@tangle-network/agent-runtime 0.314.2 → 0.317.0

package/dist/{supervise-BE9ta8bl.js → supervise-CU6AuxWY.js}

@@ -1,10 +1,10 @@
-import { $n as parseWorkerToolTraceArtifact, $r as toOtelAttributes, A as scopeOwnerExecutorNodeContext, An as resolveAgentEnvironmentProvider, At as captureReusableExecutorConfig, B as consumeScopeRetainedOwnerResult, C as deriveNodeExecutionIdentity, Ci as profileMaterializationAxes$1, Ct as createContinuationKeeper, D as recordScopeOwnerMaterialization, E as recordScopeOwnerDriverAttempt, F as seatExecutionProfile, Fi as attestRuntimeOwnedScopeOwner, Fn as retainedExecutorSeamKey, Ft as snapshotExecutorConfig, G as scopeRetainedOwnerContext, Gi as runtimeOwnedExecutorExecutionBinding, H as prepareScopeRetainedOwnerSeatSwitch, Hi as providerAttemptEvidence, I as abandonScopeRetainedOwnerInvocation, J as scopeRetainedOwnerResourceReader, Ji as runtimeOwnedPendingExecutorMaterialization, Jn as readCommittedJsonLines, Jt as createActivityLog, K as scopeRetainedOwnerJournalRoot, Ki as runtimeOwnedExecutorMaterialization, Kn as isNoEntError, L as beginScopeRetainedOwnerDrive, M as SeatChain, Mr as contentAddress, N as SeatChainExhaustedError, Ni as worktreeCliProfileMaterialization, Nt as createExecutor, O as recordScopeOwnerPause, Or as persistHarnessTranscript, P as authoredSeatStages, Pn as registerRetainedExecutorPreparation, R as bindScopeRetainedOwnerEnvironmentId, Ri as inheritRuntimeOwnedExecutorAttestation, Si as fullProfileMaterialization, Sr as RunCancellationReason, St as checkVerdictOf, T as meterRuntimeOwnedProviderAttempt, Ti as promptModelProfileMaterialization, Tr as runAbortable, U as prepareScopeRetainedOwnerTask, Ui as recordRuntimeOwnedDriveHarnessProviderEvidence, V as noteScopeRetainedOwnerCoordination, Vt as WORKER_TRACE_PROPAGATION, W as reconcileScopeRetainedOwnerEnvironment, Wi as runtimeOwnedDriveHarnessProviderEvidence, X as scopeRetainedOwnerResult, Xt as createInbox, Y as scopeRetainedOwnerRestorePoint, Yi as runtimeOwnedScopeOwnerRuntime, Yr as generateSpanId, Z as scopeRetainedOwnerTurnEnded, _ as isDriverSpec, an as isLiveNodeStatus, b as assertRecursiveReservationPolicy, bi as controlProfileMaterialization, c as runTree, cn as bridgeModelRouteRefusal, dr as bridgeStopSignalKey, f as runDriverWithRetry, fr as errMessage, g as driverExecutorFactory, gt as CONTINUATIONS_DIR, h as driverChild, i as bestDelivered, ir as assertValidBudget, it as providerVisibleProfile, ji as unsupportedProfileDimensions, k as restoreScopeOwnerAcceptedExecution, ki as renderUnsupported, kr as readHarnessTranscript, kt as bindReusableExecutorExecutionId, lr as spendFromUsageTotals, mt as gateOnDeliverable, n as createRootHandle, nt as coordinationMcpAlias, or as meterUsageEvent, p as summarizeDriverAttempts, q as scopeRetainedOwnerPriorSpend, qi as runtimeOwnedExecutorProviderEvidence, qn as prepareJsonlAppend, qr as createOtelExporter, r as createSupervisor, rt as coordinationProfileToolPrefix, s as runFinalizer, sn as bridgeAdmissionRefusal, sr as newUsageTotals, ta as detachedSnapshot, tr as executorFailure, u as HarnessTurnFailedError, ur as bridgeRuntimeAttachmentsKey, vt as CheckUnavailableError, w as meterRuntimeOwnedAccounting, wi as promptControlProfileMaterialization, wn as routerBrain, wr as linkAbort, x as beginScopeOwnerAttempt, xi as defineProfileMaterializationContract, xt as bestComposite, yi as assertProfileMaterialization, yt as admitContinuationPolicy, z as bindScopeRetainedOwnerProvider, zt as createRouterTranscript } from "./supervisor-DmSuKksw.js";
+import { $n as parseWorkerToolTraceArtifact, $r as toOtelAttributes, A as scopeOwnerExecutorNodeContext, An as resolveAgentEnvironmentProvider, At as captureReusableExecutorConfig, B as consumeScopeRetainedOwnerResult, C as deriveNodeExecutionIdentity, Ci as profileMaterializationAxes$1, Ct as createContinuationKeeper, D as recordScopeOwnerMaterialization, E as recordScopeOwnerDriverAttempt, F as seatExecutionProfile, Fi as attestRuntimeOwnedScopeOwner, Fn as retainedExecutorSeamKey, Ft as snapshotExecutorConfig, G as scopeRetainedOwnerContext, Gi as runtimeOwnedExecutorExecutionBinding, H as prepareScopeRetainedOwnerSeatSwitch, Hi as providerAttemptEvidence, I as abandonScopeRetainedOwnerInvocation, J as scopeRetainedOwnerResourceReader, Ji as runtimeOwnedPendingExecutorMaterialization, Jn as readCommittedJsonLines, Jt as createActivityLog, K as scopeRetainedOwnerJournalRoot, Ki as runtimeOwnedExecutorMaterialization, Kn as isNoEntError, L as beginScopeRetainedOwnerDrive, M as SeatChain, Mr as contentAddress, N as SeatChainExhaustedError, Ni as worktreeCliProfileMaterialization, Nt as createExecutor, O as recordScopeOwnerPause, Or as persistHarnessTranscript, P as authoredSeatStages, Pn as registerRetainedExecutorPreparation, R as bindScopeRetainedOwnerEnvironmentId, Ri as inheritRuntimeOwnedExecutorAttestation, Si as fullProfileMaterialization, Sr as RunCancellationReason, St as checkVerdictOf, T as meterRuntimeOwnedProviderAttempt, Ti as promptModelProfileMaterialization, Tr as runAbortable, U as prepareScopeRetainedOwnerTask, Ui as recordRuntimeOwnedDriveHarnessProviderEvidence, V as noteScopeRetainedOwnerCoordination, Vt as WORKER_TRACE_PROPAGATION, W as reconcileScopeRetainedOwnerEnvironment, Wi as runtimeOwnedDriveHarnessProviderEvidence, X as scopeRetainedOwnerResult, Xt as createInbox, Y as scopeRetainedOwnerRestorePoint, Yi as runtimeOwnedScopeOwnerRuntime, Yr as generateSpanId, Z as scopeRetainedOwnerTurnEnded, _ as isDriverSpec, an as isLiveNodeStatus, b as assertRecursiveReservationPolicy, bi as controlProfileMaterialization, c as runTree, cn as bridgeModelRouteRefusal, dr as bridgeStopSignalKey, f as runDriverWithRetry, fr as errMessage, g as driverExecutorFactory, gt as CONTINUATIONS_DIR, h as driverChild, i as bestDelivered, ir as assertValidBudget, it as providerVisibleProfile, ji as unsupportedProfileDimensions, k as restoreScopeOwnerAcceptedExecution, ki as renderUnsupported, kr as readHarnessTranscript, kt as bindReusableExecutorExecutionId, lr as spendFromUsageTotals, mt as gateOnDeliverable, n as createRootHandle, nt as coordinationMcpAlias, or as meterUsageEvent, p as summarizeDriverAttempts, q as scopeRetainedOwnerPriorSpend, qi as runtimeOwnedExecutorProviderEvidence, qn as prepareJsonlAppend, qr as createOtelExporter, r as createSupervisor, rt as coordinationProfileToolPrefix, s as runFinalizer, sn as bridgeAdmissionRefusal, sr as newUsageTotals, ta as detachedSnapshot, tr as executorFailure, u as HarnessTurnFailedError, ur as bridgeRuntimeAttachmentsKey, vt as CheckUnavailableError, w as meterRuntimeOwnedAccounting, wi as promptControlProfileMaterialization, wn as routerBrain, wr as linkAbort, x as beginScopeOwnerAttempt, xi as defineProfileMaterializationContract, xt as bestComposite, yi as assertProfileMaterialization, yt as admitContinuationPolicy, z as bindScopeRetainedOwnerProvider, zt as createRouterTranscript } from "./supervisor-CbFyf48U.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { G as errorMessage, Tt as teardownSurfaces, Y as isAsyncIterable$1, _t as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, at as unmeteredSpend, dt as resourceTelemetry, ft as withBudgetResources, lt as addResourceSpend, ot as withTimeout, st as zeroSpend, tt as sleep, wt as teardownExecutor, z as addSpend } from "./workspace-streams-BEvSX97P.js";
+import { B as addSpend, Et as teardownSurfaces, K as errorMessage, Tt as teardownExecutor, X as isAsyncIterable$1, ct as zeroSpend, ft as resourceTelemetry, nt as sleep, ot as unmeteredSpend, pt as withBudgetResources, st as withTimeout, ut as addResourceSpend, vt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./workspace-streams-DkijayqX.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-DhvyZ8-O.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { C as createInMemoryRunContext, D as applyRunCancellation, M as coordinationVerbNames, O as watchRunCancellation, P as createCoordinationToolsForManager, S as createFileRunContext, c as resolveWakePolicy, f as createProgressTracker, h as progressStop, m as plateau, n as createSteerAcknowledger, o as composeWakeInput, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as withRunContext } from "./coordination-driver-CyJF37L8.js";
+import { C as createInMemoryRunContext, D as applyRunCancellation, M as coordinationVerbNames, O as watchRunCancellation, P as createCoordinationToolsForManager, S as createFileRunContext, c as resolveWakePolicy, f as createProgressTracker, h as progressStop, m as plateau, n as createSteerAcknowledger, o as composeWakeInput, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as withRunContext } from "./coordination-driver-DGhN8GO9.js";
 import { r as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-Dqer2M4_.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-DSCWdbX2.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
@@ -25,6 +25,35 @@ import { withProfileKb } from "@tangle-network/agent-interface/profile-kb";
 const COORDINATION_CLIENT_TOOL_TIMEOUT_MS = 3e5;
 //#endregion
 //#region src/runtime/supervise/coordination-http.ts
+/** The JSON-RPC error a refusal carries. MCP clients put a non-2xx body into the error the agent
+*  sees, so without it the agent reads only `Error POSTing to endpoint:` and a status at best. The
+*  messages are fixed text: never a credential, a request body or an arbitrary error string. */
+function rejectionBody(reason, limits) {
+	return {
+		jsonrpc: "2.0",
+		id: null,
+		error: {
+			code: -32e3,
+			message: {
+				"method-not-allowed": "coordination accepts only POST",
+				"unknown-path": "no coordination endpoint at this path",
+				"wrong-host": "this coordination endpoint does not serve the requested host",
+				"origin-refused": "coordination refuses requests from this browser origin",
+				"listener-closed": "this coordination endpoint is closed: the manager it served has ended",
+				"scope-stopped": "the manager this coordination endpoint serves has been stopped",
+				"credential-refused": "the coordination credential is missing, invalid, expired or revoked",
+				"unsupported-content-type": "coordination requests must be application/json",
+				"body-too-large": `coordination request bodies are limited to ${limits.maxRequestBytes} bytes`,
+				"malformed-request": "the request is not one JSON-RPC 2.0 message",
+				"request-limit": `coordination admits ${limits.maxConcurrentRequests} concurrent requests and ${limits.requestsPerMinute} a minute; retry shortly`,
+				"body-timeout": `the request body did not arrive within ${limits.requestTimeoutMs} ms`,
+				"action-timeout": `the action did not finish within ${limits.requestTimeoutMs} ms and may still complete; read its outcome before repeating it`,
+				"handler-failed": "the coordination handler failed"
+			}[reason],
+			data: { reason }
+		}
+	};
+}
 function coordinationHttpLimits(options) {
 	const positive = (name, value, fallback) => {
 		const resolved = value ?? fallback;
@@ -54,12 +83,13 @@ function coordinationHttpHandler(input) {
 	let controlRequests = 0;
 	let windowStart = Date.now();
 	let requests = 0;
-	const audit = async (outcome, status, action) => {
+	const audit = async (outcome, status, action, reason) => {
 		await input.options.onAudit?.({
 			...input.identity,
 			outcome,
 			status,
-			...action ? { action } : {}
+			...action ? { action } : {},
+			...reason ? { reason } : {}
 		});
 	};
 	return (req, res) => {
@@ -90,12 +120,15 @@ function coordinationHttpHandler(input) {
 			res.end(value === void 0 ? void 0 : JSON.stringify(value));
 			if (!executing) release();
 		};
-		const reject = (status) => {
-			respond(status);
-			audit("rejected", status, action).catch(() => void 0);
+		const reject = ({ status, reason }) => {
+			respond(status, rejectionBody(reason, limits));
+			audit("rejected", status, action, reason).catch(() => void 0);
 			req.resume();
 		};
-		req.on("error", () => reject(400));
+		req.on("error", () => reject({
+			status: 400,
+			reason: "malformed-request"
+		}));
 		req.on("aborted", () => {
 			finished = true;
 			if (!executing) release();
@@ -105,7 +138,10 @@ function coordinationHttpHandler(input) {
 			if (!executing) release();
 		});
 		if (req.method !== "POST") {
-			reject(405);
+			reject({
+				status: 405,
+				reason: "method-not-allowed"
+			});
 			return;
 		}
 		const authorization = input.authorize(req);
@@ -115,16 +151,25 @@ function coordinationHttpHandler(input) {
 		}
 		const origin = req.headers.origin;
 		if (origin !== void 0 && !limits.origins.has(origin)) {
-			reject(403);
+			reject({
+				status: 403,
+				reason: "origin-refused"
+			});
 			return;
 		}
 		if (req.headers["content-type"]?.split(";", 1)[0]?.trim().toLowerCase() !== "application/json") {
-			reject(415);
+			reject({
+				status: 415,
+				reason: "unsupported-content-type"
+			});
 			return;
 		}
 		const length = req.headers["content-length"];
 		if (length !== void 0 && (!/^\d+$/.test(length) || Number(length) > limits.maxRequestBytes)) {
-			reject(413);
+			reject({
+				status: 413,
+				reason: "body-too-large"
+			});
 			return;
 		}
 		const now = Date.now();
@@ -136,7 +181,10 @@ function coordinationHttpHandler(input) {
 		controlAdmission = active + input.backgroundActions() >= limits.maxConcurrentRequests || requests >= limits.requestsPerMinute;
 		if (controlAdmission) {
 			if (controlActive >= 2 || controlRequests >= 60) {
-				reject(429);
+				reject({
+					status: 429,
+					reason: "request-limit"
+				});
 				return;
 			}
 			controlActive++;
@@ -147,7 +195,13 @@ function coordinationHttpHandler(input) {
 		admitted = true;
 		timer = setTimeout(() => {
 			timedOut = true;
-			reject(executing ? 504 : 408);
+			reject(executing ? {
+				status: 504,
+				reason: "action-timeout"
+			} : {
+				status: 408,
+				reason: "body-timeout"
+			});
 		}, limits.requestTimeoutMs);
 		timer.unref();
 		let size = 0;
@@ -156,7 +210,10 @@ function coordinationHttpHandler(input) {
 			if (finished) return;
 			size += chunk.length;
 			if (size > limits.maxRequestBytes) {
-				reject(413);
+				reject({
+					status: 413,
+					reason: "body-too-large"
+				});
 				return;
 			}
 			chunks.push(chunk);
@@ -167,12 +224,18 @@ function coordinationHttpHandler(input) {
 			try {
 				const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)));
 				if (!value || typeof value !== "object" || Array.isArray(value) || !("jsonrpc" in value) || value.jsonrpc !== "2.0" || !("method" in value) || typeof value.method !== "string" || "id" in value && value.id !== null && typeof value.id !== "string" && (typeof value.id !== "number" || !Number.isFinite(value.id))) {
-					reject(400);
+					reject({
+						status: 400,
+						reason: "malformed-request"
+					});
 					return;
 				}
 				message = value;
 			} catch {
-				reject(400);
+				reject({
+					status: 400,
+					reason: "malformed-request"
+				});
 				return;
 			}
 			const authorization = input.authorize(req);
@@ -183,7 +246,10 @@ function coordinationHttpHandler(input) {
 			if (message.method === "tools/call" && message.params && typeof message.params === "object" && "name" in message.params && typeof message.params.name === "string" && input.toolNames.has(message.params.name)) action = message.params.name;
 			if (controlAdmission) {
 				if (!(message.method === "initialize" || message.method === "tools/list" || action === "stop" || action === "observe_agent" || action === "read_journal")) {
-					reject(429);
+					reject({
+						status: 429,
+						reason: "request-limit"
+					});
 					return;
 				}
 				controlRequests++;
@@ -202,7 +268,7 @@ function coordinationHttpHandler(input) {
 					if (!finished) respond(response === null ? 202 : 200, response ?? void 0);
 					await audit(timedOut ? "completed-after-deadline" : "completed", timedOut ? 504 : response === null ? 202 : 200, action);
 				} catch {
-					respond(500);
+					respond(500, rejectionBody("handler-failed", limits));
 				} finally {
 					executing = false;
 					release();
@@ -511,8 +577,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 	const rotateCredential = () => {
 		if (!opts.authentication) throw new ConfigError("coordination authentication is not configured");
 		if (closed) throw new ConfigError("coordination server is closed");
-		const deadline = opts.scope.budget.deadlineMs;
-		const expiresAt = auth?.ttlMs === void 0 ? deadline > 0 ? deadline : void 0 : Date.now() + auth.ttlMs;
+		const expiresAt = auth?.ttlMs === void 0 ? void 0 : Date.now() + auth.ttlMs;
 		if (expiresAt !== void 0 && !Number.isSafeInteger(expiresAt)) throw new ConfigError("coordination credential expiry must remain a safe integer");
 		for (const [credential, expiry] of revoked) if (expiry <= Date.now()) revoked.delete(credential);
 		if (token) revoked.set(token.toString(), credentialExpiresAt ?? Number.POSITIVE_INFINITY);
@@ -534,9 +599,21 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		token = Buffer.from(text);
 		headers = Object.freeze({ Authorization: `Bearer ${text}` });
 	};
+	/**
+	* Why a supplied credential is refused, or undefined when it is valid. A credential lives as
+	* long as the scope it fronts: until the scope's signal aborts, within an explicit `ttlMs`, and
+	* until rotation revokes it. Every stop aborts that signal: cancellation, the run's deadline, and
+	* a lead stopping its child. A child's own time box does not: its lead checks it in and keeps it
+	* running (`deadline.ts` `DeadlineCheckIn`), and the check-in asks it to record its state and
+	* submit through these very tools. Refusing at the time box left a checked-in child unable to do
+	* either (2026-10-10: eu-datacenter-power-2030-20261010b:s3, every call for its last 41 minutes).
+	*/
+	const refusedCredential = (supplied) => {
+		if (opts.scope.signal.aborted) return "scope-stopped";
+		return validCredential(supplied) ? void 0 : "credential-refused";
+	};
 	const validCredential = (supplied) => {
-		const deadline = opts.scope.budget.deadlineMs;
-		if (closed || opts.scope.signal.aborted || deadline > 0 && Date.now() >= deadline || revoked.has(supplied.toString())) return false;
+		if (revoked.has(supplied.toString())) return false;
 		if (!signingKeys) return token !== void 0 && (credentialExpiresAt === void 0 || Date.now() < credentialExpiresAt) && supplied.length === token.length && timingSafeEqual(supplied, token);
 		if (supplied.length > 8192) return false;
 		try {
@@ -632,16 +709,29 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		},
 		backgroundActions: () => nodeTools.background() + fencedVerbs.background(),
 		authorize: (req) => {
-			if (!paths.has(req.url ?? "")) return 404;
+			if (!paths.has(req.url ?? "")) return {
+				status: 404,
+				reason: "unknown-path"
+			};
 			const address = req.socket.localAddress?.replace(/^::ffff:/, "");
 			const localAuthority = address?.includes(":") ? `[${address}]:${req.socket.localPort}` : `${address}:${req.socket.localPort}`;
 			const boundAuthority = audiences.size > 0 && (host === "0.0.0.0" || host === "::") && address !== void 0 && req.socket.localPort !== void 0 && req.headers.host === localAuthority;
-			if (!audiences.has(req.headers.host ?? "") && !boundAuthority) return 403;
-			if (closed) return 401;
+			if (!audiences.has(req.headers.host ?? "") && !boundAuthority) return {
+				status: 403,
+				reason: "wrong-host"
+			};
+			if (closed) return {
+				status: 401,
+				reason: "listener-closed"
+			};
 			if (!opts.authentication) return void 0;
 			const authorization = req.headers.authorization;
 			const supplied = typeof authorization === "string" && authorization.startsWith("Bearer ") ? Buffer.from(authorization.slice(7)) : Buffer.alloc(0);
-			if (!validCredential(supplied)) return 401;
+			const refused = refusedCredential(supplied);
+			return refused === void 0 ? void 0 : {
+				status: 401,
+				reason: refused
+			};
 		}
 	}));
 	server.requestTimeout = requestTimeoutMs;
@@ -4747,4 +4837,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { readRootStreamReceipt as _, superviseWithTestBrain as a, createSupervisorSpanRecorder as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, resolveSupervisorProfile as f, readRootStream as g, ROOT_STREAM_FILE as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgentWithTestBrain as m, profileGuidanceComposer as n, workerFromBackend as o, supervisorAgent as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, UNPROVEN_CONTINUITY as v, serveCoordinationMcp as x, composeReentryTask as y };
 
-//# sourceMappingURL=supervise-BE9ta8bl.js.map
+//# sourceMappingURL=supervise-CU6AuxWY.js.map