zeitlich 0.2.36 → 0.2.37

package/dist/{proxy-BjdFGPTm.d.ts → proxy-0smGKvx8.d.ts}

@@ -1,5 +1,5 @@
 import { proxyActivities, ActivityInterfaceFor } from '@temporalio/workflow';
-import { T as ThreadOps } from './types-CADc5V_P.js';
+import { T as ThreadOps } from './types-CPKDl-y_.js';
 
 /**
  * Shared proxy helper for thread operations.

package/dist/{proxy-7RnVaPdJ.d.cts → proxy-DEtowJyd.d.cts}

@@ -1,5 +1,5 @@
 import { proxyActivities, ActivityInterfaceFor } from '@temporalio/workflow';
-import { T as ThreadOps } from './types-DQ1l_gXL.cjs';
+import { T as ThreadOps } from './types-BO7Yju20.cjs';
 
 /**
  * Shared proxy helper for thread operations.

package/dist/{thread-manager-DjN5JYul.d.ts → thread-manager-3fszQih4.d.ts}

@@ -1,7 +1,7 @@
 import Redis from 'ioredis';
-import { J as JsonValue } from './types-CADc5V_P.js';
+import { J as JsonValue } from './types-CPKDl-y_.js';
 import { MessageContent, StoredMessage, BaseMessage } from '@langchain/core/messages';
-import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-yiXmqedU.js';
+import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-B37hKoWA.js';
 
 /** SDK-native content type for LangChain human messages */
 type LangChainContent = string | MessageContent;

package/dist/{thread-manager-CbpiGq1L.d.ts → thread-manager-C-C4pI2z.d.ts}

@@ -1,7 +1,7 @@
 import Redis from 'ioredis';
 import Anthropic from '@anthropic-ai/sdk';
-import { J as JsonValue } from './types-CADc5V_P.js';
-import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-yiXmqedU.js';
+import { J as JsonValue } from './types-CPKDl-y_.js';
+import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-B37hKoWA.js';
 
 /** SDK-native content type for Anthropic human messages */
 type AnthropicContent = string | Anthropic.Messages.ContentBlockParam[];

package/dist/{thread-manager-BBzNgQWH.d.cts → thread-manager-CzYln2OC.d.cts}

@@ -1,7 +1,7 @@
 import Redis from 'ioredis';
-import { J as JsonValue } from './types-DQ1l_gXL.cjs';
+import { J as JsonValue } from './types-BO7Yju20.cjs';
 import { MessageContent, StoredMessage, BaseMessage } from '@langchain/core/messages';
-import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-Mc_4BCfT.cjs';
+import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-D08CXPh8.cjs';
 
 /** SDK-native content type for LangChain human messages */
 type LangChainContent = string | MessageContent;

package/dist/{thread-manager-DzXm9eeI.d.cts → thread-manager-D4vgzYrh.d.cts}

@@ -1,7 +1,7 @@
 import Redis from 'ioredis';
 import Anthropic from '@anthropic-ai/sdk';
-import { J as JsonValue } from './types-DQ1l_gXL.cjs';
-import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-Mc_4BCfT.cjs';
+import { J as JsonValue } from './types-BO7Yju20.cjs';
+import { T as ThreadManagerHooks, P as ProviderThreadManager } from './types-D08CXPh8.cjs';
 
 /** SDK-native content type for Anthropic human messages */
 type AnthropicContent = string | Anthropic.Messages.ContentBlockParam[];

package/dist/{types-yiXmqedU.d.ts → types-B37hKoWA.d.ts}

@@ -1,5 +1,5 @@
 import Redis from 'ioredis';
-import { J as JsonValue } from './types-CADc5V_P.js';
+import { J as JsonValue } from './types-CPKDl-y_.js';
 
 interface ThreadManagerConfig<T> {
     redis: Redis;

package/dist/{types-DQ1l_gXL.d.cts → types-BO7Yju20.d.cts}

@@ -2,7 +2,7 @@ import { Duration } from '@temporalio/common';
 import { ActivityFunctionWithOptions, QueryDefinition, ActivityInterfaceFor } from '@temporalio/workflow';
 import { UpdateDefinition } from '@temporalio/common/lib/interfaces';
 import { z } from 'zod';
-import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, g as SandboxOps } from './types-DxCpFNv_.cjs';
+import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, f as SandboxSnapshot, g as SandboxOps } from './types-tQL9njTu.cjs';
 
 /**
  * A tool definition with a name, description, and Zod schema for arguments.
@@ -797,6 +797,7 @@ type ThreadInit = {
     mode: "fork";
     threadId: string;
 };
+
 /**
  * Sandbox initialization strategy.
  *
@@ -808,6 +809,8 @@ type ThreadInit = {
  *   on exit.
  * - `"fork"` — fork from an existing (or paused) sandbox; a new sandbox is
  *   created and owned by this session.
+ * - `"from-snapshot"` — restore a fresh sandbox from a previously captured
+ *   {@link SandboxSnapshot}. The new sandbox is owned by this session.
  * - `"inherit"` — use a sandbox owned by someone else (e.g. a parent agent).
  *   The session will **not** manage its lifecycle on exit.
  */
@@ -820,6 +823,9 @@ type SandboxInit = {
 } | {
     mode: "fork";
     sandboxId: string;
+} | {
+    mode: "from-snapshot";
+    snapshot: SandboxSnapshot;
 } | {
     mode: "inherit";
     sandboxId: string;
@@ -830,8 +836,11 @@ type SandboxInit = {
  * - `"destroy"` — tear down the sandbox entirely.
  * - `"pause"` — pause the sandbox so it can be resumed later.
  * - `"keep"` — leave the sandbox running (no-op on exit).
+ * - `"snapshot"` — capture a snapshot then destroy the sandbox. The snapshot
+ *   is surfaced on the session result so the caller can reuse it to spawn
+ *   future sandboxes.
  */
-type SandboxShutdown = "destroy" | "pause" | "keep";
+type SandboxShutdown = "destroy" | "pause" | "keep" | "snapshot";
 /**
  * Extended shutdown options available to subagent workflows.
  *
@@ -847,6 +856,14 @@ type SubagentSandboxShutdown = SandboxShutdown | "pause-until-parent-close" | "k
 type SubagentHandlerResponse<TResult = null, TToolResponse = JsonValue> = ToolHandlerResponse<TResult, TToolResponse> & {
     threadId: string;
     sandboxId?: string;
+    /** Snapshot captured on session exit when `sandboxShutdown === "snapshot"`. */
+    snapshot?: SandboxSnapshot;
+    /**
+     * Snapshot captured immediately after the sandbox was seeded (before the
+     * first agent turn) when `continuation === "snapshot"`. Only set on the
+     * first call that actually created the sandbox.
+     */
+    baseSnapshot?: SandboxSnapshot;
 };
 /**
  * Raw workflow input fields passed from parent to child workflow.
@@ -876,23 +893,31 @@ type SubagentContext = Record<string, unknown> | (() => Record<string, unknown>)
  * Sandbox configuration for a subagent.
  *
  * - `"none"` — no sandbox (default).
- * - `{ source: "inherit", continuation }` — reuse the parent's sandbox.
+ * - `{ source: "inherit", continuation, proxy }` — reuse the parent's sandbox.
  *   `continuation: "continue"` shares the parent sandbox directly;
  *   `continuation: "fork"` forks from the parent on every call.
- * - `{ source: "own", init?, continuation }` — the child gets its own sandbox.
- *   `init: "per-call"` (default) creates fresh each call (thread continuation
- *   uses the previous sandbox). `init: "once"` creates on the first call and
- *   stores it for all subsequent calls.
+ * - `{ source: "own", init?, continuation, proxy }` — the child gets its own
+ *   sandbox. `init: "per-call"` (default) creates fresh each call (thread
+ *   continuation uses the previous sandbox). `init: "once"` creates on the
+ *   first call and stores it for all subsequent calls.
+ *
+ * `proxy` is a factory that returns workflow-safe sandbox ops matching the
+ * subagent's own activities. Called once inside `createSubagentHandler` with
+ * `scope = agentName`, so the returned proxy resolves to the same activity
+ * prefix the child session uses. The parent uses it to destroy lingering
+ * sandboxes and delete stored snapshots at shutdown.
  */
 type SubagentSandboxConfig = "none" | {
     source: "inherit";
     continuation: "continue" | "fork";
     shutdown?: SubagentSandboxShutdown;
+    proxy: (scope: string) => SandboxOps;
 } | {
     source: "own";
     init?: "per-call" | "once";
-    continuation: "continue" | "fork";
+    continuation: "continue" | "fork" | "snapshot";
     shutdown?: SubagentSandboxShutdown;
+    proxy: (scope: string) => SandboxOps;
 };
 /**
  * Configuration for a subagent that can be spawned by the parent workflow.
@@ -930,6 +955,21 @@ interface SubagentConfig<TResult extends z.ZodType = z.ZodType> {
      * Sandbox strategy for this subagent.
      *
      * @see {@link SubagentSandboxConfig}
+     *
+     * @example
+     * ```ts
+     * import { proxyDaytonaSandboxOps } from "zeitlich/adapters/sandbox/daytona/workflow";
+     *
+     * const researcher: SubagentConfig = {
+     *   agentName: "researcher",
+     *   workflow: researcherWorkflow,
+     *   sandbox: {
+     *     source: "own",
+     *     continuation: "snapshot",
+     *     proxy: proxyDaytonaSandboxOps,
+     *   },
+     * };
+     * ```
      */
     sandbox?: SubagentSandboxConfig;
 }
@@ -963,18 +1003,16 @@ interface SubagentHooks<TArgs = unknown, TResult = unknown> {
     }) => PostToolUseFailureHookResult | Promise<PostToolUseFailureHookResult>;
 }
 /**
- * Extended response from the subagent `fn` — includes optional cleanup callbacks
- * stripped before signaling the parent.
+ * Response returned from a subagent workflow `fn`.
  *
  * When `TSandboxShutdown` is `"pause-until-parent-close"` or
- * `"keep-until-parent-close"`, both `destroySandbox` and `sandboxId` become
- * required so the parent can coordinate cleanup.
+ * `"keep-until-parent-close"`, the parent needs the `sandboxId` to destroy
+ * the sandbox at its own shutdown, so the field becomes required.
  */
 type SubagentFnResult<TResult = null, TSandboxShutdown extends SubagentSandboxShutdown = SubagentSandboxShutdown> = SubagentHandlerResponse<TResult> & (TSandboxShutdown extends "pause-until-parent-close" | "keep-until-parent-close" ? {
-    destroySandbox: () => Promise<void>;
     sandboxId: string;
 } : {
-    destroySandbox?: () => Promise<void>;
+    sandboxId?: string;
 });
 /**
  * Session config fields passed from parent to child workflow.
@@ -1221,6 +1259,17 @@ type SessionResult<M, TState extends JsonSerializable<TState>, HasSandbox extend
     finalMessage: M | null;
     exitReason: SessionExitReason;
     usage: ReturnType<AgentStateManager<TState>["getTotalUsage"]>;
+    /**
+     * Snapshot captured on exit when `sandboxShutdown === "snapshot"`.
+     */
+    snapshot?: SandboxSnapshot;
+    /**
+     * Snapshot captured immediately after sandbox seeding (before the agent
+     * loop starts) when `sandbox.mode === "new"` and
+     * `sandboxShutdown === "snapshot"`. Intended as a reusable "base" for new
+     * threads that want to skip re-seeding.
+     */
+    baseSnapshot?: SandboxSnapshot;
 } & (HasSandbox extends true ? {
     sandboxId: string;
 } : {

package/dist/{types-wiGLvxWf.d.ts → types-CNuWnvy9.d.ts}

@@ -1,4 +1,4 @@
-import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, S as Sandbox, d as SandboxCreateOptions } from './types-DxCpFNv_.js';
+import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, S as Sandbox, d as SandboxCreateOptions } from './types-tQL9njTu.js';
 import { BedrockAgentCoreClient, BedrockAgentCoreClientConfig } from '@aws-sdk/client-bedrock-agentcore';
 
 /**

package/dist/{types-CADc5V_P.d.ts → types-CPKDl-y_.d.ts}

@@ -2,7 +2,7 @@ import { Duration } from '@temporalio/common';
 import { ActivityFunctionWithOptions, QueryDefinition, ActivityInterfaceFor } from '@temporalio/workflow';
 import { UpdateDefinition } from '@temporalio/common/lib/interfaces';
 import { z } from 'zod';
-import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, g as SandboxOps } from './types-DxCpFNv_.js';
+import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, f as SandboxSnapshot, g as SandboxOps } from './types-tQL9njTu.js';
 
 /**
  * A tool definition with a name, description, and Zod schema for arguments.
@@ -797,6 +797,7 @@ type ThreadInit = {
     mode: "fork";
     threadId: string;
 };
+
 /**
  * Sandbox initialization strategy.
  *
@@ -808,6 +809,8 @@ type ThreadInit = {
  *   on exit.
  * - `"fork"` — fork from an existing (or paused) sandbox; a new sandbox is
  *   created and owned by this session.
+ * - `"from-snapshot"` — restore a fresh sandbox from a previously captured
+ *   {@link SandboxSnapshot}. The new sandbox is owned by this session.
  * - `"inherit"` — use a sandbox owned by someone else (e.g. a parent agent).
  *   The session will **not** manage its lifecycle on exit.
  */
@@ -820,6 +823,9 @@ type SandboxInit = {
 } | {
     mode: "fork";
     sandboxId: string;
+} | {
+    mode: "from-snapshot";
+    snapshot: SandboxSnapshot;
 } | {
     mode: "inherit";
     sandboxId: string;
@@ -830,8 +836,11 @@ type SandboxInit = {
  * - `"destroy"` — tear down the sandbox entirely.
  * - `"pause"` — pause the sandbox so it can be resumed later.
  * - `"keep"` — leave the sandbox running (no-op on exit).
+ * - `"snapshot"` — capture a snapshot then destroy the sandbox. The snapshot
+ *   is surfaced on the session result so the caller can reuse it to spawn
+ *   future sandboxes.
  */
-type SandboxShutdown = "destroy" | "pause" | "keep";
+type SandboxShutdown = "destroy" | "pause" | "keep" | "snapshot";
 /**
  * Extended shutdown options available to subagent workflows.
  *
@@ -847,6 +856,14 @@ type SubagentSandboxShutdown = SandboxShutdown | "pause-until-parent-close" | "k
 type SubagentHandlerResponse<TResult = null, TToolResponse = JsonValue> = ToolHandlerResponse<TResult, TToolResponse> & {
     threadId: string;
     sandboxId?: string;
+    /** Snapshot captured on session exit when `sandboxShutdown === "snapshot"`. */
+    snapshot?: SandboxSnapshot;
+    /**
+     * Snapshot captured immediately after the sandbox was seeded (before the
+     * first agent turn) when `continuation === "snapshot"`. Only set on the
+     * first call that actually created the sandbox.
+     */
+    baseSnapshot?: SandboxSnapshot;
 };
 /**
  * Raw workflow input fields passed from parent to child workflow.
@@ -876,23 +893,31 @@ type SubagentContext = Record<string, unknown> | (() => Record<string, unknown>)
  * Sandbox configuration for a subagent.
  *
  * - `"none"` — no sandbox (default).
- * - `{ source: "inherit", continuation }` — reuse the parent's sandbox.
+ * - `{ source: "inherit", continuation, proxy }` — reuse the parent's sandbox.
  *   `continuation: "continue"` shares the parent sandbox directly;
  *   `continuation: "fork"` forks from the parent on every call.
- * - `{ source: "own", init?, continuation }` — the child gets its own sandbox.
- *   `init: "per-call"` (default) creates fresh each call (thread continuation
- *   uses the previous sandbox). `init: "once"` creates on the first call and
- *   stores it for all subsequent calls.
+ * - `{ source: "own", init?, continuation, proxy }` — the child gets its own
+ *   sandbox. `init: "per-call"` (default) creates fresh each call (thread
+ *   continuation uses the previous sandbox). `init: "once"` creates on the
+ *   first call and stores it for all subsequent calls.
+ *
+ * `proxy` is a factory that returns workflow-safe sandbox ops matching the
+ * subagent's own activities. Called once inside `createSubagentHandler` with
+ * `scope = agentName`, so the returned proxy resolves to the same activity
+ * prefix the child session uses. The parent uses it to destroy lingering
+ * sandboxes and delete stored snapshots at shutdown.
  */
 type SubagentSandboxConfig = "none" | {
     source: "inherit";
     continuation: "continue" | "fork";
     shutdown?: SubagentSandboxShutdown;
+    proxy: (scope: string) => SandboxOps;
 } | {
     source: "own";
     init?: "per-call" | "once";
-    continuation: "continue" | "fork";
+    continuation: "continue" | "fork" | "snapshot";
     shutdown?: SubagentSandboxShutdown;
+    proxy: (scope: string) => SandboxOps;
 };
 /**
  * Configuration for a subagent that can be spawned by the parent workflow.
@@ -930,6 +955,21 @@ interface SubagentConfig<TResult extends z.ZodType = z.ZodType> {
      * Sandbox strategy for this subagent.
      *
      * @see {@link SubagentSandboxConfig}
+     *
+     * @example
+     * ```ts
+     * import { proxyDaytonaSandboxOps } from "zeitlich/adapters/sandbox/daytona/workflow";
+     *
+     * const researcher: SubagentConfig = {
+     *   agentName: "researcher",
+     *   workflow: researcherWorkflow,
+     *   sandbox: {
+     *     source: "own",
+     *     continuation: "snapshot",
+     *     proxy: proxyDaytonaSandboxOps,
+     *   },
+     * };
+     * ```
      */
     sandbox?: SubagentSandboxConfig;
 }
@@ -963,18 +1003,16 @@ interface SubagentHooks<TArgs = unknown, TResult = unknown> {
     }) => PostToolUseFailureHookResult | Promise<PostToolUseFailureHookResult>;
 }
 /**
- * Extended response from the subagent `fn` — includes optional cleanup callbacks
- * stripped before signaling the parent.
+ * Response returned from a subagent workflow `fn`.
  *
  * When `TSandboxShutdown` is `"pause-until-parent-close"` or
- * `"keep-until-parent-close"`, both `destroySandbox` and `sandboxId` become
- * required so the parent can coordinate cleanup.
+ * `"keep-until-parent-close"`, the parent needs the `sandboxId` to destroy
+ * the sandbox at its own shutdown, so the field becomes required.
  */
 type SubagentFnResult<TResult = null, TSandboxShutdown extends SubagentSandboxShutdown = SubagentSandboxShutdown> = SubagentHandlerResponse<TResult> & (TSandboxShutdown extends "pause-until-parent-close" | "keep-until-parent-close" ? {
-    destroySandbox: () => Promise<void>;
     sandboxId: string;
 } : {
-    destroySandbox?: () => Promise<void>;
+    sandboxId?: string;
 });
 /**
  * Session config fields passed from parent to child workflow.
@@ -1221,6 +1259,17 @@ type SessionResult<M, TState extends JsonSerializable<TState>, HasSandbox extend
     finalMessage: M | null;
     exitReason: SessionExitReason;
     usage: ReturnType<AgentStateManager<TState>["getTotalUsage"]>;
+    /**
+     * Snapshot captured on exit when `sandboxShutdown === "snapshot"`.
+     */
+    snapshot?: SandboxSnapshot;
+    /**
+     * Snapshot captured immediately after sandbox seeding (before the agent
+     * loop starts) when `sandbox.mode === "new"` and
+     * `sandboxShutdown === "snapshot"`. Intended as a reusable "base" for new
+     * threads that want to skip re-seeding.
+     */
+    baseSnapshot?: SandboxSnapshot;
 } & (HasSandbox extends true ? {
     sandboxId: string;
 } : {

package/dist/{types-Mc_4BCfT.d.cts → types-D08CXPh8.d.cts}

@@ -1,5 +1,5 @@
 import Redis from 'ioredis';
-import { J as JsonValue } from './types-DQ1l_gXL.cjs';
+import { J as JsonValue } from './types-BO7Yju20.cjs';
 
 interface ThreadManagerConfig<T> {
     redis: Redis;

package/dist/{types-CBH54cwr.d.cts → types-DWEUmYAJ.d.cts}

@@ -1,4 +1,4 @@
-import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, S as Sandbox, d as SandboxCreateOptions } from './types-DxCpFNv_.cjs';
+import { a as SandboxFileSystem, F as FileStat, D as DirentEntry, S as Sandbox, d as SandboxCreateOptions } from './types-tQL9njTu.cjs';
 import { BedrockAgentCoreClient, BedrockAgentCoreClientConfig } from '@aws-sdk/client-bedrock-agentcore';
 
 /**

package/dist/{types-DxCpFNv_.d.cts → types-tQL9njTu.d.cts}

@@ -13,6 +13,15 @@ interface FileStat {
     size: number;
     mtime: Date;
 }
+interface SandboxNetworkConfig {
+    allowOut?: string[];
+    denyOut?: string[];
+    allowPublicTraffic?: boolean;
+}
+interface SandboxLifecycleConfig {
+    onTimeout: "kill" | "pause";
+    autoResume?: boolean;
+}
 /**
  * Provider-agnostic filesystem interface.
  *
@@ -83,6 +92,16 @@ interface SandboxCreateOptions {
     initialFiles?: Record<string, string | Uint8Array>;
     /** Environment variables available inside the sandbox */
     env?: Record<string, string>;
+    /** Key-value metadata surfaced via provider list/query APIs */
+    metadata?: Record<string, string>;
+    /** Sandbox idle timeout in milliseconds */
+    timeoutMs?: number;
+    /** Enable or disable outbound internet access */
+    allowInternetAccess?: boolean;
+    /** Outbound network allow/deny rules */
+    network?: SandboxNetworkConfig;
+    /** Sandbox timeout behaviour */
+    lifecycle?: SandboxLifecycleConfig;
 }
 interface SandboxCreateResult {
     sandbox: Sandbox;
@@ -98,6 +117,8 @@ interface SandboxProvider<TOptions extends SandboxCreateOptions = SandboxCreateO
     resume(sandboxId: string): Promise<void>;
     snapshot(sandboxId: string): Promise<SandboxSnapshot>;
     restore(snapshot: SandboxSnapshot): Promise<Sandbox>;
+    /** Delete a previously captured snapshot. No-op if already deleted. */
+    deleteSnapshot(snapshot: SandboxSnapshot): Promise<void>;
     fork(sandboxId: string): Promise<Sandbox>;
 }
 interface SandboxOps<TOptions extends SandboxCreateOptions = SandboxCreateOptions, TCtx = unknown> {
@@ -109,6 +130,10 @@ interface SandboxOps<TOptions extends SandboxCreateOptions = SandboxCreateOption
     /** Resume a paused sandbox. No-op if already running. */
     resumeSandbox(sandboxId: string): Promise<void>;
     snapshotSandbox(sandboxId: string): Promise<SandboxSnapshot>;
+    /** Create a fresh sandbox from a previously captured snapshot. */
+    restoreSandbox(snapshot: SandboxSnapshot): Promise<string>;
+    /** Delete a previously captured snapshot. No-op if already deleted. */
+    deleteSandboxSnapshot(snapshot: SandboxSnapshot): Promise<void>;
     forkSandbox(sandboxId: string): Promise<string>;
 }
 /**

package/dist/{types-DxCpFNv_.d.ts → types-tQL9njTu.d.ts}

@@ -13,6 +13,15 @@ interface FileStat {
     size: number;
     mtime: Date;
 }
+interface SandboxNetworkConfig {
+    allowOut?: string[];
+    denyOut?: string[];
+    allowPublicTraffic?: boolean;
+}
+interface SandboxLifecycleConfig {
+    onTimeout: "kill" | "pause";
+    autoResume?: boolean;
+}
 /**
  * Provider-agnostic filesystem interface.
  *
@@ -83,6 +92,16 @@ interface SandboxCreateOptions {
     initialFiles?: Record<string, string | Uint8Array>;
     /** Environment variables available inside the sandbox */
     env?: Record<string, string>;
+    /** Key-value metadata surfaced via provider list/query APIs */
+    metadata?: Record<string, string>;
+    /** Sandbox idle timeout in milliseconds */
+    timeoutMs?: number;
+    /** Enable or disable outbound internet access */
+    allowInternetAccess?: boolean;
+    /** Outbound network allow/deny rules */
+    network?: SandboxNetworkConfig;
+    /** Sandbox timeout behaviour */
+    lifecycle?: SandboxLifecycleConfig;
 }
 interface SandboxCreateResult {
     sandbox: Sandbox;
@@ -98,6 +117,8 @@ interface SandboxProvider<TOptions extends SandboxCreateOptions = SandboxCreateO
     resume(sandboxId: string): Promise<void>;
     snapshot(sandboxId: string): Promise<SandboxSnapshot>;
     restore(snapshot: SandboxSnapshot): Promise<Sandbox>;
+    /** Delete a previously captured snapshot. No-op if already deleted. */
+    deleteSnapshot(snapshot: SandboxSnapshot): Promise<void>;
     fork(sandboxId: string): Promise<Sandbox>;
 }
 interface SandboxOps<TOptions extends SandboxCreateOptions = SandboxCreateOptions, TCtx = unknown> {
@@ -109,6 +130,10 @@ interface SandboxOps<TOptions extends SandboxCreateOptions = SandboxCreateOption
     /** Resume a paused sandbox. No-op if already running. */
     resumeSandbox(sandboxId: string): Promise<void>;
     snapshotSandbox(sandboxId: string): Promise<SandboxSnapshot>;
+    /** Create a fresh sandbox from a previously captured snapshot. */
+    restoreSandbox(snapshot: SandboxSnapshot): Promise<string>;
+    /** Delete a previously captured snapshot. No-op if already deleted. */
+    deleteSandboxSnapshot(snapshot: SandboxSnapshot): Promise<void>;
     forkSandbox(sandboxId: string): Promise<string>;
 }
 /**

package/dist/{workflow-P2pTSfKu.d.ts → workflow-CjXHbZZc.d.ts}

@@ -1,5 +1,5 @@
-import { ao as ToolMap, _ as SessionConfig, az as ZeitlichSession, Y as SandboxShutdown, ag as ThreadInit, X as SandboxInit, t as JsonSerializable, B as BaseAgentState, o as AgentStateManager, aB as ToolRouterOptions, ar as ToolRouter, R as RouterContext, J as JsonValue, at as ToolWithHandler, v as ParsedToolCallUnion, ap as ToolNames, a6 as SubagentDefinition, a9 as SubagentHooks, aa as SubagentSandboxConfig, a5 as SubagentConfig, ab as SubagentSandboxShutdown, ac as SubagentSessionInput, a7 as SubagentFnResult, a3 as SessionStartHook, $ as SessionEndHook, D as PostToolUseHook, y as PostToolUseFailureHook, a1 as SessionExitReason, ah as TokenUsage, e as RunAgentConfig, A as AgentResponse, F as FileEntryMetadata, av as VirtualFileTree, j as TreeMutation, r as FileEntry, aw as VirtualFsOps, g as SkillMetadata, h as Skill, b as ToolHandlerResponse, am as ToolHandler, ay as WorkflowTask, c as ActivityToolHandler } from './types-CADc5V_P.js';
-import { g as SandboxOps } from './types-DxCpFNv_.js';
+import { ao as ToolMap, _ as SessionConfig, az as ZeitlichSession, Y as SandboxShutdown, ag as ThreadInit, X as SandboxInit, t as JsonSerializable, B as BaseAgentState, o as AgentStateManager, aB as ToolRouterOptions, ar as ToolRouter, R as RouterContext, J as JsonValue, at as ToolWithHandler, v as ParsedToolCallUnion, ap as ToolNames, a6 as SubagentDefinition, a9 as SubagentHooks, aa as SubagentSandboxConfig, a5 as SubagentConfig, ab as SubagentSandboxShutdown, ac as SubagentSessionInput, a7 as SubagentFnResult, a3 as SessionStartHook, $ as SessionEndHook, D as PostToolUseHook, y as PostToolUseFailureHook, a1 as SessionExitReason, ah as TokenUsage, e as RunAgentConfig, A as AgentResponse, F as FileEntryMetadata, av as VirtualFileTree, j as TreeMutation, r as FileEntry, aw as VirtualFsOps, g as SkillMetadata, h as Skill, b as ToolHandlerResponse, am as ToolHandler, ay as WorkflowTask, c as ActivityToolHandler } from './types-CPKDl-y_.js';
+import { g as SandboxOps } from './types-tQL9njTu.js';
 import z$1, { z } from 'zod';
 import { Sinks, proxyActivities } from '@temporalio/workflow';
 

package/dist/{workflow-DhtWRovz.d.cts → workflow-Do_lzJpT.d.cts}

@@ -1,5 +1,5 @@
-import { ao as ToolMap, _ as SessionConfig, az as ZeitlichSession, Y as SandboxShutdown, ag as ThreadInit, X as SandboxInit, t as JsonSerializable, B as BaseAgentState, o as AgentStateManager, aB as ToolRouterOptions, ar as ToolRouter, R as RouterContext, J as JsonValue, at as ToolWithHandler, v as ParsedToolCallUnion, ap as ToolNames, a6 as SubagentDefinition, a9 as SubagentHooks, aa as SubagentSandboxConfig, a5 as SubagentConfig, ab as SubagentSandboxShutdown, ac as SubagentSessionInput, a7 as SubagentFnResult, a3 as SessionStartHook, $ as SessionEndHook, D as PostToolUseHook, y as PostToolUseFailureHook, a1 as SessionExitReason, ah as TokenUsage, e as RunAgentConfig, A as AgentResponse, F as FileEntryMetadata, av as VirtualFileTree, j as TreeMutation, r as FileEntry, aw as VirtualFsOps, g as SkillMetadata, h as Skill, b as ToolHandlerResponse, am as ToolHandler, ay as WorkflowTask, c as ActivityToolHandler } from './types-DQ1l_gXL.cjs';
-import { g as SandboxOps } from './types-DxCpFNv_.cjs';
+import { ao as ToolMap, _ as SessionConfig, az as ZeitlichSession, Y as SandboxShutdown, ag as ThreadInit, X as SandboxInit, t as JsonSerializable, B as BaseAgentState, o as AgentStateManager, aB as ToolRouterOptions, ar as ToolRouter, R as RouterContext, J as JsonValue, at as ToolWithHandler, v as ParsedToolCallUnion, ap as ToolNames, a6 as SubagentDefinition, a9 as SubagentHooks, aa as SubagentSandboxConfig, a5 as SubagentConfig, ab as SubagentSandboxShutdown, ac as SubagentSessionInput, a7 as SubagentFnResult, a3 as SessionStartHook, $ as SessionEndHook, D as PostToolUseHook, y as PostToolUseFailureHook, a1 as SessionExitReason, ah as TokenUsage, e as RunAgentConfig, A as AgentResponse, F as FileEntryMetadata, av as VirtualFileTree, j as TreeMutation, r as FileEntry, aw as VirtualFsOps, g as SkillMetadata, h as Skill, b as ToolHandlerResponse, am as ToolHandler, ay as WorkflowTask, c as ActivityToolHandler } from './types-BO7Yju20.cjs';
+import { g as SandboxOps } from './types-tQL9njTu.cjs';
 import z$1, { z } from 'zod';
 import { Sinks, proxyActivities } from '@temporalio/workflow';