@tangle-network/sandbox 0.60.31 → 0.60.32

package/dist/{interactive-controller-CvW2-UfM.js → interactive-controller-Dxt5sW2N.js}

@@ -1,6 +1,7 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, m as ServerError, n as CapabilityError, p as SandboxError, v as ValidationError, y as parseErrorResponse } from "./errors-Cq4hMysQ.js";
+import { b as parseResponseError, c as NetworkError, m as ServerError, n as CapabilityError, p as SandboxError, v as ValidationError } from "./errors-Cq4hMysQ.js";
 import { c as assertInteractiveSessionRef, d as awaitWithAbort, f as combineAbortSignals, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, r as browserInteractiveTerminalEndpoint } from "./browser-interactive-control-controller-BJf0P_J4.js";
+import { s as uploadChunked } from "./chunked-upload-CfefWUE5.js";
 import { AgentExactRunControlRefSchema, AgentExecutionOutcomeSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionRefSchema, AgentRuntimeAttachmentsSchema, DurablePlanSchema, InteractionRequestSchema, agentInteractiveSessionControlClaimMatchesRef, agentProfileSchema, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/agent-run-outcome-inspection.ts
@@ -934,63 +935,6 @@ function encodePromptForWire(message) {
 	} : part);
 }
 //#endregion
-//#region ../../../packages/runtime-contracts/dist/file-limits.js
-const MEBIBYTE$1 = 1024 * 1024;
-10 * MEBIBYTE$1;
-const FILE_DECODED_WRITE_MAX_BYTES = 5 * MEBIBYTE$1;
-5 * MEBIBYTE$1;
-10 * MEBIBYTE$1;
-5 * MEBIBYTE$1;
-//#endregion
-//#region ../../../packages/runtime-contracts/dist/request-limits.js
-/**
-* Raw WIRE/TRANSPORT caps: request-byte limits checked while the body
-* streams in (bodyLimit middleware, Content-Length, encoded proxy bodies),
-* before anything is parsed or decoded. Rejections against these carry
-* code `PAYLOAD_TOO_LARGE` (`payload-too-large.ts`) — the remedy is to
-* split the delivery. Decoded/parsed-content caps (code `FILE_TOO_LARGE`)
-* live in `file-io.ts`.
-*/
-const MEBIBYTE = 1024 * 1024;
-/**
-* Gateway (CF Worker) proxy cap on any request body it forwards — both
-* pass-through requests and route-constructed (`options.body`) proxy
-* payloads. Workers buffer forwarded bodies (streaming upstream stalls),
-* so this bounds Worker memory per request.
-*/
-const SANDBOX_PROXY_REQUEST_MAX_BYTES = MEBIBYTE;
-32 * MEBIBYTE;
-/**
-* Max assembled size of one chunked-upload session — the ceiling of the
-* sanctioned >1 MiB delivery path. Parts stage in sidecar memory until
-* commit, so this bounds per-session memory, not the destination
-* filesystem.
-*/
-const FILE_UPLOAD_SESSION_MAX_BYTES = 64 * MEBIBYTE;
-128 * MEBIBYTE;
-//#endregion
-//#region ../../../packages/runtime-contracts/dist/size-limit-errors.js
-/** Canonical error codes for wire-size and decoded-content rejections. */
-const PAYLOAD_TOO_LARGE_CODE = "PAYLOAD_TOO_LARGE";
-const FILE_TOO_LARGE_CODE = "FILE_TOO_LARGE";
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function isPositiveInteger(value) {
-	return typeof value === "number" && Number.isInteger(value) && value > 0;
-}
-function isSizeLimitErrorBodyFor(value, code) {
-	if (!isRecord(value) || value.success !== false || !isRecord(value.error)) return false;
-	const error = value.error;
-	return error.code === code && typeof error.message === "string" && typeof error.surface === "string" && isPositiveInteger(error.limitBytes) && (error.actualBytes === void 0 || isPositiveInteger(error.actualBytes));
-}
-function isPayloadTooLargeErrorBody(value) {
-	return isSizeLimitErrorBodyFor(value, PAYLOAD_TOO_LARGE_CODE);
-}
-function isFileTooLargeErrorBody(value) {
-	return isSizeLimitErrorBodyFor(value, FILE_TOO_LARGE_CODE);
-}
-//#endregion
 //#region src/dispatch-run-control.ts
 const DISPATCH_RUN_PROVIDER = "tangle-sandbox";
 function generateRuntimeId(prefix) {
@@ -1042,238 +986,6 @@ function validateAcceptedDispatchRunRef(raw, expected, sandboxId, sessionId, exe
 	return accepted;
 }
 //#endregion
-//#region src/lib/chunked-upload.ts
-/**
-* Chunked upload — the sanctioned SDK path for delivering payloads larger
-* than the sandbox API's single-request body caps. Splits the payload into
-* server-sized parts against a `/fs/upload-session` session, PUTs each part
-* with transient retry, then commits with a whole-payload SHA-256 so the
-* runtime can verify nothing was dropped or reordered in transit.
-*
-* Browser/Worker-safe: no `node:` imports, no `Buffer`. Input normalizes to
-* a `Uint8Array` and hashes via Web Crypto (`crypto.subtle`), available in
-* browsers, Workers, and Node 18+ — the same environments this module must
-* run in unmodified.
-*/
-const DEFAULT_MAX_RETRIES = 4;
-const RETRY_BASE_MS = 250;
-const RETRY_MAX_MS = 2e3;
-const delay = (ms, signal) => new Promise((resolve, reject) => {
-	if (signal?.aborted) {
-		reject(signal.reason ?? /* @__PURE__ */ new Error("aborted"));
-		return;
-	}
-	const timer = setTimeout(() => {
-		signal?.removeEventListener("abort", onAbort);
-		resolve();
-	}, ms);
-	function onAbort() {
-		clearTimeout(timer);
-		reject(signal?.reason ?? /* @__PURE__ */ new Error("aborted"));
-	}
-	signal?.addEventListener("abort", onAbort, { once: true });
-});
-/** Transient part-upload failures worth retrying: rate-limit/budget (429),
-*  5xx, transport (network), and request timeouts — mirrors
-*  `isTransientWriteError` in `sandbox.ts`. A non-transient error (bad path,
-*  auth, checksum, containment) fails loud immediately. */
-function isTransientUploadError(err) {
-	return err instanceof QuotaError || err instanceof ServerError || err instanceof NetworkError || err instanceof TimeoutError;
-}
-function isChecksumMismatch(err) {
-	return err instanceof SandboxError && err.code === "CHECKSUM_MISMATCH";
-}
-/** Cheap size probe used for the pre-flight cap check, read directly off
-*  the input shape (`Blob.size` / `ArrayBuffer.byteLength` / view
-*  `byteLength`) so an oversized `Blob` never has its bytes materialized
-*  just to be rejected. Strings have no cheap length in UTF-8, so they're
-*  encoded once here (and once more in {@link normalizeToBytes} — an
-*  acceptable cost given strings are never the multi-MB case this path
-*  exists for). */
-function sizeOfInput(data) {
-	if (typeof data === "string") return new TextEncoder().encode(data).byteLength;
-	if (data instanceof ArrayBuffer) return data.byteLength;
-	if (ArrayBuffer.isView(data)) return data.byteLength;
-	return data.size;
-}
-/**
-* Normalizes to a `Uint8Array` backed by a plain (never shared)
-* `ArrayBuffer`. A caller-supplied view may be backed by a
-* `SharedArrayBuffer`, which `crypto.subtle.digest` and `fetch`'s
-* `BodyInit` both reject at the type level (and some engines reject at
-* runtime) — copying here keeps every downstream call on one concrete,
-* always-accepted buffer type.
-*/
-async function normalizeToBytes(data) {
-	if (typeof data === "string") return new Uint8Array(new TextEncoder().encode(data));
-	if (data instanceof ArrayBuffer) return new Uint8Array(data.slice(0));
-	if (ArrayBuffer.isView(data)) {
-		const copy = new Uint8Array(data.byteLength);
-		copy.set(new Uint8Array(data.buffer, data.byteOffset, data.byteLength));
-		return copy;
-	}
-	return new Uint8Array(await data.arrayBuffer());
-}
-function webCryptoSubtle() {
-	const subtle = globalThis.crypto?.subtle;
-	if (!subtle) throw new Error("chunked upload requires Web Crypto (crypto.subtle) for SHA-256 hashing — available in browsers, Workers, and Node 18+");
-	return subtle;
-}
-async function sha256Hex(bytes) {
-	const digest = await webCryptoSubtle().digest("SHA-256", bytes);
-	return Array.from(new Uint8Array(digest)).map((byte) => byte.toString(16).padStart(2, "0")).join("");
-}
-/**
-* Canonical size-cap bodies (413 `PAYLOAD_TOO_LARGE` / `FILE_TOO_LARGE`)
-* carry `surface`/`limitBytes`/`actualBytes` that the generic error parser
-* drops; fold them into the message before delegating to
-* `parseErrorResponse` for the rest (status→class mapping, retryAfterMs,
-* origin).
-*/
-async function parseUploadError(response) {
-	const bodyText = await response.text();
-	let parsedBody;
-	try {
-		parsedBody = JSON.parse(bodyText);
-	} catch {
-		parsedBody = void 0;
-	}
-	if (isPayloadTooLargeErrorBody(parsedBody) || isFileTooLargeErrorBody(parsedBody)) {
-		const { code, message, surface, limitBytes, actualBytes } = parsedBody.error;
-		const detail = typeof actualBytes === "number" ? `${message} (${surface}: ${actualBytes} of ${limitBytes} bytes)` : `${message} (${surface}: limit ${limitBytes} bytes)`;
-		return parseErrorResponse(response.status, JSON.stringify({
-			code,
-			message: detail
-		}), void 0, response.headers);
-	}
-	return parseErrorResponse(response.status, bodyText, void 0, response.headers);
-}
-async function initUploadSession(transport, remotePath, totalBytes, sha256, mode, signal) {
-	signal?.throwIfAborted();
-	const response = await transport.fetch("/fs/upload-session", {
-		method: "POST",
-		headers: { "Content-Type": "application/json" },
-		body: JSON.stringify({
-			path: remotePath,
-			mode,
-			totalBytes,
-			sha256
-		}),
-		signal
-	});
-	if (!response.ok) throw await parseUploadError(response);
-	return (await response.json()).data;
-}
-async function putPart(transport, uploadId, index, chunk, options) {
-	const maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;
-	for (let attempt = 0;; attempt++) {
-		options.signal?.throwIfAborted();
-		try {
-			const response = await transport.fetch(`/fs/upload-session/${encodeURIComponent(uploadId)}/parts/${index}`, {
-				method: "PUT",
-				headers: { "Content-Type": "application/octet-stream" },
-				body: chunk,
-				signal: options.signal
-			});
-			if (!response.ok) throw await parseUploadError(response);
-			return;
-		} catch (err) {
-			if (isTransientUploadError(err) && attempt < maxRetries) {
-				const retryAfterMs = err instanceof SandboxError ? err.retryAfterMs : void 0;
-				const backoff = Math.min(RETRY_BASE_MS * 2 ** attempt, RETRY_MAX_MS);
-				await delay(retryAfterMs ?? backoff, options.signal);
-				continue;
-			}
-			throw err;
-		}
-	}
-}
-function partCount(totalBytes, partSize) {
-	return Math.ceil(totalBytes / partSize);
-}
-async function uploadAllParts(transport, uploadId, bytes, partSize, totalParts, options) {
-	const totalBytes = bytes.byteLength;
-	const paceMs = options.paceMs ?? 0;
-	let uploadedBytes = 0;
-	let started = false;
-	for (let index = 0; index < totalParts; index++) {
-		if (started && paceMs > 0) await delay(paceMs, options.signal);
-		started = true;
-		const start = index * partSize;
-		const end = Math.min(start + partSize, totalBytes);
-		await putPart(transport, uploadId, index, bytes.subarray(start, end), options);
-		uploadedBytes += end - start;
-		options.onProgress?.({
-			bytesUploaded: uploadedBytes,
-			totalBytes,
-			percentage: totalBytes === 0 ? 100 : Math.round(uploadedBytes / totalBytes * 100)
-		});
-	}
-}
-async function commitSession(transport, uploadId, totalParts, sha256, signal) {
-	signal?.throwIfAborted();
-	const response = await transport.fetch(`/fs/upload-session/${encodeURIComponent(uploadId)}/commit`, {
-		method: "POST",
-		headers: { "Content-Type": "application/json" },
-		body: JSON.stringify({
-			totalParts,
-			sha256
-		}),
-		signal
-	});
-	if (!response.ok) throw await parseUploadError(response);
-	return (await response.json()).data;
-}
-/** Best-effort abort of an in-progress session — never masks the real
-*  failure that triggered it, and never itself throws. An orphaned session
-*  also self-expires server-side (`expiresAt`), so a failed DELETE here is
-*  not a leak, just deferred cleanup. */
-async function abortSession(transport, uploadId) {
-	try {
-		await transport.fetch(`/fs/upload-session/${encodeURIComponent(uploadId)}`, { method: "DELETE" });
-	} catch {}
-}
-/**
-* Upload arbitrary binary or text data to the sandbox via the chunked
-* upload-session protocol, verifying integrity with a whole-payload
-* SHA-256 at commit. Browser/Worker-safe and works identically over the
-* gateway proxy or a direct sidecar connection — see
-* {@link FileSystem.uploadData}.
-*
-* @param transport - Fetch-shaped adapter scoped to the sandbox runtime
-*   (paths are relative to it, e.g. `/fs/upload-session`).
-* @param remotePath - Destination path in the sandbox.
-* @param data - Payload to upload. Strings encode as UTF-8.
-* @param options - See {@link ChunkedUploadOptions}.
-* @throws {SandboxError} `PAYLOAD_TOO_LARGE` immediately (zero requests) if
-*   the payload exceeds {@link FILE_UPLOAD_SESSION_MAX_BYTES}; otherwise the
-*   typed error from whichever step (init/part/commit) failed after retries
-*   are exhausted.
-*/
-async function uploadChunked(transport, remotePath, data, options = {}) {
-	const estimatedSize = sizeOfInput(data);
-	if (estimatedSize > 67108864) throw new SandboxError(`Payload for ${remotePath} is ${estimatedSize} bytes, over the ${FILE_UPLOAD_SESSION_MAX_BYTES} byte chunked-upload session cap`, "PAYLOAD_TOO_LARGE", 413);
-	options.signal?.throwIfAborted();
-	const bytes = await normalizeToBytes(data);
-	options.signal?.throwIfAborted();
-	const sha256 = await sha256Hex(bytes);
-	const init = await initUploadSession(transport, remotePath, bytes.byteLength, sha256, options.mode, options.signal);
-	const totalParts = partCount(bytes.byteLength, init.partSize);
-	try {
-		await uploadAllParts(transport, init.uploadId, bytes, init.partSize, totalParts, options);
-		try {
-			return await commitSession(transport, init.uploadId, totalParts, sha256, options.signal);
-		} catch (err) {
-			if (!isChecksumMismatch(err)) throw err;
-			await uploadAllParts(transport, init.uploadId, bytes, init.partSize, totalParts, options);
-			return await commitSession(transport, init.uploadId, totalParts, sha256, options.signal);
-		}
-	} catch (err) {
-		await abortSession(transport, init.uploadId);
-		throw err;
-	}
-}
-//#endregion
 //#region src/lib/session-id.ts
 const SESSION_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
 function assertValidSessionId(value) {
@@ -2737,4 +2449,4 @@ var BrowserInteractiveSessionController = class extends InteractiveSessionContro
 	}
 };
 //#endregion
-export { foldModelRoutingFields as A, projectAgentTerminalRecord as B, SANDBOX_PROXY_REQUEST_MAX_BYTES as C, parseSSEStream as D, encodeTextForWire as E, withProfileHarness as F, withoutRuntimeSecrets as I, createAgentRunOutcomeTracker as L, normalizeRuntimeBackendConfig as M, requestedPublicProfileDigest as N, applyRequestedModel as O, requestedSecretProfilePublicDigest as P, deriveAgentResultOutcome as R, validateAcceptedDispatchRunRef as S, encodePromptForWire as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, uploadChunked as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, mergeRuntimeBackendConfig as j, assertCurrentBackendType as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, FILE_DECODED_WRITE_MAX_BYTES as w, resolveDispatchRunIdentity as x, sessionHeaders as y, deriveAgentRunOutcome as z };
+export { requestedPublicProfileDigest as A, encodeTextForWire as C, foldModelRoutingFields as D, assertCurrentBackendType as E, deriveAgentResultOutcome as F, deriveAgentRunOutcome as I, projectAgentTerminalRecord as L, withProfileHarness as M, withoutRuntimeSecrets as N, mergeRuntimeBackendConfig as O, createAgentRunOutcomeTracker as P, encodePromptForWire as S, applyRequestedModel as T, resolveTraceId as _, TERMINAL_WS_ECHO_SUBPROTOCOL as a, resolveDispatchRunIdentity as b, requestScopedToken as c, normalizeSessionInfo as d, sessionMessageRequestBody as f, mintTraceId as g, isTraceId as h, TerminalStreamError as i, requestedSecretProfilePublicDigest as j, normalizeRuntimeBackendConfig as k, SandboxRuntimeApi as l, TRACE_ID_HEADER as m, InteractiveSessionController as n, assertScopedTokenActive as o, waitForRetryAfter as p, TerminalStream as r, requestInteractiveSessionToken as s, BrowserInteractiveSessionController as t, isRetryableCredentialRefusal as u, appendSessionIdQuery as v, parseSSEStream as w, validateAcceptedDispatchRunRef as x, sessionHeaders as y };

package/dist/{lines-DCxU0xIV.d.ts → lines-BOWMNDp5.d.ts}

@@ -1,4 +1,4 @@
-import { B as CreateSandboxOptions, d as BackendConfig } from "./types-BeWUGJ5S.js";
+import { B as CreateSandboxOptions, d as BackendConfig } from "./types-i3Vs02b8.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DCxU0xIV.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-BOWMNDp5.js";
 export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{local-cli-auth-Cr1fyoKv.js → local-cli-auth-BWELjBLz.js}

@@ -1,4 +1,4 @@
-import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-BwIJkzAQ.js";
+import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-Dm8w5faq.js";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/dist/{mcp-local-DY1CnWBn.js → mcp-local-DjryqUiY.js}

@@ -1,4 +1,4 @@
-import { a as listAgentPreviews, i as getAgentPreview, o as publishAgentPreview, r as ensureAgentPreview, s as removeAgentPreview, t as AgentPreviewError } from "./preview-operations-CbTiBE-a.js";
+import { a as listAgentPreviews, i as getAgentPreview, o as publishAgentPreview, r as ensureAgentPreview, s as removeAgentPreview, t as AgentPreviewError } from "./preview-operations-DqSo-IBm.js";
 import { createRequire } from "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/{preview-DcT5Fb1W.d.ts → preview-B4yfnMgD.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-CrET4m65.js";
-import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-BeWUGJ5S.js";
-import { i as Sandbox } from "./client-HewG9j9A.js";
+import { r as SandboxInstance } from "./sandbox-WpE5rzUa.js";
+import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-i3Vs02b8.js";
+import { i as Sandbox } from "./client-B6JfkRhc.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/runtime.d.ts

@@ -1,35 +1,10 @@
-import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SendSessionMessageRequest, Cn as ListMessagesOptions, Di as SandboxTerminalManager, Ei as SandboxTerminalInfo, Gi as SessionExecutionStatus, H as CreateTaskSessionOptions, Ji as SessionInfo, Mt as FileWriteResult, Na as WriteFileOptions, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, Ot as FileTreeOptions, Qi as SessionMessageAdmission, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalCreateOptions, Tt as FileRenameResult, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Zi as SessionMessage, cr as RenameOptions, fi as SandboxPortBinding, ga as TaskSessionInfo, jt as FileUsageResult, kr as SandboxEvent, kt as FileTreeResult, ma as TaskSessionCommitResult, pa as TaskSessionChanges, w as ChunkedUploadOptions, xt as FileReadBatchOptions, yi as SandboxRuntimeHealth, zi as SendSessionMessageOptions } from "./types-BeWUGJ5S.js";
-import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
-import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-DRCfxOQz.js";
-import { t as BrowserInteractiveSessionController } from "./interactive-controller-ykaThYp6.js";
-import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-D7RVedpR.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C8Si8478.js";
+import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SendSessionMessageRequest, Cn as ListMessagesOptions, Di as SandboxTerminalManager, Ei as SandboxTerminalInfo, Gi as SessionExecutionStatus, H as CreateTaskSessionOptions, Ia as ChunkedUploadTransport, Ji as SessionInfo, La as uploadChunked, Mt as FileWriteResult, Na as WriteFileOptions, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, Ot as FileTreeOptions, Qi as SessionMessageAdmission, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalCreateOptions, Tt as FileRenameResult, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Zi as SessionMessage, cr as RenameOptions, fi as SandboxPortBinding, ga as TaskSessionInfo, jt as FileUsageResult, kr as SandboxEvent, kt as FileTreeResult, ma as TaskSessionCommitResult, pa as TaskSessionChanges, w as ChunkedUploadOptions, xt as FileReadBatchOptions, yi as SandboxRuntimeHealth, zi as SendSessionMessageOptions } from "./types-i3Vs02b8.js";
+import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-CV1pMSKC.js";
+import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-JUW3gOGH.js";
+import { t as BrowserInteractiveSessionController } from "./interactive-controller-DNbLzamS.js";
+import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-CRssX9qs.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-CGf6PAs8.js";
 
-//#region src/lib/chunked-upload.d.ts
-/** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}
- *  in the SDK, or any fetch-shaped adapter in a standalone consumer. */
-interface ChunkedUploadTransport {
-  fetch(path: string, init?: RequestInit): Promise<Response>;
-}
-/**
- * Upload arbitrary binary or text data to the sandbox via the chunked
- * upload-session protocol, verifying integrity with a whole-payload
- * SHA-256 at commit. Browser/Worker-safe and works identically over the
- * gateway proxy or a direct sidecar connection — see
- * {@link FileSystem.uploadData}.
- *
- * @param transport - Fetch-shaped adapter scoped to the sandbox runtime
- *   (paths are relative to it, e.g. `/fs/upload-session`).
- * @param remotePath - Destination path in the sandbox.
- * @param data - Payload to upload. Strings encode as UTF-8.
- * @param options - See {@link ChunkedUploadOptions}.
- * @throws {SandboxError} `PAYLOAD_TOO_LARGE` immediately (zero requests) if
- *   the payload exceeds {@link FILE_UPLOAD_SESSION_MAX_BYTES}; otherwise the
- *   typed error from whichever step (init/part/commit) failed after retries
- *   are exhausted.
- */
-declare function uploadChunked(transport: ChunkedUploadTransport, remotePath: string, data: Blob | ArrayBuffer | ArrayBufferView | string, options?: ChunkedUploadOptions): Promise<ChunkedUploadResult>;
-//#endregion
 //#region src/runtime-api.d.ts
 interface RuntimeTransport {
   ensureRunning(): Promise<void>;

package/dist/runtime.js

@@ -1,6 +1,7 @@
-import { B as projectAgentTerminalRecord, L as createAgentRunOutcomeTracker, R as deriveAgentResultOutcome, b as uploadChunked, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as deriveAgentRunOutcome } from "./interactive-controller-CvW2-UfM.js";
+import { F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, L as projectAgentTerminalRecord, P as createAgentRunOutcomeTracker, l as SandboxRuntimeApi, t as BrowserInteractiveSessionController } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
 import { f as combineAbortSignals, n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BJf0P_J4.js";
+import { s as uploadChunked } from "./chunked-upload-CfefWUE5.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
 function requireToken(token) {

package/dist/{sandbox-CbuA-iZi.js → sandbox-B6LlVm4f.js}

@@ -1,9 +1,10 @@
 import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
-import { C as SANDBOX_PROXY_REQUEST_MAX_BYTES, D as parseSSEStream, E as encodeTextForWire, I as withoutRuntimeSecrets, L as createAgentRunOutcomeTracker, M as normalizeRuntimeBackendConfig, N as requestedPublicProfileDigest, O as applyRequestedModel, P as requestedSecretProfilePublicDigest, R as deriveAgentResultOutcome, S as validateAcceptedDispatchRunRef, T as encodePromptForWire, _ as resolveTraceId, b as uploadChunked, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as mergeRuntimeBackendConfig, k as assertCurrentBackendType, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, x as resolveDispatchRunIdentity, y as sessionHeaders } from "./interactive-controller-CvW2-UfM.js";
+import { A as requestedPublicProfileDigest, C as encodeTextForWire, E as assertCurrentBackendType, F as deriveAgentResultOutcome, N as withoutRuntimeSecrets, O as mergeRuntimeBackendConfig, P as createAgentRunOutcomeTracker, S as encodePromptForWire, T as applyRequestedModel, _ as resolveTraceId, b as resolveDispatchRunIdentity, c as requestScopedToken, d as normalizeSessionInfo, f as sessionMessageRequestBody, g as mintTraceId, h as isTraceId, j as requestedSecretProfilePublicDigest, k as normalizeRuntimeBackendConfig, l as SandboxRuntimeApi, m as TRACE_ID_HEADER, n as InteractiveSessionController, o as assertScopedTokenActive, p as waitForRetryAfter, r as TerminalStream, u as isRetryableCredentialRefusal, v as appendSessionIdQuery, w as parseSSEStream, x as validateAcceptedDispatchRunRef, y as sessionHeaders } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, g as StreamInterruptedError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, v as ValidationError, x as readResponseJson, y as parseErrorResponse } from "./errors-Cq4hMysQ.js";
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
-import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-BwIJkzAQ.js";
+import { l as SANDBOX_PROXY_REQUEST_MAX_BYTES, s as uploadChunked } from "./chunked-upload-CfefWUE5.js";
+import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-Dm8w5faq.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, canonicalCandidateJson, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
@@ -856,6 +857,13 @@ async function downloadFile(request, localPath, options = {}) {
 	const maxBytes = options.maxBytes ?? Number.MAX_SAFE_INTEGER;
 	if (options.expectedSize !== void 0 && options.expectedSize > maxBytes) throw new ValidationError("expectedSize exceeds download maxBytes");
 	options.signal?.throwIfAborted();
+	if (options.parallel && options.parallel > 1) {
+		const probed = await probeRangeSupport(request, options.signal);
+		if (probed) return await downloadParallel(request, localPath, {
+			...options,
+			parallel: options.parallel
+		}, probed);
+	}
 	const response = await request(options.signal);
 	const reader = response.body?.getReader();
 	const abort = () => {
@@ -929,6 +937,98 @@ async function downloadFile(request, localPath, options = {}) {
 		});
 	}
 }
+/** Probe with a one-byte range: only a 206 with a parseable Content-Range
+*  counts as capability (200 = ignored Range, anything else = no). */
+async function probeRangeSupport(request, signal) {
+	signal?.throwIfAborted();
+	const response = await request(signal, { headers: { Range: "bytes=0-0" } });
+	if (response.status !== 206) return void 0;
+	const contentRange = response.headers.get("content-range");
+	const total = contentRange ? /\/(\d+)$/.exec(contentRange)?.[1] : void 0;
+	if (total === void 0) return void 0;
+	await response.arrayBuffer().catch(() => void 0);
+	const totalBytes = Number(total);
+	return Number.isSafeInteger(totalBytes) ? { totalBytes } : void 0;
+}
+/** Parallel range download: N slices fetched concurrently, written at their
+*  offsets into one temp file, hashed in order on a single sequential re-read,
+*  published atomically. A failed or truncated slice fails loud — the
+*  destination never sees a partial file. */
+async function downloadParallel(request, localPath, options, capable) {
+	const { totalBytes } = capable;
+	if (totalBytes > (options.maxBytes ?? Number.MAX_SAFE_INTEGER)) throw new Error("Download exceeds maxBytes");
+	if (options.expectedSize !== void 0 && totalBytes !== options.expectedSize) throw new Error("Download size does not match expectedSize");
+	const expectedHash = options.expectedSha256?.replace(/^sha256:/, "");
+	const fs = await import("node:fs/promises");
+	const path = await import("node:path");
+	const { createHash } = await import("node:crypto");
+	const directory = await fs.mkdtemp(path.join(path.dirname(localPath), ".sandbox-download-"));
+	const temporaryPath = path.join(directory, "content");
+	let received = 0;
+	try {
+		options.onProgress?.({
+			bytesDownloaded: 0,
+			totalBytes,
+			percentage: 0
+		});
+		const file = await fs.open(temporaryPath, "wx+", 384);
+		try {
+			const slices = sliceRanges(totalBytes, options.parallel);
+			await Promise.all(slices.map(async ({ start, end }) => {
+				options.signal?.throwIfAborted();
+				const response = await request(options.signal, { headers: { Range: `bytes=${start}-${end}` } });
+				if (response.status !== 206) throw new Error(`Range request answered ${response.status} after a 206 probe`);
+				const sliceBytes = end - start + 1;
+				const buffer = Buffer.from(await response.arrayBuffer());
+				if (buffer.byteLength !== sliceBytes) throw new Error(`Range slice ${start}-${end} returned ${buffer.byteLength} bytes (truncated)`);
+				await file.write(buffer, 0, sliceBytes, start);
+				received += sliceBytes;
+				options.onProgress?.({
+					bytesDownloaded: received,
+					totalBytes,
+					percentage: received / totalBytes * 100
+				});
+			}));
+			const hash = createHash("sha256");
+			const reader = file.createReadStream({ autoClose: false });
+			for await (const chunk of reader) hash.update(chunk);
+			const sha256 = hash.digest("hex");
+			if (expectedHash !== void 0 && sha256 !== expectedHash.toLowerCase()) throw new Error("Download SHA-256 does not match expectedSha256");
+			if (received !== totalBytes) throw new Error("Download was truncated or its size changed");
+			await file.close();
+			options.signal?.throwIfAborted();
+			if (options.overwrite === false) await fs.link(temporaryPath, localPath);
+			else await fs.rename(temporaryPath, localPath);
+			options.onProgress?.({
+				bytesDownloaded: totalBytes,
+				totalBytes,
+				percentage: 100
+			});
+			return {
+				sizeBytes: totalBytes,
+				sha256
+			};
+		} catch (error) {
+			await file.close().catch(() => void 0);
+			throw error;
+		}
+	} finally {
+		await fs.rm(directory, {
+			recursive: true,
+			force: true
+		}).catch(() => void 0);
+	}
+}
+/** Split [0, total) into `count` contiguous inclusive ranges. */
+function sliceRanges(total, count) {
+	const chunk = Math.ceil(total / count);
+	const ranges = [];
+	for (let start = 0; start < total; start += chunk) ranges.push({
+		start,
+		end: Math.min(start + chunk, total) - 1
+	});
+	return ranges;
+}
 //#endregion
 //#region src/managed-process.ts
 var ManagedProcessClient = class {
@@ -5708,21 +5808,22 @@ var SandboxInstance = class SandboxInstance {
 	}
 	async fsUpload(localPath, remotePath, options) {
 		await this.ensureRunning();
-		const fileBuffer = await (await import("node:fs/promises")).readFile(localPath);
+		const { size } = await (await import("node:fs/promises")).stat(localPath);
 		if (options?.onProgress) options.onProgress({
 			bytesUploaded: 0,
-			totalBytes: fileBuffer.length,
+			totalBytes: size,
 			percentage: 0
 		});
-		await this.fsUploadData(remotePath, fileBuffer, {
+		const { uploadChunkedFromFile } = await import("./chunked-upload-file-Bo2ROB52.js");
+		await uploadChunkedFromFile({ fetch: (path, init) => this.runtimeFetch(path, init) }, remotePath, localPath, {
 			mode: options?.permissions,
 			onProgress: options?.onProgress ? (progress) => {
 				if (progress.percentage < 100) options.onProgress?.(progress);
 			} : void 0
 		});
 		if (options?.onProgress) options.onProgress({
-			bytesUploaded: fileBuffer.length,
-			totalBytes: fileBuffer.length,
+			bytesUploaded: size,
+			totalBytes: size,
 			percentage: 100
 		});
 	}
@@ -8306,7 +8407,7 @@ var SandboxInstance = class SandboxInstance {
 	}
 	/** @internal — invoked before the sandbox is deleted. */
 	async _sessionExportRawEvidence(id, destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-Bi-Lt83d.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-Br5a3xZ_.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal) => this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/raw-evidence/archive?${new URLSearchParams({

package/dist/{sandbox-CrET4m65.d.ts → sandbox-WpE5rzUa.d.ts}

@@ -1,9 +1,9 @@
-import { t as CliAuthReference } from "./cli-auth-bundle-BMcIiB-I.js";
-import { $n as PublicProfileConflict, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, Bi as SendSessionMessageRequest, C as BranchOptions, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fa as WriteManyOptions, Fi as SearchMatch, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SearchOptions, In as PreviewLinkManager, Ji as SessionInfo, Jn as PromptResult, Ka as RawEvidenceDirectoryExport, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, O as CodeLanguage, Pa as WriteManyFile, Pn as PermissionsManager, Q as DispatchedSession, Qa as InteractionResolutionAcknowledgement, Qi as SessionMessageAdmission, Qt as ForkLookupOptions, Sa as TeePublicKeyResponse, Sn as JsonValue, Ta as TurnDriveResult, Tr as SandboxDeleteOptions, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Xi as SessionListOptions, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as WorkspaceImagePublishResult$1, Zi as SessionMessage, Zt as ForkIdempotency, _n as IntelligenceReport, aa as SnapshotInfo, an as GitStatus, ba as TeeAttestationResponse, bi as SandboxShape, d as BackendConfig, dn as GpuLeaseManager, dr as Rollout, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, fi as SandboxPortBinding, ga as TaskSessionInfo, gn as InstalledTool, gt as EventStreamOptions, hi as SandboxResourceUsage, hr as RolloutStartResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, jn as NetworkManager, ki as SandboxTerminals, kr as SandboxEvent, la as StartupDiagnostics, lr as RestoreSnapshotOptions, ma as TaskSessionCommitResult, na as SnapshotDeleteAcknowledgement, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pr as RolloutOptions, pt as EgressManager, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, sa as SnapshotResult, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxInfo, ur as ResumeOptions, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, wi as SandboxTerminalAttachOptions, wr as SandboxDeleteAcknowledgement, xn as IntelligenceReportWindow, xr as SandboxConnection, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, zi as SendSessionMessageOptions } from "./types-BeWUGJ5S.js";
-import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-B6bUr0hj.js";
-import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-DRCfxOQz.js";
-import { r as InteractiveAttachRequest } from "./interactive-controller-ykaThYp6.js";
-import { R as SandboxLines } from "./lines-DCxU0xIV.js";
+import { t as CliAuthReference } from "./cli-auth-bundle-ODe06Ts7.js";
+import { $a as WorkspaceImagePublishResult$1, $n as PublicProfileConflict, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, Bi as SendSessionMessageRequest, C as BranchOptions, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fa as WriteManyOptions, Fi as SearchMatch, Ga as SandboxEnvRecovery, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SearchOptions, In as PreviewLinkManager, Ja as RawEvidenceDirectoryExport, Ji as SessionInfo, Jn as PromptResult, Ka as SandboxEnvRecoveryView, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, O as CodeLanguage, Pa as WriteManyFile, Pn as PermissionsManager, Q as DispatchedSession, Qi as SessionMessageAdmission, Qt as ForkLookupOptions, Sa as TeePublicKeyResponse, Sn as JsonValue, Ta as TurnDriveResult, Tr as SandboxDeleteOptions, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Xi as SessionListOptions, Xn as ProvisionResult, Xt as ForkCounts, Ya as RawEvidenceExportOptions, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Zi as SessionMessage, Zt as ForkIdempotency, _n as IntelligenceReport, aa as SnapshotInfo, an as GitStatus, ba as TeeAttestationResponse, bi as SandboxShape, d as BackendConfig, dn as GpuLeaseManager, dr as Rollout, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, eo as InteractionResolutionAcknowledgement, fi as SandboxPortBinding, ga as TaskSessionInfo, gn as InstalledTool, gt as EventStreamOptions, hi as SandboxResourceUsage, hr as RolloutStartResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, jn as NetworkManager, ki as SandboxTerminals, kr as SandboxEvent, la as StartupDiagnostics, lr as RestoreSnapshotOptions, ma as TaskSessionCommitResult, na as SnapshotDeleteAcknowledgement, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pr as RolloutOptions, pt as EgressManager, qi as SessionForkOptions, qn as PromptOptions, sa as SnapshotResult, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxInfo, ur as ResumeOptions, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, wi as SandboxTerminalAttachOptions, wr as SandboxDeleteAcknowledgement, xn as IntelligenceReportWindow, xr as SandboxConnection, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, zi as SendSessionMessageOptions } from "./types-i3Vs02b8.js";
+import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-CV1pMSKC.js";
+import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-JUW3gOGH.js";
+import { r as InteractiveAttachRequest } from "./interactive-controller-DNbLzamS.js";
+import { R as SandboxLines } from "./lines-BOWMNDp5.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 

package/dist/{secp256k1-CyKOxB5J.js → secp256k1-Dx2XABHz.js}

@@ -1,4 +1,4 @@
-import { a as anumber, c as concatBytes$1, f as randomBytes, h as toBytes, i as ahash, l as createHasher$1, n as abytes$1, o as aoutput, p as rotr, r as aexists, s as clean, t as Hash, u as createView, x as split } from "./utils-ChcSLv53.js";
+import { a as anumber, c as concatBytes$1, f as randomBytes, h as toBytes, i as ahash, l as createHasher$1, n as abytes$1, o as aoutput, p as rotr, r as aexists, s as clean, t as Hash, u as createView, x as split } from "./utils-B7_9Hl_z.js";
 //#region ../../../node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/_md.js
 /**
 * Internal Merkle-Damgard hash utils.

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-D_o4zbXJ.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-DHgljRHu.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-C1dd-4xk.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-Ux41HNTu.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };