@tangle-network/tcloud 0.4.5 → 0.4.8

package/dist/index.cjs

@@ -37,6 +37,7 @@ __export(index_exports, {
   TCloudError: () => TCloudError,
   TCloudSandbox: () => TCloudSandbox,
   assertAttestation: () => import_tcloud_attestation2.assertAttestation,
+  createNitroHardwareVerifier: () => import_tcloud_attestation2.createNitroHardwareVerifier,
   createSevSnpHardwareVerifier: () => import_tcloud_attestation2.createSevSnpHardwareVerifier,
   createShieldedClient: () => createShieldedClient,
   createTdxHardwareVerifier: () => import_tcloud_attestation2.createTdxHardwareVerifier,
@@ -46,6 +47,7 @@ __export(index_exports, {
   generateWallet: () => generateWallet,
   normalizeTeeType: () => import_tcloud_attestation2.normalizeTeeType,
   parseAttestation: () => import_tcloud_attestation2.parseAttestation,
+  parseNitroAttestationDocument: () => import_tcloud_attestation2.parseNitroAttestationDocument,
   parseSevSnpReport: () => import_tcloud_attestation2.parseSevSnpReport,
   signSpendAuth: () => signSpendAuth,
   startTeeAttestationHeartbeat: () => startTeeAttestationHeartbeat,
@@ -277,6 +279,7 @@ var PrivateRouter = class {
 
 // src/client.ts
 var ROTATING_MARKER = "__tcloudRotating";
+var DIRECT_CLI_BRIDGE_MARKER = "__tcloudDirectCliBridge";
 var DEFAULT_BASE_URL = "https://router.tangle.tools/v1";
 var SDK_VERSION = "0.4.0";
 async function proxiedFetch(privacy, url, init, streaming) {
@@ -326,6 +329,43 @@ var DEFAULT_RETRY = {
 };
 var DEFAULT_TIMEOUT_MS = 6e4;
 var DEFAULT_PLATFORM_URL = "https://id.tangle.tools";
+var PROTECTED_PROVIDER_OPTION_KEYS = /* @__PURE__ */ new Set([
+  "model",
+  "messages",
+  "temperature",
+  "max_tokens",
+  "maxTokens",
+  "stream",
+  "stop",
+  "top_p",
+  "topP",
+  "frequency_penalty",
+  "frequencyPenalty",
+  "presence_penalty",
+  "presencePenalty",
+  "response_format",
+  "responseFormat",
+  "tools",
+  "tool_choice",
+  "toolChoice",
+  "gateway",
+  "bridge",
+  "agent_profile",
+  "agentProfile",
+  "session_id",
+  "sessionId"
+]);
+function sanitizeProviderOptions(providerOptions) {
+  if (!providerOptions) return {};
+  for (const key of Object.keys(providerOptions)) {
+    if (PROTECTED_PROVIDER_OPTION_KEYS.has(key)) {
+      throw new Error(
+        `providerOptions cannot override protected chat field "${key}"; use the typed ChatOptions field instead`
+      );
+    }
+  }
+  return providerOptions;
+}
 var TCloudClient = class _TCloudClient {
   baseURL;
   platformURL;
@@ -366,13 +406,21 @@ var TCloudClient = class _TCloudClient {
    * const reply = await client.ask('explain X', 'claude-code/sonnet')
    * ```
    *
-   * For session-resumable agentic dispatches (file edits, multi-turn
-   * coding), use the router-mediated `tcloud.bridge({...})` API instead
-   * (or POST to cli-bridge directly with `session_id` in the body).
+   * For session-resumable agentic dispatches, use `client.bridge(...)` on
+   * the returned direct client. `resume` is serialized to cli-bridge's
+   * `session_id` body field and the model wire format stays
+   * `<harness>/<model>` without the router-only `bridge/` prefix.
    */
   static fromCliBridge(opts) {
     const baseURL = opts.url.replace(/\/+$/, "") + "/v1";
-    return new _TCloudClient({ ...opts.config ?? {}, apiKey: opts.bearer, baseURL });
+    const client = new _TCloudClient({ ...opts.config ?? {}, apiKey: opts.bearer, baseURL });
+    Object.defineProperty(client, DIRECT_CLI_BRIDGE_MARKER, {
+      value: true,
+      enumerable: false,
+      configurable: false,
+      writable: false
+    });
+    return client;
   }
   /**
    * Build a client that rotates which operator serves each call. Mirrors
@@ -384,7 +432,7 @@ var TCloudClient = class _TCloudClient {
    *
    * ```ts
    * const tcloud = TCloudClient.rotating({
-   *   apiKey: process.env.TCLOUD_API_KEY,
+   *   apiKey: process.env.TANGLE_API_KEY,
    *   routing: { strategy: 'min-exposure' },
    * })
    * await tcloud.ask('hello')
@@ -425,7 +473,7 @@ var TCloudClient = class _TCloudClient {
   constructor(config = {}) {
     this.baseURL = (config.baseURL || DEFAULT_BASE_URL).replace(/\/$/, "");
     this.platformURL = (config.platformURL || DEFAULT_PLATFORM_URL).replace(/\/$/, "");
-    this.apiKey = config.apiKey || process.env.TCLOUD_API_KEY;
+    this.apiKey = config.apiKey || process.env.TANGLE_API_KEY || process.env.TCLOUD_API_KEY;
     this.model = config.model || "gpt-4o-mini";
     this.privacy = config.privacy;
     this.limits = config.limits;
@@ -634,8 +682,8 @@ var TCloudClient = class _TCloudClient {
         delete headers["Authorization"];
       }
     }
-    if (bridge) {
-      headers["X-Bridge-Unlock"] = bridge.unlock;
+    if (bridge && !this._isDirectCliBridge()) {
+      headers["X-Bridge-Unlock"] = bridge.unlock ?? "";
       if (bridge.resume) headers["X-Resume"] = bridge.resume;
       if (bridge.bridgeUrl) headers["X-Bridge-Url"] = bridge.bridgeUrl;
       if (bridge.bridgeBearer) headers["X-Bridge-Bearer"] = bridge.bridgeBearer;
@@ -648,13 +696,24 @@ var TCloudClient = class _TCloudClient {
    */
   _effectiveModel(options) {
     if (options.bridge) {
+      if (this._isDirectCliBridge()) {
+        return options.bridge.model ? `${options.bridge.harness}/${options.bridge.model}` : options.bridge.harness;
+      }
       return options.bridge.model ? `bridge/${options.bridge.harness}/${options.bridge.model}` : `bridge/${options.bridge.harness}`;
     }
     return options.model || this.model;
   }
   /** Build the chat completions request body */
   _chatBody(options, stream) {
+    const providerOptions = sanitizeProviderOptions(options.providerOptions);
+    const sandboxBody = {};
+    if (options.sandbox?.agentProfile) sandboxBody.agent_profile = options.sandbox.agentProfile;
+    if (options.sandbox?.sessionId) sandboxBody.session_id = options.sandbox.sessionId;
+    if (this._isDirectCliBridge() && options.bridge?.resume && !sandboxBody.session_id) {
+      sandboxBody.session_id = options.bridge.resume;
+    }
     return JSON.stringify({
+      ...providerOptions,
       model: this._effectiveModel(options),
       messages: options.messages,
       temperature: options.temperature,
@@ -668,7 +727,7 @@ var TCloudClient = class _TCloudClient {
       tools: options.tools,
       tool_choice: options.toolChoice,
       ...options.gateway ? { gateway: options.gateway } : {},
-      ...options.providerOptions
+      ...sandboxBody
     });
   }
   /** Chat completion (non-streaming) */
@@ -749,7 +808,13 @@ var TCloudClient = class _TCloudClient {
         "TCloudClient.rotating() cannot dispatch sandbox-harness sessions.\nSandbox sessions bind to a single operator; rotation is meaningful only for\nstateless calls. Use TCloudClient.shielded() + AgentProfile.confidential.tee\nfor privacy-preserving sandbox execution instead."
       );
     }
-    return new BridgeSession(this, cfg);
+    if (!this._isDirectCliBridge() && cfg.unlock == null) {
+      throw new Error("Bridge unlock is required for router-mediated bridge sessions");
+    }
+    return new BridgeSession(this, cfg, this._isDirectCliBridge());
+  }
+  _isDirectCliBridge() {
+    return this[DIRECT_CLI_BRIDGE_MARKER] === true;
   }
   /**
    * Rotation stats — populated only on clients created via
@@ -915,6 +980,49 @@ var TCloudClient = class _TCloudClient {
       })
     });
   }
+  /**
+   * Edit / inpaint / variate an existing image with a text prompt.
+   * Sibling to `imageGenerate`; routes to `/v1/images/edits` via
+   * multipart/form-data per the OpenAI spec.
+   *
+   * Reference image attachments may be passed as `Blob`, `ArrayBuffer`,
+   * or `{data: base64, mediaType, filename?}`. Multi-image composition
+   * (e.g. gpt-image-2 with two reference frames + a prompt that fuses
+   * them) is supported by passing an array; for legacy models only the
+   * first image is honored upstream.
+   */
+  async imagesEdit(options) {
+    const formData = new FormData();
+    formData.append("prompt", options.prompt);
+    formData.append("model", options.model || "gpt-image-2");
+    if (options.n != null) formData.append("n", String(options.n));
+    if (options.size) formData.append("size", options.size);
+    if (options.quality) formData.append("quality", options.quality);
+    if (options.response_format) formData.append("response_format", options.response_format);
+    if (options.mask) formData.append("mask", toEditBlob(options.mask, "mask.png"), "mask.png");
+    const images = Array.isArray(options.image) ? options.image : [options.image];
+    if (images.length === 0) {
+      throw new TCloudError(400, "imagesEdit requires at least one image attachment");
+    }
+    images.forEach((img, idx) => {
+      const blob = toEditBlob(img, `image-${idx + 1}.png`);
+      formData.append("image[]", blob, blobFilename(img, `image-${idx + 1}.png`));
+    });
+    const headers = { ...this.headers };
+    delete headers["Content-Type"];
+    this.checkLimits();
+    const res = await proxiedFetch(this.privacy, `${this.baseURL}/images/edits`, {
+      method: "POST",
+      headers,
+      body: formData
+    }, false);
+    if (!res.ok) {
+      const err = await res.json().catch(() => ({ error: res.statusText }));
+      throw new TCloudError(res.status, err.error?.message || err.error || err.message || res.statusText);
+    }
+    this._requestCount++;
+    return res.json();
+  }
   /** Rerank documents by relevance to a query */
   async rerank(options) {
     return this._request(`${this.baseURL}/rerank`, {
@@ -1006,7 +1114,7 @@ var TCloudClient = class _TCloudClient {
   }
   /** Get video generation status */
   async videoStatus(id) {
-    return this._fetch(`${this.baseURL}/video?id=${id}`);
+    return this._fetch(`${this.baseURL}/video/${encodeURIComponent(id)}`);
   }
   /** Generate an avatar video (lip-synced talking head from audio + face image).
    *  Returns 202 with a job_id for async polling via avatarJobStatus(). */
@@ -1266,12 +1374,14 @@ var ALL_TIERS = [
   { name: "max-gpu-tee", cpu: 64, ramGb: 256, gpu: 4, tee: true }
 ];
 var BridgeSession = class _BridgeSession {
-  constructor(client, cfg) {
+  constructor(client, cfg, direct = false) {
     this.client = client;
     this.cfg = cfg;
+    this.direct = direct;
   }
   client;
   cfg;
+  direct;
   /** Full chat completion (non-streaming). */
   async chat(options) {
     return this.client.chat({ ...options, bridge: this.cfg });
@@ -1305,15 +1415,16 @@ var BridgeSession = class _BridgeSession {
   }
   /** Clone with a new resume id — same harness, different logical conversation. */
   withResume(resume) {
-    return new _BridgeSession(this.client, { ...this.cfg, resume });
+    return new _BridgeSession(this.client, { ...this.cfg, resume }, this.direct);
   }
   /** Clone with a different model inside the same harness. */
   withModel(model) {
-    return new _BridgeSession(this.client, { ...this.cfg, model });
+    return new _BridgeSession(this.client, { ...this.cfg, model }, this.direct);
   }
   /** The effective model id that will land on the router (`bridge/<harness>/<model>`). */
   get model() {
-    return this.cfg.model ? `bridge/${this.cfg.harness}/${this.cfg.model}` : `bridge/${this.cfg.harness}`;
+    const prefix = this.direct ? "" : "bridge/";
+    return this.cfg.model ? `${prefix}${this.cfg.harness}/${this.cfg.model}` : `${prefix}${this.cfg.harness}`;
   }
   /** The resume id currently bound to this session, if any. */
   get resume() {
@@ -1335,6 +1446,32 @@ function selectTiers(all, n) {
 function formatPrice(pricePerToken) {
   return `$${(pricePerToken * 1e3).toFixed(6)}/1K tokens`;
 }
+function toEditBlob(input, defaultFilename) {
+  if (input instanceof Blob) return input;
+  if (input instanceof ArrayBuffer) return new Blob([input], { type: "image/png" });
+  const binary = base64ToUint8Array(input.data);
+  const copy = new Uint8Array(binary.byteLength);
+  copy.set(binary);
+  return new Blob([copy.buffer], { type: input.mediaType || "image/png" });
+  void defaultFilename;
+}
+function blobFilename(input, fallback) {
+  if (typeof input === "object" && !(input instanceof Blob) && !(input instanceof ArrayBuffer)) {
+    if (input.filename) return input.filename;
+  }
+  return fallback;
+}
+function base64ToUint8Array(b64) {
+  const m = /^data:[^;,]*(?:;[^,]*)?,(.+)$/.exec(b64);
+  const raw = m ? m[1] : b64;
+  const bin = typeof atob === "function" ? atob(raw) : (
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    globalThis.Buffer.from(raw, "base64").toString("binary")
+  );
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
 var TCloudError = class extends Error {
   constructor(status, message) {
     super(message);
@@ -1846,7 +1983,14 @@ function buildSandboxCreateOptions(options) {
       memoryMB: options.memoryMb,
       diskGB: options.diskGb
     } : void 0,
-    backend: options.backend ? { type: options.backend } : void 0,
+    // backend: merge `backend` (type string) with `agentProfile` (carried
+    // as `backend.profile` on the underlying SDK). Either may be set
+    // independently; setting both produces `{ type, profile }`. Setting
+    // neither leaves `backend` undefined so the SDK applies its default.
+    backend: options.backend || options.agentProfile ? {
+      ...options.backend ? { type: options.backend } : {},
+      ...options.agentProfile ? { profile: options.agentProfile } : {}
+    } : void 0,
     confidential: options.tee ? {
       tee: options.tee,
       sealed: options.sealed || void 0,
@@ -1946,7 +2090,7 @@ var TCloud = class _TCloud extends TCloudClient {
    *
    * ```ts
    * const client = TCloud.rotating({
-   *   apiKey: process.env.TCLOUD_API_KEY,
+   *   apiKey: process.env.TANGLE_API_KEY,
    *   routing: { strategy: 'min-exposure' },
    * })
    * const stats = client.getRotationStats()
@@ -1964,6 +2108,23 @@ var TCloud = class _TCloud extends TCloudClient {
    * ```
    */
   static generateWallet = generateWallet;
+  /**
+   * Create a Sandbox SDK client using this TCloud client's API key by default.
+   *
+   * ```ts
+   * const tcloud = new TCloud({ apiKey })
+   * const sandbox = await tcloud.sandbox().create({ name: 'runner' })
+   * ```
+   */
+  sandbox(config = {}) {
+    const apiKey = config.apiKey ?? this.apiKey;
+    if (!apiKey) throw new Error("TCloud.sandbox() requires an apiKey");
+    return new TCloudSandbox({ ...config, apiKey });
+  }
+  /** Create a standalone Sandbox SDK client. */
+  static sandbox(config) {
+    return new TCloudSandbox(config);
+  }
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
@@ -1974,6 +2135,7 @@ var TCloud = class _TCloud extends TCloudClient {
   TCloudError,
   TCloudSandbox,
   assertAttestation,
+  createNitroHardwareVerifier,
   createSevSnpHardwareVerifier,
   createShieldedClient,
   createTdxHardwareVerifier,
@@ -1983,6 +2145,7 @@ var TCloud = class _TCloud extends TCloudClient {
   generateWallet,
   normalizeTeeType,
   parseAttestation,
+  parseNitroAttestationDocument,
   parseSevSnpReport,
   signSpendAuth,
   startTeeAttestationHeartbeat,

package/dist/index.d.cts

@@ -1,10 +1,11 @@
 import { ShieldedWallet, generateWallet } from './shielded.cjs';
 export { createShieldedClient, estimateCost, signSpendAuth } from './shielded.cjs';
-import { T as TCloudClient, a as TCloudConfig, R as RotatingClientConfig } from './client-DkQugNHH.cjs';
-export { A as ApiKeyInfo, b as AvatarGenerateRequest, c as AvatarGenerateResponse, d as AvatarJobStatus, e as AvatarResult, B as BatchJobResponse, f as BatchRequest, g as BridgeOptions, h as BridgeSession, C as ChatCompletion, i as ChatCompletionChunk, j as ChatMessage, k as ChatOptions, l as CompletionOptions, m as CompletionResponse, n as CreateKeyOptions, o as CreatedKey, p as CreditBalance, E as EmbeddingOptions, q as EmbeddingResponse, F as FineTuningJob, r as FineTuningJobOptions, G as GatewayOptions, I as ImageGenerateOptions, s as ImageResponse, J as JobEvent, M as Model, O as Operator, t as OperatorInfo, P as PricingTier, u as PrivacyConfig, v as PrivateRouter, w as PrivateRouterConfig, x as RerankOptions, y as RerankResponse, z as RetryConfig, D as RotatingRoutingConfig, H as RotationStats, K as RoutingConfig, L as RoutingStrategy, S as ShieldedConfig, N as SpendAuth, Q as SpendingLimits, U as TCloudError, V as TierConfig, W as TranscriptionResponse, X as UpdateKeyOptions, Y as VideoGenerateOptions, Z as VideoResponse, _ as WatchJobOptions } from './client-DkQugNHH.cjs';
-export { TCloudSandbox, TCloudSandboxAttestationStatus, TCloudSandboxConfig, TCloudSandboxCreateOptions, TCloudSandboxCreateResult, TCloudSandboxTee, TCloudTeeAttestationChallenge, TCloudTeeAttestationHeartbeat, TCloudTeeAttestationHeartbeatOptions, TCloudTeeAttestationHeartbeatSample, createTeeAttestationChallenge, generateAttestationNonce, startTeeAttestationHeartbeat } from './sandbox.cjs';
-export { AsyncAttestationPolicy, AsyncHardwareVerifier, AttestationPolicy, AttestationVerificationResult, HardwareVerifier, HardwareVerifierResult, ParsedAttestation, SevSnpReport, SevSnpVerifierOptions, TeeType, assertAttestation, createSevSnpHardwareVerifier, createTdxHardwareVerifier, normalizeTeeType, parseAttestation, parseSevSnpReport, toHex, verifyAttestation, verifyAttestationAsync } from '@tangle-network/tcloud-attestation';
-export { AgentProfile, AgentProfileCapabilities, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResources } from '@tangle-network/sandbox';
+import { T as TCloudClient, a as TCloudConfig, R as RotatingClientConfig } from './client-CF-tpVsi.cjs';
+export { A as ApiKeyInfo, b as AvatarGenerateRequest, c as AvatarGenerateResponse, d as AvatarJobStatus, e as AvatarResult, B as BatchJobResponse, f as BatchRequest, g as BridgeOptions, h as BridgeSession, C as ChatCompletion, i as ChatCompletionChunk, j as ChatMessage, k as ChatOptions, l as CompletionOptions, m as CompletionResponse, n as CreateKeyOptions, o as CreatedKey, p as CreditBalance, E as EmbeddingOptions, q as EmbeddingResponse, F as FineTuningJob, r as FineTuningJobOptions, G as GatewayOptions, I as ImageEditAttachment, s as ImageEditOptions, t as ImageGenerateOptions, u as ImageResponse, J as JobEvent, M as Model, O as Operator, v as OperatorInfo, P as PricingTier, w as PrivacyConfig, x as PrivateRouter, y as PrivateRouterConfig, z as RerankOptions, D as RerankResponse, H as RetryConfig, K as RotatingRoutingConfig, L as RotationStats, N as RoutingConfig, Q as RoutingStrategy, S as SandboxChatOptions, U as ShieldedConfig, V as SpendAuth, W as SpendingLimits, X as TCloudError, Y as TierConfig, Z as TranscriptionResponse, _ as UpdateKeyOptions, $ as VideoGenerateOptions, a0 as VideoResponse, a1 as WatchJobOptions } from './client-CF-tpVsi.cjs';
+import { TCloudSandboxConfig, TCloudSandbox } from './sandbox.cjs';
+export { TCloudSandboxAttestationStatus, TCloudSandboxCreateOptions, TCloudSandboxCreateResult, TCloudSandboxTee, TCloudTeeAttestationChallenge, TCloudTeeAttestationHeartbeat, TCloudTeeAttestationHeartbeatOptions, TCloudTeeAttestationHeartbeatSample, createTeeAttestationChallenge, generateAttestationNonce, startTeeAttestationHeartbeat } from './sandbox.cjs';
+export { AsyncAttestationPolicy, AsyncHardwareVerifier, AttestationPolicy, AttestationVerificationResult, HardwareVerifier, HardwareVerifierResult, NitroAttestationDocument, NitroVerifierOptions, ParsedAttestation, SevSnpReport, SevSnpVerifierOptions, TeeType, assertAttestation, createNitroHardwareVerifier, createSevSnpHardwareVerifier, createTdxHardwareVerifier, normalizeTeeType, parseAttestation, parseNitroAttestationDocument, parseSevSnpReport, toHex, verifyAttestation, verifyAttestationAsync } from '@tangle-network/tcloud-attestation';
+export { AgentProfile, AgentProfileCapabilities, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile } from '@tangle-network/sandbox';
 import 'viem';
 
 declare class TCloud extends TCloudClient {
@@ -44,7 +45,7 @@ declare class TCloud extends TCloudClient {
      *
      * ```ts
      * const client = TCloud.rotating({
-     *   apiKey: process.env.TCLOUD_API_KEY,
+     *   apiKey: process.env.TANGLE_API_KEY,
      *   routing: { strategy: 'min-exposure' },
      * })
      * const stats = client.getRotationStats()
@@ -60,6 +61,17 @@ declare class TCloud extends TCloudClient {
      * ```
      */
     static generateWallet: typeof generateWallet;
+    /**
+     * Create a Sandbox SDK client using this TCloud client's API key by default.
+     *
+     * ```ts
+     * const tcloud = new TCloud({ apiKey })
+     * const sandbox = await tcloud.sandbox().create({ name: 'runner' })
+     * ```
+     */
+    sandbox(config?: Partial<TCloudSandboxConfig>): TCloudSandbox;
+    /** Create a standalone Sandbox SDK client. */
+    static sandbox(config: TCloudSandboxConfig): TCloudSandbox;
 }
 
-export { RotatingClientConfig, ShieldedWallet, TCloud, TCloudClient, TCloudConfig, generateWallet };
+export { RotatingClientConfig, ShieldedWallet, TCloud, TCloudClient, TCloudConfig, TCloudSandbox, TCloudSandboxConfig, generateWallet };

package/dist/index.d.ts

@@ -1,10 +1,11 @@
 import { ShieldedWallet, generateWallet } from './shielded.js';
 export { createShieldedClient, estimateCost, signSpendAuth } from './shielded.js';
-import { T as TCloudClient, a as TCloudConfig, R as RotatingClientConfig } from './client-DkQugNHH.js';
-export { A as ApiKeyInfo, b as AvatarGenerateRequest, c as AvatarGenerateResponse, d as AvatarJobStatus, e as AvatarResult, B as BatchJobResponse, f as BatchRequest, g as BridgeOptions, h as BridgeSession, C as ChatCompletion, i as ChatCompletionChunk, j as ChatMessage, k as ChatOptions, l as CompletionOptions, m as CompletionResponse, n as CreateKeyOptions, o as CreatedKey, p as CreditBalance, E as EmbeddingOptions, q as EmbeddingResponse, F as FineTuningJob, r as FineTuningJobOptions, G as GatewayOptions, I as ImageGenerateOptions, s as ImageResponse, J as JobEvent, M as Model, O as Operator, t as OperatorInfo, P as PricingTier, u as PrivacyConfig, v as PrivateRouter, w as PrivateRouterConfig, x as RerankOptions, y as RerankResponse, z as RetryConfig, D as RotatingRoutingConfig, H as RotationStats, K as RoutingConfig, L as RoutingStrategy, S as ShieldedConfig, N as SpendAuth, Q as SpendingLimits, U as TCloudError, V as TierConfig, W as TranscriptionResponse, X as UpdateKeyOptions, Y as VideoGenerateOptions, Z as VideoResponse, _ as WatchJobOptions } from './client-DkQugNHH.js';
-export { TCloudSandbox, TCloudSandboxAttestationStatus, TCloudSandboxConfig, TCloudSandboxCreateOptions, TCloudSandboxCreateResult, TCloudSandboxTee, TCloudTeeAttestationChallenge, TCloudTeeAttestationHeartbeat, TCloudTeeAttestationHeartbeatOptions, TCloudTeeAttestationHeartbeatSample, createTeeAttestationChallenge, generateAttestationNonce, startTeeAttestationHeartbeat } from './sandbox.js';
-export { AsyncAttestationPolicy, AsyncHardwareVerifier, AttestationPolicy, AttestationVerificationResult, HardwareVerifier, HardwareVerifierResult, ParsedAttestation, SevSnpReport, SevSnpVerifierOptions, TeeType, assertAttestation, createSevSnpHardwareVerifier, createTdxHardwareVerifier, normalizeTeeType, parseAttestation, parseSevSnpReport, toHex, verifyAttestation, verifyAttestationAsync } from '@tangle-network/tcloud-attestation';
-export { AgentProfile, AgentProfileCapabilities, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResources } from '@tangle-network/sandbox';
+import { T as TCloudClient, a as TCloudConfig, R as RotatingClientConfig } from './client-CF-tpVsi.js';
+export { A as ApiKeyInfo, b as AvatarGenerateRequest, c as AvatarGenerateResponse, d as AvatarJobStatus, e as AvatarResult, B as BatchJobResponse, f as BatchRequest, g as BridgeOptions, h as BridgeSession, C as ChatCompletion, i as ChatCompletionChunk, j as ChatMessage, k as ChatOptions, l as CompletionOptions, m as CompletionResponse, n as CreateKeyOptions, o as CreatedKey, p as CreditBalance, E as EmbeddingOptions, q as EmbeddingResponse, F as FineTuningJob, r as FineTuningJobOptions, G as GatewayOptions, I as ImageEditAttachment, s as ImageEditOptions, t as ImageGenerateOptions, u as ImageResponse, J as JobEvent, M as Model, O as Operator, v as OperatorInfo, P as PricingTier, w as PrivacyConfig, x as PrivateRouter, y as PrivateRouterConfig, z as RerankOptions, D as RerankResponse, H as RetryConfig, K as RotatingRoutingConfig, L as RotationStats, N as RoutingConfig, Q as RoutingStrategy, S as SandboxChatOptions, U as ShieldedConfig, V as SpendAuth, W as SpendingLimits, X as TCloudError, Y as TierConfig, Z as TranscriptionResponse, _ as UpdateKeyOptions, $ as VideoGenerateOptions, a0 as VideoResponse, a1 as WatchJobOptions } from './client-CF-tpVsi.js';
+import { TCloudSandboxConfig, TCloudSandbox } from './sandbox.js';
+export { TCloudSandboxAttestationStatus, TCloudSandboxCreateOptions, TCloudSandboxCreateResult, TCloudSandboxTee, TCloudTeeAttestationChallenge, TCloudTeeAttestationHeartbeat, TCloudTeeAttestationHeartbeatOptions, TCloudTeeAttestationHeartbeatSample, createTeeAttestationChallenge, generateAttestationNonce, startTeeAttestationHeartbeat } from './sandbox.js';
+export { AsyncAttestationPolicy, AsyncHardwareVerifier, AttestationPolicy, AttestationVerificationResult, HardwareVerifier, HardwareVerifierResult, NitroAttestationDocument, NitroVerifierOptions, ParsedAttestation, SevSnpReport, SevSnpVerifierOptions, TeeType, assertAttestation, createNitroHardwareVerifier, createSevSnpHardwareVerifier, createTdxHardwareVerifier, normalizeTeeType, parseAttestation, parseNitroAttestationDocument, parseSevSnpReport, toHex, verifyAttestation, verifyAttestationAsync } from '@tangle-network/tcloud-attestation';
+export { AgentProfile, AgentProfileCapabilities, AgentProfileFileMount, AgentProfileMcpServer, AgentProfileModelHints, AgentProfilePermissionValue, AgentProfilePrompt, AgentProfileResourceRef, AgentProfileResources, AgentProfileValidationIssue, AgentProfileValidationResult, AgentSubagentProfile } from '@tangle-network/sandbox';
 import 'viem';
 
 declare class TCloud extends TCloudClient {
@@ -44,7 +45,7 @@ declare class TCloud extends TCloudClient {
      *
      * ```ts
      * const client = TCloud.rotating({
-     *   apiKey: process.env.TCLOUD_API_KEY,
+     *   apiKey: process.env.TANGLE_API_KEY,
      *   routing: { strategy: 'min-exposure' },
      * })
      * const stats = client.getRotationStats()
@@ -60,6 +61,17 @@ declare class TCloud extends TCloudClient {
      * ```
      */
     static generateWallet: typeof generateWallet;
+    /**
+     * Create a Sandbox SDK client using this TCloud client's API key by default.
+     *
+     * ```ts
+     * const tcloud = new TCloud({ apiKey })
+     * const sandbox = await tcloud.sandbox().create({ name: 'runner' })
+     * ```
+     */
+    sandbox(config?: Partial<TCloudSandboxConfig>): TCloudSandbox;
+    /** Create a standalone Sandbox SDK client. */
+    static sandbox(config: TCloudSandboxConfig): TCloudSandbox;
 }
 
-export { RotatingClientConfig, ShieldedWallet, TCloud, TCloudClient, TCloudConfig, generateWallet };
+export { RotatingClientConfig, ShieldedWallet, TCloud, TCloudClient, TCloudConfig, TCloudSandbox, TCloudSandboxConfig, generateWallet };

package/dist/index.js

@@ -1,33 +1,35 @@
 import {
   TCloud,
   assertAttestation,
+  createNitroHardwareVerifier,
   createSevSnpHardwareVerifier,
   createTdxHardwareVerifier,
   normalizeTeeType,
   parseAttestation,
+  parseNitroAttestationDocument,
   parseSevSnpReport,
   toHex,
   verifyAttestation,
   verifyAttestationAsync
-} from "./chunk-MB4VK4MM.js";
+} from "./chunk-27OTTDMZ.js";
 import {
   TCloudSandbox,
   createTeeAttestationChallenge,
   generateAttestationNonce,
   startTeeAttestationHeartbeat
-} from "./chunk-DBIT227N.js";
+} from "./chunk-DRCOPW7D.js";
 import {
   createShieldedClient,
   estimateCost,
   generateWallet,
   signSpendAuth
-} from "./chunk-4ZUVGKVH.js";
+} from "./chunk-YWN4JOCW.js";
 import {
   BridgeSession,
   PrivateRouter,
   TCloudClient,
   TCloudError
-} from "./chunk-M5K3EFNP.js";
+} from "./chunk-CVWEKCQ3.js";
 export {
   BridgeSession,
   PrivateRouter,
@@ -36,6 +38,7 @@ export {
   TCloudError,
   TCloudSandbox,
   assertAttestation,
+  createNitroHardwareVerifier,
   createSevSnpHardwareVerifier,
   createShieldedClient,
   createTdxHardwareVerifier,
@@ -45,6 +48,7 @@ export {
   generateWallet,
   normalizeTeeType,
   parseAttestation,
+  parseNitroAttestationDocument,
   parseSevSnpReport,
   signSpendAuth,
   startTeeAttestationHeartbeat,