@tangle-network/sandbox 0.60.14-develop.20261005090620.c500518 → 0.60.14-develop.20261005092806.490fe89

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-CJ-53tMu.js";
-import { D as CodeExecutionResult, E as CodeExecutionOptions, Gi as SessionInfo, Kr as SandboxFleetParent, O as CodeLanguage, d as BackendConfig, k as CodeResultPart, qi as SessionListOptions, ro as BackendType } from "../types-XDnpktUp.js";
-import { i as Sandbox } from "../client-Dq2EiJ5U.js";
-import { u as PreviewAuthorizer } from "../preview-Copmpj9O.js";
+import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BB4hJD1Y.js";
+import { D as CodeExecutionResult, E as CodeExecutionOptions, Gi as SessionInfo, Kr as SandboxFleetParent, O as CodeLanguage, d as BackendConfig, k as CodeResultPart, qi as SessionListOptions, ro as BackendType } from "../types-D-NLWnw2.js";
+import { i as Sandbox } from "../client-BJIDfHnm.js";
+import { u as PreviewAuthorizer } from "../preview-DHNR04bX.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DY1CnWBn.js";
 import { k as assertCurrentBackendType } from "../interactive-controller-5_ixpFnR.js";
 import { c as NotFoundError, g as ValidationError, m as StateError } from "../errors-D1JIX7Jm.js";
-import { n as Sandbox } from "../client-CKp5_eSZ.js";
-import { t as SandboxInstance } from "../sandbox-Duvz9RDN.js";
+import { n as Sandbox } from "../client-Dn4C7eSu.js";
+import { t as SandboxInstance } from "../sandbox-Da0KPydY.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-Copmpj9O.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-DHNR04bX.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/{agent-run-outcome-COsuMcn_.d.ts → agent-run-outcome-ChSbW-Oa.d.ts}

@@ -1,4 +1,4 @@
-import { Dr as SandboxEvent, a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, s as AgentToolInvocation } from "./types-XDnpktUp.js";
+import { Dr as SandboxEvent, a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, s as AgentToolInvocation } from "./types-D-NLWnw2.js";
 import { InteractionRequest } from "@tangle-network/agent-interface";
 
 //#region src/agent-run-outcome.d.ts

package/dist/auth/index.js

@@ -1,4 +1,4 @@
-import { i as materializeCliAuthBundle, n as assertCliAuthReferenceSupported, r as cliAuthReferenceSchema } from "../cli-auth-bundle-CJSdRlx0.js";
+import { i as materializeCliAuthBundle, n as assertCliAuthReferenceSupported, r as cliAuthReferenceSchema } from "../cli-auth-bundle-CVOv-Cmb.js";
 //#region src/auth/tokens.ts
 const textEncoder = new TextEncoder();
 const textDecoder = new TextDecoder();

package/dist/{cli-auth-bundle-CJSdRlx0.js → cli-auth-bundle-CVOv-Cmb.js}

@@ -1,7 +1,374 @@
 import { n as BACKEND_TYPE } from "./backend-types-C7b_Gpa0.js";
 import { agentProfileJsonSchema, agentProfileSchema as agentProfileSchema$1 } from "@tangle-network/agent-interface";
 import { z } from "zod";
-//#region ../../../packages/cli-agent-registry/dist/specs-CuvDK4-Y.mjs
+//#region ../../../packages/cli-agent-registry/dist/native-session-contracts.mjs
+/**
+* The declared native session of every registered harness. Each entry is
+* proven by a conformance receipt (tests/harness-conformance/receipts) for
+* its pinned CLI version, or is listed in HARNESS_CONFORMANCE_PENDING.
+*
+* CLI versions are the pins in infra/nix (agent-clis.nix, flake.nix and
+* npm-locks). The registry test tests/harness-session-contract.test.ts
+* fails when a pin, a contract or an adapter's source moves without a new
+* receipt.
+*/
+const CLAUDE_PROJECTS = {
+	root: ".claude/projects",
+	files: ["*/{id}.jsonl", "*/{id}/subagents/**/*.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "claude-code.projects-jsonl"
+};
+const CODEX_ROLLOUTS = {
+	root: ".codex/sessions",
+	files: ["*/*/*/rollout-*-{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "codex.rollout-jsonl"
+};
+const GEMINI_CHATS = {
+	root: ".gemini/tmp",
+	files: ["*/chats/session-*{id}*.json"],
+	write: "json-rewrite",
+	shared: false,
+	format: "gemini.chat-json"
+};
+const KIMI_SESSIONS = {
+	root: ".kimi/sessions",
+	files: ["*/{id}/**", "*/{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "kimi.session-dir"
+};
+const HERMES_STATE = {
+	root: ".hermes",
+	files: [
+		"state.db",
+		"state.db-wal",
+		"state.db-shm"
+	],
+	write: "sqlite-wal",
+	shared: true,
+	format: "hermes.state-sqlite"
+};
+const NATIVE_SESSION_CONTRACTS = {
+	"claude-code": {
+		version: 1,
+		stores: [CLAUDE_PROJECTS],
+		identity: {
+			kind: "pre-minted",
+			args: ["--session-id", "{id}"]
+		},
+		resume: {
+			kind: "args",
+			args: ["--resume", "{id}"]
+		},
+		forbiddenArgs: ["--no-session-persistence", "--fork-session"],
+		storeEnv: { CLAUDE_CONFIG_DIR: ".claude" },
+		evidence: {
+			servedModel: "provider-response",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "2.1.286"
+	},
+	codex: {
+		version: 1,
+		stores: [CODEX_ROLLOUTS],
+		identity: {
+			kind: "first-event",
+			event: "thread.started",
+			deadlineMs: 3e4
+		},
+		resume: {
+			kind: "args",
+			args: [
+				"exec",
+				"resume",
+				"{id}"
+			]
+		},
+		forbiddenArgs: ["--ephemeral"],
+		storeEnv: { CODEX_HOME: ".codex" },
+		evidence: {
+			servedModel: "turn-context",
+			usage: "cumulative",
+			endingError: "session-record"
+		},
+		cliVersion: "0.145.0"
+	},
+	opencode: {
+		version: 1,
+		stores: [{
+			root: ".local/share/opencode",
+			files: [
+				"opencode.db",
+				"opencode.db-wal",
+				"opencode.db-shm"
+			],
+			write: "sqlite-wal",
+			shared: true,
+			format: "opencode.sqlite"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "sessionID",
+			deadlineMs: 3e5
+		},
+		resume: {
+			kind: "args",
+			args: ["--session", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: { XDG_DATA_HOME: ".local/share" },
+		evidence: {
+			servedModel: "turn-context",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "1.18.25"
+	},
+	pi: {
+		version: 1,
+		stores: [{
+			root: ".pi/agent/sessions",
+			files: ["**/*_{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "pi.session-jsonl"
+		}],
+		identity: {
+			kind: "pre-minted",
+			args: ["--session-id", "{id}"]
+		},
+		resume: {
+			kind: "args",
+			args: ["--session", "{id}"]
+		},
+		forbiddenArgs: [
+			"--no-session",
+			"--fork",
+			"--continue"
+		],
+		storeEnv: {
+			PI_CODING_AGENT_DIR: ".pi/agent",
+			PI_CODING_AGENT_SESSION_DIR: ".pi/agent/sessions",
+			"--session-dir": ".pi/agent/sessions"
+		},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "0.85.1"
+	},
+	"kimi-code": {
+		version: 1,
+		stores: [KIMI_SESSIONS],
+		identity: {
+			kind: "first-event",
+			event: "session",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--resume", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "1.49.0"
+	},
+	"factory-droids": {
+		version: 1,
+		stores: [{
+			root: ".factory/sessions",
+			files: ["*/{id}.jsonl", "*/{id}.settings.json"],
+			write: "jsonl-append",
+			shared: false,
+			format: "factory.session-jsonl"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "session_id",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--session-id", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "session-total",
+			endingError: "none"
+		},
+		cliVersion: "0.232.0"
+	},
+	amp: {
+		version: 1,
+		stores: [{
+			root: ".local/share/amp/threads",
+			files: ["{id}.json"],
+			write: "json-rewrite",
+			shared: false,
+			format: "amp.thread-json"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "thread",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: [
+				"threads",
+				"continue",
+				"{id}"
+			]
+		},
+		forbiddenArgs: [],
+		storeEnv: { XDG_DATA_HOME: ".local/share" },
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "0.0.1790887360-g98f23e"
+	},
+	prime: {
+		version: 1,
+		stores: [{
+			root: ".prime-provider/prime-agent-dirs",
+			files: ["**/*_{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "prime.session-jsonl"
+		}],
+		identity: {
+			kind: "api-created",
+			call: "acp session/new"
+		},
+		resume: { kind: "api" },
+		forbiddenArgs: ["--no-session"],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "0.7.2"
+	},
+	hermes: {
+		version: 1,
+		stores: [HERMES_STATE],
+		identity: {
+			kind: "first-event",
+			event: "session_id",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--resume", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: { HERMES_HOME: ".hermes" },
+		evidence: {
+			servedModel: "session-record",
+			usage: "session-total",
+			endingError: "none"
+		},
+		cliVersion: "2026.9.24"
+	},
+	forge: {
+		version: 1,
+		stores: [{
+			root: ".forge",
+			files: [
+				".forge.db",
+				".forge.db-wal",
+				".forge.db-shm"
+			],
+			write: "sqlite-wal",
+			shared: true,
+			format: "forge.sqlite"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "conversation",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--conversation-id", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "2.14.0"
+	},
+	openclaw: {
+		version: 1,
+		stores: [{
+			root: ".openclaw/agents",
+			files: ["**/{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "openclaw.session-jsonl"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "session",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--session-id", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "2026.7.1-2"
+	},
+	acp: {
+		version: 1,
+		stores: [
+			CLAUDE_PROJECTS,
+			CODEX_ROLLOUTS,
+			GEMINI_CHATS,
+			KIMI_SESSIONS,
+			HERMES_STATE
+		],
+		identity: {
+			kind: "api-created",
+			call: "acp session/new"
+		},
+		resume: { kind: "api" },
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "claude-agent-acp 0.64.2; codex-acp 0.16.0; gemini-cli 0.62.0"
+	}
+};
+//#endregion
+//#region ../../../packages/cli-agent-registry/dist/specs-DSy1cxjc.mjs
 z.globalRegistry.add(agentProfileSchema$1, {
 	id: "AgentProfile",
 	...agentProfileJsonSchema
@@ -9,6 +376,7 @@ z.globalRegistry.add(agentProfileSchema$1, {
 const CLI_AGENT_SPECS = [
 	{
 		name: BACKEND_TYPE.OPENCODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS.opencode,
 		messageStorageDir: ".opencode",
 		displayName: "OpenCode Agent",
 		description: "OpenCode CLI coding agent with native sessions, profiles, tools, and MCP.",
@@ -131,6 +499,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CLAUDE_CODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS["claude-code"],
 		runtime: {},
 		messageStorageDir: ".claude-code",
 		displayName: "Claude Code",
@@ -181,6 +550,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.KIMI_CODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS["kimi-code"],
 		messageStorageDir: ".kimi-code",
 		displayName: "Kimi Code",
 		description: "Moonshot AI Kimi Code CLI — headless non-interactive mode via `kimi --print --output-format stream-json --prompt ...`. Defaults to OAuth (Kimi Code subscription) with credentials materialized from the host-managed ~/.kimi/credentials/kimi-code.json; falls back to MOONSHOT_API_KEY when an apiKey is supplied.",
@@ -208,6 +578,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CODEX,
+		nativeSession: NATIVE_SESSION_CONTRACTS.codex,
 		messageStorageDir: ".codex",
 		displayName: "Codex",
 		description: "OpenAI Codex CLI-based agent backend.",
@@ -244,6 +615,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.AMP,
+		nativeSession: NATIVE_SESSION_CONTRACTS.amp,
 		messageStorageDir: ".amp-sessions",
 		displayName: "AMP (Sourcegraph)",
 		description: "Sourcegraph AMP CLI-based agent backend.",
@@ -270,6 +642,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.FACTORY_DROIDS,
+		nativeSession: NATIVE_SESSION_CONTRACTS["factory-droids"],
 		messageStorageDir: ".factory-droids",
 		displayName: "Factory Droids",
 		description: "Factory Droids CLI-based agent backend.",
@@ -291,6 +664,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.PI,
+		nativeSession: NATIVE_SESSION_CONTRACTS.pi,
 		runtime: {},
 		messageStorageDir: ".pi/agent",
 		displayName: "Pi",
@@ -319,6 +693,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.PRIME,
+		nativeSession: NATIVE_SESSION_CONTRACTS.prime,
 		messageStorageDir: ".prime-provider",
 		displayName: "Prime Agent (PrimeIntellect)",
 		description: "PrimeIntellect-ai/prime-agent — IPython-first coding agent (pi hard fork, fork line 0.7.x) driven over its native ACP mode. Model tuple travels via backend.model into a per-session materialized models.json, never env; the adapter pins PRIME_AGENT_CODING_AGENT_DIR to an isolated per-session agent dir (fail-closed harness-state isolation).",
@@ -341,6 +716,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.HERMES,
+		nativeSession: NATIVE_SESSION_CONTRACTS.hermes,
 		messageStorageDir: ".hermes-agent",
 		displayName: "Hermes Agent (Nous Research)",
 		description: "Open-source self-improving CLI agent. Persistent memory and skills live in $HERMES_HOME (pinned to the per-session workspace mount, not the read-only in-box $HOME) across same-tenant snapshot resumes — the learning loop is the differentiator. Provider-pluggable; defaults to OpenRouter via Tangle Router.",
@@ -369,6 +745,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.FORGE,
+		nativeSession: NATIVE_SESSION_CONTRACTS.forge,
 		messageStorageDir: ".forge-agent",
 		displayName: "Forge (forgecode.dev)",
 		description: "Rust-built multi-provider coding agent from tailcallhq/forgecode. Speaks anthropic/openai/openrouter/gemini/deepseek/kimi + local providers (ollama, lm_studio, llama_cpp). Credentials live in ~/.forge/.credentials.json, materialized via the standard authFiles pipeline — no interactive `forge provider login` required.",
@@ -400,6 +777,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.OPENCLAW,
+		nativeSession: NATIVE_SESSION_CONTRACTS.openclaw,
 		messageStorageDir: ".openclaw-agent",
 		displayName: "OpenClaw (Orchestrator)",
 		description: "Orchestrator-tier CLI agent that dispatches to underlying coding-agent CLIs (claude-cli, codex-cli, gemini-cli) via its built-in cliBackends plugin model. Use this when you want one entry point that intelligently routes tasks to the right coding harness.",
@@ -427,6 +805,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.NANOCLAW,
+		nativeSession: null,
 		messageStorageDir: ".nanoclaw-agent",
 		displayName: "NanoClaw",
 		description: "NanoClaw local socket bridge. Requires a running NanoClaw install and uses its `pnpm run chat` CLI channel; the adapter does not manage NanoClaw's Docker/service lifecycle.",
@@ -461,6 +840,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.ACP,
+		nativeSession: NATIVE_SESSION_CONTRACTS.acp,
 		messageStorageDir: ".acp-agent",
 		displayName: "ACP Bridge (multi-agent)",
 		description: "Generic Agent Client Protocol bridge — fronts any ACP-compliant agent binary (claude-agent-acp, codex-acp, gemini, openclaw acp, ...). Pick the backing agent via config.subAgent. One TypeScript adapter, many supported coding harnesses.",
@@ -482,6 +862,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CURSOR,
+		nativeSession: null,
 		messageStorageDir: ".cursor-sdk-sessions",
 		displayName: "Cursor Agent SDK",
 		description: "Cursor Agent SDK backend. Runs Cursor's local agent against the sandbox workspace via @cursor/sdk, using CURSOR_API_KEY or backend.model.apiKey for authentication.",
@@ -506,6 +887,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CLI_BASE,
+		nativeSession: null,
 		displayName: "CLI Base (no agent)",
 		description: "Bare sandbox without an AI agent backend. Use when you want the workspace, tools, and SSH access but no LLM dispatch.",
 		envVars: {},

package/dist/{client-Dq2EiJ5U.d.ts → client-BJIDfHnm.d.ts}

@@ -1,7 +1,7 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-CJ-53tMu.js";
-import { $n as PublicTemplateInfo, Ar as SandboxFleetArtifact, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ea as UsageInfo, En as ListSandboxOptions, Er as SandboxEnvironment, F as CreateIntelligenceReportOptions, Fi as SecretsManager, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetCostEstimate, N as ConversationTurnResult, Nt as FleetAgentId, Or as SandboxFleetAgent, Pr as SandboxFleetDispatchResponse, Qa as BatchEvent, Qr as SandboxFleetTraceBundle, R as CreateSandboxFleetTokenOptions, Rt as FleetDispatchResultBuffer, Tn as ListSandboxFleetOptions, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, Wt as FleetExecDispatchResult, Xr as SandboxFleetSpend, Yt as FleetRunOptions, Zr as SandboxFleetToken, _n as IntelligenceReport, aa as SshKeysManager, ai as SandboxFleetWorkspaceRestoreResult, ar as ReconcileSandboxFleetsOptions, b as BatchRunRequest, ba as TokenRefreshHandler, ci as SandboxInfo, d as BackendConfig, er as PublicTemplateVersionInfo, ii as SandboxFleetWorkspaceReconcileResult, ir as ReapExpiredSandboxFleetsResult, jr as SandboxFleetArtifactSpec, l as AttachSandboxFleetMachineOptions, la as SubscriptionInfo, ni as SandboxFleetUsage, nr as PublishPublicTemplateVersionOptions, oi as SandboxFleetWorkspaceSnapshotResult, or as ReconcileSandboxFleetsResult, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qt as FleetPromptDispatchResult, rr as ReapExpiredSandboxFleetsOptions, si as SandboxIdentity, ti as SandboxFleetTraceOptions, tr as PublishPublicTemplateOptions, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yi as SandboxShapesInfo, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zt as FleetDispatchResultBufferOptions } from "./types-XDnpktUp.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BB4hJD1Y.js";
+import { $n as PublicTemplateInfo, Ar as SandboxFleetArtifact, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ea as UsageInfo, En as ListSandboxOptions, Er as SandboxEnvironment, F as CreateIntelligenceReportOptions, Fi as SecretsManager, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetCostEstimate, N as ConversationTurnResult, Nt as FleetAgentId, Or as SandboxFleetAgent, Pr as SandboxFleetDispatchResponse, Qa as BatchEvent, Qr as SandboxFleetTraceBundle, R as CreateSandboxFleetTokenOptions, Rt as FleetDispatchResultBuffer, Tn as ListSandboxFleetOptions, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, Wt as FleetExecDispatchResult, Xr as SandboxFleetSpend, Yt as FleetRunOptions, Zr as SandboxFleetToken, _n as IntelligenceReport, aa as SshKeysManager, ai as SandboxFleetWorkspaceRestoreResult, ar as ReconcileSandboxFleetsOptions, b as BatchRunRequest, ba as TokenRefreshHandler, ci as SandboxInfo, d as BackendConfig, er as PublicTemplateVersionInfo, ii as SandboxFleetWorkspaceReconcileResult, ir as ReapExpiredSandboxFleetsResult, jr as SandboxFleetArtifactSpec, l as AttachSandboxFleetMachineOptions, la as SubscriptionInfo, ni as SandboxFleetUsage, nr as PublishPublicTemplateVersionOptions, oi as SandboxFleetWorkspaceSnapshotResult, or as ReconcileSandboxFleetsResult, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qt as FleetPromptDispatchResult, rr as ReapExpiredSandboxFleetsOptions, si as SandboxIdentity, ti as SandboxFleetTraceOptions, tr as PublishPublicTemplateOptions, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yi as SandboxShapesInfo, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zt as FleetDispatchResultBufferOptions } from "./types-D-NLWnw2.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-B6bUr0hj.js";
-import { I as LinesClient } from "./lines-ee3_S7Z0.js";
+import { I as LinesClient } from "./lines-BUf7A9aS.js";
 import { f as SandboxError } from "./errors-DS32ViPj.js";
 import { AgentInteractiveSessionRef } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/{client-CKp5_eSZ.js → client-Dn4C7eSu.js}

@@ -2,7 +2,7 @@ import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
 import { A as foldModelRoutingFields, D as parseSSEStream, M as normalizeRuntimeBackendConfig, O as applyRequestedModel, T as encodePromptForWire, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-5_ixpFnR.js";
 import { _ as parseErrorResponse, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, l as PartialFailureError, p as ServerError, s as NetworkError, t as AuthError, v as parseResponseError, y as readResponseJson } from "./errors-D1JIX7Jm.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-Duvz9RDN.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-Da0KPydY.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -3248,11 +3248,11 @@ function withRequestContextHeaders(response, path, method) {
 	return rewrapResponse(response, headers);
 }
 async function resolveLocalCliAuthFiles(backendType) {
-	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-BH9A-PW_.js");
+	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-OSQP4wuS.js");
 	return discoverLocalCliAuthFiles(backendType);
 }
 async function describeLocalCliAuthExpectation(backendType) {
-	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-BH9A-PW_.js");
+	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-OSQP4wuS.js");
 	return describe(backendType);
 }
 async function hydrateLocalCliBackendAuth(backend, baseUrl, trustLocalCliAuth) {

package/dist/core.d.ts

@@ -1,7 +1,7 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-CJ-53tMu.js";
-import { An as NetworkConfig, B as CreateSandboxOptions, Ba as SandboxEnvRecovery, Fa as ManagedProcessOptions, Fn as PreviewLinkInfo, Ia as ManagedProcessRecord, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessResumeOptions, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Na as ManagedProcessClient, Pa as ManagedProcessJobs, Ra as ManagedProcessSpec, Va as SandboxEnvRecoveryView, Yi as SessionMessageAdmission, bi as SandboxStatus, ci as SandboxInfo, vt as ExecOptions, yr as SandboxConfig, yt as ExecResult, za as ManagedProcessState } from "./types-XDnpktUp.js";
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-ee3_S7Z0.js";
-import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, d as HostedInstance, f as InstanceProfile, g as InstancesClient, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, m as InstanceRestartingError, p as InstanceRecord, u as EnsureInstanceOptions, w as BackendRegistryInteractionKind } from "./client-Dq2EiJ5U.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BB4hJD1Y.js";
+import { An as NetworkConfig, B as CreateSandboxOptions, Ba as SandboxEnvRecovery, Fa as ManagedProcessOptions, Fn as PreviewLinkInfo, Ia as ManagedProcessRecord, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessResumeOptions, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Na as ManagedProcessClient, Pa as ManagedProcessJobs, Ra as ManagedProcessSpec, Va as SandboxEnvRecoveryView, Yi as SessionMessageAdmission, bi as SandboxStatus, ci as SandboxInfo, vt as ExecOptions, yr as SandboxConfig, yt as ExecResult, za as ManagedProcessState } from "./types-D-NLWnw2.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BUf7A9aS.js";
+import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, d as HostedInstance, f as InstanceProfile, g as InstancesClient, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, m as InstanceRestartingError, p as InstanceRecord, u as EnsureInstanceOptions, w as BackendRegistryInteractionKind } from "./client-BJIDfHnm.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
 
 //#region src/core.d.ts

package/dist/core.js

@@ -1,6 +1,6 @@
 import { a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, l as PartialFailureError, m as StateError, n as CapabilityError, p as ServerError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-D1JIX7Jm.js";
-import { _ as parseBackendRegistryResponseBody, a as InstancesClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, m as backendRegistryResponseSchema, n as Sandbox, p as backendRegistryInteractionKindSchema, r as HostedInstance } from "./client-CKp5_eSZ.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-Duvz9RDN.js";
+import { _ as parseBackendRegistryResponseBody, a as InstancesClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, m as backendRegistryResponseSchema, n as Sandbox, p as backendRegistryInteractionKindSchema, r as HostedInstance } from "./client-Dn4C7eSu.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-Da0KPydY.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
 //#region src/core.ts

package/dist/{index-cuDoZd1_.d.ts → index-bF2GjdTK.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-CJ-53tMu.js";
-import { B as CreateSandboxOptions } from "./types-XDnpktUp.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-BB4hJD1Y.js";
+import { B as CreateSandboxOptions } from "./types-D-NLWnw2.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-CJ-53tMu.js";
-import { $ as DownloadOptions, $a as BatchEventDataMap, $i as SnapshotDeleteAcknowledgement, $n as PublicTemplateInfo, $r as SandboxFleetTraceEvent, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WriteFileOptions, Ai as SandboxTraceOptions, An as NetworkConfig, Ar as SandboxFleetArtifact, At as FileUsageOptions, B as CreateSandboxOptions, Ba as SandboxEnvRecovery, Bi as SessionEventStreamOptions, Bn as ProcessListOptions, Br as SandboxFleetMachineMeteredUsage, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as UpdateUserOptions, Ci as SandboxTerminalInfo, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, Ct as FileReadError, Da as WaitForOptions, Di as SandboxTraceBundle, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEvent, Dt as FileTreeFile, Ea as UsageInfo, Ei as SandboxTerminals, En as ListSandboxOptions, Er as SandboxEnvironment, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as ManagedProcessOptions, Fi as SecretsManager, Fn as PreviewLinkInfo, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceNativeFile, Gi as SessionInfo, Gn as ProcessStatus, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as RawEvidenceArchiveManifest, Hi as SessionExecutionStatus, Hn as ProcessManager, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessRecord, Ii as SendSessionMessageOptions, In as PreviewLinkManager, Ir as SandboxFleetDriverTimings, It as FleetAgentRunStatus, J as DeleteOptions, Ji as SessionMessage, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidencePayloadFile, Ki as SessionInterruptOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessResumeOptions, Li as SendSessionMessageRequest, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WriteManyOptions, Mi as SearchMatch, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetCostEstimate, Mt as FileWriteResult, N as ConversationTurnResult, Na as ManagedProcessClient, Ni as SearchOptions, Nn as PermissionLevel, Nr as SandboxFleetDispatchFailureClass, Nt as FleetAgentId, Oa as WaitForRolloutOptions, Oi as SandboxTraceEvent, On as McpServerConfig, Or as SandboxFleetAgent, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as ManagedProcessJobs, Pi as SecretInfo, Pn as PermissionsManager, Pr as SandboxFleetDispatchResponse, Pt as FleetAgentPlacement, Q as DispatchedSession, Qa as BatchEvent, Qi as SessionStatus, Qn as ProvisionStep, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ra as ManagedProcessSpec, Ri as SentSessionMessage, Rn as Process, Rr as SandboxFleetIntelligenceEnvelope, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TurnDriveResult, Si as SandboxTerminalCreateOptions, Sr as SandboxCreateReceipt, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadProgress, Ti as SandboxTerminalRequestOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOutcome, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as RawEvidenceDirectoryExport, Ui as SessionFailureReason, Un as ProcessSignal, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as SandboxEnvRecoveryView, Vi as SessionExecutionInfo, Vn as ProcessLogEntry, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as RawEvidenceExportOptions, Wi as SessionForkOptions, Wn as ProcessSpawnOptions, Wr as SandboxFleetManifestMachine, X as DirectoryPermission, Xa as PublicBatchRunRequest, Xi as SessionMessageInputPart, Xn as ProvisionResult, Xr as SandboxFleetSpend, Xt as ForkCounts, Y as DevServerInfo, Yi as SessionMessageAdmission, Yn as ProvisionEvent, Yr as SandboxFleetProfileRef, Yt as FleetRunOptions, Z as DispatchPromptOptions, Za as BatchBackendStats, Zi as SessionResultOptions, Zn as ProvisionStatus, Zr as SandboxFleetToken, Zt as ForkIdempotency, _ as BatchBackend, _a as TeeAttestationResponse, _i as SandboxShape, _n as IntelligenceReport, _r as SSHCommandDescriptor, _t as ExactProcessSpawnOptions, ai as SandboxFleetWorkspaceRestoreResult, an as GitStatus, ar as ReconcileSandboxFleetsOptions, at as DriverType, b as BatchRunRequest, ba as TokenRefreshHandler, bi as SandboxStatus, bn as IntelligenceReportSubjectType, br as SandboxConnection, bt as FileInfo, c as AttachGpuLeaseOptions, ca as StorageConfig, ci as SandboxInfo, cn as GpuLeaseCommandResult, d as BackendConfig, da as TaskSessionCommitResult, di as SandboxPortPreviewLink, dn as GpuLeaseManager, dr as RolloutChildResult, dt as EffectiveBackendSource, ea as SnapshotDeleteOutcome, ei as SandboxFleetTraceExport, en as GitAuth, eo as BatchSidecarGroup, er as PublicTemplateVersionInfo, et as DownloadProgress, f as BackendInfo, fa as TaskSessionFileChange, fi as SandboxRemovalState, fn as GpuLeaseProviderName, fr as RolloutOptions, ft as EgressDenial, g as BackendStatus, ga as TeeAttestationReport, gi as SandboxRuntimeHealth, gn as InstalledTool, gr as RolloutTurnPart, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TeeAttestationOptions, hi as SandboxRuntimeCapabilities, hn as HostAgentRuntimeBackend, hr as RolloutStatus, ht as EnsureDevServerOptions, ia as SnapshotResult, ii as SandboxFleetWorkspaceReconcileResult, in as GitDiff, io as parseBackendType, ir as ReapExpiredSandboxFleetsResult, it as DriverInfo, j as CompletedTurnResult, ja as WriteManyFile, ji as SandboxUser, jn as NetworkManager, jr as SandboxFleetArtifactSpec, jt as FileUsageResult, ka as WorkspaceOperationLookup, ki as SandboxTraceExport, kn as MkdirOptions, kr as SandboxFleetAgentSpec, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as SubscriptionInfo, li as SandboxIntelligenceEnvelope, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionProfile, mi as SandboxResources, mn as HostAgentDriverConfig, mr as RolloutStartResult, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotInfo, ni as SandboxFleetUsage, nn as GitCommit, no as ALL_BACKEND_TYPES, nr as PublishPublicTemplateVersionOptions, nt as DriveTurnOptions, oa as StartupDiagnostics, oi as SandboxFleetWorkspaceSnapshotResult, on as GpuLease, or as ReconcileSandboxFleetsResult, ot as DurablePlan, p as BackendManager, pa as TaskSessionInfo, pi as SandboxResourceUsage, pn as GpuLeaseStatus, pr as RolloutScorer, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceRecordsFile, qi as SessionListOptions, qn as PromptOptions, qr as SandboxFleetPlacement, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotOptions, ri as SandboxFleetWorkspace, rn as GitConfig, ro as BackendType, rr as ReapExpiredSandboxFleetsOptions, rt as DriverConfig, sa as StartupOperation, si as SandboxIdentity, sn as GpuLeaseBilling, sr as RenameOptions, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SnapshotIdempotency, ti as SandboxFleetTraceOptions, tn as GitBranch, to as BatchTaskUsage, tr as PublishPublicTemplateOptions, tt as DownloadResult, u as BackendCapabilities, ua as TaskSessionChanges, ui as SandboxPortBinding, un as GpuLeaseExecResult, ur as Rollout, ut as EffectiveBackendProfile, v as BatchResult, va as TeePublicKey, vi as SandboxShapePreset, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, w as ChunkedUploadOptions, wa as UploadOptions, wi as SandboxTerminalManager, wn as ListOptions, wr as SandboxDeleteOptions, wt as FileReadResult, x as BatchTask, xa as TokenUsage, xi as SandboxTerminalAttachOptions, xn as IntelligenceReportWindow, xr as SandboxCreateOutcome, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeePublicKeyResponse, yi as SandboxShapesInfo, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessState, zi as SessionBackendCredentials, zn as ProcessInfo, zr as SandboxFleetMachine, zt as FleetDispatchResultBufferOptions } from "./types-XDnpktUp.js";
+import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-BB4hJD1Y.js";
+import { $ as DownloadOptions, $a as BatchEventDataMap, $i as SnapshotDeleteAcknowledgement, $n as PublicTemplateInfo, $r as SandboxFleetTraceEvent, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WriteFileOptions, Ai as SandboxTraceOptions, An as NetworkConfig, Ar as SandboxFleetArtifact, At as FileUsageOptions, B as CreateSandboxOptions, Ba as SandboxEnvRecovery, Bi as SessionEventStreamOptions, Bn as ProcessListOptions, Br as SandboxFleetMachineMeteredUsage, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as UpdateUserOptions, Ci as SandboxTerminalInfo, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, Ct as FileReadError, Da as WaitForOptions, Di as SandboxTraceBundle, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEvent, Dt as FileTreeFile, Ea as UsageInfo, Ei as SandboxTerminals, En as ListSandboxOptions, Er as SandboxEnvironment, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as ManagedProcessOptions, Fi as SecretsManager, Fn as PreviewLinkInfo, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceNativeFile, Gi as SessionInfo, Gn as ProcessStatus, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as RawEvidenceArchiveManifest, Hi as SessionExecutionStatus, Hn as ProcessManager, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessRecord, Ii as SendSessionMessageOptions, In as PreviewLinkManager, Ir as SandboxFleetDriverTimings, It as FleetAgentRunStatus, J as DeleteOptions, Ji as SessionMessage, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidencePayloadFile, Ki as SessionInterruptOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessResumeOptions, Li as SendSessionMessageRequest, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WriteManyOptions, Mi as SearchMatch, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetCostEstimate, Mt as FileWriteResult, N as ConversationTurnResult, Na as ManagedProcessClient, Ni as SearchOptions, Nn as PermissionLevel, Nr as SandboxFleetDispatchFailureClass, Nt as FleetAgentId, Oa as WaitForRolloutOptions, Oi as SandboxTraceEvent, On as McpServerConfig, Or as SandboxFleetAgent, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as ManagedProcessJobs, Pi as SecretInfo, Pn as PermissionsManager, Pr as SandboxFleetDispatchResponse, Pt as FleetAgentPlacement, Q as DispatchedSession, Qa as BatchEvent, Qi as SessionStatus, Qn as ProvisionStep, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ra as ManagedProcessSpec, Ri as SentSessionMessage, Rn as Process, Rr as SandboxFleetIntelligenceEnvelope, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TurnDriveResult, Si as SandboxTerminalCreateOptions, Sr as SandboxCreateReceipt, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadProgress, Ti as SandboxTerminalRequestOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOutcome, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as RawEvidenceDirectoryExport, Ui as SessionFailureReason, Un as ProcessSignal, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as SandboxEnvRecoveryView, Vi as SessionExecutionInfo, Vn as ProcessLogEntry, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as RawEvidenceExportOptions, Wi as SessionForkOptions, Wn as ProcessSpawnOptions, Wr as SandboxFleetManifestMachine, X as DirectoryPermission, Xa as PublicBatchRunRequest, Xi as SessionMessageInputPart, Xn as ProvisionResult, Xr as SandboxFleetSpend, Xt as ForkCounts, Y as DevServerInfo, Yi as SessionMessageAdmission, Yn as ProvisionEvent, Yr as SandboxFleetProfileRef, Yt as FleetRunOptions, Z as DispatchPromptOptions, Za as BatchBackendStats, Zi as SessionResultOptions, Zn as ProvisionStatus, Zr as SandboxFleetToken, Zt as ForkIdempotency, _ as BatchBackend, _a as TeeAttestationResponse, _i as SandboxShape, _n as IntelligenceReport, _r as SSHCommandDescriptor, _t as ExactProcessSpawnOptions, ai as SandboxFleetWorkspaceRestoreResult, an as GitStatus, ar as ReconcileSandboxFleetsOptions, at as DriverType, b as BatchRunRequest, ba as TokenRefreshHandler, bi as SandboxStatus, bn as IntelligenceReportSubjectType, br as SandboxConnection, bt as FileInfo, c as AttachGpuLeaseOptions, ca as StorageConfig, ci as SandboxInfo, cn as GpuLeaseCommandResult, d as BackendConfig, da as TaskSessionCommitResult, di as SandboxPortPreviewLink, dn as GpuLeaseManager, dr as RolloutChildResult, dt as EffectiveBackendSource, ea as SnapshotDeleteOutcome, ei as SandboxFleetTraceExport, en as GitAuth, eo as BatchSidecarGroup, er as PublicTemplateVersionInfo, et as DownloadProgress, f as BackendInfo, fa as TaskSessionFileChange, fi as SandboxRemovalState, fn as GpuLeaseProviderName, fr as RolloutOptions, ft as EgressDenial, g as BackendStatus, ga as TeeAttestationReport, gi as SandboxRuntimeHealth, gn as InstalledTool, gr as RolloutTurnPart, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TeeAttestationOptions, hi as SandboxRuntimeCapabilities, hn as HostAgentRuntimeBackend, hr as RolloutStatus, ht as EnsureDevServerOptions, ia as SnapshotResult, ii as SandboxFleetWorkspaceReconcileResult, in as GitDiff, io as parseBackendType, ir as ReapExpiredSandboxFleetsResult, it as DriverInfo, j as CompletedTurnResult, ja as WriteManyFile, ji as SandboxUser, jn as NetworkManager, jr as SandboxFleetArtifactSpec, jt as FileUsageResult, ka as WorkspaceOperationLookup, ki as SandboxTraceExport, kn as MkdirOptions, kr as SandboxFleetAgentSpec, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as SubscriptionInfo, li as SandboxIntelligenceEnvelope, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionProfile, mi as SandboxResources, mn as HostAgentDriverConfig, mr as RolloutStartResult, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotInfo, ni as SandboxFleetUsage, nn as GitCommit, no as ALL_BACKEND_TYPES, nr as PublishPublicTemplateVersionOptions, nt as DriveTurnOptions, oa as StartupDiagnostics, oi as SandboxFleetWorkspaceSnapshotResult, on as GpuLease, or as ReconcileSandboxFleetsResult, ot as DurablePlan, p as BackendManager, pa as TaskSessionInfo, pi as SandboxResourceUsage, pn as GpuLeaseStatus, pr as RolloutScorer, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceRecordsFile, qi as SessionListOptions, qn as PromptOptions, qr as SandboxFleetPlacement, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotOptions, ri as SandboxFleetWorkspace, rn as GitConfig, ro as BackendType, rr as ReapExpiredSandboxFleetsOptions, rt as DriverConfig, sa as StartupOperation, si as SandboxIdentity, sn as GpuLeaseBilling, sr as RenameOptions, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SnapshotIdempotency, ti as SandboxFleetTraceOptions, tn as GitBranch, to as BatchTaskUsage, tr as PublishPublicTemplateOptions, tt as DownloadResult, u as BackendCapabilities, ua as TaskSessionChanges, ui as SandboxPortBinding, un as GpuLeaseExecResult, ur as Rollout, ut as EffectiveBackendProfile, v as BatchResult, va as TeePublicKey, vi as SandboxShapePreset, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, w as ChunkedUploadOptions, wa as UploadOptions, wi as SandboxTerminalManager, wn as ListOptions, wr as SandboxDeleteOptions, wt as FileReadResult, x as BatchTask, xa as TokenUsage, xi as SandboxTerminalAttachOptions, xn as IntelligenceReportWindow, xr as SandboxCreateOutcome, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeePublicKeyResponse, yi as SandboxShapesInfo, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessState, zi as SessionBackendCredentials, zn as ProcessInfo, zr as SandboxFleetMachine, zt as FleetDispatchResultBufferOptions } from "./types-D-NLWnw2.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-B6bUr0hj.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as interactiveSessionIdentityDigest, f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as InteractiveSessionNotRunningError, m as InteractiveControlClaimOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimAcknowledgement, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as createInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { a as InteractiveSessionControllerOptions, i as InteractiveSessionController, n as BrowserInteractiveSessionControllerOptions, o as InteractiveSessionControllerTransport, r as InteractiveAttachRequest, t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-ee3_S7Z0.js";
-import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, _ as SandboxFleet, a as Team, b as ParsedSSEEvent, c as SessionBroadcastEvent, d as HostedInstance, f as InstanceProfile, g as InstancesClient, h as InstanceStart, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, l as SessionBroadcastResult, m as InstanceRestartingError, n as IntelligenceClient, o as TeamInvitation, p as InstanceRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as EnsureInstanceOptions, v as SandboxFleetClient, w as BackendRegistryInteractionKind, x as parseSSEStream, y as ParseSSEStreamOptions } from "./client-Dq2EiJ5U.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BUf7A9aS.js";
+import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, _ as SandboxFleet, a as Team, b as ParsedSSEEvent, c as SessionBroadcastEvent, d as HostedInstance, f as InstanceProfile, g as InstancesClient, h as InstanceStart, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, l as SessionBroadcastResult, m as InstanceRestartingError, n as IntelligenceClient, o as TeamInvitation, p as InstanceRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as EnsureInstanceOptions, v as SandboxFleetClient, w as BackendRegistryInteractionKind, x as parseSSEStream, y as ParseSSEStreamOptions } from "./client-BJIDfHnm.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as StateError, h as ServerError, i as EgressProxyRecoveryError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxErrorJson, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-BoQeoNOD.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-BXcL8P-U.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-COsuMcn_.js";
-import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-cuDoZd1_.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-ChSbW-Oa.js";
+import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-bF2GjdTK.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
 import { D as parseSSEStream, F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, M as normalizeRuntimeBackendConfig, P as createAgentRunOutcomeTracker, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController } from "./interactive-controller-5_ixpFnR.js";
 import { a as FileWriteConflictError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as ValidationError, h as TimeoutError, i as EgressProxyRecoveryError, l as PartialFailureError, m as StateError, n as CapabilityError, o as KeyBudgetExhaustedError, p as ServerError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-D1JIX7Jm.js";
-import { _ as parseBackendRegistryResponseBody, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as SandboxFleet, p as backendRegistryInteractionKindSchema, r as HostedInstance, s as SandboxFleetClient, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-CKp5_eSZ.js";
+import { _ as parseBackendRegistryResponseBody, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as SandboxFleet, p as backendRegistryInteractionKindSchema, r as HostedInstance, s as SandboxFleetClient, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-Dn4C7eSu.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-Duvz9RDN.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-Da0KPydY.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-B7QeBrFQ.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
-import { s as TangleSandboxClient } from "./tangle-DCYAvgPK.js";
+import { s as TangleSandboxClient } from "./tangle-CXWszMFE.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{lines-ee3_S7Z0.d.ts → lines-BUf7A9aS.d.ts}

@@ -1,4 +1,4 @@
-import { B as CreateSandboxOptions, d as BackendConfig } from "./types-XDnpktUp.js";
+import { B as CreateSandboxOptions, d as BackendConfig } from "./types-D-NLWnw2.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-ee3_S7Z0.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BUf7A9aS.js";
 export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{local-cli-auth-BH9A-PW_.js → local-cli-auth-OSQP4wuS.js}

@@ -1,4 +1,4 @@
-import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-CJSdRlx0.js";
+import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-CVOv-Cmb.js";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/dist/{preview-Copmpj9O.d.ts → preview-DHNR04bX.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-CJ-53tMu.js";
-import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-XDnpktUp.js";
-import { i as Sandbox } from "./client-Dq2EiJ5U.js";
+import { r as SandboxInstance } from "./sandbox-BB4hJD1Y.js";
+import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-D-NLWnw2.js";
+import { i as Sandbox } from "./client-BJIDfHnm.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/{raw-evidence-archive-FxWK99KW.js → raw-evidence-archive-Bi-Lt83d.js}

@@ -30,8 +30,42 @@ const metadata = z.object({
 	ctimeMs: z.number().finite(),
 	sizeBytes: count
 });
-const manifestSchema = z.object({
-	schema: z.literal("tangle.raw-evidence-archive.v1"),
+const nativeSessionCopy = z.object({
+	harness: text,
+	format: text.nullable(),
+	executionId: text,
+	attempt: count.min(1),
+	nativeSessionId: z.string(),
+	copy: z.enum(["snapshot", "settled"]),
+	capturedAt: text,
+	process: z.object({
+		pid: count.nullable(),
+		exitedAt: text.nullable(),
+		exitCode: z.number().int().nullable(),
+		signal: text.nullable(),
+		outcome: z.enum([
+			"succeeded",
+			"failed",
+			"cancelled",
+			"unknown"
+		])
+	}),
+	files: z.array(payload.extend({
+		store: safePath,
+		storePath: safePath,
+		format: text,
+		method: z.enum([
+			"byte-prefix",
+			"atomic-file",
+			"sqlite-backup"
+		]),
+		truncated: z.boolean(),
+		sourceBytes: count
+	})),
+	complete: z.boolean(),
+	missingReasons: z.array(text)
+});
+const manifestBase = z.object({
 	status: z.enum(["captured", "partial"]),
 	sessionId: text,
 	backendType: z.string().regex(/^[a-z][a-z0-9_-]{0,127}$/),
@@ -113,6 +147,11 @@ const manifestSchema = z.object({
 	coverageComplete: z.boolean(),
 	missingReasons: z.array(text)
 });
+/** v2 adds each attempt's native session, from the harness session contract. */
+const manifestSchema = z.discriminatedUnion("schema", [manifestBase.extend({ schema: z.literal("tangle.raw-evidence-archive.v1") }), manifestBase.extend({
+	schema: z.literal("tangle.raw-evidence-archive.v2"),
+	nativeSessions: z.array(nativeSessionCopy)
+})]);
 const MAX_METADATA = 64 * 1024 * 1024;
 const MAX_RECORD = 16 * 1024 * 1024;
 /** Node-only directory export. Flat generated member names cannot traverse or create links. */
@@ -299,6 +338,11 @@ async function exportRawEvidenceDirectory(request, sessionId, targetDirectory, o
 			if (!item.content || item.sha256 !== item.content.sha256 || item.sizeBytes !== item.content.sizeBytes) throw new Error("Evidence native payload mismatch");
 			verify(item.content);
 		} else if (item.content || item.sha256 || item.kind === "symlink" && item.linkTarget === void 0) throw new Error("Evidence native metadata mismatch");
+		const nativeSessions = manifest.schema === "tangle.raw-evidence-archive.v2" ? manifest.nativeSessions : [];
+		for (const copy of nativeSessions) {
+			if (!manifest.attempts.some((attempt) => attempt.executionId === copy.executionId && attempt.ordinal === copy.attempt)) throw new Error("Evidence native session copy is unattributed");
+			for (const file of copy.files) verify(file);
+		}
 		for (const item of manifest.processSources) {
 			if (item.sha256 !== item.content.sha256 || item.sizeBytes !== item.content.sizeBytes) throw new Error("Evidence process source mismatch");
 			verify(item.content);

package/dist/runtime.d.ts

@@ -1,9 +1,9 @@
-import { A as CommitTaskSessionOptions, Aa as WriteFileOptions, At as FileUsageOptions, Bi as SessionEventStreamOptions, Ci as SandboxTerminalInfo, Cn as ListMessagesOptions, Dr as SandboxEvent, Gi as SessionInfo, H as CreateTaskSessionOptions, Hi as SessionExecutionStatus, Ii as SendSessionMessageOptions, Ji as SessionMessage, Li as SendSessionMessageRequest, Mt as FileWriteResult, Ot as FileTreeOptions, Ri as SentSessionMessage, Si as SandboxTerminalCreateOptions, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadProgress, Ti as SandboxTerminalRequestOptions, Tt as FileRenameResult, V as CreateSessionOptions, Vi as SessionExecutionInfo, Yi as SessionMessageAdmission, da as TaskSessionCommitResult, gi as SandboxRuntimeHealth, jt as FileUsageResult, kt as FileTreeResult, pa as TaskSessionInfo, sr as RenameOptions, ua as TaskSessionChanges, ui as SandboxPortBinding, w as ChunkedUploadOptions, wi as SandboxTerminalManager, xt as FileReadBatchOptions } from "./types-XDnpktUp.js";
+import { A as CommitTaskSessionOptions, Aa as WriteFileOptions, At as FileUsageOptions, Bi as SessionEventStreamOptions, Ci as SandboxTerminalInfo, Cn as ListMessagesOptions, Dr as SandboxEvent, Gi as SessionInfo, H as CreateTaskSessionOptions, Hi as SessionExecutionStatus, Ii as SendSessionMessageOptions, Ji as SessionMessage, Li as SendSessionMessageRequest, Mt as FileWriteResult, Ot as FileTreeOptions, Ri as SentSessionMessage, Si as SandboxTerminalCreateOptions, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadProgress, Ti as SandboxTerminalRequestOptions, Tt as FileRenameResult, V as CreateSessionOptions, Vi as SessionExecutionInfo, Yi as SessionMessageAdmission, da as TaskSessionCommitResult, gi as SandboxRuntimeHealth, jt as FileUsageResult, kt as FileTreeResult, pa as TaskSessionInfo, sr as RenameOptions, ua as TaskSessionChanges, ui as SandboxPortBinding, w as ChunkedUploadOptions, wi as SandboxTerminalManager, xt as FileReadBatchOptions } from "./types-D-NLWnw2.js";
 import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-COsuMcn_.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-ChSbW-Oa.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/{sandbox-CJ-53tMu.d.ts → sandbox-BB4hJD1Y.d.ts}

@@ -1,9 +1,9 @@
 import { t as CliAuthReference } from "./cli-auth-bundle-BMcIiB-I.js";
-import { $i as SnapshotDeleteAcknowledgement, A as CommitTaskSessionOptions, Aa as WriteFileOptions, Ai as SandboxTraceOptions, Ba as SandboxEnvRecovery, Bi as SessionEventStreamOptions, C as BranchOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, D as CodeExecutionResult, Da as WaitForOptions, Di as SandboxTraceBundle, Dr as SandboxEvent, E as CodeExecutionOptions, Ei as SandboxTerminals, Et as FileSystem, Gi as SessionInfo, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SendSessionMessageOptions, In as PreviewLinkManager, Ja as WorkspaceImagePublishResult$1, Ji as SessionMessage, Jn as PromptResult, Ki as SessionInterruptOptions, Kn as PromptInputPart, Li as SendSessionMessageRequest, M as ConversationTurnOptions, Ma as WriteManyOptions, Mi as SearchMatch, Mt as FileWriteResult, N as ConversationTurnResult, Ni as SearchOptions, O as CodeLanguage, Oa as WaitForRolloutOptions, Pn as PermissionsManager, Q as DispatchedSession, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ri as SentSessionMessage, Sa as TurnDriveResult, Sn as JsonValue, Sr as SandboxCreateReceipt, Ua as RawEvidenceDirectoryExport, V as CreateSessionOptions, Va as SandboxEnvRecoveryView, Vi as SessionExecutionInfo, Wa as RawEvidenceExportOptions, Wi as SessionForkOptions, Xn as ProvisionResult, Xt as ForkCounts, Ya as InteractionResolutionAcknowledgement, Yi as SessionMessageAdmission, Yn as ProvisionEvent, Z as DispatchPromptOptions, Zi as SessionResultOptions, Zt as ForkIdempotency, _a as TeeAttestationResponse, _i as SandboxShape, _n as IntelligenceReport, _r as SSHCommandDescriptor, an as GitStatus, bi as SandboxStatus, br as SandboxConnection, ci as SandboxInfo, cr as RestoreSnapshotOptions, d as BackendConfig, da as TaskSessionCommitResult, dn as GpuLeaseManager, fr as RolloutOptions, gi as SandboxRuntimeHealth, gn as InstalledTool, gt as EventStreamOptions, ha as TeeAttestationOptions, hi as SandboxRuntimeCapabilities, ia as SnapshotResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WriteManyFile, jn as NetworkManager, ka as WorkspaceOperationLookup, lr as ResumeOptions, mr as RolloutStartResult, na as SnapshotInfo, nn as GitCommit, nt as DriveTurnOptions, oa as StartupDiagnostics, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionInfo, pi as SandboxResourceUsage, pt as EgressManager, qi as SessionListOptions, qn as PromptOptions, ra as SnapshotOptions, st as DurablePlanDecisionResult, tn as GitBranch, ua as TaskSessionChanges, ui as SandboxPortBinding, ur as Rollout, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, wr as SandboxDeleteOptions, xi as SandboxTerminalAttachOptions, xn as IntelligenceReportWindow, ya as TeePublicKeyResponse, yn as IntelligenceReportCompareTo, yt as ExecResult } from "./types-XDnpktUp.js";
+import { $i as SnapshotDeleteAcknowledgement, A as CommitTaskSessionOptions, Aa as WriteFileOptions, Ai as SandboxTraceOptions, Ba as SandboxEnvRecovery, Bi as SessionEventStreamOptions, C as BranchOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, D as CodeExecutionResult, Da as WaitForOptions, Di as SandboxTraceBundle, Dr as SandboxEvent, E as CodeExecutionOptions, Ei as SandboxTerminals, Et as FileSystem, Gi as SessionInfo, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SendSessionMessageOptions, In as PreviewLinkManager, Ja as WorkspaceImagePublishResult$1, Ji as SessionMessage, Jn as PromptResult, Ki as SessionInterruptOptions, Kn as PromptInputPart, Li as SendSessionMessageRequest, M as ConversationTurnOptions, Ma as WriteManyOptions, Mi as SearchMatch, Mt as FileWriteResult, N as ConversationTurnResult, Ni as SearchOptions, O as CodeLanguage, Oa as WaitForRolloutOptions, Pn as PermissionsManager, Q as DispatchedSession, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ri as SentSessionMessage, Sa as TurnDriveResult, Sn as JsonValue, Sr as SandboxCreateReceipt, Ua as RawEvidenceDirectoryExport, V as CreateSessionOptions, Va as SandboxEnvRecoveryView, Vi as SessionExecutionInfo, Wa as RawEvidenceExportOptions, Wi as SessionForkOptions, Xn as ProvisionResult, Xt as ForkCounts, Ya as InteractionResolutionAcknowledgement, Yi as SessionMessageAdmission, Yn as ProvisionEvent, Z as DispatchPromptOptions, Zi as SessionResultOptions, Zt as ForkIdempotency, _a as TeeAttestationResponse, _i as SandboxShape, _n as IntelligenceReport, _r as SSHCommandDescriptor, an as GitStatus, bi as SandboxStatus, br as SandboxConnection, ci as SandboxInfo, cr as RestoreSnapshotOptions, d as BackendConfig, da as TaskSessionCommitResult, dn as GpuLeaseManager, fr as RolloutOptions, gi as SandboxRuntimeHealth, gn as InstalledTool, gt as EventStreamOptions, ha as TeeAttestationOptions, hi as SandboxRuntimeCapabilities, ia as SnapshotResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WriteManyFile, jn as NetworkManager, ka as WorkspaceOperationLookup, lr as ResumeOptions, mr as RolloutStartResult, na as SnapshotInfo, nn as GitCommit, nt as DriveTurnOptions, oa as StartupDiagnostics, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionInfo, pi as SandboxResourceUsage, pt as EgressManager, qi as SessionListOptions, qn as PromptOptions, ra as SnapshotOptions, st as DurablePlanDecisionResult, tn as GitBranch, ua as TaskSessionChanges, ui as SandboxPortBinding, ur as Rollout, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, wr as SandboxDeleteOptions, xi as SandboxTerminalAttachOptions, xn as IntelligenceReportWindow, ya as TeePublicKeyResponse, yn as IntelligenceReportCompareTo, yt as ExecResult } from "./types-D-NLWnw2.js";
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { r as InteractiveAttachRequest } from "./interactive-controller-ykaThYp6.js";
-import { R as SandboxLines } from "./lines-ee3_S7Z0.js";
+import { R as SandboxLines } from "./lines-BUf7A9aS.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 

package/dist/{sandbox-Duvz9RDN.js → sandbox-Da0KPydY.js}

@@ -3,7 +3,7 @@ import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeT
 import { _ as parseErrorResponse, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, m as StateError, n as CapabilityError, p as ServerError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as parseResponseError, y as readResponseJson } from "./errors-D1JIX7Jm.js";
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
-import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-CJSdRlx0.js";
+import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-CVOv-Cmb.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, canonicalCandidateJson, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
@@ -7953,12 +7953,14 @@ var SandboxInstance = class SandboxInstance {
 	}
 	/** @internal — invoked before the sandbox is deleted. */
 	async _sessionExportRawEvidence(id, destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-FxWK99KW.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-Bi-Lt83d.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal) => this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/raw-evidence/archive?${new URLSearchParams({
 			maxBytes: String(options.maxBytes),
-			maxFiles: String(options.maxFiles)
+			maxFiles: String(options.maxFiles),
+			...options.copy ? { copy: options.copy } : {},
+			...options.executionId ? { executionId: options.executionId } : {}
 		})}`, {
 			method: "GET",
 			signal

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-cuDoZd1_.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-bF2GjdTK.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-DCYAvgPK.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-CXWszMFE.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-DCYAvgPK.js → tangle-CXWszMFE.js}

@@ -1,5 +1,5 @@
 import { y as readResponseJson } from "./errors-D1JIX7Jm.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-Duvz9RDN.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-Da0KPydY.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-ChcSLv53.js";
 //#region src/tangle/abi.ts
 /**

package/dist/{types-XDnpktUp.d.ts → types-D-NLWnw2.d.ts}

@@ -1306,6 +1306,53 @@ interface RawEvidenceArchiveManifest {
   coverageComplete: boolean;
   missingReasons: string[];
 }
+/** One store file of a native session copy (harness session contract). */
+interface NativeSessionCopyFile extends RawEvidencePayloadFile {
+  /** The store root the file belongs to, relative to the runtime HOME, e.g. `.pi/agent/sessions`. */
+  store: string;
+  /** The file's own path relative to the runtime HOME, e.g. `.pi/agent/sessions/<ts>_<id>.jsonl`. */
+  storePath: string;
+  /** A `@tangle-network/harness-sessions` SessionFormatId. */
+  format: string;
+  /** byte-prefix: append-only JSONL cut at its last complete line; atomic-file: a whole file read twice the same; sqlite-backup: VACUUM INTO. */
+  method: "byte-prefix" | "atomic-file" | "sqlite-backup";
+  /** The source was larger than the per-file bound; this is its prefix. */
+  truncated: boolean;
+  /** Source size when copied. */
+  sourceBytes: number;
+}
+/**
+ * One execution attempt's native session. `snapshot` was taken while the
+ * harness ran; `settled` after its process exited, whatever the outcome.
+ * Consumers find sessions here, never by matching paths in `files`.
+ */
+interface NativeSessionCopy {
+  harness: string;
+  /** Format of the session files found (the first, when a harness has several stores). */
+  format: string | null;
+  executionId: string;
+  attempt: number;
+  nativeSessionId: string;
+  copy: "snapshot" | "settled";
+  capturedAt: string;
+  /** Null fields are not observed at the copy point; the archive's process records carry them. */
+  process: {
+    pid: number | null;
+    exitedAt: string | null;
+    exitCode: number | null;
+    signal: string | null;
+    outcome: "succeeded" | "failed" | "cancelled" | "unknown";
+  };
+  files: NativeSessionCopyFile[];
+  complete: boolean;
+  /** native_session_id_unobserved | native_session_files_missing | over_bound:<path> | ... */
+  missingReasons: string[];
+}
+/** v1 plus the per-attempt native session copies. Served when the caller asks for a copy. */
+interface RawEvidenceArchiveManifestV2 extends Omit<RawEvidenceArchiveManifest, "schema"> {
+  schema: "tangle.raw-evidence-archive.v2";
+  nativeSessions: NativeSessionCopy[];
+}
 interface RawEvidenceUnavailable {
   status: "unavailable";
   sessionId: string;
@@ -1315,6 +1362,14 @@ interface RawEvidenceUnavailable {
 interface RawEvidenceExportOptions {
   /** Bound all uncompressed archive member bytes, including metadata and records. */
   maxBytes: number;
+  /**
+   * Request native session copies (manifest v2). `latest` returns the
+   * settled copy when one exists, otherwise a fresh snapshot; `settled`
+   * fails with 409 not_settled while the harness still runs.
+   */
+  copy?: "latest" | "settled";
+  /** Restrict native session copies to one sidecar execution. */
+  executionId?: string;
   /** Bound all archive file entries, including empty files. */
   maxFiles: number;
   /** Compressed transport bound; defaults to maxBytes plus bounded tar overhead. */
@@ -1330,7 +1385,7 @@ type RawEvidenceDirectoryExport = RawEvidenceUnavailable | {
     sizeBytes: number;
     sha256: string;
   }; /** Bounded metadata only. No inline payload or aggregate frame contents. */
-  manifest: RawEvidenceArchiveManifest;
+  manifest: RawEvidenceArchiveManifest | RawEvidenceArchiveManifestV2;
   coverageComplete: boolean;
   missingReasons: string[];
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.14-develop.20261005090620.c500518",
+  "version": "0.60.14-develop.20261005092806.490fe89",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -153,9 +153,9 @@
     "@products/sandbox-test-utils": "0.0.0",
     "@tangle-network/cli-agent-registry": "0.4.21",
     "@repo/shared": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.20.8",
     "@tangle-network/runtime-contracts": "0.12.0",
     "@tangle-network/sdk": "3.3.39",
+    "@tangle-network/agent-profile-materialize": "0.20.8",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {