@tangle-network/sandbox 0.60.36 → 0.60.37-develop.20261011082415.1815a0e

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-Dw9YNtU4.js";
+import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-PrV7qtTE.js";
 import { D as CodeExecutionResult, E as CodeExecutionOptions, Ji as SessionInfo, Jr as SandboxFleetParent, O as CodeLanguage, Xi as SessionListOptions, d as BackendConfig, k as CodeResultPart, oo as BackendType } from "../types-C0XwJqxx.js";
-import { i as Sandbox } from "../client-CO5ShEdk.js";
-import { u as PreviewAuthorizer } from "../preview-DNAuiZly.js";
+import { i as Sandbox } from "../client-BVZv8JbS.js";
+import { u as PreviewAuthorizer } from "../preview-CFHnG116.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DjryqUiY.js";
 import { E as assertCurrentBackendType } from "../interactive-controller-Dxt5sW2N.js";
 import { h as StateError, l as NotFoundError, v as ValidationError } from "../errors-Cq4hMysQ.js";
-import { n as Sandbox } from "../client-B8OutXq2.js";
-import { t as SandboxInstance } from "../sandbox-CfGVI_xk.js";
+import { n as Sandbox } from "../client-CGbGnrBO.js";
+import { t as SandboxInstance } from "../sandbox-uwsfBoYj.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-DNAuiZly.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-CFHnG116.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/{client-CO5ShEdk.d.ts → client-BVZv8JbS.d.ts}

@@ -1,4 +1,4 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-Dw9YNtU4.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-PrV7qtTE.js";
 import { $r as SandboxFleetToken, Ar as SandboxFleetAgent, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ca as TokenRefreshHandler, En as ListSandboxOptions, F as CreateIntelligenceReportOptions, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetManifest, Gt as FleetMachineId, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ir as SandboxFleetDispatchResponse, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetArtifact, N as ConversationTurnResult, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Or as SandboxEnvironment, Pr as SandboxFleetCostEstimate, Qr as SandboxFleetSpend, R as CreateSandboxFleetTokenOptions, Ri as SecretsManager, Rt as FleetDispatchResultBuffer, Si as SandboxShapesInfo, Tn as ListSandboxFleetOptions, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, Vt as FleetDriveTurnOutcome, Wr as SandboxFleetMachineSpec, Wt as FleetExecDispatchResult, Xr as SandboxFleetPolicy, Yt as FleetRunOptions, _i as SandboxRunGeneration, _n as IntelligenceReport, ar as ReapExpiredSandboxFleetsResult, b as BatchRunRequest, br as SandboxConfig, ca as SshKeysManager, ci as SandboxFleetWorkspaceSnapshotResult, d as BackendConfig, ei as SandboxFleetTraceBundle, er as PublicTemplateInfo, fa as SubscriptionInfo, ii as SandboxFleetUsage, ir as ReapExpiredSandboxFleetsOptions, ka as UsageInfo, l as AttachSandboxFleetMachineOptions, li as SandboxIdentity, nr as PublishPublicTemplateOptions, oi as SandboxFleetWorkspaceReconcileResult, or as ReconcileSandboxFleetsOptions, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, ri as SandboxFleetTraceOptions, rr as PublishPublicTemplateVersionOptions, si as SandboxFleetWorkspaceRestoreResult, sr as ReconcileSandboxFleetsResult, to as BatchEvent, tr as PublicTemplateVersionInfo, ui as SandboxInfo, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-C0XwJqxx.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-CV1pMSKC.js";
 import { I as LinesClient } from "./lines-DQmR5ypP.js";

package/dist/{client-B8OutXq2.js → client-CGbGnrBO.js}

@@ -2,7 +2,7 @@ import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
 import { D as foldModelRoutingFields, E as assertCurrentBackendType, M as withProfileHarness, S as encodePromptForWire, T as applyRequestedModel, k as normalizeRuntimeBackendConfig, s as requestInteractiveSessionToken, w as parseSSEStream } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, l as NotFoundError, m as ServerError, p as SandboxError, s as NON_RETRYABLE_CREATE_QUOTA_REASONS, t as AuthError, u as PartialFailureError, v as ValidationError, x as readResponseJson, y as parseErrorResponse } from "./errors-Cq4hMysQ.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-CfGVI_xk.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-uwsfBoYj.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -3323,11 +3323,11 @@ function withRequestContextHeaders(response, path, method) {
 	return rewrapResponse(response, headers);
 }
 async function resolveLocalCliAuthFiles(backendType) {
-	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-D-_fMdNS.js");
+	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-Bs0An6Cw.js");
 	return discoverLocalCliAuthFiles(backendType);
 }
 async function describeLocalCliAuthExpectation(backendType) {
-	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-D-_fMdNS.js");
+	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-Bs0An6Cw.js");
 	return describe(backendType);
 }
 async function hydrateLocalCliBackendAuth(backend, baseUrl, trustLocalCliAuth) {

package/dist/core.d.ts

@@ -1,7 +1,7 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages } from "./sandbox-Dw9YNtU4.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages, v as ProfileFileDeliveryReport } from "./sandbox-PrV7qtTE.js";
 import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Ci as SandboxStatus, Fn as PreviewLinkInfo, Ha as ManagedProcessState, Ia as ManagedProcessClient, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessJobs, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Qi as SessionMessageAdmission, Ra as ManagedProcessOptions, Ua as SandboxEnvRecovery, Va as ManagedProcessSpec, Wa as SandboxEnvRecoveryView, br as SandboxConfig, ui as SandboxInfo, vt as ExecOptions, yt as ExecResult, za as ManagedProcessRecord } from "./types-C0XwJqxx.js";
 import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
-import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-CO5ShEdk.js";
+import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BVZv8JbS.js";
 import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-CRssX9qs.js";
 
 //#region src/core.d.ts
@@ -11,4 +11,4 @@ import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError,
  * still inspect the host receipt and their own customer/workspace binding. */
 declare const ISOLATED_CREATION_ATTESTATION_VERSION: 1;
 //#endregion
-export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type ConversationTurnOptions, type ConversationTurnResult, type CreateSandboxOptions, type EnsureInstanceOptions, type ExecOptions, type ExecResult, FileWriteConflictError, HostedInstance, ISOLATED_CREATION_ATTESTATION_VERSION, type InstanceProfile, type InstanceRecord, InstanceRestartingError, InstancesClient, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineInstanceAttachOptions, type LineInstanceCreate, type LineMember, type LineMemberInstance, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyCode, type LineReplyCodeInput, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, LinesClient, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, type SandboxEnvRecovery, type SandboxEnvRecoveryView, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, type SessionMessageAdmission, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, lineInstanceKey, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseLineApplicationRequest, parseLineApplicationResult, profileChannelReference };
+export { AuthError, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, CapabilityError, type ConversationTurnOptions, type ConversationTurnResult, type CreateSandboxOptions, type EnsureInstanceOptions, type ExecOptions, type ExecResult, FileWriteConflictError, HostedInstance, ISOLATED_CREATION_ATTESTATION_VERSION, type InstanceProfile, type InstanceRecord, InstanceRestartingError, InstancesClient, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineInstanceAttachOptions, type LineInstanceCreate, type LineMember, type LineMemberInstance, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyCode, type LineReplyCodeInput, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, LinesClient, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type ProfileFileDeliveryReport, type PromptInputPart, QuotaError, Sandbox, type SandboxConfig, type SandboxEnvRecovery, type SandboxEnvRecoveryView, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, type SessionMessageAdmission, StateError, TimeoutError, ValidationError, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, isBackendRegistryInteractionKind, lineInstanceKey, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseLineApplicationRequest, parseLineApplicationResult, profileChannelReference };

package/dist/core.js

@@ -1,6 +1,6 @@
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-B8OutXq2.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-CfGVI_xk.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-CGbGnrBO.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-uwsfBoYj.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-Cq6dJLBD.js";
 //#region src/core.ts

package/dist/{index-DdUzvzA_.d.ts → index-C8zV32IL.d.ts}

@@ -1,4 +1,4 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-Dw9YNtU4.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-PrV7qtTE.js";
 import { B as CreateSandboxOptions } from "./types-C0XwJqxx.js";
 
 //#region src/tangle/abi.d.ts

package/dist/index.d.ts

@@ -1,17 +1,17 @@
-import { A as InteractiveStopCommand, B as SandboxInteractionConflict, C as InteractiveSessionHandleOptions, D as InteractiveSessionRef, E as InteractiveSessionInfo, F as InteractiveTerminalFrameLog, G as CONTROL_PLANE_MCP_SERVER_NAME, H as SandboxInteractionResult, I as InteractiveTerminalMetadata, J as SandboxMcpEndpoint, K as SANDBOX_MCP_SERVER_NAME, L as createInteractiveTerminalCapture, M as RespondToPermissionOptions, N as agentInteractiveSessionPromptRequestDigest, O as InteractiveSessionStartOptions, P as InteractiveTerminalCapture, R as createInteractiveTerminalSession, S as InteractiveSessionHandle, T as InteractiveSessionIncarnationId, U as BuildControlPlaneMcpConfigOptions, V as SandboxInteractionResolution, W as BuildSandboxMcpConfigOptions, X as buildControlPlaneMcpConfig, Y as SandboxMcpServerEntry, Z as buildSandboxMcpConfig, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, b as InteractivePromptCommand, c as TraceExportFormat, d as buildTraceExportPayload, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, j as InterruptResult, k as InteractiveSessionStartResult, l as TraceExportResult, m as toOtelJson, o as WorkspaceImagePublishResult, p as otelTraceIdForTangleTrace, q as SandboxMcpConfig, r as SandboxInstance, s as WorkspaceImages, t as ForkAcknowledgement, u as TraceExportSink, v as AgentInteractiveTerminalSession, w as InteractiveSessionHost, x as InteractiveSessionControlClaim, y as InteractiveControlClaimRequest, z as SandboxInteractionCommandResult } from "./sandbox-Dw9YNtU4.js";
+import { $ as BuildSandboxMcpConfigOptions, A as InteractiveSessionControlClaim, B as InterruptResult, C as materializeProfileFileMounts, D as AgentInteractiveTerminalSession, E as validateDeferredProfileFileMounts, F as InteractiveSessionInfo, G as InteractiveTerminalMetadata, H as agentInteractiveSessionPromptRequestDigest, I as InteractiveSessionRef, J as SandboxInteractionCommandResult, K as createInteractiveTerminalCapture, L as InteractiveSessionStartOptions, M as InteractiveSessionHandleOptions, N as InteractiveSessionHost, O as InteractiveControlClaimRequest, P as InteractiveSessionIncarnationId, Q as BuildControlPlaneMcpConfigOptions, R as InteractiveSessionStartResult, S as SplitInlineProfileSkillsResult, T as splitInlineProfileSkills, U as InteractiveTerminalCapture, V as RespondToPermissionOptions, W as InteractiveTerminalFrameLog, X as SandboxInteractionResolution, Y as SandboxInteractionConflict, Z as SandboxInteractionResult, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, at as buildControlPlaneMcpConfig, b as MaterializeProfileFileMountsResult, c as TraceExportFormat, d as buildTraceExportPayload, et as CONTROL_PLANE_MCP_SERVER_NAME, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, it as SandboxMcpServerEntry, j as InteractiveSessionHandle, k as InteractivePromptCommand, l as TraceExportResult, m as toOtelJson, nt as SandboxMcpConfig, o as WorkspaceImagePublishResult, ot as buildSandboxMcpConfig, p as otelTraceIdForTangleTrace, q as createInteractiveTerminalSession, r as SandboxInstance, rt as SandboxMcpEndpoint, s as WorkspaceImages, t as ForkAcknowledgement, tt as SANDBOX_MCP_SERVER_NAME, u as TraceExportSink, v as ProfileFileDeliveryReport, w as splitInlineProfileFileMounts, x as SplitInlineProfileFileMountsResult, y as MaterializeProfileFileMountsOptions, z as InteractiveStopCommand } from "./sandbox-PrV7qtTE.js";
 import { $ as DownloadOptions, $a as PublicBatchRunRequest, $i as SessionMessageInputPart, $n as PublicProfileConflict, $r as SandboxFleetToken, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, An as NetworkConfig, Ar as SandboxFleetAgent, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Bi as SendSessionMessageRequest, Bn as ProcessListOptions, Br as SandboxFleetIntelligenceEnvelope, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TokenRefreshHandler, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, Ct as FileReadError, Da as UploadOptions, Di as SandboxTerminalManager, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEgressUsage, Dt as FileTreeFile, Ea as UpdateUserOptions, Ei as SandboxTerminalInfo, En as ListSandboxOptions, Er as SandboxDeleteOutcome, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as WriteManyOptions, Fi as SearchMatch, Fn as PreviewLinkInfo, Fr as SandboxFleetDispatchFailureClass, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceArchiveManifest, Gi as SessionExecutionStatus, Gn as ProcessStatus, Gr as SandboxFleetManifest, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as ManagedProcessState, Hi as SessionBackendCredentials, Hn as ProcessManager, Hr as SandboxFleetMachineMeteredUsage, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessClient, Ii as SearchOptions, In as PreviewLinkManager, Ir as SandboxFleetDispatchResponse, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidenceNativeFile, Ji as SessionInfo, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceDirectoryExport, Ki as SessionFailureReason, Kn as PromptInputPart, Kr as SandboxFleetManifestMachine, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessJobs, Li as SecretInfo, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mi as SandboxTraceExport, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetArtifact, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, Nn as PermissionLevel, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, On as McpServerConfig, Or as SandboxEnvironment, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as WriteManyFile, Pi as SandboxUser, Pn as PermissionsManager, Pr as SandboxFleetCostEstimate, Pt as FleetAgentPlacement, Q as DispatchedSession, Qi as SessionMessageAdmission, Qn as ProvisionStep, Qr as SandboxFleetSpend, Qt as ForkLookupOptions, Ra as ManagedProcessOptions, Ri as SecretsManager, Rn as Process, Rr as SandboxFleetDriverTimings, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TeePublicKeyResponse, Si as SandboxShapesInfo, Sr as SandboxCreateOutcome, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as TurnDriveResult, Ti as SandboxTerminalCreateOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOptions, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, Un as ProcessSignal, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as ManagedProcessSpec, Vi as SentSessionMessage, Vn as ProcessLogEntry, Vr as SandboxFleetMachine, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Wn as ProcessSpawnOptions, Wr as SandboxFleetMachineSpec, X as DirectoryPermission, Xa as RawEvidenceRecordsFile, Xi as SessionListOptions, Xn as ProvisionResult, Xr as SandboxFleetPolicy, Xt as ForkCounts, Y as DevServerInfo, Ya as RawEvidencePayloadFile, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Yr as SandboxFleetPlacement, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionMessage, Zn as ProvisionStatus, Zr as SandboxFleetProfileRef, Zt as ForkIdempotency, _ as BatchBackend, _a as TaskSessionProfile, _i as SandboxRunGeneration, _n as IntelligenceReport, _r as RolloutTurnPart, _t as ExactProcessSpawnOptions, aa as SnapshotInfo, ai as SandboxFleetWorkspace, an as GitStatus, ao as ALL_BACKEND_TYPES, ar as ReapExpiredSandboxFleetsResult, at as DriverType, b as BatchRunRequest, ba as TeeAttestationResponse, bi as SandboxShape, bn as IntelligenceReportSubjectType, br as SandboxConfig, bt as FileInfo, c as AttachGpuLeaseOptions, ci as SandboxFleetWorkspaceSnapshotResult, cn as GpuLeaseCommandResult, cr as RenameOptions, d as BackendConfig, da as StorageConfig, di as SandboxIntelligenceEnvelope, dn as GpuLeaseManager, dr as Rollout, dt as EffectiveBackendSource, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, en as GitAuth, eo as BatchBackendStats, er as PublicTemplateInfo, et as DownloadProgress, f as BackendInfo, fa as SubscriptionInfo, fi as SandboxPortBinding, fn as GpuLeaseProviderName, fr as RolloutChildResult, ft as EgressDenial, g as BackendStatus, ga as TaskSessionInfo, gi as SandboxResources, gn as InstalledTool, gr as RolloutStatus, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionFileChange, hi as SandboxResourceUsage, hn as HostAgentRuntimeBackend, hr as RolloutStartResult, ht as EnsureDevServerOptions, ia as SnapshotIdempotency, ii as SandboxFleetUsage, in as GitDiff, io as BatchTaskUsage, ir as ReapExpiredSandboxFleetsOptions, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, ji as SandboxTraceEvent, jn as NetworkManager, jr as SandboxFleetAgentSpec, jt as FileUsageResult, ka as UsageInfo, ki as SandboxTerminals, kn as MkdirOptions, kr as SandboxEvent, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StartupDiagnostics, li as SandboxIdentity, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionCommitResult, mi as SandboxRemovalState, mn as HostAgentDriverConfig, mr as RolloutScorer, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotDeleteAcknowledgement, ni as SandboxFleetTraceExport, nn as GitCommit, no as BatchEventDataMap, nr as PublishPublicTemplateOptions, nt as DriveTurnOptions, oa as SnapshotOptions, oi as SandboxFleetWorkspaceReconcileResult, on as GpuLease, oo as BackendType, or as ReconcileSandboxFleetsOptions, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pi as SandboxPortPreviewLink, pn as GpuLeaseStatus, pr as RolloutOptions, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotDeleteOutcome, ri as SandboxFleetTraceOptions, rn as GitConfig, ro as BatchSidecarGroup, rr as PublishPublicTemplateVersionOptions, rt as DriverConfig, sa as SnapshotResult, si as SandboxFleetWorkspaceRestoreResult, sn as GpuLeaseBilling, so as parseBackendType, sr as ReconcileSandboxFleetsResult, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SessionStatus, ti as SandboxFleetTraceEvent, tn as GitBranch, to as BatchEvent, tr as PublicTemplateVersionInfo, tt as DownloadResult, u as BackendCapabilities, ua as StartupOperation, ui as SandboxInfo, un as GpuLeaseExecResult, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, w as ChunkedUploadOptions, wa as TokenUsage, wi as SandboxTerminalAttachOptions, wn as ListOptions, wr as SandboxDeleteAcknowledgement, wt as FileReadResult, x as BatchTask, xa as TeePublicKey, xi as SandboxShapePreset, xn as IntelligenceReportWindow, xr as SandboxConnection, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeeAttestationReport, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessRecord, zi as SendSessionMessageOptions, zn as ProcessInfo, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-C0XwJqxx.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-CV1pMSKC.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as interactiveSessionIdentityDigest, f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as InteractiveSessionNotRunningError, m as InteractiveControlClaimOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimAcknowledgement, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as createInteractiveControlHolderId } from "./browser-interactive-control-controller-JUW3gOGH.js";
 import { a as InteractiveSessionControllerOptions, i as InteractiveSessionController, n as BrowserInteractiveSessionControllerOptions, o as InteractiveSessionControllerTransport, r as InteractiveAttachRequest, t as BrowserInteractiveSessionController } from "./interactive-controller-DNbLzamS.js";
 import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
-import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-CO5ShEdk.js";
+import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BVZv8JbS.js";
 import { _ as StreamInterruptedError, a as FileWriteConflictError, b as ValidationError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as StateError, h as ServerError, i as EgressProxyRecoveryError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxErrorJson, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as StreamInterruptionReason, y as TimeoutError } from "./errors-CRssX9qs.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-BgmgfYZZ.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DHuHjNie.js";
 import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C0CsZPED.js";
-import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-DdUzvzA_.js";
+import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-C8zV32IL.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
-import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileFileMount as AgentProfileFileMount$1, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
+import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
 //#region src/attestation-heartbeat.d.ts
@@ -4098,79 +4098,6 @@ interface ManageGpuLeasePolicy {
 }
 declare function createManageSandboxesTool(client: Sandbox, options?: ManageSandboxesToolOptions): ManageSandboxesTool;
 //#endregion
-//#region src/profile-file-mounts.d.ts
-interface SplitInlineProfileFileMountsResult {
-  leanProfile: AgentProfile$1;
-  deferredFiles: AgentProfileFileMount$1[];
-}
-interface MaterializeProfileFileMountsOptions extends WriteManyOptions {
-  /** Recovered handles refuse to replace files with different content or modes. */
-  existingFiles?: "replace" | "allow-identical";
-  /** Hard timeout per exec fallback command. */
-  execTimeoutMs?: number;
-  /**
-   * Absolute sandbox paths the file API may write directly. Relative paths are
-   * file API eligible when safe. `~/...` resolves through the fixed agent home
-   * when that prefix is allowed. Other absolute paths use exec.
-   */
-  fileApiAbsolutePrefixes?: readonly string[];
-}
-interface MaterializeProfileFileMountsResult {
-  written: number;
-  viaFileApi: number;
-  viaExec: number;
-  /** Files delivered through {@link FileSystem.uploadData} because their
-   *  serialized content does not fit a gateway-safe single-shot write. */
-  viaUpload: number;
-}
-/**
- * The sandbox surface mount delivery uses. SandboxInstance satisfies it; the
- * types come from ./types.js so this module never imports ./sandbox.js, which
- * imports it.
- */
-type ProfileFileMountBox = {
-  exec(command: string, options?: ExecOptions): Promise<ExecResult>;
-  fs?: Pick<FileSystem, "supportsWriteMode" | "writeMany"> & {
-    /**
-     * Optional chunked-upload capability. Only required when a deferred
-     * inline mount's decoded content exceeds the gateway-safe single-shot
-     * write ceiling — {@link materializeProfileFileMounts} fails loud
-     * (naming the oversized mount) rather than attempting a single-shot
-     * write the wire would reject.
-     */
-    uploadData?: FileSystem["uploadData"];
-  };
-};
-/**
- * Synchronous pre-flight validation of deferred inline mounts: the same
- * content/path rules {@link materializeProfileFileMounts} enforces, runnable
- * BEFORE a sandbox is provisioned. create() calls this ahead of its POST so
- * client-detectable bad input (traversal paths, control characters,
- * non-string content) fails without paying for a sandbox that would only be
- * orphaned by the post-provision throw.
- */
-declare function validateDeferredProfileFileMounts(files: readonly AgentProfileFileMount$1[]): void;
-interface SplitInlineProfileSkillsResult {
-  /** Profile with inline skill refs removed (github refs kept — they resolve
-   *  server-side). Suitable for the create body, whose wire cap the full skill
-   *  corpus would exceed. */
-  leanProfile: AgentProfile$1;
-  /** How many inline skill refs were stripped. Zero means nothing to defer. */
-  deferredSkillCount: number;
-}
-/**
- * Split inline `resources.skills` out of a profile the way
- * {@link splitInlineProfileFileMounts} splits inline files: the returned
- * `leanProfile` drops them so the create POST fits its wire cap. Unlike file
- * mounts, skills are NOT materialized to disk here — they are harness-specific
- * (each turn's harness needs them in its own dir), so they must ride the
- * per-turn profile. The full profile is delivered once (create-time priming)
- * and referenced by hash thereafter.
- */
-declare function splitInlineProfileSkills(profile: AgentProfile$1): SplitInlineProfileSkillsResult;
-declare function splitInlineProfileFileMounts(profile: AgentProfile$1): SplitInlineProfileFileMountsResult;
-declare function materializeProfileFileMounts(box: ProfileFileMountBox, files: readonly AgentProfileFileMount$1[], options?: MaterializeProfileFileMountsOptions): Promise<MaterializeProfileFileMountsResult>;
-//#endregion
 //#region src/resources.d.ts
 /** The concrete cpu/memory/disk for each named tier. */
 type SizePresetResources = Required<Pick<SandboxResources, "cpuCores" | "memoryMB" | "diskGB">>;
@@ -4471,4 +4398,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type ConversationTurnOptions, type ConversationTurnResult, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteMatchingSandboxOutcome, type DeleteMatchingSandboxResult, type DeleteMatchingSandboxesFilter, type DeleteMatchingSandboxesOptions, type DeleteMatchingSandboxesResult, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DownloadResult, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EnsureInstanceOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetAgentId, type FleetAgentPlacement, type FleetAgentResult, type FleetAgentRunStatus, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type FleetPromptDispatchResult, type FleetRunEvent, type FleetRunOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, HostedInstance, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, type InstanceProfile, type InstanceRecord, InstanceRestartingError, type InstanceStart, InstancesClient, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, InteractiveSessionNotRunningError, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineAllowance, type LineAllowanceSubject, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachOptions, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineFromConnectionInput, type LineInstanceAttachOptions, type LineInstanceCreate, type LineLimits, type LineMember, type LineMemberInstance, type LineMemberPatch, type LineMemberSpec, type LineMessage, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyCode, type LineReplyCodeInput, type LineReplyGate, type LineRespondAgent, type LineRespondView, type LineRole, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, type LineThread, type LineTransport, type LineVoice, type LineVoiceOptions, LinesClient, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicProfileConflict, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type RawEvidenceArchiveManifest, type RawEvidenceDirectoryExport, type RawEvidenceExport, type RawEvidenceExportOptions, type RawEvidenceNativeFile, type RawEvidencePayloadFile, type RawEvidenceRecordsFile, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, ResumeEnvRequiredError, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunOptions, type RunPlacement, type RunPlacementRecord, type RunRecord, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, type RunWaitOptions, RunsClient, type RunsHttpClient, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEgressUsage, type SandboxEnvRecovery, type SandboxEnvRecoveryView, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetAgent, type SandboxFleetAgentSpec, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetParent, type SandboxFleetPlacement, type SandboxFleetPolicy, type SandboxFleetProfileRef, type SandboxFleetSpend, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, SandboxLines, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRunGeneration, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxShape, type SandboxShapePreset, type SandboxShapesInfo, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageAdmission, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, StreamInterruptedError, type StreamInterruptionReason, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, lineInstanceKey, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseLineApplicationRequest, parseLineApplicationResult, parseSSEStream, profileChannelReference, projectAgentTerminalRecord, requestedPublicProfileDigest, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };
+export { ALL_BACKEND_TYPES, type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentInteractiveTerminalSession, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileSecurityPolicy, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunOutcome, type AgentRunOutcomeTracker, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendMcpServerStatus, type BackendRegistryCapabilities, type BackendRegistryEntry, type BackendRegistryInteractionKind, type BackendRegistryResponse, type BackendRuntimeConfigUpdate, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchResult, type BatchResultAccumulator, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, BrowserInteractiveSessionControlController, type BrowserInteractiveSessionControlControllerOptions, BrowserInteractiveSessionController, type BrowserInteractiveSessionControllerOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, type Capability, CapabilityError, type ChunkedUploadOptions, type ChunkedUploadResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type ConversationTurnOptions, type ConversationTurnResult, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteMatchingSandboxOutcome, type DeleteMatchingSandboxResult, type DeleteMatchingSandboxesFilter, type DeleteMatchingSandboxesOptions, type DeleteMatchingSandboxesResult, type DeleteOptions, type DevServerInfo, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DownloadResult, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type DurablePlan, type DurablePlanDecisionResult, EdgeNotReadyError, type EffectiveBackend, type EffectiveBackendProfile, type EffectiveBackendSource, type EgressDenial, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EnsureDevServerOptions, type EnsureInstanceOptions, type EventStreamOptions, type ExactProcessSpawnOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileUsageOptions, type FileUsageResult, FileWriteConflictError, type FileWriteResult, type FleetAgentId, type FleetAgentPlacement, type FleetAgentResult, type FleetAgentRunStatus, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetDriveTurnOutcome, type FleetDriveTurnRequest, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type FleetPromptDispatchResult, type FleetRunEvent, type FleetRunOptions, type ForkAcknowledgement, type ForkCounts, type ForkIdempotency, type ForkLookupOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type HostAgentDriverConfig, type HostAgentRuntimeBackend, HostedInstance, INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, type InstanceProfile, type InstanceRecord, InstanceRestartingError, type InstanceStart, InstancesClient, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAttachOptions, type InteractiveAttachRequest, type InteractiveControlClaimAcknowledgement, type InteractiveControlClaimOptions, type InteractiveControlClaimRequest, type InteractivePromptCommand, type InteractiveRequestOptions, type InteractiveSessionControlClaim, InteractiveSessionControlController, type InteractiveSessionControlControllerOptions, type InteractiveSessionControlTransport, InteractiveSessionController, type InteractiveSessionControllerOptions, type InteractiveSessionControllerTransport, InteractiveSessionHandle, type InteractiveSessionHandleOptions, type InteractiveSessionHost, type InteractiveSessionIdentity, type InteractiveSessionIncarnationId, type InteractiveSessionInfo, InteractiveSessionNotRunningError, type InteractiveSessionRef, type InteractiveSessionStartOptions, type InteractiveSessionStartResult, type InteractiveSessionStatus, type InteractiveStopCommand, type InteractiveTerminalCapture, InteractiveTerminalFrameLog, type InteractiveTerminalMetadata, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, KeyBudgetExhaustedError, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, type Line, type LineAgentRolePolicy, type LineAllowance, type LineAllowanceSubject, type LineApplication, type LineApplicationAttachOptions, type LineApplicationRequest, type LineApplicationResult, type LineApplicationState, type LineApplicationView, type LineAttachOptions, type LineAttachment, type LineAttachmentReauthorization, type LineExecutionKey, type LineFromConnectionInput, type LineInstanceAttachOptions, type LineInstanceCreate, type LineLimits, type LineMember, type LineMemberInstance, type LineMemberPatch, type LineMemberSpec, type LineMessage, type LineNumberInventory, type LineProvider, type LineReminderPreferences, type LineReplyCode, type LineReplyCodeInput, type LineReplyGate, type LineRespondAgent, type LineRespondView, type LineRole, type LineSendInput, type LineSendReceipt, type LineSenderVerification, type LineSenderVerificationStart, type LineThread, type LineTransport, type LineVoice, type LineVoiceOptions, LinesClient, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, MAX_EGRESS_DENIALS_LIMIT, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, ManagedProcessClient, type ManagedProcessJobs, type ManagedProcessOptions, type ManagedProcessRecord, type ManagedProcessResumeOptions, type ManagedProcessSpec, type ManagedProcessState, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintInteractiveSessionTokenOptions, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type PreviewLinkWaitOptions, type Process, type ProcessInfo, type ProcessListOptions, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type ProfileFileDeliveryReport, type PromptInputPart, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicProfileConflict, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type RawEvidenceArchiveManifest, type RawEvidenceDirectoryExport, type RawEvidenceExport, type RawEvidenceExportOptions, type RawEvidenceNativeFile, type RawEvidencePayloadFile, type RawEvidenceRecordsFile, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, ResumeEnvRequiredError, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunOptions, type RunPlacement, type RunPlacementRecord, type RunRecord, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, type RunWaitOptions, RunsClient, type RunsHttpClient, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, Sandbox, type SandboxConfig, type SandboxConnection, type SandboxCreateOutcome, type SandboxCreateReceipt, type SandboxDeleteAcknowledgement, type SandboxDeleteOptions, type SandboxDeleteOutcome, type SandboxEgressUsage, type SandboxEnvRecovery, type SandboxEnvRecoveryView, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetAgent, type SandboxFleetAgentSpec, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetParent, type SandboxFleetPlacement, type SandboxFleetPolicy, type SandboxFleetProfileRef, type SandboxFleetSpend, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxIdentity, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxInteractionCommandResult, type SandboxInteractionConflict, type SandboxInteractionResolution, type SandboxInteractionResult, SandboxLines, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxRemovalState, type SandboxResourceUsage, type SandboxResources, type SandboxRunGeneration, type SandboxRuntimeCapabilities, type SandboxRuntimeHealth, SandboxSession, type SandboxShape, type SandboxShapePreset, type SandboxShapesInfo, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalAttachOptions, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTerminals, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionExecutionInfo, type SessionExecutionStatus, type SessionFailureReason, type SessionForkOptions, type SessionInfo, type SessionInterruptOptions, type SessionListOptions, type SessionMessage, type SessionMessageAdmission, type SessionMessageInputPart, type SessionResultOptions, type SessionStatus, type SnapshotDeleteAcknowledgement, type SnapshotDeleteOutcome, type SnapshotIdempotency, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type SplitInlineProfileSkillsResult, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, StreamInterruptedError, type StreamInterruptionReason, type SubscriptionInfo, TERMINAL_WS_ECHO_SUBPROTOCOL, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, type TerminalExitInfo, type TerminalInteractiveSessionIdentity, type TerminalOutputMessage, type TerminalReadyInfo, TerminalStream, type TerminalStreamAuthFormat, TerminalStreamError, type TerminalStreamHandlers, type TerminalStreamOptions, type TerminalStreamToken, TimeoutError, type TokenRefreshHandler, type TokenUsage, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WorkspaceImagePublishInput, type WorkspaceImagePublishRequestOptions, type WorkspaceImagePublishResult, WorkspaceImages, type WorkspaceOperationLookup, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, browserInteractiveControlHolderId, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentFinalMessageText, collectAgentResponseText, createAgentRunOutcomeTracker, createBatchResultAccumulator, createConfidentialSandbox, createInteractiveControlHolderId, createInteractiveTerminalCapture, createInteractiveTerminalSession, createManageSandboxesTool, deriveAgentResultOutcome, deriveAgentRunOutcome, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, agentInteractiveSessionPromptRequestDigest as interactivePromptRequestDigest, interactiveSessionIdentityDigest, isBackendRegistryInteractionKind, isToolBearingEvent, lineInstanceKey, manageSandboxesInputSchema, materializeProfileFileMounts, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseBackendType, parseCollaborationDocumentId, parseLineApplicationRequest, parseLineApplicationResult, parseSSEStream, profileChannelReference, projectAgentTerminalRecord, requestedPublicProfileDigest, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, splitInlineProfileFileMounts, splitInlineProfileSkills, startTeeAttestationHeartbeat, toOtelJson, validateBatchRunRequest, validateDeferredProfileFileMounts };

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
 import { A as requestedPublicProfileDigest, F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, L as projectAgentTerminalRecord, P as createAgentRunOutcomeTracker, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, k as normalizeRuntimeBackendConfig, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, w as parseSSEStream } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as StreamInterruptedError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-B8OutXq2.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-CGbGnrBO.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-CfGVI_xk.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-uwsfBoYj.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DaWEv29D.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-Cq6dJLBD.js";
-import { s as TangleSandboxClient } from "./tangle-Dt4FMrZs.js";
+import { s as TangleSandboxClient } from "./tangle-B06VSOdG.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{preview-DNAuiZly.d.ts → preview-CFHnG116.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-Dw9YNtU4.js";
+import { r as SandboxInstance } from "./sandbox-PrV7qtTE.js";
 import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-C0XwJqxx.js";
-import { i as Sandbox } from "./client-CO5ShEdk.js";
+import { i as Sandbox } from "./client-BVZv8JbS.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/{sandbox-Dw9YNtU4.d.ts → sandbox-PrV7qtTE.d.ts}

@@ -4,7 +4,7 @@ import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h a
 import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-JUW3gOGH.js";
 import { r as InteractiveAttachRequest } from "./interactive-controller-DNbLzamS.js";
 import { R as SandboxLines } from "./lines-DQmR5ypP.js";
-import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
+import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentProfileFileMount, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 
 //#region src/mcp.d.ts
@@ -332,6 +332,103 @@ declare class InteractiveSessionHandle {
   stopLifecycle(options?: InteractiveRequestOptions): Promise<AgentInteractiveSessionStopAcknowledgement>;
 }
 //#endregion
+//#region src/profile-file-mounts.d.ts
+interface SplitInlineProfileFileMountsResult {
+  leanProfile: AgentProfile;
+  deferredFiles: AgentProfileFileMount[];
+}
+interface MaterializeProfileFileMountsOptions extends WriteManyOptions {
+  /** Recovered handles refuse to replace files with different content or modes. */
+  existingFiles?: "replace" | "allow-identical";
+  /** Hard timeout per exec fallback command. */
+  execTimeoutMs?: number;
+  /**
+   * Absolute sandbox paths the file API may write directly. Relative paths are
+   * file API eligible when safe. `~/...` resolves through the fixed agent home
+   * when that prefix is allowed. Other absolute paths use exec.
+   */
+  fileApiAbsolutePrefixes?: readonly string[];
+}
+interface MaterializeProfileFileMountsResult {
+  written: number;
+  viaFileApi: number;
+  viaExec: number;
+  /** Files delivered through {@link FileSystem.uploadData} because their
+   *  serialized content does not fit a gateway-safe single-shot write. */
+  viaUpload: number;
+}
+/**
+ * The sandbox surface mount delivery uses. SandboxInstance satisfies it; the
+ * types come from ./types.js so this module never imports ./sandbox.js, which
+ * imports it.
+ */
+type ProfileFileMountBox = {
+  exec(command: string, options?: ExecOptions): Promise<ExecResult>;
+  fs?: Pick<FileSystem, "supportsWriteMode" | "writeMany"> & {
+    /**
+     * Optional chunked-upload capability. Only required when a deferred
+     * inline mount's decoded content exceeds the gateway-safe single-shot
+     * write ceiling — {@link materializeProfileFileMounts} fails loud
+     * (naming the oversized mount) rather than attempting a single-shot
+     * write the wire would reject.
+     */
+    uploadData?: FileSystem["uploadData"];
+  };
+  /**
+   * Optional box runtime HTTP transport — the same fetch `/agents/profiles`
+   * rides. Backs the profile-bundle cache claim/publish protocol; a box
+   * without it (foreign implementations, tests) always takes the legacy
+   * staged path and never claims or publishes.
+   */
+  runtimeFetch?: (endpoint: string, init?: RequestInit) => Promise<Response>;
+};
+/**
+ * Synchronous pre-flight validation of deferred inline mounts: the same
+ * content/path rules {@link materializeProfileFileMounts} enforces, runnable
+ * BEFORE a sandbox is provisioned. create() calls this ahead of its POST so
+ * client-detectable bad input (traversal paths, control characters,
+ * non-string content) fails without paying for a sandbox that would only be
+ * orphaned by the post-provision throw.
+ */
+declare function validateDeferredProfileFileMounts(files: readonly AgentProfileFileMount[]): void;
+interface SplitInlineProfileSkillsResult {
+  /** Profile with inline skill refs removed (github refs kept — they resolve
+   *  server-side). Suitable for the create body, whose wire cap the full skill
+   *  corpus would exceed. */
+  leanProfile: AgentProfile;
+  /** How many inline skill refs were stripped. Zero means nothing to defer. */
+  deferredSkillCount: number;
+}
+/**
+ * Split inline `resources.skills` out of a profile the way
+ * {@link splitInlineProfileFileMounts} splits inline files: the returned
+ * `leanProfile` drops them so the create POST fits its wire cap. Unlike file
+ * mounts, skills are NOT materialized to disk here — they are harness-specific
+ * (each turn's harness needs them in its own dir), so they must ride the
+ * per-turn profile. The full profile is delivered once (create-time priming)
+ * and referenced by hash thereafter.
+ */
+declare function splitInlineProfileSkills(profile: AgentProfile): SplitInlineProfileSkillsResult;
+declare function splitInlineProfileFileMounts(profile: AgentProfile): SplitInlineProfileFileMountsResult;
+declare function materializeProfileFileMounts(box: ProfileFileMountBox, files: readonly AgentProfileFileMount[], options?: MaterializeProfileFileMountsOptions): Promise<MaterializeProfileFileMountsResult>;
+//#endregion
+//#region src/profile-file-delivery.d.ts
+/**
+ * How the last successful profile file preparation was satisfied, so a caller
+ * can report the cost of the prepare phase per turn:
+ * - `receipt`: this handle already delivered the bundle to this incarnation;
+ * - `hit`: the host cache linked every file in-box;
+ * - `partial`: the cache linked some files and the rest were delivered;
+ * - `miss`: every file was delivered, then published to the host cache;
+ * - `legacy`: the box has no cache API, so every file was delivered.
+ */
+interface ProfileFileDeliveryReport {
+  outcome: "receipt" | "hit" | "partial" | "miss" | "legacy";
+  files: number;
+  deliveredFiles: number;
+  durationMs: number;
+}
+//#endregion
 //#region src/session.d.ts
 type RawEvidenceAttempt = {
   executionId: string;
@@ -1119,6 +1216,12 @@ declare class SandboxInstance {
    * object passed as a per-turn override — is compared correctly: unchanged
    * content references by hash, changed content sends inline.
    */
+  /**
+   * How this handle's most recent profile file preparation was satisfied
+   * (host cache hit, partial, miss, legacy delivery, or a held receipt) and
+   * how long it took. Undefined until a profile with file mounts is prepared.
+   */
+  get lastProfileFileDelivery(): ProfileFileDeliveryReport | undefined;
   /** @internal Shared create/turn delivery; caller policy decides how to expose failures. */
   materializeProfileFiles(profile: AgentProfile, signal?: AbortSignal, existingFiles?: "replace" | "allow-identical"): Promise<AgentProfile>;
   private buildRunBackendBody;
@@ -1875,7 +1978,15 @@ declare class SandboxInstance {
   private ensureRunning;
   private ensureRunningForPrompt;
   private assertFilesystemIncarnationReady;
-  private runtimeFetch;
+  /**
+   * One authenticated runtime HTTP call for this sandbox, relative endpoint
+   * (`/agents/...`), scoped to the current filesystem incarnation. This is
+   * the transport `/agents/profiles` rides and the box surface mount
+   * delivery uses for profile-bundle cache claim/publish.
+   */
+  runtimeFetch(path: string, options?: RequestInit, fetchOptions?: {
+    timeoutMs?: number;
+  }): Promise<Response>;
   /**
    * Delegates to the shared `parseSSEStream` in `lib/sse-parser.ts`
    * — one canonical SSE implementation for the whole SDK. The
@@ -2179,4 +2290,4 @@ declare class SandboxInstance {
   }): Promise<DurablePlanDecisionResult>;
 }
 //#endregion
-export { InteractiveStopCommand as A, SandboxInteractionConflict as B, InteractiveSessionHandleOptions as C, InteractiveSessionRef as D, InteractiveSessionInfo as E, InteractiveTerminalFrameLog as F, CONTROL_PLANE_MCP_SERVER_NAME as G, SandboxInteractionResult as H, InteractiveTerminalMetadata as I, SandboxMcpEndpoint as J, SANDBOX_MCP_SERVER_NAME as K, createInteractiveTerminalCapture as L, RespondToPermissionOptions as M, agentInteractiveSessionPromptRequestDigest as N, InteractiveSessionStartOptions as O, InteractiveTerminalCapture as P, createInteractiveTerminalSession as R, InteractiveSessionHandle as S, InteractiveSessionIncarnationId as T, BuildControlPlaneMcpConfigOptions as U, SandboxInteractionResolution as V, BuildSandboxMcpConfigOptions as W, buildControlPlaneMcpConfig as X, SandboxMcpServerEntry as Y, buildSandboxMcpConfig as Z, SandboxSession as _, WorkspaceImagePublishRequestOptions as a, InteractivePromptCommand as b, TraceExportFormat as c, buildTraceExportPayload as d, exportTraceBundle as f, RawEvidenceExport as g, SandboxTaskSession as h, WorkspaceImagePublishInput as i, InterruptResult as j, InteractiveSessionStartResult as k, TraceExportResult as l, toOtelJson as m, HttpClient as n, WorkspaceImagePublishResult as o, otelTraceIdForTangleTrace as p, SandboxMcpConfig as q, SandboxInstance as r, WorkspaceImages as s, ForkAcknowledgement as t, TraceExportSink as u, AgentInteractiveTerminalSession$1 as v, InteractiveSessionHost as w, InteractiveSessionControlClaim as x, InteractiveControlClaimRequest as y, SandboxInteractionCommandResult as z };
+export { BuildSandboxMcpConfigOptions as $, InteractiveSessionControlClaim as A, InterruptResult as B, materializeProfileFileMounts as C, AgentInteractiveTerminalSession$1 as D, validateDeferredProfileFileMounts as E, InteractiveSessionInfo as F, InteractiveTerminalMetadata as G, agentInteractiveSessionPromptRequestDigest as H, InteractiveSessionRef as I, SandboxInteractionCommandResult as J, createInteractiveTerminalCapture as K, InteractiveSessionStartOptions as L, InteractiveSessionHandleOptions as M, InteractiveSessionHost as N, InteractiveControlClaimRequest as O, InteractiveSessionIncarnationId as P, BuildControlPlaneMcpConfigOptions as Q, InteractiveSessionStartResult as R, SplitInlineProfileSkillsResult as S, splitInlineProfileSkills as T, InteractiveTerminalCapture as U, RespondToPermissionOptions as V, InteractiveTerminalFrameLog as W, SandboxInteractionResolution as X, SandboxInteractionConflict as Y, SandboxInteractionResult as Z, SandboxSession as _, WorkspaceImagePublishRequestOptions as a, buildControlPlaneMcpConfig as at, MaterializeProfileFileMountsResult as b, TraceExportFormat as c, buildTraceExportPayload as d, CONTROL_PLANE_MCP_SERVER_NAME as et, exportTraceBundle as f, RawEvidenceExport as g, SandboxTaskSession as h, WorkspaceImagePublishInput as i, SandboxMcpServerEntry as it, InteractiveSessionHandle as j, InteractivePromptCommand as k, TraceExportResult as l, toOtelJson as m, HttpClient as n, SandboxMcpConfig as nt, WorkspaceImagePublishResult as o, buildSandboxMcpConfig as ot, otelTraceIdForTangleTrace as p, createInteractiveTerminalSession as q, SandboxInstance as r, SandboxMcpEndpoint as rt, WorkspaceImages as s, ForkAcknowledgement as t, SANDBOX_MCP_SERVER_NAME as tt, TraceExportSink as u, ProfileFileDeliveryReport as v, splitInlineProfileFileMounts as w, SplitInlineProfileFileMountsResult as x, MaterializeProfileFileMountsOptions as y, InteractiveStopCommand as z };

package/dist/{sandbox-CfGVI_xk.js → sandbox-uwsfBoYj.js}

@@ -9,6 +9,10 @@ import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, Age
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
 import { readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import "node:path";
+import "node:fs/promises";
 //#region src/trace-exporter.ts
 function buildTraceExportPayload(bundle, format = "tangle", serviceName = "tangle-sandbox") {
 	if (format === "tangle") return bundle;
@@ -327,7 +331,7 @@ const UNDECIDED_WRITE_STATUSES = new Set([
 	504
 ]);
 const PROFILE_FILE_MOUNT_PACE_MS = 0;
-const PROFILE_BIN_DIR_RE = /(^|\/)(s?bin)\//;
+const PROFILE_BIN_DIR_RE$1 = /(^|\/)(s?bin)\//;
 const PROFILE_AGENT_HOME = ["/home", "agent"].join("/");
 /**
 * Wire budget for a single-shot `POST /files/write` of a mount.
@@ -476,8 +480,27 @@ function fileApiTarget(mount, absolutePrefixes) {
 	if (mount.path.length === 0) return null;
 	return mount.path;
 }
+/**
+* The delivery target exactly as the staged manifest's `path` computes it:
+* the file-API target when the box exposes writeMany, else the mount path.
+* The publish manifest's `target` must match this byte-for-byte — the host
+* re-admits delivered bundles by reading the bytes at these paths.
+*/
+function profileFileDeliveryTarget(box, mount) {
+	return stagedProfileFileTarget(box, mount, DEFAULT_PROFILE_FILE_API_ABSOLUTE_PREFIXES);
+}
+function stagedProfileFileTarget(box, mount, absolutePrefixes) {
+	return typeof box.fs?.writeMany === "function" ? fileApiTarget(mount, absolutePrefixes) ?? mount.path : mount.path;
+}
+/**
+* The exact content bytes of an inline mount — the bytes the staged
+* manifest's sha256 covers and the bundle manifest's `sizeBytes` sums.
+*/
+function inlineProfileFileContent(mount) {
+	return inlineContent(mount);
+}
 function isExecutableProfileFile(mount) {
-	return mount.executable ?? PROFILE_BIN_DIR_RE.test(mount.path);
+	return mount.executable ?? PROFILE_BIN_DIR_RE$1.test(mount.path);
 }
 function profileFileMode(mount) {
 	return isExecutableProfileFile(mount) ? 493 : void 0;
@@ -808,7 +831,8 @@ async function materializeAbsentProfileFiles(box, files, options) {
 	const stage = `.sandbox-profile-${globalThis.crypto.randomUUID()}`;
 	const absolutePrefixes = normalizeAbsolutePrefixes(options.fileApiAbsolutePrefixes ?? DEFAULT_PROFILE_FILE_API_ABSOLUTE_PREFIXES);
 	const manifest = await Promise.all(files.map(async (mount) => ({
-		path: typeof box.fs?.writeMany === "function" ? fileApiTarget(mount, absolutePrefixes) ?? mount.path : mount.path,
+		path: stagedProfileFileTarget(box, mount, absolutePrefixes),
+		mountPath: mount.path,
 		sha256: await sha256Hex(inlineContent(mount)),
 		mode: profileFileMode(mount) ?? 420
 	})));
@@ -2050,35 +2074,367 @@ function waitForReconnect(ms, signal) {
 		signal?.addEventListener("abort", onAbort, { once: true });
 	});
 }
+const CODEX_SYSTEM_PROMPT_FILE = ".codex/system-prompt.md";
+const OPENCODE_APPEND_SYSTEM_PROMPT_FILE = ".opencode/agent-system-prompt.md";
+const OPENCODE_CONFIG_FILE = "opencode.json";
+/** Project context file each harness actually reads from cwd. NEVER a constant. */
+const CONTEXT_FILE = {
+	"claude-code": "CLAUDE.md",
+	nanoclaw: "CLAUDE.md",
+	codex: "AGENTS.md",
+	opencode: ".opencode/profile-instructions.md",
+	"kimi-code": "AGENTS.md",
+	pi: "AGENTS.md",
+	prime: "AGENTS.md",
+	gemini: "GEMINI.md",
+	hermes: "HERMES.md",
+	openclaw: "AGENTS.md"
+};
+/**
+* The paths a profile resource may never mount.
+*
+* Codex names no system-prompt file of its own — `model_instructions_file`
+* takes whatever path it is given — and opencode names none either, since it
+* reads exactly the files its config lists. All three names below were chosen
+* here, so a file already at one of them is this materializer's own output from
+* an earlier application into the same workspace, and a mount there could not
+* survive the next application.
+*
+* That is an inference from the path name, not verified provenance: nothing
+* checks the existing bytes are prior materializer output, so a workspace that
+* carried a foreign file at one of these invented names is overwritten on the
+* first application. Accepted cost of stateless multi-turn re-application,
+* bounded by the names being ones no harness or user convention uses.
+*/
+const MATERIALIZER_RESERVED_PATHS = new Set([
+	CODEX_SYSTEM_PROMPT_FILE,
+	OPENCODE_APPEND_SYSTEM_PROMPT_FILE,
+	CONTEXT_FILE.opencode
+]);
+/** Every path any harness reads as its project context file. */
+const CONTEXT_FILE_PATHS = new Set(Object.values(CONTEXT_FILE));
+/**
+* The context files this package owns by MARKER rather than by name:
+* `AGENTS.md`, `CLAUDE.md`, `GEMINI.md`, `HERMES.md`.
+*
+* Each is a documented name a repository can already carry, so the name proves
+* nothing. A generated one carries the line {@link markMaterializerContextFile}
+* writes, and only that line lets the next materialization replace it.
+*
+* opencode's context file is absent because it is a RESERVED name this package
+* invented, already owned by the name alone.
+*/
+const MATERIALIZER_CONTEXT_PATHS = new Set([...CONTEXT_FILE_PATHS].filter((path) => !MATERIALIZER_RESERVED_PATHS.has(path)));
+new Set([
+	...MATERIALIZER_RESERVED_PATHS,
+	...MATERIALIZER_CONTEXT_PATHS,
+	OPENCODE_CONFIG_FILE
+]);
+/** The one provenance token every generated-file marker carries. */
+const MATERIALIZER_MARKER = "tangle-agent-profile-materialize: generated";
+`${MATERIALIZER_MARKER}`;
+const MATERIALIZER_CONTEXT_MARKER_NOTE = "do not edit; the next profile materialization replaces this file";
+`${MATERIALIZER_MARKER}`;
+`${MATERIALIZER_CONTEXT_MARKER_NOTE}`;
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/workspace-files.js
+const compareStrings = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0);
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/plan-types.js
+/**
+* The subset of {@link BINDABLE_LAUNCH_CONTROLS} the plan HANDS OVER rather than
+* executes: controls a caller reaches only by composing the harness's own
+* configuration, so no file, flag or env var the plan writes can touch them.
+*
+*   - `opencode.agent-prompt` — opencode's `agent.<name>.prompt` config field,
+*     the one control that replaces its built-in provider prompt. It binds to a
+*     SINGLE agent, and the agent is chosen at launch. A caller that builds
+*     opencode's config itself and picks the agent there reads neither
+*     `plan.files` nor `plan.flags`, so for that one the plan names the control
+*     and hands over the text in {@link WorkspacePlan.systemPromptBinding}.
+*
+* Every other bindable control names a capability the plan still lowers itself
+* once the caller has declared the plan's launch inputs really reach the spawn.
+*/
+const EXECUTOR_SYSTEM_PROMPT_BINDINGS = ["opencode.agent-prompt"];
+new Set(EXECUTOR_SYSTEM_PROMPT_BINDINGS);
+/**
+* Launcher controls an executor can declare it OWNS via `materializeProfile`'s
+* `binds` option.
+*
+* Some harness controls live outside any workspace: opencode's exact
+* system-prompt replacement (`agent.<name>.prompt`) binds to the ONE agent
+* whoever starts the process selects, which a plan-forwarding executor cannot
+* guarantee — so the plan refuses the intent (harnessSystemPromptIntents in
+* @tangle-network/agent-interface answers `replace: false` for opencode).
+*
+* The two declarations describe the two executor shapes that CAN reach it, and
+* each gets the lowering it can actually apply:
+*
+*   - `systemPrompt` — the executor applies the plan's launch flags to the
+*     spawn it owns, so the plan writes the generated `mode: primary` agent and
+*     selects it with `--agent`.
+*   - `opencode.agent-prompt` — the executor composes opencode's own config and
+*     picks the agent there, reading neither plan files nor plan flags, so the
+*     plan hands the text over in {@link WorkspacePlan.systemPromptBinding}
+*     instead of writing a workspace agent that would never be selected.
+*
+* They are mutually exclusive claims about the same caller: declaring both is a
+* caller bug, not a broader capability.
+*/
+const BINDABLE_LAUNCH_CONTROLS = ["systemPrompt", ...EXECUTOR_SYSTEM_PROMPT_BINDINGS];
+new Set(BINDABLE_LAUNCH_CONTROLS);
+new TextDecoder("utf-8", {
+	fatal: true,
+	ignoreBOM: true
+});
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/resource-resolution.js
+function describeUnresolvedRef(r) {
+	const name = typeof r.name === "string" ? r.name : void 0;
+	const path = typeof r.path === "string" ? r.path : void 0;
+	if (name && path) return `"${name}" (${path})`;
+	if (name) return `"${name}"`;
+	if (path) return `"${path}"`;
+	return "resource";
+}
+/** Resolve inline bytes already present on the profile. Remote resources must
+* be resolved by {@link resolveAgentProfileResources} before materialization.
+*
+* FAIL-CLOSED: a ref that declares `kind: "inline"` is asserting its bytes are
+* already resolved, so missing/non-string `content` is a caller bug, not an
+* empty file — silently coercing it (`String(content ?? "")`) would produce a
+* file that "looks provisioned, loads nothing", exactly the trap this module's
+* docstring warns against. */
+function resolveInlineRef(ref) {
+	const r = ref;
+	if (typeof r.content === "string") return {
+		name: String(r.name ?? r.path ?? "resource"),
+		content: r.content
+	};
+	if (r.kind === "inline") throw new Error(`Profile resource ${describeUnresolvedRef(r)} declares kind "inline" but has no string content`);
+	return null;
+}
+Object.freeze({ async get() {} });
+//#endregion
+//#region ../../../packages/agent-profile-materialize/dist/profile-bundle-key.js
+const PROFILE_BUNDLE_SCHEMA = "agent-profile-bundle/v1";
+const PROFILE_BIN_DIR_RE = /(^|\/)(s?bin)\//;
+/**
+* Derive the canonical bundle file entry for one inline mount. The sha256 is
+* computed over the exact inline content bytes and the mode mirrors the SDK's
+* `profileFileMode`/`isExecutableProfileFile`: `mount.executable` wins when
+* present, otherwise a path under a `bin/` or `sbin/` directory is executable.
+* A mount whose resource is not inline is a caller bug and throws, matching
+* the fail-closed discipline of {@link resolveInlineRef}.
+*/
+function profileBundleFileEntry(mount) {
+	const resolved = resolveInlineRef(mount.resource);
+	if (resolved === null) throw new Error(`profileBundleFileEntry: ${mount.path} requires an inline resource`);
+	const executable = mount.executable ?? PROFILE_BIN_DIR_RE.test(mount.path);
+	return {
+		mountPath: mount.path,
+		sha256: createHash("sha256").update(resolved.content, "utf8").digest("hex"),
+		mode: executable ? 493 : 420
+	};
+}
+/**
+* The canonical file table: one entry per mount, sorted by (mountPath, sha256)
+* so any array order of the same mounts produces the same table.
+*/
+function profileBundleFileTable(mounts) {
+	return mounts.map(profileBundleFileEntry).sort((left, right) => left.mountPath !== right.mountPath ? compareStrings(left.mountPath, right.mountPath) : compareStrings(left.sha256, right.sha256));
+}
+/**
+* The content-addressed bundle key. The digest covers EXACTLY the schema
+* version and, per file, the logical mount path, the sha256 of the content
+* bytes, and the full file mode — the same image-content-hash discipline as
+* scripts/ci/image-content-hash.mjs: hash exactly the inputs that determine
+* the cached bytes (and their placement semantics), nothing more. Any profile
+* change — content, path, or mode — produces a new key; anything else
+* (mount order, transport-only target paths, timestamps) does not.
+*/
+function profileFileBundleKey(mounts) {
+	return canonicalCandidateDigest({
+		schema: PROFILE_BUNDLE_SCHEMA,
+		files: profileBundleFileTable(mounts)
+	});
+}
 //#endregion
 //#region src/profile-file-delivery.ts
+const PROFILE_BUNDLE_CLAIM_ENDPOINT = "/agents/profile-bundle/claim";
+const PROFILE_BUNDLE_PUBLISH_ENDPOINT = "/agents/profile-bundle/publish";
+/**
+* Wall-clock ceiling for one claim/publish round trip. The cache is an
+* optimization: a stalled box must fall back to (or skip) delivery, never
+* hold create() hostage.
+*/
+const PROFILE_BUNDLE_HTTP_TIMEOUT_MS = 1e4;
+/**
+* Answers that mean the box predates the cache API: no route, a route that
+* rejects the method, or a recognized-but-unimplemented handler. Remembered
+* per box handle so an old box is never probed twice.
+*/
+const PROFILE_BUNDLE_API_GONE_STATUSES = new Set([
+	404,
+	405,
+	501
+]);
+function profileBundleDebug(message, data = {}) {
+	if (globalThis.process?.env?.TANGLE_SANDBOX_SDK_PROFILE_BUNDLE_DEBUG !== "1") return;
+	console.debug(`[sandbox-sdk] profile bundle: ${message}`, data);
+}
+async function withProfileBundleTimeout(work, what) {
+	let timer;
+	try {
+		return await Promise.race([work, new Promise((_, reject) => {
+			const timeoutError = /* @__PURE__ */ new Error(`${what} timed out after ${PROFILE_BUNDLE_HTTP_TIMEOUT_MS}ms`);
+			timer = setTimeout(() => reject(timeoutError), PROFILE_BUNDLE_HTTP_TIMEOUT_MS);
+			timer.unref?.();
+		})]);
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+	}
+}
+function buildPublishManifest(box, deferredFiles, bundle) {
+	const byMountPath = new Map(deferredFiles.map((mount) => [mount.path, mount]));
+	const encoder = new TextEncoder();
+	let sizeBytes = 0;
+	const files = profileBundleFileTable(deferredFiles).map((entry) => {
+		const mount = byMountPath.get(entry.mountPath);
+		if (!mount) throw new Error(`profile bundle manifest: no mount for ${entry.mountPath}`);
+		sizeBytes += encoder.encode(inlineProfileFileContent(mount)).byteLength;
+		return {
+			...entry,
+			target: profileFileDeliveryTarget(box, mount)
+		};
+	});
+	return {
+		schema: PROFILE_BUNDLE_SCHEMA,
+		bundle,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+		sizeBytes,
+		files
+	};
+}
 /** Successful immutable mount delivery is scoped to one filesystem incarnation. */
 var ProfileFileDelivery = class {
 	delivered;
+	/** The most recent successful preparation with file mounts; undefined until one. */
+	lastReport;
 	pending = Promise.resolve();
+	unsupportedBoxes = /* @__PURE__ */ new WeakSet();
 	prepare(box, profile, signal, existingFiles = "allow-identical") {
 		const { leanProfile, deferredFiles } = splitInlineProfileFileMounts(structuredClone(profile));
 		validateDeferredProfileFileMounts(deferredFiles);
 		if (deferredFiles.length === 0) return Promise.resolve(leanProfile);
+		const bundle = profileFileBundleKey(deferredFiles);
 		const prepared = this.pending.then(async () => {
 			signal?.throwIfAborted();
+			const startedAt = Date.now();
+			let delivery = {
+				outcome: "receipt",
+				deliveredFiles: 0
+			};
 			const incarnation = box.filesystemIncarnationId;
-			const fingerprint = canonicalCandidateDigest(deferredFiles);
-			if (incarnation === void 0 || this.delivered?.incarnation !== incarnation || this.delivered.fingerprint !== fingerprint) {
+			if (incarnation === void 0 || this.delivered?.incarnation !== incarnation || this.delivered.fingerprint !== bundle) {
 				this.delivered = void 0;
-				await materializeProfileFileMounts(box, deferredFiles, { existingFiles });
+				delivery = await this.deliverProfileFiles(box, deferredFiles, bundle, existingFiles);
 				if (box.filesystemIncarnationId !== incarnation) throw new StateError("Filesystem incarnation changed during profile file delivery", box.filesystemIncarnationId ?? "unknown", incarnation ?? "unknown");
 				if (incarnation !== void 0) this.delivered = {
 					incarnation,
-					fingerprint
+					fingerprint: bundle
 				};
 			}
 			signal?.throwIfAborted();
+			this.lastReport = {
+				...delivery,
+				files: deferredFiles.length,
+				durationMs: Date.now() - startedAt
+			};
 			return leanProfile;
 		});
 		this.pending = prepared.then(() => {}, () => {});
 		return prepared;
 	}
+	async deliverProfileFiles(box, deferredFiles, bundle, existingFiles) {
+		const claim = await this.claimProfileBundle(box, deferredFiles, bundle);
+		if (claim.kind === "legacy") {
+			await materializeProfileFileMounts(box, deferredFiles, { existingFiles });
+			return {
+				outcome: "legacy",
+				deliveredFiles: deferredFiles.length
+			};
+		}
+		const remaining = deferredFiles.filter((mount) => claim.missing.has(mount.path));
+		if (remaining.length === 0) return {
+			outcome: "hit",
+			deliveredFiles: 0
+		};
+		await materializeProfileFileMounts(box, remaining, { existingFiles });
+		await this.publishProfileBundle(box, deferredFiles, bundle);
+		return {
+			outcome: remaining.length === deferredFiles.length ? "miss" : "partial",
+			deliveredFiles: remaining.length
+		};
+	}
+	async claimProfileBundle(box, deferredFiles, bundle) {
+		if (typeof box.runtimeFetch !== "function" || this.unsupportedBoxes.has(box)) return { kind: "legacy" };
+		const table = profileBundleFileTable(deferredFiles);
+		try {
+			const response = await withProfileBundleTimeout(box.runtimeFetch(PROFILE_BUNDLE_CLAIM_ENDPOINT, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					bundle,
+					files: table.map(({ mountPath, sha256 }) => ({
+						mountPath,
+						sha256
+					}))
+				})
+			}), "profile bundle claim");
+			if (PROFILE_BUNDLE_API_GONE_STATUSES.has(response.status)) {
+				this.unsupportedBoxes.add(box);
+				profileBundleDebug("box predates the bundle cache API", { status: response.status });
+				return { kind: "legacy" };
+			}
+			if (!response.ok) {
+				profileBundleDebug("claim refused; legacy delivery this turn", { status: response.status });
+				return { kind: "legacy" };
+			}
+			const body = await response.json();
+			if (body.status === "hit") return {
+				kind: "claimed",
+				missing: /* @__PURE__ */ new Set()
+			};
+			const claimed = new Set(table.map(({ mountPath }) => mountPath));
+			if (body.status !== "miss" || !Array.isArray(body.missing) || !body.missing.every((mountPath) => typeof mountPath === "string" && claimed.has(mountPath))) throw new Error("Malformed profile bundle claim response");
+			return {
+				kind: "claimed",
+				missing: new Set(body.missing)
+			};
+		} catch (error) {
+			profileBundleDebug("claim failed; legacy delivery this turn", { error: error instanceof Error ? error.message : String(error) });
+			return { kind: "legacy" };
+		}
+	}
+	async publishProfileBundle(box, deferredFiles, bundle) {
+		if (typeof box.runtimeFetch !== "function" || this.unsupportedBoxes.has(box)) return;
+		try {
+			const response = await withProfileBundleTimeout(box.runtimeFetch(PROFILE_BUNDLE_PUBLISH_ENDPOINT, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					bundle,
+					manifest: buildPublishManifest(box, deferredFiles, bundle)
+				})
+			}), "profile bundle publish");
+			if (!response.ok) profileBundleDebug("publish refused", { status: response.status });
+		} catch (error) {
+			profileBundleDebug("publish failed", { error: error instanceof Error ? error.message : String(error) });
+		}
+	}
 };
 //#endregion
 //#region ../../../packages/runtime-contracts/dist/interactive-session-http.js
@@ -4824,6 +5180,14 @@ var SandboxInstance = class SandboxInstance {
 	* object passed as a per-turn override — is compared correctly: unchanged
 	* content references by hash, changed content sends inline.
 	*/
+	/**
+	* How this handle's most recent profile file preparation was satisfied
+	* (host cache hit, partial, miss, legacy delivery, or a held receipt) and
+	* how long it took. Undefined until a profile with file mounts is prepared.
+	*/
+	get lastProfileFileDelivery() {
+		return this.profileFiles.lastReport;
+	}
 	/** @internal Shared create/turn delivery; caller policy decides how to expose failures. */
 	materializeProfileFiles(profile, signal, existingFiles = "allow-identical") {
 		return this.profileFiles.prepare(this, profile, signal, existingFiles);
@@ -7711,6 +8075,12 @@ var SandboxInstance = class SandboxInstance {
 	assertFilesystemIncarnationReady() {
 		if (this.filesystemIncarnationReadiness !== "ready") throw new StateError("Sandbox filesystem incarnation is not ready", this.status, "running with a ready filesystem incarnation");
 	}
+	/**
+	* One authenticated runtime HTTP call for this sandbox, relative endpoint
+	* (`/agents/...`), scoped to the current filesystem incarnation. This is
+	* the transport `/agents/profiles` rides and the box surface mount
+	* delivery uses for profile-bundle cache claim/publish.
+	*/
 	async runtimeFetch(path, options, fetchOptions) {
 		this.assertFilesystemIncarnationReady();
 		const url = `/v1/sandboxes/${encodeURIComponent(this.id)}/runtime${path}`;

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-DdUzvzA_.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-C8zV32IL.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-Dt4FMrZs.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-B06VSOdG.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-Dt4FMrZs.js → tangle-B06VSOdG.js}

@@ -1,5 +1,5 @@
 import { x as readResponseJson } from "./errors-Cq4hMysQ.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-CfGVI_xk.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-uwsfBoYj.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-B7_9Hl_z.js";
 //#region src/tangle/abi.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.36",
+  "version": "0.60.37-develop.20261011082415.1815a0e",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -151,7 +151,7 @@
     "yjs": "13.6.30",
     "@products/sandbox-test-utils": "0.0.0",
     "@repo/shared": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.22.4",
+    "@tangle-network/agent-profile-materialize": "0.23.0",
     "@tangle-network/cli-agent-registry": "0.6.2",
     "@tangle-network/runtime-contracts": "0.16.0",
     "@tangle-network/sdk": "4.0.3",

package/dist/{local-cli-auth-D-_fMdNS.js → local-cli-auth-Bs0An6Cw.js}

@@ -1,7 +1,7 @@
 import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-Br8s2y4r.js";
 import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { join } from "node:path";
+import { homedir } from "node:os";
 //#region ../../../packages/cli-agent-registry/dist/local-cli-auth.mjs
 const DEFAULT_MODE = 384;
 function readAuthFile(sourcePath, targetPath) {