@tangle-network/sandbox 0.41.1 → 0.43.0

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-JroyQLqr.js";
-import { D as CodeExecutionResult, E as CodeExecutionOptions, O as CodeLanguage, Si as SessionInfo, d as BackendConfig, k as CodeResultPart, wi as SessionListOptions } from "../types-kuhJ-qiu.js";
-import { i as Sandbox } from "../client-DtgNF8r5.js";
+import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-DVJ-rfdd.js";
+import { D as CodeExecutionResult, E as CodeExecutionOptions, O as CodeLanguage, Si as SessionInfo, d as BackendConfig, k as CodeResultPart, wi as SessionListOptions } from "../types-DKtPjwgd.js";
+import { i as Sandbox } from "../client-Bd-hvjk_.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/instances.d.ts

package/dist/agent/index.js

@@ -1,7 +1,7 @@
-import { f as assertCurrentBackendType } from "../runtime-api-BWVLRX-H.js";
-import { f as StateError, m as ValidationError, s as NotFoundError } from "../errors-yyl3f2Fc.js";
-import { n as Sandbox } from "../client-qxRXUqTJ.js";
-import { t as SandboxInstance } from "../sandbox-CBwyDWgd.js";
+import { f as assertCurrentBackendType } from "../runtime-api-BpOFn4cB.js";
+import { c as NotFoundError, h as ValidationError, p as StateError } from "../errors-CdDyExth.js";
+import { n as Sandbox } from "../client-DuC9Z9zp.js";
+import { t as SandboxInstance } from "../sandbox-CWoNC94K.js";
 import { createRequire } from "node:module";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/{agent-run-outcome-Cli3lQEp.d.ts → agent-run-outcome-BSZbRoHp.d.ts}

@@ -1,4 +1,4 @@
-import { a as AgentQuestionRequest, et as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, pr as SandboxEvent, s as AgentToolInvocation } from "./types-kuhJ-qiu.js";
+import { a as AgentQuestionRequest, et as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, pr as SandboxEvent, s as AgentToolInvocation } from "./types-DKtPjwgd.js";
 import { InteractionRequest } from "@tangle-network/agent-interface";
 
 //#region src/agent-run-outcome.d.ts

package/dist/{client-DtgNF8r5.d.ts → client-Bd-hvjk_.d.ts}

@@ -1,6 +1,6 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-JroyQLqr.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-DVJ-rfdd.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-CcaBTVg3.js";
-import { At as FleetDriveTurnRequest, Bn as PublicTemplateVersionInfo, Br as SandboxFleetWorkspaceSnapshotResult, Dr as SandboxFleetManifest, Dt as FleetDispatchResultBufferOptions, Et as FleetDispatchResultBuffer, F as CreateSandboxFleetOptions, Fi as SshKeysManager, Fr as SandboxFleetTraceOptions, Ft as FleetPromptDispatchResult, Gn as ReconcileSandboxFleetsOptions, Hn as PublishPublicTemplateVersionOptions, Hr as SandboxInfo, I as CreateSandboxFleetTokenOptions, Ir as SandboxFleetUsage, Kn as ReconcileSandboxFleetsResult, L as CreateSandboxFleetWithCoordinatorOptions, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, Mt as FleetExecDispatchResult, N as CreateIntelligenceReportOptions, Nn as PromptOptions, Nt as FleetMachineId, Ot as FleetDispatchStreamOptions, P as CreateRequestOptions, Pn as PromptResult, Pt as FleetPromptDispatchOptions, R as CreateSandboxOptions, Rr as SandboxFleetWorkspaceReconcileResult, Tr as SandboxFleetMachineRecord, Tt as FleetDispatchCancelResult, Un as ReapExpiredSandboxFleetsOptions, Vn as PublishPublicTemplateOptions, Vr as SandboxIdentity, Wn as ReapExpiredSandboxFleetsResult, Xi as TokenRefreshHandler, an as IntelligenceReportCompareTo, ar as SandboxConfig, b as BatchRunRequest, dn as ListSandboxFleetOptions, dt as ExecResult, fi as SecretsManager, fn as ListSandboxOptions, fr as SandboxEnvironment, gr as SandboxFleetCostEstimate, hr as SandboxFleetArtifactSpec, in as IntelligenceReportBudget, jr as SandboxFleetToken, jt as FleetExecDispatchOptions, kr as SandboxFleetOperationsSummary, kt as FleetDriveTurnOutcome, l as AttachSandboxFleetMachineOptions, mr as SandboxFleetArtifact, na as UsageInfo, rn as IntelligenceReport, sn as IntelligenceReportWindow, ua as BatchEvent, ut as ExecOptions, v as BatchResult, vr as SandboxFleetDispatchResponse, xr as SandboxFleetInfo, y as BatchRunOptions, yr as SandboxFleetDriverCapability, zi as SubscriptionInfo, zn as PublicTemplateInfo, zr as SandboxFleetWorkspaceRestoreResult } from "./types-kuhJ-qiu.js";
+import { At as FleetDriveTurnRequest, Bn as PublicTemplateVersionInfo, Br as SandboxFleetWorkspaceSnapshotResult, Dr as SandboxFleetManifest, Dt as FleetDispatchResultBufferOptions, Et as FleetDispatchResultBuffer, F as CreateSandboxFleetOptions, Fi as SshKeysManager, Fr as SandboxFleetTraceOptions, Ft as FleetPromptDispatchResult, Gn as ReconcileSandboxFleetsOptions, Hn as PublishPublicTemplateVersionOptions, Hr as SandboxInfo, I as CreateSandboxFleetTokenOptions, Ir as SandboxFleetUsage, Kn as ReconcileSandboxFleetsResult, L as CreateSandboxFleetWithCoordinatorOptions, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, Mt as FleetExecDispatchResult, N as CreateIntelligenceReportOptions, Nn as PromptOptions, Nt as FleetMachineId, Ot as FleetDispatchStreamOptions, P as CreateRequestOptions, Pn as PromptResult, Pt as FleetPromptDispatchOptions, R as CreateSandboxOptions, Rr as SandboxFleetWorkspaceReconcileResult, Tr as SandboxFleetMachineRecord, Tt as FleetDispatchCancelResult, Un as ReapExpiredSandboxFleetsOptions, Vn as PublishPublicTemplateOptions, Vr as SandboxIdentity, Wn as ReapExpiredSandboxFleetsResult, Xi as TokenRefreshHandler, an as IntelligenceReportCompareTo, ar as SandboxConfig, b as BatchRunRequest, dn as ListSandboxFleetOptions, dt as ExecResult, fi as SecretsManager, fn as ListSandboxOptions, fr as SandboxEnvironment, gr as SandboxFleetCostEstimate, hr as SandboxFleetArtifactSpec, in as IntelligenceReportBudget, jr as SandboxFleetToken, jt as FleetExecDispatchOptions, kr as SandboxFleetOperationsSummary, kt as FleetDriveTurnOutcome, l as AttachSandboxFleetMachineOptions, mr as SandboxFleetArtifact, na as UsageInfo, rn as IntelligenceReport, sn as IntelligenceReportWindow, ua as BatchEvent, ut as ExecOptions, v as BatchResult, vr as SandboxFleetDispatchResponse, xr as SandboxFleetInfo, y as BatchRunOptions, yr as SandboxFleetDriverCapability, zi as SubscriptionInfo, zn as PublicTemplateInfo, zr as SandboxFleetWorkspaceRestoreResult } from "./types-DKtPjwgd.js";
 import { AgentInteractiveSessionRef } from "@tangle-network/agent-interface";
 import { z } from "zod";
 

package/dist/{client-qxRXUqTJ.js → client-DuC9Z9zp.js}

@@ -1,7 +1,7 @@
-import { c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, l as encodeTextForWire, m as normalizeRuntimeBackendConfig, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, u as parseSSEStream, y as backendTypeSchema } from "./runtime-api-BWVLRX-H.js";
-import { c as PartialFailureError, d as ServerError, h as parseErrorResponse, m as ValidationError, o as NetworkError, p as TimeoutError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-yyl3f2Fc.js";
+import { c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, l as encodeTextForWire, m as normalizeRuntimeBackendConfig, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, u as parseSSEStream, y as backendTypeSchema } from "./runtime-api-BpOFn4cB.js";
+import { c as NotFoundError, d as SandboxError, f as ServerError, g as parseErrorResponse, h as ValidationError, l as PartialFailureError, m as TimeoutError, s as NetworkError, t as AuthError } from "./errors-CdDyExth.js";
 import { n as combineAbortSignals } from "./abort-signal-si1WMfJb.js";
-import { E as normalizeConnection, O as exportTraceBundle, b as requestInteractiveSessionToken, i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt } from "./sandbox-CBwyDWgd.js";
+import { E as normalizeConnection, O as exportTraceBundle, b as requestInteractiveSessionToken, i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt } from "./sandbox-CWoNC94K.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/backend-registry.ts
@@ -1987,6 +1987,23 @@ const PROFILE_FILE_MOUNT_MAX_RETRIES = 4;
 const PROFILE_FILE_MOUNT_RETRY_BASE_MS = 250;
 const PROFILE_FILE_MOUNT_RETRY_MAX_MS = 2e3;
 const PROFILE_FILE_MOUNT_EXEC_TIMEOUT_MS = 3e4;
+/**
+* Wall-clock ceiling for retrying one file API batch write that got no decided
+* answer, waits included. A gateway can answer 502 after waiting out its own
+* 3 s key-verification budget, so this admits about three such attempts: it
+* rides out a stall of a few seconds without holding create() through a
+* platform restart, which the caller is better told about.
+*/
+const PROFILE_FILE_MOUNT_WRITE_RETRY_BUDGET_MS = 1e4;
+/**
+* Answers that decided nothing about the write: the gateway or proxy in front
+* of the sandbox runtime answered for it, so the write may never have run.
+*/
+const UNDECIDED_WRITE_STATUSES = new Set([
+	502,
+	503,
+	504
+]);
 const PROFILE_FILE_MOUNT_PACE_MS = 0;
 const PROFILE_BIN_DIR_RE = /(^|\/)(s?bin)\//;
 const PROFILE_AGENT_HOME = ["/home", "agent"].join("/");
@@ -2220,6 +2237,32 @@ function transientExecError(err) {
 	};
 	return { retryable: false };
 }
+function isUndecidedWriteFailure(err) {
+	if (err instanceof NetworkError) return true;
+	if (!err || typeof err !== "object") return false;
+	const status = errorStatus(err);
+	return status !== void 0 && UNDECIDED_WRITE_STATUSES.has(status);
+}
+/**
+* Run one file API batch write, sending it again after an undecided answer.
+*
+* Only a batch without write preconditions comes here, so a repeat after a
+* write that did land leaves the same files with the same content and mode.
+* A decided refusal is thrown at once. Retries stop at `maxRetries`, or when
+* the next attempt would start past {@link PROFILE_FILE_MOUNT_WRITE_RETRY_BUDGET_MS}.
+*/
+async function writeBatchRidingOutUndecided(write, maxRetries) {
+	const startedAt = Date.now();
+	for (let attempt = 0;; attempt += 1) try {
+		await write();
+		return;
+	} catch (err) {
+		if (!isUndecidedWriteFailure(err) || attempt >= maxRetries) throw err;
+		const waitMs = retryAfterMs(err) ?? Math.min(PROFILE_FILE_MOUNT_RETRY_BASE_MS * 2 ** attempt, PROFILE_FILE_MOUNT_RETRY_MAX_MS);
+		if (Date.now() - startedAt + waitMs >= PROFILE_FILE_MOUNT_WRITE_RETRY_BUDGET_MS) throw err;
+		await sleep(waitMs);
+	}
+}
 async function sha256Hex(content) {
 	const bytes = new TextEncoder().encode(content);
 	const webSubtle = globalThis.crypto?.subtle;
@@ -2321,30 +2364,33 @@ async function materializeProfileFileMounts(box, files, options = {}) {
 		});
 	}
 	if (viaFileApi.length > 0) try {
-		await fs?.writeMany(viaFileApi, {
+		await writeBatchRidingOutUndecided(async () => fs?.writeMany(viaFileApi, {
 			paceMs,
 			maxRetries
-		});
+		}), maxRetries);
 	} catch (err) {
 		throw new Error("materializeProfileFileMounts: file API batch write failed", { cause: err });
 	}
 	let homeFilesWrittenByApi = 0;
-	if (viaHomeFileApi.length > 0) try {
-		await fs?.writeMany(viaHomeFileApi.map(({ path, content, mode }) => ({
+	if (viaHomeFileApi.length > 0) {
+		const homeWrites = viaHomeFileApi.map(({ path, content, mode }) => ({
 			path,
 			content,
 			...mode !== void 0 ? { mode } : {}
-		})), {
-			paceMs,
-			maxRetries
-		});
-		homeFilesWrittenByApi = viaHomeFileApi.length;
-	} catch (err) {
-		if (!isFileApiRootOnlyError(err)) throw new Error("materializeProfileFileMounts: home file API batch write failed", { cause: err });
-		viaExec.push(...viaHomeFileApi.map(({ mount, content }) => ({
-			mount,
-			content
-		})));
+		}));
+		try {
+			await writeBatchRidingOutUndecided(async () => fs?.writeMany(homeWrites, {
+				paceMs,
+				maxRetries
+			}), maxRetries);
+			homeFilesWrittenByApi = viaHomeFileApi.length;
+		} catch (err) {
+			if (!isFileApiRootOnlyError(err)) throw new Error("materializeProfileFileMounts: home file API batch write failed", { cause: err });
+			viaExec.push(...viaHomeFileApi.map(({ mount, content }) => ({
+				mount,
+				content
+			})));
+		}
 	}
 	if (viaUpload.length > 0) {
 		if (typeof uploadDataFn !== "function") throw new Error("materializeProfileFileMounts: viaUpload entries exist but fs.uploadData is unavailable");

package/dist/collaboration/index.js

@@ -1,2 +1,2 @@
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-g2l-dEXt.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-DilBgjXG.js";
 export { CollaborationClient, CollaborationFileBridge, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/{collaboration-g2l-dEXt.js → collaboration-DilBgjXG.js}

@@ -1,4 +1,4 @@
-import { h as parseErrorResponse, o as NetworkError, p as TimeoutError } from "./errors-yyl3f2Fc.js";
+import { g as parseErrorResponse, m as TimeoutError, s as NetworkError } from "./errors-CdDyExth.js";
 //#region src/collaboration/client.ts
 const DEFAULT_TIMEOUT_MS = 3e4;
 function normalizeBaseUrl(url) {

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-JroyQLqr.js";
-import { Cn as PreviewLinkWaitOptions, Hr as SandboxInfo, Mn as PromptInputPart, R as CreateSandboxOptions, Sn as PreviewLinkManager, Zr as SandboxStatus, ar as SandboxConfig, dt as ExecResult, gn as NetworkConfig, ut as ExecOptions, xn as PreviewLinkInfo } from "./types-kuhJ-qiu.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-DtgNF8r5.js";
-import { a as FileWriteConflictError, c as PartialFailureError, d as SandboxErrorJson, f as SandboxFailureDetail, g as ValidationError, h as TimeoutError, l as QuotaError, m as StateError, n as CapabilityError, o as NetworkError, p as ServerError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-A7Quee1Y.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-DVJ-rfdd.js";
+import { Cn as PreviewLinkWaitOptions, Hr as SandboxInfo, Mn as PromptInputPart, R as CreateSandboxOptions, Sn as PreviewLinkManager, Zr as SandboxStatus, ar as SandboxConfig, dt as ExecResult, gn as NetworkConfig, ut as ExecOptions, xn as PreviewLinkInfo } from "./types-DKtPjwgd.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-Bd-hvjk_.js";
+import { _ as ValidationError, a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as SandboxErrorJson, g as TimeoutError, h as StateError, l as PartialFailureError, m as ServerError, n as CapabilityError, p as SandboxFailureDetail, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-BoD3Ifbd.js";
 export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { a as FileWriteConflictError, c as PartialFailureError, d as ServerError, f as StateError, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-yyl3f2Fc.js";
-import { _ as parseBackendRegistryResponse, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-qxRXUqTJ.js";
-import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-CBwyDWgd.js";
+import { a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as ServerError, h as ValidationError, l as PartialFailureError, m as TimeoutError, n as CapabilityError, p as StateError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
+import { _ as parseBackendRegistryResponse, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-DuC9Z9zp.js";
+import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-CWoNC94K.js";
 export { AuthError, CapabilityError, FileWriteConflictError, NetworkError, NotFoundError, PartialFailureError, QuotaError, Sandbox, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/{errors-A7Quee1Y.d.ts → errors-BoD3Ifbd.d.ts}

@@ -138,6 +138,34 @@ declare class FileWriteConflictError extends SandboxError {
   readonly expectedHash?: string;
   constructor(message: string, path: string, expectedHash: string | undefined, currentHash: string | null, currentMtime: number | null, metadata?: SandboxErrorMetadata);
 }
+/**
+ * The Platform key funding the request has no lifetime budget left.
+ *
+ * A budgeted key funds any number of sandboxes until its budget is spent;
+ * then every create, resume, and model credential it funds is refused with
+ * this error. The refusal is decided: retrying cannot succeed until the
+ * budget is raised or another key is used, so the SDK never retries it.
+ */
+declare class KeyBudgetExhaustedError extends SandboxError {
+  /**
+   * The key the refusal names: the budgeted key with nothing left when
+   * Platform refused a delegation, or the presented key when authentication
+   * refused it. Absent when the server named none.
+   */
+  readonly keyId?: string;
+  /** That key's lifetime budget, in USD, when Platform reported it. */
+  readonly budgetUsd?: number;
+  /** What that key has spent, in USD. */
+  readonly spentUsd?: number;
+  /** What that key has reserved for budgeted children, in USD. */
+  readonly reservedUsd?: number;
+  constructor(message: string, details?: {
+    keyId?: string;
+    budgetUsd?: number;
+    spentUsd?: number;
+    reservedUsd?: number;
+  }, metadata?: SandboxErrorMetadata);
+}
 declare class EgressProxyRecoveryError extends SandboxError {
   readonly phase: "egress_proxy_recovery";
   constructor(message: string, metadata?: SandboxErrorMetadata);
@@ -188,4 +216,4 @@ declare class ServerError extends SandboxError {
   constructor(message: string, status?: number, metadata?: SandboxErrorMetadata, code?: string);
 }
 //#endregion
-export { FileWriteConflictError as a, PartialFailureError as c, SandboxErrorJson as d, SandboxFailureDetail as f, ValidationError as g, TimeoutError as h, EgressProxyRecoveryError as i, QuotaError as l, StateError as m, CapabilityError as n, NetworkError as o, ServerError as p, EdgeNotReadyError as r, NotFoundError as s, AuthError as t, SandboxError as u };
+export { ValidationError as _, FileWriteConflictError as a, NotFoundError as c, SandboxError as d, SandboxErrorJson as f, TimeoutError as g, StateError as h, EgressProxyRecoveryError as i, PartialFailureError as l, ServerError as m, CapabilityError as n, KeyBudgetExhaustedError as o, SandboxFailureDetail as p, EdgeNotReadyError as r, NetworkError as s, AuthError as t, QuotaError as u };

package/dist/{errors-yyl3f2Fc.js → errors-CdDyExth.js}

@@ -172,6 +172,36 @@ var FileWriteConflictError = class extends SandboxError {
 		if (expectedHash !== void 0) this.expectedHash = expectedHash;
 	}
 };
+/**
+* The Platform key funding the request has no lifetime budget left.
+*
+* A budgeted key funds any number of sandboxes until its budget is spent;
+* then every create, resume, and model credential it funds is refused with
+* this error. The refusal is decided: retrying cannot succeed until the
+* budget is raised or another key is used, so the SDK never retries it.
+*/
+var KeyBudgetExhaustedError = class extends SandboxError {
+	/**
+	* The key the refusal names: the budgeted key with nothing left when
+	* Platform refused a delegation, or the presented key when authentication
+	* refused it. Absent when the server named none.
+	*/
+	keyId;
+	/** That key's lifetime budget, in USD, when Platform reported it. */
+	budgetUsd;
+	/** What that key has spent, in USD. */
+	spentUsd;
+	/** What that key has reserved for budgeted children, in USD. */
+	reservedUsd;
+	constructor(message, details = {}, metadata) {
+		super(message, "KEY_BUDGET_EXHAUSTED", 402, metadata);
+		this.name = "KeyBudgetExhaustedError";
+		this.keyId = details.keyId;
+		this.budgetUsd = details.budgetUsd;
+		this.spentUsd = details.spentUsd;
+		this.reservedUsd = details.reservedUsd;
+	}
+};
 var EgressProxyRecoveryError = class extends SandboxError {
 	phase;
 	constructor(message, metadata) {
@@ -292,6 +322,18 @@ function asErrorCode(value) {
 function isFailureDetail(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function finiteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function readKeyBudgetDetails(value) {
+	if (!isFailureDetail(value)) return {};
+	return {
+		keyId: asString(value.keyId),
+		budgetUsd: finiteNumber(value.budgetUsd),
+		spentUsd: finiteNumber(value.spentUsd),
+		reservedUsd: finiteNumber(value.reservedUsd)
+	};
+}
 function readCapability(data, errorObj) {
 	const nested = typeof errorObj === "object" && errorObj !== null ? asString(errorObj.capability) : void 0;
 	return asString(data.capability) ?? nested;
@@ -359,6 +401,7 @@ function parseErrorResponse(status, body, context, headers) {
 	if (isCapabilityCode(code)) return new CapabilityError(message, code, status, metadata, readCapability(data, errorObj));
 	if (isPartialFailureCode(code)) return new PartialFailureError(message, code, status, metadata, readFailures(data, errorObj));
 	if (code === "EGRESS_PROXY_RECOVERY_REQUIRED") return new EgressProxyRecoveryError(message, metadata);
+	if (code === "KEY_BUDGET_EXHAUSTED") return new KeyBudgetExhaustedError(message, readKeyBudgetDetails(data.details), metadata);
 	if (code === "FILE_WRITE_CONFLICT") {
 		const conflict = readFileWriteConflictDetails(errorObj);
 		if (!conflict) return new ServerError(`${message}: malformed FILE_WRITE_CONFLICT response`, 502, metadata, "INVALID_ERROR_RESPONSE");
@@ -378,4 +421,4 @@ function parseErrorResponse(status, body, context, headers) {
 	}
 }
 //#endregion
-export { FileWriteConflictError as a, PartialFailureError as c, ServerError as d, StateError as f, parseErrorResponse as h, EgressProxyRecoveryError as i, QuotaError as l, ValidationError as m, CapabilityError as n, NetworkError as o, TimeoutError as p, EdgeNotReadyError as r, NotFoundError as s, AuthError as t, SandboxError as u };
+export { FileWriteConflictError as a, NotFoundError as c, SandboxError as d, ServerError as f, parseErrorResponse as g, ValidationError as h, EgressProxyRecoveryError as i, PartialFailureError as l, TimeoutError as m, CapabilityError as n, KeyBudgetExhaustedError as o, StateError as p, EdgeNotReadyError as r, NetworkError as s, AuthError as t, QuotaError as u };

package/dist/{index-kCpLmOmn.d.ts → index-BpO7MMIC.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-JroyQLqr.js";
-import { R as CreateSandboxOptions } from "./types-kuhJ-qiu.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-DVJ-rfdd.js";
+import { R as CreateSandboxOptions } from "./types-DKtPjwgd.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,13 +1,13 @@
-import { $ as SandboxMcpEndpoint, A as InterruptResult, B as InteractiveAttachRequest, C as InteractiveSessionHost, D as InteractiveSessionStartOptions, E as InteractiveSessionRef, F as InteractiveTerminalMetadata, G as SandboxInteractionConflict, H as InteractiveSessionControllerOptions, I as createInteractiveTerminalCapture, J as BuildControlPlaneMcpConfigOptions, K as SandboxInteractionResolution, L as createInteractiveTerminalSession, M as agentInteractiveSessionPromptRequestDigest, N as InteractiveTerminalCapture, O as InteractiveSessionStartResult, P as InteractiveTerminalFrameLog, Q as SandboxMcpConfig, R as BrowserInteractiveSessionController, S as InteractiveSessionHandleOptions, T as InteractiveSessionInfo, U as InteractiveSessionControllerTransport, V as InteractiveSessionController, W as SandboxInteractionCommandResult, X as CONTROL_PLANE_MCP_SERVER_NAME, Y as BuildSandboxMcpConfigOptions, Z as SANDBOX_MCP_SERVER_NAME, _ as AgentInteractiveTerminalSession, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionControlClaim, c as TraceExportFormat, d as buildTraceExportPayload, et as SandboxMcpServerEntry, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as RespondToPermissionOptions, k as InteractiveStopCommand, l as TraceExportResult, m as toOtelJson, nt as buildSandboxMcpConfig, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxInteractionResult, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, tt as buildControlPlaneMcpConfig, u as TraceExportSink, v as InteractiveControlClaimRequest, w as InteractiveSessionIncarnationId, x as InteractiveSessionHandle, y as InteractivePromptCommand, z as BrowserInteractiveSessionControllerOptions } from "./sandbox-JroyQLqr.js";
+import { $ as SandboxMcpEndpoint, A as InterruptResult, B as InteractiveAttachRequest, C as InteractiveSessionHost, D as InteractiveSessionStartOptions, E as InteractiveSessionRef, F as InteractiveTerminalMetadata, G as SandboxInteractionConflict, H as InteractiveSessionControllerOptions, I as createInteractiveTerminalCapture, J as BuildControlPlaneMcpConfigOptions, K as SandboxInteractionResolution, L as createInteractiveTerminalSession, M as agentInteractiveSessionPromptRequestDigest, N as InteractiveTerminalCapture, O as InteractiveSessionStartResult, P as InteractiveTerminalFrameLog, Q as SandboxMcpConfig, R as BrowserInteractiveSessionController, S as InteractiveSessionHandleOptions, T as InteractiveSessionInfo, U as InteractiveSessionControllerTransport, V as InteractiveSessionController, W as SandboxInteractionCommandResult, X as CONTROL_PLANE_MCP_SERVER_NAME, Y as BuildSandboxMcpConfigOptions, Z as SANDBOX_MCP_SERVER_NAME, _ as AgentInteractiveTerminalSession, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionControlClaim, c as TraceExportFormat, d as buildTraceExportPayload, et as SandboxMcpServerEntry, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as RespondToPermissionOptions, k as InteractiveStopCommand, l as TraceExportResult, m as toOtelJson, nt as buildSandboxMcpConfig, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxInteractionResult, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, tt as buildControlPlaneMcpConfig, u as TraceExportSink, v as InteractiveControlClaimRequest, w as InteractiveSessionIncarnationId, x as InteractiveSessionHandle, y as InteractivePromptCommand, z as BrowserInteractiveSessionControllerOptions } from "./sandbox-DVJ-rfdd.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-CcaBTVg3.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BELrFH4f.js";
-import { $ as DurablePlanDecisionResult, $i as UpdateUserOptions, $n as RolloutScorer, $r as SandboxTerminalCreateOptions, $t as GpuLeaseStatus, A as CommitTaskSessionOptions, Ai as SnapshotDeleteOutcome, An as ProcessSpawnOptions, Ar as SandboxFleetPolicy, At as FleetDriveTurnRequest, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, Bn as PublicTemplateVersionInfo, Br as SandboxFleetWorkspaceSnapshotResult, Bt as GitAuth, C as BranchOptions, Ci as SessionInterruptOptions, Cn as PreviewLinkWaitOptions, Cr as SandboxFleetMachine, Ct as FileUsageResult, Di as SessionResultOptions, Dn as ProcessLogEntry, Dr as SandboxFleetManifest, Dt as FleetDispatchResultBufferOptions, Ei as SessionMessageInputPart, En as ProcessListOptions, Er as SandboxFleetMachineSpec, Et as FleetDispatchResultBuffer, F as CreateSandboxFleetOptions, Fn as ProvisionEvent, Fr as SandboxFleetTraceOptions, G as DispatchedSession, Gi as TeeAttestationOptions, Gn as ReconcileSandboxFleetsOptions, Gr as SandboxPortPreviewLink, Gt as GitStatus, H as DevServerInfo, Hi as TaskSessionFileChange, Hn as PublishPublicTemplateVersionOptions, Hr as SandboxInfo, Ht as GitCommit, Ii as StartupDiagnostics, In as ProvisionResult, Ir as SandboxFleetUsage, It as ForkCounts, J as DriveTurnOptions, Ji as TeePublicKey, Jr as SandboxResources, Jt as GpuLeaseCommandResult, K as DownloadOptions, Ki as TeeAttestationReport, Kn as ReconcileSandboxFleetsResult, Kr as SandboxRemovalState, Kt as GpuLease, L as CreateSandboxFleetWithCoordinatorOptions, Li as StartupOperation, Ln as ProvisionStatus, Lr as SandboxFleetWorkspace, Lt as ForkIdempotency, M as CreateGpuLeaseOptions, Mi as SnapshotInfo, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, N as CreateIntelligenceReportOptions, Ni as SnapshotOptions, Nn as PromptOptions, Nr as SandboxFleetTraceEvent, Nt as FleetMachineId, Oi as SessionStatus, On as ProcessManager, Or as SandboxFleetManifestMachine, Ot as FleetDispatchStreamOptions, P as CreateRequestOptions, Pi as SnapshotResult, Pn as PromptResult, Pr as SandboxFleetTraceExport, Pt as FleetPromptDispatchOptions, Q as DurablePlan, Qi as TurnDriveResult, Qn as RolloutOptions, Qr as SandboxTerminalAttachOptions, Qt as GpuLeaseProviderName, R as CreateSandboxOptions, Ri as StorageConfig, Rn as ProvisionStep, Rr as SandboxFleetWorkspaceReconcileResult, Rt as ForkLookupOptions, S as BatchTaskResult, Si as SessionInfo, Sn as PreviewLinkManager, Sr as SandboxFleetIntelligenceEnvelope, St as FileUsageOptions, T as ChunkedUploadResult, Ti as SessionMessage, Tn as ProcessInfo, Tr as SandboxFleetMachineRecord, Tt as FleetDispatchCancelResult, U as DirectoryPermission, Ui as TaskSessionInfo, Un as ReapExpiredSandboxFleetsOptions, Ur as SandboxIntelligenceEnvelope, Ut as GitConfig, V as DeleteOptions, Vi as TaskSessionCommitResult, Vn as PublishPublicTemplateOptions, Vr as SandboxIdentity, Vt as GitBranch, W as DispatchPromptOptions, Wi as TaskSessionProfile, Wn as ReapExpiredSandboxFleetsResult, Wr as SandboxPortBinding, Wt as GitDiff, X as DriverInfo, Xi as TokenRefreshHandler, Xn as Rollout, Xr as SandboxRuntimeHealth, Xt as GpuLeaseExecResult, Y as DriverConfig, Yi as TeePublicKeyResponse, Yr as SandboxRuntimeCapabilities, Yt as GpuLeaseExecOptions, Z as DriverType, Zi as TokenUsage, Zn as RolloutChildResult, Zr as SandboxStatus, Zt as GpuLeaseManager, _ as BatchBackend, _a as parseBackendType, _i as SessionEventStreamOptions, _n as NetworkManager, _r as SandboxFleetDispatchFailureClass, _t as FileRenameResult, aa as WorkspaceOperationLookup, ai as SandboxTraceEvent, an as IntelligenceReportCompareTo, ar as SandboxConfig, at as EgressManager, b as BatchRunRequest, bi as SessionFailureReason, bn as PermissionsManager, br as SandboxFleetDriverTimings, bt as FileTreeOptions, c as AttachGpuLeaseOptions, ca as WriteManyOptions, ci as SandboxUser, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, da as BatchEventDataMap, di as SecretInfo, dn as ListSandboxFleetOptions, dr as SandboxDeleteOutcome, dt as ExecResult, ea as UploadOptions, ei as SandboxTerminalInfo, en as HostAgentDriverConfig, er as RolloutStartResult, f as BackendInfo, fa as BatchSidecarGroup, fi as SecretsManager, fn as ListSandboxOptions, fr as SandboxEnvironment, ft as FileInfo, g as BackendStatus, ga as BackendType, gi as SessionBackendCredentials, gn as NetworkConfig, gr as SandboxFleetCostEstimate, gt as FileReadResult, h as BackendRuntimeConfigUpdate, ha as ALL_BACKEND_TYPES, hi as SentSessionMessage, hn as MkdirOptions, hr as SandboxFleetArtifactSpec, ht as FileReadError, ia as WaitForRolloutOptions, ii as SandboxTraceBundle, in as IntelligenceReportBudget, ir as SSHCredentials, it as EgressDenial, j as CompletedTurnResult, ji as SnapshotIdempotency, jn as ProcessStatus, jr as SandboxFleetToken, jt as FleetExecDispatchOptions, ki as SnapshotDeleteAcknowledgement, kn as ProcessSignal, kr as SandboxFleetOperationsSummary, kt as FleetDriveTurnOutcome, l as AttachSandboxFleetMachineOptions, la as BatchBackendStats, li as SearchMatch, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, lt as ExactProcessSpawnOptions, m as BackendMcpServerStatus, ma as PublicBatchRunRequest, mi as SendSessionMessageRequest, mn as McpServerConfig, mr as SandboxFleetArtifact, mt as FileReadBatchResult, n as AccessPolicyRule, na as UsageInfo, ni as SandboxTerminalRequestOptions, nn as InstalledTool, nr as RolloutTurnPart, nt as EffectiveBackendProfile, oa as WriteFileOptions, oi as SandboxTraceExport, on as IntelligenceReportSubjectType, or as SandboxConnection, ot as EgressPolicy, p as BackendManager, pa as BatchTaskUsage, pi as SendSessionMessageOptions, pn as MAX_EGRESS_DENIALS_LIMIT, pr as SandboxEvent, pt as FileReadBatchOptions, q as DownloadProgress, qi as TeeAttestationResponse, qn as RenameOptions, qr as SandboxResourceUsage, qt as GpuLeaseBilling, r as AddUserOptions, ra as WaitForOptions, ri as SandboxTerminals, rn as IntelligenceReport, rr as SSHCommandDescriptor, rt as EffectiveBackendSource, sa as WriteManyFile, si as SandboxTraceOptions, sn as IntelligenceReportWindow, sr as SandboxCreateOutcome, st as EnsureDevServerOptions, t as AcceleratorKind, ta as UploadProgress, ti as SandboxTerminalManager, tn as HostAgentRuntimeBackend, tr as RolloutStatus, tt as EffectiveBackend, u as BackendCapabilities, ua as BatchEvent, ui as SearchOptions, un as ListOptions, ur as SandboxDeleteOptions, ut as ExecOptions, v as BatchResult, vi as SessionExecutionInfo, vn as NonHostAgentDriverConfig, vr as SandboxFleetDispatchResponse, vt as FileSystem, w as ChunkedUploadOptions, wi as SessionListOptions, wn as Process, wr as SandboxFleetMachineMeteredUsage, wt as FileWriteResult, x as BatchTask, xi as SessionForkOptions, xn as PreviewLinkInfo, xr as SandboxFleetInfo, xt as FileTreeResult, y as BatchRunOptions, yi as SessionExecutionStatus, yn as PermissionLevel, yr as SandboxFleetDriverCapability, yt as FileTreeFile, z as CreateSessionOptions, zi as SubscriptionInfo, zn as PublicTemplateInfo, zr as SandboxFleetWorkspaceRestoreResult, zt as GPU_LEASE_PROVIDER_NAMES } from "./types-kuhJ-qiu.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-DtgNF8r5.js";
+import { $ as DurablePlanDecisionResult, $i as UpdateUserOptions, $n as RolloutScorer, $r as SandboxTerminalCreateOptions, $t as GpuLeaseStatus, A as CommitTaskSessionOptions, Ai as SnapshotDeleteOutcome, An as ProcessSpawnOptions, Ar as SandboxFleetPolicy, At as FleetDriveTurnRequest, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, Bn as PublicTemplateVersionInfo, Br as SandboxFleetWorkspaceSnapshotResult, Bt as GitAuth, C as BranchOptions, Ci as SessionInterruptOptions, Cn as PreviewLinkWaitOptions, Cr as SandboxFleetMachine, Ct as FileUsageResult, Di as SessionResultOptions, Dn as ProcessLogEntry, Dr as SandboxFleetManifest, Dt as FleetDispatchResultBufferOptions, Ei as SessionMessageInputPart, En as ProcessListOptions, Er as SandboxFleetMachineSpec, Et as FleetDispatchResultBuffer, F as CreateSandboxFleetOptions, Fn as ProvisionEvent, Fr as SandboxFleetTraceOptions, G as DispatchedSession, Gi as TeeAttestationOptions, Gn as ReconcileSandboxFleetsOptions, Gr as SandboxPortPreviewLink, Gt as GitStatus, H as DevServerInfo, Hi as TaskSessionFileChange, Hn as PublishPublicTemplateVersionOptions, Hr as SandboxInfo, Ht as GitCommit, Ii as StartupDiagnostics, In as ProvisionResult, Ir as SandboxFleetUsage, It as ForkCounts, J as DriveTurnOptions, Ji as TeePublicKey, Jr as SandboxResources, Jt as GpuLeaseCommandResult, K as DownloadOptions, Ki as TeeAttestationReport, Kn as ReconcileSandboxFleetsResult, Kr as SandboxRemovalState, Kt as GpuLease, L as CreateSandboxFleetWithCoordinatorOptions, Li as StartupOperation, Ln as ProvisionStatus, Lr as SandboxFleetWorkspace, Lt as ForkIdempotency, M as CreateGpuLeaseOptions, Mi as SnapshotInfo, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, N as CreateIntelligenceReportOptions, Ni as SnapshotOptions, Nn as PromptOptions, Nr as SandboxFleetTraceEvent, Nt as FleetMachineId, Oi as SessionStatus, On as ProcessManager, Or as SandboxFleetManifestMachine, Ot as FleetDispatchStreamOptions, P as CreateRequestOptions, Pi as SnapshotResult, Pn as PromptResult, Pr as SandboxFleetTraceExport, Pt as FleetPromptDispatchOptions, Q as DurablePlan, Qi as TurnDriveResult, Qn as RolloutOptions, Qr as SandboxTerminalAttachOptions, Qt as GpuLeaseProviderName, R as CreateSandboxOptions, Ri as StorageConfig, Rn as ProvisionStep, Rr as SandboxFleetWorkspaceReconcileResult, Rt as ForkLookupOptions, S as BatchTaskResult, Si as SessionInfo, Sn as PreviewLinkManager, Sr as SandboxFleetIntelligenceEnvelope, St as FileUsageOptions, T as ChunkedUploadResult, Ti as SessionMessage, Tn as ProcessInfo, Tr as SandboxFleetMachineRecord, Tt as FleetDispatchCancelResult, U as DirectoryPermission, Ui as TaskSessionInfo, Un as ReapExpiredSandboxFleetsOptions, Ur as SandboxIntelligenceEnvelope, Ut as GitConfig, V as DeleteOptions, Vi as TaskSessionCommitResult, Vn as PublishPublicTemplateOptions, Vr as SandboxIdentity, Vt as GitBranch, W as DispatchPromptOptions, Wi as TaskSessionProfile, Wn as ReapExpiredSandboxFleetsResult, Wr as SandboxPortBinding, Wt as GitDiff, X as DriverInfo, Xi as TokenRefreshHandler, Xn as Rollout, Xr as SandboxRuntimeHealth, Xt as GpuLeaseExecResult, Y as DriverConfig, Yi as TeePublicKeyResponse, Yr as SandboxRuntimeCapabilities, Yt as GpuLeaseExecOptions, Z as DriverType, Zi as TokenUsage, Zn as RolloutChildResult, Zr as SandboxStatus, Zt as GpuLeaseManager, _ as BatchBackend, _a as parseBackendType, _i as SessionEventStreamOptions, _n as NetworkManager, _r as SandboxFleetDispatchFailureClass, _t as FileRenameResult, aa as WorkspaceOperationLookup, ai as SandboxTraceEvent, an as IntelligenceReportCompareTo, ar as SandboxConfig, at as EgressManager, b as BatchRunRequest, bi as SessionFailureReason, bn as PermissionsManager, br as SandboxFleetDriverTimings, bt as FileTreeOptions, c as AttachGpuLeaseOptions, ca as WriteManyOptions, ci as SandboxUser, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, da as BatchEventDataMap, di as SecretInfo, dn as ListSandboxFleetOptions, dr as SandboxDeleteOutcome, dt as ExecResult, ea as UploadOptions, ei as SandboxTerminalInfo, en as HostAgentDriverConfig, er as RolloutStartResult, f as BackendInfo, fa as BatchSidecarGroup, fi as SecretsManager, fn as ListSandboxOptions, fr as SandboxEnvironment, ft as FileInfo, g as BackendStatus, ga as BackendType, gi as SessionBackendCredentials, gn as NetworkConfig, gr as SandboxFleetCostEstimate, gt as FileReadResult, h as BackendRuntimeConfigUpdate, ha as ALL_BACKEND_TYPES, hi as SentSessionMessage, hn as MkdirOptions, hr as SandboxFleetArtifactSpec, ht as FileReadError, ia as WaitForRolloutOptions, ii as SandboxTraceBundle, in as IntelligenceReportBudget, ir as SSHCredentials, it as EgressDenial, j as CompletedTurnResult, ji as SnapshotIdempotency, jn as ProcessStatus, jr as SandboxFleetToken, jt as FleetExecDispatchOptions, ki as SnapshotDeleteAcknowledgement, kn as ProcessSignal, kr as SandboxFleetOperationsSummary, kt as FleetDriveTurnOutcome, l as AttachSandboxFleetMachineOptions, la as BatchBackendStats, li as SearchMatch, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, lt as ExactProcessSpawnOptions, m as BackendMcpServerStatus, ma as PublicBatchRunRequest, mi as SendSessionMessageRequest, mn as McpServerConfig, mr as SandboxFleetArtifact, mt as FileReadBatchResult, n as AccessPolicyRule, na as UsageInfo, ni as SandboxTerminalRequestOptions, nn as InstalledTool, nr as RolloutTurnPart, nt as EffectiveBackendProfile, oa as WriteFileOptions, oi as SandboxTraceExport, on as IntelligenceReportSubjectType, or as SandboxConnection, ot as EgressPolicy, p as BackendManager, pa as BatchTaskUsage, pi as SendSessionMessageOptions, pn as MAX_EGRESS_DENIALS_LIMIT, pr as SandboxEvent, pt as FileReadBatchOptions, q as DownloadProgress, qi as TeeAttestationResponse, qn as RenameOptions, qr as SandboxResourceUsage, qt as GpuLeaseBilling, r as AddUserOptions, ra as WaitForOptions, ri as SandboxTerminals, rn as IntelligenceReport, rr as SSHCommandDescriptor, rt as EffectiveBackendSource, sa as WriteManyFile, si as SandboxTraceOptions, sn as IntelligenceReportWindow, sr as SandboxCreateOutcome, st as EnsureDevServerOptions, t as AcceleratorKind, ta as UploadProgress, ti as SandboxTerminalManager, tn as HostAgentRuntimeBackend, tr as RolloutStatus, tt as EffectiveBackend, u as BackendCapabilities, ua as BatchEvent, ui as SearchOptions, un as ListOptions, ur as SandboxDeleteOptions, ut as ExecOptions, v as BatchResult, vi as SessionExecutionInfo, vn as NonHostAgentDriverConfig, vr as SandboxFleetDispatchResponse, vt as FileSystem, w as ChunkedUploadOptions, wi as SessionListOptions, wn as Process, wr as SandboxFleetMachineMeteredUsage, wt as FileWriteResult, x as BatchTask, xi as SessionForkOptions, xn as PreviewLinkInfo, xr as SandboxFleetInfo, xt as FileTreeResult, y as BatchRunOptions, yi as SessionExecutionStatus, yn as PermissionLevel, yr as SandboxFleetDriverCapability, yt as FileTreeFile, z as CreateSessionOptions, zi as SubscriptionInfo, zn as PublicTemplateInfo, zr as SandboxFleetWorkspaceRestoreResult, zt as GPU_LEASE_PROVIDER_NAMES } from "./types-DKtPjwgd.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-Bd-hvjk_.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CS-t6tPU.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-BzAxTiqF.js";
-import { a as FileWriteConflictError, c as PartialFailureError, d as SandboxErrorJson, f as SandboxFailureDetail, g as ValidationError, h as TimeoutError, i as EgressProxyRecoveryError, l as QuotaError, m as StateError, n as CapabilityError, o as NetworkError, p as ServerError, r as EdgeNotReadyError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-A7Quee1Y.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-Cli3lQEp.js";
-import { o as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-kCpLmOmn.js";
+import { _ as ValidationError, a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as SandboxErrorJson, g as TimeoutError, h as StateError, i as EgressProxyRecoveryError, l as PartialFailureError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxFailureDetail, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-BoD3Ifbd.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-BSZbRoHp.js";
+import { o as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-BpO7MMIC.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -4438,4 +4438,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/index.js

