@tangle-network/sandbox 1.0.193 → 1.0.195

package/dist/agent/index.js

@@ -1,8 +1,8 @@
-import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local--bzeGqCo.js";
-import { O as assertCurrentBackendType } from "../interactive-controller-jr3_74Pq.js";
-import { t as SandboxInstance } from "../sandbox-Dtb-_btd.js";
-import { D as ValidationError, _ as NotFoundError, w as StateError } from "../errors-Mzq10WZq.js";
-import { t as Sandbox } from "../client-Y1cRP80p.js";
+import { a as TOOL_SPECS, i as ALL_TOOL_SPECS, o as serializeToolResult, r as bindToolSpecs, t as createMcpServer } from "../mcp-local-BkxybFme.js";
+import { O as assertCurrentBackendType } from "../interactive-controller-DqlIWA_z.js";
+import { t as SandboxInstance } from "../sandbox-Djgwuf3R.js";
+import { D as ValidationError, _ as NotFoundError, w as StateError } from "../errors-DYrRgCHB.js";
+import { t as Sandbox } from "../client-BC3csszv.js";
 import { z } from "zod";
 //#region src/agent/instances.ts
 const managers = /* @__PURE__ */ new WeakMap();

package/dist/agent/preview.js

@@ -66,7 +66,7 @@ async function servePreviewMcp(request, config) {
 	if (typeof config.authorize !== "function") throw new Error("Preview MCP requires a host authorization callback");
 	const tools = config.tools ?? PREVIEW_TOOLS;
 	if (!tools.length || tools.some((tool) => !PREVIEW_TOOLS.includes(tool))) throw new Error("Preview MCP requires an explicit nonempty preview-only tool grant");
-	const [{ createMcpServer }, { WebStandardStreamableHTTPServerTransport }] = await Promise.all([import("../mcp-local--bzeGqCo.js").then((n) => n.n), import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js")]);
+	const [{ createMcpServer }, { WebStandardStreamableHTTPServerTransport }] = await Promise.all([import("../mcp-local-BkxybFme.js").then((n) => n.n), import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js")]);
 	const handle = await createMcpServer(config.box, {
 		name: "tangle-previews",
 		sessionId: config.sessionId,

package/dist/{api-request-W306L3u4.js → api-request-DmLZ1RdX.js}

@@ -1,7 +1,7 @@
 import { t as rewrapResponse } from "./response-rewrap-Cjoxh2wZ.js";
 //#region src/lib/api-request.mjs
 /** The package version tsdown.config.ts defines; unbuilt source reports 0.0.0. */
-const SDK_VERSION = "1.0.193";
+const SDK_VERSION = "1.0.195";
 function withRequestContextHeaders(response, path, method, body = response.body) {
 	const headers = new Headers(response.headers);
 	headers.set("x-tangle-request-path", path);

package/dist/{chunked-upload-D5ytV_s6.js → chunked-upload-D1sTCeLr.js}

@@ -1,4 +1,4 @@
-import { S as SandboxError, n as isTransientWrite, r as parseErrorResponse } from "./errors-Mzq10WZq.js";
+import { S as SandboxError, n as isTransientWrite, r as parseErrorResponse } from "./errors-DYrRgCHB.js";
 import { t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
 import { i as FILE_UPLOAD_SESSION_MAX_BYTES, n as isFileTooLargeErrorBody, r as isPayloadTooLargeErrorBody } from "./file-transfer-Cr9Ossea.js";
 //#region src/generated/sandbox-upload-operations.ts

package/dist/{chunked-upload-file-DL1-AqRp.js → chunked-upload-file-BM3k_ol3.js}

@@ -1,5 +1,5 @@
 import { i as FILE_UPLOAD_SESSION_MAX_BYTES } from "./file-transfer-Cr9Ossea.js";
-import { a as planCompression, i as partCount, n as commitSession, o as putPart, r as initUploadSession, t as abortSession } from "./chunked-upload-D5ytV_s6.js";
+import { a as planCompression, i as partCount, n as commitSession, o as putPart, r as initUploadSession, t as abortSession } from "./chunked-upload-D1sTCeLr.js";
 import { createHash } from "node:crypto";
 import { open } from "node:fs/promises";
 //#region src/lib/chunked-upload-file.ts

package/dist/{client-Y1cRP80p.js → client-BC3csszv.js}

@@ -1,13 +1,13 @@
-import { A as normalizeRuntimeBackendConfig, D as applyRequestedModel, E as isBrowserRuntime, H as backendTypeSchema, N as withProfileHarness, O as assertCurrentBackendType, P as withoutCreateOnlyModelFields, S as encodePromptForWire, o as requestInteractiveSessionToken } from "./interactive-controller-jr3_74Pq.js";
+import { A as normalizeRuntimeBackendConfig, D as applyRequestedModel, E as isBrowserRuntime, H as backendTypeSchema, N as withProfileHarness, O as assertCurrentBackendType, P as withoutCreateOnlyModelFields, S as encodePromptForWire, o as requestInteractiveSessionToken } from "./interactive-controller-DqlIWA_z.js";
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, F as normalizeConnection, G as extendableDeadline, I as normalizeEgressPolicyFields, J as isDeployWindowCreateError, K as generateIdempotencyKey, L as normalizeProxySecretReceipt, N as dateOf, O as isRetryableProfileFileMaterializeFailure, P as parseLifecycleTimes, R as normalizeSandboxShape, T as splitInlineProfileFileMounts, U as DEPLOY_WINDOW_RETRY_MS, W as createRetryDelayMs, X as isRetryableCreateError, Y as isRateLimitCreateError, d as sandboxLedgerUsd, j as normalizeStartupDiagnostics, k as normalizeCaptureProof, n as createSandboxInstanceFromResponse, o as exportTraceBundle, q as isCapacityShortageCreateError, z as CAPACITY_ETA_MARGIN_MS } from "./sandbox-Dtb-_btd.js";
-import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, a as readResponseJson, g as NetworkError, i as parseResponseError, o as retryWhen, r as parseErrorResponse, s as AuthError, v as PartialFailureError } from "./errors-Mzq10WZq.js";
+import { A as normalizeSandboxCreateReceipt, B as CAPACITY_ETA_WAIT_MAX_MS, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, F as normalizeConnection, G as extendableDeadline, I as normalizeEgressPolicyFields, J as isDeployWindowCreateError, K as generateIdempotencyKey, L as normalizeProxySecretReceipt, N as dateOf, O as isRetryableProfileFileMaterializeFailure, P as parseLifecycleTimes, R as normalizeSandboxShape, T as splitInlineProfileFileMounts, U as DEPLOY_WINDOW_RETRY_MS, W as createRetryDelayMs, X as isRetryableCreateError, Y as isRateLimitCreateError, d as sandboxLedgerUsd, j as normalizeStartupDiagnostics, k as normalizeCaptureProof, n as createSandboxInstanceFromResponse, o as exportTraceBundle, q as isCapacityShortageCreateError, z as CAPACITY_ETA_MARGIN_MS } from "./sandbox-Djgwuf3R.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, a as readResponseJson, g as NetworkError, i as parseResponseError, o as retryWhen, r as parseErrorResponse, s as AuthError, v as PartialFailureError } from "./errors-DYrRgCHB.js";
 import { r as combineAbortSignals, t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
 import { l as SANDBOX_AGENT_HOME, t as isInsideReservedDir } from "./file-transfer-Cr9Ossea.js";
-import { n as fetchSandboxApi } from "./api-request-W306L3u4.js";
+import { n as fetchSandboxApi } from "./api-request-DmLZ1RdX.js";
 import { n as fetchWithKeepAlive, t as emitTiming } from "./keep-alive-fetch-C2lFwrMA.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { t as LinesClient } from "./lines-DrG0WOW6.js";
+import { t as LinesClient } from "./lines-gn8FqF3c.js";
 import { PublicTemplatesClient } from "./public-templates.js";
 import { z } from "zod";
 //#region ../../../packages/runtime-contracts/dist/git-policy.js

package/dist/collaboration/index.js

@@ -1,2 +1,2 @@
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-Bbr45lyk.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-DZIcyGoF.js";
 export { CollaborationClient, CollaborationFileBridge, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/{collaboration-Bbr45lyk.js → collaboration-DZIcyGoF.js}

@@ -1,4 +1,4 @@
-import { E as TimeoutError, g as NetworkError, r as parseErrorResponse } from "./errors-Mzq10WZq.js";
+import { E as TimeoutError, g as NetworkError, r as parseErrorResponse } from "./errors-DYrRgCHB.js";
 //#region src/collaboration/client.ts
 const DEFAULT_TIMEOUT_MS = 3e4;
 function normalizeBaseUrl(url) {

package/dist/{core-BU1I2KvV.js → core-BKU1_Pbj.js}

@@ -1,6 +1,6 @@
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { Z as canonicalAgentProfileDigest } from "./sandbox-Dtb-_btd.js";
-import { D as ValidationError, S as SandboxError, l as CapabilityError } from "./errors-Mzq10WZq.js";
+import { Z as canonicalAgentProfileDigest } from "./sandbox-Djgwuf3R.js";
+import { D as ValidationError, S as SandboxError, l as CapabilityError } from "./errors-DYrRgCHB.js";
 import { n as awaitWithAbort } from "./abort-signal-Cu4F2VVz.js";
 import { r as cliAuthReferenceSchema } from "./cli-auth-bundle-C6DtK7GX-BbbiAn-Z.js";
 import "./cli-auth-bundle-CMJWI99l.js";

package/dist/core.js

@@ -1,7 +1,7 @@
-import { r as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-Dtb-_btd.js";
-import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, b as QuotaError, g as NetworkError, l as CapabilityError, p as FileWriteConflictError, r as parseErrorResponse, s as AuthError, v as PartialFailureError, w as StateError, y as ProfileFileMountPathError } from "./errors-Mzq10WZq.js";
-import { a as InstancesClient, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, p as isBackendRegistryInteractionKind, r as HostedInstance, t as Sandbox, u as backendRegistryEntrySchema } from "./client-Y1cRP80p.js";
-import { i as profileChannelReference, r as lineInstanceKey, t as LinesClient } from "./lines-DrG0WOW6.js";
+import { r as WorkspaceImages, t as SandboxInstance, x as ManagedProcessClient } from "./sandbox-Djgwuf3R.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, b as QuotaError, g as NetworkError, l as CapabilityError, p as FileWriteConflictError, r as parseErrorResponse, s as AuthError, v as PartialFailureError, w as StateError, y as ProfileFileMountPathError } from "./errors-DYrRgCHB.js";
+import { a as InstancesClient, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, p as isBackendRegistryInteractionKind, r as HostedInstance, t as Sandbox, u as backendRegistryEntrySchema } from "./client-BC3csszv.js";
+import { i as profileChannelReference, r as lineInstanceKey, t as LinesClient } from "./lines-gn8FqF3c.js";
 import { PublicTemplatePublishError, PublicTemplatesClient } from "./public-templates.js";
-import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-BU1I2KvV.js";
+import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-BKU1_Pbj.js";
 export { AuthError, CapabilityError, FileWriteConflictError, HostedInstance, ISOLATED_CREATION_ATTESTATION_VERSION, InstanceRestartingError, InstancesClient, LINE_APPLICATION_REPLY_MAX_CHARS, LINE_APPLICATION_REQUEST_MAX_BYTES, LinesClient, ManagedProcessClient, NetworkError, NotFoundError, PartialFailureError, ProfileFileMountPathError, PublicTemplatePublishError, PublicTemplatesClient, QuotaError, Sandbox, SandboxError, SandboxInstance, SeatSelectionError, ServerError, StateError, TimeoutError, ValidationError, WorkspaceImages, backendRegistryCapabilitiesSchema, backendRegistryEntrySchema, backendRegistryInteractionKindSchema, backendRegistryResponseSchema, createSelectSeat, gatewaySeatTransport, isBackendRegistryInteractionKind, lineInstanceKey, parseBackendRegistryResponse, parseBackendRegistryResponseBody, parseErrorResponse, parseLineApplicationRequest, parseLineApplicationResult, profileChannelReference, sandboxFailureKind };

package/dist/{errors-Mzq10WZq.js → errors-DYrRgCHB.js}

@@ -524,6 +524,11 @@ function parseErrorResponse(status, body, context, headers) {
 	} catch {
 		data = { message: body };
 	}
+	const nested = data.error?.details;
+	if (isFailureDetail(nested)) data = {
+		...nested,
+		...data
+	};
 	const errorObj = data.error;
 	const nestedMessage = typeof errorObj === "object" && errorObj !== null ? errorObj.message : void 0;
 	const nestedCode = typeof errorObj === "object" && errorObj !== null ? typeof errorObj.code === "string" ? asErrorCode(errorObj.code) : void 0 : void 0;

package/dist/{file-download-CKOxcATB.js → file-download-CUIMLK3J.js}

@@ -1,5 +1,5 @@
 import { n as bytesToHex, t as sha256 } from "./sha2-vu4U-x2L.js";
-import { D as ValidationError } from "./errors-Mzq10WZq.js";
+import { D as ValidationError } from "./errors-DYrRgCHB.js";
 //#region src/lib/file-download.ts
 function downloadBounds(options) {
 	for (const [name, value] of Object.entries({

package/dist/index.js

@@ -1,16 +1,16 @@
-import { A as normalizeRuntimeBackendConfig, B as TERMINAL_WS_ECHO_SUBPROTOCOL, G as parseBackendType, H as backendTypeSchema, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, U as isolationPrincipalSchema, V as ALL_BACKEND_TYPES, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-jr3_74Pq.js";
+import { A as normalizeRuntimeBackendConfig, B as TERMINAL_WS_ECHO_SUBPROTOCOL, G as parseBackendType, H as backendTypeSchema, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, U as isolationPrincipalSchema, V as ALL_BACKEND_TYPES, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, n as InteractiveSessionController, r as TerminalStream, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-DqlIWA_z.js";
 import { a as INTERACTIVE_CONTROL_CLEANUP_TIMEOUT_MS, k as agentInteractiveSessionPromptRequestDigest, l as createInteractiveControlHolderId, n as browserInteractiveControlHolderId, o as InteractiveSessionControlController, s as InteractiveSessionNotRunningError, t as BrowserInteractiveSessionControlController, u as interactiveSessionIdentityDigest } from "./browser-interactive-control-controller-BYbNLahH.js";
 import { i as SANDBOX_SIZE_PRESET_NAMES, r as agentProfileSchema, t as agentProfileConfidentialSchema } from "./profile-schema-C1KpT-wS.js";
-import { C as SandboxOperationFailedError, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, S as SandboxOperation, T as splitInlineProfileFileMounts, _ as collectAgentFinalMessageText, a as buildTraceExportPayload, b as isToolBearingEvent, c as toOtelJson, f as InteractiveSessionHandle, g as applySandboxEventText, h as createInteractiveTerminalSession, i as MAX_EGRESS_DENIALS_LIMIT, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as exportTraceBundle, p as InteractiveTerminalFrameLog, r as WorkspaceImages, s as otelTraceIdForTangleTrace, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as materializeProfileFileMounts, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-Dtb-_btd.js";
-import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, T as StreamInterruptedError, _ as NotFoundError, b as QuotaError, c as BranchFanoutExceedsHostError, d as EdgeNotReadyError, f as EgressProxyRecoveryError, g as NetworkError, h as KeyBudgetExhaustedError, l as CapabilityError, m as GpuProviderNotConfiguredError, p as FileWriteConflictError, r as parseErrorResponse, s as AuthError, t as TerminalStreamError, u as CompliancePlacementError, v as PartialFailureError, w as StateError, x as ResumeEnvRequiredError, y as ProfileFileMountPathError } from "./errors-Mzq10WZq.js";
-import { _ as createBatchResultAccumulator, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, g as IntelligenceClient, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, n as RunsClient, o as SandboxFleetClient, p as isBackendRegistryInteractionKind, r as HostedInstance, s as SandboxFleet, t as Sandbox, u as backendRegistryEntrySchema, v as validateBatchRunRequest } from "./client-Y1cRP80p.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-Bbr45lyk.js";
+import { C as SandboxOperationFailedError, D as validateDeferredProfileFileMounts, E as splitInlineProfileSkills, S as SandboxOperation, T as splitInlineProfileFileMounts, _ as collectAgentFinalMessageText, a as buildTraceExportPayload, b as isToolBearingEvent, c as toOtelJson, f as InteractiveSessionHandle, g as applySandboxEventText, h as createInteractiveTerminalSession, i as MAX_EGRESS_DENIALS_LIMIT, l as SandboxTaskSession, m as createInteractiveTerminalCapture, o as exportTraceBundle, p as InteractiveTerminalFrameLog, r as WorkspaceImages, s as otelTraceIdForTangleTrace, t as SandboxInstance, u as SandboxSession, v as collectAgentResponseText, w as materializeProfileFileMounts, x as ManagedProcessClient, y as getSandboxEventText } from "./sandbox-Djgwuf3R.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, T as StreamInterruptedError, _ as NotFoundError, b as QuotaError, c as BranchFanoutExceedsHostError, d as EdgeNotReadyError, f as EgressProxyRecoveryError, g as NetworkError, h as KeyBudgetExhaustedError, l as CapabilityError, m as GpuProviderNotConfiguredError, p as FileWriteConflictError, r as parseErrorResponse, s as AuthError, t as TerminalStreamError, u as CompliancePlacementError, v as PartialFailureError, w as StateError, x as ResumeEnvRequiredError, y as ProfileFileMountPathError } from "./errors-DYrRgCHB.js";
+import { _ as createBatchResultAccumulator, a as InstancesClient, c as runtimeWorkspaceCwdSchema, d as backendRegistryInteractionKindSchema, f as backendRegistryResponseSchema, g as IntelligenceClient, h as parseBackendRegistryResponseBody, i as InstanceRestartingError, l as backendRegistryCapabilitiesSchema, m as parseBackendRegistryResponse, n as RunsClient, o as SandboxFleetClient, p as isBackendRegistryInteractionKind, r as HostedInstance, s as SandboxFleet, t as Sandbox, u as backendRegistryEntrySchema, v as validateBatchRunRequest } from "./client-BC3csszv.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-DZIcyGoF.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-DrG0WOW6.js";
-import { t as downloadFile } from "./file-download-CKOxcATB.js";
+import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-gn8FqF3c.js";
+import { t as downloadFile } from "./file-download-CUIMLK3J.js";
 import { PublicTemplatePublishError, PublicTemplatesClient } from "./public-templates.js";
-import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-BU1I2KvV.js";
-import { s as BlueprintSandboxClient } from "./tangle-fs17QlcY.js";
+import { a as LINE_APPLICATION_REPLY_MAX_CHARS, c as parseLineApplicationResult, i as gatewaySeatTransport, l as sandboxFailureKind, n as SeatSelectionError, o as LINE_APPLICATION_REQUEST_MAX_BYTES, r as createSelectSeat, s as parseLineApplicationRequest, t as ISOLATED_CREATION_ATTESTATION_VERSION } from "./core-BKU1_Pbj.js";
+import { s as BlueprintSandboxClient } from "./tangle-cfvm_9z5.js";
 import { z } from "zod";
 //#region ../../../packages/runtime-contracts/dist/model-key-proxy.js
 const MANAGED_MODEL_KEY_SENTINEL = "proxy-managed-per-request";

package/dist/intelligence/index.js

@@ -1,6 +1,6 @@
-import { E as TimeoutError, g as NetworkError, r as parseErrorResponse } from "../errors-Mzq10WZq.js";
-import { n as fetchSandboxApi } from "../api-request-W306L3u4.js";
-import { n as verifyDownload } from "../file-download-CKOxcATB.js";
+import { E as TimeoutError, g as NetworkError, r as parseErrorResponse } from "../errors-DYrRgCHB.js";
+import { n as fetchSandboxApi } from "../api-request-DmLZ1RdX.js";
+import { n as verifyDownload } from "../file-download-CUIMLK3J.js";
 //#region src/intelligence/index.ts
 /**
 * `@tangle-network/sandbox/intelligence` — browser-safe typed client for the

package/dist/{interactive-controller-jr3_74Pq.js → interactive-controller-DqlIWA_z.js}

@@ -1,10 +1,10 @@
 import { C as boundedIdentifierSchema, T as boundedJsonSchema, o as canonicalCandidateDigest } from "./harness-DMaNgn0S.js";
 import { B as PlanContinuationSchema, D as agentInteractiveSessionControlClaimMatchesRef, P as AgentExactRunControlRefSchema, R as AgentExecutionOutcomeSchema, U as InteractionRequestSchema, c as assertInteractiveSessionRef, h as AgentInteractiveSessionAttachSchema, i as createBrowserInteractiveSessionControlTransport, o as InteractiveSessionControlController, r as browserInteractiveTerminalEndpoint, v as AgentInteractiveSessionControlClaimSchema, x as AgentInteractiveSessionRefSchema, z as DurablePlanSchema } from "./browser-interactive-control-controller-BYbNLahH.js";
 import { r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { C as ServerError, D as ValidationError, S as SandboxError, g as NetworkError, i as parseResponseError, l as CapabilityError, t as TerminalStreamError } from "./errors-Mzq10WZq.js";
+import { C as ServerError, D as ValidationError, S as SandboxError, g as NetworkError, i as parseResponseError, l as CapabilityError, t as TerminalStreamError } from "./errors-DYrRgCHB.js";
 import { n as awaitWithAbort, r as combineAbortSignals, t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { s as uploadChunked } from "./chunked-upload-D5ytV_s6.js";
+import { s as uploadChunked } from "./chunked-upload-D1sTCeLr.js";
 import { z } from "zod";
 /** Stable declaration order; registry tests check the shipped spec composition. */
 const ALL_BACKEND_TYPES = Object.values({
@@ -771,7 +771,7 @@ function secretProfilePublicRequestDigest(backend) {
 //#region src/backend-config.ts
 function assertCurrentBackendType(value, field = "backend.type") {
 	const parsed = backendTypeSchema.safeParse(value);
-	if (!parsed.success) throw new Error(`[sandbox-sdk] ${field} must be a current backend type: ${parsed.error.issues[0]?.message ?? "invalid value"}`);
+	if (!parsed.success) throw new ValidationError(`[sandbox-sdk] ${field} must be a current backend type: ${parsed.error.issues[0]?.message ?? "invalid value"}`);
 }
 /**
 * Fold a per-turn `PromptOptions.model` shorthand into the backend override

package/dist/{lines-DrG0WOW6.js → lines-gn8FqF3c.js}

@@ -1,4 +1,4 @@
-import { D as ValidationError, r as parseErrorResponse } from "./errors-Mzq10WZq.js";
+import { D as ValidationError, r as parseErrorResponse } from "./errors-DYrRgCHB.js";
 //#region src/line-identity.ts
 /**
 * The instance key that serves one member: `keyPrefix` plus the first 32 hex

package/dist/lines.js

@@ -1,2 +1,2 @@
-import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-DrG0WOW6.js";
+import { i as profileChannelReference, n as SandboxLines, r as lineInstanceKey, t as LinesClient } from "./lines-gn8FqF3c.js";
 export { LinesClient, SandboxLines, lineInstanceKey, profileChannelReference };

package/dist/{mcp-local--bzeGqCo.js → mcp-local-BkxybFme.js}

@@ -1,5 +1,5 @@
 import { u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-Cr9Ossea.js";
-import "./api-request-W306L3u4.js";
+import "./api-request-DmLZ1RdX.js";
 import { a as listAgentPreviews, i as getAgentPreview, o as publishAgentPreview, r as ensureAgentPreview, s as removeAgentPreview, t as AgentPreviewError } from "./preview-operations-B3TTvqlm.js";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
@@ -396,7 +396,7 @@ async function createMcpServer(box, options = {}) {
 	const { bindings, handlers } = bindToolSpecs(box, options);
 	const server = new serverModule.Server({
 		name: options.name ?? "tangle-sandbox",
-		version: options.version ?? "1.0.193"
+		version: options.version ?? "1.0.195"
 	}, { capabilities: { tools: {} } });
 	server.setRequestHandler(typesModule.ListToolsRequestSchema, async () => ({ tools: bindings.map(({ spec: s }) => ({
 		name: s.name,

package/dist/public-templates.js

@@ -1,4 +1,4 @@
-import { S as SandboxError, a as readResponseJson } from "./errors-Mzq10WZq.js";
+import { S as SandboxError, a as readResponseJson } from "./errors-DYrRgCHB.js";
 import { z } from "zod";
 //#region src/public-templates.ts
 const publicationStatus = z.enum([

package/dist/{raw-evidence-archive-BD37zHN5.js → raw-evidence-archive-DOrr7af7.js}

@@ -1,4 +1,4 @@
-import { n as verifyDownload } from "./file-download-CKOxcATB.js";
+import { n as verifyDownload } from "./file-download-CUIMLK3J.js";
 import { t as runPreparedEvidence } from "./prepared-evidence-4prvV0YK.js";
 import { z } from "zod";
 //#region src/lib/raw-evidence-archive.ts

package/dist/runtime.js

@@ -1,8 +1,8 @@
-import { I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, c as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-jr3_74Pq.js";
+import { I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, R as deriveAgentRunOutcome, c as SandboxRuntimeApi, t as BrowserInteractiveSessionController, z as projectAgentTerminalRecord } from "./interactive-controller-DqlIWA_z.js";
 import { n as browserInteractiveControlHolderId, s as InteractiveSessionNotRunningError } from "./browser-interactive-control-controller-BYbNLahH.js";
-import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, b as QuotaError, g as NetworkError, l as CapabilityError, p as FileWriteConflictError, s as AuthError, v as PartialFailureError, w as StateError, y as ProfileFileMountPathError } from "./errors-Mzq10WZq.js";
-import { n as fetchSandboxApi } from "./api-request-W306L3u4.js";
-import { s as uploadChunked } from "./chunked-upload-D5ytV_s6.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, _ as NotFoundError, b as QuotaError, g as NetworkError, l as CapabilityError, p as FileWriteConflictError, s as AuthError, v as PartialFailureError, w as StateError, y as ProfileFileMountPathError } from "./errors-DYrRgCHB.js";
+import { n as fetchSandboxApi } from "./api-request-DmLZ1RdX.js";
+import { s as uploadChunked } from "./chunked-upload-D1sTCeLr.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
 function requireToken(token) {

package/dist/{sandbox-Dtb-_btd.js → sandbox-Djgwuf3R.js}

@@ -1,21 +1,21 @@
-import { A as normalizeRuntimeBackendConfig, C as encodeTextForWire, D as applyRequestedModel, F as withoutRuntimeSecrets, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, M as requestedSecretProfilePublicDigest, O as assertCurrentBackendType, S as encodePromptForWire, T as canUseNodeHttp2, W as normalizeEffectiveBackend, _ as isTraceId, a as assertScopedTokenActive, b as resolveDispatchRunIdentity, c as SandboxRuntimeApi, d as appendSessionIdQuery, f as callHeaders, g as TRACE_ID_HEADER, h as isRetryableCredentialRefusal, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, k as mergeRuntimeBackendConfig, l as normalizeSessionInfo, m as assertFileWritePreconditions, n as InteractiveSessionController, p as sessionHeaders, r as TerminalStream, s as requestScopedToken, u as sessionMessageRequestBody, v as mintTraceId, w as runtimeFilesystemPath, x as validateAcceptedDispatchRunRef, y as resolveTraceId } from "./interactive-controller-jr3_74Pq.js";
+import { A as normalizeRuntimeBackendConfig, C as encodeTextForWire, D as applyRequestedModel, F as withoutRuntimeSecrets, I as createAgentRunOutcomeTracker, L as deriveAgentResultOutcome, M as requestedSecretProfilePublicDigest, O as assertCurrentBackendType, S as encodePromptForWire, T as canUseNodeHttp2, W as normalizeEffectiveBackend, _ as isTraceId, a as assertScopedTokenActive, b as resolveDispatchRunIdentity, c as SandboxRuntimeApi, d as appendSessionIdQuery, f as callHeaders, g as TRACE_ID_HEADER, h as isRetryableCredentialRefusal, i as terminalUpgradeHeadersSupported, j as requestedPublicProfileDigest, k as mergeRuntimeBackendConfig, l as normalizeSessionInfo, m as assertFileWritePreconditions, n as InteractiveSessionController, p as sessionHeaders, r as TerminalStream, s as requestScopedToken, u as sessionMessageRequestBody, v as mintTraceId, w as runtimeFilesystemPath, x as validateAcceptedDispatchRunRef, y as resolveTraceId } from "./interactive-controller-DqlIWA_z.js";
 import { C as boundedIdentifierSchema, E as boundedStringSchema, g as sha256DigestSchema$1, o as canonicalCandidateDigest$1, s as canonicalCandidateJson$1, u as isCanonicalJsonValue$1 } from "./harness-DMaNgn0S.js";
 import { t as sha256 } from "./sha2-vu4U-x2L.js";
 import { A as agentInteractiveSessionStatusMatchesRef, B as PlanContinuationSchema, C as AgentInteractiveSessionStopAcknowledgementSchema, D as agentInteractiveSessionControlClaimMatchesRef, E as agentInteractiveSessionControlClaimIsNewer, F as AgentRunCancellationAcknowledgementSchema, G as InteractionResponseSchema, H as InteractionBindingSchema, I as AgentRunCancellationRequestSchema, L as agentRunCancellationAcknowledgementMatchesRequest, M as agentInteractiveDimensionSchema, N as sameAgentExactRun, O as agentInteractiveSessionPromptAcknowledgementMatchesCommand, P as AgentExactRunControlRefSchema, S as AgentInteractiveSessionStatusSchema, T as agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, U as InteractionRequestSchema, V as InteractionAcknowledgementSchema, W as InteractionResponseCommandSchema, _ as AgentInteractiveSessionControlClaimRequestSchema, b as AgentInteractiveSessionPromptCommandSchema, d as interactiveSessionControlClaimResponseSchema, f as interactiveSessionControlReleaseResponseSchema, g as AgentInteractiveSessionControlClaimAcknowledgementSchema, h as AgentInteractiveSessionAttachSchema, j as agentInteractiveSessionStopAcknowledgementMatchesCommand, l as createInteractiveControlHolderId, m as interactiveSessionStatusResponseSchema, p as interactiveSessionControlValidationResponseSchema, v as AgentInteractiveSessionControlClaimSchema, w as AgentInteractiveSessionStopCommandSchema, x as AgentInteractiveSessionRefSchema, y as AgentInteractiveSessionPromptAcknowledgementSchema } from "./browser-interactive-control-controller-BYbNLahH.js";
 import { a as ProxySecretReceiptSchema, o as canonicalAgentProfileValue, r as agentProfileSchema } from "./profile-schema-C1KpT-wS.js";
-import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, T as StreamInterruptedError, _ as NotFoundError, a as readResponseJson, d as EdgeNotReadyError, g as NetworkError, i as parseResponseError, l as CapabilityError, n as isTransientWrite, o as retryWhen, r as parseErrorResponse, s as AuthError, t as TerminalStreamError, w as StateError, y as ProfileFileMountPathError } from "./errors-Mzq10WZq.js";
+import { C as ServerError, D as ValidationError, E as TimeoutError, S as SandboxError, T as StreamInterruptedError, _ as NotFoundError, a as readResponseJson, d as EdgeNotReadyError, g as NetworkError, i as parseResponseError, l as CapabilityError, n as isTransientWrite, o as retryWhen, r as parseErrorResponse, s as AuthError, t as TerminalStreamError, w as StateError, y as ProfileFileMountPathError } from "./errors-DYrRgCHB.js";
 import { i as delayUntilAborted, n as awaitWithAbort, r as combineAbortSignals, t as abortableSleep } from "./abort-signal-Cu4F2VVz.js";
 import { a as SANDBOX_PROXY_REQUEST_MAX_BYTES, c as PROFILE_FILE_MOUNT_OUTSIDE_ROOTS_CODE, d as isProfileFileMountOutsideRoots, f as profileFileMountOutsideRootsMessage, l as SANDBOX_AGENT_HOME, o as FILE_OPERATION_LIMITS, u as SANDBOX_FILE_API_ABSOLUTE_ROOTS } from "./file-transfer-Cr9Ossea.js";
 import { t as rewrapResponse } from "./response-rewrap-Cjoxh2wZ.js";
 import { n as fetchWithKeepAlive, t as emitTiming } from "./keep-alive-fetch-C2lFwrMA.js";
 import { t as SIDECAR_PROXY_ERROR_HEADER } from "./sidecar-proxy-error-DTJbOAWL.js";
 import { t as parseSSEStream } from "./sse-parser-B4aH89Nq.js";
-import { s as uploadChunked } from "./chunked-upload-D5ytV_s6.js";
+import { s as uploadChunked } from "./chunked-upload-D1sTCeLr.js";
 import { t as runPreparedProcess } from "./prepared-process-BSpZXDDw.js";
 import { a as isBackendType, r as cliAuthReferenceSchema } from "./cli-auth-bundle-C6DtK7GX-BbbiAn-Z.js";
 import "./cli-auth-bundle-CMJWI99l.js";
-import { n as SandboxLines } from "./lines-DrG0WOW6.js";
-import { t as downloadFile } from "./file-download-CKOxcATB.js";
+import { n as SandboxLines } from "./lines-gn8FqF3c.js";
+import { t as downloadFile } from "./file-download-CUIMLK3J.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
@@ -8873,7 +8873,7 @@ var SandboxInteractiveCapabilities = class extends SandboxPromptCapabilities {
 var SandboxSessionEvidenceCapabilities = class extends SandboxInteractiveCapabilities {
 	/** @internal — invoked before the sandbox is deleted. */
 	async _sessionExportRawEvidence(id, destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-BD37zHN5.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-DOrr7af7.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal, archiveId, cancel) => this.runtimeFetch(`/agents/sessions/${encodeURIComponent(id)}/raw-evidence/archive?${new URLSearchParams([
@@ -8904,7 +8904,7 @@ var SandboxSessionEvidenceCapabilities = class extends SandboxInteractiveCapabil
 	* and the byte and file bounds are verified before the directory appears.
 	*/
 	async exportRawEvidence(destination, options) {
-		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-BD37zHN5.js");
+		const { exportRawEvidenceDirectory } = await import("./raw-evidence-archive-DOrr7af7.js");
 		await this.ensureRunning();
 		await this.refresh();
 		return exportRawEvidenceDirectory((signal, archiveId, cancel) => this.runtimeFetch(`/agents/raw-evidence/archive?${new URLSearchParams({
@@ -11034,7 +11034,7 @@ var SandboxFilesystemOperations = class extends DeclaredFilesystemOperations {
 			totalBytes: size,
 			percentage: 0
 		});
-		const { uploadChunkedFromFile } = await import("./chunked-upload-file-DL1-AqRp.js");
+		const { uploadChunkedFromFile } = await import("./chunked-upload-file-BM3k_ol3.js");
 		await uploadChunkedFromFile({ fetch: (path, init) => this.host.runtimeFetch(path, init) }, remotePath, localPath, {
 			mode: options?.permissions,
 			onProgress: options?.onProgress ? (progress) => {

package/dist/select-seat-command.js

@@ -1,4 +1,4 @@
-import { D as ValidationError, S as SandboxError } from "./errors-Mzq10WZq.js";
+import { D as ValidationError, S as SandboxError } from "./errors-DYrRgCHB.js";
 import { spawn } from "node:child_process";
 //#region src/select-seat-command.ts
 /**

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as TANGLE_JOBS_CONTRACT, f as ITangleJobsAbi, g as JsonResponseParamTypes, h as JOB_SANDBOX_DELETE, i as jobQuoteDigest, l as OperatorSessionError, m as JOB_SANDBOX_CREATE, n as fetchQuote, o as validateQuote, p as AgentSandboxBlueprintAbi, r as inputsHashOf, s as BlueprintSandboxClient, t as QuoteError, u as TANGLE_CHAIN_ID, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-fs17QlcY.js";
+import { _ as SandboxCreateParamTypes, a as parseQuoteResponse, c as OperatorSession, d as TANGLE_JOBS_CONTRACT, f as ITangleJobsAbi, g as JsonResponseParamTypes, h as JOB_SANDBOX_DELETE, i as jobQuoteDigest, l as OperatorSessionError, m as JOB_SANDBOX_CREATE, n as fetchQuote, o as validateQuote, p as AgentSandboxBlueprintAbi, r as inputsHashOf, s as BlueprintSandboxClient, t as QuoteError, u as TANGLE_CHAIN_ID, v as SandboxCreateResponseParamTypes, y as SandboxIdParamTypes } from "../tangle-cfvm_9z5.js";
 export { AgentSandboxBlueprintAbi, BlueprintSandboxClient, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, OperatorSession, OperatorSessionError, QuoteError, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, fetchQuote, inputsHashOf, jobQuoteDigest, parseQuoteResponse, validateQuote };

package/dist/{tangle-fs17QlcY.js → tangle-cfvm_9z5.js}

@@ -1,5 +1,5 @@
-import { M as readFilesystemIncarnationTuple, n as createSandboxInstanceFromResponse } from "./sandbox-Dtb-_btd.js";
-import { a as readResponseJson } from "./errors-Mzq10WZq.js";
+import { M as readFilesystemIncarnationTuple, n as createSandboxInstanceFromResponse } from "./sandbox-Djgwuf3R.js";
+import { a as readResponseJson } from "./errors-DYrRgCHB.js";
 import { _ as rotlBH, a as anumber, b as rotlSL, d as createXOFer, g as u32, h as toBytes$1, l as createHasher, m as swap32IfBE, n as abytes, o as aoutput, r as aexists, s as clean, t as Hash, v as rotlBL, x as split, y as rotlSH } from "./utils-CK-x8vXj.js";
 //#region ../../../packages/runtime-contracts/dist/tangle-blueprint-abi.js
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "1.0.193",
+  "version": "1.0.195",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "sideEffects": [
@@ -153,15 +153,15 @@
     "vitest": "^4.1.12",
     "ws": "^8.22.0",
     "yjs": "13.6.33",
-    "@products/sandbox-test-utils": "0.0.0",
+    "@repo/shared": "0.0.0",
     "@tangle-network/agent-profile-materialize": "0.27.1",
-    "@tangle-network/cli-agent-registry": "0.15.0",
+    "@products/sandbox-test-utils": "0.0.0",
     "@tangle-network/runtime-contracts": "0.20.0",
-    "@repo/shared": "0.0.0"
+    "@tangle-network/cli-agent-registry": "0.15.0"
   },
   "tangleRelease": {
-    "sourceSha": "d686ea80953169447140c9b4e467ae9d704e2372",
-    "mergedAt": "2026-11-02T09:01:26-08:00"
+    "sourceSha": "fcc4ccab93268867518d3ab9f0cb30a54865d39f",
+    "mergedAt": "2026-11-02T09:49:03-08:00"
   },
   "scripts": {
     "build": "node scripts/build-dist.mjs",