@tangle-network/sandbox 0.60.36-develop.20261011055857.b608789 → 0.60.36-develop.20261011062548.c10773e

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-Dw9YNtU4.js";
+import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-BQf4G_7z.js";
 import { D as CodeExecutionResult, E as CodeExecutionOptions, Ji as SessionInfo, Jr as SandboxFleetParent, O as CodeLanguage, Xi as SessionListOptions, d as BackendConfig, k as CodeResultPart, oo as BackendType } from "../types-C0XwJqxx.js";
-import { i as Sandbox } from "../client-CO5ShEdk.js";
-import { u as PreviewAuthorizer } from "../preview-DNAuiZly.js";
+import { i as Sandbox } from "../client-CPt8NJRl.js";
+import { u as PreviewAuthorizer } from "../preview-Ce8eC44V.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DjryqUiY.js";
 import { E as assertCurrentBackendType } from "../interactive-controller-Dxt5sW2N.js";
 import { h as StateError, l as NotFoundError, v as ValidationError } from "../errors-Cq4hMysQ.js";
-import { n as Sandbox } from "../client-B8OutXq2.js";
-import { t as SandboxInstance } from "../sandbox-CfGVI_xk.js";
+import { n as Sandbox } from "../client-_Xbp4cHc.js";
+import { t as SandboxInstance } from "../sandbox-DNwEDkL2.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-DNAuiZly.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-Ce8eC44V.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/{client-CO5ShEdk.d.ts → client-CPt8NJRl.d.ts}

@@ -1,4 +1,4 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-Dw9YNtU4.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-BQf4G_7z.js";
 import { $r as SandboxFleetToken, Ar as SandboxFleetAgent, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ca as TokenRefreshHandler, En as ListSandboxOptions, F as CreateIntelligenceReportOptions, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetManifest, Gt as FleetMachineId, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ir as SandboxFleetDispatchResponse, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetArtifact, N as ConversationTurnResult, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Or as SandboxEnvironment, Pr as SandboxFleetCostEstimate, Qr as SandboxFleetSpend, R as CreateSandboxFleetTokenOptions, Ri as SecretsManager, Rt as FleetDispatchResultBuffer, Si as SandboxShapesInfo, Tn as ListSandboxFleetOptions, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, Vt as FleetDriveTurnOutcome, Wr as SandboxFleetMachineSpec, Wt as FleetExecDispatchResult, Xr as SandboxFleetPolicy, Yt as FleetRunOptions, _i as SandboxRunGeneration, _n as IntelligenceReport, ar as ReapExpiredSandboxFleetsResult, b as BatchRunRequest, br as SandboxConfig, ca as SshKeysManager, ci as SandboxFleetWorkspaceSnapshotResult, d as BackendConfig, ei as SandboxFleetTraceBundle, er as PublicTemplateInfo, fa as SubscriptionInfo, ii as SandboxFleetUsage, ir as ReapExpiredSandboxFleetsOptions, ka as UsageInfo, l as AttachSandboxFleetMachineOptions, li as SandboxIdentity, nr as PublishPublicTemplateOptions, oi as SandboxFleetWorkspaceReconcileResult, or as ReconcileSandboxFleetsOptions, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, ri as SandboxFleetTraceOptions, rr as PublishPublicTemplateVersionOptions, si as SandboxFleetWorkspaceRestoreResult, sr as ReconcileSandboxFleetsResult, to as BatchEvent, tr as PublicTemplateVersionInfo, ui as SandboxInfo, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-C0XwJqxx.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-CV1pMSKC.js";
 import { I as LinesClient } from "./lines-DQmR5ypP.js";

package/dist/{client-B8OutXq2.js → client-_Xbp4cHc.js}

@@ -2,7 +2,7 @@ import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
 import { D as foldModelRoutingFields, E as assertCurrentBackendType, M as withProfileHarness, S as encodePromptForWire, T as applyRequestedModel, k as normalizeRuntimeBackendConfig, s as requestInteractiveSessionToken, w as parseSSEStream } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, l as NotFoundError, m as ServerError, p as SandboxError, s as NON_RETRYABLE_CREATE_QUOTA_REASONS, t as AuthError, u as PartialFailureError, v as ValidationError, x as readResponseJson, y as parseErrorResponse } from "./errors-Cq4hMysQ.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-CfGVI_xk.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-DNwEDkL2.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -3323,11 +3323,11 @@ function withRequestContextHeaders(response, path, method) {
 	return rewrapResponse(response, headers);
 }
 async function resolveLocalCliAuthFiles(backendType) {
-	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-D-_fMdNS.js");
+	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-Bs0An6Cw.js");
 	return discoverLocalCliAuthFiles(backendType);
 }
 async function describeLocalCliAuthExpectation(backendType) {
-	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-D-_fMdNS.js");
+	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-Bs0An6Cw.js");
 	return describe(backendType);
 }
 async function hydrateLocalCliBackendAuth(backend, baseUrl, trustLocalCliAuth) {

