@tangle-network/agent-runtime 0.337.2 → 0.339.0

package/dist/mcp/index.js

@@ -1,19 +1,128 @@
-import { Br as localHarnessExecutable, En as assertBoxlessPromptOptions, Fr as removeWorktree, G as environmentReader, Hr as CodexExecutionDiagnosticError, Ir as DEFAULT_LOCAL_HARNESS, K as hostDirectoryReader, Lr as LOCAL_HARNESSES, Mr as runWorktreeHarness, Nr as captureWorktreeDiff, Pr as createWorktree, Vr as parseCodexTokenUsage, W as SPAWN_RESOURCE_PATH_MAX_BYTES, dr as createPropagatingTraceEmitter, fr as mergeTraceEnv, mr as traceContextToEnv, pr as readTraceContextFromEnv, q as resolveSpawnResourcePaths, vn as createSandboxForSpec, xn as runAgentRounds, zr as harnessSupportsReasoningEffort } from "../supervisor-Rz8AGpYb.js";
+import { Tr as LOCAL_HARNESSES, _t as runAgentRounds, bt as createSandboxForSpec, nn as readTraceContextFromEnv, tn as createPropagatingTraceEmitter, vt as assertBoxlessPromptOptions, wr as runWorktreeHarness } from "../supervisor-DHrUJhEZ.js";
 import { i as ConfigError, m as ValidationError } from "../errors-DodWX-cb.js";
-import { J as deleteBoxSafe, at as sleep, ct as throwIfAborted, st as throwAbort } from "../sandbox-profile-compat-QTkLe1Z6.js";
+import { t as isRecord } from "../record-value-B6bwJxLa.js";
+import { X as deleteBoxSafe, st as sleep, ut as throwIfAborted } from "../sandbox-profile-compat-BzVBFqrz.js";
 import { t as assertExecutableAgentProfile } from "../model-policy-CyCUwHed.js";
-import { R as runCoderChecks, gt as selectValidWinner } from "../runtime-BOGpotnH.js";
-import { A as ANALYST_DEFINITION_BOUNDS, I as downMessageRefusalReasons, P as createCoordinationTools, R as parseAuthoredAnalystDefinition, j as analystToolGroupNames, z as questionEscalationTargets } from "../coordination-driver-BHkFVqIq.js";
-import { n as SUPPORTED_PROTOCOL_VERSIONS, r as createStdioToolServer } from "../tool-server-Dqer2M4_.js";
-import { t as createKbGate } from "../kb-gate-DpaSwXVx.js";
-import { _ as InMemoryFeedbackStore, a as validateDelegationStatusArgs, c as DELEGATION_HISTORY_TOOL_NAME, d as delegationProfiles, f as DELEGATE_FEEDBACK_DESCRIPTION, g as validateDelegateFeedbackArgs, h as createDelegateFeedbackHandler, i as createDelegationStatusHandler, l as createDelegationHistoryHandler, m as DELEGATE_FEEDBACK_TOOL_NAME, n as DELEGATION_STATUS_INPUT_SCHEMA, o as DELEGATION_HISTORY_DESCRIPTION, p as DELEGATE_FEEDBACK_INPUT_SCHEMA, r as DELEGATION_STATUS_TOOL_NAME, s as DELEGATION_HISTORY_INPUT_SCHEMA, t as DELEGATION_STATUS_DESCRIPTION, u as validateDelegationHistoryArgs, v as eventToSnapshot } from "../delegation-status-CF4D0NZ_.js";
-import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "../openai-tools-DoQ32vpe.js";
-import { t as coderTaskToPrompt } from "../coder-yhVWbdWc.js";
-import { n as PlatformHubError } from "../integrations-dFi-ALk7.js";
-import { C as composeLoopTraceEmitters, S as capDelegationTrace, _ as FileDelegationStore, a as DELEGATE_UI_AUDIT_TOOL_NAME, b as DELEGATION_TRACE_MAX_SPANS, c as DELEGATE_DESCRIPTION, d as createDelegateHandler, f as validateDelegateArgs, g as DelegationStateCorruptError, h as DelegationPersistenceError, i as DELEGATE_UI_AUDIT_INPUT_SCHEMA, l as DELEGATE_INPUT_SCHEMA, m as hashIdempotencyInput, n as createMcpServer, o as createDelegateUiAuditHandler, p as DelegationTaskQueue, r as DELEGATE_UI_AUDIT_DESCRIPTION, s as validateDelegateUiAuditArgs, t as createInProcessTransport, u as DELEGATE_TOOL_NAME, v as InMemoryDelegationStore, w as createDelegationTraceCollector, x as buildDelegationTraceSpans, y as DELEGATION_TRACE_MAX_BYTES } from "../server-hZWM-G8w.js";
-import { a as createMemoryToolServer, c as resolveMemoryFromEnv, i as MEMORY_NAME_ENV, n as MEMORY_ITEMS_ENV, o as parseMemoryItems, r as MEMORY_LOG_ENV, s as readMemoryItemsFile, t as MEMORY_FILE_ENV } from "../memory-server-DXQ8IxGR.js";
+import { _ as environmentReader, r as createCoordinationTools, v as resolveSpawnResourcePaths } from "../driver-control-acknowledgers-C53ggdJ6.js";
+import { n as createStdioToolServer } from "../tool-server-XV4aJwoQ.js";
+import { ct as selectValidWinner, h as runCoderChecks } from "../runtime-B2fjL9Oi.js";
+import { a as composeLoopTraceEmitters, i as FileDelegationStore, n as createDelegateHandler, r as DelegationTaskQueue, t as createMcpServer } from "../server-_4voDNrl.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
+//#region src/mcp/kb-gate.ts
+const norm = (s) => s.toLowerCase().replace(/\s+/g, " ").trim();
+/** Does `value` appear in the (normalized) passage — literally, comma-grouped,
+*  or in billion/million shorthand (the forms a source actually writes). */
+function valueAppears(value, passageNorm) {
+	if (passageNorm.includes(norm(String(value)))) return true;
+	if (typeof value !== "number" || !Number.isFinite(value)) return false;
+	const forms = [value.toLocaleString("en-US")];
+	if (Math.abs(value) >= 1e9) forms.push(`${trimZero(value / 1e9)} billion`);
+	if (Math.abs(value) >= 1e6) forms.push(`${trimZero(value / 1e6)} million`);
+	return forms.some((f) => passageNorm.includes(norm(f)));
+}
+function trimZero(n) {
+	return Number.isInteger(n) ? String(n) : String(Number(n.toFixed(2)));
+}
+/** The always-on floor judges. Order matters: cheapest / most-fundamental first. */
+function builtinJudges(minPassageChars, selfArtifactKinds) {
+	const kinds = selfArtifactKinds.map((k) => k.toLowerCase());
+	return [
+		{
+			name: "passage-non-empty",
+			judge: (c) => c.verbatimPassage.trim().length >= minPassageChars ? { accept: true } : {
+				accept: false,
+				reason: `passage shorter than ${minPassageChars} chars`
+			}
+		},
+		{
+			name: "passage-present",
+			judge: (c) => norm(c.sourceText).includes(norm(c.verbatimPassage)) ? { accept: true } : {
+				accept: false,
+				reason: "verbatim passage not found in source (unbacked fact)"
+			}
+		},
+		{
+			name: "value-in-passage",
+			judge: (c) => c.value === void 0 || valueAppears(c.value, norm(c.verbatimPassage)) ? { accept: true } : {
+				accept: false,
+				reason: `value ${JSON.stringify(c.value)} not present in passage`
+			}
+		},
+		{
+			name: "no-circular-citation",
+			judge: (c) => {
+				if (!c.citation || kinds.length === 0) return { accept: true };
+				const cite = c.citation.toLowerCase();
+				const hit = kinds.find((k) => cite.includes(k));
+				return hit ? {
+					accept: false,
+					reason: `circular citation to self-generated artifact "${hit}"`
+				} : { accept: true };
+			}
+		}
+	];
+}
+/**
+*
+* Build a fail-closed KB gate. The returned function runs the built-in floor
+* (passage-non-empty → passage-present → value-in-passage → no-circular-citation)
+* then any consumer judges, returning on the first veto.
+*
+* @experimental
+*/
+function createKbGate(options = {}) {
+	const judges = [...builtinJudges(options.minPassageChars ?? 12, options.selfArtifactKinds ?? []), ...options.judges ?? []];
+	return async (candidate) => {
+		for (const j of judges) {
+			const verdict = await j.judge(candidate);
+			if (!verdict.accept) return {
+				accepted: false,
+				vetoedBy: j.name,
+				reason: verdict.reason
+			};
+		}
+		return { accepted: true };
+	};
+}
+//#endregion
+//#region src/profiles/coder.ts
+/**
+*
+* `CoderTask` + `coderTaskToPrompt` — the per-task DATA + pure formatter for code-modification tasks
+* (§1.5: the system authors profiles; there is no hardcoded coder profile constant). A domain
+* customizes the worker by authoring its own `AgentProfile` and handing it to a leaf executor
+* (`createWorktreeCliExecutor`) or a fanout (`worktreeFanout`); "is it delivered" is a
+* `DeliverableSpec` (`patchDelivered`), not a bundled validator. This formatter renders a `CoderTask`
+* into the per-task instruction that profile receives.
+*
+* @experimental
+*/
+const DEFAULT_MAX_DIFF_LINES$1 = 400;
+/** Render a `CoderTask` into the per-task instruction handed to the coder profile. @experimental */
+function coderTaskToPrompt(task) {
+	const base = task.baseBranch ?? "main";
+	const testCmd = task.testCmd ?? "pnpm test --run";
+	const typecheckCmd = task.typecheckCmd ?? "pnpm typecheck";
+	const maxDiff = task.maxDiffLines ?? DEFAULT_MAX_DIFF_LINES$1;
+	const forbidden = task.forbiddenPaths?.length ? task.forbiddenPaths.join(", ") : "(none)";
+	const context = task.contextFiles?.length ? task.contextFiles.map((f) => `  - ${f}`).join("\n") : "  (none)";
+	return [
+		`Goal: ${task.goal}`,
+		`Repo: ${task.repoRoot}`,
+		`Base branch: ${base}`,
+		`Run tests with: ${testCmd}`,
+		`Run typecheck with: ${typecheckCmd}`,
+		`Forbidden paths: ${forbidden}`,
+		`Max diff lines: ${maxDiff}`,
+		"Context files:",
+		context,
+		"",
+		"Produce a minimal patch on a fresh branch. Run tests and typecheck before",
+		"returning. Emit the final JSON result block exactly as instructed."
+	].join("\n");
+}
+//#endregion
 //#region src/mcp/detached-coder.ts
 /**
 *
@@ -175,9 +284,6 @@ function projectWorktreeArtifact(value) {
 		...exitCode !== 0 ? { reviewerNotes: `harness ${harnessName} exited ${exitCode}${timedOut ? " (timed out)" : ""}` } : {}
 	};
 }
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 /** Keep the last `max` chars of a diagnostic string — harness stdout can be large; the gate reads
 *  `passed`, not this text, so only the tail is retained for traces/logs. */
 function tail(text, max) {
@@ -480,74 +586,6 @@ function createDetachedTurnTrace(options) {
 function detachedRunningPhase(elapsedMs) {
 	return elapsedMs === void 0 ? "detached-running" : `detached-running ${Math.round(elapsedMs / 1e3)}s`;
 }
-/**
-* Build the `driveTurn`-backed {@link DelegationResumeDriver}. Each `tick()`
-* is one settle/poll/dispatch pass:
-*
-*   - ref without a sandbox binding → `failed` (`DetachedSessionUnboundError`):
-*     the previous process died before a box existed; there is nothing to resume.
-*   - `driveTurn` `completed` → `settleOutput` → `completed` tick.
-*   - `running` → progress via `ctx.report`, `running` tick (queue re-ticks
-*     after `intervalMs`).
-*   - `failed` → `failed` tick (`DetachedTurnFailedError`) — terminal per the
-*     SDK's deterministic-failure contract.
-*
-* Abort: the queue stops ticking once `cancel()` flips the record, so remote
-* cancellation is hooked onto `ctx.signal` (once per task) and fires
-* `_sessionCancel` when the SDK surface exposes it. The driver never deletes
-* boxes — it cannot know whether `sandboxId` is a disposable sibling or a
-* fleet machine, and destroying a fleet machine would be unrecoverable.
-*
-* @experimental
-*/
-function createDetachedTurnResumeDriver(options) {
-	const cancelHooked = /* @__PURE__ */ new Set();
-	return {
-		intervalMs: options.intervalMs ?? DEFAULT_TICK_INTERVAL_MS,
-		async tick({ record, detachedSessionRef }, ctx) {
-			const ref = parseDetachedSessionRef(detachedSessionRef);
-			if (ref.sandboxId === void 0) return {
-				state: "failed",
-				error: {
-					message: `detached session "${ref.sessionId}" was never bound to a sandbox — the previous process died before the box was acquired, so the turn was never dispatched and cannot be resumed`,
-					kind: "DetachedSessionUnboundError"
-				}
-			};
-			const box = await options.resolveSandbox(ref.sandboxId);
-			if (!cancelHooked.has(record.taskId)) {
-				cancelHooked.add(record.taskId);
-				ctx.signal.addEventListener("abort", () => {
-					box._sessionCancel?.(ref.sessionId).catch(() => {});
-				}, { once: true });
-			}
-			if (ctx.signal.aborted) throwAbort();
-			const tick = await box.driveTurn(options.buildMessage(record), {
-				sessionId: ref.sessionId,
-				turnId: ref.sessionId,
-				...options.wallCapMs !== void 0 ? { wallCapMs: options.wallCapMs } : {}
-			});
-			if (tick.state === "completed") return {
-				state: "completed",
-				output: await options.settleOutput({
-					text: tick.text,
-					result: tick.result
-				}, record, { signal: ctx.signal })
-			};
-			if (tick.state === "failed") return {
-				state: "failed",
-				error: {
-					message: `detached turn ${ref.sessionId} failed: ${tick.error}`,
-					kind: "DetachedTurnFailedError"
-				}
-			};
-			ctx.report({
-				iteration: 0,
-				phase: detachedRunningPhase(tick.elapsedMs)
-			});
-			return { state: "running" };
-		}
-	};
-}
 //#endregion
 //#region src/mcp/executor.ts
 /**
@@ -936,128 +974,6 @@ function collidesWithHarnessNativeTool(name) {
 	return sourcedHarnesses.filter((harness) => harnessNativeTools[harness].some((native) => native.toLowerCase() === wanted));
 }
 //#endregion
-//#region src/mcp/hub-server.ts
-/**
-* Hub integration MCP server — the user's connected databases and vector
-* stores as agent tools, mid-turn.
-*
-* The Tangle Platform Hub (`PlatformHubClient`, platform/integrations.ts)
-* already turns a provider credential into a per-user, per-action-policy'd,
-* approved, audited access surface: the user connects Pinecone/Qdrant/
-* Weaviate/Neon/Supabase/… once, and every later call goes through
-* `POST /v1/hub/exec`. This module is the thin bridge from that surface to
-* the agent's tool loop: for every ACTIVE connection to a data provider it
-* serves ONE router tool (`hub_<provider>`) whose `action` + `input`
-* arguments are dispatched to the provider's Hub adapter.
-*
-* Why one router tool per connection instead of one tool per adapter action:
-* the Hub catalog publishes capability counts, not capability schemas, so a
-* per-action tool surface would have to bundle the whole adapter registry.
-* The router tool keeps the layer thin — the Hub adapter IS the tool, the
-* Hub exec endpoint IS the invocation, and the Hub policy IS the permission.
-* Every call is policy-gated server-side; a denial surfaces to the agent as
-* the Hub's own error message. When the platform grows a capabilities
-* endpoint, per-action tools can be generated from it without changing this
-* module's contract.
-*
-* Tool lists are resolved at construction (session-scoped, like the memory
-* server): connections the user adds later appear after the server restarts.
-*
-* @experimental
-*/
-/** The substrate data providers whose Hub adapters become agent tools. */
-const HUB_DATA_PROVIDER_KINDS = [
-	"pinecone",
-	"qdrant",
-	"weaviate",
-	"neon",
-	"supabase",
-	"mongodb",
-	"postgres",
-	"mysql",
-	"redis"
-];
-/** An action name: dot-separated identifiers — `vectors.query`, `branches.list`. */
-const ACTION_NAME_PATTERN = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)+$/;
-const MCP_TOOL_NAME_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;
-function toolNameFor(providerId, connectionId, taken) {
-	const base = `hub_${providerId}`.replace(/[^A-Za-z0-9_-]/g, "-");
-	const candidates = [base, `${base}-${connectionId.replace(/[^A-Za-z0-9_-]/g, "-").slice(0, 64 - base.length - 1)}`];
-	for (const candidate of candidates) if (MCP_TOOL_NAME_PATTERN.test(candidate) && !taken.has(candidate)) {
-		taken.add(candidate);
-		return candidate;
-	}
-	throw new ValidationError(`hubIntegrationTools: cannot derive a unique tool name for connection '${connectionId}' of provider '${providerId}'`);
-}
-function connectionLabel(connection) {
-	const account = connection.accountDisplay ? ` (${connection.accountDisplay})` : "";
-	return `${connection.displayName || connection.providerId}${account}`;
-}
-/**
-* One router tool per active Hub connection to a data provider. The tool
-* handler never holds provider credentials — it execs through the Hub, which
-* enforces the per-user action policy and writes the audit record.
-*/
-async function hubIntegrationTools(options) {
-	const providers = new Set(options.providers ?? HUB_DATA_PROVIDER_KINDS);
-	const eligible = (await options.client.listConnections()).filter((connection) => providers.has(connection.providerId) && connection.status === "active" && (options.includeUnhealthy === true || connection.health !== "unhealthy"));
-	const taken = /* @__PURE__ */ new Set();
-	return eligible.map((connection) => {
-		const providerId = connection.providerId;
-		const name = toolNameFor(providerId, connection.id, taken);
-		return {
-			name,
-			description: `Execute a ${providerId} action on the user's Hub connection '${connectionLabel(connection)}' (connection ${connection.id}). Pass action (e.g. "vectors.query", "branches.list", "collections.list") and its input object. Every call is policy-gated and audited by the Tangle Hub; a denied action returns the Hub's error message. Read actions list data; mutations may require prior approval.`,
-			inputSchema: {
-				type: "object",
-				properties: {
-					action: {
-						type: "string",
-						description: `The ${providerId} adapter action name, e.g. "vectors.query".`
-					},
-					input: {
-						type: "object",
-						description: "Arguments object for the action.",
-						additionalProperties: true
-					}
-				},
-				required: ["action"],
-				additionalProperties: false
-			},
-			handler: async (raw) => {
-				const args = raw ?? {};
-				if (typeof args.action !== "string" || !ACTION_NAME_PATTERN.test(args.action)) throw new TypeError(`${name}: action must be a provider action name like "vectors.query" (dot-separated, no path or spaces)`);
-				if (args.input !== void 0 && (typeof args.input !== "object" || args.input === null || Array.isArray(args.input))) throw new TypeError(`${name}: input must be an object of action arguments`);
-				const path = `${providerId}.${args.action}`;
-				try {
-					return await options.client.exec({
-						path,
-						input: args.input ?? {},
-						connectionId: connection.id
-					});
-				} catch (error) {
-					if (error instanceof PlatformHubError) throw new Error(`${name}: hub exec '${path}' failed (${error.status}${error.code ? ` ${error.code}` : ""}): ${error.message}`);
-					throw error;
-				}
-			}
-		};
-	});
-}
-/**
-* Build the hub integration MCP server on the shared stdio JSON-RPC core —
-* the same wire protocol every in-repo MCP server speaks. Serves zero tools
-* when the caller has no active data-provider connections (a session without
-* connections simply gets no database tools, mirroring the memory server's
-* "no artifact, no server" discipline).
-*/
-async function createHubIntegrationToolServer(options) {
-	return createStdioToolServer({
-		serverName: options.serverName ?? "agent-hub-integrations",
-		serverVersion: options.serverVersion ?? "0",
-		tools: await hubIntegrationTools(options)
-	});
-}
-//#endregion
 //#region src/mcp/in-process-executor.ts
 /**
 *
@@ -1239,6 +1155,6 @@ async function defaultRunPostCheck(cmd, cwd, signal) {
 	});
 }
 //#endregion
-export { ANALYST_DEFINITION_BOUNDS, CodexExecutionDiagnosticError, DEFAULT_LOCAL_HARNESS, DELEGATE_DESCRIPTION, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_INPUT_SCHEMA, DELEGATE_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DELEGATION_TRACE_MAX_BYTES, DELEGATION_TRACE_MAX_SPANS, DelegationPersistenceError, DelegationStateCorruptError, DelegationTaskQueue, FileDelegationStore, HUB_DATA_PROVIDER_KINDS, InMemoryDelegationStore, InMemoryFeedbackStore, LOCAL_HARNESSES, MEMORY_FILE_ENV, MEMORY_ITEMS_ENV, MEMORY_LOG_ENV, MEMORY_NAME_ENV, SPAWN_RESOURCE_PATH_MAX_BYTES, SUPPORTED_PROTOCOL_VERSIONS, analystToolGroupNames, buildDelegationTraceSpans, capDelegationTrace, captureWorktreeDiff, coderTaskFromArgs, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateFeedbackHandler, createDelegateHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createDelegationTraceCollector, createDetachedTurnResumeDriver, createFleetWorkspaceExecutor, createHubIntegrationToolServer, createInProcessExecutor, createInProcessTransport, createKbGate, createMcpServer, createMemoryToolServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, createWorktree, delegationProfiles, detachedSessionDelegate, detachedTurnEvents, downMessageRefusalReasons, environmentReader, eventToSnapshot, formatDetachedSessionRef, harnessNativeToolNames, harnessNativeTools, harnessSupportsReasoningEffort, hashIdempotencyInput, hostDirectoryReader, hubIntegrationTools, localHarnessExecutable, mcpToolsForRuntimeMcp, mcpToolsForRuntimeMcpSubset, mergeTraceEnv, parseAuthoredAnalystDefinition, parseCodexTokenUsage, parseDetachedSessionRef, parseMemoryItems, questionEscalationTargets, readMemoryItemsFile, readTraceContextFromEnv, removeWorktree, resolveMemoryFromEnv, resolveSpawnResourcePaths, runDetachedTurn, settleDetachedCoderTurn, sourcedHarnesses, traceContextToEnv, validateDelegateArgs, validateDelegateFeedbackArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
+export { DelegationTaskQueue, FileDelegationStore, LOCAL_HARNESSES, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateHandler, createFleetWorkspaceExecutor, createInProcessExecutor, createKbGate, createMcpServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, detachedSessionDelegate, environmentReader, harnessNativeToolNames, readTraceContextFromEnv, resolveSpawnResourcePaths, runDetachedTurn };
 
 //# sourceMappingURL=index.js.map