agentbox-sdk 0.1.302 → 0.1.303

package/dist/{Sandbox-CByFJI8X.d.ts → Sandbox-K6VNqKeo.d.ts}

@@ -250,7 +250,7 @@ declare class Sandbox<P extends SandboxProviderName = SandboxProviderName> {
      * idempotent setup that the previous run already performed (e.g.
      * `agent.setup()`). Always `false` before `findOrProvision()` resolves.
      */
-    get wasFound(): boolean;
+    get isWarm(): boolean;
     /**
      * Attach to an existing tagged sandbox or create a new one. Must be
      * called before `run`, `runAsync`, `gitClone`, `uploadAndRun`,

package/dist/agents/index.d.ts

@@ -1,6 +1,6 @@
-import { o as AgentProviderName, h as AgentOptions, v as AgentSetupConfig, t as AgentRunConfig, s as AgentRun, r as AgentResult, a3 as RawAgentEvent, b as AgentAttachRequest, z as AttachedRun } from '../types-Dj_HCr6Q.js';
-export { a as AgentApprovalMode, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, u as AgentRunSink, w as AgentSetupRequest, x as AgentSkillConfig, y as AgentSubAgentConfig, C as ClaudeCodeAgentOptions, B as ClaudeCodeHookConfig, D as ClaudeCodeHookEvent, E as ClaudeCodeHookHandler, F as ClaudeCodeHookMatcherGroup, G as ClaudeCodeHooksConfig, H as ClaudeCodeProviderOptions, I as CodexAgentOptions, J as CodexCommandHook, K as CodexHookEvent, L as CodexHookMatcherGroup, M as CodexHooksConfig, N as CodexProviderOptions, O as DataContent, P as EmbeddedSkillConfig, Q as FilePart, R as ImagePart, Y as OpenCodeAgentOptions, Z as OpenCodePluginConfig, _ as OpenCodePluginEvent, $ as OpenCodePluginHookConfig, a0 as OpenCodeProviderOptions, a5 as RepoSkillConfig, ab as TextPart, af as UserContent, ag as UserContentPart } from '../types-Dj_HCr6Q.js';
-import { S as Sandbox } from '../Sandbox-CByFJI8X.js';
+import { o as AgentProviderName, h as AgentOptions, t as AgentRunConfig, s as AgentRun, r as AgentResult, a2 as RawAgentEvent, b as AgentAttachRequest, y as AttachedRun } from '../types-Ozo1rHKs.js';
+export { a as AgentApprovalMode, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexProviderOptions, N as DataContent, O as EmbeddedSkillConfig, P as FilePart, Q as ImagePart, X as OpenCodeAgentOptions, Y as OpenCodePluginConfig, Z as OpenCodePluginEvent, _ as OpenCodePluginHookConfig, $ as OpenCodeProviderOptions, a4 as RepoSkillConfig, aa as TextPart, ae as UserContent, af as UserContentPart } from '../types-Ozo1rHKs.js';
+import { S as Sandbox } from '../Sandbox-K6VNqKeo.js';
 export { AgentProvider } from '../enums.js';
 import 'e2b';
 import '@vercel/sandbox';
@@ -41,7 +41,7 @@ declare class Agent<P extends AgentProviderName = AgentProviderName> {
      * second `setup()` against the same sandbox does ~one round-trip of
      * work.
      */
-    setup(config?: AgentSetupConfig): Promise<void>;
+    setup(): Promise<void>;
     stream(runConfig: AgentRunConfig): AgentRun;
     run(runConfig: AgentRunConfig): Promise<AgentResult>;
     rawEvents(runConfig: AgentRunConfig): AsyncIterable<RawAgentEvent>;
@@ -85,4 +85,4 @@ declare class Agent<P extends AgentProviderName = AgentProviderName> {
 declare const AGENT_RESERVED_PORTS: Record<AgentProviderName, readonly number[]>;
 declare function collectAllAgentReservedPorts(): number[];
 
-export { AGENT_RESERVED_PORTS, Agent, AgentAttachRequest, AgentOptions, AgentProviderName, AgentResult, AgentRun, AgentRunConfig, AgentSetupConfig, AttachedRun, collectAllAgentReservedPorts };
+export { AGENT_RESERVED_PORTS, Agent, AgentAttachRequest, AgentOptions, AgentProviderName, AgentResult, AgentRun, AgentRunConfig, AttachedRun, collectAllAgentReservedPorts };

package/dist/agents/index.js

@@ -1,6 +1,6 @@
 import {
   Agent
-} from "../chunk-YAMFJAU6.js";
+} from "../chunk-GBM7LKZF.js";
 import "../chunk-NWAXQ7UD.js";
 import {
   AGENT_RESERVED_PORTS,

package/dist/{chunk-YAMFJAU6.js → chunk-GBM7LKZF.js}

@@ -998,6 +998,28 @@ var HostSetupTarget = class {
       }
     );
   }
+  async probe(command, extraEnv) {
+    return time(
+      debugRuntime,
+      `host probe ${shortLabel(command)}`,
+      async () => {
+        const handle = spawnCommand({
+          command: process.env.SHELL || "sh",
+          args: ["-c", command],
+          cwd: this.cwd,
+          env: {
+            ...process.env,
+            ...this.baseEnv,
+            ...this.env,
+            ...extraEnv ?? {}
+          }
+        });
+        const exitCode = await handle.wait();
+        return exitCode === 0;
+      },
+      (ok) => ({ ok })
+    );
+  }
   async cleanup() {
     await rm(this.layout.rootDir, { recursive: true, force: true });
   }
@@ -1052,13 +1074,34 @@ var SandboxSetupTarget = class {
           }
         });
         if (result && result.exitCode !== 0) {
+          const output = result.combinedOutput?.trim();
+          const detail = output ? `
+${output}` : "";
           throw new Error(
-            `Sandbox setup command failed (${result.exitCode}): ${command}`
+            `Sandbox setup command failed (${result.exitCode}): ${command}${detail}`
           );
         }
       }
     );
   }
+  async probe(command, extraEnv) {
+    return time(
+      debugRuntime,
+      `sandbox probe ${shortLabel(command)}`,
+      async () => {
+        const result = await this.options.sandbox?.run(command, {
+          cwd: this.options.cwd,
+          env: {
+            ...this.options.env ?? {},
+            ...this.env,
+            ...extraEnv ?? {}
+          }
+        });
+        return Boolean(result && result.exitCode === 0);
+      },
+      (ok) => ({ ok })
+    );
+  }
   async cleanup() {
   }
 };
@@ -1092,6 +1135,7 @@ import path5 from "path";
 var MANIFEST_FILENAME = "setup-manifest.json";
 var TARGET_MANIFEST_FILENAME = "setup-target.json";
 var INSTALL_SCRIPT_FILENAME = "install.sh";
+var SETUP_ID_FILENAME = "setup.id";
 var MANIFEST_VERSION = 1;
 function hashArtifact(artifact) {
   const hasher = createHash("sha256");
@@ -1110,6 +1154,74 @@ function computeTargetArtifacts(artifacts) {
   }
   return result;
 }
+function computeSetupId(parts) {
+  const hasher = createHash("sha256");
+  hasher.update(`v${MANIFEST_VERSION}
+`);
+  for (const a of [...parts.artifacts ?? []].sort(
+    (x, y) => x.path.localeCompare(y.path)
+  )) {
+    hasher.update(`a:${a.path}:${hashArtifact(a)}
+`);
+  }
+  for (const cmd of parts.installCommands ?? []) {
+    hasher.update(`c:${hashCommand(cmd)}
+`);
+  }
+  if (parts.daemon) {
+    hasher.update(
+      `d:${parts.daemon.port}:${parts.daemon.healthPath}:${parts.daemon.expectedVersionMatch ?? ""}
+`
+    );
+  }
+  for (const extra of parts.extras ?? []) {
+    hasher.update(`x:${extra}
+`);
+  }
+  return hasher.digest("hex");
+}
+async function preflightSetup(target, setupId, daemon) {
+  return time(
+    debugSetup,
+    `preflightSetup ${target.provider}`,
+    async () => {
+      const setupIdFile = path5.posix.join(
+        target.layout.rootDir,
+        SETUP_ID_FILENAME
+      );
+      const checks = [
+        `[ -f ${shellQuote(setupIdFile)} ]`,
+        `[ "$(cat ${shellQuote(setupIdFile)} 2>/dev/null)" = ${shellQuote(setupId)} ]`
+      ];
+      if (daemon) {
+        const url = `http://127.0.0.1:${daemon.port}${daemon.healthPath}`;
+        if (daemon.expectedVersionMatch) {
+          checks.push(
+            `curl -fsS --max-time 2 ${shellQuote(url)} 2>/dev/null | grep -q ${shellQuote(daemon.expectedVersionMatch)}`
+          );
+        } else {
+          checks.push(
+            `curl -fsS --max-time 2 ${shellQuote(url)} >/dev/null 2>&1`
+          );
+        }
+      }
+      return target.probe(checks.join(" && "));
+    },
+    (ok) => ({ ok })
+  );
+}
+async function markSetupComplete(target, setupId) {
+  await time(
+    debugSetup,
+    `markSetupComplete ${target.provider}`,
+    () => target.runCommand(
+      [
+        `mkdir -p ${shellQuote(target.layout.rootDir)}`,
+        `printf '%s' ${shellQuote(setupId)} > ${shellQuote(path5.posix.join(target.layout.rootDir, SETUP_ID_FILENAME))}`
+      ].join(" && ")
+    )
+  );
+}
 function buildInstallScript(rootDir, installCommandsByKey) {
   const commandsB64 = Buffer.from(
     JSON.stringify(installCommandsByKey),
@@ -1935,6 +2047,11 @@ var ClaudeCodeAgentAdapter = class {
   /**
    * Sandbox-side preparation. Uploads `.claude/` artifacts and ensures
    * the daemon is running. `execute()` then dials the daemon directly.
+   *
+   * Warm-path short-circuit: a single no-upload `preflightSetup` probes
+   * the `setup.id` marker + daemon `/__version` on loopback. If both
+   * match what we'd produce, we skip the artifact upload AND the daemon
+   * boot entirely.
    */
   async setup(request) {
     await time(debugClaude, "claude-code setup()", async () => {
@@ -1968,6 +2085,20 @@ var ClaudeCodeAgentAdapter = class {
         { path: settingsPath, content: JSON.stringify(hookSettings, null, 2) },
         { path: mcpConfigPath, content: mcpConfigJson }
       ];
+      const daemonInfo = {
+        port: DAEMON_PORT,
+        healthPath: "/__version",
+        expectedVersionMatch: DAEMON_PROTOCOL_VERSION
+      };
+      const setupId = computeSetupId({
+        artifacts,
+        installCommands,
+        daemon: daemonInfo
+      });
+      if (await preflightSetup(target, setupId, daemonInfo)) {
+        debugClaude("claude-code setup() preflight hit \u2014 skipping");
+        return;
+      }
       const env = { ...options.env ?? {}, ...target.env };
       await Promise.all([
         time(
@@ -1977,6 +2108,7 @@ var ClaudeCodeAgentAdapter = class {
         ),
         ensureClaudeCodeDaemon(options, env)
       ]);
+      await markSetupComplete(target, setupId);
     });
   }
   async execute(request, sink) {
@@ -2819,7 +2951,12 @@ async function ensureCodexLoginViaConfig(request, target) {
     [
       'if [ -z "${OPENAI_API_KEY:-}" ]; then exit 0; fi',
       'mkdir -p "${CODEX_HOME:-$HOME/.codex}"',
-      "printenv OPENAI_API_KEY | env -u XDG_CONFIG_HOME codex login --with-api-key"
+      // Merge stderr into stdout so providers that don't surface stderr
+      // (e.g. Daytona's `executeCommand`, which collapses to a single
+      // `result` field) still propagate the underlying error message
+      // back to the caller — otherwise a failed login leaves us with a
+      // bare "exit 1" and no diagnostic.
+      "printenv OPENAI_API_KEY | env -u XDG_CONFIG_HOME codex login --with-api-key 2>&1"
     ].join("; "),
     Object.keys(extraEnv).length > 0 ? extraEnv : void 0
   );
@@ -2925,12 +3062,26 @@ async function setupCodex(request) {
       ...sharedTarget.env,
       ...options.provider?.env ?? {}
     });
+    const { artifacts: serverArtifacts } = buildArtifactsFor(sharedTarget);
+    const { artifacts: skillArtifacts2, installCommands: installCommands2 } = await prepareSkillArtifacts(provider, options.skills, target2.layout);
+    const daemonInfo = {
+      port: REMOTE_CODEX_APP_SERVER_PORT,
+      healthPath: "/readyz"
+    };
+    const setupId2 = computeSetupId({
+      artifacts: [...serverArtifacts, ...skillArtifacts2],
+      installCommands: installCommands2,
+      daemon: daemonInfo
+    });
+    if (await preflightSetup(sharedTarget, setupId2, daemonInfo)) {
+      debugCodex("codex remote setup() preflight hit \u2014 skipping");
+      return;
+    }
     await time(
       debugCodex,
       "ensureCodexLogin",
       () => ensureCodexLoginViaConfig(request, sharedTarget)
     );
-    const { artifacts: serverArtifacts } = buildArtifactsFor(sharedTarget);
     await applyDifferentialSetup(sharedTarget, serverArtifacts, []);
     const binary = options.provider?.binary ?? "codex";
     const pidFilePath = path9.posix.join(
@@ -2978,28 +3129,34 @@ async function setupCodex(request) {
       );
     }
     try {
-      const { artifacts: skillArtifacts2, installCommands: installCommands2 } = await prepareSkillArtifacts(provider, options.skills, target2.layout);
       await applyDifferentialSetup(target2, skillArtifacts2, installCommands2);
     } catch (error) {
       await target2.cleanup().catch(() => void 0);
       throw error;
     }
+    await markSetupComplete(sharedTarget, setupId2);
     return;
   }
   const target = await createSetupTarget(provider, "shared-setup", options);
+  const { artifacts: skillArtifacts, installCommands } = await prepareSkillArtifacts(provider, options.skills, target.layout);
+  const { artifacts: configArtifacts } = buildArtifactsFor(target);
+  const allArtifacts = [...skillArtifacts, ...configArtifacts];
+  const setupId = computeSetupId({
+    artifacts: allArtifacts,
+    installCommands
+  });
+  if (await preflightSetup(target, setupId)) {
+    debugCodex("codex local setup() preflight hit \u2014 skipping");
+    return;
+  }
   try {
     await ensureCodexLoginViaConfig(request, target);
   } catch (error) {
     await target.cleanup().catch(() => void 0);
     throw error;
   }
-  const { artifacts: skillArtifacts, installCommands } = await prepareSkillArtifacts(provider, options.skills, target.layout);
-  const { artifacts: configArtifacts } = buildArtifactsFor(target);
-  await applyDifferentialSetup(
-    target,
-    [...skillArtifacts, ...configArtifacts],
-    installCommands
-  );
+  await applyDifferentialSetup(target, allArtifacts, installCommands);
+  await markSetupComplete(target, setupId);
 }
 async function createRuntime(request, inputParts) {
   const options = request.options;
@@ -3609,12 +3766,11 @@ var OPEN_CODE_REASONING_LEVELS = ["low", "medium", "high", "xhigh"];
 function openCodeAgentSlug(reasoning) {
   return reasoning ? `agentbox-${reasoning}` : "agentbox";
 }
-function buildOpenCodeConfig(options, systemPrompt, interactiveApproval) {
+function buildOpenCodeConfig(options, interactiveApproval) {
   const mcpConfig = buildOpenCodeMcpConfig(options.mcps);
   const commandsConfig = buildOpenCodeCommandsConfig(options.commands);
   const baseAgent = {
     mode: "primary",
-    prompt: systemPrompt,
     permission: buildOpenCodePermissionConfig(interactiveApproval),
     tools: {
       write: true,
@@ -3651,19 +3807,6 @@ async function ensureSandboxOpenCodeServer(request) {
     const sandbox = request.options.sandbox;
     const options = request.options;
     const port = SANDBOX_OPENCODE_PORT;
-    const healthCheck = await time(
-      debugOpencode,
-      "health probe (warm path)",
-      () => sandbox.run(
-        `curl -fsS http://127.0.0.1:${port}/global/health >/dev/null 2>&1`,
-        { cwd: options.cwd, timeoutMs: 5e3 }
-      )
-    );
-    if (healthCheck.exitCode === 0) {
-      debugOpencode("opencode server already running \u2014 reusing");
-      return;
-    }
-    debugOpencode("opencode server not running \u2014 cold-spawning");
     const plugins = assertHooksSupported(request.provider, options);
     assertCommandsSupported(request.provider, options.commands);
     const interactiveApproval = isInteractiveApproval(options);
@@ -3684,26 +3827,32 @@ async function ensureSandboxOpenCodeServer(request) {
     const configPath = path10.join(target.layout.opencodeDir, "agentbox.json");
     const openCodeConfig = buildOpenCodeConfig(
       options,
-      request.config.systemPrompt ?? "",
       interactiveApproval
     );
+    const allArtifacts = [
+      ...skillArtifacts,
+      ...pluginArtifacts,
+      {
+        path: configPath,
+        content: JSON.stringify(openCodeConfig, null, 2)
+      }
+    ];
+    const daemonInfo = { port, healthPath: "/global/health" };
+    const setupId = computeSetupId({
+      artifacts: allArtifacts,
+      installCommands,
+      daemon: daemonInfo
+    });
+    if (await preflightSetup(target, setupId, daemonInfo)) {
+      debugOpencode("opencode setup() preflight hit \u2014 skipping");
+      return;
+    }
     const commonEnv = {
       OPENCODE_CONFIG: configPath,
       OPENCODE_CONFIG_DIR: target.layout.opencodeDir,
       OPENCODE_DISABLE_DEFAULT_PLUGINS: "true"
     };
-    await applyDifferentialSetup(
-      target,
-      [
-        ...skillArtifacts,
-        ...pluginArtifacts,
-        {
-          path: configPath,
-          content: JSON.stringify(openCodeConfig, null, 2)
-        }
-      ],
-      installCommands
-    );
+    await applyDifferentialSetup(target, allArtifacts, installCommands);
     const binary = options.provider?.binary ?? "opencode";
     const pidFilePath = path10.posix.join(
       target.layout.rootDir,
@@ -3766,6 +3915,7 @@ async function ensureSandboxOpenCodeServer(request) {
         `OpenCode server did not become ready within ${SANDBOX_OPENCODE_READY_TIMEOUT_MS}ms.`
       );
     });
+    await markSetupComplete(target, setupId);
   });
 }
 async function ensureLocalOpenCodeServer(request) {
@@ -3798,28 +3948,28 @@ async function ensureLocalOpenCodeServer(request) {
     target.layout.opencodeDir
   );
   const configPath = path10.join(target.layout.opencodeDir, "agentbox.json");
-  const openCodeConfig = buildOpenCodeConfig(
-    options,
-    request.config.systemPrompt ?? "",
-    interactiveApproval
-  );
+  const openCodeConfig = buildOpenCodeConfig(options, interactiveApproval);
   const commonEnv = {
     OPENCODE_CONFIG: configPath,
     OPENCODE_CONFIG_DIR: target.layout.opencodeDir,
     OPENCODE_DISABLE_DEFAULT_PLUGINS: "true"
   };
-  await applyDifferentialSetup(
-    target,
-    [
-      ...skillArtifacts,
-      ...pluginArtifacts,
-      {
-        path: configPath,
-        content: JSON.stringify(openCodeConfig, null, 2)
-      }
-    ],
+  const allArtifacts = [
+    ...skillArtifacts,
+    ...pluginArtifacts,
+    {
+      path: configPath,
+      content: JSON.stringify(openCodeConfig, null, 2)
+    }
+  ];
+  const setupId = computeSetupId({
+    artifacts: allArtifacts,
     installCommands
-  );
+  });
+  const preflightHit = await preflightSetup(target, setupId);
+  if (!preflightHit) {
+    await applyDifferentialSetup(target, allArtifacts, installCommands);
+  }
   spawnCommand({
     command: options.provider?.binary ?? "opencode",
     args: [
@@ -3841,6 +3991,7 @@ async function ensureLocalOpenCodeServer(request) {
     `http://127.0.0.1:${LOCAL_OPENCODE_PORT}/global/health`,
     { timeoutMs: LOCAL_OPENCODE_READY_TIMEOUT_MS }
   );
+  await markSetupComplete(target, setupId);
 }
 async function setupOpenCode(request) {
   if (request.options.sandbox) {
@@ -4183,6 +4334,11 @@ var OpenCodeAgentAdapter = class {
               },
               body: JSON.stringify({
                 ...request.run.model ? { model: toOpenCodeModel(request.run.model) } : {},
+                // Per-message system prompt — keeps systemPrompt out of
+                // the on-disk agent config so changing it doesn't
+                // invalidate setupId. Sent on every dispatch (the field
+                // is per-message, not session-sticky).
+                ...request.run.systemPrompt ? { system: request.run.systemPrompt } : {},
                 agent: agentSlug,
                 parts
               })
@@ -4651,7 +4807,9 @@ var AgentRunController = class {
     }
     this.settled = true;
     this.clearPendingPermissions(
-      new Error("Agent run was cancelled before pending permission requests resolved.")
+      new Error(
+        "Agent run was cancelled before pending permission requests resolved."
+      )
     );
     if (result?.text) {
       this.text = result.text;
@@ -4768,7 +4926,7 @@ var Agent = class {
    * second `setup()` against the same sandbox does ~one round-trip of
    * work.
    */
-  async setup(config = {}) {
+  async setup() {
     if (this.setupPromise) {
       await this.setupPromise;
       return;
@@ -4778,8 +4936,7 @@ var Agent = class {
     this.setupPromise = (async () => {
       await this.adapter.setup({
         provider: this.provider,
-        options: this.options,
-        config
+        options: this.options
       });
       debugAgent(
         "setup() returned provider=%s after %dms",
@@ -4801,14 +4958,10 @@ var Agent = class {
       );
     }
     if (runConfig.forkSessionId && !runConfig.forkAtMessageId) {
-      throw new Error(
-        "AgentRunConfig.forkSessionId requires forkAtMessageId."
-      );
+      throw new Error("AgentRunConfig.forkSessionId requires forkAtMessageId.");
     }
     if (runConfig.forkAtMessageId && !runConfig.forkSessionId) {
-      throw new Error(
-        "AgentRunConfig.forkAtMessageId requires forkSessionId."
-      );
+      throw new Error("AgentRunConfig.forkAtMessageId requires forkSessionId.");
     }
     const runId = runConfig.runId ?? randomUUID2();
     const streamCalledAt = Date.now();

package/dist/{chunk-DDGBIACF.js → chunk-QNNAAVJV.js}

@@ -69,7 +69,7 @@ var SandboxAdapter = class {
    * `provision()` implementations. Stays `false` until `findOrProvision()`
    * has resolved.
    */
-  wasFoundFlag = false;
+  isWarmFlag = false;
   constructor(options) {
     this.options = options;
     this.baseEnv = { ...options.env ?? {} };
@@ -168,8 +168,8 @@ var SandboxAdapter = class {
    * idempotent setup that the previous run already performed (e.g.
    * `agent.setup()`). Always `false` before `findOrProvision()` resolves.
    */
-  get wasFound() {
-    return this.wasFoundFlag;
+  get isWarm() {
+    return this.isWarmFlag;
   }
   /**
    * Headers that callers should attach to HTTP / WebSocket requests they make
@@ -242,8 +242,9 @@ var DaytonaSandboxAdapter = class extends SandboxAdapter {
     const existing = await this.findMatchingSandbox();
     if (existing) {
       this.sandbox = existing;
+      const isWarm = existing.state === "started";
       await existing.start();
-      this.wasFoundFlag = true;
+      this.isWarmFlag = isWarm;
       return;
     }
     const labels = this.getLabels();
@@ -518,7 +519,7 @@ var E2bSandboxAdapter = class extends SandboxAdapter {
     const existing = await this.findMatchingSandbox();
     if (existing) {
       this.sandbox = existing;
-      this.wasFoundFlag = true;
+      this.isWarmFlag = true;
       return;
     }
     const template = resolveSandboxImage(this.options.image);
@@ -1352,7 +1353,7 @@ var ModalSandboxAdapter = class extends SandboxAdapter {
     const existing = await this.findMatchingSandbox();
     if (existing) {
       this.sandbox = existing;
-      this.wasFoundFlag = true;
+      this.isWarmFlag = true;
       return;
     }
     const appName = this.options.provider?.appName ?? "agentbox";
@@ -2102,8 +2103,8 @@ var Sandbox = class {
    * idempotent setup that the previous run already performed (e.g.
    * `agent.setup()`). Always `false` before `findOrProvision()` resolves.
    */
-  get wasFound() {
-    return this.adapter.wasFound;
+  get isWarm() {
+    return this.adapter.isWarm;
   }
   /**
    * Attach to an existing tagged sandbox or create a new one. Must be

package/dist/events/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AISDKEvent, S as MessageCompletedEvent, T as MessageInjectedEvent, U as MessageStartedEvent, V as NormalizedAgentEvent, W as NormalizedAgentEventBase, X as NormalizedAgentEventType, a1 as PermissionRequestedEvent, a2 as PermissionResolvedEvent, a3 as RawAgentEvent, a4 as ReasoningDeltaEvent, a6 as RunCancelledEvent, a7 as RunCompletedEvent, a8 as RunErrorEvent, a9 as RunStartedEvent, aa as TextDeltaEvent, ac as ToolCallCompletedEvent, ad as ToolCallDeltaEvent, ae as ToolCallStartedEvent, ah as createNormalizedEvent, ai as normalizeRawAgentEvent, aj as toAISDKEvent, ak as toAISDKStream } from '../types-Dj_HCr6Q.js';
+export { A as AISDKEvent, R as MessageCompletedEvent, S as MessageInjectedEvent, T as MessageStartedEvent, U as NormalizedAgentEvent, V as NormalizedAgentEventBase, W as NormalizedAgentEventType, a0 as PermissionRequestedEvent, a1 as PermissionResolvedEvent, a2 as RawAgentEvent, a3 as ReasoningDeltaEvent, a5 as RunCancelledEvent, a6 as RunCompletedEvent, a7 as RunErrorEvent, a8 as RunStartedEvent, a9 as TextDeltaEvent, ab as ToolCallCompletedEvent, ac as ToolCallDeltaEvent, ad as ToolCallStartedEvent, ag as createNormalizedEvent, ah as normalizeRawAgentEvent, ai as toAISDKEvent, aj as toAISDKStream } from '../types-Ozo1rHKs.js';
 import { AgentProvider } from '../enums.js';
-import '../Sandbox-CByFJI8X.js';
+import '../Sandbox-K6VNqKeo.js';
 import 'e2b';
 import '@vercel/sandbox';
 import '@daytonaio/sdk';

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupConfig, w as AgentSetupRequest, x as AgentSkillConfig, y as AgentSubAgentConfig, z as AttachedRun, C as ClaudeCodeAgentOptions, B as ClaudeCodeHookConfig, D as ClaudeCodeHookEvent, E as ClaudeCodeHookHandler, F as ClaudeCodeHookMatcherGroup, G as ClaudeCodeHooksConfig, H as ClaudeCodeProviderOptions, I as CodexAgentOptions, J as CodexCommandHook, K as CodexHookEvent, L as CodexHookMatcherGroup, M as CodexHooksConfig, N as CodexProviderOptions, O as DataContent, P as EmbeddedSkillConfig, Q as FilePart, R as ImagePart, S as MessageCompletedEvent, T as MessageInjectedEvent, U as MessageStartedEvent, V as NormalizedAgentEvent, W as NormalizedAgentEventBase, X as NormalizedAgentEventType, Y as OpenCodeAgentOptions, Z as OpenCodePluginConfig, _ as OpenCodePluginEvent, $ as OpenCodePluginHookConfig, a0 as OpenCodeProviderOptions, a1 as PermissionRequestedEvent, a2 as PermissionResolvedEvent, a3 as RawAgentEvent, a4 as ReasoningDeltaEvent, a5 as RepoSkillConfig, a6 as RunCancelledEvent, a7 as RunCompletedEvent, a8 as RunErrorEvent, a9 as RunStartedEvent, aa as TextDeltaEvent, ab as TextPart, ac as ToolCallCompletedEvent, ad as ToolCallDeltaEvent, ae as ToolCallStartedEvent, af as UserContent, ag as UserContentPart, ah as createNormalizedEvent, ai as normalizeRawAgentEvent, aj as toAISDKEvent, ak as toAISDKStream } from './types-Dj_HCr6Q.js';
+export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AttachedRun, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexProviderOptions, N as DataContent, O as EmbeddedSkillConfig, P as FilePart, Q as ImagePart, R as MessageCompletedEvent, S as MessageInjectedEvent, T as MessageStartedEvent, U as NormalizedAgentEvent, V as NormalizedAgentEventBase, W as NormalizedAgentEventType, X as OpenCodeAgentOptions, Y as OpenCodePluginConfig, Z as OpenCodePluginEvent, _ as OpenCodePluginHookConfig, $ as OpenCodeProviderOptions, a0 as PermissionRequestedEvent, a1 as PermissionResolvedEvent, a2 as RawAgentEvent, a3 as ReasoningDeltaEvent, a4 as RepoSkillConfig, a5 as RunCancelledEvent, a6 as RunCompletedEvent, a7 as RunErrorEvent, a8 as RunStartedEvent, a9 as TextDeltaEvent, aa as TextPart, ab as ToolCallCompletedEvent, ac as ToolCallDeltaEvent, ad as ToolCallStartedEvent, ae as UserContent, af as UserContentPart, ag as createNormalizedEvent, ah as normalizeRawAgentEvent, ai as toAISDKEvent, aj as toAISDKStream } from './types-Ozo1rHKs.js';
 export { AGENT_RESERVED_PORTS, Agent, collectAllAgentReservedPorts } from './agents/index.js';
-export { A as AsyncCommandHandle, C as CommandEvent, a as CommandOptions, b as CommandResult, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, G as GitCloneOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, g as SandboxDescriptor, h as SandboxListOptions, i as SandboxOptions, j as SandboxOptionsBase, k as SandboxOptionsMap, l as SandboxProviderName, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, T as TarballEntry, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from './Sandbox-CByFJI8X.js';
+export { A as AsyncCommandHandle, C as CommandEvent, a as CommandOptions, b as CommandResult, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, G as GitCloneOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, g as SandboxDescriptor, h as SandboxListOptions, i as SandboxOptions, j as SandboxOptionsBase, k as SandboxOptionsMap, l as SandboxProviderName, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, T as TarballEntry, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from './Sandbox-K6VNqKeo.js';
 export { SandboxAdapter, buildGitCloneCommand } from './sandboxes/index.js';
 export { ProviderLogAssembler } from './events/index.js';
 export { AgentProvider, SandboxProvider } from './enums.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   Agent
-} from "./chunk-YAMFJAU6.js";
+} from "./chunk-GBM7LKZF.js";
 import {
   ProviderLogAssembler,
   createNormalizedEvent,
@@ -12,7 +12,7 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "./chunk-DDGBIACF.js";
+} from "./chunk-QNNAAVJV.js";
 import {
   AGENT_RESERVED_PORTS,
   collectAllAgentReservedPorts

package/dist/sandboxes/index.d.ts

@@ -1,5 +1,5 @@
-import { l as SandboxProviderName, i as SandboxOptions, a as CommandOptions, b as CommandResult, A as AsyncCommandHandle, h as SandboxListOptions, g as SandboxDescriptor, T as TarballEntry, G as GitCloneOptions } from '../Sandbox-CByFJI8X.js';
-export { C as CommandEvent, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, j as SandboxOptionsBase, k as SandboxOptionsMap, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from '../Sandbox-CByFJI8X.js';
+import { l as SandboxProviderName, i as SandboxOptions, a as CommandOptions, b as CommandResult, A as AsyncCommandHandle, h as SandboxListOptions, g as SandboxDescriptor, T as TarballEntry, G as GitCloneOptions } from '../Sandbox-K6VNqKeo.js';
+export { C as CommandEvent, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, j as SandboxOptionsBase, k as SandboxOptionsMap, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from '../Sandbox-K6VNqKeo.js';
 export { SandboxProvider } from '../enums.js';
 import 'e2b';
 import '@vercel/sandbox';
@@ -19,7 +19,7 @@ declare abstract class SandboxAdapter<TProvider extends SandboxProviderName = Sa
      * `provision()` implementations. Stays `false` until `findOrProvision()`
      * has resolved.
      */
-    protected wasFoundFlag: boolean;
+    protected isWarmFlag: boolean;
     constructor(options: TOptions);
     abstract get provider(): TProvider;
     abstract get raw(): TRaw | undefined;
@@ -74,7 +74,7 @@ declare abstract class SandboxAdapter<TProvider extends SandboxProviderName = Sa
      * idempotent setup that the previous run already performed (e.g.
      * `agent.setup()`). Always `false` before `findOrProvision()` resolves.
      */
-    get wasFound(): boolean;
+    get isWarm(): boolean;
     /**
      * Headers that callers should attach to HTTP / WebSocket requests they make
      * against this sandbox's preview URL. Default is empty; providers like

package/dist/sandboxes/index.js

@@ -2,7 +2,7 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "../chunk-DDGBIACF.js";
+} from "../chunk-QNNAAVJV.js";
 import "../chunk-AVXJMCBC.js";
 import "../chunk-NSJM57Z4.js";
 import {

package/dist/{types-Dj_HCr6Q.d.ts → types-Ozo1rHKs.d.ts}

@@ -1,5 +1,5 @@
 import { AgentProvider } from './enums.js';
-import { S as Sandbox } from './Sandbox-CByFJI8X.js';
+import { S as Sandbox } from './Sandbox-K6VNqKeo.js';
 
 interface RawAgentEvent<TPayload = unknown> {
     provider: string;
@@ -333,14 +333,6 @@ interface AgentRunConfig {
     forkAtMessageId?: string;
     reasoning?: AgentReasoningEffort;
 }
-/**
- * Subset of {@link AgentRunConfig} that needs to be committed at
- * `agent.setup()` time so the runtime can pre-bake artifacts that
- * reference it (codex `model_instructions_file`, opencode agent config,
- * etc.). Unlike `AgentRunConfig`, this never carries per-turn input or
- * a resumed session id.
- */
-type AgentSetupConfig = Pick<AgentRunConfig, "systemPrompt" | "model" | "reasoning">;
 type AgentApprovalMode = "auto" | "interactive";
 type AgentPermissionKind = "bash" | "edit" | "tool" | "network" | "file-change" | "unknown";
 type AgentPermissionDecision = "allow" | "deny";
@@ -462,7 +454,6 @@ interface AgentRunSink {
 interface AgentSetupRequest<P extends AgentProviderName = AgentProviderName> {
     provider: P;
     options: AgentOptions<P>;
-    config: AgentSetupConfig;
 }
 interface AgentExecutionRequest<P extends AgentProviderName = AgentProviderName> {
     runId: string;
@@ -554,4 +545,4 @@ interface AgentProviderAdapter<P extends AgentProviderName = AgentProviderName>
     attachSendMessage(request: AgentAttachRequest<P>, content: UserContent): Promise<void>;
 }
 
-export { type OpenCodePluginHookConfig as $, type AISDKEvent as A, type ClaudeCodeHookConfig as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookEvent as D, type ClaudeCodeHookHandler as E, type ClaudeCodeHookMatcherGroup as F, type ClaudeCodeHooksConfig as G, type ClaudeCodeProviderOptions as H, type CodexAgentOptions as I, type CodexCommandHook as J, type CodexHookEvent as K, type CodexHookMatcherGroup as L, type CodexHooksConfig as M, type CodexProviderOptions as N, type DataContent as O, type EmbeddedSkillConfig as P, type FilePart as Q, type ImagePart as R, type MessageCompletedEvent as S, type MessageInjectedEvent as T, type MessageStartedEvent as U, type NormalizedAgentEvent as V, type NormalizedAgentEventBase as W, type NormalizedAgentEventType as X, type OpenCodeAgentOptions as Y, type OpenCodePluginConfig as Z, type OpenCodePluginEvent as _, type AgentApprovalMode as a, type OpenCodeProviderOptions as a0, type PermissionRequestedEvent as a1, type PermissionResolvedEvent as a2, type RawAgentEvent as a3, type ReasoningDeltaEvent as a4, type RepoSkillConfig as a5, type RunCancelledEvent as a6, type RunCompletedEvent as a7, type RunErrorEvent as a8, type RunStartedEvent as a9, type TextDeltaEvent as aa, type TextPart as ab, type ToolCallCompletedEvent as ac, type ToolCallDeltaEvent as ad, type ToolCallStartedEvent as ae, type UserContent as af, type UserContentPart as ag, createNormalizedEvent as ah, normalizeRawAgentEvent as ai, toAISDKEvent as aj, toAISDKStream as ak, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupConfig as v, type AgentSetupRequest as w, type AgentSkillConfig as x, type AgentSubAgentConfig as y, type AttachedRun as z };
+export { type OpenCodeProviderOptions as $, type AISDKEvent as A, type ClaudeCodeHookEvent as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookHandler as D, type ClaudeCodeHookMatcherGroup as E, type ClaudeCodeHooksConfig as F, type ClaudeCodeProviderOptions as G, type CodexAgentOptions as H, type CodexCommandHook as I, type CodexHookEvent as J, type CodexHookMatcherGroup as K, type CodexHooksConfig as L, type CodexProviderOptions as M, type DataContent as N, type EmbeddedSkillConfig as O, type FilePart as P, type ImagePart as Q, type MessageCompletedEvent as R, type MessageInjectedEvent as S, type MessageStartedEvent as T, type NormalizedAgentEvent as U, type NormalizedAgentEventBase as V, type NormalizedAgentEventType as W, type OpenCodeAgentOptions as X, type OpenCodePluginConfig as Y, type OpenCodePluginEvent as Z, type OpenCodePluginHookConfig as _, type AgentApprovalMode as a, type PermissionRequestedEvent as a0, type PermissionResolvedEvent as a1, type RawAgentEvent as a2, type ReasoningDeltaEvent as a3, type RepoSkillConfig as a4, type RunCancelledEvent as a5, type RunCompletedEvent as a6, type RunErrorEvent as a7, type RunStartedEvent as a8, type TextDeltaEvent as a9, type TextPart as aa, type ToolCallCompletedEvent as ab, type ToolCallDeltaEvent as ac, type ToolCallStartedEvent as ad, type UserContent as ae, type UserContentPart as af, createNormalizedEvent as ag, normalizeRawAgentEvent as ah, toAISDKEvent as ai, toAISDKStream as aj, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AttachedRun as y, type ClaudeCodeHookConfig as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentbox-sdk",
-  "version": "0.1.302",
+  "version": "0.1.303",
   "description": "Swappable coding agents and sandbox providers for Bun and TypeScript.",
   "license": "MIT",
   "repository": {
@@ -58,7 +58,7 @@
     "bun": ">=1.1.0"
   },
   "dependencies": {
-    "@daytonaio/sdk": "^0.161.0",
+    "@daytonaio/sdk": "^0.171.0",
     "@types/debug": "^4.1.13",
     "@vercel/sandbox": "2.0.0-beta.13",
     "debug": "^4.4.3",