package/dist/core.d.ts

@@ -1,7 +1,7 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-Dw9YNtU4.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-BQf4G_7z.js";
 import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Ci as SandboxStatus, Fn as PreviewLinkInfo, Ha as ManagedProcessState, Ia as ManagedProcessClient, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessJobs, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Qi as SessionMessageAdmission, Ra as ManagedProcessOptions, Ua as SandboxEnvRecovery, Va as ManagedProcessSpec, Wa as SandboxEnvRecoveryView, br as SandboxConfig, ui as SandboxInfo, vt as ExecOptions, yt as ExecResult, za as ManagedProcessRecord } from "./types-C0XwJqxx.js";
 import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
-import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-CO5ShEdk.js";
+import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-CPt8NJRl.js";
 import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-CRssX9qs.js";
 
 //#region src/core.d.ts

package/dist/core.js

@@ -1,6 +1,6 @@
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-B8OutXq2.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-CfGVI_xk.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-_Xbp4cHc.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-DNwEDkL2.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-Cq6dJLBD.js";
 //#region src/core.ts

package/dist/{index-DdUzvzA_.d.ts → index-DoB4GMBh.d.ts}

@@ -1,4 +1,4 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-Dw9YNtU4.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-BQf4G_7z.js";
 import { B as CreateSandboxOptions } from "./types-C0XwJqxx.js";
 
 //#region src/tangle/abi.d.ts

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-Dw9YNtU4.js";
+import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-BQf4G_7z.js";
 import { $ as DownloadOptions, $a as PublicBatchRunRequest, $i as SessionMessageInputPart, $n as PublicProfileConflict, $r as SandboxFleetToken, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, An as NetworkConfig, Ar as SandboxFleetAgent, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Bi as SendSessionMessageRequest, Bn as ProcessListOptions, Br as SandboxFleetIntelligenceEnvelope, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TokenRefreshHandler, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, Ct as FileReadError, Da as UploadOptions, Di as SandboxTerminalManager, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEgressUsage, Dt as FileTreeFile, Ea as UpdateUserOptions, Ei as SandboxTerminalInfo, En as ListSandboxOptions, Er as SandboxDeleteOutcome, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as WriteManyOptions, Fi as SearchMatch, Fn as PreviewLinkInfo, Fr as SandboxFleetDispatchFailureClass, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceArchiveManifest, Gi as SessionExecutionStatus, Gn as ProcessStatus, Gr as SandboxFleetManifest, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as ManagedProcessState, Hi as SessionBackendCredentials, Hn as ProcessManager, Hr as SandboxFleetMachineMeteredUsage, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessClient, Ii as SearchOptions, In as PreviewLinkManager, Ir as SandboxFleetDispatchResponse, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidenceNativeFile, Ji as SessionInfo, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceDirectoryExport, Ki as SessionFailureReason, Kn as PromptInputPart, Kr as SandboxFleetManifestMachine, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessJobs, Li as SecretInfo, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mi as SandboxTraceExport, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetArtifact, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, Nn as PermissionLevel, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, On as McpServerConfig, Or as SandboxEnvironment, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as WriteManyFile, Pi as SandboxUser, Pn as PermissionsManager, Pr as SandboxFleetCostEstimate, Pt as FleetAgentPlacement, Q as DispatchedSession, Qi as SessionMessageAdmission, Qn as ProvisionStep, Qr as SandboxFleetSpend, Qt as ForkLookupOptions, Ra as ManagedProcessOptions, Ri as SecretsManager, Rn as Process, Rr as SandboxFleetDriverTimings, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TeePublicKeyResponse, Si as SandboxShapesInfo, Sr as SandboxCreateOutcome, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as TurnDriveResult, Ti as SandboxTerminalCreateOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOptions, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, Un as ProcessSignal, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as ManagedProcessSpec, Vi as SentSessionMessage, Vn as ProcessLogEntry, Vr as SandboxFleetMachine, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Wn as ProcessSpawnOptions, Wr as SandboxFleetMachineSpec, X as DirectoryPermission, Xa as RawEvidenceRecordsFile, Xi as SessionListOptions, Xn as ProvisionResult, Xr as SandboxFleetPolicy, Xt as ForkCounts, Y as DevServerInfo, Ya as RawEvidencePayloadFile, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Yr as SandboxFleetPlacement, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionMessage, Zn as ProvisionStatus, Zr as SandboxFleetProfileRef, Zt as ForkIdempotency, _ as BatchBackend, _a as TaskSessionProfile, _i as SandboxRunGeneration, _n as IntelligenceReport, _r as RolloutTurnPart, _t as ExactProcessSpawnOptions, aa as SnapshotInfo, ai as SandboxFleetWorkspace, an as GitStatus, ao as ALL_BACKEND_TYPES, ar as ReapExpiredSandboxFleetsResult, at as DriverType, b as BatchRunRequest, ba as TeeAttestationResponse, bi as SandboxShape, bn as IntelligenceReportSubjectType, br as SandboxConfig, bt as FileInfo, c as AttachGpuLeaseOptions, ci as SandboxFleetWorkspaceSnapshotResult, cn as GpuLeaseCommandResult, cr as RenameOptions, d as BackendConfig, da as StorageConfig, di as SandboxIntelligenceEnvelope, dn as GpuLeaseManager, dr as Rollout, dt as EffectiveBackendSource, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, en as GitAuth, eo as BatchBackendStats, er as PublicTemplateInfo, et as DownloadProgress, f as BackendInfo, fa as SubscriptionInfo, fi as SandboxPortBinding, fn as GpuLeaseProviderName, fr as RolloutChildResult, ft as EgressDenial, g as BackendStatus, ga as TaskSessionInfo, gi as SandboxResources, gn as InstalledTool, gr as RolloutStatus, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionFileChange, hi as SandboxResourceUsage, hn as HostAgentRuntimeBackend, hr as RolloutStartResult, ht as EnsureDevServerOptions, ia as SnapshotIdempotency, ii as SandboxFleetUsage, in as GitDiff, io as BatchTaskUsage, ir as ReapExpiredSandboxFleetsOptions, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, ji as SandboxTraceEvent, jn as NetworkManager, jr as SandboxFleetAgentSpec, jt as FileUsageResult, ka as UsageInfo, ki as SandboxTerminals, kn as MkdirOptions, kr as SandboxEvent, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StartupDiagnostics, li as SandboxIdentity, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionCommitResult, mi as SandboxRemovalState, mn as HostAgentDriverConfig, mr as RolloutScorer, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotDeleteAcknowledgement, ni as SandboxFleetTraceExport, nn as GitCommit, no as BatchEventDataMap, nr as PublishPublicTemplateOptions, nt as DriveTurnOptions, oa as SnapshotOptions, oi as SandboxFleetWorkspaceReconcileResult, on as GpuLease, oo as BackendType, or as ReconcileSandboxFleetsOptions, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pi as SandboxPortPreviewLink, pn as GpuLeaseStatus, pr as RolloutOptions, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotDeleteOutcome, ri as SandboxFleetTraceOptions, rn as GitConfig, ro as BatchSidecarGroup, rr as PublishPublicTemplateVersionOptions, rt as DriverConfig, sa as SnapshotResult, si as SandboxFleetWorkspaceRestoreResult, sn as GpuLeaseBilling, so as parseBackendType, sr as ReconcileSandboxFleetsResult, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SessionStatus, ti as SandboxFleetTraceEvent, tn as GitBranch, to as BatchEvent, tr as PublicTemplateVersionInfo, tt as DownloadResult, u as BackendCapabilities, ua as StartupOperation, ui as SandboxInfo, un as GpuLeaseExecResult, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, w as ChunkedUploadOptions, wa as TokenUsage, wi as SandboxTerminalAttachOptions, wn as ListOptions, wr as SandboxDeleteAcknowledgement, wt as FileReadResult, x as BatchTask, xa as TeePublicKey, xi as SandboxShapePreset, xn as IntelligenceReportWindow, xr as SandboxConnection, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeeAttestationReport, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessRecord, zi as SendSessionMessageOptions, zn as ProcessInfo, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-C0XwJqxx.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-CV1pMSKC.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as interactiveSessionIdentityDigest, f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as InteractiveSessionNotRunningError, m as InteractiveControlClaimOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimAcknowledgement, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as createInteractiveControlHolderId } from "./browser-interactive-control-controller-JUW3gOGH.js";
 import { a as InteractiveSessionControllerOptions, i as InteractiveSessionController, n as BrowserInteractiveSessionControllerOptions, o as InteractiveSessionControllerTransport, r as InteractiveAttachRequest, t as BrowserInteractiveSessionController } from "./interactive-controller-DNbLzamS.js";
 import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
-import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-CO5ShEdk.js";
+import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-CPt8NJRl.js";
 import { _ as StreamInterruptedError, a as FileWriteConflictError, b as ValidationError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as StateError, h as ServerError, i as EgressProxyRecoveryError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxErrorJson, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as StreamInterruptionReason, y as TimeoutError } from "./errors-CRssX9qs.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-BgmgfYZZ.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DHuHjNie.js";
 import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C0CsZPED.js";
-import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-DdUzvzA_.js";
+import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-DoB4GMBh.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -4140,6 +4140,13 @@ type ProfileFileMountBox = {
      */
     uploadData?: FileSystem["uploadData"];
   };
+  /**
+   * Optional box runtime HTTP transport — the same fetch `/agents/profiles`
+   * rides. Backs the profile-bundle cache claim/publish protocol; a box
+   * without it (foreign implementations, tests) always takes the legacy
+   * staged path and never claims or publishes.
+   */
+  runtimeFetch?: (endpoint: string, init?: RequestInit) => Promise<Response>;
 };
 /**
  * Synchronous pre-flight validation of deferred inline mounts: the same

