@tangle-network/agent-runtime 0.229.0 → 0.231.1

package/dist/{substrate-sWW5cDIe.d.ts → substrate-CBo6TWOl.d.ts}

@@ -1,4 +1,4 @@
-import { k as Validator, r as Driver, t as AgentRunSpec, w as OutputAdapter } from "./types-Ba5mJkyd.js";
+import { Qr as OutputAdapter, jr as Driver, kr as AgentRunSpec, ri as Validator } from "./types-DBovefLD.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 //#region src/profiles/coder.d.ts
 /**
@@ -281,4 +281,4 @@ interface UiFinding {
 }
 //#endregion
 export { CoderTask as _, UiFindingSeverity as a, KnowledgeUpdate as c, ResearchSource as d, ResearchTask as f, researcherProfile as g, multiHarnessResearcherFanout as h, UiFindingScreenshot as i, MultiHarnessResearcherFanoutOptions as l, createResearcherValidator as m, UI_LENSES as n, UiLens as o, ResearcherProfileOptions as p, UiFinding as r, KnowledgeItem as s, UI_FINDING_SEVERITIES as t, ResearchOutput as u, coderTaskToPrompt as v };
-//# sourceMappingURL=substrate-sWW5cDIe.d.ts.map
+//# sourceMappingURL=substrate-CBo6TWOl.d.ts.map

package/dist/{supervise-DbNMYx7z.js → supervise-Cl_-IsVc.js}

@@ -1,10 +1,10 @@
-import { $n as generateSpanId, $r as runtimeOwnedExecutorProviderEvidence, Ai as sleep, At as WORKER_TRACE_PROPAGATION, C as scopeOwnerExecutorNodeContext, Cr as defineProfileMaterializationContract, Dn as registerRetainedExecutorPreparation, Dr as promptModelProfileMaterialization, Dt as newUsageTotals, Er as promptControlProfileMaterialization, Et as meterUsageEvent, F as scopeRetainedOwnerResult, Fi as withTimeout, Fr as worktreeCliProfileMaterialization, Gi as teardownExecutor, Ii as zeroSpend, Ir as isNoEntError, Jr as providerAttemptEvidence, Li as addResourceSpend, Lr as parseCommittedJsonLines, M as prepareScopeRetainedOwnerTask, Mn as runAbortable, N as scopeRetainedOwnerContext, Nr as unsupportedProfileDimensions, On as retainedExecutorSeamKey, P as scopeRetainedOwnerPriorSpend, Pi as unmeteredSpend, Q as captureReusableExecutorConfig, Qr as runtimeOwnedExecutorMaterialization, Ri as resourceTelemetry, Rr as prepareJsonlAppend, S as restoreScopeOwnerAcceptedExecution, Si as addSpend, Sn as resolveAgentEnvironmentProvider, Sr as controlProfileMaterialization, St as contentAddress, Tr as profileMaterializationAxes$1, Ui as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Vr as attestRuntimeOwnedScopeOwner, Wr as inheritRuntimeOwnedExecutorAttestation, Xn as createOtelExporter, Xr as runtimeOwnedDriveHarnessProviderEvidence, Xt as bridgeAdmissionRefusal, Yr as recordRuntimeOwnedDriveHarnessProviderEvidence, Z as bindReusableExecutorExecutionId, Zr as runtimeOwnedExecutorExecutionBinding, Zt as bridgeModelRouteRefusal, b as meterRuntimeOwnedProviderAttempt, d as runDriverWithRetry, ei as runtimeOwnedPendingExecutorMaterialization, f as driverChild, g as beginScopeOwnerAttempt, j as consumeScopeRetainedOwnerResult, jr as renderUnsupported, kn as RunCancellationReason, kt as spendFromUsageTotals, m as isDriverSpec, mn as routerBrain, n as createSupervisor, nn as bridgeRuntimeAttachmentsKey, o as runFinalizer, p as driverExecutorFactory, r as bestDelivered, rn as bridgeStopSignalKey, rr as toOtelAttributes, rt as snapshotExecutorConfig, s as runTree, si as detachedSnapshot, t as createRootHandle, ti as runtimeOwnedScopeOwnerRuntime, tt as createExecutor, u as defaultUnmetContractSteer, v as deriveNodeExecutionIdentity, wr as fullProfileMaterialization, wt as assertValidBudget, x as recordScopeOwnerMaterialization, xr as assertProfileMaterialization, y as meterRuntimeOwnedAccounting, zi as withBudgetResources, zt as createInbox } from "./supervisor-DAHG98Rs.js";
+import { $ as captureReusableExecutorConfig, $r as runtimeOwnedExecutorMaterialization, An as RunCancellationReason, At as spendFromUsageTotals, Bi as withBudgetResources, Bt as createInbox, C as scopeOwnerExecutorNodeContext, Ci as addSpend, Cn as resolveAgentEnvironmentProvider, Cr as controlProfileMaterialization, Ct as contentAddress, Dr as promptControlProfileMaterialization, Dt as meterUsageEvent, Er as profileMaterializationAxes$1, F as scopeRetainedOwnerPriorSpend, Fi as unmeteredSpend, Gr as inheritRuntimeOwnedExecutorAttestation, Hr as attestRuntimeOwnedScopeOwner, I as scopeRetainedOwnerResult, Ii as withTimeout, Ir as worktreeCliProfileMaterialization, Ki as teardownExecutor, Li as zeroSpend, Lr as isNoEntError, M as consumeScopeRetainedOwnerResult, Mn as linkAbort, Mr as renderUnsupported, N as prepareScopeRetainedOwnerTask, Nn as runAbortable, On as registerRetainedExecutorPreparation, Or as promptModelProfileMaterialization, Ot as newUsageTotals, P as scopeRetainedOwnerContext, Pr as unsupportedProfileDimensions, Q as bindReusableExecutorExecutionId, Qr as runtimeOwnedExecutorExecutionBinding, Qt as bridgeModelRouteRefusal, Ri as addResourceSpend, Rr as parseCommittedJsonLines, S as restoreScopeOwnerAcceptedExecution, Sr as assertProfileMaterialization, Tr as fullProfileMaterialization, Tt as assertValidBudget, Wi as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Xr as recordRuntimeOwnedDriveHarnessProviderEvidence, Yr as providerAttemptEvidence, Zn as createOtelExporter, Zr as runtimeOwnedDriveHarnessProviderEvidence, Zt as bridgeAdmissionRefusal, b as meterRuntimeOwnedProviderAttempt, ci as detachedSnapshot, d as runDriverWithRetry, ei as runtimeOwnedExecutorProviderEvidence, er as generateSpanId, f as driverChild, g as beginScopeOwnerAttempt, hn as routerBrain, in as bridgeStopSignalKey, ir as toOtelAttributes, it as snapshotExecutorConfig, j as bindScopeRetainedOwnerProvider, ji as sleep, jt as WORKER_TRACE_PROPAGATION, kn as retainedExecutorSeamKey, m as isDriverSpec, n as createSupervisor, ni as runtimeOwnedScopeOwnerRuntime, nt as createExecutor, o as runFinalizer, p as driverExecutorFactory, r as bestDelivered, rn as bridgeRuntimeAttachmentsKey, s as runTree, t as createRootHandle, ti as runtimeOwnedPendingExecutorMaterialization, u as defaultUnmetContractSteer, v as deriveNodeExecutionIdentity, wr as defineProfileMaterializationContract, x as recordScopeOwnerMaterialization, y as meterRuntimeOwnedAccounting, zi as resourceTelemetry, zr as prepareJsonlAppend } from "./supervisor-DFsXULnE.js";
 import { i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-D24y9zg7.js";
-import { t as createStdioToolServer } from "./tool-server-BJbCPhoW.js";
-import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-C6rde-Rv.js";
+import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-x9NEhvHZ.js";
+import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-CUdEC2Qh.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-hZREkcfu.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -345,6 +345,97 @@ function coordinationHttpHandler(input) {
 	};
 }
 //#endregion
+//#region src/runtime/supervise/coordination-preflight.ts
+const MAX_RESPONSE_BYTES = 1024 * 1024;
+var CoordinationPreflightError = class extends ConfigError {
+	constructor(reason) {
+		super(`coordination public endpoint preflight failed: ${reason}`);
+	}
+};
+function record$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Check the operator's route before it becomes a provider attachment. This does not prove cloud egress. */
+async function preflightPublicCoordination(input) {
+	const deadline = new AbortController();
+	const linked = linkAbort(input.signal, deadline.signal);
+	const timer = setTimeout(() => deadline.abort(), Math.min(input.requestTimeoutMs, 1e4));
+	timer.unref();
+	const rpc = async (method, params) => {
+		const response = await fetch(input.url, {
+			method: "POST",
+			headers: {
+				...input.headers,
+				"content-type": "application/json",
+				accept: "application/json"
+			},
+			body: JSON.stringify({
+				jsonrpc: "2.0",
+				id: method,
+				method,
+				...params ? { params } : {}
+			}),
+			redirect: "manual",
+			signal: linked.signal
+		});
+		if (response.status !== 200) {
+			response.body?.cancel().catch(() => void 0);
+			throw new CoordinationPreflightError(`HTTP ${response.status}`);
+		}
+		const reader = response.body?.getReader();
+		if (!reader) throw new CoordinationPreflightError("invalid MCP response");
+		let size = 0;
+		const chunks = [];
+		try {
+			for (;;) {
+				const part = await reader.read();
+				if (part.done) break;
+				size += part.value.byteLength;
+				if (size > MAX_RESPONSE_BYTES) {
+					reader.cancel().catch(() => void 0);
+					throw new CoordinationPreflightError("response too large");
+				}
+				chunks.push(part.value);
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		let body;
+		try {
+			body = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)));
+		} catch {
+			throw new CoordinationPreflightError("invalid MCP response");
+		}
+		if (!record$1(body) || body.jsonrpc !== "2.0" || body.id !== method || body.error || !record$1(body.result)) throw new CoordinationPreflightError("invalid MCP response");
+		return body.result;
+	};
+	try {
+		await runAbortable(async () => {
+			const initialized = await rpc("initialize", {
+				protocolVersion: PROTOCOL_VERSION,
+				capabilities: {},
+				clientInfo: {
+					name: "agent-runtime-coordination-preflight",
+					version: "1"
+				}
+			});
+			if (initialized.protocolVersion !== "2024-11-05" || !record$1(initialized.serverInfo) || initialized.serverInfo.name !== "coordination" || !record$1(initialized.capabilities) || !record$1(initialized.capabilities.tools)) throw new CoordinationPreflightError("invalid MCP initialization");
+			const listing = await rpc("tools/list");
+			if (!Array.isArray(listing.tools) || listing.tools.some((tool) => !record$1(tool) || typeof tool.name !== "string")) throw new CoordinationPreflightError("invalid MCP tool list");
+			const names = listing.tools.map((tool) => tool.name).sort();
+			if (JSON.stringify(names) !== JSON.stringify([...input.toolNames].sort())) throw new CoordinationPreflightError("coordination tool grants differ");
+		}, linked.signal, "coordination public endpoint preflight cancelled");
+	} catch (error) {
+		if (input.signal.aborted) throw new CoordinationPreflightError("cancelled");
+		if (deadline.signal.aborted) throw new CoordinationPreflightError("timed out");
+		if (error instanceof CoordinationPreflightError) throw error;
+		throw new CoordinationPreflightError("transport unavailable");
+	} finally {
+		clearTimeout(timer);
+		linked.release();
+	}
+}
+//#endregion
 //#region src/runtime/supervise/single-flight-tools.ts
 /**
 * Serve method-supplied supervisor tools on the coordination MCP as single-flight, fenced calls.
@@ -529,10 +620,11 @@ async function serveCoordinationMcp(opts) {
 	const rotateCredential = () => {
 		if (!opts.authentication) throw new ConfigError("coordination authentication is not configured");
 		if (closed) throw new ConfigError("coordination server is closed");
-		const expiresAt = Date.now() + (auth?.ttlMs ?? 9e5);
-		if (!Number.isSafeInteger(expiresAt)) throw new ConfigError("coordination credential expiry must remain a safe integer");
+		const deadline = opts.scope.budget.deadlineMs;
+		const expiresAt = auth?.ttlMs === void 0 ? deadline > 0 ? deadline : void 0 : Date.now() + auth.ttlMs;
+		if (expiresAt !== void 0 && !Number.isSafeInteger(expiresAt)) throw new ConfigError("coordination credential expiry must remain a safe integer");
 		for (const [credential, expiry] of revoked) if (expiry <= Date.now()) revoked.delete(credential);
-		if (token) revoked.set(token.toString(), credentialExpiresAt);
+		if (token) revoked.set(token.toString(), credentialExpiresAt ?? Number.POSITIVE_INFINITY);
 		credentialExpiresAt = expiresAt;
 		const nonce = randomBytes(32).toString("base64url");
 		let text = nonce;
@@ -543,7 +635,7 @@ async function serveCoordinationMcp(opts) {
 				actor: identity.actorId,
 				audience: credentialAudience,
 				grants: grantDigest,
-				expires: credentialExpiresAt,
+				expires: credentialExpiresAt ?? null,
 				nonce
 			})).toString("base64url");
 			text = `${payload}.${createHmac("sha256", signingKeys.keys[signingKeys.activeKeyId]).update(payload).digest("base64url")}`;
@@ -552,8 +644,9 @@ async function serveCoordinationMcp(opts) {
 		headers = Object.freeze({ Authorization: `Bearer ${text}` });
 	};
 	const validCredential = (supplied) => {
-		if (closed || revoked.has(supplied.toString())) return false;
-		if (!signingKeys) return token !== void 0 && Date.now() < credentialExpiresAt && supplied.length === token.length && timingSafeEqual(supplied, token);
+		const deadline = opts.scope.budget.deadlineMs;
+		if (closed || opts.scope.signal.aborted || deadline > 0 && Date.now() >= deadline || revoked.has(supplied.toString())) return false;
+		if (!signingKeys) return token !== void 0 && (credentialExpiresAt === void 0 || Date.now() < credentialExpiresAt) && supplied.length === token.length && timingSafeEqual(supplied, token);
 		if (supplied.length > 8192) return false;
 		try {
 			const parts = supplied.toString().split(".");
@@ -563,7 +656,7 @@ async function serveCoordinationMcp(opts) {
 			if (!claims || typeof claims.key !== "string" || !Object.hasOwn(signingKeys.keys, claims.key)) return false;
 			const expected = createHmac("sha256", signingKeys.keys[claims.key]).update(payload).digest();
 			const signature = Buffer.from(parts[1], "base64url");
-			return signature.length === expected.length && timingSafeEqual(signature, expected) && claims.run === identity.runId && claims.actor === identity.actorId && claims.audience === credentialAudience && claims.grants === grantDigest && Number.isSafeInteger(claims.expires) && claims.expires > Date.now();
+			return signature.toString("base64url") === parts[1] && signature.length === expected.length && timingSafeEqual(signature, expected) && claims.run === identity.runId && claims.actor === identity.actorId && claims.audience === credentialAudience && claims.grants === grantDigest && (claims.expires === null && auth?.ttlMs === void 0 || Number.isSafeInteger(claims.expires) && claims.expires > Date.now());
 		} catch {
 			return false;
 		}
@@ -669,8 +762,19 @@ async function serveCoordinationMcp(opts) {
 		audiences.add(publicAddress.host);
 		if (host === "0.0.0.0" || host === "::") audiences.add(`127.0.0.1:${port}`);
 		paths.add(publicAddress.pathname);
+		if (configured !== void 0) await preflightPublicCoordination({
+			url,
+			headers,
+			signal: opts.scope.signal,
+			requestTimeoutMs,
+			toolNames: selectedNames
+		});
 	} catch (error) {
-		await new Promise((resolve) => server.close(() => resolve()));
+		closed = true;
+		await new Promise((resolve) => {
+			server.close(() => resolve());
+			server.closeAllConnections();
+		});
 		throw error;
 	}
 	const mailbox = coord.peerMail;
@@ -1594,6 +1698,14 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				const baseTokensLeft = scope.budget.tokensLeft;
 				const contractDeclared = deps.deliverable !== void 0;
 				const maxReprompts = deps.repromptOnUnmet ?? 0;
+				let candidate;
+				const finalize = () => runFinalizer(deps.finalizer ?? bestDelivered, {
+					settled: mcp.settled(),
+					blobs: deps.blobs,
+					tree: runTree(scope),
+					budget: scope.budget,
+					...deps.deliverable ? { deliverable: deps.deliverable } : {}
+				});
 				const readProgress = () => {
 					const settled = mcp.settled();
 					const deliveredCount = settled.filter((w) => w.status === "done" && w.valid === true).length;
@@ -1603,11 +1715,12 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 						settledCount: settled.length,
 						submitted,
 						deliveredCount,
-						contract: !contractDeclared ? "none" : submitted || deliveredCount > 0 ? "met" : "unmet"
+						contract: !contractDeclared ? "none" : submitted || candidate !== void 0 ? "met" : "unmet"
 					};
 				};
 				await runDriverWithRetry({
 					drive: async (attempt, reentry) => {
+						candidate = void 0;
 						if (deps.controlDir !== void 0 && deps.abortRun !== void 0) applyRunCancellation(deps.controlDir, deps.abortRun, () => (/* @__PURE__ */ new Date()).toISOString());
 						scope.signal.throwIfAborted();
 						beginScopeOwnerAttempt(scope, attempt);
@@ -1626,6 +1739,10 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 						} catch (error) {
 							if (!mcp.submittedResult() && !mcp.isStopped()) throw error;
 						}
+						if (contractDeclared && !mcp.submittedResult()) {
+							await mcp.drainResolved();
+							candidate = await finalize();
+						}
 					},
 					progress: readProgress,
 					budget: () => scope.budget,
@@ -1641,18 +1758,13 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 					} } : {},
 					...deps.onDriverAttempt ? { onAttempt: deps.onDriverAttempt } : {}
 				});
-				await mcp.drainResolved();
+				if (!contractDeclared) await mcp.drainResolved();
 				const submitted = mcp.submittedResult();
 				if (submitted) {
 					deps.onAcceptedSubmission?.(submitted.result);
 					return submitted.result;
 				}
-				return await runFinalizer(deps.finalizer ?? bestDelivered, {
-					settled: mcp.settled(),
-					blobs: deps.blobs,
-					tree: runTree(scope),
-					budget: scope.budget
-				});
+				return contractDeclared ? candidate : await finalize();
 			} finally {
 				await mcp.close();
 			}
@@ -2364,6 +2476,7 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	let activeExecutor;
 	const drive = async ({ profile, authoredProfile, task, scope, coordinationMcpUrl, coordinationMcpHeaders, stopSignal, coordinationTools }) => {
 		const retainedOwner = boundBackend.backend === "provider" ? scopeRetainedOwnerContext(scope) : void 0;
+		if (retainedOwner && boundBackend.backend === "provider") bindScopeRetainedOwnerProvider(scope, resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry));
 		const originalTask = retainedOwner ? await prepareScopeRetainedOwnerTask(scope, task) : task;
 		if (retainedOwner ? await scopeRetainedOwnerResult(scope) : void 0) {
 			await restoreScopeOwnerAcceptedExecution(scope);
@@ -2696,7 +2809,7 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 				if (budget.tokensKnown !== false || budget.usdCapped && budget.usdKnown !== false) failure = error;
 			}
 			try {
-				await teardownOnce(completed ? DEFAULT_SUCCESSFUL_SHUTDOWN_MS : "brutalKill");
+				if (!retainedOwner?.preserveEnvironment || retainedOwner.admissions.length === 0) await teardownOnce(completed ? DEFAULT_SUCCESSFUL_SHUTDOWN_MS : "brutalKill");
 			} catch (error) {
 				if (!failed) {
 					failed = true;
@@ -3558,4 +3671,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { createSupervisorSpanRecorder as _, isPreSpawnExecutorFailure as a, mapExecutorResult as b, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, readRootStreamReceipt as g, readRootStream as h, workerFromBackend as i, assertCoordinationBinding as l, ROOT_STREAM_FILE as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u, serveCoordinationMcp as v, gateOnDeliverable as y };
 
-//# sourceMappingURL=supervise-DbNMYx7z.js.map
+//# sourceMappingURL=supervise-Cl_-IsVc.js.map