@tangle-network/sandbox 0.60.25 → 0.60.26-develop.20261008100338.fdb71c8

package/dist/{sandbox-CmYUc66b.js → sandbox-C42UAlFT.js}

@@ -1,9 +1,9 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, I as withoutRuntimeSecrets, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, P as requestedSecretProfilePublicDigest, R as deriveAgentResultOutcome, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-DtX6fHC6.js";
-import { _ as ValidationError, b as readResponseJson, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, v as parseErrorResponse, y as parseResponseError } from "./errors-C1c3Q6Bj.js";
+import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, I as withoutRuntimeSecrets, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, P as requestedSecretProfilePublicDigest, R as deriveAgentResultOutcome, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-4Fo9aDih.js";
+import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, g as StreamInterruptedError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, v as ValidationError, x as readResponseJson, y as parseErrorResponse } from "./errors-DMxVFCS6.js";
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
-import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-xnHi1LpC.js";
+import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-CZfgymgf.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, canonicalCandidateJson, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
@@ -1836,6 +1836,99 @@ function collectAgentFinalMessageText(events) {
 	return composed.trim().length > 0 ? composed : void 0;
 }
 //#endregion
+//#region src/lib/stream-resume.ts
+/**
+* How a prompt stream rejoins its execution after the connection drops.
+*
+* A dropped stream is a transport fact, never a statement about the run. The
+* platform restarts its control path (host agents, orchestrator, Worker)
+* several times a day while executions keep running inside their sandboxes
+* and keep appending to their durable event log, so the SDK rejoins the log
+* for as long as the caller allows and the sandbox exists.
+*/
+/** Default reconnect window: how long an execution may stay unreachable. */
+const DEFAULT_RECONNECT_WINDOW_MS = 360 * 60 * 1e3;
+/** The first retry waits this long; each consecutive failure doubles it. */
+const RECONNECT_BASE_DELAY_MS = 1e3;
+/** No single wait between attempts exceeds this. */
+const RECONNECT_MAX_DELAY_MS = 3e4;
+/** The caller's window, or the default; 0 disables reconnection. */
+function resolveReconnectWindowMs(value) {
+	if (value === void 0) return DEFAULT_RECONNECT_WINDOW_MS;
+	if (!Number.isFinite(value) || value < 0) throw new RangeError("reconnectWindowMs must be a non-negative number");
+	return value;
+}
+/**
+* Capped exponential backoff with ±20% jitter, so the clients a host-agent
+* restart disconnects together do not return together.
+*/
+function reconnectDelayMs(consecutiveFailures, random = Math.random) {
+	const exponent = Math.max(0, consecutiveFailures - 1);
+	const base = Math.min(RECONNECT_MAX_DELAY_MS, RECONNECT_BASE_DELAY_MS * 2 ** Math.min(exponent, 16));
+	return Math.round(base * (.8 + .4 * random()));
+}
+/** Sandbox states from which no execution can continue. */
+function isFinalSandboxStatus(status) {
+	return status === "stopped" || status === "failed" || status === "expired" || status === "deleted";
+}
+/**
+* Drops events the caller already received. The runtime numbers buffered
+* events with one increasing integer per sandbox, so numeric ids compare by
+* value; any other id is remembered exactly.
+*/
+var DeliveredEvents = class {
+	highestNumeric;
+	opaque = /* @__PURE__ */ new Set();
+	constructor(lastEventId) {
+		if (lastEventId !== void 0) this.record(lastEventId);
+	}
+	isDuplicate(eventId) {
+		if (eventId === void 0 || eventId === "") return false;
+		const numeric = numericEventId(eventId);
+		if (numeric !== void 0) return this.highestNumeric !== void 0 && numeric <= this.highestNumeric;
+		return this.opaque.has(eventId);
+	}
+	record(eventId) {
+		if (eventId === void 0 || eventId === "") return;
+		const numeric = numericEventId(eventId);
+		if (numeric !== void 0) {
+			if (this.highestNumeric === void 0 || numeric > this.highestNumeric) this.highestNumeric = numeric;
+			return;
+		}
+		this.opaque.add(eventId);
+	}
+};
+/**
+* The runtime ends each replay connection with a `stream.terminal`
+* announcement that reuses the last delivered event id as its position, so
+* it is never a duplicate of an agent event.
