@tangle-network/sandbox 1.0.189 → 1.0.190

package/README.md

@@ -15,6 +15,13 @@ export TANGLE_API_KEY=sk-tan-...
 export SANDBOX_BASE_URL=https://sandbox.tangle.tools
 ```
 
+## Supported versions
+
+The oldest supported SDK is `@tangle-network/sandbox@1.0.151`, the first version that accepts a capability or enum value it does not know instead of refusing the whole response.
+Older versions fail when the Sandbox API advertises a new value; upgrade to this version or later.
+This line is the one place the floor is stated: the production journey (`scripts/production-journey.sh`) reads it and runs every cell's journey on it.
+Every request from the [shared raw transport](src/lib/api-request.mjs) and the Python SDK sends `x-sdk-version: <package version>`, and the Sandbox Worker's invocation log records it as `$workers.event.request.headers.x-sdk-version`, so the versions customers run can be counted.
+
 ## Choose an entrypoint
 
 | Need | Import |

package/dist/agent/index.js

@@ -1,8 +1,8 @@
-import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-Cqf4Lpp0.js";
+import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-D7MpwsW0.js";
 import { O as assertCurrentBackendType } from "../interactive-controller-C876Pjaj.js";
 import { t as SandboxInstance } from "../sandbox-B_Xbc9wR.js";
 import { C as StateError, E as ValidationError, g as NotFoundError } from "../errors-CaX0a5Ry.js";
-import { t as Sandbox } from "../client-CwWS3a-i.js";
+import { t as Sandbox } from "../client-BERYosgI.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.js

@@ -66,7 +66,7 @@ async function servePreviewMcp(request, config) {
 	if (typeof config.authorize !== "function") throw new Error("Preview MCP requires a host authorization callback");
 	const tools = config.tools ?? PREVIEW_TOOLS;
 	if (!tools.length || tools.some((tool) => !PREVIEW_TOOLS.includes(tool))) throw new Error("Preview MCP requires an explicit nonempty preview-only tool grant");
-	const [{ createMcpServer }, { WebStandardStreamableHTTPServerTransport }] = await Promise.all([import("../mcp-local-Cqf4Lpp0.js").then((n) => n.n), import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js")]);
+	const [{ createMcpServer }, { WebStandardStreamableHTTPServerTransport }] = await Promise.all([import("../mcp-local-D7MpwsW0.js").then((n) => n.n), import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js")]);
 	const handle = await createMcpServer(config.box, {
 		name: "tangle-previews",
 		sessionId: config.sessionId,

package/dist/{api-request-D4Ln_0F5.js → api-request-CZlFy3ku.js}

@@ -1,5 +1,7 @@
 import { t as rewrapResponse } from "./response-rewrap-Cjoxh2wZ.js";
 //#region src/lib/api-request.mjs
+/** The package version tsdown.config.ts defines; unbuilt source reports 0.0.0. */
+const SDK_VERSION = "1.0.190";
 function withRequestContextHeaders(response, path, method, body = response.body) {
 	const headers = new Headers(response.headers);
 	headers.set("x-tangle-request-path", path);
@@ -27,6 +29,7 @@ async function fetchSandboxApi({ baseUrl, apiKey, timeoutMs = 3e4, signal, fetch
 	try {
 		const headers = new Headers(options?.headers);
 		headers.set("Authorization", `Bearer ${apiKey}`);
+		headers.set("x-sdk-version", SDK_VERSION);
 		const isFormDataBody = typeof FormData !== "undefined" && options?.body instanceof FormData;
 		if (!headers.has("Content-Type") && !isFormDataBody) headers.set("Content-Type", "application/json");
 		const response = await fetchImpl(url, {
@@ -86,4 +89,4 @@ async function fetchSandboxApi({ baseUrl, apiKey, timeoutMs = 3e4, signal, fetch
 	}
 }
 //#endregion
-export { fetchSandboxApi as t };
+export { fetchSandboxApi as n, SDK_VERSION as t };

package/dist/{client-CwWS3a-i.js → client-BERYosgI.js}

@@ -4,7 +4,7 @@ import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as
 import { l as SANDBOX_AGENT_HOME, t as isInsideReservedDir } from "./file-transfer-DTHgLccV.js";
 import { E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, g as NotFoundError, h as NetworkError, i as readResponseJson, n as parseErrorResponse, r as parseResponseError, x as SandboxError } from "./errors-CaX0a5Ry.js";
 import { r as combineAbortSignals, t as abortableSleep } from "./abort-signal-PgWPMn_e.js";
-import { t as fetchSandboxApi } from "./api-request-D4Ln_0F5.js";
+import { n as fetchSandboxApi } from "./api-request-CZlFy3ku.js";
 import { n as fetchWithKeepAlive } from "./keep-alive-fetch-C2lFwrMA.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
 import { t as LinesClient } from "./lines-DxHJhxCe.js";

package/dist/core.js

@@ -1,6 +1,6 @@
 import { r as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-B_Xbc9wR.js";
 import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, d as FileWriteConflictError, g as NotFoundError, h as NetworkError, n as parseErrorResponse, s as CapabilityError, v as ProfileFileMountPathError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { a as InstancesClient, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, p as isBackendRegistryInteractionKind, r as HostedInstance, t as Sandbox, u as backendRegistryEntrySchema } from "./client-CwWS3a-i.js";
+import { a as InstancesClient, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, p as isBackendRegistryInteractionKind, r as HostedInstance, t as Sandbox, u as backendRegistryEntrySchema } from "./client-BERYosgI.js";
 import { i as profileChannelReference, r as lineInstanceKey, t as LinesClient } from "./lines-DxHJhxCe.js";
 import { PublicTemplatePublishError, PublicTemplatesClient } from "./public-templates.js";
 import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-BT-0QZT-.js";

package/dist/index.js

@@ -3,7 +3,7 @@ import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, k as agentInteractiveSessi
 import { i as SANDBOX_SIZE_PRESET_NAMES, r as agentProfileSchema, t as agentProfileConfidentialSchema } from "./profile-schema-C1KpT-wS.js";
 import { C as SandboxOperationFailedError, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, S as SandboxOperation, T as splitInlineProfileFileMounts, _ as collectAgentFinalMessageText, a as buildTraceExportPayload, b as isToolBearingEvent, c as toOtelJson, f as InteractiveSessionHandle, g as applySandboxEventText, h as createInteractiveTerminalSession, i as MAX_EGRESS_DENIALS_LIMIT, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as exportTraceBundle, p as InteractiveTerminalFrameLog, r as WorkspaceImages, s as otelTraceIdForTangleTrace, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as materializeProfileFileMounts, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-B_Xbc9wR.js";
 import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, b as ResumeEnvRequiredError, c as CompliancePlacementError, d as FileWriteConflictError, f as GpuProviderNotConfiguredError, g as NotFoundError, h as NetworkError, l as EdgeNotReadyError, n as parseErrorResponse, o as BranchFanoutExceedsHostError, p as KeyBudgetExhaustedError, s as CapabilityError, t as TerminalStreamError, u as EgressProxyRecoveryError, v as ProfileFileMountPathError, w as StreamInterruptedError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { _ as createBatchResultAccumulator, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, g as IntelligenceClient, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, n as RunsClient, o as SandboxFleetClient, p as isBackendRegistryInteractionKind, r as HostedInstance, s as SandboxFleet, t as Sandbox, u as backendRegistryEntrySchema, v as validateBatchRunRequest } from "./client-CwWS3a-i.js";
+import { _ as createBatchResultAccumulator, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, g as IntelligenceClient, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, n as RunsClient, o as SandboxFleetClient, p as isBackendRegistryInteractionKind, r as HostedInstance, s as SandboxFleet, t as Sandbox, u as backendRegistryEntrySchema, v as validateBatchRunRequest } from "./client-BERYosgI.js";
 import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CmT6Ygiv.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
 import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-DxHJhxCe.js";

package/dist/intelligence/index.js

@@ -1,5 +1,5 @@
 import { T as TimeoutError, h as NetworkError, n as parseErrorResponse } from "../errors-CaX0a5Ry.js";
-import { t as fetchSandboxApi } from "../api-request-D4Ln_0F5.js";
+import { n as fetchSandboxApi } from "../api-request-CZlFy3ku.js";
 import { n as verifyDownload } from "../file-download-BXgu9BNh.js";
 //#region src/intelligence/index.ts
 /**

package/dist/{mcp-local-Cqf4Lpp0.js → mcp-local-D7MpwsW0.js}

@@ -1,6 +1,6 @@
 import { u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-DTHgLccV.js";
+import "./api-request-CZlFy3ku.js";
 import { a as listAgentPreviews, i as getAgentPreview, o as publishAgentPreview, r as ensureAgentPreview, s as removeAgentPreview, t as AgentPreviewError } from "./preview-operations-B3TTvqlm.js";
-import { createRequire } from "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -354,13 +354,6 @@ function bindToolSpecs(box, options) {
 *   pnpm add @modelcontextprotocol/sdk
 */
 var mcp_local_exports = /* @__PURE__ */ __exportAll({ createMcpServer: () => createMcpServer });
-const SDK_VERSION = (() => {
-	try {
-		return createRequire(import.meta.url)("../../package.json").version ?? "0.0.0";
-	} catch {
-		return "0.0.0";
-	}
-})();
 /**
 * Build an MCP server backed by one sandbox. The server registers
 * `tools/list` and `tools/call` handlers populated from the same registry
@@ -403,7 +396,7 @@ async function createMcpServer(box, options = {}) {
 	const { bindings, handlers } = bindToolSpecs(box, options);
 	const server = new serverModule.Server({
 		name: options.name ?? "tangle-sandbox",
-		version: options.version ?? SDK_VERSION
+		version: options.version ?? "1.0.190"
 	}, { capabilities: { tools: {} } });
 	server.setRequestHandler(typesModule.ListToolsRequestSchema, async () => ({ tools: bindings.map(({ spec: s }) => ({
 		name: s.name,

package/dist/runtime.js

@@ -1,7 +1,7 @@
 import { I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, c as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-C876Pjaj.js";
 import { n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-DHIS8edi.js";
 import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, d as FileWriteConflictError, g as NotFoundError, h as NetworkError, s as CapabilityError, v as ProfileFileMountPathError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { t as fetchSandboxApi } from "./api-request-D4Ln_0F5.js";
+import { n as fetchSandboxApi } from "./api-request-CZlFy3ku.js";
 import { s as uploadChunked } from "./chunked-upload-vAE2hVcP.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "1.0.189",
+  "version": "1.0.190",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -153,15 +153,15 @@
     "vitest": "^4.1.12",
     "ws": "^8.22.0",
     "yjs": "13.6.33",
-    "@repo/shared": "0.0.0",
-    "@tangle-network/agent-profile-materialize": "0.27.1",
     "@products/sandbox-test-utils": "0.0.0",
+    "@repo/shared": "0.0.0",
     "@tangle-network/cli-agent-registry": "0.15.0",
+    "@tangle-network/agent-profile-materialize": "0.27.1",
     "@tangle-network/runtime-contracts": "0.20.0"
   },
   "tangleRelease": {
-    "sourceSha": "95cc18d3d20f03f9c92c9d314a30ef192a8a57a9",
-    "mergedAt": "2026-11-02T03:27:15-08:00"
+    "sourceSha": "f41fd1645824c17db6abeca83a9637311792837d",
+    "mergedAt": "2026-11-02T07:52:44-08:00"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",