@@ -1,10 +1,10 @@
-import { _ as deriveAgentRunOutcome, b as parseBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, m as normalizeRuntimeBackendConfig, u as parseSSEStream, v as ALL_BACKEND_TYPES, y as backendTypeSchema } from "./runtime-api-BWVLRX-H.js";
-import { a as FileWriteConflictError, c as PartialFailureError, d as ServerError, f as StateError, i as EgressProxyRecoveryError, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, r as EdgeNotReadyError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-yyl3f2Fc.js";
-import { _ as parseBackendRegistryResponse, a as splitInlineProfileSkills, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as splitInlineProfileFileMounts, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryEntrySchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-qxRXUqTJ.js";
+import { _ as deriveAgentRunOutcome, b as parseBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, m as normalizeRuntimeBackendConfig, u as parseSSEStream, v as ALL_BACKEND_TYPES, y as backendTypeSchema } from "./runtime-api-BpOFn4cB.js";
+import { a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as ServerError, h as ValidationError, i as EgressProxyRecoveryError, l as PartialFailureError, m as TimeoutError, n as CapabilityError, o as KeyBudgetExhaustedError, p as StateError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
+import { _ as parseBackendRegistryResponse, a as splitInlineProfileSkills, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as splitInlineProfileFileMounts, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryEntrySchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-DuC9Z9zp.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, c as createInteractiveControlHolderId, l as interactiveSessionIdentityDigest, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, t as BrowserInteractiveSessionControlController } from "./browser-interactive-control-controller-Dv0gbFMu.js";
-import { A as toOtelJson, C as collectAgentResponseText, D as buildTraceExportPayload, O as exportTraceBundle, S as collectAgentFinalMessageText, T as isToolBearingEvent, _ as TerminalStream, a as WorkspaceImages, c as SandboxTaskSession, d as agentInteractiveSessionPromptRequestDigest, f as InteractiveTerminalFrameLog, g as InteractiveSessionController, h as BrowserInteractiveSessionController, k as otelTraceIdForTangleTrace, l as SandboxSession, m as createInteractiveTerminalSession, o as GPU_LEASE_PROVIDER_NAMES, p as createInteractiveTerminalCapture, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as InteractiveSessionHandle, v as TerminalStreamError, w as getSandboxEventText, x as applySandboxEventText, y as TERMINAL_WS_ECHO_SUBPROTOCOL } from "./sandbox-CBwyDWgd.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-g2l-dEXt.js";
-import { t as TangleSandboxClient } from "./tangle-DzTt0tFh.js";
+import { A as toOtelJson, C as collectAgentResponseText, D as buildTraceExportPayload, O as exportTraceBundle, S as collectAgentFinalMessageText, T as isToolBearingEvent, _ as TerminalStream, a as WorkspaceImages, c as SandboxTaskSession, d as agentInteractiveSessionPromptRequestDigest, f as InteractiveTerminalFrameLog, g as InteractiveSessionController, h as BrowserInteractiveSessionController, k as otelTraceIdForTangleTrace, l as SandboxSession, m as createInteractiveTerminalSession, o as GPU_LEASE_PROVIDER_NAMES, p as createInteractiveTerminalCapture, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as InteractiveSessionHandle, v as TerminalStreamError, w as getSandboxEventText, x as applySandboxEventText, y as TERMINAL_WS_ECHO_SUBPROTOCOL } from "./sandbox-CWoNC94K.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DilBgjXG.js";
+import { t as TangleSandboxClient } from "./tangle-O1Hi84be.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts
@@ -1463,4 +1463,4 @@ function stripUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0).map(([k, v]) => [k, stripUndefined(v)]));
 }
 //#endregion
-export { ALL_BACKEND_TYPES, AuthError, BrowserInteractiveSessionControlController, BrowserInteractiveSessionController, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, CollaborationClient, CollaborationFileBridge, DEFAULT_SANDBOX_SIZE, EdgeNotReadyError, EgressProxyRecoveryError, FileWriteConflictError, GPU_LEASE_PROVIDER_NAMES, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, ImageBuilder, IntelligenceClient, InteractiveSessionControlController, InteractiveSessionController, InteractiveSessionHandle, InteractiveTerminalFrameLog, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, NetworkError, NotFoundError, PartialFailureError, QuotaError, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, Sandbox, SandboxError, SandboxFleet, SandboxFleetClient, SandboxInstance, SandboxSession, SandboxTaskSession, ServerError, StateError, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, TerminalStream, TerminalStreamError, TimeoutError, ValidationError, WorkspaceImages, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { ALL_BACKEND_TYPES, AuthError, BrowserInteractiveSessionControlController, BrowserInteractiveSessionController, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, CollaborationClient, CollaborationFileBridge, DEFAULT_SANDBOX_SIZE, EdgeNotReadyError, EgressProxyRecoveryError, FileWriteConflictError, GPU_LEASE_PROVIDER_NAMES, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, ImageBuilder, IntelligenceClient, InteractiveSessionControlController, InteractiveSessionController, InteractiveSessionHandle, InteractiveTerminalFrameLog, KeyBudgetExhaustedError, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, NetworkError, NotFoundError, PartialFailureError, QuotaError, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, Sandbox, SandboxError, SandboxFleet, SandboxFleetClient, SandboxInstance, SandboxSession, SandboxTaskSession, ServerError, StateError, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, TerminalStream, TerminalStreamError, TimeoutError, ValidationError, WorkspaceImages, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/intelligence/index.js

@@ -1,4 +1,4 @@
-import { h as parseErrorResponse, o as NetworkError, p as TimeoutError } from "../errors-yyl3f2Fc.js";
+import { g as parseErrorResponse, m as TimeoutError, s as NetworkError } from "../errors-CdDyExth.js";
 //#region src/intelligence/index.ts
 /**
 * `@tangle-network/sandbox/intelligence` — browser-safe typed client for the

package/dist/{runtime-api-BWVLRX-H.js → runtime-api-BpOFn4cB.js}

@@ -1,4 +1,4 @@
-import { d as ServerError, h as parseErrorResponse, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, u as SandboxError } from "./errors-yyl3f2Fc.js";
+import { d as SandboxError, f as ServerError, g as parseErrorResponse, h as ValidationError, m as TimeoutError, n as CapabilityError, s as NetworkError, u as QuotaError } from "./errors-CdDyExth.js";
 import { n as combineAbortSignals } from "./abort-signal-si1WMfJb.js";
 import { AgentExactRunControlRefSchema, AgentExecutionOutcomeSchema, AgentRuntimeAttachmentsSchema, DurablePlanSchema, InteractionRequestSchema, agentProfileSchema, harnessTypeSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/runtime.d.ts

@@ -1,6 +1,6 @@
-import { $r as SandboxTerminalCreateOptions, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, Ct as FileUsageResult, Si as SessionInfo, St as FileUsageOptions, T as ChunkedUploadResult, Ti as SessionMessage, Ui as TaskSessionInfo, Vi as TaskSessionCommitResult, Wr as SandboxPortBinding, Xr as SandboxRuntimeHealth, _i as SessionEventStreamOptions, _t as FileRenameResult, bt as FileTreeOptions, ei as SandboxTerminalInfo, hi as SentSessionMessage, ln as ListMessagesOptions, mi as SendSessionMessageRequest, mt as FileReadBatchResult, ni as SandboxTerminalRequestOptions, oa as WriteFileOptions, pi as SendSessionMessageOptions, pr as SandboxEvent, pt as FileReadBatchOptions, qn as RenameOptions, ta as UploadProgress, ti as SandboxTerminalManager, vi as SessionExecutionInfo, w as ChunkedUploadOptions, wt as FileWriteResult, xt as FileTreeResult, yi as SessionExecutionStatus, z as CreateSessionOptions } from "./types-kuhJ-qiu.js";
-import { a as FileWriteConflictError, c as PartialFailureError, d as SandboxErrorJson, f as SandboxFailureDetail, g as ValidationError, h as TimeoutError, l as QuotaError, m as StateError, n as CapabilityError, o as NetworkError, p as ServerError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-A7Quee1Y.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-Cli3lQEp.js";
+import { $r as SandboxTerminalCreateOptions, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, Ct as FileUsageResult, Si as SessionInfo, St as FileUsageOptions, T as ChunkedUploadResult, Ti as SessionMessage, Ui as TaskSessionInfo, Vi as TaskSessionCommitResult, Wr as SandboxPortBinding, Xr as SandboxRuntimeHealth, _i as SessionEventStreamOptions, _t as FileRenameResult, bt as FileTreeOptions, ei as SandboxTerminalInfo, hi as SentSessionMessage, ln as ListMessagesOptions, mi as SendSessionMessageRequest, mt as FileReadBatchResult, ni as SandboxTerminalRequestOptions, oa as WriteFileOptions, pi as SendSessionMessageOptions, pr as SandboxEvent, pt as FileReadBatchOptions, qn as RenameOptions, ta as UploadProgress, ti as SandboxTerminalManager, vi as SessionExecutionInfo, w as ChunkedUploadOptions, wt as FileWriteResult, xt as FileTreeResult, yi as SessionExecutionStatus, z as CreateSessionOptions } from "./types-DKtPjwgd.js";
+import { _ as ValidationError, a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as SandboxErrorJson, g as TimeoutError, h as StateError, l as PartialFailureError, m as ServerError, n as CapabilityError, p as SandboxFailureDetail, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-BoD3Ifbd.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-BSZbRoHp.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/runtime.js

@@ -1,5 +1,5 @@
-import { _ as deriveAgentRunOutcome, a as uploadChunked, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, t as SandboxRuntimeApi } from "./runtime-api-BWVLRX-H.js";
-import { a as FileWriteConflictError, c as PartialFailureError, d as ServerError, f as StateError, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-yyl3f2Fc.js";
+import { _ as deriveAgentRunOutcome, a as uploadChunked, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, t as SandboxRuntimeApi } from "./runtime-api-BpOFn4cB.js";
+import { a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as ServerError, h as ValidationError, l as PartialFailureError, m as TimeoutError, n as CapabilityError, p as StateError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
 import { n as combineAbortSignals } from "./abort-signal-si1WMfJb.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;

package/dist/{sandbox-CBwyDWgd.js → sandbox-CWoNC94K.js}

@@ -1,5 +1,5 @@
-import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, i as sessionHeaders, m as normalizeRuntimeBackendConfig, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as mergeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-BWVLRX-H.js";
-import { d as ServerError, f as StateError, h as parseErrorResponse, l as QuotaError, m as ValidationError, n as CapabilityError, o as NetworkError, p as TimeoutError, r as EdgeNotReadyError, s as NotFoundError, t as AuthError, u as SandboxError } from "./errors-yyl3f2Fc.js";
+import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, i as sessionHeaders, m as normalizeRuntimeBackendConfig, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as mergeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-BpOFn4cB.js";
+import { c as NotFoundError, d as SandboxError, f as ServerError, g as parseErrorResponse, h as ValidationError, m as TimeoutError, n as CapabilityError, p as StateError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
 import { c as createInteractiveControlHolderId, d as interactiveSessionControlReleaseResponseSchema, f as interactiveSessionControlValidationResponseSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, p as interactiveSessionStatusResponseSchema, r as browserInteractiveTerminalEndpoint, s as assertInteractiveSessionRef, u as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-Dv0gbFMu.js";
 import { n as combineAbortSignals, t as awaitWithAbort } from "./abort-signal-si1WMfJb.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
@@ -6009,7 +6009,8 @@ var SandboxInstance = class SandboxInstance {
 		return {
 			get: () => this.egressGet(),
 			update: (policy) => this.egressUpdate(policy),
-			denials: (options) => this.egressDenials(options)
+			denials: (options) => this.egressDenials(options),
+			activity: (options) => this.egressActivity(options)
 		};
 	}
 	/**
@@ -6144,6 +6145,67 @@ var SandboxInstance = class SandboxInstance {
 		}
 		return denials;
 	}
+	/**
+	* What the sandbox reached, and whether that is decidable.
+	*
+	* Every malformed answer leaves as a typed `ServerError` rather than a
+	* defaulted record. That matters more here than on `denials()`: a caller uses
+	* this to establish a NEGATIVE claim, so inventing a `complete: true` record
+	* from a broken response would manufacture the very proof it came for.
+	*/
+	async egressActivity(options) {
+		const limit = options?.limit;
+		if (limit !== void 0) {
+			if (!Number.isInteger(limit) || limit < 1) throw new ValidationError(`egress activity limit must be a positive integer, got ${limit}`);
+			if (limit > 500) throw new ValidationError(`egress activity limit must be at most 500, got ${limit}`);
+		}
+		const query = limit === void 0 ? "" : `?limit=${encodeURIComponent(limit)}`;
+		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/egress/activity${query}`);
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		}
+		let body;
+		try {
+			body = await response.json();
+		} catch (cause) {
+			const error = new ServerError("Egress activity response was malformed: body is not valid JSON", 502);
+			error.cause = cause;
+			throw error;
+		}
+		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress activity response was malformed: body is not an object", 502);
+		const raw = body.activity;
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new ServerError("Egress activity response was malformed: activity is not a record", 502);
+		const record = raw;
+		if (typeof record.complete !== "boolean" || typeof record.requestsObserved !== "number" || !Number.isInteger(record.requestsObserved) || record.requestsObserved < 0 || typeof record.unparsedLines !== "number" || !Number.isInteger(record.unparsedLines) || record.unparsedLines < 0 || !Array.isArray(record.destinations) || !Array.isArray(record.incompleteReasons) || !record.incompleteReasons.every((one) => typeof one === "string") || record.complete !== (record.incompleteReasons.length === 0)) throw new ServerError("Egress activity response was malformed: activity is not an activity record", 502);
+		const destinations = [];
+		for (const [index, entry] of record.destinations.entries()) {
+			const row = entry;
+			if (typeof row !== "object" || row === null || typeof row.host !== "string" || row.host.length === 0 || row.action !== "allow" && row.action !== "reject" || typeof row.count !== "number" || !Number.isInteger(row.count) || row.count < 0 || ![
+				"firstAt",
+				"lastAt",
+				"rejectedBy"
+			].every((field) => {
+				const value = row[field];
+				return value === void 0 || value === null || typeof value === "string";
+			})) throw new ServerError(`Egress activity response was malformed: destination ${index} is not a destination`, 502);
+			destinations.push({
+				host: row.host,
+				action: row.action,
+				count: row.count,
+				...typeof row.firstAt === "string" ? { firstAt: row.firstAt } : {},
+				...typeof row.lastAt === "string" ? { lastAt: row.lastAt } : {},
+				...typeof row.rejectedBy === "string" ? { rejectedBy: row.rejectedBy } : {}
+			});
+		}
+		return {
+			destinations,
+			requestsObserved: record.requestsObserved,
+			unparsedLines: record.unparsedLines,
+			complete: record.complete,
+			incompleteReasons: record.incompleteReasons
+		};
+	}
 	async gpuAttach(options) {
 		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/gpu/leases`, {
 			method: "POST",

package/dist/{sandbox-JroyQLqr.d.ts → sandbox-DVJ-rfdd.d.ts}

@@ -1,6 +1,6 @@
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-CcaBTVg3.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, s as InteractiveSessionControlTransport } from "./browser-interactive-control-controller-BELrFH4f.js";
-import { $ as DurablePlanDecisionResult, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, C as BranchOptions, Ci as SessionInterruptOptions, D as CodeExecutionResult, Di as SessionResultOptions, E as CodeExecutionOptions, Fn as ProvisionEvent, G as DispatchedSession, Gi as TeeAttestationOptions, Gt as GitStatus, Hr as SandboxInfo, Ht as GitCommit, Ii as StartupDiagnostics, In as ProvisionResult, It as ForkCounts, J as DriveTurnOptions, Jn as RestoreSnapshotOptions, Kt as GpuLease, Lt as ForkIdempotency, Mi as SnapshotInfo, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, Ni as SnapshotOptions, Nn as PromptOptions, O as CodeLanguage, On as ProcessManager, Pi as SnapshotResult, Pn as PromptResult, Q as DurablePlan, Qi as TurnDriveResult, Qn as RolloutOptions, Qr as SandboxTerminalAttachOptions, Rt as ForkLookupOptions, Si as SessionInfo, Sn as PreviewLinkManager, Ti as SessionMessage, Ui as TaskSessionInfo, Vi as TaskSessionCommitResult, Vt as GitBranch, W as DispatchPromptOptions, Wr as SandboxPortBinding, Wt as GitDiff, X as DriverInfo, Xn as Rollout, Xr as SandboxRuntimeHealth, Yi as TeePublicKeyResponse, Yn as ResumeOptions, Yr as SandboxRuntimeCapabilities, Zr as SandboxStatus, Zt as GpuLeaseManager, _i as SessionEventStreamOptions, _n as NetworkManager, aa as WorkspaceOperationLookup, an as IntelligenceReportCompareTo, at as EgressManager, bn as PermissionsManager, ca as WriteManyOptions, cn as JsonValue, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, dt as ExecResult, er as RolloutStartResult, hi as SentSessionMessage, ia as WaitForRolloutOptions, ii as SandboxTraceBundle, in as IntelligenceReportBudget, ir as SSHCredentials, j as CompletedTurnResult, ki as SnapshotDeleteAcknowledgement, li as SearchMatch, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, mi as SendSessionMessageRequest, nn as InstalledTool, oa as WriteFileOptions, or as SandboxConnection, p as BackendManager, pi as SendSessionMessageOptions, pr as SandboxEvent, qi as TeeAttestationResponse, qr as SandboxResourceUsage, ra as WaitForOptions, ri as SandboxTerminals, rn as IntelligenceReport, rr as SSHCommandDescriptor, sa as WriteManyFile, si as SandboxTraceOptions, sn as IntelligenceReportWindow, ui as SearchOptions, ur as SandboxDeleteOptions, ut as ExecOptions, vi as SessionExecutionInfo, vt as FileSystem, wi as SessionListOptions, wt as FileWriteResult, xi as SessionForkOptions, z as CreateSessionOptions } from "./types-kuhJ-qiu.js";
+import { $ as DurablePlanDecisionResult, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, C as BranchOptions, Ci as SessionInterruptOptions, D as CodeExecutionResult, Di as SessionResultOptions, E as CodeExecutionOptions, Fn as ProvisionEvent, G as DispatchedSession, Gi as TeeAttestationOptions, Gt as GitStatus, Hr as SandboxInfo, Ht as GitCommit, Ii as StartupDiagnostics, In as ProvisionResult, It as ForkCounts, J as DriveTurnOptions, Jn as RestoreSnapshotOptions, Kt as GpuLease, Lt as ForkIdempotency, Mi as SnapshotInfo, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, Ni as SnapshotOptions, Nn as PromptOptions, O as CodeLanguage, On as ProcessManager, Pi as SnapshotResult, Pn as PromptResult, Q as DurablePlan, Qi as TurnDriveResult, Qn as RolloutOptions, Qr as SandboxTerminalAttachOptions, Rt as ForkLookupOptions, Si as SessionInfo, Sn as PreviewLinkManager, Ti as SessionMessage, Ui as TaskSessionInfo, Vi as TaskSessionCommitResult, Vt as GitBranch, W as DispatchPromptOptions, Wr as SandboxPortBinding, Wt as GitDiff, X as DriverInfo, Xn as Rollout, Xr as SandboxRuntimeHealth, Yi as TeePublicKeyResponse, Yn as ResumeOptions, Yr as SandboxRuntimeCapabilities, Zr as SandboxStatus, Zt as GpuLeaseManager, _i as SessionEventStreamOptions, _n as NetworkManager, aa as WorkspaceOperationLookup, an as IntelligenceReportCompareTo, at as EgressManager, bn as PermissionsManager, ca as WriteManyOptions, cn as JsonValue, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, dt as ExecResult, er as RolloutStartResult, hi as SentSessionMessage, ia as WaitForRolloutOptions, ii as SandboxTraceBundle, in as IntelligenceReportBudget, ir as SSHCredentials, j as CompletedTurnResult, ki as SnapshotDeleteAcknowledgement, li as SearchMatch, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, mi as SendSessionMessageRequest, nn as InstalledTool, oa as WriteFileOptions, or as SandboxConnection, p as BackendManager, pi as SendSessionMessageOptions, pr as SandboxEvent, qi as TeeAttestationResponse, qr as SandboxResourceUsage, ra as WaitForOptions, ri as SandboxTerminals, rn as IntelligenceReport, rr as SSHCommandDescriptor, sa as WriteManyFile, si as SandboxTraceOptions, sn as IntelligenceReportWindow, ui as SearchOptions, ur as SandboxDeleteOptions, ut as ExecOptions, vi as SessionExecutionInfo, vt as FileSystem, wi as SessionListOptions, wt as FileWriteResult, xi as SessionForkOptions, z as CreateSessionOptions } from "./types-DKtPjwgd.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -1467,6 +1467,15 @@ declare class SandboxInstance {
   private egressGet;
   private egressUpdate;
   private egressDenials;
+  /**
+   * What the sandbox reached, and whether that is decidable.
+   *
+   * Every malformed answer leaves as a typed `ServerError` rather than a
+   * defaulted record. That matters more here than on `denials()`: a caller uses
+   * this to establish a NEGATIVE claim, so inventing a `complete: true` record
+   * from a broken response would manufacture the very proof it came for.
+   */
+  private egressActivity;
   private gpuAttach;
   private gpuList;
   private gpuExec;

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TangleSandboxClientConfig, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../index-kCpLmOmn.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TangleSandboxClientConfig, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../index-BpO7MMIC.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as JsonResponseParamTypes, d as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as SandboxCreateParamTypes, n as JOB_SANDBOX_CREATE, o as AgentSandboxBlueprintAbi, r as JOB_SANDBOX_DELETE, s as ITangleJobsAbi, t as TangleSandboxClient, u as SandboxCreateResponseParamTypes } from "../tangle-DzTt0tFh.js";
+import { a as TANGLE_JOBS_CONTRACT, c as JsonResponseParamTypes, d as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as SandboxCreateParamTypes, n as JOB_SANDBOX_CREATE, o as AgentSandboxBlueprintAbi, r as JOB_SANDBOX_DELETE, s as ITangleJobsAbi, t as TangleSandboxClient, u as SandboxCreateResponseParamTypes } from "../tangle-O1Hi84be.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient };

package/dist/{tangle-DzTt0tFh.js → tangle-O1Hi84be.js}

@@ -1,5 +1,5 @@
-import { h as parseErrorResponse } from "./errors-yyl3f2Fc.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-CBwyDWgd.js";
+import { g as parseErrorResponse } from "./errors-CdDyExth.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-CWoNC94K.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-kuhJ-qiu.d.ts → types-DKtPjwgd.d.ts}

@@ -1792,7 +1792,9 @@ interface CreateSandboxOptions {
    * When `true` (the default), a profile with sizeable inline mounts (e.g.
    * skills, tool scripts) does not bloat the create POST; the SDK
    * materializes those files via {@link FileSystem.writeMany} /
-   * {@link FileSystem.uploadData} after the sandbox reaches `running`. Only
+   * {@link FileSystem.uploadData} after the sandbox reaches `running`. A batch
+   * write answered 502, 503 or 504, or lost with its connection, is sent again
+   * for up to 10 seconds before create() raises `PartialFailureError`. Only
    * applies to an inline `AgentProfile` object on `backend.profile`; a
    * named-profile string is never split. Set `false` to send the full profile
    * in the create request without a post-create materialization step.
@@ -4935,6 +4937,52 @@ interface EgressDenial {
 }
 /** Largest `limit` the denials route accepts; it rejects anything above. */
 declare const MAX_EGRESS_DENIALS_LIMIT = 50;
+/** Whether the egress proxy allowed or refused a request. */
+type EgressAction = "allow" | "reject";
+/** One destination a sandbox reached, or was refused, in the inspected window. */
+interface EgressDestination {
+  /** Destination host, port removed, e.g. "api.openai.com". */
+  host: string;
+  action: EgressAction;
+  /** Requests to this host with this action, inside the inspected window. */
+  count: number;
+  /** ISO-8601 time of the earliest such request the window carried. */
+  firstAt?: string;
+  /** ISO-8601 time of the latest such request the window carried. */
+  lastAt?: string;
+  /** Which proxy transform refused it. Only set when `action` is "reject". */
+  rejectedBy?: string;
+}
+/**
+ * Why an activity record cannot support a claim that a sandbox reached nothing.
+ *
+ * `hop-unreachable` is the one a client is most likely to see: a layer between
+ * this SDK and the host holding the proxy log did not answer. It is distinct
+ * from `log-unreadable`, which means the host reached the proxy and could not
+ * read its log.
+ */
+type EgressIncompleteReason = "window-truncated" | "unparsed-lines" | "host-limit-reached" | "log-unreadable" | "hop-unreachable";
+/**
+ * What a sandbox reached in one inspected window, and whether that is decidable.
+ *
+ * Read `complete` before reading anything into an empty `destinations` list.
+ * `destinations: []` with `complete: true` is evidence the sandbox reached
+ * nothing; `destinations: []` with `complete: false` is an absence of evidence,
+ * and `incompleteReasons` names what was missing. `provesNoEgress` below makes
+ * that check one call.
+ */
+interface EgressActivityRecord {
+  /** Every distinct host/action pair observed, allowed and refused alike. */
+  destinations: EgressDestination[];
+  /** Audit lines successfully interpreted as a request. */
+  requestsObserved: number;
+  /** Lines that looked like audit output but could not be interpreted. */
+  unparsedLines: number;
+  /** Whether this record can carry a NEGATIVE claim. */
+  complete: boolean;
+  /** Empty exactly when `complete` is true. */
+  incompleteReasons: EgressIncompleteReason[];
+}
 /**
  * Egress policy manager for runtime egress configuration.
  * Access via `sandbox.egress`.
@@ -4998,6 +5046,29 @@ interface EgressManager {
   denials(options?: {
     limit?: number;
   }): Promise<EgressDenial[]>;
+  /**
+   * What this sandbox actually reached, allowed as well as refused, and whether
+   * that observation can be trusted.
+   *
+   * The opposite question to {@link EgressManager.denials}, and deliberately NOT
+   * best-effort. `denials()` may return an empty list because nothing was
+   * refused or because the proxy could not be read, and says so. This method
+   * exists because some callers — a benchmark proving a control arm reached
+   * nothing, an audit establishing a sandbox stayed offline — need those two
+   * cases to be distinguishable, so a failure is reported as
+   * `complete: false` with a reason rather than as an empty list.
+   *
+   * Check `complete`, or call {@link provesNoEgress}, before reading an empty
+   * `destinations` list as proof.
+   *
+   * @param options.limit - Most destinations to return, 1 to
+   *   {@link MAX_EGRESS_ACTIVITY_LIMIT}. Omit to let the server choose.
+   * @throws ServerError when egress is not enabled for the sandbox (409) — a
+   *   configuration answer, deliberately not reported as an undecidable record.
+   */
+  activity(options?: {
+    limit?: number;
+  }): Promise<EgressActivityRecord>;
 }
 /**
  * Port exposure and runtime network state for a sandbox.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.41.1",
+  "version": "0.43.0",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -136,8 +136,8 @@
     "ws": "^8.20.0",
     "yjs": "13.6.30",
     "@repo/shared": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.20.1",
     "@tangle-network/cli-agent-registry": "0.4.5",
+    "@tangle-network/agent-profile-materialize": "0.20.1",
     "@tangle-network/runtime-contracts": "0.6.10",
     "@tangle-network/sse-core": "0.0.0"
   },