agentbox-sdk 0.1.503 → 0.1.511

package/dist/{chunk-AVXJMCBC.js → chunk-MTQ2S46C.js}

@@ -156,6 +156,27 @@ import { setTimeout as sleepTimeout } from "timers/promises";
 async function sleep(ms) {
   await sleepTimeout(ms);
 }
+async function getAvailablePort(host = "127.0.0.1") {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer();
+    server.once("error", reject);
+    server.listen(0, host, () => {
+      const address = server.address();
+      if (!address || typeof address === "string") {
+        reject(new Error("Could not determine an available port."));
+        return;
+      }
+      const { port } = address;
+      server.close((error) => {
+        if (error) {
+          reject(error);
+          return;
+        }
+        resolve(port);
+      });
+    });
+  });
+}
 async function waitFor(predicate, options) {
   const timeoutMs = options?.timeoutMs ?? 15e3;
   const intervalMs = options?.intervalMs ?? 250;
@@ -270,6 +291,7 @@ export {
   debugRelay,
   time,
   sleep,
+  getAvailablePort,
   waitFor,
   readStreamAsText,
   readStreamAsBytes,

package/dist/events/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AISDKEvent, S as MessageCompletedEvent, T as MessageInjectedEvent, U as MessageStartedEvent, V as NormalizedAgentEvent, W as NormalizedAgentEventBase, X as NormalizedAgentEventType, a2 as PermissionRequestedEvent, a3 as PermissionResolvedEvent, a4 as RawAgentEvent, a5 as ReasoningDeltaEvent, a7 as RunCancelledEvent, a8 as RunCompletedEvent, a9 as RunErrorEvent, aa as RunStartedEvent, ac as TextDeltaEvent, ae as ToolCallCompletedEvent, af as ToolCallDeltaEvent, ag as ToolCallStartedEvent, aj as createNormalizedEvent, ak as normalizeRawAgentEvent, al as toAISDKEvent, am as toAISDKStream } from '../types-3VRJIiW0.js';
+export { A as AISDKEvent, C as BackgroundTask, D as BackgroundTasksEvent, W as MessageCompletedEvent, X as MessageInjectedEvent, Y as MessageStartedEvent, Z as NativePlanEvent, _ as NormalizedAgentEvent, $ as NormalizedAgentEventBase, a0 as NormalizedAgentEventType, a7 as PermissionRequestedEvent, a8 as PermissionResolvedEvent, a9 as RawAgentEvent, aa as ReasoningDeltaEvent, ac as RunCancelledEvent, ad as RunCompletedEvent, ae as RunErrorEvent, af as RunStartedEvent, ah as TextDeltaEvent, aj as ToolCallCompletedEvent, ak as ToolCallDeltaEvent, al as ToolCallStartedEvent, ao as createNormalizedEvent, ap as normalizeRawAgentEvent, aq as toAISDKEvent, ar as toAISDKStream } from '../types-B4yy80AJ.js';
 import { AgentProvider } from '../enums.js';
 import '../Sandbox-DcKAU-E3.js';
 import 'e2b';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AttachedRun, C as ClaudeCodeAgentOptions, z as ClaudeCodeHookConfig, B as ClaudeCodeHookEvent, D as ClaudeCodeHookHandler, E as ClaudeCodeHookMatcherGroup, F as ClaudeCodeHooksConfig, G as ClaudeCodeProviderOptions, H as CodexAgentOptions, I as CodexCommandHook, J as CodexHookEvent, K as CodexHookMatcherGroup, L as CodexHooksConfig, M as CodexModelProviderConfig, N as CodexProviderOptions, O as DataContent, P as EmbeddedSkillConfig, Q as FilePart, R as ImagePart, S as MessageCompletedEvent, T as MessageInjectedEvent, U as MessageStartedEvent, V as NormalizedAgentEvent, W as NormalizedAgentEventBase, X as NormalizedAgentEventType, Y as OpenCodeAgentOptions, Z as OpenCodePluginConfig, _ as OpenCodePluginEvent, $ as OpenCodePluginHookConfig, a0 as OpenCodeProviderOptions, a1 as OpenRouterPlugin, a2 as PermissionRequestedEvent, a3 as PermissionResolvedEvent, a4 as RawAgentEvent, a5 as ReasoningDeltaEvent, a6 as RepoSkillConfig, a7 as RunCancelledEvent, a8 as RunCompletedEvent, a9 as RunErrorEvent, aa as RunStartedEvent, ab as SetupLayout, ac as TextDeltaEvent, ad as TextPart, ae as ToolCallCompletedEvent, af as ToolCallDeltaEvent, ag as ToolCallStartedEvent, ah as UserContent, ai as UserContentPart, aj as createNormalizedEvent, ak as normalizeRawAgentEvent, al as toAISDKEvent, am as toAISDKStream } from './types-3VRJIiW0.js';
-export { AGENT_RESERVED_PORTS, Agent, agentboxRoot, collectAllAgentReservedPorts, getAgentLayout } from './agents/index.js';
+export { A as AISDKEvent, a as AgentApprovalMode, b as AgentAttachRequest, c as AgentCommandConfig, d as AgentCostData, e as AgentExecutionRequest, f as AgentLocalMcpConfig, g as AgentMcpConfig, h as AgentOptions, i as AgentOptionsBase, j as AgentOptionsMap, k as AgentPermissionDecision, l as AgentPermissionKind, m as AgentPermissionResponse, n as AgentProviderAdapter, o as AgentProviderName, p as AgentReasoningEffort, q as AgentRemoteMcpConfig, r as AgentResult, s as AgentRun, t as AgentRunConfig, u as AgentRunSink, v as AgentSetupRequest, w as AgentSkillConfig, x as AgentSubAgentConfig, y as AgentUserAnswer, z as AgentUserQuestion, B as AttachedRun, C as BackgroundTask, D as BackgroundTasksEvent, E as ClaudeCodeAgentOptions, F as ClaudeCodeHookConfig, G as ClaudeCodeHookEvent, H as ClaudeCodeHookHandler, I as ClaudeCodeHookMatcherGroup, J as ClaudeCodeHooksConfig, K as ClaudeCodeProviderOptions, L as CodexAgentOptions, M as CodexCommandHook, N as CodexHookEvent, O as CodexHookMatcherGroup, P as CodexHooksConfig, Q as CodexModelProviderConfig, R as CodexProviderOptions, S as DataContent, T as EmbeddedSkillConfig, U as FilePart, V as ImagePart, W as MessageCompletedEvent, X as MessageInjectedEvent, Y as MessageStartedEvent, Z as NativePlanEvent, _ as NormalizedAgentEvent, $ as NormalizedAgentEventBase, a0 as NormalizedAgentEventType, a1 as OpenCodeAgentOptions, a2 as OpenCodePluginConfig, a3 as OpenCodePluginEvent, a4 as OpenCodePluginHookConfig, a5 as OpenCodeProviderOptions, a6 as OpenRouterPlugin, a7 as PermissionRequestedEvent, a8 as PermissionResolvedEvent, a9 as RawAgentEvent, aa as ReasoningDeltaEvent, ab as RepoSkillConfig, ac as RunCancelledEvent, ad as RunCompletedEvent, ae as RunErrorEvent, af as RunStartedEvent, ag as SetupLayout, ah as TextDeltaEvent, ai as TextPart, aj as ToolCallCompletedEvent, ak as ToolCallDeltaEvent, al as ToolCallStartedEvent, am as UserContent, an as UserContentPart, ao as createNormalizedEvent, ap as normalizeRawAgentEvent, aq as toAISDKEvent, ar as toAISDKStream } from './types-B4yy80AJ.js';
+export { AGENT_RESERVED_PORTS, Agent, HarnessCapabilities, HarnessCommand, agentboxRoot, collectAllAgentReservedPorts, getAgentLayout, harnessCapabilities, resolveHarnessCommand } from './agents/index.js';
 export { A as AsyncCommandHandle, C as CommandEvent, a as CommandOptions, b as CommandResult, D as DaytonaProviderOptions, c as DaytonaSandboxOptions, E as E2bProviderOptions, d as E2bSandboxOptions, G as GitCloneOptions, L as LocalDockerProviderOptions, e as LocalDockerSandboxOptions, M as ModalProviderOptions, f as ModalSandboxOptions, S as Sandbox, g as SandboxDescriptor, h as SandboxListOptions, i as SandboxOptions, j as SandboxOptionsBase, k as SandboxOptionsMap, l as SandboxProviderName, m as SandboxRaw, n as SandboxRawMap, o as SandboxResourceSpec, T as TarballEntry, V as VercelGitSource, p as VercelProviderOptions, q as VercelSandboxOptions } from './Sandbox-DcKAU-E3.js';
 export { SandboxAdapter, buildGitCloneCommand } from './sandboxes/index.js';
 export { ProviderLogAssembler } from './events/index.js';

package/dist/index.js

@@ -1,8 +1,10 @@
 import {
   Agent,
   agentboxRoot,
-  getAgentLayout
-} from "./chunk-34LDITII.js";
+  getAgentLayout,
+  harnessCapabilities,
+  resolveHarnessCommand
+} from "./chunk-G3VEVR6Y.js";
 import {
   ProviderLogAssembler,
   createNormalizedEvent,
@@ -14,11 +16,11 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "./chunk-TUBBWIOM.js";
+} from "./chunk-76AFK7XN.js";
 import {
   AGENT_RESERVED_PORTS,
   collectAllAgentReservedPorts
-} from "./chunk-AVXJMCBC.js";
+} from "./chunk-MTQ2S46C.js";
 import "./chunk-NSJM57Z4.js";
 import {
   AgentProvider,
@@ -37,7 +39,9 @@ export {
   collectAllAgentReservedPorts,
   createNormalizedEvent,
   getAgentLayout,
+  harnessCapabilities,
   normalizeRawAgentEvent,
+  resolveHarnessCommand,
   toAISDKEvent,
   toAISDKStream
 };

package/dist/sandboxes/index.js

@@ -2,8 +2,8 @@ import {
   Sandbox,
   SandboxAdapter,
   buildGitCloneCommand
-} from "../chunk-TUBBWIOM.js";
-import "../chunk-AVXJMCBC.js";
+} from "../chunk-76AFK7XN.js";
+import "../chunk-MTQ2S46C.js";
 import "../chunk-NSJM57Z4.js";
 import {
   SandboxProvider

package/dist/{types-3VRJIiW0.d.ts → types-B4yy80AJ.d.ts}

@@ -9,7 +9,7 @@ interface RawAgentEvent<TPayload = unknown> {
     payload: TPayload;
 }
 
-type NormalizedAgentEventType = "run.started" | "message.started" | "message.injected" | "text.delta" | "reasoning.delta" | "tool.call.started" | "tool.call.delta" | "tool.call.completed" | "permission.requested" | "permission.resolved" | "message.completed" | "run.completed" | "run.cancelled" | "run.error";
+type NormalizedAgentEventType = "plan.completed" | "run.started" | "message.started" | "message.injected" | "text.delta" | "reasoning.delta" | "tool.call.started" | "tool.call.delta" | "tool.call.completed" | "permission.requested" | "permission.resolved" | "message.completed" | "background.tasks" | "run.completed" | "run.cancelled" | "run.error";
 interface NormalizedAgentEventBase {
     provider: string;
     runId: string;
@@ -72,6 +72,8 @@ interface PermissionRequestedEvent extends NormalizedAgentEventBase {
     type: "permission.requested";
     requestId: string;
     kind: AgentPermissionKind;
+    toolName?: string;
+    questions?: AgentUserQuestion[];
     title?: string;
     message?: string;
     input?: unknown;
@@ -82,6 +84,7 @@ interface PermissionResolvedEvent extends NormalizedAgentEventBase {
     requestId: string;
     decision: AgentPermissionDecision;
     remember?: boolean;
+    answers?: AgentUserAnswer[];
 }
 interface MessageCompletedEvent extends NormalizedAgentEventBase {
     type: "message.completed";
@@ -93,6 +96,21 @@ interface MessageCompletedEvent extends NormalizedAgentEventBase {
      */
     messageId?: string;
 }
+/** Work the harness left running past its turn (background shell, monitor,
+ * background subagent, scheduled wakeup). */
+interface BackgroundTask {
+    id: string;
+    /** Harness task type, e.g. `local_bash`, `local_agent`, `scheduled_wakeup`. */
+    type: string;
+    description: string;
+}
+interface BackgroundTasksEvent extends NormalizedAgentEventBase {
+    type: "background.tasks";
+    /** Every live background task after the change (replace semantics). */
+    tasks: BackgroundTask[];
+    /** True once the harness ended its turn and the run stays open only for these tasks. */
+    waiting: boolean;
+}
 interface RunCompletedEvent extends NormalizedAgentEventBase {
     type: "run.completed";
     text?: string;
@@ -105,7 +123,11 @@ interface RunErrorEvent extends NormalizedAgentEventBase {
     type: "run.error";
     error: string;
 }
-type NormalizedAgentEvent = RunStartedEvent | MessageStartedEvent | MessageInjectedEvent | TextDeltaEvent | ReasoningDeltaEvent | ToolCallStartedEvent | ToolCallDeltaEvent | ToolCallCompletedEvent | PermissionRequestedEvent | PermissionResolvedEvent | MessageCompletedEvent | RunCompletedEvent | RunCancelledEvent | RunErrorEvent;
+interface NativePlanEvent extends NormalizedAgentEventBase {
+    type: "plan.completed";
+    text: string;
+}
+type NormalizedAgentEvent = NativePlanEvent | RunStartedEvent | MessageStartedEvent | MessageInjectedEvent | TextDeltaEvent | ReasoningDeltaEvent | ToolCallStartedEvent | ToolCallDeltaEvent | ToolCallCompletedEvent | PermissionRequestedEvent | PermissionResolvedEvent | MessageCompletedEvent | BackgroundTasksEvent | RunCompletedEvent | RunCancelledEvent | RunErrorEvent;
 declare function createNormalizedEvent<TType extends NormalizedAgentEventType>(type: TType, base: Omit<NormalizedAgentEventBase, "type" | "timestamp"> & {
     timestamp?: string;
 }, extra?: Record<string, unknown>): NormalizedAgentEvent;
@@ -382,17 +404,53 @@ interface AgentRunConfig {
      */
     forkAtMessageId?: string;
     reasoning?: AgentReasoningEffort;
+    /** Native collaboration mode; independent of tool permissions. */
+    mode?: "plan" | "default";
+    /** Native goal objective. Unsupported harnesses reject it. */
+    goal?: string;
 }
 type AgentApprovalMode = "auto" | "interactive";
-type AgentPermissionKind = "bash" | "edit" | "tool" | "network" | "file-change" | "unknown";
+type AgentPermissionKind = "bash" | "edit" | "tool" | "network" | "file-change" | "question" | "plan" | "unknown";
 type AgentPermissionDecision = "allow" | "deny";
+interface AgentUserQuestion {
+    id: string;
+    question: string;
+    header?: string;
+    options: Array<{
+        label: string;
+        description?: string;
+    }>;
+    multiple: boolean;
+    allowCustom: boolean;
+}
+interface AgentUserAnswer {
+    questionId: string;
+    values: string[];
+}
 interface AgentPermissionResponse {
     requestId: string;
     decision: AgentPermissionDecision;
     remember?: boolean;
+    /** Required when allowing a question request. Never changes tool arguments. */
+    answers?: AgentUserAnswer[];
 }
 interface AgentOptionsBase {
     sandbox?: Sandbox;
+    /** Use the host harness's own settings and built-in prompt without generating
+     * AgentBox configuration, skills, hooks, plugins, or MCP definitions.
+     * Available only for host execution. The default remains "managed".
+     */
+    configuration?: "managed" | "native";
+    /** Private, persistent host directory for generated configuration and sessions.
+     * Use one directory per execution environment. Must be absolute; unavailable
+     * for sandbox-backed agents, whose state belongs inside the sandbox.
+     */
+    stateDirectory?: string;
+    /** Host process ownership. Use "inherited" only when the caller supervises
+     * an existing POSIX process group and will terminate its descendants.
+     * The default "owned" gives each native runtime its own process group.
+     */
+    processGroup?: "owned" | "inherited";
     cwd?: string;
     env?: Record<string, string>;
     /**
@@ -424,13 +482,37 @@ interface AgentOptionsBase {
      * in particular are subject to upstream support.
      */
     customHeaders?: Record<string, string>;
+    /**
+     * Max time a run may spend waiting, after turn ends, for background work
+     * (background shells, monitors, background subagents, scheduled wakeups)
+     * that will wake the model again. Counted across the whole run — time
+     * spent in follow-up turns does not count — so re-arming a monitor on
+     * every wake-up cannot extend it. Default 30 minutes. `0` restores the
+     * legacy behaviour (settle at the first turn end and abandon background
+     * work); `Infinity` waits forever. On expiry the tasks are stopped
+     * best-effort and the run completes with the last turn's text. Progress
+     * is reported through `background.tasks` events.
+     */
+    backgroundTaskTimeoutMs?: number;
     approvalMode?: AgentApprovalMode;
+    /** Route questions and plan approvals to the caller even with automatic tool approval. */
+    interactiveQuestions?: boolean;
+    /** Explicitly bypass the harness tool sandbox; does not answer user questions. */
+    fullAccess?: boolean;
     mcps?: AgentMcpConfig[];
     skills?: AgentSkillConfig[];
     subAgents?: AgentSubAgentConfig[];
     commands?: AgentCommandConfig[];
 }
 interface CodexProviderOptions {
+    /** Explicit policy for new, resumed, and forked native sessions. */
+    approvalPolicy?: "untrusted" | "on-request" | "never";
+    /** Managed host execution defaults to read-only; native configuration uses the CLI's settings. */
+    sandboxMode?: "read-only" | "workspace-write" | "danger-full-access";
+    /** Additional task worktrees permitted by native Codex's write sandbox. */
+    writableRoots?: string[];
+    /** Network access for an explicit host workspace-write policy; defaults to false. */
+    networkAccess?: boolean;
     binary?: string;
     env?: Record<string, string>;
     brokerEndpoint?: string;
@@ -729,4 +811,4 @@ interface AgentProviderAdapter<P extends AgentProviderName = AgentProviderName>
     attachSendMessage(request: AgentAttachRequest<P>, content: UserContent): Promise<void>;
 }
 
-export { type OpenCodePluginHookConfig as $, type AISDKEvent as A, type ClaudeCodeHookEvent as B, type ClaudeCodeAgentOptions as C, type ClaudeCodeHookHandler as D, type ClaudeCodeHookMatcherGroup as E, type ClaudeCodeHooksConfig as F, type ClaudeCodeProviderOptions as G, type CodexAgentOptions as H, type CodexCommandHook as I, type CodexHookEvent as J, type CodexHookMatcherGroup as K, type CodexHooksConfig as L, type CodexModelProviderConfig as M, type CodexProviderOptions as N, type DataContent as O, type EmbeddedSkillConfig as P, type FilePart as Q, type ImagePart as R, type MessageCompletedEvent as S, type MessageInjectedEvent as T, type MessageStartedEvent as U, type NormalizedAgentEvent as V, type NormalizedAgentEventBase as W, type NormalizedAgentEventType as X, type OpenCodeAgentOptions as Y, type OpenCodePluginConfig as Z, type OpenCodePluginEvent as _, type AgentApprovalMode as a, type OpenCodeProviderOptions as a0, type OpenRouterPlugin as a1, type PermissionRequestedEvent as a2, type PermissionResolvedEvent as a3, type RawAgentEvent as a4, type ReasoningDeltaEvent as a5, type RepoSkillConfig as a6, type RunCancelledEvent as a7, type RunCompletedEvent as a8, type RunErrorEvent as a9, type RunStartedEvent as aa, type SetupLayout as ab, type TextDeltaEvent as ac, type TextPart as ad, type ToolCallCompletedEvent as ae, type ToolCallDeltaEvent as af, type ToolCallStartedEvent as ag, type UserContent as ah, type UserContentPart as ai, createNormalizedEvent as aj, normalizeRawAgentEvent as ak, toAISDKEvent as al, toAISDKStream as am, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AttachedRun as y, type ClaudeCodeHookConfig as z };
+export { type NormalizedAgentEventBase as $, type AISDKEvent as A, type AttachedRun as B, type BackgroundTask as C, type BackgroundTasksEvent as D, type ClaudeCodeAgentOptions as E, type ClaudeCodeHookConfig as F, type ClaudeCodeHookEvent as G, type ClaudeCodeHookHandler as H, type ClaudeCodeHookMatcherGroup as I, type ClaudeCodeHooksConfig as J, type ClaudeCodeProviderOptions as K, type CodexAgentOptions as L, type CodexCommandHook as M, type CodexHookEvent as N, type CodexHookMatcherGroup as O, type CodexHooksConfig as P, type CodexModelProviderConfig as Q, type CodexProviderOptions as R, type DataContent as S, type EmbeddedSkillConfig as T, type FilePart as U, type ImagePart as V, type MessageCompletedEvent as W, type MessageInjectedEvent as X, type MessageStartedEvent as Y, type NativePlanEvent as Z, type NormalizedAgentEvent as _, type AgentApprovalMode as a, type NormalizedAgentEventType as a0, type OpenCodeAgentOptions as a1, type OpenCodePluginConfig as a2, type OpenCodePluginEvent as a3, type OpenCodePluginHookConfig as a4, type OpenCodeProviderOptions as a5, type OpenRouterPlugin as a6, type PermissionRequestedEvent as a7, type PermissionResolvedEvent as a8, type RawAgentEvent as a9, type ReasoningDeltaEvent as aa, type RepoSkillConfig as ab, type RunCancelledEvent as ac, type RunCompletedEvent as ad, type RunErrorEvent as ae, type RunStartedEvent as af, type SetupLayout as ag, type TextDeltaEvent as ah, type TextPart as ai, type ToolCallCompletedEvent as aj, type ToolCallDeltaEvent as ak, type ToolCallStartedEvent as al, type UserContent as am, type UserContentPart as an, createNormalizedEvent as ao, normalizeRawAgentEvent as ap, toAISDKEvent as aq, toAISDKStream as ar, type AgentAttachRequest as b, type AgentCommandConfig as c, type AgentCostData as d, type AgentExecutionRequest as e, type AgentLocalMcpConfig as f, type AgentMcpConfig as g, type AgentOptions as h, type AgentOptionsBase as i, type AgentOptionsMap as j, type AgentPermissionDecision as k, type AgentPermissionKind as l, type AgentPermissionResponse as m, type AgentProviderAdapter as n, type AgentProviderName as o, type AgentReasoningEffort as p, type AgentRemoteMcpConfig as q, type AgentResult as r, type AgentRun as s, type AgentRunConfig as t, type AgentRunSink as u, type AgentSetupRequest as v, type AgentSkillConfig as w, type AgentSubAgentConfig as x, type AgentUserAnswer as y, type AgentUserQuestion as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentbox-sdk",
-  "version": "0.1.503",
+  "version": "0.1.511",
   "description": "Swappable coding agents and sandbox providers for Bun and TypeScript.",
   "license": "MIT",
   "repository": {
@@ -42,6 +42,7 @@
   "scripts": {
     "dev": "tsup src/index.ts src/enums.ts src/agents/index.ts src/sandboxes/index.ts src/events/index.ts src/cli.ts --format esm --dts --clean --watch",
     "build": "tsup src/index.ts src/enums.ts src/agents/index.ts src/sandboxes/index.ts src/events/index.ts src/cli.ts --format esm --dts --clean",
+    "prepack": "npm run build",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --max-warnings=0",
     "lint:fix": "eslint . --fix",
@@ -58,6 +59,7 @@
     "bun": ">=1.1.0"
   },
   "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "0.2.141",
     "@daytonaio/sdk": "^0.171.0",
     "@types/debug": "^4.1.13",
     "@vercel/sandbox": "2.0.0-beta.13",
@@ -67,10 +69,10 @@
     "eventsource-parser": "^3.0.6",
     "modal": "^0.7.4",
     "tar-stream": "^3.1.8",
-    "ws": "^8.20.0"
+    "ws": "^8.20.0",
+    "zod": "4.3.6"
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.123",
     "@eslint/js": "^10.0.1",
     "@types/dockerode": "^3.3.42",
     "@types/node": "^25.5.2",