@tangle-network/sandbox 0.60.25 → 0.60.26-develop.20261008101636.48f71b4

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
-import { D as parseSSEStream, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, R as deriveAgentResultOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-DtX6fHC6.js";
-import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as TimeoutError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-JaupThcm.js";
+import { B as projectAgentTerminalRecord, D as parseSSEStream, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, R as deriveAgentResultOutcome, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-4Fo9aDih.js";
+import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as StreamInterruptedError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-DMxVFCS6.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-B4ehn1iw.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-CmYUc66b.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-C42UAlFT.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CFe2H--1.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-D15xoinI.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-C2SuT1zK.js";
-import { s as TangleSandboxClient } from "./tangle-t-VT4qL1.js";
+import { s as TangleSandboxClient } from "./tangle-9TwNLIs5.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts
@@ -659,6 +659,7 @@ const backendSchema = z.strictObject({
 	}).optional(),
 	metadata: z.strictObject({
 		containerType: nonEmptyStringSchema.optional(),
+		profileSecretIsolation: z.literal(true).optional(),
 		traceAttributes: envSchema.optional()
 	}).optional()
 });
@@ -1481,4 +1482,4 @@ function stripUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0).map(([k, v]) => [k, stripUndefined(v)]));
 }
 //#endregion
-export { ALL_BACKEND_TYPES, AuthError, BrowserInteractiveSessionControlController, BrowserInteractiveSessionController, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, CollaborationClient, CollaborationFileBridge, DEFAULT_SANDBOX_SIZE, EdgeNotReadyError, EgressProxyRecoveryError, FileWriteConflictError, GPU_LEASE_PROVIDER_NAMES, HostedInstance, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, ImageBuilder, InstanceRestartingError, InstancesClient, IntelligenceClient, InteractiveSessionControlController, InteractiveSessionController, InteractiveSessionHandle, InteractiveSessionNotRunningError, InteractiveTerminalFrameLog, KeyBudgetExhaustedError, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, LinesClient, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, ManagedProcessClient, NetworkError, NotFoundError, PartialFailureError, QuotaError, ResumeEnvRequiredError, RunsClient, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, Sandbox, SandboxError, SandboxFleet, SandboxFleetClient, SandboxInstance, SandboxLines, SandboxSession, SandboxTaskSession, ServerError, StateError, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, TerminalStream, TerminalStreamError, TimeoutError, ValidationError, WorkspaceImages, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, lineInstanceKey, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseLineApplicationRequest, parseLineApplicationResult, parseSSEStream, profileChannelReference, requestedPublicProfileDigest, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { ALL_BACKEND_TYPES, AuthError, BrowserInteractiveSessionControlController, BrowserInteractiveSessionController, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, CollaborationClient, CollaborationFileBridge, DEFAULT_SANDBOX_SIZE, EdgeNotReadyError, EgressProxyRecoveryError, FileWriteConflictError, GPU_LEASE_PROVIDER_NAMES, HostedInstance, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, ImageBuilder, InstanceRestartingError, InstancesClient, IntelligenceClient, InteractiveSessionControlController, InteractiveSessionController, InteractiveSessionHandle, InteractiveSessionNotRunningError, InteractiveTerminalFrameLog, KeyBudgetExhaustedError, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, LinesClient, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, ManagedProcessClient, NetworkError, NotFoundError, PartialFailureError, QuotaError, ResumeEnvRequiredError, RunsClient, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, Sandbox, SandboxError, SandboxFleet, SandboxFleetClient, SandboxInstance, SandboxLines, SandboxSession, SandboxTaskSession, ServerError, StateError, StreamInterruptedError, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, TerminalStream, TerminalStreamError, TimeoutError, ValidationError, WorkspaceImages, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, lineInstanceKey, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseLineApplicationRequest, parseLineApplicationResult, parseSSEStream, profileChannelReference, projectAgentTerminalRecord, requestedPublicProfileDigest, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/intelligence/index.js

