@tangle-network/sandbox 0.9.3 → 0.9.4-develop.20260627151756.06a2afc

package/dist/agent/index.d.ts

@@ -1,5 +1,5 @@
-import { J as CodeLanguage, K as CodeExecutionOptions, X as CodeResultPart, n as SandboxInstance, q as CodeExecutionResult } from "../sandbox-B55j2q9K.js";
-import { i as SandboxClient } from "../client-D3FqPlde.js";
+import { G as CodeExecutionOptions, K as CodeExecutionResult, Y as CodeResultPart, n as SandboxInstance, q as CodeLanguage } from "../sandbox-C2x9Yumw.js";
+import { i as SandboxClient } from "../client-QRSrhhlr.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-BBZ7YLmq.js → client-B8iqCNnm.js}

@@ -1,4 +1,4 @@
-import { f as encodePromptForWire, l as exportTraceBundle, p as parseSSEStream, s as normalizeConnection, t as SandboxInstance } from "./sandbox-joKtQ5y3.js";
+import { f as encodePromptForWire, l as exportTraceBundle, p as parseSSEStream, s as normalizeConnection, t as SandboxInstance } from "./sandbox-DgWaRMlI.js";
 import { d as ValidationError, f as parseErrorResponse, i as NotFoundError, r as NetworkError, t as AuthError, u as TimeoutError } from "./errors-DZsfJUuc.js";
 //#region src/resources.ts
 /**

package/dist/{client-D3FqPlde.d.ts → client-QRSrhhlr.d.ts}

@@ -1,4 +1,4 @@
-import { $ as CreateRequestOptions, $n as SandboxFleetToken, B as BatchResult, Bn as SandboxFleetDispatchResponse, Cn as PublishPublicTemplateOptions, Ct as FleetDispatchResultBufferOptions, Dn as ReconcileSandboxFleetsOptions, Dt as FleetMachineId, En as ReapExpiredSandboxFleetsResult, Et as FleetExecDispatchResult, Ht as IntelligenceReport, In as SandboxFleetArtifact, Kr as TokenRefreshHandler, Kt as IntelligenceReportWindow, Ln as SandboxFleetArtifactSpec, Mn as SandboxClientConfig, On as ReconcileSandboxFleetsResult, Ot as FleetPromptDispatchOptions, Pn as SandboxEnvironment, Pr as SshKeysManager, Q as CreateIntelligenceReportOptions, Qr as UsageInfo, R as BatchEvent, Rn as SandboxFleetCostEstimate, Rr as SubscriptionInfo, Sn as PublicTemplateVersionInfo, St as FleetDispatchResultBuffer, Tn as ReapExpiredSandboxFleetsOptions, Tr as SecretsManager, Tt as FleetExecDispatchOptions, Un as SandboxFleetInfo, Ut as IntelligenceReportBudget, V as BatchTask, Vn as SandboxFleetDriverCapability, Wt as IntelligenceReportCompareTo, Xt as ListSandboxOptions, Yn as SandboxFleetManifest, Yt as ListSandboxFleetOptions, Zn as SandboxFleetOperationsSummary, _t as ExecOptions, a as TraceExportSink, cr as SandboxFleetWorkspaceSnapshotResult, er as SandboxFleetTraceBundle, et as CreateSandboxFleetOptions, gn as PromptResult, hn as PromptOptions, i as TraceExportResult, ir as SandboxFleetUsage, j as AttachSandboxFleetMachineOptions, kt as FleetPromptDispatchResult, lr as SandboxInfo, mn as PromptInputPart, n as SandboxInstance, nt as CreateSandboxFleetWithCoordinatorOptions, or as SandboxFleetWorkspaceReconcileResult, qn as SandboxFleetMachineRecord, rr as SandboxFleetTraceOptions, rt as CreateSandboxOptions, sr as SandboxFleetWorkspaceRestoreResult, t as HttpClient, tt as CreateSandboxFleetTokenOptions, vt as ExecResult, wn as PublishPublicTemplateVersionOptions, wt as FleetDispatchStreamOptions, xn as PublicTemplateInfo, xt as FleetDispatchCancelResult, z as BatchOptions } from "./sandbox-B55j2q9K.js";
+import { $ as CreateSandboxFleetOptions, $n as SandboxFleetTraceBundle, A as AttachSandboxFleetMachineOptions, B as BatchTask, Bn as SandboxFleetDriverCapability, Cn as PublishPublicTemplateVersionOptions, Ct as FleetDispatchStreamOptions, Dn as ReconcileSandboxFleetsResult, Dt as FleetPromptDispatchOptions, En as ReconcileSandboxFleetsOptions, Et as FleetMachineId, Fn as SandboxFleetArtifact, Gr as TokenRefreshHandler, Gt as IntelligenceReportWindow, Hn as SandboxFleetInfo, Ht as IntelligenceReportBudget, In as SandboxFleetArtifactSpec, Jn as SandboxFleetManifest, Jt as ListSandboxFleetOptions, Kn as SandboxFleetMachineRecord, L as BatchEvent, Ln as SandboxFleetCostEstimate, Lr as SubscriptionInfo, Nn as SandboxEnvironment, Nr as SshKeysManager, Ot as FleetPromptDispatchResult, Q as CreateRequestOptions, Qn as SandboxFleetToken, R as BatchOptions, Sn as PublishPublicTemplateOptions, St as FleetDispatchResultBufferOptions, Tn as ReapExpiredSandboxFleetsResult, Tt as FleetExecDispatchResult, Ut as IntelligenceReportCompareTo, Vt as IntelligenceReport, Xn as SandboxFleetOperationsSummary, Yt as ListSandboxOptions, Z as CreateIntelligenceReportOptions, Zr as UsageInfo, _t as ExecResult, a as TraceExportSink, ar as SandboxFleetWorkspaceReconcileResult, bn as PublicTemplateInfo, bt as FleetDispatchCancelResult, cr as SandboxInfo, et as CreateSandboxFleetTokenOptions, gt as ExecOptions, hn as PromptResult, i as TraceExportResult, jn as SandboxClientConfig, mn as PromptOptions, n as SandboxInstance, nr as SandboxFleetTraceOptions, nt as CreateSandboxOptions, or as SandboxFleetWorkspaceRestoreResult, pn as PromptInputPart, rr as SandboxFleetUsage, sr as SandboxFleetWorkspaceSnapshotResult, t as HttpClient, tt as CreateSandboxFleetWithCoordinatorOptions, wn as ReapExpiredSandboxFleetsOptions, wr as SecretsManager, wt as FleetExecDispatchOptions, xn as PublicTemplateVersionInfo, xt as FleetDispatchResultBuffer, z as BatchResult, zn as SandboxFleetDispatchResponse } from "./sandbox-C2x9Yumw.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/core.d.ts

@@ -1,4 +1,4 @@
-import { Mn as SandboxClientConfig, _t as ExecOptions, an as PreviewLinkInfo, en as NetworkConfig, lr as SandboxInfo, mr as SandboxStatus, n as SandboxInstance, on as PreviewLinkManager, rt as CreateSandboxOptions, vt as ExecResult } from "./sandbox-B55j2q9K.js";
-import { i as SandboxClient } from "./client-D3FqPlde.js";
+import { $t as NetworkConfig, _t as ExecResult, an as PreviewLinkManager, cr as SandboxInfo, gt as ExecOptions, in as PreviewLinkInfo, jn as SandboxClientConfig, n as SandboxInstance, nt as CreateSandboxOptions, pr as SandboxStatus } from "./sandbox-C2x9Yumw.js";
+import { i as SandboxClient } from "./client-QRSrhhlr.js";
 import { a as PartialFailureError, c as SandboxErrorJson, d as StateError, f as TimeoutError, i as NotFoundError, l as SandboxFailureDetail, n as CapabilityError, o as QuotaError, p as ValidationError, r as NetworkError, s as SandboxError, t as AuthError, u as ServerError } from "./errors-1Se5ATyZ.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { t as SandboxInstance } from "./sandbox-joKtQ5y3.js";
+import { t as SandboxInstance } from "./sandbox-DgWaRMlI.js";
 import { a as PartialFailureError, c as ServerError, d as ValidationError, i as NotFoundError, l as StateError, n as CapabilityError, o as QuotaError, r as NetworkError, s as SandboxError, t as AuthError, u as TimeoutError } from "./errors-DZsfJUuc.js";
-import { n as SandboxClient } from "./client-BBZ7YLmq.js";
+import { n as SandboxClient } from "./client-B8iqCNnm.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{index-Dy1fHLYz.d.ts → index-DXa7OlnO.d.ts}

@@ -1,4 +1,4 @@
-import { n as SandboxInstance, rt as CreateSandboxOptions, t as HttpClient } from "./sandbox-B55j2q9K.js";
+import { n as SandboxInstance, nt as CreateSandboxOptions, t as HttpClient } from "./sandbox-C2x9Yumw.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { $n as SandboxFleetToken, $r as WaitForOptions, $t as MkdirOptions, A as AddUserOptions, An as SSHCommandDescriptor, Ar as SessionStatus, At as ForkOptions, B as BatchResult, Bn as SandboxFleetDispatchResponse, Br as TaskResult, Bt as HostAgentRuntimeBackend, C as SandboxMcpConfig, Cn as PublishPublicTemplateOptions, Cr as SearchOptions, Ct as FleetDispatchResultBufferOptions, D as buildSandboxMcpConfig, Dn as ReconcileSandboxFleetsOptions, Dr as SessionInfo, Dt as FleetMachineId, E as buildControlPlaneMcpConfig, En as ReapExpiredSandboxFleetsResult, Er as SessionEventStreamOptions, F as BackendManager, Fn as SandboxEvent, Fr as StartupDiagnostics, Ft as GitConfig, G as CheckpointResult, Gn as SandboxFleetMachine, Gr as TeePublicKeyResponse, Gt as IntelligenceReportSubjectType, H as BatchTaskResult, Hn as SandboxFleetDriverTimings, Hr as TeeAttestationReport, Ht as IntelligenceReport, I as BackendStatus, In as SandboxFleetArtifact, Ir as StartupOperation, It as GitDiff, Jn as SandboxFleetMachineSpec, Jr as TurnDriveResult, Jt as ListOptions, Kn as SandboxFleetMachineMeteredUsage, Kr as TokenRefreshHandler, Kt as IntelligenceReportWindow, L as BackendType, Ln as SandboxFleetArtifactSpec, Lr as StorageConfig, Lt as GitStatus, M as BackendCapabilities, Mn as SandboxClientConfig, Mr as SnapshotOptions, Mt as GitAuth, N as BackendConfig, Nn as SandboxConnection, Nr as SnapshotResult, Nt as GitBranch, O as AcceleratorKind, On as ReconcileSandboxFleetsResult, Or as SessionListOptions, Ot as FleetPromptDispatchOptions, P as BackendInfo, Pn as SandboxEnvironment, Pt as GitCommit, Q as CreateIntelligenceReportOptions, Qn as SandboxFleetPolicy, Qr as UsageInfo, Qt as MintScopedTokenOptions, R as BatchEvent, Rn as SandboxFleetCostEstimate, Rr as SubscriptionInfo, Rt as GpuType, S as SANDBOX_MCP_SERVER_NAME, Sn as PublicTemplateVersionInfo, Sr as SearchMatch, St as FleetDispatchResultBuffer, T as SandboxMcpServerEntry, Tn as ReapExpiredSandboxFleetsOptions, Tr as SecretsManager, Tt as FleetExecDispatchOptions, U as CheckpointInfo, Un as SandboxFleetInfo, Ur as TeeAttestationResponse, Ut as IntelligenceReportBudget, V as BatchTask, Vn as SandboxFleetDriverCapability, Vr as TeeAttestationOptions, Vt as InstalledTool, W as CheckpointOptions, Wn as SandboxFleetIntelligenceEnvelope, Wr as TeePublicKey, Wt as IntelligenceReportCompareTo, Xn as SandboxFleetManifestMachine, Xr as UploadOptions, Xt as ListSandboxOptions, Y as CodeResult, Yn as SandboxFleetManifest, Yr as UpdateUserOptions, Yt as ListSandboxFleetOptions, Z as CompletedTurnResult, Zn as SandboxFleetOperationsSummary, Zr as UploadProgress, Zt as McpServerConfig, _ as RespondToPermissionOptions, _i as defineGitHubResource, _n as ProvisionEvent, _r as SandboxTraceExport, _t as ExecOptions, a as TraceExportSink, ai as AgentProfileConnection, an as PreviewLinkInfo, ar as SandboxFleetWorkspace, at as DirectoryPermission, b as BuildSandboxMcpConfigOptions, bn as ProvisionStep, br as ScopedToken, bt as FileSystem, c as otelTraceIdForTangleTrace, ci as AgentProfileModelHints, cn as ProcessInfo, cr as SandboxFleetWorkspaceSnapshotResult, ct as DownloadOptions, d as InteractiveAuthFile, di as AgentProfileResourceRef, dn as ProcessSignal, dr as SandboxPermissionsConfig, dt as DriverConfig, ei as WriteManyFile, en as NetworkConfig, er as SandboxFleetTraceBundle, et as CreateSandboxFleetOptions, f as InteractiveSessionHandle, fi as AgentProfileResources, fn as ProcessSpawnOptions, fr as SandboxResourceUsage, ft as DriverInfo, g as PermissionResponseResult, gi as defineAgentProfile, gn as PromptResult, gr as SandboxTraceEvent, gt as EventStreamOptions, h as InterruptResult, hi as AgentSubagentProfile, hn as PromptOptions, hr as SandboxTraceBundle, ht as EgressPolicy, i as TraceExportResult, ii as AgentProfileConfidential, in as PermissionsManager, ir as SandboxFleetUsage, it as DeleteOptions, j as AttachSandboxFleetMachineOptions, jn as SSHCredentials, jr as SnapshotInfo, jt as ForkResult, k as AccessPolicyRule, kn as RunCodeOptions, kr as SessionMessage, l as toOtelJson, li as AgentProfilePermissionValue, ln as ProcessLogEntry, lr as SandboxInfo, lt as DownloadProgress, m as InteractiveSessionInfo, mi as AgentProfileValidationResult, mr as SandboxStatus, mt as EgressManager, n as SandboxInstance, ni as AgentProfile, nn as NonHostAgentDriverConfig, nr as SandboxFleetTraceExport, nt as CreateSandboxFleetWithCoordinatorOptions, o as buildTraceExportPayload, oi as AgentProfileFileMount, on as PreviewLinkManager, or as SandboxFleetWorkspaceReconcileResult, ot as DispatchPromptOptions, p as InteractiveSessionHost, pi as AgentProfileValidationIssue, pn as ProcessStatus, pr as SandboxResources, pt as DriverType, qn as SandboxFleetMachineRecord, qr as ToolsConfig, qt as ListMessagesOptions, r as TraceExportFormat, ri as AgentProfileCapabilities, rn as PermissionLevel, rr as SandboxFleetTraceOptions, rt as CreateSandboxOptions, s as exportTraceBundle, si as AgentProfileMcpServer, sn as Process, sr as SandboxFleetWorkspaceRestoreResult, st as DispatchedSession, ti as WriteManyOptions, tn as NetworkManager, tr as SandboxFleetTraceEvent, u as SandboxSession, ui as AgentProfilePrompt, un as ProcessManager, ur as SandboxIntelligenceEnvelope, ut as DriveTurnOptions, v as StartInteractiveOptions, vi as defineInlineResource, vn as ProvisionResult, vr as SandboxTraceOptions, vt as ExecResult, w as SandboxMcpEndpoint, wn as PublishPublicTemplateVersionOptions, wr as SecretInfo, wt as FleetDispatchStreamOptions, x as CONTROL_PLANE_MCP_SERVER_NAME, xn as PublicTemplateInfo, xr as ScopedTokenScope, xt as FleetDispatchCancelResult, y as BuildControlPlaneMcpConfigOptions, yi as mergeAgentProfiles, yn as ProvisionStatus, yr as SandboxUser, yt as FileInfo, z as BatchOptions, zn as SandboxFleetDispatchFailureClass, zr as TaskOptions, zt as HostAgentDriverConfig } from "./sandbox-B55j2q9K.js";
-import { a as Team, c as SandboxFleet, d as ParsedSSEEvent, f as parseSSEStream, i as SandboxClient, l as SandboxFleetClient, n as IntelligenceClient, o as TeamInvitation, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as ParseSSEStreamOptions } from "./client-D3FqPlde.js";
+import { $ as CreateSandboxFleetOptions, $n as SandboxFleetTraceBundle, $r as WriteFileOptions, $t as NetworkConfig, A as AttachSandboxFleetMachineOptions, An as SSHCredentials, Ar as SnapshotInfo, At as ForkResult, B as BatchTask, Bn as SandboxFleetDriverCapability, Br as TeeAttestationOptions, Bt as InstalledTool, C as SandboxMcpEndpoint, Cn as PublishPublicTemplateVersionOptions, Cr as SecretInfo, Ct as FleetDispatchStreamOptions, D as AcceleratorKind, Dn as ReconcileSandboxFleetsResult, Dr as SessionListOptions, Dt as FleetPromptDispatchOptions, E as buildSandboxMcpConfig, En as ReconcileSandboxFleetsOptions, Er as SessionInfo, Et as FleetMachineId, F as BackendStatus, Fn as SandboxFleetArtifact, Fr as StartupOperation, Ft as GitDiff, Gn as SandboxFleetMachineMeteredUsage, Gr as TokenRefreshHandler, Gt as IntelligenceReportWindow, H as CheckpointInfo, Hn as SandboxFleetInfo, Hr as TeeAttestationResponse, Ht as IntelligenceReportBudget, I as BackendType, In as SandboxFleetArtifactSpec, Ir as StorageConfig, It as GitStatus, J as CodeResult, Jn as SandboxFleetManifest, Jr as UpdateUserOptions, Jt as ListSandboxFleetOptions, Kn as SandboxFleetMachineRecord, Kr as ToolsConfig, Kt as ListMessagesOptions, L as BatchEvent, Ln as SandboxFleetCostEstimate, Lr as SubscriptionInfo, Lt as GpuType, M as BackendConfig, Mn as SandboxConnection, Mr as SnapshotResult, Mt as GitBranch, N as BackendInfo, Nn as SandboxEnvironment, Nt as GitCommit, O as AccessPolicyRule, On as RunCodeOptions, Or as SessionMessage, P as BackendManager, Pn as SandboxEvent, Pr as StartupDiagnostics, Pt as GitConfig, Qn as SandboxFleetToken, Qr as WaitForOptions, Qt as MkdirOptions, R as BatchOptions, Rn as SandboxFleetDispatchFailureClass, Rr as TaskOptions, Rt as HostAgentDriverConfig, S as SandboxMcpConfig, Sn as PublishPublicTemplateOptions, Sr as SearchOptions, St as FleetDispatchResultBufferOptions, T as buildControlPlaneMcpConfig, Tn as ReapExpiredSandboxFleetsResult, Tr as SessionEventStreamOptions, U as CheckpointOptions, Un as SandboxFleetIntelligenceEnvelope, Ur as TeePublicKey, Ut as IntelligenceReportCompareTo, V as BatchTaskResult, Vn as SandboxFleetDriverTimings, Vr as TeeAttestationReport, Vt as IntelligenceReport, W as CheckpointResult, Wn as SandboxFleetMachine, Wr as TeePublicKeyResponse, Wt as IntelligenceReportSubjectType, X as CompletedTurnResult, Xn as SandboxFleetOperationsSummary, Xr as UploadProgress, Xt as McpServerConfig, Yn as SandboxFleetManifestMachine, Yr as UploadOptions, Yt as ListSandboxOptions, Z as CreateIntelligenceReportOptions, Zn as SandboxFleetPolicy, Zr as UsageInfo, Zt as MintScopedTokenOptions, _ as StartInteractiveOptions, _i as defineGitHubResource, _n as ProvisionResult, _r as SandboxTraceOptions, _t as ExecResult, a as TraceExportSink, ai as AgentProfileConnection, an as PreviewLinkManager, ar as SandboxFleetWorkspaceReconcileResult, at as DispatchPromptOptions, b as CONTROL_PLANE_MCP_SERVER_NAME, bn as PublicTemplateInfo, br as ScopedTokenScope, bt as FleetDispatchCancelResult, c as otelTraceIdForTangleTrace, ci as AgentProfileModelHints, cn as ProcessLogEntry, cr as SandboxInfo, ct as DownloadProgress, d as InteractiveAuthFile, di as AgentProfileResourceRef, dn as ProcessSpawnOptions, dr as SandboxResourceUsage, dt as DriverInfo, ei as WriteManyFile, en as NetworkManager, er as SandboxFleetTraceEvent, f as InteractiveSessionHandle, fi as AgentProfileResources, fn as ProcessStatus, fr as SandboxResources, ft as DriverType, g as RespondToPermissionOptions, gi as defineAgentProfile, gn as ProvisionEvent, gr as SandboxTraceExport, gt as ExecOptions, h as InterruptResult, hi as AgentSubagentProfile, hn as PromptResult, hr as SandboxTraceEvent, ht as EventStreamOptions, i as TraceExportResult, ii as AgentProfileConfidential, in as PreviewLinkInfo, ir as SandboxFleetWorkspace, it as DirectoryPermission, j as BackendCapabilities, jn as SandboxClientConfig, jr as SnapshotOptions, jt as GitAuth, k as AddUserOptions, kn as SSHCommandDescriptor, kr as SessionStatus, kt as ForkOptions, l as toOtelJson, li as AgentProfilePermissionValue, ln as ProcessManager, lr as SandboxIntelligenceEnvelope, lt as DriveTurnOptions, m as InteractiveSessionInfo, mi as AgentProfileValidationResult, mn as PromptOptions, mr as SandboxTraceBundle, mt as EgressPolicy, n as SandboxInstance, ni as AgentProfile, nn as PermissionLevel, nr as SandboxFleetTraceOptions, nt as CreateSandboxOptions, o as buildTraceExportPayload, oi as AgentProfileFileMount, on as Process, or as SandboxFleetWorkspaceRestoreResult, ot as DispatchedSession, p as InteractiveSessionHost, pi as AgentProfileValidationIssue, pr as SandboxStatus, pt as EgressManager, qn as SandboxFleetMachineSpec, qr as TurnDriveResult, qt as ListOptions, r as TraceExportFormat, ri as AgentProfileCapabilities, rn as PermissionsManager, rr as SandboxFleetUsage, rt as DeleteOptions, s as exportTraceBundle, si as AgentProfileMcpServer, sn as ProcessInfo, sr as SandboxFleetWorkspaceSnapshotResult, st as DownloadOptions, ti as WriteManyOptions, tn as NonHostAgentDriverConfig, tr as SandboxFleetTraceExport, tt as CreateSandboxFleetWithCoordinatorOptions, u as SandboxSession, ui as AgentProfilePrompt, un as ProcessSignal, ur as SandboxPermissionsConfig, ut as DriverConfig, v as BuildControlPlaneMcpConfigOptions, vi as defineInlineResource, vn as ProvisionStatus, vr as SandboxUser, vt as FileInfo, w as SandboxMcpServerEntry, wn as ReapExpiredSandboxFleetsOptions, wr as SecretsManager, wt as FleetExecDispatchOptions, x as SANDBOX_MCP_SERVER_NAME, xn as PublicTemplateVersionInfo, xr as SearchMatch, xt as FleetDispatchResultBuffer, y as BuildSandboxMcpConfigOptions, yi as mergeAgentProfiles, yn as ProvisionStep, yr as ScopedToken, yt as FileSystem, z as BatchResult, zn as SandboxFleetDispatchResponse, zr as TaskResult, zt as HostAgentRuntimeBackend } from "./sandbox-C2x9Yumw.js";
+import { a as Team, c as SandboxFleet, d as ParsedSSEEvent, f as parseSSEStream, i as SandboxClient, l as SandboxFleetClient, n as IntelligenceClient, o as TeamInvitation, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as ParseSSEStreamOptions } from "./client-QRSrhhlr.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-D-2pH_70.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-D7bwmNs8.js";
 import { a as PartialFailureError, c as SandboxErrorJson, d as StateError, f as TimeoutError, i as NotFoundError, l as SandboxFailureDetail, n as CapabilityError, o as QuotaError, p as ValidationError, r as NetworkError, s as SandboxError, t as AuthError, u as ServerError } from "./errors-1Se5ATyZ.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-Dy1fHLYz.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DXa7OlnO.js";
 
 //#region src/attestation-heartbeat.d.ts
 interface TeeAttestationHeartbeatSample {
@@ -907,4 +907,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentSubagentProfile, type AnyTokenPayload, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchEvent, type BatchOptions, type BatchResult, type BatchTask, type BatchTaskResult, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, type CheckpointInfo, type CheckpointOptions, type CheckpointResult, type CodeResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateIntelligenceReportOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type EgressManager, type EgressPolicy, type EventStreamOptions, type ExecOptions, type ExecResult, type FileInfo, type FileSystem, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkOptions, type ForkResult, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuType, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionResponseResult, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type Process, type ProcessInfo, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RespondToPermissionOptions, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunCodeOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, type SandboxConnection, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPermissionsConfig, type SandboxResourceUsage, type SandboxResources, SandboxSession, type SandboxSizePreset, type SandboxStatus, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, ServerError, type SessionEventStreamOptions, type SessionInfo, type SessionListOptions, type SessionMessage, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskOptions, type TaskResult, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, TimeoutError, type TokenRefreshHandler, type ToolsConfig, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentResponseText, createConfidentialSandbox, createManageSandboxesTool, defineAgentProfile, defineGitHubResource, defineInlineResource, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, mergeAgentProfiles, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, serializeForSidecar, startTeeAttestationHeartbeat, toOtelJson };
+export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentSubagentProfile, type AnyTokenPayload, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchEvent, type BatchOptions, type BatchResult, type BatchTask, type BatchTaskResult, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, type CheckpointInfo, type CheckpointOptions, type CheckpointResult, type CodeResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateIntelligenceReportOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type EgressManager, type EgressPolicy, type EventStreamOptions, type ExecOptions, type ExecResult, type FileInfo, type FileSystem, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkOptions, type ForkResult, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuType, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type Process, type ProcessInfo, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RespondToPermissionOptions, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunCodeOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, type SandboxConnection, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPermissionsConfig, type SandboxResourceUsage, type SandboxResources, SandboxSession, type SandboxSizePreset, type SandboxStatus, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, ServerError, type SessionEventStreamOptions, type SessionInfo, type SessionListOptions, type SessionMessage, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskOptions, type TaskResult, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, TimeoutError, type TokenRefreshHandler, type ToolsConfig, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentResponseText, createConfidentialSandbox, createManageSandboxesTool, defineAgentProfile, defineGitHubResource, defineInlineResource, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, mergeAgentProfiles, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, serializeForSidecar, startTeeAttestationHeartbeat, toOtelJson };

package/dist/index.js

@@ -1,8 +1,8 @@
-import { a as collectAgentResponseText, c as buildTraceExportPayload, d as toOtelJson, h as serializeForSidecar, i as applySandboxEventText, l as exportTraceBundle, m as normalizeRuntimeBackendConfig, n as SandboxSession, o as getSandboxEventText, p as parseSSEStream, r as InteractiveSessionHandle, t as SandboxInstance, u as otelTraceIdForTangleTrace } from "./sandbox-joKtQ5y3.js";
+import { a as collectAgentResponseText, c as buildTraceExportPayload, d as toOtelJson, h as serializeForSidecar, i as applySandboxEventText, l as exportTraceBundle, m as normalizeRuntimeBackendConfig, n as SandboxSession, o as getSandboxEventText, p as parseSSEStream, r as InteractiveSessionHandle, t as SandboxInstance, u as otelTraceIdForTangleTrace } from "./sandbox-DgWaRMlI.js";
 import { a as PartialFailureError, c as ServerError, d as ValidationError, i as NotFoundError, l as StateError, n as CapabilityError, o as QuotaError, r as NetworkError, s as SandboxError, t as AuthError, u as TimeoutError } from "./errors-DZsfJUuc.js";
-import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-BBZ7YLmq.js";
+import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-B8iqCNnm.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-BxlfZ2Uh.js";
-import { t as TangleSandboxClient } from "./tangle-DM0o66lW.js";
+import { t as TangleSandboxClient } from "./tangle-C2uTDxJ0.js";
 import { defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
 //#region src/confidential.ts
 function generateAttestationNonce(bytes = 32) {

package/dist/{sandbox-B55j2q9K.d.ts → sandbox-C2x9Yumw.d.ts}

@@ -3818,6 +3818,13 @@ interface WriteManyFile {
   path: string;
   /** File content (UTF-8). */
   content: string;
+  /** Unix mode bits applied after write, e.g. 0o755. */
+  mode?: number;
+}
+/** Options for {@link FileSystem.write}. */
+interface WriteFileOptions {
+  /** Unix mode bits applied after write, e.g. 0o755. */
+  mode?: number;
 }
 /** Options for {@link FileSystem.writeMany}. */
 interface WriteManyOptions {
@@ -3828,6 +3835,8 @@ interface WriteManyOptions {
   maxRetries?: number;
 }
 interface FileSystem {
+  /** True when write/writeMany honor Unix mode bits such as 0o755. */
+  supportsWriteMode?: true;
   /**
    * Read a file's contents as a string.
    * For binary files, use download() instead.
@@ -3845,7 +3854,7 @@ interface FileSystem {
    * @param path - Path to file (relative to workspace)
    * @param content - Content to write
    */
-  write(path: string, content: string): Promise<void>;
+  write(path: string, content: string, options?: WriteFileOptions): Promise<void>;
   /**
    * Write many files in one paced, retry-aware batch.
    *
@@ -3856,7 +3865,7 @@ interface FileSystem {
    * (quota / server / network / timeout, honoring a server `retryAfterMs`).
    * Fail-loud: the first file that cannot be written after its retries throws,
    * and the rest are not attempted. Relative paths resolve from the workspace
-   * root. (The file-write API cannot set the executable bit.)
+   * root. Pass `mode: 0o755` on files that should be executable.
    *
    * @example
    * ```typescript
@@ -4254,25 +4263,8 @@ interface InteractiveSessionInfo {
 }
 /** Decision passed to `respondToPermission`. */
 interface RespondToPermissionOptions {
-  /** The human's decision for the awaiting permission request. */
+  /** The human's decision for the awaiting permission interaction. */
   response: "allow" | "deny";
-  /**
-   * Optional audit metadata recorded alongside the decision (e.g. the
-   * reviewer's identity or a reason string). Opaque to the sandbox.
-   */
-  metadata?: Record<string, unknown>;
-}
-/** Result of `respondToPermission`. Mirrors the sidecar route contract. */
-interface PermissionResponseResult {
-  /** The decision was persisted for audit. Always true on success. */
-  recorded: true;
-  /**
-   * True iff a live ACP `request_permission` was awaiting this decision and
-   * it was forwarded to the running agent. `false` means record-only — the
-   * request already resolved (e.g. timed out to the allowlist fallback) or
-   * the backend does not surface live permission requests.
-   */
-  forwarded: boolean;
 }
 /** Result of `interrupt`. */
 interface InterruptResult {
@@ -4329,7 +4321,7 @@ interface SandboxSessionHost extends InteractiveSessionHost {
   _sessionEvents(id: string, opts?: SessionEventStreamOptions): AsyncGenerator<SandboxEvent>;
   _sessionResult(id: string): Promise<PromptResult>;
   _sessionCancel(id: string): Promise<void>;
-  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<PermissionResponseResult>;
+  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<void>;
   _interrupt(id: string): Promise<InterruptResult>;
   _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
 }
@@ -4398,11 +4390,11 @@ declare class SandboxSession {
    */
   interactive(): InteractiveSessionHandle;
   /**
-   * Resolve a pending permission request the agent raised mid-turn. Forwards
-   * `allow`/`deny` to a live ACP `request_permission` if one is awaiting, and
-   * always records the decision for audit. Returns `{ recorded, forwarded }`.
+   * Resolve a pending permission interaction the agent raised mid-turn,
+   * forwarding `allow`/`deny` to the blocked agent through the unified
+   * interaction channel. Throws if no matching permission is outstanding.
    */
-  respondToPermission(permissionID: string, options: RespondToPermissionOptions): Promise<PermissionResponseResult>;
+  respondToPermission(permissionID: string, options: RespondToPermissionOptions): Promise<void>;
   /**
    * Interrupt the session's current execution without deleting it. Returns
    * `{ cancelled: false }` when nothing was running — the no-op is reported
@@ -4718,7 +4710,7 @@ declare class SandboxInstance {
    * await box.write("/tmp/config.json", JSON.stringify(config));
    * ```
    */
-  write(path: string, content: string): Promise<void>;
+  write(path: string, content: string, options?: WriteFileOptions): Promise<void>;
   /**
    * Write many files in one paced, retry-aware batch — see
    * {@link FileSystem.writeMany}. Each file goes through {@link write}; a small
@@ -5516,11 +5508,16 @@ declare class SandboxInstance {
   /** @internal — invoked by InteractiveSessionHandle.stop(). */
   _stopInteractive(id: string): Promise<void>;
   /** @internal — invoked by SandboxSession.respondToPermission(). */
-  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<PermissionResponseResult>;
+  _respondToPermission(id: string, permissionID: string, options: RespondToPermissionOptions): Promise<void>;
   /** @internal — invoked by SandboxSession.interrupt(). */
   _interrupt(id: string): Promise<InterruptResult>;
-  /** @internal — invoked by SandboxSession.answer(). */
+  /**
+   * @internal — invoked by SandboxSession.answer(). Resolves the session's
+   * outstanding question interaction and posts the answer through the
+   * interaction response route. The positional answer arrays map onto the
+   * question's `answerSpec` fields in order.
+   */
   _answerQuestion(id: string, answers: Record<string, string[]>): Promise<void>;
 }
 //#endregion
-export { CreateRequestOptions as $, SandboxFleetToken as $n, WaitForOptions as $r, MkdirOptions as $t, AddUserOptions as A, SSHCommandDescriptor as An, SessionStatus as Ar, ForkOptions as At, BatchResult as B, SandboxFleetDispatchResponse as Bn, TaskResult as Br, HostAgentRuntimeBackend as Bt, SandboxMcpConfig as C, PublishPublicTemplateOptions as Cn, SearchOptions as Cr, FleetDispatchResultBufferOptions as Ct, buildSandboxMcpConfig as D, ReconcileSandboxFleetsOptions as Dn, SessionInfo as Dr, FleetMachineId as Dt, buildControlPlaneMcpConfig as E, ReapExpiredSandboxFleetsResult as En, SessionEventStreamOptions as Er, FleetExecDispatchResult as Et, BackendManager as F, SandboxEvent as Fn, StartupDiagnostics as Fr, GitConfig as Ft, CheckpointResult as G, SandboxFleetMachine as Gn, TeePublicKeyResponse as Gr, IntelligenceReportSubjectType as Gt, BatchTaskResult as H, SandboxFleetDriverTimings as Hn, TeeAttestationReport as Hr, IntelligenceReport as Ht, BackendStatus as I, SandboxFleetArtifact as In, StartupOperation as Ir, GitDiff as It, CodeLanguage as J, SandboxFleetMachineSpec as Jn, TurnDriveResult as Jr, ListOptions as Jt, CodeExecutionOptions as K, SandboxFleetMachineMeteredUsage as Kn, TokenRefreshHandler as Kr, IntelligenceReportWindow as Kt, BackendType as L, SandboxFleetArtifactSpec as Ln, StorageConfig as Lr, GitStatus as Lt, BackendCapabilities as M, SandboxClientConfig as Mn, SnapshotOptions as Mr, GitAuth as Mt, BackendConfig as N, SandboxConnection as Nn, SnapshotResult as Nr, GitBranch as Nt, AcceleratorKind as O, ReconcileSandboxFleetsResult as On, SessionListOptions as Or, FleetPromptDispatchOptions as Ot, BackendInfo as P, SandboxEnvironment as Pn, SshKeysManager as Pr, GitCommit as Pt, CreateIntelligenceReportOptions as Q, SandboxFleetPolicy as Qn, UsageInfo as Qr, MintScopedTokenOptions as Qt, BatchEvent as R, SandboxFleetCostEstimate as Rn, SubscriptionInfo as Rr, GpuType as Rt, SANDBOX_MCP_SERVER_NAME as S, PublicTemplateVersionInfo as Sn, SearchMatch as Sr, FleetDispatchResultBuffer as St, SandboxMcpServerEntry as T, ReapExpiredSandboxFleetsOptions as Tn, SecretsManager as Tr, FleetExecDispatchOptions as Tt, CheckpointInfo as U, SandboxFleetInfo as Un, TeeAttestationResponse as Ur, IntelligenceReportBudget as Ut, BatchTask as V, SandboxFleetDriverCapability as Vn, TeeAttestationOptions as Vr, InstalledTool as Vt, CheckpointOptions as W, SandboxFleetIntelligenceEnvelope as Wn, TeePublicKey as Wr, IntelligenceReportCompareTo as Wt, CodeResultPart as X, SandboxFleetManifestMachine as Xn, UploadOptions as Xr, ListSandboxOptions as Xt, CodeResult as Y, SandboxFleetManifest as Yn, UpdateUserOptions as Yr, ListSandboxFleetOptions as Yt, CompletedTurnResult as Z, SandboxFleetOperationsSummary as Zn, UploadProgress as Zr, McpServerConfig as Zt, RespondToPermissionOptions as _, defineGitHubResource as _i, ProvisionEvent as _n, SandboxTraceExport as _r, ExecOptions as _t, TraceExportSink as a, AgentProfileConnection as ai, PreviewLinkInfo as an, SandboxFleetWorkspace as ar, DirectoryPermission as at, BuildSandboxMcpConfigOptions as b, ProvisionStep as bn, ScopedToken as br, FileSystem as bt, otelTraceIdForTangleTrace as c, AgentProfileModelHints as ci, ProcessInfo as cn, SandboxFleetWorkspaceSnapshotResult as cr, DownloadOptions as ct, InteractiveAuthFile as d, AgentProfileResourceRef as di, ProcessSignal as dn, SandboxPermissionsConfig as dr, DriverConfig as dt, WriteManyFile as ei, NetworkConfig as en, SandboxFleetTraceBundle as er, CreateSandboxFleetOptions as et, InteractiveSessionHandle as f, AgentProfileResources as fi, ProcessSpawnOptions as fn, SandboxResourceUsage as fr, DriverInfo as ft, PermissionResponseResult as g, defineAgentProfile as gi, PromptResult as gn, SandboxTraceEvent as gr, EventStreamOptions as gt, InterruptResult as h, AgentSubagentProfile as hi, PromptOptions as hn, SandboxTraceBundle as hr, EgressPolicy as ht, TraceExportResult as i, AgentProfileConfidential as ii, PermissionsManager as in, SandboxFleetUsage as ir, DeleteOptions as it, AttachSandboxFleetMachineOptions as j, SSHCredentials as jn, SnapshotInfo as jr, ForkResult as jt, AccessPolicyRule as k, RunCodeOptions as kn, SessionMessage as kr, FleetPromptDispatchResult as kt, toOtelJson as l, AgentProfilePermissionValue as li, ProcessLogEntry as ln, SandboxInfo as lr, DownloadProgress as lt, InteractiveSessionInfo as m, AgentProfileValidationResult as mi, PromptInputPart as mn, SandboxStatus as mr, EgressManager as mt, SandboxInstance as n, AgentProfile as ni, NonHostAgentDriverConfig as nn, SandboxFleetTraceExport as nr, CreateSandboxFleetWithCoordinatorOptions as nt, buildTraceExportPayload as o, AgentProfileFileMount as oi, PreviewLinkManager as on, SandboxFleetWorkspaceReconcileResult as or, DispatchPromptOptions as ot, InteractiveSessionHost as p, AgentProfileValidationIssue as pi, ProcessStatus as pn, SandboxResources as pr, DriverType as pt, CodeExecutionResult as q, SandboxFleetMachineRecord as qn, ToolsConfig as qr, ListMessagesOptions as qt, TraceExportFormat as r, AgentProfileCapabilities as ri, PermissionLevel as rn, SandboxFleetTraceOptions as rr, CreateSandboxOptions as rt, exportTraceBundle as s, AgentProfileMcpServer as si, Process as sn, SandboxFleetWorkspaceRestoreResult as sr, DispatchedSession as st, HttpClient as t, WriteManyOptions as ti, NetworkManager as tn, SandboxFleetTraceEvent as tr, CreateSandboxFleetTokenOptions as tt, SandboxSession as u, AgentProfilePrompt as ui, ProcessManager as un, SandboxIntelligenceEnvelope as ur, DriveTurnOptions as ut, StartInteractiveOptions as v, defineInlineResource as vi, ProvisionResult as vn, SandboxTraceOptions as vr, ExecResult as vt, SandboxMcpEndpoint as w, PublishPublicTemplateVersionOptions as wn, SecretInfo as wr, FleetDispatchStreamOptions as wt, CONTROL_PLANE_MCP_SERVER_NAME as x, PublicTemplateInfo as xn, ScopedTokenScope as xr, FleetDispatchCancelResult as xt, BuildControlPlaneMcpConfigOptions as y, mergeAgentProfiles as yi, ProvisionStatus as yn, SandboxUser as yr, FileInfo as yt, BatchOptions as z, SandboxFleetDispatchFailureClass as zn, TaskOptions as zr, HostAgentDriverConfig as zt };
+export { CreateSandboxFleetOptions as $, SandboxFleetTraceBundle as $n, WriteFileOptions as $r, NetworkConfig as $t, AttachSandboxFleetMachineOptions as A, SSHCredentials as An, SnapshotInfo as Ar, ForkResult as At, BatchTask as B, SandboxFleetDriverCapability as Bn, TeeAttestationOptions as Br, InstalledTool as Bt, SandboxMcpEndpoint as C, PublishPublicTemplateVersionOptions as Cn, SecretInfo as Cr, FleetDispatchStreamOptions as Ct, AcceleratorKind as D, ReconcileSandboxFleetsResult as Dn, SessionListOptions as Dr, FleetPromptDispatchOptions as Dt, buildSandboxMcpConfig as E, ReconcileSandboxFleetsOptions as En, SessionInfo as Er, FleetMachineId as Et, BackendStatus as F, SandboxFleetArtifact as Fn, StartupOperation as Fr, GitDiff as Ft, CodeExecutionOptions as G, SandboxFleetMachineMeteredUsage as Gn, TokenRefreshHandler as Gr, IntelligenceReportWindow as Gt, CheckpointInfo as H, SandboxFleetInfo as Hn, TeeAttestationResponse as Hr, IntelligenceReportBudget as Ht, BackendType as I, SandboxFleetArtifactSpec as In, StorageConfig as Ir, GitStatus as It, CodeResult as J, SandboxFleetManifest as Jn, UpdateUserOptions as Jr, ListSandboxFleetOptions as Jt, CodeExecutionResult as K, SandboxFleetMachineRecord as Kn, ToolsConfig as Kr, ListMessagesOptions as Kt, BatchEvent as L, SandboxFleetCostEstimate as Ln, SubscriptionInfo as Lr, GpuType as Lt, BackendConfig as M, SandboxConnection as Mn, SnapshotResult as Mr, GitBranch as Mt, BackendInfo as N, SandboxEnvironment as Nn, SshKeysManager as Nr, GitCommit as Nt, AccessPolicyRule as O, RunCodeOptions as On, SessionMessage as Or, FleetPromptDispatchResult as Ot, BackendManager as P, SandboxEvent as Pn, StartupDiagnostics as Pr, GitConfig as Pt, CreateRequestOptions as Q, SandboxFleetToken as Qn, WaitForOptions as Qr, MkdirOptions as Qt, BatchOptions as R, SandboxFleetDispatchFailureClass as Rn, TaskOptions as Rr, HostAgentDriverConfig as Rt, SandboxMcpConfig as S, PublishPublicTemplateOptions as Sn, SearchOptions as Sr, FleetDispatchResultBufferOptions as St, buildControlPlaneMcpConfig as T, ReapExpiredSandboxFleetsResult as Tn, SessionEventStreamOptions as Tr, FleetExecDispatchResult as Tt, CheckpointOptions as U, SandboxFleetIntelligenceEnvelope as Un, TeePublicKey as Ur, IntelligenceReportCompareTo as Ut, BatchTaskResult as V, SandboxFleetDriverTimings as Vn, TeeAttestationReport as Vr, IntelligenceReport as Vt, CheckpointResult as W, SandboxFleetMachine as Wn, TeePublicKeyResponse as Wr, IntelligenceReportSubjectType as Wt, CompletedTurnResult as X, SandboxFleetOperationsSummary as Xn, UploadProgress as Xr, McpServerConfig as Xt, CodeResultPart as Y, SandboxFleetManifestMachine as Yn, UploadOptions as Yr, ListSandboxOptions as Yt, CreateIntelligenceReportOptions as Z, SandboxFleetPolicy as Zn, UsageInfo as Zr, MintScopedTokenOptions as Zt, StartInteractiveOptions as _, defineGitHubResource as _i, ProvisionResult as _n, SandboxTraceOptions as _r, ExecResult as _t, TraceExportSink as a, AgentProfileConnection as ai, PreviewLinkManager as an, SandboxFleetWorkspaceReconcileResult as ar, DispatchPromptOptions as at, CONTROL_PLANE_MCP_SERVER_NAME as b, PublicTemplateInfo as bn, ScopedTokenScope as br, FleetDispatchCancelResult as bt, otelTraceIdForTangleTrace as c, AgentProfileModelHints as ci, ProcessLogEntry as cn, SandboxInfo as cr, DownloadProgress as ct, InteractiveAuthFile as d, AgentProfileResourceRef as di, ProcessSpawnOptions as dn, SandboxResourceUsage as dr, DriverInfo as dt, WriteManyFile as ei, NetworkManager as en, SandboxFleetTraceEvent as er, CreateSandboxFleetTokenOptions as et, InteractiveSessionHandle as f, AgentProfileResources as fi, ProcessStatus as fn, SandboxResources as fr, DriverType as ft, RespondToPermissionOptions as g, defineAgentProfile as gi, ProvisionEvent as gn, SandboxTraceExport as gr, ExecOptions as gt, InterruptResult as h, AgentSubagentProfile as hi, PromptResult as hn, SandboxTraceEvent as hr, EventStreamOptions as ht, TraceExportResult as i, AgentProfileConfidential as ii, PreviewLinkInfo as in, SandboxFleetWorkspace as ir, DirectoryPermission as it, BackendCapabilities as j, SandboxClientConfig as jn, SnapshotOptions as jr, GitAuth as jt, AddUserOptions as k, SSHCommandDescriptor as kn, SessionStatus as kr, ForkOptions as kt, toOtelJson as l, AgentProfilePermissionValue as li, ProcessManager as ln, SandboxIntelligenceEnvelope as lr, DriveTurnOptions as lt, InteractiveSessionInfo as m, AgentProfileValidationResult as mi, PromptOptions as mn, SandboxTraceBundle as mr, EgressPolicy as mt, SandboxInstance as n, AgentProfile as ni, PermissionLevel as nn, SandboxFleetTraceOptions as nr, CreateSandboxOptions as nt, buildTraceExportPayload as o, AgentProfileFileMount as oi, Process as on, SandboxFleetWorkspaceRestoreResult as or, DispatchedSession as ot, InteractiveSessionHost as p, AgentProfileValidationIssue as pi, PromptInputPart as pn, SandboxStatus as pr, EgressManager as pt, CodeLanguage as q, SandboxFleetMachineSpec as qn, TurnDriveResult as qr, ListOptions as qt, TraceExportFormat as r, AgentProfileCapabilities as ri, PermissionsManager as rn, SandboxFleetUsage as rr, DeleteOptions as rt, exportTraceBundle as s, AgentProfileMcpServer as si, ProcessInfo as sn, SandboxFleetWorkspaceSnapshotResult as sr, DownloadOptions as st, HttpClient as t, WriteManyOptions as ti, NonHostAgentDriverConfig as tn, SandboxFleetTraceExport as tr, CreateSandboxFleetWithCoordinatorOptions as tt, SandboxSession as u, AgentProfilePrompt as ui, ProcessSignal as un, SandboxPermissionsConfig as ur, DriverConfig as ut, BuildControlPlaneMcpConfigOptions as v, defineInlineResource as vi, ProvisionStatus as vn, SandboxUser as vr, FileInfo as vt, SandboxMcpServerEntry as w, ReapExpiredSandboxFleetsOptions as wn, SecretsManager as wr, FleetExecDispatchOptions as wt, SANDBOX_MCP_SERVER_NAME as x, PublicTemplateVersionInfo as xn, SearchMatch as xr, FleetDispatchResultBuffer as xt, BuildSandboxMcpConfigOptions as y, mergeAgentProfiles as yi, ProvisionStep as yn, ScopedToken as yr, FileSystem as yt, BatchResult as z, SandboxFleetDispatchResponse as zn, TaskResult as zr, HostAgentRuntimeBackend as zt };

package/dist/{sandbox-joKtQ5y3.js → sandbox-DgWaRMlI.js}

@@ -699,9 +699,9 @@ var SandboxSession = class {
 		return new InteractiveSessionHandle(this.box, this.id);
 	}
 	/**
-	* Resolve a pending permission request the agent raised mid-turn. Forwards
-	* `allow`/`deny` to a live ACP `request_permission` if one is awaiting, and
-	* always records the decision for audit. Returns `{ recorded, forwarded }`.
+	* Resolve a pending permission interaction the agent raised mid-turn,
+	* forwarding `allow`/`deny` to the blocked agent through the unified
+	* interaction channel. Throws if no matching permission is outstanding.
 	*/
 	async respondToPermission(permissionID, options) {
 		return this.box._respondToPermission(this.id, permissionID, options);
@@ -929,15 +929,26 @@ function detectHubApproval(toolInvocations) {
 		};
 	}
 }
-/** Read a `question` event payload into an awaiting-question requirement. */
+/** Read an `interaction` event (kind `question`) into an awaiting-question requirement. */
 function readQuestionEvent(data) {
-	const questionId = data.questionId;
-	if (typeof questionId !== "string" || questionId.length === 0) return;
+	const request = data.request;
+	if (!request || request.kind !== "question" || typeof request.id !== "string") return;
 	return {
-		questionId,
-		questions: data.questions
+		questionId: request.id,
+		questions: questionsFromAnswerSpec(request)
 	};
 }
+/** Reconstruct the prompt/options shape from a question interaction's answerSpec. */
+function questionsFromAnswerSpec(request) {
+	return request.answerSpec.fields.map((field) => field.type === "select" ? {
+		question: field.label,
+		options: field.options.map((o) => ({
+			label: o.label,
+			description: o.description
+		})),
+		multiSelect: field.multi === true
+	} : { question: field.label });
+}
 /**
 * Convert a thrown error into an in-band `error` SandboxEvent so a streaming
 * generator can surface a failure as an event followed by a terminal `done`
@@ -1397,13 +1408,14 @@ var SandboxInstance = class SandboxInstance {
 	* await box.write("/tmp/config.json", JSON.stringify(config));
 	* ```
 	*/
-	async write(path, content) {
+	async write(path, content, options) {
 		await this.ensureRunning();
 		const response = await this.runtimeFetch("/files/write", {
 			method: "POST",
 			body: JSON.stringify({
 				path,
-				content
+				content,
+				mode: options?.mode
 			})
 		});
 		if (!response.ok) {
@@ -1427,7 +1439,7 @@ var SandboxInstance = class SandboxInstance {
 			if (started && paceMs > 0) await delay(paceMs);
 			started = true;
 			try {
-				await this.write(file.path, file.content);
+				await this.write(file.path, file.content, { mode: file.mode });
 				break;
 			} catch (err) {
 				if (isTransientWriteError(err) && attempt < maxRetries) {
@@ -1468,7 +1480,7 @@ var SandboxInstance = class SandboxInstance {
 				}
 				if (event.type === "result") toolInvocations = readToolInvocations(event.data) ?? toolInvocations;
 				if (event.type === "result" || event.type === "done") terminalReached = true;
-				if (event.type === "question") question = readQuestionEvent(event.data) ?? question;
+				if (event.type === "interaction") question = readQuestionEvent(event.data) ?? question;
 				if (event.type === "trace.id") traceId = event.data.traceId;
 				if (event.type === "error") runError = event.data.message;
 			}
@@ -1858,7 +1870,7 @@ var SandboxInstance = class SandboxInstance {
 				}
 				if (event.type === "done" && costUsd === void 0) costUsd = readTokenCostUsd(event.data);
 				if (event.type === "result" || event.type === "done") terminalReached = true;
-				if (event.type === "question") question = readQuestionEvent(event.data) ?? question;
+				if (event.type === "interaction") question = readQuestionEvent(event.data) ?? question;
 				if (event.type === "trace.id") traceId = event.data.traceId;
 				if (event.type === "error") runError = event.data.message;
 			}
@@ -2213,8 +2225,9 @@ var SandboxInstance = class SandboxInstance {
 	*/
 	get fs() {
 		return {
+			supportsWriteMode: true,
 			read: (path) => this.read(path),
-			write: (path, content) => this.write(path, content),
+			write: (path, content, options) => this.write(path, content, options),
 			writeMany: (files, options) => this.writeMany(files, options),
 			search: (query, options) => this.search(query, options),
 			upload: (localPath, remotePath, options) => this.fsUpload(localPath, remotePath, options),
@@ -2242,6 +2255,7 @@ var SandboxInstance = class SandboxInstance {
 		const formData = new FormData();
 		formData.append("file", new Blob([new Uint8Array(fileBuffer)]), fileName);
 		formData.append("path", remotePath);
+		if (options?.permissions !== void 0) formData.append("mode", String(options.permissions));
 		const response = await this.runtimeFetch("/fs/upload", {
 			method: "POST",
 			body: formData,
@@ -4225,7 +4239,7 @@ var SandboxInstance = class SandboxInstance {
 				const data = event.data;
 				toolInvocations = readToolInvocations(data) ?? toolInvocations;
 			}
-			if (event.type === "question") question = readQuestionEvent(event.data) ?? question;
+			if (event.type === "interaction") question = readQuestionEvent(event.data) ?? question;
 			if (event.type === "trace.id") traceId = event.data.traceId;
 			if (event.type === "error") runError = event.data.message;
 			if (event.type === "done" || event.type === "result") {
@@ -4307,23 +4321,22 @@ var SandboxInstance = class SandboxInstance {
 	/** @internal — invoked by SandboxSession.respondToPermission(). */
 	async _respondToPermission(id, permissionID, options) {
 		await this.ensureRunning();
-		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/permissions/${encodeURIComponent(permissionID)}`, {
+		const body = options.response === "allow" ? {
+			id: permissionID,
+			outcome: "accepted",
+			data: { grant: "allow_once" }
+		} : {
+			id: permissionID,
+			outcome: "declined"
+		};
+		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/interactions`, {
 			method: "POST",
-			body: JSON.stringify({
-				response: options.response,
-				metadata: options.metadata
-			})
+			body: JSON.stringify(body)
 		});
 		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
+			const errBody = await response.text();
+			throw parseErrorResponse(response.status, errBody, void 0, response.headers);
 		}
-		const data = (await response.json())?.data;
-		if (!data || typeof data.forwarded !== "boolean" || data.recorded !== true) throw new ServerError("Permission response missing data", 502, {
-			endpoint: `/agents/sessions/${encodeURIComponent(id)}/permissions/${encodeURIComponent(permissionID)}`,
-			origin: "runtime"
-		});
-		return data;
 	}
 	/** @internal — invoked by SandboxSession.interrupt(). */
 	async _interrupt(id) {
@@ -4336,12 +4349,45 @@ var SandboxInstance = class SandboxInstance {
 		}
 		return { cancelled: (await response.json()).data?.cancelled === true };
 	}
-	/** @internal — invoked by SandboxSession.answer(). */
+	/**
+	* @internal — invoked by SandboxSession.answer(). Resolves the session's
+	* outstanding question interaction and posts the answer through the
+	* interaction response route. The positional answer arrays map onto the
+	* question's `answerSpec` fields in order.
+	*/
 	async _answerQuestion(id, answers) {
 		await this.ensureRunning();
-		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/answers`, {
+		const listResp = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/interactions`, { method: "GET" });
+		if (!listResp.ok) {
+			const body = await listResp.text();
+			throw parseErrorResponse(listResp.status, body, void 0, listResp.headers);
+		}
+		const outstanding = ((await listResp.json()).data?.interactions ?? []).find((r) => r.kind === "question");
+		if (!outstanding) throw new Error("No outstanding question to answer for this session");
+		const positional = Object.values(answers);
+		const data = {};
+		outstanding.answerSpec.fields.forEach((field, index) => {
+			const raw = answers[field.name] ?? answers[String(index)] ?? positional[index] ?? [];
+			switch (field.type) {
+				case "select":
+					data[field.name] = raw;
+					break;
+				case "number":
+					data[field.name] = Number(raw[0] ?? 0);
+					break;
+				case "boolean":
+					data[field.name] = raw[0] === "true";
+					break;
+				default: data[field.name] = raw[0] ?? "";
+			}
+		});
+		const response = await this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/interactions`, {
 			method: "POST",
-			body: JSON.stringify({ answers })
+			body: JSON.stringify({
+				id: outstanding.id,
+				outcome: "accepted",
+				data
+			})
 		});
 		if (!response.ok) {
 			const body = await response.text();

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-Dy1fHLYz.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DXa7OlnO.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-DM0o66lW.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-C2uTDxJ0.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-DM0o66lW.js → tangle-C2uTDxJ0.js}

@@ -1,4 +1,4 @@
-import { t as SandboxInstance } from "./sandbox-joKtQ5y3.js";
+import { t as SandboxInstance } from "./sandbox-DgWaRMlI.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.9.3",
+  "version": "0.9.4-develop.20260627151756.06a2afc",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",
@@ -82,8 +82,8 @@
     "url": "https://github.com/tangle-network/agent-dev-container/issues"
   },
   "dependencies": {
-    "@tangle-network/agent-core": "^0.3.1",
-    "@tangle-network/agent-interface": "^0.11.1"
+    "@tangle-network/agent-core": "^0.3.3",
+    "@tangle-network/agent-interface": "^0.13.0"
   },
   "peerDependencies": {
     "@mastra/core": "^1.36.0",