@tangle-network/agent-runtime 0.132.7 → 0.132.9

package/dist/{supervisor-D5ar0Rs6.js → supervisor-Dr3AoSh0.js}

@@ -5931,10 +5931,58 @@ const sandboxSeamKey = "sandbox";
 const cliSeamKey = "cli";
 const bridgeSeamKey = "bridge";
 const maxBridgeTimeoutMs = 2147483647;
+const bridgeModelCredentialHeader = "x-cli-bridge-model-credential";
 const bridgeProfileMaterializationSchema = "cli-bridge.profile-materialization.v2";
 const bridgeUsageCostSchema = "cli-bridge.usage-cost.v1";
 const cliWorktreeSeamKey = "cli-worktree";
 const providerSeamKey = "provider";
+function isLoopbackBridgeHost(hostname) {
+	const host = hostname.trim().toLowerCase().replace(/^\[/, "").replace(/\]$/, "");
+	if (host === "localhost" || host === "::1" || host === "0:0:0:0:0:0:0:1") return true;
+	if (host === "::ffff:127.0.0.1") return true;
+	return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/u.test(host);
+}
+function isLoopbackBridgeUrl(value) {
+	try {
+		const target = new URL(value);
+		return (target.protocol === "http:" || target.protocol === "https:") && isLoopbackBridgeHost(target.hostname);
+	} catch {
+		return false;
+	}
+}
+/** Validate and capture the non-serialisable credential service without reading its value. */
+function captureBridgeModelCredential(value, context) {
+	if (value === null || typeof value !== "object") throw new ValidationError(`${context}: modelCredential must be an object`);
+	assertExactConfigKeys(value, /* @__PURE__ */ new Set(["key", "provider"]), `${context} modelCredential`);
+	if (typeof value.key !== "string" || value.key.trim().length === 0) throw new ValidationError(`${context}: modelCredential.key must be a non-empty string`);
+	if (!value.provider || typeof value.provider.get !== "function") throw new ValidationError(`${context}: modelCredential.provider must implement get(name)`);
+	const captured = { key: value.key };
+	Object.defineProperty(captured, "provider", {
+		configurable: false,
+		enumerable: false,
+		value: value.provider,
+		writable: false
+	});
+	return Object.freeze(captured);
+}
+function validateBridgeModelCredential(value, bridgeUrl, context) {
+	if (value === void 0) return void 0;
+	if (!isLoopbackBridgeUrl(bridgeUrl)) throw new ValidationError(`${context}: modelCredential is allowed only for a loopback bridge URL`);
+	return captureBridgeModelCredential(value, context);
+}
+/** Resolve only at the outbound boundary. Provider errors are redacted because they may contain
+*  the protected value; diagnostics identify the key name, never the value or provider error. */
+async function resolveBridgeModelCredential(credential, context) {
+	if (credential === void 0) return void 0;
+	let value;
+	try {
+		value = await credential.provider.get(credential.key);
+	} catch {
+		throw new ValidationError(`${context}: modelCredential provider failed for '${credential.key}'`);
+	}
+	if (typeof value !== "string" || value.length === 0 || /[\r\n]/u.test(value)) throw new ValidationError(`${context}: modelCredential provider has no usable value for '${credential.key}'`);
+	return value;
+}
 /** Deterministic content hash for an `outRef`. FNV-1a 32-bit over the canonical
 *  JSON of the result — not cryptographic, sufficient for content-addressing the
 *  replay blob so two identical outputs collapse to one pointer. */
@@ -6882,11 +6930,13 @@ function bridgeProfileModel(profile, context) {
 }
 const bridgeExecutor = (spec, ctx) => {
 	const base = readSeam(ctx, bridgeSeamKey, "bridge");
+	const modelCredential = validateBridgeModelCredential(base.modelCredential, base.bridgeUrl, "bridgeExecutor");
 	const effectiveProfile = agentProfileSchema.parse(spec.profile);
 	const model = bridgeProfileModel(effectiveProfile, "bridgeExecutor");
 	const profileExecution = profileModelExecutionSettings(effectiveProfile, "bridgeExecutor");
 	const seam = {
 		...base,
+		...modelCredential === void 0 ? {} : { modelCredential },
 		model,
 		...profileExecution.maxTokens !== void 0 ? { maxTokens: profileExecution.maxTokens } : {}
 	};
@@ -7369,6 +7419,7 @@ async function* streamDurableBridgeRun(args) {
 			args.run.transportAttempts += 1;
 			res = await bridgeStreamPost(args.seam.bridgeUrl, {
 				bearer: args.seam.bridgeBearer,
+				modelCredential: args.seam.modelCredential,
 				sessionId: args.sessionId,
 				runId: args.run.id,
 				afterEventId: args.run.lastEventId,
@@ -7378,6 +7429,7 @@ async function* streamDurableBridgeRun(args) {
 			});
 		} catch (error) {
 			if (args.signal.aborted) throw error;
+			if (error instanceof ValidationError) throw error;
 			if (reconnects >= args.maxReconnects) throw new ValidationError(`bridgeExecutor: run ${args.run.id} disconnected before terminal acknowledgement after ${reconnects + 1} attempts: ${errorMessage(error)}`);
 			reconnects += 1;
 			continue;
@@ -7486,7 +7538,8 @@ async function assertBridgeExecutionCapabilities(seam, signal) {
 * `IncomingMessage` (a Node `Readable`) is adapted to a web `ReadableStream` so the
 * shared `parseSseChatStream` consumes it unchanged.
 */
-function bridgeStreamPost(url, args) {
+async function bridgeStreamPost(url, args) {
+	const modelCredential = await resolveBridgeModelCredential(args.modelCredential, "bridgeExecutor");
 	const target = new URL(`${url.replace(/\/$/, "")}/v1/chat/completions`);
 	const payload = JSON.stringify(args.body);
 	const requestFn = target.protocol === "https:" ? request$1 : request;
@@ -7501,6 +7554,7 @@ function bridgeStreamPost(url, args) {
 				...args.traceHeaders,
 				"content-type": "application/json",
 				authorization: `Bearer ${args.bearer}`,
+				...modelCredential === void 0 ? {} : { [bridgeModelCredentialHeader]: modelCredential },
 				"x-session-id": args.sessionId,
 				"x-run-id": args.runId,
 				...args.afterEventId > 0 ? { "last-event-id": String(args.afterEventId) } : {},
@@ -8376,7 +8430,7 @@ function snapshotExecutorConfig(config) {
 				})
 			});
 		}
-		case "bridge":
+		case "bridge": {
 			assertExactConfigKeys(config, /* @__PURE__ */ new Set([
 				"activityWindow",
 				"backend",
@@ -8384,10 +8438,18 @@ function snapshotExecutorConfig(config) {
 				"bridgeUrl",
 				"cwd",
 				"maxReconnects",
+				"modelCredential",
 				"sessionId",
 				"timeoutMs"
 			]), "createExecutor bridge config");
-			return detachedSnapshot(config, "createExecutor bridge config");
+			const { modelCredential, ...decisionData } = config;
+			const snapshot = detachedSnapshot(decisionData, "createExecutor bridge config");
+			const capturedCredential = validateBridgeModelCredential(modelCredential, config.bridgeUrl, "createExecutor bridge config");
+			return Object.freeze({
+				...snapshot,
+				...capturedCredential === void 0 ? {} : { modelCredential: capturedCredential }
+			});
+		}
 		case "cli": return detachedSnapshot(config, `createExecutor ${config.backend} config`);
 	}
 }
@@ -12167,4 +12229,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { runAgentRounds as $, bindReusableExecutorExecutionId as A, createWorktree as At, workerTraceHeaders as B, controlProfileMaterialization as Bt, queueOf as C, createRuntimeStreamEventCollector as Ct, assertValidBudget as D, runSettledCommand as Dt, teardownExecutor as E, sanitizeRuntimeStreamEvent as Et, snapshotExecutorConfig as F, localHarnessExecutable as Ft, decodeToolPart as G, promptModelProfileMaterialization as Gt, DEFAULT_SANDBOX_STEERING_MAX_TURNS as H, fullProfileMaterialization as Ht, createWorktreeCliExecutor as I, parseCodexTokenUsage as It, createActivityLog as J, renderProfileMaterializationIssues as Jt, sandboxSessionTraceSource as K, promptOnlyProfileMaterialization as Kt, WORKER_TRACE_PROPAGATION as L, CodexExecutionDiagnosticError as Lt, cliWorktreeExecutor as M, DEFAULT_LOCAL_HARNESS as Mt, createExecutor as N, LOCAL_HARNESSES as Nt, createBudgetPool as O, runWorktreeHarness as Ot, createExecutorRegistry as P, harnessSupportsReasoningEffort as Pt, defaultSelectWinner as Q, readWorkerTraceContext as R, AGENT_PROFILE_MATERIALIZATION_AXES as Rt, freeSlots as S, createRuntimeEventCollector as St, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as T, sanitizeKnowledgeReadinessReport as Tt, createSteerableSandboxSession as U, profileMaterializationAxes$1 as Ut, workerTraceSeamKey as V, defineProfileMaterializationContract as Vt, createPushTraceSource as W, promptControlProfileMaterialization as Wt, createInbox as X, validateProfileMaterialization as Xt, readWorkerProgress as Y, sandboxActProfileMaterialization as Yt, createSandboxForSpec as Z, worktreeCliProfileMaterialization as Zt, pollFor as _, generateSpanId as _t, pickBestDelivered as a, createPropagatingTraceEmitter as at, waitUntil as b, padTraceId as bt, driverChild as c, traceContextToEnv as ct, deriveNodeExecutionIdentity as d, buildLoopSpanNodes as dt, createSandboxLineage as et, recordScopeOwnerMaterialization as f, buildRuntimeEventOtelSpans as ft, isWaitOutcome as g, flatOtelSpan as gt, createWaitProbes as h, exportEvalRuns as ht, collectDelivered as i, runBrainLoop as it, captureReusableExecutorConfig as j, removeWorktree as jt, spendFromUsageEvents as k, captureWorktreeDiff as kt, withDriverExecutor as l, INTELLIGENCE_WIRE_VERSION as lt, settledToIteration as m, createOtelExporter as mt, createSupervisor as n, acquireSandbox as nt, runFinalizer as o, mergeTraceEnv as ot, scopeOwnerExecutorNodeContext as p, createOpenInferenceFileExporter as pt, DEFAULT_STALL_AFTER_MS as q, promptResourceProfileMaterialization as qt, bestDelivered as r, routerBrain as rt, runTree as s, readTraceContextFromEnv as st, createRootHandle as t, probeSandboxCapabilities as tt, createScope as u, buildLoopOtelSpans as ut, timerAt as v, loopEventToOtelSpan as vt, rollingDispatch as w, sanitizeAgentRuntimeEvent as wt, effectiveConcurrency as x, toOtelAttributes as xt, validateWaitSpec as y, padSpanId as yt, workerTraceEnv as z, assertProfileMaterialization as zt };
 
-//# sourceMappingURL=supervisor-D5ar0Rs6.js.map
+//# sourceMappingURL=supervisor-Dr3AoSh0.js.map