@tangle-network/agent-runtime 0.196.0 → 0.198.1

package/dist/{supervise-D9aNi8_f.js → supervise-KSe4JEcg.js}

@@ -1,10 +1,8 @@
-import { C as runtimeOwnedScopeOwnerRuntime, D as detachedSnapshot, S as runtimeOwnedPendingExecutorMaterialization, b as runtimeOwnedExecutorMaterialization, d as providerAttemptEvidence, f as recordRuntimeOwnedDriveHarnessProviderEvidence, i as attestRuntimeOwnedScopeOwner, s as inheritRuntimeOwnedExecutorAttestation, v as runtimeOwnedDriveHarnessProviderEvidence, x as runtimeOwnedExecutorProviderEvidence, y as runtimeOwnedExecutorExecutionBinding } from "./materialization-Cy0oM8tb.js";
+import { $ as bridgeAdmissionRefusal, Ar as worktreeCliProfileMaterialization, Ct as createInbox, Er as renderUnsupported, Gn as createOtelExporter, Gr as runtimeOwnedDriveHarnessProviderEvidence, Ir as attestRuntimeOwnedScopeOwner, J as teardownExecutor, Jn as generateSpanId, Jr as runtimeOwnedExecutorProviderEvidence, Kr as runtimeOwnedExecutorExecutionBinding, On as unmeteredSpend, Or as unsupportedProfileDimensions, Q as bindReusableExecutorExecutionId, Qn as toOtelAttributes, Sr as promptModelProfileMaterialization, Ur as providerAttemptEvidence, Wr as recordRuntimeOwnedDriveHarnessProviderEvidence, Xr as runtimeOwnedScopeOwnerRuntime, Xt as contentAddress, Y as assertValidBudget, Yr as runtimeOwnedPendingExecutorMaterialization, Z as spendFromUsageEvents, _ as meterRuntimeOwnedProviderAttempt, _r as controlProfileMaterialization, a as createSupervisor, br as profileMaterializationAxes$1, ct as snapshotExecutorConfig, d as driverChild, et as bridgeModelRouteRefusal, g as meterRuntimeOwnedAccounting, gr as assertProfileMaterialization, h as deriveNodeExecutionIdentity, i as createRootHandle, kn as zeroSpend, l as runFinalizer, ni as detachedSnapshot, nt as bridgeStopSignalKey, o as bestDelivered, ot as createExecutor, p as beginScopeOwnerAttempt, q as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, qr as runtimeOwnedExecutorMaterialization, rt as captureReusableExecutorConfig, sn as routerBrain, tt as bridgeRuntimeAttachmentsKey, u as runTree, ut as WORKER_TRACE_PROPAGATION, v as recordScopeOwnerMaterialization, vr as defineProfileMaterializationContract, xr as promptControlProfileMaterialization, y as scopeOwnerExecutorNodeContext, yr as fullProfileMaterialization, zr as inheritRuntimeOwnedExecutorAttestation } from "./redact-CVyxp2AU.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError, r as BackendTransportError, t as AgentEvalError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-DKDyr-fc.js";
-import { $n as assertProfileMaterialization, Et as createInbox, Fn as toOtelAttributes, On as createOtelExporter, Q as assertValidBudget, S as scopeOwnerExecutorNodeContext, X as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Z as teardownExecutor, a as createSupervisor, ar as promptModelProfileMaterialization, at as bridgeStopSignalKey, b as meterRuntimeOwnedProviderAttempt, dn as routerBrain, dr as unsupportedProfileDimensions, dt as snapshotExecutorConfig, en as contentAddress, er as controlProfileMaterialization, et as spendFromUsageEvents, f as runFinalizer, g as beginScopeOwnerAttempt, i as createRootHandle, ir as promptControlProfileMaterialization, it as bridgeRuntimeAttachmentsKey, jn as generateSpanId, l as bestDelivered, lr as renderUnsupported, lt as createExecutor, m as driverChild, nr as fullProfileMaterialization, nt as bridgeAdmissionRefusal, ot as captureReusableExecutorConfig, p as runTree, pr as worktreeCliProfileMaterialization, pt as WORKER_TRACE_PROPAGATION, rr as profileMaterializationAxes$1, rt as bridgeModelRouteRefusal, tr as defineProfileMaterializationContract, tt as bindReusableExecutorExecutionId, v as deriveNodeExecutionIdentity, x as recordScopeOwnerMaterialization, y as meterRuntimeOwnedAccounting } from "./redact-Cbl2O-4N.js";
-import { E as zeroSpend, w as unmeteredSpend } from "./environment-provider-1fKZh2zl.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { C as createCoordinationTools, M as createInMemoryRunContext, S as coordinationVerbNames, c as createProgressTracker, d as progressStop, j as createFileRunContext, r as driverAgent } from "./coordination-driver-zkCrfEbS.js";
+import { C as createCoordinationTools, M as createInMemoryRunContext, S as coordinationVerbNames, c as createProgressTracker, d as progressStop, j as createFileRunContext, r as driverAgent } from "./coordination-driver-Cf638-6q.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-B8I_LXN-.js";
 import { t as createStdioToolServer } from "./tool-server-BJbCPhoW.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
@@ -2040,6 +2038,30 @@ function profileToolSpawnPreflight(runtimeOwnsManager, canResolveProductTools) {
 		};
 	};
 }
+/**
+* Refuse a harness-brained child that declares Runtime coordination tools when nothing can carry
+* the coordination server to it. Such a child runs as a nested manager through `driveHarness`, and
+* the automatic driver reaches Runtime's loopback coordination MCP only through the bridge's
+* runtime-attachments seam (`automaticDriverBackendSupported`). The worker factory throws the same
+* fault, but only after a live-worker permit and a budget reservation were taken and as an unnamed
+* tool error; here it is a pre-flight cause the manager can re-author against, and neither an
+* environment nor a reservation exists yet. A router-brained child holds the same tools in-process
+* and needs no channel.
+*/
+function coordinationChannelSpawnPreflight(runtimeOwnsManager, hasCustomDriveHarness, managerBackend) {
+	if (!runtimeOwnsManager || hasCustomDriveHarness) return void 0;
+	if (managerBackend !== void 0 && automaticDriverBackendSupported(managerBackend)) return;
+	const missingChannel = managerBackend === void 0 ? "this run has no driverBackend" : `the '${managerBackend.backend}' backend has no coordination channel`;
+	return async (profile) => {
+		if (!isExternalSupervisor(profile)) return void 0;
+		const declared = declaredRuntimeToolNames(profile);
+		if (declared.length === 0) return void 0;
+		return {
+			cause: "unmountable-tool",
+			detail: `the profile declares ${declared.map((name) => JSON.stringify(`${coordinationProfileToolPrefix}${name}`)).join(", ")} with harness ${JSON.stringify(profile.harness)}, but ${missingChannel}: Runtime's coordination MCP binds host loopback and reaches a harness only through the 'bridge' backend's runtime-attachments seam. Drive managers through a bridge driverBackend, or supply driveHarness/resolveDriveHarness with a relay this child can reach`
+		};
+	};
+}
 function composeSpawnPreflights(...preflights) {
 	const active = preflights.filter((preflight) => preflight !== void 0);
 	if (active.length === 0) return void 0;
@@ -2723,9 +2745,10 @@ function superviseInternal(profile, task, opts, testBrain) {
 		await options.onCoordinationEvent?.(context, coordinationEventId(context, event), record);
 	} : void 0;
 	const managerBackend = options.driverBackend ?? (options.rootDriverFromBackend === false ? void 0 : options.backend);
-	const spawnPreflight = composeSpawnPreflights(profileToolSpawnPreflight(options.makeWorkerAgent === void 0, options.resolveSupervisorTools !== void 0), options.backend?.backend === "bridge" ? bridgeSpawnPreflight(options.backend) : void 0);
 	if (options.driveHarness && options.resolveDriveHarness) throw new ValidationError("supervise: provide driveHarness or resolveDriveHarness, not both");
-	const driverMaterialization = Boolean(options.driveHarness || options.resolveDriveHarness) ? options.driveHarnessMaterialization ?? fullProfileMaterialization : managerBackend && automaticDriverBackendSupported(managerBackend) ? backendProfileMaterialization(managerBackend) : void 0;
+	const hasCustomDriveHarness = Boolean(options.driveHarness || options.resolveDriveHarness);
+	const spawnPreflight = composeSpawnPreflights(profileToolSpawnPreflight(options.makeWorkerAgent === void 0, options.resolveSupervisorTools !== void 0), coordinationChannelSpawnPreflight(options.makeWorkerAgent === void 0, hasCustomDriveHarness, managerBackend), options.backend?.backend === "bridge" ? bridgeSpawnPreflight(options.backend) : void 0);
+	const driverMaterialization = hasCustomDriveHarness ? options.driveHarnessMaterialization ?? fullProfileMaterialization : managerBackend && automaticDriverBackendSupported(managerBackend) ? backendProfileMaterialization(managerBackend) : void 0;
 	if (isExternalSupervisor(canonicalProfile) && !options.driveHarness && !options.resolveDriveHarness && (!managerBackend || !automaticDriverBackendSupported(managerBackend))) throw new ValidationError(`supervise: external supervisor profile.harness=${JSON.stringify(canonicalProfile.harness)} requires a local bridge driverBackend, an explicit driveHarness, or resolveDriveHarness with reachable coordination transport`);
 	const harnessClaims = /* @__PURE__ */ new WeakMap();
 	const claimDriveHarness = (rawHarness, ownerId) => {
@@ -3036,4 +3059,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { serveCoordinationMcp as _, isPreSpawnExecutorFailure as a, mapExecutorResult as b, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, defaultUnmetContractSteer as g, classifyDriverFailure as h, workerFromBackend as i, assertCoordinationBinding as l, DriverAttemptsExhaustedError as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u, createSupervisorSpanRecorder as v, gateOnDeliverable as y };
 
-//# sourceMappingURL=supervise-D9aNi8_f.js.map
+//# sourceMappingURL=supervise-KSe4JEcg.js.map