agentbox-sdk 0.1.308 → 0.1.310

package/dist/{Sandbox-K6VNqKeo.d.ts → Sandbox-DcKAU-E3.d.ts}

@@ -258,6 +258,14 @@ declare class Sandbox<P extends SandboxProviderName = SandboxProviderName> {
      * cached internally).
      */
     findOrProvision(): Promise<this>;
+    /**
+     * Attach to an existing sandbox by id, skipping the
+     * `findMatchingSandbox` lookup. Useful when the caller just created the
+     * sandbox (e.g. via a provider-native fork API) and knows its id.
+     * Repeated calls are cheap. Currently only the Daytona adapter
+     * implements this; other providers throw.
+     */
+    attachById(id: string): Promise<this>;
     openPort(port: number): Promise<this>;
     setSecret(name: string, value: string): this;
     setSecrets(values: Record<string, string>): this;

package/dist/agents/index.d.ts

@@ -1,6 +1,6 @@
-import { o as AgentProviderName, h as AgentOptions, t as AgentRunConfig, s as AgentRun, r as AgentResult, a2 as RawAgentEvent, b as AgentAttachRequest, y as AttachedRun } from '../types-CZdyLzA4.js';
-export { a as AgentApprovalMode, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexProviderOptions, N as DataContent, O as EmbeddedSkillConfig, P as FilePart, Q as ImagePart, X as OpenCodeAgentOptions, Y as OpenCodePluginConfig, Z as OpenCodePluginEvent, _ as OpenCodePluginHookConfig, $ as OpenCodeProviderOptions, a4 as RepoSkillConfig, aa as TextPart, ae as UserContent, af as UserContentPart } from '../types-CZdyLzA4.js';
-import { S as Sandbox } from '../Sandbox-K6VNqKeo.js';
+import { o as AgentProviderName, h as AgentOptions, t as AgentRunConfig, s as AgentRun, r as AgentResult, a2 as RawAgentEvent, b as AgentAttachRequest, y as AttachedRun, a9 as SetupLayout } from '../types-du-Kkn53.js';
+export { a as AgentApprovalMode, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexProviderOptions, N as DataContent, O as EmbeddedSkillConfig, P as FilePart, Q as ImagePart, X as OpenCodeAgentOptions, Y as OpenCodePluginConfig, Z as OpenCodePluginEvent, _ as OpenCodePluginHookConfig, $ as OpenCodeProviderOptions, a4 as RepoSkillConfig, ab as TextPart, af as UserContent, ag as UserContentPart } from '../types-du-Kkn53.js';
+import { S as Sandbox } from '../Sandbox-DcKAU-E3.js';
 export { AgentProvider } from '../enums.js';
 import 'e2b';
 import '@vercel/sandbox';
@@ -67,6 +67,28 @@ declare class Agent<P extends AgentProviderName = AgentProviderName> {
     static attach<P extends AgentProviderName>(request: AgentAttachRequest<P>): Promise<AttachedRun>;
 }
 
+/**
+ * The on-disk root for every artifact agentbox writes for a given
+ * provider. Deterministic — same inputs, same path — so `setup()` and
+ * `execute()` agree on file locations without any data channel between
+ * them.
+ *
+ *  - **Sandbox**: `/tmp/agentbox/<provider>` inside the sandbox.
+ *  - **Local host**: `<os.tmpdir()>/agentbox-<provider>` on the host.
+ */
+declare function agentboxRoot(provider: AgentProviderName, hasSandbox?: boolean): string;
+/**
+ * Resolve the on-disk layout (config dirs per provider) for the given
+ * agentbox root. Public so external consumers (e.g. agentbox-driven
+ * orchestrators) can locate where each CLI writes its files without
+ * having to hardcode the layout shape.
+ *
+ * Pair with {@link agentboxRoot} to get the root for `(provider,
+ * hasSandbox)` first, then call this to expand it into the per-provider
+ * dirs (`claudeDir`, `codexDir`, `opencodeDir`, …).
+ */
+declare function getAgentLayout(rootDir: string): SetupLayout;
+
 /**
  * Ports each agent harness needs exposed on its sandbox in order to reach
  * its app-server (or equivalent local server). These are used to:
@@ -85,4 +107,4 @@ declare class Agent<P extends AgentProviderName = AgentProviderName> {
 declare const AGENT_RESERVED_PORTS: Record<AgentProviderName, readonly number[]>;
 declare function collectAllAgentReservedPorts(): number[];
 
-export { AGENT_RESERVED_PORTS, Agent, AgentAttachRequest, AgentOptions, AgentProviderName, AgentResult, AgentRun, AgentRunConfig, AttachedRun, collectAllAgentReservedPorts };
+export { AGENT_RESERVED_PORTS, Agent, AgentAttachRequest, AgentOptions, AgentProviderName, AgentResult, AgentRun, AgentRunConfig, AttachedRun, SetupLayout, agentboxRoot, collectAllAgentReservedPorts, getAgentLayout };

package/dist/agents/index.js

@@ -1,7 +1,9 @@
 import {
-  Agent
-} from "../chunk-T3RBNOSE.js";
-import "../chunk-ZDSHOGJ4.js";
+  Agent,
+  agentboxRoot,
+  getAgentLayout
+} from "../chunk-6MDOW3GK.js";
+import "../chunk-PNONJAGY.js";
 import {
   AGENT_RESERVED_PORTS,
   collectAllAgentReservedPorts
@@ -14,5 +16,7 @@ export {
   AGENT_RESERVED_PORTS,
   Agent,
   AgentProvider,
-  collectAllAgentReservedPorts
+  agentboxRoot,
+  collectAllAgentReservedPorts,
+  getAgentLayout
 };

package/dist/{chunk-T3RBNOSE.js → chunk-6MDOW3GK.js}

@@ -2,7 +2,7 @@ import {
   createNormalizedEvent,
   normalizeRawAgentEvent,
   toAISDKStream
-} from "./chunk-ZDSHOGJ4.js";
+} from "./chunk-PNONJAGY.js";
 import {
   AgentBoxError,
   AsyncQueue,
@@ -893,10 +893,10 @@ function shortLabel(command) {
   const oneLine = command.replace(/\s+/g, " ").trim();
   return oneLine.length > 60 ? `${oneLine.slice(0, 60)}\u2026` : oneLine;
 }
-function agentboxRoot(provider, hasSandbox) {
+function agentboxRoot(provider, hasSandbox = true) {
   return hasSandbox ? `/tmp/agentbox/${provider}` : path4.join(os.tmpdir(), `agentbox-${provider}`);
 }
-function buildLayout(rootDir) {
+function getAgentLayout(rootDir) {
   const xdgConfigHome = path4.join(rootDir, ".config");
   return {
     rootDir,
@@ -1108,7 +1108,7 @@ ${output}` : "";
 async function createSetupTarget(provider, setupId, options) {
   return time(debugRuntime, `createSetupTarget ${provider}`, async () => {
     void setupId;
-    const layout = buildLayout(
+    const layout = getAgentLayout(
       agentboxRoot(provider, Boolean(options.sandbox))
     );
     if (options.sandbox) {
@@ -1662,6 +1662,7 @@ function buildClaudeQueryOptions(params) {
   if (run.systemPrompt) {
     extraArgs["append-system-prompt"] = run.systemPrompt;
   }
+  const includeHookEvents = provider?.includeHookEvents ?? false;
   return {
     cwd: params.cwd ?? params.request.options.cwd,
     env: params.env,
@@ -1669,7 +1670,9 @@ function buildClaudeQueryOptions(params) {
     settings: params.settingsPath,
     extraArgs,
     includePartialMessages: true,
+    includeHookEvents,
     thinking: { type: "adaptive", display: "summarized" },
+    ...provider?.additionalDirectories?.length ? { additionalDirectories: provider.additionalDirectories } : {},
     ...run.model ? { model: run.model } : {},
     ...run.reasoning ? { effort: run.reasoning } : {},
     ...provider?.permissionMode ? { permissionMode: provider.permissionMode } : {},
@@ -2355,12 +2358,33 @@ var ClaudeCodeAgentAdapter = class {
         rawPayloads.push(message);
         sink.emitRaw(toRawEvent(request.runId, message, message.type));
         if (message.type === "system") {
-          const sys = message;
-          if (sys.subtype === "init" && sys.session_id) {
+          const sub = message.subtype;
+          if (sub === "init") {
+            const sys = message;
+            if (sys.session_id) {
+              debugClaude(
+                "\u2605 session.init session_id=%s (%dms)",
+                sys.session_id.slice(0, 8),
+                Date.now() - executeStartedAt
+              );
+            }
+          } else if (sub === "hook_started") {
+            const h = message;
             debugClaude(
-              "\u2605 session.init session_id=%s (%dms)",
-              sys.session_id.slice(0, 8),
-              Date.now() - executeStartedAt
+              "hook.started name=%s event=%s hook_id=%s",
+              h.hook_name,
+              h.hook_event,
+              h.hook_id
+            );
+          } else if (sub === "hook_response") {
+            const h = message;
+            const stderr = h.stderr && h.stderr.length > 0 ? h.stderr.replace(/\s+$/, "") : void 0;
+            debugClaude(
+              "hook.response name=%s exit=%s outcome=%s%s",
+              h.hook_name,
+              h.exit_code,
+              h.outcome,
+              stderr ? ` stderr=${JSON.stringify(stderr).slice(0, 200)}` : ""
             );
           }
           continue;
@@ -3864,12 +3888,17 @@ function buildOpenCodeConfig(options, interactiveApproval) {
     ])
   );
   const googleBaseUrl = options.env?.GOOGLE_BASE_URL;
+  const openRouterBaseUrl = options.env?.OPENROUTER_BASE_URL;
   return {
     $schema: "https://opencode.ai/config.json",
     ...mcpConfig ? { mcp: mcpConfig } : {},
     ...commandsConfig ? { command: commandsConfig } : {},
     provider: {
-      openrouter: { options: { baseURL: "https://openrouter.ai/api/v1" } },
+      openrouter: {
+        options: {
+          baseURL: openRouterBaseUrl || "https://openrouter.ai/api/v1"
+        }
+      },
       ...googleBaseUrl ? { google: { options: { baseURL: googleBaseUrl } } } : {}
     },
     agent: {
@@ -5156,5 +5185,7 @@ var Agent = class {
 };
 
 export {
+  agentboxRoot,
+  getAgentLayout,
   Agent
 };

package/dist/{chunk-QNNAAVJV.js → chunk-HYHLKO3L.js}

@@ -144,6 +144,44 @@ var SandboxAdapter = class {
     }
     await this.provisioning;
   }
+  /**
+   * Attach to an already-existing sandbox by id. Skips the
+   * `findMatchingSandbox` lookup that `findOrProvision` does — useful when
+   * the caller just created the sandbox (e.g. via a fork API) and knows
+   * its id directly. Idempotent: a second call is a no-op once attached.
+   *
+   * Default implementation throws — providers opt in by overriding
+   * `attachExisting`. Currently implemented by the Daytona adapter.
+   */
+  async attachById(id) {
+    if (this.provisioned) {
+      return;
+    }
+    if (!this.provisioning) {
+      this.provisioning = time(
+        debugSandbox,
+        `attachById [${this.provider}] ${id}`,
+        async () => {
+          await this.attachExisting(id);
+          this.provisioned = true;
+        }
+      ).finally(() => {
+        this.provisioning = void 0;
+      });
+    }
+    await this.provisioning;
+  }
+  /**
+   * Provider hook for `attachById`. Adopt the sandbox with the given id
+   * (e.g. fetch via the provider client, mark `isWarmFlag`, start if
+   * paused). Throw if the provider doesn't support direct attach.
+   */
+  async attachExisting(id) {
+    void id;
+    throw new Error(
+      `attachById is not supported by the ${this.provider} provider.`
+    );
+  }
   /**
    * Throw a consistent error when a method that needs a provisioned
    * sandbox is called before `findOrProvision()`. Provider adapters call
@@ -238,6 +276,19 @@ var DaytonaSandboxAdapter = class extends SandboxAdapter {
   get id() {
     return this.sandbox?.id;
   }
+  async attachExisting(id) {
+    const existing = await this.client.get(id);
+    if (!existing) {
+      throw new Error(`Daytona sandbox ${id} not found`);
+    }
+    this.sandbox = existing;
+    const state = existing.state ?? "unknown";
+    const isWarm = state === "started";
+    if (!isWarm) {
+      await existing.start();
+    }
+    this.isWarmFlag = isWarm;
+  }
   async provision() {
     const existing = await this.findMatchingSandbox();
     if (existing) {
@@ -284,9 +335,9 @@ var DaytonaSandboxAdapter = class extends SandboxAdapter {
     this.requireProvisioned();
     const sandbox = this.requireSandbox();
     const result = await sandbox.process.executeCommand(
-      toShellCommand(command),
+      this.buildSessionCommand(command, options),
       options?.cwd ?? this.workingDir,
-      this.getMergedEnv(options?.env),
+      void 0,
       options?.timeoutMs ? Math.ceil(options.timeoutMs / 1e3) : void 0
     );
     const output = result.result ?? "";
@@ -2120,6 +2171,17 @@ var Sandbox = class {
     );
     return this;
   }
+  /**
+   * Attach to an existing sandbox by id, skipping the
+   * `findMatchingSandbox` lookup. Useful when the caller just created the
+   * sandbox (e.g. via a provider-native fork API) and knows its id.
+   * Repeated calls are cheap. Currently only the Daytona adapter
+   * implements this; other providers throw.
+   */
+  async attachById(id) {
+    await this.adapter.attachById(id);
+    return this;
+  }
   async openPort(port) {
     await time(
       debugSandbox,

package/dist/{chunk-ZDSHOGJ4.js → chunk-PNONJAGY.js}

@@ -291,6 +291,9 @@ var CodexLogAssembler = class {
     this.byItemId.set(itemId, next);
     return clone(next);
   }
+  getSnapshots() {
+    return Array.from(this.byItemId.values()).map(clone);
+  }
 };
 var OpenCodeLogAssembler = class {
   userMessageIds = /* @__PURE__ */ new Set();
@@ -376,12 +379,22 @@ var OpenCodeLogAssembler = class {
     this.byPartId.set(partId, next);
     return clone(next);
   }
+  getSnapshots() {
+    return Array.from(this.byPartId.values()).map(clone);
+  }
 };
 var ClaudeCodeLogAssembler = class {
   currentMessageId = null;
   textByMessageId = /* @__PURE__ */ new Map();
   thinkingByMessageId = /* @__PURE__ */ new Map();
   byMessageId = /* @__PURE__ */ new Map();
+  // Per-message tool_use / image / other non-text-non-thinking content blocks.
+  // Tracked persistently so any `upsertMessage` call (including those from a
+  // post-assistant `message_start` re-anchor) still renders them — otherwise
+  // a later stream_event for the same messageId would emit a snapshot without
+  // tool_use blocks, and the UI's dedup-by-messageId would wipe the running
+  // command from the trace.
+  extraBlocksByMessageId = /* @__PURE__ */ new Map();
   process(event) {
     if (!isRecord(event)) return [];
     const type = typeof event.type === "string" ? event.type : "";
@@ -429,7 +442,8 @@ var ClaudeCodeLogAssembler = class {
       if (final.thinking) {
         this.thinkingByMessageId.set(id, final.thinking);
       }
-      const snapshot = this.upsertMessage(id, final.extraBlocks);
+      this.mergeExtraBlocks(id, final.extraBlocks);
+      const snapshot = this.upsertMessage(id);
       this.currentMessageId = null;
       return [snapshot];
     }
@@ -440,6 +454,7 @@ var ClaudeCodeLogAssembler = class {
     this.textByMessageId.clear();
     this.thinkingByMessageId.clear();
     this.byMessageId.clear();
+    this.extraBlocksByMessageId.clear();
     for (const snapshot of snapshots) {
       if (!isRecord(snapshot)) continue;
       if (snapshot.type !== "message.updated") continue;
@@ -450,25 +465,46 @@ var ClaudeCodeLogAssembler = class {
       const content = message && Array.isArray(message.content) ? message.content : [];
       let text = "";
       let thinking = "";
+      const extraBlocks = [];
       for (const block of content) {
         if (!isRecord(block)) continue;
         if (block.type === "text" && typeof block.text === "string") {
           text += block.text;
         } else if (block.type === "thinking" && typeof block.thinking === "string") {
           thinking += block.thinking;
+        } else {
+          extraBlocks.push(block);
         }
       }
       this.textByMessageId.set(messageId, text);
       this.thinkingByMessageId.set(messageId, thinking);
+      if (extraBlocks.length > 0) {
+        this.mergeExtraBlocks(messageId, extraBlocks);
+      }
+    }
+  }
+  mergeExtraBlocks(messageId, blocks) {
+    if (blocks.length === 0) return;
+    let map = this.extraBlocksByMessageId.get(messageId);
+    if (!map) {
+      map = /* @__PURE__ */ new Map();
+      this.extraBlocksByMessageId.set(messageId, map);
+    }
+    for (const block of blocks) {
+      const key = typeof block.id === "string" && block.id ? `id:${block.id}` : `idx:${map.size}`;
+      map.set(key, clone(block));
     }
   }
-  upsertMessage(messageId, extraBlocks = []) {
+  upsertMessage(messageId) {
     const text = this.textByMessageId.get(messageId) ?? "";
     const thinking = this.thinkingByMessageId.get(messageId) ?? "";
     const content = [];
     if (thinking) content.push({ type: "thinking", thinking });
     if (text) content.push({ type: "text", text });
-    for (const block of extraBlocks) content.push(clone(block));
+    const extras = this.extraBlocksByMessageId.get(messageId);
+    if (extras) {
+      for (const block of extras.values()) content.push(clone(block));
+    }
     const next = {
       type: "message.updated",
       messageId,
@@ -481,6 +517,9 @@ var ClaudeCodeLogAssembler = class {
     this.byMessageId.set(messageId, next);
     return clone(next);
   }
+  getSnapshots() {
+    return Array.from(this.byMessageId.values()).map(clone);
+  }
 };
 function extractClaudeAssistantContent(message) {
   const content = Array.isArray(message.content) ? message.content : [];
@@ -523,6 +562,29 @@ var ProviderLogAssembler = class {
     }
     return [];
   }
+  /**
+   * Return the current deduped snapshot set held by the active per-provider
+   * assembler. Equivalent to running `dedupeSnapshots` over the full sequence
+   * of snapshots emitted by `process()` since construction (or last seed), but
+   * read directly from in-memory state — no transport or persistence layer
+   * involved. Used end-of-run to persist the full trace without paying a
+   * Redis LRANGE + parse roundtrip.
+   *
+   * Snapshots are returned in first-seen order (Map insertion order). Entries
+   * are cloned, so the caller can serialize them freely.
+   */
+  getSnapshots(provider) {
+    if (provider === AgentProvider.Codex || provider === "codex") {
+      return this.codex.getSnapshots();
+    }
+    if (provider === AgentProvider.OpenCode || provider === "opencode") {
+      return this.openCode.getSnapshots();
+    }
+    if (provider === AgentProvider.ClaudeCode || provider === "claude-code") {
+      return this.claudeCode.getSnapshots();
+    }
+    return [];
+  }
   /**
    * Re-seed the assembler from a sequence of previously-assembled snapshots
    * so that subsequent `process()` calls produce snapshots consistent with

package/dist/events/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AISDKEvent, R as MessageCompletedEvent, S as MessageInjectedEvent, T as MessageStartedEvent, U as NormalizedAgentEvent, V as NormalizedAgentEventBase, W as NormalizedAgentEventType, a0 as PermissionRequestedEvent, a1 as PermissionResolvedEvent, a2 as RawAgentEvent, a3 as ReasoningDeltaEvent, a5 as RunCancelledEvent, a6 as RunCompletedEvent, a7 as RunErrorEvent, a8 as RunStartedEvent, a9 as TextDeltaEvent, ab as ToolCallCompletedEvent, ac as ToolCallDeltaEvent, ad as ToolCallStartedEvent, ag as createNormalizedEvent, ah as normalizeRawAgentEvent, ai as toAISDKEvent, aj as toAISDKStream } from '../types-CZdyLzA4.js';
+export { A as AISDKEvent, R as MessageCompletedEvent, S as MessageInjectedEvent, T as MessageStartedEvent, U as NormalizedAgentEvent, V as NormalizedAgentEventBase, W as NormalizedAgentEventType, a0 as PermissionRequestedEvent, a1 as PermissionResolvedEvent, a2 as RawAgentEvent, a3 as ReasoningDeltaEvent, a5 as RunCancelledEvent, a6 as RunCompletedEvent, a7 as RunErrorEvent, a8 as RunStartedEvent, aa as TextDeltaEvent, ac as ToolCallCompletedEvent, ad as ToolCallDeltaEvent, ae as ToolCallStartedEvent, ah as createNormalizedEvent, ai as normalizeRawAgentEvent, aj as toAISDKEvent, ak as toAISDKStream } from '../types-du-Kkn53.js';
 import { AgentProvider } from '../enums.js';
-import '../Sandbox-K6VNqKeo.js';
+import '../Sandbox-DcKAU-E3.js';
 import 'e2b';
 import '@vercel/sandbox';
 import '@daytonaio/sdk';
@@ -69,6 +69,18 @@ declare class ProviderLogAssembler {
      * a delta with no payload) or already represented by a previous snapshot.
      */
     process(provider: AgentProvider | string | null | undefined, event: unknown): JsonRecord[];
+    /**
+     * Return the current deduped snapshot set held by the active per-provider
+     * assembler. Equivalent to running `dedupeSnapshots` over the full sequence
+     * of snapshots emitted by `process()` since construction (or last seed), but
+     * read directly from in-memory state — no transport or persistence layer
+     * involved. Used end-of-run to persist the full trace without paying a
+     * Redis LRANGE + parse roundtrip.
+     *
+     * Snapshots are returned in first-seen order (Map insertion order). Entries
+     * are cloned, so the caller can serialize them freely.
+     */
+    getSnapshots(provider: AgentProvider | string | null | undefined): JsonRecord[];
     /**
      * Re-seed the assembler from a sequence of previously-assembled snapshots
      * so that subsequent `process()` calls produce snapshots consistent with

package/dist/events/index.js

@@ -4,7 +4,7 @@ import {
   normalizeRawAgentEvent,
   toAISDKEvent,
   toAISDKStream
-} from "../chunk-ZDSHOGJ4.js";
+} from "../chunk-PNONJAGY.js";
 import "../chunk-GOFJNFAD.js";
 export {
   ProviderLogAssembler,

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AttachedRun, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexProviderOptions, N as DataContent, O as EmbeddedSkillConfig, P as FilePart, Q as ImagePart, R as MessageCompletedEvent, S as MessageInjectedEvent, T as MessageStartedEvent, U as NormalizedAgentEvent, V as NormalizedAgentEventBase, W as NormalizedAgentEventType, X as OpenCodeAgentOptions, Y as OpenCodePluginConfig, Z as OpenCodePluginEvent, _ as OpenCodePluginHookConfig, $ as OpenCodeProviderOptions, a0 as PermissionRequestedEvent, a1 as PermissionResolvedEvent, a2 as RawAgentEvent, a3 as ReasoningDeltaEvent, a4 as RepoSkillConfig, a5 as RunCancelledEvent, a6 as RunCompletedEvent, a7 as RunErrorEvent, a8 as RunStartedEvent, a9 as TextDeltaEvent, aa as TextPart, ab as ToolCallCompletedEvent, ac as ToolCallDeltaEvent, ad as ToolCallStartedEvent, ae as UserContent, af as UserContentPart, ag as createNormalizedEvent, ah as normalizeRawAgentEvent, ai as toAISDKEvent, aj as toAISDKStream } from './types-CZdyLzA4.js';
-export { AGENT_RESERVED_PORTS, Agent, collectAllAgentReservedPorts } from './agents/index.js';
-export { A as AsyncCommandHandle, C as CommandEvent, a as CommandOptions, b as CommandResult, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, G as GitCloneOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, g as SandboxDescriptor, h as SandboxListOptions, i as SandboxOptions, j as SandboxOptionsBase, k as SandboxOptionsMap, l as SandboxProviderName, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, T as TarballEntry, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from './Sandbox-K6VNqKeo.js';
+export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AttachedRun, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexProviderOptions, N as DataContent, O as EmbeddedSkillConfig, P as FilePart, Q as ImagePart, R as MessageCompletedEvent, S as MessageInjectedEvent, T as MessageStartedEvent, U as NormalizedAgentEvent, V as NormalizedAgentEventBase, W as NormalizedAgentEventType, X as OpenCodeAgentOptions, Y as OpenCodePluginConfig, Z as OpenCodePluginEvent, _ as OpenCodePluginHookConfig, $ as OpenCodeProviderOptions, a0 as PermissionRequestedEvent, a1 as PermissionResolvedEvent, a2 as RawAgentEvent, a3 as ReasoningDeltaEvent, a4 as RepoSkillConfig, a5 as RunCancelledEvent, a6 as RunCompletedEvent, a7 as RunErrorEvent, a8 as RunStartedEvent, a9 as SetupLayout, aa as TextDeltaEvent, ab as TextPart, ac as ToolCallCompletedEvent, ad as ToolCallDeltaEvent, ae as ToolCallStartedEvent, af as UserContent, ag as UserContentPart, ah as createNormalizedEvent, ai as normalizeRawAgentEvent, aj as toAISDKEvent, ak as toAISDKStream } from './types-du-Kkn53.js';
+export { AGENT_RESERVED_PORTS, Agent, agentboxRoot, collectAllAgentReservedPorts, getAgentLayout } from './agents/index.js';
+export { A as AsyncCommandHandle, C as CommandEvent, a as CommandOptions, b as CommandResult, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, G as GitCloneOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, g as SandboxDescriptor, h as SandboxListOptions, i as SandboxOptions, j as SandboxOptionsBase, k as SandboxOptionsMap, l as SandboxProviderName, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, T as TarballEntry, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from './Sandbox-DcKAU-E3.js';
 export { SandboxAdapter, buildGitCloneCommand } from './sandboxes/index.js';
 export { ProviderLogAssembler } from './events/index.js';
 export { AgentProvider, SandboxProvider } from './enums.js';

package/dist/index.js

@@ -1,18 +1,20 @@
 import {
-  Agent
-} from "./chunk-T3RBNOSE.js";
+  Agent,
+  agentboxRoot,
+  getAgentLayout
+} from "./chunk-6MDOW3GK.js";
 import {
   ProviderLogAssembler,
   createNormalizedEvent,
   normalizeRawAgentEvent,
   toAISDKEvent,
   toAISDKStream
-} from "./chunk-ZDSHOGJ4.js";
+} from "./chunk-PNONJAGY.js";
 import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "./chunk-QNNAAVJV.js";
+} from "./chunk-HYHLKO3L.js";
 import {
   AGENT_RESERVED_PORTS,
   collectAllAgentReservedPorts
@@ -30,9 +32,11 @@ export {
   Sandbox,
   SandboxAdapter,
   SandboxProvider,
+  agentboxRoot,
   buildGitCloneCommand,
   collectAllAgentReservedPorts,
   createNormalizedEvent,
+  getAgentLayout,
   normalizeRawAgentEvent,
   toAISDKEvent,
   toAISDKStream

package/dist/sandboxes/index.d.ts

@@ -1,5 +1,5 @@
-import { l as SandboxProviderName, i as SandboxOptions, a as CommandOptions, b as CommandResult, A as AsyncCommandHandle, h as SandboxListOptions, g as SandboxDescriptor, T as TarballEntry, G as GitCloneOptions } from '../Sandbox-K6VNqKeo.js';
-export { C as CommandEvent, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, j as SandboxOptionsBase, k as SandboxOptionsMap, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from '../Sandbox-K6VNqKeo.js';
+import { l as SandboxProviderName, i as SandboxOptions, a as CommandOptions, b as CommandResult, A as AsyncCommandHandle, h as SandboxListOptions, g as SandboxDescriptor, T as TarballEntry, G as GitCloneOptions } from '../Sandbox-DcKAU-E3.js';
+export { C as CommandEvent, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, j as SandboxOptionsBase, k as SandboxOptionsMap, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from '../Sandbox-DcKAU-E3.js';
 export { SandboxProvider } from '../enums.js';
 import 'e2b';
 import '@vercel/sandbox';
@@ -60,6 +60,22 @@ declare abstract class SandboxAdapter<TProvider extends SandboxProviderName = Sa
      * (potentially slow) sandbox attach / create happens.
      */
     findOrProvision(): Promise<void>;
+    /**
+     * Attach to an already-existing sandbox by id. Skips the
+     * `findMatchingSandbox` lookup that `findOrProvision` does — useful when
+     * the caller just created the sandbox (e.g. via a fork API) and knows
+     * its id directly. Idempotent: a second call is a no-op once attached.
+     *
+     * Default implementation throws — providers opt in by overriding
+     * `attachExisting`. Currently implemented by the Daytona adapter.
+     */
+    attachById(id: string): Promise<void>;
+    /**
+     * Provider hook for `attachById`. Adopt the sandbox with the given id
+     * (e.g. fetch via the provider client, mark `isWarmFlag`, start if
+     * paused). Throw if the provider doesn't support direct attach.
+     */
+    protected attachExisting(id: string): Promise<void>;
     /**
      * Throw a consistent error when a method that needs a provisioned
      * sandbox is called before `findOrProvision()`. Provider adapters call

package/dist/sandboxes/index.js

@@ -2,7 +2,7 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "../chunk-QNNAAVJV.js";
+} from "../chunk-HYHLKO3L.js";
 import "../chunk-AVXJMCBC.js";
 import "../chunk-NSJM57Z4.js";
 import {

package/dist/{types-CZdyLzA4.d.ts → types-du-Kkn53.d.ts}

@@ -1,5 +1,5 @@
 import { AgentProvider } from './enums.js';
-import { S as Sandbox } from './Sandbox-K6VNqKeo.js';
+import { S as Sandbox } from './Sandbox-DcKAU-E3.js';
 
 interface RawAgentEvent<TPayload = unknown> {
     provider: string;
@@ -284,6 +284,15 @@ interface AgentCommandConfig {
     model?: string;
     subtask?: boolean;
 }
+interface SetupLayout {
+    rootDir: string;
+    homeDir: string;
+    xdgConfigHome: string;
+    agentsDir: string;
+    claudeDir: string;
+    opencodeDir: string;
+    codexDir: string;
+}
 
 type AgentProviderName = AgentProvider;
 type DataContent = string | URL | Uint8Array | ArrayBuffer | Buffer;
@@ -392,6 +401,23 @@ interface ClaudeCodeProviderOptions {
     allowedTools?: string[];
     autoApproveTools?: boolean;
     verbose?: boolean;
+    /**
+     * Extra directories Claude Code is allowed to read/write outside `cwd`.
+     * Passed through to `--add-dir` (one flag per entry). Use absolute paths.
+     *
+     * Common case: cwd points at a parent directory and tasks need access
+     * to sibling repos cloned under it. Listing each repo here surfaces it
+     * to the agent without changing the working directory.
+     */
+    additionalDirectories?: string[];
+    /**
+     * When `true` (the default), the in-sandbox CLI emits `hook_started` and
+     * `hook_response` system messages so the host can observe every hook
+     * fire — useful to confirm a project-defined hook actually ran and to
+     * surface its stdout/stderr/exit_code on failures. Set `false` to
+     * silence them when hook noise drowns out the rest of the event stream.
+     */
+    includeHookEvents?: boolean;
 }
 interface CodexAgentOptions extends AgentOptionsBase {
     provider?: CodexProviderOptions;
@@ -581,4 +607,4 @@ interface AgentProviderAdapter<P extends AgentProviderName = AgentProviderName>
     attachSendMessage(request: AgentAttachRequest<P>, content: UserContent): Promise<void>;
 }
 
-export { type OpenCodeProviderOptions as $, type AISDKEvent as A, type ClaudeCodeHookEvent as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookHandler as D, type ClaudeCodeHookMatcherGroup as E, type ClaudeCodeHooksConfig as F, type ClaudeCodeProviderOptions as G, type CodexAgentOptions as H, type CodexCommandHook as I, type CodexHookEvent as J, type CodexHookMatcherGroup as K, type CodexHooksConfig as L, type CodexProviderOptions as M, type DataContent as N, type EmbeddedSkillConfig as O, type FilePart as P, type ImagePart as Q, type MessageCompletedEvent as R, type MessageInjectedEvent as S, type MessageStartedEvent as T, type NormalizedAgentEvent as U, type NormalizedAgentEventBase as V, type NormalizedAgentEventType as W, type OpenCodeAgentOptions as X, type OpenCodePluginConfig as Y, type OpenCodePluginEvent as Z, type OpenCodePluginHookConfig as _, type AgentApprovalMode as a, type PermissionRequestedEvent as a0, type PermissionResolvedEvent as a1, type RawAgentEvent as a2, type ReasoningDeltaEvent as a3, type RepoSkillConfig as a4, type RunCancelledEvent as a5, type RunCompletedEvent as a6, type RunErrorEvent as a7, type RunStartedEvent as a8, type TextDeltaEvent as a9, type TextPart as aa, type ToolCallCompletedEvent as ab, type ToolCallDeltaEvent as ac, type ToolCallStartedEvent as ad, type UserContent as ae, type UserContentPart as af, createNormalizedEvent as ag, normalizeRawAgentEvent as ah, toAISDKEvent as ai, toAISDKStream as aj, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AttachedRun as y, type ClaudeCodeHookConfig as z };
+export { type OpenCodeProviderOptions as $, type AISDKEvent as A, type ClaudeCodeHookEvent as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookHandler as D, type ClaudeCodeHookMatcherGroup as E, type ClaudeCodeHooksConfig as F, type ClaudeCodeProviderOptions as G, type CodexAgentOptions as H, type CodexCommandHook as I, type CodexHookEvent as J, type CodexHookMatcherGroup as K, type CodexHooksConfig as L, type CodexProviderOptions as M, type DataContent as N, type EmbeddedSkillConfig as O, type FilePart as P, type ImagePart as Q, type MessageCompletedEvent as R, type MessageInjectedEvent as S, type MessageStartedEvent as T, type NormalizedAgentEvent as U, type NormalizedAgentEventBase as V, type NormalizedAgentEventType as W, type OpenCodeAgentOptions as X, type OpenCodePluginConfig as Y, type OpenCodePluginEvent as Z, type OpenCodePluginHookConfig as _, type AgentApprovalMode as a, type PermissionRequestedEvent as a0, type PermissionResolvedEvent as a1, type RawAgentEvent as a2, type ReasoningDeltaEvent as a3, type RepoSkillConfig as a4, type RunCancelledEvent as a5, type RunCompletedEvent as a6, type RunErrorEvent as a7, type RunStartedEvent as a8, type SetupLayout as a9, type TextDeltaEvent as aa, type TextPart as ab, type ToolCallCompletedEvent as ac, type ToolCallDeltaEvent as ad, type ToolCallStartedEvent as ae, type UserContent as af, type UserContentPart as ag, createNormalizedEvent as ah, normalizeRawAgentEvent as ai, toAISDKEvent as aj, toAISDKStream as ak, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AttachedRun as y, type ClaudeCodeHookConfig as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentbox-sdk",
-  "version": "0.1.308",
+  "version": "0.1.310",
   "description": "Swappable coding agents and sandbox providers for Bun and TypeScript.",
   "license": "MIT",
   "repository": {