@tangle-network/sandbox 0.60.20-develop.20261007051531.53d14b2 → 0.60.20-develop.20261007054633.6c3f8ec

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BV5zCq0j.js";
-import { D as CodeExecutionResult, E as CodeExecutionOptions, O as CodeLanguage, Yi as SessionListOptions, ao as BackendType, d as BackendConfig, k as CodeResultPart, qi as SessionInfo, qr as SandboxFleetParent } from "../types-I7TE2bBB.js";
-import { i as Sandbox } from "../client-BX0QJDsj.js";
-import { u as PreviewAuthorizer } from "../preview-CjrIbC-7.js";
+import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-Cpt526Lb.js";
+import { D as CodeExecutionResult, E as CodeExecutionOptions, O as CodeLanguage, Yi as SessionListOptions, ao as BackendType, d as BackendConfig, k as CodeResultPart, qi as SessionInfo, qr as SandboxFleetParent } from "../types-CUL0a6kA.js";
+import { i as Sandbox } from "../client-Cc4CwiY0.js";
+import { u as PreviewAuthorizer } from "../preview-CR5n9Nxr.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DY1CnWBn.js";
-import { k as assertCurrentBackendType } from "../interactive-controller-V_zc-aJg.js";
+import { k as assertCurrentBackendType } from "../interactive-controller-6q7mWQrh.js";
 import { _ as ValidationError, h as StateError, l as NotFoundError } from "../errors-C1c3Q6Bj.js";
-import { n as Sandbox } from "../client-CifG-70h.js";
-import { t as SandboxInstance } from "../sandbox-C-lA0Z9E.js";
+import { n as Sandbox } from "../client-DpVPLPiO.js";
+import { t as SandboxInstance } from "../sandbox-UCGYGfvL.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-CjrIbC-7.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-CR5n9Nxr.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/{agent-run-outcome-DDpMvezB.d.ts → agent-run-outcome-EqNDVA3W.d.ts}

@@ -1,4 +1,4 @@
-import { Or as SandboxEvent, a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, s as AgentToolInvocation } from "./types-I7TE2bBB.js";
+import { Or as SandboxEvent, a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, o as AgentRunStatus, s as AgentToolInvocation } from "./types-CUL0a6kA.js";
 import { InteractionRequest } from "@tangle-network/agent-interface";
 
 //#region src/agent-run-outcome.d.ts

package/dist/{client-BX0QJDsj.d.ts → client-Cc4CwiY0.d.ts}

@@ -1,7 +1,7 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BV5zCq0j.js";
-import { $n as PublicTemplateInfo, $r as SandboxFleetTraceBundle, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Dr as SandboxEnvironment, En as ListSandboxOptions, F as CreateIntelligenceReportOptions, Fr as SandboxFleetDispatchResponse, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gt as FleetMachineId, Hr as SandboxFleetMachineRecord, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ir as SandboxFleetDriverCapability, Jn as PromptResult, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kr as SandboxFleetOperationsSummary, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Li as SecretsManager, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetArtifactSpec, N as ConversationTurnResult, Nr as SandboxFleetCostEstimate, Nt as FleetAgentId, Oa as UsageInfo, Qr as SandboxFleetToken, R as CreateSandboxFleetTokenOptions, Rr as SandboxFleetInfo, Rt as FleetDispatchResultBuffer, Sa as TokenRefreshHandler, Tn as ListSandboxFleetOptions, Ur as SandboxFleetMachineSpec, Ut as FleetExecDispatchOptions, Vt as FleetDriveTurnOutcome, Wr as SandboxFleetManifest, Wt as FleetExecDispatchResult, Yr as SandboxFleetPolicy, Yt as FleetRunOptions, Zr as SandboxFleetSpend, _n as IntelligenceReport, ai as SandboxFleetWorkspaceReconcileResult, ar as ReconcileSandboxFleetsOptions, b as BatchRunRequest, ci as SandboxIdentity, d as BackendConfig, da as SubscriptionInfo, eo as BatchEvent, er as PublicTemplateVersionInfo, gi as SandboxRunGeneration, ir as ReapExpiredSandboxFleetsResult, jr as SandboxFleetArtifact, kr as SandboxFleetAgent, l as AttachSandboxFleetMachineOptions, li as SandboxInfo, ni as SandboxFleetTraceOptions, nr as PublishPublicTemplateVersionOptions, oi as SandboxFleetWorkspaceRestoreResult, or as ReconcileSandboxFleetsResult, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qr as SandboxFleetParent, qt as FleetPromptDispatchResult, ri as SandboxFleetUsage, rr as ReapExpiredSandboxFleetsOptions, sa as SshKeysManager, si as SandboxFleetWorkspaceSnapshotResult, tr as PublishPublicTemplateOptions, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xi as SandboxShapesInfo, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zt as FleetDispatchResultBufferOptions } from "./types-I7TE2bBB.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-Cpt526Lb.js";
+import { $n as PublicTemplateInfo, $r as SandboxFleetTraceBundle, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Dr as SandboxEnvironment, En as ListSandboxOptions, F as CreateIntelligenceReportOptions, Fr as SandboxFleetDispatchResponse, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gt as FleetMachineId, Hr as SandboxFleetMachineRecord, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ir as SandboxFleetDriverCapability, Jn as PromptResult, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kr as SandboxFleetOperationsSummary, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Li as SecretsManager, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetArtifactSpec, N as ConversationTurnResult, Nr as SandboxFleetCostEstimate, Nt as FleetAgentId, Oa as UsageInfo, Qr as SandboxFleetToken, R as CreateSandboxFleetTokenOptions, Rr as SandboxFleetInfo, Rt as FleetDispatchResultBuffer, Sa as TokenRefreshHandler, Tn as ListSandboxFleetOptions, Ur as SandboxFleetMachineSpec, Ut as FleetExecDispatchOptions, Vt as FleetDriveTurnOutcome, Wr as SandboxFleetManifest, Wt as FleetExecDispatchResult, Yr as SandboxFleetPolicy, Yt as FleetRunOptions, Zr as SandboxFleetSpend, _n as IntelligenceReport, ai as SandboxFleetWorkspaceReconcileResult, ar as ReconcileSandboxFleetsOptions, b as BatchRunRequest, ci as SandboxIdentity, d as BackendConfig, da as SubscriptionInfo, eo as BatchEvent, er as PublicTemplateVersionInfo, gi as SandboxRunGeneration, ir as ReapExpiredSandboxFleetsResult, jr as SandboxFleetArtifact, kr as SandboxFleetAgent, l as AttachSandboxFleetMachineOptions, li as SandboxInfo, ni as SandboxFleetTraceOptions, nr as PublishPublicTemplateVersionOptions, oi as SandboxFleetWorkspaceRestoreResult, or as ReconcileSandboxFleetsResult, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qr as SandboxFleetParent, qt as FleetPromptDispatchResult, ri as SandboxFleetUsage, rr as ReapExpiredSandboxFleetsOptions, sa as SshKeysManager, si as SandboxFleetWorkspaceSnapshotResult, tr as PublishPublicTemplateOptions, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xi as SandboxShapesInfo, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zt as FleetDispatchResultBufferOptions } from "./types-CUL0a6kA.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-B6bUr0hj.js";
-import { I as LinesClient } from "./lines-Cz2lF5QU.js";
+import { I as LinesClient } from "./lines-CozTAz4U.js";
 import { f as SandboxError } from "./errors-DS32ViPj.js";
 import { AgentInteractiveSessionRef, AgentProfile } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/{client-CifG-70h.js → client-DpVPLPiO.js}

@@ -1,8 +1,8 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { A as foldModelRoutingFields, D as parseSSEStream, M as normalizeRuntimeBackendConfig, O as applyRequestedModel, P as withProfileHarness, T as encodePromptForWire, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-V_zc-aJg.js";
+import { A as foldModelRoutingFields, D as parseSSEStream, F as withProfileHarness, M as normalizeRuntimeBackendConfig, O as applyRequestedModel, T as encodePromptForWire, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-6q7mWQrh.js";
 import { _ as ValidationError, b as readResponseJson, c as NetworkError, d as QuotaError, g as TimeoutError, l as NotFoundError, m as ServerError, p as SandboxError, s as NON_RETRYABLE_CREATE_QUOTA_REASONS, t as AuthError, u as PartialFailureError, v as parseErrorResponse, y as parseResponseError } from "./errors-C1c3Q6Bj.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-C-lA0Z9E.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-UCGYGfvL.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/core.d.ts

@@ -1,7 +1,7 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BV5zCq0j.js";
-import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessSpec, Fa as ManagedProcessClient, Fn as PreviewLinkInfo, Ha as SandboxEnvRecovery, Ia as ManagedProcessJobs, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessOptions, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Ra as ManagedProcessRecord, Si as SandboxStatus, Ua as SandboxEnvRecoveryView, Va as ManagedProcessState, Zi as SessionMessageAdmission, li as SandboxInfo, vt as ExecOptions, yr as SandboxConfig, yt as ExecResult, za as ManagedProcessResumeOptions } from "./types-I7TE2bBB.js";
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-Cz2lF5QU.js";
-import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BX0QJDsj.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-Cpt526Lb.js";
+import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessSpec, Fa as ManagedProcessClient, Fn as PreviewLinkInfo, Ha as SandboxEnvRecovery, Ia as ManagedProcessJobs, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessOptions, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Ra as ManagedProcessRecord, Si as SandboxStatus, Ua as SandboxEnvRecoveryView, Va as ManagedProcessState, Zi as SessionMessageAdmission, li as SandboxInfo, vt as ExecOptions, yr as SandboxConfig, yt as ExecResult, za as ManagedProcessResumeOptions } from "./types-CUL0a6kA.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CozTAz4U.js";
+import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-Cc4CwiY0.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
 
 //#region src/core.d.ts

package/dist/core.js

@@ -1,6 +1,6 @@
 import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-CifG-70h.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-C-lA0Z9E.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-DpVPLPiO.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-UCGYGfvL.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
 //#region src/core.ts

package/dist/{index-CyEZ4lwY.d.ts → index-ca0CJ7WM.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-BV5zCq0j.js";
-import { B as CreateSandboxOptions } from "./types-I7TE2bBB.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-Cpt526Lb.js";
+import { B as CreateSandboxOptions } from "./types-CUL0a6kA.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-BV5zCq0j.js";
-import { $ as DownloadOptions, $a as BatchBackendStats, $i as SessionResultOptions, $n as PublicTemplateInfo, $r as SandboxFleetTraceBundle, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WaitForRolloutOptions, Ai as SandboxTraceEvent, An as NetworkConfig, Ar as SandboxFleetAgentSpec, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessSpec, Bi as SentSessionMessage, Bn as ProcessListOptions, Br as SandboxFleetMachine, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TokenUsage, Ci as SandboxTerminalAttachOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, Ct as FileReadError, Da as UploadProgress, Di as SandboxTerminalRequestOptions, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEnvironment, Dt as FileTreeFile, Ea as UploadOptions, Ei as SandboxTerminalManager, En as ListSandboxOptions, Er as SandboxEgressUsage, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as ManagedProcessClient, Fi as SearchOptions, Fn as PreviewLinkInfo, Fr as SandboxFleetDispatchResponse, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceDirectoryExport, Gi as SessionFailureReason, Gn as ProcessStatus, Gr as SandboxFleetManifestMachine, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as SandboxEnvRecovery, Hi as SessionEventStreamOptions, Hn as ProcessManager, Hr as SandboxFleetMachineRecord, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessJobs, Ii as SecretInfo, In as PreviewLinkManager, Ir as SandboxFleetDriverCapability, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidencePayloadFile, Ji as SessionInterruptOptions, Jn as PromptResult, Jr as SandboxFleetPlacement, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceExportOptions, Ki as SessionForkOptions, Kn as PromptInputPart, Kr as SandboxFleetOperationsSummary, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessOptions, Li as SecretsManager, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetDriverTimings, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WriteFileOptions, Mi as SandboxTraceOptions, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetArtifactSpec, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteManyFile, Ni as SandboxUser, Nn as PermissionLevel, Nr as SandboxFleetCostEstimate, Nt as FleetAgentId, Oa as UsageInfo, Oi as SandboxTerminals, On as McpServerConfig, Or as SandboxEvent, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as WriteManyOptions, Pi as SearchMatch, Pn as PermissionsManager, Pr as SandboxFleetDispatchFailureClass, Pt as FleetAgentPlacement, Q as DispatchedSession, Qa as PublicBatchRunRequest, Qi as SessionMessageInputPart, Qn as ProvisionStep, Qr as SandboxFleetToken, Qt as ForkLookupOptions, Ra as ManagedProcessRecord, Ri as SendSessionMessageOptions, Rn as Process, Rr as SandboxFleetInfo, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TokenRefreshHandler, Si as SandboxStatus, Sr as SandboxCreateReceipt, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UpdateUserOptions, Ti as SandboxTerminalInfo, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOutcome, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as SandboxEnvRecoveryView, Ui as SessionExecutionInfo, Un as ProcessSignal, Ur as SandboxFleetMachineSpec, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as ManagedProcessState, Vi as SessionBackendCredentials, Vn as ProcessLogEntry, Vr as SandboxFleetMachineMeteredUsage, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as RawEvidenceArchiveManifest, Wi as SessionExecutionStatus, Wn as ProcessSpawnOptions, Wr as SandboxFleetManifest, X as DirectoryPermission, Xi as SessionMessage, Xn as ProvisionResult, Xr as SandboxFleetProfileRef, Xt as ForkCounts, Y as DevServerInfo, Ya as RawEvidenceRecordsFile, Yi as SessionListOptions, Yn as ProvisionEvent, Yr as SandboxFleetPolicy, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionMessageAdmission, Zn as ProvisionStatus, Zr as SandboxFleetSpend, Zt as ForkIdempotency, _ as BatchBackend, _a as TeeAttestationOptions, _i as SandboxRuntimeCapabilities, _n as IntelligenceReport, _r as SSHCommandDescriptor, _t as ExactProcessSpawnOptions, aa as SnapshotOptions, ai as SandboxFleetWorkspaceReconcileResult, an as GitStatus, ao as BackendType, ar as ReconcileSandboxFleetsOptions, at as DriverType, b as BatchRunRequest, ba as TeePublicKey, bi as SandboxShapePreset, bn as IntelligenceReportSubjectType, br as SandboxConnection, bt as FileInfo, c as AttachGpuLeaseOptions, ca as StartupDiagnostics, ci as SandboxIdentity, cn as GpuLeaseCommandResult, d as BackendConfig, da as SubscriptionInfo, di as SandboxPortBinding, dn as GpuLeaseManager, dr as RolloutChildResult, dt as EffectiveBackendSource, ea as SessionStatus, ei as SandboxFleetTraceEvent, en as GitAuth, eo as BatchEvent, er as PublicTemplateVersionInfo, et as DownloadProgress, f as BackendInfo, fa as TaskSessionChanges, fi as SandboxPortPreviewLink, fn as GpuLeaseProviderName, fr as RolloutOptions, ft as EgressDenial, g as BackendStatus, ga as TaskSessionProfile, gi as SandboxRunGeneration, gn as InstalledTool, gr as RolloutTurnPart, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionInfo, hi as SandboxResources, hn as HostAgentRuntimeBackend, hr as RolloutStatus, ht as EnsureDevServerOptions, ia as SnapshotInfo, ii as SandboxFleetWorkspace, in as GitDiff, io as ALL_BACKEND_TYPES, ir as ReapExpiredSandboxFleetsResult, it as DriverInfo, j as CompletedTurnResult, ja as WorkspaceOperationLookup, ji as SandboxTraceExport, jn as NetworkManager, jr as SandboxFleetArtifact, jt as FileUsageResult, ka as WaitForOptions, ki as SandboxTraceBundle, kn as MkdirOptions, kr as SandboxFleetAgent, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StartupOperation, li as SandboxInfo, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionFileChange, mi as SandboxResourceUsage, mn as HostAgentDriverConfig, mr as RolloutStartResult, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotDeleteOutcome, ni as SandboxFleetTraceOptions, nn as GitCommit, no as BatchSidecarGroup, nr as PublishPublicTemplateVersionOptions, nt as DriveTurnOptions, oa as SnapshotResult, oi as SandboxFleetWorkspaceRestoreResult, on as GpuLease, oo as parseBackendType, or as ReconcileSandboxFleetsResult, ot as DurablePlan, p as BackendManager, pa as TaskSessionCommitResult, pi as SandboxRemovalState, pn as GpuLeaseStatus, pr as RolloutScorer, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceNativeFile, qi as SessionInfo, qn as PromptOptions, qr as SandboxFleetParent, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotIdempotency, ri as SandboxFleetUsage, rn as GitConfig, ro as BatchTaskUsage, rr as ReapExpiredSandboxFleetsOptions, rt as DriverConfig, si as SandboxFleetWorkspaceSnapshotResult, sn as GpuLeaseBilling, sr as RenameOptions, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SnapshotDeleteAcknowledgement, ti as SandboxFleetTraceExport, tn as GitBranch, to as BatchEventDataMap, tr as PublishPublicTemplateOptions, tt as DownloadResult, u as BackendCapabilities, ua as StorageConfig, ui as SandboxIntelligenceEnvelope, un as GpuLeaseExecResult, ur as Rollout, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationReport, vi as SandboxRuntimeHealth, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, w as ChunkedUploadOptions, wa as TurnDriveResult, wi as SandboxTerminalCreateOptions, wn as ListOptions, wr as SandboxDeleteOptions, wt as FileReadResult, x as BatchTask, xa as TeePublicKeyResponse, xi as SandboxShapesInfo, xn as IntelligenceReportWindow, xr as SandboxCreateOutcome, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeeAttestationResponse, yi as SandboxShape, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessResumeOptions, zi as SendSessionMessageRequest, zn as ProcessInfo, zr as SandboxFleetIntelligenceEnvelope, zt as FleetDispatchResultBufferOptions } from "./types-I7TE2bBB.js";
+import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-Cpt526Lb.js";
+import { $ as DownloadOptions, $a as BatchBackendStats, $i as SessionResultOptions, $n as PublicTemplateInfo, $r as SandboxFleetTraceBundle, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WaitForRolloutOptions, Ai as SandboxTraceEvent, An as NetworkConfig, Ar as SandboxFleetAgentSpec, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessSpec, Bi as SentSessionMessage, Bn as ProcessListOptions, Br as SandboxFleetMachine, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TokenUsage, Ci as SandboxTerminalAttachOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, Ct as FileReadError, Da as UploadProgress, Di as SandboxTerminalRequestOptions, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEnvironment, Dt as FileTreeFile, Ea as UploadOptions, Ei as SandboxTerminalManager, En as ListSandboxOptions, Er as SandboxEgressUsage, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as ManagedProcessClient, Fi as SearchOptions, Fn as PreviewLinkInfo, Fr as SandboxFleetDispatchResponse, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceDirectoryExport, Gi as SessionFailureReason, Gn as ProcessStatus, Gr as SandboxFleetManifestMachine, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as SandboxEnvRecovery, Hi as SessionEventStreamOptions, Hn as ProcessManager, Hr as SandboxFleetMachineRecord, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessJobs, Ii as SecretInfo, In as PreviewLinkManager, Ir as SandboxFleetDriverCapability, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidencePayloadFile, Ji as SessionInterruptOptions, Jn as PromptResult, Jr as SandboxFleetPlacement, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceExportOptions, Ki as SessionForkOptions, Kn as PromptInputPart, Kr as SandboxFleetOperationsSummary, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessOptions, Li as SecretsManager, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetDriverTimings, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WriteFileOptions, Mi as SandboxTraceOptions, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetArtifactSpec, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteManyFile, Ni as SandboxUser, Nn as PermissionLevel, Nr as SandboxFleetCostEstimate, Nt as FleetAgentId, Oa as UsageInfo, Oi as SandboxTerminals, On as McpServerConfig, Or as SandboxEvent, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as WriteManyOptions, Pi as SearchMatch, Pn as PermissionsManager, Pr as SandboxFleetDispatchFailureClass, Pt as FleetAgentPlacement, Q as DispatchedSession, Qa as PublicBatchRunRequest, Qi as SessionMessageInputPart, Qn as ProvisionStep, Qr as SandboxFleetToken, Qt as ForkLookupOptions, Ra as ManagedProcessRecord, Ri as SendSessionMessageOptions, Rn as Process, Rr as SandboxFleetInfo, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TokenRefreshHandler, Si as SandboxStatus, Sr as SandboxCreateReceipt, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as UpdateUserOptions, Ti as SandboxTerminalInfo, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOutcome, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as SandboxEnvRecoveryView, Ui as SessionExecutionInfo, Un as ProcessSignal, Ur as SandboxFleetMachineSpec, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as ManagedProcessState, Vi as SessionBackendCredentials, Vn as ProcessLogEntry, Vr as SandboxFleetMachineMeteredUsage, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as RawEvidenceArchiveManifest, Wi as SessionExecutionStatus, Wn as ProcessSpawnOptions, Wr as SandboxFleetManifest, X as DirectoryPermission, Xi as SessionMessage, Xn as ProvisionResult, Xr as SandboxFleetProfileRef, Xt as ForkCounts, Y as DevServerInfo, Ya as RawEvidenceRecordsFile, Yi as SessionListOptions, Yn as ProvisionEvent, Yr as SandboxFleetPolicy, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionMessageAdmission, Zn as ProvisionStatus, Zr as SandboxFleetSpend, Zt as ForkIdempotency, _ as BatchBackend, _a as TeeAttestationOptions, _i as SandboxRuntimeCapabilities, _n as IntelligenceReport, _r as SSHCommandDescriptor, _t as ExactProcessSpawnOptions, aa as SnapshotOptions, ai as SandboxFleetWorkspaceReconcileResult, an as GitStatus, ao as BackendType, ar as ReconcileSandboxFleetsOptions, at as DriverType, b as BatchRunRequest, ba as TeePublicKey, bi as SandboxShapePreset, bn as IntelligenceReportSubjectType, br as SandboxConnection, bt as FileInfo, c as AttachGpuLeaseOptions, ca as StartupDiagnostics, ci as SandboxIdentity, cn as GpuLeaseCommandResult, d as BackendConfig, da as SubscriptionInfo, di as SandboxPortBinding, dn as GpuLeaseManager, dr as RolloutChildResult, dt as EffectiveBackendSource, ea as SessionStatus, ei as SandboxFleetTraceEvent, en as GitAuth, eo as BatchEvent, er as PublicTemplateVersionInfo, et as DownloadProgress, f as BackendInfo, fa as TaskSessionChanges, fi as SandboxPortPreviewLink, fn as GpuLeaseProviderName, fr as RolloutOptions, ft as EgressDenial, g as BackendStatus, ga as TaskSessionProfile, gi as SandboxRunGeneration, gn as InstalledTool, gr as RolloutTurnPart, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionInfo, hi as SandboxResources, hn as HostAgentRuntimeBackend, hr as RolloutStatus, ht as EnsureDevServerOptions, ia as SnapshotInfo, ii as SandboxFleetWorkspace, in as GitDiff, io as ALL_BACKEND_TYPES, ir as ReapExpiredSandboxFleetsResult, it as DriverInfo, j as CompletedTurnResult, ja as WorkspaceOperationLookup, ji as SandboxTraceExport, jn as NetworkManager, jr as SandboxFleetArtifact, jt as FileUsageResult, ka as WaitForOptions, ki as SandboxTraceBundle, kn as MkdirOptions, kr as SandboxFleetAgent, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StartupOperation, li as SandboxInfo, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionFileChange, mi as SandboxResourceUsage, mn as HostAgentDriverConfig, mr as RolloutStartResult, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotDeleteOutcome, ni as SandboxFleetTraceOptions, nn as GitCommit, no as BatchSidecarGroup, nr as PublishPublicTemplateVersionOptions, nt as DriveTurnOptions, oa as SnapshotResult, oi as SandboxFleetWorkspaceRestoreResult, on as GpuLease, oo as parseBackendType, or as ReconcileSandboxFleetsResult, ot as DurablePlan, p as BackendManager, pa as TaskSessionCommitResult, pi as SandboxRemovalState, pn as GpuLeaseStatus, pr as RolloutScorer, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceNativeFile, qi as SessionInfo, qn as PromptOptions, qr as SandboxFleetParent, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotIdempotency, ri as SandboxFleetUsage, rn as GitConfig, ro as BatchTaskUsage, rr as ReapExpiredSandboxFleetsOptions, rt as DriverConfig, si as SandboxFleetWorkspaceSnapshotResult, sn as GpuLeaseBilling, sr as RenameOptions, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SnapshotDeleteAcknowledgement, ti as SandboxFleetTraceExport, tn as GitBranch, to as BatchEventDataMap, tr as PublishPublicTemplateOptions, tt as DownloadResult, u as BackendCapabilities, ua as StorageConfig, ui as SandboxIntelligenceEnvelope, un as GpuLeaseExecResult, ur as Rollout, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationReport, vi as SandboxRuntimeHealth, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, w as ChunkedUploadOptions, wa as TurnDriveResult, wi as SandboxTerminalCreateOptions, wn as ListOptions, wr as SandboxDeleteOptions, wt as FileReadResult, x as BatchTask, xa as TeePublicKeyResponse, xi as SandboxShapesInfo, xn as IntelligenceReportWindow, xr as SandboxCreateOutcome, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeeAttestationResponse, yi as SandboxShape, yn as IntelligenceReportCompareTo, yr as SandboxConfig, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessResumeOptions, zi as SendSessionMessageRequest, zn as ProcessInfo, zr as SandboxFleetIntelligenceEnvelope, zt as FleetDispatchResultBufferOptions } from "./types-CUL0a6kA.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-B6bUr0hj.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as interactiveSessionIdentityDigest, f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as InteractiveSessionNotRunningError, m as InteractiveControlClaimOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimAcknowledgement, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as createInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { a as InteractiveSessionControllerOptions, i as InteractiveSessionController, n as BrowserInteractiveSessionControllerOptions, o as InteractiveSessionControllerTransport, r as InteractiveAttachRequest, t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-Cz2lF5QU.js";
-import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BX0QJDsj.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CozTAz4U.js";
+import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-Cc4CwiY0.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as StateError, h as ServerError, i as EgressProxyRecoveryError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxErrorJson, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-BoQeoNOD.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-BXcL8P-U.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-DDpMvezB.js";
-import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-CyEZ4lwY.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-EqNDVA3W.js";
+import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-ca0CJ7WM.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
-import { D as parseSSEStream, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, R as deriveAgentRunOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController } from "./interactive-controller-V_zc-aJg.js";
+import { D as parseSSEStream, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, R as deriveAgentResultOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-6q7mWQrh.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as TimeoutError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-CifG-70h.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-DpVPLPiO.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-C-lA0Z9E.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-UCGYGfvL.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CFe2H--1.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
-import { s as TangleSandboxClient } from "./tangle-ZJHJeo83.js";
+import { s as TangleSandboxClient } from "./tangle-DHdB41kW.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{interactive-controller-V_zc-aJg.js → interactive-controller-6q7mWQrh.js}

@@ -605,6 +605,11 @@ function normalizeRuntimeBackendConfig(backendInput, options = {}) {
 function requestedPublicProfileDigest(backend) {
 	return publicProfileRequestDigest(normalizeRuntimeBackendConfig(backend, { allowRuntimeSecrets: true }) ?? {});
 }
+/** Digest public profile controls while private turn fields remain on wire. */
+function requestedSecretProfilePublicDigest(backend) {
+	const { runtimeSecrets: _turnOnly, metadata: _private, ...publicBackend } = normalizeRuntimeBackendConfig(backend, { allowRuntimeSecrets: true }) ?? {};
+	return publicProfileRequestDigest(publicBackend);
+}
 //#endregion
 //#region ../../../packages/sse-core/dist/index.js
 /**
@@ -1526,6 +1531,9 @@ var SandboxRuntimeApi = class {
 				...options.title !== void 0 ? { title: options.title } : {},
 				...options.retention !== void 0 ? { retention: options.retention } : {},
 				...options.parentId !== void 0 ? { parentID: options.parentId } : {},
+				...options.workspaceRoot !== void 0 ? { workspaceRoot: options.workspaceRoot } : {},
+				...options.conversationHistory !== void 0 ? { conversationHistory: options.conversationHistory } : {},
+				...options.importFromSessionId !== void 0 ? { importFromSessionId: options.importFromSessionId } : {},
 				...backend && Object.keys(backend).length > 0 ? { backend } : {}
 			})
 		}));
@@ -1777,14 +1785,16 @@ function sessionMessageRequestBody(request) {
 	if (request.managedQuoteVersion !== void 0 && !/^mmq_[a-f0-9]{40}$/.test(request.managedQuoteVersion)) throw new ValidationError("managedQuoteVersion is invalid");
 	if (request.expectedPublicProfileRequestDigest !== void 0) {
 		if (request.system !== void 0 || request.agent !== void 0 || request.model !== void 0 || request.reasoningEffort !== void 0 || request.interactions !== void 0 || request.managedQuoteVersion !== void 0 || request.managedModelCredential !== void 0) throw new ValidationError("Public profile request pin requires all authority controls in backend");
-		if (!request.backend || requestedPublicProfileDigest(request.backend) !== request.expectedPublicProfileRequestDigest) throw new ValidationError("Public profile request digest mismatch");
+		if (!request.backend || (request.expectedSecretProfileReceipt !== void 0 ? requestedSecretProfilePublicDigest(request.backend) : requestedPublicProfileDigest(request.backend)) !== request.expectedPublicProfileRequestDigest) throw new ValidationError("Public profile request digest mismatch");
 	}
 	if (request.expectedPublicProfileRevision !== void 0 && request.expectedPublicProfileRequestDigest === void 0) throw new ValidationError("Native public profile plan pin requires a public request pin");
+	if (request.expectedSecretProfileReceipt !== void 0 && (request.expectedPublicProfileRequestDigest === void 0 || request.expectedPublicProfileRevision !== void 0 || !/^hmac-sha256:[a-f0-9]{64}$/.test(request.expectedSecretProfileReceipt))) throw new ValidationError("Secret native profile receipt requires a public request pin and no public native receipt");
 	return {
 		...request.backend !== void 0 ? { backend: normalizeRuntimeBackendConfig(request.backend, { allowRuntimeSecrets: true }) } : {},
 		...request.managedQuoteVersion !== void 0 ? { managedQuoteVersion: request.managedQuoteVersion } : {},
 		...request.expectedPublicProfileRequestDigest !== void 0 ? { expectedPublicProfileRequestDigest: request.expectedPublicProfileRequestDigest } : {},
 		...request.expectedPublicProfileRevision !== void 0 ? { expectedPublicProfileRevision: request.expectedPublicProfileRevision } : {},
+		...request.expectedSecretProfileReceipt !== void 0 ? { expectedSecretProfileReceipt: request.expectedSecretProfileReceipt } : {},
 		...request.managedModelCredential === true ? { managedModelCredential: true } : {},
 		...request.runControlRef !== void 0 ? { runControlRef: AgentExactRunControlRefSchema.parse(request.runControlRef) } : {},
 		...request.admissionDeadline !== void 0 ? { admissionDeadline: request.admissionDeadline } : {},
@@ -2634,4 +2644,4 @@ var BrowserInteractiveSessionController = class extends InteractiveSessionContro
 	}
 };
 //#endregion
-export { foldModelRoutingFields as A, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, withoutRuntimeSecrets as F, createAgentRunOutcomeTracker as I, deriveAgentResultOutcome as L, normalizeRuntimeBackendConfig as M, requestedPublicProfileDigest as N, applyRequestedModel as O, withProfileHarness as P, deriveAgentRunOutcome as R, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, mergeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y };
+export { foldModelRoutingFields as A, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, withProfileHarness as F, withoutRuntimeSecrets as I, createAgentRunOutcomeTracker as L, normalizeRuntimeBackendConfig as M, requestedPublicProfileDigest as N, applyRequestedModel as O, requestedSecretProfilePublicDigest as P, deriveAgentResultOutcome as R, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, mergeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y, deriveAgentRunOutcome as z };

package/dist/{lines-Cz2lF5QU.d.ts → lines-CozTAz4U.d.ts}

@@ -1,4 +1,4 @@
-import { B as CreateSandboxOptions, d as BackendConfig } from "./types-I7TE2bBB.js";
+import { B as CreateSandboxOptions, d as BackendConfig } from "./types-CUL0a6kA.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-Cz2lF5QU.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CozTAz4U.js";
 export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{preview-CjrIbC-7.d.ts → preview-CR5n9Nxr.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-BV5zCq0j.js";
-import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-I7TE2bBB.js";
-import { i as Sandbox } from "./client-BX0QJDsj.js";
+import { r as SandboxInstance } from "./sandbox-Cpt526Lb.js";
+import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-CUL0a6kA.js";
+import { i as Sandbox } from "./client-Cc4CwiY0.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/runtime.d.ts

@@ -1,9 +1,9 @@
-import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SentSessionMessage, Cn as ListMessagesOptions, Da as UploadProgress, Di as SandboxTerminalRequestOptions, Ei as SandboxTerminalManager, H as CreateTaskSessionOptions, Hi as SessionEventStreamOptions, Ma as WriteFileOptions, Mt as FileWriteResult, Or as SandboxEvent, Ot as FileTreeOptions, Ri as SendSessionMessageOptions, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalInfo, Tt as FileRenameResult, Ui as SessionExecutionInfo, V as CreateSessionOptions, Wi as SessionExecutionStatus, Xi as SessionMessage, Zi as SessionMessageAdmission, di as SandboxPortBinding, fa as TaskSessionChanges, ha as TaskSessionInfo, jt as FileUsageResult, kt as FileTreeResult, pa as TaskSessionCommitResult, qi as SessionInfo, sr as RenameOptions, vi as SandboxRuntimeHealth, w as ChunkedUploadOptions, wi as SandboxTerminalCreateOptions, xt as FileReadBatchOptions, zi as SendSessionMessageRequest } from "./types-I7TE2bBB.js";
+import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SentSessionMessage, Cn as ListMessagesOptions, Da as UploadProgress, Di as SandboxTerminalRequestOptions, Ei as SandboxTerminalManager, H as CreateTaskSessionOptions, Hi as SessionEventStreamOptions, Ma as WriteFileOptions, Mt as FileWriteResult, Or as SandboxEvent, Ot as FileTreeOptions, Ri as SendSessionMessageOptions, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalInfo, Tt as FileRenameResult, Ui as SessionExecutionInfo, V as CreateSessionOptions, Wi as SessionExecutionStatus, Xi as SessionMessage, Zi as SessionMessageAdmission, di as SandboxPortBinding, fa as TaskSessionChanges, ha as TaskSessionInfo, jt as FileUsageResult, kt as FileTreeResult, pa as TaskSessionCommitResult, qi as SessionInfo, sr as RenameOptions, vi as SandboxRuntimeHealth, w as ChunkedUploadOptions, wi as SandboxTerminalCreateOptions, xt as FileReadBatchOptions, zi as SendSessionMessageRequest } from "./types-CUL0a6kA.js";
 import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-DDpMvezB.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-EqNDVA3W.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/runtime.js

@@ -1,4 +1,4 @@
-import { I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController } from "./interactive-controller-V_zc-aJg.js";
+import { L as createAgentRunOutcomeTracker, R as deriveAgentResultOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-6q7mWQrh.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
 import { f as combineAbortSignals, n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BJf0P_J4.js";
 //#region src/runtime-client.ts

package/dist/{sandbox-BV5zCq0j.d.ts → sandbox-Cpt526Lb.d.ts}

@@ -1,9 +1,9 @@
 import { t as CliAuthReference } from "./cli-auth-bundle-BMcIiB-I.js";
-import { $i as SessionResultOptions, $r as SandboxFleetTraceBundle, A as CommitTaskSessionOptions, Aa as WaitForRolloutOptions, Bi as SentSessionMessage, C as BranchOptions, Ci as SandboxTerminalAttachOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fi as SearchOptions, Ga as RawEvidenceDirectoryExport, H as CreateTaskSessionOptions, Ha as SandboxEnvRecovery, Hi as SessionEventStreamOptions, Hn as ProcessManager, In as PreviewLinkManager, Ji as SessionInterruptOptions, Jn as PromptResult, Ka as RawEvidenceExportOptions, Ki as SessionForkOptions, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WriteFileOptions, Mi as SandboxTraceOptions, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteManyFile, O as CodeLanguage, Oi as SandboxTerminals, Or as SandboxEvent, Pa as WriteManyOptions, Pi as SearchMatch, Pn as PermissionsManager, Q as DispatchedSession, Qt as ForkLookupOptions, Ri as SendSessionMessageOptions, Si as SandboxStatus, Sn as JsonValue, Sr as SandboxCreateReceipt, Ua as SandboxEnvRecoveryView, Ui as SessionExecutionInfo, V as CreateSessionOptions, Xa as WorkspaceImagePublishResult$1, Xi as SessionMessage, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionListOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as InteractionResolutionAcknowledgement, Zi as SessionMessageAdmission, Zt as ForkIdempotency, _a as TeeAttestationOptions, _i as SandboxRuntimeCapabilities, _n as IntelligenceReport, _r as SSHCommandDescriptor, aa as SnapshotOptions, an as GitStatus, br as SandboxConnection, ca as StartupDiagnostics, cr as RestoreSnapshotOptions, d as BackendConfig, di as SandboxPortBinding, dn as GpuLeaseManager, fa as TaskSessionChanges, fr as RolloutOptions, gn as InstalledTool, gt as EventStreamOptions, ha as TaskSessionInfo, ia as SnapshotInfo, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WorkspaceOperationLookup, jn as NetworkManager, ka as WaitForOptions, ki as SandboxTraceBundle, li as SandboxInfo, lr as ResumeOptions, mi as SandboxResourceUsage, mr as RolloutStartResult, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotResult, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionCommitResult, pt as EgressManager, qi as SessionInfo, qn as PromptOptions, st as DurablePlanDecisionResult, ta as SnapshotDeleteAcknowledgement, tn as GitBranch, ur as Rollout, vi as SandboxRuntimeHealth, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, wa as TurnDriveResult, wr as SandboxDeleteOptions, xa as TeePublicKeyResponse, xn as IntelligenceReportWindow, ya as TeeAttestationResponse, yi as SandboxShape, yn as IntelligenceReportCompareTo, yt as ExecResult, zi as SendSessionMessageRequest } from "./types-I7TE2bBB.js";
+import { $i as SessionResultOptions, $r as SandboxFleetTraceBundle, A as CommitTaskSessionOptions, Aa as WaitForRolloutOptions, Bi as SentSessionMessage, C as BranchOptions, Ci as SandboxTerminalAttachOptions, Cn as ListMessagesOptions, Cr as SandboxDeleteAcknowledgement, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fi as SearchOptions, Ga as RawEvidenceDirectoryExport, H as CreateTaskSessionOptions, Ha as SandboxEnvRecovery, Hi as SessionEventStreamOptions, Hn as ProcessManager, In as PreviewLinkManager, Ji as SessionInterruptOptions, Jn as PromptResult, Ka as RawEvidenceExportOptions, Ki as SessionForkOptions, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WriteFileOptions, Mi as SandboxTraceOptions, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteManyFile, O as CodeLanguage, Oi as SandboxTerminals, Or as SandboxEvent, Pa as WriteManyOptions, Pi as SearchMatch, Pn as PermissionsManager, Q as DispatchedSession, Qt as ForkLookupOptions, Ri as SendSessionMessageOptions, Si as SandboxStatus, Sn as JsonValue, Sr as SandboxCreateReceipt, Ua as SandboxEnvRecoveryView, Ui as SessionExecutionInfo, V as CreateSessionOptions, Xa as WorkspaceImagePublishResult$1, Xi as SessionMessage, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionListOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as InteractionResolutionAcknowledgement, Zi as SessionMessageAdmission, Zt as ForkIdempotency, _a as TeeAttestationOptions, _i as SandboxRuntimeCapabilities, _n as IntelligenceReport, _r as SSHCommandDescriptor, aa as SnapshotOptions, an as GitStatus, br as SandboxConnection, ca as StartupDiagnostics, cr as RestoreSnapshotOptions, d as BackendConfig, di as SandboxPortBinding, dn as GpuLeaseManager, fa as TaskSessionChanges, fr as RolloutOptions, gn as InstalledTool, gt as EventStreamOptions, ha as TaskSessionInfo, ia as SnapshotInfo, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WorkspaceOperationLookup, jn as NetworkManager, ka as WaitForOptions, ki as SandboxTraceBundle, li as SandboxInfo, lr as ResumeOptions, mi as SandboxResourceUsage, mr as RolloutStartResult, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotResult, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionCommitResult, pt as EgressManager, qi as SessionInfo, qn as PromptOptions, st as DurablePlanDecisionResult, ta as SnapshotDeleteAcknowledgement, tn as GitBranch, ur as Rollout, vi as SandboxRuntimeHealth, vn as IntelligenceReportBudget, vr as SSHCredentials, vt as ExecOptions, wa as TurnDriveResult, wr as SandboxDeleteOptions, xa as TeePublicKeyResponse, xn as IntelligenceReportWindow, ya as TeeAttestationResponse, yi as SandboxShape, yn as IntelligenceReportCompareTo, yt as ExecResult, zi as SendSessionMessageRequest } from "./types-CUL0a6kA.js";
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { r as InteractiveAttachRequest } from "./interactive-controller-ykaThYp6.js";
-import { R as SandboxLines } from "./lines-Cz2lF5QU.js";
+import { R as SandboxLines } from "./lines-CozTAz4U.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -2078,6 +2078,21 @@ declare class SandboxInstance {
       launchDigest: string;
     };
   }>;
+  /** Prepare a secret-bearing native revision without starting a model turn. */
+  prepareSecretProfileRevision(opts: {
+    sessionId: string;
+    backend: Partial<BackendConfig>;
+    model?: ConversationTurnOptions["model"];
+  }): Promise<{
+    expectedPublicProfileRequestDigest: `sha256:${string}`;
+    expectedSecretProfileReceipt: `hmac-sha256:${string}`;
+    workspacePlanDigest: `sha256:${string}`;
+    conflicts: Array<{
+      relPath: string;
+      copyRelPath: string;
+      reason: "existing" | "symlink";
+    }>;
+  }>;
   /** Advance exactly the named turn while retaining the native conversation.
    * Admission receipts are independent of expiring event logs. A previous
    * turn's terminal session status cannot settle a newly submitted message. */

package/dist/{sandbox-C-lA0Z9E.js → sandbox-UCGYGfvL.js}

@@ -1,5 +1,5 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, F as withoutRuntimeSecrets, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-V_zc-aJg.js";
+import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, I as withoutRuntimeSecrets, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, P as requestedSecretProfilePublicDigest, R as deriveAgentResultOutcome, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-6q7mWQrh.js";
 import { _ as ValidationError, b as readResponseJson, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, v as parseErrorResponse, y as parseResponseError } from "./errors-C1c3Q6Bj.js";
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
@@ -7886,6 +7886,40 @@ var SandboxInstance = class SandboxInstance {
 			}
 		};
 	}
+	/** Prepare a secret-bearing native revision without starting a model turn. */
+	async prepareSecretProfileRevision(opts) {
+		await this.ensureRunning();
+		const backend = mergeRuntimeBackendConfig(this.defaultRuntimeBackend, applyRequestedModel(opts.backend, opts.model));
+		if (!backend) throw new ValidationError("Secret profile backend is required");
+		const expectedPublicProfileRequestDigest = requestedSecretProfilePublicDigest(backend);
+		const wire = sessionMessageRequestBody({
+			parts: [],
+			backend,
+			expectedPublicProfileRequestDigest
+		});
+		const endpoint = `/agents/sessions/${encodeURIComponent(opts.sessionId)}/public-profile-revisions/prepare`;
+		const response = await this.runtimeFetch(endpoint, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				backend: wire.backend,
+				expectedPublicProfileRequestDigest,
+				secret: true
+			})
+		});
+		if (!response.ok) throw parseErrorResponse(response.status, await response.text(), void 0, response.headers);
+		const receipt = await response.json();
+		if (typeof receipt.workspacePlanDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(receipt.workspacePlanDigest) || typeof receipt.executorReceipt !== "string" || !/^hmac-sha256:[a-f0-9]{64}$/.test(receipt.executorReceipt) || !Array.isArray(receipt.conflicts) || !receipt.conflicts.every((conflict) => typeof conflict === "object" && conflict !== null && typeof conflict.relPath === "string" && typeof conflict.copyRelPath === "string" && (conflict.reason === "existing" || conflict.reason === "symlink"))) throw new ServerError("Secret profile preparation returned an invalid receipt", 502, {
+			origin: "runtime",
+			endpoint
+		});
+		return {
+			expectedPublicProfileRequestDigest,
+			expectedSecretProfileReceipt: receipt.executorReceipt,
+			workspacePlanDigest: receipt.workspacePlanDigest,
+			conflicts: receipt.conflicts
+		};
+	}
 	/** Advance exactly the named turn while retaining the native conversation.
 	* Admission receipts are independent of expiring event logs. A previous
 	* turn's terminal session status cannot settle a newly submitted message. */
@@ -7911,6 +7945,7 @@ var SandboxInstance = class SandboxInstance {
 			...backend !== void 0 ? { backend } : {},
 			...opts.expectedPublicProfileRequestDigest !== void 0 ? { expectedPublicProfileRequestDigest: opts.expectedPublicProfileRequestDigest } : {},
 			...opts.expectedPublicProfileRevision !== void 0 ? { expectedPublicProfileRevision: opts.expectedPublicProfileRevision } : {},
+			...opts.expectedSecretProfileReceipt !== void 0 ? { expectedSecretProfileReceipt: opts.expectedSecretProfileReceipt } : {},
 			...opts.runControlRef !== void 0 ? { runControlRef: opts.runControlRef } : {},
 			...opts.admissionDeadline !== void 0 ? { admissionDeadline: opts.admissionDeadline } : {}
 		};

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-CyEZ4lwY.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-ca0CJ7WM.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-ZJHJeo83.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-DHdB41kW.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-ZJHJeo83.js → tangle-DHdB41kW.js}

@@ -1,5 +1,5 @@
 import { b as readResponseJson } from "./errors-C1c3Q6Bj.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-C-lA0Z9E.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-UCGYGfvL.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-ChcSLv53.js";
 //#region src/tangle/abi.ts
 /**

package/dist/{types-I7TE2bBB.d.ts → types-CUL0a6kA.d.ts}

@@ -3680,6 +3680,20 @@ interface SessionListOptions {
 }
 /** Options for creating a runtime agent session. */
 interface CreateSessionOptions {
+  /** Existing agent-owned child of the box workspace root for secret-isolated turns. */
+  workspaceRoot?: string;
+  /** Complete ordered visible transcript imported into a new isolated runtime session. */
+  conversationHistory?: Array<{
+    id: string;
+    role: "user" | "assistant";
+    parts: Array<{
+      type: "text";
+      text: string;
+    }>;
+    timestamp: string;
+  }>;
+  /** Import the complete native transcript from another OpenCode session in this box. */
+  importFromSessionId?: string;
   /** Workspace conversations survive idle-session collection until explicitly deleted. */
   retention?: "idle" | "workspace";
   /** Stable caller-supplied idempotency key. Repeating create with the same
@@ -3739,6 +3753,8 @@ interface SendSessionMessageRequest {
     materializedDigest: `sha256:${string}`;
     launchDigest: string;
   };
+  /** Executor-only opaque receipt for a secret-bearing native revision. */
+  expectedSecretProfileReceipt?: `hmac-sha256:${string}`;
   /** Router quote for a warm OpenCode turn with a total output ceiling. */
   managedQuoteVersion?: string;
   /** Use the sandbox's managed model credential for this turn only. */
@@ -4015,6 +4031,8 @@ interface ConversationTurnOptions {
     materializedDigest: `sha256:${string}`;
     launchDigest: string;
   };
+  /** Executor-only opaque receipt for a secret-bearing native revision. */
+  expectedSecretProfileReceipt?: `hmac-sha256:${string}`;
   /** Model shorthand; conflicts with backend.model.model are rejected. */
   model?: string;
   /** Exact execution identity retained by admission and cancellation. */
@@ -5633,7 +5651,8 @@ interface BackendConfig {
   };
   /** Runtime session metadata used for attribution and workspace selection. */
   metadata?: {
-    containerType?: string;
+    containerType?: string; /** Opt in to isolated native profile execution for this chat session. */
+    profileSecretIsolation?: true;
     /**
      * Non-secret labels attached to execution traces.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.20-develop.20261007051531.53d14b2",
+  "version": "0.60.20-develop.20261007054633.6c3f8ec",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [