@tangle-network/sandbox 0.42.0 → 0.45.0

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-Dehr5LTP.js";
-import { D as CodeExecutionResult, E as CodeExecutionOptions, O as CodeLanguage, Si as SessionInfo, d as BackendConfig, k as CodeResultPart, wi as SessionListOptions } from "../types-BL3VHr3R.js";
-import { i as Sandbox } from "../client-Cs9nH2Ct.js";
+import { g as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-CQ2YTLtO.js";
+import { D as CodeExecutionResult, E as CodeExecutionOptions, Ei as SessionListOptions, O as CodeLanguage, d as BackendConfig, k as CodeResultPart, wi as SessionInfo } from "../types-B3C-MizG.js";
+import { i as Sandbox } from "../client-C_mFKZwS.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/instances.d.ts

package/dist/agent/index.js

@@ -1,7 +1,7 @@
-import { f as assertCurrentBackendType } from "../runtime-api-BpOFn4cB.js";
+import { f as assertCurrentBackendType } from "../runtime-api-C10Hg1OF.js";
 import { c as NotFoundError, h as ValidationError, p as StateError } from "../errors-CdDyExth.js";
-import { n as Sandbox } from "../client-H5uiGOhe.js";
-import { t as SandboxInstance } from "../sandbox-0VHkiqla.js";
+import { n as Sandbox } from "../client-C2AGfwGT.js";
+import { t as SandboxInstance } from "../sandbox-9IUdHeyj.js";
 import { createRequire } from "node:module";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/{agent-run-outcome-B7QDBlIQ.d.ts → agent-run-outcome-BpQhOdXp.d.ts}

@@ -1,4 +1,4 @@
-import { a as AgentQuestionRequest, et as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, pr as SandboxEvent, s as AgentToolInvocation } from "./types-BL3VHr3R.js";
+import { a as AgentQuestionRequest, hr as SandboxEvent, i as AgentApprovalRequirement, nt as DurablePlanSnapshot, o as AgentRunStatus, s as AgentToolInvocation } from "./types-B3C-MizG.js";
 import { InteractionRequest } from "@tangle-network/agent-interface";
 
 //#region src/agent-run-outcome.d.ts

package/dist/{client-H5uiGOhe.js → client-C2AGfwGT.js}

@@ -1,7 +1,7 @@
-import { c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, l as encodeTextForWire, m as normalizeRuntimeBackendConfig, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, u as parseSSEStream, y as backendTypeSchema } from "./runtime-api-BpOFn4cB.js";
+import { c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, l as encodeTextForWire, m as normalizeRuntimeBackendConfig, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, u as parseSSEStream, y as backendTypeSchema } from "./runtime-api-C10Hg1OF.js";
 import { c as NotFoundError, d as SandboxError, f as ServerError, g as parseErrorResponse, h as ValidationError, l as PartialFailureError, m as TimeoutError, s as NetworkError, t as AuthError } from "./errors-CdDyExth.js";
 import { n as combineAbortSignals } from "./abort-signal-si1WMfJb.js";
-import { E as normalizeConnection, O as exportTraceBundle, b as requestInteractiveSessionToken, i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt } from "./sandbox-0VHkiqla.js";
+import { E as normalizeConnection, O as exportTraceBundle, b as requestInteractiveSessionToken, i as normalizeStartupDiagnostics, n as createSandboxInstanceFromResponse, r as normalizeSandboxCreateReceipt } from "./sandbox-9IUdHeyj.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/backend-registry.ts
@@ -2758,6 +2758,16 @@ var Sandbox = class {
 	* });
 	* ```
 	*/
+	/** Fresh execution with no ambient owner context. Old hosts reject this
+	* explicit field before provisioning; no best-effort security downgrade. */
+	async createIsolated(options, requestOptions) {
+		return this.create({
+			...options,
+			ownerContext: "isolated",
+			secrets: [],
+			sshEnabled: false
+		}, requestOptions);
+	}
 	async create(inputOptions, requestOptions) {
 		let options = inputOptions;
 		if (options?.backend?.runtimeAttachments !== void 0) {
@@ -2855,6 +2865,7 @@ var Sandbox = class {
 			publicTemplateId: options?.publicTemplateId,
 			publicTemplateVersionId: options?.publicTemplateVersionId,
 			secrets: options?.secrets,
+			ownerContext: options?.ownerContext,
 			confidential: options?.confidential,
 			metadata: options?.metadata,
 			teamId: options?.teamId,

package/dist/{client-Cs9nH2Ct.d.ts → client-C_mFKZwS.d.ts}

@@ -1,6 +1,6 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-Dehr5LTP.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-CQ2YTLtO.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-CcaBTVg3.js";
-import { At as FleetDriveTurnRequest, Bn as PublicTemplateVersionInfo, Br as SandboxFleetWorkspaceSnapshotResult, Dr as SandboxFleetManifest, Dt as FleetDispatchResultBufferOptions, Et as FleetDispatchResultBuffer, F as CreateSandboxFleetOptions, Fi as SshKeysManager, Fr as SandboxFleetTraceOptions, Ft as FleetPromptDispatchResult, Gn as ReconcileSandboxFleetsOptions, Hn as PublishPublicTemplateVersionOptions, Hr as SandboxInfo, I as CreateSandboxFleetTokenOptions, Ir as SandboxFleetUsage, Kn as ReconcileSandboxFleetsResult, L as CreateSandboxFleetWithCoordinatorOptions, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, Mt as FleetExecDispatchResult, N as CreateIntelligenceReportOptions, Nn as PromptOptions, Nt as FleetMachineId, Ot as FleetDispatchStreamOptions, P as CreateRequestOptions, Pn as PromptResult, Pt as FleetPromptDispatchOptions, R as CreateSandboxOptions, Rr as SandboxFleetWorkspaceReconcileResult, Tr as SandboxFleetMachineRecord, Tt as FleetDispatchCancelResult, Un as ReapExpiredSandboxFleetsOptions, Vn as PublishPublicTemplateOptions, Vr as SandboxIdentity, Wn as ReapExpiredSandboxFleetsResult, Xi as TokenRefreshHandler, an as IntelligenceReportCompareTo, ar as SandboxConfig, b as BatchRunRequest, dn as ListSandboxFleetOptions, dt as ExecResult, fi as SecretsManager, fn as ListSandboxOptions, fr as SandboxEnvironment, gr as SandboxFleetCostEstimate, hr as SandboxFleetArtifactSpec, in as IntelligenceReportBudget, jr as SandboxFleetToken, jt as FleetExecDispatchOptions, kr as SandboxFleetOperationsSummary, kt as FleetDriveTurnOutcome, l as AttachSandboxFleetMachineOptions, mr as SandboxFleetArtifact, na as UsageInfo, rn as IntelligenceReport, sn as IntelligenceReportWindow, ua as BatchEvent, ut as ExecOptions, v as BatchResult, vr as SandboxFleetDispatchResponse, xr as SandboxFleetInfo, y as BatchRunOptions, yr as SandboxFleetDriverCapability, zi as SubscriptionInfo, zn as PublicTemplateInfo, zr as SandboxFleetWorkspaceRestoreResult } from "./types-BL3VHr3R.js";
+import { At as FleetDispatchStreamOptions, B as CreateSandboxOptions, Br as SandboxFleetWorkspaceReconcileResult, Cr as SandboxFleetInfo, Dr as SandboxFleetMachineRecord, Dt as FleetDispatchCancelResult, F as CreateIntelligenceReportOptions, Fn as PromptOptions, Ft as FleetMachineId, Gn as ReapExpiredSandboxFleetsOptions, Hn as PublicTemplateVersionInfo, Hr as SandboxFleetWorkspaceSnapshotResult, I as CreateRequestOptions, In as PromptResult, It as FleetPromptDispatchOptions, Jn as ReconcileSandboxFleetsResult, Kn as ReapExpiredSandboxFleetsResult, L as CreateSandboxFleetOptions, Li as SshKeysManager, Lr as SandboxFleetTraceOptions, Lt as FleetPromptDispatchResult, Mt as FleetDriveTurnRequest, Nr as SandboxFleetToken, Nt as FleetExecDispatchOptions, Ot as FleetDispatchResultBuffer, Pn as PromptInputPart, Pr as SandboxFleetTraceBundle, Pt as FleetExecDispatchResult, Qi as TokenRefreshHandler, R as CreateSandboxFleetTokenOptions, Rr as SandboxFleetUsage, Un as PublishPublicTemplateOptions, Ur as SandboxIdentity, Vi as SubscriptionInfo, Vn as PublicTemplateInfo, Vr as SandboxFleetWorkspaceRestoreResult, Wn as PublishPublicTemplateVersionOptions, Wr as SandboxInfo, _r as SandboxFleetArtifactSpec, an as IntelligenceReport, b as BatchRunRequest, br as SandboxFleetDispatchResponse, fa as BatchEvent, ft as ExecOptions, gr as SandboxFleetArtifact, ia as UsageInfo, jr as SandboxFleetOperationsSummary, jt as FleetDriveTurnOutcome, kr as SandboxFleetManifest, kt as FleetDispatchResultBufferOptions, l as AttachSandboxFleetMachineOptions, ln as IntelligenceReportWindow, mi as SecretsManager, mn as ListSandboxOptions, mr as SandboxEnvironment, on as IntelligenceReportBudget, pn as ListSandboxFleetOptions, pt as ExecResult, qn as ReconcileSandboxFleetsOptions, sn as IntelligenceReportCompareTo, sr as SandboxConfig, v as BatchResult, vr as SandboxFleetCostEstimate, xr as SandboxFleetDriverCapability, y as BatchRunOptions, z as CreateSandboxFleetWithCoordinatorOptions } from "./types-B3C-MizG.js";
 import { AgentInteractiveSessionRef } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -431,6 +431,9 @@ declare class Sandbox implements HttpClient, ScopedTokenHttpClient {
    * });
    * ```
    */
+  /** Fresh execution with no ambient owner context. Old hosts reject this
+   * explicit field before provisioning; no best-effort security downgrade. */
+  createIsolated(options: Omit<CreateSandboxOptions, "ownerContext">, requestOptions?: CreateRequestOptions): Promise<SandboxInstance>;
   create(inputOptions?: CreateSandboxOptions, requestOptions?: CreateRequestOptions): Promise<SandboxInstance>;
   /**
    * Poll a sandbox to `running` by id. Surfaces a real provision failure

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-Dehr5LTP.js";
-import { Cn as PreviewLinkWaitOptions, Hr as SandboxInfo, Mn as PromptInputPart, R as CreateSandboxOptions, Sn as PreviewLinkManager, Zr as SandboxStatus, ar as SandboxConfig, dt as ExecResult, gn as NetworkConfig, ut as ExecOptions, xn as PreviewLinkInfo } from "./types-BL3VHr3R.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-Cs9nH2Ct.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-CQ2YTLtO.js";
+import { $r as SandboxStatus, B as CreateSandboxOptions, Cn as PreviewLinkInfo, M as ConversationTurnOptions, N as ConversationTurnResult, Pn as PromptInputPart, Tn as PreviewLinkWaitOptions, Wr as SandboxInfo, ft as ExecOptions, pt as ExecResult, sr as SandboxConfig, vn as NetworkConfig, wn as PreviewLinkManager } from "./types-B3C-MizG.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, b as backendRegistryEntrySchema, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-C_mFKZwS.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as SandboxErrorJson, g as TimeoutError, h as StateError, l as PartialFailureError, m as ServerError, n as CapabilityError, p as SandboxFailureDetail, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-BoD3Ifbd.js";
-export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };
+export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type ConversationTurnOptions, type ConversationTurnResult, type CreateSandboxOptions, type ExecOptions, type ExecResult, FileWriteConflictError, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/core.js

@@ -1,4 +1,4 @@
 import { a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as ServerError, h as ValidationError, l as PartialFailureError, m as TimeoutError, n as CapabilityError, p as StateError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
-import { _ as parseBackendRegistryResponse, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-H5uiGOhe.js";
-import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-0VHkiqla.js";
+import { _ as parseBackendRegistryResponse, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-C2AGfwGT.js";
+import { a as WorkspaceImages, t as SandboxInstance } from "./sandbox-9IUdHeyj.js";
 export { AuthError, CapabilityError, FileWriteConflictError, NetworkError, NotFoundError, PartialFailureError, QuotaError, Sandbox, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, parseBackendRegistryResponse, parseBackendRegistryResponseBody };

package/dist/{index-DPXKKBJu.d.ts → index-DT_pNtbV.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-Dehr5LTP.js";
-import { R as CreateSandboxOptions } from "./types-BL3VHr3R.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-CQ2YTLtO.js";
+import { B as CreateSandboxOptions } from "./types-B3C-MizG.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,13 +1,13 @@
-import { $ as SandboxMcpEndpoint, A as InterruptResult, B as InteractiveAttachRequest, C as InteractiveSessionHost, D as InteractiveSessionStartOptions, E as InteractiveSessionRef, F as InteractiveTerminalMetadata, G as SandboxInteractionConflict, H as InteractiveSessionControllerOptions, I as createInteractiveTerminalCapture, J as BuildControlPlaneMcpConfigOptions, K as SandboxInteractionResolution, L as createInteractiveTerminalSession, M as agentInteractiveSessionPromptRequestDigest, N as InteractiveTerminalCapture, O as InteractiveSessionStartResult, P as InteractiveTerminalFrameLog, Q as SandboxMcpConfig, R as BrowserInteractiveSessionController, S as InteractiveSessionHandleOptions, T as InteractiveSessionInfo, U as InteractiveSessionControllerTransport, V as InteractiveSessionController, W as SandboxInteractionCommandResult, X as CONTROL_PLANE_MCP_SERVER_NAME, Y as BuildSandboxMcpConfigOptions, Z as SANDBOX_MCP_SERVER_NAME, _ as AgentInteractiveTerminalSession, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionControlClaim, c as TraceExportFormat, d as buildTraceExportPayload, et as SandboxMcpServerEntry, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as RespondToPermissionOptions, k as InteractiveStopCommand, l as TraceExportResult, m as toOtelJson, nt as buildSandboxMcpConfig, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxInteractionResult, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, tt as buildControlPlaneMcpConfig, u as TraceExportSink, v as InteractiveControlClaimRequest, w as InteractiveSessionIncarnationId, x as InteractiveSessionHandle, y as InteractivePromptCommand, z as BrowserInteractiveSessionControllerOptions } from "./sandbox-Dehr5LTP.js";
+import { $ as SandboxMcpEndpoint, A as InterruptResult, B as InteractiveAttachRequest, C as InteractiveSessionHost, D as InteractiveSessionStartOptions, E as InteractiveSessionRef, F as InteractiveTerminalMetadata, G as SandboxInteractionConflict, H as InteractiveSessionControllerOptions, I as createInteractiveTerminalCapture, J as BuildControlPlaneMcpConfigOptions, K as SandboxInteractionResolution, L as createInteractiveTerminalSession, M as agentInteractiveSessionPromptRequestDigest, N as InteractiveTerminalCapture, O as InteractiveSessionStartResult, P as InteractiveTerminalFrameLog, Q as SandboxMcpConfig, R as BrowserInteractiveSessionController, S as InteractiveSessionHandleOptions, T as InteractiveSessionInfo, U as InteractiveSessionControllerTransport, V as InteractiveSessionController, W as SandboxInteractionCommandResult, X as CONTROL_PLANE_MCP_SERVER_NAME, Y as BuildSandboxMcpConfigOptions, Z as SANDBOX_MCP_SERVER_NAME, _ as AgentInteractiveTerminalSession, a as WorkspaceImagePublishRequestOptions, b as InteractiveSessionControlClaim, c as TraceExportFormat, d as buildTraceExportPayload, et as SandboxMcpServerEntry, f as exportTraceBundle, g as SandboxSession, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as RespondToPermissionOptions, k as InteractiveStopCommand, l as TraceExportResult, m as toOtelJson, nt as buildSandboxMcpConfig, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxInteractionResult, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, tt as buildControlPlaneMcpConfig, u as TraceExportSink, v as InteractiveControlClaimRequest, w as InteractiveSessionIncarnationId, x as InteractiveSessionHandle, y as InteractivePromptCommand, z as BrowserInteractiveSessionControllerOptions } from "./sandbox-CQ2YTLtO.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-CcaBTVg3.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BELrFH4f.js";
-import { $ as DurablePlanDecisionResult, $i as UpdateUserOptions, $n as RolloutScorer, $r as SandboxTerminalCreateOptions, $t as GpuLeaseStatus, A as CommitTaskSessionOptions, Ai as SnapshotDeleteOutcome, An as ProcessSpawnOptions, Ar as SandboxFleetPolicy, At as FleetDriveTurnRequest, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, Bn as PublicTemplateVersionInfo, Br as SandboxFleetWorkspaceSnapshotResult, Bt as GitAuth, C as BranchOptions, Ci as SessionInterruptOptions, Cn as PreviewLinkWaitOptions, Cr as SandboxFleetMachine, Ct as FileUsageResult, Di as SessionResultOptions, Dn as ProcessLogEntry, Dr as SandboxFleetManifest, Dt as FleetDispatchResultBufferOptions, Ei as SessionMessageInputPart, En as ProcessListOptions, Er as SandboxFleetMachineSpec, Et as FleetDispatchResultBuffer, F as CreateSandboxFleetOptions, Fn as ProvisionEvent, Fr as SandboxFleetTraceOptions, G as DispatchedSession, Gi as TeeAttestationOptions, Gn as ReconcileSandboxFleetsOptions, Gr as SandboxPortPreviewLink, Gt as GitStatus, H as DevServerInfo, Hi as TaskSessionFileChange, Hn as PublishPublicTemplateVersionOptions, Hr as SandboxInfo, Ht as GitCommit, Ii as StartupDiagnostics, In as ProvisionResult, Ir as SandboxFleetUsage, It as ForkCounts, J as DriveTurnOptions, Ji as TeePublicKey, Jr as SandboxResources, Jt as GpuLeaseCommandResult, K as DownloadOptions, Ki as TeeAttestationReport, Kn as ReconcileSandboxFleetsResult, Kr as SandboxRemovalState, Kt as GpuLease, L as CreateSandboxFleetWithCoordinatorOptions, Li as StartupOperation, Ln as ProvisionStatus, Lr as SandboxFleetWorkspace, Lt as ForkIdempotency, M as CreateGpuLeaseOptions, Mi as SnapshotInfo, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, N as CreateIntelligenceReportOptions, Ni as SnapshotOptions, Nn as PromptOptions, Nr as SandboxFleetTraceEvent, Nt as FleetMachineId, Oi as SessionStatus, On as ProcessManager, Or as SandboxFleetManifestMachine, Ot as FleetDispatchStreamOptions, P as CreateRequestOptions, Pi as SnapshotResult, Pn as PromptResult, Pr as SandboxFleetTraceExport, Pt as FleetPromptDispatchOptions, Q as DurablePlan, Qi as TurnDriveResult, Qn as RolloutOptions, Qr as SandboxTerminalAttachOptions, Qt as GpuLeaseProviderName, R as CreateSandboxOptions, Ri as StorageConfig, Rn as ProvisionStep, Rr as SandboxFleetWorkspaceReconcileResult, Rt as ForkLookupOptions, S as BatchTaskResult, Si as SessionInfo, Sn as PreviewLinkManager, Sr as SandboxFleetIntelligenceEnvelope, St as FileUsageOptions, T as ChunkedUploadResult, Ti as SessionMessage, Tn as ProcessInfo, Tr as SandboxFleetMachineRecord, Tt as FleetDispatchCancelResult, U as DirectoryPermission, Ui as TaskSessionInfo, Un as ReapExpiredSandboxFleetsOptions, Ur as SandboxIntelligenceEnvelope, Ut as GitConfig, V as DeleteOptions, Vi as TaskSessionCommitResult, Vn as PublishPublicTemplateOptions, Vr as SandboxIdentity, Vt as GitBranch, W as DispatchPromptOptions, Wi as TaskSessionProfile, Wn as ReapExpiredSandboxFleetsResult, Wr as SandboxPortBinding, Wt as GitDiff, X as DriverInfo, Xi as TokenRefreshHandler, Xn as Rollout, Xr as SandboxRuntimeHealth, Xt as GpuLeaseExecResult, Y as DriverConfig, Yi as TeePublicKeyResponse, Yr as SandboxRuntimeCapabilities, Yt as GpuLeaseExecOptions, Z as DriverType, Zi as TokenUsage, Zn as RolloutChildResult, Zr as SandboxStatus, Zt as GpuLeaseManager, _ as BatchBackend, _a as parseBackendType, _i as SessionEventStreamOptions, _n as NetworkManager, _r as SandboxFleetDispatchFailureClass, _t as FileRenameResult, aa as WorkspaceOperationLookup, ai as SandboxTraceEvent, an as IntelligenceReportCompareTo, ar as SandboxConfig, at as EgressManager, b as BatchRunRequest, bi as SessionFailureReason, bn as PermissionsManager, br as SandboxFleetDriverTimings, bt as FileTreeOptions, c as AttachGpuLeaseOptions, ca as WriteManyOptions, ci as SandboxUser, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, da as BatchEventDataMap, di as SecretInfo, dn as ListSandboxFleetOptions, dr as SandboxDeleteOutcome, dt as ExecResult, ea as UploadOptions, ei as SandboxTerminalInfo, en as HostAgentDriverConfig, er as RolloutStartResult, f as BackendInfo, fa as BatchSidecarGroup, fi as SecretsManager, fn as ListSandboxOptions, fr as SandboxEnvironment, ft as FileInfo, g as BackendStatus, ga as BackendType, gi as SessionBackendCredentials, gn as NetworkConfig, gr as SandboxFleetCostEstimate, gt as FileReadResult, h as BackendRuntimeConfigUpdate, ha as ALL_BACKEND_TYPES, hi as SentSessionMessage, hn as MkdirOptions, hr as SandboxFleetArtifactSpec, ht as FileReadError, ia as WaitForRolloutOptions, ii as SandboxTraceBundle, in as IntelligenceReportBudget, ir as SSHCredentials, it as EgressDenial, j as CompletedTurnResult, ji as SnapshotIdempotency, jn as ProcessStatus, jr as SandboxFleetToken, jt as FleetExecDispatchOptions, ki as SnapshotDeleteAcknowledgement, kn as ProcessSignal, kr as SandboxFleetOperationsSummary, kt as FleetDriveTurnOutcome, l as AttachSandboxFleetMachineOptions, la as BatchBackendStats, li as SearchMatch, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, lt as ExactProcessSpawnOptions, m as BackendMcpServerStatus, ma as PublicBatchRunRequest, mi as SendSessionMessageRequest, mn as McpServerConfig, mr as SandboxFleetArtifact, mt as FileReadBatchResult, n as AccessPolicyRule, na as UsageInfo, ni as SandboxTerminalRequestOptions, nn as InstalledTool, nr as RolloutTurnPart, nt as EffectiveBackendProfile, oa as