veryfront 0.1.281 → 0.1.283

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.281",
+    "version": "0.1.283",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "workspace": [

package/esm/src/agent/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAGlB,KAAK,OAAO,EACZ,KAAK,WAAW,EAEhB,KAAK,QAAQ,EACb,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAU/D,OAAO,EACL,KAAK,eAAe,EAGpB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAUlC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,8BAA8B,EAC9B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAiBxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AA4EzE,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,GAC1C,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAYlC;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EAAE,GAClB,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAkB7B;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,yBAAyB,EAAE,GAAG,SAAS,GACnD,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAQxC;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAC7C;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAOA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,GAClD,OAAO,CAET;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACzD;IACA,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C,CAAC;AAEJ;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,iBAAiB,GACpB,+BAA+B,CA+BjC;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CA6BxE;AAED,gEAAgE;AAChE,KAAK,iBAAiB,GAClB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,GAC1B,iBAAiB,CAiBnB;AA2BD,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAEzB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;YAS7B,qBAAqB;YA2BrB,mBAAmB;IAsBjC;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,CAAC;IAoDzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;KAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAuHtC;;OAEG;YACW,gBAAgB;IA2Q9B;;;;OAIG;YACW,yBAAyB;IA2VvC;;OAEG;YACW,eAAe;IA6B7B;;OAEG;YACW,mBAAmB;IAOjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAGlB,KAAK,OAAO,EACZ,KAAK,WAAW,EAEhB,KAAK,QAAQ,EACb,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAU/D,OAAO,EACL,KAAK,eAAe,EAGpB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAUlC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,8BAA8B,EAC9B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAiBxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AA+EzE,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,GAC1C,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAYlC;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EAAE,GAClB,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAkB7B;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,yBAAyB,EAAE,GAAG,SAAS,GACnD,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAQxC;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAC7C;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAOA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,GAClD,OAAO,CAET;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACzD;IACA,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C,CAAC;AAEJ;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,iBAAiB,GACpB,+BAA+B,CA+BjC;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CA6BxE;AAED,gEAAgE;AAChE,KAAK,iBAAiB,GAClB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,GAC1B,iBAAiB,CAiBnB;AAmDD,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAEzB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;YAS7B,qBAAqB;YA2BrB,mBAAmB;IAsBjC;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,CAAC;IAoDzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;KAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAuHtC;;OAEG;YACW,gBAAgB;IA6Q9B;;;;OAIG;YACW,yBAAyB;IA6VvC;;OAEG;YACW,eAAe;IA6B7B;;OAEG;YACW,mBAAmB;IAOjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}

package/esm/src/agent/runtime/index.js

@@ -249,6 +249,25 @@ function getRuntimeAllowedRemoteTools(config) {
     }
     return raw.every((toolName) => typeof toolName === "string") ? raw : [];
 }
+function getRuntimeForwardedIntegrationToolDefs(config) {
+    const configWithFilters = config;
+    const raw = configWithFilters.__vfForwardedIntegrationToolDefs;
+    if (!Array.isArray(raw) || raw.length === 0)
+        return undefined;
+    return raw
+        .filter((def) => typeof def === "object" &&
+        def !== null &&
+        typeof def.name === "string" &&
+        typeof def.description === "string")
+        .map((def) => ({
+        name: def.name,
+        description: def.description,
+        parameters: typeof def.parameters === "object" && def.parameters !== null &&
+            !Array.isArray(def.parameters)
+            ? def.parameters
+            : { type: "object", properties: {} },
+    }));
+}
 export class AgentRuntime {
     id;
     config;
@@ -446,6 +465,7 @@ export class AgentRuntime {
             // Request-scoped skill policy (not class-level mutable state)
             let activeSkillPolicy;
             const allowedRemoteToolNames = getRuntimeAllowedRemoteTools(this.config);
+            const forwardedRemoteToolDefinitions = getRuntimeForwardedIntegrationToolDefs(this.config);
             let currentSystemPrompt = systemPrompt;
             let currentRuntimeContext = runtimeContext;
             for (let step = 0; step < maxSteps; step++) {
@@ -458,6 +478,7 @@ export class AgentRuntime {
                 let tools = isLocal ? [] : await getAvailableTools(this.config.tools, {
                     includeSkillTools: Boolean(this.config.skills),
                     allowedRemoteToolNames,
+                    forwardedRemoteToolDefinitions,
                     remoteToolSources: this.config.remoteTools,
                     remoteToolContext: toolContext,
                 });
@@ -650,6 +671,7 @@ export class AgentRuntime {
         let finalFinishReason;
         let latestAssistantText = "";
         const allowedRemoteToolNames = getRuntimeAllowedRemoteTools(this.config);
+        const forwardedRemoteToolDefinitions = getRuntimeForwardedIntegrationToolDefs(this.config);
         let currentSystemPrompt = systemPrompt;
         let currentRuntimeContext = runtimeContext;
         for (let step = 0; step < maxSteps; step++) {
@@ -663,6 +685,7 @@ export class AgentRuntime {
             let tools = isLocalStreaming ? [] : await getAvailableTools(this.config.tools, {
                 includeSkillTools: Boolean(this.config.skills),
                 allowedRemoteToolNames,
+                forwardedRemoteToolDefinitions,
                 remoteToolSources: this.config.remoteTools,
                 remoteToolContext: toolContext,
             });

package/esm/src/agent/runtime/tool-helpers.d.ts

@@ -41,6 +41,7 @@ export declare function getAvailableTools(toolsConfig: true | Record<string, Too
     includeSkillTools?: boolean;
     includeIntegrationTools?: boolean;
     allowedRemoteToolNames?: string[];
+    forwardedRemoteToolDefinitions?: ToolDefinition[];
     remoteToolSources?: RemoteToolSource[];
     remoteToolContext?: ToolExecutionContext;
 }): Promise<ToolDefinition[]>;

package/esm/src/agent/runtime/tool-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-helpers.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/tool-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAaxG;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAuBD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACxC,cAAc,CAyBhB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;GAGG;AAEH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC;AAqHvD,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC/D,QAAQ,EAAE,MAAM,GACf,IAAI,GAAG,IAAI,CAmBb;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC/D,OAAO,CAAC,EAAE,oBAAoB,EAC9B,sBAAsB,CAAC,EAAE,MAAM,EAAE,EACjC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,GACrC,OAAO,CAAC,OAAO,CAAC,CAoClB;AAoBD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC/D,OAAO,CAAC,EAAE;IACR,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CAC1C,GACA,OAAO,CAAC,cAAc,EAAE,CAAC,CA+E3B"}
+{"version":3,"file":"tool-helpers.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/tool-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAaxG;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAuBD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACxC,cAAc,CAyBhB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;GAGG;AAEH,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC;AAqHvD,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC/D,QAAQ,EAAE,MAAM,GACf,IAAI,GAAG,IAAI,CAmBb;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC/D,OAAO,CAAC,EAAE,oBAAoB,EAC9B,sBAAsB,CAAC,EAAE,MAAM,EAAE,EACjC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,GACrC,OAAO,CAAC,OAAO,CAAC,CAoClB;AAyCD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC/D,OAAO,CAAC,EAAE;IACR,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,8BAA8B,CAAC,EAAE,cAAc,EAAE,CAAC;IAClD,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CAC1C,GACA,OAAO,CAAC,cAAc,EAAE,CAAC,CAyF3B"}

package/esm/src/agent/runtime/tool-helpers.js

@@ -187,6 +187,25 @@ tool) {
     logToolDefinition(name, def);
     tools.push(def);
 }
+/**
+ * Merge forwarded integration tool definitions into the remote defs array.
+ * Forwarded definitions are provided by the API when the runtime cannot
+ * fetch them directly (e.g., the runtime token lacks user auth).
+ * Only appends definitions not already present in the array.
+ */
+function appendForwardedToolDefinitions(remoteDefs, forwarded, allowedNames) {
+    if (!forwarded?.length)
+        return;
+    const existing = new Set(remoteDefs.map((def) => def.name));
+    for (const def of forwarded) {
+        if (existing.has(def.name))
+            continue;
+        if (allowedNames && !allowedNames.includes(def.name))
+            continue;
+        remoteDefs.push(def);
+        existing.add(def.name);
+    }
+}
 /**
  * Get available tools based on agent configuration.
  * When tools === true, loads all tools from registry.
@@ -213,6 +232,7 @@ export async function getAvailableTools(toolsConfig, options) {
         });
         // Append remote integration tools (per-request, project-scoped)
         const remoteDefs = await getRemoteToolDefinitions(options);
+        appendForwardedToolDefinitions(remoteDefs, options?.forwardedRemoteToolDefinitions, options?.allowedRemoteToolNames);
         for (const def of remoteDefs) {
             logToolDefinition(def.name, def);
         }
@@ -221,6 +241,7 @@ export async function getAvailableTools(toolsConfig, options) {
     }
     const tools = [];
     const remoteDefs = await getRemoteToolDefinitions(options);
+    appendForwardedToolDefinitions(remoteDefs, options?.forwardedRemoteToolDefinitions, options?.allowedRemoteToolNames);
     const remoteToolNames = new Set(remoteDefs.map((def) => def.name));
     const explicitlyRequestedRemoteToolNames = new Set();
     const unresolvedConfiguredToolNames = [];

package/esm/src/internal-agents/run-stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/run-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,IAAI,OAAO,EAC5B,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAY3B,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAYxD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,sBAAsB,CAAC;IACvC,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAClC;QACH,MAAM,EAAE,CACN,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;SAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,KACtB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C,CAAC;CACH;AA4FD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,QAAQ,CAAC,CA8OnB"}
+{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/run-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,IAAI,OAAO,EAC5B,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAY3B,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAaxD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,sBAAsB,CAAC;IACvC,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAClC;QACH,MAAM,EAAE,CACN,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;SAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,KACtB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C,CAAC;CACH;AAyHD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,QAAQ,CAAC,CAkPnB"}

package/esm/src/internal-agents/run-stream.js

@@ -68,6 +68,24 @@ function getAllowedRemoteToolNames(forwardedProps) {
     }
     return allowedTools.every((toolName) => typeof toolName === "string") ? allowedTools : [];
 }
+function getForwardedIntegrationToolDefinitions(forwardedProps) {
+    const runtimeOverrides = isRecord(forwardedProps?.runtimeOverrides)
+        ? forwardedProps.runtimeOverrides
+        : null;
+    if (!runtimeOverrides)
+        return undefined;
+    const defs = runtimeOverrides.integrationToolDefinitions;
+    if (!Array.isArray(defs) || defs.length === 0)
+        return undefined;
+    return defs.filter((def) => typeof def === "object" &&
+        def !== null &&
+        typeof def.name === "string" &&
+        typeof def.description === "string").map((def) => ({
+        name: def.name,
+        description: def.description,
+        parameters: def.inputSchema ?? def.parameters ?? { type: "object", properties: {} },
+    }));
+}
 export async function createRuntimeAgentStreamResponse(input, agent, deps) {
     logger.info("Starting internal agent runtime stream", {
         runId: input.runId,
@@ -83,6 +101,7 @@ export async function createRuntimeAgentStreamResponse(input, agent, deps) {
     });
     const mergedTools = buildMergedTools(agent, input, deps.sessionManager);
     const allowedRemoteToolNames = getAllowedRemoteToolNames(input.forwardedProps);
+    const forwardedIntegrationToolDefs = getForwardedIntegrationToolDefinitions(input.forwardedProps);
     const runtimeAgent = {
         ...agent,
         config: {
@@ -91,6 +110,9 @@ export async function createRuntimeAgentStreamResponse(input, agent, deps) {
             ...(allowedRemoteToolNames !== undefined
                 ? { __vfAllowedRemoteTools: allowedRemoteToolNames }
                 : {}),
+            ...(forwardedIntegrationToolDefs !== undefined
+                ? { __vfForwardedIntegrationToolDefs: forwardedIntegrationToolDefs }
+                : {}),
         },
     };
     const runtime = deps.createRuntime?.(runtimeAgent, mergedTools) ??

package/esm/src/sandbox/lazy-sandbox.d.ts

@@ -5,6 +5,7 @@ export interface LazySandboxOptions extends SandboxOptions {
     pollIntervalMs?: number;
     heartbeatIntervalMs?: number;
     heartbeatGraceMs?: number;
+    controlRequestTimeoutMs?: number;
     execStartTimeoutMs?: number;
     execStartMaxAttempts?: number;
     execStartRetryDelayMs?: number;
@@ -22,6 +23,7 @@ export declare class LazySandbox {
     private readonly pollIntervalMs;
     private readonly heartbeatIntervalMs;
     private readonly heartbeatGraceMs;
+    private readonly controlRequestTimeoutMs;
     private readonly execStartTimeoutMs;
     private readonly execStartMaxAttempts;
     private readonly execStartRetryDelayMs;
@@ -56,6 +58,7 @@ export declare class LazySandbox {
     get isActive(): boolean;
     private bootstrapSession;
     private resolveReadyEndpoint;
+    private waitForReadySession;
     private touchSession;
     private startHeartbeatLoop;
     private stopHeartbeatLoop;
@@ -68,6 +71,7 @@ export declare class LazySandbox {
     private updateTrackedCommandJob;
     private startExec;
     private fetchExecStart;
+    private fetchControl;
     private waitForExecStartRetry;
     private reprovisionAfterExecStartFailure;
     private resolveRuntimeEndpoint;

package/esm/src/sandbox/lazy-sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-sandbox.d.ts","sourceRoot":"","sources":["../../../src/src/sandbox/lazy-sandbox.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,UAAU,EACf,KAAK,gBAAgB,EAErB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,eAAe,EAGpB,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;CACrF;AAsBD,4EAA4E;AAC5E,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAK/B;IAEd,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,cAAc,CAAuD;IAC7E,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA6B;gBAE3D,OAAO,GAAE,kBAAuB;IAetC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBvB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAsB1E,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC;IA0CvF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAcvC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB1E,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAqB5E,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAkBjD,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyB7D,eAAe,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAkBxC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmBpD,SAAS,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA+CvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC5B,IAAI,EAAE,IAAI,MAAM,GAAG,IAAI,CAEtB;IAED,IAAI,GAAG,IAAI,MAAM,GAAG,IAAI,CAEvB;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;YAEa,gBAAgB;YAiChB,oBAAoB;YA2BpB,YAAY;IAc1B,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,iBAAiB;YAMX,aAAa;IAO3B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,kBAAkB;YAKZ,yBAAyB;IAUvC,OAAO,CAAC,uBAAuB;YAgBjB,SAAS;YAkCT,cAAc;IAW5B,OAAO,CAAC,qBAAqB;YAIf,gCAAgC;IAQ9C,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;CAMpB"}
+{"version":3,"file":"lazy-sandbox.d.ts","sourceRoot":"","sources":["../../../src/src/sandbox/lazy-sandbox.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,UAAU,EACf,KAAK,gBAAgB,EAErB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,eAAe,EAGpB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;CACrF;AAuBD,4EAA4E;AAC5E,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAK/B;IAEd,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,cAAc,CAAuD;IAC7E,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA6B;gBAE3D,OAAO,GAAE,kBAAuB;IAiBtC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBvB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAsB1E,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC;IA0CvF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBvC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB1E,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAqB5E,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAkBjD,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyB7D,eAAe,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAkBxC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmBpD,SAAS,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAkDvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC5B,IAAI,EAAE,IAAI,MAAM,GAAG,IAAI,CAEtB;IAED,IAAI,GAAG,IAAI,MAAM,GAAG,IAAI,CAEvB;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;YAEa,gBAAgB;YAiChB,oBAAoB;YAQpB,mBAAmB;YA4BnB,YAAY;IAc1B,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,iBAAiB;YAMX,aAAa;IAO3B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,kBAAkB;YAKZ,yBAAyB;IAUvC,OAAO,CAAC,uBAAuB;YAgBjB,SAAS;YAkCT,cAAc;YAId,YAAY;IAI1B,OAAO,CAAC,qBAAqB;YAIf,gCAAgC;IAQ9C,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;CAMpB"}

package/esm/src/sandbox/lazy-sandbox.js

@@ -1,10 +1,11 @@
 import * as dntShim from "../../_dnt.shims.js";
 import { REQUEST_ERROR } from "../errors/index.js";
-import { resolveSandboxApiUrl, resolveSandboxAuthToken, waitForSandboxReady, } from "./sandbox.js";
+import { resolveSandboxApiUrl, resolveSandboxAuthToken, } from "./sandbox.js";
 const DEFAULT_STARTUP_TIMEOUT_MS = 180_000;
 const DEFAULT_POLL_INTERVAL_MS = 2_000;
 const DEFAULT_HEARTBEAT_INTERVAL_MS = 30_000;
 const DEFAULT_HEARTBEAT_GRACE_MS = 5_000;
+const DEFAULT_CONTROL_REQUEST_TIMEOUT_MS = 15_000;
 const DEFAULT_EXEC_START_TIMEOUT_MS = 30_000;
 const DEFAULT_EXEC_START_MAX_ATTEMPTS = 3;
 const DEFAULT_EXEC_START_RETRY_DELAY_MS = 1_000;
@@ -23,6 +24,7 @@ export class LazySandbox {
     pollIntervalMs;
     heartbeatIntervalMs;
     heartbeatGraceMs;
+    controlRequestTimeoutMs;
     execStartTimeoutMs;
     execStartMaxAttempts;
     execStartRetryDelayMs;
@@ -44,6 +46,8 @@ export class LazySandbox {
         this.pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
         this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;
         this.heartbeatGraceMs = options.heartbeatGraceMs ?? DEFAULT_HEARTBEAT_GRACE_MS;
+        this.controlRequestTimeoutMs = options.controlRequestTimeoutMs ??
+            DEFAULT_CONTROL_REQUEST_TIMEOUT_MS;
         this.execStartTimeoutMs = options.execStartTimeoutMs ?? DEFAULT_EXEC_START_TIMEOUT_MS;
         this.execStartMaxAttempts = options.execStartMaxAttempts ?? DEFAULT_EXEC_START_MAX_ATTEMPTS;
         this.execStartRetryDelayMs = options.execStartRetryDelayMs ??
@@ -126,7 +130,7 @@ export class LazySandbox {
     }
     async readFile(path) {
         await this.touchSession();
-        const res = await fetch(`${this.requireEndpoint()}/file?path=${encodeURIComponent(path)}`, {
+        const res = await this.fetchControl(`${this.requireEndpoint()}/file?path=${encodeURIComponent(path)}`, {
             headers: this.authHeaders(),
         });
         if (!res.ok) {
@@ -136,7 +140,7 @@ export class LazySandbox {
     }
     async writeFiles(files) {
         await this.touchSession();
-        const res = await fetch(`${this.requireEndpoint()}/files`, {
+        const res = await this.fetchControl(`${this.requireEndpoint()}/files`, {
             method: "POST",
             headers: this.jsonHeaders(),
             body: JSON.stringify({ files }),
@@ -150,7 +154,7 @@ export class LazySandbox {
     async startCommandJob(command, options) {
         await this.touchSession();
         const endpoint = this.resolveRuntimeEndpoint();
-        const res = await fetch(`${endpoint}/exec/jobs`, {
+        const res = await this.fetchControl(`${endpoint}/exec/jobs`, {
             method: "POST",
             headers: this.jsonHeaders(),
             body: JSON.stringify({ command, ...this.resolveExecOptions(options) }),
@@ -166,7 +170,7 @@ export class LazySandbox {
     }
     async getCommandJob(jobId) {
         const endpoint = await this.resolveCommandJobEndpoint(jobId);
-        const res = await fetch(`${endpoint}/exec/jobs/${jobId}`, {
+        const res = await this.fetchControl(`${endpoint}/exec/jobs/${jobId}`, {
             headers: this.authHeaders(),
         });
         if (!res.ok) {
@@ -180,7 +184,7 @@ export class LazySandbox {
     }
     async getCommandJobOutput(jobId) {
         const endpoint = await this.resolveCommandJobEndpoint(jobId);
-        const res = await fetch(`${endpoint}/exec/jobs/${jobId}/output`, {
+        const res = await this.fetchControl(`${endpoint}/exec/jobs/${jobId}/output`, {
             headers: this.authHeaders(),
         });
         if (!res.ok) {
@@ -201,7 +205,7 @@ export class LazySandbox {
     }
     async listCommandJobs() {
         await this.ensure();
-        const res = await fetch(`${this.requireEndpoint()}/exec/jobs`, {
+        const res = await this.fetchControl(`${this.requireEndpoint()}/exec/jobs`, {
             headers: this.authHeaders(),
         });
         if (!res.ok) {
@@ -215,7 +219,7 @@ export class LazySandbox {
     }
     async cancelCommandJob(jobId) {
         const endpoint = await this.resolveCommandJobEndpoint(jobId);
-        const res = await fetch(`${endpoint}/exec/jobs/${jobId}/cancel`, {
+        const res = await this.fetchControl(`${endpoint}/exec/jobs/${jobId}/cancel`, {
             method: "POST",
             headers: this.authHeaders(),
         });
@@ -241,7 +245,7 @@ export class LazySandbox {
             return;
         }
         const promise = (async () => {
-            const res = await fetch(`${this.apiUrl}/sandbox-sessions/${currentSessionId}/heartbeat`, {
+            const res = await this.fetchControl(`${this.apiUrl}/sandbox-sessions/${currentSessionId}/heartbeat`, {
                 method: "POST",
                 headers: this.authHeaders(),
             });
@@ -309,7 +313,7 @@ export class LazySandbox {
     }
     async bootstrapSession() {
         const projectId = this.resolveProjectId();
-        const res = await fetch(`${this.apiUrl}/sandbox-sessions`, {
+        const res = await this.fetchControl(`${this.apiUrl}/sandbox-sessions`, {
             method: "POST",
             headers: this.jsonHeaders(),
             body: JSON.stringify(projectId ? { project_id: projectId } : {}),
@@ -341,23 +345,29 @@ export class LazySandbox {
         if (session.status === "running") {
             return session.endpoint;
         }
-        await waitForSandboxReady({
-            apiUrl: this.apiUrl,
-            id: session.id,
-            authToken: this.authToken,
-            maxWaitMs: this.startupTimeoutMs,
-            pollIntervalMs: this.pollIntervalMs,
-        });
-        const res = await fetch(`${this.apiUrl}/sandbox-sessions/${session.id}`, {
-            headers: this.authHeaders(),
-        });
-        if (!res.ok) {
-            throw REQUEST_ERROR.create({
-                detail: `Failed to get sandbox: ${res.status} ${await res.text()}`,
+        return (await this.waitForReadySession(session.id)).endpoint;
+    }
+    async waitForReadySession(sessionId) {
+        const start = Date.now();
+        while (Date.now() - start < this.startupTimeoutMs) {
+            await new Promise((resolve) => dntShim.setTimeout(resolve, this.pollIntervalMs));
+            const res = await this.fetchControl(`${this.apiUrl}/sandbox-sessions/${sessionId}`, {
+                headers: this.authHeaders(),
             });
+            if (!res.ok) {
+                continue;
+            }
+            const session = await res.json();
+            if (session.status === "running") {
+                return session;
+            }
+            if (session.status === "error" || session.status === "deleting") {
+                throw REQUEST_ERROR.create({
+                    detail: `Sandbox failed to start: status=${session.status}`,
+                });
+            }
         }
-        const nextSession = await res.json();
-        return nextSession.endpoint;
+        throw REQUEST_ERROR.create({ detail: "Sandbox did not become ready within timeout" });
     }
     async touchSession() {
         const projectId = this.resolveProjectId();
@@ -387,7 +397,7 @@ export class LazySandbox {
         this.heartbeatTimer = null;
     }
     async deleteSession(sessionId) {
-        await fetch(`${this.apiUrl}/sandbox-sessions/${sessionId}`, {
+        await this.fetchControl(`${this.apiUrl}/sandbox-sessions/${sessionId}`, {
             method: "DELETE",
             headers: this.authHeaders(),
         });
@@ -466,14 +476,10 @@ export class LazySandbox {
         throw new Error("Sandbox exec failed before a request was made");
     }
     async fetchExecStart(url, init) {
-        const controller = new AbortController();
-        const timeout = dntShim.setTimeout(() => controller.abort(), this.execStartTimeoutMs);
-        try {
-            return await fetch(url, { ...init, signal: controller.signal });
-        }
-        finally {
-            clearTimeout(timeout);
-        }
+        return fetchWithTimeout(url, this.execStartTimeoutMs, init);
+    }
+    async fetchControl(url, init = {}) {
+        return fetchWithTimeout(url, this.controlRequestTimeoutMs, init);
     }
     waitForExecStartRetry() {
         return new Promise((resolve) => dntShim.setTimeout(resolve, this.execStartRetryDelayMs));
@@ -523,6 +529,19 @@ function shouldReprovisionAfterExecStartFailure(error) {
     return typeof cause.code === "string" &&
         REPROVISIONABLE_EXEC_START_ERROR_CODES.has(cause.code);
 }
+async function fetchWithTimeout(url, timeoutMs, init = {}) {
+    if (timeoutMs <= 0) {
+        return await fetch(url, init);
+    }
+    const controller = new AbortController();
+    const timeout = dntShim.setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(url, { ...init, signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
 function mapCommandJob(json) {
     return {
         id: json.id,

package/esm/src/utils/version-constant.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.281";
+export declare const VERSION = "0.1.283";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,3 +1,3 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.281";
+export const VERSION = "0.1.283";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.281",
+  "version": "0.1.283",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.281",
+  "version": "0.1.283",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "workspace": [

package/src/src/agent/runtime/index.ts

@@ -47,7 +47,7 @@ import { repairToolCall } from "./repair-tool-call.js";
 import { MiddlewareChain } from "../middleware/chain.js";
 import { AGENT_DEFAULTS } from "../defaults.js";
 import { tryGetCacheKeyContext } from "../../cache/cache-key-builder.js";
-import type { ToolExecutionContext } from "../../tool/index.js";
+import type { ToolDefinition, ToolExecutionContext } from "../../tool/index.js";
 import { isLocalModelRuntime } from "../../provider/runtime-inspection.js";
 import { generateText, streamText } from "../../runtime/runtime-bridge.js";
 
@@ -110,6 +110,9 @@ const LOAD_SKILL_TOOL_ID = "load-skill";
 
 type RuntimeToolFilterConfig = AgentConfig & {
   __vfAllowedRemoteTools?: string[];
+  __vfForwardedIntegrationToolDefs?: Array<
+    { name: string; description: string; parameters: Record<string, unknown> }
+  >;
 };
 
 function isAbortError(error: unknown, abortSignal?: AbortSignal): boolean {
@@ -418,6 +421,30 @@ function getRuntimeAllowedRemoteTools(config: AgentConfig): string[] | undefined
   return raw.every((toolName) => typeof toolName === "string") ? raw : [];
 }
 
+function getRuntimeForwardedIntegrationToolDefs(
+  config: AgentConfig,
+): ToolDefinition[] | undefined {
+  const configWithFilters = config as RuntimeToolFilterConfig;
+  const raw = configWithFilters.__vfForwardedIntegrationToolDefs;
+  if (!Array.isArray(raw) || raw.length === 0) return undefined;
+  return raw
+    .filter(
+      (def): def is { name: string; description: string; parameters: Record<string, unknown> } =>
+        typeof def === "object" &&
+        def !== null &&
+        typeof def.name === "string" &&
+        typeof def.description === "string",
+    )
+    .map((def) => ({
+      name: def.name,
+      description: def.description,
+      parameters: typeof def.parameters === "object" && def.parameters !== null &&
+          !Array.isArray(def.parameters)
+        ? def.parameters
+        : { type: "object", properties: {} },
+    }));
+}
+
 type ResolvedModelTransport = {
   requestedModel: string;
   resolvedModelString: string;
@@ -722,6 +749,7 @@ export class AgentRuntime {
       // Request-scoped skill policy (not class-level mutable state)
       let activeSkillPolicy: string[] | undefined;
       const allowedRemoteToolNames = getRuntimeAllowedRemoteTools(this.config);
+      const forwardedRemoteToolDefinitions = getRuntimeForwardedIntegrationToolDefs(this.config);
       let currentSystemPrompt = systemPrompt;
       let currentRuntimeContext = runtimeContext;
 
@@ -743,6 +771,7 @@ export class AgentRuntime {
         let tools = isLocal ? [] : await getAvailableTools(this.config.tools, {
           includeSkillTools: Boolean(this.config.skills),
           allowedRemoteToolNames,
+          forwardedRemoteToolDefinitions,
           remoteToolSources: this.config.remoteTools,
           remoteToolContext: toolContext,
         });
@@ -1004,6 +1033,7 @@ export class AgentRuntime {
     let finalFinishReason: string | undefined;
     let latestAssistantText = "";
     const allowedRemoteToolNames = getRuntimeAllowedRemoteTools(this.config);
+    const forwardedRemoteToolDefinitions = getRuntimeForwardedIntegrationToolDefs(this.config);
     let currentSystemPrompt = systemPrompt;
     let currentRuntimeContext = runtimeContext;
 
@@ -1026,6 +1056,7 @@ export class AgentRuntime {
       let tools = isLocalStreaming ? [] : await getAvailableTools(this.config.tools, {
         includeSkillTools: Boolean(this.config.skills),
         allowedRemoteToolNames,
+        forwardedRemoteToolDefinitions,
         remoteToolSources: this.config.remoteTools,
         remoteToolContext: toolContext,
       });

package/src/src/agent/runtime/tool-helpers.ts

@@ -297,6 +297,27 @@ function addToolDefinition(
   tools.push(def);
 }
 
+/**
+ * Merge forwarded integration tool definitions into the remote defs array.
+ * Forwarded definitions are provided by the API when the runtime cannot
+ * fetch them directly (e.g., the runtime token lacks user auth).
+ * Only appends definitions not already present in the array.
+ */
+function appendForwardedToolDefinitions(
+  remoteDefs: ToolDefinition[],
+  forwarded: ToolDefinition[] | undefined,
+  allowedNames: string[] | undefined,
+): void {
+  if (!forwarded?.length) return;
+  const existing = new Set(remoteDefs.map((def) => def.name));
+  for (const def of forwarded) {
+    if (existing.has(def.name)) continue;
+    if (allowedNames && !allowedNames.includes(def.name)) continue;
+    remoteDefs.push(def);
+    existing.add(def.name);
+  }
+}
+
 /**
  * Get available tools based on agent configuration.
  * When tools === true, loads all tools from registry.
@@ -311,6 +332,7 @@ export async function getAvailableTools(
     includeSkillTools?: boolean;
     includeIntegrationTools?: boolean;
     allowedRemoteToolNames?: string[];
+    forwardedRemoteToolDefinitions?: ToolDefinition[];
     remoteToolSources?: RemoteToolSource[];
     remoteToolContext?: ToolExecutionContext;
   },
@@ -333,6 +355,11 @@ export async function getAvailableTools(
 
     // Append remote integration tools (per-request, project-scoped)
     const remoteDefs = await getRemoteToolDefinitions(options);
+    appendForwardedToolDefinitions(
+      remoteDefs,
+      options?.forwardedRemoteToolDefinitions,
+      options?.allowedRemoteToolNames,
+    );
     for (const def of remoteDefs) {
       logToolDefinition(def.name, def);
     }
@@ -343,6 +370,11 @@ export async function getAvailableTools(
 
   const tools: ToolDefinition[] = [];
   const remoteDefs = await getRemoteToolDefinitions(options);
+  appendForwardedToolDefinitions(
+    remoteDefs,
+    options?.forwardedRemoteToolDefinitions,
+    options?.allowedRemoteToolNames,
+  );
   const remoteToolNames = new Set(remoteDefs.map((def) => def.name));
   const explicitlyRequestedRemoteToolNames = new Set<string>();
   const unresolvedConfiguredToolNames: string[] = [];

package/src/src/internal-agents/run-stream.ts

@@ -25,6 +25,7 @@ const logger = serverLogger.component("internal-agent-run-stream");
 type RuntimeFilteredAgent = Agent & {
   config: Agent["config"] & {
     __vfAllowedRemoteTools?: string[];
+    __vfForwardedIntegrationToolDefs?: ForwardedToolDef[];
   };
 };
 
@@ -137,6 +138,35 @@ function getAllowedRemoteToolNames(
   return allowedTools.every((toolName) => typeof toolName === "string") ? allowedTools : [];
 }
 
+interface ForwardedToolDef {
+  name: string;
+  description: string;
+  inputSchema?: Record<string, unknown>;
+  parameters?: Record<string, unknown>;
+}
+
+function getForwardedIntegrationToolDefinitions(
+  forwardedProps: RuntimeRunAgentInput["forwardedProps"],
+): ForwardedToolDef[] | undefined {
+  const runtimeOverrides = isRecord(forwardedProps?.runtimeOverrides)
+    ? forwardedProps.runtimeOverrides
+    : null;
+  if (!runtimeOverrides) return undefined;
+  const defs = runtimeOverrides.integrationToolDefinitions;
+  if (!Array.isArray(defs) || defs.length === 0) return undefined;
+  return defs.filter(
+    (def): def is ForwardedToolDef =>
+      typeof def === "object" &&
+      def !== null &&
+      typeof def.name === "string" &&
+      typeof def.description === "string",
+  ).map((def) => ({
+    name: def.name,
+    description: def.description,
+    parameters: def.inputSchema ?? def.parameters ?? { type: "object", properties: {} },
+  }));
+}
+
 export async function createRuntimeAgentStreamResponse(
   input: RuntimeRunAgentInput,
   agent: Agent,
@@ -157,6 +187,7 @@ export async function createRuntimeAgentStreamResponse(
 
   const mergedTools = buildMergedTools(agent, input, deps.sessionManager);
   const allowedRemoteToolNames = getAllowedRemoteToolNames(input.forwardedProps);
+  const forwardedIntegrationToolDefs = getForwardedIntegrationToolDefinitions(input.forwardedProps);
   const runtimeAgent: RuntimeFilteredAgent = {
     ...agent,
     config: {
@@ -165,6 +196,9 @@ export async function createRuntimeAgentStreamResponse(
       ...(allowedRemoteToolNames !== undefined
         ? { __vfAllowedRemoteTools: allowedRemoteToolNames }
         : {}),
+      ...(forwardedIntegrationToolDefs !== undefined
+        ? { __vfForwardedIntegrationToolDefs: forwardedIntegrationToolDefs }
+        : {}),
     },
   };
   const runtime = deps.createRuntime?.(runtimeAgent, mergedTools) ??

package/src/src/sandbox/lazy-sandbox.ts

@@ -10,7 +10,6 @@ import {
   resolveSandboxApiUrl,
   resolveSandboxAuthToken,
   type SandboxOptions,
-  waitForSandboxReady,
 } from "./sandbox.js";
 
 export interface LazySandboxOptions extends SandboxOptions {
@@ -19,6 +18,7 @@ export interface LazySandboxOptions extends SandboxOptions {
   pollIntervalMs?: number;
   heartbeatIntervalMs?: number;
   heartbeatGraceMs?: number;
+  controlRequestTimeoutMs?: number;
   execStartTimeoutMs?: number;
   execStartMaxAttempts?: number;
   execStartRetryDelayMs?: number;
@@ -35,6 +35,7 @@ const DEFAULT_STARTUP_TIMEOUT_MS = 180_000;
 const DEFAULT_POLL_INTERVAL_MS = 2_000;
 const DEFAULT_HEARTBEAT_INTERVAL_MS = 30_000;
 const DEFAULT_HEARTBEAT_GRACE_MS = 5_000;
+const DEFAULT_CONTROL_REQUEST_TIMEOUT_MS = 15_000;
 const DEFAULT_EXEC_START_TIMEOUT_MS = 30_000;
 const DEFAULT_EXEC_START_MAX_ATTEMPTS = 3;
 const DEFAULT_EXEC_START_RETRY_DELAY_MS = 1_000;
@@ -54,6 +55,7 @@ export class LazySandbox {
   private readonly pollIntervalMs: number;
   private readonly heartbeatIntervalMs: number;
   private readonly heartbeatGraceMs: number;
+  private readonly controlRequestTimeoutMs: number;
   private readonly execStartTimeoutMs: number;
   private readonly execStartMaxAttempts: number;
   private readonly execStartRetryDelayMs: number;
@@ -82,6 +84,8 @@ export class LazySandbox {
     this.pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
     this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;
     this.heartbeatGraceMs = options.heartbeatGraceMs ?? DEFAULT_HEARTBEAT_GRACE_MS;
+    this.controlRequestTimeoutMs = options.controlRequestTimeoutMs ??
+      DEFAULT_CONTROL_REQUEST_TIMEOUT_MS;
     this.execStartTimeoutMs = options.execStartTimeoutMs ?? DEFAULT_EXEC_START_TIMEOUT_MS;
     this.execStartMaxAttempts = options.execStartMaxAttempts ?? DEFAULT_EXEC_START_MAX_ATTEMPTS;
     this.execStartRetryDelayMs = options.execStartRetryDelayMs ??
@@ -175,9 +179,12 @@ export class LazySandbox {
   async readFile(path: string): Promise<string> {
     await this.touchSession();
 
-    const res = await fetch(`${this.requireEndpoint()}/file?path=${encodeURIComponent(path)}`, {
-      headers: this.authHeaders(),
-    });
+    const res = await this.fetchControl(
+      `${this.requireEndpoint()}/file?path=${encodeURIComponent(path)}`,
+      {
+        headers: this.authHeaders(),
+      },
+    );
 
     if (!res.ok) {
       throw REQUEST_ERROR.create({ detail: `Read file failed: ${res.status} ${await res.text()}` });
@@ -189,7 +196,7 @@ export class LazySandbox {
   async writeFiles(files: Array<{ path: string; content: string }>): Promise<void> {
     await this.touchSession();
 
-    const res = await fetch(`${this.requireEndpoint()}/files`, {
+    const res = await this.fetchControl(`${this.requireEndpoint()}/files`, {
       method: "POST",
       headers: this.jsonHeaders(),
       body: JSON.stringify({ files }),
@@ -206,7 +213,7 @@ export class LazySandbox {
     await this.touchSession();
     const endpoint = this.resolveRuntimeEndpoint();
 
-    const res = await fetch(`${endpoint}/exec/jobs`, {
+    const res = await this.fetchControl(`${endpoint}/exec/jobs`, {
       method: "POST",
       headers: this.jsonHeaders(),
       body: JSON.stringify({ command, ...this.resolveExecOptions(options) }),
@@ -226,7 +233,7 @@ export class LazySandbox {
   async getCommandJob(jobId: string): Promise<CommandJob> {
     const endpoint = await this.resolveCommandJobEndpoint(jobId);
 
-    const res = await fetch(`${endpoint}/exec/jobs/${jobId}`, {
+    const res = await this.fetchControl(`${endpoint}/exec/jobs/${jobId}`, {
       headers: this.authHeaders(),
     });
 
@@ -244,7 +251,7 @@ export class LazySandbox {
   async getCommandJobOutput(jobId: string): Promise<CommandJobOutput> {
     const endpoint = await this.resolveCommandJobEndpoint(jobId);
 
-    const res = await fetch(`${endpoint}/exec/jobs/${jobId}/output`, {
+    const res = await this.fetchControl(`${endpoint}/exec/jobs/${jobId}/output`, {
       headers: this.authHeaders(),
     });
 
@@ -269,7 +276,7 @@ export class LazySandbox {
   async listCommandJobs(): Promise<CommandJob[]> {
     await this.ensure();
 
-    const res = await fetch(`${this.requireEndpoint()}/exec/jobs`, {
+    const res = await this.fetchControl(`${this.requireEndpoint()}/exec/jobs`, {
       headers: this.authHeaders(),
     });
 
@@ -287,7 +294,7 @@ export class LazySandbox {
   async cancelCommandJob(jobId: string): Promise<CommandJob> {
     const endpoint = await this.resolveCommandJobEndpoint(jobId);
 
-    const res = await fetch(`${endpoint}/exec/jobs/${jobId}/cancel`, {
+    const res = await this.fetchControl(`${endpoint}/exec/jobs/${jobId}/cancel`, {
       method: "POST",
       headers: this.authHeaders(),
     });
@@ -320,10 +327,13 @@ export class LazySandbox {
     }
 
     const promise = (async () => {
-      const res = await fetch(`${this.apiUrl}/sandbox-sessions/${currentSessionId}/heartbeat`, {
-        method: "POST",
-        headers: this.authHeaders(),
-      });
+      const res = await this.fetchControl(
+        `${this.apiUrl}/sandbox-sessions/${currentSessionId}/heartbeat`,
+        {
+          method: "POST",
+          headers: this.authHeaders(),
+        },
+      );
 
       if (!res.ok) {
         if (this.sessionId === currentSessionId) {
@@ -400,7 +410,7 @@ export class LazySandbox {
 
   private async bootstrapSession(): Promise<void> {
     const projectId = this.resolveProjectId();
-    const res = await fetch(`${this.apiUrl}/sandbox-sessions`, {
+    const res = await this.fetchControl(`${this.apiUrl}/sandbox-sessions`, {
       method: "POST",
       headers: this.jsonHeaders(),
       body: JSON.stringify(projectId ? { project_id: projectId } : {}),
@@ -436,26 +446,35 @@ export class LazySandbox {
       return session.endpoint;
     }
 
-    await waitForSandboxReady({
-      apiUrl: this.apiUrl,
-      id: session.id,
-      authToken: this.authToken,
-      maxWaitMs: this.startupTimeoutMs,
-      pollIntervalMs: this.pollIntervalMs,
-    });
+    return (await this.waitForReadySession(session.id)).endpoint;
+  }
 
-    const res = await fetch(`${this.apiUrl}/sandbox-sessions/${session.id}`, {
-      headers: this.authHeaders(),
-    });
+  private async waitForReadySession(sessionId: string): Promise<SandboxSessionRecord> {
+    const start = Date.now();
 
-    if (!res.ok) {
-      throw REQUEST_ERROR.create({
-        detail: `Failed to get sandbox: ${res.status} ${await res.text()}`,
+    while (Date.now() - start < this.startupTimeoutMs) {
+      await new Promise((resolve) => dntShim.setTimeout(resolve, this.pollIntervalMs));
+
+      const res = await this.fetchControl(`${this.apiUrl}/sandbox-sessions/${sessionId}`, {
+        headers: this.authHeaders(),
       });
+
+      if (!res.ok) {
+        continue;
+      }
+
+      const session = await res.json() as SandboxSessionRecord;
+      if (session.status === "running") {
+        return session;
+      }
+      if (session.status === "error" || session.status === "deleting") {
+        throw REQUEST_ERROR.create({
+          detail: `Sandbox failed to start: status=${session.status}`,
+        });
+      }
     }
 
-    const nextSession = await res.json();
-    return nextSession.endpoint;
+    throw REQUEST_ERROR.create({ detail: "Sandbox did not become ready within timeout" });
   }
 
   private async touchSession(): Promise<void> {
@@ -489,7 +508,7 @@ export class LazySandbox {
   }
 
   private async deleteSession(sessionId: string): Promise<void> {
-    await fetch(`${this.apiUrl}/sandbox-sessions/${sessionId}`, {
+    await this.fetchControl(`${this.apiUrl}/sandbox-sessions/${sessionId}`, {
       method: "DELETE",
       headers: this.authHeaders(),
     });
@@ -584,14 +603,11 @@ export class LazySandbox {
   }
 
   private async fetchExecStart(url: string, init: RequestInit): Promise<Response> {
-    const controller = new AbortController();
-    const timeout = dntShim.setTimeout(() => controller.abort(), this.execStartTimeoutMs);
+    return fetchWithTimeout(url, this.execStartTimeoutMs, init);
+  }
 
-    try {
-      return await fetch(url, { ...init, signal: controller.signal });
-    } finally {
-      clearTimeout(timeout);
-    }
+  private async fetchControl(url: string, init: RequestInit = {}): Promise<Response> {
+    return fetchWithTimeout(url, this.controlRequestTimeoutMs, init);
   }
 
   private waitForExecStartRetry(): Promise<void> {
@@ -654,6 +670,25 @@ function shouldReprovisionAfterExecStartFailure(error: unknown): boolean {
     REPROVISIONABLE_EXEC_START_ERROR_CODES.has(cause.code);
 }
 
+async function fetchWithTimeout(
+  url: string,
+  timeoutMs: number,
+  init: RequestInit = {},
+): Promise<Response> {
+  if (timeoutMs <= 0) {
+    return await fetch(url, init);
+  }
+
+  const controller = new AbortController();
+  const timeout = dntShim.setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    return await fetch(url, { ...init, signal: controller.signal });
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
 function mapCommandJob(json: Record<string, unknown>): CommandJob {
   return {
     id: json.id as string,

package/src/src/utils/version-constant.ts

@@ -1,3 +1,3 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.281";
+export const VERSION = "0.1.283";