@tangle-network/sandbox 1.0.190 → 1.0.192

package/dist/{interactive-controller-C876Pjaj.js → interactive-controller-jr3_74Pq.js}

@@ -1,10 +1,10 @@
 import { C as boundedIdentifierSchema, T as boundedJsonSchema, o as canonicalCandidateDigest } from "./harness-DMaNgn0S.js";
-import { B as PlanContinuationSchema, D as agentInteractiveSessionControlClaimMatchesRef, P as AgentExactRunControlRefSchema, R as AgentExecutionOutcomeSchema, U as InteractionRequestSchema, c as assertInteractiveSessionRef, h as AgentInteractiveSessionAttachSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, r as browserInteractiveTerminalEndpoint, v as AgentInteractiveSessionControlClaimSchema, x as AgentInteractiveSessionRefSchema, z as DurablePlanSchema } from "./browser-interactive-control-controller-DHIS8edi.js";
+import { B as PlanContinuationSchema, D as agentInteractiveSessionControlClaimMatchesRef, P as AgentExactRunControlRefSchema, R as AgentExecutionOutcomeSchema, U as InteractionRequestSchema, c as assertInteractiveSessionRef, h as AgentInteractiveSessionAttachSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, r as browserInteractiveTerminalEndpoint, v as AgentInteractiveSessionControlClaimSchema, x as AgentInteractiveSessionRefSchema, z as DurablePlanSchema } from "./browser-interactive-control-controller-BYbNLahH.js";
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { E as ValidationError, S as ServerError, h as NetworkError, r as parseResponseError, s as CapabilityError, t as TerminalStreamError, x as SandboxError } from "./errors-CaX0a5Ry.js";
-import { n as awaitWithAbort, r as combineAbortSignals, t as abortableSleep } from "./abort-signal-PgWPMn_e.js";
+import { C as ServerError, D as ValidationError, S as SandboxError, g as NetworkError, i as parseResponseError, l as CapabilityError, t as TerminalStreamError } from "./errors-Mzq10WZq.js";
+import { n as awaitWithAbort, r as combineAbortSignals, t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { s as uploadChunked } from "./chunked-upload-vAE2hVcP.js";
+import { s as uploadChunked } from "./chunked-upload-D5ytV_s6.js";
 import { z } from "zod";
 /** Stable declaration order; registry tests check the shipped spec composition. */
 const ALL_BACKEND_TYPES = Object.values({
@@ -785,9 +785,9 @@ function assertCurrentBackendType(value, field = "backend.type") {
 function applyRequestedModel(backend, requestedModel) {
 	if (requestedModel === void 0) return backend;
 	const model = requestedModel.trim();
-	if (!model) throw new ValidationError("model must be a non-empty model id", { model: "Must be a non-empty model id" });
+	if (!model) throw new ValidationError("model must be a non-empty model id", { fields: { model: "Must be a non-empty model id" } });
 	const explicit = backend?.model?.model;
-	if (explicit !== void 0 && explicit !== model) throw new ValidationError(`Conflicting per-turn models: options.model="${model}" vs backend.model.model="${explicit}". Set one of them.`, { model: "Conflicts with backend.model.model" });
+	if (explicit !== void 0 && explicit !== model) throw new ValidationError(`Conflicting per-turn models: options.model="${model}" vs backend.model.model="${explicit}". Set one of them.`, { fields: { model: "Conflicts with backend.model.model" } });
 	return {
 		...backend,
 		model: {
@@ -1034,12 +1034,14 @@ function sameExactRunControlRef(left, right) {
 }
 function validateAcceptedDispatchRunRef(raw, expected, sandboxId, sessionId, executionId, endpoint = "/agents/run/stream") {
 	const parsed = AgentExactRunControlRefSchema.safeParse(raw);
-	if (!parsed.success) throw new ServerError("Sandbox returned an invalid exact run reference on admission", 502, {
+	if (!parsed.success) throw new ServerError("Sandbox returned an invalid exact run reference on admission", {
+		status: 502,
 		origin: "runtime",
 		endpoint
 	});
 	const accepted = parsed.data;
-	if (accepted.environmentId !== sandboxId || accepted.sessionId !== sessionId || accepted.executionId !== executionId || !sameExactRunControlRef(accepted, expected)) throw new ServerError("Sandbox returned an exact run reference for another execution", 502, {
+	if (accepted.environmentId !== sandboxId || accepted.sessionId !== sessionId || accepted.executionId !== executionId || !sameExactRunControlRef(accepted, expected)) throw new ServerError("Sandbox returned an exact run reference for another execution", {
+		status: 502,
 		origin: "runtime",
 		endpoint
 	});
@@ -1077,7 +1079,7 @@ function mintTraceId() {
 */
 function resolveTraceId(requested) {
 	if (requested === void 0) return mintTraceId();
-	if (!isTraceId(requested)) throw new ValidationError("traceId must be 8-200 characters of letters, digits, '_' or '-'", { traceId: "Invalid trace id" });
+	if (!isTraceId(requested)) throw new ValidationError("traceId must be 8-200 characters of letters, digits, '_' or '-'", { fields: { traceId: "Invalid trace id" } });
 	return requested;
 }
 /**
@@ -1095,7 +1097,7 @@ function traceHeaders(traceId) {
 //#region src/runtime-credential-retry.ts
 /** A 503 the runtime answers before any work starts; the request may be resent. */
 function isRetryableCredentialRefusal(error) {
-	return error instanceof SandboxError && error.status === 503 && (error.code === "MODEL_CREDENTIAL_SUPERSEDED" || error.code === "MODEL_CREDENTIAL_PLATFORM_UNAVAILABLE" || error.code === "HUB_CREDENTIAL_REFRESH_UNAVAILABLE" || error.code === "HUB_CREDENTIAL_REFRESH_FAILED" && Number.isFinite(error.retryAfterMs));
+	return error instanceof SandboxError && error.status === 503 && (error.wireCode === "MODEL_CREDENTIAL_SUPERSEDED" || error.wireCode === "MODEL_CREDENTIAL_PLATFORM_UNAVAILABLE" || error.wireCode === "HUB_CREDENTIAL_REFRESH_UNAVAILABLE" || error.wireCode === "HUB_CREDENTIAL_REFRESH_FAILED" && Number.isFinite(error.retryAfterMs));
 }
 //#endregion
 //#region src/generated/file-write-preconditions.ts
@@ -1232,7 +1234,7 @@ var RuntimeFiles = class extends RuntimeApiTransport {
 			expectedHash: options.ifHash,
 			ifAbsent: options.ifAbsent
 		});
-		if (!payload.data) throw new ServerError("Invalid file write response: missing data", 502);
+		if (!payload.data) throw new ServerError("Invalid file write response: missing data", { status: 502 });
 		return payload.data;
 	}
 	async readFiles(paths, options = {}) {
@@ -1350,10 +1352,10 @@ var RuntimeFiles = class extends RuntimeApiTransport {
 			const response = await this.request(`/files/usage?${params}`, { method: "GET" });
 			const payload = await response.json();
 			if (response.status !== 202) {
-				if (!payload.data) throw new ServerError("Workspace usage response was malformed", 502);
+				if (!payload.data) throw new ServerError("Workspace usage response was malformed", { status: 502 });
 				return payload.data;
 			}
-			if (payload.state !== "preparing" || Date.now() >= deadline) throw new ServerError("Workspace usage observation timed out", 504);
+			if (payload.state !== "preparing" || Date.now() >= deadline) throw new ServerError("Workspace usage observation timed out", { status: 504 });
 			await new Promise((resolve) => setTimeout(resolve, 1e3));
 		}
 	}
@@ -1542,17 +1544,20 @@ var SandboxRuntimeApi = class extends RuntimeFiles {
 		});
 		if (payload?.receipt === null) return null;
 		const receipt = payload?.receipt;
-		if (!receipt || typeof receipt.info?.id !== "string" || !receipt.info.id || receipt.processing !== true) throw new ServerError("Runtime returned an invalid message admission receipt", 502, {
+		if (!receipt || typeof receipt.info?.id !== "string" || !receipt.info.id || receipt.processing !== true) throw new ServerError("Runtime returned an invalid message admission receipt", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
 		const parsedRef = receipt.runControlRef === void 0 ? void 0 : AgentExactRunControlRefSchema.safeParse(receipt.runControlRef);
-		if (parsedRef && !parsedRef.success) throw new ServerError("Admission returned an invalid exact run reference", 502, {
+		if (parsedRef && !parsedRef.success) throw new ServerError("Admission returned an invalid exact run reference", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
 		const runControlRef = parsedRef?.data;
-		if (runControlRef && (runControlRef.sessionId !== sessionId || runControlRef.executionId !== receipt.info.id)) throw new ServerError("Admission control reference does not match its execution", 502, {
+		if (runControlRef && (runControlRef.sessionId !== sessionId || runControlRef.executionId !== receipt.info.id)) throw new ServerError("Admission control reference does not match its execution", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
@@ -1573,12 +1578,14 @@ var SandboxRuntimeApi = class extends RuntimeFiles {
 			method: "GET",
 			signal: options.signal
 		});
-		if (payload.success !== true || !Array.isArray(payload.executions)) throw new ServerError("Session runs response has an invalid shape", 502, {
+		if (payload.success !== true || !Array.isArray(payload.executions)) throw new ServerError("Session runs response has an invalid shape", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
 		const executions = payload.executions.map((value) => normalizeSessionExecutionInfo(value, sessionId));
-		if (executions.some((execution) => execution === null)) throw new ServerError("Session runs response has an invalid execution", 502, {
+		if (executions.some((execution) => execution === null)) throw new ServerError("Session runs response has an invalid execution", {
+			status: 502,
 			origin: "runtime",
 			endpoint
 		});
@@ -1600,7 +1607,8 @@ var SandboxRuntimeApi = class extends RuntimeFiles {
 				...backend && Object.keys(backend).length > 0 ? { backend } : {}
 			})
 		}));
-		if (!info) throw new ServerError("Session creation response missing session id", 502, {
+		if (!info) throw new ServerError("Session creation response missing session id", {
+			status: 502,
 			endpoint: "/agents/sessions",
 			origin: "runtime"
 		});
@@ -1634,7 +1642,8 @@ var SandboxRuntimeApi = class extends RuntimeFiles {
 				...options.isolateFileWrites !== void 0 ? { isolateFileWrites: options.isolateFileWrites } : {}
 			})
 		});
-		if (!info.id) throw new ServerError("Task session creation response missing session id", 502, {
+		if (!info.id) throw new ServerError("Task session creation response missing session id", {
+			status: 502,
 			endpoint: "/tasks",
 			origin: "runtime"
 		});
@@ -1721,8 +1730,14 @@ function assertScopedTokenActive(token, expectedScope) {
 }
 function parseScopedTokenResponse(raw, expectedScope, expectedAccess) {
 	const parsed = scopedTokenResponseSchema.safeParse(raw);
-	if (!parsed.success) throw new ServerError("Sandbox API returned an invalid scoped token response.", 502, { origin: "sandbox-api" });
-	if (parsed.data.scope !== expectedScope || parsed.data.access !== expectedAccess) throw new ServerError("Sandbox API did not acknowledge the requested token scope and access.", 502, { origin: "sandbox-api" });
+	if (!parsed.success) throw new ServerError("Sandbox API returned an invalid scoped token response.", {
+		status: 502,
+		origin: "sandbox-api"
+	});
+	if (parsed.data.scope !== expectedScope || parsed.data.access !== expectedAccess) throw new ServerError("Sandbox API did not acknowledge the requested token scope and access.", {
+		status: 502,
+		origin: "sandbox-api"
+	});
 	const token = {
 		token: parsed.data.token,
 		expiresAt: /* @__PURE__ */ new Date(parsed.data.expiresAt * 1e3),
@@ -1734,7 +1749,10 @@ function parseScopedTokenResponse(raw, expectedScope, expectedAccess) {
 	try {
 		assertScopedTokenActive(token, expectedScope);
 	} catch {
-		throw new ServerError("Sandbox API returned an expired or invalid scoped token.", 502, { origin: "sandbox-api" });
+		throw new ServerError("Sandbox API returned an expired or invalid scoped token.", {
+			status: 502,
+			origin: "sandbox-api"
+		});
 	}
 	return token;
 }
@@ -1760,13 +1778,16 @@ async function requestScopedToken(client, sandboxId, options, requestOptions) {
 	try {
 		raw = await response.json();
 	} catch {
-		throw new ServerError("Sandbox API returned invalid scoped token JSON.", 502, { origin: "sandbox-api" });
+		throw new ServerError("Sandbox API returned invalid scoped token JSON.", {
+			status: 502,
+			origin: "sandbox-api"
+		});
 	}
 	return parseScopedTokenResponse(raw, options.scope, access);
 }
 function parseInteractiveSessionTokenRef(ref) {
 	const parsed = AgentInteractiveSessionRefSchema.safeParse(ref);
-	if (!parsed.success) throw new ValidationError("Interactive session ref is invalid.", { ref: parsed.error.issues[0]?.message ?? "invalid ref" });
+	if (!parsed.success) throw new ValidationError("Interactive session ref is invalid.", { fields: { ref: parsed.error.issues[0]?.message ?? "invalid ref" } });
 	return parsed.data;
 }
 function interactiveSessionTokenOptions(ref, options = {}) {
@@ -1805,7 +1826,7 @@ const DEFAULT_ROWS = 24;
 * unpadded).
 */
 function base64UrlEncodeUtf8(value) {
-	if (typeof btoa !== "function") throw new TerminalStreamError("global btoa is unavailable; cannot build the edge bearer subprotocol", "ENVIRONMENT");
+	if (typeof btoa !== "function") throw new TerminalStreamError("global btoa is unavailable; cannot build the edge bearer subprotocol", { code: "ENVIRONMENT" });
 	const bytes = new TextEncoder().encode(value);
 	let binary = "";
 	for (const byte of bytes) binary += String.fromCharCode(byte);
@@ -1826,11 +1847,11 @@ async function resolveTerminalToken(token, signal) {
 		try {
 			assertScopedTokenActive(value, "session-runtime");
 		} catch {
-			throw new TerminalStreamError("Terminal stream scoped token is expired or invalid", "INVALID_TOKEN");
+			throw new TerminalStreamError("Terminal stream scoped token is expired or invalid", { code: "INVALID_TOKEN" });
 		}
 		return value.token;
 	}
-	if (typeof value !== "string" || !value.trim()) throw new TerminalStreamError(typeof token === "function" ? "Terminal stream token provider returned an empty token" : "Terminal stream token must not be empty", "INVALID_TOKEN");
+	if (typeof value !== "string" || !value.trim()) throw new TerminalStreamError(typeof token === "function" ? "Terminal stream token provider returned an empty token" : "Terminal stream token must not be empty", { code: "INVALID_TOKEN" });
 	return value;
 }
 function isApiKeyToken(token) {
@@ -1841,9 +1862,12 @@ async function resolveDialCredential(token, authFormat, signal) {
 		kind: "subprotocol",
 		token: await resolveTerminalToken(token, signal)
 	};
-	if (!token.apiKey.trim()) throw new TerminalStreamError("Terminal stream API key must not be empty", "INVALID_TOKEN");
-	if (authFormat === "sidecar-direct") throw new TerminalStreamError("An API key authenticates the public API proxy, not a direct sidecar dial", "INVALID_TOKEN");
-	if (!terminalUpgradeHeadersSupported()) throw new TerminalStreamError("This runtime cannot set headers on a WebSocket upgrade; dial with a scoped token", "ENVIRONMENT", { beforeOpen: true });
+	if (!token.apiKey.trim()) throw new TerminalStreamError("Terminal stream API key must not be empty", { code: "INVALID_TOKEN" });
+	if (authFormat === "sidecar-direct") throw new TerminalStreamError("An API key authenticates the public API proxy, not a direct sidecar dial", { code: "INVALID_TOKEN" });
+	if (!terminalUpgradeHeadersSupported()) throw new TerminalStreamError("This runtime cannot set headers on a WebSocket upgrade; dial with a scoped token", {
+		code: "ENVIRONMENT",
+		beforeOpen: true
+	});
 	return {
 		kind: "apiKey",
 		apiKey: token.apiKey
@@ -1885,7 +1909,7 @@ function buildUpgradeRequest(options, credential, identity, traceId) {
 }
 function openWebSocket(request, credential) {
 	const WebSocketCtor = globalThis.WebSocket;
-	if (typeof WebSocketCtor !== "function") throw new TerminalStreamError("global WebSocket is unavailable in this environment (Node >= 22 or a browser is required)", "ENVIRONMENT");
+	if (typeof WebSocketCtor !== "function") throw new TerminalStreamError("global WebSocket is unavailable in this environment (Node >= 22 or a browser is required)", { code: "ENVIRONMENT" });
 	if (Object.keys(request.headers).length === 0) return new WebSocketCtor(request.url, request.protocols);
 	const WebSocketWithHeaders = WebSocketCtor;
 	try {
@@ -1894,13 +1918,16 @@ function openWebSocket(request, credential) {
 			headers: request.headers
 		});
 	} catch (cause) {
-		if (credential.kind === "apiKey") throw new TerminalStreamError(`This runtime rejected WebSocket upgrade headers: ${cause instanceof Error ? cause.message : String(cause)}`, "ENVIRONMENT", { beforeOpen: true });
+		if (credential.kind === "apiKey") throw new TerminalStreamError(`This runtime rejected WebSocket upgrade headers: ${cause instanceof Error ? cause.message : String(cause)}`, {
+			code: "ENVIRONMENT",
+			beforeOpen: true
+		});
 		return new WebSocketCtor(request.url, request.protocols);
 	}
 }
 function resolveStreamTraceId(requested) {
 	if (requested === void 0) return mintTraceId();
-	if (!isTraceId(requested)) throw new TerminalStreamError("Terminal stream traceId must be 8-200 characters of letters, digits, '_' or '-'", "INVALID_TRACE_ID");
+	if (!isTraceId(requested)) throw new TerminalStreamError("Terminal stream traceId must be 8-200 characters of letters, digits, '_' or '-'", { code: "INVALID_TRACE_ID" });
 	return requested;
 }
 function terminalAbortReason(signal) {
@@ -1937,24 +1964,24 @@ function toWebSocketUrl(url) {
 	try {
 		parsed = new URL(url);
 	} catch {
-		throw new TerminalStreamError(`Terminal WebSocket URL is not absolute: ${url}`, "INVALID_URL");
+		throw new TerminalStreamError(`Terminal WebSocket URL is not absolute: ${url}`, { code: "INVALID_URL" });
 	}
 	if (parsed.protocol === "https:") parsed.protocol = "wss:";
 	else if (parsed.protocol === "http:") parsed.protocol = "ws:";
-	if (parsed.protocol !== "wss:" && parsed.protocol !== "ws:") throw new TerminalStreamError(`Terminal WebSocket URL must be ws(s) or http(s), got ${parsed.protocol}`, "INVALID_URL");
+	if (parsed.protocol !== "wss:" && parsed.protocol !== "ws:") throw new TerminalStreamError(`Terminal WebSocket URL must be ws(s) or http(s), got ${parsed.protocol}`, { code: "INVALID_URL" });
 	return parsed.toString();
 }
 function assertDimension(name, value) {
-	if (!Number.isInteger(value) || value < 1 || value > 4096) throw new TerminalStreamError(`${name} must be an integer in [1, ${TERMINAL_WS_MAX_DIMENSION}], got ${value}`, "INVALID_DIMENSION");
+	if (!Number.isInteger(value) || value < 1 || value > 4096) throw new TerminalStreamError(`${name} must be an integer in [1, ${TERMINAL_WS_MAX_DIMENSION}], got ${value}`, { code: "INVALID_DIMENSION" });
 }
 /** Decode the sidecar's base64 output frame without a Node-only dependency. */
 function decodeBase64(value) {
-	if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)) throw new TerminalStreamError("Terminal output frame is not valid base64", "INVALID_FRAME");
+	if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)) throw new TerminalStreamError("Terminal output frame is not valid base64", { code: "INVALID_FRAME" });
 	let binary;
 	try {
 		binary = atob(value);
 	} catch {
-		throw new TerminalStreamError("Terminal output frame is not valid base64", "INVALID_FRAME");
+		throw new TerminalStreamError("Terminal output frame is not valid base64", { code: "INVALID_FRAME" });
 	}
 	const bytes = new Uint8Array(binary.length);
 	for (let index = 0; index < binary.length; index += 1) bytes[index] = binary.charCodeAt(index);
@@ -1962,12 +1989,12 @@ function decodeBase64(value) {
 }
 function normalizeInteractiveSessionIdentity(incarnationId, control) {
 	if (incarnationId === void 0 && control === void 0) return void 0;
-	if (typeof incarnationId !== "string" || incarnationId.length === 0 || incarnationId.trim() !== incarnationId) throw new TerminalStreamError("Interactive terminal attach requires an exact incarnationId", "INVALID_INTERACTIVE_IDENTITY");
-	if (control === void 0) throw new TerminalStreamError("Interactive terminal attach requires an exact control claim", "INVALID_INTERACTIVE_CONTROL");
+	if (typeof incarnationId !== "string" || incarnationId.length === 0 || incarnationId.trim() !== incarnationId) throw new TerminalStreamError("Interactive terminal attach requires an exact incarnationId", { code: "INVALID_INTERACTIVE_IDENTITY" });
+	if (control === void 0) throw new TerminalStreamError("Interactive terminal attach requires an exact control claim", { code: "INVALID_INTERACTIVE_CONTROL" });
 	const parsedControl = AgentInteractiveSessionControlClaimSchema.safeParse(control);
-	if (!parsedControl.success) throw new TerminalStreamError("Interactive terminal attach requires an exact control claim", "INVALID_INTERACTIVE_CONTROL");
+	if (!parsedControl.success) throw new TerminalStreamError("Interactive terminal attach requires an exact control claim", { code: "INVALID_INTERACTIVE_CONTROL" });
 	const expiresAt = Date.parse(parsedControl.data.expiresAt);
-	if (!Number.isFinite(expiresAt) || expiresAt <= Date.now()) throw new TerminalStreamError("Interactive terminal control claim is expired", "INTERACTIVE_CONTROL_EXPIRED");
+	if (!Number.isFinite(expiresAt) || expiresAt <= Date.now()) throw new TerminalStreamError("Interactive terminal control claim is expired", { code: "INTERACTIVE_CONTROL_EXPIRED" });
 	return {
 		incarnationId,
 		control: parsedControl.data
@@ -1976,9 +2003,9 @@ function normalizeInteractiveSessionIdentity(incarnationId, control) {
 /** The incarnation an observer stream watches, or undefined for any other stream. */
 function observedIncarnationId(options) {
 	if (options.observe !== true) return void 0;
-	if (options.control !== void 0) throw new TerminalStreamError("An interactive terminal observer carries no control claim", "INVALID_INTERACTIVE_CONTROL");
+	if (options.control !== void 0) throw new TerminalStreamError("An interactive terminal observer carries no control claim", { code: "INVALID_INTERACTIVE_CONTROL" });
 	const { incarnationId } = options;
-	if (typeof incarnationId !== "string" || incarnationId.length === 0 || incarnationId.trim() !== incarnationId) throw new TerminalStreamError("An interactive terminal observer requires an exact incarnationId", "INVALID_INTERACTIVE_IDENTITY");
+	if (typeof incarnationId !== "string" || incarnationId.length === 0 || incarnationId.trim() !== incarnationId) throw new TerminalStreamError("An interactive terminal observer requires an exact incarnationId", { code: "INVALID_INTERACTIVE_IDENTITY" });
 	return incarnationId;
 }
 function interactiveInitFields(options, identity) {
@@ -1994,7 +2021,7 @@ function interactiveInitFields(options, identity) {
 	};
 }
 function buildTerminalInitMessage(options, identity, traceId) {
-	if (typeof options.connectionId !== "string" || !options.connectionId.trim()) throw new TerminalStreamError("Terminal stream connectionId must not be empty", "INVALID_CONNECTION_ID");
+	if (typeof options.connectionId !== "string" || !options.connectionId.trim()) throw new TerminalStreamError("Terminal stream connectionId must not be empty", { code: "INVALID_CONNECTION_ID" });
 	if (options.cols !== void 0) assertDimension("cols", options.cols);
 	if (options.rows !== void 0) assertDimension("rows", options.rows);
 	const parsed = terminalInitMessageSchema.safeParse({
@@ -2008,12 +2035,12 @@ function buildTerminalInitMessage(options, identity, traceId) {
 		...interactiveInitFields(options, identity),
 		...terminalUpgradeHeadersSupported() ? {} : { traceId }
 	});
-	if (!parsed.success) throw new TerminalStreamError("Terminal stream init does not match the shared terminal protocol", "INVALID_INIT");
+	if (!parsed.success) throw new TerminalStreamError("Terminal stream init does not match the shared terminal protocol", { code: "INVALID_INIT" });
 	return parsed.data;
 }
 function assertInteractiveControlActive(identity) {
 	if (identity === void 0) return;
-	if (Date.parse(identity.control.expiresAt) <= Date.now()) throw new TerminalStreamError("Interactive terminal control claim is expired", "INTERACTIVE_CONTROL_EXPIRED");
+	if (Date.parse(identity.control.expiresAt) <= Date.now()) throw new TerminalStreamError("Interactive terminal control claim is expired", { code: "INTERACTIVE_CONTROL_EXPIRED" });
 }
 /**
 * Split input so each serialized `input` frame stays under the server's
@@ -2150,7 +2177,7 @@ var TerminalStream = class TerminalStream {
 			let opened = false;
 			const timeoutMs = this.#options.connectTimeoutMs ?? 15e3;
 			const timer = setTimeout(() => {
-				fail(new TerminalStreamError(`Terminal attach timed out after ${timeoutMs}ms waiting for ready`, "CONNECT_TIMEOUT"));
+				fail(new TerminalStreamError(`Terminal attach timed out after ${timeoutMs}ms waiting for ready`, { code: "CONNECT_TIMEOUT" }));
 				this.ws.close(1e3, "connect timeout");
 			}, timeoutMs);
 			const cleanup = () => {
@@ -2186,7 +2213,7 @@ var TerminalStream = class TerminalStream {
 				try {
 					assertInteractiveControlActive(this.interactiveIdentity);
 				} catch (error) {
-					fail(error instanceof TerminalStreamError ? error : new TerminalStreamError("Interactive terminal control claim is expired", "INTERACTIVE_CONTROL_EXPIRED"));
+					fail(error instanceof TerminalStreamError ? error : new TerminalStreamError("Interactive terminal control claim is expired", { code: "INTERACTIVE_CONTROL_EXPIRED" }));
 					return;
 				}
 				this.ws.send(JSON.stringify(this.#initMessage));
@@ -2199,11 +2226,17 @@ var TerminalStream = class TerminalStream {
 				});
 			});
 			this.ws.addEventListener("error", () => {
-				fail(new TerminalStreamError("Terminal WebSocket transport failed before ready", "TRANSPORT", { beforeOpen: !opened }));
+				fail(new TerminalStreamError("Terminal WebSocket transport failed before ready", {
+					code: "TRANSPORT",
+					beforeOpen: !opened
+				}));
 			});
 			this.ws.addEventListener("close", (event) => {
 				this.closed = true;
-				fail(new TerminalStreamError(`Terminal WebSocket closed before ready (code ${event.code}${event.reason ? `: ${event.reason}` : ""})`, "CLOSED_BEFORE_READY", { beforeOpen: !opened }));
+				fail(new TerminalStreamError(`Terminal WebSocket closed before ready (code ${event.code}${event.reason ? `: ${event.reason}` : ""})`, {
+					code: "CLOSED_BEFORE_READY",
+					beforeOpen: !opened
+				}));
 				for (const waiter of this.closeWaiters) waiter();
 				this.closeWaiters = [];
 				this.handlers.onClose?.(event.code, event.reason);
@@ -2219,7 +2252,7 @@ var TerminalStream = class TerminalStream {
 			return;
 		}
 		const failProtocolFrame = () => {
-			const error = new TerminalStreamError("Terminal control frame does not match the shared terminal protocol", "INVALID_FRAME");
+			const error = new TerminalStreamError("Terminal control frame does not match the shared terminal protocol", { code: "INVALID_FRAME" });
 			const beforeReady = !connectPhase.settled();
 			if (this.ws.readyState === WebSocket.OPEN) this.ws.close(1e3, "invalid terminal frame");
 			if (beforeReady) connectPhase.fail(error);
@@ -2268,7 +2301,7 @@ var TerminalStream = class TerminalStream {
 					this.handlers.onOutput?.(parsed.data.seq, bytes);
 					if (this.handlers.onOutput === void 0) this.handlers.onData?.(bytes);
 				} catch (error) {
-					const protocolError = error instanceof TerminalStreamError ? error : new TerminalStreamError("Terminal output frame is not valid base64", "INVALID_FRAME");
+					const protocolError = error instanceof TerminalStreamError ? error : new TerminalStreamError("Terminal output frame is not valid base64", { code: "INVALID_FRAME" });
 					if (!connectPhase.settled()) connectPhase.fail(protocolError);
 					else this.handlers.onError?.(protocolError);
 					if (this.ws.readyState === WebSocket.OPEN) this.ws.close(1e3, "invalid terminal output");
@@ -2282,7 +2315,7 @@ var TerminalStream = class TerminalStream {
 				return;
 			case "renewed": return;
 			case "error": {
-				const error = new TerminalStreamError(parsed.data.message, parsed.data.code);
+				const error = new TerminalStreamError(parsed.data.message, { code: parsed.data.code });
 				if (!connectPhase.settled()) {
 					connectPhase.fail(error);
 					return;
@@ -2298,7 +2331,7 @@ var TerminalStream = class TerminalStream {
 	}
 	/** The server's `ready` acknowledgement. Set once `connect()` resolves. */
 	get ready() {
-		if (!this.readyInfo) throw new TerminalStreamError("Terminal stream is not ready yet", "NOT_READY");
+		if (!this.readyInfo) throw new TerminalStreamError("Terminal stream is not ready yet", { code: "NOT_READY" });
 		return this.readyInfo;
 	}
 	/** Correlation id of this attach (`x-tangle-trace-id` / `traceId`). */
@@ -2429,7 +2462,7 @@ var TerminalStream = class TerminalStream {
 		};
 	}
 	assertOpen(action) {
-		if (!this.isOpen) throw new TerminalStreamError(`Cannot ${action}: terminal stream is not open`, "NOT_OPEN");
+		if (!this.isOpen) throw new TerminalStreamError(`Cannot ${action}: terminal stream is not open`, { code: "NOT_OPEN" });
 	}
 };
 //#endregion

package/dist/lib/prepared-evidence.js

@@ -1,2 +1,2 @@
-import { t as runPreparedEvidence } from "../prepared-evidence-CP1MmeCQ.js";
+import { t as runPreparedEvidence } from "../prepared-evidence-4prvV0YK.js";
 export { runPreparedEvidence };

package/dist/lib/prepared-process.js

@@ -1,2 +1,2 @@
-import { n as withPreparedProcessCalls, t as runPreparedProcess } from "../prepared-process-BWVz93cT.js";
+import { n as withPreparedProcessCalls, t as runPreparedProcess } from "../prepared-process-BSpZXDDw.js";
 export { runPreparedProcess, withPreparedProcessCalls };

package/dist/{lines-Br3ygqhP.d.ts → lines-CCHDUfQg.d.ts}

@@ -1,4 +1,4 @@
-import { Tn as CreateSandboxOptions, ga as BackendConfig } from "./types-B-UsXSi6.js";
+import { Tn as CreateSandboxOptions, ga as BackendConfig } from "./types-CiuGb4lZ.js";
 
 //#region src/line-application.d.ts
 /** Bounded callback request bytes after canonicalization, including JSON framing. */

package/dist/{lines-DxHJhxCe.js → lines-DrG0WOW6.js}

@@ -1,4 +1,4 @@
-import { E as ValidationError, n as parseErrorResponse } from "./errors-CaX0a5Ry.js";
+import { D as ValidationError, r as parseErrorResponse } from "./errors-Mzq10WZq.js";
 //#region src/line-identity.ts
 /**
 * The instance key that serves one member: `keyPrefix` plus the first 32 hex

package/dist/lines.d.ts

@@ -1,2 +1,2 @@
-import { A as LineRespondAgent, B as LineVoiceOptions, C as LineMessage, D as LineReplyCode, E as LineReminderPreferences, F as LineSenderVerification, I as LineSenderVerificationStart, L as LineThread, M as LineRole, N as LineSendInput, O as LineReplyCodeInput, P as LineSendReceipt, R as LineTransport, S as LineMemberSpec, T as LineProvider, V as LinesHttpClient, _ as LineInstanceCreate, a as Line, b as LineMemberInstance, c as LineAllowanceSubject, d as LineAttachment, f as LineAttachmentReauthorization, g as LineInstanceAttachOptions, h as LineImage, i as profileChannelReference, j as LineRespondView, k as LineReplyGate, l as LineApplicationAttachOptions, m as LineFromConnectionInput, n as SandboxLines, o as LineAgentRolePolicy, p as LineExecutionKey, r as lineInstanceKey, s as LineAllowance, t as LinesClient, u as LineAttachOptions, v as LineLimits, w as LineNumberInventory, x as LineMemberPatch, y as LineMember, z as LineVoice } from "./lines-Br3ygqhP.js";
+import { A as LineRespondAgent, B as LineVoiceOptions, C as LineMessage, D as LineReplyCode, E as LineReminderPreferences, F as LineSenderVerification, I as LineSenderVerificationStart, L as LineThread, M as LineRole, N as LineSendInput, O as LineReplyCodeInput, P as LineSendReceipt, R as LineTransport, S as LineMemberSpec, T as LineProvider, V as LinesHttpClient, _ as LineInstanceCreate, a as Line, b as LineMemberInstance, c as LineAllowanceSubject, d as LineAttachment, f as LineAttachmentReauthorization, g as LineInstanceAttachOptions, h as LineImage, i as profileChannelReference, j as LineRespondView, k as LineReplyGate, l as LineApplicationAttachOptions, m as LineFromConnectionInput, n as SandboxLines, o as LineAgentRolePolicy, p as LineExecutionKey, r as lineInstanceKey, s as LineAllowance, t as LinesClient, u as LineAttachOptions, v as LineLimits, w as LineNumberInventory, x as LineMemberPatch, y as LineMember, z as LineVoice } from "./lines-CCHDUfQg.js";
 export { Line, LineAgentRolePolicy, LineAllowance, LineAllowanceSubject, LineApplicationAttachOptions, LineAttachOptions, LineAttachment, LineAttachmentReauthorization, LineExecutionKey, LineFromConnectionInput, LineImage, LineInstanceAttachOptions, LineInstanceCreate, LineLimits, LineMember, LineMemberInstance, LineMemberPatch, LineMemberSpec, LineMessage, LineNumberInventory, LineProvider, LineReminderPreferences, LineReplyCode, LineReplyCodeInput, LineReplyGate, LineRespondAgent, LineRespondView, LineRole, LineSendInput, LineSendReceipt, LineSenderVerification, LineSenderVerificationStart, LineThread, LineTransport, LineVoice, LineVoiceOptions, LinesClient, LinesHttpClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/lines.js

@@ -1,2 +1,2 @@
-import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-DxHJhxCe.js";
+import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-DrG0WOW6.js";
 export { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{mcp-local-D7MpwsW0.js → mcp-local-O1HzsQiZ.js}

@@ -1,5 +1,5 @@
-import { u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-DTHgLccV.js";
-import "./api-request-CZlFy3ku.js";
+import { u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-Cr9Ossea.js";
+import "./api-request-BHbSfsRr.js";
 import { a as listAgentPreviews, i as getAgentPreview, o as publishAgentPreview, r as ensureAgentPreview, s as removeAgentPreview, t as AgentPreviewError } from "./preview-operations-B3TTvqlm.js";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
@@ -396,7 +396,7 @@ async function createMcpServer(box, options = {}) {
 	const { bindings, handlers } = bindToolSpecs(box, options);
 	const server = new serverModule.Server({
 		name: options.name ?? "tangle-sandbox",
-		version: options.version ?? "1.0.190"
+		version: options.version ?? "1.0.192"
 	}, { capabilities: { tools: {} } });
 	server.setRequestHandler(typesModule.ListToolsRequestSchema, async () => ({ tools: bindings.map(({ spec: s }) => ({
 		name: s.name,

package/dist/{prepared-evidence-CP1MmeCQ.js → prepared-evidence-4prvV0YK.js}

@@ -1,4 +1,4 @@
-import { t as parseSandboxRetryAfterHeader } from "./retry-after-header-Bt-XvU-x.js";
+import { t as parseSandboxRetryAfterHeader } from "./retry-after-header-DUdCC0KJ.js";
 //#region src/lib/prepared-evidence.mjs
 async function receipt(response, idField) {
 	const reader = response.body?.getReader();

package/dist/{prepared-process-BWVz93cT.js → prepared-process-BSpZXDDw.js}

@@ -1,4 +1,4 @@
-import { t as parseSandboxRetryAfterHeader } from "./retry-after-header-Bt-XvU-x.js";
+import { t as parseSandboxRetryAfterHeader } from "./retry-after-header-DUdCC0KJ.js";
 //#region src/lib/prepared-process.mjs
 /** Request and pause share one deadline, including independent cancellation cleanup. */
 function processRequests(request, deadline, signal) {

package/dist/{preview-DUxqnKSk.d.ts → preview-I1z42VGY.d.ts}

@@ -1,6 +1,6 @@
-import { O as SandboxInstance } from "./index-DDIymnCZ.js";
-import { F as EnsureDevServerOptions, H as PreviewLinkInfo } from "./types-B-UsXSi6.js";
-import { t as Sandbox } from "./client-C4SnCCpF.js";
+import { O as SandboxInstance } from "./index-DKsOu5sq.js";
+import { F as EnsureDevServerOptions, H as PreviewLinkInfo } from "./types-CiuGb4lZ.js";
+import { t as Sandbox } from "./client-yWdLuj_P.js";
 
 //#region src/agent/preview-operations.d.ts
 type AgentPreviewOptions = Pick<EnsureDevServerOptions, "sessionId" | "cwd"> & {

package/dist/{public-templates-DQiblzzK.d.ts → public-templates-Cw6gmWJD.d.ts}

@@ -1,5 +1,5 @@
-import { bt as SandboxError } from "./terminal-stream-types-1YKRrkZB.js";
-import { Cr as PublishPublicTemplateVersionOptions, Sr as PublishPublicTemplateOptions, Xr as HttpClient, br as PublicTemplateInfo, xr as PublicTemplateVersionInfo } from "./types-B-UsXSi6.js";
+import { bt as SandboxError } from "./terminal-stream-types-BqNv5EuG.js";
+import { Cr as PublishPublicTemplateVersionOptions, Sr as PublishPublicTemplateOptions, Xr as HttpClient, br as PublicTemplateInfo, xr as PublicTemplateVersionInfo } from "./types-CiuGb4lZ.js";
 import { z } from "zod";
 
 //#region src/public-templates.d.ts

package/dist/public-templates.d.ts

@@ -1,2 +1,2 @@
-import { a as PublicTemplatesClient, i as PublicTemplatePublishRequestOptions, n as PublicTemplatePublishError, r as PublicTemplatePublishJob, t as PublicTemplatePublishArtifact } from "./public-templates-DQiblzzK.js";
+import { a as PublicTemplatesClient, i as PublicTemplatePublishRequestOptions, n as PublicTemplatePublishError, r as PublicTemplatePublishJob, t as PublicTemplatePublishArtifact } from "./public-templates-Cw6gmWJD.js";
 export { PublicTemplatePublishArtifact, PublicTemplatePublishError, PublicTemplatePublishJob, PublicTemplatePublishRequestOptions, PublicTemplatesClient };

package/dist/public-templates.js

@@ -1,4 +1,4 @@
-import { i as readResponseJson, x as SandboxError } from "./errors-CaX0a5Ry.js";
+import { S as SandboxError, a as readResponseJson } from "./errors-Mzq10WZq.js";
 import { z } from "zod";
 //#region src/public-templates.ts
 const publicationStatus = z.enum([
@@ -36,11 +36,14 @@ var PublicTemplatePublishError = class extends SandboxError {
 	job;
 	artifact;
 	constructor(message, code, job, artifact, cause) {
-		super(message, code, cause instanceof SandboxError ? cause.status : void 0, { origin: "sandbox-api" });
-		this.name = "PublicTemplatePublishError";
+		super(message, {
+			code,
+			status: cause instanceof SandboxError ? cause.status : void 0,
+			origin: "sandbox-api",
+			cause
+		});
 		this.job = job;
 		this.artifact = artifact;
-		this.cause = cause;
 	}
 };
 function pause(ms, signal) {

package/dist/{raw-evidence-archive-CgbWa4es.js → raw-evidence-archive-BD37zHN5.js}

@@ -1,5 +1,5 @@
-import { n as verifyDownload } from "./file-download-BXgu9BNh.js";
-import { t as runPreparedEvidence } from "./prepared-evidence-CP1MmeCQ.js";
+import { n as verifyDownload } from "./file-download-CKOxcATB.js";
+import { t as runPreparedEvidence } from "./prepared-evidence-4prvV0YK.js";
 import { z } from "zod";
 //#region src/lib/raw-evidence-archive.ts
 const digest = z.string().regex(/^sha256:[a-f0-9]{64}$/).transform((value) => `sha256:${value.slice(7)}`);

package/dist/runtime.d.ts

@@ -1,8 +1,8 @@
-import { Ct as ServerError, Dt as TimeoutError, Ot as ValidationError, St as SandboxFailureDetail, _t as ProfileFileMountPathError, bt as SandboxError, gt as PartialFailureError, ht as NotFoundError, it as AuthError, mt as NetworkError, ot as CapabilityError, u as ScopedToken, ut as FileWriteConflictError, vt as QuotaError, wt as StateError, xt as SandboxErrorJson } from "./terminal-stream-types-1YKRrkZB.js";
-import { $i as SessionExecutionStatus, Bi as CreateSessionOptions, Cn as TerminalStream, Di as SandboxEvent, Fi as CommitTaskSessionOptions, Gi as ListMessagesOptions, Gn as ChunkedUploadResult, Ji as SendSessionMessageRequest, Qi as SessionExecutionInfo, Qn as FileReadBatchResult, Vi as CreateTaskSessionOptions, Wn as ChunkedUploadOptions, Yi as SentSessionMessage, Zi as SessionEventStreamOptions, Zn as FileReadBatchOptions, aa as SessionMessage, ar as FileTreeResult, cr as FileWriteResult, dn as SandboxTerminalCreateOptions, dr as RenameOptions, fa as TaskSessionInfo, fn as SandboxTerminalInfo, ir as FileTreeOptions, la as TaskSessionChanges, ln as SandboxRuntimeHealth, mn as SandboxTerminalRequestOptions, mr as WriteFileOptions, na as SessionInfo, oa as SessionMessageAdmission, on as SandboxPortBinding, or as FileUsageOptions, pn as SandboxTerminalManager, pr as UploadProgress, qi as SendSessionMessageOptions, sr as FileUsageResult, tr as FileRenameResult, ua as TaskSessionCommitResult } from "./types-B-UsXSi6.js";
-import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-DIvMQyer.js";
-import { t as BrowserInteractiveSessionController } from "./interactive-controller-DXGWBdYK.js";
-import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-Cst4px_l.js";
+import { Ct as ServerError, Dt as TimeoutError, Ot as ValidationError, St as SandboxFailureDetail, _t as ProfileFileMountPathError, bt as SandboxError, gt as PartialFailureError, ht as NotFoundError, it as AuthError, mt as NetworkError, ot as CapabilityError, u as ScopedToken, ut as FileWriteConflictError, vt as QuotaError, wt as StateError, xt as SandboxErrorJson } from "./terminal-stream-types-BqNv5EuG.js";
+import { $i as SessionExecutionStatus, Bi as CreateSessionOptions, Cn as TerminalStream, Di as SandboxEvent, Fi as CommitTaskSessionOptions, Gi as ListMessagesOptions, Gn as ChunkedUploadResult, Ji as SendSessionMessageRequest, Qi as SessionExecutionInfo, Qn as FileReadBatchResult, Vi as CreateTaskSessionOptions, Wn as ChunkedUploadOptions, Yi as SentSessionMessage, Zi as SessionEventStreamOptions, Zn as FileReadBatchOptions, aa as SessionMessage, ar as FileTreeResult, cr as FileWriteResult, dn as SandboxTerminalCreateOptions, dr as RenameOptions, fa as TaskSessionInfo, fn as SandboxTerminalInfo, ir as FileTreeOptions, la as TaskSessionChanges, ln as SandboxRuntimeHealth, mn as SandboxTerminalRequestOptions, mr as WriteFileOptions, na as SessionInfo, oa as SessionMessageAdmission, on as SandboxPortBinding, or as FileUsageOptions, pn as SandboxTerminalManager, pr as UploadProgress, qi as SendSessionMessageOptions, sr as FileUsageResult, tr as FileRenameResult, ua as TaskSessionCommitResult } from "./types-CiuGb4lZ.js";
+import { c as InteractiveSessionIdentity, l as InteractiveSessionNotRunningError, r as browserInteractiveControlHolderId } from "./browser-interactive-control-controller-KOK6qn2s.js";
+import { t as BrowserInteractiveSessionController } from "./interactive-controller-YyZEsoB0.js";
+import { a as deriveAgentRunOutcome, i as deriveAgentResultOutcome, n as AgentRunOutcomeTracker, o as projectAgentTerminalRecord, r as createAgentRunOutcomeTracker, t as AgentRunOutcome } from "./agent-run-outcome-BO5paRhX.js";
 
 //#region src/lib/chunked-upload.d.ts
 /** The transport a caller wires this module to — {@link SandboxInstance.runtimeFetch}

package/dist/runtime.js

@@ -1,8 +1,8 @@
-import { I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, c as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-C876Pjaj.js";
-import { n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-DHIS8edi.js";
-import { C as StateError, E as ValidationError, S as ServerError, T as TimeoutError, _ as PartialFailureError, a as AuthError, d as FileWriteConflictError, g as NotFoundError, h as NetworkError, s as CapabilityError, v as ProfileFileMountPathError, x as SandboxError, y as QuotaError } from "./errors-CaX0a5Ry.js";
-import { n as fetchSandboxApi } from "./api-request-CZlFy3ku.js";
-import { s as uploadChunked } from "./chunked-upload-vAE2hVcP.js";
+import { I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, c as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-jr3_74Pq.js";
+import { n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BYbNLahH.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, b as QuotaError, g as NetworkError, l as CapabilityError, p as FileWriteConflictError, s as AuthError, v as PartialFailureError, w as StateError, y as ProfileFileMountPathError } from "./errors-Mzq10WZq.js";
+import { n as fetchSandboxApi } from "./api-request-BHbSfsRr.js";
+import { s as uploadChunked } from "./chunked-upload-D5ytV_s6.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
 function requireToken(token) {
@@ -52,11 +52,13 @@ var SandboxRuntimeClient = class extends SandboxRuntimeApi {
 					apiKey: auth.token,
 					timeoutMs,
 					fetchImpl,
-					timeoutError: (ms) => new TimeoutError(ms, void 0, {
+					timeoutError: (ms) => new TimeoutError(`Request timed out after ${ms}ms`, {
+						timeoutMs: ms,
 						origin: "runtime",
 						endpoint: path
 					}),
-					networkError: (error) => new NetworkError(`Scoped runtime request failed: ${path}`, error instanceof Error ? error : new Error(String(error)), {
+					networkError: (error) => new NetworkError(`Scoped runtime request failed: ${path}`, {
+						cause: error instanceof Error ? error : new Error(String(error)),
 						origin: "runtime",
 						endpoint: path
 					})