@tangle-network/agent-runtime 0.225.0 → 0.225.3

package/dist/{supervise-DYZVP44H.js → supervise-Ah7kMn2p.js}

@@ -1,9 +1,9 @@
-import { $ as bindReusableExecutorExecutionId, $r as runtimeOwnedExecutorExecutionBinding, $t as bridgeModelRouteRefusal, An as retainedExecutorSeamKey, Bi as resourceTelemetry, C as scopeOwnerExecutorNodeContext, Cr as assertProfileMaterialization, Dr as profileMaterializationAxes$1, Er as fullProfileMaterialization, Et as assertValidBudget, F as scopeRetainedOwnerResult, Fr as unsupportedProfileDimensions, Ii as unmeteredSpend, Kr as inheritRuntimeOwnedExecutorAttestation, Li as withTimeout, Lr as worktreeCliProfileMaterialization, M as prepareScopeRetainedOwnerTask, Mt as WORKER_TRACE_PROPAGATION, N as scopeRetainedOwnerContext, Nr as renderUnsupported, Or as promptControlProfileMaterialization, Ot as meterUsageEvent, P as scopeRetainedOwnerPriorSpend, Pn as runAbortable, Q as teardownExecutor, Qn as createOtelExporter, Qr as runtimeOwnedDriveHarnessProviderEvidence, Qt as bridgeAdmissionRefusal, Ri as zeroSpend, S as restoreScopeOwnerAcceptedExecution, Tr as defineProfileMaterializationContract, Ur as attestRuntimeOwnedScopeOwner, Vi as withBudgetResources, Vt as createInbox, Xr as providerAttemptEvidence, Z as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Zr as recordRuntimeOwnedDriveHarnessProviderEvidence, an as bridgeStopSignalKey, ar as toOtelAttributes, at as snapshotExecutorConfig, b as meterRuntimeOwnedProviderAttempt, d as runDriverWithRetry, ei as runtimeOwnedExecutorMaterialization, et as captureReusableExecutorConfig, f as driverChild, g as beginScopeOwnerAttempt, gn as routerBrain, in as bridgeRuntimeAttachmentsKey, j as consumeScopeRetainedOwnerResult, jn as RunCancellationReason, jt as spendFromUsageTotals, kn as registerRetainedExecutorPreparation, kr as promptModelProfileMaterialization, kt as newUsageTotals, li as detachedSnapshot, m as isDriverSpec, n as createSupervisor, ni as runtimeOwnedPendingExecutorMaterialization, o as runFinalizer, p as driverExecutorFactory, r as bestDelivered, ri as runtimeOwnedScopeOwnerRuntime, rt as createExecutor, s as runTree, t as createRootHandle, ti as runtimeOwnedExecutorProviderEvidence, tr as generateSpanId, u as defaultUnmetContractSteer, v as deriveNodeExecutionIdentity, wi as addSpend, wn as resolveAgentEnvironmentProvider, wr as controlProfileMaterialization, wt as contentAddress, x as recordScopeOwnerMaterialization, y as meterRuntimeOwnedAccounting, zi as addResourceSpend } from "./supervisor-DBzsb6Qt.js";
+import { $n as generateSpanId, $r as runtimeOwnedExecutorProviderEvidence, Ai as sleep, At as WORKER_TRACE_PROPAGATION, C as scopeOwnerExecutorNodeContext, Cr as defineProfileMaterializationContract, Dn as registerRetainedExecutorPreparation, Dr as promptModelProfileMaterialization, Dt as newUsageTotals, Er as promptControlProfileMaterialization, Et as meterUsageEvent, F as scopeRetainedOwnerResult, Fi as withTimeout, Fr as worktreeCliProfileMaterialization, Gi as teardownExecutor, Ii as zeroSpend, Jr as providerAttemptEvidence, Li as addResourceSpend, M as prepareScopeRetainedOwnerTask, Mn as runAbortable, N as scopeRetainedOwnerContext, Nr as unsupportedProfileDimensions, On as retainedExecutorSeamKey, P as scopeRetainedOwnerPriorSpend, Pi as unmeteredSpend, Q as captureReusableExecutorConfig, Qr as runtimeOwnedExecutorMaterialization, Ri as resourceTelemetry, S as restoreScopeOwnerAcceptedExecution, Si as addSpend, Sn as resolveAgentEnvironmentProvider, Sr as controlProfileMaterialization, St as contentAddress, Tr as profileMaterializationAxes$1, Ui as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Vr as attestRuntimeOwnedScopeOwner, Wr as inheritRuntimeOwnedExecutorAttestation, Xn as createOtelExporter, Xr as runtimeOwnedDriveHarnessProviderEvidence, Xt as bridgeAdmissionRefusal, Yr as recordRuntimeOwnedDriveHarnessProviderEvidence, Z as bindReusableExecutorExecutionId, Zr as runtimeOwnedExecutorExecutionBinding, Zt as bridgeModelRouteRefusal, b as meterRuntimeOwnedProviderAttempt, d as runDriverWithRetry, ei as runtimeOwnedPendingExecutorMaterialization, f as driverChild, g as beginScopeOwnerAttempt, j as consumeScopeRetainedOwnerResult, jr as renderUnsupported, kn as RunCancellationReason, kt as spendFromUsageTotals, m as isDriverSpec, mn as routerBrain, n as createSupervisor, nn as bridgeRuntimeAttachmentsKey, o as runFinalizer, p as driverExecutorFactory, r as bestDelivered, rn as bridgeStopSignalKey, rr as toOtelAttributes, rt as snapshotExecutorConfig, s as runTree, si as detachedSnapshot, t as createRootHandle, ti as runtimeOwnedScopeOwnerRuntime, tt as createExecutor, u as defaultUnmetContractSteer, v as deriveNodeExecutionIdentity, wr as fullProfileMaterialization, wt as assertValidBudget, x as recordScopeOwnerMaterialization, xr as assertProfileMaterialization, y as meterRuntimeOwnedAccounting, zi as withBudgetResources, zt as createInbox } from "./supervisor-0ksHf44Z.js";
 import { i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-DKDyr-fc.js";
+import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { t as createStdioToolServer } from "./tool-server-BJbCPhoW.js";
-import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-GFI-HzJX.js";
+import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-DcwOMS5C.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-hZREkcfu.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -476,7 +476,7 @@ function assertCoordinationTransport(options) {
 	if (!isLoopbackHost(options.host ?? "127.0.0.1") && !options.authentication) throw new ConfigError("coordination non-loopback address requires authentication; allowUnauthenticatedRemote is no longer supported");
 	if (options.authentication !== void 0 && options.authentication !== true && (typeof options.authentication !== "object" || options.authentication === null || Array.isArray(options.authentication))) throw new ConfigError("coordination authentication must be true or a credential lifetime configuration");
 	const ttl = typeof options.authentication === "object" ? options.authentication.ttlMs : void 0;
-	if (ttl !== void 0 && (!Number.isSafeInteger(ttl) || ttl <= 0 || ttl > 864e5)) throw new ConfigError("coordination credential ttlMs must be a positive integer no greater than 24 hours");
+	if (ttl !== void 0 && (!Number.isSafeInteger(ttl) || ttl <= 0 || !Number.isSafeInteger(Date.now() + ttl))) throw new ConfigError("coordination credential ttlMs must be a positive safe integer with a safe expiry");
 	if (options.publicUrl !== void 0 && !options.authentication) throw new ConfigError("coordination publicUrl requires authentication");
 	const signingKeys = typeof options.authentication === "object" ? options.authentication.signingKeys : void 0;
 	if (signingKeys !== void 0) {
@@ -526,9 +526,11 @@ async function serveCoordinationMcp(opts) {
 	const rotateCredential = () => {
 		if (!opts.authentication) throw new ConfigError("coordination authentication is not configured");
 		if (closed) throw new ConfigError("coordination server is closed");
+		const expiresAt = Date.now() + (auth?.ttlMs ?? 9e5);
+		if (!Number.isSafeInteger(expiresAt)) throw new ConfigError("coordination credential expiry must remain a safe integer");
 		for (const [credential, expiry] of revoked) if (expiry <= Date.now()) revoked.delete(credential);
 		if (token) revoked.set(token.toString(), credentialExpiresAt);
-		credentialExpiresAt = Date.now() + (auth?.ttlMs ?? 9e5);
+		credentialExpiresAt = expiresAt;
 		const nonce = randomBytes(32).toString("base64url");
 		let text = nonce;
 		if (signingKeys) {
@@ -1788,15 +1790,7 @@ function isAsyncIterable$1(value) {
 *  timer lets the process exit mid-backoff when nothing else is pending. */
 function defaultSleep(ms, signal) {
 	if (ms <= 0 || signal?.aborted) return Promise.resolve();
-	return new Promise((resolve) => {
-		const done = () => {
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", done);
-			resolve();
-		};
-		const timer = setTimeout(done, ms);
-		signal?.addEventListener("abort", done, { once: true });
-	});
+	return sleep(ms, signal);
 }
 //#endregion
 //#region src/runtime/supervise/supervise.ts
@@ -3394,4 +3388,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { mapExecutorResult as _, isPreSpawnExecutorFailure as a, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, gateOnDeliverable as g, serveCoordinationMcp as h, workerFromBackend as i, assertCoordinationBinding as l, createSupervisorSpanRecorder as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u };
 
-//# sourceMappingURL=supervise-DYZVP44H.js.map
+//# sourceMappingURL=supervise-Ah7kMn2p.js.map