@tangle-network/sandbox 0.8.2 → 0.8.3-develop.20260622201025.0dab271

package/dist/{sandbox-CNcyBhPp.d.ts → sandbox-BaK5AyL2.d.ts}

@@ -1,4 +1,4 @@
-import { AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile, defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
+import { AgentProfile, AgentProfileCapabilities, AgentProfileConfidential, AgentProfileConnection, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile, defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
 
 //#region src/types.d.ts
 type JsonValue = string | number | boolean | null | JsonValue[] | {
@@ -1597,6 +1597,11 @@ interface ScopedToken {
   token: string;
   /** When the token expires. */
   expiresAt: Date;
+  /** The runtime's direct edge URL. Matches `SandboxConnection.runtimeUrl`
+   *  (the SDK's canonical public name for this URL). */
+  runtimeUrl: string;
+  /** Browser-safe Sandbox API proxy base for terminal and runtime requests. */
+  sidecarProxyUrl: string;
   /** Echo of the requested scope. */
   scope: ScopedTokenScope;
 }
@@ -2343,6 +2348,7 @@ interface ForkResult {
  * Most callers should omit `driver` and let the platform select automatically.
  */
 type DriverType = "docker" | "firecracker" | "host-agent" | "tangle";
+type HostAgentRuntimeBackend = "docker" | "firecracker";
 /**
  * Accelerator class for GPU-class workloads.
  *
@@ -2387,12 +2393,7 @@ interface SandboxAccelerator {
  * }
  * ```
  */
-interface DriverConfig {
-  /**
-   * Driver type identifier.
-   * @default "docker"
-   */
-  type: DriverType;
+interface DriverConfigBase {
   /**
    * Enable checkpointing for pause/resume and fork operations.
    * Support depends on the selected driver.
@@ -2416,6 +2417,28 @@ interface DriverConfig {
    */
   gpuCount?: number;
 }
+interface HostAgentDriverConfig extends DriverConfigBase {
+  /**
+   * Driver type identifier.
+   */
+  type: "host-agent";
+  /**
+   * Host-agent runtime backend to request.
+   */
+  runtimeBackend?: HostAgentRuntimeBackend;
+}
+interface NonHostAgentDriverConfig extends DriverConfigBase {
+  /**
+   * Driver type identifier.
+   * @default "docker"
+   */
+  type: Exclude<DriverType, "host-agent">;
+  /**
+   * Host-agent runtime backend is only valid for `type: "host-agent"`.
+   */
+  runtimeBackend?: never;
+}
+type DriverConfig = HostAgentDriverConfig | NonHostAgentDriverConfig;
 /**
  * Driver capabilities and status.
  */
@@ -3647,6 +3670,21 @@ interface DeleteOptions {
  * await box.fs.delete("/workspace/temp", { recursive: true });
  * ```
  */
+/** One file in a {@link FileSystem.writeMany} batch. */
+interface WriteManyFile {
+  /** Destination path. Relative paths resolve from the workspace root. */
+  path: string;
+  /** File content (UTF-8). */
+  content: string;
+}
+/** Options for {@link FileSystem.writeMany}. */
+interface WriteManyOptions {
+  /** Delay between writes (ms) to stay under the file-write rate limit.
+   *  Default 150; 0 disables pacing. */
+  paceMs?: number;
+  /** Max retries per file on a transient error before failing loud. Default 4. */
+  maxRetries?: number;
+}
 interface FileSystem {
   /**
    * Read a file's contents as a string.
@@ -3666,6 +3704,27 @@ interface FileSystem {
    * @param content - Content to write
    */
   write(path: string, content: string): Promise<void>;
+  /**
+   * Write many files in one paced, retry-aware batch.
+   *
+   * For materializing a large file corpus (skills, tool scripts, config) into
+   * the sandbox without tripping the file-write rate limit. Each file goes
+   * through the same `/files/write` endpoint as {@link FileSystem.write}, with a
+   * small pace between writes and exponential-backoff retry on transient errors
+   * (quota / server / network / timeout, honoring a server `retryAfterMs`).
+   * Fail-loud: the first file that cannot be written after its retries throws,
+   * and the rest are not attempted. Relative paths resolve from the workspace
+   * root. (The file-write API cannot set the executable bit.)
