@tangle-network/sandbox 1.0.189 → 1.0.191

package/dist/{client-CwWS3a-i.js → client-XjkuWhog.js}

@@ -1,13 +1,13 @@
-import { A as normalizeRuntimeBackendConfig, D as applyRequestedModel, E as isBrowserRuntime, H as backendTypeSchema, N as withProfileHarness, O as assertCurrentBackendType, P as withoutCreateOnlyModelFields, S as encodePromptForWire, o as requestInteractiveSessionToken } from "./interactive-controller-C876Pjaj.js";
+import { A as normalizeRuntimeBackendConfig, D as applyRequestedModel, E as isBrowserRuntime, H as backendTypeSchema, N as withProfileHarness, O as assertCurrentBackendType, P as withoutCreateOnlyModelFields, S as encodePromptForWire, o as requestInteractiveSessionToken } from "./interactive-controller-jr3_74Pq.js";
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, F as normalizeConnection, G as extendableDeadline, I as normalizeEgressPolicyFields, J as isDeployWindowCreateError, K as generateIdempotencyKey, L as normalizeProxySecretReceipt, N as dateOf, O as isRetryableProfileFileMaterializeFailure, P as parseLifecycleTimes, R as normalizeSandboxShape, T as splitInlineProfileFileMounts, U as DEPLOY_WINDOW_RETRY_MS, W as createRetryDelayMs, X as isRetryableCreateError, Y as isRateLimitCreateError, d as sandboxLedgerUsd, j as normalizeStartupDiagnostics, k as normalizeCaptureProof, n as createSandboxInstanceFromResponse, o as exportTraceBundle, q as isCapacityShortageCreateError, z as CAPACITY_ETA_MARGIN_MS } from "./sandbox-B_Xbc9wR.js";
-import { l as SANDBOX_AGENT_HOME, t as isInsideReservedDir } from "./file-transfer-DTHgLccV.js";
-import { E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, g as NotFoundError, h as NetworkError, i as readResponseJson, n as parseErrorResponse, r as parseResponseError, x as SandboxError } from "./errors-CaX0a5Ry.js";
-import { r as combineAbortSignals, t as abortableSleep } from "./abort-signal-PgWPMn_e.js";
-import { t as fetchSandboxApi } from "./api-request-D4Ln_0F5.js";
-import { n as fetchWithKeepAlive } from "./keep-alive-fetch-C2lFwrMA.js";
+import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, F as normalizeConnection, G as extendableDeadline, I as normalizeEgressPolicyFields, J as isDeployWindowCreateError, K as generateIdempotencyKey, L as normalizeProxySecretReceipt, N as dateOf, O as isRetryableProfileFileMaterializeFailure, P as parseLifecycleTimes, R as normalizeSandboxShape, T as splitInlineProfileFileMounts, U as DEPLOY_WINDOW_RETRY_MS, W as createRetryDelayMs, X as isRetryableCreateError, Y as isRateLimitCreateError, d as sandboxLedgerUsd, j as normalizeStartupDiagnostics, k as normalizeCaptureProof, n as createSandboxInstanceFromResponse, o as exportTraceBundle, q as isCapacityShortageCreateError, z as CAPACITY_ETA_MARGIN_MS } from "./sandbox-Dtb-_btd.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, a as readResponseJson, g as NetworkError, i as parseResponseError, o as retryWhen, r as parseErrorResponse, s as AuthError, v as PartialFailureError } from "./errors-Mzq10WZq.js";
+import { r as combineAbortSignals, t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
+import { l as SANDBOX_AGENT_HOME, t as isInsideReservedDir } from "./file-transfer-Cr9Ossea.js";
+import { n as fetchSandboxApi } from "./api-request-BvpTwQKs.js";
+import { n as fetchWithKeepAlive, t as emitTiming } from "./keep-alive-fetch-C2lFwrMA.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { t as LinesClient } from "./lines-DxHJhxCe.js";
+import { t as LinesClient } from "./lines-DrG0WOW6.js";
 import { PublicTemplatesClient } from "./public-templates.js";
 import { z } from "zod";
 //#region ../../../packages/runtime-contracts/dist/git-policy.js
@@ -760,11 +760,12 @@ function validateBatchRunRequest(request) {
 	const issue = rootIssue ? requestValidationIssue(rootIssue, request.persistent === true) : void 0;
 	if (!issue) throw new ValidationError("Invalid batch request");
 	const path = formatIssuePath(issue.path.length === 0 && issue.code === "unrecognized_keys" ? [issue.keys?.[0] ?? "request"] : issue.path);
-	throw new ValidationError(path ? `${path}: ${issue.message}` : issue.message, path ? { [path]: issue.message } : void 0);
+	throw new ValidationError(path ? `${path}: ${issue.message}` : issue.message, { fields: path ? { [path]: issue.message } : void 0 });
 }
 function mapBatchStreamError(error) {
 	if (!(error instanceof BatchStreamError)) throw error;
-	if (error.kind === "failed") throw new ServerError(error.message, 500, {
+	if (error.kind === "failed") throw new ServerError(error.message, {
+		status: 500,
 		endpoint: BATCH_RUN_PATH,
 		origin: "sandbox-api"
 	});
@@ -887,7 +888,7 @@ var IntelligenceClient = class {
 		while (true) {
 			const report = await this.getReport(jobId);
 			if (report.status === "completed" || report.status === "failed") return report;
-			if (Date.now() >= deadline) throw new TimeoutError(options.timeoutMs ?? 6e4);
+			if (Date.now() >= deadline) throw new TimeoutError(`Request timed out after ${options.timeoutMs ?? 6e4}ms`, { timeoutMs: options.timeoutMs ?? 6e4 });
 			await new Promise((resolve) => setTimeout(resolve, Math.min(pollMs, Math.max(0, deadline - Date.now()))));
 		}
 	}
@@ -936,10 +937,12 @@ const backendRegistryResponseSchema = z.object({
 	timestamp: z.string().datetime()
 });
 function invalidBackendRegistry(message) {
-	throw new ServerError(message, 502, {
+	throw new ServerError(message, {
+		status: 502,
 		origin: "sandbox-api",
-		endpoint: "/v1/backends"
-	}, "INVALID_BACKEND_REGISTRY");
+		endpoint: "/v1/backends",
+		code: "INVALID_BACKEND_REGISTRY"
+	});
 }
 /**
 * Validate required registry fields and ignore fields from newer API versions.
@@ -1293,7 +1296,7 @@ var SandboxTransport = class {
 	}
 	/** Fetch a Platform API path (e.g. the agent-profile catalog) with this key. */
 	async platformFetch(path, options) {
-		if (!this.platformUrl) throw new ValidationError("platformUrl is required for Platform calls when baseUrl is not https://sandbox.tangle.tools", { platformUrl: "required" });
+		if (!this.platformUrl) throw new ValidationError("platformUrl is required for Platform calls when baseUrl is not https://sandbox.tangle.tools", { fields: { platformUrl: "required" } });
 		const headers = new Headers(options?.headers);
 		if (!headers.has("Authorization")) headers.set("Authorization", `Bearer ${this.#apiKey}`);
 		return fetch(`${this.platformUrl}${path}`, {
@@ -1309,8 +1312,9 @@ var SandboxTransport = class {
 			apiKey: this.#apiKey,
 			timeoutMs: this.timeoutMs,
 			signal: this.signal,
-			timeoutError: (ms) => new TimeoutError(ms),
-			networkError: (err) => new NetworkError(`Failed to connect to Sandbox API: ${err instanceof Error ? err.message : String(err)}`, err instanceof Error ? err : void 0, {
+			timeoutError: (ms) => new TimeoutError(`Request timed out after ${ms}ms`, { timeoutMs: ms }),
+			networkError: (err) => new NetworkError(`Failed to connect to Sandbox API: ${err instanceof Error ? err.message : String(err)}`, {
+				cause: err instanceof Error ? err : void 0,
 				endpoint: path,
 				origin: "sandbox-api"
 			}),
@@ -1387,10 +1391,12 @@ const OUTCOMES = new Set([
 	"failed"
 ]);
 function invalidDeleteMatching(message) {
-	throw new ServerError(`Sandbox API answered delete-matching with ${message}`, 502, {
+	throw new ServerError(`Sandbox API answered delete-matching with ${message}`, {
+		status: 502,
 		origin: "sandbox-api",
-		endpoint: DELETE_MATCHING_PATH
-	}, "INVALID_DELETE_MATCHING_RESPONSE");
+		endpoint: DELETE_MATCHING_PATH,
+		code: "INVALID_DELETE_MATCHING_RESPONSE"
+	});
 }
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -1479,7 +1485,9 @@ var SandboxManagement = class extends SandboxTransport {
 	*/
 	async waitForRunning(id, options) {
 		const instance = await this.get(id);
-		if (!instance) throw new NotFoundError("Sandbox", id, {
+		if (!instance) throw new NotFoundError(`Sandbox not found: ${id}`, {
+			resourceType: "Sandbox",
+			resourceId: id,
 			endpoint: `/v1/sandboxes/${id}`,
 			origin: "sandbox-api"
 		});
@@ -1651,7 +1659,10 @@ var SandboxManagement = class extends SandboxTransport {
 	*/
 	async shapes() {
 		const data = await readResponseJson(await this.fetch("/v1/shapes"));
-		if (!Array.isArray(data?.presets) || typeof data.default !== "string" || !data.ceiling || typeof data.ceiling.cpuCores !== "number" || typeof data.ceiling.memoryMB !== "number" || typeof data.ceiling.diskGB !== "number") throw new SandboxError("GET /v1/shapes returned no usable shape catalogue", "INVALID_RESPONSE", 502);
+		if (!Array.isArray(data?.presets) || typeof data.default !== "string" || !data.ceiling || typeof data.ceiling.cpuCores !== "number" || typeof data.ceiling.memoryMB !== "number" || typeof data.ceiling.diskGB !== "number") throw new SandboxError("GET /v1/shapes returned no usable shape catalogue", {
+			code: "INVALID_RESPONSE",
+			status: 502
+		});
 		return data;
 	}
 	/**
@@ -1892,7 +1903,11 @@ var SandboxCreation = class extends SandboxManagement {
 			const spentBudget = elapsedMs >= budgetMs;
 			const preamble = spentBudget ? `Sandbox create did not complete within ${budgetMs}ms. ` : `Sandbox create ended after ${elapsedMs}ms of its ${budgetMs}ms budget. `;
 			const earlyExit = spentBudget || lastServerError?.retryAfterMs === void 0 ? "" : `The server asked for a ${Math.ceil(lastServerError.retryAfterMs / 1e3)}s wait, which the remaining budget cannot cover. `;
-			return new TimeoutError(budgetMs, preamble + (lastServerError ? `The last attempt failed with ${lastServerError.code}${lastServerError.status === void 0 ? "" : ` (HTTP ${lastServerError.status})`}: ${lastServerError.message}. ` : "") + earlyExit + `The provision may still be running server-side; retry create() with idempotencyKey="${idempotencyKey}" to join it.`, metadata, lastServerError);
+			return new TimeoutError(preamble + (lastServerError ? `The last attempt failed with ${lastServerError.code}${lastServerError.status === void 0 ? "" : ` (HTTP ${lastServerError.status})`}: ${lastServerError.message}. ` : "") + earlyExit + `The provision may still be running server-side; retry create() with idempotencyKey="${idempotencyKey}" to join it.`, {
+				timeoutMs: budgetMs,
+				...metadata,
+				cause: lastServerError
+			});
 		};
 		const sleepBeforeRetry = async (delayMs) => {
 			try {
@@ -1903,6 +1918,13 @@ var SandboxCreation = class extends SandboxManagement {
 			}
 		};
 		const waitBeforeRetry = async (cause, failedAttempt) => {
+			if (cause instanceof SandboxError) emitTiming(this.onTiming, {
+				name: "sdk.retry",
+				durMs: 0,
+				desc: `${cause.wireCode} retry-after=${cause.retryAfterMs ?? "none"}`,
+				path: "/v1/sandboxes",
+				status: cause.status
+			});
 			if (isPacedCreateError(cause)) {
 				const delayMs = Math.max(createRetryDelayMs(cause, failedAttempt), 250);
 				if (delayMs >= deployWindowDeadline - Date.now()) throw deployWindowDeadline === deadline ? createTimeoutError() : cause;
@@ -1911,7 +1933,7 @@ var SandboxCreation = class extends SandboxManagement {
 			}
 			const delayMs = createRetryDelayMs(cause, failedAttempt);
 			if (cause instanceof SandboxError && delayMs >= deadline - Date.now()) {
-				if (proxyTimedOutCreate && cause.code === "IDEMPOTENT_CREATE_IN_PROGRESS") throw createTimeoutError();
+				if (proxyTimedOutCreate && cause.wireCode === "IDEMPOTENT_CREATE_IN_PROGRESS") throw createTimeoutError();
 				throw cause;
 			}
 			await sleepBeforeRetry(delayMs);
@@ -1922,7 +1944,7 @@ var SandboxCreation = class extends SandboxManagement {
 			if (!isRetryableCreateError(error)) return true;
 			if (options?.retry?.capacity === false && error instanceof SandboxError && error.code === "CAPACITY_EXHAUSTED") return true;
 			if (isPacedCreateError(error)) return false;
-			if (proxyTimedOutCreate && error instanceof SandboxError && error.code === "IDEMPOTENT_CREATE_IN_PROGRESS") return false;
+			if (proxyTimedOutCreate && error instanceof SandboxError && error.wireCode === "IDEMPOTENT_CREATE_IN_PROGRESS") return false;
 			shortBudgetFailures += 1;
 			return shortBudgetFailures >= 5;
 		};
@@ -1949,7 +1971,7 @@ var SandboxCreation = class extends SandboxManagement {
 			const error = parseErrorResponse(response.status, body, { allPreviousCreateAttemptsRefused }, response.headers);
 			if (response.status === 524) proxyTimedOutCreate = true;
 			allPreviousCreateAttemptsRefused = error.createFailureDisposition === "not-admitted";
-			if (error.code === "SANDBOX_CREATE_RECONCILING" && lastServerError && lastServerError.code !== "SANDBOX_CREATE_RECONCILING") throw lastServerError;
+			if (error.wireCode === "SANDBOX_CREATE_RECONCILING" && lastServerError && lastServerError.wireCode !== "SANDBOX_CREATE_RECONCILING") throw lastServerError;
 			lastServerError = error;
 			if (requestOptions?.timeoutMs === void 0 && isCapacityShortageCreateError(error) && error.etaSeconds) {
 				const until = Math.min(startedAt + CAPACITY_ETA_WAIT_MAX_MS, Date.now() + error.etaSeconds * 1e3 + CAPACITY_ETA_MARGIN_MS);
@@ -1968,24 +1990,28 @@ var SandboxCreation = class extends SandboxManagement {
 		const data = await response.json();
 		const info = this.parseInfo(data);
 		const injectedSecrets = data.createReceipt?.injectedSecrets;
-		if (options?.requireNativeSessionCapture && (!info.captureProof || !info.createReceipt?.captureProof || JSON.stringify(info.captureProof) !== JSON.stringify(info.createReceipt.captureProof))) throw new PartialFailureError("The API did not confirm native session capture for the created container.", "NATIVE_CAPTURE_UNVERIFIED", 502, {
+		if (options?.requireNativeSessionCapture && (!info.captureProof || !info.createReceipt?.captureProof || JSON.stringify(info.captureProof) !== JSON.stringify(info.createReceipt.captureProof))) throw new PartialFailureError("The API did not confirm native session capture for the created container.", {
+			code: "NATIVE_CAPTURE_UNVERIFIED",
+			status: 502,
 			origin: "sandbox-api",
-			endpoint: "/v1/sandboxes"
-		}, [{
-			sandboxId: info.id,
-			idempotencyKey
-		}], void 0, {
+			endpoint: "/v1/sandboxes",
+			failures: [{
+				sandboxId: info.id,
+				idempotencyKey
+			}],
 			allocationId: info.id,
 			idempotencyKey,
 			createReceipt: info.createReceipt ?? null
 		});
-		if (options?.ownerContext === "isolated" && (info.createReceipt?.ownerContext !== "isolated" || injectedSecrets !== void 0 && (!Array.isArray(injectedSecrets) || injectedSecrets.length !== 0))) throw new PartialFailureError("The host did not confirm isolated owner context. No post-create work was started. Inspect the recorded sandbox and retry identity before allocating a replacement.", "SANDBOX_ISOLATION_UNVERIFIED", 502, {
+		if (options?.ownerContext === "isolated" && (info.createReceipt?.ownerContext !== "isolated" || injectedSecrets !== void 0 && (!Array.isArray(injectedSecrets) || injectedSecrets.length !== 0))) throw new PartialFailureError("The host did not confirm isolated owner context. No post-create work was started. Inspect the recorded sandbox and retry identity before allocating a replacement.", {
+			code: "SANDBOX_ISOLATION_UNVERIFIED",
+			status: 502,
 			origin: "sandbox-api",
-			endpoint: "/v1/sandboxes"
-		}, [{
-			sandboxId: info.id,
-			idempotencyKey
-		}], void 0, {
+			endpoint: "/v1/sandboxes",
+			failures: [{
+				sandboxId: info.id,
+				idempotencyKey
+			}],
 			allocationId: info.id,
 			idempotencyKey,
 			createReceipt: info.createReceipt ?? null
@@ -1999,13 +2025,16 @@ var SandboxCreation = class extends SandboxManagement {
 					signal: requestOptions?.signal
 				});
 			} catch (cause) {
-				throw new PartialFailureError(`Sandbox ${info.id} did not become ready: ${cause instanceof Error ? cause.message : String(cause)}`, "SANDBOX_CREATE_READINESS_FAILED", 502, {
+				throw new PartialFailureError(`Sandbox ${info.id} did not become ready: ${cause instanceof Error ? cause.message : String(cause)}`, {
+					code: "SANDBOX_CREATE_READINESS_FAILED",
+					status: 502,
 					origin: "sandbox-api",
-					endpoint: "/v1/sandboxes"
-				}, [{
-					sandboxId: info.id,
-					idempotencyKey
-				}], cause, {
+					endpoint: "/v1/sandboxes",
+					failures: [{
+						sandboxId: info.id,
+						idempotencyKey
+					}],
+					cause,
 					allocationId: info.id,
 					idempotencyKey,
 					createReceipt: info.createReceipt ?? null
@@ -2020,7 +2049,11 @@ var SandboxCreation = class extends SandboxManagement {
 					console.warn(`[sandbox.create] ${message}`);
 					return instance;
 				}
-				throw new PartialFailureError(message, "PROFILE_FILES_MATERIALIZE_INTERRUPTED", 502, void 0, paths.map((path) => ({ path })));
+				throw new PartialFailureError(message, {
+					code: "PROFILE_FILES_MATERIALIZE_INTERRUPTED",
+					status: 502,
+					failures: paths.map((path) => ({ path }))
+				});
 			}
 			try {
 				await instance.materializeProfileFiles(resolvedBackend.profile, void 0, "replace");
@@ -2032,7 +2065,12 @@ var SandboxCreation = class extends SandboxManagement {
 					return instance;
 				}
 				const retryable = isRetryableProfileFileMaterializeFailure(err);
-				throw new PartialFailureError(message, retryable ? "PROFILE_FILES_MATERIALIZE_INTERRUPTED" : "PROFILE_FILES_MATERIALIZE_FAILED", retryable ? 502 : 422, void 0, paths.map((path) => ({ path })), err);
+				throw new PartialFailureError(message, {
+					code: retryable ? "PROFILE_FILES_MATERIALIZE_INTERRUPTED" : "PROFILE_FILES_MATERIALIZE_FAILED",
+					status: retryable ? 502 : 422,
+					failures: paths.map((path) => ({ path })),
+					cause: err
+				});
 			}
 		}
 		if (deferredProfileForPriming !== void 0) try {
@@ -2114,7 +2152,7 @@ var SandboxBatch = class extends SandboxCreation {
 		const parsedIdempotencyKey = rawIdempotencyKey === void 0 ? void 0 : batchIdempotencyKeySchema.safeParse(rawIdempotencyKey);
 		if (parsedIdempotencyKey && !parsedIdempotencyKey.success) {
 			const issue = parsedIdempotencyKey.error.issues[0];
-			throw new ValidationError(`idempotencyKey: ${issue?.message ?? "Invalid batch idempotency key"}`, { idempotencyKey: issue?.message ?? "Invalid value" });
+			throw new ValidationError(`idempotencyKey: ${issue?.message ?? "Invalid batch idempotency key"}`, { fields: { idempotencyKey: issue?.message ?? "Invalid value" } });
 		}
 		let response;
 		try {
@@ -2131,7 +2169,8 @@ var SandboxBatch = class extends SandboxCreation {
 			});
 		} catch (err) {
 			if (userSignal?.aborted) throw err instanceof Error && err.name === "AbortError" ? err : new DOMException("Batch aborted", "AbortError");
-			throw new NetworkError(`Failed to connect to Sandbox API: ${err instanceof Error ? err.message : String(err)}`, err instanceof Error ? err : void 0, {
+			throw new NetworkError(`Failed to connect to Sandbox API: ${err instanceof Error ? err.message : String(err)}`, {
+				cause: err instanceof Error ? err : void 0,
 				endpoint: BATCH_RUN_PATH,
 				origin: "sandbox-api"
 			});
@@ -2194,7 +2233,10 @@ var SecretsManagerImpl = class {
 	}
 	async delete(name, options) {
 		const response = await this.client.fetch(`/v1/secrets/${encodeURIComponent(name)}${options?.expectedUpdatedAt ? `?${new URLSearchParams({ expectedUpdatedAt: options.expectedUpdatedAt })}` : ""}`, { method: "DELETE" });
-		if (response.status === 404) throw new NotFoundError("Secret", name);
+		if (response.status === 404) throw new NotFoundError(`Secret not found: ${name}`, {
+			resourceType: "Secret",
+			resourceId: name
+		});
 		if (!response.ok) throw await parseResponseError(response);
 	}
 };
@@ -2221,7 +2263,10 @@ var SshKeysManagerImpl = class {
 	}
 	async delete(id) {
 		const response = await this.client.fetch(`/v1/ssh-keys/${encodeURIComponent(id)}`, { method: "DELETE" });
-		if (response.status === 404) throw new NotFoundError("SSH key", id);
+		if (response.status === 404) throw new NotFoundError(`SSH key not found: ${id}`, {
+			resourceType: "SSH key",
+			resourceId: id
+		});
 		if (!response.ok) throw await parseResponseError(response);
 	}
 };
@@ -2399,20 +2444,20 @@ function createFleetId() {
 	throw new ValidationError("Fleet id generation requires global crypto");
 }
 function assertSafeId(value, label) {
-	if (value.length === 0 || value.length > 64 || !machineIdPattern.test(value)) throw new ValidationError(`${label} must be 1-64 characters and contain only letters, numbers, '.', '_' or '-'`, { [label]: "invalid" });
+	if (value.length === 0 || value.length > 64 || !machineIdPattern.test(value)) throw new ValidationError(`${label} must be 1-64 characters and contain only letters, numbers, '.', '_' or '-'`, { fields: { [label]: "invalid" } });
 }
 function assertUniqueMachineIds(machines) {
 	const seen = /* @__PURE__ */ new Set();
 	for (const machine of machines) {
 		assertSafeId(machine.machineId, "machineId");
-		if (seen.has(machine.machineId)) throw new ValidationError(`Duplicate machineId '${machine.machineId}' in fleet create request`, { machineId: "duplicate" });
+		if (seen.has(machine.machineId)) throw new ValidationError(`Duplicate machineId '${machine.machineId}' in fleet create request`, { fields: { machineId: "duplicate" } });
 		seen.add(machine.machineId);
 	}
 }
 function assertNoReservedMetadata(metadata, label) {
 	if (!metadata) return;
 	const reserved = Object.keys(metadata).find((key) => key.startsWith(RESERVED_METADATA_PREFIX));
-	if (reserved) throw new ValidationError(`${label} metadata key '${reserved}' is reserved by Tangle`, { metadata: "reserved" });
+	if (reserved) throw new ValidationError(`${label} metadata key '${reserved}' is reserved by Tangle`, { fields: { metadata: "reserved" } });
 }
 function mergeCreateOptions(defaults, machine) {
 	const { machineId: _machineId, metadata: _metadata, name: _name, role: _role, ...rest } = machine;
@@ -2465,9 +2510,9 @@ function mergeGpuLeaseOptions(defaults, machine) {
 function assertPolicy(machines, defaults, policy) {
 	const maxMachines = policy?.maxMachines ?? machines.length;
 	if (!Number.isInteger(maxMachines) || maxMachines <= 0) throw new ValidationError("policy.maxMachines must be a positive integer");
-	if (machines.length > maxMachines) throw new ValidationError(`Fleet create requested ${machines.length} machines but policy.maxMachines is ${maxMachines}`, { "policy.maxMachines": "exceeded" });
-	if (policy?.maxConcurrentCreates !== void 0 && (!Number.isInteger(policy.maxConcurrentCreates) || policy.maxConcurrentCreates <= 0)) throw new ValidationError("policy.maxConcurrentCreates must be a positive integer", { "policy.maxConcurrentCreates": "invalid" });
-	if (policy?.maxSpendUsd !== void 0 && (!Number.isFinite(policy.maxSpendUsd) || policy.maxSpendUsd < 0)) throw new ValidationError("policy.maxSpendUsd must be non-negative", { "policy.maxSpendUsd": "invalid" });
+	if (machines.length > maxMachines) throw new ValidationError(`Fleet create requested ${machines.length} machines but policy.maxMachines is ${maxMachines}`, { fields: { "policy.maxMachines": "exceeded" } });
+	if (policy?.maxConcurrentCreates !== void 0 && (!Number.isInteger(policy.maxConcurrentCreates) || policy.maxConcurrentCreates <= 0)) throw new ValidationError("policy.maxConcurrentCreates must be a positive integer", { fields: { "policy.maxConcurrentCreates": "invalid" } });
+	if (policy?.maxSpendUsd !== void 0 && (!Number.isFinite(policy.maxSpendUsd) || policy.maxSpendUsd < 0)) throw new ValidationError("policy.maxSpendUsd must be non-negative", { fields: { "policy.maxSpendUsd": "invalid" } });
 	let totalCpu = 0;
 	let totalMemoryMb = 0;
 	let totalStorageMb = 0;
@@ -2482,13 +2527,13 @@ function assertPolicy(machines, defaults, policy) {
 		totalAccelerators += resources?.accelerator?.count ?? (resources?.accelerator ? 1 : 0);
 		if (options.gpuLease) totalGpuLeaseMaxSpendUsd += options.gpuLease.maxSpendUsd;
 	}
-	if (policy?.maxTotalCpu !== void 0 && totalCpu > policy.maxTotalCpu) throw new ValidationError(`Fleet create requested ${totalCpu} CPU cores but policy.maxTotalCpu is ${policy.maxTotalCpu}`, { "policy.maxTotalCpu": "exceeded" });
-	if (policy?.maxTotalMemoryMb !== void 0 && totalMemoryMb > policy.maxTotalMemoryMb) throw new ValidationError(`Fleet create requested ${totalMemoryMb} MB RAM but policy.maxTotalMemoryMb is ${policy.maxTotalMemoryMb}`, { "policy.maxTotalMemoryMb": "exceeded" });
-	if (policy?.maxTotalStorageMb !== void 0 && totalStorageMb > policy.maxTotalStorageMb) throw new ValidationError(`Fleet create requested ${totalStorageMb} MB storage but policy.maxTotalStorageMb is ${policy.maxTotalStorageMb}`, { "policy.maxTotalStorageMb": "exceeded" });
-	if (policy?.maxTotalAccelerators !== void 0 && totalAccelerators > policy.maxTotalAccelerators) throw new ValidationError(`Fleet create requested ${totalAccelerators} accelerator devices but policy.maxTotalAccelerators is ${policy.maxTotalAccelerators}`, { "policy.maxTotalAccelerators": "exceeded" });
-	if (policy?.maxSpendUsd !== void 0 && totalGpuLeaseMaxSpendUsd > policy.maxSpendUsd) throw new ValidationError(`Fleet GPU lease max spend $${totalGpuLeaseMaxSpendUsd} exceeds policy.maxSpendUsd $${policy.maxSpendUsd}`, { "policy.maxSpendUsd": "exceeded" });
+	if (policy?.maxTotalCpu !== void 0 && totalCpu > policy.maxTotalCpu) throw new ValidationError(`Fleet create requested ${totalCpu} CPU cores but policy.maxTotalCpu is ${policy.maxTotalCpu}`, { fields: { "policy.maxTotalCpu": "exceeded" } });
+	if (policy?.maxTotalMemoryMb !== void 0 && totalMemoryMb > policy.maxTotalMemoryMb) throw new ValidationError(`Fleet create requested ${totalMemoryMb} MB RAM but policy.maxTotalMemoryMb is ${policy.maxTotalMemoryMb}`, { fields: { "policy.maxTotalMemoryMb": "exceeded" } });
+	if (policy?.maxTotalStorageMb !== void 0 && totalStorageMb > policy.maxTotalStorageMb) throw new ValidationError(`Fleet create requested ${totalStorageMb} MB storage but policy.maxTotalStorageMb is ${policy.maxTotalStorageMb}`, { fields: { "policy.maxTotalStorageMb": "exceeded" } });
+	if (policy?.maxTotalAccelerators !== void 0 && totalAccelerators > policy.maxTotalAccelerators) throw new ValidationError(`Fleet create requested ${totalAccelerators} accelerator devices but policy.maxTotalAccelerators is ${policy.maxTotalAccelerators}`, { fields: { "policy.maxTotalAccelerators": "exceeded" } });
+	if (policy?.maxSpendUsd !== void 0 && totalGpuLeaseMaxSpendUsd > policy.maxSpendUsd) throw new ValidationError(`Fleet GPU lease max spend $${totalGpuLeaseMaxSpendUsd} exceeds policy.maxSpendUsd $${policy.maxSpendUsd}`, { fields: { "policy.maxSpendUsd": "exceeded" } });
 	const maxLifetimeSeconds = Math.max(...machines.map((machine) => mergeCreateOptions(defaults, machine).maxLifetimeSeconds ?? 3600));
-	if (policy?.maxLifetimeSeconds !== void 0 && maxLifetimeSeconds > policy.maxLifetimeSeconds) throw new ValidationError(`Fleet create requested ${maxLifetimeSeconds}s max lifetime but policy.maxLifetimeSeconds is ${policy.maxLifetimeSeconds}`, { "policy.maxLifetimeSeconds": "exceeded" });
+	if (policy?.maxLifetimeSeconds !== void 0 && maxLifetimeSeconds > policy.maxLifetimeSeconds) throw new ValidationError(`Fleet create requested ${maxLifetimeSeconds}s max lifetime but policy.maxLifetimeSeconds is ${policy.maxLifetimeSeconds}`, { fields: { "policy.maxLifetimeSeconds": "exceeded" } });
 	for (const machine of machines) {
 		const options = mergeCreateOptions(defaults, machine);
 		assertMachineDescriptorPolicy(machine.machineId, options, policy);
@@ -2496,18 +2541,18 @@ function assertPolicy(machines, defaults, policy) {
 }
 function assertMachineDescriptorPolicy(machineId, options, policy) {
 	const driverType = options.driver?.type;
-	if (policy?.allowedDrivers && driverType && !policy.allowedDrivers.includes(driverType)) throw new ValidationError(`Fleet machine '${machineId}' requested driver '${driverType}' outside policy.allowedDrivers`, { "policy.allowedDrivers": "exceeded" });
+	if (policy?.allowedDrivers && driverType && !policy.allowedDrivers.includes(driverType)) throw new ValidationError(`Fleet machine '${machineId}' requested driver '${driverType}' outside policy.allowedDrivers`, { fields: { "policy.allowedDrivers": "exceeded" } });
 	const environment = options.environment;
-	if (policy?.allowedEnvironments && environment && !policy.allowedEnvironments.includes(environment)) throw new ValidationError(`Fleet machine '${machineId}' requested environment '${environment}' outside policy.allowedEnvironments`, { "policy.allowedEnvironments": "exceeded" });
+	if (policy?.allowedEnvironments && environment && !policy.allowedEnvironments.includes(environment)) throw new ValidationError(`Fleet machine '${machineId}' requested environment '${environment}' outside policy.allowedEnvironments`, { fields: { "policy.allowedEnvironments": "exceeded" } });
 	const templateId = options.templateId ?? options.publicTemplateId;
-	if (policy?.allowedTemplateIds && templateId && !policy.allowedTemplateIds.includes(templateId)) throw new ValidationError(`Fleet machine '${machineId}' requested template '${templateId}' outside policy.allowedTemplateIds`, { "policy.allowedTemplateIds": "exceeded" });
-	if (policy?.allowAccelerators === false && (options.resources?.accelerator?.count ?? (options.resources?.accelerator ? 1 : 0)) > 0) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but policy.allowAccelerators is false`, { "policy.allowAccelerators": "exceeded" });
+	if (policy?.allowedTemplateIds && templateId && !policy.allowedTemplateIds.includes(templateId)) throw new ValidationError(`Fleet machine '${machineId}' requested template '${templateId}' outside policy.allowedTemplateIds`, { fields: { "policy.allowedTemplateIds": "exceeded" } });
+	if (policy?.allowAccelerators === false && (options.resources?.accelerator?.count ?? (options.resources?.accelerator ? 1 : 0)) > 0) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but policy.allowAccelerators is false`, { fields: { "policy.allowAccelerators": "exceeded" } });
 	const acceleratorCount = options.resources?.accelerator?.count ?? (options.resources?.accelerator ? 1 : 0);
-	if (acceleratorCount > 0 && !options.gpuLease) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but gpuLease is missing`, { gpuLease: "required" });
-	if (acceleratorCount === 0 && options.gpuLease) throw new ValidationError(`Fleet machine '${machineId}' set gpuLease without resources.accelerator`, { gpuLease: "unexpected" });
+	if (acceleratorCount > 0 && !options.gpuLease) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but gpuLease is missing`, { fields: { gpuLease: "required" } });
+	if (acceleratorCount === 0 && options.gpuLease) throw new ValidationError(`Fleet machine '${machineId}' set gpuLease without resources.accelerator`, { fields: { gpuLease: "unexpected" } });
 	if (options.gpuLease) {
-		if (!Number.isFinite(options.gpuLease.maxSpendUsd) || options.gpuLease.maxSpendUsd <= 0) throw new ValidationError(`Fleet machine '${machineId}' gpuLease.maxSpendUsd must be positive`, { "gpuLease.maxSpendUsd": "invalid" });
-		if (!Number.isInteger(options.gpuLease.maxLifetimeSeconds) || options.gpuLease.maxLifetimeSeconds <= 0) throw new ValidationError(`Fleet machine '${machineId}' gpuLease.maxLifetimeSeconds must be a positive integer`, { "gpuLease.maxLifetimeSeconds": "invalid" });
+		if (!Number.isFinite(options.gpuLease.maxSpendUsd) || options.gpuLease.maxSpendUsd <= 0) throw new ValidationError(`Fleet machine '${machineId}' gpuLease.maxSpendUsd must be positive`, { fields: { "gpuLease.maxSpendUsd": "invalid" } });
+		if (!Number.isInteger(options.gpuLease.maxLifetimeSeconds) || options.gpuLease.maxLifetimeSeconds <= 0) throw new ValidationError(`Fleet machine '${machineId}' gpuLease.maxLifetimeSeconds must be a positive integer`, { fields: { "gpuLease.maxLifetimeSeconds": "invalid" } });
 	}
 }
 function calculateResourceTotals(machines, defaults) {
@@ -2624,13 +2669,13 @@ async function mapFleetItems(items, concurrency, fn) {
 }
 function assertArtifactPath(path) {
 	const home = SANDBOX_AGENT_HOME.split("/");
-	if (path.split("/").slice(0, home.length).join("/") !== "/home/agent") throw new ValidationError(`Fleet artifact path '${path}' must be under ${SANDBOX_AGENT_HOME}`, { path: "outside_workspace" });
-	if (path.includes("\0") || path.split("/").includes("..")) throw new ValidationError(`Fleet artifact path '${path}' must not contain traversal segments`, { path: "invalid" });
+	if (path.split("/").slice(0, home.length).join("/") !== "/home/agent") throw new ValidationError(`Fleet artifact path '${path}' must be under ${SANDBOX_AGENT_HOME}`, { fields: { path: "outside_workspace" } });
+	if (path.includes("\0") || path.split("/").includes("..")) throw new ValidationError(`Fleet artifact path '${path}' must not contain traversal segments`, { fields: { path: "invalid" } });
 }
 function assertArtifactSize(content, artifact) {
 	const maxBytes = artifact.maxBytes ?? 10485760;
-	if (!Number.isFinite(maxBytes) || maxBytes <= 0) throw new ValidationError("artifact.maxBytes must be a positive number", { maxBytes: "invalid" });
-	if (new TextEncoder().encode(content).byteLength > maxBytes) throw new ValidationError(`Fleet artifact '${artifact.path}' exceeded ${maxBytes} bytes`, { path: "too_large" });
+	if (!Number.isFinite(maxBytes) || maxBytes <= 0) throw new ValidationError("artifact.maxBytes must be a positive number", { fields: { maxBytes: "invalid" } });
+	if (new TextEncoder().encode(content).byteLength > maxBytes) throw new ValidationError(`Fleet artifact '${artifact.path}' exceeded ${maxBytes} bytes`, { fields: { path: "too_large" } });
 }
 function getMachineRole(info) {
 	const value = info.metadata?.[MACHINE_ROLE_META];
@@ -2646,7 +2691,7 @@ function getAgentSpecs(info) {
 	try {
 		return JSON.parse(value);
 	} catch {
-		throw new ValidationError(`Fleet sandbox ${info.id} has unreadable agent specs`, { metadata: "invalid" });
+		throw new ValidationError(`Fleet sandbox ${info.id} has unreadable agent specs`, { fields: { metadata: "invalid" } });
 	}
 }
 /** The per-turn backend for an agent: only what its spec sets. */
@@ -2667,7 +2712,7 @@ function agentBackend(spec) {
 */
 function withoutModelSecrets(model, agentId) {
 	const { apiKey, authFiles, ...rest } = model;
-	if (agentId !== void 0 && (apiKey !== void 0 || authFiles !== void 0)) throw new ValidationError(`Fleet agent '${agentId}' model carries a secret; name the sandbox env var that holds it with apiKeyEnv`, { model: "secret" });
+	if (agentId !== void 0 && (apiKey !== void 0 || authFiles !== void 0)) throw new ValidationError(`Fleet agent '${agentId}' model carries a secret; name the sandbox env var that holds it with apiKeyEnv`, { fields: { model: "secret" } });
 	return rest;
 }
 function isProfileRef(profile) {
@@ -2721,7 +2766,7 @@ var FleetClientTransport = class {
 		const body = await response.text();
 		if (!response.ok) throw parseErrorResponse(response.status, body, void 0, response.headers);
 		const data = JSON.parse(body);
-		if (!data.data?.id || !data.data.key) throw new ValidationError("Platform minted a fleet key without an id", { key: "invalid" });
+		if (!data.data?.id || !data.data.key) throw new ValidationError("Platform minted a fleet key without an id", { fields: { key: "invalid" } });
 		return {
 			id: data.data.id,
 			key: data.data.key
@@ -2734,7 +2779,7 @@ var FleetClientTransport = class {
 	*/
 	hostFor(fleetId) {
 		const key = this.#fleetKeys.get(fleetId);
-		if (!key) throw new ValidationError(`Fleet ${fleetId} is capped; drive its agents from the client that created it, so every charge counts against the cap`, { fleet: "key_unavailable" });
+		if (!key) throw new ValidationError(`Fleet ${fleetId} is capped; drive its agents from the client that created it, so every charge counts against the cap`, { fields: { fleet: "key_unavailable" } });
 		return this.client.withApiKey(key.key);
 	}
 	/** The budgeted key id a fleet's sandboxes carry, read from one of them. */
@@ -2769,7 +2814,7 @@ var FleetClientTransport = class {
 			spentUsd,
 			inFlightUsd,
 			reservedForChildrenUsd
-		].every(Number.isFinite)) throw new ValidationError(`Platform key ${keyId} returned no readable budget`, { key: "invalid" });
+		].every(Number.isFinite)) throw new ValidationError(`Platform key ${keyId} returned no readable budget`, { fields: { key: "invalid" } });
 		const remainingUsd = capUsd - spentUsd - inFlightUsd - reservedForChildrenUsd;
 		return {
 			capUsd,
@@ -2819,10 +2864,9 @@ var FleetClientTransport = class {
 				await this.deleteMachines(machines);
 				return;
 			}
-			if (!(response.status >= 500 || response.status === 429) || attempt >= DELETE_RETRY_DELAYS_MS.length) {
-				const body = await response.text().catch(() => "");
-				throw parseErrorResponse(response.status, body, void 0, response.headers);
-			}
+			const body = await response.text().catch(() => "");
+			const error = parseErrorResponse(response.status, body, void 0, response.headers);
+			if (!(retryWhen(error) && (error.status >= 500 || error.status === 429)) || attempt >= DELETE_RETRY_DELAYS_MS.length) throw error;
 			await new Promise((resolve) => setTimeout(resolve, DELETE_RETRY_DELAYS_MS[attempt]));
 		}
 	}
@@ -3164,20 +3208,20 @@ function resolveAgentsPerSandbox(placement) {
 	if (placement === "dedicated") return 1;
 	if (placement === "auto") return void 0;
 	const count = placement.agentsPerSandbox;
-	if (!Number.isSafeInteger(count) || count < 1) throw new ValidationError("placement.agentsPerSandbox must be a positive integer", { "placement.agentsPerSandbox": "invalid" });
+	if (!Number.isSafeInteger(count) || count < 1) throw new ValidationError("placement.agentsPerSandbox must be a positive integer", { fields: { "placement.agentsPerSandbox": "invalid" } });
 	return count;
 }
 function assertMemory(memoryMB) {
-	if (!Number.isFinite(memoryMB) || memoryMB <= 0) throw new ValidationError("Sandbox memoryMB must be a positive number", { memoryMB: "invalid" });
+	if (!Number.isFinite(memoryMB) || memoryMB <= 0) throw new ValidationError("Sandbox memoryMB must be a positive number", { fields: { memoryMB: "invalid" } });
 }
 /** Expand `agents: N` or an agent list into specs with ids and placement set. */
 function normalizeAgentSpecs(agents) {
 	const specs = typeof agents === "number" ? Array.from({ length: assertAgentCount(agents) }, () => ({})) : [...agents];
-	if (specs.length === 0) throw new ValidationError("A fleet needs at least one agent", { agents: "empty" });
+	if (specs.length === 0) throw new ValidationError("A fleet needs at least one agent", { fields: { agents: "empty" } });
 	const seen = /* @__PURE__ */ new Set();
 	return specs.map((spec, index) => {
 		const agentId = spec.agentId ?? `agent-${index}`;
-		if (seen.has(agentId)) throw new ValidationError(`Duplicate agentId '${agentId}'`, { agentId: "duplicate" });
+		if (seen.has(agentId)) throw new ValidationError(`Duplicate agentId '${agentId}'`, { fields: { agentId: "duplicate" } });
 		seen.add(agentId);
 		return {
 			...spec,
@@ -3187,7 +3231,7 @@ function normalizeAgentSpecs(agents) {
 	});
 }
 function assertAgentCount(count) {
-	if (!Number.isSafeInteger(count) || count < 1) throw new ValidationError("agents must be a positive integer", { agents: "invalid" });
+	if (!Number.isSafeInteger(count) || count < 1) throw new ValidationError("agents must be a positive integer", { fields: { agents: "invalid" } });
 	return count;
 }
 //#endregion
@@ -3401,11 +3445,11 @@ var SandboxFleet = class {
 	async *run(message, options = {}) {
 		const startedAt = Date.now();
 		const targets = options.agents ? options.agents.map((agentId) => this.agent(agentId)) : this.agents;
-		if (targets.length === 0) throw new ValidationError("Fleet run selected no agents", { agents: "empty" });
+		if (targets.length === 0) throw new ValidationError("Fleet run selected no agents", { fields: { agents: "empty" } });
 		const specs = this.agentSpecs();
 		const messageFor = (agent) => {
 			const resolved = (typeof message === "function" ? message(agent) : message) ?? specs[agent.agentId]?.task;
-			if (resolved === void 0) throw new ValidationError(`Fleet agent '${agent.agentId}' has no task and the run passed no message`, { message: "required" });
+			if (resolved === void 0) throw new ValidationError(`Fleet agent '${agent.agentId}' has no task and the run passed no message`, { fields: { message: "required" } });
 			return resolved;
 		};
 		const messages = new Map(targets.map((agent) => [agent.agentId, messageFor(agent)]));
@@ -3559,7 +3603,7 @@ var SandboxFleet = class {
 	* Only a capped fleet has a key; an uncapped fleet has nothing to meter.
 	*/
 	async spend() {
-		if (!this.keyId) throw new ValidationError(`Fleet ${this.fleetId} has no spend cap, so it has no metered key`, { policy: "uncapped" });
+		if (!this.keyId) throw new ValidationError(`Fleet ${this.fleetId} has no spend cap, so it has no metered key`, { fields: { policy: "uncapped" } });
 		return this.client.fleets.keySpend(this.keyId);
 	}
 	/**
@@ -3718,7 +3762,7 @@ var SandboxFleet = class {
 	* refuses it: its turns run through `run()`, `runAll()` or `prompt()`.
 	*/
 	assertUnbudgetedDispatch() {
-		if (this.keyId) throw new ValidationError(`Fleet ${this.fleetId} has a budget; prompt dispatch would bill outside it. Use run(), runAll() or prompt(machineId, …)`, { fleet: "budgeted" });
+		if (this.keyId) throw new ValidationError(`Fleet ${this.fleetId} has a budget; prompt dispatch would bill outside it. Use run(), runAll() or prompt(machineId, …)`, { fields: { fleet: "budgeted" } });
 	}
 	/** @internal */
 	coldStartGate(machineId) {
@@ -3732,13 +3776,13 @@ var SandboxFleet = class {
 	sandboxFor(machineId, options) {
 		const machine = this.get(machineId);
 		if (options?.control) return this.client.get(machine.id).then((box) => {
-			if (!box) throw new ValidationError(`Fleet machine '${machineId}' no longer exists`, { machineId: "not_found" });
+			if (!box) throw new ValidationError(`Fleet machine '${machineId}' no longer exists`, { fields: { machineId: "not_found" } });
 			return box;
 		});
 		const cached = this.boxes.get(machineId);
 		if (cached) return cached;
 		const pending = (this.keyId ? this.client.fleets.hostFor(this.fleetId) : this.client).get(machine.id).then((box) => {
-			if (!box) throw new ValidationError(`Fleet machine '${machineId}' no longer exists`, { machineId: "not_found" });
+			if (!box) throw new ValidationError(`Fleet machine '${machineId}' no longer exists`, { fields: { machineId: "not_found" } });
 			return box;
 		});
 		pending.catch(() => this.boxes.delete(machineId));
@@ -3757,7 +3801,7 @@ var SandboxFleetClient = class extends FleetClientTransport {
 			assertSafeId(input.parent.fleetId, "parent.fleetId");
 			assertSafeId(input.parent.agentId, "parent.agentId");
 		}
-		if (input.budgetUsd !== void 0 && (!Number.isFinite(input.budgetUsd) || input.budgetUsd <= 0)) throw new ValidationError("budgetUsd must be a positive number", { budgetUsd: "invalid" });
+		if (input.budgetUsd !== void 0 && (!Number.isFinite(input.budgetUsd) || input.budgetUsd <= 0)) throw new ValidationError("budgetUsd must be a positive number", { fields: { budgetUsd: "invalid" } });
 		const options = {
 			...input,
 			machines,
@@ -3771,7 +3815,7 @@ var SandboxFleetClient = class extends FleetClientTransport {
 		for (const machine of options.machines) assertNoReservedMetadata(machine.metadata, `Fleet machine '${machine.machineId}'`);
 		assertPolicy(options.machines, options.defaults, options.policy);
 		const maxConcurrentCreates = resolveMaxConcurrentCreates(options.maxConcurrentCreates);
-		if (options.policy?.maxConcurrentCreates !== void 0 && maxConcurrentCreates > options.policy.maxConcurrentCreates) throw new ValidationError(`Fleet create requested ${maxConcurrentCreates} concurrent creates but policy.maxConcurrentCreates is ${options.policy.maxConcurrentCreates}`, { "policy.maxConcurrentCreates": "exceeded" });
+		if (options.policy?.maxConcurrentCreates !== void 0 && maxConcurrentCreates > options.policy.maxConcurrentCreates) throw new ValidationError(`Fleet create requested ${maxConcurrentCreates} concurrent creates but policy.maxConcurrentCreates is ${options.policy.maxConcurrentCreates}`, { fields: { "policy.maxConcurrentCreates": "exceeded" } });
 		if (options.policy?.maxSpendUsd !== void 0) {
 			const estimate = await this.estimateCost({
 				defaults: options.defaults,
@@ -3779,16 +3823,16 @@ var SandboxFleetClient = class extends FleetClientTransport {
 				policy: options.policy,
 				maxConcurrentCreates
 			});
-			if (estimate.estimatedMaxLifetimeUsd > options.policy.maxSpendUsd) throw new ValidationError(`Fleet estimated max lifetime cost $${estimate.estimatedMaxLifetimeUsd} exceeds policy.maxSpendUsd $${options.policy.maxSpendUsd}`, { "policy.maxSpendUsd": "exceeded" });
+			if (estimate.estimatedMaxLifetimeUsd > options.policy.maxSpendUsd) throw new ValidationError(`Fleet estimated max lifetime cost $${estimate.estimatedMaxLifetimeUsd} exceeds policy.maxSpendUsd $${options.policy.maxSpendUsd}`, { fields: { "policy.maxSpendUsd": "exceeded" } });
 		}
 		let fleetKey;
 		const capUsd = options.budgetUsd;
 		const parentKey = options.parent ? fleetTransportKeys(this).get(options.parent.fleetId) : void 0;
 		if (options.parent && !parentKey) {
 			const parentFleet = await this.getServerFleet(options.parent.fleetId);
-			if (await this.budgetKeyIdOf(parentFleet) !== void 0) throw new ValidationError(`Parent fleet ${options.parent.fleetId} has a budget; create its child fleets with the client that created it`, { parent: "key_unavailable" });
+			if (await this.budgetKeyIdOf(parentFleet) !== void 0) throw new ValidationError(`Parent fleet ${options.parent.fleetId} has a budget; create its child fleets with the client that created it`, { fields: { parent: "key_unavailable" } });
 		}
-		if (parentKey && capUsd === void 0) throw new ValidationError(`Parent fleet ${options.parent?.fleetId} has a budget, so its child fleets must set budgetUsd`, { budgetUsd: "required" });
+		if (parentKey && capUsd === void 0) throw new ValidationError(`Parent fleet ${options.parent?.fleetId} has a budget, so its child fleets must set budgetUsd`, { fields: { budgetUsd: "required" } });
 		if (capUsd !== void 0) fleetKey = await this.mintFleetKey(fleetId, capUsd, Math.max(...machines.map((machine) => mergeCreateOptions(options.defaults, machine).maxLifetimeSeconds ?? 3600)), parentKey?.key);
 		const host = fleetKey ? this.client.withApiKey(fleetKey.key) : this.client;
 		const releaseKey = async () => {
@@ -3821,7 +3865,7 @@ var SandboxFleetClient = class extends FleetClientTransport {
 		try {
 			record = await this.persistFleet(host, fleetId, created, options);
 			const recorded = new Set((record?.machines ?? []).map((machine) => machine.sandboxId));
-			if (record?.machines !== void 0 && created.some((machine) => !recorded.has(machine.sandbox.id))) throw new ValidationError(`Fleet ${fleetId} already exists from an earlier create with the same idempotency key; load it with fleets.list({ fleetId })`, { fleetId: "exists" });
+			if (record?.machines !== void 0 && created.some((machine) => !recorded.has(machine.sandbox.id))) throw new ValidationError(`Fleet ${fleetId} already exists from an earlier create with the same idempotency key; load it with fleets.list({ fleetId })`, { fields: { fleetId: "exists" } });
 		} catch (err) {
 			if (options.cleanupOnFailure !== false) {
 				await Promise.allSettled(created.map(async (machine) => {
@@ -3848,7 +3892,7 @@ var SandboxFleetClient = class extends FleetClientTransport {
 	* the Platform catalog here, before any sandbox exists.
 	*/
 	async resolveFleetMachines(options) {
-		if (options.agents !== void 0 && options.machines !== void 0) throw new ValidationError("Set either machines or agents, not both", { agents: "conflicts_with_machines" });
+		if (options.agents !== void 0 && options.machines !== void 0) throw new ValidationError("Set either machines or agents, not both", { fields: { agents: "conflicts_with_machines" } });
 		if (options.agents === void 0) {
 			const machines = options.machines ?? [];
 			if (machines.length === 0) throw new ValidationError("Fleet create requires machines or agents");
@@ -3907,8 +3951,8 @@ var SandboxFleetClient = class extends FleetClientTransport {
 		if (!response.ok) throw await parseResponseError(response);
 		const data = await response.json();
 		const definition = data.data?.definition;
-		if (!definition) throw new ValidationError(`Saved profile '${ref.profileId}' returned no definition`, { profile: "invalid" });
-		if (ref.revision !== void 0 && data.data?.revision !== ref.revision) throw new ValidationError(`Saved profile '${ref.profileId}' is at revision ${data.data?.revision ?? "unknown"}, not ${ref.revision}`, { profile: "revision_mismatch" });
+		if (!definition) throw new ValidationError(`Saved profile '${ref.profileId}' returned no definition`, { fields: { profile: "invalid" } });
+		if (ref.revision !== void 0 && data.data?.revision !== ref.revision) throw new ValidationError(`Saved profile '${ref.profileId}' is at revision ${data.data?.revision ?? "unknown"}, not ${ref.revision}`, { fields: { profile: "revision_mismatch" } });
 		return definition;
 	}
 	async createWithCoordinator(options) {
@@ -3994,7 +4038,7 @@ var SandboxFleetClient = class extends FleetClientTransport {
 	async hydrateServerFleet(fleet, options) {
 		const machines = await Promise.all(fleet.machines.map(async (machine) => {
 			const box = await this.client.get(machine.sandboxId);
-			if (!box) throw new ValidationError(`Fleet machine '${machine.machineId}' points at missing sandbox '${machine.sandboxId}'`, { machineId: "missing_sandbox" });
+			if (!box) throw new ValidationError(`Fleet machine '${machine.machineId}' points at missing sandbox '${machine.sandboxId}'`, { fields: { machineId: "missing_sandbox" } });
 			return {
 				machineId: machine.machineId,
 				sandbox: box.toJSON(),
@@ -4067,10 +4111,13 @@ var SandboxFleetClient = class extends FleetClientTransport {
 */
 var InstanceRestartingError = class extends SandboxError {
 	constructor(message, instance, failure, retryAfterMs) {
-		super(message, "INSTANCE_RESTARTING", 503, { retryAfterMs });
+		super(message, {
+			code: "INSTANCE_RESTARTING",
+			status: 503,
+			retryAfterMs
+		});
 		this.instance = instance;
 		this.failure = failure;
-		this.name = "InstanceRestartingError";
 	}
 };
 /**
@@ -4185,7 +4232,10 @@ var InstancesClient = class {
 			const running = await this.start(options, record, record.sandboxId);
 			if (running) return running;
 		}
-		throw new SandboxError(`Instance ${options.key} changed on every attempt; retry`, "INSTANCE_CONTENDED", 409);
+		throw new SandboxError(`Instance ${options.key} changed on every attempt; retry`, {
+			code: "INSTANCE_CONTENDED",
+			status: 409
+		});
 	}
 	async create(options, generation) {
 		const box = await this.client.createIsolated({
@@ -4335,7 +4385,7 @@ var RunsClient = class {
 	}
 	/** Start a run. Returns at once with its id; it executes on Platform. */
 	async create(options) {
-		if (!options.prompt) throw new ValidationError("prompt is required", { prompt: "required" });
+		if (!options.prompt) throw new ValidationError("prompt is required", { fields: { prompt: "required" } });
 		return platformData(await this.http.platformFetch("/v1/runs", {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
@@ -4360,7 +4410,7 @@ var RunsClient = class {
 		for (;;) {
 			const record = await this.get(id, options.signal ? { signal: options.signal } : {});
 			if (SETTLED.has(record.status)) return record;
-			if (Date.now() + interval > deadline) throw new TimeoutError(timeoutMs, `run ${id} did not settle within ${timeoutMs}ms (last status ${record.status}); cancel it with client.runs.cancel("${id}")`);
+			if (Date.now() + interval > deadline) throw new TimeoutError(`run ${id} did not settle within ${timeoutMs}ms (last status ${record.status}); cancel it with client.runs.cancel("${id}")`, { timeoutMs });
 			await abortableSleep(interval, options.signal);
 		}
 	}