feat: add trusted process environment values

Author: seratch

.changeset/trusted-process-environment-values.md

@@ -0,0 +1,6 @@
+---
+'@openai/agents-core': patch
+'@openai/agents-extensions': patch
+---
+
+feat: add trusted process environment values for Docker and Daytona sandboxes

packages/agents-core/src/sandbox/client.ts

@@ -60,6 +60,12 @@ export type SandboxClientResumeOptions<
   clientOptions?: TOptions;
 };
 
+export type SandboxClientDeserializeOptions<
+  TOptions extends SandboxClientOptions = SandboxClientOptions,
+> = {
+  clientOptions?: TOptions;
+};
+
 export type SandboxClientCreate<
   TOptions extends SandboxClientOptions = SandboxClientOptions,
   TSessionState extends SandboxSessionState = SandboxSessionState,
@@ -120,6 +126,7 @@ export interface SandboxClient<
   ): Promise<boolean> | boolean;
   deserializeSessionState?(
     state: Record<string, unknown>,
+    options?: SandboxClientDeserializeOptions<TOptions>,
   ): Promise<TSessionState>;
   /**
    * Resolves the current trusted manifest to the provider-owned root used by

packages/agents-core/src/sandbox/index.ts

@@ -8,6 +8,7 @@ export {
   Environment,
   EnvValueReference,
   Manifest,
+  ProcessEnvValue,
   cloneManifest,
   isEnvValueReference,
   isSerializedEnvValueReference,
@@ -29,6 +30,7 @@ export type {
   ManifestMountTarget,
   RenderManifestDescriptionOptions,
   SerializedEnvValueReference,
+  ProcessEnvironmentAccessOptions,
 } from './manifest';
 export * from './pathGrants';
 export * from './permissions';

packages/agents-core/src/sandbox/internal.ts

@@ -1,4 +1,5 @@
 export {
+  assertProcessEnvironmentDestinationsPreserved,
   assertHostPathGrantsRebound,
   deserializeMountCredentialRedactionMetadata,
   deserializeHostPathGrantRedactionMetadata,
@@ -56,8 +57,18 @@ export type {
 } from './mountSecurity';
 export { stableJsonStringify } from './shared/stableJson';
 export {
+  assertProcessEnvironmentAccessBound,
+  assertProcessEnvValuesUnsupported,
+  bindProcessEnvironmentAccess,
+  cloneManifestWithProcessEnvironmentAccess,
+  copyProcessEnvironmentProtection,
   copyManifestMountCredentialExposurePolicy,
+  environmentWithoutProcessEnvValues,
+  manifestHasProcessEnvValues,
+  protectProcessEnvironmentSessionStateManifest,
+  processEnvironmentDestinationNames,
   replaceManifestMountCredentialExposurePolicy,
+  withProcessEnvironmentErrorRedaction,
 } from './manifest';
 export {
   elapsedSeconds,