@@ -1,4 +1,4 @@
-import { c as NetworkError, g as TimeoutError, v as parseErrorResponse } from "../errors-C1c3Q6Bj.js";
+import { _ as TimeoutError, c as NetworkError, y as parseErrorResponse } from "../errors-DMxVFCS6.js";
 //#region src/intelligence/index.ts
 /**
 * `@tangle-network/sandbox/intelligence` — browser-safe typed client for the

package/dist/{interactive-controller-DtX6fHC6.js → interactive-controller-4Fo9aDih.js}

@@ -1,5 +1,5 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { _ as ValidationError, c as NetworkError, d as QuotaError, g as TimeoutError, m as ServerError, n as CapabilityError, p as SandboxError, v as parseErrorResponse, y as parseResponseError } from "./errors-C1c3Q6Bj.js";
+import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, m as ServerError, n as CapabilityError, p as SandboxError, v as ValidationError, y as parseErrorResponse } from "./errors-DMxVFCS6.js";
 import { c as assertInteractiveSessionRef, d as awaitWithAbort, f as combineAbortSignals, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, r as browserInteractiveTerminalEndpoint } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { AgentExactRunControlRefSchema, AgentExecutionOutcomeSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionRefSchema, AgentRuntimeAttachmentsSchema, DurablePlanSchema, InteractionRequestSchema, agentInteractiveSessionControlClaimMatchesRef, agentProfileSchema, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -18,6 +18,40 @@ function parsePlan(value) {
 	const parsed = DurablePlanSchema.safeParse(value);
 	return parsed.success ? parsed.data : void 0;
 }
+/** Validate the bounded approval summary carried without cumulative tool history. */
+function parseApproval(value) {
+	const record = plainRecord(value);
+	if (!record || Object.keys(record).some((key) => key !== "message" && key !== "approvalId" && key !== "connectionId")) return void 0;
+	const approval = {};
+	for (const key of [
+		"message",
+		"approvalId",
+		"connectionId"
+	]) {
+		if (record[key] === void 0) continue;
+		const value = readString(record[key]);
+		if (!value || value.length > (key === "message" ? 4096 : 512)) return void 0;
+		approval[key] = value;
+	}
+	return approval;
+}
+/** Inspect outcome markers without copying potentially large tool inputs and outputs. */
+function inspectTerminalToolOutcomes(value) {
+	if (!Array.isArray(value)) return { malformed: true };
+	const tools = [];
+	for (const entry of value) {
+		const tool = plainRecord(entry);
+		const toolName = readString(tool?.toolName);
+		if (!tool || !toolName || tool.isError !== void 0 && typeof tool.isError !== "boolean") return { malformed: true };
+		if (tool.isError === true && typeof tool.result === "string" && new TextEncoder().encode(tool.result).byteLength > MAX_SERIALIZED_TOOL_VALUE_BYTES) return { malformed: true };
+		tools.push({
+			toolName,
+			isError: tool.isError === true,
+			result: tool.result
+		});
+	}
+	return inspectToolOutcomes(tools);
+}
 function parseToolInvocations(value) {
 	if (!Array.isArray(value)) return void 0;
 	const result = [];
@@ -172,6 +206,53 @@ function deriveAgentResultOutcome(result) {
 	observeOutcomeFrame(state, "result", result, true);
 	return settleOutcome(state);
 }
+/** Keep terminal outcome evidence while omitting cumulative tool history. */
+function projectAgentTerminalRecord(record) {
+	const { toolInvocations, ...terminal } = record;
+	const nested = plainRecord(record.result);
+	const { toolInvocations: nestedTools, approval: nestedApproval, ...nestedTerminal } = nested ?? {};
+	const summary = inspectTerminalApproval(record);
+	if (summary.malformed) throw new Error("Agent terminal approval summary is malformed or conflicting");
+	return {
+		...terminal,
+		...nested === void 0 ? {} : { result: nestedTerminal },
+		...summary.approval === void 0 ? {} : { approval: summary.approval }
+	};
+}
+function inspectTerminalApproval(record, prior) {
+	const nested = plainRecord(record.result);
+	const inspections = [record.toolInvocations, nested?.toolInvocations].filter((value) => value !== void 0).map(inspectTerminalToolOutcomes);
+	if (inspections.some((inspection) => inspection.malformed)) return { malformed: true };
+	return mergeApprovalCandidates([
+		prior,
+		record.approval,
+		nested?.approval,
+		...inspections.map((inspection) => inspection.approval)
+	]);
+}
+function mergeApprovalCandidates(candidates) {
+	let approval;
+	for (const candidate of candidates) {
+		if (candidate === void 0) continue;
+		const next = parseApproval(candidate);
+		if (!next || approval && !sameApproval(approval, next)) return { malformed: true };
+		approval = {
+			...approval,
+			...next
+		};
+	}
+	return {
+		approval,
+		malformed: false
+	};
+}
+function sameApproval(left, right) {
+	return [
+		"message",
+		"approvalId",
+		"connectionId"
+	].every((key) => left[key] === void 0 || right[key] === void 0 || left[key] === right[key]);
+}
 function createOutcomeState() {
 	return {
 		terminalReached: false,
@@ -273,9 +354,9 @@ function observeOutcomeFrame(state, type, data, terminal) {
 		if (invocations) retainToolInvocations(state, invocations);
 		else state.malformed = true;
 	}
-	const toolOutcome = inspectToolOutcomes(state.toolInvocations);
-	if (toolOutcome.malformed) state.malformed = true;
-	state.approval = toolOutcome.approval;
+	const summary = inspectTerminalApproval(data, state.approval);
+	if (summary.malformed) state.malformed = true;
+	else state.approval = summary.approval;
 }
 function settleOutcome(state) {
 	const common = outcomeDetails(state);
@@ -415,6 +496,19 @@ function publicProfileRequestDigest(backend) {
 		backend: JSON.parse(JSON.stringify(backend))
 	});
 }
+/** Bind public controls for an isolated turn while private auth stays on wire. */
+function secretProfilePublicRequestDigest(backend) {
+	const { runtimeSecrets: _runtimeSecrets, metadata: _metadata, model, ...publicBackend } = backend;
+	if (!model || typeof model !== "object" || Array.isArray(model)) return publicProfileRequestDigest({
+		...publicBackend,
+		model
+	});
+	const { apiKey: _apiKey, authFiles: _authFiles, cliAuth: _cliAuth, ...publicModel } = model;
+	return publicProfileRequestDigest({
+		...publicBackend,
+		model: publicModel
+	});
+}
 //#endregion
 //#region src/backend-config.ts
 function assertCurrentBackendType(value, field = "backend.type") {
@@ -607,8 +701,7 @@ function requestedPublicProfileDigest(backend) {
 }
 /** Digest public profile controls while private turn fields remain on wire. */
 function requestedSecretProfilePublicDigest(backend) {
-	const { runtimeSecrets: _turnOnly, metadata: _private, ...publicBackend } = normalizeRuntimeBackendConfig(backend, { allowRuntimeSecrets: true }) ?? {};
-	return publicProfileRequestDigest(publicBackend);
+	return secretProfilePublicRequestDigest(normalizeRuntimeBackendConfig(backend, { allowRuntimeSecrets: true }) ?? {});
 }
 //#endregion
 //#region ../../../packages/sse-core/dist/index.js
@@ -2644,4 +2737,4 @@ var BrowserInteractiveSessionController = class extends InteractiveSessionContro
 	}
 };
 //#endregion
-export { foldModelRoutingFields as A, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, withProfileHarness as F, withoutRuntimeSecrets as I, createAgentRunOutcomeTracker as L, normalizeRuntimeBackendConfig as M, requestedPublicProfileDigest as N, applyRequestedModel as O, requestedSecretProfilePublicDigest as P, deriveAgentResultOutcome as R, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, mergeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y, deriveAgentRunOutcome as z };
+export { foldModelRoutingFields as A, projectAgentTerminalRecord as B, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, withProfileHarness as F, withoutRuntimeSecrets as I, createAgentRunOutcomeTracker as L, normalizeRuntimeBackendConfig as M, requestedPublicProfileDigest as N, applyRequestedModel as O, requestedSecretProfilePublicDigest as P, deriveAgentResultOutcome as R, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, mergeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y, deriveAgentRunOutcome as z };

package/dist/{lines-CJK_ysel.d.ts → lines-d9AEcbCd.d.ts}

@@ -1,4 +1,4 @@
-import { B as CreateSandboxOptions, d as BackendConfig } from "./types-DwHQuPFG.js";
+import { B as CreateSandboxOptions, d as BackendConfig } from "./types-Di0cLhOV.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */
@@ -75,7 +75,7 @@ declare function parseLineApplicationResult(value: unknown, request: Pick<LineAp
 //#endregion
 //#region src/lines.d.ts
 /** The transport a line carries. */
-type LineTransport = "imessage" | "sms" | "whatsapp" | "email";
+type LineTransport = "imessage" | "sms" | "whatsapp" | "email" | "voice";
 /** What a role's members share and may do in the attached sandbox. */
 interface LineRole {
   /** `shared`: the member's turns see other shared members' recent exchanges. `own`: they see none, and nobody sees theirs. */
@@ -119,6 +119,11 @@ interface LineMemberSpec {
   /** This member's allowance subject; requires limits.allowance.perMember.
    * The payer never determines the private workspace identity. */
   allowance?: LineAllowanceSubject;
+  /** Required for a ph0ny voice line: an owner attestation to this phone member's prior consent. */
+  voiceConsent?: {
+    recordedAt: string;
+    sourceRef: string;
+  };
 }
 /** Per-attachment bounds. */
 interface LineLimits {
@@ -356,6 +361,9 @@ type LineFromConnectionInput = LineFromConnectionCommon & ({
 } | {
   transport: "whatsapp";
   phoneNumberId: string;
+} /** An already-owned ph0ny number; Hub admission is enabled separately. */ | {
+  transport: "voice";
+  phoneNumberId: string;
 });
 /** Fields a member update may change. */
 interface LineSendInput {
@@ -469,14 +477,18 @@ interface LineVoice {
   state: "enabling" | "enabled" | "disabled";
   ph0nyConnectionId: string;
   ph0nyAgentId: string;
+  /** The owned ph0ny number that answers through this line, when Twilio carries voice. */
+  ph0nyPhoneNumberId?: string | null;
   updatedAt: string;
 }
 /** Input to `client.lines.enableVoice()`. */
 interface LineVoiceOptions {
   /** Your ph0ny Hub connection (provider `phony`). */
   ph0nyConnectionId: string;
-  /** The ph0ny agent that voices the calls; Hub adds its `ask_workspace` tool. */
+  /** The ph0ny agent that voices the calls. Inkbox voice adds `ask_workspace`. */
   ph0nyAgentId: string;
+  /** Bind this owned ph0ny number to any active Hub line's member and attachment rules. */
+  ph0nyPhoneNumberId?: string;
 }
 interface Line {
   id: string;
@@ -487,6 +499,8 @@ interface Line {
   connect: string | null;
   routerAddress: string | null;
   connectionId: string;
+  /** Hub provider owning this line, such as `inkbox` or `linq-whatsapp`. Older servers may omit it; never infer it from transport or address. */
+  providerId?: string;
   /** The provider's phone number id, or null for a line without a pinned number. */
   providerNumberId: string | null;
   /** Null means Hub has no verified workspace binding for this line. */
@@ -596,9 +610,11 @@ declare class LinesClient {
    */
   release(number: string): Promise<boolean>;
   /**
-   * Take calls on a line (Inkbox iMessage lines). Hub points the identity's
-   * incoming calls at itself, binds the ph0ny agent to the line and adds the
-   * agent's `ask_workspace` tool. Enabling again replaces every credential.
+   * Take calls for an active Hub line. Without a phone number ID, the line
+   * must be Inkbox iMessage; Hub changes its call action and adds
+   * `ask_workspace` to the agent. With an owned ph0ny phone number ID, Hub
+   * binds that Twilio number to the line's admission hook and leaves the
+   * line's provider call settings unchanged.
    */
   enableVoice(lineId: string, options: LineVoiceOptions): Promise<Line>;
   /** Stop taking calls on a line: Hub refuses them and Inkbox rejects them. */

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CJK_ysel.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-d9AEcbCd.js";
 export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/lines.js

@@ -1,4 +1,4 @@
-import { _ as ValidationError, v as parseErrorResponse } from "./errors-C1c3Q6Bj.js";
+import { v as ValidationError, y as parseErrorResponse } from "./errors-DMxVFCS6.js";
 //#region src/lines.ts
 /**
 * Lines: give a sandbox a phone number or messaging address.
@@ -185,16 +185,19 @@ var LinesClient = class {
 		return (await hubData(await this.http.fetch(`/v1/lines/${encodeURIComponent(lineId)}`, { method: "DELETE" }))).released;
 	}
 	/**
-	* Take calls on a line (Inkbox iMessage lines). Hub points the identity's
-	* incoming calls at itself, binds the ph0ny agent to the line and adds the
-	* agent's `ask_workspace` tool. Enabling again replaces every credential.
+	* Take calls for an active Hub line. Without a phone number ID, the line
+	* must be Inkbox iMessage; Hub changes its call action and adds
+	* `ask_workspace` to the agent. With an owned ph0ny phone number ID, Hub
+	* binds that Twilio number to the line's admission hook and leaves the
+	* line's provider call settings unchanged.
 	*/
 	async enableVoice(lineId, options) {
 		return (await hubData(await this.http.fetch(`/v1/lines/${encodeURIComponent(lineId)}`, json("PATCH", { voice: {
 			enabled: true,
 			ph0ny: {
 				connectionId: options.ph0nyConnectionId,
-				agentId: options.ph0nyAgentId
+				agentId: options.ph0nyAgentId,
+				...options.ph0nyPhoneNumberId ? { phoneNumberId: options.ph0nyPhoneNumberId } : {}
 			}
 		} })))).line;
 	}

package/dist/{local-cli-auth-Ch35WOLn.js → local-cli-auth-CwrrtpaB.js}

@@ -1,4 +1,4 @@
-import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-xnHi1LpC.js";
+import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-CZfgymgf.js";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/dist/{preview-BM4uaIvf.d.ts → preview-CCAwjkRr.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-C-MO0nYW.js";
-import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-DwHQuPFG.js";
-import { i as Sandbox } from "./client-BFOltIeq.js";
+import { r as SandboxInstance } from "./sandbox-CSFajXr_.js";
+import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-Di0cLhOV.js";
+import { i as Sandbox } from "./client-DqA0N91W.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/runtime.d.ts

