@tangle-network/agent-runtime 0.132.7 → 0.132.8

package/dist/{runtime-CKk_poJ-.d.ts → runtime-laujrVXP.d.ts}

@@ -1,7 +1,7 @@
 import { E as SandboxClient, i as ExecCtx } from "./types-6zHo67jn.js";
 import { V as Spend, X as UsageEvent, d as ExecutorFactory, m as ExecutorRegistry, mn as ExecutorProgress, sn as TraceSource } from "./types-BjUQODeG.js";
 import { i as AgentEnvironmentProvider, o as AgentEnvironmentProviderRegistry, w as ProviderExecutorOptions } from "./environment-provider-CkSDxRZd.js";
-import { AgentProfile, HarnessType, ReasoningEffort } from "@tangle-network/agent-interface";
+import { AgentProfile, AgentProfileMcpServer, HarnessType, ReasoningEffort } from "@tangle-network/agent-interface";
 import { WorkspacePlanReceipt } from "@tangle-network/agent-profile-materialize";
 import { ChildProcess } from "node:child_process";
 import { BackendType } from "@tangle-network/sandbox";
@@ -533,6 +533,56 @@ type WorktreeCheckRunner = (opts: {
   output: string;
 }>;
 //#endregion
+//#region src/runtime/key-provider.d.ts
+/** Resolve named secrets. The ONE seam every secret store adapts to. */
+interface KeyProvider {
+  /** The value for `name`, or `undefined` when this provider does not hold it. */
+  get(name: string): Promise<string | undefined>;
+}
+/** The env-backed provider: reads the (dotenvx-loaded) process env. Empty /
+ *  whitespace-only values count as absent — fail loud, not with a blank key. */
+declare function envKeyProvider(env?: Record<string, string | undefined>): KeyProvider;
+/** The `AgentProfileMcpServer.metadata` key the declarative secret-env map
+ *  rides under: `{ ENV_VAR_NAME: 'PROVIDER_KEY_NAME' }`. Names only — values
+ *  are resolved at materialize time and never stored. */
+declare const mcpSecretEnvMetadataKey = "secretEnv";
+/** Read (and validate) a server entry's declared secret-env map, if any.
+ *  Malformed metadata throws — a half-declared secret must never half-boot. */
+declare function secretEnvOfMcpServer(server: AgentProfileMcpServer): Record<string, string> | undefined;
+/**
+ * Resolve a declared secret-env map into the real env entries for a server
+ * spawn. Fail-closed: no provider or a missing key throws, naming the KEY
+ * NAME only (the value never appears in any message). `label` names the
+ * server for the error (e.g. `profile.mcp['exa']`).
+ */
+declare function resolveSecretEnv(secretEnv: Record<string, string>, keys: KeyProvider | undefined, label: string): Promise<Record<string, string>>;
+/** The spawn-ready strings for one stdio MCP server: profile config values
+ *  resolved, secrets separated so the client can redact them. */
+interface ResolvedMcpServerLaunch {
+  args?: string[];
+  /** Public env, safe to appear in diagnostics. */
+  env?: Record<string, string>;
+  /** Resolved secret env. Reaches only the child process; redacted everywhere else. */
+  protectedEnv?: Record<string, string>;
+}
+/**
+ * Resolve a profile MCP server's `args`/`env` config values (interface ≥0.40
+ * `AgentProfileConfigValue`) plus the legacy `metadata.secretEnv` channel into
+ * the plain strings a spawn needs.
+ *
+ * Rules, all fail-closed:
+ * - `args` must be public values. A secret-ref in argv is refused: argv is
+ *   readable by every host process (/proc/PID/cmdline) and outside the
+ *   protected-value redaction channel, so a secret there cannot be contained.
+ * - `env` secret-refs resolve through the KeyProvider (missing provider or key
+ *   throws, naming the KEY NAME only) and land in `protectedEnv`.
+ * - An env var declared secret on BOTH channels (env secret-ref and
+ *   metadata.secretEnv) is ambiguous configuration and throws.
+ * - A public `env` entry shadowed by a legacy metadata secret keeps the
+ *   pre-0.40 spawn precedence: the secret value wins in the child env.
+ */
+declare function resolveMcpServerLaunch(server: AgentProfileMcpServer, keys: KeyProvider | undefined, label: string): Promise<ResolvedMcpServerLaunch>;
+//#endregion
 //#region src/runtime/supervise/inbox.d.ts
 /**
  *
@@ -782,6 +832,14 @@ interface CliWorktreeBridgeSeam {
 interface BridgeSeam {
   bridgeUrl: string;
   bridgeBearer: string;
+  /**
+   * Optional request-scoped model credential.
+   *
+   * The key name is portable configuration. The provider is a live service and is intentionally
+   * not serialised. Runtime resolves it immediately before every bridge POST and sends the value
+   * only to a loopback bridge through its private request header.
+   */
+  modelCredential?: BridgeModelCredential;
   /** Optional working directory forwarded to cli-bridge and persisted with the session. */
   cwd?: string;
   /** Caller-owned deadline for each bridge turn. Runtime enforces it locally and sends the
@@ -795,6 +853,13 @@ interface BridgeSeam {
   /** Newest-last activity window `progress()` reports. Default 12. */
   activityWindow?: number;
 }
+/** A live, request-scoped model credential reference for a local cli-bridge. */
+interface BridgeModelCredential {
+  /** Provider key name. The value is never part of a profile, artifact, or error. */
+  key: string;
+  /** Live credential service. Runtime retains this reference through reusable captures. */
+  provider: KeyProvider;
+}
 /** Generic environment provider executor config. External packages implement
  *  `AgentEnvironmentProvider`; this built-in wrapper lets `createExecutor`
  *  consume them as backend data while preserving the existing usage channel. */
@@ -889,5 +954,5 @@ declare function createExecutor(config: ExecutorConfig): ExecutorFactory<unknown
  */
 declare function createExecutorRegistry(): ExecutorRegistry;
 //#endregion
-export { ToolLoopToolCall as $, LocalHarness as A, GitRunner as B, WorktreeHarnessResult as C, CodexTokenUsage as D, CodexExecutionPolicy as E, parseCodexTokenUsage as F, removeWorktree as G, WorktreeHandle as H, runLocalHarness as I, ToolLoopCallContext as J, RouterTransportConfig as K, CreateWorktreeOptions as L, RunLocalHarnessOptions as M, harnessSupportsReasoningEffort as N, DEFAULT_LOCAL_HARNESS as O, localHarnessExecutable as P, ToolLoopMessageRecord as Q, DiffOptions as R, WorktreeCommandResult as S, CodexExecutionEvidence as T, captureWorktreeDiff as U, RemoveWorktreeOptions as V, createWorktree as W, ToolLoopCompaction as X, ToolLoopChat as Y, ToolLoopCompactionOptions as Z, createSteerableSandboxSession as _, ExecutorConfig as a, createInbox as b, RouterToolsSeam as c, createExecutor as d, createExecutorRegistry as f, SteerableSandboxSession as g, SteerableSandboxArgs as h, CliWorktreeSeam as i, LocalHarnessResult as j, LOCAL_HARNESSES as k, SandboxSeam as l, SandboxSteeringOptions as m, CliSeam as n, ProviderSeam as o, DEFAULT_SANDBOX_STEERING_MAX_TURNS as p, ToolSpec as q, CliWorktreeBridgeSeam as r, RouterSeam as s, BridgeSeam as t, cliWorktreeExecutor as u, Inbox as v, WorktreeProfileMaterializationReceipt as w, WorktreeCheckRunner as x, InboxMessage as y, DiffResult as z };
-//# sourceMappingURL=runtime-CKk_poJ-.d.ts.map
+export { removeWorktree as $, WorktreeCommandResult as A, RunLocalHarnessOptions as B, ResolvedMcpServerLaunch as C, resolveSecretEnv as D, resolveMcpServerLaunch as E, CodexTokenUsage as F, CreateWorktreeOptions as G, localHarnessExecutable as H, DEFAULT_LOCAL_HARNESS as I, GitRunner as J, DiffOptions as K, LOCAL_HARNESSES as L, WorktreeProfileMaterializationReceipt as M, CodexExecutionEvidence as N, secretEnvOfMcpServer as O, CodexExecutionPolicy as P, createWorktree as Q, LocalHarness as R, KeyProvider as S, mcpSecretEnvMetadataKey as T, parseCodexTokenUsage as U, harnessSupportsReasoningEffort as V, runLocalHarness as W, WorktreeHandle as X, RemoveWorktreeOptions as Y, captureWorktreeDiff as Z, SteerableSandboxSession as _, CliWorktreeSeam as a, ToolLoopCompactionOptions as at, InboxMessage as b, RouterSeam as c, cliWorktreeExecutor as d, RouterTransportConfig as et, createExecutor as f, SteerableSandboxArgs as g, SandboxSteeringOptions as h, CliWorktreeBridgeSeam as i, ToolLoopCompaction as it, WorktreeHarnessResult as j, WorktreeCheckRunner as k, RouterToolsSeam as l, DEFAULT_SANDBOX_STEERING_MAX_TURNS as m, BridgeSeam as n, ToolLoopCallContext as nt, ExecutorConfig as o, ToolLoopMessageRecord as ot, createExecutorRegistry as p, DiffResult as q, CliSeam as r, ToolLoopChat as rt, ProviderSeam as s, ToolLoopToolCall as st, BridgeModelCredential as t, ToolSpec as tt, SandboxSeam as u, createSteerableSandboxSession as v, envKeyProvider as w, createInbox as x, Inbox as y, LocalHarnessResult as z };
+//# sourceMappingURL=runtime-laujrVXP.d.ts.map

package/dist/{structural-rollout-DBYiyyE-.js → structural-rollout-Cd8ZM0dD.js}

@@ -2,7 +2,7 @@ import { n as streamAgentTurn, t as collectAgentTurn } from "./stream-agent-turn
 import { i as InMemorySpawnJournal, r as InMemoryResultBlobStore } from "./spawn-journal-Cd5L-Ie9.js";
 import { i as concreteModelId, s as profileModelExecutionSettings, t as assertExecutableAgentProfile } from "./model-policy-mWSoToiQ.js";
 import { b as executableAgentProfileSnapshot } from "./materialization-JR_nN_oT.js";
-import { N as createExecutor, j as captureReusableExecutorConfig, l as withDriverExecutor, n as createSupervisor } from "./supervisor-D5ar0Rs6.js";
+import { N as createExecutor, j as captureReusableExecutorConfig, l as withDriverExecutor, n as createSupervisor } from "./supervisor-Dr3AoSh0.js";
 import { costForTokenPricing, makeProposalFinding } from "@tangle-network/agent-eval";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { randomBytes } from "node:crypto";
@@ -1676,4 +1676,4 @@ function structuralRollout(config = {}) {
 //#endregion
 export { observe as C, optimizerMethod as D, profileOptimizerModelCall as E, strategyAuthorMethod as O, defaultAnalystInstruction as S, profileChatClient as T, depthStrategy as _, defaultStructuralRolloutPolicy as a, sample as b, officialChecksFromMeta as c, selectBestIndex as d, structuralRollout as f, defineStrategy as g, breadthStrategy as h, defaultExtractCandidate as i, resolveEntrySymbol as l, adaptiveRefine as m, compareCheckOutcomes as n, filterAuthoredAsserts as o, visibleCheckScore as p, composeCheckSources as r, modelAuthoredChecks as s, canDisplace as t, sandboxCheckRunner as u, refine as v, renderReport as w, sampleThenRefine as x, runAgentic as y };
 
-//# sourceMappingURL=structural-rollout-DBYiyyE-.js.map
+//# sourceMappingURL=structural-rollout-Cd8ZM0dD.js.map