@tangle-network/agent-runtime 0.188.1 → 0.189.0

package/dist/{supervise-BUy1cr2L.js → supervise-DSu4d0b6.js}

@@ -3321,16 +3321,22 @@ function workerFromBackend(backend, deliverable, seams) {
 			...executionScope === void 0 ? {} : { scope: executionScope }
 		}));
 		const boundSessionId = boundBackend.backend === "bridge" ? boundBackend.sessionId : void 0;
+		const peerMailAttachment = peerMailRuntimeAttachment(profile, capturedBackend, spawnContext);
 		const baseFactory = createExecutor(boundBackend);
 		const executorFactory = (spec, ctx) => {
 			if (boundSessionId !== void 0 && ctx.node?.nodeId !== void 0) bridgeSessionByWorker.set(ctx.node.nodeId, boundSessionId);
 			const extraSeams = seams?.();
-			const built = baseFactory(spec, extraSeams === void 0 ? ctx : {
+			const seamsForChild = extraSeams === void 0 && peerMailAttachment === void 0 ? ctx.seams : {
+				...extraSeams,
+				...ctx.seams,
+				...peerMailAttachment === void 0 ? {} : { [bridgeRuntimeAttachmentsKey]: {
+					...readCallerRuntimeAttachments(ctx.seams),
+					...peerMailAttachment
+				} }
+			};
+			const built = baseFactory(spec, seamsForChild === ctx.seams ? ctx : {
 				...ctx,
-				seams: {
-					...extraSeams,
-					...ctx.seams
-				}
+				seams: seamsForChild
 			});
 			return deliverable ? gateOnDeliverable(built, deliverable) : built;
 		};
@@ -3346,6 +3352,63 @@ function workerFromBackend(backend, deliverable, seams) {
 		};
 	};
 }
+/**
+* The reserved MCP alias one worker's PEER MAIL capability endpoint mounts under.
+*
+* Distinct from the driver's coordination alias on purpose: the two servers carry different
+* authority. Coordination mounts spawn_worker / steer_agent / stop; mail mounts send_mail and
+* read_mail and nothing else, on a per-worker secret path bound to that worker's identity.
+*/
+const peerMailMcpAlias = "agent-runtime-peer-mail";
+/**
+* The Runtime-owned MCP attachment that carries this spawn's peer-mail endpoint into the worker,
+* or `undefined` when this backend runs no MCP client at all.
+*
+* The endpoint rides the SAME out-of-band channel the driver's coordination MCP rides
+* (`runtime_attachments` on the bridge wire), for the same reason: the capability path carries
+* fresh random bytes per process, so writing it into `AgentProfile.mcp` would move the canonical
+* profile digest a durable session is bound to, and a keyed re-spawn would then fail its identity
+* check against the journal. Nothing in the authored profile changes, and this runs inside the
+* leaf factory — after `authorizeSpawn` has already decided the profile — so the authorization
+* chain is unchanged.
+*
+* Three backend classes, three honest answers:
+*
+*  - `bridge` MOUNTS it. cli-bridge advertises `capabilities.runtimeAttachments.mcp` and mounts
+*    the named servers for the run without binding them into the session profile.
+*  - `router`, `router-tools` and `provider` mount NOTHING. Those workers are in-process tool
+*    loops with no MCP client; their tool surface is the caller's own array, and
+*    `WorkerSpawnContext.peerMailUrl` is the deliverable a caller uses directly.
+*  - Every other backend REFUSES the spawn. A sandbox box or a local CLI harness receives tools
+*    only through its materialized `AgentProfile`, and the runtime has no channel that reaches it
+*    out of band, so minting a capability it can never call would ledger a channel that does not
+*    exist. This is the same rule `bridgeResumeSessionId` applies to `continuity: 'resume'`.
+*/
+function peerMailRuntimeAttachment(profile, backend, spawnContext) {
+	const url = spawnContext?.peerMailUrl;
+	if (url === void 0) return void 0;
+	switch (backend.backend) {
+		case "router":
+		case "router-tools":
+		case "provider": return;
+		case "bridge": break;
+		default: throw new ValidationError(`workerFromBackend: the '${backend.backend}' backend seam cannot mount a peer-mail endpoint — it materializes tools only through the AgentProfile, and writing a per-process capability URL there would move the canonical profile digest. Run peer-mail workers on the 'bridge' backend, mount the endpoint yourself from WorkerSpawnContext.peerMailUrl through makeLeafAgent or makeWorkerAgent, or drop peerMail for this run`);
+	}
+	if (profile.mcp?.[peerMailMcpAlias] !== void 0) throw new ValidationError(`workerFromBackend: profile MCP alias ${JSON.stringify(peerMailMcpAlias)} is reserved`);
+	return Object.freeze({ [peerMailMcpAlias]: Object.freeze({
+		transport: "http",
+		url
+	}) });
+}
+/**
+* Runtime attachments a caller already put on the child's `ExecutorContext`, so mounting peer mail
+* ADDS one server rather than replacing the map. An absent or malformed value contributes nothing;
+* the executor that reads the seam owns its validation and refuses a malformed map there.
+*/
+function readCallerRuntimeAttachments(seams) {
+	const existing = seams[bridgeRuntimeAttachmentsKey];
+	return existing !== null && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
+}
 function externalExecutionId(kind, identity) {
 	return `${kind}-${canonicalCandidateDigest({
 		kind,
@@ -3877,13 +3940,46 @@ function captureDeliverable(deliverable, context) {
 		check: deliverable.check
 	});
 }
+Object.freeze([...[
+	"authorizeMessage",
+	"authorizeSpawn",
+	"driveHarness",
+	"executeExtraTool",
+	"finalizer",
+	"isDriverProfile",
+	"makeLeafAgent",
+	"makeWorkerAgent",
+	"now",
+	"onCoordinationEvent",
+	"onDriverAttempt",
+	"onProgressStop",
+	"onUnmetContract",
+	"resolveDeliverable",
+	"resolveDriveHarness",
+	"resolveSpawnProfile",
+	"resolveSupervisorTools",
+	"stopRule"
+]]);
+/**
+* Refuse a callback that reached the decision-data remainder, naming the option.
+*
+* The type test above cannot see a callback nested inside an object-valued option, and
+* `detachedSnapshot` would report only that its input is not structured-cloneable. This says which
+* key carries the callback and what to do about it, so the next occurrence is a five-second fix
+* instead of a bisect over every option a caller passed.
+*/
+function assertNoUncapturedExecutableOption(decisionData) {
+	const carried = Object.entries(decisionData).filter(([, value]) => typeof value === "function").map(([key]) => key);
+	if (carried.length > 0) throw new ValidationError(`supervise: option ${carried.sort().join(", ")} carries a callback that the option capture does not forward, so the run would fail on a structured-clone refusal that names the snapshot instead of the option; lift the key out of the decision data in captureSuperviseOptions and add it to superviseExecutableOptionKeys`);
+}
 /** Capture the public one-call configuration before any asynchronous work starts. Decision data is
 * detached and frozen; executable ports are copied as the exact references selected at intake.
 * Service internals intentionally remain live, while replacing a callback/service on the caller's
 * mutable options object can no longer change an in-flight run. */
 function captureSuperviseOptions(opts) {
 	assertSuperviseOptionKeys(opts, "supervise");
-	const { backend, driverBackend, deliverable, resolveDeliverable, router, compaction, watchWorkers, analysts, makeWorkerAgent, makeLeafAgent, resolveSpawnProfile, blobs, journal, probes, registry, hooks, otel, authorizeSpawn, authorizeMessage, isDriverProfile, driveHarness, resolveDriveHarness, resolveSupervisorTools, onCoordinationEvent, executeExtraTool, stopRule, onProgressStop, onDriverAttempt, finalizer, now, signal, rootHandle, ...decisionData } = opts;
+	const { backend, driverBackend, deliverable, resolveDeliverable, router, compaction, watchWorkers, analysts, makeWorkerAgent, makeLeafAgent, resolveSpawnProfile, blobs, journal, probes, registry, hooks, otel, authorizeSpawn, authorizeMessage, isDriverProfile, driveHarness, resolveDriveHarness, resolveSupervisorTools, onCoordinationEvent, executeExtraTool, stopRule, onProgressStop, onDriverAttempt, onUnmetContract, finalizer, now, signal, rootHandle, ...decisionData } = opts;
+	assertNoUncapturedExecutableOption(decisionData);
 	const capturedData = detachedSnapshot(decisionData, "supervise options");
 	const capturedBackend = backend === void 0 ? void 0 : snapshotExecutorConfig(backend);
 	const capturedDriverBackend = driverBackend === void 0 ? void 0 : snapshotExecutorConfig(driverBackend);
@@ -3939,6 +4035,7 @@ function captureSuperviseOptions(opts) {
 		...stopRule === void 0 ? {} : { stopRule },
 		...onProgressStop === void 0 ? {} : { onProgressStop },
 		...onDriverAttempt === void 0 ? {} : { onDriverAttempt },
+		...onUnmetContract === void 0 ? {} : { onUnmetContract },
 		...finalizer === void 0 ? {} : { finalizer },
 		...now === void 0 ? {} : { now },
 		...signal === void 0 ? {} : { signal },
@@ -4461,4 +4558,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { DelegationTaskQueue as $, DELEGATION_HISTORY_DESCRIPTION as A, validateDelegateUiAuditArgs as B, createInProcessTransport as C, DELEGATION_STATUS_TOOL_NAME as D, DELEGATION_STATUS_INPUT_SCHEMA as E, delegationProfiles as F, validateDelegateFeedbackArgs as G, DELEGATE_FEEDBACK_INPUT_SCHEMA as H, DELEGATE_UI_AUDIT_DESCRIPTION as I, DELEGATE_TOOL_NAME as J, DELEGATE_DESCRIPTION as K, DELEGATE_UI_AUDIT_INPUT_SCHEMA as L, DELEGATION_HISTORY_TOOL_NAME as M, createDelegationHistoryHandler as N, createDelegationStatusHandler as O, validateDelegationHistoryArgs as P, delegate as Q, DELEGATE_UI_AUDIT_TOOL_NAME as R, serveCoordinationMcp as S, DELEGATION_STATUS_DESCRIPTION as T, DELEGATE_FEEDBACK_TOOL_NAME as U, DELEGATE_FEEDBACK_DESCRIPTION as V, createDelegateFeedbackHandler as W, validateDelegateArgs as X, createDelegateHandler as Y, defaultDelegateBudget as Z, promptHandle as _, assertCoordinationBinding as a, composeLoopTraceEmitters as at, classifyDriverFailure as b, supervisorAgentWithTestBrain as c, DelegationStateCorruptError as ct, delegatesWorkerBriefPrompt as d, InMemoryFeedbackStore as dt, hashIdempotencyInput as et, dumbContinuationFailPrompt as f, eventToSnapshot as ft, naiveContinuationPrompt as g, kernelPromptRegistry as h, mapExecutorResult as ht, workerFromBackend as i, capDelegationTrace as it, DELEGATION_HISTORY_INPUT_SCHEMA as j, validateDelegationStatusArgs as k, analyzesFindingsReportPrompt as l, FileDelegationStore as lt, formatPromptHandle as m, gateOnDeliverable as mt, supervise as n, DELEGATION_TRACE_MAX_SPANS as nt, resolveSupervisorProfile as o, createDelegationTraceCollector as ot, dumbContinuationPassPrompt as p, createSupervisorSpanRecorder as pt, DELEGATE_INPUT_SCHEMA as q, superviseWithTestBrain as r, buildDelegationTraceSpans as rt, supervisorAgent as s, DelegationPersistenceError as st, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, DELEGATION_TRACE_MAX_BYTES as tt, createPromptRegistry as u, InMemoryDelegationStore as ut, supervisorPolicyPrompt as v, createMcpServer as w, defaultUnmetContractSteer as x, DriverAttemptsExhaustedError as y, createDelegateUiAuditHandler as z };
 
-//# sourceMappingURL=supervise-BUy1cr2L.js.map
+//# sourceMappingURL=supervise-DSu4d0b6.js.map