@tangle-network/agent-runtime 0.240.0 → 0.246.0

package/dist/{substrate-iQOskmQ_.d.ts → substrate-DJOnuoa_.d.ts}

@@ -1,4 +1,4 @@
-import { Ur as Driver, Vr as AgentRunSpec, hi as Validator, ui as OutputAdapter } from "./types-CEma9LKR.js";
+import { Ur as Driver, Vr as AgentRunSpec, hi as Validator, ui as OutputAdapter } from "./types-BoEzH8V6.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 //#region src/profiles/coder.d.ts
 /**
@@ -281,4 +281,4 @@ interface UiFinding {
 }
 //#endregion
 export { CoderTask as _, UiFindingSeverity as a, KnowledgeUpdate as c, ResearchSource as d, ResearchTask as f, researcherProfile as g, multiHarnessResearcherFanout as h, UiFindingScreenshot as i, MultiHarnessResearcherFanoutOptions as l, createResearcherValidator as m, UI_LENSES as n, UiLens as o, ResearcherProfileOptions as p, UiFinding as r, KnowledgeItem as s, UI_FINDING_SEVERITIES as t, ResearchOutput as u, coderTaskToPrompt as v };
-//# sourceMappingURL=substrate-iQOskmQ_.d.ts.map
+//# sourceMappingURL=substrate-DJOnuoa_.d.ts.map

package/dist/{supervise-DzoCYAe-.js → supervise-o6CzD2Rt.js}

@@ -1,11 +1,11 @@
-import { $n as contentAddress, Bn as linkAbort, Br as promptModelProfileMaterialization, C as restoreScopeOwnerAcceptedExecution, Cn as routerBrain, F as prepareScopeRetainedOwnerTask, Fi as addSpend, Fr as controlProfileMaterialization, Ft as newUsageTotals, I as scopeRetainedOwnerContext, In as registerRetainedExecutorPreparation, Ir as defineProfileMaterializationContract, Ji as withTimeout, Jr as worktreeCliProfileMaterialization, Kr as unsupportedProfileDimensions, L as scopeRetainedOwnerPriorSpend, Ln as retainedExecutorSeamKey, Lr as fullProfileMaterialization, Lt as spendFromUsageTotals, M as bindScopeRetainedOwnerEnvironmentId, Mt as assertValidBudget, N as bindScopeRetainedOwnerProvider, P as consumeScopeRetainedOwnerResult, Pr as assertProfileMaterialization, Pt as meterUsageEvent, Qi as withBudgetResources, R as scopeRetainedOwnerResourceReader, Rn as RunCancellationReason, Rr as profileMaterializationAxes$1, Rt as WORKER_TRACE_PROPAGATION, S as recordScopeOwnerMaterialization, Ui as sleep, Vn as runAbortable, Wr as renderUnsupported, Xi as addResourceSpend, Xr as prepareJsonlAppend, Yi as zeroSpend, Yr as isNoEntError, Zi as resourceTelemetry, Zr as readCommittedJsonLines, _ as beginScopeOwnerAttempt, an as bridgeAdmissionRefusal, b as meterRuntimeOwnedAccounting, bi as detachedSnapshot, ci as recordRuntimeOwnedDriveHarnessProviderEvidence, d as defaultUnmetContractSteer, di as runtimeOwnedExecutorMaterialization, dn as bridgeRuntimeAttachmentsKey, ei as attestRuntimeOwnedScopeOwner, f as runDriverWithRetry, fi as runtimeOwnedExecutorProviderEvidence, fn as bridgeStopSignalKey, fr as generateSpanId, ft as snapshotExecutorConfig, gr as toOtelAttributes, h as isDriverSpec, ia as teardownExecutor, in as executorFailure, jn as resolveAgentEnvironmentProvider, l as HarnessTurnFailedError, li as runtimeOwnedDriveHarnessProviderEvidence, lr as createOtelExporter, m as driverExecutorFactory, mi as runtimeOwnedScopeOwnerRuntime, n as createSupervisor, na as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, o as runFinalizer, on as bridgeModelRouteRefusal, ot as bindReusableExecutorExecutionId, p as driverChild, pi as runtimeOwnedPendingExecutorMaterialization, qi as unmeteredSpend, qt as createInbox, r as bestDelivered, ri as inheritRuntimeOwnedExecutorAttestation, s as runTree, si as providerAttemptEvidence, st as captureReusableExecutorConfig, t as createRootHandle, tt as errMessage, ui as runtimeOwnedExecutorExecutionBinding, ut as createExecutor, w as scopeOwnerExecutorNodeContext, x as meterRuntimeOwnedProviderAttempt, y as deriveNodeExecutionIdentity, z as scopeRetainedOwnerResult, zr as promptControlProfileMaterialization } from "./supervisor-CFSPj8rx.js";
+import { $i as withBudgetResources, $n as contentAddress, Bn as linkAbort, Br as promptControlProfileMaterialization, C as restoreScopeOwnerAcceptedExecution, Cn as routerBrain, F as prepareScopeRetainedOwnerTask, Fr as assertProfileMaterialization, Ft as newUsageTotals, Gr as renderUnsupported, I as scopeRetainedOwnerContext, Ii as addSpend, In as registerRetainedExecutorPreparation, Ir as controlProfileMaterialization, Ji as unmeteredSpend, L as scopeRetainedOwnerPriorSpend, Ln as retainedExecutorSeamKey, Lr as defineProfileMaterializationContract, Lt as spendFromUsageTotals, M as bindScopeRetainedOwnerEnvironmentId, Mt as assertValidBudget, N as bindScopeRetainedOwnerProvider, P as consumeScopeRetainedOwnerResult, Pt as meterUsageEvent, Qi as resourceTelemetry, Qr as readCommittedJsonLines, R as scopeRetainedOwnerResourceReader, Rn as RunCancellationReason, Rr as fullProfileMaterialization, Rt as WORKER_TRACE_PROPAGATION, S as recordScopeOwnerMaterialization, Vn as runAbortable, Vr as promptModelProfileMaterialization, Wi as sleep, Xi as zeroSpend, Xr as isNoEntError, Yi as withTimeout, Yr as worktreeCliProfileMaterialization, Zi as addResourceSpend, Zr as prepareJsonlAppend, _ as beginScopeOwnerAttempt, aa as teardownExecutor, an as bridgeAdmissionRefusal, b as meterRuntimeOwnedAccounting, ci as providerAttemptEvidence, d as defaultUnmetContractSteer, di as runtimeOwnedExecutorExecutionBinding, dn as bridgeRuntimeAttachmentsKey, f as runDriverWithRetry, fi as runtimeOwnedExecutorMaterialization, fn as bridgeStopSignalKey, fr as generateSpanId, ft as snapshotExecutorConfig, gr as toOtelAttributes, h as isDriverSpec, hi as runtimeOwnedScopeOwnerRuntime, ii as inheritRuntimeOwnedExecutorAttestation, in as executorFailure, jn as resolveAgentEnvironmentProvider, l as HarnessTurnFailedError, li as recordRuntimeOwnedDriveHarnessProviderEvidence, lr as createOtelExporter, m as driverExecutorFactory, mi as runtimeOwnedPendingExecutorMaterialization, n as createSupervisor, o as runFinalizer, on as bridgeModelRouteRefusal, ot as bindReusableExecutorExecutionId, p as driverChild, pi as runtimeOwnedExecutorProviderEvidence, qr as unsupportedProfileDimensions, qt as createInbox, r as bestDelivered, ra as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, s as runTree, st as captureReusableExecutorConfig, t as createRootHandle, ti as attestRuntimeOwnedScopeOwner, tt as errMessage, ui as runtimeOwnedDriveHarnessProviderEvidence, ut as createExecutor, w as scopeOwnerExecutorNodeContext, x as meterRuntimeOwnedProviderAttempt, xi as detachedSnapshot, y as deriveNodeExecutionIdentity, z as scopeRetainedOwnerResult, zr as profileMaterializationAxes$1 } from "./supervisor-tGq-TPIv.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { n as assertNoSymlinkDescendant } from "./durable-file-D24y9zg7.js";
+import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-x9NEhvHZ.js";
-import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-CMprWr0k.js";
-import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-hZREkcfu.js";
+import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-De8pyM57.js";
+import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-B8-Gqhpg.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { closeSync, constants, fsyncSync, openSync, writeSync } from "node:fs";
@@ -597,6 +597,10 @@ function coordinationResponseFenceMs(requestTimeoutMs) {
 }
 /** Stand up the existing coordination tools with bounded HTTP access over one live scope. */
 async function serveCoordinationMcp(opts) {
+	return (await serveCoordinationMcpForManager(opts)).handle;
+}
+/** Runtime-only binding: operator controls stay off the public MCP handle and tool grants. */
+async function serveCoordinationMcpForManager(opts, lifetime) {
 	const host = opts.host ?? "127.0.0.1";
 	assertCoordinationTransport(opts);
 	const requestTimeoutMs = coordinationHttpLimits(opts).requestTimeoutMs;
@@ -666,7 +670,7 @@ async function serveCoordinationMcp(opts) {
 	const audiences = /* @__PURE__ */ new Set();
 	const paths = /* @__PURE__ */ new Set(["/mcp"]);
 	const ownerReader = opts.spawnResourceReader ?? (opts.spawnResourceRoot === void 0 ? scopeRetainedOwnerResourceReader(opts.scope) : void 0);
-	const coord = createCoordinationTools({
+	const coord = createCoordinationToolsForManager({
 		scope: opts.scope,
 		blobs: opts.blobs,
 		makeWorkerAgent: opts.makeWorkerAgent,
@@ -694,7 +698,7 @@ async function serveCoordinationMcp(opts) {
 		...opts.spawnResourceRoot ? { spawnResourceRoot: opts.spawnResourceRoot } : {},
 		...ownerReader ? { spawnResourceReader: ownerReader } : {},
 		...opts.peerMail ? { peerMail: typeof opts.peerMail === "object" && opts.peerMail.limits ? { limits: opts.peerMail.limits } : {} } : {}
-	});
+	}, lifetime);
 	await coord.ready();
 	const reservedNames = new Set(coord.tools.map((tool) => tool.name));
 	for (const tool of opts.nodeTools ?? []) {
@@ -746,6 +750,14 @@ async function serveCoordinationMcp(opts) {
 			resolve(typeof addr === "object" && addr ? addr.port : opts.port ?? 0);
 		});
 	});
+	const addressLifetime = new AbortController();
+	const abortAddress = () => addressLifetime.abort(opts.scope.signal.reason);
+	opts.scope.signal.addEventListener("abort", abortAddress, { once: true });
+	if (opts.scope.signal.aborted) abortAddress();
+	const releaseAddress = () => {
+		opts.scope.signal.removeEventListener("abort", abortAddress);
+		if (!addressLifetime.signal.aborted) addressLifetime.abort(/* @__PURE__ */ new Error("coordination listener closed"));
+	};
 	const localUrl = `http://${host.includes(":") && !host.startsWith("[") ? `[${host}]` : host}:${port}/mcp`;
 	let url;
 	try {
@@ -754,7 +766,7 @@ async function serveCoordinationMcp(opts) {
 			host,
 			port,
 			...identity,
-			signal: opts.scope.signal
+			signal: addressLifetime.signal
 		}), opts.scope.signal, "coordination public address resolution aborted") : resolver;
 		const publicAddress = new URL(configured ?? localUrl);
 		if (!["http:", "https:"].includes(publicAddress.protocol) || publicAddress.username || publicAddress.password || publicAddress.search || publicAddress.hash) throw new ConfigError("coordination publicUrl must be an HTTP endpoint without credentials, query, or fragment");
@@ -774,6 +786,7 @@ async function serveCoordinationMcp(opts) {
 			toolNames: selectedNames
 		});
 	} catch (error) {
+		releaseAddress();
 		closed = true;
 		await new Promise((resolve) => {
 			server.close(() => resolve());
@@ -784,31 +797,35 @@ async function serveCoordinationMcp(opts) {
 	const mailbox = coord.peerMail;
 	const mailListener = mailbox === void 0 ? void 0 : await servePeerMail(mailbox, host);
 	return {
-		url,
-		port,
-		get headers() {
-			return headers;
-		},
-		get credentialExpiresAt() {
-			return credentialExpiresAt;
+		handle: {
+			url,
+			port,
+			get headers() {
+				return headers;
+			},
+			get credentialExpiresAt() {
+				return credentialExpiresAt;
+			},
+			rotateCredential,
+			settled: () => coord.settled(),
+			submittedResult: () => coord.submittedResult(),
+			drainResolved: () => coord.drainResolved(),
+			isStopped: () => coord.isStopped(),
+			history: () => coord.history(),
+			stats: () => coord.stats(),
+			raiseFinding: (finding) => coord.raiseFinding(finding),
+			mailHistory: () => mailbox?.history() ?? [],
+			stopMailThread: (threadId) => mailbox?.stopThread(threadId) ?? false,
+			close: async () => {
+				releaseAddress();
+				closed = true;
+				await new Promise((resolve) => {
+					server.close(() => resolve());
+				});
+				await mailListener?.close();
+			}
 		},
-		rotateCredential,
-		settled: () => coord.settled(),
-		submittedResult: () => coord.submittedResult(),
-		drainResolved: () => coord.drainResolved(),
-		isStopped: () => coord.isStopped(),
-		history: () => coord.history(),
-		stats: () => coord.stats(),
-		raiseFinding: (finding) => coord.raiseFinding(finding),
-		mailHistory: () => mailbox?.history() ?? [],
-		stopMailThread: (threadId) => mailbox?.stopThread(threadId) ?? false,
-		close: async () => {
-			closed = true;
-			await new Promise((resolve) => {
-				server.close(() => resolve());
-			});
-			await mailListener?.close();
-		}
+		controls: coord
 	};
 }
 /**
@@ -1357,6 +1374,71 @@ function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
+//#region src/runtime/supervise/worker-control-observer.ts
+/** Observe durable worker controls while the native harness owns the manager's turn loop. */
+function observeWorkerControls(options) {
+	const { dir, coord, scope, signal, controlScope, onError } = options;
+	const deps = {
+		dir,
+		coord,
+		scope,
+		signal,
+		now: Date.now,
+		ownerId: scope.view.root,
+		controlScope
+	};
+	const steers = createSteerAcknowledger(deps);
+	const cancellations = createCancelAcknowledger(deps);
+	let active = true;
+	let timer;
+	let steering = false;
+	let inFlight = Promise.resolve();
+	let failure;
+	let closing;
+	const stop = () => {
+		active = false;
+		clearInterval(timer);
+		signal.removeEventListener("abort", stop);
+	};
+	const fail = (error) => {
+		failure = { error };
+		stop();
+		onError(error);
+	};
+	const poll = () => {
+		if (!active) return;
+		try {
+			cancellations.pass("turn");
+			if (steering) return;
+			steering = true;
+			inFlight = steers.pass("turn").catch(fail).finally(() => {
+				steering = false;
+			});
+		} catch (error) {
+			fail(error);
+		}
+	};
+	signal.addEventListener("abort", stop, { once: true });
+	if (signal.aborted) stop();
+	else {
+		timer = setInterval(poll, 100);
+		timer.unref();
+		poll();
+	}
+	const finish = async () => {
+		stop();
+		await inFlight;
+		try {
+			await steers.pass("final");
+			cancellations.pass("final");
+		} finally {
+			cancellations.finish();
+		}
+		if (failure) throw failure.error;
+	};
+	return { close: () => closing ??= finish() };
+}
+//#endregion
 //#region src/runtime/supervise/supervisor-agent.ts
 /**
 * `supervisorAgent` — build a supervisor `Agent` FROM its profile. The brain is resolved from
@@ -1646,6 +1728,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 			const nodeTools = resolveTools && context ? await bindSupervisorTools(resolveTools, context, scope.signal, slot) : void 0;
 			const nodeObserver = bindSupervisorNodeObserver(context, observeNodeEvent, deps.onEvent);
 			const stopController = new AbortController();
+			const coordinationLifetime = linkAbort(scope.signal);
 			const tracker = deps.stopRule ? createProgressTracker({ now: Date.now }) : void 0;
 			let progressStopReason;
 			let ledger;
@@ -1660,7 +1743,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				deps.onProgressStop?.(decision.reason);
 				if (!stopController.signal.aborted) stopController.abort(decision.reason);
 			} : nodeObserver;
-			const mcp = await serveCoordinationMcp({
+			const { handle: mcp, controls } = await serveCoordinationMcpForManager({
 				scope,
 				blobs: deps.blobs,
 				makeWorkerAgent: deps.makeWorkerAgent,
@@ -1682,7 +1765,11 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				...deps.watchWorkers ? { watchWorkers: deps.watchWorkers } : {},
 				...deps.stallAfterMs !== void 0 ? { stallAfterMs: deps.stallAfterMs } : {},
 				...deps.continuityByProfile ? { continuityByProfile: deps.continuityByProfile } : {},
-				...onEvent ? { onEvent } : {},
+				onEvent: async (event, record) => {
+					await runAbortable(async () => {
+						await onEvent?.(event, record);
+					}, coordinationLifetime.signal, "supervisor coordination stopped");
+				},
 				...deps.replaySettlements ? { replaySettlements: true } : {},
 				...deps.preflightSpawn ? { preflightSpawn: deps.preflightSpawn } : {},
 				...deps.resolveSpawnProfile ? { resolveSpawnProfile: deps.resolveSpawnProfile } : {},
@@ -1696,11 +1783,26 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				...nodeTools?.length ? { nodeTools } : {},
 				toolNames: runtimeToolNames,
 				onCoordinationTools: (tools) => slot.bind(tools)
+			}, coordinationLifetime.signal).catch((error) => {
+				coordinationLifetime.abort(error);
+				throw error;
 			});
 			ledger = mcp;
 			const coordinationTools = slot.descriptors();
 			const providerProfile = detachedSnapshot(providerVisibleProfile(stableProfile), "supervisorAgent provider-visible profile");
+			let controlObserver;
 			try {
+				if (deps.controlDir !== void 0) controlObserver = observeWorkerControls({
+					dir: deps.controlDir,
+					coord: controls,
+					scope,
+					signal: coordinationLifetime.signal,
+					controlScope: deps.controlScope ?? "run",
+					onError: (error) => {
+						coordinationLifetime.abort(error);
+						stopController.abort(error);
+					}
+				});
 				const recoveredSubmission = mcp.submittedResult();
 				if (recoveredSubmission) {
 					deps.onAcceptedSubmission?.(recoveredSubmission.result);
@@ -1777,7 +1879,12 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				}
 				return contractDeclared ? candidate : await finalize();
 			} finally {
-				await mcp.close();
+				coordinationLifetime.abort(/* @__PURE__ */ new Error("supervisor manager stopped"));
+				try {
+					await controlObserver?.close();
+				} finally {
+					await mcp.close();
+				}
 			}
 		}
 	};
@@ -3700,4 +3807,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { createSupervisorSpanRecorder as _, isPreSpawnExecutorFailure as a, mapExecutorResult as b, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, readRootStreamReceipt as g, readRootStream as h, workerFromBackend as i, assertCoordinationBinding as l, ROOT_STREAM_FILE as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u, serveCoordinationMcp as v, gateOnDeliverable as y };
 
-//# sourceMappingURL=supervise-DzoCYAe-.js.map
+//# sourceMappingURL=supervise-o6CzD2Rt.js.map