WriteFileOptions, oi as SandboxTraceExport, on as IntelligenceReportSubjectType, or as SandboxConnection, ot as EgressPolicy, p as BackendManager, pa as BatchTaskUsage, pi as SendSessionMessageOptions, pn as MAX_EGRESS_DENIALS_LIMIT, pr as SandboxEvent, pt as FileReadBatchOptions, q as DownloadProgress, qi as TeeAttestationResponse, qn as RenameOptions, qr as SandboxResourceUsage, qt as GpuLeaseBilling, r as AddUserOptions, ra as WaitForOptions, ri as SandboxTerminals, rn as IntelligenceReport, rr as SSHCommandDescriptor, rt as EffectiveBackendSource, sa as WriteManyFile, si as SandboxTraceOptions, sn as IntelligenceReportWindow, sr as SandboxCreateOutcome, st as EnsureDevServerOptions, t as AcceleratorKind, ta as UploadProgress, ti as SandboxTerminalManager, tn as HostAgentRuntimeBackend, tr as RolloutStatus, tt as EffectiveBackend, u as BackendCapabilities, ua as BatchEvent, ui as SearchOptions, un as ListOptions, ur as SandboxDeleteOptions, ut as ExecOptions, v as BatchResult, vi as SessionExecutionInfo, vn as NonHostAgentDriverConfig, vr as SandboxFleetDispatchResponse, vt as FileSystem, w as ChunkedUploadOptions, wi as SessionListOptions, wn as Process, wr as SandboxFleetMachineMeteredUsage, wt as FileWriteResult, x as BatchTask, xi as SessionForkOptions, xn as PreviewLinkInfo, xr as SandboxFleetInfo, xt as FileTreeResult, y as BatchRunOptions, yi as SessionExecutionStatus, yn as PermissionLevel, yr as SandboxFleetDriverCapability, yt as FileTreeFile, z as CreateSessionOptions, zi as SubscriptionInfo, zn as PublicTemplateInfo, zr as SandboxFleetWorkspaceRestoreResult, zt as GPU_LEASE_PROVIDER_NAMES } from "./types-BL3VHr3R.js";
-import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-Cs9nH2Ct.js";
+import { $ as DriverType, $i as TokenUsage, $n as RolloutChildResult, $r as SandboxStatus, $t as GpuLeaseManager, A as CommitTaskSessionOptions, Ai as SessionStatus, An as ProcessManager, Ar as SandboxFleetManifestMachine, At as FleetDispatchStreamOptions, B as CreateSandboxOptions, Bi as StorageConfig, Bn as ProvisionStep, Br as SandboxFleetWorkspaceReconcileResult, Bt as ForkLookupOptions, C as BranchOptions, Ci as SessionForkOptions, Cn as PreviewLinkInfo, Cr as SandboxFleetInfo, Ct as FileTreeResult, Di as SessionMessage, Dn as ProcessInfo, Dr as SandboxFleetMachineRecord, Dt as FleetDispatchCancelResult, Ei as SessionListOptions, En as Process, Er as SandboxFleetMachineMeteredUsage, Et as FileWriteResult, F as CreateIntelligenceReportOptions, Fi as SnapshotOptions, Fn as PromptOptions, Fr as SandboxFleetTraceEvent, Ft as FleetMachineId, G as DirectoryPermission, Gi as TaskSessionInfo, Gn as ReapExpiredSandboxFleetsOptions, Gr as SandboxIntelligenceEnvelope, Gt as GitConfig, H as CreateTaskSessionOptions, Hi as TaskSessionChanges, Hn as PublicTemplateVersionInfo, Hr as SandboxFleetWorkspaceSnapshotResult, Ht as GitAuth, I as CreateRequestOptions, Ii as SnapshotResult, In as PromptResult, Ir as SandboxFleetTraceExport, It as FleetPromptDispatchOptions, J as DownloadOptions, Ji as TeeAttestationReport, Jn as ReconcileSandboxFleetsResult, Jr as SandboxRemovalState, Jt as GpuLease, K as DispatchPromptOptions, Ki as TaskSessionProfile, Kn as ReapExpiredSandboxFleetsResult, Kr as SandboxPortBinding, Kt as GitDiff, L as CreateSandboxFleetOptions, Ln as ProvisionEvent, Lr as SandboxFleetTraceOptions, M as ConversationTurnOptions, Mi as SnapshotDeleteOutcome, Mn as ProcessSpawnOptions, Mr as SandboxFleetPolicy, Mt as FleetDriveTurnRequest, N as ConversationTurnResult, Ni as SnapshotIdempotency, Nn as ProcessStatus, Nr as SandboxFleetToken, Nt as FleetExecDispatchOptions, Oi as SessionMessageInputPart, On as ProcessListOptions, Or as SandboxFleetMachineSpec, Ot as FleetDispatchResultBuffer, P as CreateGpuLeaseOptions, Pi as SnapshotInfo, Pn as PromptInputPart, Pr as SandboxFleetTraceBundle, Q as DriverInfo, Qi as TokenRefreshHandler, Qn as Rollout, Qr as SandboxRuntimeHealth, Qt as GpuLeaseExecResult, Ri as StartupDiagnostics, Rn as ProvisionResult, Rr as SandboxFleetUsage, Rt as ForkCounts, S as BatchTaskResult, Si as SessionFailureReason, Sn as PermissionsManager, Sr as SandboxFleetDriverTimings, St as FileTreeOptions, T as ChunkedUploadResult, Ti as SessionInterruptOptions, Tn as PreviewLinkWaitOptions, Tr as SandboxFleetMachine, Tt as FileUsageResult, U as DeleteOptions, Ui as TaskSessionCommitResult, Un as PublishPublicTemplateOptions, Ur as SandboxIdentity, Ut as GitBranch, V as CreateSessionOptions, Vi as SubscriptionInfo, Vn as PublicTemplateInfo, Vr as SandboxFleetWorkspaceRestoreResult, Vt as GPU_LEASE_PROVIDER_NAMES, W as DevServerInfo, Wi as TaskSessionFileChange, Wn as PublishPublicTemplateVersionOptions, Wr as SandboxInfo, Wt as GitCommit, X as DriveTurnOptions, Xi as TeePublicKey, Xr as SandboxResources, Xt as GpuLeaseCommandResult, Y as DownloadProgress, Yi as TeeAttestationResponse, Yn as RenameOptions, Yr as SandboxResourceUsage, Yt as GpuLeaseBilling, Z as DriverConfig, Zi as TeePublicKeyResponse, Zr as SandboxRuntimeCapabilities, Zt as GpuLeaseExecOptions, _ as BatchBackend, _a as ALL_BACKEND_TYPES, _i as SentSessionMessage, _n as MkdirOptions, _r as SandboxFleetArtifactSpec, _t as FileReadError, aa as WaitForOptions, ai as SandboxTerminals, an as IntelligenceReport, ar as SSHCommandDescriptor, at as EffectiveBackendSource, b as BatchRunRequest, bi as SessionExecutionInfo, bn as NonHostAgentDriverConfig, br as SandboxFleetDispatchResponse, bt as FileSystem, c as AttachGpuLeaseOptions, ca as WriteFileOptions, ci as SandboxTraceExport, cn as IntelligenceReportSubjectType, cr as SandboxConnection, ct as EgressPolicy, d as BackendConfig, da as BatchBackendStats, di as SearchMatch, dn as ListMessagesOptions, dr as SandboxDeleteAcknowledgement, dt as ExactProcessSpawnOptions, ea as TurnDriveResult, ei as SandboxTerminalAttachOptions, en as GpuLeaseProviderName, er as RolloutOptions, et as DurablePlan, f as BackendInfo, fa as BatchEvent, fi as SearchOptions, fn as ListOptions, fr as SandboxDeleteOptions, ft as ExecOptions, g as BackendStatus, ga as PublicBatchRunRequest, gi as SendSessionMessageRequest, gn as McpServerConfig, gr as SandboxFleetArtifact, gt as FileReadBatchResult, h as BackendRuntimeConfigUpdate, ha as BatchTaskUsage, hi as SendSessionMessageOptions, hn as MAX_EGRESS_DENIALS_LIMIT, hr as SandboxEvent, ht as FileReadBatchOptions, ia as UsageInfo, ii as SandboxTerminalRequestOptions, in as InstalledTool, ir as RolloutTurnPart, it as EffectiveBackendProfile, j as CompletedTurnResult, ji as SnapshotDeleteAcknowledgement, jn as ProcessSignal, jr as SandboxFleetOperationsSummary, jt as FleetDriveTurnOutcome, ki as SessionResultOptions, kn as ProcessLogEntry, kr as SandboxFleetManifest, kt as FleetDispatchResultBufferOptions, l as AttachSandboxFleetMachineOptions, la as WriteManyFile, li as SandboxTraceOptions, ln as IntelligenceReportWindow, lr as SandboxCreateOutcome, lt as EnsureDevServerOptions, m as BackendMcpServerStatus, ma as BatchSidecarGroup, mi as SecretsManager, mn as ListSandboxOptions, mr as SandboxEnvironment, mt as FileInfo, n as AccessPolicyRule, na as UploadOptions, ni as SandboxTerminalInfo, nn as HostAgentDriverConfig, nr as RolloutStartResult, oa as WaitForRolloutOptions, oi as SandboxTraceBundle, on as IntelligenceReportBudget, or as SSHCredentials, ot as EgressDenial, p as BackendManager, pa as BatchEventDataMap, pi as SecretInfo, pn as ListSandboxFleetOptions, pr as SandboxDeleteOutcome, pt as ExecResult, q as DispatchedSession, qi as TeeAttestationOptions, qn as ReconcileSandboxFleetsOptions, qr as SandboxPortPreviewLink, qt as GitStatus, r as AddUserOptions, ra as UploadProgress, ri as SandboxTerminalManager, rn as HostAgentRuntimeBackend, rr as RolloutStatus, rt as EffectiveBackend, sa as WorkspaceOperationLookup, si as SandboxTraceEvent, sn as IntelligenceReportCompareTo, sr as SandboxConfig, st as EgressManager, t as AcceleratorKind, ta as UpdateUserOptions, ti as SandboxTerminalCreateOptions, tn as GpuLeaseStatus, tr as RolloutScorer, tt as DurablePlanDecisionResult, u as BackendCapabilities, ua as WriteManyOptions, ui as SandboxUser, ur as SandboxCreateReceipt, ut as EventStreamOptions, v as BatchResult, va as BackendType, vi as SessionBackendCredentials, vn as NetworkConfig, vr as SandboxFleetCostEstimate, vt as FileReadResult, w as ChunkedUploadOptions, wi as SessionInfo, wn as PreviewLinkManager, wr as SandboxFleetIntelligenceEnvelope, wt as FileUsageOptions, x as BatchTask, xi as SessionExecutionStatus, xn as PermissionLevel, xr as SandboxFleetDriverCapability, xt as FileTreeFile, y as BatchRunOptions, ya as parseBackendType, yi as SessionEventStreamOptions, yn as NetworkManager, yr as SandboxFleetDispatchFailureClass, yt as FileRenameResult, z as CreateSandboxFleetWithCoordinatorOptions, zi as StartupOperation, zn as ProvisionStatus, zr as SandboxFleetWorkspace, zt as ForkIdempotency } from "./types-B3C-MizG.js";
+import { C as isBackendRegistryInteractionKind, S as backendRegistryResponseSchema, T as parseBackendRegistryResponseBody, _ as BackendRegistryInteractionKind, a as Team, b as backendRegistryEntrySchema, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, g as BackendRegistryEntry, h as BackendRegistryCapabilities, i as Sandbox, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet, v as BackendRegistryResponse, w as parseBackendRegistryResponse, x as backendRegistryInteractionKindSchema, y as backendRegistryCapabilitiesSchema } from "./client-C_mFKZwS.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CS-t6tPU.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-BzAxTiqF.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as SandboxErrorJson, g as TimeoutError, h as StateError, i as EgressProxyRecoveryError, l as PartialFailureError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxFailureDetail, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-BoD3Ifbd.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-B7QDBlIQ.js";
-import { o as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DPXKKBJu.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-BpQhOdXp.js";
+import { o as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DT_pNtbV.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -4438,4 +4438,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type ConversationTurnOptions, type ConversationTurnResult, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/index.js

@@ -1,10 +1,10 @@
-import { _ as deriveAgentRunOutcome, b as parseBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, m as normalizeRuntimeBackendConfig, u as parseSSEStream, v as ALL_BACKEND_TYPES, y as backendTypeSchema } from "./runtime-api-BpOFn4cB.js";
+import { _ as deriveAgentRunOutcome, b as parseBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, m as normalizeRuntimeBackendConfig, u as parseSSEStream, v as ALL_BACKEND_TYPES, y as backendTypeSchema } from "./runtime-api-C10Hg1OF.js";
 import { a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as ServerError, h as ValidationError, i as EgressProxyRecoveryError, l as PartialFailureError, m as TimeoutError, n as CapabilityError, o as KeyBudgetExhaustedError, p as StateError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
-import { _ as parseBackendRegistryResponse, a as splitInlineProfileSkills, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as splitInlineProfileFileMounts, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryEntrySchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-H5uiGOhe.js";
+import { _ as parseBackendRegistryResponse, a as splitInlineProfileSkills, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as splitInlineProfileFileMounts, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as validateDeferredProfileFileMounts, p as backendRegistryEntrySchema, r as materializeProfileFileMounts, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-C2AGfwGT.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, c as createInteractiveControlHolderId, l as interactiveSessionIdentityDigest, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, t as BrowserInteractiveSessionControlController } from "./browser-interactive-control-controller-Dv0gbFMu.js";
-import { A as toOtelJson, C as collectAgentResponseText, D as buildTraceExportPayload, O as exportTraceBundle, S as collectAgentFinalMessageText, T as isToolBearingEvent, _ as TerminalStream, a as WorkspaceImages, c as SandboxTaskSession, d as agentInteractiveSessionPromptRequestDigest, f as InteractiveTerminalFrameLog, g as InteractiveSessionController, h as BrowserInteractiveSessionController, k as otelTraceIdForTangleTrace, l as SandboxSession, m as createInteractiveTerminalSession, o as GPU_LEASE_PROVIDER_NAMES, p as createInteractiveTerminalCapture, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as InteractiveSessionHandle, v as TerminalStreamError, w as getSandboxEventText, x as applySandboxEventText, y as TERMINAL_WS_ECHO_SUBPROTOCOL } from "./sandbox-0VHkiqla.js";
+import { A as toOtelJson, C as collectAgentResponseText, D as buildTraceExportPayload, O as exportTraceBundle, S as collectAgentFinalMessageText, T as isToolBearingEvent, _ as TerminalStream, a as WorkspaceImages, c as SandboxTaskSession, d as agentInteractiveSessionPromptRequestDigest, f as InteractiveTerminalFrameLog, g as InteractiveSessionController, h as BrowserInteractiveSessionController, k as otelTraceIdForTangleTrace, l as SandboxSession, m as createInteractiveTerminalSession, o as GPU_LEASE_PROVIDER_NAMES, p as createInteractiveTerminalCapture, s as MAX_EGRESS_DENIALS_LIMIT, t as SandboxInstance, u as InteractiveSessionHandle, v as TerminalStreamError, w as getSandboxEventText, x as applySandboxEventText, y as TERMINAL_WS_ECHO_SUBPROTOCOL } from "./sandbox-9IUdHeyj.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DilBgjXG.js";
-import { t as TangleSandboxClient } from "./tangle-NaAvpHBK.js";
+import { t as TangleSandboxClient } from "./tangle-B-w03_fQ.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{runtime-api-BpOFn4cB.js → runtime-api-C10Hg1OF.js}

@@ -1305,6 +1305,7 @@ var SandboxRuntimeApi = class {
 			body: JSON.stringify({
 				...options.sessionId !== void 0 ? { sessionId: options.sessionId } : {},
 				...options.title !== void 0 ? { title: options.title } : {},
+				...options.retention !== void 0 ? { retention: options.retention } : {},
 				...options.parentId !== void 0 ? { parentID: options.parentId } : {},
 				...backend && Object.keys(backend).length > 0 ? { backend } : {}
 			})

package/dist/runtime.d.ts

@@ -1,6 +1,6 @@
-import { $r as SandboxTerminalCreateOptions, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, Ct as FileUsageResult, Si as SessionInfo, St as FileUsageOptions, T as ChunkedUploadResult, Ti as SessionMessage, Ui as TaskSessionInfo, Vi as TaskSessionCommitResult, Wr as SandboxPortBinding, Xr as SandboxRuntimeHealth, _i as SessionEventStreamOptions, _t as FileRenameResult, bt as FileTreeOptions, ei as SandboxTerminalInfo, hi as SentSessionMessage, ln as ListMessagesOptions, mi as SendSessionMessageRequest, mt as FileReadBatchResult, ni as SandboxTerminalRequestOptions, oa as WriteFileOptions, pi as SendSessionMessageOptions, pr as SandboxEvent, pt as FileReadBatchOptions, qn as RenameOptions, ta as UploadProgress, ti as SandboxTerminalManager, vi as SessionExecutionInfo, w as ChunkedUploadOptions, wt as FileWriteResult, xt as FileTreeResult, yi as SessionExecutionStatus, z as CreateSessionOptions } from "./types-BL3VHr3R.js";
+import { A as CommitTaskSessionOptions, Ct as FileTreeResult, Di as SessionMessage, Et as FileWriteResult, Gi as TaskSessionInfo, H as CreateTaskSessionOptions, Hi as TaskSessionChanges, Kr as SandboxPortBinding, Qr as SandboxRuntimeHealth, St as FileTreeOptions, T as ChunkedUploadResult, Tt as FileUsageResult, Ui as TaskSessionCommitResult, V as CreateSessionOptions, Yn as RenameOptions, _i as SentSessionMessage, bi as SessionExecutionInfo, ca as WriteFileOptions, dn as ListMessagesOptions, gi as SendSessionMessageRequest, gt as FileReadBatchResult, hi as SendSessionMessageOptions, hr as SandboxEvent, ht as FileReadBatchOptions, ii as SandboxTerminalRequestOptions, ni as SandboxTerminalInfo, ra as UploadProgress, ri as SandboxTerminalManager, ti as SandboxTerminalCreateOptions, w as ChunkedUploadOptions, wi as SessionInfo, wt as FileUsageOptions, xi as SessionExecutionStatus, yi as SessionEventStreamOptions, yt as FileRenameResult } from "./types-B3C-MizG.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as SandboxErrorJson, g as TimeoutError, h as StateError, l as PartialFailureError, m as ServerError, n as CapabilityError, p as SandboxFailureDetail, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-BoD3Ifbd.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-B7QDBlIQ.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-BpQhOdXp.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/runtime.js

@@ -1,4 +1,4 @@
-import { _ as deriveAgentRunOutcome, a as uploadChunked, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, t as SandboxRuntimeApi } from "./runtime-api-BpOFn4cB.js";
+import { _ as deriveAgentRunOutcome, a as uploadChunked, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, t as SandboxRuntimeApi } from "./runtime-api-C10Hg1OF.js";
 import { a as FileWriteConflictError, c as NotFoundError, d as SandboxError, f as ServerError, h as ValidationError, l as PartialFailureError, m as TimeoutError, n as CapabilityError, p as StateError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
 import { n as combineAbortSignals } from "./abort-signal-si1WMfJb.js";
 //#region src/runtime-client.ts

package/dist/{sandbox-0VHkiqla.js → sandbox-9IUdHeyj.js}

@@ -1,4 +1,4 @@
-import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, i as sessionHeaders, m as normalizeRuntimeBackendConfig, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as mergeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-BpOFn4cB.js";
+import { a as uploadChunked, c as encodePromptForWire, d as applyRequestedModel, f as assertCurrentBackendType, g as deriveAgentResultOutcome, h as createAgentRunOutcomeTracker, i as sessionHeaders, m as normalizeRuntimeBackendConfig, n as normalizeSessionInfo, o as SANDBOX_PROXY_REQUEST_MAX_BYTES, p as mergeRuntimeBackendConfig, r as appendSessionIdQuery, t as SandboxRuntimeApi, u as parseSSEStream } from "./runtime-api-C10Hg1OF.js";
 import { c as NotFoundError, d as SandboxError, f as ServerError, g as parseErrorResponse, h as ValidationError, m as TimeoutError, n as CapabilityError, p as StateError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-CdDyExth.js";
 import { c as createInteractiveControlHolderId, d as interactiveSessionControlReleaseResponseSchema, f as interactiveSessionControlValidationResponseSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, p as interactiveSessionStatusResponseSchema, r as browserInteractiveTerminalEndpoint, s as assertInteractiveSessionRef, u as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-Dv0gbFMu.js";
 import { n as combineAbortSignals, t as awaitWithAbort } from "./abort-signal-si1WMfJb.js";
@@ -3591,10 +3591,35 @@ const MAX_TIMER_MS = 2147483647;
 */
 function usableTimeoutMs(timeoutMs) {
 	if (timeoutMs === void 0) return void 0;
-	if (typeof timeoutMs !== "number" || !Number.isInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > MAX_TIMER_MS) throw new RangeError(`timeoutMs must be an integer between 1 and ${MAX_TIMER_MS}ms; got ${typeof timeoutMs === "number" ? String(timeoutMs) : typeof timeoutMs}`);
+	const got = timerMsViolation(timeoutMs);
+	if (got !== void 0) throw new RangeError(`timeoutMs must be an integer between 1 and ${MAX_TIMER_MS}ms; got ${got}`);
 	return { timeoutMs };
 }
 /**
+* The execution time limit to send, or `undefined` when the caller supplied
+* none and the runtime default applies. A supplied value the runtime would
+* refuse (non-integer, non-positive, or wider than a timer can hold) is a
+* caller bug and fails here, before the request is dispatched.
+*/
+function usableExecutionTtlMs(ttlMs) {
+	if (ttlMs === void 0) return void 0;
+	const got = timerMsViolation(ttlMs);
+	if (got !== void 0) throw new ValidationError(`ttlMs must be an integer between 1 and ${MAX_TIMER_MS}ms; got ${got}`, { ttlMs: "Must be a positive integer of milliseconds" });
+	return ttlMs;
+}
+/**
+* `undefined` when `value` is a duration a timer can hold (a positive integer
+* of milliseconds within the 32-bit field), else a description of what was
+* passed. The runtime `typeof` guard stays although the type says number: a
+* `Symbol` from an untyped JavaScript caller reaches here, and `${value}` on
+* one throws TypeError before the intended error could be built — the wrong
+* error for the wrong reason.
+*/
+function timerMsViolation(value) {
+	if (typeof value === "number" && Number.isInteger(value) && value > 0 && value <= MAX_TIMER_MS) return;
+	return typeof value === "number" ? String(value) : typeof value;
+}
+/**
 * A sandbox instance with methods for interaction.
 */
 var SandboxInstance = class SandboxInstance {
@@ -4249,7 +4274,7 @@ var SandboxInstance = class SandboxInstance {
 	* Returns the complete response after the agent finishes.
 	*/
 	async prompt(message, options) {
-		await this.ensureRunning();
+		if (options?.ttlMs === void 0 || timerMsViolation(options.ttlMs) === void 0) await this.ensureRunning();
 		const startTime = Date.now();
 		let responseText;
 		const outcomeTracker = createAgentRunOutcomeTracker();
@@ -4459,6 +4484,7 @@ var SandboxInstance = class SandboxInstance {
 		const runControlRef = options?.runControlRef ? AgentExactRunControlRefSchema.safeParse(options.runControlRef) : void 0;
 		if (runControlRef && !runControlRef.success) throw new ValidationError("Invalid runControlRef", { runControlRef: runControlRef.error.message });
 		if (runControlRef?.success && (runControlRef.data.environmentId !== this.id || runControlRef.data.sessionId !== options?.sessionId || runControlRef.data.executionId !== options?.executionId)) throw new ValidationError("runControlRef does not belong to this sandbox dispatch", { runControlRef: "environmentId, sessionId, and executionId must match the dispatch" });
+		const ttlMs = usableExecutionTtlMs(options?.ttlMs);
 		await this.ensureRunning();
 		const timeoutMs = typeof options?.timeoutMs === "number" && options.timeoutMs > 0 ? options.timeoutMs : void 0;
 		const timeoutSignal = timeoutMs ? AbortSignal.timeout(timeoutMs) : void 0;
@@ -4524,6 +4550,7 @@ var SandboxInstance = class SandboxInstance {
 					metadata: options?.context,
 					requireVisibleAssistantOutput: options?.requireVisibleAssistantOutput,
 					...timeoutMs ? { timeoutMs } : {},
+					...ttlMs !== void 0 ? { ttlMs } : {},
 					...options?.detach ? { detach: true } : {},
 					backend: this.buildRunBackendBody(options?.backend, internal?.forceFullProfile ?? false, options?.model)
 				})
@@ -6009,7 +6036,8 @@ var SandboxInstance = class SandboxInstance {
 		return {
 			get: () => this.egressGet(),
 			update: (policy) => this.egressUpdate(policy),
-			denials: (options) => this.egressDenials(options)
+			denials: (options) => this.egressDenials(options),
+			activity: (options) => this.egressActivity(options)
 		};
 	}
 	/**
@@ -6144,6 +6172,67 @@ var SandboxInstance = class SandboxInstance {
 		}
 		return denials;
 	}
+	/**
+	* What the sandbox reached, and whether that is decidable.
+	*
+	* Every malformed answer leaves as a typed `ServerError` rather than a
+	* defaulted record. That matters more here than on `denials()`: a caller uses
+	* this to establish a NEGATIVE claim, so inventing a `complete: true` record
+	* from a broken response would manufacture the very proof it came for.
+	*/
+	async egressActivity(options) {
+		const limit = options?.limit;
+		if (limit !== void 0) {
+			if (!Number.isInteger(limit) || limit < 1) throw new ValidationError(`egress activity limit must be a positive integer, got ${limit}`);
+			if (limit > 500) throw new ValidationError(`egress activity limit must be at most 500, got ${limit}`);
+		}
+		const query = limit === void 0 ? "" : `?limit=${encodeURIComponent(limit)}`;
+		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/egress/activity${query}`);
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		}
+		let body;
+		try {
+			body = await response.json();
+		} catch (cause) {
+			const error = new ServerError("Egress activity response was malformed: body is not valid JSON", 502);
+			error.cause = cause;
+			throw error;
+		}
+		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress activity response was malformed: body is not an object", 502);
+		const raw = body.activity;
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new ServerError("Egress activity response was malformed: activity is not a record", 502);
+		const record = raw;
+		if (typeof record.complete !== "boolean" || typeof record.requestsObserved !== "number" || !Number.isInteger(record.requestsObserved) || record.requestsObserved < 0 || typeof record.unparsedLines !== "number" || !Number.isInteger(record.unparsedLines) || record.unparsedLines < 0 || !Array.isArray(record.destinations) || !Array.isArray(record.incompleteReasons) || !record.incompleteReasons.every((one) => typeof one === "string") || record.complete !== (record.incompleteReasons.length === 0)) throw new ServerError("Egress activity response was malformed: activity is not an activity record", 502);
+		const destinations = [];
+		for (const [index, entry] of record.destinations.entries()) {
+			const row = entry;
+			if (typeof row !== "object" || row === null || typeof row.host !== "string" || row.host.length === 0 || row.action !== "allow" && row.action !== "reject" || typeof row.count !== "number" || !Number.isInteger(row.count) || row.count < 0 || ![
+				"firstAt",
+				"lastAt",
+				"rejectedBy"
+			].every((field) => {
+				const value = row[field];
+				return value === void 0 || value === null || typeof value === "string";
+			})) throw new ServerError(`Egress activity response was malformed: destination ${index} is not a destination`, 502);
+			destinations.push({
+				host: row.host,
+				action: row.action,
+				count: row.count,
+				...typeof row.firstAt === "string" ? { firstAt: row.firstAt } : {},
+				...typeof row.lastAt === "string" ? { lastAt: row.lastAt } : {},
+				...typeof row.rejectedBy === "string" ? { rejectedBy: row.rejectedBy } : {}
+			});
+		}
+		return {
+			destinations,
+			requestsObserved: record.requestsObserved,
+			unparsedLines: record.unparsedLines,
+			complete: record.complete,
+			incompleteReasons: record.incompleteReasons
+		};
+	}
 	async gpuAttach(options) {
 		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/gpu/leases`, {
 			method: "POST",
@@ -7741,6 +7830,104 @@ var SandboxInstance = class SandboxInstance {
 		});
 		return { state: "running" };
 	}
+	/** Advance exactly the named turn while retaining the native conversation.
+	* Admission receipts are independent of expiring event logs. A previous
+	* turn's terminal session status cannot settle a newly submitted message. */
+	async driveConversationTurn(message, opts) {
+		if (!opts.sessionId || !opts.turnId) throw new Error("Conversation sessionId and turnId are required");
+		if (opts.wallCapMs !== void 0 && (!Number.isFinite(opts.wallCapMs) || opts.wallCapMs <= 0)) throw new Error("wallCapMs must be a positive finite duration");
+		const cached = await this.findCompletedTurn(opts.turnId, { sessionId: opts.sessionId });
+		let info = await this._sessionStatus(opts.sessionId);
+		if (!info) {
+			if (cached) throw new StateError("Retained result has no verifiable conversation admission", "unverified", "verified admission", void 0, "MESSAGE_ADMISSION_UNVERIFIED");
+			if (opts.allowDispatch === false) return { state: "not_admitted" };
+			await this.createSession({
+				sessionId: opts.sessionId,
+				retention: "workspace"
+			});
+			info = await this._sessionStatus(opts.sessionId);
+			if (!info) throw new Error("Conversation session creation was not confirmed");
+		}
+		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(opts.sessionId)}/admissions/${encodeURIComponent(opts.turnId)}/check`, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				parts: encodePromptForWire(message),
+				turnId: opts.turnId
+			}),
+			signal: opts.signal
+		});
+		if (!response.ok) throw parseErrorResponse(response.status, await response.text(), void 0, response.headers);
+		const body = await response.json();
+		if (body.requestVerified !== true || !Object.hasOwn(body, "receipt")) throw new Error("Runtime did not verify the durable message admission request");
+		let executionId;
+		if (body.receipt === null) {
+			if (cached) throw new StateError("Retained result has no matching request evidence", "unverified", "verified admission", void 0, "MESSAGE_ADMISSION_UNVERIFIED");
+			if (opts.allowDispatch === false) return { state: "not_admitted" };
+			if (isSessionInFlight(info)) return { state: "running" };
+			const parts = typeof message === "string" ? [{
+				type: "text",
+				text: message
+			}] : message;
+			const receipt = await this.session(opts.sessionId).sendMessage({
+				parts: [...parts],
+				turnId: opts.turnId
+			}, {
+				...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {},
+				...opts.signal ? { signal: opts.signal } : {}
+			});
+			if (!receipt.info?.id) throw new Error("Message admission returned no execution identity");
+			return {
+				state: "running",
+				executionId: receipt.info.id
+			};
+		}
+		if (typeof body.receipt?.info?.id !== "string" || !body.receipt.info.id || body.receipt.processing !== true) throw new Error("Runtime returned an invalid message admission receipt");
+		executionId = body.receipt.info.id;
+		if (cached) return {
+			...settleTurnDrive(cached.result),
+			executionId
+		};
+		const run = (await this._sessionRuns(opts.sessionId)).find((candidate) => candidate.executionId === executionId);
+		if (run?.status === "active") {
+			const elapsedMs = Date.now() - run.startedAt;
+			if (opts.wallCapMs !== void 0 && elapsedMs > opts.wallCapMs) {
+				await this._interrupt(opts.sessionId, { executionId });
+				return {
+					state: "failed",
+					executionId,
+					error: "Conversation turn exceeded its authorized wall-clock duration"
+				};
+			}
+			const requests = (await this.session(opts.sessionId).interactions()).filter((request) => request.binding.executionId === executionId);
+			if (requests.length) return {
+				state: "awaiting_input",
+				executionId,
+				requests
+			};
+			return {
+				state: "running",
+				executionId,
+				startedAt: new Date(run.startedAt),
+				elapsedMs
+			};
+		}
+		if (!run) {
+			const completed = await this.findCompletedTurn(opts.turnId, { sessionId: opts.sessionId });
+			return completed ? {
+				...settleTurnDrive(completed.result),
+				executionId
+			} : {
+				state: "failed",
+				executionId,
+				error: "The admitted turn's result is unavailable; execution was not repeated"
+			};
+		}
+		return {
+			...settleTurnDrive({ ...await this._sessionResult(opts.sessionId, { executionId }, info) }),
+			executionId
+		};
+	}
 	/**
 	* Mint a scoped, time-bounded JWT for browser access (Issue #913 Gap 1).
 	* Authority is the caller's `TANGLE_API_KEY` (sk-tan-*); signing secrets

package/dist/{sandbox-Dehr5LTP.d.ts → sandbox-CQ2YTLtO.d.ts}

@@ -1,6 +1,6 @@
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-CcaBTVg3.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as InteractiveAttachOptions, f as InteractiveControlClaimAcknowledgement, h as InteractiveSessionStatus, m as InteractiveRequestOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimOptions, s as InteractiveSessionControlTransport } from "./browser-interactive-control-controller-BELrFH4f.js";
-import { $ as DurablePlanDecisionResult, A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Bi as TaskSessionChanges, C as BranchOptions, Ci as SessionInterruptOptions, D as CodeExecutionResult, Di as SessionResultOptions, E as CodeExecutionOptions, Fn as ProvisionEvent, G as DispatchedSession, Gi as TeeAttestationOptions, Gt as GitStatus, Hr as SandboxInfo, Ht as GitCommit, Ii as StartupDiagnostics, In as ProvisionResult, It as ForkCounts, J as DriveTurnOptions, Jn as RestoreSnapshotOptions, Kt as GpuLease, Lt as ForkIdempotency, Mi as SnapshotInfo, Mn as PromptInputPart, Mr as SandboxFleetTraceBundle, Ni as SnapshotOptions, Nn as PromptOptions, O as CodeLanguage, On as ProcessManager, Pi as SnapshotResult, Pn as PromptResult, Q as DurablePlan, Qi as TurnDriveResult, Qn as RolloutOptions, Qr as SandboxTerminalAttachOptions, Rt as ForkLookupOptions, Si as SessionInfo, Sn as PreviewLinkManager, Ti as SessionMessage, Ui as TaskSessionInfo, Vi as TaskSessionCommitResult, Vt as GitBranch, W as DispatchPromptOptions, Wr as SandboxPortBinding, Wt as GitDiff, X as DriverInfo, Xn as Rollout, Xr as SandboxRuntimeHealth, Yi as TeePublicKeyResponse, Yn as ResumeOptions, Yr as SandboxRuntimeCapabilities, Zr as SandboxStatus, Zt as GpuLeaseManager, _i as SessionEventStreamOptions, _n as NetworkManager, aa as WorkspaceOperationLookup, an as IntelligenceReportCompareTo, at as EgressManager, bn as PermissionsManager, ca as WriteManyOptions, cn as JsonValue, cr as SandboxCreateReceipt, ct as EventStreamOptions, d as BackendConfig, dt as ExecResult, er as RolloutStartResult, hi as SentSessionMessage, ia as WaitForRolloutOptions, ii as SandboxTraceBundle, in as IntelligenceReportBudget, ir as SSHCredentials, j as CompletedTurnResult, ki as SnapshotDeleteAcknowledgement, li as SearchMatch, ln as ListMessagesOptions, lr as SandboxDeleteAcknowledgement, mi as SendSessionMessageRequest, nn as InstalledTool, oa as WriteFileOptions, or as SandboxConnection, p as BackendManager, pi as SendSessionMessageOptions, pr as SandboxEvent, qi as TeeAttestationResponse, qr as SandboxResourceUsage, ra as WaitForOptions, ri as SandboxTerminals, rn as IntelligenceReport, rr as SSHCommandDescriptor, sa as WriteManyFile, si as SandboxTraceOptions, sn as IntelligenceReportWindow, ui as SearchOptions, ur as SandboxDeleteOptions, ut as ExecOptions, vi as SessionExecutionInfo, vt as FileSystem, wi as SessionListOptions, wt as FileWriteResult, xi as SessionForkOptions, z as CreateSessionOptions } from "./types-BL3VHr3R.js";
+import { $r as SandboxStatus, $t as GpuLeaseManager, A as CommitTaskSessionOptions, An as ProcessManager, Bt as ForkLookupOptions, C as BranchOptions, Ci as SessionForkOptions, D as CodeExecutionResult, Di as SessionMessage, E as CodeExecutionOptions, Ei as SessionListOptions, Et as FileWriteResult, Fi as SnapshotOptions, Fn as PromptOptions, Gi as TaskSessionInfo, H as CreateTaskSessionOptions, Hi as TaskSessionChanges, Ii as SnapshotResult, In as PromptResult, Jt as GpuLease, K as DispatchPromptOptions, Kr as SandboxPortBinding, Kt as GitDiff, Ln as ProvisionEvent, M as ConversationTurnOptions, N as ConversationTurnResult, O as CodeLanguage, Pi as SnapshotInfo, Pn as PromptInputPart, Pr as SandboxFleetTraceBundle, Q as DriverInfo, Qn as Rollout, Qr as SandboxRuntimeHealth, Ri as StartupDiagnostics, Rn as ProvisionResult, Rt as ForkCounts, Sn as PermissionsManager, Ti as SessionInterruptOptions, Ui as TaskSessionCommitResult, Ut as GitBranch, V as CreateSessionOptions, Wr as SandboxInfo, Wt as GitCommit, X as DriveTurnOptions, Xn as RestoreSnapshotOptions, Yi as TeeAttestationResponse, Yr as SandboxResourceUsage, Zi as TeePublicKeyResponse, Zn as ResumeOptions, Zr as SandboxRuntimeCapabilities, _i as SentSessionMessage, aa as WaitForOptions, ai as SandboxTerminals, an as IntelligenceReport, ar as SSHCommandDescriptor, bi as SessionExecutionInfo, bt as FileSystem, ca as WriteFileOptions, cr as SandboxConnection, d as BackendConfig, di as SearchMatch, dn as ListMessagesOptions, dr as SandboxDeleteAcknowledgement, ea as TurnDriveResult, ei as SandboxTerminalAttachOptions, er as RolloutOptions, et as DurablePlan, fi as SearchOptions, fr as SandboxDeleteOptions, ft as ExecOptions, gi as SendSessionMessageRequest, hi as SendSessionMessageOptions, hr as SandboxEvent, in as InstalledTool, j as CompletedTurnResult, ji as SnapshotDeleteAcknowledgement, ki as SessionResultOptions, la as WriteManyFile, li as SandboxTraceOptions, ln as IntelligenceReportWindow, nr as RolloutStartResult, oa as WaitForRolloutOptions, oi as SandboxTraceBundle, on as IntelligenceReportBudget, or as SSHCredentials, p as BackendManager, pt as ExecResult, q as DispatchedSession, qi as TeeAttestationOptions, qt as GitStatus, sa as WorkspaceOperationLookup, sn as IntelligenceReportCompareTo, st as EgressManager, tt as DurablePlanDecisionResult, ua as WriteManyOptions, un as JsonValue, ur as SandboxCreateReceipt, ut as EventStreamOptions, wi as SessionInfo, wn as PreviewLinkManager, yi as SessionEventStreamOptions, yn as NetworkManager, zt as ForkIdempotency } from "./types-B3C-MizG.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -1467,6 +1467,15 @@ declare class SandboxInstance {
   private egressGet;
   private egressUpdate;
   private egressDenials;
+  /**
+   * What the sandbox reached, and whether that is decidable.
+   *
+   * Every malformed answer leaves as a typed `ServerError` rather than a
+   * defaulted record. That matters more here than on `denials()`: a caller uses
+   * this to establish a NEGATIVE claim, so inventing a `complete: true` record
+   * from a broken response would manufacture the very proof it came for.
+   */
+  private egressActivity;
   private gpuAttach;
   private gpuList;
   private gpuExec;
@@ -1980,6 +1989,10 @@ declare class SandboxInstance {
    * callers can treat it as terminal without their own retry bookkeeping.
    */
   driveTurn(message: string | PromptInputPart[], opts: DriveTurnOptions): Promise<TurnDriveResult>;
+  /** Advance exactly the named turn while retaining the native conversation.
+   * Admission receipts are independent of expiring event logs. A previous
+   * turn's terminal session status cannot settle a newly submitted message. */
+  driveConversationTurn(message: string | PromptInputPart[], opts: ConversationTurnOptions): Promise<ConversationTurnResult>;
   /**
    * Mint a scoped, time-bounded JWT for browser access (Issue #913 Gap 1).
    * Authority is the caller's `TANGLE_API_KEY` (sk-tan-*); signing secrets

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TangleSandboxClientConfig, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../index-DPXKKBJu.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TangleSandboxClientConfig, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../index-DT_pNtbV.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as JsonResponseParamTypes, d as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as SandboxCreateParamTypes, n as JOB_SANDBOX_CREATE, o as AgentSandboxBlueprintAbi, r as JOB_SANDBOX_DELETE, s as ITangleJobsAbi, t as TangleSandboxClient, u as SandboxCreateResponseParamTypes } from "../tangle-NaAvpHBK.js";
+import { a as TANGLE_JOBS_CONTRACT, c as JsonResponseParamTypes, d as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as SandboxCreateParamTypes, n as JOB_SANDBOX_CREATE, o as AgentSandboxBlueprintAbi, r as JOB_SANDBOX_DELETE, s as ITangleJobsAbi, t as TangleSandboxClient, u as SandboxCreateResponseParamTypes } from "../tangle-B-w03_fQ.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient };

package/dist/{tangle-NaAvpHBK.js → tangle-B-w03_fQ.js}

@@ -1,5 +1,5 @@
 import { g as parseErrorResponse } from "./errors-CdDyExth.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-0VHkiqla.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-9IUdHeyj.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-BL3VHr3R.d.ts → types-B3C-MizG.d.ts}

@@ -1409,6 +1409,8 @@ interface SandboxResources {
  * ```
  */
 interface CreateSandboxOptions {
+  /** Suppress implicit owner secrets, startup scripts, and Hub authority. */
+  ownerContext?: "inherit" | "isolated";
   /**
    * Environment or container image to run.
    *
@@ -2553,8 +2555,29 @@ interface PromptOptions {
    * provider, or base URL replaces the default backend configuration.
    */
   backend?: Partial<BackendConfig>;
-  /** Timeout in milliseconds */
+  /**
+   * Per-run budget in milliseconds. Bounds the client-side stream and is
+   * forwarded to the runtime, where the backend's first-output watchdog
+   * honors it. It sets the execution's time limit only when `ttlMs` is unset,
+   * and is then subject to the same deployment maximum as `ttlMs`.
+   */
   timeoutMs?: number;
+  /**
+   * Execution time limit in milliseconds. A positive integer; the runtime
+   * cancels the execution when it elapses and the terminal error names the
+   * limit. A value above the deployment's maximum (six hours by default) is
+   * refused with `EXECUTION_TTL_EXCEEDS_LIMIT` before the run starts, by the
+   * sandbox API on proxied calls and by the runtime itself on every call. The
+   * code is the same from both; the surrounding error body follows each
+   * service's own envelope, so read the code rather than the shape. Unset, the
+   * runtime falls back to `timeoutMs`, then to its one-hour default.
+   *
+   * This limit governs how long the run may LIVE. A blocking call that waits
+   * for the run is separately bounded by the runtime's one-hour request
+   * timeout; a longer limit needs a streaming or session-message call, which
+   * answers before the run finishes.
+   */
+  ttlMs?: number;
   /** Additional context */
   context?: Record<string, unknown>;
   /**
@@ -3157,6 +3180,8 @@ interface SessionListOptions {
 }
 /** Options for creating a runtime agent session. */
 interface CreateSessionOptions {
+  /** Workspace conversations survive idle-session collection until explicitly deleted. */
+  retention?: "idle" | "workspace";
   /** Stable caller-supplied idempotency key. Repeating create with the same
    * id returns the existing session without creating another workspace or
    * backend session. Omit to let the runtime mint a random id. */
@@ -3451,6 +3476,25 @@ interface DispatchedSession {
  * the turn through `SandboxSession.sendMessage()`. The session owns execution
  * and gateway replay after the request returns.
  */
+/** Repeated messages in one native session, unlike the one-session-per-task driver. */
+interface ConversationTurnOptions {
+  sessionId: string;
+  turnId: string;
+  /** False is a passive settlement/cancellation lookup; never admits new work. */
+  allowDispatch?: boolean;
+  timeoutMs?: number;
+  signal?: AbortSignal;
+  wallCapMs?: number;
+}
+type ConversationTurnResult = (TurnDriveResult & {
+  executionId?: string;
+}) | {
+  state: "not_admitted";
+} | {
+  state: "awaiting_input";
+  executionId: string;
+  requests: _$_tangle_network_agent_interface0.InteractionRequest[];
+};
 interface DriveTurnOptions {
   /** Deterministic session id — required, it is the resume key. Every
    * tick for the same logical turn MUST pass the same id so a re-invoke
@@ -4937,6 +4981,52 @@ interface EgressDenial {
 }
 /** Largest `limit` the denials route accepts; it rejects anything above. */
 declare const MAX_EGRESS_DENIALS_LIMIT = 50;
+/** Whether the egress proxy allowed or refused a request. */
+type EgressAction = "allow" | "reject";
+/** One destination a sandbox reached, or was refused, in the inspected window. */
+interface EgressDestination {
+  /** Destination host, port removed, e.g. "api.openai.com". */
+  host: string;
+  action: EgressAction;
+  /** Requests to this host with this action, inside the inspected window. */
+  count: number;
+  /** ISO-8601 time of the earliest such request the window carried. */
+  firstAt?: string;
+  /** ISO-8601 time of the latest such request the window carried. */
+  lastAt?: string;
+  /** Which proxy transform refused it. Only set when `action` is "reject". */
+  rejectedBy?: string;
+}
+/**
+ * Why an activity record cannot support a claim that a sandbox reached nothing.
+ *
+ * `hop-unreachable` is the one a client is most likely to see: a layer between
+ * this SDK and the host holding the proxy log did not answer. It is distinct
+ * from `log-unreadable`, which means the host reached the proxy and could not
+ * read its log.
+ */
+type EgressIncompleteReason = "window-truncated" | "unparsed-lines" | "host-limit-reached" | "log-unreadable" | "hop-unreachable";
+/**
+ * What a sandbox reached in one inspected window, and whether that is decidable.
+ *
+ * Read `complete` before reading anything into an empty `destinations` list.
+ * `destinations: []` with `complete: true` is evidence the sandbox reached
+ * nothing; `destinations: []` with `complete: false` is an absence of evidence,
+ * and `incompleteReasons` names what was missing. `provesNoEgress` below makes
+ * that check one call.
+ */
+interface EgressActivityRecord {
+  /** Every distinct host/action pair observed, allowed and refused alike. */
+  destinations: EgressDestination[];
+  /** Audit lines successfully interpreted as a request. */
+  requestsObserved: number;
+  /** Lines that looked like audit output but could not be interpreted. */
+  unparsedLines: number;
+  /** Whether this record can carry a NEGATIVE claim. */
+  complete: boolean;
+  /** Empty exactly when `complete` is true. */
+  incompleteReasons: EgressIncompleteReason[];
+}
 /**
  * Egress policy manager for runtime egress configuration.
  * Access via `sandbox.egress`.
@@ -5000,6 +5090,29 @@ interface EgressManager {
   denials(options?: {
     limit?: number;
   }): Promise<EgressDenial[]>;
+  /**
+   * What this sandbox actually reached, allowed as well as refused, and whether
+   * that observation can be trusted.
+   *
+   * The opposite question to {@link EgressManager.denials}, and deliberately NOT
+   * best-effort. `denials()` may return an empty list because nothing was
+   * refused or because the proxy could not be read, and says so. This method
+   * exists because some callers — a benchmark proving a control arm reached
+   * nothing, an audit establishing a sandbox stayed offline — need those two
+   * cases to be distinguishable, so a failure is reported as
+   * `complete: false` with a reason rather than as an empty list.
+   *
+   * Check `complete`, or call {@link provesNoEgress}, before reading an empty
+   * `destinations` list as proof.
+   *
+   * @param options.limit - Most destinations to return, 1 to
+   *   {@link MAX_EGRESS_ACTIVITY_LIMIT}. Omit to let the server choose.
+   * @throws ServerError when egress is not enabled for the sandbox (409) — a
+   *   configuration answer, deliberately not reported as an undecidable record.
+   */
+  activity(options?: {
+    limit?: number;
+  }): Promise<EgressActivityRecord>;
 }
 /**
  * Port exposure and runtime network state for a sandbox.
@@ -6361,4 +6474,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { DurablePlanDecisionResult as $, UpdateUserOptions as $i, RolloutScorer as $n, SandboxTerminalCreateOptions as $r, GpuLeaseStatus as $t, CommitTaskSessionOptions as A, SnapshotDeleteOutcome as Ai, ProcessSpawnOptions as An, SandboxFleetPolicy as Ar, FleetDriveTurnRequest as At, CreateTaskSessionOptions as B, TaskSessionChanges as Bi, PublicTemplateVersionInfo as Bn, SandboxFleetWorkspaceSnapshotResult as Br, GitAuth as Bt, BranchOptions as C, SessionInterruptOptions as Ci, PreviewLinkWaitOptions as Cn, SandboxFleetMachine as Cr, FileUsageResult as Ct, CodeExecutionResult as D, SessionResultOptions as Di, ProcessLogEntry as Dn, SandboxFleetManifest as Dr, FleetDispatchResultBufferOptions as Dt, CodeExecutionOptions as E, SessionMessageInputPart as Ei, ProcessListOptions as En, SandboxFleetMachineSpec as Er, FleetDispatchResultBuffer as Et, CreateSandboxFleetOptions as F, SshKeysManager as Fi, ProvisionEvent as Fn, SandboxFleetTraceOptions as Fr, FleetPromptDispatchResult as Ft, DispatchedSession as G, TeeAttestationOptions as Gi, ReconcileSandboxFleetsOptions as Gn, SandboxPortPreviewLink as Gr, GitStatus as Gt, DevServerInfo as H, TaskSessionFileChange as Hi, PublishPublicTemplateVersionOptions as Hn, SandboxInfo as Hr, GitCommit as Ht, CreateSandboxFleetTokenOptions as I, StartupDiagnostics as Ii, ProvisionResult as In, SandboxFleetUsage as Ir, ForkCounts as It, DriveTurnOptions as J, TeePublicKey as Ji, RestoreSnapshotOptions as Jn, SandboxResources as Jr, GpuLeaseCommandResult as Jt, DownloadOptions as K, TeeAttestationReport as Ki, ReconcileSandboxFleetsResult as Kn, SandboxRemovalState as Kr, GpuLease as Kt, CreateSandboxFleetWithCoordinatorOptions as L, StartupOperation as Li, ProvisionStatus as Ln, SandboxFleetWorkspace as Lr, ForkIdempotency as Lt, CreateGpuLeaseOptions as M, SnapshotInfo as Mi, PromptInputPart as Mn, SandboxFleetTraceBundle as Mr, FleetExecDispatchResult as Mt, CreateIntelligenceReportOptions as N, SnapshotOptions as Ni, PromptOptions as Nn, SandboxFleetTraceEvent as Nr, FleetMachineId as Nt, CodeLanguage as O, SessionStatus as Oi, ProcessManager as On, SandboxFleetManifestMachine as Or, FleetDispatchStreamOptions as Ot, CreateRequestOptions as P, SnapshotResult as Pi, PromptResult as Pn, SandboxFleetTraceExport as Pr, FleetPromptDispatchOptions as Pt, DurablePlan as Q, TurnDriveResult as Qi, RolloutOptions as Qn, SandboxTerminalAttachOptions as Qr, GpuLeaseProviderName as Qt, CreateSandboxOptions as R, StorageConfig as Ri, ProvisionStep as Rn, SandboxFleetWorkspaceReconcileResult as Rr, ForkLookupOptions as Rt, BatchTaskResult as S, SessionInfo as Si, PreviewLinkManager as Sn, SandboxFleetIntelligenceEnvelope as Sr, FileUsageOptions as St, ChunkedUploadResult as T, SessionMessage as Ti, ProcessInfo as Tn, SandboxFleetMachineRecord as Tr, FleetDispatchCancelResult as Tt, DirectoryPermission as U, TaskSessionInfo as Ui, ReapExpiredSandboxFleetsOptions as Un, SandboxIntelligenceEnvelope as Ur, GitConfig as Ut, DeleteOptions as V, TaskSessionCommitResult as Vi, PublishPublicTemplateOptions as Vn, SandboxIdentity as Vr, GitBranch as Vt, DispatchPromptOptions as W, TaskSessionProfile as Wi, ReapExpiredSandboxFleetsResult as Wn, SandboxPortBinding as Wr, GitDiff as Wt, DriverInfo as X, TokenRefreshHandler as Xi, Rollout as Xn, SandboxRuntimeHealth as Xr, GpuLeaseExecResult as Xt, DriverConfig as Y, TeePublicKeyResponse as Yi, ResumeOptions as Yn, SandboxRuntimeCapabilities as Yr, GpuLeaseExecOptions as Yt, DriverType as Z, TokenUsage as Zi, RolloutChildResult as Zn, SandboxStatus as Zr, GpuLeaseManager as Zt, BatchBackend as _, parseBackendType as _a, SessionEventStreamOptions as _i, NetworkManager as _n, SandboxFleetDispatchFailureClass as _r, FileRenameResult as _t, AgentQuestionRequest as a, WorkspaceOperationLookup as aa, SandboxTraceEvent as ai, IntelligenceReportCompareTo as an, SandboxConfig as ar, EgressManager as at, BatchRunRequest as b, SessionFailureReason as bi, PermissionsManager as bn, SandboxFleetDriverTimings as br, FileTreeOptions as bt, AttachGpuLeaseOptions as c, WriteManyOptions as ca, SandboxUser as ci, JsonValue as cn, SandboxCreateReceipt as cr, EventStreamOptions as ct, BackendConfig as d, BatchEventDataMap as da, SecretInfo as di, ListSandboxFleetOptions as dn, SandboxDeleteOutcome as dr, ExecResult as dt, UploadOptions as ea, SandboxTerminalInfo as ei, HostAgentDriverConfig as en, RolloutStartResult as er, DurablePlanSnapshot as et, BackendInfo as f, BatchSidecarGroup as fa, SecretsManager as fi, ListSandboxOptions as fn, SandboxEnvironment as fr, FileInfo as ft, BackendStatus as g, BackendType as ga, SessionBackendCredentials as gi, NetworkConfig as gn, SandboxFleetCostEstimate as gr, FileReadResult as gt, BackendRuntimeConfigUpdate as h, ALL_BACKEND_TYPES as ha, SentSessionMessage as hi, MkdirOptions as hn, SandboxFleetArtifactSpec as hr, FileReadError as ht, AgentApprovalRequirement as i, WaitForRolloutOptions as ia, SandboxTraceBundle as ii, IntelligenceReportBudget as in, SSHCredentials as ir, EgressDenial as it, CompletedTurnResult as j, SnapshotIdempotency as ji, ProcessStatus as jn, SandboxFleetToken as jr, FleetExecDispatchOptions as jt, CodeResultPart as k, SnapshotDeleteAcknowledgement as ki, ProcessSignal as kn, SandboxFleetOperationsSummary as kr, FleetDriveTurnOutcome as kt, AttachSandboxFleetMachineOptions as l, BatchBackendStats as la, SearchMatch as li, ListMessagesOptions as ln, SandboxDeleteAcknowledgement as lr, ExactProcessSpawnOptions as lt, BackendMcpServerStatus as m, PublicBatchRunRequest as ma, SendSessionMessageRequest as mi, McpServerConfig as mn, SandboxFleetArtifact as mr, FileReadBatchResult as mt, AccessPolicyRule as n, UsageInfo as na, SandboxTerminalRequestOptions as ni, InstalledTool as nn, RolloutTurnPart as nr, EffectiveBackendProfile as nt, AgentRunStatus as o, WriteFileOptions as oa, SandboxTraceExport as oi, IntelligenceReportSubjectType as on, SandboxConnection as or, EgressPolicy as ot, BackendManager as p, BatchTaskUsage as pa, SendSessionMessageOptions as pi, MAX_EGRESS_DENIALS_LIMIT as pn, SandboxEvent as pr, FileReadBatchOptions as pt, DownloadProgress as q, TeeAttestationResponse as qi, RenameOptions as qn, SandboxResourceUsage as qr, GpuLeaseBilling as qt, AddUserOptions as r, WaitForOptions as ra, SandboxTerminals as ri, IntelligenceReport as rn, SSHCommandDescriptor as rr, EffectiveBackendSource as rt, AgentToolInvocation as s, WriteManyFile as sa, SandboxTraceOptions as si, IntelligenceReportWindow as sn, SandboxCreateOutcome as sr, EnsureDevServerOptions as st, AcceleratorKind as t, UploadProgress as ta, SandboxTerminalManager as ti, HostAgentRuntimeBackend as tn, RolloutStatus as tr, EffectiveBackend as tt, BackendCapabilities as u, BatchEvent as ua, SearchOptions as ui, ListOptions as un, SandboxDeleteOptions as ur, ExecOptions as ut, BatchResult as v, SessionExecutionInfo as vi, NonHostAgentDriverConfig as vn, SandboxFleetDispatchResponse as vr, FileSystem as vt, ChunkedUploadOptions as w, SessionListOptions as wi, Process as wn, SandboxFleetMachineMeteredUsage as wr, FileWriteResult as wt, BatchTask as x, SessionForkOptions as xi, PreviewLinkInfo as xn, SandboxFleetInfo as xr, FileTreeResult as xt, BatchRunOptions as y, SessionExecutionStatus as yi, PermissionLevel as yn, SandboxFleetDriverCapability as yr, FileTreeFile as yt, CreateSessionOptions as z, SubscriptionInfo as zi, PublicTemplateInfo as zn, SandboxFleetWorkspaceRestoreResult as zr, GPU_LEASE_PROVIDER_NAMES as zt };