+*/
+function isDuplicateDelivery(delivered, event) {
+	return event.type !== "stream.terminal" && delivered.isDuplicate(event.id);
+}
+function numericEventId(eventId) {
+	if (!/^\d{1,15}$/u.test(eventId)) return void 0;
+	return Number(eventId);
+}
+/** Resolve after `ms`, or as soon as the signal aborts; the caller checks it. */
+function waitForReconnect(ms, signal) {
+	return new Promise((resolve) => {
+		if (signal?.aborted) {
+			resolve();
+			return;
+		}
+		const timer = setTimeout(() => {
+			signal?.removeEventListener("abort", onAbort);
+			resolve();
+		}, ms);
+		const onAbort = () => {
+			clearTimeout(timer);
+			resolve();
+		};
+		signal?.addEventListener("abort", onAbort, { once: true });
+	});
+}
+//#endregion
 //#region src/profile-file-delivery.ts
 /** Successful immutable mount delivery is scoped to one filesystem incarnation. */
 var ProfileFileDelivery = class {
@@ -3561,6 +3654,23 @@ function fromStreamErrorEvent(data) {
 * through so consumers can inspect the failure without re-parsing the message.
 */
 function toStreamErrorEvent(err) {
+	if (err instanceof StreamInterruptedError) return {
+		type: "error",
+		data: {
+			message: err.message,
+			code: err.code,
+			name: err.name,
+			origin: err.origin,
+			endpoint: err.endpoint,
+			outcome: "unknown",
+			reason: err.reason,
+			executionId: err.executionId,
+			...err.sessionId ? { sessionId: err.sessionId } : {},
+			...err.lastEventId ? { lastEventId: err.lastEventId } : {},
+			...err.lastReplayStatus !== void 0 ? { lastReplayStatus: err.lastReplayStatus } : {},
+			...err.lastExecutionStatus ? { lastExecutionStatus: err.lastExecutionStatus } : {}
+		}
+	};
 	if (err instanceof SandboxError) return {
 		type: "error",
 		data: {
@@ -4631,6 +4741,7 @@ var SandboxInstance = class SandboxInstance {
 		let sessionId = options?.sessionId;
 		let executionId = options?.lastEventId ? options.executionId : void 0;
 		let profileResendAttempted = false;
+		let streamInterrupted = false;
 		try {
 			for (;;) {
 				let yieldedThisAttempt = false;
@@ -4665,9 +4776,21 @@ var SandboxInstance = class SandboxInstance {
 				executionId,
 				error: err instanceof Error ? err.message : String(err)
 			});
+			if (err instanceof StreamInterruptedError) {
+				streamInterrupted = true;
+				yield toStreamErrorEvent(err);
+				return;
+			}
 			yield toStreamErrorEvent(err);
 		} finally {
-			if (!receivedTerminal && !isCallerAbort()) {
+			if (!receivedTerminal && !streamInterrupted && options.detach !== true && executionId !== void 0 && sessionId !== void 0) {
+				this.logStreamCheckpoint("consumer_cancel", {
+					sessionId,
+					executionId
+				});
+				this._interrupt(sessionId, { executionId }).catch(() => void 0);
+			}
+			if (!receivedTerminal && !streamInterrupted && !isCallerAbort()) {
 				this.logStreamCheckpoint("synthetic_terminal", {
 					sessionId,
 					executionId
@@ -4684,12 +4807,18 @@ var SandboxInstance = class SandboxInstance {
 		}
 	}
 	/**
-	* Inner prompt stream: opens the SSE connection and reconnects on silent
-	* drops. May throw (pre-stream HTTP error, timeout, reconnect exhausted);
-	* the public `streamPrompt` wrapper converts those throws into a terminal
-	* `error` + `done` so callers never see a thrown generator.
+	* Inner prompt stream: opens the SSE connection and rejoins the execution's
+	* event log on silent drops. May throw (pre-stream HTTP error, timeout, or
+	* `StreamInterruptedError` when it cannot rejoin); the public
+	* `streamPrompt` wrapper converts those throws into in-band events so
+	* callers never see a thrown generator.
 	*/
 	async *streamPromptInner(message, options, internal) {
+		if (options?.nativeResume !== void 0) {
+			const resume = options.nativeResume;
+			const validId = (id) => typeof id === "string" && /^[A-Za-z0-9._:-]{1,256}$/u.test(id);
+			if (!options.sessionId || options.lastEventId !== void 0 || resume === null || typeof resume !== "object" || Object.keys(resume).sort().join(",") !== "harness,nativeSessionId,sourceCheckpointId" || !["claude-code", "codex"].includes(resume.harness) || !validId(resume.nativeSessionId) || !validId(resume.sourceCheckpointId)) throw new ValidationError("Native resume requires an exact harness, native session, source checkpoint, and new session dispatch");
+		}
 		if (options?.lastEventId && !options.executionId) throw new ValidationError("lastEventId requires executionId so the SDK can replay the correct execution", { executionId: "Required when lastEventId is set" });
 		const runControlRef = options?.runControlRef ? AgentExactRunControlRefSchema.safeParse(options.runControlRef) : void 0;
 		if (runControlRef && !runControlRef.success) throw new ValidationError("Invalid runControlRef", { runControlRef: runControlRef.error.message });
@@ -4733,15 +4862,8 @@ var SandboxInstance = class SandboxInstance {
 		let executionId = options?.executionId;
 		let sessionId = options?.sessionId;
 		let receivedTerminal = false;
-		const RECONNECT_BACKOFF_MS = [
-			2e3,
-			4e3,
-			8e3,
-			16e3,
-			3e4,
-			3e4
-		];
-		const MAX_RECONNECT_ATTEMPTS = RECONNECT_BACKOFF_MS.length;
+		const reconnectWindowMs = resolveReconnectWindowMs(options?.reconnectWindowMs);
+		const delivered = new DeliveredEvents(lastEventId);
 		let lastReplayStatus;
 		let lastExecutionStatus;
 		let firstSseEventSeen = false;
@@ -4771,6 +4893,7 @@ var SandboxInstance = class SandboxInstance {
 				body: JSON.stringify({
 					id: "default",
 					...options?.sessionId ? { sessionId: options.sessionId } : {},
+					...options?.nativeResume ? { nativeResume: options.nativeResume } : {},
 					...runControlRef?.success ? { runControlRef: runControlRef.data } : {},
 					parts: encodePromptForWire(message),
 					turnId: options?.turnId,
@@ -4819,31 +4942,40 @@ var SandboxInstance = class SandboxInstance {
 				status: response.status,
 				ok: false
 			});
-		} else for await (const event of this.parseSSEStream(response, streamSignal)) {
-			if (event.type === "history.replay.start" || event.type === "history.replay.end") continue;
-			if (!firstSseEventSeen) {
-				firstSseEventSeen = true;
-				logStreamCheckpoint("first_sse_event", {
-					eventType: event.type,
-					eventId: event.id
-				});
-			}
-			if (event.id) lastEventId = event.id;
-			if (event.type === "execution.started" && event.data?.executionId) {
-				executionId = event.data.executionId;
-				const eventSessionId = event.data?.sessionId;
-				if (sessionId === void 0 && typeof eventSessionId === "string" && eventSessionId.length > 0) sessionId = eventSessionId;
-			}
-			if (event.type === "done" || event.type === "error") {
-				receivedTerminal = true;
-				logStreamCheckpoint("terminal_event", {
-					eventType: event.type,
-					eventId: event.id,
-					sessionId,
-					executionId
-				});
+		} else try {
+			for await (const event of this.parseSSEStream(response, streamSignal)) {
+				if (event.type === "history.replay.start" || event.type === "history.replay.end") continue;
+				if (!firstSseEventSeen) {
+					firstSseEventSeen = true;
+					logStreamCheckpoint("first_sse_event", {
+						eventType: event.type,
+						eventId: event.id
+					});
+				}
+				if (isDuplicateDelivery(delivered, event)) continue;
+				delivered.record(event.id);
+				if (event.id) lastEventId = event.id;
+				if (event.type === "execution.started" && event.data?.executionId) {
+					executionId = event.data.executionId;
+					const eventSessionId = event.data?.sessionId;
+					if (sessionId === void 0 && typeof eventSessionId === "string" && eventSessionId.length > 0) sessionId = eventSessionId;
+				}
+				if (event.type === "done" || event.type === "error") {
+					receivedTerminal = true;
+					logStreamCheckpoint("terminal_event", {
+						eventType: event.type,
+						eventId: event.id,
+						sessionId,
+						executionId
+					});
+				}
+				yield event;
 			}
-			yield event;
+		} catch (readError) {
+			throwIfTimedOut();
+			if (receivedTerminal || options?.signal?.aborted || streamSignal?.aborted) return;
+			logStreamCheckpoint("stream_read_failed", { error: readError instanceof Error ? readError.message : String(readError) });
+			console.warn(`[sandbox-sdk] Stream connection broke: ${readError instanceof Error ? readError.message : String(readError)}`);
 		}
 		if (receivedTerminal) return;
 		throwIfTimedOut();
@@ -4858,22 +4990,49 @@ var SandboxInstance = class SandboxInstance {
 			endpoint: "/agents/run/stream",
 			origin: "runtime"
 		});
-		for (let attempt = 1; attempt <= MAX_RECONNECT_ATTEMPTS; attempt++) {
+		const resumeExecutionId = executionId;
+		const interrupted = (reason, detail, cause) => {
+			const replayStatusText = lastReplayStatus !== void 0 ? `; last replay status ${lastReplayStatus}` : "";
+			const execStatusText = lastExecutionStatus ? `; last known execution status ${lastExecutionStatus}` : "";
+			console.warn(`[sandbox-sdk] Stopped rejoining execution ${resumeExecutionId}: ${detail}`);
+			return new StreamInterruptedError({
+				message: `Prompt stream for execution ${resumeExecutionId} ended before a terminal event and could not be rejoined (${detail}); the execution's outcome is unknown${replayStatusText}${execStatusText}`,
+				executionId: resumeExecutionId,
+				...sessionId ? { sessionId } : {},
+				...lastEventId ? { lastEventId } : {},
+				reason,
+				...lastReplayStatus !== void 0 ? { lastReplayStatus } : {},
+				...lastExecutionStatus ? { lastExecutionStatus } : {},
+				...cause !== void 0 ? { cause } : {}
+			});
+		};
+		let outageStartedAt = Date.now();
+		let consecutiveFailures = 0;
+		let notFoundSince;
+		for (let attempt = 1;; attempt++) {
 			throwIfTimedOut();
 			if (options?.signal?.aborted || streamSignal?.aborted) return;
-			console.warn(`[sandbox-sdk] Stream dropped without terminal event, reconnecting (attempt ${attempt}/${MAX_RECONNECT_ATTEMPTS})`);
+			const outageMs = Date.now() - outageStartedAt;
+			if (outageMs >= reconnectWindowMs) throw interrupted("reconnect-window-elapsed", `unreachable for ${outageMs}ms of a ${reconnectWindowMs}ms reconnect window`);
+			consecutiveFailures += 1;
+			const delayMs = Math.min(reconnectDelayMs(consecutiveFailures), reconnectWindowMs - outageMs);
+			console.warn(`[sandbox-sdk] Stream dropped without terminal event, reconnecting (attempt ${attempt}; unreachable ${Math.round(outageMs / 1e3)}s of ${Math.round(reconnectWindowMs / 1e3)}s)`);
 			logStreamCheckpoint("reconnect_attempt_start", {
 				attempt,
 				executionId,
 				sessionId,
-				lastEventId
+				lastEventId,
+				outageMs,
+				delayMs
 			});
-			await new Promise((resolve) => setTimeout(resolve, RECONNECT_BACKOFF_MS[attempt - 1]));
+			await waitForReconnect(delayMs, streamSignal);
 			throwIfTimedOut();
 			if (options?.signal?.aborted || streamSignal?.aborted) return;
+			let connectedAt;
+			let deliveredThisConnection = 0;
 			try {
 				const queryParams = lastEventId ? `?lastEventId=${encodeURIComponent(lastEventId)}&format=sse` : "?format=sse";
-				const replayResponse = await this.runtimeFetch(`/agents/run/${encodeURIComponent(executionId)}/events${queryParams}`, {
+				const replayResponse = await this.runtimeFetch(`/agents/run/${encodeURIComponent(resumeExecutionId)}/events${queryParams}`, {
 					method: "GET",
 					signal: streamSignal,
 					headers: traceHeaders
@@ -4885,9 +5044,15 @@ var SandboxInstance = class SandboxInstance {
 				});
 				if (!replayResponse.ok) {
 					lastReplayStatus = replayResponse.status;
+					await replayResponse.body?.cancel().catch(() => void 0);
 					await reconcileRuntimeRefusal(replayResponse.status);
 					console.warn(`[sandbox-sdk] Replay endpoint returned ${replayResponse.status}, attempt ${attempt}`);
-					if (replayResponse.status === 404 && sessionId) try {
+					if (replayResponse.status !== 404) {
+						notFoundSince = void 0;
+						continue;
+					}
+					notFoundSince ??= Date.now();
+					if (sessionId) try {
 						const info = await this._sessionStatus(sessionId);
 						if (info) {
 							lastExecutionStatus = info.status;
@@ -4916,8 +5081,11 @@ var SandboxInstance = class SandboxInstance {
 					} catch (statusErr) {
 						console.warn(`[sandbox-sdk] Session status poll failed during replay 404: ${statusErr instanceof Error ? statusErr.message : String(statusErr)}`);
 					}
+					if (Date.now() - notFoundSince >= 6e5) throw interrupted("execution-not-found", `the runtime has answered 404 for ${Date.now() - notFoundSince}ms`);
 					continue;
 				}
+				notFoundSince = void 0;
+				connectedAt = Date.now();
 				for await (const event of this.parseSSEStream(replayResponse, streamSignal)) {
 					if (!firstSseEventSeen) {
 						firstSseEventSeen = true;
@@ -4928,6 +5096,9 @@ var SandboxInstance = class SandboxInstance {
 						});
 					}
 					if (event.type === "history.replay.start" || event.type === "history.replay.end") continue;
+					if (isDuplicateDelivery(delivered, event)) continue;
+					delivered.record(event.id);
+					deliveredThisConnection += 1;
 					if (event.id) lastEventId = event.id;
 					const eventSessionId = event.data?.sessionId;
 					if (typeof eventSessionId === "string" && eventSessionId.length > 0) sessionId = eventSessionId;
@@ -4954,7 +5125,9 @@ var SandboxInstance = class SandboxInstance {
 				if (options?.signal?.aborted || streamSignal?.aborted) return;
 			} catch (err) {
 				throwIfTimedOut();
-				if (err instanceof StateError) throw err;
+				if (err instanceof StreamInterruptedError) throw err;
+				if (options?.signal?.aborted || streamSignal?.aborted) return;
+				if (err instanceof StateError && isFinalSandboxStatus(this.status)) throw interrupted("sandbox-not-running", `the sandbox is ${this.status}`, err);
 				logStreamCheckpoint("reconnect_attempt_end", {
 					attempt,
 					status: "failed",
@@ -4962,15 +5135,10 @@ var SandboxInstance = class SandboxInstance {
 				});
 				console.warn(`[sandbox-sdk] Reconnection attempt ${attempt} failed: ${err instanceof Error ? err.message : String(err)}`);
 			}
-		}
-		if (!receivedTerminal) {
-			console.warn(`[sandbox-sdk] Exhausted ${MAX_RECONNECT_ATTEMPTS} reconnection attempts without receiving terminal event`);
-			const replayStatusText = lastReplayStatus !== void 0 ? `; last replay status ${lastReplayStatus}` : "";
-			const execStatusText = lastExecutionStatus ? `; last known execution status ${lastExecutionStatus}` : "";
-			throw new NetworkError(`Prompt stream ended before a terminal event for execution ${executionId}${replayStatusText}${execStatusText}`, {
-				endpoint: `/agents/run/${executionId}/events`,
-				origin: "runtime"
-			});
+			if (connectedAt !== void 0 && (deliveredThisConnection > 0 || Date.now() - connectedAt >= 3e4)) {
+				outageStartedAt = Date.now();
+				consecutiveFailures = 0;
+			}
 		}
 	}
 	/**
@@ -7900,8 +8068,7 @@ var SandboxInstance = class SandboxInstance {
 		const expectedPublicProfileRequestDigest = requestedSecretProfilePublicDigest(backend);
 		const wire = sessionMessageRequestBody({
 			parts: [],
-			backend,
-			expectedPublicProfileRequestDigest
+			backend
 		});
 		const endpoint = `/agents/sessions/${encodeURIComponent(opts.sessionId)}/public-profile-revisions/prepare`;
 		const response = await this.runtimeFetch(endpoint, {

package/dist/{sandbox-C-MO0nYW.d.ts → sandbox-CSFajXr_.d.ts}

@@ -1,9 +1,9 @@
 import { t as CliAuthReference } from "./cli-auth-bundle-BMcIiB-I.js";
-import { $n as PublicProfileConflict, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, Bi as SendSessionMessageRequest, C as BranchOptions, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fa as WriteManyOptions, Fi as SearchMatch, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SearchOptions, In as PreviewLinkManager, Ji as SessionInfo, Jn as PromptResult, Ka as RawEvidenceDirectoryExport, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, O as CodeLanguage, Pa as WriteManyFile, Pn as PermissionsManager, Q as DispatchedSession, Qa as InteractionResolutionAcknowledgement, Qi as SessionMessageAdmission, Qt as ForkLookupOptions, Sa as TeePublicKeyResponse, Sn as JsonValue, Ta as TurnDriveResult, Tr as SandboxDeleteOptions, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Xi as SessionListOptions, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as WorkspaceImagePublishResult$1, Zi as SessionMessage, Zt as ForkIdempotency, _n as IntelligenceReport, aa as SnapshotInfo, an as GitStatus, ba as TeeAttestationResponse, bi as SandboxShape, d as BackendConfig, dn as GpuLeaseManager, dr as Rollout, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, fi as SandboxPortBinding, ga as TaskSessionInfo, gn as InstalledTool, gt as EventStreamOptions, hi as SandboxResourceUsage, hr as RolloutStartResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, jn as NetworkManager, ki as SandboxTerminals, kr as SandboxEvent, la as StartupDiagnostics, lr as RestoreSnapshotOptions, ma as TaskSessionCommitResult, na as SnapshotDeleteAcknowledgement, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pr as RolloutOptions, pt as EgressManager, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, sa as SnapshotResult, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxInfo, ur as ResumeOptions, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, wi as SandboxTerminalAttachOptions, wr as SandboxDeleteAcknowledgement, xn as IntelligenceReportWindow, xr as SandboxConnection, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, zi as SendSessionMessageOptions } from "./types-DwHQuPFG.js";
+import { $n as PublicProfileConflict, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, Bi as SendSessionMessageRequest, C as BranchOptions, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fa as WriteManyOptions, Fi as SearchMatch, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SearchOptions, In as PreviewLinkManager, Ji as SessionInfo, Jn as PromptResult, Ka as RawEvidenceDirectoryExport, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, O as CodeLanguage, Pa as WriteManyFile, Pn as PermissionsManager, Q as DispatchedSession, Qa as InteractionResolutionAcknowledgement, Qi as SessionMessageAdmission, Qt as ForkLookupOptions, Sa as TeePublicKeyResponse, Sn as JsonValue, Ta as TurnDriveResult, Tr as SandboxDeleteOptions, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Xi as SessionListOptions, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as WorkspaceImagePublishResult$1, Zi as SessionMessage, Zt as ForkIdempotency, _n as IntelligenceReport, aa as SnapshotInfo, an as GitStatus, ba as TeeAttestationResponse, bi as SandboxShape, d as BackendConfig, dn as GpuLeaseManager, dr as Rollout, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, fi as SandboxPortBinding, ga as TaskSessionInfo, gn as InstalledTool, gt as EventStreamOptions, hi as SandboxResourceUsage, hr as RolloutStartResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, jn as NetworkManager, ki as SandboxTerminals, kr as SandboxEvent, la as StartupDiagnostics, lr as RestoreSnapshotOptions, ma as TaskSessionCommitResult, na as SnapshotDeleteAcknowledgement, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pr as RolloutOptions, pt as EgressManager, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, sa as SnapshotResult, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxInfo, ur as ResumeOptions, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, wi as SandboxTerminalAttachOptions, wr as SandboxDeleteAcknowledgement, xn as IntelligenceReportWindow, xr as SandboxConnection, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, zi as SendSessionMessageOptions } from "./types-Di0cLhOV.js";
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { r as InteractiveAttachRequest } from "./interactive-controller-ykaThYp6.js";
-import { R as SandboxLines } from "./lines-CJK_ysel.js";
+import { R as SandboxLines } from "./lines-d9AEcbCd.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
@@ -1124,10 +1124,11 @@ declare class SandboxInstance {
   private buildRunBackendBody;
   streamPrompt(message: string | PromptInputPart[], requestedOptions?: PromptOptions): AsyncGenerator<SandboxEvent>;
   /**
-   * Inner prompt stream: opens the SSE connection and reconnects on silent
-   * drops. May throw (pre-stream HTTP error, timeout, reconnect exhausted);
-   * the public `streamPrompt` wrapper converts those throws into a terminal
-   * `error` + `done` so callers never see a thrown generator.
+   * Inner prompt stream: opens the SSE connection and rejoins the execution's
+   * event log on silent drops. May throw (pre-stream HTTP error, timeout, or
+   * `StreamInterruptedError` when it cannot rejoin); the public
+   * `streamPrompt` wrapper converts those throws into in-band events so
+   * callers never see a thrown generator.
    */
   private streamPromptInner;
   /**

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-DaQYTQXD.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-Dv77g3s5.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-t-VT4qL1.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-9TwNLIs5.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-t-VT4qL1.js → tangle-9TwNLIs5.js}

@@ -1,5 +1,5 @@
-import { b as readResponseJson } from "./errors-C1c3Q6Bj.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-CmYUc66b.js";
+import { x as readResponseJson } from "./errors-DMxVFCS6.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-C42UAlFT.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-ChcSLv53.js";
 //#region src/tangle/abi.ts
 /**

package/dist/{types-DwHQuPFG.d.ts → types-Di0cLhOV.d.ts}

@@ -2991,6 +2991,12 @@ type PromptInputPart = {
 interface PromptOptions {
   /** Session ID for conversation continuity */
   sessionId?: string;
+  /** Resume one native conversation from the verified source snapshot. */
+  nativeResume?: {
+    harness: "claude-code" | "codex";
+    nativeSessionId: string;
+    sourceCheckpointId: string;
+  };
   /**
    * Per-turn model id, forwarded to the runtime as `backend.model.model`.
    * Accepts a provider-prefixed slug ("zai/glm-4.7", "openai/gpt-5-mini")
@@ -3091,16 +3097,32 @@ interface PromptOptions {
    */
   turnId?: string;
   /**
-   * Detach the run from this stream's lifetime. When true, dropping the
-   * SSE connection (closing the generator, an isolate restart, a network
-   * blip) does NOT cancel the run: the platform keeps executing it and
-   * buffers its events so a later reconnect can replay. Use for batch or
-   * queue workloads where a long quiet run (repo clone + test suite) must
-   * survive transient stream drops. Omit for interactive chat where
-   * closing the tab should stop burning tokens. `dispatchPrompt` always
-   * sets this so fire-and-detach is safe by construction.
+   * Detach the run from this stream's lifetime. When true, the run never
+   * ends because a reader went away: closing the generator does not cancel
+   * it, and the platform keeps executing it and buffering its events so a
+   * later reconnect can replay. Use for batch or queue workloads.
+   *
+   * Without it, ending the stream early (breaking out of the loop, aborting
+   * `signal`, or letting `timeoutMs` elapse) cancels the run. A dropped
+   * connection does not: the platform keeps an interactive run through a
+   * disconnect grace window so this stream can rejoin it.
+   * `dispatchPrompt` always sets this so fire-and-detach is safe by
+   * construction.
    */
   detach?: boolean;
+  /**
+   * How long the SDK keeps rejoining this execution while it is unreachable,
+   * in milliseconds. A dropped stream is a transport event, not an outcome:
+   * the SDK reconnects with capped exponential backoff (1s doubling to 30s)
+   * and resumes after the last delivered event, without duplicates. Each
+   * replay connection that reaches the execution restarts the window, so a
+   * long run survives any number of platform deploys. When the window
+   * elapses, or the sandbox stops, the stream ends with an `error` event
+   * whose `code` is `STREAM_INTERRUPTED` and `outcome` is `unknown`, and no
+   * `done`: rejoin later with `executionId` + `lastEventId`.
+   * Default six hours; 0 disables reconnection.
+   */
+  reconnectWindowMs?: number;
 }
 /**
  * SSE event from sandbox streaming.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.25",
+  "version": "0.60.26-develop.20261008100338.fdb71c8",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -149,12 +149,12 @@
     "vitest": "^4.1.11",
     "ws": "^8.20.0",
     "yjs": "13.6.30",
-    "@products/sandbox-test-utils": "0.0.0",
-    "@repo/shared": "0.0.0",
     "@tangle-network/agent-profile-materialize": "0.22.0",
     "@tangle-network/cli-agent-registry": "0.6.2",
     "@tangle-network/runtime-contracts": "0.16.0",
+    "@repo/shared": "0.0.0",
     "@tangle-network/sdk": "4.0.3",
+    "@products/sandbox-test-utils": "0.0.0",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {