@tangle-network/sandbox 0.60.14 → 0.60.16-develop.20261006020509.71b03b7

package/dist/{client-Cd8xKjQZ.js → client-CT9Td-BV.js}

@@ -1,8 +1,8 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { D as parseSSEStream, O as applyRequestedModel, T as encodePromptForWire, j as normalizeRuntimeBackendConfig, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-f_ePJqoh.js";
+import { A as foldModelRoutingFields, D as parseSSEStream, M as normalizeRuntimeBackendConfig, O as applyRequestedModel, T as encodePromptForWire, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-5_ixpFnR.js";
 import { _ as parseErrorResponse, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, l as PartialFailureError, p as ServerError, s as NetworkError, t as AuthError, v as parseResponseError, y as readResponseJson } from "./errors-D1JIX7Jm.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-D3SjjeDp.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-D3VcDY8b.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -3248,11 +3248,11 @@ function withRequestContextHeaders(response, path, method) {
 	return rewrapResponse(response, headers);
 }
 async function resolveLocalCliAuthFiles(backendType) {
-	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-BH9A-PW_.js");
+	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-DRXaIXAj.js");
 	return discoverLocalCliAuthFiles(backendType);
 }
 async function describeLocalCliAuthExpectation(backendType) {
-	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-BH9A-PW_.js");
+	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-DRXaIXAj.js");
 	return describe(backendType);
 }
 async function hydrateLocalCliBackendAuth(backend, baseUrl, trustLocalCliAuth) {
@@ -3469,7 +3469,6 @@ var Sandbox = class Sandbox {
 	* ```typescript
 	* const box = await client.create({
 	*   name: "my-project",
-	*   environment: "universal",
 	*   sshEnabled: true,
 	*   env: { NODE_ENV: "development" },
 	* });
@@ -3488,16 +3487,17 @@ var Sandbox = class Sandbox {
 	async create(inputOptions, requestOptions) {
 		let options = inputOptions;
 		normalizeRuntimeBackendConfig(options?.backend);
-		if (options?.backend?.runtimeAttachments !== void 0) {
-			normalizeRuntimeBackendConfig(options.backend);
-			options = {
-				...options,
-				backend: {
-					...options.backend,
-					runtimeAttachments: structuredClone(options.backend.runtimeAttachments)
-				}
-			};
-		}
+		if (options?.backend) options = {
+			...options,
+			backend: foldModelRoutingFields(options.backend)
+		};
+		if (options?.backend?.runtimeAttachments !== void 0) options = {
+			...options,
+			backend: {
+				...options.backend,
+				runtimeAttachments: structuredClone(options.backend.runtimeAttachments)
+			}
+		};
 		if (options?.backend?.type !== void 0) assertCurrentBackendType(options.backend.type);
 		const timeoutMs = requestOptions?.timeoutMs ?? (options?.gpuLease ? DEFAULT_GPU_CREATE_TIMEOUT_MS : DEFAULT_CREATE_TIMEOUT_MS);
 		const idempotencyKey = options?.idempotencyKey ?? generateIdempotencyKey();
@@ -3567,6 +3567,7 @@ var Sandbox = class Sandbox {
 			driver: options?.driver,
 			backend: requestBackend,
 			env: options?.env,
+			envRecovery: options?.envRecovery,
 			resources,
 			gpuLease: options?.gpuLease,
 			sshEnabled: options?.sshEnabled,
@@ -3575,6 +3576,7 @@ var Sandbox = class Sandbox {
 			webTerminalEnabled: options?.webTerminalEnabled,
 			maxLifetimeSeconds: options?.maxLifetimeSeconds,
 			idleTimeoutSeconds: options?.idleTimeoutSeconds,
+			coldTimeoutSeconds: options?.coldTimeoutSeconds,
 			deleteAfterStoppedSeconds: options?.deleteAfterStoppedSeconds,
 			storage: options?.storage,
 			ephemeral: options?.ephemeral,
@@ -3784,12 +3786,35 @@ var Sandbox = class Sandbox {
 		if (options?.limit !== void 0) params.set("limit", String(options.limit));
 		if (options?.offset !== void 0) params.set("offset", String(options.offset));
 		if (options?.scope !== void 0) params.set("scope", options.scope);
+		if (options?.run !== void 0) params.set("run", options.run);
 		const query = params.toString();
 		const path = query ? `/v1/sandboxes?${query}` : "/v1/sandboxes";
 		const data = await readResponseJson(await this.fetch(path));
 		return (Array.isArray(data) ? data : data.sandboxes ?? []).map((item) => createSandboxInstanceFromResponse(this, this.parseInfo(item)));
 	}
 	/**
+	* Every compute generation of every sandbox created for a caller run
+	* (`metadata.run`), deleted sandboxes included, oldest first. Reads every
+	* page of `GET /v1/sandboxes/runs/{run}`.
+	*
+	* @example
+	* ```typescript
+	* const generations = await client.runGenerations("my-run-1");
+	* ```
+	*/
+	async runGenerations(run) {
+		const generations = [];
+		let cursor = null;
+		do {
+			const query = cursor ? `?cursor=${encodeURIComponent(cursor)}` : "";
+			const data = await readResponseJson(await this.fetch(`/v1/sandboxes/runs/${encodeURIComponent(run)}${query}`));
+			if (!Array.isArray(data.generations) || data.nextCursor !== null && (typeof data.nextCursor !== "string" || data.nextCursor.length === 0)) throw new Error("runGenerations: the response has no generations page");
+			generations.push(...data.generations);
+			cursor = data.nextCursor;
+		} while (cursor !== null);
+		return generations;
+	}
+	/**
 	* Get a sandbox by ID.
 	*
 	* @param id - The sandbox ID

package/dist/{client-BCX8_Mu-.d.ts → client-CbOQtx9b.d.ts}

@@ -1,7 +1,7 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BCygk0lS.js";
-import { $n as PublicTemplateInfo, Ar as SandboxFleetArtifact, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ea as UsageInfo, En as ListSandboxOptions, Er as SandboxEnvironment, F as CreateIntelligenceReportOptions, Fi as SecretsManager, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, Ha as BatchEvent, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetCostEstimate, N as ConversationTurnResult, Nt as FleetAgentId, Or as SandboxFleetAgent, Pr as SandboxFleetDispatchResponse, Qr as SandboxFleetTraceBundle, R as CreateSandboxFleetTokenOptions, Rt as FleetDispatchResultBuffer, Tn as ListSandboxFleetOptions, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, Wt as FleetExecDispatchResult, Xr as SandboxFleetSpend, Yt as FleetRunOptions, Zr as SandboxFleetToken, _n as IntelligenceReport, aa as SshKeysManager, ai as SandboxFleetWorkspaceRestoreResult, ar as ReconcileSandboxFleetsOptions, b as BatchRunRequest, ba as TokenRefreshHandler, ci as SandboxInfo, d as BackendConfig, er as PublicTemplateVersionInfo, ii as SandboxFleetWorkspaceReconcileResult, ir as ReapExpiredSandboxFleetsResult, jr as SandboxFleetArtifactSpec, l as AttachSandboxFleetMachineOptions, la as SubscriptionInfo, ni as SandboxFleetUsage, nr as PublishPublicTemplateVersionOptions, oi as SandboxFleetWorkspaceSnapshotResult, or as ReconcileSandboxFleetsResult, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qt as FleetPromptDispatchResult, rr as ReapExpiredSandboxFleetsOptions, si as SandboxIdentity, ti as SandboxFleetTraceOptions, tr as PublishPublicTemplateOptions, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yi as SandboxShapesInfo, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zt as FleetDispatchResultBufferOptions } from "./types-BlA8Cly0.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-DalvAflZ.js";
+import { $a as BatchEvent, $n as PublicTemplateInfo, Ar as SandboxFleetArtifact, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Da as UsageInfo, En as ListSandboxOptions, Er as SandboxEnvironment, F as CreateIntelligenceReportOptions, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ii as SecretsManager, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetCostEstimate, N as ConversationTurnResult, Nt as FleetAgentId, Or as SandboxFleetAgent, Pr as SandboxFleetDispatchResponse, Qr as SandboxFleetTraceBundle, R as CreateSandboxFleetTokenOptions, Rt as FleetDispatchResultBuffer, Tn as ListSandboxFleetOptions, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, Wt as FleetExecDispatchResult, Xr as SandboxFleetSpend, Yt as FleetRunOptions, Zr as SandboxFleetToken, _n as IntelligenceReport, ai as SandboxFleetWorkspaceRestoreResult, ar as ReconcileSandboxFleetsOptions, b as BatchRunRequest, bi as SandboxShapesInfo, ci as SandboxInfo, d as BackendConfig, er as PublicTemplateVersionInfo, hi as SandboxRunGeneration, ii as SandboxFleetWorkspaceReconcileResult, ir as ReapExpiredSandboxFleetsResult, jr as SandboxFleetArtifactSpec, l as AttachSandboxFleetMachineOptions, ni as SandboxFleetUsage, nr as PublishPublicTemplateVersionOptions, oa as SshKeysManager, oi as SandboxFleetWorkspaceSnapshotResult, or as ReconcileSandboxFleetsResult, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qt as FleetPromptDispatchResult, rr as ReapExpiredSandboxFleetsOptions, si as SandboxIdentity, ti as SandboxFleetTraceOptions, tr as PublishPublicTemplateOptions, ua as SubscriptionInfo, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xa as TokenRefreshHandler, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zt as FleetDispatchResultBufferOptions } from "./types-CdT-paBK.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-B6bUr0hj.js";
-import { P as LinesClient } from "./lines-BbvLx7pi.js";
+import { I as LinesClient } from "./lines-BTZTbYDz.js";
 import { f as SandboxError } from "./errors-DS32ViPj.js";
 import { AgentInteractiveSessionRef } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -665,7 +665,6 @@ declare class Sandbox implements HttpClient, ScopedTokenHttpClient {
    * ```typescript
    * const box = await client.create({
    *   name: "my-project",
-   *   environment: "universal",
    *   sshEnabled: true,
    *   env: { NODE_ENV: "development" },
    * });
@@ -717,6 +716,17 @@ declare class Sandbox implements HttpClient, ScopedTokenHttpClient {
    * ```
    */
   list(options?: ListSandboxOptions): Promise<SandboxInstance[]>;
+  /**
+   * Every compute generation of every sandbox created for a caller run
+   * (`metadata.run`), deleted sandboxes included, oldest first. Reads every
+   * page of `GET /v1/sandboxes/runs/{run}`.
+   *
+   * @example
+   * ```typescript
+   * const generations = await client.runGenerations("my-run-1");
+   * ```
+   */
+  runGenerations(run: string): Promise<SandboxRunGeneration[]>;
   /**
    * Get a sandbox by ID.
    *

package/dist/core.d.ts

@@ -1,7 +1,7 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BCygk0lS.js";
-import { An as NetworkConfig, B as CreateSandboxOptions, Fa as ManagedProcessOptions, Fn as PreviewLinkInfo, Ia as ManagedProcessRecord, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessResumeOptions, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Na as ManagedProcessClient, Pa as ManagedProcessJobs, Ra as ManagedProcessSpec, Yi as SessionMessageAdmission, bi as SandboxStatus, ci as SandboxInfo, vt as ExecOptions, yr as SandboxConfig, yt as ExecResult, za as ManagedProcessState } from "./types-BlA8Cly0.js";
-import { B as LINE_APPLICATION_REQUEST_MAX_BYTES, D as LineSendReceipt, E as LineSendInput, G as LineApplicationView, H as LineApplicationRequest, K as parseLineApplicationRequest, L as lineInstanceKey, O as LineSenderVerification, P as LinesClient, R as profileChannelReference, U as LineApplicationResult, V as LineApplication, W as LineApplicationState, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, k as LineSenderVerificationStart, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as parseLineApplicationResult, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as LINE_APPLICATION_REPLY_MAX_CHARS } from "./lines-BbvLx7pi.js";
-import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, d as HostedInstance, f as InstanceProfile, g as InstancesClient, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, m as InstanceRestartingError, p as InstanceRecord, u as EnsureInstanceOptions, w as BackendRegistryInteractionKind } from "./client-BCX8_Mu-.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-DalvAflZ.js";
+import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessState, Fa as ManagedProcessJobs, Fn as PreviewLinkInfo, Ha as SandboxEnvRecoveryView, Ia as ManagedProcessOptions, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessRecord, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Pa as ManagedProcessClient, Ra as ManagedProcessResumeOptions, Va as SandboxEnvRecovery, Xi as SessionMessageAdmission, ci as SandboxInfo, vt as ExecOptions, xi as SandboxStatus, yr as SandboxConfig, yt as ExecResult, za as ManagedProcessSpec } from "./types-CdT-paBK.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BTZTbYDz.js";
+import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, d as HostedInstance, f as InstanceProfile, g as InstancesClient, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, m as InstanceRestartingError, p as InstanceRecord, u as EnsureInstanceOptions, w as BackendRegistryInteractionKind } from "./client-CbOQtx9b.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
 
 //#region src/core.d.ts
@@ -11,4 +11,4 @@ import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f a
  * still inspect the host receipt and their own customer/workspace binding. */
 declare const ISOLATED_CREATION_ATTESTATION_VERSION: 1;
 //#endregion
-export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type ConversationTurnOptions, type ConversationTurnResult, type CreateSandboxOptions, type EnsureInstanceOptions, type ExecOptions, type ExecResult, FileWriteConflictError, HostedInstance, ISOLATED_CREATION_ATTESTATION_VERSION, type InstanceProfile, type InstanceRecord, InstanceRestartingError, InstancesClient, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineInstanceAttachOptions, type LineInstanceCreate, type LineMember, type LineMemberInstance, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, LinesClient, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, type SessionMessageAdmission, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, lineInstanceKey, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseLineApplicationRequest, parseLineApplicationResult, profileChannelReference };
+export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type ConversationTurnOptions, type ConversationTurnResult, type CreateSandboxOptions, type EnsureInstanceOptions, type ExecOptions, type ExecResult, FileWriteConflictError, HostedInstance, ISOLATED_CREATION_ATTESTATION_VERSION, type InstanceProfile, type InstanceRecord, InstanceRestartingError, InstancesClient, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineInstanceAttachOptions, type LineInstanceCreate, type LineMember, type LineMemberInstance, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyCode, type LineReplyCodeInput, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, LinesClient, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, type SandboxEnvRecovery, type SandboxEnvRecoveryView, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, type SessionMessageAdmission, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, lineInstanceKey, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseLineApplicationRequest, parseLineApplicationResult, profileChannelReference };

package/dist/core.js

@@ -1,6 +1,6 @@
 import { a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, l as PartialFailureError, m as StateError, n as CapabilityError, p as ServerError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-D1JIX7Jm.js";
-import { _ as parseBackendRegistryResponseBody, a as InstancesClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, m as backendRegistryResponseSchema, n as Sandbox, p as backendRegistryInteractionKindSchema, r as HostedInstance } from "./client-Cd8xKjQZ.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-D3SjjeDp.js";
+import { _ as parseBackendRegistryResponseBody, a as InstancesClient, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, m as backendRegistryResponseSchema, n as Sandbox, p as backendRegistryInteractionKindSchema, r as HostedInstance } from "./client-CT9Td-BV.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-D3VcDY8b.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
 //#region src/core.ts

package/dist/{index-BgFIcLar.d.ts → index-BWmtGiyF.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-BCygk0lS.js";
-import { B as CreateSandboxOptions } from "./types-BlA8Cly0.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-DalvAflZ.js";
+import { B as CreateSandboxOptions } from "./types-CdT-paBK.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-import { $ as SandboxMcpConfig, A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as RawEvidenceExportOptions, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as RawEvidenceRecordsFile, K as RawEvidenceNativeFile, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, Q as SANDBOX_MCP_SERVER_NAME, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as RawEvidenceArchiveManifest, V as SandboxInteractionResolution, W as RawEvidenceDirectoryExport, X as BuildSandboxMcpConfigOptions, Y as BuildControlPlaneMcpConfigOptions, Z as CONTROL_PLANE_MCP_SERVER_NAME, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, et as SandboxMcpEndpoint, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, nt as buildControlPlaneMcpConfig, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as RawEvidencePayloadFile, r as SandboxInstance, rt as buildSandboxMcpConfig, s as WorkspaceImages, t as ForkAcknowledgement, tt as SandboxMcpServerEntry, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-BCygk0lS.js";
-import { $ as DownloadOptions, $i as SnapshotDeleteAcknowledgement, $n as PublicTemplateInfo, $r as SandboxFleetTraceEvent, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WriteFileOptions, Ai as SandboxTraceOptions, An as NetworkConfig, Ar as SandboxFleetArtifact, At as FileUsageOptions, B as CreateSandboxOptions, Ba as PublicBatchRunRequest, Bi as SessionEventStreamOptions, Bn as ProcessListOptions, Br as SandboxFleetMachineMeteredUsage, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as UpdateUserOptions, Ci as SandboxTerminalInfo, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, Ct as FileReadError, Da as WaitForOptions, Di as SandboxTraceBundle, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEvent, Dt as FileTreeFile, Ea as UsageInfo, Ei as SandboxTerminals, En as ListSandboxOptions, Er as SandboxEnvironment, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as ManagedProcessOptions, Fi as SecretsManager, Fn as PreviewLinkInfo, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as BatchTaskUsage, Gi as SessionInfo, Gn as ProcessStatus, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as BatchEvent, Hi as SessionExecutionStatus, Hn as ProcessManager, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessRecord, Ii as SendSessionMessageOptions, In as PreviewLinkManager, Ir as SandboxFleetDriverTimings, It as FleetAgentRunStatus, J as DeleteOptions, Ja as parseBackendType, Ji as SessionMessage, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as ALL_BACKEND_TYPES, Ki as SessionInterruptOptions, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessResumeOptions, Li as SendSessionMessageRequest, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WriteManyOptions, Mi as SearchMatch, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetCostEstimate, Mt as FileWriteResult, N as ConversationTurnResult, Na as ManagedProcessClient, Ni as SearchOptions, Nn as PermissionLevel, Nr as SandboxFleetDispatchFailureClass, Nt as FleetAgentId, Oa as WaitForRolloutOptions, Oi as SandboxTraceEvent, On as McpServerConfig, Or as SandboxFleetAgent, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as ManagedProcessJobs, Pi as SecretInfo, Pn as PermissionsManager, Pr as SandboxFleetDispatchResponse, Pt as FleetAgentPlacement, Q as DispatchedSession, Qi as SessionStatus, Qn as ProvisionStep, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ra as ManagedProcessSpec, Ri as SentSessionMessage, Rn as Process, Rr as SandboxFleetIntelligenceEnvelope, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TurnDriveResult, Si as SandboxTerminalCreateOptions, Sr as SandboxCreateReceipt, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadProgress, Ti as SandboxTerminalRequestOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOutcome, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as BatchEventDataMap, Ui as SessionFailureReason, Un as ProcessSignal, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as BatchBackendStats, Vi as SessionExecutionInfo, Vn as ProcessLogEntry, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as BatchSidecarGroup, Wi as SessionForkOptions, Wn as ProcessSpawnOptions, Wr as SandboxFleetManifestMachine, X as DirectoryPermission, Xi as SessionMessageInputPart, Xn as ProvisionResult, Xr as SandboxFleetSpend, Xt as ForkCounts, Y as DevServerInfo, Yi as SessionMessageAdmission, Yn as ProvisionEvent, Yr as SandboxFleetProfileRef, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionResultOptions, Zn as ProvisionStatus, Zr as SandboxFleetToken, Zt as ForkIdempotency, _ as BatchBackend, _a as TeeAttestationResponse, _i as SandboxShape, _n as IntelligenceReport, _r as SSHCommandDescriptor, _t as ExactProcessSpawnOptions, ai as SandboxFleetWorkspaceRestoreResult, an as GitStatus, ar as ReconcileSandboxFleetsOptions, at as DriverType, b as BatchRunRequest, ba as TokenRefreshHandler, bi as SandboxStatus, bn as IntelligenceReportSubjectType, br as SandboxConnection, bt as FileInfo, c as AttachGpuLeaseOptions, ca as StorageConfig, ci as SandboxInfo, cn as GpuLeaseCommandResult, d as BackendConfig, da as TaskSessionCommitResult, di as SandboxPortPreviewLink, dn as GpuLeaseManager, dr as RolloutChildResult, dt as EffectiveBackendSource, ea as SnapshotDeleteOutcome, ei as SandboxFleetTraceExport, en as GitAuth, er as PublicTemplateVersionInfo, et as DownloadProgress, f as BackendInfo, fa as TaskSessionFileChange, fi as SandboxRemovalState, fn as GpuLeaseProviderName, fr as RolloutOptions, ft as EgressDenial, g as BackendStatus, ga as TeeAttestationReport, gi as SandboxRuntimeHealth, gn as InstalledTool, gr as RolloutTurnPart, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TeeAttestationOptions, hi as SandboxRuntimeCapabilities, hn as HostAgentRuntimeBackend, hr as RolloutStatus, ht as EnsureDevServerOptions, ia as SnapshotResult, ii as SandboxFleetWorkspaceReconcileResult, in as GitDiff, ir as ReapExpiredSandboxFleetsResult, it as DriverInfo, j as CompletedTurnResult, ja as WriteManyFile, ji as SandboxUser, jn as NetworkManager, jr as SandboxFleetArtifactSpec, jt as FileUsageResult, ka as WorkspaceOperationLookup, ki as SandboxTraceExport, kn as MkdirOptions, kr as SandboxFleetAgentSpec, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as SubscriptionInfo, li as SandboxIntelligenceEnvelope, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionProfile, mi as SandboxResources, mn as HostAgentDriverConfig, mr as RolloutStartResult, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotInfo, ni as SandboxFleetUsage, nn as GitCommit, nr as PublishPublicTemplateVersionOptions, nt as DriveTurnOptions, oa as StartupDiagnostics, oi as SandboxFleetWorkspaceSnapshotResult, on as GpuLease, or as ReconcileSandboxFleetsResult, ot as DurablePlan, p as BackendManager, pa as TaskSessionInfo, pi as SandboxResourceUsage, pn as GpuLeaseStatus, pr as RolloutScorer, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as BackendType, qi as SessionListOptions, qn as PromptOptions, qr as SandboxFleetPlacement, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotOptions, ri as SandboxFleetWorkspace, rn as GitConfig, rr as ReapExpiredSandboxFleetsOptions, rt as DriverConfig, sa as StartupOperation, si as SandboxIdentity, sn as GpuLeaseBilling, sr as RenameOptions, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SnapshotIdempotency, ti as SandboxFleetTraceOptions, tn as GitBranch, tr as PublishPublicTemplateOptions, tt as DownloadResult, u as BackendCapabilities, ua as TaskSessionChanges, ui as SandboxPortBinding, un as GpuLeaseExecResult, ur as Rollout, ut as EffectiveBackendProfile, v as BatchResult, va as TeePublicKey, vi as SandboxShapePreset, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, w as ChunkedUploadOptions, wa as UploadOptions, wi as SandboxTerminalManager, wn as ListOptions, wr as SandboxDeleteOptions, wt as FileReadResult, x as BatchTask, xa as TokenUsage, xi as SandboxTerminalAttachOptions, xn as IntelligenceReportWindow, xr as SandboxCreateOutcome, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeePublicKeyResponse, yi as SandboxShapesInfo, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessState, zi as SessionBackendCredentials, zn as ProcessInfo, zr as SandboxFleetMachine, zt as FleetDispatchResultBufferOptions } from "./types-BlA8Cly0.js";
+import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-DalvAflZ.js";
+import { $ as DownloadOptions, $a as BatchEvent, $i as SessionStatus, $n as PublicTemplateInfo, $r as SandboxFleetTraceEvent, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WorkspaceOperationLookup, Ai as SandboxTraceExport, An as NetworkConfig, Ar as SandboxFleetArtifact, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessState, Bi as SessionBackendCredentials, Bn as ProcessListOptions, Br as SandboxFleetMachineMeteredUsage, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TurnDriveResult, Ci as SandboxTerminalCreateOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, Ct as FileReadError, Da as UsageInfo, Di as SandboxTerminals, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEvent, Dt as FileTreeFile, Ea as UploadProgress, Ei as SandboxTerminalRequestOptions, En as ListSandboxOptions, Er as SandboxEnvironment, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as ManagedProcessJobs, Fi as SecretInfo, Fn as PreviewLinkInfo, Fr as SandboxFleetDriverCapability, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceExportOptions, Gi as SessionForkOptions, Gn as ProcessStatus, Gr as SandboxFleetOperationsSummary, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as SandboxEnvRecoveryView, Hi as SessionExecutionInfo, Hn as ProcessManager, Hr as SandboxFleetMachineSpec, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessOptions, Ii as SecretsManager, In as PreviewLinkManager, Ir as SandboxFleetDriverTimings, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidenceRecordsFile, Ji as SessionListOptions, Jn as PromptResult, Jr as SandboxFleetPolicy, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceNativeFile, Ki as SessionInfo, Kn as PromptInputPart, Kr as SandboxFleetParent, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessRecord, Li as SendSessionMessageOptions, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetInfo, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WriteManyFile, Mi as SandboxUser, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetCostEstimate, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteManyOptions, Ni as SearchMatch, Nn as PermissionLevel, Nr as SandboxFleetDispatchFailureClass, Nt as FleetAgentId, Oa as WaitForOptions, Oi as SandboxTraceBundle, On as McpServerConfig, Or as SandboxFleetAgent, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as ManagedProcessClient, Pi as SearchOptions, Pn as PermissionsManager, Pr as SandboxFleetDispatchResponse, Pt as FleetAgentPlacement, Q as DispatchedSession, Qa as BatchBackendStats, Qi as SessionResultOptions, Qn as ProvisionStep, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ra as ManagedProcessResumeOptions, Ri as SendSessionMessageRequest, Rn as Process, Rr as SandboxFleetIntelligenceEnvelope, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TokenUsage, Si as SandboxTerminalAttachOptions, Sr as SandboxCreateReceipt, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadOptions, Ti as SandboxTerminalManager, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOutcome, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as RawEvidenceArchiveManifest, Ui as SessionExecutionStatus, Un as ProcessSignal, Ur as SandboxFleetManifest, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as SandboxEnvRecovery, Vi as SessionEventStreamOptions, Vn as ProcessLogEntry, Vr as SandboxFleetMachineRecord, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as RawEvidenceDirectoryExport, Wi as SessionFailureReason, Wn as ProcessSpawnOptions, Wr as SandboxFleetManifestMachine, X as DirectoryPermission, Xi as SessionMessageAdmission, Xn as ProvisionResult, Xr as SandboxFleetSpend, Xt as ForkCounts, Y as DevServerInfo, Yi as SessionMessage, Yn as ProvisionEvent, Yr as SandboxFleetProfileRef, Yt as FleetRunOptions, Z as DispatchPromptOptions, Za as PublicBatchRunRequest, Zi as SessionMessageInputPart, Zn as ProvisionStatus, Zr as SandboxFleetToken, Zt as ForkIdempotency, _ as BatchBackend, _a as TeeAttestationReport, _i as SandboxRuntimeHealth, _n as IntelligenceReport, _r as SSHCommandDescriptor, _t as ExactProcessSpawnOptions, aa as SnapshotResult, ai as SandboxFleetWorkspaceRestoreResult, an as GitStatus, ao as parseBackendType, ar as ReconcileSandboxFleetsOptions, at as DriverType, b as BatchRunRequest, ba as TeePublicKeyResponse, bi as SandboxShapesInfo, bn as IntelligenceReportSubjectType, br as SandboxConnection, bt as FileInfo, c as AttachGpuLeaseOptions, ca as StartupOperation, ci as SandboxInfo, cn as GpuLeaseCommandResult, d as BackendConfig, da as TaskSessionChanges, di as SandboxPortPreviewLink, dn as GpuLeaseManager, dr as RolloutChildResult, dt as EffectiveBackendSource, ea as SnapshotDeleteAcknowledgement, ei as SandboxFleetTraceExport, en as GitAuth, eo as BatchEventDataMap, er as PublicTemplateVersionInfo, et as DownloadProgress, f as BackendInfo, fa as TaskSessionCommitResult, fi as SandboxRemovalState, fn as GpuLeaseProviderName, fr as RolloutOptions, ft as EgressDenial, g as BackendStatus, ga as TeeAttestationOptions, gi as SandboxRuntimeCapabilities, gn as InstalledTool, gr as RolloutTurnPart, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionProfile, hi as SandboxRunGeneration, hn as HostAgentRuntimeBackend, hr as RolloutStatus, ht as EnsureDevServerOptions, ia as SnapshotOptions, ii as SandboxFleetWorkspaceReconcileResult, in as GitDiff, io as BackendType, ir as ReapExpiredSandboxFleetsResult, it as DriverInfo, j as CompletedTurnResult, ja as WriteFileOptions, ji as SandboxTraceOptions, jn as NetworkManager, jr as SandboxFleetArtifactSpec, jt as FileUsageResult, ka as WaitForRolloutOptions, ki as SandboxTraceEvent, kn as MkdirOptions, kr as SandboxFleetAgentSpec, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StorageConfig, li as SandboxIntelligenceEnvelope, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionInfo, mi as SandboxResources, mn as HostAgentDriverConfig, mr as RolloutStartResult, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotIdempotency, ni as SandboxFleetUsage, nn as GitCommit, no as BatchTaskUsage, nr as PublishPublicTemplateVersionOptions, nt as DriveTurnOptions, oi as SandboxFleetWorkspaceSnapshotResult, on as GpuLease, or as ReconcileSandboxFleetsResult, ot as DurablePlan, p as BackendManager, pa as TaskSessionFileChange, pi as SandboxResourceUsage, pn as GpuLeaseStatus, pr as RolloutScorer, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidencePayloadFile, qi as SessionInterruptOptions, qn as PromptOptions, qr as SandboxFleetPlacement, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotInfo, ri as SandboxFleetWorkspace, rn as GitConfig, ro as ALL_BACKEND_TYPES, rr as ReapExpiredSandboxFleetsOptions, rt as DriverConfig, sa as StartupDiagnostics, si as SandboxIdentity, sn as GpuLeaseBilling, sr as RenameOptions, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SnapshotDeleteOutcome, ti as SandboxFleetTraceOptions, tn as GitBranch, to as BatchSidecarGroup, tr as PublishPublicTemplateOptions, tt as DownloadResult, u as BackendCapabilities, ua as SubscriptionInfo, ui as SandboxPortBinding, un as GpuLeaseExecResult, ur as Rollout, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationResponse, vi as SandboxShape, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, w as ChunkedUploadOptions, wa as UpdateUserOptions, wi as SandboxTerminalInfo, wn as ListOptions, wr as SandboxDeleteOptions, wt as FileReadResult, x as BatchTask, xa as TokenRefreshHandler, xi as SandboxStatus, xn as IntelligenceReportWindow, xr as SandboxCreateOutcome, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeePublicKey, yi as SandboxShapePreset, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessSpec, zi as SentSessionMessage, zn as ProcessInfo, zr as SandboxFleetMachine, zt as FleetDispatchResultBufferOptions } from "./types-CdT-paBK.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-B6bUr0hj.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as interactiveSessionIdentityDigest, f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as InteractiveSessionNotRunningError, m as InteractiveControlClaimOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimAcknowledgement, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as createInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { a as InteractiveSessionControllerOptions, i as InteractiveSessionController, n as BrowserInteractiveSessionControllerOptions, o as InteractiveSessionControllerTransport, r as InteractiveAttachRequest, t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
-import { A as LineThread, B as LINE_APPLICATION_REQUEST_MAX_BYTES, C as LineRespondAgent, D as LineSendReceipt, E as LineSendInput, G as LineApplicationView, H as LineApplicationRequest, I as SandboxLines, K as parseLineApplicationRequest, L as lineInstanceKey, M as LineVoice, N as LineVoiceOptions, O as LineSenderVerification, P as LinesClient, R as profileChannelReference, S as LineReplyGate, T as LineRole, U as LineApplicationResult, V as LineApplication, W as LineApplicationState, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineTransport, k as LineSenderVerificationStart, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as parseLineApplicationResult, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineRespondView, x as LineReminderPreferences, y as LineNumberInventory, z as LINE_APPLICATION_REPLY_MAX_CHARS } from "./lines-BbvLx7pi.js";
-import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, _ as SandboxFleet, a as Team, b as ParsedSSEEvent, c as SessionBroadcastEvent, d as HostedInstance, f as InstanceProfile, g as InstancesClient, h as InstanceStart, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, l as SessionBroadcastResult, m as InstanceRestartingError, n as IntelligenceClient, o as TeamInvitation, p as InstanceRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as EnsureInstanceOptions, v as SandboxFleetClient, w as BackendRegistryInteractionKind, x as parseSSEStream, y as ParseSSEStreamOptions } from "./client-BCX8_Mu-.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BTZTbYDz.js";
+import { A as isBackendRegistryInteractionKind, C as BackendRegistryEntry, D as backendRegistryEntrySchema, E as backendRegistryCapabilitiesSchema, M as parseBackendRegistryResponseBody, O as backendRegistryInteractionKindSchema, S as BackendRegistryCapabilities, T as BackendRegistryResponse, _ as SandboxFleet, a as Team, b as ParsedSSEEvent, c as SessionBroadcastEvent, d as HostedInstance, f as InstanceProfile, g as InstancesClient, h as InstanceStart, i as Sandbox, j as parseBackendRegistryResponse, k as backendRegistryResponseSchema, l as SessionBroadcastResult, m as InstanceRestartingError, n as IntelligenceClient, o as TeamInvitation, p as InstanceRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as EnsureInstanceOptions, v as SandboxFleetClient, w as BackendRegistryInteractionKind, x as parseSSEStream, y as ParseSSEStreamOptions } from "./client-CbOQtx9b.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as StateError, h as ServerError, i as EgressProxyRecoveryError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxErrorJson, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-BoQeoNOD.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-BXcL8P-U.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-CG7bb9lr.js";
-import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-BgFIcLar.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C8oSKngX.js";
+import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-BWmtGiyF.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -60,7 +60,9 @@ declare function startTeeAttestationHeartbeat(sandbox: Pick<SandboxInstance, "ge
  * Canonical profile objects are already accepted by the sidecar and are
  * forwarded without translation.
  */
-declare function normalizeRuntimeBackendConfig(backend: Partial<BackendConfig> | undefined): Record<string, unknown> | undefined;
+declare function normalizeRuntimeBackendConfig(backendInput: Partial<BackendConfig> | undefined, options?: {
+  allowRuntimeSecrets?: boolean;
+}): Record<string, unknown> | undefined;
 //#endregion
 //#region src/batch.d.ts
 /** Validate and normalize one public batch request. */
@@ -4109,8 +4111,14 @@ interface MaterializeProfileFileMountsResult {
    *  serialized content does not fit a gateway-safe single-shot write. */
   viaUpload: number;
 }
-type ProfileFileMountBox = Pick<SandboxInstance, "exec"> & {
-  fs?: Pick<SandboxInstance["fs"], "supportsWriteMode" | "writeMany"> & {
+/**
+ * The sandbox surface mount delivery uses. SandboxInstance satisfies it; the
+ * types come from ./types.js so this module never imports ./sandbox.js, which
+ * imports it.
+ */
+type ProfileFileMountBox = {
+  exec(command: string, options?: ExecOptions): Promise<ExecResult>;
+  fs?: Pick<FileSystem, "supportsWriteMode" | "writeMany"> & {
     /**
      * Optional chunked-upload capability. Only required when a deferred
      * inline mount's decoded content exceeds the gateway-safe single-shot
@@ -4118,7 +4126,7 @@ type ProfileFileMountBox = Pick<SandboxInstance, "exec"> & {
      * (naming the oversized mount) rather than attempting a single-shot
      * write the wire would reject.
      */
-    uploadData?: SandboxInstance["fs"]["uploadData"];
+    uploadData?: FileSystem["uploadData"];
   };
 };
 /**
@@ -4451,4 +4459,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type ConversationTurnOptions, type ConversationTurnResult, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteMatchingSandboxOutcome, type DeleteMatchingSandboxResult, type DeleteMatchingSandboxesFilter, type DeleteMatchingSandboxesOptions, type DeleteMatchingSandboxesResult, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DownloadResult, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EnsureInstanceOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetAgentId, type FleetAgentPlacement, type FleetAgentResult, type FleetAgentRunStatus, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type FleetPromptDispatchResult, type FleetRunEvent, type FleetRunOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, HostedInstance, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, type InstanceProfile, type InstanceRecord, InstanceRestartingError, type InstanceStart, InstancesClient, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, InteractiveSessionNotRunningError, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineAllowance, type LineAllowanceSubject, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachOptions, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineFromConnectionInput, type LineInstanceAttachOptions, type LineInstanceCreate, type LineLimits, type LineMember, type LineMemberInstance, type LineMemberPatch, type LineMemberSpec, type LineMessage, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyGate, type LineRespondAgent, type LineRespondView, type LineRole, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, type LineThread, type LineTransport, type LineVoice, type LineVoiceOptions, LinesClient, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type RawEvidenceArchiveManifest, type RawEvidenceDirectoryExport, type RawEvidenceExport, type RawEvidenceExportOptions, type RawEvidenceNativeFile, type RawEvidencePayloadFile, type RawEvidenceRecordsFile, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, ResumeEnvRequiredError, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetAgent, type SandboxFleetAgentSpec, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetParent, type SandboxFleetPlacement, type SandboxFleetPolicy, type SandboxFleetProfileRef, type SandboxFleetSpend, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, SandboxLines, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxShape, type SandboxShapePreset, type SandboxShapesInfo, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageAdmission, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, lineInstanceKey, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseLineApplicationRequest, parseLineApplicationResult, parseSSEStream, profileChannelReference, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type ConversationTurnOptions, type ConversationTurnResult, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteMatchingSandboxOutcome, type DeleteMatchingSandboxResult, type DeleteMatchingSandboxesFilter, type DeleteMatchingSandboxesOptions, type DeleteMatchingSandboxesResult, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DownloadResult, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EnsureInstanceOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetAgentId, type FleetAgentPlacement, type FleetAgentResult, type FleetAgentRunStatus, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type FleetPromptDispatchResult, type FleetRunEvent, type FleetRunOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, HostedInstance, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, type InstanceProfile, type InstanceRecord, InstanceRestartingError, type InstanceStart, InstancesClient, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, InteractiveSessionNotRunningError, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineAllowance, type LineAllowanceSubject, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachOptions, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineFromConnectionInput, type LineInstanceAttachOptions, type LineInstanceCreate, type LineLimits, type LineMember, type LineMemberInstance, type LineMemberPatch, type LineMemberSpec, type LineMessage, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyCode, type LineReplyCodeInput, type LineReplyGate, type LineRespondAgent, type LineRespondView, type LineRole, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, type LineThread, type LineTransport, type LineVoice, type LineVoiceOptions, LinesClient, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type RawEvidenceArchiveManifest, type RawEvidenceDirectoryExport, type RawEvidenceExport, type RawEvidenceExportOptions, type RawEvidenceNativeFile, type RawEvidencePayloadFile, type RawEvidenceRecordsFile, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, ResumeEnvRequiredError, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEnvRecovery, type SandboxEnvRecoveryView, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetAgent, type SandboxFleetAgentSpec, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetParent, type SandboxFleetPlacement, type SandboxFleetPolicy, type SandboxFleetProfileRef, type SandboxFleetSpend, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, SandboxLines, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRunGeneration, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxShape, type SandboxShapePreset, type SandboxShapesInfo, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageAdmission, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, lineInstanceKey, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseLineApplicationRequest, parseLineApplicationResult, parseSSEStream, profileChannelReference, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
-import { D as parseSSEStream, M as createAgentRunOutcomeTracker, N as deriveAgentResultOutcome, P as deriveAgentRunOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, j as normalizeRuntimeBackendConfig, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController } from "./interactive-controller-f_ePJqoh.js";
+import { D as parseSSEStream, F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, M as normalizeRuntimeBackendConfig, P as createAgentRunOutcomeTracker, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController } from "./interactive-controller-5_ixpFnR.js";
 import { a as FileWriteConflictError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as ValidationError, h as TimeoutError, i as EgressProxyRecoveryError, l as PartialFailureError, m as StateError, n as CapabilityError, o as KeyBudgetExhaustedError, p as ServerError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-D1JIX7Jm.js";
-import { _ as parseBackendRegistryResponseBody, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as SandboxFleet, p as backendRegistryInteractionKindSchema, r as HostedInstance, s as SandboxFleetClient, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-Cd8xKjQZ.js";
+import { _ as parseBackendRegistryResponseBody, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryCapabilitiesSchema, f as backendRegistryEntrySchema, g as parseBackendRegistryResponse, h as isBackendRegistryInteractionKind, i as InstanceRestartingError, l as createBatchResultAccumulator, m as backendRegistryResponseSchema, n as Sandbox, o as SandboxFleet, p as backendRegistryInteractionKindSchema, r as HostedInstance, s as SandboxFleetClient, t as IntelligenceClient, u as validateBatchRunRequest } from "./client-CT9Td-BV.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-D3SjjeDp.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-D3VcDY8b.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-B7QeBrFQ.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
-import { s as TangleSandboxClient } from "./tangle-fMCqH1ig.js";
+import { s as TangleSandboxClient } from "./tangle-CLrVMWGG.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{interactive-controller-f_ePJqoh.js → interactive-controller-5_ixpFnR.js}

@@ -414,16 +414,78 @@ function assertCurrentBackendType(value, field = "backend.type") {
 * `backend.model.model` is a `ValidationError`, not a merge policy.
 */
 function applyRequestedModel(backend, requestedModel) {
-	if (requestedModel === void 0) return backend;
+	if (requestedModel === void 0) return foldModelRoutingFields(backend);
 	const model = requestedModel.trim();
 	if (!model) throw new ValidationError("model must be a non-empty model id", { model: "Must be a non-empty model id" });
-	const explicit = backend?.model?.model;
-	if (explicit !== void 0 && explicit !== model) throw new ValidationError(`Conflicting per-turn models: options.model="${model}" vs backend.model.model="${explicit}". Set one of them.`, { model: "Conflicts with backend.model.model" });
-	return {
+	const explicitModelId = backend?.modelId;
+	const explicitNestedModel = backend?.model?.model;
+	if (explicitModelId !== void 0 && explicitNestedModel !== void 0 && explicitModelId !== explicitNestedModel) throw new ValidationError("Conflicting backend model fields: backend.modelId and backend.model.model are both set and disagree. Set each field one way.", { model: "backend.modelId conflicts with backend.model.model" });
+	const explicit = explicitModelId ?? explicitNestedModel;
+	if (explicit !== void 0 && explicit !== model) throw new ValidationError(`Conflicting per-turn models: options.model="${model}" vs backend.modelId="${explicit}". Set one of them.`, { model: "Conflicts with backend.modelId" });
+	return foldModelRoutingFields({
 		...backend,
+		modelId: model
+	});
+}
+/**
+* Fold the role-named model fields (`modelId`, `provider`, `apiKey`, ...)
+* and the deprecated nested `model` object into one nested routing object,
+* so the wire shape is unchanged while the public spelling improves.
+*
+* A field set both ways must agree: disagreement between spellings of the
+* same fact is the same conflict class as `applyRequestedModel` enforces,
+* so it throws instead of picking a winner.
+*/
+const ROLE_NAMED_MODEL_FIELDS = [
+	"modelId",
+	"provider",
+	"apiKey",
+	"baseUrl",
+	"maxThinkingTokens",
+	"mode",
+	"apiKeyEnv",
+	"cliAuth",
+	"authMode",
+	"authFiles"
+];
+function sameRoutingValue(left, right) {
+	if (Object.is(left, right)) return true;
+	if (typeof left !== "object" || typeof right !== "object" || left === null || right === null || Array.isArray(left) !== Array.isArray(right)) return false;
+	const leftKeys = Object.keys(left).filter((key) => left[key] !== void 0);
+	const rightKeys = Object.keys(right).filter((key) => right[key] !== void 0);
+	return leftKeys.length === rightKeys.length && leftKeys.every((key) => sameRoutingValue(left[key], right[key]));
+}
+function foldModelRoutingFields(backend) {
+	if (!backend) return backend;
+	const flat = {
+		...backend.modelId !== void 0 ? { model: backend.modelId } : {},
+		...backend.provider !== void 0 ? { provider: backend.provider } : {},
+		...backend.apiKey !== void 0 ? { apiKey: backend.apiKey } : {},
+		...backend.baseUrl !== void 0 ? { baseUrl: backend.baseUrl } : {},
+		...backend.maxThinkingTokens !== void 0 ? { maxThinkingTokens: backend.maxThinkingTokens } : {},
+		...backend.mode !== void 0 ? { mode: backend.mode } : {},
+		...backend.apiKeyEnv !== void 0 ? { apiKeyEnv: backend.apiKeyEnv } : {},
+		...backend.cliAuth !== void 0 ? { cliAuth: backend.cliAuth } : {},
+		...backend.authMode !== void 0 ? { authMode: backend.authMode } : {},
+		...backend.authFiles !== void 0 ? { authFiles: backend.authFiles } : {}
+	};
+	if (Object.keys(flat).length === 0) return backend;
+	const rest = { ...backend };
+	for (const field of ROLE_NAMED_MODEL_FIELDS) delete rest[field];
+	const nested = backend.model;
+	if (!nested || Object.keys(nested).length === 0) return {
+		...rest,
+		model: flat
+	};
+	for (const [field, flatValue] of Object.entries(flat)) {
+		const nestedValue = nested[field] ?? void 0;
+		if (nestedValue !== void 0 && !sameRoutingValue(nestedValue, flatValue)) throw new ValidationError(`Conflicting backend model fields: backend.${field} and backend.model.${field} are both set and disagree. Set each field one way.`, { model: `backend.${field} conflicts with backend.model.${field}` });
+	}
+	return {
+		...rest,
 		model: {
-			...backend?.model,
-			model
+			...nested,
+			...flat
 		}
 	};
 }
@@ -441,14 +503,47 @@ function mergeRuntimeBackendConfig(defaults, override) {
 		} } : {}
 	};
 }
+const RUNTIME_SECRET_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const RUNTIME_SECRETS_MAX_ENTRIES = 64;
+const RUNTIME_SECRET_MAX_KEY = 128;
+const RUNTIME_SECRET_MAX_VALUE = 8192;
+/**
+* Turn-scoped credential delivery is validated before the wire:
+* environment-variable names, bounded count and size, no NUL bytes. The
+* sidecar separately refuses names its runtime manages; values are never
+* logged, so failures name keys and shapes only.
+*/
+function assertRuntimeSecrets(value, field = "backend.runtimeSecrets") {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new ValidationError(`${field} must be a record of env-name to value`);
+	const entries = Object.entries(value);
+	if (entries.length > RUNTIME_SECRETS_MAX_ENTRIES) throw new ValidationError(`${field} allows at most ${RUNTIME_SECRETS_MAX_ENTRIES} entries`);
+	for (const [key, secret] of entries) {
+		if (!RUNTIME_SECRET_NAME.test(key) || key.length > RUNTIME_SECRET_MAX_KEY) throw new ValidationError(`${field} keys must be environment-variable names: ${JSON.stringify(key.slice(0, 64))}`);
+		if (typeof secret !== "string" || secret.length === 0 || secret.length > RUNTIME_SECRET_MAX_VALUE || secret.includes("\0")) throw new ValidationError(`${field}.${key} must be 1-${RUNTIME_SECRET_MAX_VALUE} characters without NUL bytes`);
+	}
+}
+/**
+* The session-creation leg of a conversation drive must not carry turn-scoped
+* credentials: session config persists, runtimeSecrets do not.
+*/
+function withoutRuntimeSecrets(backend) {
+	if (backend?.runtimeSecrets === void 0) return backend;
+	const { runtimeSecrets: _turnOnly, ...rest } = backend;
+	return rest;
+}
 /**
 * Normalize runtime backend config for the wire format.
 *
 * Canonical profile objects are already accepted by the sidecar and are
 * forwarded without translation.
 */
-function normalizeRuntimeBackendConfig(backend) {
+function normalizeRuntimeBackendConfig(backendInput, options = {}) {
+	const backend = foldModelRoutingFields(backendInput);
 	if (!backend) return void 0;
+	if (backend.runtimeSecrets !== void 0) {
+		if (!options.allowRuntimeSecrets) throw new ValidationError("[sandbox-sdk] backend.runtimeSecrets is turn-scoped credential delivery: send it on a session message request (driveConversationTurn / sendMessage), not on sandbox or session creation");
+		assertRuntimeSecrets(backend.runtimeSecrets);
+	}
 	if (backend.runtimeAttachments !== void 0) {
 		const parsed = AgentRuntimeAttachmentsSchema.safeParse(backend.runtimeAttachments);
 		if (!parsed.success) throw new Error("[sandbox-sdk] invalid runtimeAttachments");
@@ -464,6 +559,7 @@ function normalizeRuntimeBackendConfig(backend) {
 		...backend?.type ? { type: backend.type } : {},
 		...backend?.profile !== void 0 ? { profile: backend.profile } : {},
 		...backend.runtimeAttachments !== void 0 ? { runtimeAttachments: structuredClone(backend.runtimeAttachments) } : {},
+		...backend.runtimeSecrets !== void 0 ? { runtimeSecrets: { ...backend.runtimeSecrets } } : {},
 		...backend?.model ? { model: backend.model } : {},
 		...backend?.server ? { server: backend.server } : {},
 		...backend?.interactions !== void 0 ? { interactions: backend.interactions } : {},
@@ -1641,7 +1737,7 @@ function sessionMessageRequestBody(request) {
 	}
 	if (request.managedQuoteVersion !== void 0 && !/^mmq_[a-f0-9]{40}$/.test(request.managedQuoteVersion)) throw new ValidationError("managedQuoteVersion is invalid");
 	return {
-		...request.backend !== void 0 ? { backend: normalizeRuntimeBackendConfig(request.backend) } : {},
+		...request.backend !== void 0 ? { backend: normalizeRuntimeBackendConfig(request.backend, { allowRuntimeSecrets: true }) } : {},
 		...request.managedQuoteVersion !== void 0 ? { managedQuoteVersion: request.managedQuoteVersion } : {},
 		...request.managedModelCredential === true ? { managedModelCredential: true } : {},
 		...request.runControlRef !== void 0 ? { runControlRef: AgentExactRunControlRefSchema.parse(request.runControlRef) } : {},
@@ -2492,4 +2588,4 @@ var BrowserInteractiveSessionController = class extends InteractiveSessionContro
 	}
 };
 //#endregion
-export { mergeRuntimeBackendConfig as A, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, createAgentRunOutcomeTracker as M, deriveAgentResultOutcome as N, applyRequestedModel as O, deriveAgentRunOutcome as P, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, normalizeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y };
+export { foldModelRoutingFields as A, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, deriveAgentResultOutcome as F, deriveAgentRunOutcome as I, normalizeRuntimeBackendConfig as M, withoutRuntimeSecrets as N, applyRequestedModel as O, createAgentRunOutcomeTracker as P, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, mergeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y };