@tangle-network/sandbox 0.60.14 → 0.60.16-develop.20261006021812.a14c729

package/dist/{lines-BbvLx7pi.d.ts → lines-BTZTbYDz.d.ts}

@@ -1,4 +1,4 @@
-import { B as CreateSandboxOptions, d as BackendConfig } from "./types-BlA8Cly0.js";
+import { B as CreateSandboxOptions, d as BackendConfig } from "./types-CdT-paBK.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */
@@ -364,11 +364,40 @@ interface LineSendInput {
   idempotencyKey: string;
   /** Optional ISO instant less than seven days away. Workflows own schedules. */
   notBefore?: string;
+  /** Ask a coded question; the member's reply that starts with `code` returns to this send. */
+  reply?: LineReplyCodeInput;
+}
+interface LineReplyCodeInput {
+  /** A letter, then up to seven letters or digits, with at least one digit (`F7`). Hub compares it case-insensitively. */
+  code: string;
+  /** 60 to 604800; the window opens when the send first becomes eligible. */
+  ttlSeconds: number;
+  /**
+   * 1 to 20 distinct texted choices, each 1-32 of `a-z 0-9 _ -` after lower-casing.
+   * An answer must then be `<code> <option>[ <note>]`; any other coded text keeps the question open.
+   */
+  options?: string[];
+}
+/** The coded question's state on a send receipt. */
+interface LineReplyCode {
+  /** Upper case. */
+  code: string;
+  expiresAt: string;
+  /** The first coded answer; `text` is null after content retention ends. */
+  answer: {
+    messageId: string;
+    text: string | null;
+    receivedAt: string; /** The named option, lower case; null when the send listed no options. */
+    option: string | null; /** Words after the option; null when there were none or retention ended. */
+    note: string | null;
+  } | null;
 }
 interface LineSendReceipt {
   message: LineMessage;
   eligibleAt: string | null;
   expiresAt: string;
+  /** Null when the send asked no coded question; absent from Hub before reply codes. */
+  reply?: LineReplyCode | null;
 }
 interface LineReminderPreferences {
   enabled: boolean;
@@ -617,4 +646,4 @@ declare class SandboxLines {
   detach(number: string): Promise<void>;
 }
 //#endregion
-export { LineThread as A, LINE_APPLICATION_REQUEST_MAX_BYTES as B, LineRespondAgent as C, LineSendReceipt as D, LineSendInput as E, LinesHttpClient as F, LineApplicationView as G, LineApplicationRequest as H, SandboxLines as I, parseLineApplicationRequest as K, lineInstanceKey as L, LineVoice as M, LineVoiceOptions as N, LineSenderVerification as O, LinesClient as P, profileChannelReference as R, LineReplyGate as S, LineRole as T, LineApplicationResult as U, LineApplication as V, LineApplicationState as W, LineMemberSpec as _, LineApplicationAttachOptions as a, LineProvider as b, LineAttachmentReauthorization as c, LineInstanceAttachOptions as d, LineInstanceCreate as f, LineMemberPatch as g, LineMemberInstance as h, LineAllowanceSubject as i, LineTransport as j, LineSenderVerificationStart as k, LineExecutionKey as l, LineMember as m, LineAgentRolePolicy as n, LineAttachOptions as o, LineLimits as p, parseLineApplicationResult as q, LineAllowance as r, LineAttachment as s, Line as t, LineFromConnectionInput as u, LineMessage as v, LineRespondView as w, LineReminderPreferences as x, LineNumberInventory as y, LINE_APPLICATION_REPLY_MAX_CHARS as z };
+export { LineSenderVerification as A, profileChannelReference as B, LineReplyCodeInput as C, LineRole as D, LineRespondView as E, LineVoiceOptions as F, LineApplicationResult as G, LINE_APPLICATION_REQUEST_MAX_BYTES as H, LinesClient as I, parseLineApplicationRequest as J, LineApplicationState as K, LinesHttpClient as L, LineThread as M, LineTransport as N, LineSendInput as O, LineVoice as P, SandboxLines as R, LineReplyCode as S, LineRespondAgent as T, LineApplication as U, LINE_APPLICATION_REPLY_MAX_CHARS as V, LineApplicationRequest as W, parseLineApplicationResult as Y, LineMemberSpec as _, LineApplicationAttachOptions as a, LineProvider as b, LineAttachmentReauthorization as c, LineInstanceAttachOptions as d, LineInstanceCreate as f, LineMemberPatch as g, LineMemberInstance as h, LineAllowanceSubject as i, LineSenderVerificationStart as j, LineSendReceipt as k, LineExecutionKey as l, LineMember as m, LineAgentRolePolicy as n, LineAttachOptions as o, LineLimits as p, LineApplicationView as q, LineAllowance as r, LineAttachment as s, Line as t, LineFromConnectionInput as u, LineMessage as v, LineReplyGate as w, LineReminderPreferences as x, LineNumberInventory as y, lineInstanceKey as z };

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineThread, C as LineRespondAgent, D as LineSendReceipt, E as LineSendInput, F as LinesHttpClient, I as SandboxLines, L as lineInstanceKey, M as LineVoice, N as LineVoiceOptions, O as LineSenderVerification, P as LinesClient, R as profileChannelReference, S as LineReplyGate, T as LineRole, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineTransport, k as LineSenderVerificationStart, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineRespondView, x as LineReminderPreferences, y as LineNumberInventory } from "./lines-BbvLx7pi.js";
-export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BTZTbYDz.js";
+export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{local-cli-auth-BH9A-PW_.js → local-cli-auth-DRXaIXAj.js}

@@ -1,4 +1,4 @@
-import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-CJSdRlx0.js";
+import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-D_1bUPSo.js";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/dist/{preview-Ddy1fJyc.d.ts → preview-T96_mF5c.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-BCygk0lS.js";
-import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-BlA8Cly0.js";
-import { i as Sandbox } from "./client-BCX8_Mu-.js";
+import { r as SandboxInstance } from "./sandbox-DalvAflZ.js";
+import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-CdT-paBK.js";
+import { i as Sandbox } from "./client-CbOQtx9b.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/{raw-evidence-archive-FxWK99KW.js → raw-evidence-archive-Bi-Lt83d.js}

@@ -30,8 +30,42 @@ const metadata = z.object({
 	ctimeMs: z.number().finite(),
 	sizeBytes: count
 });
-const manifestSchema = z.object({
-	schema: z.literal("tangle.raw-evidence-archive.v1"),
+const nativeSessionCopy = z.object({
+	harness: text,
+	format: text.nullable(),
+	executionId: text,
+	attempt: count.min(1),
+	nativeSessionId: z.string(),
+	copy: z.enum(["snapshot", "settled"]),
+	capturedAt: text,
+	process: z.object({
+		pid: count.nullable(),
+		exitedAt: text.nullable(),
+		exitCode: z.number().int().nullable(),
+		signal: text.nullable(),
+		outcome: z.enum([
+			"succeeded",
+			"failed",
+			"cancelled",
+			"unknown"
+		])
+	}),
+	files: z.array(payload.extend({
+		store: safePath,
+		storePath: safePath,
+		format: text,
+		method: z.enum([
+			"byte-prefix",
+			"atomic-file",
+			"sqlite-backup"
+		]),
+		truncated: z.boolean(),
+		sourceBytes: count
+	})),
+	complete: z.boolean(),
+	missingReasons: z.array(text)
+});
+const manifestBase = z.object({
 	status: z.enum(["captured", "partial"]),
 	sessionId: text,
 	backendType: z.string().regex(/^[a-z][a-z0-9_-]{0,127}$/),
@@ -113,6 +147,11 @@ const manifestSchema = z.object({
 	coverageComplete: z.boolean(),
 	missingReasons: z.array(text)
 });
+/** v2 adds each attempt's native session, from the harness session contract. */
+const manifestSchema = z.discriminatedUnion("schema", [manifestBase.extend({ schema: z.literal("tangle.raw-evidence-archive.v1") }), manifestBase.extend({
+	schema: z.literal("tangle.raw-evidence-archive.v2"),
+	nativeSessions: z.array(nativeSessionCopy)
+})]);
 const MAX_METADATA = 64 * 1024 * 1024;
 const MAX_RECORD = 16 * 1024 * 1024;
 /** Node-only directory export. Flat generated member names cannot traverse or create links. */
@@ -299,6 +338,11 @@ async function exportRawEvidenceDirectory(request, sessionId, targetDirectory, o
 			if (!item.content || item.sha256 !== item.content.sha256 || item.sizeBytes !== item.content.sizeBytes) throw new Error("Evidence native payload mismatch");
 			verify(item.content);
 		} else if (item.content || item.sha256 || item.kind === "symlink" && item.linkTarget === void 0) throw new Error("Evidence native metadata mismatch");
+		const nativeSessions = manifest.schema === "tangle.raw-evidence-archive.v2" ? manifest.nativeSessions : [];
+		for (const copy of nativeSessions) {
+			if (!manifest.attempts.some((attempt) => attempt.executionId === copy.executionId && attempt.ordinal === copy.attempt)) throw new Error("Evidence native session copy is unattributed");
+			for (const file of copy.files) verify(file);
+		}
 		for (const item of manifest.processSources) {
 			if (item.sha256 !== item.content.sha256 || item.sizeBytes !== item.content.sizeBytes) throw new Error("Evidence process source mismatch");
 			verify(item.content);

package/dist/runtime.d.ts

@@ -1,9 +1,9 @@
-import { A as CommitTaskSessionOptions, Aa as WriteFileOptions, At as FileUsageOptions, Bi as SessionEventStreamOptions, Ci as SandboxTerminalInfo, Cn as ListMessagesOptions, Dr as SandboxEvent, Gi as SessionInfo, H as CreateTaskSessionOptions, Hi as SessionExecutionStatus, Ii as SendSessionMessageOptions, Ji as SessionMessage, Li as SendSessionMessageRequest, Mt as FileWriteResult, Ot as FileTreeOptions, Ri as SentSessionMessage, Si as SandboxTerminalCreateOptions, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UploadProgress, Ti as SandboxTerminalRequestOptions, Tt as FileRenameResult, V as CreateSessionOptions, Vi as SessionExecutionInfo, Yi as SessionMessageAdmission, da as TaskSessionCommitResult, gi as SandboxRuntimeHealth, jt as FileUsageResult, kt as FileTreeResult, pa as TaskSessionInfo, sr as RenameOptions, ua as TaskSessionChanges, ui as SandboxPortBinding, w as ChunkedUploadOptions, wi as SandboxTerminalManager, xt as FileReadBatchOptions } from "./types-BlA8Cly0.js";
+import { A as CommitTaskSessionOptions, At as FileUsageOptions, Ci as SandboxTerminalCreateOptions, Cn as ListMessagesOptions, Dr as SandboxEvent, Ea as UploadProgress, Ei as SandboxTerminalRequestOptions, H as CreateTaskSessionOptions, Hi as SessionExecutionInfo, Ki as SessionInfo, Li as SendSessionMessageOptions, Mt as FileWriteResult, Ot as FileTreeOptions, Ri as SendSessionMessageRequest, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalManager, Tt as FileRenameResult, Ui as SessionExecutionStatus, V as CreateSessionOptions, Vi as SessionEventStreamOptions, Xi as SessionMessageAdmission, Yi as SessionMessage, _i as SandboxRuntimeHealth, da as TaskSessionChanges, fa as TaskSessionCommitResult, ja as WriteFileOptions, jt as FileUsageResult, kt as FileTreeResult, ma as TaskSessionInfo, sr as RenameOptions, ui as SandboxPortBinding, w as ChunkedUploadOptions, wi as SandboxTerminalInfo, xt as FileReadBatchOptions, zi as SentSessionMessage } from "./types-CdT-paBK.js";
 import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-CG7bb9lr.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C8oSKngX.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/runtime.js

@@ -1,4 +1,4 @@
-import { M as createAgentRunOutcomeTracker, N as deriveAgentResultOutcome, P as deriveAgentRunOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController } from "./interactive-controller-f_ePJqoh.js";
+import { F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, P as createAgentRunOutcomeTracker, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController } from "./interactive-controller-5_ixpFnR.js";
 import { a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, l as PartialFailureError, m as StateError, n as CapabilityError, p as ServerError, s as NetworkError, t as AuthError, u as QuotaError } from "./errors-D1JIX7Jm.js";
 import { f as combineAbortSignals, n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BJf0P_J4.js";
 //#region src/runtime-client.ts

package/dist/{sandbox-D3SjjeDp.js → sandbox-D3VcDY8b.js}

@@ -1,9 +1,9 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { A as mergeRuntimeBackendConfig, C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, M as createAgentRunOutcomeTracker, N as deriveAgentResultOutcome, O as applyRequestedModel, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as normalizeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-f_ePJqoh.js";
+import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, F as deriveAgentResultOutcome, M as normalizeRuntimeBackendConfig, N as withoutRuntimeSecrets, O as applyRequestedModel, P as createAgentRunOutcomeTracker, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-5_ixpFnR.js";
 import { _ as parseErrorResponse, c as NotFoundError, f as SandboxError, g as ValidationError, h as TimeoutError, m as StateError, n as CapabilityError, p as ServerError, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as parseResponseError, y as readResponseJson } from "./errors-D1JIX7Jm.js";
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
-import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-CJSdRlx0.js";
+import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-D_1bUPSo.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, canonicalCandidateJson, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
@@ -6966,9 +6966,21 @@ var SandboxInstance = class SandboxInstance {
 		const diagnostics = data ? normalizeStartupDiagnostics(data.startupDiagnostics) : null;
 		if (diagnostics) this.info.startupDiagnostics = diagnostics;
 	}
-	/**
-	* Resume a stopped sandbox.
-	*/
+	/** Read credential recovery metadata without changing sandbox lifecycle. */
+	async getEnvRecovery() {
+		return await readResponseJson(await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/env-recovery`));
+	}
+	/** Replace a stopped sandbox's policy, or inspect a proposed change with dryRun. */
+	async setEnvRecovery(envRecovery, options = {}) {
+		return await readResponseJson(await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/env-recovery`, {
+			method: "PUT",
+			body: JSON.stringify({
+				envRecovery,
+				...options
+			})
+		}));
+	}
+	/** Resume a stopped sandbox; cold recovery may require caller env values. */
 	async resume(options = {}) {
 		await this.resumeRuntime("resume", options);
 	}
@@ -7741,7 +7753,7 @@ var SandboxInstance = class SandboxInstance {
 		const backend = mergeRuntimeBackendConfig(this.defaultRuntimeBackend, applyRequestedModel(opts.backend, opts.model));
 		if (info?.status === "queued" && hasExplicitBackend) await this.createSession({
 			sessionId: opts.sessionId,
-			...backend !== void 0 ? { backend } : {}
+			...backend !== void 0 ? { backend: withoutRuntimeSecrets(backend) } : {}
 		});
 		const awaitingFirstTurn = Boolean(info && isSessionAwaitingFirstTurn(info));
 		if (info && isSessionInFlight(info)) {
@@ -7779,15 +7791,17 @@ var SandboxInstance = class SandboxInstance {
 		}
 		const session = info ? this.session(opts.sessionId) : (await this.createSession({
 			sessionId: opts.sessionId,
-			...backend !== void 0 ? { backend } : {}
+			...backend !== void 0 ? { backend: withoutRuntimeSecrets(backend) } : {}
 		})).session;
 		const parts = typeof message === "string" ? [{
 			type: "text",
 			text: message
 		}] : message;
+		const runtimeSecrets = backend?.runtimeSecrets;
 		await session.sendMessage({
 			parts: [...parts],
-			turnId
+			turnId,
+			...runtimeSecrets !== void 0 ? { backend: { runtimeSecrets } } : {}
 		}, {
 			...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {},
 			...opts.signal ? { signal: opts.signal } : {},
@@ -7847,7 +7861,7 @@ var SandboxInstance = class SandboxInstance {
 			await this.createSession({
 				sessionId: opts.sessionId,
 				retention: "workspace",
-				...backend !== void 0 ? { backend } : {}
+				...backend !== void 0 ? { backend: withoutRuntimeSecrets(backend) } : {}
 			});
 			info = await this._sessionStatus(opts.sessionId);
 			if (!info) throw new Error("Conversation session creation was not confirmed");
@@ -7939,12 +7953,14 @@ var SandboxInstance = class SandboxInstance {
 	}
 	/** @internal — invoked before the sandbox is deleted. */
 	async _sessionExportRawEvidence(id, destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-FxWK99KW.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-Bi-Lt83d.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal) => this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/raw-evidence/archive?${new URLSearchParams({
 			maxBytes: String(options.maxBytes),
-			maxFiles: String(options.maxFiles)
+			maxFiles: String(options.maxFiles),
+			...options.copy ? { copy: options.copy } : {},
+			...options.executionId ? { executionId: options.executionId } : {}
 		})}`, {
 			method: "GET",
 			signal

package/dist/{sandbox-BCygk0lS.d.ts → sandbox-DalvAflZ.d.ts}

@@ -1,9 +1,9 @@
 import { t as CliAuthReference } from "./cli-auth-bundle-BMcIiB-I.js";
-import { $i as SnapshotDeleteAcknowledgement, A as CommitTaskSessionOptions, Aa as WriteFileOptions, Ai as SandboxTraceOptions, Bi as SessionEventStreamOptions, C as BranchOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, D as CodeExecutionResult, Da as WaitForOptions, Di as SandboxTraceBundle, Dr as SandboxEvent, E as CodeExecutionOptions, Ei as SandboxTerminals, Et as FileSystem, Gi as SessionInfo, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SendSessionMessageOptions, In as PreviewLinkManager, Ji as SessionMessage, Jn as PromptResult, Ki as SessionInterruptOptions, Kn as PromptInputPart, Li as SendSessionMessageRequest, M as ConversationTurnOptions, Ma as WriteManyOptions, Mi as SearchMatch, Mt as FileWriteResult, N as ConversationTurnResult, Ni as SearchOptions, O as CodeLanguage, Oa as WaitForRolloutOptions, Pn as PermissionsManager, Q as DispatchedSession, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ri as SentSessionMessage, Sa as TurnDriveResult, Sn as JsonValue, Sr as SandboxCreateReceipt, V as CreateSessionOptions, Vi as SessionExecutionInfo, Wi as SessionForkOptions, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionMessageAdmission, Yn as ProvisionEvent, Z as DispatchPromptOptions, Zi as SessionResultOptions, Zt as ForkIdempotency, _a as TeeAttestationResponse, _i as SandboxShape, _n as IntelligenceReport, _r as SSHCommandDescriptor, an as GitStatus, bi as SandboxStatus, br as SandboxConnection, ci as SandboxInfo, cr as RestoreSnapshotOptions, d as BackendConfig, da as TaskSessionCommitResult, dn as GpuLeaseManager, fr as RolloutOptions, gi as SandboxRuntimeHealth, gn as InstalledTool, gt as EventStreamOptions, ha as TeeAttestationOptions, hi as SandboxRuntimeCapabilities, ia as SnapshotResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WriteManyFile, jn as NetworkManager, ka as WorkspaceOperationLookup, lr as ResumeOptions, mr as RolloutStartResult, na as SnapshotInfo, nn as GitCommit, nt as DriveTurnOptions, oa as StartupDiagnostics, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionInfo, pi as SandboxResourceUsage, pt as EgressManager, qi as SessionListOptions, qn as PromptOptions, ra as SnapshotOptions, st as DurablePlanDecisionResult, tn as GitBranch, ua as TaskSessionChanges, ui as SandboxPortBinding, ur as Rollout, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, wr as SandboxDeleteOptions, xi as SandboxTerminalAttachOptions, xn as IntelligenceReportWindow, ya as TeePublicKeyResponse, yn as IntelligenceReportCompareTo, yt as ExecResult } from "./types-BlA8Cly0.js";
+import { A as CommitTaskSessionOptions, Aa as WorkspaceOperationLookup, C as BranchOptions, Ca as TurnDriveResult, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, D as CodeExecutionResult, Di as SandboxTerminals, Dr as SandboxEvent, E as CodeExecutionOptions, Et as FileSystem, Ga as RawEvidenceExportOptions, Gi as SessionForkOptions, H as CreateTaskSessionOptions, Ha as SandboxEnvRecoveryView, Hi as SessionExecutionInfo, Hn as ProcessManager, In as PreviewLinkManager, Ji as SessionListOptions, Jn as PromptResult, Ki as SessionInfo, Kn as PromptInputPart, Li as SendSessionMessageOptions, M as ConversationTurnOptions, Ma as WriteManyFile, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteManyOptions, Ni as SearchMatch, O as CodeLanguage, Oa as WaitForOptions, Oi as SandboxTraceBundle, Pi as SearchOptions, Pn as PermissionsManager, Q as DispatchedSession, Qi as SessionResultOptions, Qr as SandboxFleetTraceBundle, Qt as ForkLookupOptions, Ri as SendSessionMessageRequest, Si as SandboxTerminalAttachOptions, Sn as JsonValue, Sr as SandboxCreateReceipt, V as CreateSessionOptions, Va as SandboxEnvRecovery, Vi as SessionEventStreamOptions, Wa as RawEvidenceDirectoryExport, Xa as InteractionResolutionAcknowledgement, Xi as SessionMessageAdmission, Xn as ProvisionResult, Xt as ForkCounts, Ya as WorkspaceImagePublishResult$1, Yi as SessionMessage, Yn as ProvisionEvent, Z as DispatchPromptOptions, Zt as ForkIdempotency, _i as SandboxRuntimeHealth, _n as IntelligenceReport, _r as SSHCommandDescriptor, aa as SnapshotResult, an as GitStatus, ba as TeePublicKeyResponse, br as SandboxConnection, ci as SandboxInfo, cr as RestoreSnapshotOptions, d as BackendConfig, da as TaskSessionChanges, dn as GpuLeaseManager, ea as SnapshotDeleteAcknowledgement, fa as TaskSessionCommitResult, fr as RolloutOptions, ga as TeeAttestationOptions, gi as SandboxRuntimeCapabilities, gn as InstalledTool, gt as EventStreamOptions, ia as SnapshotOptions, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WriteFileOptions, ji as SandboxTraceOptions, jn as NetworkManager, ka as WaitForRolloutOptions, lr as ResumeOptions, ma as TaskSessionInfo, mr as RolloutStartResult, nn as GitCommit, nt as DriveTurnOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pi as SandboxResourceUsage, pt as EgressManager, qi as SessionInterruptOptions, qn as PromptOptions, ra as SnapshotInfo, sa as StartupDiagnostics, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxPortBinding, ur as Rollout, va as TeeAttestationResponse, vi as SandboxShape, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, wr as SandboxDeleteOptions, xi as SandboxStatus, xn as IntelligenceReportWindow, yn as IntelligenceReportCompareTo, yt as ExecResult, zi as SentSessionMessage } from "./types-CdT-paBK.js";
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { r as InteractiveAttachRequest } from "./interactive-controller-ykaThYp6.js";
-import { I as SandboxLines } from "./lines-BbvLx7pi.js";
+import { R as SandboxLines } from "./lines-BTZTbYDz.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -118,202 +118,6 @@ declare function buildControlPlaneMcpConfig(options: BuildControlPlaneMcpConfigO
   config: SandboxMcpConfig;
 };
 //#endregion
-//#region ../../../packages/runtime-contracts/dist/interaction-response.d.ts
-/** Canonical result returned after a response is recorded by Sidecar. */
-declare const interactionResolutionAcknowledgementSchema: z.ZodObject<{
-  status: z.ZodEnum<{
-    accepted: "accepted";
-    already_resolved_same: "already_resolved_same";
-  }>;
-  operationId: z.ZodString;
-  responseDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
-  interactionId: z.ZodString;
-  sessionId: z.ZodString;
-  outcome: z.ZodEnum<{
-    accepted: "accepted";
-    declined: "declined";
-    cancelled: "cancelled";
-  }>;
-  deliveryState: z.ZodEnum<{
-    pending: "pending";
-    delivering: "delivering";
-    delivered: "delivered";
-    delivery_failed: "delivery_failed";
-    backend_lost: "backend_lost";
-    effect_unknown: "effect_unknown";
-  }>;
-  delivered: z.ZodBoolean;
-  resolvedAt: z.ZodString;
-  binding: z.ZodOptional<z.ZodObject<{
-    runId: z.ZodString;
-    provider: z.ZodString;
-    environmentId: z.ZodString;
-    sessionId: z.ZodString;
-    executionId: z.ZodString;
-    interactionId: z.ZodString;
-    requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
-  }, z.core.$strict>>;
-}, z.core.$strict>;
-type InteractionResolutionAcknowledgement = z.infer<typeof interactionResolutionAcknowledgementSchema>;
-//#endregion
-//#region ../../../packages/runtime-contracts/dist/workspace-image-types.d.ts
-/** A port declared by the published OCI image. */
-interface WorkspaceImageExposedPort {
-  port: number;
-  protocol: "tcp" | "udp" | "sctp";
-}
-/** Successful workspace image publication returned by the Sandbox API. */
-interface WorkspaceImagePublishResult$1 {
-  /** Immutable registry reference. */
-  image: string;
-  /** Operation-stable tag used during publication. */
-  taggedImage: string;
-  digest: string;
-  imageId: string;
-  sizeBytes: number;
-  contextBytes: number;
-  contextEntries: number;
-  buildDurationMs: number;
-  pushDurationMs: number;
-  /** Network ports from the final image configuration, not source inspection. */
-  exposedPorts: WorkspaceImageExposedPort[];
-}
-//#endregion
-//#region ../../../packages/runtime-contracts/dist/raw-evidence-export.d.ts
-/** Wire contract for bounded, session-owned native evidence archives. */
-interface RawEvidencePayloadFile {
-  /** Safe relative path below the exported directory; never an absolute native path. */
-  path: string;
-  sizeBytes: number;
-  sha256: `sha256:${string}`;
-}
-interface RawEvidenceRecordsFile extends RawEvidencePayloadFile {
-  format: "ndjson";
-  /** Number of complete records, in original order. */
-  records: number;
-}
-interface RawEvidenceNativeMetadata {
-  sourceId?: string;
-  rootScope: "session-home" | "workspace-session";
-  path: string;
-  kind: "file" | "directory" | "symlink";
-  mode: number;
-  uid: number;
-  gid: number;
-  mtimeMs: number;
-  ctimeMs: number;
-  sizeBytes: number;
-}
-type RawEvidenceNativeFile = RawEvidenceNativeMetadata & {
-  sha256?: string;
-  linkTarget?: string; /** Replaces contentBase64 for regular files. Symlinks remain metadata only. */
-  content?: RawEvidencePayloadFile;
-};
-interface RawEvidenceArchiveAttempt {
-  executionId: string;
-  ordinal: number;
-  providerSessionId: string;
-  nativeSessionIds: string[];
-  processIds: string[];
-  outcome: "succeeded" | "failed" | "cancelled" | "unknown";
-  missingReasons: string[];
-}
-interface RawEvidenceArchiveEventMetadata {
-  executionId: string;
-  sessionId: string;
-  status: "active" | "completed" | "failed" | "cancelled";
-  startedAt: number;
-  completedAt?: number;
-  eventCount: number;
-  lastEventId: string;
-}
-/** Payload references replace only inline content and aggregate record arrays. */
-interface RawEvidenceArchiveManifest {
-  schema: "tangle.raw-evidence-archive.v1";
-  status: "captured" | "partial";
-  sessionId: string;
-  backendType: string;
-  nativeSessionId: string | null;
-  proofStatus: "verified" | "unverified";
-  containerId?: string;
-  sidecarImageDigest: string;
-  sidecarBundleRevision: string;
-  sidecarBundleChecksum?: string;
-  nativeRoots: Array<{
-    sourceId?: string;
-    rootScope: "session-home" | "workspace-session";
-    path: string;
-  }>;
-  files: RawEvidenceNativeFile[];
-  excluded: Array<RawEvidenceNativeMetadata & {
-    reason: "credential";
-  }>;
-  skipped: Array<{
-    sourceId?: string;
-    rootScope: "session-home" | "workspace-session";
-    path: string;
-    reason: string;
-  }>;
-  inventory: Record<string, number>;
-  /** NDJSON rows preserve legacy processIo fields, replacing contentBase64 with content: RawEvidencePayloadFile. */
-  processIo: RawEvidenceRecordsFile;
-  /** NDJSON rows have exactly the fields of legacy processTerminals entries. */
-  processTerminals: RawEvidenceRecordsFile;
-  processSources: Array<{
-    sourceId: string;
-    sizeBytes: number;
-    sha256: string; /** Exact source spool bytes; replaces contentBase64. */
-    content: RawEvidencePayloadFile;
-  }>;
-  events: Array<{
-    metadata: RawEvidenceArchiveEventMetadata; /** Canonical reconstructed BufferedEvent rows, in original event order. */
-    frames: RawEvidenceRecordsFile;
-  }>;
-  attempts: RawEvidenceArchiveAttempt[];
-  evidenceSources: Array<{
-    executionId: string;
-    sourceId: string;
-    backendType: string;
-    runtimeHome: string;
-    credentialPaths: string[];
-  }>;
-  completeness: {
-    nativeStore: boolean;
-    processIo: boolean;
-    events: boolean;
-  };
-  coverageComplete: boolean;
-  missingReasons: string[];
-}
-interface RawEvidenceUnavailable {
-  status: "unavailable";
-  sessionId: string;
-  backendType: string;
-  reason: string;
-}
-interface RawEvidenceExportOptions {
-  /** Bound all uncompressed archive member bytes, including metadata and records. */
-  maxBytes: number;
-  /** Bound all archive file entries, including empty files. */
-  maxFiles: number;
-  /** Compressed transport bound; defaults to maxBytes plus bounded tar overhead. */
-  maxArchiveBytes?: number;
-  signal?: AbortSignal;
-}
-type RawEvidenceDirectoryExport = RawEvidenceUnavailable | {
-  status: "captured" | "partial";
-  directory: string;
-  manifestPath: string;
-  manifestSha256: `sha256:${string}`;
-  transfer: {
-    sizeBytes: number;
-    sha256: string;
-  }; /** Bounded metadata only. No inline payload or aggregate frame contents. */
-  manifest: RawEvidenceArchiveManifest;
-  coverageComplete: boolean;
-  missingReasons: string[];
-};
-//#endregion
 //#region src/direct-read-route.d.ts
 type DirectReadFallbackReason = "expired" | "refused" | "unreachable" | "timeout" | "malformed" | "cooldown";
 /** What the route has done, for the caller and for the probe. */
@@ -1977,9 +1781,13 @@ declare class SandboxInstance {
    * returns it (replacing the create breakdown).
    */
   stop(): Promise<void>;
-  /**
-   * Resume a stopped sandbox.
-   */
+  /** Read credential recovery metadata without changing sandbox lifecycle. */
+  getEnvRecovery(): Promise<SandboxEnvRecoveryView>;
+  /** Replace a stopped sandbox's policy, or inspect a proposed change with dryRun. */
+  setEnvRecovery(envRecovery: SandboxEnvRecovery, options?: {
+    dryRun?: boolean;
+  }): Promise<SandboxEnvRecoveryView>;
+  /** Resume a stopped sandbox; cold recovery may require caller env values. */
   resume(options?: ResumeOptions): Promise<void>;
   /** Rebuild a stopped sandbox from its durable snapshot under the same ID. */
   rebuild(options?: ResumeOptions): Promise<void>;
@@ -2331,4 +2139,4 @@ declare class SandboxInstance {
   }): Promise<DurablePlanDecisionResult>;
 }
 //#endregion
-export { SandboxMcpConfig as $, InteractiveStopCommand as A, SandboxInteractionConflict as B, InteractiveSessionHandleOptions as C, InteractiveSessionRef as D, InteractiveSessionInfo as E, InteractiveTerminalFrameLog as F, RawEvidenceExportOptions as G, SandboxInteractionResult as H, InteractiveTerminalMetadata as I, RawEvidenceRecordsFile as J, RawEvidenceNativeFile as K, createInteractiveTerminalCapture as L, RespondToPermissionOptions as M, agentInteractiveSessionPromptRequestDigest as N, InteractiveSessionStartOptions as O, InteractiveTerminalCapture as P, SANDBOX_MCP_SERVER_NAME as Q, createInteractiveTerminalSession as R, InteractiveSessionHandle as S, InteractiveSessionIncarnationId as T, RawEvidenceArchiveManifest as U, SandboxInteractionResolution as V, RawEvidenceDirectoryExport as W, BuildSandboxMcpConfigOptions as X, BuildControlPlaneMcpConfigOptions as Y, CONTROL_PLANE_MCP_SERVER_NAME as Z, SandboxSession as _, WorkspaceImagePublishRequestOptions as a, InteractivePromptCommand as b, TraceExportFormat as c, buildTraceExportPayload as d, SandboxMcpEndpoint as et, exportTraceBundle as f, RawEvidenceExport as g, SandboxTaskSession as h, WorkspaceImagePublishInput as i, InterruptResult as j, InteractiveSessionStartResult as k, TraceExportResult as l, toOtelJson as m, HttpClient as n, buildControlPlaneMcpConfig as nt, WorkspaceImagePublishResult as o, otelTraceIdForTangleTrace as p, RawEvidencePayloadFile as q, SandboxInstance as r, buildSandboxMcpConfig as rt, WorkspaceImages as s, ForkAcknowledgement as t, SandboxMcpServerEntry as tt, TraceExportSink as u, AgentInteractiveTerminalSession$1 as v, InteractiveSessionHost as w, InteractiveSessionControlClaim as x, InteractiveControlClaimRequest as y, SandboxInteractionCommandResult as z };
+export { InteractiveStopCommand as A, SandboxInteractionConflict as B, InteractiveSessionHandleOptions as C, InteractiveSessionRef as D, InteractiveSessionInfo as E, InteractiveTerminalFrameLog as F, CONTROL_PLANE_MCP_SERVER_NAME as G, SandboxInteractionResult as H, InteractiveTerminalMetadata as I, SandboxMcpEndpoint as J, SANDBOX_MCP_SERVER_NAME as K, createInteractiveTerminalCapture as L, RespondToPermissionOptions as M, agentInteractiveSessionPromptRequestDigest as N, InteractiveSessionStartOptions as O, InteractiveTerminalCapture as P, createInteractiveTerminalSession as R, InteractiveSessionHandle as S, InteractiveSessionIncarnationId as T, BuildControlPlaneMcpConfigOptions as U, SandboxInteractionResolution as V, BuildSandboxMcpConfigOptions as W, buildControlPlaneMcpConfig as X, SandboxMcpServerEntry as Y, buildSandboxMcpConfig as Z, SandboxSession as _, WorkspaceImagePublishRequestOptions as a, InteractivePromptCommand as b, TraceExportFormat as c, buildTraceExportPayload as d, exportTraceBundle as f, RawEvidenceExport as g, SandboxTaskSession as h, WorkspaceImagePublishInput as i, InterruptResult as j, InteractiveSessionStartResult as k, TraceExportResult as l, toOtelJson as m, HttpClient as n, WorkspaceImagePublishResult as o, otelTraceIdForTangleTrace as p, SandboxMcpConfig as q, SandboxInstance as r, WorkspaceImages as s, ForkAcknowledgement as t, TraceExportSink as u, AgentInteractiveTerminalSession$1 as v, InteractiveSessionHost as w, InteractiveSessionControlClaim as x, InteractiveControlClaimRequest as y, SandboxInteractionCommandResult as z };

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-BgFIcLar.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-BWmtGiyF.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-fMCqH1ig.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-CLrVMWGG.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-fMCqH1ig.js → tangle-CLrVMWGG.js}

@@ -1,5 +1,5 @@
 import { y as readResponseJson } from "./errors-D1JIX7Jm.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-D3SjjeDp.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-D3VcDY8b.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-ChcSLv53.js";
 //#region src/tangle/abi.ts
 /**