@tangle-network/sandbox 1.0.189 → 1.0.191

package/dist/{sandbox-B_Xbc9wR.js → sandbox-Dtb-_btd.js}

@@ -1,21 +1,21 @@
-import { A as normalizeRuntimeBackendConfig, C as encodeTextForWire, D as applyRequestedModel, F as withoutRuntimeSecrets, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, M as requestedSecretProfilePublicDigest, O as assertCurrentBackendType, S as encodePromptForWire, T as canUseNodeHttp2, W as normalizeEffectiveBackend, _ as isTraceId, a as assertScopedTokenActive, b as resolveDispatchRunIdentity, c as SandboxRuntimeApi, d as appendSessionIdQuery, f as callHeaders, g as TRACE_ID_HEADER, h as isRetryableCredentialRefusal, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, k as mergeRuntimeBackendConfig, l as normalizeSessionInfo, m as assertFileWritePreconditions, n as InteractiveSessionController, p as sessionHeaders, r as TerminalStream, s as requestScopedToken, u as sessionMessageRequestBody, v as mintTraceId, w as runtimeFilesystemPath, x as validateAcceptedDispatchRunRef, y as resolveTraceId } from "./interactive-controller-C876Pjaj.js";
+import { A as normalizeRuntimeBackendConfig, C as encodeTextForWire, D as applyRequestedModel, F as withoutRuntimeSecrets, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, M as requestedSecretProfilePublicDigest, O as assertCurrentBackendType, S as encodePromptForWire, T as canUseNodeHttp2, W as normalizeEffectiveBackend, _ as isTraceId, a as assertScopedTokenActive, b as resolveDispatchRunIdentity, c as SandboxRuntimeApi, d as appendSessionIdQuery, f as callHeaders, g as TRACE_ID_HEADER, h as isRetryableCredentialRefusal, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, k as mergeRuntimeBackendConfig, l as normalizeSessionInfo, m as assertFileWritePreconditions, n as InteractiveSessionController, p as sessionHeaders, r as TerminalStream, s as requestScopedToken, u as sessionMessageRequestBody, v as mintTraceId, w as runtimeFilesystemPath, x as validateAcceptedDispatchRunRef, y as resolveTraceId } from "./interactive-controller-jr3_74Pq.js";
 import { C as boundedIdentifierSchema, E as boundedStringSchema, g as sha256DigestSchema$1, o as canonicalCandidateDigest$1, s as canonicalCandidateJson$1, u as isCanonicalJsonValue$1 } from "./harness-DMaNgn0S.js";
 import { t as sha256 } from "./sha2-vu4U-x2L.js";
-import { A as agentInteractiveSessionStatusMatchesRef, B as PlanContinuationSchema, C as AgentInteractiveSessionStopAcknowledgementSchema, D as agentInteractiveSessionControlClaimMatchesRef, E as agentInteractiveSessionControlClaimIsNewer, F as AgentRunCancellationAcknowledgementSchema, G as InteractionResponseSchema, H as InteractionBindingSchema, I as AgentRunCancellationRequestSchema, L as agentRunCancellationAcknowledgementMatchesRequest, M as agentInteractiveDimensionSchema, N as sameAgentExactRun, O as agentInteractiveSessionPromptAcknowledgementMatchesCommand, P as AgentExactRunControlRefSchema, S as AgentInteractiveSessionStatusSchema, T as agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, U as InteractionRequestSchema, V as InteractionAcknowledgementSchema, W as InteractionResponseCommandSchema, _ as AgentInteractiveSessionControlClaimRequestSchema, b as AgentInteractiveSessionPromptCommandSchema, d as interactiveSessionControlClaimResponseSchema, f as interactiveSessionControlReleaseResponseSchema, g as AgentInteractiveSessionControlClaimAcknowledgementSchema, h as AgentInteractiveSessionAttachSchema, j as agentInteractiveSessionStopAcknowledgementMatchesCommand, l as createInteractiveControlHolderId, m as interactiveSessionStatusResponseSchema, p as interactiveSessionControlValidationResponseSchema, v as AgentInteractiveSessionControlClaimSchema, w as AgentInteractiveSessionStopCommandSchema, x as AgentInteractiveSessionRefSchema, y as AgentInteractiveSessionPromptAcknowledgementSchema } from "./browser-interactive-control-controller-DHIS8edi.js";
+import { A as agentInteractiveSessionStatusMatchesRef, B as PlanContinuationSchema, C as AgentInteractiveSessionStopAcknowledgementSchema, D as agentInteractiveSessionControlClaimMatchesRef, E as agentInteractiveSessionControlClaimIsNewer, F as AgentRunCancellationAcknowledgementSchema, G as InteractionResponseSchema, H as InteractionBindingSchema, I as AgentRunCancellationRequestSchema, L as agentRunCancellationAcknowledgementMatchesRequest, M as agentInteractiveDimensionSchema, N as sameAgentExactRun, O as agentInteractiveSessionPromptAcknowledgementMatchesCommand, P as AgentExactRunControlRefSchema, S as AgentInteractiveSessionStatusSchema, T as agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, U as InteractionRequestSchema, V as InteractionAcknowledgementSchema, W as InteractionResponseCommandSchema, _ as AgentInteractiveSessionControlClaimRequestSchema, b as AgentInteractiveSessionPromptCommandSchema, d as interactiveSessionControlClaimResponseSchema, f as interactiveSessionControlReleaseResponseSchema, g as AgentInteractiveSessionControlClaimAcknowledgementSchema, h as AgentInteractiveSessionAttachSchema, j as agentInteractiveSessionStopAcknowledgementMatchesCommand, l as createInteractiveControlHolderId, m as interactiveSessionStatusResponseSchema, p as interactiveSessionControlValidationResponseSchema, v as AgentInteractiveSessionControlClaimSchema, w as AgentInteractiveSessionStopCommandSchema, x as AgentInteractiveSessionRefSchema, y as AgentInteractiveSessionPromptAcknowledgementSchema } from "./browser-interactive-control-controller-BYbNLahH.js";
 import { a as ProxySecretReceiptSchema, o as canonicalAgentProfileValue, r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { a as SANDBOX_PROXY_REQUEST_MAX_BYTES, c as PROFILE_FILE_MOUNT_OUTSIDE_ROOTS_CODE, d as isProfileFileMountOutsideRoots, f as profileFileMountOutsideRootsMessage, l as SANDBOX_AGENT_HOME, o as FILE_OPERATION_LIMITS, u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-DTHgLccV.js";
-import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, a as AuthError, c as CompliancePlacementError, f as GpuProviderNotConfiguredError, g as NotFoundError, h as NetworkError, i as readResponseJson, l as EdgeNotReadyError, m as NON_RETRYABLE_CREATE_QUOTA_REASONS, n as parseErrorResponse, r as parseResponseError, s as CapabilityError, t as TerminalStreamError, v as ProfileFileMountPathError, w as StreamInterruptedError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { i as delayUntilAborted, n as awaitWithAbort, r as combineAbortSignals, t as abortableSleep } from "./abort-signal-PgWPMn_e.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, T as StreamInterruptedError, _ as NotFoundError, a as readResponseJson, d as EdgeNotReadyError, g as NetworkError, i as parseResponseError, l as CapabilityError, n as isTransientWrite, o as retryWhen, r as parseErrorResponse, s as AuthError, t as TerminalStreamError, w as StateError, y as ProfileFileMountPathError } from "./errors-Mzq10WZq.js";
+import { i as delayUntilAborted, n as awaitWithAbort, r as combineAbortSignals, t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
+import { a as SANDBOX_PROXY_REQUEST_MAX_BYTES, c as PROFILE_FILE_MOUNT_OUTSIDE_ROOTS_CODE, d as isProfileFileMountOutsideRoots, f as profileFileMountOutsideRootsMessage, l as SANDBOX_AGENT_HOME, o as FILE_OPERATION_LIMITS, u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-Cr9Ossea.js";
 import { t as rewrapResponse } from "./response-rewrap-Cjoxh2wZ.js";
 import { n as fetchWithKeepAlive, t as emitTiming } from "./keep-alive-fetch-C2lFwrMA.js";
 import { t as SIDECAR_PROXY_ERROR_HEADER } from "./sidecar-proxy-error-DTJbOAWL.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { s as uploadChunked } from "./chunked-upload-vAE2hVcP.js";
-import { t as runPreparedProcess } from "./prepared-process-BWVz93cT.js";
+import { s as uploadChunked } from "./chunked-upload-D5ytV_s6.js";
+import { t as runPreparedProcess } from "./prepared-process-BSpZXDDw.js";
 import { a as isBackendType, r as cliAuthReferenceSchema } from "./cli-auth-bundle-C6DtK7GX-BbbiAn-Z.js";
 import "./cli-auth-bundle-CMJWI99l.js";
-import { n as SandboxLines } from "./lines-DxHJhxCe.js";
-import { t as downloadFile } from "./file-download-BXgu9BNh.js";
+import { n as SandboxLines } from "./lines-DrG0WOW6.js";
+import { t as downloadFile } from "./file-download-CKOxcATB.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
@@ -259,16 +259,6 @@ const TerminalReplayWindowSchema = z.strictObject({
 const DEFAULT_CREATE_TIMEOUT_MS = 12e4;
 const DEFAULT_GPU_CREATE_TIMEOUT_MS = 900 * 1e3;
 const CREATE_RETRY_MAX_DELAY_MS = 4e3;
-const RETRYABLE_CREATE_STATUS_CODES = new Set([
-	408,
-	425,
-	429,
-	500,
-	502,
-	503,
-	504,
-	524
-]);
 /**
 * 503 classes that mean "the cell cannot place a create right now, ask
 * again", not "this create failed". A full fleet answers `CAPACITY_EXHAUSTED`
@@ -342,15 +332,14 @@ function extendableDeadline(atMs) {
 	};
 }
 function isDeployWindowCreateError(cause) {
-	return cause instanceof SandboxError && cause.status === 503 && DEPLOY_WINDOW_RETRY_CODES.has(cause.code);
+	return cause instanceof SandboxError && cause.status === 503 && DEPLOY_WINDOW_RETRY_CODES.has(cause.wireCode);
 }
 /** A no-room refusal allocated nothing, so a create giving up on one reports this typed 503. */
-const isCapacityShortageCreateError = (cause) => isDeployWindowCreateError(cause) && (cause.code === "CAPACITY_EXHAUSTED" || cause.code === "HOST_PRESSURE");
+const isCapacityShortageCreateError = (cause) => isDeployWindowCreateError(cause) && (cause.wireCode === "CAPACITY_EXHAUSTED" || cause.wireCode === "HOST_PRESSURE");
 /**
 * The plan rate limiter's 429 (`RATE_LIMIT_EXCEEDED`, or the platform's own
-* limiter): `quotaType` is the limiter's default `rate_limit`, never one of
-* the create quotas, which name their reason. Every paced re-POST above is a
-* Worker management request that limiter counts (the free plan allows 60 a
+* limiter); a quota 429 is final in the catalog. Every paced re-POST above is
+* a Worker management request that limiter counts (the free plan allows 60 a
 * minute, and one create retrying every 2 s is 30 of them), so in a full
 * fleet two concurrent creates meet it. Answered right after a capacity
 * refusal on the same key, it is part of that pacing, not a new failure: it
@@ -358,18 +347,25 @@ const isCapacityShortageCreateError = (cause) => isDeployWindowCreateError(cause
 * the attempt budget.
 */
 function isRateLimitCreateError(cause) {
-	return cause instanceof QuotaError && cause.status === 429 && cause.quotaType === "rate_limit";
+	return retryWhen(cause) && cause.status === 429;
 }
+/**
+* Create retries what the catalog marks retryable (a 524 is a `TIMEOUT`, so a
+* key that a proxy cut off is joined), except a 409, which create never
+* retried, and a customer-floor hold: the cell keeps that room for customers
+* and a re-POST meets the same hold.
+*/
 function isRetryableCreateError(cause) {
-	if (cause instanceof NetworkError) return true;
-	if (cause instanceof GpuProviderNotConfiguredError) return false;
-	if (cause instanceof CompliancePlacementError) return false;
-	if (cause instanceof SandboxError && cause.capacityHold) return false;
-	if (cause instanceof QuotaError && NON_RETRYABLE_CREATE_QUOTA_REASONS.has(cause.quotaType.toUpperCase())) return false;
-	return cause instanceof SandboxError && cause.status !== void 0 && RETRYABLE_CREATE_STATUS_CODES.has(cause.status);
+	return retryWhen(cause) && cause.status !== 409 && !cause.capacityHold;
 }
+/**
+* Longest wait on an `IDEMPOTENT_CREATE_PROBE_FAILED` `Retry-After`: the
+* probe answers again within seconds, and an upstream 11.8 s hint ended a
+* create on 10-26 instead of re-probing.
+*/
+const PROBE_FAILED_MAX_DELAY_MS = 5e3;
 function createRetryDelayMs(cause, failedAttempt) {
-	if (cause instanceof SandboxError && cause.retryAfterMs !== void 0) return cause.retryAfterMs;
+	if (cause instanceof SandboxError && cause.retryAfterMs !== void 0) return cause.wireCode === "IDEMPOTENT_CREATE_PROBE_FAILED" ? Math.min(cause.retryAfterMs, PROBE_FAILED_MAX_DELAY_MS) : cause.retryAfterMs;
 	return Math.min(250 * 2 ** Math.max(0, failedAttempt - 1), CREATE_RETRY_MAX_DELAY_MS);
 }
 function generateIdempotencyKey() {
@@ -466,7 +462,7 @@ function normalizeEgressPolicyFields(data) {
 function normalizeProxySecretReceipt(raw, sandboxId) {
 	if (raw === void 0) return void 0;
 	const receipt = ProxySecretReceiptSchema.parse(raw);
-	if (receipt.sandboxId !== sandboxId) throw new ServerError("Proxy secret receipt names another sandbox", 502);
+	if (receipt.sandboxId !== sandboxId) throw new ServerError("Proxy secret receipt names another sandbox", { status: 502 });
 	return receipt;
 }
 //#endregion
@@ -1089,7 +1085,7 @@ var SandboxInfoCapabilities = class {
 	/** Read and apply a lifecycle answer, which carries the complete sandbox state. */
 	async readLifecycleResponse(response) {
 		const data = await readResponseJson(response);
-		if (!this.applyLifecycleResponse(data)) throw new ServerError("Sandbox API lifecycle answer did not carry this sandbox's state", 502);
+		if (!this.applyLifecycleResponse(data)) throw new ServerError("Sandbox API lifecycle answer did not carry this sandbox's state", { status: 502 });
 		return data;
 	}
 	applyLifecycleResponse(data) {
@@ -1127,11 +1123,17 @@ var SandboxInfoCapabilities = class {
 		if (this.status !== "running" || this.filesystemIncarnationReadiness !== "ready") return "not-running";
 	}
 	assertRunnable() {
-		if (this.status !== "running") throw new StateError(`Sandbox is not running (status: ${this.status})`, this.status, "running");
+		if (this.status !== "running") throw new StateError(`Sandbox is not running (status: ${this.status})`, {
+			currentState: this.status,
+			requiredState: "running"
+		});
 		this.assertFilesystemIncarnationReady();
 	}
 	assertFilesystemIncarnationReady() {
-		if (this.filesystemIncarnationReadiness !== "ready") throw new StateError("Sandbox filesystem incarnation is not ready", this.status, "running with a ready filesystem incarnation");
+		if (this.filesystemIncarnationReadiness !== "ready") throw new StateError("Sandbox filesystem incarnation is not ready", {
+			currentState: this.status,
+			requiredState: "running with a ready filesystem incarnation"
+		});
 	}
 	/** Authenticated runtime request relative to this sandbox; preserves the runtime error
 	* and request context. */
@@ -1188,7 +1190,8 @@ var SandboxInfoCapabilities = class {
 		} catch (err) {
 			options?.signal?.throwIfAborted();
 			if (err instanceof StateError) throw err;
-			throw new NetworkError(`Failed to connect to sandbox: ${err instanceof Error ? err.message : String(err)}`, err instanceof Error ? err : void 0, {
+			throw new NetworkError(`Failed to connect to sandbox: ${err instanceof Error ? err.message : String(err)}`, {
+				cause: err instanceof Error ? err : void 0,
 				endpoint: path,
 				origin: "runtime"
 			});
@@ -3424,15 +3427,6 @@ const PROFILE_FILE_MOUNT_RETRY_MAX_MS = 2e3;
 * platform restart, which the caller is better told about.
 */
 const PROFILE_FILE_MOUNT_WRITE_RETRY_BUDGET_MS = 1e4;
-/**
-* Answers that decided nothing about the write: the gateway or proxy in front
-* of the sandbox runtime answered for it, so the write may never have run.
-*/
-const UNDECIDED_WRITE_STATUSES = new Set([
-	502,
-	503,
-	504
-]);
 const waitForProfileFileMount = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var ProfileFileMountExecTimeoutError = class extends Error {
 	constructor(timeoutMs) {
@@ -3561,9 +3555,12 @@ function isRetryableProfileFileMaterializeFailure(err) {
 	for (let link = err; link && typeof link === "object";) {
 		if (seen.has(link)) break;
 		seen.add(link);
-		if (link instanceof ProfileFileMountExecTimeoutError || link instanceof NetworkError || link instanceof TimeoutError) return true;
+		if (link instanceof ProfileFileMountExecTimeoutError) return true;
 		const status = errorStatus(link);
-		if (status !== void 0) {
+		if (link instanceof SandboxError) {
+			if (link.retryable) return true;
+			decided = true;
+		} else if (status !== void 0) {
 			if (status >= 500 || UNSETTLED_HTTP_STATUSES.has(status)) return true;
 			if (status >= 400) decided = true;
 		}
@@ -3583,12 +3580,6 @@ function isRetryableProfileFileMaterializeFailure(err) {
 	}
 	return !decided;
 }
-function isUndecidedWriteFailure(err) {
-	if (err instanceof NetworkError) return true;
-	if (!err || typeof err !== "object") return false;
-	const status = errorStatus(err);
-	return status !== void 0 && UNDECIDED_WRITE_STATUSES.has(status);
-}
 /**
 * Run one file API batch write, sending it again after an undecided answer.
 *
@@ -3603,7 +3594,7 @@ async function writeBatchRidingOutUndecided(write, maxRetries) {
 		await write();
 		return;
 	} catch (err) {
-		if (!isUndecidedWriteFailure(err) || attempt >= maxRetries) throw err;
+		if (!(retryWhen(err) && (err instanceof NetworkError || err.status >= 502 && !(err instanceof TimeoutError))) || attempt >= maxRetries) throw err;
 		const waitMs = retryAfterMs(err) ?? Math.min(250 * 2 ** attempt, 2e3);
 		if (Date.now() - startedAt + waitMs >= PROFILE_FILE_MOUNT_WRITE_RETRY_BUDGET_MS) throw err;
 		await waitForProfileFileMount(waitMs);
@@ -3660,14 +3651,21 @@ function validateDeferredProfileFileMounts(files, options = {}) {
 		validateProfileFilePath(mount.path);
 		if (isProfileFileMountOutsideRoots(mount.path)) {
 			const message = `materializeProfileFileMounts: ${profileFileMountOutsideRootsMessage(mount.path)}`;
-			if (options.failOnError !== false) throw new ProfileFileMountPathError(mount.path, message, PROFILE_FILE_MOUNT_OUTSIDE_ROOTS_CODE);
+			if (options.failOnError !== false) throw new ProfileFileMountPathError(message, {
+				path: mount.path,
+				code: PROFILE_FILE_MOUNT_OUTSIDE_ROOTS_CODE
+			});
 			console.warn(`[sandbox.profile] dropped profile file mount (resources.failOnError is false): ${message}`);
 			continue;
 		}
 		const path = (mount.path.startsWith("~/") ? `${PROFILE_AGENT_HOME}/${mount.path.slice(2)}` : mount.path).replace(/\/+/g, "/");
 		const same = paths.get(path);
 		if (same === void 0) kept.push(mount);
-		else if (inlineContent(same) !== inlineContent(mount) || isExecutableProfileFile(same) !== isExecutableProfileFile(mount)) throw new ProfileFileMountPathError(mount.path, `materializeProfileFileMounts: ${same.path} and ${mount.path} name one file with different content or mode`, "PROFILE_FILE_CONFLICT", void 0, 409);
+		else if (inlineContent(same) !== inlineContent(mount) || isExecutableProfileFile(same) !== isExecutableProfileFile(mount)) throw new ProfileFileMountPathError(`materializeProfileFileMounts: ${same.path} and ${mount.path} name one file with different content or mode`, {
+			path: mount.path,
+			code: "PROFILE_FILE_CONFLICT",
+			status: 409
+		});
 		paths.set(path, mount);
 	}
 	return kept;
@@ -4057,7 +4055,11 @@ async function materializeAbsentProfileFiles(box, files, options) {
 		const conflict = /^PROFILE_FILE_CONFLICT (.+)$/m.exec(stderr)?.[1];
 		if (conflict !== void 0) {
 			const paths = JSON.parse(conflict);
-			throw new ProfileFileMountPathError(paths[0], `Profile file ${paths.join(" and ")} conflicts (changed in the sandbox and the profile, or one target with two contents or modes); refusing to replace it`, "PROFILE_FILE_CONFLICT", void 0, 409);
+			throw new ProfileFileMountPathError(`Profile file ${paths.join(" and ")} conflicts (changed in the sandbox and the profile, or one target with two contents or modes); refusing to replace it`, {
+				path: paths[0],
+				code: "PROFILE_FILE_CONFLICT",
+				status: 409
+			});
 		}
 		throw new ProfileFileMaterializeError(`materializeProfileFileMounts: ${stderr}`, {
 			exitCode: applied.exitCode,
@@ -4133,7 +4135,10 @@ var ProfileFileDelivery = class {
 			if (incarnation === void 0 || this.delivered?.incarnation !== incarnation || this.delivered.fingerprint !== bundle) {
 				this.delivered = void 0;
 				delivery = await this.deliverProfileFiles(box, deferredFiles, bundle, existingFiles);
-				if (box.filesystemIncarnationId !== incarnation) throw new StateError("Filesystem incarnation changed during profile file delivery", box.filesystemIncarnationId ?? "unknown", incarnation ?? "unknown");
+				if (box.filesystemIncarnationId !== incarnation) throw new StateError("Filesystem incarnation changed during profile file delivery", {
+					currentState: box.filesystemIncarnationId ?? "unknown",
+					requiredState: incarnation ?? "unknown"
+				});
 				if (incarnation !== void 0) this.delivered = {
 					incarnation,
 					fingerprint: bundle
@@ -4244,8 +4249,7 @@ const DEFAULT_WAIT_TIMEOUT_MS = 10 * 6e4;
 var SandboxOperationFailedError = class extends SandboxError {
 	operation;
 	constructor(operation) {
-		super(operation.error?.message ?? `Sandbox ${operation.kind} operation ${operation.id} failed`, operation.error?.code ?? "OPERATION_FAILED");
-		this.name = "SandboxOperationFailedError";
+		super(operation.error?.message ?? `Sandbox ${operation.kind} operation ${operation.id} failed`, { code: operation.error?.code ?? "OPERATION_FAILED" });
 		this.operation = operation;
 	}
 };
@@ -4273,7 +4277,10 @@ function parseSnapshot(value) {
 	};
 }
 function contractViolation(message) {
-	return new SandboxError(message, "UPSTREAM_CONTRACT_VIOLATION", 502);
+	return new SandboxError(message, {
+		code: "UPSTREAM_CONTRACT_VIOLATION",
+		status: 502
+	});
 }
 /**
 * Parse the API's operation body; throws on a body that is not one. With
@@ -4393,7 +4400,7 @@ var SandboxOperation = class SandboxOperation {
 		let delayMs = 0;
 		let info;
 		while (!info || !isTerminalOperation(info)) {
-			if (Date.now() - startedAt + delayMs > timeoutMs) throw new TimeoutError(timeoutMs, `Timed out waiting for ${this.#info.kind} operation ${this.#info.id} (last state ${this.#info.state})`);
+			if (Date.now() - startedAt + delayMs > timeoutMs) throw new TimeoutError(`Timed out waiting for ${this.#info.kind} operation ${this.#info.id} (last state ${this.#info.state})`, { timeoutMs });
 			signal?.throwIfAborted();
 			if (delayMs > 0) await delayUntilAborted(delayMs, signal);
 			const next = Math.min(Math.max(delayMs * 2, FIRST_POLL_MS), MAX_POLL_MS);
@@ -4401,8 +4408,7 @@ var SandboxOperation = class SandboxOperation {
 				info = await this.refresh({ signal });
 				delayMs = next;
 			} catch (error) {
-				if (!(error instanceof SandboxError)) throw error;
-				if (error.status !== 429 && error.status !== 503) throw error;
+				if (!retryWhen(error) || error instanceof NetworkError || error.status !== 429 && error.status !== 503) throw error;
 				delayMs = Math.max(error.retryAfterMs ?? 0, next);
 			}
 		}
@@ -4730,7 +4736,8 @@ var SandboxBackendCapabilities = class extends SandboxGitCapabilities {
 	async backendControlData(path) {
 		await this.ensureRunning();
 		const payload = await readResponseJson(await this.runtimeFetch(path, { method: "GET" }));
-		if (!payload || typeof payload !== "object" || !("data" in payload)) throw new ServerError("Backend control response missing data", 502, {
+		if (!payload || typeof payload !== "object" || !("data" in payload)) throw new ServerError("Backend control response missing data", {
+			status: 502,
 			endpoint: path,
 			origin: "runtime"
 		});
@@ -4791,7 +4798,8 @@ var SandboxBackendCapabilities = class extends SandboxGitCapabilities {
 		await this.ensureRunning();
 		const search = new URLSearchParams({ path });
 		const payload = await readResponseJson(await this.runtimeFetch(`/config/artifacts/${encodeURIComponent(sessionId)}/download?${search.toString()}`, { method: "GET" }));
-		if (!payload || typeof payload.base64 !== "string") throw new ServerError("Backend artifact download response missing base64", 502, {
+		if (!payload || typeof payload.base64 !== "string") throw new ServerError("Backend artifact download response missing base64", {
+			status: 502,
 			endpoint: `/config/artifacts/${encodeURIComponent(sessionId)}/download`,
 			origin: "runtime"
 		});
@@ -5157,12 +5165,14 @@ var SandboxPreviewCapabilities = class extends SandboxGpuCapabilities {
 		const startTime = Date.now();
 		let lastProbeCode;
 		while (true) {
-			if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted", {
+			if (options?.signal?.aborted) throw new TimeoutError("Aborted", {
+				timeoutMs: 0,
 				origin: "runtime",
 				endpoint
 			});
 			const remainingBeforeCheckMs = timeoutMs - (Date.now() - startTime);
-			if (remainingBeforeCheckMs < 0) throw new TimeoutError(timeoutMs, `Timed out waiting for preview link ${previewId} to become ready${lastProbeCode ? ` (${lastProbeCode})` : ""}`, {
+			if (remainingBeforeCheckMs < 0) throw new TimeoutError(`Timed out waiting for preview link ${previewId} to become ready${lastProbeCode ? ` (${lastProbeCode})` : ""}`, {
+				timeoutMs,
 				origin: "runtime",
 				endpoint
 			});
@@ -5171,35 +5181,43 @@ var SandboxPreviewCapabilities = class extends SandboxGpuCapabilities {
 			try {
 				previewLink = await this.previewLinkGet(previewId, requestSignal);
 			} catch (error) {
-				if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted", {
+				if (options?.signal?.aborted) throw new TimeoutError("Aborted", {
+					timeoutMs: 0,
 					origin: "runtime",
 					endpoint
 				});
-				if (timeoutMs > 0 && Date.now() - startTime >= timeoutMs) throw new TimeoutError(timeoutMs, `Timed out waiting for preview link ${previewId} to become ready${lastProbeCode ? ` (${lastProbeCode})` : ""}`, {
+				if (timeoutMs > 0 && Date.now() - startTime >= timeoutMs) throw new TimeoutError(`Timed out waiting for preview link ${previewId} to become ready${lastProbeCode ? ` (${lastProbeCode})` : ""}`, {
+					timeoutMs,
 					origin: "runtime",
 					endpoint
 				});
 				throw error;
 			}
 			lastProbeCode = previewLink.lastProbe?.code;
-			if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted", {
+			if (options?.signal?.aborted) throw new TimeoutError("Aborted", {
+				timeoutMs: 0,
 				origin: "runtime",
 				endpoint
 			});
 			if (previewLink.status === "ready") return previewLink;
-			if (previewLink.status === "error" || previewLink.status === "disabled") throw new StateError(`Preview link cannot become ready (status: ${previewLink.status})`, previewLink.status, "ready", {
+			if (previewLink.status === "error" || previewLink.status === "disabled") throw new StateError(`Preview link cannot become ready (status: ${previewLink.status})`, {
+				currentState: previewLink.status,
+				requiredState: "ready",
 				origin: "runtime",
-				endpoint
-			}, lastProbeCode ?? "PREVIEW_LINK_UNAVAILABLE");
+				endpoint,
+				code: lastProbeCode ?? "PREVIEW_LINK_UNAVAILABLE"
+			});
 			const remainingAfterCheckMs = timeoutMs - (Date.now() - startTime);
-			if (remainingAfterCheckMs <= 0) throw new TimeoutError(timeoutMs, `Timed out waiting for preview link ${previewId} to become ready${lastProbeCode ? ` (${lastProbeCode})` : ""}`, {
+			if (remainingAfterCheckMs <= 0) throw new TimeoutError(`Timed out waiting for preview link ${previewId} to become ready${lastProbeCode ? ` (${lastProbeCode})` : ""}`, {
+				timeoutMs,
 				origin: "runtime",
 				endpoint
 			});
 			try {
 				await delayUntilAborted(Math.min(pollIntervalMs, remainingAfterCheckMs), options?.signal);
 			} catch {
-				throw new TimeoutError(0, "Aborted", {
+				throw new TimeoutError("Aborted", {
+					timeoutMs: 0,
 					origin: "runtime",
 					endpoint
 				});
@@ -5365,8 +5383,8 @@ var SandboxLifecycleEventsCapabilities = class extends SandboxPreviewCapabilitie
 		const timeoutSignal = AbortSignal.timeout(timeoutMs);
 		const signal = options?.signal ? combineAbortSignals([options.signal, timeoutSignal]) : timeoutSignal;
 		const rethrowWaitError = (error) => {
-			if (timeoutSignal.aborted) throw new TimeoutError(timeoutMs, `Timed out waiting for sandbox to reach ${statuses.join(" or ")}`);
-			if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted");
+			if (timeoutSignal.aborted) throw new TimeoutError(`Timed out waiting for sandbox to reach ${statuses.join(" or ")}`, { timeoutMs });
+			if (options?.signal?.aborted) throw new TimeoutError("Aborted", { timeoutMs: 0 });
 			throw error;
 		};
 		if (options?.onProgress && (this.status === "provisioning" || this.status === "pending")) try {
@@ -5380,8 +5398,8 @@ var SandboxLifecycleEventsCapabilities = class extends SandboxPreviewCapabilitie
 			if (signal.aborted) rethrowWaitError(signal.reason);
 			await this.refreshFor("poll", signal).catch(rethrowWaitError);
 			if (this.hasReachedWaitTarget(statuses)) return;
-			if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", this.status);
-			if (Date.now() - startTime > timeoutMs) throw new TimeoutError(timeoutMs, `Timed out waiting for sandbox to reach ${statuses.join(" or ")}`);
+			if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", { currentState: this.status });
+			if (Date.now() - startTime > timeoutMs) throw new TimeoutError(`Timed out waiting for sandbox to reach ${statuses.join(" or ")}`, { timeoutMs });
 			await delayUntilAborted(pollIntervalMs, signal).catch(rethrowWaitError);
 		}
 	}
@@ -5395,7 +5413,7 @@ var SandboxLifecycleEventsCapabilities = class extends SandboxPreviewCapabilitie
 		if (signal) {
 			if (signal.aborted) {
 				clearTimeout(timeout);
-				throw new TimeoutError(0, "Aborted");
+				throw new TimeoutError("Aborted", { timeoutMs: 0 });
 			}
 			signal.addEventListener("abort", () => abortController.abort(), { once: true });
 		}
@@ -5420,17 +5438,17 @@ var SandboxLifecycleEventsCapabilities = class extends SandboxPreviewCapabilitie
 				});
 			} else if (event.type === "provision_failed") {
 				await this.refresh(abortController.signal);
-				throw new StateError(event.data.error ?? "Provisioning failed", this.status);
+				throw new StateError(event.data.error ?? "Provisioning failed", { currentState: this.status });
 			} else if (event.type === "provision_complete" || event.type === "status_change") {
 				await this.refreshFor("poll", abortController.signal);
 				if (this.hasReachedWaitTarget(statuses)) return true;
-				if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", this.status);
+				if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", { currentState: this.status });
 			}
 			await this.refreshFor("poll", abortController.signal);
 			if (this.hasReachedWaitTarget(statuses)) return true;
-			if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", this.status);
+			if (this.status === "failed") throw new StateError(this.error ?? "Sandbox failed", { currentState: this.status });
 			if (statuses.includes("running") && this.status === "running") return false;
-			throw new TimeoutError(timeoutMs, `SSE stream ended before sandbox reached ${statuses.join(" or ")}`);
+			throw new TimeoutError(`SSE stream ended before sandbox reached ${statuses.join(" or ")}`, { timeoutMs });
 		} finally {
 			clearTimeout(timeout);
 			abortController.abort();
@@ -5450,7 +5468,9 @@ var SandboxLifecycleEventsCapabilities = class extends SandboxPreviewCapabilitie
 	*/
 	consumerConnectionReady() {
 		const connection = this.connection;
-		if (connection?.edgeStatus === "failed") throw new EdgeNotReadyError(connection.edgeError || `Sandbox ${this.id} public edge failed to attach`, "failed", {
+		if (connection?.edgeStatus === "failed") throw new EdgeNotReadyError(connection.edgeError || `Sandbox ${this.id} public edge failed to attach`, {
+			edgeStatus: "failed",
+			status: 502,
 			origin: "sandbox-api",
 			endpoint: `/v1/sandboxes/${this.id}`
 		});
@@ -5532,7 +5552,10 @@ var SandboxLifecycleCapabilities = class extends SandboxLifecycleEventsCapabilit
 		if (diagnostics) local.info.startupDiagnostics = diagnostics;
 	}
 	async delete(options) {
-		if (options?.wait === false && options.until) throw new SandboxError("delete({ wait: false }) cannot also wait until removed", "INVALID_OPTIONS", 400);
+		if (options?.wait === false && options.until) throw new SandboxError("delete({ wait: false }) cannot also wait until removed", {
+			code: "INVALID_OPTIONS",
+			status: 400
+		});
 		options?.signal?.throwIfAborted();
 		const path = `/v1/sandboxes/${this.id}?wait=false${options?.until === "removed" ? "&until=removed" : ""}`;
 		let sawLifecycleConflict = false;
@@ -5590,17 +5613,12 @@ var SandboxLifecycleCapabilities = class extends SandboxLifecycleEventsCapabilit
 	}
 };
 /**
-* The platform's typed refusal when one sandbox already has a lifecycle
-* operation in flight: HTTP 409 from `withSandboxLifecycleClaim`
-* (products/sandbox/api/src/routes/sandbox-lifecycle-claim.ts).
-*/
-const LIFECYCLE_CONFLICT_CODE = "SANDBOX_LIFECYCLE_IN_PROGRESS";
-/**
 * How long a lifecycle call re-attempts a refusal that only asks it to wait.
 * `resume`, `stop` and `delete` share one lease per sandbox, `lifecycle-<id>`,
 * held past a response while its deferred cleanup runs (the workflow smoke
-* hand-rolls the same retry), so a second call in that window is refused 409;
-* 2 of 2 provider-seam runs (agent-sdk#280) lost a completed turn to it. A
+* hand-rolls the same retry), so a second call in that window is refused 409
+* `SANDBOX_LIFECYCLE_IN_PROGRESS` by `withSandboxLifecycleClaim`; 2 of 2
+* provider-seam runs (agent-sdk#280) lost a completed turn to it. A
 * lease-store or storage outage answers 503 (us1 2026-11-01: 16/16 child
 * deletes failed through a Platform deploy that had removed every child). The
 * ceiling (~11 s) is short: a longer conflict is a real concurrent operation.
@@ -5611,7 +5629,7 @@ const LIFECYCLE_CONFLICT_MAX_DELAY_MS = 4e3;
 /** A lease-store or storage outage the API answers 503 before or after its effect: a retry is safe. */
 const LIFECYCLE_OUTAGE_CODES = new Set(["SANDBOX_LIFECYCLE_COORDINATION_UNAVAILABLE", "STORAGE_UNAVAILABLE"]);
 function isLifecycleConflict(cause) {
-	return cause instanceof SandboxError && (cause.status === 409 && cause.code === LIFECYCLE_CONFLICT_CODE || cause.status === 503 && LIFECYCLE_OUTAGE_CODES.has(cause.code));
+	return cause instanceof SandboxError && (cause.status === 409 && cause.wireCode === "SANDBOX_LIFECYCLE_IN_PROGRESS" || cause.status === 503 && LIFECYCLE_OUTAGE_CODES.has(cause.wireCode));
 }
 function lifecycleConflictDelayMs(cause, failedAttempt) {
 	if (cause instanceof SandboxError && cause.retryAfterMs !== void 0) return cause.retryAfterMs;
@@ -5661,7 +5679,7 @@ function usableTimeoutMs(timeoutMs) {
 function usableExecutionTtlMs(ttlMs) {
 	if (ttlMs === void 0) return void 0;
 	const got = timerMsViolation(ttlMs);
-	if (got !== void 0) throw new ValidationError(`ttlMs must be an integer between 1 and ${MAX_TIMER_MS}ms; got ${got}`, { ttlMs: "Must be a positive integer of milliseconds" });
+	if (got !== void 0) throw new ValidationError(`ttlMs must be an integer between 1 and ${MAX_TIMER_MS}ms; got ${got}`, { fields: { ttlMs: "Must be a positive integer of milliseconds" } });
 	return ttlMs;
 }
 /**
@@ -6582,7 +6600,7 @@ function assertActiveInteractiveControlClaim(control) {
 	if (!Number.isFinite(expiresAt) || expiresAt <= Date.now()) throw new Error("Interactive control claim is stale");
 }
 function assertInteractiveRefBelongsToSandbox(ref, sandboxId) {
-	if (ref.run.environmentId !== sandboxId) throw new ValidationError("Interactive session reference does not belong to this sandbox", { "ref.run.environmentId": `Expected ${sandboxId}` });
+	if (ref.run.environmentId !== sandboxId) throw new ValidationError("Interactive session reference does not belong to this sandbox", { fields: { "ref.run.environmentId": `Expected ${sandboxId}` } });
 }
 //#endregion
 //#region src/sandbox-ledger.ts
@@ -6624,10 +6642,12 @@ function meterTurn(box, fetch, id) {
 //#endregion
 //#region src/capabilities.ts
 function invalidCapabilities(message) {
-	throw new ServerError(`Capability discovery returned ${message}`, 502, {
+	throw new ServerError(`Capability discovery returned ${message}`, {
+		status: 502,
 		origin: "runtime",
-		endpoint: "/capabilities"
-	}, "INVALID_CAPABILITY_DOCUMENT");
+		endpoint: "/capabilities",
+		code: "INVALID_CAPABILITY_DOCUMENT"
+	});
 }
 function readFlagGroup(record, group, keys) {
 	const value = record[group];
@@ -6770,7 +6790,8 @@ var SandboxRuntimeOperations = class extends SandboxLifecycleCapabilities {
 		try {
 			data = JSON.parse(body);
 		} catch (error) {
-			if (response.ok) throw new NetworkError("Detailed health returned a non-JSON response", error instanceof Error ? error : void 0, {
+			if (response.ok) throw new NetworkError("Detailed health returned a non-JSON response", {
+				cause: error instanceof Error ? error : void 0,
 				endpoint: "/health/detailed",
 				origin: "runtime"
 			});
@@ -6795,9 +6816,9 @@ var SandboxRuntimeOperations = class extends SandboxLifecycleCapabilities {
 		if (!response.ok) throw parseErrorResponse(response.status, await response.text());
 		const value = await readResponseJson(response);
 		const pending = value && typeof value === "object" && "proxySecretReceipt" in value ? ProxySecretReceiptSchema.safeParse(value.proxySecretReceipt) : void 0;
-		if (!value || typeof value !== "object" || (pending ? !pending.success || pending.data.status !== "proxy-installed" || pending.data.sandboxId !== this.id || !pending.data.bindings.length || pending.data.bindings.some((binding) => binding.secretRef.key !== cliAuth.secretEnv) || "installed" in value : !("installed" in value) || value.installed !== true) || !("harness" in value) || value.harness !== grant.harness || !("cliAuth" in value)) throw new StateError("Native credential grant receipt is invalid", "unconfirmed");
+		if (!value || typeof value !== "object" || (pending ? !pending.success || pending.data.status !== "proxy-installed" || pending.data.sandboxId !== this.id || !pending.data.bindings.length || pending.data.bindings.some((binding) => binding.secretRef.key !== cliAuth.secretEnv) || "installed" in value : !("installed" in value) || value.installed !== true) || !("harness" in value) || value.harness !== grant.harness || !("cliAuth" in value)) throw new StateError("Native credential grant receipt is invalid", { currentState: "unconfirmed" });
 		const confirmed = cliAuthReferenceSchema.safeParse(value.cliAuth);
-		if (!confirmed.success || confirmed.data.account !== cliAuth.account || confirmed.data.secretEnv !== cliAuth.secretEnv || confirmed.data.format !== cliAuth.format) throw new StateError("Native credential grant receipt names another reference", "unconfirmed");
+		if (!confirmed.success || confirmed.data.account !== cliAuth.account || confirmed.data.secretEnv !== cliAuth.secretEnv || confirmed.data.format !== cliAuth.format) throw new StateError("Native credential grant receipt names another reference", { currentState: "unconfirmed" });
 	}
 	/** Deployed capabilities; newer schemas return null, malformed known schemas or transport failures throw. */
 	async capabilities() {
@@ -6856,7 +6877,7 @@ var SandboxCodeOperations = class extends SandboxRuntimeOperations {
 				blocking: true
 			})
 		}, timeoutMs + 15e3))).data;
-		if (!result || typeof result.exitCode !== "number" || typeof result.stdout !== "string" || typeof result.stderr !== "string") throw new ServerError("Sandbox process response was malformed", 502);
+		if (!result || typeof result.exitCode !== "number" || typeof result.stdout !== "string" || typeof result.stderr !== "string") throw new ServerError("Sandbox process response was malformed", { status: 502 });
 		return {
 			exitCode: result.exitCode,
 			stdout: result.stdout,
@@ -7039,7 +7060,7 @@ var SandboxFileOperations = class extends SandboxExecCapabilities {
 				ifAbsent: options?.ifAbsent
 			})
 		}));
-		if (!data.data) throw new ServerError("Invalid file write response: missing data", 502);
+		if (!data.data) throw new ServerError("Invalid file write response: missing data", { status: 502 });
 		this.assertWritePreconditions(data.data, {
 			expectedHash: options?.ifHash,
 			ifAbsent: options?.ifAbsent
@@ -7063,12 +7084,14 @@ var SandboxFileOperations = class extends SandboxExecCapabilities {
 			payload = JSON.parse(await response.text());
 		} catch (error) {
 			if (!(error instanceof SyntaxError)) throw error;
-			throw new ServerError("Runtime returned invalid JSON for file read", 502, {
+			throw new ServerError("Runtime returned invalid JSON for file read", {
+				status: 502,
 				origin: "runtime",
 				endpoint: "/files/read"
 			});
 		}
-		if (typeof payload !== "object" || payload === null || !("success" in payload) || payload.success !== true || !("data" in payload) || typeof payload.data !== "object" || payload.data === null || !("content" in payload.data) || typeof payload.data.content !== "string" || !("encoding" in payload.data) || payload.data.encoding !== "utf8") throw new ServerError("Runtime returned a malformed text file response", 502, {
+		if (typeof payload !== "object" || payload === null || !("success" in payload) || payload.success !== true || !("data" in payload) || typeof payload.data !== "object" || payload.data === null || !("content" in payload.data) || typeof payload.data.content !== "string" || !("encoding" in payload.data) || payload.data.encoding !== "utf8") throw new ServerError("Runtime returned a malformed text file response", {
+			status: 502,
 			origin: "runtime",
 			endpoint: "/files/read"
 		});
@@ -7094,12 +7117,12 @@ var SandboxFileWriteCapabilities = class extends SandboxFileOperations {
 			}, response.headers);
 		}
 		const payload = await response.json().catch(() => null);
-		if (!payload?.data?.files || typeof payload.data.files !== "object") throw new ServerError("Invalid file batch write response: missing data.files", 502);
+		if (!payload?.data?.files || typeof payload.data.files !== "object") throw new ServerError("Invalid file batch write response: missing data.files", { status: 502 });
 		for (const file of files) {
 			const result = payload.data.files[file.path];
-			if (!result || typeof result !== "object") throw new ServerError(`Invalid file batch write response: missing result for ${file.path}`, 502);
+			if (!result || typeof result !== "object") throw new ServerError(`Invalid file batch write response: missing result for ${file.path}`, { status: 502 });
 			if (result.success === false) {
-				if (typeof result.status !== "number" || typeof result.error !== "string" && (typeof result.error !== "object" || result.error === null)) throw new ServerError(`Invalid file batch write failure for ${file.path}`, 502);
+				if (typeof result.status !== "number" || typeof result.error !== "string" && (typeof result.error !== "object" || result.error === null)) throw new ServerError(`Invalid file batch write failure for ${file.path}`, { status: 502 });
 				throw parseErrorResponse(result.status, JSON.stringify({
 					success: false,
 					error: result.error
@@ -7108,7 +7131,7 @@ var SandboxFileWriteCapabilities = class extends SandboxFileOperations {
 					path: "/files/write-batch"
 				}, response.headers);
 			}
-			if (result.success !== true || typeof result.path !== "string" || typeof result.hash !== "string" || typeof result.size !== "number" || typeof result.mtime !== "number" || result.preconditionsApplied !== void 0 && (!Array.isArray(result.preconditionsApplied) || !result.preconditionsApplied.every((value) => value === "ifHash" || value === "ifAbsent"))) throw new ServerError(`Invalid file batch write result for ${file.path}`, 502);
+			if (result.success !== true || typeof result.path !== "string" || typeof result.hash !== "string" || typeof result.size !== "number" || typeof result.mtime !== "number" || result.preconditionsApplied !== void 0 && (!Array.isArray(result.preconditionsApplied) || !result.preconditionsApplied.every((value) => value === "ifHash" || value === "ifAbsent"))) throw new ServerError(`Invalid file batch write result for ${file.path}`, { status: 502 });
 			this.assertWritePreconditions({
 				path: result.path,
 				hash: result.hash,
@@ -7135,7 +7158,7 @@ var SandboxFileWriteCapabilities = class extends SandboxFileOperations {
 				});
 				break;
 			} catch (err) {
-				if (isTransientWriteError(err) && attempt < maxRetries) {
+				if (isTransientWrite(err) && attempt < maxRetries) {
 					const backoff = Math.min(WRITE_MANY_RETRY_BASE_MS * 2 ** attempt, WRITE_MANY_RETRY_MAX_MS);
 					await delay((err instanceof SandboxError ? err.retryAfterMs : void 0) ?? backoff);
 					continue;
@@ -7240,12 +7263,6 @@ function hasDuplicateWriteManyPaths(files) {
 	return new Set(files.map((file) => file.path)).size !== files.length;
 }
 const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-/** Transient file-write failures worth retrying: rate-limit (quota), 5xx,
-*  transport (network), and request timeouts. A non-transient error (bad path,
-*  auth, validation) fails loud immediately. */
-function isTransientWriteError(err) {
-	return err instanceof QuotaError || err instanceof ServerError || err instanceof NetworkError || err instanceof TimeoutError;
-}
 //#endregion
 //#region src/sandbox-profile.ts
 function isProfileNotCachedError(err) {
@@ -7487,7 +7504,8 @@ var SandboxProfileCapabilities = class extends SandboxFileWriteCapabilities {
 		const receipt = await this.postProfileRevision(backend.profile, endpoint, body);
 		const digest = /^sha256:[a-f0-9]{64}$/;
 		const conflicts = readPublicProfileConflicts(receipt.conflicts);
-		if (typeof receipt.workspacePlanDigest !== "string" || !digest.test(receipt.workspacePlanDigest) || typeof receipt.materializedDigest !== "string" || !digest.test(receipt.materializedDigest) || typeof receipt.launchDigest !== "string" || !/^[a-f0-9]{64}$/.test(receipt.launchDigest) || conflicts === void 0) throw new ServerError("Public profile preparation returned an invalid receipt", 502, {
+		if (typeof receipt.workspacePlanDigest !== "string" || !digest.test(receipt.workspacePlanDigest) || typeof receipt.materializedDigest !== "string" || !digest.test(receipt.materializedDigest) || typeof receipt.launchDigest !== "string" || !/^[a-f0-9]{64}$/.test(receipt.launchDigest) || conflicts === void 0) throw new ServerError("Public profile preparation returned an invalid receipt", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
@@ -7519,7 +7537,8 @@ var SandboxProfileCapabilities = class extends SandboxFileWriteCapabilities {
 			secret: true
 		});
 		const receipt = await this.postProfileRevision(backend.profile, endpoint, body);
-		if (typeof receipt.workspacePlanDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(receipt.workspacePlanDigest) || typeof receipt.executorReceipt !== "string" || !/^hmac-sha256:[a-f0-9]{64}$/.test(receipt.executorReceipt) || !Array.isArray(receipt.conflicts) || !receipt.conflicts.every((conflict) => typeof conflict === "object" && conflict !== null && typeof conflict.relPath === "string" && typeof conflict.copyRelPath === "string" && (conflict.reason === "existing" || conflict.reason === "symlink"))) throw new ServerError("Secret profile preparation returned an invalid receipt", 502, {
+		if (typeof receipt.workspacePlanDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(receipt.workspacePlanDigest) || typeof receipt.executorReceipt !== "string" || !/^hmac-sha256:[a-f0-9]{64}$/.test(receipt.executorReceipt) || !Array.isArray(receipt.conflicts) || !receipt.conflicts.every((conflict) => typeof conflict === "object" && conflict !== null && typeof conflict.relPath === "string" && typeof conflict.copyRelPath === "string" && (conflict.reason === "existing" || conflict.reason === "symlink"))) throw new ServerError("Secret profile preparation returned an invalid receipt", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
@@ -7700,7 +7719,8 @@ const InteractionListEnvelopeSchema = z.object({
 	data: z.object({ interactions: z.array(InteractionRequestSchema) })
 });
 function invalidRuntimeResponse(message, response, endpoint) {
-	return new ServerError(message, 502, {
+	return new ServerError(message, {
+		status: 502,
 		origin: "runtime",
 		endpoint,
 		sidecarVersion: response.headers.get("x-sidecar-version") ?? void 0,
@@ -7748,7 +7768,8 @@ async function readInteractionResult(response, endpoint, sessionId, submitted) {
 }
 /** Convert a command result into the shared retry-safe acknowledgement. */
 function interactionAcknowledgement(command, result) {
-	if ("interactionId" in result && (result.binding === void 0 || !bindingsEqual(result.binding, command.binding))) throw new ServerError("Sidecar did not return the exact interaction binding for this command", 502, {
+	if ("interactionId" in result && (result.binding === void 0 || !bindingsEqual(result.binding, command.binding))) throw new ServerError("Sidecar did not return the exact interaction binding for this command", {
+		status: 502,
 		origin: "runtime",
 		endpoint: "/agents/sessions/:id/interactions"
 	});
@@ -7776,7 +7797,7 @@ function commandHttpFailure(command, error) {
 	const message = error.message;
 	switch (error.status) {
 		case 400: return { acknowledgement: commandAcknowledgement(command, "invalid_response", { message }) };
-		case 404: return { acknowledgement: commandAcknowledgement(command, error.code === "SESSION_NOT_FOUND" ? "unknown_run" : "unknown_interaction", { message }) };
+		case 404: return { acknowledgement: commandAcknowledgement(command, error.wireCode === "SESSION_NOT_FOUND" ? "unknown_run" : "unknown_interaction", { message }) };
 		case 408:
 		case 429: return { acknowledgement: commandAcknowledgement(command, "transport_failure", {
 			message,
@@ -7824,7 +7845,7 @@ async function listSandboxInteractions(transport, sessionId, options) {
 /** Submit a plain response and preserve the server's durable result. */
 async function submitSandboxInteractionResponse(transport, sessionId, submitted, options) {
 	const parsed = InteractionResponseSchema.safeParse(submitted);
-	if (!parsed.success) throw new ValidationError("Invalid interaction response", { response: parsed.error.message });
+	if (!parsed.success) throw new ValidationError("Invalid interaction response", { fields: { response: parsed.error.message } });
 	await prepareTransport(transport, options?.signal);
 	const endpoint = interactionEndpoint(sessionId);
 	return readInteractionResult(await transport.fetch(endpoint, {
@@ -7837,9 +7858,9 @@ async function submitSandboxInteractionResponse(transport, sessionId, submitted,
 /** Submit one digest-bound command and return the shared acknowledgement. */
 async function submitSandboxInteractionCommand(transport, sessionId, command, options) {
 	const parsed = InteractionResponseCommandSchema.safeParse(command);
-	if (!parsed.success) throw new ValidationError("Invalid interaction response command", { commandDigest: parsed.error.message });
-	if (parsed.data.binding.sessionId !== sessionId) throw new ValidationError("Interaction response command does not belong to this session", { "binding.sessionId": `Expected ${sessionId}` });
-	if (parsed.data.binding.environmentId !== transport.environmentId) throw new ValidationError("Interaction response command does not belong to this sandbox", { "binding.environmentId": `Expected ${transport.environmentId}` });
+	if (!parsed.success) throw new ValidationError("Invalid interaction response command", { fields: { commandDigest: parsed.error.message } });
+	if (parsed.data.binding.sessionId !== sessionId) throw new ValidationError("Interaction response command does not belong to this session", { fields: { "binding.sessionId": `Expected ${sessionId}` } });
+	if (parsed.data.binding.environmentId !== transport.environmentId) throw new ValidationError("Interaction response command does not belong to this sandbox", { fields: { "binding.environmentId": `Expected ${transport.environmentId}` } });
 	try {
 		await prepareTransport(transport, options?.signal);
 	} catch (error) {
@@ -7932,7 +7953,8 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 		});
 		if (!response.ok) throw await parseResponseError(response);
 		const info = normalizeSessionInfo(await response.json());
-		if (!info) throw new ServerError("Session fork response missing session id", 502, {
+		if (!info) throw new ServerError("Session fork response missing session id", {
+			status: 502,
 			origin: "runtime",
 			endpoint: `/agents/sessions/${encodeURIComponent(id)}/forks`
 		});
@@ -7955,7 +7977,7 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 	}
 	/** @internal — invoked by SandboxSession.interrupt(). */
 	async _interrupt(id, options) {
-		if (options?.executionId !== void 0 && !options.executionId) throw new ValidationError("executionId must not be empty", { executionId: "Expected a non-empty runtime execution id" });
+		if (options?.executionId !== void 0 && !options.executionId) throw new ValidationError("executionId must not be empty", { fields: { executionId: "Expected a non-empty runtime execution id" } });
 		await this.ensureRunning();
 		const response = options?.executionId ? await this.runtimeFetch("/agents/run/cancel", {
 			method: "POST",
@@ -8000,9 +8022,9 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 	async _cancelRun(id, request, options) {
 		options?.signal?.throwIfAborted();
 		const parsedRequest = AgentRunCancellationRequestSchema.safeParse(request);
-		if (!parsedRequest.success) throw new ValidationError("Invalid run cancellation request", { requestDigest: parsedRequest.error.message });
-		if (parsedRequest.data.run.sessionId !== id) throw new ValidationError("Cancellation request does not belong to this session", { "run.sessionId": `Expected ${id}` });
-		if (parsedRequest.data.run.environmentId !== this.id) throw new ValidationError("Cancellation request does not belong to this sandbox", { "run.environmentId": `Expected ${this.id}` });
+		if (!parsedRequest.success) throw new ValidationError("Invalid run cancellation request", { fields: { requestDigest: parsedRequest.error.message } });
+		if (parsedRequest.data.run.sessionId !== id) throw new ValidationError("Cancellation request does not belong to this session", { fields: { "run.sessionId": `Expected ${id}` } });
+		if (parsedRequest.data.run.environmentId !== this.id) throw new ValidationError("Cancellation request does not belong to this sandbox", { fields: { "run.environmentId": `Expected ${this.id}` } });
 		await this.ensureRunning();
 		options?.signal?.throwIfAborted();
 		const response = await this.runtimeFetch("/agents/run/cancel", {
@@ -8017,17 +8039,20 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 			try {
 				raw = JSON.parse(body);
 			} catch {
-				throw new ServerError("Sidecar returned an invalid cancellation acknowledgement", response.status, {
+				throw new ServerError("Sidecar returned an invalid cancellation acknowledgement", {
+					status: response.status,
 					origin: "runtime",
 					endpoint: "/agents/run/cancel"
 				});
 			}
 			const acknowledgement = AgentRunCancellationAcknowledgementSchema.safeParse(raw);
-			if (!acknowledgement.success) throw new ServerError("Sidecar returned an invalid cancellation acknowledgement", response.status, {
+			if (!acknowledgement.success) throw new ServerError("Sidecar returned an invalid cancellation acknowledgement", {
+				status: response.status,
 				origin: "runtime",
 				endpoint: "/agents/run/cancel"
 			});
-			if (!agentRunCancellationAcknowledgementMatchesRequest(parsedRequest.data, acknowledgement.data)) throw new ServerError("Sidecar returned a cancellation acknowledgement for another request", response.status, {
+			if (!agentRunCancellationAcknowledgementMatchesRequest(parsedRequest.data, acknowledgement.data)) throw new ServerError("Sidecar returned a cancellation acknowledgement for another request", {
+				status: response.status,
 				origin: "runtime",
 				endpoint: "/agents/run/cancel"
 			});
@@ -8049,7 +8074,8 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 		const response = await state(this).client.fetch(path);
 		if (response.status === 404) return null;
 		const decoded = await readResponseJson(response);
-		if (!decoded.plan || typeof decoded.plan.sourceTurnId !== "string" || !decoded.plan.sourceTurnId.trim()) throw new ServerError("Durable plan response is missing plan or original sourceTurnId", 502, {
+		if (!decoded.plan || typeof decoded.plan.sourceTurnId !== "string" || !decoded.plan.sourceTurnId.trim()) throw new ServerError("Durable plan response is missing plan or original sourceTurnId", {
+			status: 502,
 			endpoint: path,
 			origin: "control-plane"
 		});
@@ -8073,11 +8099,13 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 			"started",
 			"completed",
 			"failed"
-		].includes(String(followUpState)) || typeof decoded.idempotent !== "boolean") throw new ServerError("Plan decision response is invalid", 502, {
+		].includes(String(followUpState)) || typeof decoded.idempotent !== "boolean") throw new ServerError("Plan decision response is invalid", {
+			status: 502,
 			endpoint: path,
 			origin: "control-plane"
 		});
-		if (options.followUp && decoded.followUp.mode !== "caller") throw new ServerError("Server did not acknowledge caller-owned plan follow-up", 502, {
+		if (options.followUp && decoded.followUp.mode !== "caller") throw new ServerError("Server did not acknowledge caller-owned plan follow-up", {
+			status: 502,
 			endpoint: path,
 			origin: "control-plane"
 		});
@@ -8085,7 +8113,8 @@ var SandboxSessionAdmissionCapabilities = class extends SandboxProfileCapabiliti
 		if (decoded.followUp.resume !== void 0) {
 			const candidate = decoded.followUp.resume;
 			const continuation = PlanContinuationSchema.safeParse(candidate?.continuation);
-			if (!continuation.success || typeof candidate.sourceTurnId !== "string" || !candidate.sourceTurnId || typeof candidate.credential !== "string" || !candidate.credential || typeof candidate.callbackUrl !== "string" || !/^https?:\/\//.test(candidate.callbackUrl) || typeof candidate.expiresAt !== "string" || !Number.isFinite(Date.parse(candidate.expiresAt))) throw new ServerError("Caller plan admission response is invalid", 502, {
+			if (!continuation.success || typeof candidate.sourceTurnId !== "string" || !candidate.sourceTurnId || typeof candidate.credential !== "string" || !candidate.credential || typeof candidate.callbackUrl !== "string" || !/^https?:\/\//.test(candidate.callbackUrl) || typeof candidate.expiresAt !== "string" || !Number.isFinite(Date.parse(candidate.expiresAt))) throw new ServerError("Caller plan admission response is invalid", {
+				status: 502,
 				endpoint: path,
 				origin: "control-plane"
 			});
@@ -8118,10 +8147,10 @@ function validatePromptDispatchOptions(sandboxId, options) {
 		const validId = (id) => typeof id === "string" && /^[A-Za-z0-9._:-]{1,256}$/u.test(id);
 		if (!options.sessionId || options.lastEventId !== void 0 || resume === null || typeof resume !== "object" || Object.keys(resume).sort().join(",") !== "harness,nativeSessionId,sourceCheckpointId" || !["claude-code", "codex"].includes(resume.harness) || !validId(resume.nativeSessionId) || !validId(resume.sourceCheckpointId)) throw new ValidationError("Native resume requires an exact harness, native session, source checkpoint, and new session dispatch");
 	}
-	if (options?.lastEventId && !options.executionId) throw new ValidationError("lastEventId requires executionId so the SDK can replay the correct execution", { executionId: "Required when lastEventId is set" });
+	if (options?.lastEventId && !options.executionId) throw new ValidationError("lastEventId requires executionId so the SDK can replay the correct execution", { fields: { executionId: "Required when lastEventId is set" } });
 	const runControlRef = options?.runControlRef ? AgentExactRunControlRefSchema.safeParse(options.runControlRef) : void 0;
-	if (runControlRef && !runControlRef.success) throw new ValidationError("Invalid runControlRef", { runControlRef: runControlRef.error.message });
-	if (runControlRef?.success && (runControlRef.data.environmentId !== sandboxId || runControlRef.data.sessionId !== options?.sessionId || runControlRef.data.executionId !== options?.executionId)) throw new ValidationError("runControlRef does not belong to this sandbox dispatch", { runControlRef: "environmentId, sessionId, and executionId must match the dispatch" });
+	if (runControlRef && !runControlRef.success) throw new ValidationError("Invalid runControlRef", { fields: { runControlRef: runControlRef.error.message } });
+	if (runControlRef?.success && (runControlRef.data.environmentId !== sandboxId || runControlRef.data.sessionId !== options?.sessionId || runControlRef.data.executionId !== options?.executionId)) throw new ValidationError("runControlRef does not belong to this sandbox dispatch", { fields: { runControlRef: "environmentId, sessionId, and executionId must match the dispatch" } });
 	return runControlRef?.success ? runControlRef.data : void 0;
 }
 var SandboxPromptTransportCapabilities = class extends SandboxSessionAdmissionCapabilities {
@@ -8141,7 +8170,8 @@ var SandboxPromptTransportCapabilities = class extends SandboxSessionAdmissionCa
 		const streamSignal = timeoutSignal ? options?.signal ? combineAbortSignals([options.signal, timeoutSignal]) : timeoutSignal : options?.signal;
 		const throwIfTimedOut = () => {
 			if (!timeoutSignal?.aborted || !timeoutMs) return;
-			throw new TimeoutError(timeoutMs, `Prompt stream timed out after ${timeoutMs}ms`, {
+			throw new TimeoutError(`Prompt stream timed out after ${timeoutMs}ms`, {
+				timeoutMs,
 				endpoint: "/agents/run/stream",
 				origin: "runtime"
 			});
@@ -8303,15 +8333,16 @@ var SandboxPromptTransportCapabilities = class extends SandboxSessionAdmissionCa
 		});
 		const resumeExecutionId = state.executionId;
 		const interrupted = (reason, detail, cause) => {
-			return new StreamInterruptedError({
-				message: `Prompt stream for execution ${resumeExecutionId} ended before a terminal event and could not be rejoined (${detail}); the execution's outcome is unknown${state.lastReplayStatus !== void 0 ? `; last replay status ${state.lastReplayStatus}` : ""}${state.lastExecutionStatus ? `; last known execution status ${state.lastExecutionStatus}` : ""}`,
+			return new StreamInterruptedError(`Prompt stream for execution ${resumeExecutionId} ended before a terminal event and could not be rejoined (${detail}); the execution's outcome is unknown${state.lastReplayStatus !== void 0 ? `; last replay status ${state.lastReplayStatus}` : ""}${state.lastExecutionStatus ? `; last known execution status ${state.lastExecutionStatus}` : ""}`, {
+				origin: "runtime",
+				endpoint: `/agents/run/${resumeExecutionId}/events`,
 				executionId: resumeExecutionId,
-				...state.sessionId ? { sessionId: state.sessionId } : {},
-				...state.lastEventId ? { lastEventId: state.lastEventId } : {},
+				sessionId: state.sessionId,
+				lastEventId: state.lastEventId,
 				reason,
-				...state.lastReplayStatus !== void 0 ? { lastReplayStatus: state.lastReplayStatus } : {},
-				...state.lastExecutionStatus ? { lastExecutionStatus: state.lastExecutionStatus } : {},
-				...cause !== void 0 ? { cause } : {}
+				lastReplayStatus: state.lastReplayStatus,
+				lastExecutionStatus: state.lastExecutionStatus,
+				cause
 			});
 		};
 		let outageStartedAt = Date.now();
@@ -8399,7 +8430,9 @@ function fromStreamErrorEvent(data) {
 	const code = typeof data?.code === "string" && data.code.length > 0 ? data.code : void 0;
 	if (status === void 0 && code === void 0) return new ServerError(message);
 	const origin = data?.origin;
-	const error = new SandboxError(message, code ?? "SERVER_ERROR", status, {
+	const error = new SandboxError(message, {
+		code: code ?? "SERVER_ERROR",
+		status,
 		...origin === "sidecar" || origin === "sandbox-api" || origin === "control-plane" || origin === "runtime" || origin === "unknown" ? { origin } : {},
 		...typeof data?.endpoint === "string" ? { endpoint: data.endpoint } : {},
 		...typeof data?.retryAfterMs === "number" && Number.isFinite(data.retryAfterMs) && data.retryAfterMs >= 0 ? { retryAfterMs: data.retryAfterMs } : {}
@@ -8430,7 +8463,7 @@ function toStreamErrorEvent(err) {
 		type: "error",
 		data: {
 			message: err.message,
-			code: err.code,
+			code: err.wireCode,
 			name: err.name,
 			...err.status !== void 0 ? { status: err.status } : {},
 			...err.origin ? { origin: err.origin } : {},
@@ -8613,12 +8646,14 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 		if (!response.ok) throw await parseResponseError(response);
 		const endpoint = `/agents/sessions/${encodeURIComponent(id)}/interactive`;
 		const parsed = interactiveSessionStartResponseSchema.safeParse(await response.json());
-		if (!parsed.success) throw new ServerError("Interactive session response has an invalid exact identity", 502, {
+		if (!parsed.success) throw new ServerError("Interactive session response has an invalid exact identity", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
 		const result = parsed.data.data;
-		if (!agentInteractiveSessionRefMatchesStart(exactStart, result.ref) || !agentInteractiveSessionControlClaimMatchesRef(result.ref, result.control)) throw new ServerError("Interactive session response has an invalid exact identity", 502, {
+		if (!agentInteractiveSessionRefMatchesStart(exactStart, result.ref) || !agentInteractiveSessionControlClaimMatchesRef(result.ref, result.control)) throw new ServerError("Interactive session response has an invalid exact identity", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8631,7 +8666,9 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 		if (exactCommand.ref.run.sessionId !== id) throw new ValidationError("Interactive prompt command does not belong to the session");
 		await this.ensureRunning(options?.signal);
 		const status = await this._interactiveStatus(id, exactCommand.ref.incarnationId, options);
-		if (!status) throw new NotFoundError("Interactive session", id, {
+		if (!status) throw new NotFoundError(`Interactive session not found: ${id}`, {
+			resourceType: "Interactive session",
+			resourceId: id,
 			origin: "runtime",
 			endpoint: `/agents/sessions/${encodeURIComponent(id)}/interactive`
 		});
@@ -8643,12 +8680,14 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 			...options?.signal === void 0 ? {} : { signal: options.signal }
 		});
 		const parsed = interactiveSessionPromptResponseSchema.safeParse(await readResponseJson(response));
-		if (!parsed.success) throw new ServerError("Interactive prompt acknowledgement is invalid", 502, {
+		if (!parsed.success) throw new ServerError("Interactive prompt acknowledgement is invalid", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
 		const acknowledgement = parsed.data.data;
-		if (!agentInteractiveSessionPromptAcknowledgementMatchesCommand(exactCommand, acknowledgement)) throw new ServerError("Interactive prompt acknowledgement does not match the command", 502, {
+		if (!agentInteractiveSessionPromptAcknowledgementMatchesCommand(exactCommand, acknowledgement)) throw new ServerError("Interactive prompt acknowledgement does not match the command", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8669,12 +8708,14 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 			...options?.signal === void 0 ? {} : { signal: options.signal }
 		});
 		const parsed = interactiveSessionControlClaimResponseSchema.safeParse(await readResponseJson(response));
-		if (!parsed.success) throw new ServerError("Interactive control claim acknowledgement is invalid", 502, {
+		if (!parsed.success) throw new ServerError("Interactive control claim acknowledgement is invalid", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
 		const acknowledgement = parsed.data.data;
-		if (!agentInteractiveSessionControlClaimAcknowledgementMatchesRequest(exactRequest, acknowledgement)) throw new ServerError("Interactive control claim acknowledgement does not match the request", 502, {
+		if (!agentInteractiveSessionControlClaimAcknowledgementMatchesRequest(exactRequest, acknowledgement)) throw new ServerError("Interactive control claim acknowledgement does not match the request", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8703,7 +8744,8 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 			body: JSON.stringify(claim),
 			...options?.signal === void 0 ? {} : { signal: options.signal }
 		});
-		if (!interactiveSessionControlReleaseResponseSchema.safeParse(await readResponseJson(response)).success) throw new ServerError("Interactive control release response is invalid", 502, {
+		if (!interactiveSessionControlReleaseResponseSchema.safeParse(await readResponseJson(response)).success) throw new ServerError("Interactive control release response is invalid", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8720,7 +8762,8 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 			body: JSON.stringify(claim),
 			...options?.signal === void 0 ? {} : { signal: options.signal }
 		});
-		if (!interactiveSessionControlValidationResponseSchema.safeParse(await readResponseJson(response)).success) throw new ServerError("Interactive control validation response is invalid", 502, {
+		if (!interactiveSessionControlValidationResponseSchema.safeParse(await readResponseJson(response)).success) throw new ServerError("Interactive control validation response is invalid", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8736,12 +8779,14 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 		});
 		if (response.status === 404) return null;
 		const parsed = interactiveSessionStatusResponseSchema.safeParse(await readResponseJson(response));
-		if (!parsed.success) throw new ServerError("Interactive status response has an invalid exact identity", 502, {
+		if (!parsed.success) throw new ServerError("Interactive status response has an invalid exact identity", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
 		const status = parsed.data.data.status;
-		if (status.ref.run.sessionId !== id || status.ref.incarnationId !== incarnationId) throw new ServerError("Interactive status response has an invalid exact identity", 502, {
+		if (status.ref.run.sessionId !== id || status.ref.incarnationId !== incarnationId) throw new ServerError("Interactive status response has an invalid exact identity", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8782,12 +8827,14 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 			...options?.signal === void 0 ? {} : { signal: options.signal }
 		});
 		const parsed = interactiveSessionStopResponseSchema.safeParse(await readResponseJson(response));
-		if (!parsed.success) throw new ServerError("Interactive stop acknowledgement is invalid", 502, {
+		if (!parsed.success) throw new ServerError("Interactive stop acknowledgement is invalid", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
 		const acknowledgement = parsed.data.data;
-		if (!agentInteractiveSessionStopAcknowledgementMatchesCommand(exactCommand, acknowledgement)) throw new ServerError("Interactive stop acknowledgement does not match the command", 502, {
+		if (!agentInteractiveSessionStopAcknowledgementMatchesCommand(exactCommand, acknowledgement)) throw new ServerError("Interactive stop acknowledgement does not match the command", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8807,12 +8854,14 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 			...options?.signal === void 0 ? {} : { signal: options.signal }
 		});
 		const parsed = interactiveSessionStopResponseSchema.safeParse(await readResponseJson(response));
-		if (!parsed.success) throw new ServerError("Interactive lifecycle stop acknowledgement is invalid", 502, {
+		if (!parsed.success) throw new ServerError("Interactive lifecycle stop acknowledgement is invalid", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
 		const acknowledgement = parsed.data.data;
-		if (canonicalCandidateDigest$1(acknowledgement.ref) !== canonicalCandidateDigest$1(exactRef)) throw new ServerError("Interactive lifecycle stop acknowledgement does not match the exact ref", 502, {
+		if (canonicalCandidateDigest$1(acknowledgement.ref) !== canonicalCandidateDigest$1(exactRef)) throw new ServerError("Interactive lifecycle stop acknowledgement does not match the exact ref", {
+			status: 502,
 			endpoint,
 			origin: "runtime"
 		});
@@ -8824,7 +8873,7 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 var SandboxSessionEvidenceCapabilities = class extends SandboxInteractiveCapabilities {
 	/** @internal — invoked before the sandbox is deleted. */
 	async _sessionExportRawEvidence(id, destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-CgbWa4es.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-BD37zHN5.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal, archiveId, cancel) => this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/raw-evidence/archive?${new URLSearchParams([
@@ -8855,7 +8904,7 @@ var SandboxSessionEvidenceCapabilities = class extends SandboxInteractiveCapabil
 	* and the byte and file bounds are verified before the directory appears.
 	*/
 	async exportRawEvidence(destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-CgbWa4es.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-BD37zHN5.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal, archiveId, cancel) => this.runtimeFetch(`/agents/raw-evidence/archive?${new URLSearchParams({
@@ -8967,19 +9016,24 @@ var SandboxSessionEvidenceCapabilities = class extends SandboxInteractiveCapabil
 	}
 	/** @internal — invoked by SandboxSession.result(). */
 	async _sessionResult(id, options, knownSession) {
-		if (options?.executionId !== void 0 && !options.executionId) throw new ValidationError("executionId must not be empty", { executionId: "Expected a non-empty runtime execution id" });
+		if (options?.executionId !== void 0 && !options.executionId) throw new ValidationError("executionId must not be empty", { fields: { executionId: "Expected a non-empty runtime execution id" } });
 		const startTime = Date.now();
 		let executionId = options?.executionId;
 		if (!executionId) {
 			const session = knownSession ?? await this._sessionStatus(id);
-			if (!session) throw new NotFoundError("Session", id, {
+			if (!session) throw new NotFoundError(`Session not found: ${id}`, {
+				resourceType: "Session",
+				resourceId: id,
 				origin: "runtime",
 				endpoint: `/agents/sessions/${encodeURIComponent(id)}`
 			});
-			if (!session.latestExecutionId) throw new StateError(`Session ${id} has no execution result to await`, session.status, "session with an admitted execution", {
+			if (!session.latestExecutionId) throw new StateError(`Session ${id} has no execution result to await`, {
+				currentState: session.status,
+				requiredState: "session with an admitted execution",
 				origin: "runtime",
-				endpoint: `/agents/sessions/${encodeURIComponent(id)}`
-			}, "SESSION_EXECUTION_MISSING");
+				endpoint: `/agents/sessions/${encodeURIComponent(id)}`,
+				code: "SESSION_EXECUTION_MISSING"
+			});
 			executionId = session.latestExecutionId;
 		}
 		let resultExecutionId = executionId;
@@ -9091,10 +9145,12 @@ function readModelCalls(value) {
 //#endregion
 //#region src/completed-turn.ts
 function invalidCompletedTurn(message) {
-	throw new ServerError(`Completed-turn lookup returned ${message}`, 502, {
+	throw new ServerError(`Completed-turn lookup returned ${message}`, {
+		status: 502,
 		origin: "runtime",
-		endpoint: "/messages/turns"
-	}, "INVALID_COMPLETED_TURN");
+		endpoint: "/messages/turns",
+		code: "INVALID_COMPLETED_TURN"
+	});
 }
 function parseCompletedTurnResult(value, expected) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) invalidCompletedTurn("a non-object record");
@@ -9538,7 +9594,8 @@ var SandboxSessionCapabilities = class extends SandboxSessionEvidenceCapabilitie
 			ctrl.abort();
 		}
 		if (!admissionObserved || !resolvedSessionId || !resolvedExecutionId) throw dispatchError ?? new ServerError("dispatchPrompt did not receive an execution admission from the sandbox");
-		if (!resolvedRunControlRef) throw new ServerError("Sandbox admission did not return the exact run reference", 502, {
+		if (!resolvedRunControlRef) throw new ServerError("Sandbox admission did not return the exact run reference", {
+			status: 502,
 			origin: "runtime",
 			endpoint: "/agents/run/stream"
 		});
@@ -9722,7 +9779,11 @@ var SandboxTurnCapabilities = class extends SandboxSessionCapabilities {
 		let checked = firstCheck;
 		if (!info) {
 			if (firstCheck.status === "fulfilled") await firstCheck.value.body?.cancel().catch(() => void 0);
-			if (cached) throw new StateError("Retained result has no verifiable conversation admission", "unverified", "verified admission", void 0, "MESSAGE_ADMISSION_UNVERIFIED");
+			if (cached) throw new StateError("Retained result has no verifiable conversation admission", {
+				currentState: "unverified",
+				requiredState: "verified admission",
+				code: "MESSAGE_ADMISSION_UNVERIFIED"
+			});
 			if (opts.allowDispatch === false) return { state: "not_admitted" };
 			await this.createSession({
 				sessionId: opts.sessionId,
@@ -9740,7 +9801,11 @@ var SandboxTurnCapabilities = class extends SandboxSessionCapabilities {
 		if (body.requestVerified !== true || !Object.hasOwn(body, "receipt")) throw new Error("Runtime did not verify the durable message admission request");
 		let executionId;
 		if (body.receipt === null) {
-			if (cached) throw new StateError("Retained result has no matching request evidence", "unverified", "verified admission", void 0, "MESSAGE_ADMISSION_UNVERIFIED");
+			if (cached) throw new StateError("Retained result has no matching request evidence", {
+				currentState: "unverified",
+				requiredState: "verified admission",
+				code: "MESSAGE_ADMISSION_UNVERIFIED"
+			});
 			if (opts.allowDispatch === false) return { state: "not_admitted" };
 			if (isSessionInFlight(info)) return { state: "running" };
 			const receipt = await this.session(opts.sessionId).sendMessage(request, {
@@ -9816,7 +9881,7 @@ const SNAPSHOT_DELETE_RETAINED_RETRY_MS = 2e3;
 const HELD_REASONS = new Set(["resume_generation_unconfirmed", "snapshot_delete_in_flight"]);
 /** A hold the platform says to wait out, named by the body's typed `reason`. */
 function isRetainedHold(cause, reason) {
-	return cause.status === 409 && cause.code === "RESUME_SNAPSHOT_RETAINED" && typeof reason === "string" && HELD_REASONS.has(reason);
+	return cause.status === 409 && cause.wireCode === "RESUME_SNAPSHOT_RETAINED" && typeof reason === "string" && HELD_REASONS.has(reason);
 }
 function interpretWorkspaceOperationLookup(body, kind) {
 	const outcome = body?.outcome;
@@ -9881,7 +9946,7 @@ var SandboxSnapshotCapabilities = class extends SandboxTurnCapabilities {
 		}, { timeoutMs: SNAPSHOT_CREATE_REQUEST_TIMEOUT_MS });
 		const data = await readResponseJson(response);
 		const snapshotId = data.snapshotId ?? data.id;
-		if (typeof snapshotId !== "string" || snapshotId.length === 0) throw new ServerError(`Snapshot create returned 200 but body had no snapshot ID: ${JSON.stringify(data).slice(0, 200)}`, response.status);
+		if (typeof snapshotId !== "string" || snapshotId.length === 0) throw new ServerError(`Snapshot create returned 200 but body had no snapshot ID: ${JSON.stringify(data).slice(0, 200)}`, { status: response.status });
 		const reportedOutcome = data.idempotency?.outcome;
 		const reportedDigest = data.idempotency?.requestDigest;
 		const idempotency = (reportedOutcome === "created" || reportedOutcome === "replayed") && typeof reportedDigest === "string" ? {
@@ -9918,7 +9983,7 @@ var SandboxSnapshotCapabilities = class extends SandboxTurnCapabilities {
 			sandboxId: this.id
 		}), state(this).client);
 		const snapshotId = body.snapshotId ?? body.id;
-		if (typeof snapshotId !== "string" || snapshotId.length === 0) throw new ServerError(`Snapshot create returned ${response.status} but body had no snapshot ID: ${JSON.stringify(body).slice(0, 200)}`, response.status);
+		if (typeof snapshotId !== "string" || snapshotId.length === 0) throw new ServerError(`Snapshot create returned ${response.status} but body had no snapshot ID: ${JSON.stringify(body).slice(0, 200)}`, { status: response.status });
 		return SandboxOperation.completed("snapshot", this.id, { snapshot: {
 			snapshotId,
 			createdAt: new Date(typeof body.createdAt === "string" ? body.createdAt : Date.now()),
@@ -10083,7 +10148,7 @@ var SandboxSnapshotCapabilities = class extends SandboxTurnCapabilities {
 			polledAt = Date.now();
 			status = await readResponseJson(await state(this).client.fetch(`/v1/sandboxes/${this.id}/snapshots/jobs/${encodeURIComponent(accepted.jobId)}?waitMs=${SNAPSHOT_RESTORE_HOLD_MS}`));
 		}
-		throw new TimeoutError(SNAPSHOT_RESTORE_TIMEOUT_MS);
+		throw new TimeoutError(`Request timed out after ${SNAPSHOT_RESTORE_TIMEOUT_MS}ms`, { timeoutMs: SNAPSHOT_RESTORE_TIMEOUT_MS });
 	}
 	async waitForSnapshotVisible(snapshotId, fallback) {
 		const deadline = Date.now() + SNAPSHOT_VISIBILITY_TIMEOUT_MS;
@@ -10110,7 +10175,7 @@ var SandboxSnapshotCapabilities = class extends SandboxTurnCapabilities {
 			sizeBytes: fallback.sizeBytes,
 			tags: fallback.tags ?? []
 		};
-		throw lastError instanceof Error ? lastError : new TimeoutError(SNAPSHOT_VISIBILITY_TIMEOUT_MS);
+		throw lastError instanceof Error ? lastError : new TimeoutError(`Request timed out after ${SNAPSHOT_VISIBILITY_TIMEOUT_MS}ms`, { timeoutMs: SNAPSHOT_VISIBILITY_TIMEOUT_MS });
 	}
 	/**
 	* Restore from the latest snapshot in customer-provided storage.
@@ -10224,7 +10289,7 @@ var SandboxBranchCapabilities = class extends SandboxSnapshotCapabilities {
 			})
 		});
 		const data = await readResponseJson(response);
-		if (typeof data.rolloutId !== "string" || data.rolloutId.length === 0) throw new ServerError(`Rollout create returned ${response.status} but body had no rolloutId: ${JSON.stringify(data).slice(0, 200)}`, response.status);
+		if (typeof data.rolloutId !== "string" || data.rolloutId.length === 0) throw new ServerError(`Rollout create returned ${response.status} but body had no rolloutId: ${JSON.stringify(data).slice(0, 200)}`, { status: response.status });
 		return data;
 	}
 	/**
@@ -10250,10 +10315,10 @@ var SandboxBranchCapabilities = class extends SandboxSnapshotCapabilities {
 		const pollIntervalMs = options?.pollIntervalMs ?? 2e3;
 		const startTime = Date.now();
 		while (true) {
-			if (options?.signal?.aborted) throw new TimeoutError(0, "Aborted");
+			if (options?.signal?.aborted) throw new TimeoutError("Aborted", { timeoutMs: 0 });
 			const record = await this.getRollout(rolloutId);
 			if (record.status !== "running") return record;
-			if (Date.now() - startTime > timeoutMs) throw new TimeoutError(timeoutMs, `Timed out waiting for rollout ${rolloutId} to settle`);
+			if (Date.now() - startTime > timeoutMs) throw new TimeoutError(`Timed out waiting for rollout ${rolloutId} to settle`, { timeoutMs });
 			await this.sleep(pollIntervalMs);
 		}
 	}
@@ -10286,7 +10351,11 @@ async function fetchTeeSurface(client, sandboxId, surface, init) {
 	const response = await client.fetch(path, init);
 	if (response.ok) return response;
 	const body = await response.text();
-	if (response.status === 404 && isRouterNotFound(body)) throw new CapabilityError(`TEE ${surface} is not served by this deployment. The /tee paths are answered by a Tangle confidential operator that intercepts them before the sandbox API; a sandbox reached through the public API has no such route. Point the client at the operator, or create the sandbox with driver.type "tangle" on a deployment that fronts it.`, "TEE_UNSUPPORTED", 404, void 0, "tee");
+	if (response.status === 404 && isRouterNotFound(body)) throw new CapabilityError(`TEE ${surface} is not served by this deployment. The /tee paths are answered by a Tangle confidential operator that intercepts them before the sandbox API; a sandbox reached through the public API has no such route. Point the client at the operator, or create the sandbox with driver.type "tangle" on a deployment that fronts it.`, {
+		code: "TEE_UNSUPPORTED",
+		status: 404,
+		capability: "tee"
+	});
 	throw parseErrorResponse(response.status, body, void 0, response.headers);
 }
 //#endregion
@@ -10424,7 +10493,10 @@ var SandboxAccessCapabilities = class extends SandboxBranchCapabilities {
 	*/
 	async ssh() {
 		await this.ensureRunning();
-		if (!this.connection?.ssh) throw new StateError("SSH is not enabled for this sandbox", this.status, "running");
+		if (!this.connection?.ssh) throw new StateError("SSH is not enabled for this sandbox", {
+			currentState: this.status,
+			requiredState: "running"
+		});
 		return this.connection.ssh;
 	}
 	async sshCommand() {
@@ -10735,14 +10807,14 @@ var SandboxEgressOperations = class {
 		const response = await this.host.fetch(`/v1/sandboxes/${encodeURIComponent(this.host.id())}/egress/denials${query}`);
 		if (!response.ok) throw await parseResponseError(response);
 		const body = await readEgressJson(response, "Egress denials response was malformed: body is not valid JSON");
-		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress denials response was malformed: body is not an object", 502);
+		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress denials response was malformed: body is not an object", { status: 502 });
 		const raw = body.denials;
 		if (raw === void 0 || raw === null) return [];
-		if (!Array.isArray(raw)) throw new ServerError("Egress denials response was malformed: denials is not a list", 502);
+		if (!Array.isArray(raw)) throw new ServerError("Egress denials response was malformed: denials is not a list", { status: 502 });
 		const denials = [];
 		for (const [index, entry] of raw.entries()) {
 			const row = entry;
-			if (typeof row !== "object" || row === null || typeof row.host !== "string" || typeof row.rejectedBy !== "string" || typeof row.count !== "number" || !Number.isInteger(row.count) || row.count < 0 || row.lastAt !== void 0 && row.lastAt !== null && typeof row.lastAt !== "string") throw new ServerError(`Egress denials response was malformed: entry ${index} is not a denial`, 502);
+			if (typeof row !== "object" || row === null || typeof row.host !== "string" || typeof row.rejectedBy !== "string" || typeof row.count !== "number" || !Number.isInteger(row.count) || row.count < 0 || row.lastAt !== void 0 && row.lastAt !== null && typeof row.lastAt !== "string") throw new ServerError(`Egress denials response was malformed: entry ${index} is not a denial`, { status: 502 });
 			denials.push(row.lastAt === void 0 || row.lastAt === null ? {
 				host: row.host,
 				rejectedBy: row.rejectedBy,
@@ -10772,7 +10844,7 @@ var SandboxEgressOperations = class {
 		const row = typeof usage === "object" && usage !== null && !Array.isArray(usage) ? usage : void 0;
 		const count = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 		const usd = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0;
-		if (!row || typeof row.sandboxId !== "string" || typeof row.month !== "string" || row.plan !== "free" && row.plan !== "pro" && row.plan !== "enterprise" || !count(row.bytes) || !usd(row.chargeUsd) || !usd(row.usdPerGb) || !count(row.accountBytes) || !count(row.accountIncludedBytes) || !count(row.accountOverageBytes)) throw new ServerError("Egress usage response was malformed: usage is not a month record", 502);
+		if (!row || typeof row.sandboxId !== "string" || typeof row.month !== "string" || row.plan !== "free" && row.plan !== "pro" && row.plan !== "enterprise" || !count(row.bytes) || !usd(row.chargeUsd) || !usd(row.usdPerGb) || !count(row.accountBytes) || !count(row.accountIncludedBytes) || !count(row.accountOverageBytes)) throw new ServerError("Egress usage response was malformed: usage is not a month record", { status: 502 });
 		return {
 			sandboxId: row.sandboxId,
 			month: row.month,
@@ -10803,11 +10875,11 @@ var SandboxEgressOperations = class {
 		const response = await this.host.fetch(`/v1/sandboxes/${encodeURIComponent(this.host.id())}/egress/activity${query}`);
 		if (!response.ok) throw await parseResponseError(response);
 		const body = await readEgressJson(response, "Egress activity response was malformed: body is not valid JSON");
-		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress activity response was malformed: body is not an object", 502);
+		if (typeof body !== "object" || body === null || Array.isArray(body)) throw new ServerError("Egress activity response was malformed: body is not an object", { status: 502 });
 		const raw = body.activity;
-		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new ServerError("Egress activity response was malformed: activity is not a record", 502);
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new ServerError("Egress activity response was malformed: activity is not a record", { status: 502 });
 		const record = raw;
-		if (typeof record.complete !== "boolean" || typeof record.requestsObserved !== "number" || !Number.isInteger(record.requestsObserved) || record.requestsObserved < 0 || typeof record.unparsedLines !== "number" || !Number.isInteger(record.unparsedLines) || record.unparsedLines < 0 || !Array.isArray(record.destinations) || !Array.isArray(record.incompleteReasons) || !record.incompleteReasons.every((one) => typeof one === "string") || record.complete !== (record.incompleteReasons.length === 0)) throw new ServerError("Egress activity response was malformed: activity is not an activity record", 502);
+		if (typeof record.complete !== "boolean" || typeof record.requestsObserved !== "number" || !Number.isInteger(record.requestsObserved) || record.requestsObserved < 0 || typeof record.unparsedLines !== "number" || !Number.isInteger(record.unparsedLines) || record.unparsedLines < 0 || !Array.isArray(record.destinations) || !Array.isArray(record.incompleteReasons) || !record.incompleteReasons.every((one) => typeof one === "string") || record.complete !== (record.incompleteReasons.length === 0)) throw new ServerError("Egress activity response was malformed: activity is not an activity record", { status: 502 });
 		const destinations = [];
 		for (const [index, entry] of record.destinations.entries()) {
 			const row = entry;
@@ -10818,7 +10890,7 @@ var SandboxEgressOperations = class {
 			].every((field) => {
 				const value = row[field];
 				return value === void 0 || value === null || typeof value === "string";
-			})) throw new ServerError(`Egress activity response was malformed: destination ${index} is not a destination`, 502);
+			})) throw new ServerError(`Egress activity response was malformed: destination ${index} is not a destination`, { status: 502 });
 			destinations.push({
 				host: row.host,
 				action: row.action,
@@ -10842,7 +10914,7 @@ async function readEgressJson(response, message) {
 	try {
 		return await response.json();
 	} catch (cause) {
-		const error = new ServerError(message, 502);
+		const error = new ServerError(message, { status: 502 });
 		error.cause = cause;
 		throw error;
 	}
@@ -10962,7 +11034,7 @@ var SandboxFilesystemOperations = class extends DeclaredFilesystemOperations {
 			totalBytes: size,
 			percentage: 0
 		});
-		const { uploadChunkedFromFile } = await import("./chunked-upload-file-HLSriv3V.js");
+		const { uploadChunkedFromFile } = await import("./chunked-upload-file-DL1-AqRp.js");
 		await uploadChunkedFromFile({ fetch: (path, init) => this.host.runtimeFetch(path, init) }, remotePath, localPath, {
 			mode: options?.permissions,
 			onProgress: options?.onProgress ? (progress) => {
@@ -11087,7 +11159,7 @@ const REFUSED_DIAL_TTL_MS = 5 * 6e4;
 * the scoped-token dial that follows tells them apart.
 */
 function isUpgradeRefusal(error) {
-	return error instanceof TerminalStreamError && error.beforeOpen;
+	return error instanceof TerminalStreamError && error.beforeOpen === true;
 }
 /** Transport failures before `ready`; a protocol error frame is the terminal's own answer. */
 const EDGE_DIAL_FAILURES = new Set([
@@ -11100,7 +11172,7 @@ const EDGE_DIAL_FAILURES = new Set([
 * dropped, closed before `ready` or timed out.
 */
 function isEdgeDialFailure(error) {
-	return error instanceof TerminalStreamError && (error.beforeOpen || EDGE_DIAL_FAILURES.has(error.code));
+	return error instanceof TerminalStreamError && (error.beforeOpen || EDGE_DIAL_FAILURES.has(error.wireCode));
 }
 /**
 * Hold the caller's `onClose` until the stream is ready. A dial that is
@@ -11239,7 +11311,10 @@ var SandboxInteractiveTerminalOperations = class {
 	* (`/v1/sandboxes/{id}/runtime`) that `new URL(absolutePath, base)` would drop.
 	*/
 	resolveTerminalStreamUrl(sidecarProxyUrl, streamPath) {
-		if (!streamPath.startsWith("/")) throw new ServerError(`Terminal stream path must be sandbox-relative (got "${streamPath}")`, 502, { origin: "runtime" });
+		if (!streamPath.startsWith("/")) throw new ServerError(`Terminal stream path must be sandbox-relative (got "${streamPath}")`, {
+			status: 502,
+			origin: "runtime"
+		});
 		return `${sidecarProxyUrl.replace(/\/+$/, "")}${streamPath}`;
 	}
 	/** @internal — invoked by InteractiveSessionHandle.attach(). */
@@ -11287,14 +11362,19 @@ var SandboxInteractiveTerminalOperations = class {
 		if (exactRef.run.sessionId !== id) throw new ValidationError("Interactive attach ref does not belong to the session");
 		assertInteractiveRefBelongsToSandbox(exactRef, this.host.id);
 		const status = await this.host.interactiveStatus(id, exactRef.incarnationId, options);
-		if (!status) throw new NotFoundError("Interactive session", id, {
+		if (!status) throw new NotFoundError(`Interactive session not found: ${id}`, {
+			resourceType: "Interactive session",
+			resourceId: id,
 			origin: "runtime",
 			endpoint: `/agents/sessions/${encodeURIComponent(id)}/interactive`
 		});
-		if (status.state !== "running") throw new StateError(`Interactive session ${id} has exited; there is no live PTY to attach`, status.state, "running", {
+		if (status.state !== "running") throw new StateError(`Interactive session ${id} has exited; there is no live PTY to attach`, {
+			currentState: status.state,
+			requiredState: "running",
 			origin: "runtime",
-			endpoint: `/agents/sessions/${encodeURIComponent(id)}/interactive`
-		}, "INTERACTIVE_SESSION_EXITED");
+			endpoint: `/agents/sessions/${encodeURIComponent(id)}/interactive`,
+			code: "INTERACTIVE_SESSION_EXITED"
+		});
 		if (canonicalCandidateDigest$1(status.ref) !== canonicalCandidateDigest$1(exactRef)) throw new ValidationError("Interactive attach ref does not match the current session");
 		return exactRef;
 	}
@@ -11533,7 +11613,7 @@ async function readBoundedResponseText(response, signal) {
 	const declaredBytes = Number(response.headers.get("content-length"));
 	if (Number.isFinite(declaredBytes) && declaredBytes > MAX_WORKSPACE_IMAGE_RESPONSE_BYTES) {
 		response.body?.cancel();
-		throw new ServerError("Sandbox API returned an oversized workspace image response", 502);
+		throw new ServerError("Sandbox API returned an oversized workspace image response", { status: 502 });
 	}
 	if (!response.body) return "";
 	const reader = response.body.getReader();
@@ -11551,7 +11631,7 @@ async function readBoundedResponseText(response, signal) {
 			const { done, value } = await Promise.race([reader.read(), aborted]);
 			if (done) break;
 			totalBytes += value.byteLength;
-			if (totalBytes > MAX_WORKSPACE_IMAGE_RESPONSE_BYTES) throw new ServerError("Sandbox API returned an oversized workspace image response", 502);
+			if (totalBytes > MAX_WORKSPACE_IMAGE_RESPONSE_BYTES) throw new ServerError("Sandbox API returned an oversized workspace image response", { status: 502 });
 			chunks.push(value);
 		}
 	} catch (error) {
@@ -11590,7 +11670,8 @@ var WorkspaceImages = class {
 			await awaitWithSignal(this.ensureRunning(), signal);
 		} catch (error) {
 			throwIfAborted(options.signal);
-			if (timeoutSignal.aborted || Date.now() >= deadline) throw new TimeoutError(timeoutMs, `Workspace image publication timed out after ${timeoutMs}ms`, {
+			if (timeoutSignal.aborted || Date.now() >= deadline) throw new TimeoutError(`Workspace image publication timed out after ${timeoutMs}ms`, {
+				timeoutMs,
 				origin: "sandbox-api",
 				endpoint: path
 			});
@@ -11598,7 +11679,11 @@ var WorkspaceImages = class {
 		}
 		throwIfAborted(options.signal);
 		const filesystemIncarnationId = this.filesystemIncarnationId();
-		if (!filesystemIncarnationId) throw new StateError("Sandbox filesystem incarnation is not ready", "running", "running with a ready filesystem incarnation", void 0, "FILESYSTEM_INCARNATION_NOT_READY");
+		if (!filesystemIncarnationId) throw new StateError("Sandbox filesystem incarnation is not ready", {
+			currentState: "running",
+			requiredState: "running with a ready filesystem incarnation",
+			code: "FILESYSTEM_INCARNATION_NOT_READY"
+		});
 		const idempotencyKey = options.idempotencyKey ?? createIdempotencyKey();
 		const body = JSON.stringify({
 			...input,
@@ -11606,7 +11691,8 @@ var WorkspaceImages = class {
 		});
 		for (let attempt = 1; attempt <= WORKSPACE_IMAGE_REQUEST_ATTEMPTS; attempt++) {
 			const remainingMs = deadline - Date.now();
-			if (remainingMs <= 0) throw new TimeoutError(timeoutMs, `Workspace image publication timed out after ${timeoutMs}ms`, {
+			if (remainingMs <= 0) throw new TimeoutError(`Workspace image publication timed out after ${timeoutMs}ms`, {
+				timeoutMs,
 				origin: "sandbox-api",
 				endpoint: path
 			});
@@ -11625,13 +11711,15 @@ var WorkspaceImages = class {
 				responseText = await readBoundedResponseText(response, signal);
 			} catch (error) {
 				throwIfAborted(options.signal);
-				if (timeoutSignal.aborted || Date.now() >= deadline) throw new TimeoutError(timeoutMs, `Workspace image publication timed out after ${timeoutMs}ms`, {
+				if (timeoutSignal.aborted || Date.now() >= deadline) throw new TimeoutError(`Workspace image publication timed out after ${timeoutMs}ms`, {
+					timeoutMs,
 					origin: "sandbox-api",
 					endpoint: path
 				});
 				if (error instanceof ServerError) throw error;
 				if (attempt < WORKSPACE_IMAGE_REQUEST_ATTEMPTS && Date.now() < deadline) continue;
-				throw new NetworkError("Failed to read the workspace image publication response", error instanceof Error ? error : new Error(String(error)), {
+				throw new NetworkError("Failed to read the workspace image publication response", {
+					cause: error instanceof Error ? error : new Error(String(error)),
 					origin: "sandbox-api",
 					endpoint: path
 				});
@@ -11641,7 +11729,7 @@ var WorkspaceImages = class {
 					method: "POST",
 					path
 				}, response.headers);
-				if (error.code === "IMAGE_PUBLISH_OUTCOME_UNKNOWN" && attempt < WORKSPACE_IMAGE_REQUEST_ATTEMPTS && Date.now() < deadline) continue;
+				if (error.wireCode === "IMAGE_PUBLISH_OUTCOME_UNKNOWN" && attempt < WORKSPACE_IMAGE_REQUEST_ATTEMPTS && Date.now() < deadline) continue;
 				throw error;
 			}
 			const parsed = parseWorkspaceImagePublishResultForRepository((() => {
@@ -11651,13 +11739,15 @@ var WorkspaceImages = class {
 					return;
 				}
 			})(), input.repository);
-			if (!parsed) throw new ServerError("Sandbox API returned an invalid workspace image result", 502, {
+			if (!parsed) throw new ServerError("Sandbox API returned an invalid workspace image result", {
+				status: 502,
 				origin: "sandbox-api",
 				endpoint: path
 			});
 			return parsed;
 		}
-		throw new ServerError("Sandbox API did not return a workspace image result", 502, {
+		throw new ServerError("Sandbox API did not return a workspace image result", {
+			status: 502,
 			origin: "sandbox-api",
 			endpoint: path
 		});
@@ -11820,7 +11910,10 @@ var SandboxInstance = class SandboxInstance extends SandboxEgressCapabilities {
 	*/
 	direct() {
 		const data = state(this);
-		if (!this.connection?.hostUrl && !this.connection?.execHost && !this.connection?.runtimeUrl) throw new StateError("Sandbox has no direct runtime URL", this.status, "running");
+		if (!this.connection?.hostUrl && !this.connection?.execHost && !this.connection?.runtimeUrl) throw new StateError("Sandbox has no direct runtime URL", {
+			currentState: this.status,
+			requiredState: "running"
+		});
 		let directInstance;
 		directInstance = new SandboxInstance(new DirectRuntimeHttpClient(data.client, this.id, () => directInstance.connection, async () => {
 			await directInstance.refreshFor("bearer-refused");
@@ -11831,7 +11924,10 @@ var SandboxInstance = class SandboxInstance extends SandboxEgressCapabilities {
 			try {
 				await directInstance.refreshFor("runtime-refused");
 			} catch (error) {
-				if (error instanceof NotFoundError) throw new StateError("Sandbox is not running (status: deleted)", "deleted", "running");
+				if (error instanceof NotFoundError) throw new StateError("Sandbox is not running (status: deleted)", {
+					currentState: "deleted",
+					requiredState: "running"
+				});
 				return;
 			}
 			directInstance.assertRunnable();