@tangle-network/sandbox 0.60.25-develop.20261008073334.063f43c → 0.60.25-develop.20261008091725.f03b881

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DY1CnWBn.js";
-import { k as assertCurrentBackendType } from "../interactive-controller-DtX6fHC6.js";
+import { k as assertCurrentBackendType } from "../interactive-controller-DXS2Gc4_.js";
 import { _ as ValidationError, h as StateError, l as NotFoundError } from "../errors-C1c3Q6Bj.js";
-import { n as Sandbox } from "../client-Cn0pJffb.js";
-import { t as SandboxInstance } from "../sandbox-DYuEOLMN.js";
+import { n as Sandbox } from "../client-DoD8PKcg.js";
+import { t as SandboxInstance } from "../sandbox-CP8s0mNC.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/{client-Cn0pJffb.js → client-DoD8PKcg.js}

@@ -1,8 +1,8 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { A as foldModelRoutingFields, D as parseSSEStream, F as withProfileHarness, M as normalizeRuntimeBackendConfig, O as applyRequestedModel, T as encodePromptForWire, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-DtX6fHC6.js";
+import { A as foldModelRoutingFields, D as parseSSEStream, F as withProfileHarness, M as normalizeRuntimeBackendConfig, O as applyRequestedModel, T as encodePromptForWire, k as assertCurrentBackendType, s as requestInteractiveSessionToken } from "./interactive-controller-DXS2Gc4_.js";
 import { _ as ValidationError, b as readResponseJson, c as NetworkError, d as QuotaError, g as TimeoutError, l as NotFoundError, m as ServerError, p as SandboxError, s as NON_RETRYABLE_CREATE_QUOTA_REASONS, t as AuthError, u as PartialFailureError, v as parseErrorResponse, y as parseResponseError } from "./errors-C1c3Q6Bj.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-DYuEOLMN.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-CP8s0mNC.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/core.js

@@ -1,6 +1,6 @@
 import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-Cn0pJffb.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-DYuEOLMN.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-DoD8PKcg.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-CP8s0mNC.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
 //#region src/core.ts

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
-import { D as parseSSEStream, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, R as deriveAgentResultOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-DtX6fHC6.js";
+import { D as parseSSEStream, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, R as deriveAgentResultOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-DXS2Gc4_.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as TimeoutError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-Cn0pJffb.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-DoD8PKcg.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-DYuEOLMN.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-CP8s0mNC.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CFe2H--1.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
-import { s as TangleSandboxClient } from "./tangle-CXJQLQxN.js";
+import { s as TangleSandboxClient } from "./tangle-gm10nzSK.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{interactive-controller-DtX6fHC6.js → interactive-controller-DXS2Gc4_.js}

@@ -415,6 +415,19 @@ function publicProfileRequestDigest(backend) {
 		backend: JSON.parse(JSON.stringify(backend))
 	});
 }
+/** Bind public controls for an isolated turn while private auth stays on wire. */
+function secretProfilePublicRequestDigest(backend) {
+	const { runtimeSecrets: _runtimeSecrets, metadata: _metadata, model, ...publicBackend } = backend;
+	if (!model || typeof model !== "object" || Array.isArray(model)) return publicProfileRequestDigest({
+		...publicBackend,
+		model
+	});
+	const { apiKey: _apiKey, authFiles: _authFiles, cliAuth: _cliAuth, ...publicModel } = model;
+	return publicProfileRequestDigest({
+		...publicBackend,
+		model: publicModel
+	});
+}
 //#endregion
 //#region src/backend-config.ts
 function assertCurrentBackendType(value, field = "backend.type") {
@@ -607,8 +620,7 @@ function requestedPublicProfileDigest(backend) {
 }
 /** Digest public profile controls while private turn fields remain on wire. */
 function requestedSecretProfilePublicDigest(backend) {
-	const { runtimeSecrets: _turnOnly, metadata: _private, ...publicBackend } = normalizeRuntimeBackendConfig(backend, { allowRuntimeSecrets: true }) ?? {};
-	return publicProfileRequestDigest(publicBackend);
+	return secretProfilePublicRequestDigest(normalizeRuntimeBackendConfig(backend, { allowRuntimeSecrets: true }) ?? {});
 }
 //#endregion
 //#region ../../../packages/sse-core/dist/index.js

package/dist/runtime.js

@@ -1,4 +1,4 @@
-import { L as createAgentRunOutcomeTracker, R as deriveAgentResultOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-DtX6fHC6.js";
+import { L as createAgentRunOutcomeTracker, R as deriveAgentResultOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-DXS2Gc4_.js";
 import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
 import { f as combineAbortSignals, n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BJf0P_J4.js";
 //#region src/runtime-client.ts

package/dist/{sandbox-DYuEOLMN.js → sandbox-CP8s0mNC.js}

@@ -1,5 +1,5 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, I as withoutRuntimeSecrets, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, P as requestedSecretProfilePublicDigest, R as deriveAgentResultOutcome, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-DtX6fHC6.js";
+import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, I as withoutRuntimeSecrets, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, P as requestedSecretProfilePublicDigest, R as deriveAgentResultOutcome, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-DXS2Gc4_.js";
 import { _ as ValidationError, b as readResponseJson, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, v as parseErrorResponse, y as parseResponseError } from "./errors-C1c3Q6Bj.js";
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
@@ -7906,8 +7906,7 @@ var SandboxInstance = class SandboxInstance {
 		const expectedPublicProfileRequestDigest = requestedSecretProfilePublicDigest(backend);
 		const wire = sessionMessageRequestBody({
 			parts: [],
-			backend,
-			expectedPublicProfileRequestDigest
+			backend
 		});
 		const endpoint = `/agents/sessions/${encodeURIComponent(opts.sessionId)}/public-profile-revisions/prepare`;
 		const response = await this.runtimeFetch(endpoint, {

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-CXJQLQxN.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-gm10nzSK.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-CXJQLQxN.js → tangle-gm10nzSK.js}

@@ -1,5 +1,5 @@
 import { b as readResponseJson } from "./errors-C1c3Q6Bj.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-DYuEOLMN.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-CP8s0mNC.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-ChcSLv53.js";
 //#region src/tangle/abi.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.25-develop.20261008073334.063f43c",
+  "version": "0.60.25-develop.20261008091725.f03b881",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -150,12 +150,12 @@
     "ws": "^8.20.0",
     "yjs": "13.6.30",
     "@products/sandbox-test-utils": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.22.0",
     "@tangle-network/cli-agent-registry": "0.6.2",
-    "@repo/shared": "0.0.0",
-    "@tangle-network/sdk": "4.0.3",
+    "@tangle-network/agent-profile-materialize": "0.22.0",
     "@tangle-network/runtime-contracts": "0.16.0",
-    "@tangle-network/sse-core": "0.0.0"
+    "@tangle-network/sse-core": "0.0.0",
+    "@tangle-network/sdk": "4.0.3",
+    "@repo/shared": "0.0.0"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",