@tangle-network/sandbox 0.9.4-develop.20260710231333.22d131b → 0.9.4-develop.20260711192548.3c9ec78

package/dist/{sandbox-BZ33qVxk.js → sandbox-CxBHIBV1.js}

@@ -1,135 +1,6 @@
+import { n as normalizeSessionInfo, r as normalizeRuntimeBackendConfig, t as SandboxRuntimeApi } from "./runtime-api-CYA2DUQw.js";
 import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
 import { addTokenUsage, readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
-//#region src/backend-config.ts
-const LEGACY_QUESTION_ALIAS_KEY = ["question", "Channel"].join("");
-function parseModelString(model) {
-	const parts = model.split("/");
-	if (parts.length >= 2) return {
-		provider: parts[0],
-		model: parts.slice(1).join("/")
-	};
-	return { model };
-}
-/**
-* Normalize runtime backend config for the wire format.
-*
-* Callers set `backend.profile` (named string or portable AgentProfile).
-* This function generates the native `inlineProfile` shim automatically.
-*/
-function normalizeRuntimeBackendConfig(backend, options = {}) {
-	if (!backend && !options.model) return void 0;
-	if (backend && LEGACY_QUESTION_ALIAS_KEY in backend) throw new Error(`[sandbox-sdk] backend.${LEGACY_QUESTION_ALIAS_KEY} was removed. Use backend.interactions.question instead.`);
-	const portableProfile = backend?.profile && typeof backend.profile !== "string" ? backend.profile : void 0;
-	const inlineProfile = portableProfile ? toBackendProfile(portableProfile) : void 0;
-	const callerInlineProfile = backend?.inlineProfile;
-	if (callerInlineProfile && !inlineProfile) console.warn("[sandbox-sdk] backend.inlineProfile is deprecated. Use backend.profile (AgentPortableProfile) instead.");
-	if (inlineProfile && portableProfile) {
-		const reasoningEffort = portableProfile.model?.reasoningEffort ?? portableProfile.extensions?.[backend?.type ?? ""]?.reasoningEffort;
-		if (typeof reasoningEffort === "string" && reasoningEffort !== "auto" && reasoningEffort !== "none") inlineProfile.reasoningEffort = reasoningEffort;
-	}
-	return {
-		...backend?.type ? { type: backend.type } : {},
-		...typeof backend?.profile === "string" ? { profile: backend.profile } : {},
-		...inlineProfile ? { inlineProfile } : callerInlineProfile ? { inlineProfile: callerInlineProfile } : {},
-		...backend?.model ? { model: backend.model } : options.model ? { model: parseModelString(options.model) } : {},
-		...backend?.server ? { server: backend.server } : {},
-		...backend?.interactions !== void 0 ? { interactions: backend.interactions } : {}
-	};
-}
-/**
-* Permission keys the sidecar's strict `permission` schema accepts
-* (apps/sidecar/src/schemas/agent-profile-schema.ts → permissionConfigSchema).
-* Any other portable-permission key is a per-tool gate, not a permission, and
-* is routed into `tools` instead of passed through — the sidecar's `.strict()`
-* schema rejects unknown permission keys with `unrecognized_keys`.
-*
-* Name must not carry an UPPERCASE `SIDECAR_`/`ORCHESTRATOR_`-style prefix:
-* obfuscate.sh runs `--rename-globals false`, so a module-global identifier
-* ships verbatim in dist/, and verify-dist.sh bans those prefixes as
-* closed-source leaks.
-*/
-const CANONICAL_PERMISSION_KEYS = new Set([
-	"edit",
-	"bash",
-	"webfetch",
-	"mcp",
-	"doom_loop",
-	"external_directory"
-]);
-function hasAnyProfileResource(resources) {
-	return !!(resources.files?.length || resources.tools?.length || resources.skills?.length || resources.agents?.length || resources.commands?.length || resources.instructions);
-}
-function validateProfileResources(profile) {
-	if (profile.resources !== void 0 && (profile.resources === null || typeof profile.resources !== "object" || Array.isArray(profile.resources))) throw new Error("backend.profile.resources must be an object when provided");
-	if (profile.resources?.plugins?.length) throw new Error("backend.profile.resources.plugins is not supported by the sandbox SDK profile contract; use backend-specific provider profiles for OpenCode plugin resources");
-}
-function toBackendProfile(profile) {
-	validateProfileResources(profile);
-	const permission = {};
-	const derivedTools = {};
-	for (const [rawKey, value] of Object.entries(profile.permissions ?? {})) {
-		const key = rawKey === "network" ? "webfetch" : rawKey;
-		if (CANONICAL_PERMISSION_KEYS.has(key)) permission[key] = value;
-		else if (typeof value === "string") derivedTools[key] = value !== "deny";
-		else console.warn(`[sandbox-sdk] dropping unsupported permission key "${rawKey}": not a canonical sidecar permission and not a string tool gate`);
-	}
-	const tools = {
-		...derivedTools,
-		...profile.tools ?? {}
-	};
-	const mcp = profile.mcp ? Object.fromEntries(Object.entries(profile.mcp).map(([name, config]) => {
-		const c = config;
-		const transport = c.transport;
-		const command = c.command;
-		const hasCommand = Array.isArray(command) ? command.length > 0 : typeof command === "string" && command.trim().length > 0;
-		const isRemote = transport === "http" || transport === "sse" || typeof c.url === "string" && !hasCommand;
-		const enabled = c.enabled;
-		const timeout = c.timeout;
-		if (isRemote) return [name, {
-			type: "remote",
-			url: c.url,
-			...c.headers ? { headers: c.headers } : {},
-			...enabled !== void 0 ? { enabled } : {},
-			...timeout !== void 0 ? { timeout } : {}
-		}];
-		return [name, {
-			type: "local",
-			command: [...Array.isArray(command) ? command : typeof command === "string" ? command.trim().split(/\s+/).filter(Boolean) : [], ...c.args ?? []],
-			...c.env ? { environment: c.env } : {},
-			...enabled !== void 0 ? { enabled } : {},
-			...timeout !== void 0 ? { timeout } : {}
-		}];
-	})) : void 0;
-	return {
-		name: profile.name,
-		model: profile.model?.default,
-		...profile.prompt?.systemPrompt ? { systemPrompt: profile.prompt.systemPrompt } : {},
-		...Object.keys(tools).length > 0 ? { tools } : {},
-		...profile.prompt?.instructions?.length ? { instructions: profile.prompt.instructions } : {},
-		...Object.keys(permission).length > 0 ? { permission } : {},
-		...mcp ? { mcp } : {},
-		...profile.connections?.length ? { connections: profile.connections } : {},
-		...profile.subagents ? { subagents: profile.subagents } : {},
-		...profile.resources && hasAnyProfileResource(profile.resources) ? { resources: profile.resources } : {},
-		...profile.hooks ? { hooks: profile.hooks } : {},
-		...profile.modes ? { modes: profile.modes } : {},
-		...profile.extensions ? { extensions: profile.extensions } : {}
-	};
-}
-/**
-* Serialize a portable AgentProfile into the sidecar's canonical inline-profile
-* wire shape (validated by inlineProfileSchema in
-* apps/sidecar/src/schemas/agent-profile-schema.ts).
-*
-* Single choke point every product shares: streamPrompt →
-* normalizeRuntimeBackendConfig → toBackendProfile. Exported so callers and the
-* drift-guard test target one contract — the test parses this output with the
-* sidecar's own schema, so any future schema tightening fails here first.
-*/
-function serializeForSidecar(profile) {
-	return toBackendProfile(profile);
-}
-//#endregion
 //#region src/lib/sse-parser.ts
 /**
 * Parse a streaming SSE response body into an async iterable of
@@ -696,6 +567,13 @@ var SandboxSession = class SandboxSession {
 		});
 	}
 	/**
+	* Send a structured message through the session message endpoint. Model and
+	* message identifiers are translated to the runtime's wire names by the SDK.
+	*/
+	async sendMessage(request, options) {
+		return this.box._sessionSendMessage(this.id, request, options);
+	}
+	/**
 	* Abort the session's in-flight execution; the session and its messages
 	* are preserved (this does not delete the session). Void-returning alias
 	* of `interrupt()` — use `interrupt()` when you need to know whether an
@@ -706,6 +584,10 @@ var SandboxSession = class SandboxSession {
 	async cancel() {
 		return this.box._sessionCancel(this.id);
 	}
+	/** Delete this session and its persisted runtime state. */
+	async delete() {
+		return this.box._sessionDelete(this.id);
+	}
 	/**
 	* Fork this session into a new queued session. The fork shares the
 	* parent workspace and copies conversation history up to `messageId`
@@ -755,6 +637,24 @@ var SandboxSession = class SandboxSession {
 	}
 };
 //#endregion
+//#region src/task-session.ts
+/** A background task session with isolated changeset operations. */
+var SandboxTaskSession = class extends SandboxSession {
+	/** @internal Apps should call `box.taskSession(id)`. */
+	constructor(taskBox, id) {
+		super(taskBox, id);
+		this.taskBox = taskBox;
+	}
+	/** Read the task's isolated file changes. */
+	async changes() {
+		return this.taskBox._taskSessionChanges(this.id);
+	}
+	/** Apply all or a selected subset of the task's isolated file changes. */
+	async commit(options) {
+		return this.taskBox._taskSessionCommit(this.id, options);
+	}
+};
+//#endregion
 //#region src/sandbox.ts
 /**
 * Sandbox Instance
@@ -1027,10 +927,15 @@ var SandboxInstance = class SandboxInstance {
 	client;
 	info;
 	defaultRuntimeBackend;
+	runtime;
 	constructor(client, info, defaultRuntimeBackend) {
 		this.client = client;
 		this.info = info;
 		this.defaultRuntimeBackend = defaultRuntimeBackend;
+		this.runtime = new SandboxRuntimeApi({
+			ensureRunning: () => this.ensureRunning(),
+			fetch: (path, init) => this.runtimeFetch(path, init)
+		});
 	}
 	/** Unique sandbox identifier */
 	get id() {
@@ -1447,11 +1352,15 @@ var SandboxInstance = class SandboxInstance {
 	*/
 	async write(path, content, options) {
 		await this.ensureRunning();
-		const response = await this.runtimeFetch("/files/write", {
+		const params = new URLSearchParams();
+		if (options?.sessionId) params.set("sessionId", options.sessionId);
+		const query = params.toString();
+		const response = await this.runtimeFetch(`/files/write${query ? `?${query}` : ""}`, {
 			method: "POST",
 			body: JSON.stringify({
 				path,
 				content,
+				encoding: options?.encoding,
 				mode: options?.mode
 			})
 		});
@@ -1459,6 +1368,7 @@ var SandboxInstance = class SandboxInstance {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
+		return (await response.json()).data;
 	}
 	/**
 	* Write many files in one paced, retry-aware batch — see
@@ -2149,6 +2059,22 @@ var SandboxInstance = class SandboxInstance {
 			after: match.after
 		};
 	}
+	/** Basic health reported by the runtime inside this sandbox. */
+	async runtimeHealth() {
+		return this.runtime.health();
+	}
+	/** Return the runtime's current listening-port snapshot. */
+	async ports() {
+		return this.runtime.ports();
+	}
+	/** Interactive terminal operations for this runtime. */
+	get terminals() {
+		return this.runtime.terminals;
+	}
+	/** List profiles installed in this sandbox runtime. */
+	async listProfiles() {
+		return this.runtime.profiles();
+	}
 	/**
 	* Live whole-sandbox resource usage (memory + CPU) from the container cgroup.
 	*
@@ -2383,6 +2309,8 @@ var SandboxInstance = class SandboxInstance {
 		return {
 			supportsWriteMode: true,
 			read: (path) => this.read(path),
+			readBatch: (paths, options) => this.fsReadBatch(paths, options),
+			tree: (path, options) => this.fsTree(path, options),
 			write: (path, content, options) => this.write(path, content, options),
 			writeMany: (files, options) => this.writeMany(files, options),
 			search: (query, options) => this.search(query, options),
@@ -2397,6 +2325,12 @@ var SandboxInstance = class SandboxInstance {
 			exists: (path) => this.fsExists(path)
 		};
 	}
+	async fsReadBatch(paths, options = {}) {
+		return this.runtime.readFiles(paths, options);
+	}
+	async fsTree(path, options = {}) {
+		return this.runtime.fileTree(path, options);
+	}
 	async fsUpload(localPath, remotePath, options) {
 		await this.ensureRunning();
 		const fs = await import("node:fs/promises");
@@ -2549,8 +2483,21 @@ var SandboxInstance = class SandboxInstance {
 	}
 	async fsDelete(path, options) {
 		await this.ensureRunning();
+		if (options?.sessionId && !options.recursive) {
+			const params = new URLSearchParams({ sessionId: options.sessionId });
+			const response = await this.runtimeFetch(`/files/delete?${params}`, {
+				method: "POST",
+				body: JSON.stringify({ path })
+			});
+			if (!response.ok) {
+				const body = await response.text();
+				throw parseErrorResponse(response.status, body, void 0, response.headers);
+			}
+			return;
+		}
 		const params = new URLSearchParams();
 		if (options?.recursive) params.set("recursive", "true");
+		if (options?.sessionId) params.set("sessionId", options.sessionId);
 		const query = params.toString();
 		const url = query ? `/fs${path}?${query}` : `/fs${path}`;
 		const response = await this.runtimeFetch(url, { method: "DELETE" });
@@ -4132,6 +4079,30 @@ var SandboxInstance = class SandboxInstance {
 	session(id) {
 		return new SandboxSession(this, id);
 	}
+	/** Create an agent session and return both its handle and initial metadata. */
+	async createSession(options) {
+		const info = await this.runtime.createSession(options);
+		return {
+			session: this.session(info.id),
+			info
+		};
+	}
+	/** Delete an agent session by id. */
+	async deleteSession(id) {
+		return this._sessionDelete(id);
+	}
+	/** Get a lazy background-task session reference. */
+	taskSession(id) {
+		return new SandboxTaskSession(this, id);
+	}
+	/** Create a background task session. Dispatch work with `session.sendMessage()`. */
+	async createTaskSession(options) {
+		const info = await this.runtime.createTaskSession(options);
+		return {
+			session: this.taskSession(info.id),
+			info
+		};
+	}
 	/**
 	* List sessions on this sandbox, optionally filtering by status. Returns
 	* `SandboxSession` instances paired with their last-known
@@ -4239,6 +4210,22 @@ var SandboxInstance = class SandboxInstance {
 			metadata: m.info.metadata
 		}));
 	}
+	/** @internal — invoked by SandboxSession.sendMessage(). */
+	async _sessionSendMessage(id, request, options = {}) {
+		return this.runtime.sendSessionMessage(id, request, options);
+	}
+	/** @internal — invoked by SandboxSession.delete(). */
+	async _sessionDelete(id) {
+		return this.runtime.deleteSession(id);
+	}
+	/** @internal — invoked by SandboxTaskSession.changes(). */
+	async _taskSessionChanges(id) {
+		return this.runtime.taskSessionChanges(id);
+	}
+	/** @internal — invoked by SandboxTaskSession.commit(). */
+	async _taskSessionCommit(id, options = {}) {
+		return this.runtime.commitTaskSession(id, options);
+	}
 	async _sessionFork(id, opts = {}) {
 		await this.ensureRunning();
 		const body = {};
@@ -4354,6 +4341,7 @@ var SandboxInstance = class SandboxInstance {
 	* gates ProductTokenIssuer-issued JWTs — no new sidecar surface.
 	*/
 	async mintScopedToken(opts) {
+		if ((opts.scope === "session" || opts.scope === "session-runtime") && !opts.sessionId) throw new ValidationError(`${opts.scope} scope requires a sessionId`);
 		const response = await this.client.fetch(`/v1/sandboxes/${encodeURIComponent(this.id)}/scoped-token`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
@@ -4603,29 +4591,6 @@ function settleTurnDrive(result) {
 		result
 	};
 }
-function normalizeSessionInfo(raw) {
-	const id = raw.id;
-	if (typeof id !== "string") return null;
-	const status = raw.status || "running";
-	return {
-		id,
-		parentId: typeof raw.parentID === "string" ? raw.parentID : typeof raw.parentId === "string" ? raw.parentId : void 0,
-		status: [
-			"queued",
-			"running",
-			"completed",
-			"failed",
-			"cancelled"
-		].includes(status) ? status : "running",
-		backend: typeof raw.backendType === "string" ? raw.backendType : typeof raw.backend === "string" ? raw.backend : void 0,
-		model: typeof raw.model === "string" ? raw.model : void 0,
-		promptCount: typeof raw.promptCount === "number" ? raw.promptCount : void 0,
-		createdAt: raw.createdAt ? new Date(raw.createdAt) : void 0,
-		startedAt: raw.startedAt ? new Date(raw.startedAt) : void 0,
-		endedAt: raw.endedAt ? new Date(raw.endedAt) : void 0,
-		raw
-	};
-}
 var DirectRuntimeHttpClient = class {
 	baseClient;
 	sandboxId;
@@ -4692,4 +4657,4 @@ function quoteForShell(value) {
 	return `'${value.replace(/'/g, "'\\''")}'`;
 }
 //#endregion
-export { serializeForSidecar as _, applySandboxEventText as a, normalizeConnection as c, otelTraceIdForTangleTrace as d, toOtelJson as f, normalizeRuntimeBackendConfig as g, parseSSEStream as h, InteractiveSessionHandle as i, buildTraceExportPayload as l, encodeTextForWire as m, normalizeStartupDiagnostics as n, collectAgentResponseText as o, encodePromptForWire as p, SandboxSession as r, getSandboxEventText as s, SandboxInstance as t, exportTraceBundle as u };
+export { InteractiveSessionHandle as a, getSandboxEventText as c, exportTraceBundle as d, otelTraceIdForTangleTrace as f, parseSSEStream as g, encodeTextForWire as h, SandboxSession as i, normalizeConnection as l, encodePromptForWire as m, normalizeStartupDiagnostics as n, applySandboxEventText as o, toOtelJson as p, SandboxTaskSession as r, collectAgentResponseText as s, SandboxInstance as t, buildTraceExportPayload as u };

package/dist/session-gateway/index.js

@@ -163,21 +163,25 @@ var SessionGatewayClient = class {
 	connectWebSocket() {
 		const url = new URL(this.config.url);
 		url.searchParams.set("token", this.currentToken);
-		this.ws = new WebSocket(url.toString());
-		this.ws.onopen = () => this.handleOpen();
-		this.ws.onclose = (event) => this.handleClose(event.code, event.reason);
-		this.ws.onerror = (_event) => {};
-		this.ws.onmessage = (event) => this.handleMessage(event.data);
+		const socket = new WebSocket(url.toString());
+		this.ws = socket;
+		socket.onopen = () => {
+			if (this.ws === socket) this.handleOpen();
+		};
+		socket.onclose = (event) => this.handleClose(socket, event.code, event.reason);
+		socket.onerror = (_event) => {};
+		socket.onmessage = (event) => {
+			if (this.ws === socket) this.handleMessage(event.data);
+		};
 	}
 	/**
 	* Disconnect from the session gateway.
 	*/
 	disconnect() {
 		this.cleanup();
-		if (this.ws) {
-			this.ws.close(1e3, "Client disconnect");
-			this.ws = null;
-		}
+		const socket = this.ws;
+		this.ws = null;
+		if (socket) socket.close(1e3, "Client disconnect");
 		this.setState("disconnected");
 	}
 	/**
@@ -338,7 +342,9 @@ var SessionGatewayClient = class {
 			this.handlers.onReconnect?.();
 		}
 	}
-	handleClose(code, reason) {
+	handleClose(socket, code, reason) {
+		if (this.ws !== socket) return;
+		this.ws = null;
 		this.cleanup();
 		this.handlers.onDisconnect?.(code, reason);
 		if (this.config.autoReconnect && this.reconnectAttempts < this.config.maxReconnectAttempts) {

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-CuwpLz65.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DzEUjav-.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-sPZOYZkz.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-BdRRHMpX.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-sPZOYZkz.js → tangle-BdRRHMpX.js}

@@ -1,5 +1,5 @@
-import { t as SandboxInstance } from "./sandbox-BZ33qVxk.js";
 import { p as parseErrorResponse } from "./errors-DSz87Rkk.js";
+import { t as SandboxInstance } from "./sandbox-CxBHIBV1.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions