@tangle-network/sandbox 0.60.41 → 0.60.49

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-PrV7qtTE.js";
-import { D as CodeExecutionResult, E as CodeExecutionOptions, Ji as SessionInfo, Jr as SandboxFleetParent, O as CodeLanguage, Xi as SessionListOptions, d as BackendConfig, k as CodeResultPart, oo as BackendType } from "../types-C0XwJqxx.js";
-import { i as Sandbox } from "../client-BVZv8JbS.js";
-import { u as PreviewAuthorizer } from "../preview-CFHnG116.js";
+import { _ as SandboxSession, h as SandboxTaskSession, r as SandboxInstance } from "../sandbox-D2Cz4gGL.js";
+import { D as CodeExecutionResult, E as CodeExecutionOptions, Ji as SessionInfo, Jr as SandboxFleetParent, O as CodeLanguage, Xi as SessionListOptions, d as BackendConfig, k as CodeResultPart, oo as BackendType } from "../types-Bpj_5qnH.js";
+import { i as Sandbox } from "../client-BG3-wRZl.js";
+import { u as PreviewAuthorizer } from "../preview-wyTghB5L.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-DjryqUiY.js";
 import { E as assertCurrentBackendType } from "../interactive-controller-Dxt5sW2N.js";
 import { h as StateError, l as NotFoundError, v as ValidationError } from "../errors-Cq4hMysQ.js";
-import { n as Sandbox } from "../client-CGbGnrBO.js";
-import { t as SandboxInstance } from "../sandbox-uwsfBoYj.js";
+import { n as Sandbox } from "../client-t35bzeo_.js";
+import { t as SandboxInstance } from "../sandbox-Cv_TaxK_.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-CFHnG116.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-wyTghB5L.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/{agent-run-outcome-C0CsZPED.d.ts → agent-run-outcome-DT-JPlp9.d.ts}

@@ -1,4 +1,4 @@
-import { a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, kr as SandboxEvent, o as AgentRunStatus, s as AgentToolInvocation } from "./types-C0XwJqxx.js";
+import { a as AgentQuestionRequest, ct as DurablePlanSnapshot, i as AgentApprovalRequirement, kr as SandboxEvent, o as AgentRunStatus, s as AgentToolInvocation } from "./types-Bpj_5qnH.js";
 import { InteractionRequest } from "@tangle-network/agent-interface";
 
 //#region src/agent-run-outcome.d.ts

package/dist/auth/index.js

@@ -1,4 +1,4 @@
-import { i as materializeCliAuthBundle, n as assertCliAuthReferenceSupported, r as cliAuthReferenceSchema } from "../cli-auth-bundle-Br8s2y4r.js";
+import { i as materializeCliAuthBundle, n as assertCliAuthReferenceSupported, r as cliAuthReferenceSchema } from "../cli-auth-bundle-BA1ONzC2.js";
 //#region src/auth/tokens.ts
 const textEncoder = new TextEncoder();
 const textDecoder = new TextDecoder();

package/dist/{cli-auth-bundle-Br8s2y4r.js → cli-auth-bundle-BA1ONzC2.js}

@@ -389,7 +389,7 @@ const NATIVE_SESSION_CONTRACTS = {
 	}
 };
 //#endregion
-//#region ../../../packages/cli-agent-registry/dist/specs-OwSGOknx.mjs
+//#region ../../../packages/cli-agent-registry/dist/specs-BLhcYRLh.mjs
 z.globalRegistry.add(agentProfileSchema$1, {
 	id: "AgentProfile",
 	...agentProfileJsonSchema
@@ -579,7 +579,8 @@ const CLI_AGENT_SPECS = [
 			apiKey: "MOONSHOT_API_KEY",
 			model: "KIMI_CODE_MODEL_NAME",
 			authMode: "KIMI_CODE_AUTH_MODE",
-			authFiles: "KIMI_CODE_AUTH_FILES_JSON"
+			authFiles: "KIMI_CODE_AUTH_FILES_JSON",
+			extras: { OPENAI_BASE_URL: { parser: "string" } }
 		},
 		capabilities: {
 			streaming: true,

package/dist/{client-BVZv8JbS.d.ts → client-BG3-wRZl.d.ts}

@@ -1,7 +1,7 @@
-import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-PrV7qtTE.js";
-import { $r as SandboxFleetToken, Ar as SandboxFleetAgent, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ca as TokenRefreshHandler, En as ListSandboxOptions, F as CreateIntelligenceReportOptions, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetManifest, Gt as FleetMachineId, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ir as SandboxFleetDispatchResponse, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetArtifact, N as ConversationTurnResult, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Or as SandboxEnvironment, Pr as SandboxFleetCostEstimate, Qr as SandboxFleetSpend, R as CreateSandboxFleetTokenOptions, Ri as SecretsManager, Rt as FleetDispatchResultBuffer, Si as SandboxShapesInfo, Tn as ListSandboxFleetOptions, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, Vt as FleetDriveTurnOutcome, Wr as SandboxFleetMachineSpec, Wt as FleetExecDispatchResult, Xr as SandboxFleetPolicy, Yt as FleetRunOptions, _i as SandboxRunGeneration, _n as IntelligenceReport, ar as ReapExpiredSandboxFleetsResult, b as BatchRunRequest, br as SandboxConfig, ca as SshKeysManager, ci as SandboxFleetWorkspaceSnapshotResult, d as BackendConfig, ei as SandboxFleetTraceBundle, er as PublicTemplateInfo, fa as SubscriptionInfo, ii as SandboxFleetUsage, ir as ReapExpiredSandboxFleetsOptions, ka as UsageInfo, l as AttachSandboxFleetMachineOptions, li as SandboxIdentity, nr as PublishPublicTemplateOptions, oi as SandboxFleetWorkspaceReconcileResult, or as ReconcileSandboxFleetsOptions, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, ri as SandboxFleetTraceOptions, rr as PublishPublicTemplateVersionOptions, si as SandboxFleetWorkspaceRestoreResult, sr as ReconcileSandboxFleetsResult, to as BatchEvent, tr as PublicTemplateVersionInfo, ui as SandboxInfo, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-C0XwJqxx.js";
+import { l as TraceExportResult, n as HttpClient, r as SandboxInstance, u as TraceExportSink } from "./sandbox-D2Cz4gGL.js";
+import { $r as SandboxFleetToken, Ar as SandboxFleetAgent, B as CreateSandboxOptions, Bt as FleetDispatchStreamOptions, Ca as TokenRefreshHandler, En as ListSandboxOptions, F as CreateIntelligenceReportOptions, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Gr as SandboxFleetManifest, Gt as FleetMachineId, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ir as SandboxFleetDispatchResponse, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Kn as PromptInputPart, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Mr as SandboxFleetArtifact, N as ConversationTurnResult, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Or as SandboxEnvironment, Pr as SandboxFleetCostEstimate, Qr as SandboxFleetSpend, R as CreateSandboxFleetTokenOptions, Ri as SecretsManager, Rt as FleetDispatchResultBuffer, Si as SandboxShapesInfo, Tn as ListSandboxFleetOptions, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, Vt as FleetDriveTurnOutcome, Wr as SandboxFleetMachineSpec, Wt as FleetExecDispatchResult, Xr as SandboxFleetPolicy, Yt as FleetRunOptions, _i as SandboxRunGeneration, _n as IntelligenceReport, ar as ReapExpiredSandboxFleetsResult, b as BatchRunRequest, br as SandboxConfig, ca as SshKeysManager, ci as SandboxFleetWorkspaceSnapshotResult, d as BackendConfig, ei as SandboxFleetTraceBundle, er as PublicTemplateInfo, fa as SubscriptionInfo, ii as SandboxFleetUsage, ir as ReapExpiredSandboxFleetsOptions, ka as UsageInfo, l as AttachSandboxFleetMachineOptions, li as SandboxIdentity, nr as PublishPublicTemplateOptions, oi as SandboxFleetWorkspaceReconcileResult, or as ReconcileSandboxFleetsOptions, q as DeleteMatchingSandboxesResult, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, ri as SandboxFleetTraceOptions, rr as PublishPublicTemplateVersionOptions, si as SandboxFleetWorkspaceRestoreResult, sr as ReconcileSandboxFleetsResult, to as BatchEvent, tr as PublicTemplateVersionInfo, ui as SandboxInfo, v as BatchResult, vn as IntelligenceReportBudget, vt as ExecOptions, xn as IntelligenceReportWindow, y as BatchRunOptions, yn as IntelligenceReportCompareTo, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-Bpj_5qnH.js";
 import { l as ScopedToken, s as MintInteractiveSessionTokenOptions } from "./terminal-stream-CV1pMSKC.js";
-import { I as LinesClient } from "./lines-DQmR5ypP.js";
+import { I as LinesClient } from "./lines-CIzO8XBK.js";
 import { f as SandboxError } from "./errors-CRssX9qs.js";
 import { AgentInteractiveSessionRef, AgentProfile } from "@tangle-network/agent-interface";
 import { z } from "zod";

package/dist/{client-CGbGnrBO.js → client-t35bzeo_.js}

@@ -2,7 +2,7 @@ import { r as backendTypeSchema } from "./backend-types-C7b_Gpa0.js";
 import { D as foldModelRoutingFields, E as assertCurrentBackendType, M as withProfileHarness, S as encodePromptForWire, T as applyRequestedModel, k as normalizeRuntimeBackendConfig, s as requestInteractiveSessionToken, w as parseSSEStream } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as QuotaError, l as NotFoundError, m as ServerError, p as SandboxError, s as NON_RETRYABLE_CREATE_QUOTA_REASONS, t as AuthError, u as PartialFailureError, v as ValidationError, x as readResponseJson, y as parseErrorResponse } from "./errors-Cq4hMysQ.js";
 import { f as combineAbortSignals } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-uwsfBoYj.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, D as normalizeSandboxShape, E as normalizeConnection, O as rewrapResponse, T as validateDeferredProfileFileMounts, a as normalizeStartupDiagnostics, i as normalizeSandboxCreateReceipt, n as createSandboxInstanceFromResponse, r as normalizeCaptureProof, w as splitInlineProfileSkills } from "./sandbox-Cv_TaxK_.js";
 import { LinesClient } from "./lines.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -3316,18 +3316,18 @@ function generateIdempotencyKey() {
 	}
 	throw new Error("idempotency key generation requires global crypto");
 }
-function withRequestContextHeaders(response, path, method) {
+function withRequestContextHeaders(response, path, method, body = response.body) {
 	const headers = new Headers(response.headers);
 	headers.set("x-tangle-request-path", path);
 	if (method) headers.set("x-tangle-request-method", method);
-	return rewrapResponse(response, headers);
+	return rewrapResponse(response, headers, body);
 }
 async function resolveLocalCliAuthFiles(backendType) {
-	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-Bs0An6Cw.js");
+	const { discoverLocalCliAuthFiles } = await import("./local-cli-auth-BpV8J6wa.js");
 	return discoverLocalCliAuthFiles(backendType);
 }
 async function describeLocalCliAuthExpectation(backendType) {
-	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-Bs0An6Cw.js");
+	const { describeLocalCliAuthExpectation: describe } = await import("./local-cli-auth-BpV8J6wa.js");
 	return describe(backendType);
 }
 async function hydrateLocalCliBackendAuth(backend, baseUrl, trustLocalCliAuth) {
@@ -4229,16 +4229,62 @@ var Sandbox = class Sandbox {
 		const controller = new AbortController();
 		const timeoutId = setTimeout(() => controller.abort(), requestTimeoutMs);
 		const requestSignal = options?.signal ? combineAbortSignals([options.signal, controller.signal]) : controller.signal;
+		let bodyOwnsTimeout = false;
+		const abortError = (error) => {
+			if (controller.signal.aborted && requestSignal.reason === controller.signal.reason) return new TimeoutError(requestTimeoutMs);
+			return options?.signal?.aborted ? options.signal.reason ?? error : error;
+		};
 		try {
 			const headers = new Headers(options?.headers);
 			headers.set("Authorization", `Bearer ${this.apiKey}`);
 			const isFormDataBody = typeof FormData !== "undefined" && options?.body instanceof FormData;
 			if (!headers.has("Content-Type") && !isFormDataBody) headers.set("Content-Type", "application/json");
-			return withRequestContextHeaders(await globalThis.fetch(url, {
+			const response = await globalThis.fetch(url, {
 				...options,
 				headers,
 				signal: requestSignal
-			}), path, options?.method);
+			});
+			const mediaType = response.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase();
+			if (response.body !== null && (!response.ok || mediaType === "application/json" || mediaType?.endsWith("+json") === true)) {
+				const reader = response.body.getReader();
+				let settled = false;
+				const body = new ReadableStream({
+					type: "bytes",
+					async pull(stream) {
+						try {
+							const chunk = await reader.read();
+							if (settled) return;
+							if (chunk.done) {
+								settled = true;
+								clearTimeout(timeoutId);
+								reader.releaseLock();
+								stream.close();
+								stream.byobRequest?.respond(0);
+							} else stream.enqueue(chunk.value);
+						} catch (error) {
+							if (settled) return;
+							settled = true;
+							clearTimeout(timeoutId);
+							reader.releaseLock();
+							stream.error(abortError(error));
+						}
+					},
+					async cancel(reason) {
+						if (settled) return;
+						settled = true;
+						clearTimeout(timeoutId);
+						try {
+							await reader.cancel(reason);
+						} finally {
+							reader.releaseLock();
+						}
+					}
+				});
+				const wrapped = withRequestContextHeaders(response, path, options?.method, body);
+				bodyOwnsTimeout = true;
+				return wrapped;
+			}
+			return withRequestContextHeaders(response, path, options?.method);
 		} catch (err) {
 			if (controller.signal.aborted && requestSignal.reason === controller.signal.reason) throw new TimeoutError(requestTimeoutMs);
 			if (options?.signal?.aborted) throw options.signal.reason ?? err;
@@ -4247,7 +4293,7 @@ var Sandbox = class Sandbox {
 				origin: "sandbox-api"
 			});
 		} finally {
-			clearTimeout(timeoutId);
+			if (!bodyOwnsTimeout) clearTimeout(timeoutId);
 		}
 	}
 	parseInfo(data) {

package/dist/core.d.ts

@@ -1,7 +1,7 @@
-import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages, v as ProfileFileDeliveryReport } from "./sandbox-PrV7qtTE.js";
-import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Ci as SandboxStatus, Fn as PreviewLinkInfo, Ha as ManagedProcessState, Ia as ManagedProcessClient, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessJobs, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Qi as SessionMessageAdmission, Ra as ManagedProcessOptions, Ua as SandboxEnvRecovery, Va as ManagedProcessSpec, Wa as SandboxEnvRecoveryView, br as SandboxConfig, ui as SandboxInfo, vt as ExecOptions, yt as ExecResult, za as ManagedProcessRecord } from "./types-C0XwJqxx.js";
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
-import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BVZv8JbS.js";
+import { a as WorkspaceImagePublishRequestOptions, i as WorkspaceImagePublishInput, o as WorkspaceImagePublishResult, r as SandboxInstance, s as WorkspaceImages, v as ProfileFileDeliveryReport } from "./sandbox-D2Cz4gGL.js";
+import { An as NetworkConfig, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Ci as SandboxStatus, Fn as PreviewLinkInfo, Ha as ManagedProcessState, Ia as ManagedProcessClient, In as PreviewLinkManager, Kn as PromptInputPart, La as ManagedProcessJobs, Ln as PreviewLinkWaitOptions, M as ConversationTurnOptions, N as ConversationTurnResult, Qi as SessionMessageAdmission, Ra as ManagedProcessOptions, Ua as SandboxEnvRecovery, Va as ManagedProcessSpec, Wa as SandboxEnvRecoveryView, br as SandboxConfig, ui as SandboxInfo, vt as ExecOptions, yt as ExecResult, za as ManagedProcessRecord } from "./types-Bpj_5qnH.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, O as LineSendInput, S as LineReplyCode, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, h as LineMemberInstance, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, q as LineApplicationView, s as LineAttachment, t as Line, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CIzO8XBK.js";
+import { A as BackendRegistryEntry, C as InstancesClient, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, _ as EnsureInstanceOptions, b as InstanceRecord, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, v as HostedInstance, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BG3-wRZl.js";
 import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-CRssX9qs.js";
 
 //#region src/core.d.ts

package/dist/core.js

@@ -1,6 +1,6 @@
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, h as StateError, l as NotFoundError, m as ServerError, n as CapabilityError, p as SandboxError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-CGbGnrBO.js";
-import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-uwsfBoYj.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, v as parseBackendRegistryResponseBody } from "./client-t35bzeo_.js";
+import { o as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-Cv_TaxK_.js";
 import { LinesClient, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-Cq6dJLBD.js";
 //#region src/core.ts

package/dist/{index-C8zV32IL.d.ts → index-BFdTlLys.d.ts}

@@ -1,5 +1,5 @@
-import { n as HttpClient, r as SandboxInstance } from "./sandbox-PrV7qtTE.js";
-import { B as CreateSandboxOptions } from "./types-C0XwJqxx.js";
+import { n as HttpClient, r as SandboxInstance } from "./sandbox-D2Cz4gGL.js";
+import { B as CreateSandboxOptions } from "./types-Bpj_5qnH.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-import { $ as BuildSandboxMcpConfigOptions, A as InteractiveSessionControlClaim, B as InterruptResult, C as materializeProfileFileMounts, D as AgentInteractiveTerminalSession, E as validateDeferredProfileFileMounts, F as InteractiveSessionInfo, G as InteractiveTerminalMetadata, H as agentInteractiveSessionPromptRequestDigest, I as InteractiveSessionRef, J as SandboxInteractionCommandResult, K as createInteractiveTerminalCapture, L as InteractiveSessionStartOptions, M as InteractiveSessionHandleOptions, N as InteractiveSessionHost, O as InteractiveControlClaimRequest, P as InteractiveSessionIncarnationId, Q as BuildControlPlaneMcpConfigOptions, R as InteractiveSessionStartResult, S as SplitInlineProfileSkillsResult, T as splitInlineProfileSkills, U as InteractiveTerminalCapture, V as RespondToPermissionOptions, W as InteractiveTerminalFrameLog, X as SandboxInteractionResolution, Y as SandboxInteractionConflict, Z as SandboxInteractionResult, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, at as buildControlPlaneMcpConfig, b as MaterializeProfileFileMountsResult, c as TraceExportFormat, d as buildTraceExportPayload, et as CONTROL_PLANE_MCP_SERVER_NAME, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, it as SandboxMcpServerEntry, j as InteractiveSessionHandle, k as InteractivePromptCommand, l as TraceExportResult, m as toOtelJson, nt as SandboxMcpConfig, o as WorkspaceImagePublishResult, ot as buildSandboxMcpConfig, p as otelTraceIdForTangleTrace, q as createInteractiveTerminalSession, r as SandboxInstance, rt as SandboxMcpEndpoint, s as WorkspaceImages, t as ForkAcknowledgement, tt as SANDBOX_MCP_SERVER_NAME, u as TraceExportSink, v as ProfileFileDeliveryReport, w as splitInlineProfileFileMounts, x as SplitInlineProfileFileMountsResult, y as MaterializeProfileFileMountsOptions, z as InteractiveStopCommand } from "./sandbox-PrV7qtTE.js";
-import { $ as DownloadOptions, $a as PublicBatchRunRequest, $i as SessionMessageInputPart, $n as PublicProfileConflict, $r as SandboxFleetToken, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, An as NetworkConfig, Ar as SandboxFleetAgent, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Bi as SendSessionMessageRequest, Bn as ProcessListOptions, Br as SandboxFleetIntelligenceEnvelope, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TokenRefreshHandler, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, Ct as FileReadError, Da as UploadOptions, Di as SandboxTerminalManager, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEgressUsage, Dt as FileTreeFile, Ea as UpdateUserOptions, Ei as SandboxTerminalInfo, En as ListSandboxOptions, Er as SandboxDeleteOutcome, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as WriteManyOptions, Fi as SearchMatch, Fn as PreviewLinkInfo, Fr as SandboxFleetDispatchFailureClass, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceArchiveManifest, Gi as SessionExecutionStatus, Gn as ProcessStatus, Gr as SandboxFleetManifest, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as ManagedProcessState, Hi as SessionBackendCredentials, Hn as ProcessManager, Hr as SandboxFleetMachineMeteredUsage, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessClient, Ii as SearchOptions, In as PreviewLinkManager, Ir as SandboxFleetDispatchResponse, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidenceNativeFile, Ji as SessionInfo, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceDirectoryExport, Ki as SessionFailureReason, Kn as PromptInputPart, Kr as SandboxFleetManifestMachine, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessJobs, Li as SecretInfo, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mi as SandboxTraceExport, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetArtifact, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, Nn as PermissionLevel, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, On as McpServerConfig, Or as SandboxEnvironment, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as WriteManyFile, Pi as SandboxUser, Pn as PermissionsManager, Pr as SandboxFleetCostEstimate, Pt as FleetAgentPlacement, Q as DispatchedSession, Qi as SessionMessageAdmission, Qn as ProvisionStep, Qr as SandboxFleetSpend, Qt as ForkLookupOptions, Ra as ManagedProcessOptions, Ri as SecretsManager, Rn as Process, Rr as SandboxFleetDriverTimings, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TeePublicKeyResponse, Si as SandboxShapesInfo, Sr as SandboxCreateOutcome, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as TurnDriveResult, Ti as SandboxTerminalCreateOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOptions, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, Un as ProcessSignal, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as ManagedProcessSpec, Vi as SentSessionMessage, Vn as ProcessLogEntry, Vr as SandboxFleetMachine, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Wn as ProcessSpawnOptions, Wr as SandboxFleetMachineSpec, X as DirectoryPermission, Xa as RawEvidenceRecordsFile, Xi as SessionListOptions, Xn as ProvisionResult, Xr as SandboxFleetPolicy, Xt as ForkCounts, Y as DevServerInfo, Ya as RawEvidencePayloadFile, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Yr as SandboxFleetPlacement, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionMessage, Zn as ProvisionStatus, Zr as SandboxFleetProfileRef, Zt as ForkIdempotency, _ as BatchBackend, _a as TaskSessionProfile, _i as SandboxRunGeneration, _n as IntelligenceReport, _r as RolloutTurnPart, _t as ExactProcessSpawnOptions, aa as SnapshotInfo, ai as SandboxFleetWorkspace, an as GitStatus, ao as ALL_BACKEND_TYPES, ar as ReapExpiredSandboxFleetsResult, at as DriverType, b as BatchRunRequest, ba as TeeAttestationResponse, bi as SandboxShape, bn as IntelligenceReportSubjectType, br as SandboxConfig, bt as FileInfo, c as AttachGpuLeaseOptions, ci as SandboxFleetWorkspaceSnapshotResult, cn as GpuLeaseCommandResult, cr as RenameOptions, d as BackendConfig, da as StorageConfig, di as SandboxIntelligenceEnvelope, dn as GpuLeaseManager, dr as Rollout, dt as EffectiveBackendSource, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, en as GitAuth, eo as BatchBackendStats, er as PublicTemplateInfo, et as DownloadProgress, f as BackendInfo, fa as SubscriptionInfo, fi as SandboxPortBinding, fn as GpuLeaseProviderName, fr as RolloutChildResult, ft as EgressDenial, g as BackendStatus, ga as TaskSessionInfo, gi as SandboxResources, gn as InstalledTool, gr as RolloutStatus, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionFileChange, hi as SandboxResourceUsage, hn as HostAgentRuntimeBackend, hr as RolloutStartResult, ht as EnsureDevServerOptions, ia as SnapshotIdempotency, ii as SandboxFleetUsage, in as GitDiff, io as BatchTaskUsage, ir as ReapExpiredSandboxFleetsOptions, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, ji as SandboxTraceEvent, jn as NetworkManager, jr as SandboxFleetAgentSpec, jt as FileUsageResult, ka as UsageInfo, ki as SandboxTerminals, kn as MkdirOptions, kr as SandboxEvent, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StartupDiagnostics, li as SandboxIdentity, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionCommitResult, mi as SandboxRemovalState, mn as HostAgentDriverConfig, mr as RolloutScorer, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotDeleteAcknowledgement, ni as SandboxFleetTraceExport, nn as GitCommit, no as BatchEventDataMap, nr as PublishPublicTemplateOptions, nt as DriveTurnOptions, oa as SnapshotOptions, oi as SandboxFleetWorkspaceReconcileResult, on as GpuLease, oo as BackendType, or as ReconcileSandboxFleetsOptions, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pi as SandboxPortPreviewLink, pn as GpuLeaseStatus, pr as RolloutOptions, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotDeleteOutcome, ri as SandboxFleetTraceOptions, rn as GitConfig, ro as BatchSidecarGroup, rr as PublishPublicTemplateVersionOptions, rt as DriverConfig, sa as SnapshotResult, si as SandboxFleetWorkspaceRestoreResult, sn as GpuLeaseBilling, so as parseBackendType, sr as ReconcileSandboxFleetsResult, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SessionStatus, ti as SandboxFleetTraceEvent, tn as GitBranch, to as BatchEvent, tr as PublicTemplateVersionInfo, tt as DownloadResult, u as BackendCapabilities, ua as StartupOperation, ui as SandboxInfo, un as GpuLeaseExecResult, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, w as ChunkedUploadOptions, wa as TokenUsage, wi as SandboxTerminalAttachOptions, wn as ListOptions, wr as SandboxDeleteAcknowledgement, wt as FileReadResult, x as BatchTask, xa as TeePublicKey, xi as SandboxShapePreset, xn as IntelligenceReportWindow, xr as SandboxConnection, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeeAttestationReport, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessRecord, zi as SendSessionMessageOptions, zn as ProcessInfo, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-C0XwJqxx.js";
+import { $ as BuildSandboxMcpConfigOptions, A as InteractiveSessionControlClaim, B as InterruptResult, C as materializeProfileFileMounts, D as AgentInteractiveTerminalSession, E as validateDeferredProfileFileMounts, F as InteractiveSessionInfo, G as InteractiveTerminalMetadata, H as agentInteractiveSessionPromptRequestDigest, I as InteractiveSessionRef, J as SandboxInteractionCommandResult, K as createInteractiveTerminalCapture, L as InteractiveSessionStartOptions, M as InteractiveSessionHandleOptions, N as InteractiveSessionHost, O as InteractiveControlClaimRequest, P as InteractiveSessionIncarnationId, Q as BuildControlPlaneMcpConfigOptions, R as InteractiveSessionStartResult, S as SplitInlineProfileSkillsResult, T as splitInlineProfileSkills, U as InteractiveTerminalCapture, V as RespondToPermissionOptions, W as InteractiveTerminalFrameLog, X as SandboxInteractionResolution, Y as SandboxInteractionConflict, Z as SandboxInteractionResult, _ as SandboxSession, a as WorkspaceImagePublishRequestOptions, at as buildControlPlaneMcpConfig, b as MaterializeProfileFileMountsResult, c as TraceExportFormat, d as buildTraceExportPayload, et as CONTROL_PLANE_MCP_SERVER_NAME, f as exportTraceBundle, g as RawEvidenceExport, h as SandboxTaskSession, i as WorkspaceImagePublishInput, it as SandboxMcpServerEntry, j as InteractiveSessionHandle, k as InteractivePromptCommand, l as TraceExportResult, m as toOtelJson, nt as SandboxMcpConfig, o as WorkspaceImagePublishResult, ot as buildSandboxMcpConfig, p as otelTraceIdForTangleTrace, q as createInteractiveTerminalSession, r as SandboxInstance, rt as SandboxMcpEndpoint, s as WorkspaceImages, t as ForkAcknowledgement, tt as SANDBOX_MCP_SERVER_NAME, u as TraceExportSink, v as ProfileFileDeliveryReport, w as splitInlineProfileFileMounts, x as SplitInlineProfileFileMountsResult, y as MaterializeProfileFileMountsOptions, z as InteractiveStopCommand } from "./sandbox-D2Cz4gGL.js";
+import { $ as DownloadOptions, $a as PublicBatchRunRequest, $i as SessionMessageInputPart, $n as PublicProfileConflict, $r as SandboxFleetToken, $t as GPU_LEASE_PROVIDER_NAMES, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, An as NetworkConfig, Ar as SandboxFleetAgent, At as FileUsageOptions, B as CreateSandboxOptions, Ba as ManagedProcessResumeOptions, Bi as SendSessionMessageRequest, Bn as ProcessListOptions, Br as SandboxFleetIntelligenceEnvelope, Bt as FleetDispatchStreamOptions, C as BranchOptions, Ca as TokenRefreshHandler, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, Ct as FileReadError, Da as UploadOptions, Di as SandboxTerminalManager, Dn as MAX_EGRESS_DENIALS_LIMIT, Dr as SandboxEgressUsage, Dt as FileTreeFile, Ea as UpdateUserOptions, Ei as SandboxTerminalInfo, En as ListSandboxOptions, Er as SandboxDeleteOutcome, Et as FileSystem, F as CreateIntelligenceReportOptions, Fa as WriteManyOptions, Fi as SearchMatch, Fn as PreviewLinkInfo, Fr as SandboxFleetDispatchFailureClass, Ft as FleetAgentResult, G as DeleteMatchingSandboxesFilter, Ga as RawEvidenceArchiveManifest, Gi as SessionExecutionStatus, Gn as ProcessStatus, Gr as SandboxFleetManifest, Gt as FleetMachineId, H as CreateTaskSessionOptions, Ha as ManagedProcessState, Hi as SessionBackendCredentials, Hn as ProcessManager, Hr as SandboxFleetMachineMeteredUsage, Ht as FleetDriveTurnRequest, I as CreateRequestOptions, Ia as ManagedProcessClient, Ii as SearchOptions, In as PreviewLinkManager, Ir as SandboxFleetDispatchResponse, It as FleetAgentRunStatus, J as DeleteOptions, Ja as RawEvidenceNativeFile, Ji as SessionInfo, Jn as PromptResult, Jr as SandboxFleetParent, Jt as FleetRunEvent, K as DeleteMatchingSandboxesOptions, Ka as RawEvidenceDirectoryExport, Ki as SessionFailureReason, Kn as PromptInputPart, Kr as SandboxFleetManifestMachine, Kt as FleetPromptDispatchOptions, L as CreateSandboxFleetOptions, La as ManagedProcessJobs, Li as SecretInfo, Ln as PreviewLinkWaitOptions, Lr as SandboxFleetDriverCapability, Lt as FleetDispatchCancelResult, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mi as SandboxTraceExport, Mn as NonHostAgentDriverConfig, Mr as SandboxFleetArtifact, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, Nn as PermissionLevel, Nr as SandboxFleetArtifactSpec, Nt as FleetAgentId, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, On as McpServerConfig, Or as SandboxEnvironment, Ot as FileTreeOptions, P as CreateGpuLeaseOptions, Pa as WriteManyFile, Pi as SandboxUser, Pn as PermissionsManager, Pr as SandboxFleetCostEstimate, Pt as FleetAgentPlacement, Q as DispatchedSession, Qi as SessionMessageAdmission, Qn as ProvisionStep, Qr as SandboxFleetSpend, Qt as ForkLookupOptions, Ra as ManagedProcessOptions, Ri as SecretsManager, Rn as Process, Rr as SandboxFleetDriverTimings, Rt as FleetDispatchResultBuffer, S as BatchTaskResult, Sa as TeePublicKeyResponse, Si as SandboxShapesInfo, Sr as SandboxCreateOutcome, St as FileReadBatchResult, T as ChunkedUploadResult, Ta as TurnDriveResult, Ti as SandboxTerminalCreateOptions, Tn as ListSandboxFleetOptions, Tr as SandboxDeleteOptions, Tt as FileRenameResult, U as DeleteMatchingSandboxOutcome, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, Un as ProcessSignal, Ur as SandboxFleetMachineRecord, Ut as FleetExecDispatchOptions, V as CreateSessionOptions, Va as ManagedProcessSpec, Vi as SentSessionMessage, Vn as ProcessLogEntry, Vr as SandboxFleetMachine, Vt as FleetDriveTurnOutcome, W as DeleteMatchingSandboxResult, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Wn as ProcessSpawnOptions, Wr as SandboxFleetMachineSpec, X as DirectoryPermission, Xa as RawEvidenceRecordsFile, Xi as SessionListOptions, Xn as ProvisionResult, Xr as SandboxFleetPolicy, Xt as ForkCounts, Y as DevServerInfo, Ya as RawEvidencePayloadFile, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Yr as SandboxFleetPlacement, Yt as FleetRunOptions, Z as DispatchPromptOptions, Zi as SessionMessage, Zn as ProvisionStatus, Zr as SandboxFleetProfileRef, Zt as ForkIdempotency, _ as BatchBackend, _a as TaskSessionProfile, _i as SandboxRunGeneration, _n as IntelligenceReport, _r as RolloutTurnPart, _t as ExactProcessSpawnOptions, aa as SnapshotInfo, ai as SandboxFleetWorkspace, an as GitStatus, ao as ALL_BACKEND_TYPES, ar as ReapExpiredSandboxFleetsResult, at as DriverType, b as BatchRunRequest, ba as TeeAttestationResponse, bi as SandboxShape, bn as IntelligenceReportSubjectType, br as SandboxConfig, bt as FileInfo, c as AttachGpuLeaseOptions, ci as SandboxFleetWorkspaceSnapshotResult, cn as GpuLeaseCommandResult, cr as RenameOptions, d as BackendConfig, da as StorageConfig, di as SandboxIntelligenceEnvelope, dn as GpuLeaseManager, dr as Rollout, dt as EffectiveBackendSource, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, en as GitAuth, eo as BatchBackendStats, er as PublicTemplateInfo, et as DownloadProgress, f as BackendInfo, fa as SubscriptionInfo, fi as SandboxPortBinding, fn as GpuLeaseProviderName, fr as RolloutChildResult, ft as EgressDenial, g as BackendStatus, ga as TaskSessionInfo, gi as SandboxResources, gn as InstalledTool, gr as RolloutStatus, gt as EventStreamOptions, h as BackendRuntimeConfigUpdate, ha as TaskSessionFileChange, hi as SandboxResourceUsage, hn as HostAgentRuntimeBackend, hr as RolloutStartResult, ht as EnsureDevServerOptions, ia as SnapshotIdempotency, ii as SandboxFleetUsage, in as GitDiff, io as BatchTaskUsage, ir as ReapExpiredSandboxFleetsOptions, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, ji as SandboxTraceEvent, jn as NetworkManager, jr as SandboxFleetAgentSpec, jt as FileUsageResult, ka as UsageInfo, ki as SandboxTerminals, kn as MkdirOptions, kr as SandboxEvent, kt as FileTreeResult, l as AttachSandboxFleetMachineOptions, la as StartupDiagnostics, li as SandboxIdentity, ln as GpuLeaseExecOptions, lt as EffectiveBackend, m as BackendMcpServerStatus, ma as TaskSessionCommitResult, mi as SandboxRemovalState, mn as HostAgentDriverConfig, mr as RolloutScorer, mt as EgressPolicy, n as AccessPolicyRule, na as SnapshotDeleteAcknowledgement, ni as SandboxFleetTraceExport, nn as GitCommit, no as BatchEventDataMap, nr as PublishPublicTemplateOptions, nt as DriveTurnOptions, oa as SnapshotOptions, oi as SandboxFleetWorkspaceReconcileResult, on as GpuLease, oo as BackendType, or as ReconcileSandboxFleetsOptions, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pi as SandboxPortPreviewLink, pn as GpuLeaseStatus, pr as RolloutOptions, pt as EgressManager, q as DeleteMatchingSandboxesResult, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, qr as SandboxFleetOperationsSummary, qt as FleetPromptDispatchResult, r as AddUserOptions, ra as SnapshotDeleteOutcome, ri as SandboxFleetTraceOptions, rn as GitConfig, ro as BatchSidecarGroup, rr as PublishPublicTemplateVersionOptions, rt as DriverConfig, sa as SnapshotResult, si as SandboxFleetWorkspaceRestoreResult, sn as GpuLeaseBilling, so as parseBackendType, sr as ReconcileSandboxFleetsResult, st as DurablePlanDecisionResult, t as AcceleratorKind, ta as SessionStatus, ti as SandboxFleetTraceEvent, tn as GitBranch, to as BatchEvent, tr as PublicTemplateVersionInfo, tt as DownloadResult, u as BackendCapabilities, ua as StartupOperation, ui as SandboxInfo, un as GpuLeaseExecResult, ut as EffectiveBackendProfile, v as BatchResult, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, w as ChunkedUploadOptions, wa as TokenUsage, wi as SandboxTerminalAttachOptions, wn as ListOptions, wr as SandboxDeleteAcknowledgement, wt as FileReadResult, x as BatchTask, xa as TeePublicKey, xi as SandboxShapePreset, xn as IntelligenceReportWindow, xr as SandboxConnection, xt as FileReadBatchOptions, y as BatchRunOptions, ya as TeeAttestationReport, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, z as CreateSandboxFleetWithCoordinatorOptions, za as ManagedProcessRecord, zi as SendSessionMessageOptions, zn as ProcessInfo, zr as SandboxFleetInfo, zt as FleetDispatchResultBufferOptions } from "./types-Bpj_5qnH.js";
 import { c as MintScopedTokenOptions, d as TERMINAL_WS_ECHO_SUBPROTOCOL, f as TerminalExitInfo, g as TerminalStreamAuthFormat, h as TerminalReadyInfo, i as TerminalStreamOptions, l as ScopedToken, m as TerminalOutputMessage, n as TerminalStreamError, o as TerminalStreamToken, p as TerminalInteractiveSessionIdentity, r as TerminalStreamHandlers, s as MintInteractiveSessionTokenOptions, t as TerminalStream, u as ScopedTokenScope } from "./terminal-stream-CV1pMSKC.js";
 import { a as InteractiveSessionControlController, c as InteractiveSessionIdentity, d as interactiveSessionIdentityDigest, f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, i as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as InteractiveSessionNotRunningError, m as InteractiveControlClaimOptions, n as BrowserInteractiveSessionControlControllerOptions, o as InteractiveSessionControlControllerOptions, p as InteractiveControlClaimAcknowledgement, r as browserInteractiveControlHolderId, s as InteractiveSessionControlTransport, t as BrowserInteractiveSessionControlController, u as createInteractiveControlHolderId } from "./browser-interactive-control-controller-JUW3gOGH.js";
 import { a as InteractiveSessionControllerOptions, i as InteractiveSessionController, n as BrowserInteractiveSessionControllerOptions, o as InteractiveSessionControllerTransport, r as InteractiveAttachRequest, t as BrowserInteractiveSessionController } from "./interactive-controller-DNbLzamS.js";
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
-import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BVZv8JbS.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, G as LineApplicationResult, H as LINE_APPLICATION_REQUEST_MAX_BYTES, I as LinesClient, J as parseLineApplicationRequest, K as LineApplicationState, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, U as LineApplication, V as LINE_APPLICATION_REPLY_MAX_CHARS, W as LineApplicationRequest, Y as parseLineApplicationResult, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, q as LineApplicationView, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CIzO8XBK.js";
+import { A as BackendRegistryEntry, C as InstancesClient, D as ParsedSSEEvent, E as ParseSSEStreamOptions, F as backendRegistryInteractionKindSchema, I as backendRegistryResponseSchema, L as isBackendRegistryInteractionKind, M as BackendRegistryResponse, N as backendRegistryCapabilitiesSchema, O as parseSSEStream, P as backendRegistryEntrySchema, R as parseBackendRegistryResponse, S as InstanceStart, T as SandboxFleetClient, _ as EnsureInstanceOptions, a as Team, b as InstanceRecord, c as SessionBroadcastEvent, d as RunPlacement, f as RunPlacementRecord, g as RunsHttpClient, h as RunsClient, i as Sandbox, j as BackendRegistryInteractionKind, k as BackendRegistryCapabilities, l as SessionBroadcastResult, m as RunWaitOptions, n as IntelligenceClient, o as TeamInvitation, p as RunRecord, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as RunOptions, v as HostedInstance, w as SandboxFleet, x as InstanceRestartingError, y as InstanceProfile, z as parseBackendRegistryResponseBody } from "./client-BG3-wRZl.js";
 import { _ as StreamInterruptedError, a as FileWriteConflictError, b as ValidationError, c as NotFoundError, d as ResumeEnvRequiredError, f as SandboxError, g as StateError, h as ServerError, i as EgressProxyRecoveryError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxErrorJson, r as EdgeNotReadyError, s as NetworkError, t as AuthError, u as QuotaError, v as StreamInterruptionReason, y as TimeoutError } from "./errors-CRssX9qs.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-BgmgfYZZ.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DHuHjNie.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C0CsZPED.js";
-import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-C8zV32IL.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-DT-JPlp9.js";
+import { b as TangleSandboxClientConfig, h as TangleSandboxClient } from "./index-BFdTlLys.js";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentProfile, AgentProfile as AgentProfile$1, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConfigValue, AgentProfileConnection, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileSecurityPolicy, AgentProfileValidationIssue, AgentProfileValidationResult, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, AgentSubagentProfile, Capability, SANDBOX_SIZE_PRESET_NAMES, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -644,6 +644,36 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -974,6 +1004,36 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -1314,6 +1374,36 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -1639,6 +1729,36 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -1969,6 +2089,36 @@ declare const manageSandboxesInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -2404,6 +2554,36 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -2734,6 +2914,36 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -3074,6 +3284,36 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -3399,6 +3639,36 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;
@@ -3729,6 +3999,36 @@ declare const MANAGE_SANDBOXES_PARAMETERS: z.core.ZodStandardJSONSchemaPayload<z
             pi: "pi";
             prime: "prime";
           }>>;
+          seats: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            harness: z.ZodEnum<{
+              acp: "acp";
+              amp: "amp";
+              "claude-code": "claude-code";
+              "cli-base": "cli-base";
+              codex: "codex";
+              cursor: "cursor";
+              "factory-droids": "factory-droids";
+              forge: "forge";
+              gemini: "gemini";
+              hermes: "hermes";
+              "kimi-code": "kimi-code";
+              nanoclaw: "nanoclaw";
+              openclaw: "openclaw";
+              opencode: "opencode";
+              pi: "pi";
+              prime: "prime";
+            }>;
+            provider: z.ZodString;
+            model: z.ZodString;
+            selector: z.ZodUnion<readonly [z.ZodObject<{
+              kind: z.ZodLiteral<"all-eligible">;
+            }, z.core.$strict>, z.ZodObject<{
+              kind: z.ZodLiteral<"seat">;
+              id: z.ZodString;
+            }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+          }, z.core.$strict>>>;
           permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
           tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
           mcp: z.ZodOptional<z.ZodType<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, _$_tangle_network_agent_interface0.AgentProfileMcpServer>, unknown>>>;

package/dist/index.js

@@ -1,13 +1,13 @@
 import { i as parseBackendType, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-C7b_Gpa0.js";
 import { A as requestedPublicProfileDigest, F as deriveAgentResultOutcome, I as deriveAgentRunOutcome, L as projectAgentTerminalRecord, P as createAgentRunOutcomeTracker, a as TERMINAL_WS_ECHO_SUBPROTOCOL, i as TerminalStreamError, k as normalizeRuntimeBackendConfig, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, w as parseSSEStream } from "./interactive-controller-Dxt5sW2N.js";
 import { _ as TimeoutError, a as FileWriteConflictError, c as NetworkError, d as QuotaError, f as ResumeEnvRequiredError, g as StreamInterruptedError, h as StateError, i as EgressProxyRecoveryError, l as NotFoundError, m as ServerError, n as CapabilityError, o as KeyBudgetExhaustedError, p as SandboxError, r as EdgeNotReadyError, t as AuthError, u as PartialFailureError, v as ValidationError } from "./errors-Cq4hMysQ.js";
-import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-CGbGnrBO.js";
+import { _ as parseBackendRegistryResponse, a as InstanceRestartingError, c as SandboxFleetClient, d as validateBatchRunRequest, f as backendRegistryCapabilitiesSchema, g as isBackendRegistryInteractionKind, h as backendRegistryResponseSchema, i as HostedInstance, l as runtimeWorkspaceCwdSchema, m as backendRegistryInteractionKindSchema, n as Sandbox, o as InstancesClient, p as backendRegistryEntrySchema, r as RunsClient, s as SandboxFleet, t as IntelligenceClient, u as createBatchResultAccumulator, v as parseBackendRegistryResponseBody } from "./client-t35bzeo_.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BJf0P_J4.js";
-import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-uwsfBoYj.js";
+import { A as exportTraceBundle, C as splitInlineProfileFileMounts, M as toOtelJson, S as materializeProfileFileMounts, T as validateDeferredProfileFileMounts, _ as collectAgentFinalMessageText, b as isToolBearingEvent, c as MAX_EGRESS_DENIALS_LIMIT, d as InteractiveSessionHandle, f as agentInteractiveSessionPromptRequestDigest, g as applySandboxEventText, h as createInteractiveTerminalSession, j as otelTraceIdForTangleTrace, k as buildTraceExportPayload, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as WorkspaceImages, p as InteractiveTerminalFrameLog, s as GPU_LEASE_PROVIDER_NAMES, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as splitInlineProfileSkills, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-Cv_TaxK_.js";
 import { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference } from "./lines.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DaWEv29D.js";
 import { i as parseLineApplicationResult, n as LINE_APPLICATION_REQUEST_MAX_BYTES, r as parseLineApplicationRequest, t as LINE_APPLICATION_REPLY_MAX_CHARS } from "./line-application-Cq6dJLBD.js";
-import { s as TangleSandboxClient } from "./tangle-B06VSOdG.js";
+import { s as TangleSandboxClient } from "./tangle-BAhPKpgV.js";
 import { SANDBOX_SIZE_PRESET_NAMES, agentProfileConfidentialSchema, agentProfileSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/confidential.ts

package/dist/{lines-DQmR5ypP.d.ts → lines-CIzO8XBK.d.ts}

@@ -1,4 +1,4 @@
-import { B as CreateSandboxOptions, d as BackendConfig } from "./types-C0XwJqxx.js";
+import { B as CreateSandboxOptions, d as BackendConfig } from "./types-Bpj_5qnH.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-DQmR5ypP.js";
+import { A as LineSenderVerification, B as profileChannelReference, C as LineReplyCodeInput, D as LineRole, E as LineRespondView, F as LineVoiceOptions, I as LinesClient, L as LinesHttpClient, M as LineThread, N as LineTransport, O as LineSendInput, P as LineVoice, R as SandboxLines, S as LineReplyCode, T as LineRespondAgent, _ as LineMemberSpec, a as LineApplicationAttachOptions, b as LineProvider, c as LineAttachmentReauthorization, d as LineInstanceAttachOptions, f as LineInstanceCreate, g as LineMemberPatch, h as LineMemberInstance, i as LineAllowanceSubject, j as LineSenderVerificationStart, k as LineSendReceipt, l as LineExecutionKey, m as LineMember, n as LineAgentRolePolicy, o as LineAttachOptions, p as LineLimits, r as LineAllowance, s as LineAttachment, t as Line, u as LineFromConnectionInput, v as LineMessage, w as LineReplyGate, x as LineReminderPreferences, y as LineNumberInventory, z as lineInstanceKey } from "./lines-CIzO8XBK.js";
 export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{local-cli-auth-Bs0An6Cw.js → local-cli-auth-BpV8J6wa.js}

@@ -1,4 +1,4 @@
-import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-Br8s2y4r.js";
+import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-BA1ONzC2.js";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";

package/dist/{preview-CFHnG116.d.ts → preview-wyTghB5L.d.ts}

@@ -1,6 +1,6 @@
-import { r as SandboxInstance } from "./sandbox-PrV7qtTE.js";
-import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-C0XwJqxx.js";
-import { i as Sandbox } from "./client-BVZv8JbS.js";
+import { r as SandboxInstance } from "./sandbox-D2Cz4gGL.js";
+import { Fn as PreviewLinkInfo, ht as EnsureDevServerOptions } from "./types-Bpj_5qnH.js";
+import { i as Sandbox } from "./client-BG3-wRZl.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/runtime.d.ts

@@ -1,9 +1,9 @@
-import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SendSessionMessageRequest, Cn as ListMessagesOptions, Di as SandboxTerminalManager, Ei as SandboxTerminalInfo, Gi as SessionExecutionStatus, H as CreateTaskSessionOptions, Ji as SessionInfo, Mt as FileWriteResult, Na as WriteFileOptions, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, Ot as FileTreeOptions, Qi as SessionMessageAdmission, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalCreateOptions, Tt as FileRenameResult, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Zi as SessionMessage, cr as RenameOptions, fi as SandboxPortBinding, ga as TaskSessionInfo, jt as FileUsageResult, kr as SandboxEvent, kt as FileTreeResult, ma as TaskSessionCommitResult, pa as TaskSessionChanges, w as ChunkedUploadOptions, xt as FileReadBatchOptions, yi as SandboxRuntimeHealth, zi as SendSessionMessageOptions } from "./types-C0XwJqxx.js";
+import { A as CommitTaskSessionOptions, At as FileUsageOptions, Bi as SendSessionMessageRequest, Cn as ListMessagesOptions, Di as SandboxTerminalManager, Ei as SandboxTerminalInfo, Gi as SessionExecutionStatus, H as CreateTaskSessionOptions, Ji as SessionInfo, Mt as FileWriteResult, Na as WriteFileOptions, Oa as UploadProgress, Oi as SandboxTerminalRequestOptions, Ot as FileTreeOptions, Qi as SessionMessageAdmission, St as FileReadBatchResult, T as ChunkedUploadResult, Ti as SandboxTerminalCreateOptions, Tt as FileRenameResult, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wi as SessionExecutionInfo, Zi as SessionMessage, cr as RenameOptions, fi as SandboxPortBinding, ga as TaskSessionInfo, jt as FileUsageResult, kr as SandboxEvent, kt as FileTreeResult, ma as TaskSessionCommitResult, pa as TaskSessionChanges, w as ChunkedUploadOptions, xt as FileReadBatchOptions, yi as SandboxRuntimeHealth, zi as SendSessionMessageOptions } from "./types-Bpj_5qnH.js";
 import { l as ScopedToken, t as TerminalStream } from "./terminal-stream-CV1pMSKC.js";
 import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-JUW3gOGH.js";
 import { t as BrowserInteractiveSessionController } from "./interactive-controller-DNbLzamS.js";
 import { a as FileWriteConflictError, b as ValidationError, c as NotFoundError, f as SandboxError, g as StateError, h as ServerError, l as PartialFailureError, m as SandboxFailureDetail, n as CapabilityError, p as SandboxErrorJson, s as NetworkError, t as AuthError, u as QuotaError, y as TimeoutError } from "./errors-CRssX9qs.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-C0CsZPED.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-DT-JPlp9.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/{sandbox-uwsfBoYj.js → sandbox-Cv_TaxK_.js}

@@ -4,7 +4,7 @@ import { _ as TimeoutError, b as parseResponseError, c as NetworkError, d as Quo
 import { d as awaitWithAbort, f as combineAbortSignals, g as interactiveSessionStatusResponseSchema, h as interactiveSessionControlValidationResponseSchema, l as createInteractiveControlHolderId, m as interactiveSessionControlReleaseResponseSchema, p as interactiveSessionControlClaimResponseSchema } from "./browser-interactive-control-controller-BJf0P_J4.js";
 import { SandboxLines } from "./lines.js";
 import { l as SANDBOX_PROXY_REQUEST_MAX_BYTES, s as uploadChunked } from "./chunked-upload-CfefWUE5.js";
-import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-Br8s2y4r.js";
+import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-BA1ONzC2.js";
 import { AgentExactRunControlRefSchema, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, InteractionAcknowledgementSchema, InteractionBindingSchema, InteractionRequestSchema, InteractionResponseCommandSchema, InteractionResponseSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, canonicalCandidateDigest, canonicalCandidateJson, exactAgentInteractiveSessionStart, sha256DigestSchema, terminalSessionUsable } from "@tangle-network/agent-interface";
 import { z } from "zod";
 import { AgentInteractiveSessionControlClaimSchema as AgentInteractiveSessionControlClaimSchema$1, AgentInteractiveSessionPromptAcknowledgementSchema as AgentInteractiveSessionPromptAcknowledgementSchema$1, AgentInteractiveSessionRefSchema as AgentInteractiveSessionRefSchema$1, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema as AgentInteractiveSessionStopAcknowledgementSchema$1 } from "@tangle-network/agent-interface/environment-interactive-control";
@@ -13,6 +13,7 @@ import { createHash } from "node:crypto";
 import { constants } from "node:fs";
 import "node:path";
 import "node:fs/promises";
+import "@tangle-network/agent-interface/environment-provider";
 //#region src/trace-exporter.ts
 function buildTraceExportPayload(bundle, format = "tangle", serviceName = "tangle-sandbox") {
 	if (format === "tangle") return bundle;
@@ -225,9 +226,9 @@ function snakeCase(value) {
 * body stays readable. When both are unreachable, undici's own cleanup runs.
 */
 const originals = /* @__PURE__ */ new WeakMap();
-/** A Response with `original`'s status and body and the given headers. */
-function rewrapResponse(original, headers) {
-	const wrapper = new Response(original.body, {
+/** A Response retaining `original`'s lifetime, with optional body decoration. */
+function rewrapResponse(original, headers, body = original.body) {
+	const wrapper = new Response(body, {
 		status: original.status,
 		statusText: original.statusText,
 		headers
@@ -9229,13 +9230,14 @@ var DirectRuntimeHttpClient = class {
 		const directTimeoutMs = fetchOptions?.timeoutMs;
 		if (!init.signal && typeof directTimeoutMs === "number" && directTimeoutMs > 0) init.signal = AbortSignal.timeout(directTimeoutMs);
 		let response = await fetch(targetUrl, init);
-		if (response.status === 401 && this.onUnauthorized && !headers.has("x-no-retry")) {
+		if ((response.status === 401 || response.status === 403 && await isRefusedBearer(response)) && this.onUnauthorized && !headers.has("x-no-retry")) {
+			const refusedStatus = response.status;
 			await response.arrayBuffer().catch(() => void 0);
 			try {
 				await this.onUnauthorized();
 			} catch {
 				return new Response("", {
-					status: 401,
+					status: refusedStatus,
 					statusText: response.statusText
 				});
 			}
@@ -9254,6 +9256,18 @@ var DirectRuntimeHttpClient = class {
 		return rewrapResponse(response, responseHeaders);
 	}
 };
+/**
+* True when a 403 is the sidecar refusing the bearer itself, not a bearer
+* that lacks a capability. Reads a clone, so the caller keeps the body.
+*/
+async function isRefusedBearer(response) {
+	try {
+		const body = await response.clone().json();
+		return body.error?.code === "FORBIDDEN" && body.error.message === "Invalid authentication token";
+	} catch {
+		return false;
+	}
+}
 function quoteForShell(value) {
 	if (value.includes("\0")) throw new Error("Shell argument contains NUL byte");
 	return `'${value.replace(/'/g, "'\\''")}'`;

package/dist/{sandbox-PrV7qtTE.d.ts → sandbox-D2Cz4gGL.d.ts}

@@ -1,9 +1,9 @@
 import { t as CliAuthReference } from "./cli-auth-bundle-ODe06Ts7.js";
-import { $n as PublicProfileConflict, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, Bi as SendSessionMessageRequest, C as BranchOptions, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fa as WriteManyOptions, Fi as SearchMatch, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SearchOptions, In as PreviewLinkManager, Ji as SessionInfo, Jn as PromptResult, Ka as RawEvidenceDirectoryExport, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, O as CodeLanguage, Pa as WriteManyFile, Pn as PermissionsManager, Q as DispatchedSession, Qa as InteractionResolutionAcknowledgement, Qi as SessionMessageAdmission, Qt as ForkLookupOptions, Sa as TeePublicKeyResponse, Sn as JsonValue, Ta as TurnDriveResult, Tr as SandboxDeleteOptions, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Xi as SessionListOptions, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as WorkspaceImagePublishResult$1, Zi as SessionMessage, Zt as ForkIdempotency, _n as IntelligenceReport, aa as SnapshotInfo, an as GitStatus, ba as TeeAttestationResponse, bi as SandboxShape, d as BackendConfig, dn as GpuLeaseManager, dr as Rollout, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, fi as SandboxPortBinding, ga as TaskSessionInfo, gn as InstalledTool, gt as EventStreamOptions, hi as SandboxResourceUsage, hr as RolloutStartResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, jn as NetworkManager, ki as SandboxTerminals, kr as SandboxEvent, la as StartupDiagnostics, lr as RestoreSnapshotOptions, ma as TaskSessionCommitResult, na as SnapshotDeleteAcknowledgement, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pr as RolloutOptions, pt as EgressManager, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, sa as SnapshotResult, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxInfo, ur as ResumeOptions, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, wi as SandboxTerminalAttachOptions, wr as SandboxDeleteAcknowledgement, xn as IntelligenceReportWindow, xr as SandboxConnection, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, zi as SendSessionMessageOptions } from "./types-C0XwJqxx.js";
+import { $n as PublicProfileConflict, A as CommitTaskSessionOptions, Aa as WaitForOptions, Ai as SandboxTraceBundle, Bi as SendSessionMessageRequest, C as BranchOptions, Ci as SandboxStatus, Cn as ListMessagesOptions, Cr as SandboxCreateReceipt, D as CodeExecutionResult, E as CodeExecutionOptions, Et as FileSystem, Fa as WriteManyOptions, Fi as SearchMatch, H as CreateTaskSessionOptions, Hn as ProcessManager, Ii as SearchOptions, In as PreviewLinkManager, Ji as SessionInfo, Jn as PromptResult, Ka as RawEvidenceDirectoryExport, Kn as PromptInputPart, M as ConversationTurnOptions, Ma as WorkspaceOperationLookup, Mt as FileWriteResult, N as ConversationTurnResult, Na as WriteFileOptions, Ni as SandboxTraceOptions, O as CodeLanguage, Pa as WriteManyFile, Pn as PermissionsManager, Q as DispatchedSession, Qa as InteractionResolutionAcknowledgement, Qi as SessionMessageAdmission, Qt as ForkLookupOptions, Sa as TeePublicKeyResponse, Sn as JsonValue, Ta as TurnDriveResult, Tr as SandboxDeleteOptions, Ua as SandboxEnvRecovery, Ui as SessionEventStreamOptions, V as CreateSessionOptions, Vi as SentSessionMessage, Wa as SandboxEnvRecoveryView, Wi as SessionExecutionInfo, Xi as SessionListOptions, Xn as ProvisionResult, Xt as ForkCounts, Yi as SessionInterruptOptions, Yn as ProvisionEvent, Z as DispatchPromptOptions, Za as WorkspaceImagePublishResult$1, Zi as SessionMessage, Zt as ForkIdempotency, _n as IntelligenceReport, aa as SnapshotInfo, an as GitStatus, ba as TeeAttestationResponse, bi as SandboxShape, d as BackendConfig, dn as GpuLeaseManager, dr as Rollout, ea as SessionResultOptions, ei as SandboxFleetTraceBundle, fi as SandboxPortBinding, ga as TaskSessionInfo, gn as InstalledTool, gt as EventStreamOptions, hi as SandboxResourceUsage, hr as RolloutStartResult, in as GitDiff, it as DriverInfo, j as CompletedTurnResult, ja as WaitForRolloutOptions, jn as NetworkManager, ki as SandboxTerminals, kr as SandboxEvent, la as StartupDiagnostics, lr as RestoreSnapshotOptions, ma as TaskSessionCommitResult, na as SnapshotDeleteAcknowledgement, nn as GitCommit, nt as DriveTurnOptions, oa as SnapshotOptions, on as GpuLease, ot as DurablePlan, p as BackendManager, pa as TaskSessionChanges, pr as RolloutOptions, pt as EgressManager, qa as RawEvidenceExportOptions, qi as SessionForkOptions, qn as PromptOptions, sa as SnapshotResult, st as DurablePlanDecisionResult, tn as GitBranch, ui as SandboxInfo, ur as ResumeOptions, va as TeeAttestationOptions, vi as SandboxRuntimeCapabilities, vn as IntelligenceReportBudget, vr as SSHCommandDescriptor, vt as ExecOptions, wi as SandboxTerminalAttachOptions, wr as SandboxDeleteAcknowledgement, xn as IntelligenceReportWindow, xr as SandboxConnection, yi as SandboxRuntimeHealth, yn as IntelligenceReportCompareTo, yr as SSHCredentials, yt as ExecResult, zi as SendSessionMessageOptions } from "./types-Bpj_5qnH.js";
 import { a as TerminalStreamReconnectAuthority, c as MintScopedTokenOptions, h as TerminalReadyInfo, l as ScopedToken, r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-stream-CV1pMSKC.js";
 import { f as InteractiveAttachOptions, g as InteractiveSessionStatus, h as InteractiveRequestOptions, m as InteractiveControlClaimOptions, p as InteractiveControlClaimAcknowledgement } from "./browser-interactive-control-controller-JUW3gOGH.js";
 import { r as InteractiveAttachRequest } from "./interactive-controller-DNbLzamS.js";
-import { R as SandboxLines } from "./lines-DQmR5ypP.js";
+import { R as SandboxLines } from "./lines-CIzO8XBK.js";
 import { AgentInteractiveSessionAttach, AgentInteractiveSessionControlClaim, AgentInteractiveSessionControlClaimAcknowledgement, AgentInteractiveSessionControlClaimRequest, AgentInteractiveSessionPromptAcknowledgement, AgentInteractiveSessionPromptCommand, AgentInteractiveSessionRef, AgentInteractiveSessionStart, AgentInteractiveSessionStopAcknowledgement, AgentInteractiveSessionStopCommand, AgentInteractiveTerminalSession, AgentInteractiveTerminalSession as AgentInteractiveTerminalSession$1, AgentProfile, AgentProfileFileMount, AgentRunCancellationAcknowledgement, AgentRunCancellationRequest, InteractionAcknowledgement, InteractionData, InteractionRequest, InteractionResponseCommand, TerminalOutputEvent, TerminalReplayWindow, agentInteractiveSessionPromptRequestDigest } from "@tangle-network/agent-interface";
 import { z } from "zod";
 

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-C8zV32IL.js";
+import { C as JsonResponseParamTypes, E as SandboxIdParamTypes, S as ITangleJobsAbi, T as SandboxCreateResponseParamTypes, _ as JOB_SANDBOX_DELETE, a as fetchQuote, b as TangleSandboxClientConfig, c as parseQuoteResponse, d as OperatorSession, f as OperatorSessionError, g as JOB_SANDBOX_CREATE, h as TangleSandboxClient, i as SignedQuote, l as validateQuote, m as SignMessage, n as QuoteDomain, o as inputsHashOf, p as OperatorSessionToken, r as QuoteError, s as jobQuoteDigest, t as JobQuoteDetails, u as OperatorChallenge, v as TANGLE_CHAIN_ID, w as SandboxCreateParamTypes, x as AgentSandboxBlueprintAbi, y as TANGLE_JOBS_CONTRACT } from "../index-BFdTlLys.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JobQuoteDetails, JsonResponseParamTypes, OperatorChallenge, OperatorSession, OperatorSessionError, OperatorSessionToken, QuoteDomain, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, SignMessage, SignedQuote, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, TangleSandboxClientConfig, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-B06VSOdG.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as JOB_SANDBOX_DELETE, f as TANGLE_CHAIN_ID, g as JsonResponseParamTypes, h as ITangleJobsAbi, i as jobQuoteDigest, l as OperatorSessionError, m as AgentSandboxBlueprintAbi, n as fetchQuote, o as validateQuote, p as TANGLE_JOBS_CONTRACT, r as inputsHashOf, s as TangleSandboxClient, t as QuoteError, u as JOB_SANDBOX_CREATE, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-BAhPKpgV.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TangleSandboxClient, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-B06VSOdG.js → tangle-BAhPKpgV.js}

@@ -1,5 +1,5 @@
 import { x as readResponseJson } from "./errors-Cq4hMysQ.js";
-import { n as createSandboxInstanceFromResponse } from "./sandbox-uwsfBoYj.js";
+import { n as createSandboxInstanceFromResponse } from "./sandbox-Cv_TaxK_.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-B7_9Hl_z.js";
 //#region src/tangle/abi.ts
 /**

package/dist/{types-C0XwJqxx.d.ts → types-Bpj_5qnH.d.ts}

@@ -3,7 +3,6 @@ import { r as TerminalStreamHandlers, t as TerminalStream } from "./terminal-str
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { AgentExactRunControlRef, AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileValidationResult, AgentRuntimeAttachments, HarnessType, ReasoningEffort, SandboxSizePreset } from "@tangle-network/agent-interface";
 import { z } from "zod";
-
 //#region ../../../packages/runtime-contracts/dist/backend-types.d.ts
 /**
  * Canonical harnesses this repo ships no provider adapter for.
@@ -1650,7 +1649,11 @@ interface SandboxConfig {
   platformUrl?: string;
   /** Base URL for the Sandbox API */
   baseUrl: string;
-  /** Request timeout in milliseconds. Defaults to 30000 (30 seconds) */
+  /**
+   * Request timeout in milliseconds, including declared JSON and error response bodies.
+   * Successful SSE and binary streams are bounded only through response headers.
+   * Defaults to 30000 (30 seconds).
+   */
   timeoutMs?: number;
   /**
    * Permit the SDK to read CLI auth files from the host home directory

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.60.41",
+  "version": "0.60.49",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -105,8 +105,8 @@
     "url": "https://github.com/tangle-network/agent-dev-container/issues"
   },
   "dependencies": {
-    "@tangle-network/agent-core": "^0.10.3",
-    "@tangle-network/agent-interface": "^3.0.0",
+    "@tangle-network/agent-core": "^0.11.0",
+    "@tangle-network/agent-interface": "^4.0.0",
     "tar-stream": "3.2.1",
     "zod": "4.6.5"
   },
@@ -150,11 +150,11 @@
     "ws": "^8.20.0",
     "yjs": "13.6.30",
     "@products/sandbox-test-utils": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.23.1",
+    "@tangle-network/agent-profile-materialize": "0.25.2",
     "@repo/shared": "0.0.0",
-    "@tangle-network/cli-agent-registry": "0.6.2",
-    "@tangle-network/runtime-contracts": "0.16.0",
-    "@tangle-network/sdk": "4.0.3",
+    "@tangle-network/cli-agent-registry": "0.6.4",
+    "@tangle-network/sdk": "4.0.5",
+    "@tangle-network/runtime-contracts": "0.16.2",
     "@tangle-network/sse-core": "0.0.0"
   },
   "scripts": {