@xenosystem/agent-interface-electron-host 0.1.104 → 0.1.105

package/dist/sdkAgent.d.ts

@@ -212,7 +212,7 @@ export declare function registerSdkNativeGovernedAutomationTools(options: {
         deviceId?: string;
         allowedApplications: string[];
     };
-}): number;
+}): Promise<number>;
 export type { AgentPermissionProfileName, AgentSandboxCapabilities, } from '@xenosystem/agent-interface-host/node';
 export interface SdkAgentRunOptions {
     settlementRegistry?: SdkExecutionSettlementRegistry;
@@ -369,6 +369,29 @@ export interface SdkAgentRunOptions {
      * confine the agent without this file knowing about sandboxes.
      */
     executionEnvironment?: AgentCommandExecutionEnvironment;
+    /**
+     * The project lives in a SANDBOX, not on this machine (the hosted shape: the agent runs on the
+     * server, its tools act inside the project's container).
+     *
+     * Present, every file tool goes through `fileSystem`, the model's working directory is `root`,
+     * commands run only through `executionEnvironment`'s sandbox executor, and nothing in this file
+     * reads or writes a project path on the host disk: no host path wrappers, no host-disk tools, no
+     * checkpoints. A sandbox workspace with no sandbox executor REFUSES commands; it never falls back
+     * to running them here.
+     */
+    sandboxWorkspace?: SandboxWorkspace;
+}
+export interface SandboxWorkspace {
+    /** Absolute POSIX path the model sees, e.g. `/mnt/xeno/project`. */
+    root: string;
+    fileSystem: import('@xenosystem/agent-sdk').AgentFileSystemPort;
+    /**
+     * A real directory on THIS machine, private to this host, for what the runtime keeps beside a
+     * project: session records, plugin and tool-server state. Never holds project files. Required,
+     * because the SDK writes session records under its working directory, and `root` resolved on
+     * this machine is one path shared by every project (measured: transcripts landed there).
+     */
+    hostStateDirectory: string;
 }
 export interface AgentCommandExecutionEnvironment {
     resolutionForConversation(conversationId: string | undefined): {
@@ -406,6 +429,9 @@ export declare function isSdkRequestFailure(error: unknown): boolean;
 export declare function isCloudApiTransientErrorMessage(message: string): boolean;
 /** Exported for tests ONLY — see {@link isCloudApiTransientErrorMessage}. Not a public API. */
 export declare function sanitizeAgentRunErrorMessage(error: Error | string): string;
+/** `raw` as an absolute POSIX path inside `root`, or null when it would leave it. Pure string work:
+ *  these are paths in a container, so the host's own path rules (drive letters, backslashes) must not apply. */
+export declare function sandboxPath(root: string, raw: unknown): string | null;
 export declare function runSdkAgent(options: SdkAgentRunOptions): Promise<void>;
 export declare function grantSdkAccess(params: unknown): {
     success: boolean;

package/dist/sdkAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdkAgent.d.ts","sourceRoot":"","sources":["../src/sdkAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACvB,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAA2B,KAAK,8BAA8B,EAAE,MAAM,uCAAuC,CAAA;AAKpH,OAAO,EAAmC,KAAK,iCAAiC,EAAE,MAAM,uCAAuC,CAAA;AAK/H,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAK3D,OAAO,EAkBL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAK7B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,uCAAuC,CAAA;AA4C9C,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ,CAAA;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KACpB,CAAA;CACF;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;CACzD;AA2CD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAEnF;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAQH,eAAO,MAAM,qCAAqC,SAAU,CAAA;AAC5D,eAAO,MAAM,kCAAkC,SAAU,CAAA;AACzD,eAAO,MAAM,oCAAoC,SAAU,CAAA;AAC3D;8EAC8E;AAC9E,eAAO,MAAM,8BAA8B,QAAgD,CAAA;AAC3F;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,IAAI,CAAA;AAE9C;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAAS,CAAA;AAEpD,UAAU,kBAAkB;IAC1B,KAAK,EAAE;QAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;YAAE,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,QAAQ,CAAC,kBAAkB,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAA;IAC/I,GAAG,EAAE;QACH,oBAAoB,EAAE;YACpB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;gBAAE,cAAc,EAAE,MAAM,CAAC;gBAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;YACnI,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAA;YAC9D,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;YAC9C,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAA;YACxD,IAAI,CAAC,MAAM,EAAE;gBAAE,cAAc,EAAE,MAAM,CAAA;aAAE,GAAG,KAAK,CAAC;gBAAE,WAAW,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,OAAO,CAAA;aAAE,CAAC,CAAA;SAC7G,CAAA;QACD,2BAA2B,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,MAAM,CAAA;KAC1E,CAAA;IACD,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,IAAI,OAAO,CAAA;IAClB,IAAI,CAAC,IAAI,EAAE,2BAA2B,GAAG,6BAA6B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC/G;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4BjG;AAgBD,KAAK,qBAAqB,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,CAAA;AAEjH,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,UAAU,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,qBAAqB,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAgCD;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAIhF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOnF;AAq1ED,iBAAe,OAAO;eA3BT,cAAc,uBAAuB,CAAC,CAAC,WAAW,CAAC;yBACzC,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;kBACpE,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;+BACzC,cAAc,uBAAuB,CAAC,CAAC,2BAA2B,CAAC;oCAC9D,cAAc,uBAAuB,CAAC,CAAC,gCAAgC,CAAC;yBACnF,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;gCACtD,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC;6CACvD,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC;uCACvF,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;sBAC5F,cAAc,uBAAuB,CAAC,CAAC,kBAAkB,CAAC;uCACzC,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;oBAC9F,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;qBACvD,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;kBAC5D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;uBACjD,cAAc,uBAAuB,CAAC,CAAC,mBAAmB,CAAC;yBACzD,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;qBACjE,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;8BAChD,cAAc,uBAAuB,CAAC,CAAC,0BAA0B,CAAC;4BACpE,cAAc,uBAAuB,CAAC,CAAC,wBAAwB,CAAC;2BACjE,cAAc,uBAAuB,CAAC,CAAC,uBAAuB,CAAC;oBACtE,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;kBAC1D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;8BAC1C,OAAO;0BACX,cAAc,uBAAuB,CAAC,CAAC,sBAAsB,CAAC;iCACvD,cAAc,uBAAuB,CAAC,CAAC,6BAA6B,CAAC;GAkCnG;AAOD,UAAU,+BAA+B;IACvC,mBAAmB,EAAE,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAA;IAClF,0BAA0B,EAAE,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC,CAAA;IAChG,uCAAuC,EAAE,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC,CAAA;CAC3H;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CAAC,OAAO,EAAE;IAChE,GAAG,EAAE,+BAA+B,CAAA;IACpC,YAAY,EAAE,OAAO,uBAAuB,EAAE,YAAY,CAAA;IAC1D,WAAW,EAAE,OAAO,uBAAuB,EAAE,6BAA6B,CAAA;IAC1E,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CACxG,GAAG,MAAM,CAuCT;AAED,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAC,8BAA8B,CAAA;IAClD,oBAAoB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE;QACZ,aAAa,EAAE,CAAC,CAAA;QAChB,cAAc,EAAE,MAAM,CAAA;QACtB,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClD,mGAAmG;IACnG,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,8GAA8G;IAC9G,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxH;;;;OAIG;IACH,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACpH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAC1C,UAAU,EAAE,eAAe,CAAA;IAC3B,MAAM,EAAE,WAAW,CAAA;IACnB,YAAY,CAAC,EAAE,wBAAwB,CAAA;IACvC,iBAAiB,CAAC,EAAE,0BAA0B,CAAA;IAC9C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,mBAAmB,EAAE,CAAA;IACtE,6FAA6F;IAC7F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,wFAAwF;IACxF,aAAa,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;IACtC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpF;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,iCAAiC,GAAG,SAAS,CAAA;KAAE,CAAA;IACxG,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAA;IAC/D,mFAAmF;IACnF,iCAAiC,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/F,yGAAyG;IACzG,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,mBAAmB,CAAA;QAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;KACtE,CAAC,CAAA;IACF;;;;;OAKG;IACH,YAAY,CAAC,EAAE;QACb,GAAG,EAAE,MAAM,CAAA;QACX,WAAW,EAAE,MAAM,CAAA;QACnB,MAAM,EAAE,MAAM,GAAG,KAAK,CAAA;QACtB,KAAK,EAAE,KAAK,CAAC;YACX,UAAU,EAAE,mBAAmB,CAAA;YAC/B,UAAU,EAAE,MAAM,CAAA;YAClB,aAAa,EAAE,MAAM,GAAG,UAAU,GAAG,cAAc,CAAA;YACnD,SAAS,EAAE,OAAO,CAAA;YAClB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE;gBAAE,MAAM,CAAC,EAAE,WAAW,CAAA;aAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;SAC1G,CAAC,CAAA;QACF,QAAQ,EAAE,MAAM,EAAE,CAAA;QAClB,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,gCAAgC,CAAA;CACxD;AAED,MAAM,WAAW,gCAAgC;IAC/C,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG;QAC7D,QAAQ,EAAE,oBAAoB,CAAA;QAC9B,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjC,CAAA;CACF;AA4CD;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,MAAM,GAAG,WAAW,CAAC,CAkBhH;AAmFD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAO3D;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA2BxE;AAgBD,+FAA+F;AAC/F,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CA+E1E;AA44BD,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E;AAg2ED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsCpF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BnF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA+BtF;AAED,wBAAgB,iCAAiC,IAAI;IACnD,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACjJ,CAOA;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC3F,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;QACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,WAAW,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAClD,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KAAE,CAAC,CAAA;IACpO,aAAa,CAAC,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/H,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KACpE,CAAC,CAAA;IACF,eAAe,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACtD,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,iBAAiB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACvG,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpH,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnE,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;CACH;AAED,wBAAgB,6BAA6B,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,OAAO,CAAA;CAAO,GAAG,uBAAuB,CAoO3I"}
+{"version":3,"file":"sdkAgent.d.ts","sourceRoot":"","sources":["../src/sdkAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACvB,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAA2B,KAAK,8BAA8B,EAAE,MAAM,uCAAuC,CAAA;AAKpH,OAAO,EAAmC,KAAK,iCAAiC,EAAE,MAAM,uCAAuC,CAAA;AAK/H,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAK3D,OAAO,EAkBL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAK7B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,uCAAuC,CAAA;AA4C9C,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ,CAAA;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KACpB,CAAA;CACF;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;CACzD;AA2CD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAEnF;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAQH,eAAO,MAAM,qCAAqC,SAAU,CAAA;AAC5D,eAAO,MAAM,kCAAkC,SAAU,CAAA;AACzD,eAAO,MAAM,oCAAoC,SAAU,CAAA;AAC3D;8EAC8E;AAC9E,eAAO,MAAM,8BAA8B,QAAgD,CAAA;AAC3F;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,IAAI,CAAA;AAE9C;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAAS,CAAA;AAEpD,UAAU,kBAAkB;IAC1B,KAAK,EAAE;QAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;YAAE,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,QAAQ,CAAC,kBAAkB,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAA;IAC/I,GAAG,EAAE;QACH,oBAAoB,EAAE;YACpB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;gBAAE,cAAc,EAAE,MAAM,CAAC;gBAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;YACnI,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAA;YAC9D,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;YAC9C,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAA;YACxD,IAAI,CAAC,MAAM,EAAE;gBAAE,cAAc,EAAE,MAAM,CAAA;aAAE,GAAG,KAAK,CAAC;gBAAE,WAAW,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,OAAO,CAAA;aAAE,CAAC,CAAA;SAC7G,CAAA;QACD,2BAA2B,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,MAAM,CAAA;KAC1E,CAAA;IACD,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,IAAI,OAAO,CAAA;IAClB,IAAI,CAAC,IAAI,EAAE,2BAA2B,GAAG,6BAA6B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC/G;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4BjG;AAgBD,KAAK,qBAAqB,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,CAAA;AAEjH,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,UAAU,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,qBAAqB,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAgCD;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAIhF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOnF;AAq1ED,iBAAe,OAAO;eA3BT,cAAc,uBAAuB,CAAC,CAAC,WAAW,CAAC;yBACzC,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;kBACpE,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;+BACzC,cAAc,uBAAuB,CAAC,CAAC,2BAA2B,CAAC;oCAC9D,cAAc,uBAAuB,CAAC,CAAC,gCAAgC,CAAC;yBACnF,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;gCACtD,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC;6CACvD,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC;uCACvF,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;sBAC5F,cAAc,uBAAuB,CAAC,CAAC,kBAAkB,CAAC;uCACzC,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;oBAC9F,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;qBACvD,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;kBAC5D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;uBACjD,cAAc,uBAAuB,CAAC,CAAC,mBAAmB,CAAC;yBACzD,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;qBACjE,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;8BAChD,cAAc,uBAAuB,CAAC,CAAC,0BAA0B,CAAC;4BACpE,cAAc,uBAAuB,CAAC,CAAC,wBAAwB,CAAC;2BACjE,cAAc,uBAAuB,CAAC,CAAC,uBAAuB,CAAC;oBACtE,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;kBAC1D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;8BAC1C,OAAO;0BACX,cAAc,uBAAuB,CAAC,CAAC,sBAAsB,CAAC;iCACvD,cAAc,uBAAuB,CAAC,CAAC,6BAA6B,CAAC;GAkCnG;AAOD,UAAU,+BAA+B;IACvC,mBAAmB,EAAE,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAA;IAClF,0BAA0B,EAAE,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC,CAAA;IAChG,uCAAuC,EAAE,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC,CAAA;CAC3H;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CAAC,OAAO,EAAE;IAChE,GAAG,EAAE,+BAA+B,CAAA;IACpC,YAAY,EAAE,OAAO,uBAAuB,EAAE,YAAY,CAAA;IAC1D,WAAW,EAAE,OAAO,uBAAuB,EAAE,6BAA6B,CAAA;IAC1E,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CACxG,GAAG,OAAO,CAAC,MAAM,CAAC,CAqDlB;AAED,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAC,8BAA8B,CAAA;IAClD,oBAAoB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE;QACZ,aAAa,EAAE,CAAC,CAAA;QAChB,cAAc,EAAE,MAAM,CAAA;QACtB,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClD,mGAAmG;IACnG,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,8GAA8G;IAC9G,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxH;;;;OAIG;IACH,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACpH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAC1C,UAAU,EAAE,eAAe,CAAA;IAC3B,MAAM,EAAE,WAAW,CAAA;IACnB,YAAY,CAAC,EAAE,wBAAwB,CAAA;IACvC,iBAAiB,CAAC,EAAE,0BAA0B,CAAA;IAC9C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,mBAAmB,EAAE,CAAA;IACtE,6FAA6F;IAC7F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,wFAAwF;IACxF,aAAa,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;IACtC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpF;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,iCAAiC,GAAG,SAAS,CAAA;KAAE,CAAA;IACxG,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAA;IAC/D,mFAAmF;IACnF,iCAAiC,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/F,yGAAyG;IACzG,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,mBAAmB,CAAA;QAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;KACtE,CAAC,CAAA;IACF;;;;;OAKG;IACH,YAAY,CAAC,EAAE;QACb,GAAG,EAAE,MAAM,CAAA;QACX,WAAW,EAAE,MAAM,CAAA;QACnB,MAAM,EAAE,MAAM,GAAG,KAAK,CAAA;QACtB,KAAK,EAAE,KAAK,CAAC;YACX,UAAU,EAAE,mBAAmB,CAAA;YAC/B,UAAU,EAAE,MAAM,CAAA;YAClB,aAAa,EAAE,MAAM,GAAG,UAAU,GAAG,cAAc,CAAA;YACnD,SAAS,EAAE,OAAO,CAAA;YAClB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE;gBAAE,MAAM,CAAC,EAAE,WAAW,CAAA;aAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;SAC1G,CAAC,CAAA;QACF,QAAQ,EAAE,MAAM,EAAE,CAAA;QAClB,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,gCAAgC,CAAA;IACvD;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,OAAO,uBAAuB,EAAE,mBAAmB,CAAA;IAC/D;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gCAAgC;IAC/C,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG;QAC7D,QAAQ,EAAE,oBAAoB,CAAA;QAC9B,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjC,CAAA;CACF;AA4CD;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,MAAM,GAAG,WAAW,CAAC,CAkBhH;AAmFD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAO3D;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA2BxE;AAgBD,+FAA+F;AAC/F,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CA+E1E;AA6tBD;gHACgH;AAChH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAYrE;AAgPD,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E;AAm4ED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsCpF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BnF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA+BtF;AAED,wBAAgB,iCAAiC,IAAI;IACnD,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACjJ,CAOA;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC3F,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;QACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,WAAW,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAClD,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KAAE,CAAC,CAAA;IACpO,aAAa,CAAC,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/H,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KACpE,CAAC,CAAA;IACF,eAAe,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACtD,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,iBAAiB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACvG,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpH,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnE,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;CACH;AAED,wBAAgB,6BAA6B,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,OAAO,CAAA;CAAO,GAAG,uBAAuB,CAoO3I"}

package/dist/sdkAgent.js

@@ -2361,7 +2361,7 @@ function getDefaultSdkSessionMutationAuthority() {
 export function registerSdkNativeGovernedAutomationTools(options) {
     const profileDefinition = options.sdk.resolveBuiltInAgentProfile('assistant');
     if (!profileDefinition)
-        return 0;
+        return Promise.resolve(0);
     const environment = structuredClone(options.environment);
     if (options.capabilities.browser === false)
         delete environment.browser;
@@ -2399,7 +2399,21 @@ export function registerSdkNativeGovernedAutomationTools(options) {
         ...(options.workspaceId ? { workspaceId: options.workspaceId } : {}),
         surface: 'hub',
         environment,
-    }).register(options.toolRegistry);
+        /*
+         * 🔴 `registerVerified`, not `register`. Since SDK 0.10.37 the synchronous `register()` adds
+         * only operations whose owning adapter was PROBED, so calling it alone registers nothing —
+         * silently (measured on 0.10.44: 19 browser tools became 0). The probe asks each configured
+         * adapter for its manifest; a surface that does not answer registers no tools, which is the
+         * truth about a machine that is not there.
+         *
+         * ⚠️ KNOWN GAP, not a decision: the SDK now also skips the COMPUTER surface unless the host
+         * supplies `computerHostAuthority` (begin / recordPreflight / recordGrant / assertCurrent /
+         * finish). This host does not implement one yet, so computer tools do not register on
+         * 0.10.37+. Owner: governed automation (xeno-agent-sdk src/automation, reference
+         * implementation apps/xeno-agent-cli/src/automation/computer-host.ts). Exit: this host
+         * supplies the authority and `sdkNativeMachineWiring.test.ts` registers tools again.
+         */
+    }).registerVerified(options.toolRegistry);
 }
 function isCloudTunnelFailure(status, body) {
     return status === 530
@@ -3308,6 +3322,81 @@ function wrapSearchWithFallback(originalExecute, allowedDirs) {
             : result;
     };
 }
+/** `raw` as an absolute POSIX path inside `root`, or null when it would leave it. Pure string work:
+ *  these are paths in a container, so the host's own path rules (drive letters, backslashes) must not apply. */
+export function sandboxPath(root, raw) {
+    const text = typeof raw === 'string' && raw.trim() ? raw.trim() : '.';
+    if (text.includes('\\') || text.includes(String.fromCharCode(0)))
+        return null;
+    const joined = text.startsWith('/') ? text : `${root}/${text}`;
+    const parts = [];
+    for (const part of joined.split('/')) {
+        if (!part || part === '.')
+            continue;
+        if (part === '..')
+            return null;
+        parts.push(part);
+    }
+    const absolute = `/${parts.join('/')}`;
+    return absolute === root || absolute.startsWith(`${root}/`) ? absolute : null;
+}
+const SANDBOX_FILE_TOOLS = [
+    { name: 'Read', param: 'file_path', action: 'read' },
+    { name: 'Write', param: 'file_path', action: 'write' },
+    { name: 'Edit', param: 'file_path', action: 'write' },
+    { name: 'LS', param: 'path', action: 'read' },
+    { name: 'Glob', param: 'path', action: 'read' },
+    { name: 'Grep', param: 'path', action: 'read' },
+];
+/**
+ * The host's part of a file tool when the project is in a sandbox: keep the path inside the
+ * project, apply the same permission policy as a local turn, and capture the before/after text for
+ * the diff, all through the port. The SDK tool underneath does the actual read or write, also
+ * through the port. Nothing here touches the host disk.
+ */
+function wrapSandboxFileTools(options) {
+    const { toolRegistry, workspace, policyContext, activeToolEvents } = options;
+    const readText = async (absolute) => {
+        const relative = absolute === workspace.root ? '.' : absolute.slice(workspace.root.length + 1);
+        try {
+            const bytes = await workspace.fileSystem.readFile(relative, { maxBytes: MAX_DIFF_CAPTURE_CHARS });
+            return { content: Buffer.from(bytes).toString('utf-8'), exists: true };
+        }
+        catch (error) {
+            return error?.code === 'NotFound' ? { content: '', exists: false } : null;
+        }
+    };
+    for (const spec of SANDBOX_FILE_TOOLS) {
+        const tool = toolRegistry.get(spec.name);
+        if (!tool)
+            continue;
+        const original = tool.execute.bind(tool);
+        const wrapped = {
+            definition: tool.definition,
+            execute: async (input) => {
+                const target = sandboxPath(workspace.root, input[spec.param]);
+                if (!target) {
+                    return { success: false, output: '', error: `Permission denied: the path is outside the project (${workspace.root}).` };
+                }
+                const policy = evaluateRuntimeToolPolicy(policyContext, spec.action, 'file', spec.name, target);
+                if (policy && !policy.allowed)
+                    return denyToolWithPolicy(policy);
+                const normalized = { ...input, [spec.param]: target };
+                const before = spec.action === 'write' ? await readText(target) : null;
+                const result = await original(normalized);
+                if (spec.action === 'write' && result.success && before) {
+                    const after = await readText(target);
+                    if (after) {
+                        attachDiffToLatestToolEvent(activeToolEvents, spec.name, (toolCallId) => (buildToolDiffPayload(toolCallId, target, before.content, after.content, before.exists, after.exists)));
+                    }
+                }
+                return result;
+            },
+        };
+        toolRegistry.unregister(spec.name);
+        toolRegistry.register(wrapped);
+    }
+}
 function wrapRegisteredPathTool(toolRegistry, toolName, pathParam, allowedDirs, mainWindow, requestId, hooks) {
     const tool = toolRegistry.get(toolName);
     if (!tool)
@@ -3452,7 +3541,7 @@ async function runSdkAgentOwned(options, ownerId) {
         firstResponseMs: AGENT_MODEL_FIRST_RESPONSE_TIMEOUT_MS,
         idleMs: AGENT_MODEL_STREAM_IDLE_TIMEOUT_MS,
         totalMs: AGENT_MODEL_REQUEST_TOTAL_TIMEOUT_MS,
-    }, workforceAdmission, onPersistedRuntimeEvent, prepareRuntimeEventForPersistence, runtimeEventStore: injectedRuntimeEventStore, coordinationTools, surfaceTools, isProduction, executionEnvironment, workspaceEnvironment, } = options;
+    }, workforceAdmission, onPersistedRuntimeEvent, prepareRuntimeEventForPersistence, runtimeEventStore: injectedRuntimeEventStore, coordinationTools, surfaceTools, isProduction, executionEnvironment, workspaceEnvironment, sandboxWorkspace, } = options;
     const approvalRules = normalizeApprovalRules(rawApprovalRules);
     // XENO-WORKFORCE-01 RUN-03. Built FIRST, before any session or tool setup, so a turn that cannot be held to its admission
     // (no durable lease store, no account to ask with) fails here, before the model sees anything —
@@ -3529,9 +3618,15 @@ async function runSdkAgentOwned(options, ownerId) {
             : '',
         capabilities: caps
     });
-    const toolRuntimeCwd = allowedDirectories && allowedDirectories.length > 0
-        ? pathResolve(allowedDirectories[0])
-        : process.cwd();
+    // A sandbox project's working directory is a path in the container; resolving it against this
+    // machine would turn `/mnt/xeno/project` into a drive path on Windows and a lie everywhere.
+    const toolRuntimeCwd = sandboxWorkspace
+        ? sandboxWorkspace.root
+        : allowedDirectories && allowedDirectories.length > 0
+            ? pathResolve(allowedDirectories[0])
+            : process.cwd();
+    /** Where host-side runtime state for this project lives. The project root, unless that is in a sandbox. */
+    const hostStateCwd = sandboxWorkspace ? sandboxWorkspace.hostStateDirectory : toolRuntimeCwd;
     // Resolve the authenticated tenant before constructing the synchronous SDK
     // request factory. The token remains in the host process and never crosses
     // the renderer contract.
@@ -3564,6 +3659,7 @@ async function runSdkAgentOwned(options, ownerId) {
     // configured, Web Context replaces both legacy direct-network web tools.
     const toolRegistry = sdk.createDefaultToolRegistry({
         cwd: toolRuntimeCwd,
+        ...(sandboxWorkspace ? { fileSystem: { port: sandboxWorkspace.fileSystem, root: sandboxWorkspace.root } } : {}),
         ownerSessionId: ownerId,
         askUser: createHubAskUserHandler(mainWindow, requestId),
         ...(webContextTools ? { webContext: webContextTools } : {}),
@@ -3605,7 +3701,7 @@ async function runSdkAgentOwned(options, ownerId) {
     // ── Apply path restrictions on remaining file tools ────────────
     // If allowedDirectories is set (even empty), wrap file tool executors
     // to enforce path boundaries.
-    const dirs = allowedDirectories || [];
+    const dirs = sandboxWorkspace ? [sandboxWorkspace.root] : (allowedDirectories || []);
     const runtimePolicyContext = {
         requestId,
         ...(conversationId ? { conversationId } : {}),
@@ -3632,8 +3728,34 @@ async function runSdkAgentOwned(options, ownerId) {
             return;
         attachDiffToLatestToolEvent(activeToolEvents, toolName, (toolCallId) => (buildToolDiffPayload(toolCallId, targetPath, originalContent, modifiedContent, originalExists, existsSync(targetPath))));
     };
-    // Only apply path wrapping if directories are explicitly provided
-    if (allowedDirectories !== undefined) {
+    if (sandboxWorkspace) {
+        wrapSandboxFileTools({ toolRegistry, workspace: sandboxWorkspace, policyContext: runtimePolicyContext, activeToolEvents });
+        const bashTool = toolRegistry.get('Bash');
+        if (bashTool) {
+            const sandboxBash = {
+                definition: bashTool.definition,
+                execute: async (input) => {
+                    const cwd = sandboxPath(sandboxWorkspace.root, input.cwd);
+                    if (!cwd)
+                        return { success: false, output: '', error: `Permission denied: the working directory is outside the project (${sandboxWorkspace.root}).` };
+                    // Checked HERE, not left to the executor lookup: with no sandbox bound the shared helper
+                    // falls back to the local executor, which would run the command on the server.
+                    if (executionEnvironment?.resolutionForConversation(conversationId).isolation.isolation !== 'sandboxed') {
+                        return { success: false, output: '', error: 'Commands are unavailable: this project has no sandbox to run them in.' };
+                    }
+                    const policy = evaluateRuntimeToolPolicy(runtimePolicyContext, 'execute', 'tool', 'Bash', cwd);
+                    if (policy && !policy.allowed)
+                        return denyToolWithPolicy(policy);
+                    if (typeof input.timeout !== 'number' && typeof input.timeout_ms !== 'number')
+                        input.timeout = DEFAULT_AGENT_TOOL_TIMEOUT_MS;
+                    return executeAgentShellCommand(input, cwd, executionEnvironment, conversationId, workspaceEnvironment, { requestId, ...(conversationId ? { conversationId } : {}) }, options.settlementRegistry ?? sdkExecutionSettlements);
+                },
+            };
+            toolRegistry.unregister('Bash');
+            toolRegistry.register(sandboxBash);
+        }
+    }
+    else if (allowedDirectories !== undefined) {
         // Wrap Read tool
         const readTool = toolRegistry.get('Read');
         if (readTool) {
@@ -3818,18 +3940,18 @@ async function runSdkAgentOwned(options, ownerId) {
         }
     }
     // ── Register host-specific tools (always or conditionally) ─────
-    if (caps.fileWrite !== false) {
+    if (caps.fileWrite !== false && !sandboxWorkspace) {
         toolRegistry.register(createWriteFilesTool(dirs, runtimePolicyContext, activeToolEvents));
     }
     // OpenApp: available unless appLaunch is explicitly disabled
-    if (caps.appLaunch !== false) {
+    if (caps.appLaunch !== false && !sandboxWorkspace) {
         const hasScopedPolicyContext = !!(workspaceId || teamId || agentId || dirs.length > 0);
         toolRegistry.register(createOpenAppTool(hasScopedPolicyContext ? runtimePolicyContext : undefined));
     }
     // Not in an app's own panel: its tools are the app's, and managing Hub workspaces is not one of them.
     // Measured 2026-09-27, Canvas 0.42.5: asked "what is open", the Agent called XenoWorkspaceManage
     // ("list"), which read and wrote the person's workspace tree from inside a design tool.
-    if (!surfaceTools) {
+    if (!surfaceTools && !sandboxWorkspace) {
         toolRegistry.register(createWorkspaceManagementTool(mainWindow));
     }
     // Coordination — ADE §5.2b. Registered UNCONDITIONALLY when present: there is
@@ -3904,12 +4026,12 @@ async function runSdkAgentOwned(options, ownerId) {
     // environment reader fills `computer` only from ambient XENO_USE_* variables, which nothing in
     // this repo set. Resolving it here is what makes the claim true.
     const machineEndpointStatus = await resolveMachineTarget();
-    const governedAutomationToolCount = registerSdkNativeGovernedAutomationTools({
+    const governedAutomationToolCount = await registerSdkNativeGovernedAutomationTools({
         sdk,
         toolRegistry,
         environment: sdk.readXenoHostAutomationEnvironment(),
         capabilities: caps,
-        cwd: toolRuntimeCwd,
+        cwd: hostStateCwd,
         requestId,
         agentId: agentId || '__main_assistant__',
         ...(sdkSessionId || conversationId ? { sessionId: sdkSessionId || conversationId } : {}),
@@ -3938,7 +4060,7 @@ async function runSdkAgentOwned(options, ownerId) {
     }
     try {
         const extensionTools = await getPluginMcpManagerService().registerRuntimeTools(toolRegistry, {
-            cwd: toolRuntimeCwd,
+            cwd: hostStateCwd,
             includePlugins: true,
             includeMcp: true,
             // An app panel already has its OWN app's tools, directly; the directory-wide aggregator would
@@ -4582,7 +4704,7 @@ async function runSdkAgentOwned(options, ownerId) {
                         const resumeSessionId = pendingCheckpointRestore?.sessionId || sdkSessionId || undefined;
                         try {
                             createdRuntime = await sdk.initializeSessionRuntime({
-                                cwd: toolRuntimeCwd,
+                                cwd: hostStateCwd,
                                 role: sessionRole,
                                 model,
                                 ...(hostBinding ? { hostBinding: structuredClone(hostBinding) } : {}),
@@ -4603,14 +4725,14 @@ async function runSdkAgentOwned(options, ownerId) {
                                 error: error.message,
                             });
                             createdRuntime = await sdk.initializeSessionRuntime({
-                                cwd: toolRuntimeCwd,
+                                cwd: hostStateCwd,
                                 role: sessionRole,
                                 model,
                                 ...(hostBinding ? { hostBinding: structuredClone(hostBinding) } : {}),
                             });
                         }
                         createdRuntime = await sdk.activateSessionRuntime(createdRuntime, {
-                            cwd: toolRuntimeCwd,
+                            cwd: hostStateCwd,
                             role: sessionRole,
                             model,
                             ...(hostBinding ? { hostBinding: structuredClone(hostBinding) } : {}),
@@ -5089,7 +5211,8 @@ async function runSdkAgentOwned(options, ownerId) {
             }
         },
         onToolWillExecute: async (name, input) => {
-            if (!sessionRuntime?.checkpointManager || !checkpointedToolNames.has(name))
+            // A checkpoint snapshots and restores files on THIS disk; a sandbox project has none here.
+            if (sandboxWorkspace || !sessionRuntime?.checkpointManager || !checkpointedToolNames.has(name))
                 return;
             try {
                 const checkpoint = await sessionRuntime.checkpointManager.create({