@tangle-network/agent-runtime 0.266.0 → 0.273.3

package/dist/{stream-agent-turn-Gw9hLpBn.d.ts → stream-agent-turn-ewm3BZAp.d.ts}

@@ -1,4 +1,4 @@
-import { C as ExecutorToolCall, Da as BackendErrorDetail, Ea as AgentTaskStatus, Ii as ExecCtx, La as RuntimeStreamEvent, Or as UnavailablePausePolicy, Rn as ExecutorProgress, X as Scope, Xi as LoopTokenUsage, Y as Runtime, b as ExecutorRegistry, f as ExecutorCancellation, g as ExecutorFactory, gt as UsageEvent, ia as SandboxClient, kn as TraceSource, p as ExecutorCancellationRequest, rt as Spend, s as DefaultVerdict, sa as Validator, y as ExecutorProgressEvent } from "./types-CrnwLVYQ.js";
+import { An as TraceSource, C as ExecutorToolCall, Cr as UnavailablePausePolicy, Ja as BackendErrorDetail, Oa as Validator, Ta as SandboxClient, X as Scope, Y as Runtime, _a as LoopTokenUsage, b as ExecutorRegistry, f as ExecutorCancellation, g as ExecutorFactory, gt as UsageEvent, io as RuntimeStreamEvent, p as ExecutorCancellationRequest, qa as AgentTaskStatus, ra as ExecCtx, rt as Spend, s as DefaultVerdict, y as ExecutorProgressEvent, zn as ExecutorProgress } from "./types-DMRc3jru.js";
 import { t as AgentCandidateArtifactPort } from "./types-CuXu5zuS.js";
 import { AgentCandidateWorkspaceSnapshotEvidence, AgentProfile, AgentProfileMcpServer, AgentProfileValidationResult, HarnessType, ReasoningEffort, StreamEvent } from "@tangle-network/agent-interface";
 import { AgentRunOutcome } from "@tangle-network/sandbox/runtime";
@@ -8,15 +8,16 @@ import { BackendType, CreateSandboxOptions, PromptOptions, Sandbox, SandboxEvent
 import { AgentEnvironment, AgentEnvironment as AgentEnvironment$1, AgentEnvironmentCapabilities, AgentEnvironmentCapabilities as AgentEnvironmentCapabilities$1, AgentEnvironmentEvent, AgentEnvironmentEvent as AgentEnvironmentEvent$1, AgentEnvironmentProvider, AgentEnvironmentProvider as AgentEnvironmentProvider$1, AgentEnvironmentQuery, AgentEnvironmentStatus, AgentEnvironmentSummary, AgentProfileRef, AgentProfileRef as AgentProfileRef$1, AgentSession, AgentSessionRef, AgentSessionStatus as AgentSessionStatus$1, AgentTurnInput, AgentTurnInput as AgentTurnInput$1, AgentTurnResult as AgentTurnResult$2, CheckpointRef, CheckpointRequest, CreateAgentEnvironmentInput, CreateAgentEnvironmentInput as CreateAgentEnvironmentInput$1, ExecRequest, ExecResult, ForkRequest, PlacementInfo, ResourceRequest, WorkspaceRequest } from "@tangle-network/agent-interface/environment-provider";
 //#region src/redact.d.ts
 /**
+ * Redaction for values that may leave the Runtime process. The built-in
+ * redactor is agent-eval's redaction core (`@tangle-network/agent-eval/traces`,
+ * default profile): credentials found by field name or value shape are
+ * replaced whole, email, card, SSN and phone values in place, and token counts
+ * such as `inputTokens` or `max_tokens` are kept. A customer with
+ * domain-specific PII supplies their own `redact` hook.
  *
- * Redaction for values that may leave the Runtime process. The default scrubs
- * common leak classes (API keys, bearer tokens, emails, private keys) from
- * strings and walks nested objects and arrays. A customer with domain-specific
- * PII supplies their own `redact` hook.
- *
- * This is intentionally narrower than `src/sanitize.ts` (which redacts the
- * runtime's *event envelope* field-by-field): here the value is opaque
- * customer payload, so the scrub is value-shaped, not schema-shaped.
+ * This is narrower than `src/sanitize.ts`, which drops fields of the runtime's
+ * *event envelope* unless the caller opts in: here the value is opaque customer
+ * payload, so the scrub is value-shaped, not schema-shaped.
  *
  * @experimental
  */
@@ -24,17 +25,15 @@ import { AgentEnvironment, AgentEnvironment as AgentEnvironment$1, AgentEnvironm
  *  must not throw on cyclic input (the default tolerates cycles). */
 type Redactor = (value: unknown) => unknown;
 /**
- * The built-in redactor. Walks objects and arrays; replaces values under
- * secret-bearing keys wholesale; scrubs in-value patterns from every string.
- * Cycle-safe (a seen-set short-circuits self-referential payloads to
- * `'[circular]'`), depth-bounded, and total — never throws on customer input.
+ * The built-in redactor. Cycle-safe, depth-bounded and total: it never throws
+ * on customer input and never mutates it.
  */
 declare function defaultRedactor(value: unknown): unknown;
 /**
  * Resolve the redactor a client uses. A caller-supplied hook handles
  * domain-specific values first, then the built-in scrubber still removes
- * common credentials and email addresses. Returning `false` is the explicit
- * opt-out for already-reviewed public values.
+ * credentials and personal data. Returning `false` is the explicit opt-out for
+ * already-reviewed public values.
  */
 declare function resolveRedactor(redact: Redactor | false | undefined): Redactor;
 //#endregion
@@ -47,11 +46,29 @@ declare function resolveRedactor(redact: Redactor | false | undefined): Redactor
  *
  * @experimental
  */
+/**
+ * MCP tool annotations (protocol 2025-03-26 and later). Hints a client reads
+ * before calling, for example to run a read-only tool without confirmation.
+ * They describe the tool; they do not enforce anything. @experimental
+ */
+interface McpToolAnnotations {
+  title?: string;
+  /** The tool does not modify its environment. */
+  readOnlyHint?: boolean;
+  /** The tool may perform destructive updates. Meaningful only when not read-only. */
+  destructiveHint?: boolean;
+  /** Repeating a call with the same arguments has no additional effect. */
+  idempotentHint?: boolean;
+  /** The tool may reach entities outside its own data, such as the web. */
+  openWorldHint?: boolean;
+}
 /** A callable MCP tool exposed by either stdio server. @experimental */
 interface McpToolDescriptor {
   name: string;
   description: string;
   inputSchema: Record<string, unknown>;
+  /** Published in `tools/list` when present. */
+  annotations?: McpToolAnnotations;
   handler: (raw: unknown) => Promise<unknown>;
 }
 /** Stdio-shaped transport used by the shared JSON-RPC server implementation. @experimental */
@@ -2251,5 +2268,5 @@ declare function streamAgentTurn(backend: AgentTurnBackend, input: AgentTurnInpu
  */
 declare function collectAgentTurn(stream: AsyncIterable<RuntimeStreamEvent>): Promise<CollectedAgentTurn>;
 //#endregion
-export { decodeHarnessUsage as $, PeerMailLimits as $n, ResourceRequest as $t, createInbox as A, DEFAULT_LOCAL_HARNESS as An, AgentEnvironmentProvider$1 as At, secretEnvOfMcpServer as B, ToolSpec as Bn, AgentTurnResult$2 as Bt, SteerableSandboxArgs as C, WorktreeHandle as Cn, mapSandboxToolEvent as Ct, Inbox as D, CodexExecutionEvidence as Dn, AgentEnvironment$1 as Dt, AuthorityInboxMessage as E, removeWorktree as En, sumSandboxUsage as Et, ResolvedMcpServerLaunch as F, harnessSupportsReasoningEffort as Fn, AgentEnvironmentSummary as Ft, CodexRolloutStoreRef as G, ToolLoopMessageRecord as Gn, ExecRequest as Gt, CodexRolloutIdentity as H, ToolLoopChat as Hn, CheckpointRequest as Ht, envKeyProvider as I, localHarnessExecutable as In, AgentProfileRef$1 as It, addHarnessUsage as J, DEFAULT_PEER_MAIL_LIMITS as Jn, PlacementInfo as Jt, CodexRolloutTurn as K, ToolLoopToolCall as Kn, ExecResult as Kt, mcpSecretEnvMetadataKey as L, parseCodexTokenUsage as Ln, AgentSession as Lt, BridgeModelCredential as M, LocalHarness as Mn, AgentEnvironmentProviderRegistry as Mt, BridgeSeam as N, LocalHarnessResult as Nn, AgentEnvironmentQuery as Nt, InboxMessage as O, CodexExecutionPolicy as On, AgentEnvironmentCapabilities$1 as Ot, KeyProvider as P, RunLocalHarnessOptions as Pn, AgentEnvironmentStatus as Pt, HarnessUsage as Q, PeerMailKind as Qn, ProviderPromptOptions as Qt, resolveMcpServerLaunch as R, runLocalHarness as Rn, AgentSessionRef as Rt, SandboxSteeringOptions as S, RemoveWorktreeOptions as Sn, mapSandboxEvent as St, createSteerableSandboxSession as T, createWorktree as Tn, sandboxProgressEvents as Tt, CodexRolloutSession as U, ToolLoopCompaction as Un, CreateAgentEnvironmentInput$1 as Ut, CodexForkBoundary as V, ToolLoopCallContext as Vn, CheckpointRef as Vt, CodexRolloutStoreReader as W, ToolLoopCompactionOptions as Wn, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Wt, harnessUsageIsEmpty as X, PeerMailEnvelope as Xn, ProviderExecutorOptions as Xt, createCodexRolloutStoreReader as Y, PEER_MAIL_WIRE_KEY as Yn, ProviderAsSandboxClientOptions as Yt, readCodexRolloutSession as Z, PeerMailEvent as Zn, ProviderLeafOut as Zt, cliInPlaceExecutor as _, WorktreeProfileMaterializationReceipt as _n, resolveRedactor as _r, SandboxUsageLedger as _t, StreamAgentTurnOptions as a, resolveAgentEnvironmentProvider as an, PeerMailboxOptions as ar, SharedBoxPlacement as at, createExecutorRegistry as b, DiffResult as bn, createSandboxUsageLedger as bt, CliInPlaceSeam as c, SandboxControlClient as cn, isPeerMailEnvelope as cr, SharedBoxStats as ct, CliWorktreeSeam as d, ProviderWorkspaceRetentionPort as dn, JsonRpcMessage as dr, sharedBoxRefusal as dt, SandboxClientProviderOptions as en, PeerMailOutcome as er, DEFAULT_SHARED_BOX_RESOURCES as et, ExecutorConfig as f, ProviderPlacement as fn, JsonRpcResponse as fr, sharedWorkerClientName as ft, SandboxSeam as g, WorktreeHarnessResult as gn, defaultRedactor as gr, SandboxToolPartState as gt, RouterToolsSeam as h, WorktreeCommandResult as hn, Redactor as hr, SandboxServedBackend as ht, CollectedAgentTurn as i, providerAsSandboxClient as in, PeerMailbox as ir, SharedBoxHandle as it, BridgeHarnessStore as j, LOCAL_HARNESSES as jn, AgentEnvironmentProviderRef as jt, PeerInboxMessage as k, CodexTokenUsage as kn, AgentEnvironmentEvent$1 as kt, CliSeam as l, createTangleSandboxExactProcessProvider as ln, peerMailTools as lr, SharedWorkerIdentity as lt, RouterSeam as m, WorktreeCheckRunner as mn, McpTransport as mr, SandboxOutputMarker as mt, AgentTurnInput$1 as n, createAgentEnvironmentProviderRegistry as nn, PeerMailRefusal as nr, ROUTER_CLIENT_HEADER as nt, collectAgentTurn as o, sandboxClientAsProvider as on, claimsAuthority as or, SharedBoxPlacementOptions as ot, ProviderSeam as p, InPlaceHarnessResult as pn, McpToolDescriptor as pr, SandboxLeafOut as pt, CodexStoreDelta as q, AUTHORITY_MARKERS as qn, ForkRequest as qt, AgentTurnUsage as r, providerAsExecutor as rn, PeerMailSendInput as rr, SharedBoxCloseReceipt as rt, streamAgentTurn as s, CreateTangleSandboxExactProcessProviderOptions as sn, createPeerMailbox as sr, SharedBoxProcess as st, AgentTurnBackend as t, WorkspaceRequest as tn, PeerMailReadout as tr, DEFAULT_SHARED_BOX_WORKERS as tt, CliWorktreeBridgeSeam as u, ProviderWorkspaceRetentionContext as un, peerMailVerbNames as ur, sharedBoxPlacement as ut, cliWorktreeExecutor as v, CreateWorktreeOptions as vn, assertSandboxServedModel as vt, SteerableSandboxSession as w, captureWorktreeDiff as wn, sandboxEventServedBackend as wt, DEFAULT_SANDBOX_STEERING_MAX_TURNS as x, GitRunner as xn, extractLlmCallEvent as xt, createExecutor as y, DiffOptions as yn, createSandboxToolPartState as yt, resolveSecretEnv as z, RouterTransportConfig as zn, AgentSessionStatus$1 as zt };
-//# sourceMappingURL=stream-agent-turn-Gw9hLpBn.d.ts.map
+export { decodeHarnessUsage as $, PeerMailLimits as $n, ResourceRequest as $t, createInbox as A, DEFAULT_LOCAL_HARNESS as An, AgentEnvironmentProvider$1 as At, secretEnvOfMcpServer as B, ToolSpec as Bn, AgentTurnResult$2 as Bt, SteerableSandboxArgs as C, WorktreeHandle as Cn, mapSandboxToolEvent as Ct, Inbox as D, CodexExecutionEvidence as Dn, AgentEnvironment$1 as Dt, AuthorityInboxMessage as E, removeWorktree as En, sumSandboxUsage as Et, ResolvedMcpServerLaunch as F, harnessSupportsReasoningEffort as Fn, AgentEnvironmentSummary as Ft, CodexRolloutStoreRef as G, ToolLoopMessageRecord as Gn, ExecRequest as Gt, CodexRolloutIdentity as H, ToolLoopChat as Hn, CheckpointRequest as Ht, envKeyProvider as I, localHarnessExecutable as In, AgentProfileRef$1 as It, addHarnessUsage as J, DEFAULT_PEER_MAIL_LIMITS as Jn, PlacementInfo as Jt, CodexRolloutTurn as K, ToolLoopToolCall as Kn, ExecResult as Kt, mcpSecretEnvMetadataKey as L, parseCodexTokenUsage as Ln, AgentSession as Lt, BridgeModelCredential as M, LocalHarness as Mn, AgentEnvironmentProviderRegistry as Mt, BridgeSeam as N, LocalHarnessResult as Nn, AgentEnvironmentQuery as Nt, InboxMessage as O, CodexExecutionPolicy as On, AgentEnvironmentCapabilities$1 as Ot, KeyProvider as P, RunLocalHarnessOptions as Pn, AgentEnvironmentStatus as Pt, HarnessUsage as Q, PeerMailKind as Qn, ProviderPromptOptions as Qt, resolveMcpServerLaunch as R, runLocalHarness as Rn, AgentSessionRef as Rt, SandboxSteeringOptions as S, RemoveWorktreeOptions as Sn, mapSandboxEvent as St, createSteerableSandboxSession as T, createWorktree as Tn, sandboxProgressEvents as Tt, CodexRolloutSession as U, ToolLoopCompaction as Un, CreateAgentEnvironmentInput$1 as Ut, CodexForkBoundary as V, ToolLoopCallContext as Vn, CheckpointRef as Vt, CodexRolloutStoreReader as W, ToolLoopCompactionOptions as Wn, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Wt, harnessUsageIsEmpty as X, PeerMailEnvelope as Xn, ProviderExecutorOptions as Xt, createCodexRolloutStoreReader as Y, PEER_MAIL_WIRE_KEY as Yn, ProviderAsSandboxClientOptions as Yt, readCodexRolloutSession as Z, PeerMailEvent as Zn, ProviderLeafOut as Zt, cliInPlaceExecutor as _, WorktreeProfileMaterializationReceipt as _n, defaultRedactor as _r, SandboxUsageLedger as _t, StreamAgentTurnOptions as a, resolveAgentEnvironmentProvider as an, PeerMailboxOptions as ar, SharedBoxPlacement as at, createExecutorRegistry as b, DiffResult as bn, createSandboxUsageLedger as bt, CliInPlaceSeam as c, SandboxControlClient as cn, isPeerMailEnvelope as cr, SharedBoxStats as ct, CliWorktreeSeam as d, ProviderWorkspaceRetentionPort as dn, JsonRpcMessage as dr, sharedBoxRefusal as dt, SandboxClientProviderOptions as en, PeerMailOutcome as er, DEFAULT_SHARED_BOX_RESOURCES as et, ExecutorConfig as f, ProviderPlacement as fn, JsonRpcResponse as fr, sharedWorkerClientName as ft, SandboxSeam as g, WorktreeHarnessResult as gn, Redactor as gr, SandboxToolPartState as gt, RouterToolsSeam as h, WorktreeCommandResult as hn, McpTransport as hr, SandboxServedBackend as ht, CollectedAgentTurn as i, providerAsSandboxClient as in, PeerMailbox as ir, SharedBoxHandle as it, BridgeHarnessStore as j, LOCAL_HARNESSES as jn, AgentEnvironmentProviderRef as jt, PeerInboxMessage as k, CodexTokenUsage as kn, AgentEnvironmentEvent$1 as kt, CliSeam as l, createTangleSandboxExactProcessProvider as ln, peerMailTools as lr, SharedWorkerIdentity as lt, RouterSeam as m, WorktreeCheckRunner as mn, McpToolDescriptor as mr, SandboxOutputMarker as mt, AgentTurnInput$1 as n, createAgentEnvironmentProviderRegistry as nn, PeerMailRefusal as nr, ROUTER_CLIENT_HEADER as nt, collectAgentTurn as o, sandboxClientAsProvider as on, claimsAuthority as or, SharedBoxPlacementOptions as ot, ProviderSeam as p, InPlaceHarnessResult as pn, McpToolAnnotations as pr, SandboxLeafOut as pt, CodexStoreDelta as q, AUTHORITY_MARKERS as qn, ForkRequest as qt, AgentTurnUsage as r, providerAsExecutor as rn, PeerMailSendInput as rr, SharedBoxCloseReceipt as rt, streamAgentTurn as s, CreateTangleSandboxExactProcessProviderOptions as sn, createPeerMailbox as sr, SharedBoxProcess as st, AgentTurnBackend as t, WorkspaceRequest as tn, PeerMailReadout as tr, DEFAULT_SHARED_BOX_WORKERS as tt, CliWorktreeBridgeSeam as u, ProviderWorkspaceRetentionContext as un, peerMailVerbNames as ur, sharedBoxPlacement as ut, cliWorktreeExecutor as v, CreateWorktreeOptions as vn, resolveRedactor as vr, assertSandboxServedModel as vt, SteerableSandboxSession as w, captureWorktreeDiff as wn, sandboxEventServedBackend as wt, DEFAULT_SANDBOX_STEERING_MAX_TURNS as x, GitRunner as xn, extractLlmCallEvent as xt, createExecutor as y, DiffOptions as yn, createSandboxToolPartState as yt, resolveSecretEnv as z, RouterTransportConfig as zn, AgentSessionStatus$1 as zt };
+//# sourceMappingURL=stream-agent-turn-ewm3BZAp.d.ts.map

package/dist/{structural-rollout-DV9YoQF6.js → structural-rollout-DCUprNpH.js}

@@ -1,4 +1,4 @@
-import { Bi as canonicalStreamEventFromSandboxEvent, Ca as promptOptionsFromAgentTurnInput, Di as runtimeOwnedExecutorMaterialization, Ei as runtimeOwnedExecutorExecutionBinding, Et as InMemorySpawnJournal, Gi as mapSandboxEvent, Hi as createSandboxUsageLedger, Ki as mapSandboxToolEvent, Li as projectSandboxOutcome, Mi as unknownMaterializationReceipt, Ni as executableAgentProfileSnapshot, Nn as observedModelMatchesDeclared, Ri as readSandboxOutcome, Sa as promptFromAgentTurnInput, Tt as InMemoryResultBlobStore, Vi as createSandboxToolPartState, Wi as isSandboxTerminalEvent, _a as awaitAbortable, _i as authoredProfileDigest, _t as createExecutorRegistry, b as withDriverExecutor, bi as knownExecutionBindingReceipt, gt as createExecutor, ji as unknownExecutionBindingReceipt, ki as runtimeOwnedPendingExecutorMaterialization, pt as captureReusableExecutorConfig, r as createSupervisor, wa as providerMessageText, xi as knownMaterializationReceipt, ya as armDeadlineTimer } from "./supervisor-B8UMAXya.js";
+import { Ba as promptOptionsFromAgentTurnInput, Ia as armDeadlineTimer, Ji as unknownExecutionBindingReceipt, Ki as runtimeOwnedPendingExecutorMaterialization, Li as knownExecutionBindingReceipt, M as withDriverExecutor, Ot as createExecutor, Pa as awaitAbortable, Pi as authoredProfileDigest, Ri as knownMaterializationReceipt, Rt as InMemoryResultBlobStore, Tt as captureReusableExecutorConfig, Ui as runtimeOwnedExecutorExecutionBinding, Va as providerMessageText, Wi as runtimeOwnedExecutorMaterialization, Xi as executableAgentProfileSnapshot, Yi as unknownMaterializationReceipt, Yn as observedModelMatchesDeclared, aa as createSandboxUsageLedger, ca as mapSandboxEvent, ea as projectSandboxOutcome, ia as createSandboxToolPartState, kt as createExecutorRegistry, la as mapSandboxToolEvent, r as createSupervisor, ra as canonicalStreamEventFromSandboxEvent, sa as isSandboxTerminalEvent, ta as readSandboxOutcome, za as promptFromAgentTurnInput, zt as InMemorySpawnJournal } from "./supervisor-DdKPGluv.js";
 import { m as ValidationError, p as SessionMismatchError, r as BackendTransportError } from "./errors-DodWX-cb.js";
 import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, renderInputPartsAsText } from "@tangle-network/agent-interface";
@@ -2870,4 +2870,4 @@ function structuralRollout(config = {}) {
 //#endregion
 export { collectAgentTurn as A, defaultAnalystInstruction as C, profileOptimizerModelCall as D, profileChatClient as E, InMemoryRuntimeSessionStore as F, newRuntimeSession as I, nowIso as L, createIterableBackend as M, createSandboxPromptBackend as N, optimizerMethod as O, normalizeBackendStreamEvent as P, startOrResumeRuntimeSession as R, ObservationError as S, renderReport as T, depthStrategy as _, defaultStructuralRolloutPolicy as a, sample as b, officialChecksFromMeta as c, selectBestIndex as d, structuralRollout as f, defineStrategy as g, breadthStrategy as h, defaultExtractCandidate as i, streamAgentTurn as j, strategyAuthorMethod as k, resolveEntrySymbol as l, adaptiveRefine as m, compareCheckOutcomes as n, filterAuthoredAsserts as o, visibleCheckScore as p, composeCheckSources as r, modelAuthoredChecks as s, canDisplace as t, sandboxCheckRunner as u, refine as v, observe as w, sampleThenRefine as x, runAgentic as y, touchSession as z };
 
-//# sourceMappingURL=structural-rollout-DV9YoQF6.js.map
+//# sourceMappingURL=structural-rollout-DCUprNpH.js.map