@tangle-network/agent-runtime 0.105.0 → 0.106.1

package/dist/mcp/bin.js

@@ -1,166 +1,136 @@
 #!/usr/bin/env node
-import {
-  readTraceContextFromEnv
-} from "../chunk-PZZKQVQV.js";
-import {
-  resolveRouterBaseUrl
-} from "../chunk-NURIQBJQ.js";
-import {
-  DelegationTaskQueue,
-  FileDelegationStore,
-  createMcpServer
-} from "../chunk-XBG2W2VW.js";
-import "../chunk-DPEUKJRO.js";
-import "../chunk-2VZYRB55.js";
-import "../chunk-HLKC4UYB.js";
-import "../chunk-ISPWRSEC.js";
-import "../chunk-KRBFHMV6.js";
-import "../chunk-3MDZX7YU.js";
-import "../chunk-M22PL4GH.js";
-import "../chunk-YEJR7IXO.js";
-
-// src/mcp/delegate-supervisor-provisioning.ts
-var DEFAULT_SUPERVISOR_MODEL = "moonshotai/kimi-k2.6";
-var DEFAULT_WORKER_HARNESS = "opencode";
+import { B as DelegationTaskQueue, X as FileDelegationStore, o as createMcpServer } from "../supervise-BiRutHS9.js";
+import { a as resolveRouterBaseUrl } from "../model-resolution-Btd9iIKV.js";
+import { n as readTraceContextFromEnv } from "../trace-propagation-CJJC7SVB.js";
+//#region src/mcp/delegate-supervisor-provisioning.ts
+const DEFAULT_SUPERVISOR_MODEL = "moonshotai/kimi-k2.6";
+const DEFAULT_WORKER_HARNESS = "opencode";
 function trimmed(value) {
-  const v = value?.trim();
-  return v ? v : void 0;
+	const v = value?.trim();
+	return v ? v : void 0;
 }
+/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:
+*  the wiring is additive, so consumers that do not enable it are unaffected. */
 function delegateEnabled(env = process.env) {
-  return env.MCP_ENABLE_DELEGATE === "1";
+	return env.MCP_ENABLE_DELEGATE === "1";
 }
+/** Resolve the supervisor brain's router substrate from env. The key falls back through the platform
+*  key the bin already requires; the base reuses `resolveRouterBaseUrl`, normalised to `/v1`. */
 function resolveRouter(env) {
-  const routerKey = trimmed(env.MCP_SUPERVISOR_ROUTER_KEY) ?? trimmed(env.TANGLE_API_KEY) ?? "";
-  const base = trimmed(env.MCP_SUPERVISOR_ROUTER_BASE_URL) ?? resolveRouterBaseUrl(env);
-  const routerBaseUrl = /\/v\d+\/?$/.test(base) ? base.replace(/\/$/, "") : `${base.replace(/\/$/, "")}/v1`;
-  const model = trimmed(env.MCP_SUPERVISOR_MODEL) ?? trimmed(env.MCP_WORKER_MODEL) ?? trimmed(env.WORKER_MODEL) ?? DEFAULT_SUPERVISOR_MODEL;
-  return { routerBaseUrl, routerKey, model };
+	const routerKey = trimmed(env.MCP_SUPERVISOR_ROUTER_KEY) ?? trimmed(env.TANGLE_API_KEY) ?? "";
+	const base = trimmed(env.MCP_SUPERVISOR_ROUTER_BASE_URL) ?? resolveRouterBaseUrl(env);
+	return {
+		routerBaseUrl: /\/v\d+\/?$/.test(base) ? base.replace(/\/$/, "") : `${base.replace(/\/$/, "")}/v1`,
+		routerKey,
+		model: trimmed(env.MCP_SUPERVISOR_MODEL) ?? trimmed(env.MCP_WORKER_MODEL) ?? trimmed(env.WORKER_MODEL) ?? DEFAULT_SUPERVISOR_MODEL
+	};
 }
+/**
+* Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded
+* `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only
+* when asked. The worker backend is `sandbox` (authored workers run as sub-sandboxes via the same
+* client) on the harness named by `MCP_DELEGATE_WORKER_HARNESS` (default `opencode`).
+*/
 function resolveDelegateSupervisor(sandboxClient, env = process.env) {
-  if (!delegateEnabled(env)) return void 0;
-  const router = resolveRouter(env);
-  const harness = trimmed(env.MCP_DELEGATE_WORKER_HARNESS) ?? DEFAULT_WORKER_HARNESS;
-  const backend = {
-    backend: "sandbox",
-    harness,
-    sandboxClient
-  };
-  return {
-    router,
-    backend,
-    model: router.model
-  };
+	if (!delegateEnabled(env)) return void 0;
+	const router = resolveRouter(env);
+	return {
+		router,
+		backend: {
+			backend: "sandbox",
+			harness: trimmed(env.MCP_DELEGATE_WORKER_HARNESS) ?? DEFAULT_WORKER_HARNESS,
+			sandboxClient
+		},
+		model: router.model
+	};
 }
-
-// src/mcp/bin.ts
-var DEFAULT_SANDBOX_BASE_URL = "https://sandbox.tangle.tools";
+//#endregion
+//#region src/mcp/bin.ts
+const DEFAULT_SANDBOX_BASE_URL = "https://sandbox.tangle.tools";
 async function main() {
-  const wantDelegate = delegateEnabled(process.env);
-  let sandboxClient;
-  if (wantDelegate) {
-    const apiKey = process.env.TANGLE_API_KEY;
-    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {
-      process.stderr.write(
-        "agent-runtime-mcp: TANGLE_API_KEY is required to serve `delegate`. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\n"
-      );
-      process.exit(2);
-    }
-    sandboxClient = await loadSandboxClient(apiKey);
-  }
-  const traceContext = readTraceContextFromEnv();
-  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {
-    process.stderr.write(
-      `agent-runtime-mcp: exporting loop topology \u2192 ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}
-`
-    );
-  }
-  const delegateSupervisor = wantDelegate && sandboxClient ? resolveDelegateSupervisor(sandboxClient) : void 0;
-  if (wantDelegate && delegateSupervisor) {
-    process.stderr.write("agent-runtime-mcp: delegate enabled \u2014 generic authoring supervisor\n");
-  }
-  const durableQueue = await buildDurableQueueFromEnv(traceContext);
-  const server = createMcpServer({
-    ...delegateSupervisor ? { delegateSupervisor } : {},
-    traceContext,
-    ...durableQueue ? { queue: durableQueue } : {}
-  });
-  const shutdown = () => {
-    server.stop();
-    if (durableQueue) {
-      void durableQueue.flush().catch(() => {
-      }).finally(() => process.exit(0));
-      return;
-    }
-    process.exit(0);
-  };
-  process.on("SIGINT", shutdown);
-  process.on("SIGTERM", shutdown);
-  await server.serve();
+	const wantDelegate = delegateEnabled(process.env);
+	let sandboxClient;
+	if (wantDelegate) {
+		const apiKey = process.env.TANGLE_API_KEY;
+		if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {
+			process.stderr.write("agent-runtime-mcp: TANGLE_API_KEY is required to serve `delegate`. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\n");
+			process.exit(2);
+		}
+		sandboxClient = await loadSandboxClient(apiKey);
+	}
+	const traceContext = readTraceContextFromEnv();
+	if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) process.stderr.write(`agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\n`);
+	const delegateSupervisor = wantDelegate && sandboxClient ? resolveDelegateSupervisor(sandboxClient) : void 0;
+	if (wantDelegate && delegateSupervisor) process.stderr.write("agent-runtime-mcp: delegate enabled — generic authoring supervisor\n");
+	const durableQueue = await buildDurableQueueFromEnv(traceContext);
+	const server = createMcpServer({
+		...delegateSupervisor ? { delegateSupervisor } : {},
+		traceContext,
+		...durableQueue ? { queue: durableQueue } : {}
+	});
+	const shutdown = () => {
+		server.stop();
+		if (durableQueue) {
+			durableQueue.flush().catch(() => {}).finally(() => process.exit(0));
+			return;
+		}
+		process.exit(0);
+	};
+	process.on("SIGINT", shutdown);
+	process.on("SIGTERM", shutdown);
+	await server.serve();
 }
 async function buildDurableQueueFromEnv(traceContext) {
-  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim();
-  if (!stateFile) return void 0;
-  const store = new FileDelegationStore({
-    filePath: stateFile,
-    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === "1"
-  });
-  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL);
-  const queue = await DelegationTaskQueue.restore({
-    store,
-    traceContext,
-    ...maxTerminalRecords !== void 0 ? { maxTerminalRecords } : {},
-    onPersistError: (error) => {
-      process.stderr.write(`agent-runtime-mcp: ${error.message}
-`);
-      process.exit(1);
-    }
-  });
-  process.stderr.write(`agent-runtime-mcp: durable delegation state \u2192 ${stateFile}
-`);
-  return queue;
+	const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim();
+	if (!stateFile) return void 0;
+	const store = new FileDelegationStore({
+		filePath: stateFile,
+		recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === "1"
+	});
+	const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL);
+	const queue = await DelegationTaskQueue.restore({
+		store,
+		traceContext,
+		...maxTerminalRecords !== void 0 ? { maxTerminalRecords } : {},
+		onPersistError: (error) => {
+			process.stderr.write(`agent-runtime-mcp: ${error.message}\n`);
+			process.exit(1);
+		}
+	});
+	process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\n`);
+	return queue;
 }
 function parseRetention(raw) {
-  if (raw === void 0 || raw.trim() === "") return void 0;
-  const n = Number(raw);
-  if (!Number.isInteger(n) || n < 1) {
-    process.stderr.write(
-      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got "${raw}"
-`
-    );
-    process.exit(2);
-  }
-  return n;
+	if (raw === void 0 || raw.trim() === "") return void 0;
+	const n = Number(raw);
+	if (!Number.isInteger(n) || n < 1) {
+		process.stderr.write(`agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got "${raw}"\n`);
+		process.exit(2);
+	}
+	return n;
 }
 async function loadSandboxClient(apiKey) {
-  if (!apiKey) {
-    return {
-      async create() {
-        throw new Error(
-          "agent-runtime-mcp: TANGLE_API_KEY is unset; `delegate` is disabled in diagnostic mode. Set TANGLE_API_KEY or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list."
-        );
-      }
-    };
-  }
-  const mod = await import("@tangle-network/sandbox").catch((err) => {
-    process.stderr.write(
-      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency
-`
-    );
-    process.exit(2);
-  });
-  const SandboxCtor = mod.Sandbox;
-  if (!SandboxCtor) {
-    process.stderr.write(
-      "agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\n"
-    );
-    process.exit(2);
-  }
-  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL;
-  return new SandboxCtor({ apiKey, baseUrl });
+	if (!apiKey) return { async create() {
+		throw new Error("agent-runtime-mcp: TANGLE_API_KEY is unset; `delegate` is disabled in diagnostic mode. Set TANGLE_API_KEY or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.");
+	} };
+	const SandboxCtor = (await import("@tangle-network/sandbox").catch((err) => {
+		process.stderr.write(`agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\n`);
+		process.exit(2);
+	})).Sandbox;
+	if (!SandboxCtor) {
+		process.stderr.write("agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\n");
+		process.exit(2);
+	}
+	return new SandboxCtor({
+		apiKey,
+		baseUrl: process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL
+	});
 }
 main().catch((err) => {
-  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}
-`);
-  process.exit(1);
+	process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\n`);
+	process.exit(1);
 });
+//#endregion
+export {};
+
 //# sourceMappingURL=bin.js.map

package/dist/mcp/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/delegate-supervisor-provisioning.ts","../../src/mcp/bin.ts"],"sourcesContent":["/**\n *\n * Resolve the `delegate` supervisor substrate (router brain + worker backend) from env, so the\n * `agent-runtime-mcp` bin can serve the ONE generic `delegate` verb by env, over the SAME stdio\n * invocation a consumer already mounts.\n *\n * `delegate` is wired into `createMcpServer` via `McpServerOptions.delegateSupervisor`, which needs a\n * router (the supervisor brain's substrate) and a backend (WHERE the authored workers run). Inside a\n * sandbox child the natural backend is `sandbox`: authored workers run as sub-sandboxes through the\n * SAME `SandboxClient` the bin already loads from `TANGLE_API_KEY`. The brain's router reuses the\n * repo's `resolveRouterBaseUrl` convention\n * (`TANGLE_ROUTER_URL` / `TANGLE_ROUTER_BASE_URL`), normalised to an OpenAI-compatible `/v1` endpoint,\n * keyed by `TANGLE_API_KEY`.\n *\n * @experimental\n */\n\nimport type { BackendType } from '@tangle-network/sandbox'\nimport { type RouterEnv, resolveRouterBaseUrl } from '../model-resolution.js'\nimport type { SandboxClient } from '../runtime'\nimport type { RouterConfig } from '../runtime/router-client'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { DelegateHandlerOptions } from './tools/delegate'\n\nconst DEFAULT_SUPERVISOR_MODEL = 'moonshotai/kimi-k2.6'\nconst DEFAULT_WORKER_HARNESS = 'opencode'\n\nfunction trimmed(value: string | undefined): string | undefined {\n  const v = value?.trim()\n  return v ? v : undefined\n}\n\n/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:\n *  the wiring is additive, so consumers that do not enable it are unaffected. */\nexport function delegateEnabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.MCP_ENABLE_DELEGATE === '1'\n}\n\n/** Resolve the supervisor brain's router substrate from env. The key falls back through the platform\n *  key the bin already requires; the base reuses `resolveRouterBaseUrl`, normalised to `/v1`. */\nfunction resolveRouter(env: NodeJS.ProcessEnv): RouterConfig {\n  const routerKey = trimmed(env.MCP_SUPERVISOR_ROUTER_KEY) ?? trimmed(env.TANGLE_API_KEY) ?? ''\n  const base = trimmed(env.MCP_SUPERVISOR_ROUTER_BASE_URL) ?? resolveRouterBaseUrl(env as RouterEnv)\n  const routerBaseUrl = /\\/v\\d+\\/?$/.test(base)\n    ? base.replace(/\\/$/, '')\n    : `${base.replace(/\\/$/, '')}/v1`\n  const model =\n    trimmed(env.MCP_SUPERVISOR_MODEL) ??\n    trimmed(env.MCP_WORKER_MODEL) ??\n    trimmed(env.WORKER_MODEL) ??\n    DEFAULT_SUPERVISOR_MODEL\n  return { routerBaseUrl, routerKey, model }\n}\n\n/**\n * Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded\n * `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only\n * when asked. The worker backend is `sandbox` (authored workers run as sub-sandboxes via the same\n * client) on the harness named by `MCP_DELEGATE_WORKER_HARNESS` (default `opencode`).\n */\nexport function resolveDelegateSupervisor(\n  sandboxClient: SandboxClient,\n  env: NodeJS.ProcessEnv = process.env,\n): DelegateHandlerOptions | undefined {\n  if (!delegateEnabled(env)) return undefined\n  const router = resolveRouter(env)\n  const harness = (trimmed(env.MCP_DELEGATE_WORKER_HARNESS) ??\n    DEFAULT_WORKER_HARNESS) as BackendType\n  const backend: ExecutorConfig = {\n    backend: 'sandbox',\n    harness,\n    sandboxClient,\n  }\n  return {\n    router,\n    backend,\n    model: router.model,\n  }\n}\n","#!/usr/bin/env node\n\n/**\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Serves the ONE generic `delegate` verb (opt-in via `MCP_ENABLE_DELEGATE=1`): one intent → a\n * supervisor that authors + drives its own worker over `supervise()`, returning the delivered output\n * with its cost. The supervisor brain runs on the router; authored workers run as sub-sandboxes\n * through the same `SandboxClient` the bin loads from `TANGLE_API_KEY`. The queue-bound tools\n * (`delegate_feedback`, `delegation_status`, `delegation_history`) are always served.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   MCP_ENABLE_DELEGATE              set to `1` to serve the generic `delegate` verb. Its authoring\n *                                    supervisor runs the brain on the router and spawns authored\n *                                    workers as sub-sandboxes via the same client; needs TANGLE_API_KEY.\n *   MCP_SUPERVISOR_MODEL             supervisor brain model id (falls back to MCP_WORKER_MODEL, then\n *                                    WORKER_MODEL, then a default). Must be a tool-calling model.\n *   MCP_SUPERVISOR_ROUTER_KEY        router key for the supervisor brain (defaults to TANGLE_API_KEY)\n *   MCP_SUPERVISOR_ROUTER_BASE_URL   router base for the supervisor brain (defaults to the repo's\n *                                    resolveRouterBaseUrl, normalized to `/v1`)\n *   MCP_DELEGATE_WORKER_HARNESS      harness the authored workers run on (default `opencode`)\n *   AGENT_RUNTIME_DELEGATION_STATE_FILE\n *                                    optional — absolute path of a JSON state\n *                                    file. When set, delegation records persist\n *                                    across MCP restarts (FileDelegationStore):\n *                                    status/history survive and idempotency keys\n *                                    dedupe across processes.\n *   AGENT_RUNTIME_DELEGATION_STATE_RECOVER\n *                                    set to `1` to archive a corrupt state file\n *                                    (`<file>.corrupt-<ts>`) and start empty\n *                                    instead of refusing to boot.\n *   AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL\n *                                    optional — positive integer cap on retained\n *                                    terminal records. Unset = keep forever.\n *\n * @experimental\n */\n\nimport type { SandboxClient } from '../runtime'\nimport { delegateEnabled, resolveDelegateSupervisor } from './delegate-supervisor-provisioning'\nimport { FileDelegationStore } from './delegation-store'\nimport { createMcpServer } from './server'\nimport { DelegationTaskQueue } from './task-queue'\nimport { readTraceContextFromEnv, type TraceContext } from './trace-propagation'\n\nconst DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nasync function main(): Promise<void> {\n  const wantDelegate = delegateEnabled(process.env)\n\n  // The generic `delegate` verb needs the sandbox client: its authored workers run as sub-sandboxes\n  // (the `sandbox` backend). When `delegate` is not opted in, the server runs the queue-only subset\n  // (feedback + status + history) with no sandbox.\n  let sandboxClient: SandboxClient | undefined\n  if (wantDelegate) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required to serve `delegate`. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n  }\n\n  // The supervisor's loop topology spans export to the OTLP / Tangle Intelligence sink when\n  // OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for correlation). The same\n  // context is stamped onto every delegation record so journal consumers join records into the\n  // caller's trace.\n  const traceContext = readTraceContextFromEnv()\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  // The ONE generic `delegate` verb — opt-in via MCP_ENABLE_DELEGATE=1. Its authoring supervisor\n  // runs the brain on the router and spawns authored workers as sub-sandboxes through the SAME\n  // client, so it needs the loaded `sandboxClient`. Gated on the client resolving (no key → no\n  // delegate, fail-closed).\n  const delegateSupervisor =\n    wantDelegate && sandboxClient ? resolveDelegateSupervisor(sandboxClient) : undefined\n  if (wantDelegate && delegateSupervisor) {\n    process.stderr.write('agent-runtime-mcp: delegate enabled — generic authoring supervisor\\n')\n  }\n\n  const durableQueue = await buildDurableQueueFromEnv(traceContext)\n  const server = createMcpServer({\n    ...(delegateSupervisor ? { delegateSupervisor } : {}),\n    traceContext,\n    ...(durableQueue ? { queue: durableQueue } : {}),\n  })\n\n  const shutdown = () => {\n    server.stop()\n    // Drain journal writes so the state file reflects the final record\n    // states before the process exits. A persist failure already routed\n    // through onPersistError; swallow the duplicate rejection here.\n    if (durableQueue) {\n      void durableQueue\n        .flush()\n        .catch(() => {})\n        .finally(() => process.exit(0))\n      return\n    }\n    process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function buildDurableQueueFromEnv(\n  traceContext: TraceContext,\n): Promise<DelegationTaskQueue | undefined> {\n  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim()\n  if (!stateFile) return undefined\n  const store = new FileDelegationStore({\n    filePath: stateFile,\n    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === '1',\n  })\n  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL)\n  const queue = await DelegationTaskQueue.restore({\n    store,\n    traceContext,\n    ...(maxTerminalRecords !== undefined ? { maxTerminalRecords } : {}),\n    onPersistError: (error) => {\n      // Durable mode that can no longer write is a broken contract: crash\n      // loud instead of degrading to memory-only behind the caller's back.\n      process.stderr.write(`agent-runtime-mcp: ${error.message}\\n`)\n      process.exit(1)\n    },\n  })\n  process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\\n`)\n  return queue\n}\n\nfunction parseRetention(raw: string | undefined): number | undefined {\n  if (raw === undefined || raw.trim() === '') return undefined\n  const n = Number(raw)\n  if (!Number.isInteger(n) || n < 1) {\n    process.stderr.write(\n      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got \"${raw}\"\\n`,\n    )\n    process.exit(2)\n  }\n  return n\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // `delegate` requires a real client; the stub fails loud at create() so the\n  // agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; `delegate` is disabled in diagnostic mode. Set TANGLE_API_KEY or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  // @tangle-network/sandbox ≥0.6 makes baseUrl required; default it so the MCP server\n  // starts without forcing every caller to set SANDBOX_BASE_URL. Treat empty/whitespace as\n  // unset (|| not ??) so `SANDBOX_BASE_URL=` still resolves to the default.\n  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL\n  return new SandboxCtor({ apiKey, baseUrl })\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAwBA,IAAM,2BAA2B;AACjC,IAAM,yBAAyB;AAE/B,SAAS,QAAQ,OAA+C;AAC9D,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,IAAI,IAAI;AACjB;AAIO,SAAS,gBAAgB,MAAyB,QAAQ,KAAc;AAC7E,SAAO,IAAI,wBAAwB;AACrC;AAIA,SAAS,cAAc,KAAsC;AAC3D,QAAM,YAAY,QAAQ,IAAI,yBAAyB,KAAK,QAAQ,IAAI,cAAc,KAAK;AAC3F,QAAM,OAAO,QAAQ,IAAI,8BAA8B,KAAK,qBAAqB,GAAgB;AACjG,QAAM,gBAAgB,aAAa,KAAK,IAAI,IACxC,KAAK,QAAQ,OAAO,EAAE,IACtB,GAAG,KAAK,QAAQ,OAAO,EAAE,CAAC;AAC9B,QAAM,QACJ,QAAQ,IAAI,oBAAoB,KAChC,QAAQ,IAAI,gBAAgB,KAC5B,QAAQ,IAAI,YAAY,KACxB;AACF,SAAO,EAAE,eAAe,WAAW,MAAM;AAC3C;AAQO,SAAS,0BACd,eACA,MAAyB,QAAQ,KACG;AACpC,MAAI,CAAC,gBAAgB,GAAG,EAAG,QAAO;AAClC,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,UAAW,QAAQ,IAAI,2BAA2B,KACtD;AACF,QAAM,UAA0B;AAAA,IAC9B,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,EAChB;AACF;;;AC9BA,IAAM,2BAA2B;AAEjC,eAAe,OAAsB;AACnC,QAAM,eAAe,gBAAgB,QAAQ,GAAG;AAKhD,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAAA,EAChD;AAMA,QAAM,eAAe,wBAAwB;AAC7C,MAAI,QAAQ,IAAI,6BAA6B;AAC3C,YAAQ,OAAO;AAAA,MACb,qDAAgD,QAAQ,IAAI,2BAA2B;AAAA;AAAA,IACzF;AAAA,EACF;AAMA,QAAM,qBACJ,gBAAgB,gBAAgB,0BAA0B,aAAa,IAAI;AAC7E,MAAI,gBAAgB,oBAAoB;AACtC,YAAQ,OAAO,MAAM,2EAAsE;AAAA,EAC7F;AAEA,QAAM,eAAe,MAAM,yBAAyB,YAAY;AAChE,QAAM,SAAS,gBAAgB;AAAA,IAC7B,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACnD;AAAA,IACA,GAAI,eAAe,EAAE,OAAO,aAAa,IAAI,CAAC;AAAA,EAChD,CAAC;AAED,QAAM,WAAW,MAAM;AACrB,WAAO,KAAK;AAIZ,QAAI,cAAc;AAChB,WAAK,aACF,MAAM,EACN,MAAM,MAAM;AAAA,MAAC,CAAC,EACd,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAChC;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,yBACb,cAC0C;AAC1C,QAAM,YAAY,QAAQ,IAAI,qCAAqC,KAAK;AACxE,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,QAAQ,IAAI,oBAAoB;AAAA,IACpC,UAAU;AAAA,IACV,gBAAgB,QAAQ,IAAI,2CAA2C;AAAA,EACzE,CAAC;AACD,QAAM,qBAAqB,eAAe,QAAQ,IAAI,wCAAwC;AAC9F,QAAM,QAAQ,MAAM,oBAAoB,QAAQ;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,GAAI,uBAAuB,SAAY,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACjE,gBAAgB,CAAC,UAAU;AAGzB,cAAQ,OAAO,MAAM,sBAAsB,MAAM,OAAO;AAAA,CAAI;AAC5D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,CAAC;AACD,UAAQ,OAAO,MAAM,sDAAiD,SAAS;AAAA,CAAI;AACnF,SAAO;AACT;AAEA,SAAS,eAAe,KAA6C;AACnE,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,GAAI,QAAO;AACnD,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;AACjC,YAAQ,OAAO;AAAA,MACb,gGAAgG,GAAG;AAAA;AAAA,IACrG;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,eAAe,kBAAkB,QAAoD;AAKnF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAA6D;AAClF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAIA,QAAM,UAAU,QAAQ,IAAI,kBAAkB,KAAK,KAAK;AACxD,SAAO,IAAI,YAAY,EAAE,QAAQ,QAAQ,CAAC;AAC5C;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"file":"bin.js","names":[],"sources":["../../src/mcp/delegate-supervisor-provisioning.ts","../../src/mcp/bin.ts"],"sourcesContent":["/**\n *\n * Resolve the `delegate` supervisor substrate (router brain + worker backend) from env, so the\n * `agent-runtime-mcp` bin can serve the ONE generic `delegate` verb by env, over the SAME stdio\n * invocation a consumer already mounts.\n *\n * `delegate` is wired into `createMcpServer` via `McpServerOptions.delegateSupervisor`, which needs a\n * router (the supervisor brain's substrate) and a backend (WHERE the authored workers run). Inside a\n * sandbox child the natural backend is `sandbox`: authored workers run as sub-sandboxes through the\n * SAME `SandboxClient` the bin already loads from `TANGLE_API_KEY`. The brain's router reuses the\n * repo's `resolveRouterBaseUrl` convention\n * (`TANGLE_ROUTER_URL` / `TANGLE_ROUTER_BASE_URL`), normalised to an OpenAI-compatible `/v1` endpoint,\n * keyed by `TANGLE_API_KEY`.\n *\n * @experimental\n */\n\nimport type { BackendType } from '@tangle-network/sandbox'\nimport { type RouterEnv, resolveRouterBaseUrl } from '../model-resolution.js'\nimport type { SandboxClient } from '../runtime'\nimport type { RouterConfig } from '../runtime/router-client'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { DelegateHandlerOptions } from './tools/delegate'\n\nconst DEFAULT_SUPERVISOR_MODEL = 'moonshotai/kimi-k2.6'\nconst DEFAULT_WORKER_HARNESS = 'opencode'\n\nfunction trimmed(value: string | undefined): string | undefined {\n  const v = value?.trim()\n  return v ? v : undefined\n}\n\n/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:\n *  the wiring is additive, so consumers that do not enable it are unaffected. */\nexport function delegateEnabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.MCP_ENABLE_DELEGATE === '1'\n}\n\n/** Resolve the supervisor brain's router substrate from env. The key falls back through the platform\n *  key the bin already requires; the base reuses `resolveRouterBaseUrl`, normalised to `/v1`. */\nfunction resolveRouter(env: NodeJS.ProcessEnv): RouterConfig {\n  const routerKey = trimmed(env.MCP_SUPERVISOR_ROUTER_KEY) ?? trimmed(env.TANGLE_API_KEY) ?? ''\n  const base = trimmed(env.MCP_SUPERVISOR_ROUTER_BASE_URL) ?? resolveRouterBaseUrl(env as RouterEnv)\n  const routerBaseUrl = /\\/v\\d+\\/?$/.test(base)\n    ? base.replace(/\\/$/, '')\n    : `${base.replace(/\\/$/, '')}/v1`\n  const model =\n    trimmed(env.MCP_SUPERVISOR_MODEL) ??\n    trimmed(env.MCP_WORKER_MODEL) ??\n    trimmed(env.WORKER_MODEL) ??\n    DEFAULT_SUPERVISOR_MODEL\n  return { routerBaseUrl, routerKey, model }\n}\n\n/**\n * Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded\n * `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only\n * when asked. The worker backend is `sandbox` (authored workers run as sub-sandboxes via the same\n * client) on the harness named by `MCP_DELEGATE_WORKER_HARNESS` (default `opencode`).\n */\nexport function resolveDelegateSupervisor(\n  sandboxClient: SandboxClient,\n  env: NodeJS.ProcessEnv = process.env,\n): DelegateHandlerOptions | undefined {\n  if (!delegateEnabled(env)) return undefined\n  const router = resolveRouter(env)\n  const harness = (trimmed(env.MCP_DELEGATE_WORKER_HARNESS) ??\n    DEFAULT_WORKER_HARNESS) as BackendType\n  const backend: ExecutorConfig = {\n    backend: 'sandbox',\n    harness,\n    sandboxClient,\n  }\n  return {\n    router,\n    backend,\n    model: router.model,\n  }\n}\n","#!/usr/bin/env node\n\n/**\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Serves the ONE generic `delegate` verb (opt-in via `MCP_ENABLE_DELEGATE=1`): one intent → a\n * supervisor that authors + drives its own worker over `supervise()`, returning the delivered output\n * with its cost. The supervisor brain runs on the router; authored workers run as sub-sandboxes\n * through the same `SandboxClient` the bin loads from `TANGLE_API_KEY`. The queue-bound tools\n * (`delegate_feedback`, `delegation_status`, `delegation_history`) are always served.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   MCP_ENABLE_DELEGATE              set to `1` to serve the generic `delegate` verb. Its authoring\n *                                    supervisor runs the brain on the router and spawns authored\n *                                    workers as sub-sandboxes via the same client; needs TANGLE_API_KEY.\n *   MCP_SUPERVISOR_MODEL             supervisor brain model id (falls back to MCP_WORKER_MODEL, then\n *                                    WORKER_MODEL, then a default). Must be a tool-calling model.\n *   MCP_SUPERVISOR_ROUTER_KEY        router key for the supervisor brain (defaults to TANGLE_API_KEY)\n *   MCP_SUPERVISOR_ROUTER_BASE_URL   router base for the supervisor brain (defaults to the repo's\n *                                    resolveRouterBaseUrl, normalized to `/v1`)\n *   MCP_DELEGATE_WORKER_HARNESS      harness the authored workers run on (default `opencode`)\n *   AGENT_RUNTIME_DELEGATION_STATE_FILE\n *                                    optional — absolute path of a JSON state\n *                                    file. When set, delegation records persist\n *                                    across MCP restarts (FileDelegationStore):\n *                                    status/history survive and idempotency keys\n *                                    dedupe across processes.\n *   AGENT_RUNTIME_DELEGATION_STATE_RECOVER\n *                                    set to `1` to archive a corrupt state file\n *                                    (`<file>.corrupt-<ts>`) and start empty\n *                                    instead of refusing to boot.\n *   AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL\n *                                    optional — positive integer cap on retained\n *                                    terminal records. Unset = keep forever.\n *\n * @experimental\n */\n\nimport type { SandboxClient } from '../runtime'\nimport { delegateEnabled, resolveDelegateSupervisor } from './delegate-supervisor-provisioning'\nimport { FileDelegationStore } from './delegation-store'\nimport { createMcpServer } from './server'\nimport { DelegationTaskQueue } from './task-queue'\nimport { readTraceContextFromEnv, type TraceContext } from './trace-propagation'\n\nconst DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nasync function main(): Promise<void> {\n  const wantDelegate = delegateEnabled(process.env)\n\n  // The generic `delegate` verb needs the sandbox client: its authored workers run as sub-sandboxes\n  // (the `sandbox` backend). When `delegate` is not opted in, the server runs the queue-only subset\n  // (feedback + status + history) with no sandbox.\n  let sandboxClient: SandboxClient | undefined\n  if (wantDelegate) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required to serve `delegate`. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n  }\n\n  // The supervisor's loop topology spans export to the OTLP / Tangle Intelligence sink when\n  // OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for correlation). The same\n  // context is stamped onto every delegation record so journal consumers join records into the\n  // caller's trace.\n  const traceContext = readTraceContextFromEnv()\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  // The ONE generic `delegate` verb — opt-in via MCP_ENABLE_DELEGATE=1. Its authoring supervisor\n  // runs the brain on the router and spawns authored workers as sub-sandboxes through the SAME\n  // client, so it needs the loaded `sandboxClient`. Gated on the client resolving (no key → no\n  // delegate, fail-closed).\n  const delegateSupervisor =\n    wantDelegate && sandboxClient ? resolveDelegateSupervisor(sandboxClient) : undefined\n  if (wantDelegate && delegateSupervisor) {\n    process.stderr.write('agent-runtime-mcp: delegate enabled — generic authoring supervisor\\n')\n  }\n\n  const durableQueue = await buildDurableQueueFromEnv(traceContext)\n  const server = createMcpServer({\n    ...(delegateSupervisor ? { delegateSupervisor } : {}),\n    traceContext,\n    ...(durableQueue ? { queue: durableQueue } : {}),\n  })\n\n  const shutdown = () => {\n    server.stop()\n    // Drain journal writes so the state file reflects the final record\n    // states before the process exits. A persist failure already routed\n    // through onPersistError; swallow the duplicate rejection here.\n    if (durableQueue) {\n      void durableQueue\n        .flush()\n        .catch(() => {})\n        .finally(() => process.exit(0))\n      return\n    }\n    process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function buildDurableQueueFromEnv(\n  traceContext: TraceContext,\n): Promise<DelegationTaskQueue | undefined> {\n  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim()\n  if (!stateFile) return undefined\n  const store = new FileDelegationStore({\n    filePath: stateFile,\n    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === '1',\n  })\n  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL)\n  const queue = await DelegationTaskQueue.restore({\n    store,\n    traceContext,\n    ...(maxTerminalRecords !== undefined ? { maxTerminalRecords } : {}),\n    onPersistError: (error) => {\n      // Durable mode that can no longer write is a broken contract: crash\n      // loud instead of degrading to memory-only behind the caller's back.\n      process.stderr.write(`agent-runtime-mcp: ${error.message}\\n`)\n      process.exit(1)\n    },\n  })\n  process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\\n`)\n  return queue\n}\n\nfunction parseRetention(raw: string | undefined): number | undefined {\n  if (raw === undefined || raw.trim() === '') return undefined\n  const n = Number(raw)\n  if (!Number.isInteger(n) || n < 1) {\n    process.stderr.write(\n      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got \"${raw}\"\\n`,\n    )\n    process.exit(2)\n  }\n  return n\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // `delegate` requires a real client; the stub fails loud at create() so the\n  // agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; `delegate` is disabled in diagnostic mode. Set TANGLE_API_KEY or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  // @tangle-network/sandbox ≥0.6 makes baseUrl required; default it so the MCP server\n  // starts without forcing every caller to set SANDBOX_BASE_URL. Treat empty/whitespace as\n  // unset (|| not ??) so `SANDBOX_BASE_URL=` still resolves to the default.\n  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL\n  return new SandboxCtor({ apiKey, baseUrl })\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;AAwBA,MAAM,2BAA2B;AACjC,MAAM,yBAAyB;AAE/B,SAAS,QAAQ,OAA+C;CAC9D,MAAM,IAAI,OAAO,KAAK;CACtB,OAAO,IAAI,IAAI,KAAA;AACjB;;;AAIA,SAAgB,gBAAgB,MAAyB,QAAQ,KAAc;CAC7E,OAAO,IAAI,wBAAwB;AACrC;;;AAIA,SAAS,cAAc,KAAsC;CAC3D,MAAM,YAAY,QAAQ,IAAI,yBAAyB,KAAK,QAAQ,IAAI,cAAc,KAAK;CAC3F,MAAM,OAAO,QAAQ,IAAI,8BAA8B,KAAK,qBAAqB,GAAgB;CASjG,OAAO;EAAE,eARa,aAAa,KAAK,IAAI,IACxC,KAAK,QAAQ,OAAO,EAAE,IACtB,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE;EAMP;EAAW,OAJjC,QAAQ,IAAI,oBAAoB,KAChC,QAAQ,IAAI,gBAAgB,KAC5B,QAAQ,IAAI,YAAY,KACxB;CACuC;AAC3C;;;;;;;AAQA,SAAgB,0BACd,eACA,MAAyB,QAAQ,KACG;CACpC,IAAI,CAAC,gBAAgB,GAAG,GAAG,OAAO,KAAA;CAClC,MAAM,SAAS,cAAc,GAAG;CAQhC,OAAO;EACL;EACA,SAAA;GANA,SAAS;GACT,SAJe,QAAQ,IAAI,2BAA2B,KACtD;GAIA;EAIM;EACN,OAAO,OAAO;CAChB;AACF;;;AC9BA,MAAM,2BAA2B;AAEjC,eAAe,OAAsB;CACnC,MAAM,eAAe,gBAAgB,QAAQ,GAAG;CAKhD,IAAI;CACJ,IAAI,cAAc;EAChB,MAAM,SAAS,QAAQ,IAAI;EAC3B,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;GAC1D,QAAQ,OAAO,MACb,yMACF;GACA,QAAQ,KAAK,CAAC;EAChB;EACA,gBAAgB,MAAM,kBAAkB,MAAM;CAChD;CAMA,MAAM,eAAe,wBAAwB;CAC7C,IAAI,QAAQ,IAAI,6BACd,QAAQ,OAAO,MACb,gDAAgD,QAAQ,IAAI,4BAA4B,GAC1F;CAOF,MAAM,qBACJ,gBAAgB,gBAAgB,0BAA0B,aAAa,IAAI,KAAA;CAC7E,IAAI,gBAAgB,oBAClB,QAAQ,OAAO,MAAM,sEAAsE;CAG7F,MAAM,eAAe,MAAM,yBAAyB,YAAY;CAChE,MAAM,SAAS,gBAAgB;EAC7B,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;EACnD;EACA,GAAI,eAAe,EAAE,OAAO,aAAa,IAAI,CAAC;CAChD,CAAC;CAED,MAAM,iBAAiB;EACrB,OAAO,KAAK;EAIZ,IAAI,cAAc;GAChB,aACG,MAAM,CAAC,CACP,YAAY,CAAC,CAAC,CAAC,CACf,cAAc,QAAQ,KAAK,CAAC,CAAC;GAChC;EACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,QAAQ;CAE9B,MAAM,OAAO,MAAM;AACrB;AAEA,eAAe,yBACb,cAC0C;CAC1C,MAAM,YAAY,QAAQ,IAAI,qCAAqC,KAAK;CACxE,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,MAAM,QAAQ,IAAI,oBAAoB;EACpC,UAAU;EACV,gBAAgB,QAAQ,IAAI,2CAA2C;CACzE,CAAC;CACD,MAAM,qBAAqB,eAAe,QAAQ,IAAI,wCAAwC;CAC9F,MAAM,QAAQ,MAAM,oBAAoB,QAAQ;EAC9C;EACA;EACA,GAAI,uBAAuB,KAAA,IAAY,EAAE,mBAAmB,IAAI,CAAC;EACjE,iBAAiB,UAAU;GAGzB,QAAQ,OAAO,MAAM,sBAAsB,MAAM,QAAQ,GAAG;GAC5D,QAAQ,KAAK,CAAC;EAChB;CACF,CAAC;CACD,QAAQ,OAAO,MAAM,iDAAiD,UAAU,GAAG;CACnF,OAAO;AACT;AAEA,SAAS,eAAe,KAA6C;CACnE,IAAI,QAAQ,KAAA,KAAa,IAAI,KAAK,MAAM,IAAI,OAAO,KAAA;CACnD,MAAM,IAAI,OAAO,GAAG;CACpB,IAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;EACjC,QAAQ,OAAO,MACb,gGAAgG,IAAI,IACtG;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,OAAO;AACT;AAEA,eAAe,kBAAkB,QAAoD;CAKnF,IAAI,CAAC,QACH,OAAO,EACL,MAAM,SAAS;EACb,MAAM,IAAI,MACR,2LACF;CACF,EACF;CAWF,MAAM,eAAe,MANH,OAAO,0BAA0B,CAAC,OAAO,QAAQ;EACjE,QAAQ,OAAO,MACb,8DAA8D,IAAI,QAAQ,iCAC5E;EACA,QAAQ,KAAK,CAAC;CAChB,CAAC,EAAA,CACiF;CAClF,IAAI,CAAC,aAAa;EAChB,QAAQ,OAAO,MACb,+FACF;EACA,QAAQ,KAAK,CAAC;CAChB;CAKA,OAAO,IAAI,YAAY;EAAE;EAAQ,SADjB,QAAQ,IAAI,kBAAkB,KAAK,KAAK;CACf,CAAC;AAC5C;AAEA,KAAK,CAAC,CAAC,OAAO,QAAQ;CACpB,QAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,EAAE,GAAG;CAC7F,QAAQ,KAAK,CAAC;AAChB,CAAC"}