agentbox-sdk 0.1.502 → 0.1.508

package/dist/{chunk-AVXJMCBC.js → chunk-MTQ2S46C.js}

@@ -156,6 +156,27 @@ import { setTimeout as sleepTimeout } from "timers/promises";
 async function sleep(ms) {
   await sleepTimeout(ms);
 }
+async function getAvailablePort(host = "127.0.0.1") {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer();
+    server.once("error", reject);
+    server.listen(0, host, () => {
+      const address = server.address();
+      if (!address || typeof address === "string") {
+        reject(new Error("Could not determine an available port."));
+        return;
+      }
+      const { port } = address;
+      server.close((error) => {
+        if (error) {
+          reject(error);
+          return;
+        }
+        resolve(port);
+      });
+    });
+  });
+}
 async function waitFor(predicate, options) {
   const timeoutMs = options?.timeoutMs ?? 15e3;
   const intervalMs = options?.intervalMs ?? 250;
@@ -270,6 +291,7 @@ export {
   debugRelay,
   time,
   sleep,
+  getAvailablePort,
   waitFor,
   readStreamAsText,
   readStreamAsBytes,

package/dist/events/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AISDKEvent, S as MessageCompletedEvent, T as MessageInjectedEvent, U as MessageStartedEvent, V as NormalizedAgentEvent, W as NormalizedAgentEventBase, X as NormalizedAgentEventType, a2 as PermissionRequestedEvent, a3 as PermissionResolvedEvent, a4 as RawAgentEvent, a5 as ReasoningDeltaEvent, a7 as RunCancelledEvent, a8 as RunCompletedEvent, a9 as RunErrorEvent, aa as RunStartedEvent, ac as TextDeltaEvent, ae as ToolCallCompletedEvent, af as ToolCallDeltaEvent, ag as ToolCallStartedEvent, aj as createNormalizedEvent, ak as normalizeRawAgentEvent, al as toAISDKEvent, am as toAISDKStream } from '../types-1seasIwq.js';
+export { A as AISDKEvent, U as MessageCompletedEvent, V as MessageInjectedEvent, W as MessageStartedEvent, X as NativePlanEvent, Y as NormalizedAgentEvent, Z as NormalizedAgentEventBase, _ as NormalizedAgentEventType, a5 as PermissionRequestedEvent, a6 as PermissionResolvedEvent, a7 as RawAgentEvent, a8 as ReasoningDeltaEvent, aa as RunCancelledEvent, ab as RunCompletedEvent, ac as RunErrorEvent, ad as RunStartedEvent, af as TextDeltaEvent, ah as ToolCallCompletedEvent, ai as ToolCallDeltaEvent, aj as ToolCallStartedEvent, am as createNormalizedEvent, an as normalizeRawAgentEvent, ao as toAISDKEvent, ap as toAISDKStream } from '../types-BQ-_AUfY.js';
 import { AgentProvider } from '../enums.js';
 import '../Sandbox-DcKAU-E3.js';
 import 'e2b';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AttachedRun, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexModelProviderConfig, N as CodexProviderOptions, O as DataContent, P as EmbeddedSkillConfig, Q as FilePart, R as ImagePart, S as MessageCompletedEvent, T as MessageInjectedEvent, U as MessageStartedEvent, V as NormalizedAgentEvent, W as NormalizedAgentEventBase, X as NormalizedAgentEventType, Y as OpenCodeAgentOptions, Z as OpenCodePluginConfig, _ as OpenCodePluginEvent, $ as OpenCodePluginHookConfig, a0 as OpenCodeProviderOptions, a1 as OpenRouterPlugin, a2 as PermissionRequestedEvent, a3 as PermissionResolvedEvent, a4 as RawAgentEvent, a5 as ReasoningDeltaEvent, a6 as RepoSkillConfig, a7 as RunCancelledEvent, a8 as RunCompletedEvent, a9 as RunErrorEvent, aa as RunStartedEvent, ab as SetupLayout, ac as TextDeltaEvent, ad as TextPart, ae as ToolCallCompletedEvent, af as ToolCallDeltaEvent, ag as ToolCallStartedEvent, ah as UserContent, ai as UserContentPart, aj as createNormalizedEvent, ak as normalizeRawAgentEvent, al as toAISDKEvent, am as toAISDKStream } from './types-1seasIwq.js';
-export { AGENT_RESERVED_PORTS, Agent, agentboxRoot, collectAllAgentReservedPorts, getAgentLayout } from './agents/index.js';
+export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AgentUserAnswer, z as AgentUserQuestion, B as AttachedRun, C as ClaudeCodeAgentOptions, D as ClaudeCodeHookConfig, E as ClaudeCodeHookEvent, F as ClaudeCodeHookHandler, G as ClaudeCodeHookMatcherGroup, H as ClaudeCodeHooksConfig, I as ClaudeCodeProviderOptions, J as CodexAgentOptions, K as CodexCommandHook, L as CodexHookEvent, M as CodexHookMatcherGroup, N as CodexHooksConfig, O as CodexModelProviderConfig, P as CodexProviderOptions, Q as DataContent, R as EmbeddedSkillConfig, S as FilePart, T as ImagePart, U as MessageCompletedEvent, V as MessageInjectedEvent, W as MessageStartedEvent, X as NativePlanEvent, Y as NormalizedAgentEvent, Z as NormalizedAgentEventBase, _ as NormalizedAgentEventType, $ as OpenCodeAgentOptions, a0 as OpenCodePluginConfig, a1 as OpenCodePluginEvent, a2 as OpenCodePluginHookConfig, a3 as OpenCodeProviderOptions, a4 as OpenRouterPlugin, a5 as PermissionRequestedEvent, a6 as PermissionResolvedEvent, a7 as RawAgentEvent, a8 as ReasoningDeltaEvent, a9 as RepoSkillConfig, aa as RunCancelledEvent, ab as RunCompletedEvent, ac as RunErrorEvent, ad as RunStartedEvent, ae as SetupLayout, af as TextDeltaEvent, ag as TextPart, ah as ToolCallCompletedEvent, ai as ToolCallDeltaEvent, aj as ToolCallStartedEvent, ak as UserContent, al as UserContentPart, am as createNormalizedEvent, an as normalizeRawAgentEvent, ao as toAISDKEvent, ap as toAISDKStream } from './types-BQ-_AUfY.js';
+export { AGENT_RESERVED_PORTS, Agent, HarnessCapabilities, HarnessCommand, agentboxRoot, collectAllAgentReservedPorts, getAgentLayout, harnessCapabilities, resolveHarnessCommand } from './agents/index.js';
 export { A as AsyncCommandHandle, C as CommandEvent, a as CommandOptions, b as CommandResult, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, G as GitCloneOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, g as SandboxDescriptor, h as SandboxListOptions, i as SandboxOptions, j as SandboxOptionsBase, k as SandboxOptionsMap, l as SandboxProviderName, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, T as TarballEntry, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from './Sandbox-DcKAU-E3.js';
 export { SandboxAdapter, buildGitCloneCommand } from './sandboxes/index.js';
 export { ProviderLogAssembler } from './events/index.js';

package/dist/index.js

@@ -1,8 +1,10 @@
 import {
   Agent,
   agentboxRoot,
-  getAgentLayout
-} from "./chunk-IEQM5L4K.js";
+  getAgentLayout,
+  harnessCapabilities,
+  resolveHarnessCommand
+} from "./chunk-BO4J4KSM.js";
 import {
   ProviderLogAssembler,
   createNormalizedEvent,
@@ -14,11 +16,11 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "./chunk-TUBBWIOM.js";
+} from "./chunk-76AFK7XN.js";
 import {
   AGENT_RESERVED_PORTS,
   collectAllAgentReservedPorts
-} from "./chunk-AVXJMCBC.js";
+} from "./chunk-MTQ2S46C.js";
 import "./chunk-NSJM57Z4.js";
 import {
   AgentProvider,
@@ -37,7 +39,9 @@ export {
   collectAllAgentReservedPorts,
   createNormalizedEvent,
   getAgentLayout,
+  harnessCapabilities,
   normalizeRawAgentEvent,
+  resolveHarnessCommand,
   toAISDKEvent,
   toAISDKStream
 };

package/dist/sandboxes/index.js

@@ -2,8 +2,8 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "../chunk-TUBBWIOM.js";
-import "../chunk-AVXJMCBC.js";
+} from "../chunk-76AFK7XN.js";
+import "../chunk-MTQ2S46C.js";
 import "../chunk-NSJM57Z4.js";
 import {
   SandboxProvider

package/dist/{types-1seasIwq.d.ts → types-BQ-_AUfY.d.ts}

@@ -9,7 +9,7 @@ interface RawAgentEvent<TPayload = unknown> {
     payload: TPayload;
 }
 
-type NormalizedAgentEventType = "run.started" | "message.started" | "message.injected" | "text.delta" | "reasoning.delta" | "tool.call.started" | "tool.call.delta" | "tool.call.completed" | "permission.requested" | "permission.resolved" | "message.completed" | "run.completed" | "run.cancelled" | "run.error";
+type NormalizedAgentEventType = "plan.completed" | "run.started" | "message.started" | "message.injected" | "text.delta" | "reasoning.delta" | "tool.call.started" | "tool.call.delta" | "tool.call.completed" | "permission.requested" | "permission.resolved" | "message.completed" | "run.completed" | "run.cancelled" | "run.error";
 interface NormalizedAgentEventBase {
     provider: string;
     runId: string;
@@ -72,6 +72,8 @@ interface PermissionRequestedEvent extends NormalizedAgentEventBase {
     type: "permission.requested";
     requestId: string;
     kind: AgentPermissionKind;
+    toolName?: string;
+    questions?: AgentUserQuestion[];
     title?: string;
     message?: string;
     input?: unknown;
@@ -82,6 +84,7 @@ interface PermissionResolvedEvent extends NormalizedAgentEventBase {
     requestId: string;
     decision: AgentPermissionDecision;
     remember?: boolean;
+    answers?: AgentUserAnswer[];
 }
 interface MessageCompletedEvent extends NormalizedAgentEventBase {
     type: "message.completed";
@@ -105,7 +108,11 @@ interface RunErrorEvent extends NormalizedAgentEventBase {
     type: "run.error";
     error: string;
 }
-type NormalizedAgentEvent = RunStartedEvent | MessageStartedEvent | MessageInjectedEvent | TextDeltaEvent | ReasoningDeltaEvent | ToolCallStartedEvent | ToolCallDeltaEvent | ToolCallCompletedEvent | PermissionRequestedEvent | PermissionResolvedEvent | MessageCompletedEvent | RunCompletedEvent | RunCancelledEvent | RunErrorEvent;
+interface NativePlanEvent extends NormalizedAgentEventBase {
+    type: "plan.completed";
+    text: string;
+}
+type NormalizedAgentEvent = NativePlanEvent | RunStartedEvent | MessageStartedEvent | MessageInjectedEvent | TextDeltaEvent | ReasoningDeltaEvent | ToolCallStartedEvent | ToolCallDeltaEvent | ToolCallCompletedEvent | PermissionRequestedEvent | PermissionResolvedEvent | MessageCompletedEvent | RunCompletedEvent | RunCancelledEvent | RunErrorEvent;
 declare function createNormalizedEvent<TType extends NormalizedAgentEventType>(type: TType, base: Omit<NormalizedAgentEventBase, "type" | "timestamp"> & {
     timestamp?: string;
 }, extra?: Record<string, unknown>): NormalizedAgentEvent;
@@ -371,8 +378,7 @@ interface AgentRunConfig {
      * Provider mapping:
      * - claude-code: `query({ resume, resumeSessionAt, forkSession: true })`
      * - opencode: `POST /session/:forkSessionId/fork { messageID }`
-     * - codex: emulated via `thread/fork` + `thread/rollback` (no native
-     *   message-level fork in the codex app-server)
+     * - codex: `thread/fork { threadId, lastTurnId: forkAtMessageId }`
      */
     forkSessionId?: string;
     /**
@@ -383,17 +389,53 @@ interface AgentRunConfig {
      */
     forkAtMessageId?: string;
     reasoning?: AgentReasoningEffort;
+    /** Native collaboration mode; independent of tool permissions. */
+    mode?: "plan" | "default";
+    /** Native goal objective. Unsupported harnesses reject it. */
+    goal?: string;
 }
 type AgentApprovalMode = "auto" | "interactive";
-type AgentPermissionKind = "bash" | "edit" | "tool" | "network" | "file-change" | "unknown";
+type AgentPermissionKind = "bash" | "edit" | "tool" | "network" | "file-change" | "question" | "plan" | "unknown";
 type AgentPermissionDecision = "allow" | "deny";
+interface AgentUserQuestion {
+    id: string;
+    question: string;
+    header?: string;
+    options: Array<{
+        label: string;
+        description?: string;
+    }>;
+    multiple: boolean;
+    allowCustom: boolean;
+}
+interface AgentUserAnswer {
+    questionId: string;
+    values: string[];
+}
 interface AgentPermissionResponse {
     requestId: string;
     decision: AgentPermissionDecision;
     remember?: boolean;
+    /** Required when allowing a question request. Never changes tool arguments. */
+    answers?: AgentUserAnswer[];
 }
 interface AgentOptionsBase {
     sandbox?: Sandbox;
+    /** Use the host harness's own settings and built-in prompt without generating
+     * AgentBox configuration, skills, hooks, plugins, or MCP definitions.
+     * Available only for host execution. The default remains "managed".
+     */
+    configuration?: "managed" | "native";
+    /** Private, persistent host directory for generated configuration and sessions.
+     * Use one directory per execution environment. Must be absolute; unavailable
+     * for sandbox-backed agents, whose state belongs inside the sandbox.
+     */
+    stateDirectory?: string;
+    /** Host process ownership. Use "inherited" only when the caller supervises
+     * an existing POSIX process group and will terminate its descendants.
+     * The default "owned" gives each native runtime its own process group.
+     */
+    processGroup?: "owned" | "inherited";
     cwd?: string;
     env?: Record<string, string>;
     /**
@@ -426,12 +468,22 @@ interface AgentOptionsBase {
      */
     customHeaders?: Record<string, string>;
     approvalMode?: AgentApprovalMode;
+    /** Route questions and plan approvals to the caller even with automatic tool approval. */
+    interactiveQuestions?: boolean;
+    /** Explicitly bypass the harness tool sandbox; does not answer user questions. */
+    fullAccess?: boolean;
     mcps?: AgentMcpConfig[];
     skills?: AgentSkillConfig[];
     subAgents?: AgentSubAgentConfig[];
     commands?: AgentCommandConfig[];
 }
 interface CodexProviderOptions {
+    /** Managed host execution defaults to read-only; native configuration uses the CLI's settings. */
+    sandboxMode?: "read-only" | "workspace-write" | "danger-full-access";
+    /** Additional task worktrees permitted by native Codex's write sandbox. */
+    writableRoots?: string[];
+    /** Network access for an explicit host workspace-write policy; defaults to false. */
+    networkAccess?: boolean;
     binary?: string;
     env?: Record<string, string>;
     brokerEndpoint?: string;
@@ -730,4 +782,4 @@ interface AgentProviderAdapter<P extends AgentProviderName = AgentProviderName>
     attachSendMessage(request: AgentAttachRequest<P>, content: UserContent): Promise<void>;
 }
 
-export { type OpenCodePluginHookConfig as $, type AISDKEvent as A, type ClaudeCodeHookEvent as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookHandler as D, type ClaudeCodeHookMatcherGroup as E, type ClaudeCodeHooksConfig as F, type ClaudeCodeProviderOptions as G, type CodexAgentOptions as H, type CodexCommandHook as I, type CodexHookEvent as J, type CodexHookMatcherGroup as K, type CodexHooksConfig as L, type CodexModelProviderConfig as M, type CodexProviderOptions as N, type DataContent as O, type EmbeddedSkillConfig as P, type FilePart as Q, type ImagePart as R, type MessageCompletedEvent as S, type MessageInjectedEvent as T, type MessageStartedEvent as U, type NormalizedAgentEvent as V, type NormalizedAgentEventBase as W, type NormalizedAgentEventType as X, type OpenCodeAgentOptions as Y, type OpenCodePluginConfig as Z, type OpenCodePluginEvent as _, type AgentApprovalMode as a, type OpenCodeProviderOptions as a0, type OpenRouterPlugin as a1, type PermissionRequestedEvent as a2, type PermissionResolvedEvent as a3, type RawAgentEvent as a4, type ReasoningDeltaEvent as a5, type RepoSkillConfig as a6, type RunCancelledEvent as a7, type RunCompletedEvent as a8, type RunErrorEvent as a9, type RunStartedEvent as aa, type SetupLayout as ab, type TextDeltaEvent as ac, type TextPart as ad, type ToolCallCompletedEvent as ae, type ToolCallDeltaEvent as af, type ToolCallStartedEvent as ag, type UserContent as ah, type UserContentPart as ai, createNormalizedEvent as aj, normalizeRawAgentEvent as ak, toAISDKEvent as al, toAISDKStream as am, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AttachedRun as y, type ClaudeCodeHookConfig as z };
+export { type OpenCodeAgentOptions as $, type AISDKEvent as A, type AttachedRun as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookConfig as D, type ClaudeCodeHookEvent as E, type ClaudeCodeHookHandler as F, type ClaudeCodeHookMatcherGroup as G, type ClaudeCodeHooksConfig as H, type ClaudeCodeProviderOptions as I, type CodexAgentOptions as J, type CodexCommandHook as K, type CodexHookEvent as L, type CodexHookMatcherGroup as M, type CodexHooksConfig as N, type CodexModelProviderConfig as O, type CodexProviderOptions as P, type DataContent as Q, type EmbeddedSkillConfig as R, type FilePart as S, type ImagePart as T, type MessageCompletedEvent as U, type MessageInjectedEvent as V, type MessageStartedEvent as W, type NativePlanEvent as X, type NormalizedAgentEvent as Y, type NormalizedAgentEventBase as Z, type NormalizedAgentEventType as _, type AgentApprovalMode as a, type OpenCodePluginConfig as a0, type OpenCodePluginEvent as a1, type OpenCodePluginHookConfig as a2, type OpenCodeProviderOptions as a3, type OpenRouterPlugin as a4, type PermissionRequestedEvent as a5, type PermissionResolvedEvent as a6, type RawAgentEvent as a7, type ReasoningDeltaEvent as a8, type RepoSkillConfig as a9, type RunCancelledEvent as aa, type RunCompletedEvent as ab, type RunErrorEvent as ac, type RunStartedEvent as ad, type SetupLayout as ae, type TextDeltaEvent as af, type TextPart as ag, type ToolCallCompletedEvent as ah, type ToolCallDeltaEvent as ai, type ToolCallStartedEvent as aj, type UserContent as ak, type UserContentPart as al, createNormalizedEvent as am, normalizeRawAgentEvent as an, toAISDKEvent as ao, toAISDKStream as ap, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AgentUserAnswer as y, type AgentUserQuestion as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentbox-sdk",
-  "version": "0.1.502",
+  "version": "0.1.508",
   "description": "Swappable coding agents and sandbox providers for Bun and TypeScript.",
   "license": "MIT",
   "repository": {
@@ -42,6 +42,7 @@
   "scripts": {
     "dev": "tsup src/index.ts src/enums.ts src/agents/index.ts src/sandboxes/index.ts src/events/index.ts src/cli.ts --format esm --dts --clean --watch",
     "build": "tsup src/index.ts src/enums.ts src/agents/index.ts src/sandboxes/index.ts src/events/index.ts src/cli.ts --format esm --dts --clean",
+    "prepack": "npm run build",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --max-warnings=0",
     "lint:fix": "eslint . --fix",
@@ -58,6 +59,7 @@
     "bun": ">=1.1.0"
   },
   "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "0.2.141",
     "@daytonaio/sdk": "^0.171.0",
     "@types/debug": "^4.1.13",
     "@vercel/sandbox": "2.0.0-beta.13",
@@ -67,10 +69,10 @@
     "eventsource-parser": "^3.0.6",
     "modal": "^0.7.4",
     "tar-stream": "^3.1.8",
-    "ws": "^8.20.0"
+    "ws": "^8.20.0",
+    "zod": "4.3.6"
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.123",
     "@eslint/js": "^10.0.1",
     "@types/dockerode": "^3.3.42",
     "@types/node": "^25.5.2",