindow, ta as WaitForOptions, ti as SandboxTerminals, ut as ExecOptions, vt as FileSystem, wt as FileWriteResult, xi as SessionInterruptOptions, yi as SessionForkOptions, z as CreateSessionOptions, zi as TaskSessionCommitResult } from "./types-BZuZPQ0N.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -142,13 +142,13 @@ declare const interactionResolutionAcknowledgementSchema: z.ZodObject<{
   delivered: z.ZodBoolean;
   resolvedAt: z.ZodString;
   binding: z.ZodOptional<z.ZodObject<{
-    requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
     runId: z.ZodString;
     provider: z.ZodString;
     environmentId: z.ZodString;
     sessionId: z.ZodString;
     executionId: z.ZodString;
     interactionId: z.ZodString;
+    requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
   }, z.core.$strict>>;
 }, z.core.$strict>;
 type InteractionResolutionAcknowledgement = z.infer<typeof interactionResolutionAcknowledgementSchema>;
@@ -1721,7 +1721,7 @@ declare class SandboxInstance {
    * {@link startupDiagnostics} returns it for post-mortem reads on the
    * now-gone sandbox.
    */
-  delete(): Promise<SandboxDeleteAcknowledgement>;
+  delete(options?: Pick<ResumeOptions, "signal">): Promise<SandboxDeleteAcknowledgement>;
   /**
    * Read a lifecycle response body once.
    *
@@ -1942,9 +1942,9 @@ declare class SandboxInstance {
    * Drive a detached turn forward by exactly one settle → poll → dispatch
    * pass and report where it stands. Built for tick-based callers —
    * Cloudflare Workflows steps, queue consumers, crons — that re-invoke
-   * on their own schedule instead of holding a stream open. One
-   * invocation never loops, never sleeps, and never keeps a connection
-   * alive past the pass.
+   * on their own schedule instead of holding a stream open.
+   * The pass does not poll repeatedly or keep a connection alive.
+   * Session admission may retry one classified pre-dispatch credential refusal.
    *
    * The pass resolves to the first of:
    *   1. The completed-turn cache has `turnId` → `completed`, or `failed`

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TangleSandboxClientConfig, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../index-D3h0zRzl.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TangleSandboxClientConfig, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../index-hYNUMvGr.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as JsonResponseParamTypes, d as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as SandboxCreateParamTypes, n as JOB_SANDBOX_CREATE, o as AgentSandboxBlueprintAbi, r as JOB_SANDBOX_DELETE, s as ITangleJobsAbi, t as TangleSandboxClient, u as SandboxCreateResponseParamTypes } from "../tangle-B0p39vvV.js";
+import { a as TANGLE_JOBS_CONTRACT, c as JsonResponseParamTypes, d as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as SandboxCreateParamTypes, n as JOB_SANDBOX_CREATE, o as AgentSandboxBlueprintAbi, r as JOB_SANDBOX_DELETE, s as ITangleJobsAbi, t as TangleSandboxClient, u as SandboxCreateResponseParamTypes } from "../tangle-Dn2pS3TZ.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient };

package/dist/{tangle-B0p39vvV.js → tangle-Dn2pS3TZ.js}

@@ -1,5 +1,5 @@
-import { h as parseErrorResponse } from "./errors-MMMPY4T6.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-CzBWptVE.js";
+import { h as parseErrorResponse } from "./errors-V6uPkjfJ.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-BFZa_Gx-.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-DTDI3kek.d.ts → types-BZuZPQ0N.d.ts}

@@ -1,6 +1,6 @@
-import { r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-5GNLCsms.js";
+import { r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-CcaBTVg3.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
-import { AgentExactRunControlRef, AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileValidationResult, HarnessType, ReasoningEffort } from "@tangle-network/agent-interface";
+import { AgentExactRunControlRef, AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileValidationResult, AgentRuntimeAttachments, HarnessType, ReasoningEffort } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
 //#region ../../../packages/runtime-contracts/dist/backend-types.d.ts
@@ -1515,12 +1515,14 @@ interface CreateSandboxOptions {
   /** Environment variables injected into the sandbox */
   env?: Record<string, string>;
   /**
-   * Maximum sandbox lifetime in seconds.
+   * Maximum continuous runtime in seconds for each create or resume interval.
    *
    * On expiry the sandbox is SUSPENDED, not deleted: the container stops and
    * the workspace is preserved, with a best-effort pre-suspend snapshot when
    * the platform has snapshots enabled. It can be resumed for as long as it
-   * stays suspended; once the cold window also elapses (6 hours by default)
+   * stays suspended. Resume starts a new runtime interval with the same limit;
+   * reads, connections, and activity do not extend that interval.
+   * Once the cold window also elapses (6 hours by default)
    * the container is reclaimed, and bringing the preserved workspace back is
    * a re-provision against the same ref rather than a resume. Drivers with a
    * create/delete-only lifecycle (`driver: "tangle"`) skip the suspend
@@ -2192,6 +2194,8 @@ interface ExecResult {
  * The command inherits the sandbox runtime environment.
  */
 interface ExecOptions {
+  /** Cancel readiness checks and the command request; the server timeout still bounds the process. */
+  signal?: AbortSignal;
   /** Working directory for the command. It must resolve within the active
    *  workspace; paths outside that boundary are rejected. When `sessionId`
    *  is set, the runtime resolves the path against that task's isolated
@@ -2537,6 +2541,8 @@ interface PromptOptions {
    *
    * Set `backend.model` for a model override and `backend.profile` for an
    * inline provider-neutral `AgentProfile`.
+   * Same-runtime overrides retain unspecified defaults. Changing the harness,
+   * provider, or base URL replaces the default backend configuration.
    */
   backend?: Partial<BackendConfig>;
   /** Timeout in milliseconds */
@@ -4600,6 +4606,8 @@ interface McpServerConfig {
  * ```
  */
 interface BackendConfig {
+  /** Runtime MCP bindings, separate from the authored profile. Headers may use secret references. */
+  runtimeAttachments?: AgentRuntimeAttachments;
   /** Backend type identifier. Defaults to the platform's configured backend. */
   type?: BackendType;
   /**
@@ -6045,8 +6053,9 @@ interface FileSystem {
   search(query: string, options?: SearchOptions): AsyncIterable<SearchMatch>;
   /**
    * Upload a local file to the sandbox.
-   * Handles binary files correctly using multipart upload.
+   * Uses checksum-verified chunked upload through gateway or direct connections.
    * Creates parent directories as needed.
+   * The upload session limit also applies to local files.
    *
    * @param localPath - Path to local file
    * @param remotePath - Destination path in sandbox

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.38.2",
+  "version": "0.39.1-develop.20260912191433.b31d83f",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -96,7 +96,7 @@
   },
   "dependencies": {
     "@tangle-network/agent-core": "^0.9.6",
-    "@tangle-network/agent-interface": "^2.0.0",
+    "@tangle-network/agent-interface": "^2.6.1",
     "zod": "4.5.4"
   },
   "peerDependencies": {
@@ -135,10 +135,11 @@
     "vitest": "^4.1.5",
     "ws": "^8.20.0",
     "yjs": "13.6.30",
-    "@tangle-network/cli-agent-registry": "0.3.15",
+    "@tangle-network/agent-profile-materialize": "0.20.0",
     "@repo/shared": "0.0.0",
-    "@tangle-network/runtime-contracts": "0.6.5",
-    "@tangle-network/sse-core": "0.0.0"
+    "@tangle-network/sse-core": "0.0.0",
+    "@tangle-network/runtime-contracts": "0.6.6",
+    "@tangle-network/cli-agent-registry": "0.4.0"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",