+   *
+   * @example
+   * ```typescript
+   * await box.fs.writeMany([
+   *   { path: "skills/review.md", content: reviewSkill },
+   *   { path: ".claude/skills/audit.md", content: auditSkill },
+   * ]);
+   * ```
+   */
+  writeMany(files: WriteManyFile[], options?: WriteManyOptions): Promise<void>;
   /**
    * Search for text patterns in files using ripgrep.
    * @see SearchOptions for available options
@@ -4008,6 +4067,113 @@ declare function buildControlPlaneMcpConfig(options: BuildControlPlaneMcpConfigO
   config: SandboxMcpConfig;
 };
 //#endregion
+//#region src/interactive.d.ts
+/**
+ * Interactive harness sessions on the public SDK.
+ *
+ * `box.session(id).interactive()` returns a handle that spawns a coding
+ * harness's native interactive TUI in the sandbox (start), drives it with
+ * prompts (sendPrompt), and tears it down (stop). The live framebuffer is
+ * streamed over the WebSocket at the returned `streamUrl` (the secured
+ * `/terminals/:id/ws` pixel lane) — open it with your terminal/xterm client.
+ *
+ * This is the public SDK surface of the Session Protocol Gateway; it rides the
+ * same secured runtime routes as the rest of the SDK.
+ */
+/** CLI auth file materialized into the harness's auth home before launch. */
+interface InteractiveAuthFile {
+  path: string;
+  content: string;
+  mode?: number;
+}
+interface StartInteractiveOptions {
+  /** Harness with a native interactive TUI: "claude-code" | "codex" | "kimi-code". */
+  harness: string;
+  model?: string;
+  apiKey?: string;
+  authMode?: string;
+  baseUrl?: string;
+  /** Working directory; defaults to the sandbox workspace root. */
+  cwd?: string;
+  cols?: number;
+  rows?: number;
+  authFiles?: InteractiveAuthFile[];
+}
+interface InteractiveSessionInfo {
+  sessionId: string;
+  harness: string;
+  /** ISO timestamp of when the harness process was spawned. */
+  startedAt: string;
+  /**
+   * Sandbox-relative WebSocket path that streams the live framebuffer and
+   * accepts keystrokes (the mTLS- + capability-gated terminal socket).
+   */
+  streamUrl: string;
+}
+/** Decision passed to `respondToPermission`. */
+interface RespondToPermissionOptions {
+  /** The human's decision for the awaiting permission request. */
+  response: "allow" | "deny";
+  /**
+   * Optional audit metadata recorded alongside the decision (e.g. the
+   * reviewer's identity or a reason string). Opaque to the sandbox.
+   */
+  metadata?: Record<string, unknown>;
+}
+/** Result of `respondToPermission`. Mirrors the sidecar route contract. */
+interface PermissionResponseResult {
+  /** The decision was persisted for audit. Always true on success. */
+  recorded: true;
+  /**
+   * True iff a live ACP `request_permission` was awaiting this decision and
+   * it was forwarded to the running agent. `false` means record-only — the
+   * request already resolved (e.g. timed out to the allowlist fallback) or
+   * the backend does not surface live permission requests.
+   */
+  forwarded: boolean;
+}
+/** Result of `interrupt`. */
+interface InterruptResult {
+  /**
+   * True iff an execution was actively running and the abort signal reached
+   * it. `false` means there was nothing in flight to cancel — surfaced
+   * explicitly rather than as a silent success so callers can distinguish a
+   * real interruption from a no-op.
+   */
+  cancelled: boolean;
+}
+/**
+ * Host hooks the SDK box implements to drive interactive sessions. Kept
+ * separate from the prompt/session-event host so the interactive surface is an
+ * explicit, independently-mockable contract.
+ */
+interface InteractiveSessionHost {
+  _startInteractive(id: string, options: StartInteractiveOptions): Promise<InteractiveSessionInfo>;
+  _sendInteractivePrompt(id: string, prompt: string): Promise<void>;
+  _stopInteractive(id: string): Promise<void>;
+}
+/**
+ * Handle for one session's interactive harness. Obtained via
+ * `box.session(id).interactive()`; does not hit the network until a method is
+ * called.
+ */
+declare class InteractiveSessionHandle {
+  private readonly host;
+  private readonly sessionId;
+  constructor(host: InteractiveSessionHost, sessionId: string);
+  /**
+   * Spawn the harness's interactive TUI for this session. Returns the
+   * `streamUrl` to attach a terminal client to. Throws if the harness has no
+   * interactive entrypoint (e.g. opencode), the binary is not installed, or a
+   * session is already running for this id.
+   */
+  start(options: StartInteractiveOptions): Promise<InteractiveSessionInfo>;
+  /** Inject a prompt as keystrokes into the live harness (submitted on send). */
+  sendPrompt(prompt: string): Promise<void>;
+  /** Stop the interactive harness and reap its PTY. */
+  stop(): Promise<void>;
+}
+//#endregion
 //#region src/session.d.ts
 /**
  * The subset of `SandboxInstance` a `SandboxSession` drives. Declared here
@@ -4015,12 +4181,15 @@ declare function buildControlPlaneMcpConfig(options: BuildControlPlaneMcpConfigO
  * of `sandbox.ts` — `sandbox.ts` constructs `SandboxSession`, so the reverse
  * import would form a cycle. `SandboxInstance` satisfies this structurally.
  */
-interface SandboxSessionHost {
+interface SandboxSessionHost extends InteractiveSessionHost {
   prompt(message: string | PromptInputPart[], options?: PromptOptions): Promise<PromptResult>;
   _sessionStatus(id: string): Promise<SessionInfo | null>;
   _sessionEvents(id: string, opts?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
   _sessionResult(id: string): Promise<PromptResult>;
   _sessionCancel(id: string): Promise<void>;
+  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<PermissionResponseResult>;
+  _interrupt(id: string): Promise<InterruptResult>;
+  _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
 }
 /**
  * A single agent session inside a sandbox. Created via
@@ -4071,11 +4240,39 @@ declare class SandboxSession {
    */
   prompt(message: string | PromptInputPart[], opts?: PromptOptions): Promise<PromptResult>;
   /**
-   * Cancel the session. Best-effort: an in-flight LLM call may still
-   * complete one more token before the abort takes effect. Idempotent —
-   * cancelling a completed session is a no-op.
+   * Abort the session's in-flight execution; the session and its messages
+   * are preserved (this does not delete the session). Void-returning alias
+   * of `interrupt()` — use `interrupt()` when you need to know whether an
+   * execution was actually running. Best-effort: an in-flight LLM call may
+   * still complete one more token before the abort takes effect. Idempotent —
+   * aborting a session with nothing in flight is a no-op.
    */
   cancel(): Promise<void>;
+  /**
+   * Drive this session's harness in INTERACTIVE mode: spawn its native TUI,
+   * stream the live framebuffer, and inject prompts as keystrokes. Distinct
+   * from the headless `prompt()`/`events()` surface above. Lazy — does not hit
+   * the network until a handle method is called.
+   */
+  interactive(): InteractiveSessionHandle;
+  /**
+   * Resolve a pending permission request the agent raised mid-turn. Forwards
+   * `allow`/`deny` to a live ACP `request_permission` if one is awaiting, and
+   * always records the decision for audit. Returns `{ recorded, forwarded }`.
+   */
+  respondToPermission(permissionID: string, options: RespondToPermissionOptions): Promise<PermissionResponseResult>;
+  /**
+   * Interrupt the session's current execution without deleting it. Returns
+   * `{ cancelled: false }` when nothing was running — the no-op is reported
+   * explicitly rather than masked as success.
+   */
+  interrupt(): Promise<InterruptResult>;
+  /**
+   * Answer a question the agent asked via a question tool invocation. `answers`
+   * maps each question id to the selected option(s). OpenCode-only; other
+   * backends reject loudly.
+   */
+  answer(answers: Record<string, string[]>): Promise<void>;
 }
 //#endregion
 //#region src/trace-exporter.d.ts
@@ -4362,6 +4559,15 @@ declare class SandboxInstance {
    * ```
    */
   write(path: string, content: string): Promise<void>;
+  /**
+   * Write many files in one paced, retry-aware batch — see
+   * {@link FileSystem.writeMany}. Each file goes through {@link write}; a small
+   * pace between writes keeps a large corpus under the file-write rate limit,
+   * and transient failures (quota / server / network / timeout) retry with
+   * exponential backoff (honoring a server `retryAfterMs`). Fail-loud on the
+   * first file that cannot be written after its retries.
+   */
+  writeMany(files: WriteManyFile[], options?: WriteManyOptions): Promise<void>;
   /**
    * Send a prompt to the agent running in the sandbox.
    * Returns the complete response after the agent finishes.
@@ -5106,8 +5312,26 @@ declare class SandboxInstance {
   _sessionEvents(id: string, opts?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
   /** @internal — invoked by SandboxSession.result(). */
   _sessionResult(id: string): Promise<PromptResult>;
-  /** @internal — invoked by SandboxSession.cancel(). */
+  /**
+   * @internal — invoked by SandboxSession.cancel(). Void-returning alias of
+   * `_interrupt`: both abort the in-flight execution via `POST /{id}/abort`
+   * (the session and its messages are preserved). `cancel()` discards the
+   * `cancelled` flag; callers that need to distinguish a real interruption
+   * from a no-op should use `interrupt()`.
+   */
   _sessionCancel(id: string): Promise<void>;
+  /** @internal — invoked by InteractiveSessionHandle.start(). */
+  _startInteractive(id: string, options: StartInteractiveOptions): Promise<InteractiveSessionInfo>;
+  /** @internal — invoked by InteractiveSessionHandle.sendPrompt(). */
+  _sendInteractivePrompt(id: string, prompt: string): Promise<void>;
+  /** @internal — invoked by InteractiveSessionHandle.stop(). */
+  _stopInteractive(id: string): Promise<void>;
+  /** @internal — invoked by SandboxSession.respondToPermission(). */
+  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<PermissionResponseResult>;
+  /** @internal — invoked by SandboxSession.interrupt(). */
+  _interrupt(id: string): Promise<InterruptResult>;
+  /** @internal — invoked by SandboxSession.answer(). */
+  _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
 }
 //#endregion
-export { DispatchedSession as $, SandboxIntelligenceEnvelope as $n, defineAgentProfile as $r, ProcessManager as $t, BatchEvent as A, SandboxFleetDriverCapability as An, TeePublicKey as Ar, GpuType as At, CodeLanguage as B, SandboxFleetOperationsSummary as Bn, AgentProfile as Br, ListSandboxOptions as Bt, AttachSandboxFleetMachineOptions as C, SandboxEnvironment as Cn, StorageConfig as Cr, ForkResult as Ct, BackendManager as D, SandboxFleetCostEstimate as Dn, TeeAttestationOptions as Dr, GitConfig as Dt, BackendInfo as E, SandboxFleetArtifactSpec as En, TaskResult as Er, GitCommit as Et, CheckpointInfo as F, SandboxFleetMachineMeteredUsage as Fn, UpdateUserOptions as Fr, IntelligenceReportSubjectType as Ft, CreateRequestOptions as G, SandboxFleetTraceExport as Gn, AgentProfileModelHints as Gr, NetworkManager as Gt, CodeResultPart as H, SandboxFleetToken as Hn, AgentProfileConfidential as Hr, MintScopedTokenOptions as Ht, CheckpointOptions as I, SandboxFleetMachineRecord as In, UploadOptions as Ir, IntelligenceReportWindow as It, CreateSandboxFleetWithCoordinatorOptions as J, SandboxFleetWorkspace as Jn, AgentProfileResourceRef as Jr, PreviewLinkInfo as Jt, CreateSandboxFleetOptions as K, SandboxFleetTraceOptions as Kn, AgentProfilePermissionValue as Kr, PermissionLevel as Kt, CheckpointResult as L, SandboxFleetMachineSpec as Ln, UploadProgress as Lr, ListMessagesOptions as Lt, BatchResult as M, SandboxFleetInfo as Mn, TokenRefreshHandler as Mr, IntelligenceReport as Mt, BatchTask as N, SandboxFleetIntelligenceEnvelope as Nn, ToolsConfig as Nr, IntelligenceReportBudget as Nt, BackendStatus as O, SandboxFleetDispatchFailureClass as On, TeeAttestationReport as Or, GitDiff as Ot, BatchTaskResult as P, SandboxFleetMachine as Pn, TurnDriveResult as Pr, IntelligenceReportCompareTo as Pt, DispatchPromptOptions as Q, SandboxInfo as Qn, AgentSubagentProfile as Qr, ProcessLogEntry as Qt, CodeExecutionOptions as R, SandboxFleetManifest as Rn, UsageInfo as Rr, ListOptions as Rt, AddUserOptions as S, SandboxConnection as Sn, SshKeysManager as Sr, ForkOptions as St, BackendConfig as T, SandboxFleetArtifact as Tn, TaskOptions as Tr, GitBranch as Tt, CompletedTurnResult as U, SandboxFleetTraceBundle as Un, AgentProfileFileMount as Ur, MkdirOptions as Ut, CodeResult as V, SandboxFleetPolicy as Vn, AgentProfileCapabilities as Vr, McpServerConfig as Vt, CreateIntelligenceReportOptions as W, SandboxFleetTraceEvent as Wn, AgentProfileMcpServer as Wr, NetworkConfig as Wt, DeleteOptions as X, SandboxFleetWorkspaceRestoreResult as Xn, AgentProfileValidationIssue as Xr, Process as Xt, CreateSandboxOptions as Y, SandboxFleetWorkspaceReconcileResult as Yn, AgentProfileResources as Yr, PreviewLinkManager as Yt, DirectoryPermission as Z, SandboxFleetWorkspaceSnapshotResult as Zn, AgentProfileValidationResult as Zr, ProcessInfo as Zt, SandboxMcpServerEntry as _, ReconcileSandboxFleetsResult as _n, SessionMessage as _r, FleetExecDispatchOptions as _t, TraceExportSink as a, PromptResult as an, SandboxTraceExport as ar, DriverType as at, AcceleratorKind as b, SSHCredentials as bn, SnapshotOptions as br, FleetPromptDispatchOptions as bt, otelTraceIdForTangleTrace as c, ProvisionStatus as cn, ScopedToken as cr, EventStreamOptions as ct, BuildControlPlaneMcpConfigOptions as d, PublicTemplateVersionInfo as dn, SearchOptions as dr, FileInfo as dt, defineGitHubResource as ei, ProcessSignal as en, SandboxPermissionsConfig as er, DownloadOptions as et, BuildSandboxMcpConfigOptions as f, PublishPublicTemplateOptions as fn, SecretInfo as fr, FileSystem as ft, SandboxMcpEndpoint as g, ReconcileSandboxFleetsOptions as gn, SessionListOptions as gr, FleetDispatchStreamOptions as gt, SandboxMcpConfig as h, ReapExpiredSandboxFleetsResult as hn, SessionInfo as hr, FleetDispatchResultBufferOptions as ht, TraceExportResult as i, PromptOptions as in, SandboxTraceEvent as ir, DriverInfo as it, BatchOptions as j, SandboxFleetDriverTimings as jn, TeePublicKeyResponse as jr, InstalledTool as jt, BackendType as k, SandboxFleetDispatchResponse as kn, TeeAttestationResponse as kr, GitStatus as kt, toOtelJson as l, ProvisionStep as ln, ScopedTokenScope as lr, ExecOptions as lt, SANDBOX_MCP_SERVER_NAME as m, ReapExpiredSandboxFleetsOptions as mn, SessionEventStreamOptions as mr, FleetDispatchResultBuffer as mt, SandboxInstance as n, mergeAgentProfiles as ni, ProcessStatus as nn, SandboxStatus as nr, DriveTurnOptions as nt, buildTraceExportPayload as o, ProvisionEvent as on, SandboxTraceOptions as or, EgressManager as ot, CONTROL_PLANE_MCP_SERVER_NAME as p, PublishPublicTemplateVersionOptions as pn, SecretsManager as pr, FleetDispatchCancelResult as pt, CreateSandboxFleetTokenOptions as q, SandboxFleetUsage as qn, AgentProfilePrompt as qr, PermissionsManager as qt, TraceExportFormat as r, PromptInputPart as rn, SandboxTraceBundle as rr, DriverConfig as rt, exportTraceBundle as s, ProvisionResult as sn, SandboxUser as sr, EgressPolicy as st, HttpClient as t, defineInlineResource as ti, ProcessSpawnOptions as tn, SandboxResources as tr, DownloadProgress as tt, SandboxSession as u, PublicTemplateInfo as un, SearchMatch as ur, ExecResult as ut, buildControlPlaneMcpConfig as v, RunCodeOptions as vn, SessionStatus as vr, FleetExecDispatchResult as vt, BackendCapabilities as w, SandboxEvent as wn, SubscriptionInfo as wr, GitAuth as wt, AccessPolicyRule as x, SandboxClientConfig as xn, SnapshotResult as xr, FleetPromptDispatchResult as xt, buildSandboxMcpConfig as y, SSHCommandDescriptor as yn, SnapshotInfo as yr, FleetMachineId as yt, CodeExecutionResult as z, SandboxFleetManifestMachine as zn, WaitForOptions as zr, ListSandboxFleetOptions as zt };
+export { CreateRequestOptions as $, SandboxFleetToken as $n, AgentProfile as $r, MkdirOptions as $t, AddUserOptions as A, SSHCommandDescriptor as An, SnapshotInfo as Ar, ForkOptions as At, BatchResult as B, SandboxFleetDispatchResponse as Bn, TeeAttestationResponse as Br, HostAgentRuntimeBackend as Bt, SandboxMcpConfig as C, PublishPublicTemplateOptions as Cn, SecretInfo as Cr, FleetDispatchResultBufferOptions as Ct, buildSandboxMcpConfig as D, ReconcileSandboxFleetsOptions as Dn, SessionListOptions as Dr, FleetMachineId as Dt, buildControlPlaneMcpConfig as E, ReapExpiredSandboxFleetsResult as En, SessionInfo as Er, FleetExecDispatchResult as Et, BackendManager as F, SandboxEvent as Fn, SubscriptionInfo as Fr, GitConfig as Ft, CheckpointResult as G, SandboxFleetMachine as Gn, TurnDriveResult as Gr, IntelligenceReportSubjectType as Gt, BatchTaskResult as H, SandboxFleetDriverTimings as Hn, TeePublicKeyResponse as Hr, IntelligenceReport as Ht, BackendStatus as I, SandboxFleetArtifact as In, TaskOptions as Ir, GitDiff as It, CodeLanguage as J, SandboxFleetMachineSpec as Jn, UploadProgress as Jr, ListOptions as Jt, CodeExecutionOptions as K, SandboxFleetMachineMeteredUsage as Kn, UpdateUserOptions as Kr, IntelligenceReportWindow as Kt, BackendType as L, SandboxFleetArtifactSpec as Ln, TaskResult as Lr, GitStatus as Lt, BackendCapabilities as M, SandboxClientConfig as Mn, SnapshotResult as Mr, GitAuth as Mt, BackendConfig as N, SandboxConnection as Nn, SshKeysManager as Nr, GitBranch as Nt, AcceleratorKind as O, ReconcileSandboxFleetsResult as On, SessionMessage as Or, FleetPromptDispatchOptions as Ot, BackendInfo as P, SandboxEnvironment as Pn, StorageConfig as Pr, GitCommit as Pt, CreateIntelligenceReportOptions as Q, SandboxFleetPolicy as Qn, WriteManyOptions as Qr, MintScopedTokenOptions as Qt, BatchEvent as R, SandboxFleetCostEstimate as Rn, TeeAttestationOptions as Rr, GpuType as Rt, SANDBOX_MCP_SERVER_NAME as S, PublicTemplateVersionInfo as Sn, SearchOptions as Sr, FleetDispatchResultBuffer as St, SandboxMcpServerEntry as T, ReapExpiredSandboxFleetsOptions as Tn, SessionEventStreamOptions as Tr, FleetExecDispatchOptions as Tt, CheckpointInfo as U, SandboxFleetInfo as Un, TokenRefreshHandler as Ur, IntelligenceReportBudget as Ut, BatchTask as V, SandboxFleetDriverCapability as Vn, TeePublicKey as Vr, InstalledTool as Vt, CheckpointOptions as W, SandboxFleetIntelligenceEnvelope as Wn, ToolsConfig as Wr, IntelligenceReportCompareTo as Wt, CodeResultPart as X, SandboxFleetManifestMachine as Xn, WaitForOptions as Xr, ListSandboxOptions as Xt, CodeResult as Y, SandboxFleetManifest as Yn, UsageInfo as Yr, ListSandboxFleetOptions as Yt, CompletedTurnResult as Z, SandboxFleetOperationsSummary as Zn, WriteManyFile as Zr, McpServerConfig as Zt, RespondToPermissionOptions as _, ProvisionEvent as _n, SandboxTraceOptions as _r, ExecOptions as _t, TraceExportSink as a, AgentProfileModelHints as ai, PreviewLinkInfo as an, SandboxFleetWorkspace as ar, DirectoryPermission as at, BuildSandboxMcpConfigOptions as b, ProvisionStep as bn, ScopedTokenScope as br, FileSystem as bt, otelTraceIdForTangleTrace as c, AgentProfileResourceRef as ci, ProcessInfo as cn, SandboxFleetWorkspaceSnapshotResult as cr, DownloadOptions as ct, InteractiveAuthFile as d, AgentProfileValidationResult as di, ProcessSignal as dn, SandboxPermissionsConfig as dr, DriverConfig as dt, AgentProfileCapabilities as ei, NetworkConfig as en, SandboxFleetTraceBundle as er, CreateSandboxFleetOptions as et, InteractiveSessionHandle as f, AgentSubagentProfile as fi, ProcessSpawnOptions as fn, SandboxResources as fr, DriverInfo as ft, PermissionResponseResult as g, mergeAgentProfiles as gi, PromptResult as gn, SandboxTraceExport as gr, EventStreamOptions as gt, InterruptResult as h, defineInlineResource as hi, PromptOptions as hn, SandboxTraceEvent as hr, EgressPolicy as ht, TraceExportResult as i, AgentProfileMcpServer as ii, PermissionsManager as in, SandboxFleetUsage as ir, DeleteOptions as it, AttachSandboxFleetMachineOptions as j, SSHCredentials as jn, SnapshotOptions as jr, ForkResult as jt, AccessPolicyRule as k, RunCodeOptions as kn, SessionStatus as kr, FleetPromptDispatchResult as kt, toOtelJson as l, AgentProfileResources as li, ProcessLogEntry as ln, SandboxInfo as lr, DownloadProgress as lt, InteractiveSessionInfo as m, defineGitHubResource as mi, PromptInputPart as mn, SandboxTraceBundle as mr, EgressManager as mt, SandboxInstance as n, AgentProfileConnection as ni, NonHostAgentDriverConfig as nn, SandboxFleetTraceExport as nr, CreateSandboxFleetWithCoordinatorOptions as nt, buildTraceExportPayload as o, AgentProfilePermissionValue as oi, PreviewLinkManager as on, SandboxFleetWorkspaceReconcileResult as or, DispatchPromptOptions as ot, InteractiveSessionHost as p, defineAgentProfile as pi, ProcessStatus as pn, SandboxStatus as pr, DriverType as pt, CodeExecutionResult as q, SandboxFleetMachineRecord as qn, UploadOptions as qr, ListMessagesOptions as qt, TraceExportFormat as r, AgentProfileFileMount as ri, PermissionLevel as rn, SandboxFleetTraceOptions as rr, CreateSandboxOptions as rt, exportTraceBundle as s, AgentProfilePrompt as si, Process as sn, SandboxFleetWorkspaceRestoreResult as sr, DispatchedSession as st, HttpClient as t, AgentProfileConfidential as ti, NetworkManager as tn, SandboxFleetTraceEvent as tr, CreateSandboxFleetTokenOptions as tt, SandboxSession as u, AgentProfileValidationIssue as ui, ProcessManager as un, SandboxIntelligenceEnvelope as ur, DriveTurnOptions as ut, StartInteractiveOptions as v, ProvisionResult as vn, SandboxUser as vr, ExecResult as vt, SandboxMcpEndpoint as w, PublishPublicTemplateVersionOptions as wn, SecretsManager as wr, FleetDispatchStreamOptions as wt, CONTROL_PLANE_MCP_SERVER_NAME as x, PublicTemplateInfo as xn, SearchMatch as xr, FleetDispatchCancelResult as xt, BuildControlPlaneMcpConfigOptions as y, ProvisionStatus as yn, ScopedToken as yr, FileInfo as yt, BatchOptions as z, SandboxFleetDispatchFailureClass as zn, TeeAttestationReport as zr, HostAgentDriverConfig as zt };