@tangle-network/sandbox 1.0.189 → 1.0.191

package/README.md

@@ -15,6 +15,13 @@ export TANGLE_API_KEY=sk-tan-...
 export SANDBOX_BASE_URL=https://sandbox.tangle.tools
 ```
 
+## Supported versions
+
+The oldest supported SDK is `@tangle-network/sandbox@1.0.151`, the first version that accepts a capability or enum value it does not know instead of refusing the whole response.
+Older versions fail when the Sandbox API advertises a new value; upgrade to this version or later.
+This line is the one place the floor is stated: the production journey (`scripts/production-journey.sh`) reads it and runs every cell's journey on it.
+Every request from the [shared raw transport](src/lib/api-request.mjs) and the Python SDK sends `x-sdk-version: <package version>`, and the Sandbox Worker's invocation log records it as `$workers.event.request.headers.x-sdk-version`, so the versions customers run can be counted.
+
 ## Choose an entrypoint
 
 | Need | Import |

package/dist/agent/index.d.ts

@@ -1,7 +1,7 @@
-import { I as SandboxTaskSession, O as SandboxInstance, R as SandboxSession } from "../index-DDIymnCZ.js";
-import { Bt as SandboxFleetParent, Ha as CodeExecutionResult, Ua as CodeLanguage, Ur as CodeExecutionOptions, Wa as CodeResultPart, ga as BackendConfig, ia as SessionListOptions, na as SessionInfo, wo as BackendType } from "../types-B-UsXSi6.js";
-import { t as Sandbox } from "../client-C4SnCCpF.js";
-import { u as PreviewAuthorizer } from "../preview-DUxqnKSk.js";
+import { I as SandboxTaskSession, O as SandboxInstance, R as SandboxSession } from "../index-DKsOu5sq.js";
+import { Bt as SandboxFleetParent, Ha as CodeExecutionResult, Ua as CodeLanguage, Ur as CodeExecutionOptions, Wa as CodeResultPart, ga as BackendConfig, ia as SessionListOptions, na as SessionInfo, wo as BackendType } from "../types-CiuGb4lZ.js";
+import { t as Sandbox } from "../client-yWdLuj_P.js";
+import { u as PreviewAuthorizer } from "../preview-I1z42VGY.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 import { JSONSchema } from "zod/v4/core";
 import { ToolSet } from "ai";

package/dist/agent/index.js

@@ -1,8 +1,8 @@
-import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-Cqf4Lpp0.js";
-import { O as assertCurrentBackendType } from "../interactive-controller-C876Pjaj.js";
-import { t as SandboxInstance } from "../sandbox-B_Xbc9wR.js";
-import { C as StateError, E as ValidationError, g as NotFoundError } from "../errors-CaX0a5Ry.js";
-import { t as Sandbox } from "../client-CwWS3a-i.js";
+import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-Dler9R_s.js";
+import { O as assertCurrentBackendType } from "../interactive-controller-jr3_74Pq.js";
+import { t as SandboxInstance } from "../sandbox-Dtb-_btd.js";
+import { D as ValidationError, _ as NotFoundError, w as StateError } from "../errors-Mzq10WZq.js";
+import { t as Sandbox } from "../client-XjkuWhog.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();
@@ -107,7 +107,10 @@ var SandboxAgentManager = class {
 	}
 	async startPrepared(spec) {
 		if (spec.callerSelectedId) {
-			if (await this.sandbox.session(spec.id).status()) throw new StateError(`Agent ${spec.id} already exists; use box.agents.get("${spec.id}") to reattach or choose a new id`, "existing-agent", "new-agent-id");
+			if (await this.sandbox.session(spec.id).status()) throw new StateError(`Agent ${spec.id} already exists; use box.agents.get("${spec.id}") to reattach or choose a new id`, {
+				currentState: "existing-agent",
+				requiredState: "new-agent-id"
+			});
 		}
 		if (spec.workspace.mode === "isolated") return (await this.sandbox.createTaskSession({
 			sessionId: spec.id,

package/dist/agent/preview.d.ts

@@ -1,2 +1,2 @@
-import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-DUxqnKSk.js";
+import { _ as publishAgentPreview, a as previewOperationTool, c as AgentPreviewOptions, d as PreviewExecutionContext, f as PublishAgentPreviewOptions, g as listAgentPreviews, h as getAgentPreview, i as PreviewTool, l as PreviewAuthorizationRequest, m as ensureAgentPreview, n as PREVIEW_MCP_ALIAS, o as previewToolsForProfile, p as assertPreviewId, r as PREVIEW_TOOLS, s as AgentPreviewError, t as servePreviewMcp, u as PreviewAuthorizer, v as removeAgentPreview, y as resolveSelfSandbox } from "../preview-I1z42VGY.js";
 export { AgentPreviewError, AgentPreviewOptions, PREVIEW_MCP_ALIAS, PREVIEW_TOOLS, PreviewAuthorizationRequest, PreviewAuthorizer, PreviewExecutionContext, PreviewTool, PublishAgentPreviewOptions, assertPreviewId, ensureAgentPreview, getAgentPreview, listAgentPreviews, previewOperationTool, previewToolsForProfile, publishAgentPreview, removeAgentPreview, resolveSelfSandbox, servePreviewMcp };

package/dist/agent/preview.js

@@ -66,7 +66,7 @@ async function servePreviewMcp(request, config) {
 	if (typeof config.authorize !== "function") throw new Error("Preview MCP requires a host authorization callback");
 	const tools = config.tools ?? PREVIEW_TOOLS;
 	if (!tools.length || tools.some((tool) => !PREVIEW_TOOLS.includes(tool))) throw new Error("Preview MCP requires an explicit nonempty preview-only tool grant");
-	const [{ createMcpServer }, { WebStandardStreamableHTTPServerTransport }] = await Promise.all([import("../mcp-local-Cqf4Lpp0.js").then((n) => n.n), import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js")]);
+	const [{ createMcpServer }, { WebStandardStreamableHTTPServerTransport }] = await Promise.all([import("../mcp-local-Dler9R_s.js").then((n) => n.n), import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js")]);
 	const handle = await createMcpServer(config.box, {
 		name: "tangle-previews",
 		sessionId: config.sessionId,

package/dist/{agent-run-outcome-Cst4px_l.d.ts → agent-run-outcome-BO5paRhX.d.ts}

@@ -1,5 +1,5 @@
-import { V as InteractionRequest } from "./terminal-stream-types-1YKRrkZB.js";
-import { Di as SandboxEvent, _i as DurablePlanSnapshot, ci as AgentApprovalRequirement, di as AgentToolInvocation, li as AgentQuestionRequest, ui as AgentRunStatus } from "./types-B-UsXSi6.js";
+import { V as InteractionRequest } from "./terminal-stream-types-BqNv5EuG.js";
+import { Di as SandboxEvent, _i as DurablePlanSnapshot, ci as AgentApprovalRequirement, di as AgentToolInvocation, li as AgentQuestionRequest, ui as AgentRunStatus } from "./types-CiuGb4lZ.js";
 
 //#region src/agent-run-outcome.d.ts
 interface AgentRunOutcome {

package/dist/{api-request-D4Ln_0F5.js → api-request-BvpTwQKs.js}

@@ -1,5 +1,7 @@
 import { t as rewrapResponse } from "./response-rewrap-Cjoxh2wZ.js";
 //#region src/lib/api-request.mjs
+/** The package version tsdown.config.ts defines; unbuilt source reports 0.0.0. */
+const SDK_VERSION = "1.0.191";
 function withRequestContextHeaders(response, path, method, body = response.body) {
 	const headers = new Headers(response.headers);
 	headers.set("x-tangle-request-path", path);
@@ -27,6 +29,7 @@ async function fetchSandboxApi({ baseUrl, apiKey, timeoutMs = 3e4, signal, fetch
 	try {
 		const headers = new Headers(options?.headers);
 		headers.set("Authorization", `Bearer ${apiKey}`);
+		headers.set("x-sdk-version", SDK_VERSION);
 		const isFormDataBody = typeof FormData !== "undefined" && options?.body instanceof FormData;
 		if (!headers.has("Content-Type") && !isFormDataBody) headers.set("Content-Type", "application/json");
 		const response = await fetchImpl(url, {
@@ -86,4 +89,4 @@ async function fetchSandboxApi({ baseUrl, apiKey, timeoutMs = 3e4, signal, fetch
 	}
 }
 //#endregion
-export { fetchSandboxApi as t };
+export { fetchSandboxApi as n, SDK_VERSION as t };

package/dist/{browser-interactive-control-controller-DHIS8edi.js → browser-interactive-control-controller-BYbNLahH.js}

@@ -1,5 +1,5 @@
 import { C as boundedIdentifierSchema, D as isBoundedEventContentJson, E as boundedStringSchema, S as boundedEventContentStringSchema, T as boundedJsonSchema, _ as CONTRACT_MAX_ARRAY_LENGTH, b as boundedEventContentJsonSchema, g as sha256DigestSchema, h as omitTopLevelDigest, m as looksLikeCredential, n as REASONING_EFFORTS, o as canonicalCandidateDigest, p as isWellFormedUnicode, s as canonicalCandidateJson, t as harnessTypeSchema, u as isCanonicalJsonValue, w as boundedJsonRecordSchema, x as boundedEventContentRecordSchema, y as CONTRACT_MAX_STRING_LENGTH } from "./harness-DMaNgn0S.js";
-import { n as awaitWithAbort } from "./abort-signal-PgWPMn_e.js";
+import { n as awaitWithAbort } from "./abort-signal-Cu4F2VVz.js";
 import { z } from "zod";
 //#region ../../../node_modules/.pnpm/@tangle-network+agent-interface@5.10.13/node_modules/@tangle-network/agent-interface/dist/native-session-event.js
 /**

package/dist/{browser-interactive-control-controller-DIvMQyer.d.ts → browser-interactive-control-controller-KOK6qn2s.d.ts}

@@ -1,4 +1,4 @@
-import { A as AgentInteractiveSessionStatus, C as AgentInteractiveSessionAttach, E as AgentInteractiveSessionControlClaimRequest, T as AgentInteractiveSessionControlClaimAcknowledgement, i as TerminalStreamHandlers, k as AgentInteractiveSessionRef, w as AgentInteractiveSessionControlClaim } from "./terminal-stream-types-1YKRrkZB.js";
+import { A as AgentInteractiveSessionStatus, C as AgentInteractiveSessionAttach, E as AgentInteractiveSessionControlClaimRequest, T as AgentInteractiveSessionControlClaimAcknowledgement, i as TerminalStreamHandlers, k as AgentInteractiveSessionRef, w as AgentInteractiveSessionControlClaim } from "./terminal-stream-types-BqNv5EuG.js";
 
 //#region src/interactive-types.d.ts
 /** Cancellation for an interactive SDK request. */

package/dist/{chunked-upload-vAE2hVcP.js → chunked-upload-D5ytV_s6.js}

@@ -1,6 +1,6 @@
-import { i as FILE_UPLOAD_SESSION_MAX_BYTES, n as isFileTooLargeErrorBody, r as isPayloadTooLargeErrorBody } from "./file-transfer-DTHgLccV.js";
-import { S as ServerError, T as TimeoutError, h as NetworkError, n as parseErrorResponse, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { t as abortableSleep } from "./abort-signal-PgWPMn_e.js";
+import { S as SandboxError, n as isTransientWrite, r as parseErrorResponse } from "./errors-Mzq10WZq.js";
+import { t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
+import { i as FILE_UPLOAD_SESSION_MAX_BYTES, n as isFileTooLargeErrorBody, r as isPayloadTooLargeErrorBody } from "./file-transfer-Cr9Ossea.js";
 //#region src/generated/sandbox-upload-operations.ts
 function uploadSessionInit(transport, input, init = {}) {
 	return transport.fetch(`/fs/upload-session`, {
@@ -50,15 +50,8 @@ const RETRY_MAX_MS = 2e3;
 *  staging budget. */
 const DEFAULT_UPLOAD_CONCURRENCY = 4;
 const MAX_UPLOAD_CONCURRENCY = 8;
-/** Transient part-upload failures worth retrying: rate-limit/budget (429),
-*  5xx, transport (network), and request timeouts — mirrors
-*  `isTransientWriteError` in `sandbox.ts`. A non-transient error (bad path,
-*  auth, checksum, containment) fails loud immediately. */
-function isTransientUploadError(rejection) {
-	return rejection instanceof QuotaError || rejection instanceof ServerError || rejection instanceof NetworkError || rejection instanceof TimeoutError;
-}
 function isChecksumMismatch(rejection) {
-	return rejection instanceof SandboxError && rejection.code === "CHECKSUM_MISMATCH";
+	return rejection instanceof SandboxError && rejection.wireCode === "CHECKSUM_MISMATCH";
 }
 /** Cheap size probe used for the pre-flight cap check, read directly off
 *  the input shape (`Blob.size` / `ArrayBuffer.byteLength` / view
@@ -223,7 +216,7 @@ async function putPart(transport, uploadId, index, options, wire) {
 			if (!response.ok) throw await parseUploadError(response);
 			return;
 		} catch (err) {
-			if (isTransientUploadError(err) && attempt < maxRetries) {
+			if (isTransientWrite(err) && attempt < maxRetries) {
 				const retryAfterMs = err instanceof SandboxError ? err.retryAfterMs : void 0;
 				const backoff = Math.min(RETRY_BASE_MS * 2 ** attempt, RETRY_MAX_MS);
 				await abortableSleep(retryAfterMs ?? backoff, options.signal);
@@ -339,7 +332,10 @@ async function abortSession(transport, uploadId) {
 */
 async function uploadChunked(transport, remotePath, data, options = {}) {
 	const estimatedSize = sizeOfInput(data);
-	if (estimatedSize > 67108864) throw new SandboxError(`Payload for ${remotePath} is ${estimatedSize} bytes, over the ${FILE_UPLOAD_SESSION_MAX_BYTES} byte chunked-upload session cap`, "PAYLOAD_TOO_LARGE", 413);
+	if (estimatedSize > 67108864) throw new SandboxError(`Payload for ${remotePath} is ${estimatedSize} bytes, over the ${FILE_UPLOAD_SESSION_MAX_BYTES} byte chunked-upload session cap`, {
+		code: "PAYLOAD_TOO_LARGE",
+		status: 413
+	});
 	options.signal?.throwIfAborted();
 	const bytes = await normalizeToBytes(data);
 	options.signal?.throwIfAborted();

package/dist/{chunked-upload-file-HLSriv3V.js → chunked-upload-file-DL1-AqRp.js}

@@ -1,5 +1,5 @@
-import { i as FILE_UPLOAD_SESSION_MAX_BYTES } from "./file-transfer-DTHgLccV.js";
-import { a as planCompression, i as partCount, n as commitSession, o as putPart, r as initUploadSession, t as abortSession } from "./chunked-upload-vAE2hVcP.js";
+import { i as FILE_UPLOAD_SESSION_MAX_BYTES } from "./file-transfer-Cr9Ossea.js";
+import { a as planCompression, i as partCount, n as commitSession, o as putPart, r as initUploadSession, t as abortSession } from "./chunked-upload-D5ytV_s6.js";
 import { createHash } from "node:crypto";
 import { open } from "node:fs/promises";
 //#region src/lib/chunked-upload-file.ts