@@ -1,9 +1,9 @@
-import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SendSessionMessageRequest, Cn as ListMessagesOptions, Di as SandboxTerminalManager, Ei as SandboxTerminalInfo, Gi as SessionExecutionStatus, H as CreateTaskSessionOptions, Ji as SessionInfo, Mt as FileWriteResult, Na as WriteFileOptions, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, Ot as FileTreeOptions, Qi as SessionMessageAdmission, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalCreateOptions, Tt as FileRenameResult, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Zi as SessionMessage, cr as RenameOptions, fi as SandboxPortBinding, ga as TaskSessionInfo, jt as FileUsageResult, kr as SandboxEvent, kt as FileTreeResult, ma as TaskSessionCommitResult, pa as TaskSessionChanges, w as ChunkedUploadOptions, xt as FileReadBatchOptions, yi as SandboxRuntimeHealth, zi as SendSessionMessageOptions } from "./types-DwHQuPFG.js";
+import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SendSessionMessageRequest, Cn as ListMessagesOptions, Di as SandboxTerminalManager, Ei as SandboxTerminalInfo, Gi as SessionExecutionStatus, H as CreateTaskSessionOptions, Ji as SessionInfo, Mt as FileWriteResult, Na as WriteFileOptions, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, Ot as FileTreeOptions, Qi as SessionMessageAdmission, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalCreateOptions, Tt as FileRenameResult, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Zi as SessionMessage, cr as RenameOptions, fi as SandboxPortBinding, ga as TaskSessionInfo, jt as FileUsageResult, kr as SandboxEvent, kt as FileTreeResult, ma as TaskSessionCommitResult, pa as TaskSessionChanges, w as ChunkedUploadOptions, xt as FileReadBatchOptions, yi as SandboxRuntimeHealth, zi as SendSessionMessageOptions } from "./types-Di0cLhOV.js";
 import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
 import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
 import { t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
-import { _ as TimeoutError, a as FileWriteConflictError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, v as ValidationError } from "./errors-DS32ViPj.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-BMRvIstg.js";
+import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-BXMXbVFO.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-D5VVd5Ei.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}
@@ -135,4 +135,4 @@ declare class SandboxRuntimeClient extends SandboxRuntimeApi {
 }
 declare function createSandboxRuntimeClient(config: SandboxRuntimeClientConfig): SandboxRuntimeClient;
 //#endregion
-export { type AgentRunOutcome, type AgentRunOutcomeTracker, AuthError, BrowserInteractiveSessionController, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type ChunkedUploadTransport, type FileReadBatchOptions, type FileReadBatchResult, type FileRenameResult, type FileTreeOptions, type FileTreeResult, FileWriteConflictError, type FileWriteResult, type InteractiveSessionIdentity, InteractiveSessionNotRunningError, type ListMessagesOptions, NetworkError, NotFoundError, PartialFailureError, QuotaError, type RenameOptions, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxRuntimeClient, type SandboxRuntimeClientConfig, type SandboxRuntimeHealth, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type ScopedToken, ServerError, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionMessage, type SessionMessageAdmission, StateError, type TerminalStream, TimeoutError, type UploadProgress, ValidationError, type WriteFileOptions, browserInteractiveControlHolderId, createAgentRunOutcomeTracker, createSandboxRuntimeClient, deriveAgentResultOutcome, deriveAgentRunOutcome, uploadChunked };
+export { type AgentRunOutcome, type AgentRunOutcomeTracker, AuthError, BrowserInteractiveSessionController, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type ChunkedUploadTransport, type FileReadBatchOptions, type FileReadBatchResult, type FileRenameResult, type FileTreeOptions, type FileTreeResult, FileWriteConflictError, type FileWriteResult, type InteractiveSessionIdentity, InteractiveSessionNotRunningError, type ListMessagesOptions, NetworkError, NotFoundError, PartialFailureError, QuotaError, type RenameOptions, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxRuntimeClient, type SandboxRuntimeClientConfig, type SandboxRuntimeHealth, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type ScopedToken, ServerError, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionMessage, type SessionMessageAdmission, StateError, type TerminalStream, TimeoutError, type UploadProgress, ValidationError, type WriteFileOptions, browserInteractiveControlHolderId, createAgentRunOutcomeTracker, createSandboxRuntimeClient, deriveAgentResultOutcome, deriveAgentRunOutcome, projectAgentTerminalRecord, uploadChunked };

package/dist/runtime.js

@@ -1,5 +1,5 @@
-import { L as createAgentRunOutcomeTracker, R as deriveAgentResultOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-DtX6fHC6.js";
-import { _ as ValidationError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, g as TimeoutError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError } from "./errors-C1c3Q6Bj.js";
+import { B as projectAgentTerminalRecord, L as createAgentRunOutcomeTracker, R as deriveAgentResultOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-4Fo9aDih.js";
+import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-DMxVFCS6.js";
 import { f as combineAbortSignals, n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BJf0P_J4.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
@@ -81,4 +81,4 @@ function createSandboxRuntimeClient(config) {
 	return new SandboxRuntimeClient(config);
 }
 //#endregion
-export { AuthError, BrowserInteractiveSessionController, CapabilityError, FileWriteConflictError, InteractiveSessionNotRunningError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxError, SandboxRuntimeClient, ServerError, StateError, TimeoutError, ValidationError, browserInteractiveControlHolderId, createAgentRunOutcomeTracker, createSandboxRuntimeClient, deriveAgentResultOutcome, deriveAgentRunOutcome, uploadChunked };
+export { AuthError, BrowserInteractiveSessionController, CapabilityError, FileWriteConflictError, InteractiveSessionNotRunningError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxError, SandboxRuntimeClient, ServerError, StateError, TimeoutError, ValidationError, browserInteractiveControlHolderId, createAgentRunOutcomeTracker, createSandboxRuntimeClient, deriveAgentResultOutcome, deriveAgentRunOutcome, projectAgentTerminalRecord, uploadChunked };