@tangle-network/sandbox 0.60.14 → 0.60.16-develop.20261006020509.71b03b7

package/README.md

@@ -85,7 +85,6 @@ const client = new Sandbox({
 });
 const box = await client.create({
   name: "sdk-quick-start",
-  environment: "universal",
   resources: {
     cpuCores: 2,
     memoryMB: 4096,
@@ -137,8 +136,15 @@ That sandbox is already gone for every read, so a later call does not list it ag
 
 ## Create a sandbox
 
-`client.create()` accepts a named environment, container image, or published image ID.
-The server chooses its default environment when `environment` is omitted.
+Omit `environment` to use the server's default image. No image choice is
+needed for an ordinary sandbox:
+
+```typescript
+const box = await client.create();
+```
+
+Set `environment` when the workload needs a custom container image or a
+published image ID. For example, this sandbox uses `node:22`:
 
 ```typescript
 const box = await client.create({
@@ -169,7 +175,9 @@ const box = await client.create({
 });
 ```
 
-List server-supported environments instead of hard-coding an internal catalog.
+For named environments, use the IDs returned by the server. Language names
+such as `python` or `node` do not select versioned container images; use an
+image reference such as `python:3.12-slim` or `node:22` for that.
 
 ```typescript
 const environments = await client.environments.list();
@@ -181,6 +189,27 @@ for (const environment of environments) {
 Use `bare: true` for a minimal container with command execution and lifecycle controls.
 Use `agent: false` for managed files, processes, and telemetry without configuring an agent backend.
 
+## Host-owned preview publication
+
+An application that publishes previews outside the agent turn sets the admitted
+AgentProfile's `metadata.sandbox.previewPublication` to `"host"`:
+
+```typescript
+const profile = {
+  prompt: { systemPrompt: "Build the app and update workspace-apps.json." },
+  metadata: { sandbox: { previewPublication: "host" } },
+} satisfies AgentProfile;
+```
+
+Sidecar then supplies host-handoff instructions instead of its default self-publication
+CLI/tool instructions. Keep the application's manifest and server contract in the
+profile instructions; the application must perform publication and confirm readiness.
+Without this exact value, Sandbox retains its default managed-preview instructions.
+This profile metadata is instruction policy, not a credential or filesystem security
+boundary. It does not grant publication authority or remove supplied tools.
+Version the profile when changing publication ownership and adopt the Sidecar release
+that supports this contract before relying on it in an existing sandbox.
+
 ## Run several Agents in one Sandbox
 
 Import the Agent entrypoint when one Sandbox should host several AgentProfiles.
@@ -208,7 +237,6 @@ const implementerProfile = {
 } satisfies AgentProfile;
 
 const box = await client.create({
-  environment: "universal",
   agent: false,
 });
 
@@ -484,14 +512,11 @@ Provider credentials must come from your platform configuration or the backend m
 
 ```typescript
 const agentBox = await client.create({
-  environment: "universal",
   backend: {
     type: "opencode",
-    model: {
-      provider: process.env.MODEL_PROVIDER!,
-      model: process.env.MODEL_NAME!,
-      apiKey: process.env.MODEL_API_KEY!,
-    },
+    modelId: process.env.MODEL_NAME!,
+    provider: process.env.MODEL_PROVIDER!,
+    apiKey: process.env.MODEL_API_KEY!,
   },
 });
 
@@ -571,7 +596,6 @@ Use it for parallel jobs, coordinated workers, or workloads that need stable mac
 const fleet = await client.fleets.createWithCoordinator({
   fleetId: "dependency-audit",
   defaults: {
-    environment: "universal",
     maxLifetimeSeconds: 1800,
   },
   policy: {

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BCygk0lS.js";
-import { D as CodeExecutionResult, E as CodeExecutionOptions, Gi as SessionInfo, Kr as SandboxFleetParent, O as CodeLanguage, d as BackendConfig, k as CodeResultPart, qa as BackendType, qi as SessionListOptions } from "../types-BlA8Cly0.js";
-import { i as Sandbox } from "../client-BCX8_Mu-.js";
-import { u as PreviewAuthorizer } from "../preview-Ddy1fJyc.js";
+import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-DalvAflZ.js";
+import { D as CodeExecutionResult, E as CodeExecutionOptions, Ji as SessionListOptions, Ki as SessionInfo, Kr as SandboxFleetParent, O as CodeLanguage, d as BackendConfig, io as BackendType, k as CodeResultPart } from "../types-CdT-paBK.js";
+import { i as Sandbox } from "../client-CbOQtx9b.js";
+import { u as PreviewAuthorizer } from "../preview-T96_mF5c.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DY1CnWBn.js";
-import { k as assertCurrentBackendType } from "../interactive-controller-f_ePJqoh.js";
+import { k as assertCurrentBackendType } from "../interactive-controller-5_ixpFnR.js";
 import { c as NotFoundError, g as ValidationError, m as StateError } from "../errors-D1JIX7Jm.js";
-import { n as Sandbox } from "../client-Cd8xKjQZ.js";
-import { t as SandboxInstance } from "../sandbox-D3SjjeDp.js";
+import { n as Sandbox } from "../client-CT9Td-BV.js";
+import { t as SandboxInstance } from "../sandbox-D3VcDY8b.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-Ddy1fJyc.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-T96_mF5c.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/{agent-run-outcome-CG7bb9lr.d.ts → agent-run-outcome-C8oSKngX.d.ts}

@@ -1,4 +1,4 @@
-import { Dr as SandboxEvent, a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, s as AgentToolInvocation } from "./types-BlA8Cly0.js";
+import { Dr as SandboxEvent, a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, s as AgentToolInvocation } from "./types-CdT-paBK.js";
 import { InteractionRequest } from "@tangle-network/agent-interface";
 
 //#region src/agent-run-outcome.d.ts

package/dist/auth/index.js

@@ -1,4 +1,4 @@
-import { i as materializeCliAuthBundle, n as assertCliAuthReferenceSupported, r as cliAuthReferenceSchema } from "../cli-auth-bundle-CJSdRlx0.js";
+import { i as materializeCliAuthBundle, n as assertCliAuthReferenceSupported, r as cliAuthReferenceSchema } from "../cli-auth-bundle-D_1bUPSo.js";
 //#region src/auth/tokens.ts
 const textEncoder = new TextEncoder();
 const textDecoder = new TextDecoder();