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
 import { A as requestedPublicProfileDigest, F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, L as projectAgentTerminalRecord, P as createAgentRunOutcomeTracker, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, k as normalizeRuntimeBackendConfig, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, w as parseSSEStream } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as StreamInterruptedError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-B8OutXq2.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-_Xbp4cHc.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-CfGVI_xk.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-DNwEDkL2.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DaWEv29D.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-Cq6dJLBD.js";
-import { s as TangleSandboxClient } from "./tangle-Dt4FMrZs.js";
+import { s as TangleSandboxClient } from "./tangle-7nYoMui0.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{preview-DNAuiZly.d.ts → preview-Ce8eC44V.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-Dw9YNtU4.js";
+import { r as SandboxInstance } from "./sandbox-BQf4G_7z.js";
 import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-C0XwJqxx.js";
-import { i as Sandbox } from "./client-CO5ShEdk.js";
+import { i as Sandbox } from "./client-CPt8NJRl.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/{sandbox-Dw9YNtU4.d.ts → sandbox-BQf4G_7z.d.ts}

@@ -1875,7 +1875,15 @@ declare class SandboxInstance {
   private ensureRunning;
   private ensureRunningForPrompt;
   private assertFilesystemIncarnationReady;
-  private runtimeFetch;
+  /**
+   * One authenticated runtime HTTP call for this sandbox, relative endpoint
+   * (`/agents/...`), scoped to the current filesystem incarnation. This is
+   * the transport `/agents/profiles` rides and the box surface mount
+   * delivery uses for profile-bundle cache claim/publish.
+   */
+  runtimeFetch(path: string, options?: RequestInit, fetchOptions?: {
+    timeoutMs?: number;
+  }): Promise<Response>;
   /**
    * Delegates to the shared `parseSSEStream` in `lib/sse-parser.ts`
    * — one canonical SSE implementation for the whole SDK. The

package/dist/{sandbox-CfGVI_xk.js → sandbox-DNwEDkL2.js}

@@ -9,6 +9,10 @@ import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, Age
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
 import { readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import "node:path";
+import "node:fs/promises";
 //#region src/trace-exporter.ts
 function buildTraceExportPayload(bundle, format = "tangle", serviceName = "tangle-sandbox") {
 	if (format === "tangle") return bundle;
@@ -327,7 +331,7 @@ const UNDECIDED_WRITE_STATUSES = new Set([
 	504
 ]);
 const PROFILE_FILE_MOUNT_PACE_MS = 0;
-const PROFILE_BIN_DIR_RE = /(^|\/)(s?bin)\//;
+const PROFILE_BIN_DIR_RE$1 = /(^|\/)(s?bin)\//;
 const PROFILE_AGENT_HOME = ["/home", "agent"].join("/");
 /**
 * Wire budget for a single-shot `POST /files/write` of a mount.
@@ -476,8 +480,27 @@ function fileApiTarget(mount, absolutePrefixes) {
 	if (mount.path.length === 0) return null;
 	return mount.path;
 }
+/**
+* The delivery target exactly as the staged manifest's `path` computes it:
+* the file-API target when the box exposes writeMany, else the mount path.
+* The publish manifest's `target` must match this byte-for-byte — the host
+* re-admits delivered bundles by reading the bytes at these paths.
+*/
+function profileFileDeliveryTarget(box, mount) {
+	return stagedProfileFileTarget(box, mount, DEFAULT_PROFILE_FILE_API_ABSOLUTE_PREFIXES);
+}
+function stagedProfileFileTarget(box, mount, absolutePrefixes) {
+	return typeof box.fs?.writeMany === "function" ? fileApiTarget(mount, absolutePrefixes) ?? mount.path : mount.path;
+}
+/**
+* The exact content bytes of an inline mount — the bytes the staged
+* manifest's sha256 covers and the bundle manifest's `sizeBytes` sums.
+*/
+function inlineProfileFileContent(mount) {
+	return inlineContent(mount);
+}
 function isExecutableProfileFile(mount) {
-	return mount.executable ?? PROFILE_BIN_DIR_RE.test(mount.path);
+	return mount.executable ?? PROFILE_BIN_DIR_RE$1.test(mount.path);
 }
 function profileFileMode(mount) {
 	return isExecutableProfileFile(mount) ? 493 : void 0;
@@ -808,7 +831,8 @@ async function materializeAbsentProfileFiles(box, files, options) {
 	const stage = `.sandbox-profile-${globalThis.crypto.randomUUID()}`;
 	const absolutePrefixes = normalizeAbsolutePrefixes(options.fileApiAbsolutePrefixes ?? DEFAULT_PROFILE_FILE_API_ABSOLUTE_PREFIXES);
 	const manifest = await Promise.all(files.map(async (mount) => ({
-		path: typeof box.fs?.writeMany === "function" ? fileApiTarget(mount, absolutePrefixes) ?? mount.path : mount.path,
+		path: stagedProfileFileTarget(box, mount, absolutePrefixes),
+		mountPath: mount.path,
 		sha256: await sha256Hex(inlineContent(mount)),
 		mode: profileFileMode(mount) ?? 420
 	})));
@@ -2050,27 +2074,270 @@ function waitForReconnect(ms, signal) {
 		signal?.addEventListener("abort", onAbort, { once: true });
 	});
 }
+const CODEX_SYSTEM_PROMPT_FILE = ".codex/system-prompt.md";
+const OPENCODE_APPEND_SYSTEM_PROMPT_FILE = ".opencode/agent-system-prompt.md";
+const OPENCODE_CONFIG_FILE = "opencode.json";
+/** Project context file each harness actually reads from cwd. NEVER a constant. */
+const CONTEXT_FILE = {
+	"claude-code": "CLAUDE.md",
+	nanoclaw: "CLAUDE.md",
+	codex: "AGENTS.md",
+	opencode: ".opencode/profile-instructions.md",
+	"kimi-code": "AGENTS.md",
+	pi: "AGENTS.md",
+	prime: "AGENTS.md",
+	gemini: "GEMINI.md",
+	hermes: "HERMES.md",
+	openclaw: "AGENTS.md"
+};
+/**
+* The paths a profile resource may never mount.
+*
+* Codex names no system-prompt file of its own — `model_instructions_file`
+* takes whatever path it is given — and opencode names none either, since it
+* reads exactly the files its config lists. All three names below were chosen
+* here, so a file already at one of them is this materializer's own output from
+* an earlier application into the same workspace, and a mount there could not
+* survive the next application.
+*
+* That is an inference from the path name, not verified provenance: nothing
+* checks the existing bytes are prior materializer output, so a workspace that
+* carried a foreign file at one of these invented names is overwritten on the
+* first application. Accepted cost of stateless multi-turn re-application,
+* bounded by the names being ones no harness or user convention uses.
+*/
+const MATERIALIZER_RESERVED_PATHS = new Set([
+	CODEX_SYSTEM_PROMPT_FILE,
+	OPENCODE_APPEND_SYSTEM_PROMPT_FILE,
+	CONTEXT_FILE.opencode
+]);
+/** Every path any harness reads as its project context file. */
+const CONTEXT_FILE_PATHS = new Set(Object.values(CONTEXT_FILE));
+/**
+* The context files this package owns by MARKER rather than by name:
+* `AGENTS.md`, `CLAUDE.md`, `GEMINI.md`, `HERMES.md`.
+*
+* Each is a documented name a repository can already carry, so the name proves
+* nothing. A generated one carries the line {@link markMaterializerContextFile}
+* writes, and only that line lets the next materialization replace it.
+*
+* opencode's context file is absent because it is a RESERVED name this package
+* invented, already owned by the name alone.
+*/
+const MATERIALIZER_CONTEXT_PATHS = new Set([...CONTEXT_FILE_PATHS].filter((path) => !MATERIALIZER_RESERVED_PATHS.has(path)));
+new Set([
+	...MATERIALIZER_RESERVED_PATHS,
+	...MATERIALIZER_CONTEXT_PATHS,
+	OPENCODE_CONFIG_FILE
+]);
+/** The one provenance token every generated-file marker carries. */
+const MATERIALIZER_MARKER = "tangle-agent-profile-materialize: generated";
+`${MATERIALIZER_MARKER}`;
+const MATERIALIZER_CONTEXT_MARKER_NOTE = "do not edit; the next profile materialization replaces this file";
+`${MATERIALIZER_MARKER}`;
+`${MATERIALIZER_CONTEXT_MARKER_NOTE}`;
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/workspace-files.js
+const compareStrings = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0);
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/plan-types.js
+/**
+* The subset of {@link BINDABLE_LAUNCH_CONTROLS} the plan HANDS OVER rather than
+* executes: controls a caller reaches only by composing the harness's own
+* configuration, so no file, flag or env var the plan writes can touch them.
+*
+*   - `opencode.agent-prompt` — opencode's `agent.<name>.prompt` config field,
+*     the one control that replaces its built-in provider prompt. It binds to a
+*     SINGLE agent, and the agent is chosen at launch. A caller that builds
+*     opencode's config itself and picks the agent there reads neither
+*     `plan.files` nor `plan.flags`, so for that one the plan names the control
+*     and hands over the text in {@link WorkspacePlan.systemPromptBinding}.
+*
+* Every other bindable control names a capability the plan still lowers itself
+* once the caller has declared the plan's launch inputs really reach the spawn.
+*/
+const EXECUTOR_SYSTEM_PROMPT_BINDINGS = ["opencode.agent-prompt"];
+new Set(EXECUTOR_SYSTEM_PROMPT_BINDINGS);
+/**
+* Launcher controls an executor can declare it OWNS via `materializeProfile`'s
+* `binds` option.
+*
+* Some harness controls live outside any workspace: opencode's exact
+* system-prompt replacement (`agent.<name>.prompt`) binds to the ONE agent
+* whoever starts the process selects, which a plan-forwarding executor cannot
+* guarantee — so the plan refuses the intent (harnessSystemPromptIntents in
+* @tangle-network/agent-interface answers `replace: false` for opencode).
+*
+* The two declarations describe the two executor shapes that CAN reach it, and
+* each gets the lowering it can actually apply:
+*
+*   - `systemPrompt` — the executor applies the plan's launch flags to the
+*     spawn it owns, so the plan writes the generated `mode: primary` agent and
+*     selects it with `--agent`.
+*   - `opencode.agent-prompt` — the executor composes opencode's own config and
+*     picks the agent there, reading neither plan files nor plan flags, so the
+*     plan hands the text over in {@link WorkspacePlan.systemPromptBinding}
+*     instead of writing a workspace agent that would never be selected.
+*
+* They are mutually exclusive claims about the same caller: declaring both is a
+* caller bug, not a broader capability.
+*/
+const BINDABLE_LAUNCH_CONTROLS = ["systemPrompt", ...EXECUTOR_SYSTEM_PROMPT_BINDINGS];
+new Set(BINDABLE_LAUNCH_CONTROLS);
+new TextDecoder("utf-8", {
+	fatal: true,
+	ignoreBOM: true
+});
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/resource-resolution.js
+function describeUnresolvedRef(r) {
+	const name = typeof r.name === "string" ? r.name : void 0;
+	const path = typeof r.path === "string" ? r.path : void 0;
+	if (name && path) return `"${name}" (${path})`;
+	if (name) return `"${name}"`;
+	if (path) return `"${path}"`;
+	return "resource";
+}
+/** Resolve inline bytes already present on the profile. Remote resources must
+* be resolved by {@link resolveAgentProfileResources} before materialization.
+*
+* FAIL-CLOSED: a ref that declares `kind: "inline"` is asserting its bytes are
+* already resolved, so missing/non-string `content` is a caller bug, not an
+* empty file — silently coercing it (`String(content ?? "")`) would produce a
+* file that "looks provisioned, loads nothing", exactly the trap this module's
+* docstring warns against. */
+function resolveInlineRef(ref) {
+	const r = ref;
+	if (typeof r.content === "string") return {
+		name: String(r.name ?? r.path ?? "resource"),
+		content: r.content
+	};
+	if (r.kind === "inline") throw new Error(`Profile resource ${describeUnresolvedRef(r)} declares kind "inline" but has no string content`);
+	return null;
+}
+Object.freeze({ async get() {} });
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/profile-bundle-key.js
+const PROFILE_BUNDLE_SCHEMA = "agent-profile-bundle/v1";
+const PROFILE_BIN_DIR_RE = /(^|\/)(s?bin)\//;
+/**
+* Derive the canonical bundle file entry for one inline mount. The sha256 is
+* computed over the exact inline content bytes and the mode mirrors the SDK's
+* `profileFileMode`/`isExecutableProfileFile`: `mount.executable` wins when
+* present, otherwise a path under a `bin/` or `sbin/` directory is executable.
+* A mount whose resource is not inline is a caller bug and throws, matching
+* the fail-closed discipline of {@link resolveInlineRef}.
+*/
+function profileBundleFileEntry(mount) {
+	const resolved = resolveInlineRef(mount.resource);
+	if (resolved === null) throw new Error(`profileBundleFileEntry: ${mount.path} requires an inline resource`);
+	const executable = mount.executable ?? PROFILE_BIN_DIR_RE.test(mount.path);
+	return {
+		mountPath: mount.path,
+		sha256: createHash("sha256").update(resolved.content, "utf8").digest("hex"),
+		mode: executable ? 493 : 420
+	};
+}
+/**
+* The canonical file table: one entry per mount, sorted by (mountPath, sha256)
+* so any array order of the same mounts produces the same table.
+*/
+function profileBundleFileTable(mounts) {
+	return mounts.map(profileBundleFileEntry).sort((left, right) => left.mountPath !== right.mountPath ? compareStrings(left.mountPath, right.mountPath) : compareStrings(left.sha256, right.sha256));
+}
+/**
+* The content-addressed bundle key. The digest covers EXACTLY the schema
+* version and, per file, the logical mount path, the sha256 of the content
+* bytes, and the full file mode — the same image-content-hash discipline as
+* scripts/ci/image-content-hash.mjs: hash exactly the inputs that determine
+* the cached bytes (and their placement semantics), nothing more. Any profile
+* change — content, path, or mode — produces a new key; anything else
+* (mount order, transport-only target paths, timestamps) does not.
+*/
+function profileFileBundleKey(mounts) {
+	return canonicalCandidateDigest({
+		schema: PROFILE_BUNDLE_SCHEMA,
+		files: profileBundleFileTable(mounts)
+	});
+}
 //#endregion
 //#region src/profile-file-delivery.ts
+const PROFILE_BUNDLE_CLAIM_ENDPOINT = "/agents/profile-bundle/claim";
+const PROFILE_BUNDLE_PUBLISH_ENDPOINT = "/agents/profile-bundle/publish";
+/**
+* Wall-clock ceiling for one claim/publish round trip. The cache is an
+* optimization: a stalled box must fall back to (or skip) delivery, never
+* hold create() hostage.
+*/
+const PROFILE_BUNDLE_HTTP_TIMEOUT_MS = 1e4;
+/**
+* Answers that mean the box predates the cache API: no route, a route that
+* rejects the method, or a recognized-but-unimplemented handler. Remembered
+* per box handle so an old box is never probed twice.
+*/
+const PROFILE_BUNDLE_API_GONE_STATUSES = new Set([
+	404,
+	405,
+	501
+]);
+function profileBundleDebug(message, data = {}) {
+	if (globalThis.process?.env?.TANGLE_SANDBOX_SDK_PROFILE_BUNDLE_DEBUG !== "1") return;
+	console.debug(`[sandbox-sdk] profile bundle: ${message}`, data);
+}
+async function withProfileBundleTimeout(work, what) {
+	let timer;
+	try {
+		return await Promise.race([work, new Promise((_, reject) => {
+			const timeoutError = /* @__PURE__ */ new Error(`${what} timed out after ${PROFILE_BUNDLE_HTTP_TIMEOUT_MS}ms`);
+			timer = setTimeout(() => reject(timeoutError), PROFILE_BUNDLE_HTTP_TIMEOUT_MS);
+			timer.unref?.();
+		})]);
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+	}
+}
+function buildPublishManifest(box, deferredFiles, bundle) {
+	const byMountPath = new Map(deferredFiles.map((mount) => [mount.path, mount]));
+	const encoder = new TextEncoder();
+	let sizeBytes = 0;
+	const files = profileBundleFileTable(deferredFiles).map((entry) => {
+		const mount = byMountPath.get(entry.mountPath);
+		if (!mount) throw new Error(`profile bundle manifest: no mount for ${entry.mountPath}`);
+		sizeBytes += encoder.encode(inlineProfileFileContent(mount)).byteLength;
+		return {
+			...entry,
+			target: profileFileDeliveryTarget(box, mount)
+		};
+	});
+	return {
+		schema: PROFILE_BUNDLE_SCHEMA,
+		bundle,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+		sizeBytes,
+		files
+	};
+}
 /** Successful immutable mount delivery is scoped to one filesystem incarnation. */
 var ProfileFileDelivery = class {
 	delivered;
 	pending = Promise.resolve();
+	unsupportedBoxes = /* @__PURE__ */ new WeakSet();
 	prepare(box, profile, signal, existingFiles = "allow-identical") {
 		const { leanProfile, deferredFiles } = splitInlineProfileFileMounts(structuredClone(profile));
 		validateDeferredProfileFileMounts(deferredFiles);
 		if (deferredFiles.length === 0) return Promise.resolve(leanProfile);
+		const bundle = profileFileBundleKey(deferredFiles);
 		const prepared = this.pending.then(async () => {
 			signal?.throwIfAborted();
 			const incarnation = box.filesystemIncarnationId;
-			const fingerprint = canonicalCandidateDigest(deferredFiles);
-			if (incarnation === void 0 || this.delivered?.incarnation !== incarnation || this.delivered.fingerprint !== fingerprint) {
+			if (incarnation === void 0 || this.delivered?.incarnation !== incarnation || this.delivered.fingerprint !== bundle) {
 				this.delivered = void 0;
-				await materializeProfileFileMounts(box, deferredFiles, { existingFiles });
+				await this.deliverProfileFiles(box, deferredFiles, bundle, existingFiles);
 				if (box.filesystemIncarnationId !== incarnation) throw new StateError("Filesystem incarnation changed during profile file delivery", box.filesystemIncarnationId ?? "unknown", incarnation ?? "unknown");
 				if (incarnation !== void 0) this.delivered = {
 					incarnation,
-					fingerprint
+					fingerprint: bundle
 				};
 			}
 			signal?.throwIfAborted();
@@ -2079,6 +2346,73 @@ var ProfileFileDelivery = class {
 		this.pending = prepared.then(() => {}, () => {});
 		return prepared;
 	}
+	async deliverProfileFiles(box, deferredFiles, bundle, existingFiles) {
+		const claim = await this.claimProfileBundle(box, deferredFiles, bundle);
+		if (claim.kind === "legacy") {
+			await materializeProfileFileMounts(box, deferredFiles, { existingFiles });
+			return;
+		}
+		const remaining = deferredFiles.filter((mount) => claim.missing.has(mount.path));
+		if (remaining.length === 0) return;
+		await materializeProfileFileMounts(box, remaining, { existingFiles });
+		await this.publishProfileBundle(box, deferredFiles, bundle);
+	}
+	async claimProfileBundle(box, deferredFiles, bundle) {
+		if (typeof box.runtimeFetch !== "function" || this.unsupportedBoxes.has(box)) return { kind: "legacy" };
+		const table = profileBundleFileTable(deferredFiles);
+		try {
+			const response = await withProfileBundleTimeout(box.runtimeFetch(PROFILE_BUNDLE_CLAIM_ENDPOINT, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					bundle,
+					files: table.map(({ mountPath, sha256 }) => ({
+						mountPath,
+						sha256
+					}))
+				})
+			}), "profile bundle claim");
+			if (PROFILE_BUNDLE_API_GONE_STATUSES.has(response.status)) {
+				this.unsupportedBoxes.add(box);
+				profileBundleDebug("box predates the bundle cache API", { status: response.status });
+				return { kind: "legacy" };
+			}
+			if (!response.ok) {
+				profileBundleDebug("claim refused; legacy delivery this turn", { status: response.status });
+				return { kind: "legacy" };
+			}
+			const body = await response.json();
+			if (body.status === "hit") return {
+				kind: "claimed",
+				missing: /* @__PURE__ */ new Set()
+			};
+			const claimed = new Set(table.map(({ mountPath }) => mountPath));
+			if (body.status !== "miss" || !Array.isArray(body.missing) || !body.missing.every((mountPath) => typeof mountPath === "string" && claimed.has(mountPath))) throw new Error("Malformed profile bundle claim response");
+			return {
+				kind: "claimed",
+				missing: new Set(body.missing)
+			};
+		} catch (error) {
+			profileBundleDebug("claim failed; legacy delivery this turn", { error: error instanceof Error ? error.message : String(error) });
+			return { kind: "legacy" };
+		}
+	}
+	async publishProfileBundle(box, deferredFiles, bundle) {
+		if (typeof box.runtimeFetch !== "function" || this.unsupportedBoxes.has(box)) return;
+		try {
+			const response = await withProfileBundleTimeout(box.runtimeFetch(PROFILE_BUNDLE_PUBLISH_ENDPOINT, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					bundle,
+					manifest: buildPublishManifest(box, deferredFiles, bundle)
+				})
+			}), "profile bundle publish");
+			if (!response.ok) profileBundleDebug("publish refused", { status: response.status });
+		} catch (error) {
+			profileBundleDebug("publish failed", { error: error instanceof Error ? error.message : String(error) });
+		}
+	}
 };
 //#endregion
 //#region ../../../packages/runtime-contracts/dist/interactive-session-http.js
@@ -7711,6 +8045,12 @@ var SandboxInstance = class SandboxInstance {
 	assertFilesystemIncarnationReady() {
 		if (this.filesystemIncarnationReadiness !== "ready") throw new StateError("Sandbox filesystem incarnation is not ready", this.status, "running with a ready filesystem incarnation");
 	}
+	/**
+	* One authenticated runtime HTTP call for this sandbox, relative endpoint
+	* (`/agents/...`), scoped to the current filesystem incarnation. This is
+	* the transport `/agents/profiles` rides and the box surface mount
+	* delivery uses for profile-bundle cache claim/publish.
+	*/
 	async runtimeFetch(path, options, fetchOptions) {
 		this.assertFilesystemIncarnationReady();
 		const url = `/v1/sandboxes/${encodeURIComponent(this.id)}/runtime${path}`;

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-DdUzvzA_.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-DoB4GMBh.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-Dt4FMrZs.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-7nYoMui0.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-Dt4FMrZs.js → tangle-7nYoMui0.js}

@@ -1,5 +1,5 @@
 import { x as readResponseJson } from "./errors-Cq4hMysQ.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-CfGVI_xk.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-DNwEDkL2.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-B7_9Hl_z.js";
 //#region src/tangle/abi.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.36-develop.20261011055857.b608789",
+  "version": "0.60.36-develop.20261011062548.c10773e",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -150,12 +150,12 @@
     "ws": "^8.20.0",
     "yjs": "13.6.30",
     "@products/sandbox-test-utils": "0.0.0",
-    "@repo/shared": "0.0.0",
     "@tangle-network/agent-profile-materialize": "0.22.4",
     "@tangle-network/cli-agent-registry": "0.6.2",
-    "@tangle-network/runtime-contracts": "0.16.0",
     "@tangle-network/sdk": "4.0.3",
-    "@tangle-network/sse-core": "0.0.0"
+    "@tangle-network/sse-core": "0.0.0",
+    "@tangle-network/runtime-contracts": "0.16.0",
+    "@repo/shared": "0.0.0"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",

package/dist/{local-cli-auth-D-_fMdNS.js → local-cli-auth-Bs0An6Cw.js}

@@ -1,7 +1,7 @@
 import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-Br8s2y4r.js";
 import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { join } from "node:path";
+import { homedir } from "node:os";
 //#region ../../../packages/cli-agent-registry/dist/local-cli-auth.mjs
 const DEFAULT_MODE = 384;
 function readAuthFile(sourcePath, targetPath) {