agentbox-sdk 0.1.500 → 0.1.502

package/dist/agents/index.js

@@ -2,7 +2,7 @@ import {
   Agent,
   agentboxRoot,
   getAgentLayout
-} from "../chunk-JYI7MRGO.js";
+} from "../chunk-IEQM5L4K.js";
 import "../chunk-775FIGGL.js";
 import {
   AGENT_RESERVED_PORTS,

package/dist/{chunk-JYI7MRGO.js → chunk-IEQM5L4K.js}

@@ -1518,7 +1518,7 @@ function mapOpenCodeTools(tools) {
   }
   return Object.fromEntries(tools.map((tool) => [tool, true]));
 }
-function buildOpenCodeSubagentConfig(subAgents) {
+function buildOpenCodeSubagentConfig(subAgents, permission) {
   return Object.fromEntries(
     (subAgents ?? []).map((subAgent) => [
       subAgent.name,
@@ -1526,6 +1526,7 @@ function buildOpenCodeSubagentConfig(subAgents) {
         mode: "subagent",
         description: subAgent.description,
         prompt: subAgent.instructions,
+        ...permission ? { permission } : {},
         // opencode reads a per-agent `model` as a "<providerID>/<modelID>"
         // string (e.g. "openrouter/deepseek/deepseek-v4-flash"). Without it,
         // the sub-agent silently inherits the orchestrator's model instead of
@@ -3359,28 +3360,32 @@ async function materializeCodexImage(options, part, index) {
   if (part.source.type === "url") {
     return part.source.url;
   }
+  const data = Buffer.from(part.source.data, "base64");
+  if (data.length === 0) {
+    throw new Error("Cannot attach an empty image to Codex.");
+  }
   const root = agentboxRoot(AgentProvider.Codex, Boolean(options.sandbox));
   const imagePath = path9.join(
     root,
     "inputs",
-    `codex-image-${index}${codexImageExtension(part.mediaType)}`
+    `codex-image-${index}-${crypto2.randomUUID()}${codexImageExtension(part.mediaType)}`
   );
   if (options.sandbox) {
-    const encodedPath = `${imagePath}.b64`;
-    await options.sandbox.uploadAndRun(
-      [{ path: encodedPath, content: part.source.data }],
-      [
-        `mkdir -p ${shellQuote(path9.posix.dirname(imagePath))}`,
-        `(base64 --decode < ${shellQuote(encodedPath)} > ${shellQuote(imagePath)} || base64 -D < ${shellQuote(encodedPath)} > ${shellQuote(imagePath)})`,
-        `rm -f ${shellQuote(encodedPath)}`
-      ].join(" && "),
+    const result = await options.sandbox.uploadAndRun(
+      [{ path: imagePath, content: data }],
+      `test "$(wc -c < ${shellQuote(imagePath)})" -eq ${data.length}`,
       { cwd: options.cwd, env: options.env }
     );
+    if (result.exitCode !== 0) {
+      throw new Error(
+        `Failed to upload image attachment to Codex (exit ${result.exitCode}): the file could not be written or its size did not match.`
+      );
+    }
     return imagePath;
   }
   const fs = await import("fs/promises");
   await fs.mkdir(path9.dirname(imagePath), { recursive: true });
-  await fs.writeFile(imagePath, Buffer.from(part.source.data, "base64"));
+  await fs.writeFile(imagePath, data);
   return imagePath;
 }
 function resolveCodexOpenAiBaseUrlFromOptions(options) {
@@ -4406,7 +4411,10 @@ function buildOpenCodeConfig(options, interactiveApproval) {
     agent: {
       agentbox: baseAgent,
       ...reasoningVariants,
-      ...buildOpenCodeSubagentConfig(options.subAgents)
+      ...buildOpenCodeSubagentConfig(
+        options.subAgents,
+        buildOpenCodePermissionConfig(interactiveApproval)
+      )
     }
   };
 }
@@ -4887,6 +4895,33 @@ var OpenCodeAgentAdapter = class {
       }
       const announcedUserMessageIds = /* @__PURE__ */ new Set();
       const foreignMessageIds = /* @__PURE__ */ new Set();
+      const runSessionIds = /* @__PURE__ */ new Set([sessionId]);
+      const resolveRunSession = async (candidate) => {
+        if (runSessionIds.has(candidate)) return true;
+        try {
+          const sessions = await fetchJson(`${runtime.baseUrl}/session`, {
+            headers: runtime.previewHeaders
+          });
+          if (!Array.isArray(sessions)) return false;
+          const parentById = /* @__PURE__ */ new Map();
+          for (const session of sessions) {
+            if (typeof session?.id === "string" && typeof session?.parentID === "string") {
+              parentById.set(session.id, session.parentID);
+            }
+          }
+          const lineage = [];
+          let cursor = candidate;
+          while (cursor && !runSessionIds.has(cursor) && lineage.length < 16) {
+            lineage.push(cursor);
+            cursor = parentById.get(cursor);
+          }
+          if (!cursor || !runSessionIds.has(cursor)) return false;
+          for (const id of lineage) runSessionIds.add(id);
+          return true;
+        } catch {
+          return false;
+        }
+      };
       sseTask = (async () => {
         try {
           for await (const event of streamSseResilient(
@@ -4920,6 +4955,13 @@ var OpenCodeAgentAdapter = class {
             }
             sink.emitRaw(raw);
             const eventType = typeof payload?.type === "string" ? String(payload.type) : event.event;
+            if (eventType === "session.created" || eventType === "session.updated") {
+              const properties = payload.properties;
+              const info = properties?.info;
+              if (info && typeof info.id === "string" && typeof info.parentID === "string" && runSessionIds.has(info.parentID)) {
+                runSessionIds.add(info.id);
+              }
+            }
             if (eventType === "message.updated") {
               const properties = payload.properties;
               const info = properties?.info;
@@ -4960,7 +5002,8 @@ var OpenCodeAgentAdapter = class {
             }
             if (eventType === "permission.asked") {
               const properties = payload.properties;
-              if (properties && typeof properties.sessionID === "string" && properties.sessionID === sessionId) {
+              if (properties && typeof properties.sessionID === "string" && await resolveRunSession(properties.sessionID)) {
+                const askingSessionId = properties.sessionID;
                 const permissionEvent = createOpenCodePermissionEvent(
                   request,
                   raw,
@@ -4971,7 +5014,7 @@ var OpenCodeAgentAdapter = class {
                   decision: "allow"
                 };
                 await fetchJson(
-                  `${runtime.baseUrl}/session/${sessionId}/permissions/${permissionEvent.requestId}`,
+                  `${runtime.baseUrl}/session/${askingSessionId}/permissions/${permissionEvent.requestId}`,
                   {
                     method: "POST",
                     headers: {

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   Agent,
   agentboxRoot,
   getAgentLayout
-} from "./chunk-JYI7MRGO.js";
+} from "./chunk-IEQM5L4K.js";
 import {
   ProviderLogAssembler,
   createNormalizedEvent,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentbox-sdk",
-  "version": "0.1.500",
+  "version": "0.1.502",
   "description": "Swappable coding agents and sandbox providers for Bun and TypeScript.",
   "license": "MIT",
   "repository": {