+export { DriverType as $, TokenUsage as $i, RolloutChildResult as $n, SandboxStatus as $r, GpuLeaseManager as $t, CommitTaskSessionOptions as A, SessionStatus as Ai, ProcessManager as An, SandboxFleetManifestMachine as Ar, FleetDispatchStreamOptions as At, CreateSandboxOptions as B, StorageConfig as Bi, ProvisionStep as Bn, SandboxFleetWorkspaceReconcileResult as Br, ForkLookupOptions as Bt, BranchOptions as C, SessionForkOptions as Ci, PreviewLinkInfo as Cn, SandboxFleetInfo as Cr, FileTreeResult as Ct, CodeExecutionResult as D, SessionMessage as Di, ProcessInfo as Dn, SandboxFleetMachineRecord as Dr, FleetDispatchCancelResult as Dt, CodeExecutionOptions as E, SessionListOptions as Ei, Process as En, SandboxFleetMachineMeteredUsage as Er, FileWriteResult as Et, CreateIntelligenceReportOptions as F, SnapshotOptions as Fi, PromptOptions as Fn, SandboxFleetTraceEvent as Fr, FleetMachineId as Ft, DirectoryPermission as G, TaskSessionInfo as Gi, ReapExpiredSandboxFleetsOptions as Gn, SandboxIntelligenceEnvelope as Gr, GitConfig as Gt, CreateTaskSessionOptions as H, TaskSessionChanges as Hi, PublicTemplateVersionInfo as Hn, SandboxFleetWorkspaceSnapshotResult as Hr, GitAuth as Ht, CreateRequestOptions as I, SnapshotResult as Ii, PromptResult as In, SandboxFleetTraceExport as Ir, FleetPromptDispatchOptions as It, DownloadOptions as J, TeeAttestationReport as Ji, ReconcileSandboxFleetsResult as Jn, SandboxRemovalState as Jr, GpuLease as Jt, DispatchPromptOptions as K, TaskSessionProfile as Ki, ReapExpiredSandboxFleetsResult as Kn, SandboxPortBinding as Kr, GitDiff as Kt, CreateSandboxFleetOptions as L, SshKeysManager as Li, ProvisionEvent as Ln, SandboxFleetTraceOptions as Lr, FleetPromptDispatchResult as Lt, ConversationTurnOptions as M, SnapshotDeleteOutcome as Mi, ProcessSpawnOptions as Mn, SandboxFleetPolicy as Mr, FleetDriveTurnRequest as Mt, ConversationTurnResult as N, SnapshotIdempotency as Ni, ProcessStatus as Nn, SandboxFleetToken as Nr, FleetExecDispatchOptions as Nt, CodeLanguage as O, SessionMessageInputPart as Oi, ProcessListOptions as On, SandboxFleetMachineSpec as Or, FleetDispatchResultBuffer as Ot, CreateGpuLeaseOptions as P, SnapshotInfo as Pi, PromptInputPart as Pn, SandboxFleetTraceBundle as Pr, FleetExecDispatchResult as Pt, DriverInfo as Q, TokenRefreshHandler as Qi, Rollout as Qn, SandboxRuntimeHealth as Qr, GpuLeaseExecResult as Qt, CreateSandboxFleetTokenOptions as R, StartupDiagnostics as Ri, ProvisionResult as Rn, SandboxFleetUsage as Rr, ForkCounts as Rt, BatchTaskResult as S, SessionFailureReason as Si, PermissionsManager as Sn, SandboxFleetDriverTimings as Sr, FileTreeOptions as St, ChunkedUploadResult as T, SessionInterruptOptions as Ti, PreviewLinkWaitOptions as Tn, SandboxFleetMachine as Tr, FileUsageResult as Tt, DeleteOptions as U, TaskSessionCommitResult as Ui, PublishPublicTemplateOptions as Un, SandboxIdentity as Ur, GitBranch as Ut, CreateSessionOptions as V, SubscriptionInfo as Vi, PublicTemplateInfo as Vn, SandboxFleetWorkspaceRestoreResult as Vr, GPU_LEASE_PROVIDER_NAMES as Vt, DevServerInfo as W, TaskSessionFileChange as Wi, PublishPublicTemplateVersionOptions as Wn, SandboxInfo as Wr, GitCommit as Wt, DriveTurnOptions as X, TeePublicKey as Xi, RestoreSnapshotOptions as Xn, SandboxResources as Xr, GpuLeaseCommandResult as Xt, DownloadProgress as Y, TeeAttestationResponse as Yi, RenameOptions as Yn, SandboxResourceUsage as Yr, GpuLeaseBilling as Yt, DriverConfig as Z, TeePublicKeyResponse as Zi, ResumeOptions as Zn, SandboxRuntimeCapabilities as Zr, GpuLeaseExecOptions as Zt, BatchBackend as _, ALL_BACKEND_TYPES as _a, SentSessionMessage as _i, MkdirOptions as _n, SandboxFleetArtifactSpec as _r, FileReadError as _t, AgentQuestionRequest as a, WaitForOptions as aa, SandboxTerminals as ai, IntelligenceReport as an, SSHCommandDescriptor as ar, EffectiveBackendSource as at, BatchRunRequest as b, SessionExecutionInfo as bi, NonHostAgentDriverConfig as bn, SandboxFleetDispatchResponse as br, FileSystem as bt, AttachGpuLeaseOptions as c, WriteFileOptions as ca, SandboxTraceExport as ci, IntelligenceReportSubjectType as cn, SandboxConnection as cr, EgressPolicy as ct, BackendConfig as d, BatchBackendStats as da, SearchMatch as di, ListMessagesOptions as dn, SandboxDeleteAcknowledgement as dr, ExactProcessSpawnOptions as dt, TurnDriveResult as ea, SandboxTerminalAttachOptions as ei, GpuLeaseProviderName as en, RolloutOptions as er, DurablePlan as et, BackendInfo as f, BatchEvent as fa, SearchOptions as fi, ListOptions as fn, SandboxDeleteOptions as fr, ExecOptions as ft, BackendStatus as g, PublicBatchRunRequest as ga, SendSessionMessageRequest as gi, McpServerConfig as gn, SandboxFleetArtifact as gr, FileReadBatchResult as gt, BackendRuntimeConfigUpdate as h, BatchTaskUsage as ha, SendSessionMessageOptions as hi, MAX_EGRESS_DENIALS_LIMIT as hn, SandboxEvent as hr, FileReadBatchOptions as ht, AgentApprovalRequirement as i, UsageInfo as ia, SandboxTerminalRequestOptions as ii, InstalledTool as in, RolloutTurnPart as ir, EffectiveBackendProfile as it, CompletedTurnResult as j, SnapshotDeleteAcknowledgement as ji, ProcessSignal as jn, SandboxFleetOperationsSummary as jr, FleetDriveTurnOutcome as jt, CodeResultPart as k, SessionResultOptions as ki, ProcessLogEntry as kn, SandboxFleetManifest as kr, FleetDispatchResultBufferOptions as kt, AttachSandboxFleetMachineOptions as l, WriteManyFile as la, SandboxTraceOptions as li, IntelligenceReportWindow as ln, SandboxCreateOutcome as lr, EnsureDevServerOptions as lt, BackendMcpServerStatus as m, BatchSidecarGroup as ma, SecretsManager as mi, ListSandboxOptions as mn, SandboxEnvironment as mr, FileInfo as mt, AccessPolicyRule as n, UploadOptions as na, SandboxTerminalInfo as ni, HostAgentDriverConfig as nn, RolloutStartResult as nr, DurablePlanSnapshot as nt, AgentRunStatus as o, WaitForRolloutOptions as oa, SandboxTraceBundle as oi, IntelligenceReportBudget as on, SSHCredentials as or, EgressDenial as ot, BackendManager as p, BatchEventDataMap as pa, SecretInfo as pi, ListSandboxFleetOptions as pn, SandboxDeleteOutcome as pr, ExecResult as pt, DispatchedSession as q, TeeAttestationOptions as qi, ReconcileSandboxFleetsOptions as qn, SandboxPortPreviewLink as qr, GitStatus as qt, AddUserOptions as r, UploadProgress as ra, SandboxTerminalManager as ri, HostAgentRuntimeBackend as rn, RolloutStatus as rr, EffectiveBackend as rt, AgentToolInvocation as s, WorkspaceOperationLookup as sa, SandboxTraceEvent as si, IntelligenceReportCompareTo as sn, SandboxConfig as sr, EgressManager as st, AcceleratorKind as t, UpdateUserOptions as ta, SandboxTerminalCreateOptions as ti, GpuLeaseStatus as tn, RolloutScorer as tr, DurablePlanDecisionResult as tt, BackendCapabilities as u, WriteManyOptions as ua, SandboxUser as ui, JsonValue as un, SandboxCreateReceipt as ur, EventStreamOptions as ut, BatchResult as v, BackendType as va, SessionBackendCredentials as vi, NetworkConfig as vn, SandboxFleetCostEstimate as vr, FileReadResult as vt, ChunkedUploadOptions as w, SessionInfo as wi, PreviewLinkManager as wn, SandboxFleetIntelligenceEnvelope as wr, FileUsageOptions as wt, BatchTask as x, SessionExecutionStatus as xi, PermissionLevel as xn, SandboxFleetDriverCapability as xr, FileTreeFile as xt, BatchRunOptions as y, parseBackendType as ya, SessionEventStreamOptions as yi, NetworkManager as yn, SandboxFleetDispatchFailureClass as yr, FileRenameResult as yt, CreateSandboxFleetWithCoordinatorOptions as z, StartupOperation as zi, ProvisionStatus as zn, SandboxFleetWorkspace as zr, ForkIdempotency as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.42.0",
+  "version": "0.45.0",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -137,9 +137,9 @@
     "yjs": "13.6.30",
     "@repo/shared": "0.0.0",
     "@tangle-network/runtime-contracts": "0.6.10",
-    "@tangle-network/cli-agent-registry": "0.4.5",
+    "@tangle-network/agent-profile-materialize": "0.20.1",
     "@tangle-network/sse-core": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.20.1"
+    "@tangle-network/cli-agent-registry": "0.4.5"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",