@tangle-network/agent-runtime 0.342.1 → 0.343.2

package/dist/{coordination-manager-HQE0bIav.js → coordination-manager-DIC19cgD.js}

@@ -1,319 +1,11 @@
-import { Ai as assertValidBudget, En as createPeerMailbox, Fn as isTerminalNodeStatus, Ni as resolveRedactor, Pn as isLiveNodeStatus, R as meterRuntimeOwnedAccounting, S as FileSpawnJournal, Si as contentAddress, Yn as CheckUnavailableError, bi as detachedFrozen, ct as InMemorySpawnJournal, dt as createExecutorRegistry, h as workerTraceAnalysisStore, ir as failedItems, j as runtimeGraphMetadataKey, li as settlementFailureCause, lt as FileResultBlobStore, m as parseWorkerToolTraceArtifact, nr as checkVerdictOf, st as InMemoryResultBlobStore, u as withDriverExecutor, wi as errMessage, yn as INBOX_RECEIPT_KEY } from "./supervisor-C_03z693.js";
-import { t as isRecord } from "./record-value-B6bwJxLa.js";
-import { a as readCommittedJsonLines, t as appendCommittedJsonLine } from "./jsonl-file-C9Kde_0Z.js";
-import { S as writeWorkerSteerAcknowledgement, b as writeWorkerCancellation, c as claimWorkerSteerDelivery, d as readWorkerCancelRequests, f as readWorkerCancellation, i as readRunCancellation, m as readWorkerSteerRequests, o as writeRunCancellation, p as readWorkerSteerAcknowledgement, r as readRunCancelRequest, t as applyRunCancellation } from "./run-cancellation-C9oL62sW.js";
+import { Ai as detachedFrozen, Bi as assertValidBudget, C as FileSpawnJournal, Gn as isTerminalNodeStatus, In as createPeerMailbox, M as runtimeGraphMetadataKey, Mi as contentAddress, Pi as errMessage, Ui as resolveRedactor, Wn as isLiveNodeStatus, _t as readCommittedJsonLines, ar as CheckUnavailableError, d as withDriverExecutor, dt as InMemorySpawnJournal, fr as checkVerdictOf, ft as FileResultBlobStore, g as workerTraceAnalysisStore, h as parseWorkerToolTraceArtifact, kn as INBOX_RECEIPT_KEY, mr as failedItems, pt as appendCommittedJsonLine, q as resolveSpawnResourcePaths, ut as InMemoryResultBlobStore, xt as createExecutorRegistry, yi as settlementFailureCause, z as meterRuntimeOwnedAccounting } from "./supervisor-gDn4C1o5.js";
+import { C as writeWorkerCancellation, T as writeWorkerSteerAcknowledgement, c as writeRunCancellation, g as readWorkerSteerRequests, h as readWorkerSteerAcknowledgement, i as readRunCancellation, m as readWorkerCancellation, p as readWorkerCancelRequests, r as readRunCancelRequest, t as applyRunCancellation, u as claimWorkerSteerDelivery } from "./run-cancellation-DSpwvFmQ.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { argHash, errorStreakDetector, observeAll, repeatedActionDetector } from "@tangle-network/agent-eval";
 import { registry } from "zod";
-import { createHash, randomUUID } from "node:crypto";
+import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
-import { isAbsolute, join, relative, resolve, sep } from "node:path";
-import { open, realpath, stat } from "node:fs/promises";
-//#region src/mcp/tools/spawn-resource-paths.ts
-/**
-* Inline resources a manager hands a child by PATH instead of by content.
-*
-* The canonical profile schema knows two resource kinds, `inline` (a content string) and `github`.
-* A manager that wants a child to receive a data file therefore had one way to do it: emit the
-* bytes inside its own `spawn` tool call. That is a transcription by a language model, and it does
-* not survive size. Measured 2026-09-12 (discovery-lab `mech-interp-foundations-glm2-b-20260912b`):
-* a 29,144-character base64 payload on the manager's disk reached three children as 15,928
-* characters with 11 substitutions, and a fourth child received the literal placeholder the
-* manager meant to replace. Seven blind-check attempts across two runs delivered no data.
-*
-* `{ kind: 'inline', name, path }` lets the coordination server be the transport: it reads the
-* file from the manager's workspace, fills `content`, and the profile that reaches the schema,
-* the journal, and the provider is an ordinary inline resource. Nothing downstream changes; the
-* model's output stops carrying the bytes.
-*
-* Where the bytes come from is a {@link SpawnResourceReader}, and there are two:
-*  - a HOST DIRECTORY, for a manager whose driver runs on this host (a loopback bridge with a
-*    `cwd`), read through the descriptor-identity checks below;
-*  - the manager's OWN EXECUTION ENVIRONMENT, for a manager inside a provider sandbox, read
-*    through the environment's `read()`. The coordination server cannot see a sandbox filesystem,
-*    but the provider that created the sandbox can, and it is already in hand.
-*
-* The second reader exists because the first one's absence was not a refusal a manager could
-* work around. Measured 2026-09-17 (discovery-lab `mech-interp-foundations-sandbox-a-20260917h`):
-* a sandbox-rooted director, refused by path, fell back to emitting its files as content and got
-* 5 characters wrong in 24,008, destroying 3 of 7 files including its instrument and both
-* drivers. At that rate 20 KB of mounts all arrive intact about 2% of the time, and gzip makes it
-* worse by turning one wrong character into total loss. Four consecutive runs in that lane lost
-* their research children to this. There is no encoding that fixes a transcription channel; the
-* only fix is a channel with no model in it.
-*
-* Fail-closed rules, each with the reason a manager needs to fix its call:
-*  - no reader available → refused (neither a host directory nor an environment with `read`)
-*  - absolute path or `..` escape → refused by both readers; a symlink that resolves outside the
-*    root → refused by the host reader (the environment reader delegates containment to the
-*    provider, which serves only the sandbox's own workspace)
-*  - not a regular file → refused
-*  - over {@link SPAWN_RESOURCE_PATH_MAX_BYTES} → refused naming the bound
-*  - bytes that are not valid UTF-8 → refused; `content` is a string, so binary data is encoded
-*    (base64) by the manager first, exactly as it would be for a content resource
-*/
-const SPAWN_RESOURCE_PATH_MAX_BYTES = 4 * 1024 * 1024;
-/** The host-directory reader: a manager whose workspace is a directory this process can open. */
-function hostDirectoryReader(root) {
-	return {
-		describe: `workspace root ${root}`,
-		read: (requested) => readUnderRoot(root, requested)
-	};
-}
-/**
-* The environment reader: a manager running inside a provider environment whose `read()` serves
-* its own workspace. The provider owns containment — it will not serve a path outside the box —
-* but the relative-path and `..` rules are enforced here too, so the refusal names the rule the
-* manager broke rather than whatever the provider says about an escape it declined.
-*
-* `read()` returns a string, so an environment cannot hand back bytes that are not UTF-8; the
-* provider has already decoded. The size bound is checked on what arrives.
-*/
-function environmentReader(environment) {
-	return {
-		describe: `environment ${environment.id}`,
-		async read(requested) {
-			if (requested.length === 0) return {
-				ok: false,
-				reason: "path is empty"
-			};
-			if (isAbsolute(requested)) return {
-				ok: false,
-				reason: `path must be relative to the manager's workspace, not absolute (${requested})`
-			};
-			if (requested.split(/[\\/]/u).includes("..")) return {
-				ok: false,
-				reason: `path ${requested} leaves the manager's workspace`
-			};
-			let content;
-			try {
-				content = await environment.read(requested);
-			} catch (error) {
-				return {
-					ok: false,
-					reason: `path ${requested}: ${describe(error)} (read from environment ${environment.id})`
-				};
-			}
-			const bytes = Buffer.from(content, "utf8");
-			if (bytes.length > 4194304) return {
-				ok: false,
-				reason: `path ${requested} is ${bytes.length} bytes; an inline resource is at most ${SPAWN_RESOURCE_PATH_MAX_BYTES} bytes`
-			};
-			return {
-				ok: true,
-				content,
-				byteLength: bytes.length,
-				sha256: createHash("sha256").update(bytes).digest("hex")
-			};
-		}
-	};
-}
-/** An inline ref that names a path and carries no content. Anything else is left untouched so the
-*  canonical schema keeps its verdict on it. */
-function pathInlineRef(value) {
-	if (!isRecord(value)) return void 0;
-	if (value.kind !== "inline" || value.content !== void 0) return void 0;
-	if (typeof value.path !== "string" || typeof value.name !== "string") return void 0;
-	return {
-		kind: "inline",
-		name: value.name,
-		path: value.path
-	};
-}
-async function readUnderRoot(root, requested) {
-	if (requested.length === 0) return {
-		ok: false,
-		reason: "path is empty"
-	};
-	if (isAbsolute(requested)) return {
-		ok: false,
-		reason: `path must be relative to the workspace root, not absolute (${requested})`
-	};
-	const rootReal = await realpath(root).catch(() => void 0);
-	if (rootReal === void 0) return {
-		ok: false,
-		reason: `workspace root ${root} does not exist`
-	};
-	const candidate = resolve(rootReal, requested);
-	if (!inside(rootReal, candidate)) return {
-		ok: false,
-		reason: `path ${requested} leaves the workspace root`
-	};
-	let handle;
-	try {
-		handle = await open(candidate, "r");
-	} catch (error) {
-		return {
-			ok: false,
-			reason: `path ${requested}: ${describe(error)}`
-		};
-	}
-	try {
-		const info = await handle.stat();
-		if (!info.isFile()) return {
-			ok: false,
-			reason: `path ${requested} is not a regular file`
-		};
-		const real = await realpath(candidate).catch(() => void 0);
-		if (real === void 0 || !inside(rootReal, real)) return {
-			ok: false,
-			reason: `path ${requested} resolves outside the workspace root`
-		};
-		const named = await stat(real).catch(() => void 0);
-		if (named === void 0 || named.dev !== info.dev || named.ino !== info.ino) return {
-			ok: false,
-			reason: `path ${requested} changed while it was being read; retry the spawn`
-		};
-		if (info.size > 4194304) return {
-			ok: false,
-			reason: `path ${requested} is ${info.size} bytes; an inline resource is at most ${SPAWN_RESOURCE_PATH_MAX_BYTES} bytes`
-		};
-		const bytes = await handle.readFile();
-		if (bytes.length > 4194304) return {
-			ok: false,
-			reason: `path ${requested} is ${bytes.length} bytes; an inline resource is at most ${SPAWN_RESOURCE_PATH_MAX_BYTES} bytes`
-		};
-		const content = bytes.toString("utf8");
-		if (!Buffer.from(content, "utf8").equals(bytes)) return {
-			ok: false,
-			reason: `path ${requested} is not valid UTF-8; encode binary data (base64) before handing it to a child`
-		};
-		return {
-			ok: true,
-			content,
-			byteLength: bytes.length,
-			sha256: createHash("sha256").update(bytes).digest("hex")
-		};
-	} catch (error) {
-		return {
-			ok: false,
-			reason: `path ${requested}: ${describe(error)}`
-		};
-	} finally {
-		await handle.close().catch(() => void 0);
-	}
-}
-/** `target` is `rootReal` itself or strictly below it; both must already be absolute. */
-function inside(rootReal, target) {
-	const rel = relative(rootReal, target);
-	return rel !== "" && !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel);
-}
-function describe(error) {
-	const code = error?.code;
-	if (code === "ENOENT") return "does not exist under the workspace root";
-	if (code === "EACCES" || code === "EPERM") return "is not readable by the runtime process";
-	if (code === "EISDIR") return "is not a regular file";
-	return error instanceof Error ? error.message : String(error);
-}
-/**
-* Replace every `{ kind: 'inline', name, path }` under `profile.resources` with the inline
-* resource its bytes make. Returns the profile unchanged (same reference) when nothing names a
-* path, so callers pay nothing on the common case.
-*
-* `source` is a host directory (a string, kept for the existing call sites), a
-* {@link SpawnResourceReader}, or `undefined` when the manager has neither — in which case a path
-* is refused with the reason and what to do instead.
-*/
-async function resolveSpawnResourcePaths(profile, source) {
-	if (!isRecord(profile) || !isRecord(profile.resources)) return {
-		ok: true,
-		profile,
-		resolved: []
-	};
-	const reader = typeof source === "string" ? hostDirectoryReader(source) : source;
-	const resources = profile.resources;
-	const resolved = [];
-	let touched = false;
-	const next = { ...resources };
-	const substitute = async (at, ref) => {
-		if (reader === void 0) return { error: "this manager has no workspace root the coordination server may read (no host directory and no environment with read), so a resource by path cannot be resolved; pass content, or a github resource" };
-		const read = await reader.read(ref.path);
-		if (!read.ok) return { error: read.reason };
-		resolved.push({
-			at,
-			path: ref.path,
-			byteLength: read.byteLength,
-			sha256: read.sha256
-		});
-		touched = true;
-		return {
-			kind: "inline",
-			name: ref.name,
-			content: read.content
-		};
-	};
-	for (const list of [
-		"tools",
-		"skills",
-		"agents"
-	]) {
-		const entries = resources[list];
-		if (!Array.isArray(entries)) continue;
-		const out = [];
-		for (const [index, entry] of entries.entries()) {
-			const ref = pathInlineRef(entry);
-			if (ref === void 0) {
-				out.push(entry);
-				continue;
-			}
-			const at = `${list}[${index}]`;
-			const replaced = await substitute(at, ref);
-			if ("error" in replaced) return {
-				ok: false,
-				at,
-				reason: replaced.error
-			};
-			out.push(replaced);
-		}
-		next[list] = out;
-	}
-	if (Array.isArray(resources.files)) {
-		const out = [];
-		for (const [index, mount] of resources.files.entries()) {
-			const ref = isRecord(mount) ? pathInlineRef(mount.resource) : void 0;
-			if (ref === void 0 || !isRecord(mount)) {
-				out.push(mount);
-				continue;
-			}
-			const at = `files[${index}].resource`;
-			const replaced = await substitute(at, ref);
-			if ("error" in replaced) return {
-				ok: false,
-				at,
-				reason: replaced.error
-			};
-			out.push({
-				...mount,
-				resource: replaced
-			});
-		}
-		next.files = out;
-	}
-	const instructions = pathInlineRef(resources.instructions);
-	if (instructions !== void 0) {
-		const replaced = await substitute("instructions", instructions);
-		if ("error" in replaced) return {
-			ok: false,
-			at: "instructions",
-			reason: replaced.error
-		};
-		next.instructions = replaced;
-	}
-	if (!touched) return {
-		ok: true,
-		profile,
-		resolved: []
-	};
-	return {
-		ok: true,
-		profile: {
-			...profile,
-			resources: next
-		},
-		resolved
-	};
-}
-//#endregion
+import { join } from "node:path";
 //#region src/runtime/supervise/coordination-log.ts
 /**
 * Durable side-log for coordination evidence the spawn journal does not own: questions, analyst
@@ -5746,6 +5438,22 @@ function managerSurface(parts, tools) {
 		awaitWake: waiting.awaitWake,
 		awaitSettlement: waiting.awaitSettlement,
 		receiveLeadMessage: intake.receiveLeadMessage,
+		queuedLeadMessages: () => bus.queued(["lead-message"]).map((record) => record.seq),
+		awaitLeadMessage: (signal) => new Promise((resolve) => {
+			if (signal.aborted) {
+				resolve();
+				return;
+			}
+			const done = () => {
+				unsubscribe();
+				signal.removeEventListener("abort", done);
+				resolve();
+			};
+			const unsubscribe = bus.onQueued((record) => {
+				if (record.event.type === "lead-message") done();
+			});
+			signal.addEventListener("abort", done, { once: true });
+		}),
 		openToolReceipt: intake.openToolReceipt,
 		settleToolReceipt: intake.settleToolReceipt,
 		reentryState: () => managerReentryState({
@@ -5900,6 +5608,6 @@ function createResumeReplay({ opts, bus, ledger, analysis, projectSettled }) {
 	};
 }
 //#endregion
-export { environmentReader as _, createEventBus as a, budgetOverspendText as c, safeJsonText as d, createFileRunContext as f, foldCoordinationRecords as g, FileCoordinationLog as h, watchTrace as i, normalizeAnalyzeOnSettle as l, withRunContext as m, createCoordinationToolsForManager as n, createCancelAcknowledger as o, createInMemoryRunContext as p, defaultToolDetectors as r, createSteerAcknowledger as s, createCoordinationTools as t, coordinationVerbNames as u, resolveSpawnResourcePaths as v };
+export { createEventBus as a, budgetOverspendText as c, safeJsonText as d, createFileRunContext as f, foldCoordinationRecords as g, FileCoordinationLog as h, watchTrace as i, normalizeAnalyzeOnSettle as l, withRunContext as m, createCoordinationToolsForManager as n, createCancelAcknowledger as o, createInMemoryRunContext as p, defaultToolDetectors as r, createSteerAcknowledger as s, createCoordinationTools as t, coordinationVerbNames as u };
 
-//# sourceMappingURL=coordination-manager-HQE0bIav.js.map
+//# sourceMappingURL=coordination-manager-DIC19cgD.js.map