@tangle-network/sandbox 1.0.184 → 1.0.185

package/dist/agent/index.js

@@ -1,8 +1,8 @@
 import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-Cqf4Lpp0.js";
 import { O as assertCurrentBackendType } from "../interactive-controller-C876Pjaj.js";
-import { t as SandboxInstance } from "../sandbox-J25gA1la.js";
+import { t as SandboxInstance } from "../sandbox-CMapefdZ.js";
 import { C as StateError, E as ValidationError, g as NotFoundError } from "../errors-CaX0a5Ry.js";
-import { t as Sandbox } from "../client-DKvkEgEu.js";
+import { t as Sandbox } from "../client-DccXv0E2.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/{client-DKvkEgEu.js → client-DccXv0E2.js}

@@ -1,6 +1,6 @@
 import { A as normalizeRuntimeBackendConfig, D as applyRequestedModel, E as isBrowserRuntime, H as backendTypeSchema, N as withProfileHarness, O as assertCurrentBackendType, P as withoutCreateOnlyModelFields, S as encodePromptForWire, o as requestInteractiveSessionToken } from "./interactive-controller-C876Pjaj.js";
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, F as normalizeConnection, G as extendableDeadline, I as normalizeEgressPolicyFields, J as isDeployWindowCreateError, K as generateIdempotencyKey, L as normalizeProxySecretReceipt, N as dateOf, O as isRetryableProfileFileMaterializeFailure, P as parseLifecycleTimes, R as normalizeSandboxShape, T as splitInlineProfileFileMounts, U as DEPLOY_WINDOW_RETRY_MS, W as createRetryDelayMs, X as isRetryableCreateError, Y as isRateLimitCreateError, d as sandboxLedgerUsd, j as normalizeStartupDiagnostics, k as normalizeCaptureProof, n as createSandboxInstanceFromResponse, o as exportTraceBundle, q as isCapacityShortageCreateError, z as CAPACITY_ETA_MARGIN_MS } from "./sandbox-J25gA1la.js";
+import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, F as normalizeConnection, G as extendableDeadline, I as normalizeEgressPolicyFields, J as isDeployWindowCreateError, K as generateIdempotencyKey, L as normalizeProxySecretReceipt, N as dateOf, O as isRetryableProfileFileMaterializeFailure, P as parseLifecycleTimes, R as normalizeSandboxShape, T as splitInlineProfileFileMounts, U as DEPLOY_WINDOW_RETRY_MS, W as createRetryDelayMs, X as isRetryableCreateError, Y as isRateLimitCreateError, d as sandboxLedgerUsd, j as normalizeStartupDiagnostics, k as normalizeCaptureProof, n as createSandboxInstanceFromResponse, o as exportTraceBundle, q as isCapacityShortageCreateError, z as CAPACITY_ETA_MARGIN_MS } from "./sandbox-CMapefdZ.js";
 import { l as SANDBOX_AGENT_HOME, t as isInsideReservedDir } from "./file-transfer-DTHgLccV.js";
 import { E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, g as NotFoundError, h as NetworkError, i as readResponseJson, n as parseErrorResponse, r as parseResponseError, x as SandboxError } from "./errors-CaX0a5Ry.js";
 import { r as combineAbortSignals, t as abortableSleep } from "./abort-signal-PgWPMn_e.js";

package/dist/{core-ze7_svOX.js → core-C1o0_wzR.js}

@@ -1,5 +1,5 @@
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { Z as canonicalAgentProfileDigest } from "./sandbox-J25gA1la.js";
+import { Z as canonicalAgentProfileDigest } from "./sandbox-CMapefdZ.js";
 import { E as ValidationError, s as CapabilityError, x as SandboxError } from "./errors-CaX0a5Ry.js";
 import { n as awaitWithAbort } from "./abort-signal-PgWPMn_e.js";
 import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-CwJjUmvo-CD3jrgbH.js";

package/dist/core.js

@@ -1,7 +1,7 @@
-import { r as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-J25gA1la.js";
+import { r as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-CMapefdZ.js";
 import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, d as FileWriteConflictError, g as NotFoundError, h as NetworkError, n as parseErrorResponse, s as CapabilityError, v as ProfileFileMountPathError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { a as InstancesClient, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, p as isBackendRegistryInteractionKind, r as HostedInstance, t as Sandbox, u as backendRegistryEntrySchema } from "./client-DKvkEgEu.js";
+import { a as InstancesClient, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, p as isBackendRegistryInteractionKind, r as HostedInstance, t as Sandbox, u as backendRegistryEntrySchema } from "./client-DccXv0E2.js";
 import { i as profileChannelReference, r as lineInstanceKey, t as LinesClient } from "./lines-DxHJhxCe.js";
 import { PublicTemplatePublishError, PublicTemplatesClient } from "./public-templates.js";
-import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-ze7_svOX.js";
+import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-C1o0_wzR.js";
 export { AuthError, CapabilityError, FileWriteConflictError, HostedInstance, ISOLATED_CREATION_ATTESTATION_VERSION, InstanceRestartingError, InstancesClient, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, LinesClient, ManagedProcessClient, NetworkError, NotFoundError, PartialFailureError, ProfileFileMountPathError, PublicTemplatePublishError, PublicTemplatesClient, QuotaError, Sandbox, SandboxError, SandboxInstance, SeatSelectionError, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, createSelectSeat, gatewaySeatTransport, isBackendRegistryInteractionKind, lineInstanceKey, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseErrorResponse, parseLineApplicationRequest, parseLineApplicationResult, profileChannelReference, sandboxFailureKind };

package/dist/index.js

@@ -1,16 +1,16 @@
 import { A as normalizeRuntimeBackendConfig, B as TERMINAL_WS_ECHO_SUBPROTOCOL, G as parseBackendType, H as backendTypeSchema, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, U as isolationPrincipalSchema, V as ALL_BACKEND_TYPES, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-C876Pjaj.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, k as agentInteractiveSessionPromptRequestDigest, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-DHIS8edi.js";
 import { i as SANDBOX_SIZE_PRESET_NAMES, r as agentProfileSchema, t as agentProfileConfidentialSchema } from "./profile-schema-C1KpT-wS.js";
-import { C as SandboxOperationFailedError, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, S as SandboxOperation, T as splitInlineProfileFileMounts, _ as collectAgentFinalMessageText, a as buildTraceExportPayload, b as isToolBearingEvent, c as toOtelJson, f as InteractiveSessionHandle, g as applySandboxEventText, h as createInteractiveTerminalSession, i as MAX_EGRESS_DENIALS_LIMIT, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as exportTraceBundle, p as InteractiveTerminalFrameLog, r as WorkspaceImages, s as otelTraceIdForTangleTrace, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as materializeProfileFileMounts, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-J25gA1la.js";
+import { C as SandboxOperationFailedError, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, S as SandboxOperation, T as splitInlineProfileFileMounts, _ as collectAgentFinalMessageText, a as buildTraceExportPayload, b as isToolBearingEvent, c as toOtelJson, f as InteractiveSessionHandle, g as applySandboxEventText, h as createInteractiveTerminalSession, i as MAX_EGRESS_DENIALS_LIMIT, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as exportTraceBundle, p as InteractiveTerminalFrameLog, r as WorkspaceImages, s as otelTraceIdForTangleTrace, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as materializeProfileFileMounts, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-CMapefdZ.js";
 import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, b as ResumeEnvRequiredError, c as CompliancePlacementError, d as FileWriteConflictError, f as GpuProviderNotConfiguredError, g as NotFoundError, h as NetworkError, l as EdgeNotReadyError, n as parseErrorResponse, o as BranchFanoutExceedsHostError, p as KeyBudgetExhaustedError, s as CapabilityError, t as TerminalStreamError, u as EgressProxyRecoveryError, v as ProfileFileMountPathError, w as StreamInterruptedError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { _ as createBatchResultAccumulator, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, g as IntelligenceClient, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, n as RunsClient, o as SandboxFleetClient, p as isBackendRegistryInteractionKind, r as HostedInstance, s as SandboxFleet, t as Sandbox, u as backendRegistryEntrySchema, v as validateBatchRunRequest } from "./client-DKvkEgEu.js";
+import { _ as createBatchResultAccumulator, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, g as IntelligenceClient, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, n as RunsClient, o as SandboxFleetClient, p as isBackendRegistryInteractionKind, r as HostedInstance, s as SandboxFleet, t as Sandbox, u as backendRegistryEntrySchema, v as validateBatchRunRequest } from "./client-DccXv0E2.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CmT6Ygiv.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
 import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-DxHJhxCe.js";
 import { t as downloadFile } from "./file-download-BXgu9BNh.js";
 import { PublicTemplatePublishError, PublicTemplatesClient } from "./public-templates.js";
-import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-ze7_svOX.js";
-import { s as BlueprintSandboxClient } from "./tangle-CeRKIc8Z.js";
+import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-C1o0_wzR.js";
+import { s as BlueprintSandboxClient } from "./tangle-Drx1HjE4.js";
 import { z } from "zod";
 //#region ../../../packages/runtime-contracts/dist/model-key-proxy.js
 const MANAGED_MODEL_KEY_SENTINEL = "proxy-managed-per-request";

package/dist/{sandbox-J25gA1la.js → sandbox-CMapefdZ.js}

@@ -5589,46 +5589,29 @@ var SandboxLifecycleCapabilities = class extends SandboxLifecycleEventsCapabilit
 */
 const LIFECYCLE_CONFLICT_CODE = "SANDBOX_LIFECYCLE_IN_PROGRESS";
 /**
-* How long a lifecycle call re-attempts that refusal before it surfaces.
-*
-* MEASURED MOTIVE. `resume`, `stop` and `delete` are the only three routes the
-* API guards, and they share one lease per sandbox, `lifecycle-<id>`. That
-* lease outlives the response of the call that took it: the delete handler
-* registers deferred key-revoke and meta-delete work through
-* `deferSandboxLifecycleWork`, and the release is chained after that work
-* through `executionCtx.waitUntil`. So a second lifecycle call landing inside
-* that window is refused even though nothing is wrong and the caller only has
-* to wait. The platform's own workflow smoke already hand-rolls this retry and
-* says why (scripts/platform-workflow-deploy-smoke.mjs: "the worker can still
-* hold the sandbox lifecycle claim while its final action cleanup completes,
-* so sandbox-api returns a typed 409 for a short, valid window").
-*
-* The number: 2 of 2 provider-seam runs (tangle-network/agent-sdk#280)
-* lost a completed agent turn to this refusal. `agent-runtime`'s provider
-* executor destroys one environment twice — once when the stream settles and
-* once from `teardown()` — and the second DELETE was refused, which discarded
-* the first one's result. Nothing about the sandbox document tells a client the
-* lease is held (the response schema is `.strict()` and carries no lifecycle
-* field), so a status poll cannot replace this retry.
-*
-* The ceiling is short on purpose. The lease TTL is 360 s, but the window this
-* closes is the deferred-cleanup tail of an operation that already answered;
-* a conflict that outlives ~11 s is a genuinely concurrent operation and
-* belongs to the caller, not to a longer sleep here.
+* How long a lifecycle call re-attempts a refusal that only asks it to wait.
+* `resume`, `stop` and `delete` share one lease per sandbox, `lifecycle-<id>`,
+* held past a response while its deferred cleanup runs (the workflow smoke
+* hand-rolls the same retry), so a second call in that window is refused 409;
+* 2 of 2 provider-seam runs (agent-sdk#280) lost a completed turn to it. A
+* lease-store or storage outage answers 503 (us1 2026-11-01: 16/16 child
+* deletes failed through a Platform deploy that had removed every child). The
+* ceiling (~11 s) is short: a longer conflict is a real concurrent operation.
 */
 const LIFECYCLE_CONFLICT_MAX_ATTEMPTS = 6;
 const LIFECYCLE_CONFLICT_BASE_DELAY_MS = 500;
 const LIFECYCLE_CONFLICT_MAX_DELAY_MS = 4e3;
+/** A lease-store or storage outage the API answers 503 before or after its effect: a retry is safe. */
+const LIFECYCLE_OUTAGE_CODES = new Set(["SANDBOX_LIFECYCLE_COORDINATION_UNAVAILABLE", "STORAGE_UNAVAILABLE"]);
 function isLifecycleConflict(cause) {
-	return cause instanceof SandboxError && cause.status === 409 && cause.code === LIFECYCLE_CONFLICT_CODE;
+	return cause instanceof SandboxError && (cause.status === 409 && cause.code === LIFECYCLE_CONFLICT_CODE || cause.status === 503 && LIFECYCLE_OUTAGE_CODES.has(cause.code));
 }
 function lifecycleConflictDelayMs(cause, failedAttempt) {
 	if (cause instanceof SandboxError && cause.retryAfterMs !== void 0) return cause.retryAfterMs;
 	return Math.min(LIFECYCLE_CONFLICT_BASE_DELAY_MS * 2 ** Math.max(0, failedAttempt - 1), LIFECYCLE_CONFLICT_MAX_DELAY_MS);
 }
 /**
-* Run one lifecycle mutation, re-attempting only the platform's typed
-* "already in progress" refusal.
+* Run one lifecycle mutation, re-attempting only the refusals above.
 *
 * Every other failure keeps its identity and its stack: this widens no other
 * error class, and a caller abort ends the wait immediately.

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as TANGLE_JOBS_CONTRACT, f as ITangleJobsAbi, g as JsonResponseParamTypes, h as JOB_SANDBOX_DELETE, i as jobQuoteDigest, l as OperatorSessionError, m as JOB_SANDBOX_CREATE, n as fetchQuote, o as validateQuote, p as AgentSandboxBlueprintAbi, r as inputsHashOf, s as BlueprintSandboxClient, t as QuoteError, u as TANGLE_CHAIN_ID, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-CeRKIc8Z.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as TANGLE_JOBS_CONTRACT, f as ITangleJobsAbi, g as JsonResponseParamTypes, h as JOB_SANDBOX_DELETE, i as jobQuoteDigest, l as OperatorSessionError, m as JOB_SANDBOX_CREATE, n as fetchQuote, o as validateQuote, p as AgentSandboxBlueprintAbi, r as inputsHashOf, s as BlueprintSandboxClient, t as QuoteError, u as TANGLE_CHAIN_ID, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-Drx1HjE4.js";
 export { AgentSandboxBlueprintAbi, BlueprintSandboxClient, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-CeRKIc8Z.js → tangle-Drx1HjE4.js}

@@ -1,4 +1,4 @@
-import { M as readFilesystemIncarnationTuple, n as createSandboxInstanceFromResponse } from "./sandbox-J25gA1la.js";
+import { M as readFilesystemIncarnationTuple, n as createSandboxInstanceFromResponse } from "./sandbox-CMapefdZ.js";
 import { i as readResponseJson } from "./errors-CaX0a5Ry.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-CK-x8vXj.js";
 //#region ../../../packages/runtime-contracts/dist/tangle-blueprint-abi.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "1.0.184",
+  "version": "1.0.185",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -155,13 +155,13 @@
     "yjs": "13.6.33",
     "@products/sandbox-test-utils": "0.0.0",
     "@tangle-network/agent-profile-materialize": "0.27.1",
-    "@repo/shared": "0.0.0",
+    "@tangle-network/runtime-contracts": "0.20.0",
     "@tangle-network/cli-agent-registry": "0.15.0",
-    "@tangle-network/runtime-contracts": "0.20.0"
+    "@repo/shared": "0.0.0"
   },
   "tangleRelease": {
-    "sourceSha": "dcc7def46f0c15b9f0ea7f4f3268e9725fe5a248",
-    "mergedAt": "2026-11-02T01:13:43-08:00"
+    "sourceSha": "29e82a678eeda618721e2336f4ad0887fc9818ab",
+    "mergedAt": "2026-11-02T01:15:30-08:00"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",