@vibesdotdev/agent-execution 0.0.0-stage → 1.0.0-rc.1

package/dist/sandbox/agent-sandbox.consumer.plugin.js

@@ -0,0 +1,33 @@
+/**
+ * Compatibility consumer plugin for agent/sandbox. The production loader and
+ * descriptor id remain available; execute refuses before any host operation.
+ * Compositions such as devtools still resolve it, then receive a typed
+ * non-retryable availability error. No unsafe execution fallback is installed.
+ */
+import { createRuntimePlugin, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import consumerSandboxDescriptor from "./agent-sandbox.consumer.descriptor.js";
+export const agentSandboxConsumerPlugin = createRuntimePlugin({
+    id: 'agent-sandbox-consumer',
+    name: 'Agent Sandbox — consumer availability',
+    description: 'Consumer agent/sandbox registration with explicit isolation-unavailable refusal.',
+    // The kind is declared by @vibesdotdev/agent-execution/sandbox; require it first.
+    dependencies: ['agent-sandbox'],
+    descriptors: [consumerSandboxDescriptor],
+    async onRegister(runtime) {
+        runtime.registerLoader('agent/sandbox', consumerSandboxDescriptor.id, async () => {
+            const { ConsumerAgentSandbox } = await import("./agent-sandbox.impl.consumer.js");
+            return createRuntimeImplementation({
+                kind: 'agent/sandbox',
+                id: consumerSandboxDescriptor.id,
+                constraint: { hardware: ['consumer'] },
+                implementation: class extends ConsumerAgentSandbox {
+                    constructor(descriptor) {
+                        super(descriptor, runtime);
+                    }
+                }
+            });
+        });
+    }
+});
+export default agentSandboxConsumerPlugin;
+//# sourceMappingURL=agent-sandbox.consumer.plugin.js.map

package/dist/sandbox/agent-sandbox.consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.consumer.plugin.js","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.consumer.plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAEvF,OAAO,yBAAyB,MAAM,wCAAwC,CAAC;AAG/E,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;IAC7D,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,uCAAuC;IAC7C,WAAW,EACV,kFAAkF;IACnF,kFAAkF;IAClF,YAAY,EAAE,CAAC,eAAe,CAAC;IAC/B,WAAW,EAAE,CAAC,yBAAyB,CAAC;IAExC,KAAK,CAAC,UAAU,CAAC,OAAmB;QACnC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,yBAAyB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YAClF,OAAO,2BAA2B,CAAC;gBAClC,IAAI,EAAE,eAAe;gBACrB,EAAE,EAAE,yBAAyB,CAAC,EAAE;gBAChC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;gBACtC,cAAc,EAAE,KAAM,SAAQ,oBAAoB;oBACjD,YAAY,UAAkC;wBAC7C,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;oBAC5B,CAAC;iBACD;aACD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAC,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/sandbox/agent-sandbox.descriptor.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Descriptor contract for agent/sandbox. Isolation must be enforced by the
+ * selected provider; metadata alone does not enforce filesystem, network,
+ * package or resource limits. The consumer registration currently refuses all
+ * execution because its former subprocess did not provide model-code isolation.
+ */
+import * as z from 'zod/v4';
+/** Surfaces a sandbox can be addressed through (informational, mirrors other kinds). */
+export declare const AgentSandboxSurfaceSchema: z.ZodEnum<{
+    agent: "agent";
+    worker: "worker";
+    direct: "direct";
+}>;
+export type AgentSandboxSurface = z.infer<typeof AgentSandboxSurfaceSchema>;
+/**
+ * Trust ladder for a sandbox, aligned with the agent capability-tier values
+ * (`'0' | '1' | '2a' | '2b' | '3'`). Providers must enforce their declared policy;
+ * the schema itself grants no filesystem or network access.
+ */
+export declare const SandboxTrustLevelSchema: z.ZodEnum<{
+    0: "0";
+    1: "1";
+    3: "3";
+    "2a": "2a";
+    "2b": "2b";
+}>;
+export type SandboxTrustLevel = z.infer<typeof SandboxTrustLevelSchema>;
+export declare const AgentSandboxDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"agent/sandbox">;
+    name: z.ZodDefault<z.ZodString>;
+    priority: z.ZodDefault<z.ZodNumber>;
+    surfaces: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        agent: "agent";
+        worker: "worker";
+        direct: "direct";
+    }>>>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    memoryLimit: z.ZodDefault<z.ZodNumber>;
+    fileSystemAllowed: z.ZodDefault<z.ZodBoolean>;
+    npmPackages: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    trustLevel: z.ZodDefault<z.ZodEnum<{
+        0: "0";
+        1: "1";
+        3: "3";
+        "2a": "2a";
+        "2b": "2b";
+    }>>;
+}, z.core.$strip>;
+export type AgentSandboxDescriptor = z.infer<typeof AgentSandboxDescriptorSchema>;
+/**
+ * Author an `agent/sandbox` descriptor without restating the `kind`. Mirrors
+ * `createAIGenerationOutputStoreDescriptor`.
+ */
+export declare function createAgentSandboxDescriptor(options: Omit<Partial<AgentSandboxDescriptor>, 'kind'> & {
+    id: string;
+}): AgentSandboxDescriptor;
+export default AgentSandboxDescriptorSchema;
+//# sourceMappingURL=agent-sandbox.descriptor.d.ts.map

package/dist/sandbox/agent-sandbox.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.descriptor.d.ts","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,wFAAwF;AACxF,eAAO,MAAM,yBAAyB;;;;EAAwC,CAAC;AAC/E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;EAAsC,CAAC;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GACrE,sBAAsB,CAKxB;AAED,eAAe,4BAA4B,CAAC"}

package/dist/sandbox/agent-sandbox.descriptor.js

@@ -0,0 +1,57 @@
+/**
+ * Descriptor contract for agent/sandbox. Isolation must be enforced by the
+ * selected provider; metadata alone does not enforce filesystem, network,
+ * package or resource limits. The consumer registration currently refuses all
+ * execution because its former subprocess did not provide model-code isolation.
+ */
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+/** Surfaces a sandbox can be addressed through (informational, mirrors other kinds). */
+export const AgentSandboxSurfaceSchema = z.enum(['agent', 'worker', 'direct']);
+/**
+ * Trust ladder for a sandbox, aligned with the agent capability-tier values
+ * (`'0' | '1' | '2a' | '2b' | '3'`). Providers must enforce their declared policy;
+ * the schema itself grants no filesystem or network access.
+ */
+export const SandboxTrustLevelSchema = z.enum(['0', '1', '2a', '2b', '3']);
+export const AgentSandboxDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('agent/sandbox'),
+    /** Human label for selectors/logs. */
+    name: z.string().default('Agent Sandbox'),
+    /**
+     * Selection priority when multiple sandbox impls match the scope. Higher
+     * wins; consumer defaults to 100, cloud adapters use 110 (disjoint
+     * hardware, so priority is only a defensive tie-breaker).
+     */
+    priority: z.number().int().default(100),
+    /** Surfaces this sandbox can be reached through. */
+    surfaces: z.array(AgentSandboxSurfaceSchema).default(['agent', 'worker', 'direct']),
+    /** Wall-clock budget for a single execution before the process is aborted. */
+    timeoutMs: z.number().int().positive().default(30_000),
+    /**
+     * Requested memory ceiling in megabytes. Enforcement requires provider-specific
+     * evidence; the consumer registration does not execute.
+     */
+    memoryLimit: z.number().int().positive().default(256),
+    /**
+     * Whether a writable scratch filesystem is permitted inside the workspace.
+     * The selected provider must enforce this permission before executing code.
+     */
+    fileSystemAllowed: z.boolean().default(false),
+    /** npm packages the sandbox is allowed to install/import (allowlist; empty = none). */
+    npmPackages: z.array(z.string()).default([]),
+    /** Declared trust ceiling; the selected provider must enforce its restrictions. */
+    trustLevel: SandboxTrustLevelSchema.default('1')
+});
+/**
+ * Author an `agent/sandbox` descriptor without restating the `kind`. Mirrors
+ * `createAIGenerationOutputStoreDescriptor`.
+ */
+export function createAgentSandboxDescriptor(options) {
+    return AgentSandboxDescriptorSchema.parse({
+        ...options,
+        kind: 'agent/sandbox'
+    });
+}
+export default AgentSandboxDescriptorSchema;
+//# sourceMappingURL=agent-sandbox.descriptor.js.map

package/dist/sandbox/agent-sandbox.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.descriptor.js","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,wFAAwF;AACxF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC1E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,sCAAsC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACzC;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACvC,oDAAoD;IACpD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnF,8EAA8E;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACtD;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACrD;;;OAGG;IACH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,uFAAuF;IACvF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,mFAAmF;IACnF,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC;CAChD,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC3C,OAAuE;IAEvE,OAAO,4BAA4B,CAAC,KAAK,CAAC;QACzC,GAAG,OAAO;QACV,IAAI,EAAE,eAAe;KACrB,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,4BAA4B,CAAC"}

package/dist/sandbox/agent-sandbox.impl.consumer.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Consumer registration retained for compatibility; execution fails closed.
+ * A temporary directory and stripped environment do not isolate model code.
+ * Cooperative restricted test execution is not a substitute for that boundary.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { AgentSandboxDescriptor } from './agent-sandbox.descriptor.ts';
+import type { AgentSandboxInterface, SandboxExecuteResult } from './interfaces/sandbox.ts';
+export declare class ConsumerAgentSandbox implements AgentSandboxInterface {
+    readonly descriptor: AgentSandboxDescriptor;
+    constructor(descriptor: AgentSandboxDescriptor, _runtime: RuntimeRef);
+    execute<TInput>(input: TInput): Promise<SandboxExecuteResult>;
+}
+export default ConsumerAgentSandbox;
+//# sourceMappingURL=agent-sandbox.impl.consumer.d.ts.map

package/dist/sandbox/agent-sandbox.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,KAAK,EACX,qBAAqB,EACrB,oBAAoB,EACpB,MAAM,yBAAyB,CAAC;AAGjC,qBAAa,oBAAqB,YAAW,qBAAqB;IAEhE,QAAQ,CAAC,UAAU,EAAE,sBAAsB;gBAAlC,UAAU,EAAE,sBAAsB,EAC3C,QAAQ,EAAE,UAAU;IAGf,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAQnE;AAED,eAAe,oBAAoB,CAAC"}

package/dist/sandbox/agent-sandbox.impl.consumer.js

@@ -0,0 +1,23 @@
+/**
+ * Consumer registration retained for compatibility; execution fails closed.
+ * A temporary directory and stripped environment do not isolate model code.
+ * Cooperative restricted test execution is not a substitute for that boundary.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { parseSandboxExecuteInput } from "./interfaces/sandbox.js";
+export class ConsumerAgentSandbox {
+    descriptor;
+    constructor(descriptor, _runtime) {
+        this.descriptor = descriptor;
+    }
+    async execute(input) {
+        parseSandboxExecuteInput(input);
+        throw new CapabilityError('Consumer agent sandbox isolation is unavailable.', 'UNAVAILABLE', {
+            reason: 'agent-sandbox-isolation-unavailable',
+            retryable: false,
+            recoveryHint: 'Compose an agent/sandbox provider verified for model-generated code isolation. The separate run-command tool provides ordinary execution with approval and owner-bound session rules; it is not an isolation fallback. The cooperative test runner does not provide model-code isolation.'
+        });
+    }
+}
+export default ConsumerAgentSandbox;
+//# sourceMappingURL=agent-sandbox.impl.consumer.js.map

package/dist/sandbox/agent-sandbox.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.impl.consumer.js","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AAMvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,OAAO,oBAAoB;IAEtB;IADV,YACU,UAAkC,EAC3C,QAAoB;QADX,eAAU,GAAV,UAAU,CAAwB;IAEzC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAS,KAAa;QAClC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE,aAAa,EAAE;YAC5F,MAAM,EAAE,qCAAqC;YAC7C,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,2RAA2R;SACzS,CAAC,CAAC;IACJ,CAAC;CACD;AAED,eAAe,oBAAoB,CAAC"}

package/dist/sandbox/agent-sandbox.kind.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `agent/sandbox` runtime kind.
+ *
+ * Registers the descriptor schema so the runtime can validate `agent/sandbox`
+ * descriptors and feature code can `runtime.query('agent/sandbox')` without a
+ * "Kind not registered" error. Impl plugins (consumer availability refusal, cloud
+ * provider-owned sandbox adapter) register loaders against this kind id.
+ */
+import type { RuntimeKindDescriptor, KindContext } from '@vibesdotdev/kernel/schemas/kind';
+import { type AgentSandboxDescriptor } from './agent-sandbox.descriptor.ts';
+import type { AgentSandboxInterface } from './interfaces/sandbox.ts';
+export declare const agentSandboxKind: RuntimeKindDescriptor<AgentSandboxDescriptor, AgentSandboxInterface, KindContext>;
+export default agentSandboxKind;
+//# sourceMappingURL=agent-sandbox.kind.d.ts.map

package/dist/sandbox/agent-sandbox.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.kind.d.ts","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACX,qBAAqB,EACrB,WAAW,EACX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEN,KAAK,sBAAsB,EAC3B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,eAAO,MAAM,gBAAgB,EAAE,qBAAqB,CACnD,sBAAsB,EACtB,qBAAqB,EACrB,WAAW,CAKX,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/sandbox/agent-sandbox.kind.js

@@ -0,0 +1,16 @@
+/**
+ * `agent/sandbox` runtime kind.
+ *
+ * Registers the descriptor schema so the runtime can validate `agent/sandbox`
+ * descriptors and feature code can `runtime.query('agent/sandbox')` without a
+ * "Kind not registered" error. Impl plugins (consumer availability refusal, cloud
+ * provider-owned sandbox adapter) register loaders against this kind id.
+ */
+import { AgentSandboxDescriptorSchema } from "./agent-sandbox.descriptor.js";
+export const agentSandboxKind = {
+    id: 'agent/sandbox',
+    descriptorSchema: AgentSandboxDescriptorSchema,
+    contexts: []
+};
+export default agentSandboxKind;
+//# sourceMappingURL=agent-sandbox.kind.js.map

package/dist/sandbox/agent-sandbox.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.kind.js","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EACN,4BAA4B,EAE5B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,CAAC,MAAM,gBAAgB,GAIzB;IACH,EAAE,EAAE,eAAe;IACnB,gBAAgB,EAAE,4BAA4B;IAC9C,QAAQ,EAAE,EAAE;CACZ,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/sandbox/agent-sandbox.plugin.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Agent Sandbox — runtime plugin (kind + docs only)
+ *
+ * Declares the `agent/sandbox` kind so cloud and consumer surfaces can resolve
+ * it. The IMPLEMENTATIONS live in disjoint, scope-gated sibling plugins that the
+ * owning scope's vibes.config imports:
+ *   - consumer (availability refusal): `@vibesdotdev/agent-execution/sandbox/consumer.plugin`
+ *   - cloud: provider-owned Integrations plugin
+ *
+ * Keeping the consumer loader out of THIS plugin means cloud apps can load it to
+ * declare the kind independently of any implementation.
+ */
+export declare const agentSandboxPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default agentSandboxPlugin;
+//# sourceMappingURL=agent-sandbox.plugin.d.ts.map

package/dist/sandbox/agent-sandbox.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.plugin.d.ts","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,eAAO,MAAM,kBAAkB,6CAQ7B,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/sandbox/agent-sandbox.plugin.js

@@ -0,0 +1,25 @@
+/**
+ * Agent Sandbox — runtime plugin (kind + docs only)
+ *
+ * Declares the `agent/sandbox` kind so cloud and consumer surfaces can resolve
+ * it. The IMPLEMENTATIONS live in disjoint, scope-gated sibling plugins that the
+ * owning scope's vibes.config imports:
+ *   - consumer (availability refusal): `@vibesdotdev/agent-execution/sandbox/consumer.plugin`
+ *   - cloud: provider-owned Integrations plugin
+ *
+ * Keeping the consumer loader out of THIS plugin means cloud apps can load it to
+ * declare the kind independently of any implementation.
+ */
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import { agentSandboxKind } from "./agent-sandbox.kind.js";
+import agentSandboxDocsDescriptor from "./docs/agent-sandbox.docs.descriptor.js";
+export const agentSandboxPlugin = createRuntimePlugin({
+    id: 'agent-sandbox',
+    name: 'Agent Sandbox',
+    description: 'Declares the agent/sandbox kind. Implementations ship in the consumer plugin and provider-owned Integrations plugins.',
+    dependencies: [],
+    kinds: [agentSandboxKind],
+    descriptors: [agentSandboxDocsDescriptor]
+});
+export default agentSandboxPlugin;
+//# sourceMappingURL=agent-sandbox.plugin.js.map

package/dist/sandbox/agent-sandbox.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.plugin.js","sourceRoot":"","sources":["../../src/sandbox/agent-sandbox.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,0BAA0B,MAAM,yCAAyC,CAAC;AAEjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;IACrD,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EACV,uHAAuH;IACxH,YAAY,EAAE,EAAE;IAChB,KAAK,EAAE,CAAC,gBAAgB,CAAC;IACzB,WAAW,EAAE,CAAC,0BAA0B,CAAC;CACzC,CAAC,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/sandbox/client/resolve.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Agent Sandbox Resolver
+ *
+ * Scope-aware resolution for `agent/sandbox` impls. Mirrors
+ * `resolveAIGenerationOutputStore`:
+ *   1. Honour an explicit sandbox id if passed.
+ *   2. Filter to enabled descriptors, sort by `priority` (desc).
+ *   3. Resolve the first the runtime can construct in the current scope — the
+ *      hardware-aware loader chain handles the consumer/cloud split, so the
+ *      cloud adapter cleanly throws "not configured" and we never see it on
+ *      consumer hardware.
+ */
+import * as z from 'zod/v4';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { AgentSandboxInterface } from '../interfaces/sandbox.ts';
+export declare const ResolveAgentSandboxOptionsSchema: z.ZodObject<{
+    explicitId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ResolveAgentSandboxOptions = z.infer<typeof ResolveAgentSandboxOptionsSchema>;
+export declare function resolveAgentSandbox(runtime: RuntimeRef, options?: ResolveAgentSandboxOptions): Promise<AgentSandboxInterface>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/sandbox/client/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/sandbox/client/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAIN,KAAK,UAAU,EACf,MAAM,qBAAqB,CAAC;AAK7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE,eAAO,MAAM,gCAAgC;;kBAKnC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAoB1F,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,0BAA+B,GACtC,OAAO,CAAC,qBAAqB,CAAC,CA2EhC"}

package/dist/sandbox/client/resolve.js

@@ -0,0 +1,103 @@
+/**
+ * Agent Sandbox Resolver
+ *
+ * Scope-aware resolution for `agent/sandbox` impls. Mirrors
+ * `resolveAIGenerationOutputStore`:
+ *   1. Honour an explicit sandbox id if passed.
+ *   2. Filter to enabled descriptors, sort by `priority` (desc).
+ *   3. Resolve the first the runtime can construct in the current scope — the
+ *      hardware-aware loader chain handles the consumer/cloud split, so the
+ *      cloud adapter cleanly throws "not configured" and we never see it on
+ *      consumer hardware.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { AgentSandboxDescriptorSchema } from "../agent-sandbox.descriptor.js";
+export const ResolveAgentSandboxOptionsSchema = z
+    .object({
+    /** Explicit sandbox id (overrides scope-aware selection). */
+    explicitId: z.string().trim().min(1).max(256).optional()
+})
+    .strict();
+function invalidRequest(caught) {
+    return new CapabilityError('The sandbox resolution request is invalid.', 'INVALID_INPUT', {
+        reason: 'agent-sandbox-request-invalid',
+        retryable: false,
+        details: { field: 'options' },
+        cause: valueFreeFailure(CaughtFailureSchema.parse(caught))
+    });
+}
+function invalidDescriptor(caught, candidateCount) {
+    return new CapabilityError('A registered sandbox descriptor is invalid.', 'UNAVAILABLE', {
+        reason: 'agent-sandbox-unresolvable',
+        retryable: false,
+        details: { candidateCount, malformedCount: 1, skippedCount: 0 },
+        cause: valueFreeFailure(CaughtFailureSchema.parse(caught))
+    });
+}
+export async function resolveAgentSandbox(runtime, options = {}) {
+    let admitted;
+    try {
+        admitted = ResolveAgentSandboxOptionsSchema.safeParse(options);
+    }
+    catch (caught) {
+        throw invalidRequest(caught);
+    }
+    if (!admitted.success) {
+        throw invalidRequest(admitted.error);
+    }
+    const { explicitId } = admitted.data;
+    if (explicitId) {
+        return runtime
+            .query('agent/sandbox')
+            .withId(explicitId)
+            .resolve();
+    }
+    const query = runtime.query('agent/sandbox');
+    const descriptors = query.descriptors();
+    const admittedDescriptors = descriptors.map((descriptor) => {
+        try {
+            return AgentSandboxDescriptorSchema.parse(descriptor);
+        }
+        catch (caught) {
+            throw invalidDescriptor(caught, descriptors.length);
+        }
+    });
+    const matching = admittedDescriptors
+        .filter((descriptor) => descriptor.enabled !== false)
+        .sort((a, b) => (b.priority ?? 100) - (a.priority ?? 100));
+    if (matching.length === 0) {
+        throw new CapabilityError('[agent/sandbox] No enabled sandbox is registered. Compose an agent/sandbox provider verified for model-code isolation; ' +
+            'the consumer registration refuses execution.', 'UNAVAILABLE', {
+            reason: 'agent-sandbox-not-registered',
+            retryable: false
+        });
+    }
+    let skippedCount = 0;
+    for (const candidate of matching) {
+        try {
+            // Fresh query per candidate to avoid id-intersection issues
+            return await runtime
+                .query('agent/sandbox')
+                .withId(candidate.id)
+                .resolve();
+        }
+        catch (caught) {
+            const failure = CaughtFailureSchema.parse(caught);
+            // Only the exact candidate's confirmed absence permits fallback. An
+            // unavailable registered provider is a present failure and propagates.
+            if (CapabilityError.isAbsenceOf(failure, 'agent/sandbox', candidate.id)) {
+                skippedCount += 1;
+                continue;
+            }
+            // Any other error is rethrown immediately
+            throw CapabilityError.from(failure);
+        }
+    }
+    throw new CapabilityError('No registered sandbox implementation can serve this runtime scope.', 'UNAVAILABLE', {
+        reason: 'agent-sandbox-unresolvable',
+        retryable: false,
+        details: { candidateCount: matching.length, skippedCount }
+    });
+}
+//# sourceMappingURL=resolve.js.map

package/dist/sandbox/client/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/sandbox/client/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,4BAA4B,EAE5B,MAAM,gCAAgC,CAAC;AAGxC,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACP,6DAA6D;IAC7D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AAIX,SAAS,cAAc,CAAC,MAAe;IACtC,OAAO,IAAI,eAAe,CAAC,4CAA4C,EAAE,eAAe,EAAE;QACzF,MAAM,EAAE,+BAA+B;QACvC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;QAC7B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC1D,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe,EAAE,cAAsB;IACjE,OAAO,IAAI,eAAe,CAAC,6CAA6C,EAAE,aAAa,EAAE;QACxF,MAAM,EAAE,4BAA4B;QACpC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;QAC/D,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC1D,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAmB,EACnB,UAAsC,EAAE;IAExC,IAAI,QAA0D,CAAC;IAC/D,IAAI,CAAC;QACJ,QAAQ,GAAG,gCAAgC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IAErC,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO;aACZ,KAAK,CAAgD,eAAe,CAAC;aACrE,MAAM,CAAC,UAAU,CAAC;aAClB,OAAO,EAAE,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAgD,eAAe,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAC1D,IAAI,CAAC;YACJ,OAAO,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YACjB,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,mBAAmB;SAClC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;IAE5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACxB,yHAAyH;YACxH,8CAA8C,EAC/C,aAAa,EACb;YACC,MAAM,EAAE,8BAA8B;YACtC,SAAS,EAAE,KAAK;SAChB,CACD,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,4DAA4D;YAC5D,OAAO,MAAM,OAAO;iBAClB,KAAK,CAAgD,eAAe,CAAC;iBACrE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;iBACpB,OAAO,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,eAAe,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzE,YAAY,IAAI,CAAC,CAAC;gBAClB,SAAS;YACV,CAAC;YACD,0CAA0C;YAC1C,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,MAAM,IAAI,eAAe,CACxB,oEAAoE,EACpE,aAAa,EACb;QACC,MAAM,EAAE,4BAA4B;QACpC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE;KAC1D,CACD,CAAC;AACH,CAAC"}

package/dist/sandbox/docs/agent-sandbox.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=agent-sandbox.docs.descriptor.d.ts.map

package/dist/sandbox/docs/agent-sandbox.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.docs.descriptor.d.ts","sourceRoot":"","sources":["../../../src/sandbox/docs/agent-sandbox.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AA8CvE,QAAA,MAAM,UAAU,EAAE,mBA8BjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/sandbox/docs/agent-sandbox.docs.descriptor.js

@@ -0,0 +1,75 @@
+/**
+ * Docs/topic descriptor for @vibesdotdev/agent-execution/sandbox (Rule 11).
+ * Registered by `agentSandboxPlugin` so `vibes docs list | grep agent.sandbox`
+ * returns this topic.
+ */
+const agentSandboxMarkdown = `---
+title: Agent Sandbox
+summary: Runtime-selected model-code execution and explicit consumer availability refusal
+tags: [agent, sandbox, code-execution, runtime, security]
+parent: agents
+order: 10
+surfaces: [cli, web, in-app, mcp]
+hardware: [consumer, cloud]
+---
+
+# Agent Sandbox
+
+The \`agent/sandbox\` kind describes one-shot model-code execution. A selected provider must enforce its isolation claims; temporary directories, replacement environment and trust metadata alone do not do so.
+
+## Consumer availability
+
+The \`agent-sandbox-bun\` descriptor remains registered by \`@vibesdotdev/agent-execution/sandbox/consumer.plugin\`. Its execute method refuses every request with \`UNAVAILABLE\`, reason \`agent-sandbox-isolation-unavailable\`, and \`retryable: false\`, before filesystem or execution-provider access. Every trust level, language and filesystem override receives the same refusal.
+
+Devtools automatically composes this plugin, so its consumer sandbox calls receive this availability error. There is no ordinary-execution fallback or trusted-mode bypass. The cooperative restricted test runner is not a boundary for hostile model snippets.
+
+The existing Agents \`run-command\` tool provides ordinary command execution with its approval requirement and owner-bound session rules. It is a separate authorized operation, never an automatic fallback after sandbox refusal or a guarantee of model-code isolation.
+
+## Provider composition
+
+The universal \`@vibesdotdev/agent-execution/sandbox/plugin\` declares the kind and docs only. Compose a provider verified for the required model-code boundary, then resolve it through the runtime. Provider-owned cloud implementations retain their own contracts; these docs do not certify them.
+
+The public input/result interfaces, descriptor exports, kind and consumer plugin id remain available. A refusal is an error, not a successful result with empty output.
+
+The \`sandbox-execute\` tool and its agent-loop integration are owned by \`@vibesdotdev/agents\`. This package owns the kind, interface and consumer refusal.
+
+## Related
+
+:::card{title="See also"}
+- [\`agent.code-session\`](agent.code-session) — persistent repository sessions.
+- [\`agents\`](agents) — owns the sandbox-execute tool and agent loop.
+:::
+
+`;
+const descriptor = {
+    kind: 'docs/topic',
+    id: 'agent.sandbox',
+    title: 'Agent Sandbox',
+    summary: 'Runtime-selected model-code execution and explicit consumer availability refusal',
+    body: {
+        type: 'markdown',
+        sourceType: 'raw',
+        source: agentSandboxMarkdown
+    },
+    parent: 'agents',
+    order: 10,
+    tags: ['agent', 'sandbox', 'code-execution', 'runtime', 'security'],
+    surfaces: ['cli', 'web', 'in-app', 'mcp'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    man: {
+        name: 'agent.sandbox — model-code execution availability',
+        section: 1,
+        synopsis: 'vibes man agent.sandbox',
+        options: [],
+        examples: [
+            {
+                description: 'Resolve a provider; the consumer registration refuses execution',
+                command: "const sandbox = await resolveAgentSandbox(runtime); await sandbox.execute({ language: 'typescript', code: 'console.log(1)' })"
+            }
+        ],
+        seeAlso: ['agent.code-session', 'agents']
+    }
+};
+export default descriptor;
+//# sourceMappingURL=agent-sandbox.docs.descriptor.js.map

package/dist/sandbox/docs/agent-sandbox.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-sandbox.docs.descriptor.js","sourceRoot":"","sources":["../../../src/sandbox/docs/agent-sandbox.docs.descriptor.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqC5B,CAAC;AAEF,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,eAAe;IACnB,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,kFAAkF;IAC3F,IAAI,EAAE;QACL,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,oBAAoB;KAC5B;IACD,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC;IACnE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;IACzC,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,GAAG,EAAE;QACJ,IAAI,EAAE,mDAAmD;QACzD,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,yBAAyB;QACnC,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE;YACT;gBACC,WAAW,EAAE,iEAAiE;gBAC9E,OAAO,EACN,+HAA+H;aAChI;SACD;QACD,OAAO,EAAE,CAAC,oBAAoB,EAAE,QAAQ,CAAC;KACzC;CACD,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/sandbox/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @vibesdotdev/agent-execution/sandbox
+ *
+ * The `agent/sandbox` runtime kind + its consumer availability-refusal impl, the
+ * scope-aware resolver, and the execution interface/types. The cloud impl
+ * lives in its provider-owned Integrations package.
+ */
+export { AgentSandboxDescriptorSchema, SandboxTrustLevelSchema, AgentSandboxSurfaceSchema, createAgentSandboxDescriptor, type AgentSandboxDescriptor, type SandboxTrustLevel, type AgentSandboxSurface } from './agent-sandbox.descriptor.ts';
+export { agentSandboxKind } from './agent-sandbox.kind.ts';
+export { default as consumerSandboxDescriptor } from './agent-sandbox.consumer.descriptor.ts';
+export { agentSandboxPlugin, default } from './agent-sandbox.plugin.ts';
+export { resolveAgentSandbox, type ResolveAgentSandboxOptions } from './client/resolve.ts';
+export { SandboxLanguageSchema, SandboxEgressInputSchema, SandboxExecuteInputSchema, SandboxExecuteResultSchema, parseSandboxExecuteInput } from './interfaces/sandbox.ts';
+export type { AgentSandboxInterface, SandboxExecuteInput, SandboxEgressInput, SandboxExecuteResult, SandboxLanguage } from './interfaces/sandbox.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,KAAK,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAE3F,OAAO,EACN,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACX,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,MAAM,yBAAyB,CAAC"}

package/dist/sandbox/index.js

@@ -0,0 +1,14 @@
+/**
+ * @vibesdotdev/agent-execution/sandbox
+ *
+ * The `agent/sandbox` runtime kind + its consumer availability-refusal impl, the
+ * scope-aware resolver, and the execution interface/types. The cloud impl
+ * lives in its provider-owned Integrations package.
+ */
+export { AgentSandboxDescriptorSchema, SandboxTrustLevelSchema, AgentSandboxSurfaceSchema, createAgentSandboxDescriptor } from "./agent-sandbox.descriptor.js";
+export { agentSandboxKind } from "./agent-sandbox.kind.js";
+export { default as consumerSandboxDescriptor } from "./agent-sandbox.consumer.descriptor.js";
+export { agentSandboxPlugin, default } from "./agent-sandbox.plugin.js";
+export { resolveAgentSandbox } from "./client/resolve.js";
+export { SandboxLanguageSchema, SandboxEgressInputSchema, SandboxExecuteInputSchema, SandboxExecuteResultSchema, parseSandboxExecuteInput } from "./interfaces/sandbox.js";
+//# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAI5B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAmC,MAAM,qBAAqB,CAAC;AAE3F,OAAO,EACN,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,yBAAyB,CAAC"}