@tangle-network/sandbox 0.60.14 → 0.60.16-develop.20261006020509.71b03b7

package/dist/{types-BlA8Cly0.d.ts → types-CdT-paBK.d.ts}

@@ -1139,6 +1139,275 @@ interface BatchResult$1 {
   };
 }
 //#endregion
+//#region ../../../packages/runtime-contracts/dist/interaction-response.d.ts
+/** Canonical result returned after a response is recorded by Sidecar. */
+declare const interactionResolutionAcknowledgementSchema: z.ZodObject<{
+  status: z.ZodEnum<{
+    accepted: "accepted";
+    already_resolved_same: "already_resolved_same";
+  }>;
+  operationId: z.ZodString;
+  responseDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+  interactionId: z.ZodString;
+  sessionId: z.ZodString;
+  outcome: z.ZodEnum<{
+    accepted: "accepted";
+    declined: "declined";
+    cancelled: "cancelled";
+  }>;
+  deliveryState: z.ZodEnum<{
+    pending: "pending";
+    delivering: "delivering";
+    delivered: "delivered";
+    delivery_failed: "delivery_failed";
+    backend_lost: "backend_lost";
+    effect_unknown: "effect_unknown";
+  }>;
+  delivered: z.ZodBoolean;
+  resolvedAt: z.ZodString;
+  binding: z.ZodOptional<z.ZodObject<{
+    runId: z.ZodString;
+    provider: z.ZodString;
+    environmentId: z.ZodString;
+    sessionId: z.ZodString;
+    executionId: z.ZodString;
+    interactionId: z.ZodString;
+    requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+type InteractionResolutionAcknowledgement = z.infer<typeof interactionResolutionAcknowledgementSchema>;
+//#endregion
+//#region ../../../packages/runtime-contracts/dist/workspace-image-types.d.ts
+/** A port declared by the published OCI image. */
+interface WorkspaceImageExposedPort {
+  port: number;
+  protocol: "tcp" | "udp" | "sctp";
+}
+/** Successful workspace image publication returned by the Sandbox API. */
+interface WorkspaceImagePublishResult {
+  /** Immutable registry reference. */
+  image: string;
+  /** Operation-stable tag used during publication. */
+  taggedImage: string;
+  digest: string;
+  imageId: string;
+  sizeBytes: number;
+  contextBytes: number;
+  contextEntries: number;
+  buildDurationMs: number;
+  pushDurationMs: number;
+  /** Network ports from the final image configuration, not source inspection. */
+  exposedPorts: WorkspaceImageExposedPort[];
+}
+//#endregion
+//#region ../../../packages/runtime-contracts/dist/raw-evidence-export.d.ts
+/** Wire contract for bounded, session-owned native evidence archives. */
+interface RawEvidencePayloadFile {
+  /** Safe relative path below the exported directory; never an absolute native path. */
+  path: string;
+  sizeBytes: number;
+  sha256: `sha256:${string}`;
+}
+interface RawEvidenceRecordsFile extends RawEvidencePayloadFile {
+  format: "ndjson";
+  /** Number of complete records, in original order. */
+  records: number;
+}
+interface RawEvidenceNativeMetadata {
+  sourceId?: string;
+  rootScope: "session-home" | "workspace-session";
+  path: string;
+  kind: "file" | "directory" | "symlink";
+  mode: number;
+  uid: number;
+  gid: number;
+  mtimeMs: number;
+  ctimeMs: number;
+  sizeBytes: number;
+}
+type RawEvidenceNativeFile = RawEvidenceNativeMetadata & {
+  sha256?: string;
+  linkTarget?: string; /** Replaces contentBase64 for regular files. Symlinks remain metadata only. */
+  content?: RawEvidencePayloadFile;
+};
+interface RawEvidenceArchiveAttempt {
+  executionId: string;
+  ordinal: number;
+  providerSessionId: string;
+  nativeSessionIds: string[];
+  processIds: string[];
+  outcome: "succeeded" | "failed" | "cancelled" | "unknown";
+  missingReasons: string[];
+}
+interface RawEvidenceArchiveEventMetadata {
+  executionId: string;
+  sessionId: string;
+  status: "active" | "completed" | "failed" | "cancelled";
+  startedAt: number;
+  completedAt?: number;
+  eventCount: number;
+  lastEventId: string;
+}
+/** Payload references replace only inline content and aggregate record arrays. */
+interface RawEvidenceArchiveManifest {
+  schema: "tangle.raw-evidence-archive.v1";
+  status: "captured" | "partial";
+  sessionId: string;
+  backendType: string;
+  nativeSessionId: string | null;
+  proofStatus: "verified" | "unverified";
+  containerId?: string;
+  sidecarImageDigest: string;
+  sidecarBundleRevision: string;
+  sidecarBundleChecksum?: string;
+  nativeRoots: Array<{
+    sourceId?: string;
+    rootScope: "session-home" | "workspace-session";
+    path: string;
+  }>;
+  files: RawEvidenceNativeFile[];
+  excluded: Array<RawEvidenceNativeMetadata & {
+    reason: "credential";
+  }>;
+  skipped: Array<{
+    sourceId?: string;
+    rootScope: "session-home" | "workspace-session";
+    path: string;
+    reason: string;
+  }>;
+  inventory: Record<string, number>;
+  /** NDJSON rows preserve legacy processIo fields, replacing contentBase64 with content: RawEvidencePayloadFile. */
+  processIo: RawEvidenceRecordsFile;
+  /** NDJSON rows have exactly the fields of legacy processTerminals entries. */
+  processTerminals: RawEvidenceRecordsFile;
+  processSources: Array<{
+    sourceId: string;
+    sizeBytes: number;
+    sha256: string; /** Exact source spool bytes; replaces contentBase64. */
+    content: RawEvidencePayloadFile;
+  }>;
+  events: Array<{
+    metadata: RawEvidenceArchiveEventMetadata; /** Canonical reconstructed BufferedEvent rows, in original event order. */
+    frames: RawEvidenceRecordsFile;
+  }>;
+  attempts: RawEvidenceArchiveAttempt[];
+  evidenceSources: Array<{
+    executionId: string;
+    sourceId: string;
+    backendType: string;
+    runtimeHome: string;
+    credentialPaths: string[];
+  }>;
+  completeness: {
+    nativeStore: boolean;
+    processIo: boolean;
+    events: boolean;
+  };
+  coverageComplete: boolean;
+  missingReasons: string[];
+}
+/** One store file of a native session copy (harness session contract). */
+interface NativeSessionCopyFile extends RawEvidencePayloadFile {
+  /** The store root the file belongs to, relative to the runtime HOME, e.g. `.pi/agent/sessions`. */
+  store: string;
+  /** The file's own path relative to the runtime HOME, e.g. `.pi/agent/sessions/<ts>_<id>.jsonl`. */
+  storePath: string;
+  /** A `@tangle-network/harness-sessions` SessionFormatId. */
+  format: string;
+  /** byte-prefix: append-only JSONL cut at its last complete line; atomic-file: a whole file read twice the same; sqlite-backup: VACUUM INTO. */
+  method: "byte-prefix" | "atomic-file" | "sqlite-backup";
+  /** The source was larger than the per-file bound; this is its prefix. */
+  truncated: boolean;
+  /** Source size when copied. */
+  sourceBytes: number;
+}
+/**
+ * One execution attempt's native session. `snapshot` was taken while the
+ * harness ran; `settled` after its process exited, whatever the outcome.
+ * Consumers find sessions here, never by matching paths in `files`.
+ */
+interface NativeSessionCopy {
+  harness: string;
+  /** Format of the session files found (the first, when a harness has several stores). */
+  format: string | null;
+  executionId: string;
+  attempt: number;
+  nativeSessionId: string;
+  copy: "snapshot" | "settled";
+  capturedAt: string;
+  /** Null fields are not observed at the copy point; the archive's process records carry them. */
+  process: {
+    pid: number | null;
+    exitedAt: string | null;
+    exitCode: number | null;
+    signal: string | null;
+    outcome: "succeeded" | "failed" | "cancelled" | "unknown";
+  };
+  files: NativeSessionCopyFile[];
+  complete: boolean;
+  /** native_session_id_unobserved | native_session_files_missing | over_bound:<path> | ... */
+  missingReasons: string[];
+}
+/** v1 plus the per-attempt native session copies. Served when the caller asks for a copy. */
+interface RawEvidenceArchiveManifestV2 extends Omit<RawEvidenceArchiveManifest, "schema"> {
+  schema: "tangle.raw-evidence-archive.v2";
+  nativeSessions: NativeSessionCopy[];
+}
+interface RawEvidenceUnavailable {
+  status: "unavailable";
+  sessionId: string;
+  backendType: string;
+  reason: string;
+}
+interface RawEvidenceExportOptions {
+  /** Bound all uncompressed archive member bytes, including metadata and records. */
+  maxBytes: number;
+  /**
+   * Request native session copies (manifest v2). `latest` returns the
+   * settled copy when one exists, otherwise a fresh snapshot; `settled`
+   * fails with 409 not_settled while the harness still runs.
+   */
+  copy?: "latest" | "settled";
+  /** Restrict native session copies to one sidecar execution. */
+  executionId?: string;
+  /** Bound all archive file entries, including empty files. */
+  maxFiles: number;
+  /** Compressed transport bound; defaults to maxBytes plus bounded tar overhead. */
+  maxArchiveBytes?: number;
+  signal?: AbortSignal;
+}
+type RawEvidenceDirectoryExport = RawEvidenceUnavailable | {
+  status: "captured" | "partial";
+  directory: string;
+  manifestPath: string;
+  manifestSha256: `sha256:${string}`;
+  transfer: {
+    sizeBytes: number;
+    sha256: string;
+  }; /** Bounded metadata only. No inline payload or aggregate frame contents. */
+  manifest: RawEvidenceArchiveManifest | RawEvidenceArchiveManifestV2;
+  coverageComplete: boolean;
+  missingReasons: string[];
+};
+//#endregion
+//#region ../../../packages/runtime-contracts/dist/index.d.ts
+/** Names only: the caller must keep a separate source and pass values to resume({ env }). */
+declare const sandboxEnvRecoverySchema: z.ZodObject<{
+  callerResupplies: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+type SandboxEnvRecovery = z.infer<typeof sandboxEnvRecoverySchema>;
+/** Policy inspection is metadata only; it does not establish snapshot or runtime health. */
+declare const sandboxEnvRecoveryViewSchema: z.ZodObject<{
+  envRecovery: z.ZodObject<{
+    callerResupplies: z.ZodArray<z.ZodString>;
+  }, z.core.$strict>;
+  eligibleCallerResupplyKeys: z.ZodArray<z.ZodString>;
+  requiredOnColdResumeKeys: z.ZodArray<z.ZodString>;
+  automaticCredentialRecovery: z.ZodLiteral<false>;
+  dryRun: z.ZodBoolean;
+}, z.core.$strict>;
+type SandboxEnvRecoveryView = z.infer<typeof sandboxEnvRecoveryViewSchema>;
+//#endregion
 //#region src/managed-process.d.ts
 interface ManagedProcessSpec {
   id: string;
@@ -1474,13 +1743,12 @@ interface SandboxShapesInfo {
  * @example Minimal sandbox (managed mode with defaults)
  * ```typescript
  * const box = await client.create();
- * // Uses 'universal' image, managed mode, sane defaults
+ * // Uses the server's default image and managed runtime
  * ```
  *
- * @example Sandbox with pre-built image and git
+ * @example Sandbox with a Git repository
  * ```typescript
  * const box = await client.create({
- *   environment: "ethereum",  // Stack name — tools provisioned via Nix profile
  *   git: {
  *     url: "https://github.com/user/dapp.git",
  *     ref: "main",
@@ -1508,7 +1776,6 @@ interface SandboxShapesInfo {
  * @example With BYOS3 storage for snapshots
  * ```typescript
  * const box = await client.create({
- *   environment: "universal",
  *   storage: {
  *     type: "s3",
  *     bucket: "my-snapshots",
@@ -1524,17 +1791,16 @@ interface CreateSandboxOptions {
   /** Require proven native session capture on the selected host. */
   requireNativeSessionCapture?: boolean;
   /**
-   * Environment or container image to run.
+   * Optional environment or container image override.
+   * Omit this field to use the server's default image.
    *
    * Pass a named environment returned by `client.environments.list()`, a
    * container image reference such as `"python:3.12-slim"`, or an image ID
    * returned by the SDK image builder.
    *
-   * When omitted, the server applies its default environment.
-   *
    * @example
    * ```typescript
-   * environment: "universal"  // Multi-language (default)
+   * environment: "python:3.12-slim"
    * ```
    */
   environment?: string;
@@ -1634,6 +1900,14 @@ interface CreateSandboxOptions {
   gpuLease?: CreateGpuLeaseOptions;
   /** Environment variables injected into the sandbox */
   env?: Record<string, string>;
+  /**
+   * Opt named withheld public env keys into cold reclamation after the platform's
+   * idle bound and uploaded snapshot. The caller must keep a separate source and
+   * supply their values to resume({ env }); no automatic credential recovery is
+   * promised. Omit to retain the existing conservative policy. Hub/model keys
+   * retain their separate recovery rules.
+   */
+  envRecovery?: SandboxEnvRecovery;
   /**
    * Maximum continuous runtime in seconds for each create or resume interval.
    *
@@ -1669,6 +1943,18 @@ interface CreateSandboxOptions {
    * its own default of 900.
    */
   idleTimeoutSeconds?: number;
+  /**
+   * Stopped-container grace in seconds before durable cold reclamation.
+   * Must be an integer from 1 through 9007199254740. Omit to use the
+   * platform cold window (6 hours by default). The lifecycle sweep removes
+   * compute only after the grace and a confirmed, uploaded workspace snapshot;
+   * the sandbox record and snapshot remain available to resume().
+   *
+   * Withheld credentials still require a recovery source. Use envRecovery for
+   * keys the caller can supply again on cold resume. This does not shorten
+   * idle suspension or the separate deleteAfterStoppedSeconds retention.
+   */
+  coldTimeoutSeconds?: number;
   /**
    * Retention after stop, in seconds. After the sandbox has sat
    * stopped/suspended continuously for this long, the platform deletes it —
@@ -1801,7 +2087,6 @@ interface CreateSandboxOptions {
    * @example
    * ```typescript
    * const box = await client.create({
-   *   environment: "universal",
    *   tangleSecrets: { ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY },
    * });
    * ```
@@ -1846,7 +2131,6 @@ interface CreateSandboxOptions {
    * @example
    * ```typescript
    * const box = await client.create({
-   *   environment: "universal",
    *   capabilities: ["computer_use"],
    * });
    * const { token } = await box.getMcpAccessToken({
@@ -2342,6 +2626,23 @@ interface ListSandboxOptions {
   limit?: number;
   /** Offset for pagination */
   offset?: number;
+  /** Only sandboxes created with this `metadata.run` (the caller's run id). */
+  run?: string;
+}
+/**
+ * One compute generation of a sandbox created for a caller run
+ * (`metadata.run`). Deleted sandboxes keep theirs.
+ */
+interface SandboxRunGeneration {
+  sandboxId: string;
+  /** The sandbox's own compute generation id, not the caller run. */
+  generation: string;
+  generationSeq: number;
+  orgId: string;
+  state: string;
+  startedAt: number;
+  closedAt: number | null;
+  closedReason: string | null;
 }
 /**
  * Result of executing a command.
@@ -5156,6 +5457,44 @@ interface McpServerConfig {
   /** Headers for remote connections */
   headers?: Record<string, string>;
 }
+/**
+ * Nested model routing and auth. The role-named fields on
+ * {@link BackendConfig} (`modelId`, `provider`, `apiKey`, `baseUrl`, ...)
+ * are the supported spelling; this shape is accepted for compatibility and
+ * normalized into them.
+ *
+ * @deprecated set the fields directly on the backend config instead.
+ */
+interface ModelRoutingConfig {
+  /** Provider name (e.g., "anthropic", "openai", "google") */
+  provider?: string;
+  /** Model identifier (e.g., "claude-sonnet-4-20250514") */
+  model?: string;
+  /** BYOK (Bring Your Own Key) API key */
+  apiKey?: string;
+  /** Custom API base URL (for proxies or on-prem) */
+  baseUrl?: string;
+  /** Maximum thinking tokens for extended reasoning */
+  maxThinkingTokens?: number;
+  /** API mode: "api" for direct calls, "cli" for CLI wrapper */
+  mode?: "api" | "cli";
+  /**
+   * Name of a box env var (a stored secret listed in `secrets`) holding this
+   * provider's API key. Caller-owned auth by reference: no Router key is
+   * minted and the named provider is kept.
+   */
+  apiKeyEnv?: string;
+  /** Named stored-secret reference for native subscription authentication. */
+  cliAuth?: CliAuthReference;
+  /** Authentication mode for CLI-native backends */
+  authMode?: "api-key" | "oauth";
+  /** Auth files to write into the sandbox home directory before CLI startup */
+  authFiles?: Array<{
+    path: string;
+    content: string;
+    mode?: number;
+  }>;
+}
 /**
  * AI coding agent backend configuration.
  *
@@ -5168,17 +5507,27 @@ interface McpServerConfig {
  * ```typescript
  * backend: {
  *   type: "claude-code",
- *   model: {
- *     provider: "anthropic",
- *     model: "claude-sonnet-4-20250514",
- *     apiKey: process.env.ANTHROPIC_API_KEY,
- *   }
+ *   modelId: "claude-sonnet-4-20250514",
+ *   provider: "anthropic",
+ *   apiKey: process.env.ANTHROPIC_API_KEY,
  * }
  * ```
  */
 interface BackendConfig {
   /** Runtime MCP bindings, separate from the authored profile. Headers may use secret references. */
   runtimeAttachments?: AgentRuntimeAttachments;
+  /**
+   * Per-turn credential VALUES resolved by secret references in this turn's
+   * runtime MCP attachments. Accepted on session message requests only
+   * (`driveConversationTurn`, `session.sendMessage`): the value travels with
+   * the turn, resolves only for that turn's backend materialization, and is
+   * never written to the box environment, the admission journal, session
+   * metadata, or logs. Sandbox and session creation reject it — creation-time
+   * credentials belong to the stored-secret channel (`secrets`). Rotating a
+   * value names a new backend identity, so a refreshed credential never
+   * resolves beside stale authority.
+   */
+  runtimeSecrets?: Record<string, string>;
   /** Backend type identifier. Defaults to the platform's configured backend. */
   type?: BackendType;
   /**
@@ -5189,29 +5538,47 @@ interface BackendConfig {
    */
   profile?: AgentProfile;
   /**
-   * Model configuration override.
+   * Which model this backend runs. The model id has exactly one home per
+   * config: `modelId` here, or the `model` shorthand on per-turn options
+   * (which folds into it). A disagreeing pair is a `ValidationError`, never
+   * a silent preference.
    */
-  model?: {
-    /** Provider name (e.g., "anthropic", "openai", "google") */provider?: string; /** Model identifier (e.g., "claude-sonnet-4-20250514") */
-    model?: string; /** BYOK (Bring Your Own Key) API key */
-    apiKey?: string; /** Custom API base URL (for proxies or on-prem) */
-    baseUrl?: string; /** Maximum thinking tokens for extended reasoning */
-    maxThinkingTokens?: number; /** API mode: "api" for direct calls, "cli" for CLI wrapper */
-    mode?: "api" | "cli";
-    /**
-     * Name of a box env var (a stored secret listed in `secrets`) holding this
-     * provider's API key. Caller-owned auth by reference: no Router key is
-     * minted and the named provider is kept.
-     */
-    apiKeyEnv?: string; /** Named stored-secret reference for native subscription authentication. */
-    cliAuth?: CliAuthReference; /** Authentication mode for CLI-native backends */
-    authMode?: "api-key" | "oauth"; /** Auth files to write into the sandbox home directory before CLI startup */
-    authFiles?: Array<{
-      path: string;
-      content: string;
-      mode?: number;
-    }>;
-  };
+  modelId?: string;
+  /** Provider name (e.g., "anthropic", "openai", "openai-compat") */
+  provider?: string;
+  /** BYOK (Bring Your Own Key) API key */
+  apiKey?: string;
+  /** Custom API base URL (for proxies or on-prem) */
+  baseUrl?: string;
+  /** Maximum thinking tokens for extended reasoning */
+  maxThinkingTokens?: number;
+  /** API mode: "api" for direct calls, "cli" for CLI wrapper */
+  mode?: "api" | "cli";
+  /**
+   * Name of a box env var (a stored secret listed in `secrets`) holding this
+   * provider's API key. Caller-owned auth by reference: no Router key is
+   * minted and the named provider is kept.
+   */
+  apiKeyEnv?: string;
+  /** Named stored-secret reference for native subscription authentication. */
+  cliAuth?: CliAuthReference;
+  /** Authentication mode for CLI-native backends */
+  authMode?: "api-key" | "oauth";
+  /** Auth files to write into the sandbox home directory before CLI startup */
+  authFiles?: Array<{
+    path: string;
+    content: string;
+    mode?: number;
+  }>;
+  /**
+   * Model routing and auth, nested. Deprecated: the same fields now sit
+   * role-named directly on the backend (`modelId`, `provider`, `apiKey`,
+   * `baseUrl`, ...), so a model id is never spelled `backend.model.model`.
+   * Still accepted and normalized; a field set both ways must agree.
+   *
+   * @deprecated use `modelId` + `provider`/`apiKey`/`baseUrl`/...
+   */
+  model?: ModelRoutingConfig;
   /**
    * Backend server configuration.
    */
@@ -6999,4 +7366,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { DownloadOptions as $, SnapshotDeleteAcknowledgement as $i, PublicTemplateInfo as $n, SandboxFleetTraceEvent as $r, GPU_LEASE_PROVIDER_NAMES as $t, CommitTaskSessionOptions as A, WriteFileOptions as Aa, SandboxTraceOptions as Ai, NetworkConfig as An, SandboxFleetArtifact as Ar, FileUsageOptions as At, CreateSandboxOptions as B, PublicBatchRunRequest as Ba, SessionEventStreamOptions as Bi, ProcessListOptions as Bn, SandboxFleetMachineMeteredUsage as Br, FleetDispatchStreamOptions as Bt, BranchOptions as C, UpdateUserOptions as Ca, SandboxTerminalInfo as Ci, ListMessagesOptions as Cn, SandboxDeleteAcknowledgement as Cr, FileReadError as Ct, CodeExecutionResult as D, WaitForOptions as Da, SandboxTraceBundle as Di, MAX_EGRESS_DENIALS_LIMIT as Dn, SandboxEvent as Dr, FileTreeFile as Dt, CodeExecutionOptions as E, UsageInfo as Ea, SandboxTerminals as Ei, ListSandboxOptions as En, SandboxEnvironment as Er, FileSystem as Et, CreateIntelligenceReportOptions as F, ManagedProcessOptions as Fa, SecretsManager as Fi, PreviewLinkInfo as Fn, SandboxFleetDriverCapability as Fr, FleetAgentResult as Ft, DeleteMatchingSandboxesFilter as G, BatchTaskUsage as Ga, SessionInfo as Gi, ProcessStatus as Gn, SandboxFleetOperationsSummary as Gr, FleetMachineId as Gt, CreateTaskSessionOptions as H, BatchEvent as Ha, SessionExecutionStatus as Hi, ProcessManager as Hn, SandboxFleetMachineSpec as Hr, FleetDriveTurnRequest as Ht, CreateRequestOptions as I, ManagedProcessRecord as Ia, SendSessionMessageOptions as Ii, PreviewLinkManager as In, SandboxFleetDriverTimings as Ir, FleetAgentRunStatus as It, DeleteOptions as J, parseBackendType as Ja, SessionMessage as Ji, PromptResult as Jn, SandboxFleetPolicy as Jr, FleetRunEvent as Jt, DeleteMatchingSandboxesOptions as K, ALL_BACKEND_TYPES as Ka, SessionInterruptOptions as Ki, PromptInputPart as Kn, SandboxFleetParent as Kr, FleetPromptDispatchOptions as Kt, CreateSandboxFleetOptions as L, ManagedProcessResumeOptions as La, SendSessionMessageRequest as Li, PreviewLinkWaitOptions as Ln, SandboxFleetInfo as Lr, FleetDispatchCancelResult as Lt, ConversationTurnOptions as M, WriteManyOptions as Ma, SearchMatch as Mi, NonHostAgentDriverConfig as Mn, SandboxFleetCostEstimate as Mr, FileWriteResult as Mt, ConversationTurnResult as N, ManagedProcessClient as Na, SearchOptions as Ni, PermissionLevel as Nn, SandboxFleetDispatchFailureClass as Nr, FleetAgentId as Nt, CodeLanguage as O, WaitForRolloutOptions as Oa, SandboxTraceEvent as Oi, McpServerConfig as On, SandboxFleetAgent as Or, FileTreeOptions as Ot, CreateGpuLeaseOptions as P, ManagedProcessJobs as Pa, SecretInfo as Pi, PermissionsManager as Pn, SandboxFleetDispatchResponse as Pr, FleetAgentPlacement as Pt, DispatchedSession as Q, SessionStatus as Qi, ProvisionStep as Qn, SandboxFleetTraceBundle as Qr, ForkLookupOptions as Qt, CreateSandboxFleetTokenOptions as R, ManagedProcessSpec as Ra, SentSessionMessage as Ri, Process as Rn, SandboxFleetIntelligenceEnvelope as Rr, FleetDispatchResultBuffer as Rt, BatchTaskResult as S, TurnDriveResult as Sa, SandboxTerminalCreateOptions as Si, JsonValue as Sn, SandboxCreateReceipt as Sr, FileReadBatchResult as St, ChunkedUploadResult as T, UploadProgress as Ta, SandboxTerminalRequestOptions as Ti, ListSandboxFleetOptions as Tn, SandboxDeleteOutcome as Tr, FileRenameResult as Tt, DeleteMatchingSandboxOutcome as U, BatchEventDataMap as Ua, SessionFailureReason as Ui, ProcessSignal as Un, SandboxFleetManifest as Ur, FleetExecDispatchOptions as Ut, CreateSessionOptions as V, BatchBackendStats as Va, SessionExecutionInfo as Vi, ProcessLogEntry as Vn, SandboxFleetMachineRecord as Vr, FleetDriveTurnOutcome as Vt, DeleteMatchingSandboxResult as W, BatchSidecarGroup as Wa, SessionForkOptions as Wi, ProcessSpawnOptions as Wn, SandboxFleetManifestMachine as Wr, FleetExecDispatchResult as Wt, DirectoryPermission as X, SessionMessageInputPart as Xi, ProvisionResult as Xn, SandboxFleetSpend as Xr, ForkCounts as Xt, DevServerInfo as Y, SessionMessageAdmission as Yi, ProvisionEvent as Yn, SandboxFleetProfileRef as Yr, FleetRunOptions as Yt, DispatchPromptOptions as Z, SessionResultOptions as Zi, ProvisionStatus as Zn, SandboxFleetToken as Zr, ForkIdempotency as Zt, BatchBackend as _, TeeAttestationResponse as _a, SandboxShape as _i, IntelligenceReport as _n, SSHCommandDescriptor as _r, ExactProcessSpawnOptions as _t, AgentQuestionRequest as a, SshKeysManager as aa, SandboxFleetWorkspaceRestoreResult as ai, GitStatus as an, ReconcileSandboxFleetsOptions as ar, DriverType as at, BatchRunRequest as b, TokenRefreshHandler as ba, SandboxStatus as bi, IntelligenceReportSubjectType as bn, SandboxConnection as br, FileInfo as bt, AttachGpuLeaseOptions as c, StorageConfig as ca, SandboxInfo as ci, GpuLeaseCommandResult as cn, RestoreSnapshotOptions as cr, DurablePlanSnapshot as ct, BackendConfig as d, TaskSessionCommitResult as da, SandboxPortPreviewLink as di, GpuLeaseManager as dn, RolloutChildResult as dr, EffectiveBackendSource as dt, SnapshotDeleteOutcome as ea, SandboxFleetTraceExport as ei, GitAuth as en, PublicTemplateVersionInfo as er, DownloadProgress as et, BackendInfo as f, TaskSessionFileChange as fa, SandboxRemovalState as fi, GpuLeaseProviderName as fn, RolloutOptions as fr, EgressDenial as ft, BackendStatus as g, TeeAttestationReport as ga, SandboxRuntimeHealth as gi, InstalledTool as gn, RolloutTurnPart as gr, EventStreamOptions as gt, BackendRuntimeConfigUpdate as h, TeeAttestationOptions as ha, SandboxRuntimeCapabilities as hi, HostAgentRuntimeBackend as hn, RolloutStatus as hr, EnsureDevServerOptions as ht, AgentApprovalRequirement as i, SnapshotResult as ia, SandboxFleetWorkspaceReconcileResult as ii, GitDiff as in, ReapExpiredSandboxFleetsResult as ir, DriverInfo as it, CompletedTurnResult as j, WriteManyFile as ja, SandboxUser as ji, NetworkManager as jn, SandboxFleetArtifactSpec as jr, FileUsageResult as jt, CodeResultPart as k, WorkspaceOperationLookup as ka, SandboxTraceExport as ki, MkdirOptions as kn, SandboxFleetAgentSpec as kr, FileTreeResult as kt, AttachSandboxFleetMachineOptions as l, SubscriptionInfo as la, SandboxIntelligenceEnvelope as li, GpuLeaseExecOptions as ln, ResumeOptions as lr, EffectiveBackend as lt, BackendMcpServerStatus as m, TaskSessionProfile as ma, SandboxResources as mi, HostAgentDriverConfig as mn, RolloutStartResult as mr, EgressPolicy as mt, AccessPolicyRule as n, SnapshotInfo as na, SandboxFleetUsage as ni, GitCommit as nn, PublishPublicTemplateVersionOptions as nr, DriveTurnOptions as nt, AgentRunStatus as o, StartupDiagnostics as oa, SandboxFleetWorkspaceSnapshotResult as oi, GpuLease as on, ReconcileSandboxFleetsResult as or, DurablePlan as ot, BackendManager as p, TaskSessionInfo as pa, SandboxResourceUsage as pi, GpuLeaseStatus as pn, RolloutScorer as pr, EgressManager as pt, DeleteMatchingSandboxesResult as q, BackendType as qa, SessionListOptions as qi, PromptOptions as qn, SandboxFleetPlacement as qr, FleetPromptDispatchResult as qt, AddUserOptions as r, SnapshotOptions as ra, SandboxFleetWorkspace as ri, GitConfig as rn, ReapExpiredSandboxFleetsOptions as rr, DriverConfig as rt, AgentToolInvocation as s, StartupOperation as sa, SandboxIdentity as si, GpuLeaseBilling as sn, RenameOptions as sr, DurablePlanDecisionResult as st, AcceleratorKind as t, SnapshotIdempotency as ta, SandboxFleetTraceOptions as ti, GitBranch as tn, PublishPublicTemplateOptions as tr, DownloadResult as tt, BackendCapabilities as u, TaskSessionChanges as ua, SandboxPortBinding as ui, GpuLeaseExecResult as un, Rollout as ur, EffectiveBackendProfile as ut, BatchResult as v, TeePublicKey as va, SandboxShapePreset as vi, IntelligenceReportBudget as vn, SSHCredentials as vr, ExecOptions as vt, ChunkedUploadOptions as w, UploadOptions as wa, SandboxTerminalManager as wi, ListOptions as wn, SandboxDeleteOptions as wr, FileReadResult as wt, BatchTask as x, TokenUsage as xa, SandboxTerminalAttachOptions as xi, IntelligenceReportWindow as xn, SandboxCreateOutcome as xr, FileReadBatchOptions as xt, BatchRunOptions as y, TeePublicKeyResponse as ya, SandboxShapesInfo as yi, IntelligenceReportCompareTo as yn, SandboxConfig as yr, ExecResult as yt, CreateSandboxFleetWithCoordinatorOptions as z, ManagedProcessState as za, SessionBackendCredentials as zi, ProcessInfo as zn, SandboxFleetMachine as zr, FleetDispatchResultBufferOptions as zt };
+export { DownloadOptions as $, BatchEvent as $a, SessionStatus as $i, PublicTemplateInfo as $n, SandboxFleetTraceEvent as $r, GPU_LEASE_PROVIDER_NAMES as $t, CommitTaskSessionOptions as A, WorkspaceOperationLookup as Aa, SandboxTraceExport as Ai, NetworkConfig as An, SandboxFleetArtifact as Ar, FileUsageOptions as At, CreateSandboxOptions as B, ManagedProcessState as Ba, SessionBackendCredentials as Bi, ProcessListOptions as Bn, SandboxFleetMachineMeteredUsage as Br, FleetDispatchStreamOptions as Bt, BranchOptions as C, TurnDriveResult as Ca, SandboxTerminalCreateOptions as Ci, ListMessagesOptions as Cn, SandboxDeleteAcknowledgement as Cr, FileReadError as Ct, CodeExecutionResult as D, UsageInfo as Da, SandboxTerminals as Di, MAX_EGRESS_DENIALS_LIMIT as Dn, SandboxEvent as Dr, FileTreeFile as Dt, CodeExecutionOptions as E, UploadProgress as Ea, SandboxTerminalRequestOptions as Ei, ListSandboxOptions as En, SandboxEnvironment as Er, FileSystem as Et, CreateIntelligenceReportOptions as F, ManagedProcessJobs as Fa, SecretInfo as Fi, PreviewLinkInfo as Fn, SandboxFleetDriverCapability as Fr, FleetAgentResult as Ft, DeleteMatchingSandboxesFilter as G, RawEvidenceExportOptions as Ga, SessionForkOptions as Gi, ProcessStatus as Gn, SandboxFleetOperationsSummary as Gr, FleetMachineId as Gt, CreateTaskSessionOptions as H, SandboxEnvRecoveryView as Ha, SessionExecutionInfo as Hi, ProcessManager as Hn, SandboxFleetMachineSpec as Hr, FleetDriveTurnRequest as Ht, CreateRequestOptions as I, ManagedProcessOptions as Ia, SecretsManager as Ii, PreviewLinkManager as In, SandboxFleetDriverTimings as Ir, FleetAgentRunStatus as It, DeleteOptions as J, RawEvidenceRecordsFile as Ja, SessionListOptions as Ji, PromptResult as Jn, SandboxFleetPolicy as Jr, FleetRunEvent as Jt, DeleteMatchingSandboxesOptions as K, RawEvidenceNativeFile as Ka, SessionInfo as Ki, PromptInputPart as Kn, SandboxFleetParent as Kr, FleetPromptDispatchOptions as Kt, CreateSandboxFleetOptions as L, ManagedProcessRecord as La, SendSessionMessageOptions as Li, PreviewLinkWaitOptions as Ln, SandboxFleetInfo as Lr, FleetDispatchCancelResult as Lt, ConversationTurnOptions as M, WriteManyFile as Ma, SandboxUser as Mi, NonHostAgentDriverConfig as Mn, SandboxFleetCostEstimate as Mr, FileWriteResult as Mt, ConversationTurnResult as N, WriteManyOptions as Na, SearchMatch as Ni, PermissionLevel as Nn, SandboxFleetDispatchFailureClass as Nr, FleetAgentId as Nt, CodeLanguage as O, WaitForOptions as Oa, SandboxTraceBundle as Oi, McpServerConfig as On, SandboxFleetAgent as Or, FileTreeOptions as Ot, CreateGpuLeaseOptions as P, ManagedProcessClient as Pa, SearchOptions as Pi, PermissionsManager as Pn, SandboxFleetDispatchResponse as Pr, FleetAgentPlacement as Pt, DispatchedSession as Q, BatchBackendStats as Qa, SessionResultOptions as Qi, ProvisionStep as Qn, SandboxFleetTraceBundle as Qr, ForkLookupOptions as Qt, CreateSandboxFleetTokenOptions as R, ManagedProcessResumeOptions as Ra, SendSessionMessageRequest as Ri, Process as Rn, SandboxFleetIntelligenceEnvelope as Rr, FleetDispatchResultBuffer as Rt, BatchTaskResult as S, TokenUsage as Sa, SandboxTerminalAttachOptions as Si, JsonValue as Sn, SandboxCreateReceipt as Sr, FileReadBatchResult as St, ChunkedUploadResult as T, UploadOptions as Ta, SandboxTerminalManager as Ti, ListSandboxFleetOptions as Tn, SandboxDeleteOutcome as Tr, FileRenameResult as Tt, DeleteMatchingSandboxOutcome as U, RawEvidenceArchiveManifest as Ua, SessionExecutionStatus as Ui, ProcessSignal as Un, SandboxFleetManifest as Ur, FleetExecDispatchOptions as Ut, CreateSessionOptions as V, SandboxEnvRecovery as Va, SessionEventStreamOptions as Vi, ProcessLogEntry as Vn, SandboxFleetMachineRecord as Vr, FleetDriveTurnOutcome as Vt, DeleteMatchingSandboxResult as W, RawEvidenceDirectoryExport as Wa, SessionFailureReason as Wi, ProcessSpawnOptions as Wn, SandboxFleetManifestMachine as Wr, FleetExecDispatchResult as Wt, DirectoryPermission as X, InteractionResolutionAcknowledgement as Xa, SessionMessageAdmission as Xi, ProvisionResult as Xn, SandboxFleetSpend as Xr, ForkCounts as Xt, DevServerInfo as Y, WorkspaceImagePublishResult as Ya, SessionMessage as Yi, ProvisionEvent as Yn, SandboxFleetProfileRef as Yr, FleetRunOptions as Yt, DispatchPromptOptions as Z, PublicBatchRunRequest as Za, SessionMessageInputPart as Zi, ProvisionStatus as Zn, SandboxFleetToken as Zr, ForkIdempotency as Zt, BatchBackend as _, TeeAttestationReport as _a, SandboxRuntimeHealth as _i, IntelligenceReport as _n, SSHCommandDescriptor as _r, ExactProcessSpawnOptions as _t, AgentQuestionRequest as a, SnapshotResult as aa, SandboxFleetWorkspaceRestoreResult as ai, GitStatus as an, parseBackendType as ao, ReconcileSandboxFleetsOptions as ar, DriverType as at, BatchRunRequest as b, TeePublicKeyResponse as ba, SandboxShapesInfo as bi, IntelligenceReportSubjectType as bn, SandboxConnection as br, FileInfo as bt, AttachGpuLeaseOptions as c, StartupOperation as ca, SandboxInfo as ci, GpuLeaseCommandResult as cn, RestoreSnapshotOptions as cr, DurablePlanSnapshot as ct, BackendConfig as d, TaskSessionChanges as da, SandboxPortPreviewLink as di, GpuLeaseManager as dn, RolloutChildResult as dr, EffectiveBackendSource as dt, SnapshotDeleteAcknowledgement as ea, SandboxFleetTraceExport as ei, GitAuth as en, BatchEventDataMap as eo, PublicTemplateVersionInfo as er, DownloadProgress as et, BackendInfo as f, TaskSessionCommitResult as fa, SandboxRemovalState as fi, GpuLeaseProviderName as fn, RolloutOptions as fr, EgressDenial as ft, BackendStatus as g, TeeAttestationOptions as ga, SandboxRuntimeCapabilities as gi, InstalledTool as gn, RolloutTurnPart as gr, EventStreamOptions as gt, BackendRuntimeConfigUpdate as h, TaskSessionProfile as ha, SandboxRunGeneration as hi, HostAgentRuntimeBackend as hn, RolloutStatus as hr, EnsureDevServerOptions as ht, AgentApprovalRequirement as i, SnapshotOptions as ia, SandboxFleetWorkspaceReconcileResult as ii, GitDiff as in, BackendType as io, ReapExpiredSandboxFleetsResult as ir, DriverInfo as it, CompletedTurnResult as j, WriteFileOptions as ja, SandboxTraceOptions as ji, NetworkManager as jn, SandboxFleetArtifactSpec as jr, FileUsageResult as jt, CodeResultPart as k, WaitForRolloutOptions as ka, SandboxTraceEvent as ki, MkdirOptions as kn, SandboxFleetAgentSpec as kr, FileTreeResult as kt, AttachSandboxFleetMachineOptions as l, StorageConfig as la, SandboxIntelligenceEnvelope as li, GpuLeaseExecOptions as ln, ResumeOptions as lr, EffectiveBackend as lt, BackendMcpServerStatus as m, TaskSessionInfo as ma, SandboxResources as mi, HostAgentDriverConfig as mn, RolloutStartResult as mr, EgressPolicy as mt, AccessPolicyRule as n, SnapshotIdempotency as na, SandboxFleetUsage as ni, GitCommit as nn, BatchTaskUsage as no, PublishPublicTemplateVersionOptions as nr, DriveTurnOptions as nt, AgentRunStatus as o, SshKeysManager as oa, SandboxFleetWorkspaceSnapshotResult as oi, GpuLease as on, ReconcileSandboxFleetsResult as or, DurablePlan as ot, BackendManager as p, TaskSessionFileChange as pa, SandboxResourceUsage as pi, GpuLeaseStatus as pn, RolloutScorer as pr, EgressManager as pt, DeleteMatchingSandboxesResult as q, RawEvidencePayloadFile as qa, SessionInterruptOptions as qi, PromptOptions as qn, SandboxFleetPlacement as qr, FleetPromptDispatchResult as qt, AddUserOptions as r, SnapshotInfo as ra, SandboxFleetWorkspace as ri, GitConfig as rn, ALL_BACKEND_TYPES as ro, ReapExpiredSandboxFleetsOptions as rr, DriverConfig as rt, AgentToolInvocation as s, StartupDiagnostics as sa, SandboxIdentity as si, GpuLeaseBilling as sn, RenameOptions as sr, DurablePlanDecisionResult as st, AcceleratorKind as t, SnapshotDeleteOutcome as ta, SandboxFleetTraceOptions as ti, GitBranch as tn, BatchSidecarGroup as to, PublishPublicTemplateOptions as tr, DownloadResult as tt, BackendCapabilities as u, SubscriptionInfo as ua, SandboxPortBinding as ui, GpuLeaseExecResult as un, Rollout as ur, EffectiveBackendProfile as ut, BatchResult as v, TeeAttestationResponse as va, SandboxShape as vi, IntelligenceReportBudget as vn, SSHCredentials as vr, ExecOptions as vt, ChunkedUploadOptions as w, UpdateUserOptions as wa, SandboxTerminalInfo as wi, ListOptions as wn, SandboxDeleteOptions as wr, FileReadResult as wt, BatchTask as x, TokenRefreshHandler as xa, SandboxStatus as xi, IntelligenceReportWindow as xn, SandboxCreateOutcome as xr, FileReadBatchOptions as xt, BatchRunOptions as y, TeePublicKey as ya, SandboxShapePreset as yi, IntelligenceReportCompareTo as yn, SandboxConfig as yr, ExecResult as yt, CreateSandboxFleetWithCoordinatorOptions as z, ManagedProcessSpec as za, SentSessionMessage as zi, ProcessInfo as zn, SandboxFleetMachine as zr, FleetDispatchResultBufferOptions as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.14",
+  "version": "0.60.16-develop.20261006020509.71b03b7",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -151,11 +151,11 @@
     "ws": "^8.20.0",
     "yjs": "13.6.30",
     "@products/sandbox-test-utils": "0.0.0",
+    "@tangle-network/agent-profile-materialize": "0.20.9",
     "@repo/shared": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.20.8",
-    "@tangle-network/cli-agent-registry": "0.4.21",
-    "@tangle-network/runtime-contracts": "0.12.0",
-    "@tangle-network/sdk": "3.3.39",
+    "@tangle-network/runtime-contracts": "0.14.0",
+    "@tangle-network/cli-agent-registry": "0.5.0",
+    "@tangle-network/sdk": "3.3.41",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {