@tangle-network/agent-runtime 0.301.0 → 0.306.2

package/dist/mcp/index.js

@@ -1,335 +1,18 @@
-import { Da as throwAbort, Fr as readTraceContextFromEnv, Ir as traceContextToEnv, Nr as createPropagatingTraceEmitter, Oa as throwIfAborted, Pr as mergeTraceEnv, Sn as assertBoxlessPromptOptions, Ta as sleep, ai as createWorktree, ba as deleteBoxSafe, ci as LOCAL_HARNESSES, di as localHarnessExecutable, dt as SPAWN_RESOURCE_PATH_MAX_BYTES, fi as parseCodexTokenUsage, ft as environmentReader, gn as runAgentRounds, ii as captureWorktreeDiff, mt as resolveSpawnResourcePaths, oi as removeWorktree, pi as CodexExecutionDiagnosticError, pn as createSandboxForSpec, pt as hostDirectoryReader, ri as runWorktreeHarness, si as DEFAULT_LOCAL_HARNESS, ui as harnessSupportsReasoningEffort } from "../supervisor-DA_nvF-h.js";
+import { $r as localHarnessExecutable, Cr as readTraceContextFromEnv, Gr as runWorktreeHarness, Jr as removeWorktree, Kr as captureWorktreeDiff, Qr as harnessSupportsReasoningEffort, Sr as mergeTraceEnv, Xr as LOCAL_HARNESSES, Yr as DEFAULT_LOCAL_HARNESS, an as runAgentRounds, at as environmentReader, ei as parseCodexTokenUsage, it as SPAWN_RESOURCE_PATH_MAX_BYTES, nn as createSandboxForSpec, ot as hostDirectoryReader, qr as createWorktree, st as resolveSpawnResourcePaths, ti as CodexExecutionDiagnosticError, un as assertBoxlessPromptOptions, wr as traceContextToEnv, xr as createPropagatingTraceEmitter } from "../supervisor-DYKPbcZa.js";
 import { i as ConfigError, m as ValidationError } from "../errors-DodWX-cb.js";
+import { W as deleteBoxSafe, it as throwIfAborted, rt as throwAbort, tt as sleep } from "../workspace-streams-DaQceg2p.js";
 import { t as assertExecutableAgentProfile } from "../model-policy-DydyWTQg.js";
-import { D as runCoderChecks, ot as selectValidWinner } from "../runtime-6VPSJVeg.js";
-import { B as questionEscalationTargets, F as createCoordinationTools, L as downMessageRefusalReasons, M as analystToolGroupNames, j as ANALYST_DEFINITION_BOUNDS, z as parseAuthoredAnalystDefinition } from "../coordination-driver-vNrdQBSH.js";
+import { E as runCoderChecks, at as selectValidWinner } from "../runtime-D452tieK.js";
+import { A as analystToolGroupNames, F as downMessageRefusalReasons, L as parseAuthoredAnalystDefinition, N as createCoordinationTools, R as questionEscalationTargets, k as ANALYST_DEFINITION_BOUNDS } from "../coordination-driver-Y2gf8pBT.js";
 import { n as SUPPORTED_PROTOCOL_VERSIONS, r as createStdioToolServer } from "../tool-server-Dqer2M4_.js";
 import { t as createKbGate } from "../kb-gate-DpaSwXVx.js";
 import { _ as InMemoryFeedbackStore, a as validateDelegationStatusArgs, c as DELEGATION_HISTORY_TOOL_NAME, d as delegationProfiles, f as DELEGATE_FEEDBACK_DESCRIPTION, g as validateDelegateFeedbackArgs, h as createDelegateFeedbackHandler, i as createDelegationStatusHandler, l as createDelegationHistoryHandler, m as DELEGATE_FEEDBACK_TOOL_NAME, n as DELEGATION_STATUS_INPUT_SCHEMA, o as DELEGATION_HISTORY_DESCRIPTION, p as DELEGATE_FEEDBACK_INPUT_SCHEMA, r as DELEGATION_STATUS_TOOL_NAME, s as DELEGATION_HISTORY_INPUT_SCHEMA, t as DELEGATION_STATUS_DESCRIPTION, u as validateDelegationHistoryArgs, v as eventToSnapshot } from "../delegation-status-CF4D0NZ_.js";
 import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "../openai-tools-DoQ32vpe.js";
 import { t as coderTaskToPrompt } from "../coder-yhVWbdWc.js";
-import { C as composeLoopTraceEmitters, S as capDelegationTrace, _ as FileDelegationStore, a as DELEGATE_UI_AUDIT_TOOL_NAME, b as DELEGATION_TRACE_MAX_SPANS, c as DELEGATE_DESCRIPTION, d as createDelegateHandler, f as validateDelegateArgs, g as DelegationStateCorruptError, h as DelegationPersistenceError, i as DELEGATE_UI_AUDIT_INPUT_SCHEMA, l as DELEGATE_INPUT_SCHEMA, m as hashIdempotencyInput, n as createMcpServer, o as createDelegateUiAuditHandler, p as DelegationTaskQueue, r as DELEGATE_UI_AUDIT_DESCRIPTION, s as validateDelegateUiAuditArgs, t as createInProcessTransport, u as DELEGATE_TOOL_NAME, v as InMemoryDelegationStore, w as createDelegationTraceCollector, x as buildDelegationTraceSpans, y as DELEGATION_TRACE_MAX_BYTES } from "../server-BfHD5iLD.js";
+import { C as composeLoopTraceEmitters, S as capDelegationTrace, _ as FileDelegationStore, a as DELEGATE_UI_AUDIT_TOOL_NAME, b as DELEGATION_TRACE_MAX_SPANS, c as DELEGATE_DESCRIPTION, d as createDelegateHandler, f as validateDelegateArgs, g as DelegationStateCorruptError, h as DelegationPersistenceError, i as DELEGATE_UI_AUDIT_INPUT_SCHEMA, l as DELEGATE_INPUT_SCHEMA, m as hashIdempotencyInput, n as createMcpServer, o as createDelegateUiAuditHandler, p as DelegationTaskQueue, r as DELEGATE_UI_AUDIT_DESCRIPTION, s as validateDelegateUiAuditArgs, t as createInProcessTransport, u as DELEGATE_TOOL_NAME, v as InMemoryDelegationStore, w as createDelegationTraceCollector, x as buildDelegationTraceSpans, y as DELEGATION_TRACE_MAX_BYTES } from "../server-D1Tfxo-v.js";
 import { a as createMemoryToolServer, c as resolveMemoryFromEnv, i as MEMORY_NAME_ENV, n as MEMORY_ITEMS_ENV, o as parseMemoryItems, r as MEMORY_LOG_ENV, s as readMemoryItemsFile, t as MEMORY_FILE_ENV } from "../memory-server-DXQ8IxGR.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
-//#region src/mcp/executor.ts
-/**
-* Wrap a raw sandbox SDK client so the kernel emits
-* `loop.iteration.dispatch` events with `{ placement: 'sibling', sandboxId }`.
-*
-* The returned client `.create()` delegates to the underlying client; the
-* only added behavior is a `describePlacement` tag the kernel reads.
-*
-* @experimental
-*/
-function createSiblingSandboxExecutor(options) {
-	const underlying = options.client;
-	return {
-		client: {
-			create(opts) {
-				return underlying.create(opts);
-			},
-			describePlacement(box) {
-				return {
-					kind: "sibling",
-					sandboxId: readId(box)
-				};
-			}
-		},
-		placement: "sibling",
-		describe() {
-			return "sibling-sandbox (each delegation = fresh sandbox via client.create)";
-		}
-	};
-}
-/**
-* Build an executor that resolves each delegated iteration to an existing
-* machine in `fleet`. The fleet's shared-workspace policy means the worker
-* machine sees the caller's filesystem — diffs land in-place with no
-* cross-sandbox copy step.
-*
-* @experimental
-*/
-function createFleetWorkspaceExecutor(options) {
-	const fleet = options.fleet;
-	const exclude = new Set(options.excludeMachineIds ?? []);
-	let callIndex = 0;
-	const placementBySandboxId = /* @__PURE__ */ new Map();
-	return {
-		client: {
-			async create() {
-				const ids = fleet.ids.filter((id) => !exclude.has(id));
-				if (ids.length === 0) throw new Error(`agent-runtime: fleet ${fleet.fleetId} has no eligible worker machines (ids=[${fleet.ids.join(",")}], excluded=[${[...exclude].join(",")}])`);
-				const selector = options.selectMachine;
-				const machineId = selector ? selector({
-					callIndex,
-					ids
-				}) : ids[callIndex % ids.length];
-				callIndex += 1;
-				if (typeof machineId !== "string" || machineId.length === 0) throw new Error("agent-runtime: fleet executor selectMachine returned an empty machine id");
-				const box = await fleet.sandbox(machineId);
-				const sandboxId = readId(box);
-				if (sandboxId) placementBySandboxId.set(sandboxId, { machineId });
-				return box;
-			},
-			describePlacement(box) {
-				const sandboxId = readId(box);
-				const recorded = sandboxId ? placementBySandboxId.get(sandboxId) : void 0;
-				return {
-					kind: "fleet",
-					sandboxId,
-					fleetId: fleet.fleetId,
-					machineId: recorded?.machineId
-				};
-			}
-		},
-		placement: "fleet",
-		describe() {
-			const excluded = exclude.size > 0 ? ` (excluded=[${[...exclude].join(",")}])` : "";
-			return `fleet-workspace (fleetId=${fleet.fleetId}, machines=[${fleet.ids.join(",")}]${excluded})`;
-		}
-	};
-}
-function readId(box) {
-	const raw = box.id;
-	return typeof raw === "string" && raw.length > 0 ? raw : void 0;
-}
-//#endregion
-//#region src/mcp/in-process-executor.ts
-/**
-*
-* In-process delegation executor — when `agent-runtime-mcp` runs inside a sandbox whose image
-* carries the local coding-harness CLIs (claude / codex / opencode), delegations spawn the harness
-* AS A SUBPROCESS against a git worktree on the SAME filesystem instead of provisioning a sibling
-* sandbox. Zero provisioning latency; worker diffs land in-place; multi-harness fanout = N parallel
-* subprocesses in N parallel worktrees. Each authored profile selects its own harness.
-*
-* This is a THIN adapter over `runWorktreeHarness` (`./worktree-harness`) — the SAME core the
-* `Scope` leaf `createWorktreeCliExecutor` uses. It only adapts the core to the `SandboxClient`
-* port: `create()` reads the authored profile from `CreateSandboxOptions.backend.profile`, and
-* `streamPrompt` runs the core then emits its raw `WorktreeHarnessResult` (the content-addressed
-* patch artifact) on the `result` event. The sandbox-session decode layer
-* (`./detached-coder`) projects that artifact onto `CoderOutput`; the generic `Scope` path settles
-* the artifact directly. The §1.5 payload (systemPrompt + model) reaches the harness inside the core.
-*
-* @experimental
-*/
-const DEFAULT_POSTCHECK_TIMEOUT_MS = 120 * 1e3;
-/**
-* Build an in-process executor. Returns a {@link DelegationExecutor} whose `client.create()`
-* returns a minimal virtual `SandboxInstance`; the kernel calls `streamPrompt(msg)` on it, which
-* runs the shared worktree-harness core and emits one `result` event whose `data.result` is the
-* raw `WorktreeHarnessResult` (the content-addressed patch artifact). The authored profile
-* (`backend.profile`) threads its systemPrompt + model into the harness via the core.
-*
-* There is no box, so a per-prompt `backend` or `model` override is refused rather than dropped;
-* other per-prompt options (`timeoutMs`, `context`) are accepted and ignored.
-*
-* @experimental
-*/
-function createInProcessExecutor(options) {
-	const runPostCheck = options.runPostCheck ?? defaultRunPostCheck;
-	const runCommand = async ({ command, cwd, signal }) => {
-		try {
-			const r = await runPostCheck(command, cwd, signal);
-			return {
-				exitCode: r.exitCode,
-				output: r.stderr || r.stdout
-			};
-		} catch (err) {
-			return {
-				exitCode: -1,
-				output: err instanceof Error ? err.message : String(err)
-			};
-		}
-	};
-	return {
-		client: {
-			async create(opts) {
-				const rawProfile = (opts?.backend)?.profile;
-				if (rawProfile === void 0) throw new ConfigError("in-process executor: backend.profile is required and must select the exact harness, provider, and model");
-				const profile = agentProfileSchema.parse(rawProfile);
-				assertExecutableAgentProfile(profile, "in-process executor");
-				const harness = profile.harness;
-				if (!LOCAL_HARNESSES.includes(harness)) throw new ConfigError(`in-process executor: AgentProfile.harness ${JSON.stringify(harness)} is not a local harness; expected ${LOCAL_HARNESSES.join(", ")}`);
-				if (opts?.backend?.type !== void 0 && opts.backend.type !== harness) throw new ConfigError(`in-process executor: backend.type ${JSON.stringify(opts.backend.type)} conflicts with AgentProfile.harness ${JSON.stringify(harness)}`);
-				const localHarness = harness;
-				const runId = randomUUID();
-				return {
-					id: `in-process-${runId}`,
-					__inProcess: {
-						runId,
-						harness: localHarness
-					},
-					async *streamPrompt(message, promptOpts) {
-						assertBoxlessPromptOptions(promptOpts, "in-process executor");
-						const taskPrompt = typeof message === "string" ? message : message.map((p) => typeof p === "object" && p && "text" in p ? String(p.text) : "").join("\n");
-						const run = await runWorktreeHarness({
-							repoRoot: options.repoRoot,
-							profile,
-							harness: localHarness,
-							taskPrompt,
-							runId,
-							...options.harnessTimeoutMs !== void 0 ? { harnessTimeoutMs: options.harnessTimeoutMs } : {},
-							checkTimeoutMs: options.postCheckTimeoutMs ?? DEFAULT_POSTCHECK_TIMEOUT_MS,
-							...options.testCmd !== void 0 ? { testCmd: options.testCmd } : {},
-							...options.typecheckCmd !== void 0 ? { typecheckCmd: options.typecheckCmd } : {},
-							...options.runGit ? { runGit: options.runGit } : {},
-							...options.runHarness ? { runHarness: options.runHarness } : {},
-							runCommand,
-							...promptOpts?.signal ? { signal: promptOpts.signal } : {}
-						});
-						this.__inProcess.worktree = run.worktree;
-						try {
-							yield {
-								type: "in_process.harness.started",
-								data: {
-									runId,
-									harness: localHarness,
-									worktreePath: run.worktree.path,
-									command: localHarness
-								}
-							};
-							const h = run.result.harness;
-							yield {
-								type: "in_process.harness.ended",
-								data: {
-									runId,
-									exitCode: h.exitCode,
-									durationMs: h.durationMs,
-									killedBySignal: h.killedBySignal,
-									timedOut: h.timedOut,
-									stdoutBytes: h.stdout.length,
-									stderrBytes: h.stderr.length
-								}
-							};
-							yield {
-								type: "result",
-								data: {
-									result: run.result,
-									source: "in-process-executor",
-									harness: localHarness,
-									runId
-								}
-							};
-						} finally {
-							await run.cleanup();
-						}
-					}
-				};
-			},
-			describePlacement(box) {
-				const sandboxId = box.id;
-				const meta = box.__inProcess;
-				return {
-					kind: "in-process",
-					sandboxId,
-					worktreePath: meta?.worktree?.path,
-					harness: meta?.harness
-				};
-			}
-		},
-		placement: "in-process",
-		describe() {
-			return `in-process (repoRoot=${options.repoRoot}, harness=profile-selected${options.testCmd ? `, testCmd="${options.testCmd}"` : ""}${options.typecheckCmd ? `, typecheckCmd="${options.typecheckCmd}"` : ""})`;
-		}
-	};
-}
-async function defaultRunPostCheck(cmd, cwd, signal) {
-	const { spawn } = await import("node:child_process");
-	return new Promise((resolve, reject) => {
-		const child = spawn("sh", ["-c", cmd], {
-			cwd,
-			stdio: "pipe"
-		});
-		let stdout = "";
-		let stderr = "";
-		child.stdout?.on("data", (c) => {
-			stdout += String(c);
-		});
-		child.stderr?.on("data", (c) => {
-			stderr += String(c);
-		});
-		if (signal) {
-			const onAbort = () => {
-				if (!child.killed) child.kill("SIGTERM");
-			};
-			if (signal.aborted) onAbort();
-			else signal.addEventListener("abort", onAbort, { once: true });
-		}
-		const killTimer = setTimeout(() => {
-			if (!child.killed) child.kill("SIGTERM");
-		}, DEFAULT_POSTCHECK_TIMEOUT_MS);
-		if (typeof killTimer.unref === "function") killTimer.unref();
-		child.on("error", (err) => {
-			clearTimeout(killTimer);
-			reject(err);
-		});
-		child.on("close", (code) => {
-			clearTimeout(killTimer);
-			resolve({
-				exitCode: code ?? -1,
-				stdout,
-				stderr
-			});
-		});
-	});
-}
-//#endregion
-//#region src/mcp/bin-helpers.ts
-/**
-* Pick the right executor for an MCP server invocation based on env vars.
-*
-* - `TANGLE_FLEET_ID` set → fleet-workspace placement; resolves the handle
-*   via `sandboxClient.fleets.get(...)`.
-* - Otherwise → sibling-sandbox placement; each delegation creates a fresh
-*   sandbox via `sandboxClient.create(...)`.
-*
-* Fails loud (throws) when fleet mode is requested but the SDK shape is
-* incompatible — the operator chose fleet semantics, silently degrading to
-* sibling mode would lie about workspace topology.
-*
-* @experimental
-*/
-async function detectExecutor(args) {
-	const env = args.env ?? process.env;
-	if (env.AGENT_RUNTIME_IN_SANDBOX === "1") {
-		const repoRoot = env.AGENT_RUNTIME_REPO_ROOT?.trim();
-		if (!repoRoot) throw new Error("agent-runtime-mcp: AGENT_RUNTIME_IN_SANDBOX=1 requires AGENT_RUNTIME_REPO_ROOT to point at the workspace root");
-		return createInProcessExecutor({
-			repoRoot,
-			testCmd: env.AGENT_RUNTIME_TEST_CMD?.trim() || void 0,
-			typecheckCmd: env.AGENT_RUNTIME_TYPECHECK_CMD?.trim() || void 0
-		});
-	}
-	const fleetId = parseFleetId(env.TANGLE_FLEET_ID);
-	if (!fleetId) return createSiblingSandboxExecutor({ client: args.sandboxClient });
-	return createFleetWorkspaceExecutor({
-		fleet: await (args.resolveFleet ?? defaultResolveFleet)(args.sandboxClient, fleetId),
-		excludeMachineIds: parseList(env.TANGLE_FLEET_EXCLUDE_MACHINES)
-	});
-}
-async function defaultResolveFleet(sandboxClient, fleetId) {
-	const fleets = sandboxClient.fleets;
-	if (!fleets || typeof fleets.get !== "function") throw new Error("agent-runtime-mcp: the configured sandbox client does not expose `.fleets.get`; upgrade @tangle-network/sandbox to >= 0.2.1 or unset TANGLE_FLEET_ID.");
-	const raw = await fleets.get(fleetId);
-	if (!raw || typeof raw !== "object") throw new Error(`agent-runtime-mcp: fleets.get(${fleetId}) returned no handle`);
-	const handle = raw;
-	if (typeof handle.fleetId !== "string" || !Array.isArray(handle.ids)) throw new Error(`agent-runtime-mcp: fleet handle for ${fleetId} is missing fleetId/ids — incompatible sandbox SDK shape`);
-	if (typeof handle.sandbox !== "function") throw new Error(`agent-runtime-mcp: fleet handle for ${fleetId} is missing sandbox(machineId) — incompatible sandbox SDK shape`);
-	return handle;
-}
-function parseFleetId(raw) {
-	if (typeof raw !== "string") return void 0;
-	const trimmed = raw.trim();
-	return trimmed.length > 0 ? trimmed : void 0;
-}
-function parseList(raw) {
-	if (!raw) return void 0;
-	const list = raw.split(",").map((entry) => entry.trim()).filter(Boolean);
-	return list.length > 0 ? list : void 0;
-}
-//#endregion
 //#region src/mcp/detached-coder.ts
 /**
 *
@@ -819,51 +502,134 @@ function detachedRunningPhase(elapsedMs) {
 function createDetachedTurnResumeDriver(options) {
 	const cancelHooked = /* @__PURE__ */ new Set();
 	return {
-		intervalMs: options.intervalMs ?? DEFAULT_TICK_INTERVAL_MS,
-		async tick({ record, detachedSessionRef }, ctx) {
-			const ref = parseDetachedSessionRef(detachedSessionRef);
-			if (ref.sandboxId === void 0) return {
-				state: "failed",
-				error: {
-					message: `detached session "${ref.sessionId}" was never bound to a sandbox — the previous process died before the box was acquired, so the turn was never dispatched and cannot be resumed`,
-					kind: "DetachedSessionUnboundError"
-				}
-			};
-			const box = await options.resolveSandbox(ref.sandboxId);
-			if (!cancelHooked.has(record.taskId)) {
-				cancelHooked.add(record.taskId);
-				ctx.signal.addEventListener("abort", () => {
-					box._sessionCancel?.(ref.sessionId).catch(() => {});
-				}, { once: true });
+		intervalMs: options.intervalMs ?? DEFAULT_TICK_INTERVAL_MS,
+		async tick({ record, detachedSessionRef }, ctx) {
+			const ref = parseDetachedSessionRef(detachedSessionRef);
+			if (ref.sandboxId === void 0) return {
+				state: "failed",
+				error: {
+					message: `detached session "${ref.sessionId}" was never bound to a sandbox — the previous process died before the box was acquired, so the turn was never dispatched and cannot be resumed`,
+					kind: "DetachedSessionUnboundError"
+				}
+			};
+			const box = await options.resolveSandbox(ref.sandboxId);
+			if (!cancelHooked.has(record.taskId)) {
+				cancelHooked.add(record.taskId);
+				ctx.signal.addEventListener("abort", () => {
+					box._sessionCancel?.(ref.sessionId).catch(() => {});
+				}, { once: true });
+			}
+			if (ctx.signal.aborted) throwAbort();
+			const tick = await box.driveTurn(options.buildMessage(record), {
+				sessionId: ref.sessionId,
+				turnId: ref.sessionId,
+				...options.wallCapMs !== void 0 ? { wallCapMs: options.wallCapMs } : {}
+			});
+			if (tick.state === "completed") return {
+				state: "completed",
+				output: await options.settleOutput({
+					text: tick.text,
+					result: tick.result
+				}, record, { signal: ctx.signal })
+			};
+			if (tick.state === "failed") return {
+				state: "failed",
+				error: {
+					message: `detached turn ${ref.sessionId} failed: ${tick.error}`,
+					kind: "DetachedTurnFailedError"
+				}
+			};
+			ctx.report({
+				iteration: 0,
+				phase: detachedRunningPhase(tick.elapsedMs)
+			});
+			return { state: "running" };
+		}
+	};
+}
+//#endregion
+//#region src/mcp/executor.ts
+/**
+* Wrap a raw sandbox SDK client so the kernel emits
+* `loop.iteration.dispatch` events with `{ placement: 'sibling', sandboxId }`.
+*
+* The returned client `.create()` delegates to the underlying client; the
+* only added behavior is a `describePlacement` tag the kernel reads.
+*
+* @experimental
+*/
+function createSiblingSandboxExecutor(options) {
+	const underlying = options.client;
+	return {
+		client: {
+			create(opts) {
+				return underlying.create(opts);
+			},
+			describePlacement(box) {
+				return {
+					kind: "sibling",
+					sandboxId: readId(box)
+				};
+			}
+		},
+		placement: "sibling",
+		describe() {
+			return "sibling-sandbox (each delegation = fresh sandbox via client.create)";
+		}
+	};
+}
+/**
+* Build an executor that resolves each delegated iteration to an existing
+* machine in `fleet`. The fleet's shared-workspace policy means the worker
+* machine sees the caller's filesystem — diffs land in-place with no
+* cross-sandbox copy step.
+*
+* @experimental
+*/
+function createFleetWorkspaceExecutor(options) {
+	const fleet = options.fleet;
+	const exclude = new Set(options.excludeMachineIds ?? []);
+	let callIndex = 0;
+	const placementBySandboxId = /* @__PURE__ */ new Map();
+	return {
+		client: {
+			async create() {
+				const ids = fleet.ids.filter((id) => !exclude.has(id));
+				if (ids.length === 0) throw new Error(`agent-runtime: fleet ${fleet.fleetId} has no eligible worker machines (ids=[${fleet.ids.join(",")}], excluded=[${[...exclude].join(",")}])`);
+				const selector = options.selectMachine;
+				const machineId = selector ? selector({
+					callIndex,
+					ids
+				}) : ids[callIndex % ids.length];
+				callIndex += 1;
+				if (typeof machineId !== "string" || machineId.length === 0) throw new Error("agent-runtime: fleet executor selectMachine returned an empty machine id");
+				const box = await fleet.sandbox(machineId);
+				const sandboxId = readId(box);
+				if (sandboxId) placementBySandboxId.set(sandboxId, { machineId });
+				return box;
+			},
+			describePlacement(box) {
+				const sandboxId = readId(box);
+				const recorded = sandboxId ? placementBySandboxId.get(sandboxId) : void 0;
+				return {
+					kind: "fleet",
+					sandboxId,
+					fleetId: fleet.fleetId,
+					machineId: recorded?.machineId
+				};
 			}
-			if (ctx.signal.aborted) throwAbort();
-			const tick = await box.driveTurn(options.buildMessage(record), {
-				sessionId: ref.sessionId,
-				turnId: ref.sessionId,
-				...options.wallCapMs !== void 0 ? { wallCapMs: options.wallCapMs } : {}
-			});
-			if (tick.state === "completed") return {
-				state: "completed",
-				output: await options.settleOutput({
-					text: tick.text,
-					result: tick.result
-				}, record, { signal: ctx.signal })
-			};
-			if (tick.state === "failed") return {
-				state: "failed",
-				error: {
-					message: `detached turn ${ref.sessionId} failed: ${tick.error}`,
-					kind: "DetachedTurnFailedError"
-				}
-			};
-			ctx.report({
-				iteration: 0,
-				phase: detachedRunningPhase(tick.elapsedMs)
-			});
-			return { state: "running" };
+		},
+		placement: "fleet",
+		describe() {
+			const excluded = exclude.size > 0 ? ` (excluded=[${[...exclude].join(",")}])` : "";
+			return `fleet-workspace (fleetId=${fleet.fleetId}, machines=[${fleet.ids.join(",")}]${excluded})`;
 		}
 	};
 }
+function readId(box) {
+	const raw = box.id;
+	return typeof raw === "string" && raw.length > 0 ? raw : void 0;
+}
 //#endregion
 //#region src/mcp/delegates.ts
 /**
@@ -1169,6 +935,187 @@ function collidesWithHarnessNativeTool(name) {
 	return sourcedHarnesses.filter((harness) => harnessNativeTools[harness].some((native) => native.toLowerCase() === wanted));
 }
 //#endregion
-export { ANALYST_DEFINITION_BOUNDS, CodexExecutionDiagnosticError, DEFAULT_LOCAL_HARNESS, DELEGATE_DESCRIPTION, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_INPUT_SCHEMA, DELEGATE_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DELEGATION_TRACE_MAX_BYTES, DELEGATION_TRACE_MAX_SPANS, DelegationPersistenceError, DelegationStateCorruptError, DelegationTaskQueue, FileDelegationStore, InMemoryDelegationStore, InMemoryFeedbackStore, LOCAL_HARNESSES, MEMORY_FILE_ENV, MEMORY_ITEMS_ENV, MEMORY_LOG_ENV, MEMORY_NAME_ENV, SPAWN_RESOURCE_PATH_MAX_BYTES, SUPPORTED_PROTOCOL_VERSIONS, analystToolGroupNames, buildDelegationTraceSpans, capDelegationTrace, captureWorktreeDiff, coderTaskFromArgs, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateFeedbackHandler, createDelegateHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createDelegationTraceCollector, createDetachedTurnResumeDriver, createFleetWorkspaceExecutor, createInProcessExecutor, createInProcessTransport, createKbGate, createMcpServer, createMemoryToolServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, createWorktree, delegationProfiles, detachedSessionDelegate, detachedTurnEvents, detectExecutor, downMessageRefusalReasons, environmentReader, eventToSnapshot, formatDetachedSessionRef, harnessNativeToolNames, harnessNativeTools, harnessSupportsReasoningEffort, hashIdempotencyInput, hostDirectoryReader, localHarnessExecutable, mcpToolsForRuntimeMcp, mcpToolsForRuntimeMcpSubset, mergeTraceEnv, parseAuthoredAnalystDefinition, parseCodexTokenUsage, parseDetachedSessionRef, parseMemoryItems, questionEscalationTargets, readMemoryItemsFile, readTraceContextFromEnv, removeWorktree, resolveMemoryFromEnv, resolveSpawnResourcePaths, runDetachedTurn, settleDetachedCoderTurn, sourcedHarnesses, traceContextToEnv, validateDelegateArgs, validateDelegateFeedbackArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
+//#region src/mcp/in-process-executor.ts
+/**
+*
+* In-process delegation executor — when `agent-runtime-mcp` runs inside a sandbox whose image
+* carries the local coding-harness CLIs (claude / codex / opencode), delegations spawn the harness
+* AS A SUBPROCESS against a git worktree on the SAME filesystem instead of provisioning a sibling
+* sandbox. Zero provisioning latency; worker diffs land in-place; multi-harness fanout = N parallel
+* subprocesses in N parallel worktrees. Each authored profile selects its own harness.
+*
+* This is a THIN adapter over `runWorktreeHarness` (`./worktree-harness`) — the SAME core the
+* `Scope` leaf `createWorktreeCliExecutor` uses. It only adapts the core to the `SandboxClient`
+* port: `create()` reads the authored profile from `CreateSandboxOptions.backend.profile`, and
+* `streamPrompt` runs the core then emits its raw `WorktreeHarnessResult` (the content-addressed
+* patch artifact) on the `result` event. The sandbox-session decode layer
+* (`./detached-coder`) projects that artifact onto `CoderOutput`; the generic `Scope` path settles
+* the artifact directly. The §1.5 payload (systemPrompt + model) reaches the harness inside the core.
+*
+* @experimental
+*/
+const DEFAULT_POSTCHECK_TIMEOUT_MS = 120 * 1e3;
+/**
+* Build an in-process executor. Returns a {@link DelegationExecutor} whose `client.create()`
+* returns a minimal virtual `SandboxInstance`; the kernel calls `streamPrompt(msg)` on it, which
+* runs the shared worktree-harness core and emits one `result` event whose `data.result` is the
+* raw `WorktreeHarnessResult` (the content-addressed patch artifact). The authored profile
+* (`backend.profile`) threads its systemPrompt + model into the harness via the core.
+*
+* There is no box, so a per-prompt `backend` or `model` override is refused rather than dropped;
+* other per-prompt options (`timeoutMs`, `context`) are accepted and ignored.
+*
+* @experimental
+*/
+function createInProcessExecutor(options) {
+	const runPostCheck = options.runPostCheck ?? defaultRunPostCheck;
+	const runCommand = async ({ command, cwd, signal }) => {
+		try {
+			const r = await runPostCheck(command, cwd, signal);
+			return {
+				exitCode: r.exitCode,
+				output: r.stderr || r.stdout
+			};
+		} catch (err) {
+			return {
+				exitCode: -1,
+				output: err instanceof Error ? err.message : String(err)
+			};
+		}
+	};
+	return {
+		client: {
+			async create(opts) {
+				const rawProfile = (opts?.backend)?.profile;
+				if (rawProfile === void 0) throw new ConfigError("in-process executor: backend.profile is required and must select the exact harness, provider, and model");
+				const profile = agentProfileSchema.parse(rawProfile);
+				assertExecutableAgentProfile(profile, "in-process executor");
+				const harness = profile.harness;
+				if (!LOCAL_HARNESSES.includes(harness)) throw new ConfigError(`in-process executor: AgentProfile.harness ${JSON.stringify(harness)} is not a local harness; expected ${LOCAL_HARNESSES.join(", ")}`);
+				if (opts?.backend?.type !== void 0 && opts.backend.type !== harness) throw new ConfigError(`in-process executor: backend.type ${JSON.stringify(opts.backend.type)} conflicts with AgentProfile.harness ${JSON.stringify(harness)}`);
+				const localHarness = harness;
+				const runId = randomUUID();
+				return {
+					id: `in-process-${runId}`,
+					__inProcess: {
+						runId,
+						harness: localHarness
+					},
+					async *streamPrompt(message, promptOpts) {
+						assertBoxlessPromptOptions(promptOpts, "in-process executor");
+						const taskPrompt = typeof message === "string" ? message : message.map((p) => typeof p === "object" && p && "text" in p ? String(p.text) : "").join("\n");
+						const run = await runWorktreeHarness({
+							repoRoot: options.repoRoot,
+							profile,
+							harness: localHarness,
+							taskPrompt,
+							runId,
+							...options.harnessTimeoutMs !== void 0 ? { harnessTimeoutMs: options.harnessTimeoutMs } : {},
+							checkTimeoutMs: options.postCheckTimeoutMs ?? DEFAULT_POSTCHECK_TIMEOUT_MS,
+							...options.testCmd !== void 0 ? { testCmd: options.testCmd } : {},
+							...options.typecheckCmd !== void 0 ? { typecheckCmd: options.typecheckCmd } : {},
+							...options.runGit ? { runGit: options.runGit } : {},
+							...options.runHarness ? { runHarness: options.runHarness } : {},
+							runCommand,
+							...promptOpts?.signal ? { signal: promptOpts.signal } : {}
+						});
+						this.__inProcess.worktree = run.worktree;
+						try {
+							yield {
+								type: "in_process.harness.started",
+								data: {
+									runId,
+									harness: localHarness,
+									worktreePath: run.worktree.path,
+									command: localHarness
+								}
+							};
+							const h = run.result.harness;
+							yield {
+								type: "in_process.harness.ended",
+								data: {
+									runId,
+									exitCode: h.exitCode,
+									durationMs: h.durationMs,
+									killedBySignal: h.killedBySignal,
+									timedOut: h.timedOut,
+									stdoutBytes: h.stdout.length,
+									stderrBytes: h.stderr.length
+								}
+							};
+							yield {
+								type: "result",
+								data: {
+									result: run.result,
+									source: "in-process-executor",
+									harness: localHarness,
+									runId
+								}
+							};
+						} finally {
+							await run.cleanup();
+						}
+					}
+				};
+			},
+			describePlacement(box) {
+				const sandboxId = box.id;
+				const meta = box.__inProcess;
+				return {
+					kind: "in-process",
+					sandboxId,
+					worktreePath: meta?.worktree?.path,
+					harness: meta?.harness
+				};
+			}
+		},
+		placement: "in-process",
+		describe() {
+			return `in-process (repoRoot=${options.repoRoot}, harness=profile-selected${options.testCmd ? `, testCmd="${options.testCmd}"` : ""}${options.typecheckCmd ? `, typecheckCmd="${options.typecheckCmd}"` : ""})`;
+		}
+	};
+}
+async function defaultRunPostCheck(cmd, cwd, signal) {
+	const { spawn } = await import("node:child_process");
+	return new Promise((resolve, reject) => {
+		const child = spawn("sh", ["-c", cmd], {
+			cwd,
+			stdio: "pipe"
+		});
+		let stdout = "";
+		let stderr = "";
+		child.stdout?.on("data", (c) => {
+			stdout += String(c);
+		});
+		child.stderr?.on("data", (c) => {
+			stderr += String(c);
+		});
+		if (signal) {
+			const onAbort = () => {
+				if (!child.killed) child.kill("SIGTERM");
+			};
+			if (signal.aborted) onAbort();
+			else signal.addEventListener("abort", onAbort, { once: true });
+		}
+		const killTimer = setTimeout(() => {
+			if (!child.killed) child.kill("SIGTERM");
+		}, DEFAULT_POSTCHECK_TIMEOUT_MS);
+		if (typeof killTimer.unref === "function") killTimer.unref();
+		child.on("error", (err) => {
+			clearTimeout(killTimer);
+			reject(err);
+		});
+		child.on("close", (code) => {
+			clearTimeout(killTimer);
+			resolve({
+				exitCode: code ?? -1,
+				stdout,
+				stderr
+			});
+		});
+	});
+}
+//#endregion
+export { ANALYST_DEFINITION_BOUNDS, CodexExecutionDiagnosticError, DEFAULT_LOCAL_HARNESS, DELEGATE_DESCRIPTION, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_INPUT_SCHEMA, DELEGATE_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DELEGATION_TRACE_MAX_BYTES, DELEGATION_TRACE_MAX_SPANS, DelegationPersistenceError, DelegationStateCorruptError, DelegationTaskQueue, FileDelegationStore, InMemoryDelegationStore, InMemoryFeedbackStore, LOCAL_HARNESSES, MEMORY_FILE_ENV, MEMORY_ITEMS_ENV, MEMORY_LOG_ENV, MEMORY_NAME_ENV, SPAWN_RESOURCE_PATH_MAX_BYTES, SUPPORTED_PROTOCOL_VERSIONS, analystToolGroupNames, buildDelegationTraceSpans, capDelegationTrace, captureWorktreeDiff, coderTaskFromArgs, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateFeedbackHandler, createDelegateHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createDelegationTraceCollector, createDetachedTurnResumeDriver, createFleetWorkspaceExecutor, createInProcessExecutor, createInProcessTransport, createKbGate, createMcpServer, createMemoryToolServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, createWorktree, delegationProfiles, detachedSessionDelegate, detachedTurnEvents, downMessageRefusalReasons, environmentReader, eventToSnapshot, formatDetachedSessionRef, harnessNativeToolNames, harnessNativeTools, harnessSupportsReasoningEffort, hashIdempotencyInput, hostDirectoryReader, localHarnessExecutable, mcpToolsForRuntimeMcp, mcpToolsForRuntimeMcpSubset, mergeTraceEnv, parseAuthoredAnalystDefinition, parseCodexTokenUsage, parseDetachedSessionRef, parseMemoryItems, questionEscalationTargets, readMemoryItemsFile, readTraceContextFromEnv, removeWorktree, resolveMemoryFromEnv, resolveSpawnResourcePaths, runDetachedTurn, settleDetachedCoderTurn, sourcedHarnesses, traceContextToEnv, validateDelegateArgs, validateDelegateFeedbackArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
 
 //# sourceMappingURL=index.js.map