package/dist/{cli-auth-bundle-CJSdRlx0.js → cli-auth-bundle-D_1bUPSo.js}

@@ -1,7 +1,379 @@
 import { n as BACKEND_TYPE } from "./backend-types-C7b_Gpa0.js";
 import { agentProfileJsonSchema, agentProfileSchema as agentProfileSchema$1 } from "@tangle-network/agent-interface";
 import { z } from "zod";
-//#region ../../../packages/cli-agent-registry/dist/specs-CuvDK4-Y.mjs
+//#region ../../../packages/cli-agent-registry/dist/native-session-contracts.mjs
+/**
+* The declared native session of every registered harness. Each entry is
+* proven by a conformance receipt (tests/harness-conformance/receipts) for
+* its pinned CLI version, or is listed in HARNESS_CONFORMANCE_PENDING.
+*
+* CLI versions are the pins in infra/nix (agent-clis.nix, flake.nix and
+* npm-locks). The registry test tests/harness-session-contract.test.ts
+* fails when a pin, a contract or an adapter's source moves without a new
+* receipt.
+*/
+const CLAUDE_PROJECTS = {
+	root: ".claude/projects",
+	files: ["*/{id}.jsonl", "*/{id}/subagents/**/*.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "claude-code.projects-jsonl"
+};
+const CODEX_ROLLOUTS = {
+	root: ".codex/sessions",
+	files: ["*/*/*/rollout-*-{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "codex.rollout-jsonl"
+};
+const GEMINI_CHATS = {
+	root: ".gemini/tmp",
+	files: ["*/chats/session-*{id}*.json"],
+	write: "json-rewrite",
+	shared: false,
+	format: "gemini.chat-json"
+};
+const KIMI_SESSIONS = {
+	root: ".kimi/sessions",
+	files: ["*/{id}/**", "*/{id}.jsonl"],
+	write: "jsonl-append",
+	shared: false,
+	format: "kimi.session-dir"
+};
+const HERMES_STATE = {
+	root: ".hermes",
+	files: [
+		"state.db",
+		"state.db-wal",
+		"state.db-shm"
+	],
+	write: "sqlite-wal",
+	shared: true,
+	format: "hermes.state-sqlite"
+};
+const NATIVE_SESSION_CONTRACTS = {
+	"claude-code": {
+		version: 1,
+		stores: [CLAUDE_PROJECTS],
+		identity: {
+			kind: "pre-minted",
+			args: ["--session-id", "{id}"]
+		},
+		resume: {
+			kind: "args",
+			args: ["--resume", "{id}"]
+		},
+		forbiddenArgs: ["--no-session-persistence", "--fork-session"],
+		storeEnv: { CLAUDE_CONFIG_DIR: ".claude" },
+		evidence: {
+			servedModel: "provider-response",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "2.1.286"
+	},
+	codex: {
+		version: 1,
+		stores: [CODEX_ROLLOUTS],
+		identity: {
+			kind: "first-event",
+			event: "thread.started",
+			deadlineMs: 3e4
+		},
+		resume: {
+			kind: "args",
+			args: [
+				"exec",
+				"resume",
+				"{id}"
+			]
+		},
+		forbiddenArgs: ["--ephemeral"],
+		storeEnv: { CODEX_HOME: ".codex" },
+		evidence: {
+			servedModel: "turn-context",
+			usage: "cumulative",
+			endingError: "session-record"
+		},
+		cliVersion: "0.145.0"
+	},
+	opencode: {
+		version: 1,
+		stores: [{
+			root: ".local/share/opencode",
+			files: [
+				"opencode.db",
+				"opencode.db-wal",
+				"opencode.db-shm"
+			],
+			write: "sqlite-wal",
+			shared: true,
+			format: "opencode.sqlite"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "sessionID",
+			deadlineMs: 3e5
+		},
+		resume: {
+			kind: "args",
+			args: ["--session", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: { XDG_DATA_HOME: ".local/share" },
+		evidence: {
+			servedModel: "turn-context",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "1.18.25"
+	},
+	pi: {
+		version: 1,
+		stores: [{
+			root: ".pi/agent/sessions",
+			files: ["**/*_{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "pi.session-jsonl"
+		}],
+		identity: {
+			kind: "pre-minted",
+			args: ["--session-id", "{id}"]
+		},
+		resume: {
+			kind: "args",
+			args: ["--session", "{id}"]
+		},
+		forbiddenArgs: [
+			"--no-session",
+			"--fork",
+			"--continue"
+		],
+		storeEnv: {
+			PI_CODING_AGENT_DIR: ".pi/agent",
+			PI_CODING_AGENT_SESSION_DIR: ".pi/agent/sessions",
+			"--session-dir": ".pi/agent/sessions"
+		},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "0.85.1"
+	},
+	"kimi-code": {
+		version: 1,
+		stores: [KIMI_SESSIONS],
+		identity: {
+			kind: "pre-minted",
+			args: ["--session", "{id}"]
+		},
+		resume: {
+			kind: "args",
+			args: ["--session", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "1.49.0"
+	},
+	"factory-droids": {
+		version: 1,
+		stores: [{
+			root: ".factory/sessions",
+			files: ["*/{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "factory.session-jsonl"
+		}, {
+			root: ".factory/sessions",
+			files: ["*/{id}.settings.json"],
+			write: "json-rewrite",
+			shared: false,
+			format: "factory.session-jsonl"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "session_id",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--session-id", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "turn-context",
+			usage: "session-total",
+			endingError: "none"
+		},
+		cliVersion: "0.232.0"
+	},
+	amp: {
+		version: 1,
+		stores: [{
+			root: ".local/share/amp/threads",
+			files: ["{id}.json"],
+			write: "json-rewrite",
+			shared: false,
+			format: "amp.thread-json"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "thread",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: [
+				"threads",
+				"continue",
+				"{id}"
+			]
+		},
+		forbiddenArgs: [],
+		storeEnv: { XDG_DATA_HOME: ".local/share" },
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "0.0.1790887360-g98f23e"
+	},
+	prime: {
+		version: 1,
+		stores: [{
+			root: ".prime-provider/prime-agent-dirs",
+			files: ["**/*_{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "prime.session-jsonl"
+		}],
+		identity: {
+			kind: "api-created",
+			call: "acp session/new"
+		},
+		resume: { kind: "api" },
+		forbiddenArgs: ["--no-session"],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "session-record"
+		},
+		cliVersion: "0.7.2"
+	},
+	hermes: {
+		version: 1,
+		stores: [HERMES_STATE],
+		identity: {
+			kind: "first-event",
+			event: "session_id",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--resume", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: { HERMES_HOME: ".hermes" },
+		evidence: {
+			servedModel: "session-record",
+			usage: "session-total",
+			endingError: "none"
+		},
+		cliVersion: "2026.9.24"
+	},
+	forge: {
+		version: 1,
+		stores: [{
+			root: ".forge",
+			files: [
+				".forge.db",
+				".forge.db-wal",
+				".forge.db-shm"
+			],
+			write: "sqlite-wal",
+			shared: true,
+			format: "forge.sqlite"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "conversation",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--conversation-id", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "2.14.0"
+	},
+	openclaw: {
+		version: 1,
+		stores: [{
+			root: ".openclaw/agents",
+			files: ["**/{id}.jsonl"],
+			write: "jsonl-append",
+			shared: false,
+			format: "openclaw.session-jsonl"
+		}],
+		identity: {
+			kind: "first-event",
+			event: "session",
+			deadlineMs: 6e4
+		},
+		resume: {
+			kind: "args",
+			args: ["--session-id", "{id}"]
+		},
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "2026.7.1-2"
+	},
+	acp: {
+		version: 1,
+		stores: [
+			CLAUDE_PROJECTS,
+			CODEX_ROLLOUTS,
+			GEMINI_CHATS,
+			KIMI_SESSIONS,
+			HERMES_STATE
+		],
+		identity: {
+			kind: "api-created",
+			call: "acp session/new"
+		},
+		resume: { kind: "api" },
+		forbiddenArgs: [],
+		storeEnv: {},
+		evidence: {
+			servedModel: "session-record",
+			usage: "per-response",
+			endingError: "none"
+		},
+		cliVersion: "claude-agent-acp 0.64.2; codex-acp 0.16.0; gemini-cli 0.62.0"
+	}
+};
+//#endregion
+//#region ../../../packages/cli-agent-registry/dist/specs-DSy1cxjc.mjs
 z.globalRegistry.add(agentProfileSchema$1, {
 	id: "AgentProfile",
 	...agentProfileJsonSchema
@@ -9,6 +381,7 @@ z.globalRegistry.add(agentProfileSchema$1, {
 const CLI_AGENT_SPECS = [
 	{
 		name: BACKEND_TYPE.OPENCODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS.opencode,
 		messageStorageDir: ".opencode",
 		displayName: "OpenCode Agent",
 		description: "OpenCode CLI coding agent with native sessions, profiles, tools, and MCP.",
@@ -131,6 +504,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CLAUDE_CODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS["claude-code"],
 		runtime: {},
 		messageStorageDir: ".claude-code",
 		displayName: "Claude Code",
@@ -181,6 +555,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.KIMI_CODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS["kimi-code"],
 		messageStorageDir: ".kimi-code",
 		displayName: "Kimi Code",
 		description: "Moonshot AI Kimi Code CLI — headless non-interactive mode via `kimi --print --output-format stream-json --prompt ...`. Defaults to OAuth (Kimi Code subscription) with credentials materialized from the host-managed ~/.kimi/credentials/kimi-code.json; falls back to MOONSHOT_API_KEY when an apiKey is supplied.",
@@ -208,6 +583,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CODEX,
+		nativeSession: NATIVE_SESSION_CONTRACTS.codex,
 		messageStorageDir: ".codex",
 		displayName: "Codex",
 		description: "OpenAI Codex CLI-based agent backend.",
@@ -244,6 +620,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.AMP,
+		nativeSession: NATIVE_SESSION_CONTRACTS.amp,
 		messageStorageDir: ".amp-sessions",
 		displayName: "AMP (Sourcegraph)",
 		description: "Sourcegraph AMP CLI-based agent backend.",
@@ -270,6 +647,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.FACTORY_DROIDS,
+		nativeSession: NATIVE_SESSION_CONTRACTS["factory-droids"],
 		messageStorageDir: ".factory-droids",
 		displayName: "Factory Droids",
 		description: "Factory Droids CLI-based agent backend.",
@@ -291,6 +669,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.PI,
+		nativeSession: NATIVE_SESSION_CONTRACTS.pi,
 		runtime: {},
 		messageStorageDir: ".pi/agent",
 		displayName: "Pi",
@@ -319,6 +698,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.PRIME,
+		nativeSession: NATIVE_SESSION_CONTRACTS.prime,
 		messageStorageDir: ".prime-provider",
 		displayName: "Prime Agent (PrimeIntellect)",
 		description: "PrimeIntellect-ai/prime-agent — IPython-first coding agent (pi hard fork, fork line 0.7.x) driven over its native ACP mode. Model tuple travels via backend.model into a per-session materialized models.json, never env; the adapter pins PRIME_AGENT_CODING_AGENT_DIR to an isolated per-session agent dir (fail-closed harness-state isolation).",
@@ -341,6 +721,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.HERMES,
+		nativeSession: NATIVE_SESSION_CONTRACTS.hermes,
 		messageStorageDir: ".hermes-agent",
 		displayName: "Hermes Agent (Nous Research)",
 		description: "Open-source self-improving CLI agent. Persistent memory and skills live in $HERMES_HOME (pinned to the per-session workspace mount, not the read-only in-box $HOME) across same-tenant snapshot resumes — the learning loop is the differentiator. Provider-pluggable; defaults to OpenRouter via Tangle Router.",
@@ -369,6 +750,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.FORGE,
+		nativeSession: NATIVE_SESSION_CONTRACTS.forge,
 		messageStorageDir: ".forge-agent",
 		displayName: "Forge (forgecode.dev)",
 		description: "Rust-built multi-provider coding agent from tailcallhq/forgecode. Speaks anthropic/openai/openrouter/gemini/deepseek/kimi + local providers (ollama, lm_studio, llama_cpp). Credentials live in ~/.forge/.credentials.json, materialized via the standard authFiles pipeline — no interactive `forge provider login` required.",
@@ -400,6 +782,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.OPENCLAW,
+		nativeSession: NATIVE_SESSION_CONTRACTS.openclaw,
 		messageStorageDir: ".openclaw-agent",
 		displayName: "OpenClaw (Orchestrator)",
 		description: "Orchestrator-tier CLI agent that dispatches to underlying coding-agent CLIs (claude-cli, codex-cli, gemini-cli) via its built-in cliBackends plugin model. Use this when you want one entry point that intelligently routes tasks to the right coding harness.",
@@ -427,6 +810,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.NANOCLAW,
+		nativeSession: null,
 		messageStorageDir: ".nanoclaw-agent",
 		displayName: "NanoClaw",
 		description: "NanoClaw local socket bridge. Requires a running NanoClaw install and uses its `pnpm run chat` CLI channel; the adapter does not manage NanoClaw's Docker/service lifecycle.",
@@ -461,6 +845,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.ACP,
+		nativeSession: NATIVE_SESSION_CONTRACTS.acp,
 		messageStorageDir: ".acp-agent",
 		displayName: "ACP Bridge (multi-agent)",
 		description: "Generic Agent Client Protocol bridge — fronts any ACP-compliant agent binary (claude-agent-acp, codex-acp, gemini, openclaw acp, ...). Pick the backing agent via config.subAgent. One TypeScript adapter, many supported coding harnesses.",
@@ -482,6 +867,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CURSOR,
+		nativeSession: null,
 		messageStorageDir: ".cursor-sdk-sessions",
 		displayName: "Cursor Agent SDK",
 		description: "Cursor Agent SDK backend. Runs Cursor's local agent against the sandbox workspace via @cursor/sdk, using CURSOR_API_KEY or backend.model.apiKey for authentication.",
@@ -506,6 +892,7 @@ const CLI_AGENT_SPECS = [
 	},
 	{
 		name: BACKEND_TYPE.CLI_BASE,
+		nativeSession: null,
 		displayName: "CLI Base (no agent)",
 		description: "Bare sandbox without an AI agent backend. Use when you want the workspace, tools, and SSH access but no LLM dispatch.",
 		envVars: {},