managed-deepagents 0.5.4-dev.12 → 0.5.4-dev.13

package/dist/runtime/setup-script.js

@@ -0,0 +1,49 @@
+import { executeWithStreamRetry } from "./sandbox-stream-retry.js";
+/** Absolute path the provisioning script is uploaded to inside the sandbox. */
+const SETUP_REMOTE_PATH = "/tmp/mda-setup.sh";
+/**
+ * Provision a freshly created sandbox by running `setup.sh` inside it. Reused
+ * sandboxes never reach this path, so the script runs once per new sandbox.
+ *
+ * When the backend supports file transfer, the script is uploaded and executed
+ * by path; otherwise it is run inline (see {@link runSetupScriptInline}).
+ */
+export async function runSetupScript(backend, script) {
+    const sandboxId = "id" in backend && typeof backend.id === "string"
+        ? backend.id
+        : null;
+    if (typeof backend.uploadFiles === "function") {
+        console.info(`[mda] sandbox setup.sh: uploading script ` +
+            `sandbox_id=${JSON.stringify(sandboxId)} path=${SETUP_REMOTE_PATH}`);
+        await backend.uploadFiles([
+            [SETUP_REMOTE_PATH, new TextEncoder().encode(script)],
+        ]);
+        console.info(`[mda] sandbox setup.sh: starting execute ` +
+            `sandbox_id=${JSON.stringify(sandboxId)} ` +
+            `cmd=${JSON.stringify(`bash ${SETUP_REMOTE_PATH}`)}`);
+        // Fresh sandboxes often reject the first websocket execute; retry in place.
+        assertSetupSucceeded(await executeWithStreamRetry((command) => backend.execute(command), `bash ${SETUP_REMOTE_PATH}`, { label: "setup.sh" }));
+        return;
+    }
+    console.info(`[mda] sandbox setup.sh: starting inline execute ` +
+        `sandbox_id=${JSON.stringify(sandboxId)}`);
+    await runSetupScriptInline(backend, script);
+}
+/**
+ * Run `setup.sh` by piping its contents straight to the backend's shell.
+ *
+ * Kept as a compatibility fallback for sandbox backend implementations that
+ * conform to the execute surface but do not expose upload support.
+ */
+export async function runSetupScriptInline(backend, script) {
+    assertSetupSucceeded(await executeWithStreamRetry((command) => backend.execute(command), script, {
+        label: "setup.sh (inline)",
+    }));
+}
+export function assertSetupSucceeded(result) {
+    if (typeof result.exitCode === "number" && result.exitCode !== 0) {
+        const detail = (result.output ?? "").trim();
+        throw new Error(`sandbox setup.sh failed with exit code ${result.exitCode}${detail ? `: ${detail}` : ""}`);
+    }
+}
+//# sourceMappingURL=setup-script.js.map

package/dist/runtime/setup-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-script.js","sourceRoot":"","sources":["../../src/runtime/setup-script.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAiC,EACjC,MAAc;IAEd,MAAM,SAAS,GACb,IAAI,IAAI,OAAO,IAAI,OAAQ,OAA4B,CAAC,EAAE,KAAK,QAAQ;QACrE,CAAC,CAAE,OAA0B,CAAC,EAAE;QAChC,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CACV,2CAA2C;YACzC,cAAc,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,iBAAiB,EAAE,CACtE,CAAC;QACF,MAAM,OAAO,CAAC,WAAW,CAAC;YACxB,CAAC,iBAAiB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CACV,2CAA2C;YACzC,cAAc,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG;YAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,iBAAiB,EAAE,CAAC,EAAE,CACvD,CAAC;QACF,4EAA4E;QAC5E,oBAAoB,CAClB,MAAM,sBAAsB,CAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EACrC,QAAQ,iBAAiB,EAAE,EAC3B,EAAE,KAAK,EAAE,UAAU,EAAE,CACtB,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CACV,kDAAkD;QAChD,cAAc,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAC5C,CAAC;IACF,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAiC,EACjC,MAAc;IAEd,oBAAoB,CAClB,MAAM,sBAAsB,CAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EACrC,MAAM,EACN;QACE,KAAK,EAAE,mBAAmB;KAC3B,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAoD;IAEpD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/runtime/types.d.ts

@@ -45,6 +45,11 @@ export interface ManagedAgentOptions {
     hasSkills?: boolean;
     /** The `sandbox/index.ts` declaration, if the project configures a sandbox. */
     sandbox?: SandboxDefinition;
+    /**
+     * Contents of `sandbox/setup.sh`, embedded by the CLI. It runs exactly once,
+     * the first time a sandbox is provisioned for a given scope.
+     */
+    setupScript?: string;
     /**
      * The connectors discovered under `connectors/`, already validated by
      * `collectConnectors`. Each connector's `tools` hook (if any) contributes

package/dist/runtime/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB"}

package/dist/sandbox.d.ts

@@ -3,7 +3,7 @@
  *
  * A Managed Deep Agent declares its execution environment in `sandbox/index.ts`
  * with `defineSandbox`. MDA owns how the sandbox is *resolved*: construction,
- * per-thread reuse, deploy-time snapshot bake from `setup.sh`, and lifecycle/TTL.
+ * scoped reuse across turns, the provisioning `setup.sh`, and lifecycle/TTL.
  *
  * @example
  * ```ts
@@ -14,14 +14,15 @@
  * ```
  */
 import type { LangSmithSandbox } from "deepagents";
+/** Reuse boundary for a managed sandbox. Defaults to `"thread"`. */
+export type SandboxScope = "thread" | "agent";
 /**
  * Provider options MDA owns and developers must not set directly.
  *
  * MDA owns sandbox identity and managed runtime safety knobs. Use
- * `snapshotName`, `snapshotId`, or `dockerImage` when an explicit LangSmith
- * bake base is needed.
+ * `templateName` or `snapshotId` when an explicit LangSmith source is needed.
  */
-type ManagedSandboxOptionKey = "name" | "image" | "snapshot" | "imageName" | "templateName" | "scope";
+type ManagedSandboxOptionKey = "name" | "image" | "snapshot" | "imageName";
 type LangSmithCreateOptions = typeof LangSmithSandbox extends {
     create(options: infer TOptions): Promise<unknown>;
 } ? TOptions extends object ? TOptions : never : never;
@@ -29,68 +30,21 @@ type LangSmithCreateOptions = typeof LangSmithSandbox extends {
  * Developer-provided options for the managed sandbox.
  *
  * Mirrors the supported LangSmith creation options, minus the fields MDA owns,
- * plus bake-base and lifecycle knobs. Reuse is always one sandbox per thread.
+ * plus the managed reuse/lifecycle knobs.
  */
-export type SandboxOptions = SandboxSharedOptions & SandboxBakeBase;
-/**
- * Lifecycle and LangSmith create knobs that are always allowed, regardless of
- * which bake base (if any) the author picks.
- */
-type SandboxSharedOptions = Omit<LangSmithCreateOptions, ManagedSandboxOptionKey> & {
-    /**
-     * Idle TTL in seconds. MDA may reclaim the sandbox after this period of
-     * inactivity.
-     */
-    idleTtlSeconds?: number;
-};
-/** Credentials for a private Docker registry, reconciled by MDA at bake time. */
-export interface SandboxRegistry {
-    /** Registry host, for example `ghcr.io`. */
-    url: string;
-    /** Registry username (for GHCR, the GitHub account or organization user). */
-    username: string;
+export type SandboxOptions = Omit<LangSmithCreateOptions, ManagedSandboxOptionKey> & {
     /**
-     * Name of an environment variable containing the registry password/token.
+     * Sandbox reuse scope. Defaults to `"thread"`.
      *
-     * MDA reads the value from the project `.env` or process environment. Only
-     * this variable name is compiled; the credential value never enters the
-     * build or recipe snapshot.
+     * - `"thread"`: one sandbox per durable thread/conversation.
+     * - `"agent"`: one sandbox shared by all threads handled by this agent process.
      */
-    passwordEnv: string;
-}
-/**
- * Deploy-time bake base. At most one of `snapshotName`, `snapshotId`, or
- * `dockerImage` may be set — combining them is a type error.
- *
- * `registry` is only valid with `dockerImage`. MDA creates or updates a
- * deployment-owned Host registry before pulling the private image.
- */
-export type SandboxBakeBase = {
-    snapshotName?: undefined;
-    snapshotId?: undefined;
-    dockerImage?: undefined;
-    registry?: undefined;
-} | {
-    /** LangSmith snapshot name used as the bake base (supports tags). */
-    snapshotName: string;
-    snapshotId?: never;
-    dockerImage?: never;
-    registry?: never;
-} | {
-    /** LangSmith snapshot id used as the bake base. */
-    snapshotId: string;
-    snapshotName?: never;
-    dockerImage?: never;
-    registry?: never;
-} | {
-    /** Docker image used as the bake base. */
-    dockerImage: string;
-    snapshotName?: never;
-    snapshotId?: never;
+    scope?: SandboxScope;
     /**
-     * Private registry credentials resolved and reconciled by MDA at bake.
+     * Idle TTL in seconds. MDA may reclaim the sandbox after this period of
+     * inactivity.
      */
-    registry?: SandboxRegistry;
+    idleTtlSeconds?: number;
 };
 /** The object exported from `sandbox/index.ts`. */
 export interface SandboxDefinition {
@@ -98,7 +52,7 @@ export interface SandboxDefinition {
     readonly options: SandboxOptions;
 }
 /**
- * Reject provider options MDA owns and enforce bake-base mutual exclusion.
+ * Apply the default scope and reject the provider options MDA owns.
  *
  * Used by `defineSandbox`, so runtime-owned keys never enter a definition.
  */

package/dist/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;;;GAMG;AACH,KAAK,uBAAuB,GACxB,MAAM,GACN,OAAO,GACP,UAAU,GACV,WAAW,GACX,cAAc,GACd,OAAO,CAAC;AAEZ,KAAK,sBAAsB,GAAG,OAAO,gBAAgB,SAAS;IAC5D,MAAM,CAAC,OAAO,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD,GACG,QAAQ,SAAS,MAAM,GACrB,QAAQ,GACR,KAAK,GACP,KAAK,CAAC;AAEV;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAEpE;;;GAGG;AACH,KAAK,oBAAoB,GAAG,IAAI,CAC9B,sBAAsB,EACtB,uBAAuB,CACxB,GAAG;IACF;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB;IACE,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,GACD;IACE,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,GACD;IACE,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB,GACD;IACE,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB;;OAEG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B,CAAC;AAEN,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,CAAC,EAAE,cAAc,GACvB,cAAc,CA0ChB;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,iBAAiB,CAEzE"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE9C;;;;;GAKG;AACH,KAAK,uBAAuB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;AAE3E,KAAK,sBAAsB,GAAG,OAAO,gBAAgB,SAAS;IAC5D,MAAM,CAAC,OAAO,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD,GACG,QAAQ,SAAS,MAAM,GACrB,QAAQ,GACR,KAAK,GACP,KAAK,CAAC;AAEV;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,sBAAsB,EACtB,uBAAuB,CACxB,GAAG;IACF;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,CAAC,EAAE,cAAc,GACvB,cAAc,CAchB;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,iBAAiB,CAEzE"}

package/dist/sandbox.js

@@ -3,7 +3,7 @@
  *
  * A Managed Deep Agent declares its execution environment in `sandbox/index.ts`
  * with `defineSandbox`. MDA owns how the sandbox is *resolved*: construction,
- * per-thread reuse, deploy-time snapshot bake from `setup.sh`, and lifecycle/TTL.
+ * scoped reuse across turns, the provisioning `setup.sh`, and lifecycle/TTL.
  *
  * @example
  * ```ts
@@ -14,38 +14,20 @@
  * ```
  */
 /**
- * Reject provider options MDA owns and enforce bake-base mutual exclusion.
+ * Apply the default scope and reject the provider options MDA owns.
  *
  * Used by `defineSandbox`, so runtime-owned keys never enter a definition.
  */
 export function normalizeSandboxOptions(options) {
-    if (options && "scope" in options) {
-        throw new TypeError('sandbox scope is owned by the managed runtime (always "thread") and cannot be set on a sandbox.');
+    const scope = options?.scope ?? "thread";
+    if (scope !== "thread" && scope !== "agent") {
+        throw new TypeError('sandbox scope must be "thread" or "agent"');
     }
     const managed = managedOptionKeys(options);
     if (managed.length > 0) {
         throw new TypeError(`${managed.join(", ")} ${managed.length === 1 ? "is" : "are"} owned by the managed runtime and cannot be set on a sandbox.`);
     }
-    const bases = [
-        options?.snapshotName ? "snapshotName" : null,
-        options?.snapshotId ? "snapshotId" : null,
-        options?.dockerImage ? "dockerImage" : null,
-    ].filter((value) => value !== null);
-    if (bases.length > 1) {
-        throw new TypeError(`${bases.join(", ")} are mutually exclusive. Pass only one bake base.`);
-    }
-    if (options?.registry && !options?.dockerImage) {
-        throw new TypeError("registry requires dockerImage. Pass both when pulling a private image.");
-    }
-    if (options?.registry) {
-        for (const field of ["url", "username", "passwordEnv"]) {
-            if (typeof options.registry[field] !== "string" ||
-                !options.registry[field].trim()) {
-                throw new TypeError(`registry.${field} must be a non-empty string.`);
-            }
-        }
-    }
-    return { ...(options ?? {}) };
+    return { ...options, scope };
 }
 /** Declare the managed execution environment for an agent. */
 export function defineSandbox(options) {
@@ -54,6 +36,6 @@ export function defineSandbox(options) {
 function managedOptionKeys(options) {
     if (!options)
         return [];
-    return ["name", "image", "snapshot", "imageName", "templateName"].filter((key) => Object.prototype.hasOwnProperty.call(options, key));
+    return ["name", "image", "snapshot", "imageName"].filter((key) => Object.prototype.hasOwnProperty.call(options, key));
 }
 //# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA+GH;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAwB;IAExB,IAAI,OAAO,IAAI,OAAO,IAAK,OAAmC,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CACjB,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAC/B,OAA8C,CAC/C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IACnB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAChC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QAC7C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACzC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;KAC5C,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CACjB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CACjB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAU,EAAE,CAAC;YAChE,IACE,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAC3C,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAC/B,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC,YAAY,KAAK,8BAA8B,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA4C;IAE5C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,MAAM,CACtE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqDH;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAwB;IAExB,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAC;IACzC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IACnB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAChC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAoB,CAAC;AACjD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA4C;IAE5C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/D,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CACnD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "managed-deepagents",
-  "version": "0.5.4-dev.12",
+  "version": "0.5.4-dev.13",
   "description": "Managed Deep Agents — the `defineDeepAgent` authoring interface plus the CLI that compiles and deploys a code-first Deep Agent repository to a managed LangGraph runtime.",
   "keywords": [
     "langchain",
@@ -65,12 +65,12 @@
     "zod": "^4.4.3"
   },
   "optionalDependencies": {
-    "@langchain/managed-deepagents-darwin-arm64": "0.5.4-dev.12",
-    "@langchain/managed-deepagents-darwin-x64": "0.5.4-dev.12",
-    "@langchain/managed-deepagents-linux-arm64": "0.5.4-dev.12",
-    "@langchain/managed-deepagents-linux-x64": "0.5.4-dev.12",
-    "@langchain/managed-deepagents-win32-arm64": "0.5.4-dev.12",
-    "@langchain/managed-deepagents-win32-x64": "0.5.4-dev.12"
+    "@langchain/managed-deepagents-darwin-arm64": "0.5.4-dev.13",
+    "@langchain/managed-deepagents-darwin-x64": "0.5.4-dev.13",
+    "@langchain/managed-deepagents-linux-arm64": "0.5.4-dev.13",
+    "@langchain/managed-deepagents-linux-x64": "0.5.4-dev.13",
+    "@langchain/managed-deepagents-win32-arm64": "0.5.4-dev.13",
+    "@langchain/managed-deepagents-win32-x64": "0.5.4-dev.13"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",