Agentic Sandbox v2026.7.6

Agentic Sandbox v2026.7.6

Released: 2026-07-11 Tag: `v2026.7.6` Previous: `v2026.7.5` Compare: `v2026.7.5...v2026.7.6`

What this release is

v2026.7.6 is a session-delivery release. It ships a structured agent-output stream so external consumers — notably AIWG Cockpit's Chat view — can render a message-oriented conversation instead of scraping raw PTY bytes, advertises that capability for discovery, and closes the admin-UX audit that followed (the operator dashboard now surfaces the same session-delivery surface external clients rely on).

The raw PTY terminal path is unchanged and remains authoritative; everything here is additive.

Highlights

  • Structured agent-output chat stream for Cockpit (#600): a new read-only

`GET /api/v1/agent-output/chat` endpoint projects a command's Claude Code `stream-json` into normalized `delta` / `tool_call` / `tool_result` / `status` / `done` / `error` / `raw` events. Frames use the Fortemi `POST /api/v1/chat/stream` SSE envelope (named events, JSON `data`, monotonic `{session}-{seq}` ids, `Last-Event-ID` resume, `STREAM_INTERRUPTED` terminal) for cross-project wire compatibility. Raw output (`/api/v1/agent-output/stream`) stays authoritative; subscribing confers no controller input authority. Sessions advertise `chat_source` (`stream-json` | `none`) and a `chat_stream_url`. Codex structured output is tracked as follow-up. Schema convergence is proposed upstream in `Fortemi/fortemi#1025`.

  • AgentCard advertises the structured-output capability (#630): the signed

AgentCard now carries an `agent-output/v1` extension (sources, event vocabulary, envelope) and a `supportedInterfaces` SSE entry, so capability discovery via the card — used by Cockpit and the admin AgentCard panel — finds the chat stream, not just the per-session `chat_source`. Contract doc: `docs/contracts/extensions/agent-output/v1/spec.md`.

  • Admin dashboard: Sessions & Output panel (#628, #629): the agent detail

modal now surfaces each session's delivery capabilities (`chat_source`, `session_backend`, `session_class`, screen availability), a read-only SSE Chat viewer, a Transcript view, and a Screen inspector — closing the operator-parity gap with Cockpit.

  • Admin dashboard: VM Reprovision control (#631): a confirmation-guarded,

operation-tracked Reprovision button on running VMs. The AIWG-reconnect control tooltip now disambiguates it from the #625 container control-stream reconnect (CLI-only).

Admin-UX audit (#632)

This release closes the audit epic #632, which found the operator dashboard had fallen behind the session-delivery backend. Sub-issues #628, #629, #630, and #631 are all resolved. Deferred and tracked: create-time `session_backend`/`session_class` selection (vacuous until a second backend ships) and exposing the #625 container reconnect from the UI (needs a new HTTP endpoint; disambiguation shipped instead).

Upgrade notes

  • No breaking changes. All new surfaces are additive.
  • `rotate-secret` remains retired (`410 Gone`, since #412) — agents authenticate

via transport identity; there is no shared secret to rotate.

Issues closed

#600, #628, #629, #630, #631, #632