@tangle-network/agent-runtime 0.348.1 → 0.350.2

package/dist/mcp/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","names":[],"sources":["../../src/mcp/delegate-supervisor-provisioning.ts","../../src/mcp/bin.ts"],"sourcesContent":["/**\n *\n * Resolve the `delegate` supervisor substrate (router brain + worker backend) from env, so the\n * `agent-runtime-mcp` bin can serve the ONE generic `delegate` verb by env, over the SAME stdio\n * invocation a consumer already mounts.\n *\n * `delegate` is wired into `createMcpServer` via `McpServerOptions.delegateSupervisor`, which needs a\n * router (the supervisor brain's transport) and a backend (WHERE the authored workers run). Inside a\n * sandbox child the natural backend is `sandbox`: authored workers run as sub-sandboxes through the\n * SAME `SandboxClient` the bin already loads from its sandbox key. Dedicated MCP variables name\n * the supervisor's router connection and exact model; inherited worker/model aliases are rejected.\n *\n * @experimental\n */\n\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { ConfigError } from '../errors'\nimport type { SandboxClient } from '../runtime'\nimport type { RouterTransportConfig } from '../runtime/router-http-transport'\nimport { supervisorInstructions } from '../runtime/supervise/authoring'\nimport { coordinationProfileToolPrefix } from '../runtime/supervise/provider-visible-profile'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { DelegateHandlerOptions } from './tools/delegate'\n\nfunction trimmed(value: string | undefined): string | undefined {\n  const v = value?.trim()\n  return v ? v : undefined\n}\n\nfunction requiredEnv(env: NodeJS.ProcessEnv, name: string): string {\n  const value = trimmed(env[name])\n  if (value) return value\n  throw new ConfigError(`agent-runtime-mcp: ${name} is required when MCP_ENABLE_DELEGATE=1`)\n}\n\n/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:\n *  the wiring is additive, so consumers that do not enable it are unaffected. */\nexport function delegateEnabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.MCP_ENABLE_DELEGATE === '1'\n}\n\n/**\n * The Runtime verbs the authoring supervisor is granted. A profile gets no coordination tool it does\n * not declare, so without `spawn_worker` the brain is offered no tools and every delegation settles\n * `no-children-spawned`. The rest let it inspect, steer, stop, and re-read what it already spawned,\n * which its authoring instruction tells it to do.\n */\nconst delegateSupervisorVerbs = [\n  'spawn_worker',\n  'observe_agent',\n  'steer_agent',\n  'cancel_worker',\n  'read_journal',\n] as const\n\n/**\n * The `delegate` caller asked for a worker to do the task, and only a worker's settled result is\n * delivered. A capable brain otherwise answers a small intent itself (gemini-3.7-flash and kimi-k3\n * both replied to \"Reply with exactly DELEGATED-391\" directly), which settles `no-children-spawned`\n * and discards the answer.\n */\nconst delegateContract = [\n  '',\n  'This task came through `delegate`: the caller wants a worker to do it. However small the task,',\n  'call spawn_worker at least once before you end your turn. Your own reply is never delivered;',\n  \"only a worker's settled result is.\",\n].join('\\n')\n\n/**\n * Resolve the supervisor brain from dedicated MCP configuration. The model is part of the exact\n * profile; the URL and key are transport-only. No generic worker/model/key variable may silently\n * select this paid execution path.\n */\nfunction resolveRouterSupervisor(env: NodeJS.ProcessEnv): {\n  router: RouterTransportConfig\n  profile: AgentProfile\n} {\n  const routerKey = requiredEnv(env, 'MCP_SUPERVISOR_ROUTER_KEY')\n  const base = requiredEnv(env, 'MCP_SUPERVISOR_ROUTER_BASE_URL')\n  const routerBaseUrl = /\\/v\\d+\\/?$/.test(base)\n    ? base.replace(/\\/$/, '')\n    : `${base.replace(/\\/$/, '')}/v1`\n  const model = requiredEnv(env, 'MCP_SUPERVISOR_MODEL')\n  // The consumer's own policy for the workers this supervisor authors, such as the only harness and\n  // model its worker boxes can run. Without it the brain picks instruments from memory, and on\n  // 2026-10-19 every one it picked (claude-code on Anthropic, nanoclaw, cli-base) died in the box.\n  const consumerInstructions = trimmed(env.MCP_SUPERVISOR_INSTRUCTIONS)\n  return {\n    router: { routerBaseUrl, routerKey },\n    profile: {\n      name: 'delegate-supervisor',\n      harness: 'cli-base',\n      model: { provider: 'tangle-router', default: model },\n      prompt: {\n        systemPrompt: [\n          supervisorInstructions(),\n          delegateContract,\n          ...(consumerInstructions ? ['', consumerInstructions] : []),\n        ].join('\\n'),\n      },\n      tools: Object.fromEntries(\n        delegateSupervisorVerbs.map((verb) => [`${coordinationProfileToolPrefix}${verb}`, true]),\n      ),\n    },\n  }\n}\n\n/**\n * Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded\n * `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only\n * when asked. The worker backend is `sandbox`; every authored worker's exact profile selects its\n * own harness/provider/model.\n */\nexport function resolveDelegateSupervisor(\n  sandboxClient: SandboxClient,\n  env: NodeJS.ProcessEnv = process.env,\n): DelegateHandlerOptions | undefined {\n  if (!delegateEnabled(env)) return undefined\n  const supervisor = resolveRouterSupervisor(env)\n  const backend: ExecutorConfig = {\n    backend: 'sandbox',\n    sandboxClient,\n  }\n  return {\n    router: supervisor.router,\n    supervisorProfile: supervisor.profile,\n    backend,\n  }\n}\n","#!/usr/bin/env node\n\n/**\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Serves the ONE generic `delegate` verb (opt-in via `MCP_ENABLE_DELEGATE=1`): one intent → a\n * supervisor that authors + drives its own worker over `supervise()`, returning the delivered output\n * with its cost. The supervisor brain runs on the router; authored workers run as sub-sandboxes\n * through the `SandboxClient` the bin loads from the sandbox key. The queue-bound tools\n * (`delegate_feedback`, `delegation_status`, `delegation_history`) are always served.\n *\n * A platform key serves one product, so the Sandbox API key and the router key are separate\n * variables: the sandbox key only constructs the Sandbox client, and the router key only reaches\n * the supervisor brain. Neither is forwarded into a worker box; each worker's model access comes\n * from the box its profile provisions.\n *\n * Environment variables:\n *   TANGLE_SANDBOX_API_KEY           Sandbox API key passed to `new Sandbox({ apiKey })`. Falls back\n *                                    to TANGLE_API_KEY when unset, so one key that serves the Sandbox\n *                                    API keeps working.\n *   TANGLE_API_KEY                   Sandbox API key when TANGLE_SANDBOX_API_KEY is unset\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   MCP_ENABLE_DELEGATE              set to `1` to serve the generic `delegate` verb. Its authoring\n *                                    supervisor runs the brain on the router and spawns authored\n *                                    workers as sub-sandboxes via the same client; needs a sandbox key.\n *   MCP_SUPERVISOR_MODEL             required exact supervisor brain model id\n *   MCP_SUPERVISOR_ROUTER_KEY        required router key for the supervisor brain\n *   MCP_SUPERVISOR_ROUTER_BASE_URL   required router base, normalized to `/v1`\n *   MCP_SUPERVISOR_INSTRUCTIONS      optional text appended to the supervisor's system prompt: the\n *                                    caller's policy for the workers it authors, such as the harness\n *                                    and model its worker boxes can run\n *   AGENT_RUNTIME_DELEGATION_STATE_FILE\n *                                    optional — absolute path of a JSON state\n *                                    file. When set, delegation records persist\n *                                    across MCP restarts (FileDelegationStore):\n *                                    status/history survive and idempotency keys\n *                                    dedupe across processes.\n *   AGENT_RUNTIME_DELEGATION_STATE_RECOVER\n *                                    set to `1` to archive a corrupt state file\n *                                    (`<file>.corrupt-<ts>`) and start empty\n *                                    instead of refusing to boot.\n *   AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL\n *                                    optional — positive integer cap on retained\n *                                    terminal records. Unset = keep forever.\n *\n * @experimental\n */\n\nimport type { SandboxClient } from '../runtime'\nimport { delegateEnabled, resolveDelegateSupervisor } from './delegate-supervisor-provisioning'\nimport { FileDelegationStore } from './delegation-store'\nimport { createMcpServer } from './server'\nimport { DelegationTaskQueue } from './task-queue'\nimport type { DelegateHandlerOptions } from './tools/delegate'\nimport { readTraceContextFromEnv, type TraceContext } from './trace-propagation'\n\nconst DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nasync function main(): Promise<void> {\n  const wantDelegate = delegateEnabled(process.env)\n\n  // The generic `delegate` verb needs the sandbox client: its authored workers run as sub-sandboxes\n  // (the `sandbox` backend). When `delegate` is not opted in, the server runs the queue-only subset\n  // (feedback + status + history) with no sandbox.\n  let sandboxClient: SandboxClient | undefined\n  if (wantDelegate) {\n    const apiKey = sandboxApiKey(process.env)\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: a Sandbox API key is required to serve `delegate`: set TANGLE_SANDBOX_API_KEY (or TANGLE_API_KEY when that key serves the Sandbox API). Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n  }\n\n  // The supervisor's loop topology spans export to the OTLP / Tangle Intelligence sink when\n  // OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for correlation). The same\n  // context is stamped onto every delegation record so journal consumers join records into the\n  // caller's trace.\n  const traceContext = readTraceContextFromEnv()\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  // The ONE generic `delegate` verb — opt-in via MCP_ENABLE_DELEGATE=1. Its authoring supervisor\n  // runs the brain on the router and spawns authored workers as sub-sandboxes through the SAME\n  // client, so it needs the loaded `sandboxClient`. Gated on the client resolving (no key → no\n  // delegate, fail-closed).\n  let delegateSupervisor: DelegateHandlerOptions | undefined\n  if (wantDelegate && sandboxClient) {\n    try {\n      delegateSupervisor = resolveDelegateSupervisor(sandboxClient)\n    } catch (error) {\n      // Refuse to serve a verb that cannot work. Advertising `delegate` on an\n      // unresolvable substrate spends an agent's turn on a tool whose first\n      // inference is guaranteed to reject.\n      process.stderr.write(`${error instanceof Error ? error.message : String(error)}\\n`)\n      process.exit(2)\n    }\n  }\n  if (delegateSupervisor) {\n    process.stderr.write(\n      `agent-runtime-mcp: delegate enabled — generic authoring supervisor on ${delegateSupervisor.supervisorProfile.model?.default}\\n`,\n    )\n  }\n\n  const durableQueue = await buildDurableQueueFromEnv(traceContext)\n  const server = createMcpServer({\n    ...(delegateSupervisor ? { delegateSupervisor } : {}),\n    traceContext,\n    ...(durableQueue ? { queue: durableQueue } : {}),\n  })\n\n  const shutdown = () => {\n    server.stop()\n    // Drain journal writes so the state file reflects the final record\n    // states before the process exits. A persist failure already routed\n    // through onPersistError; swallow the duplicate rejection here.\n    if (durableQueue) {\n      void durableQueue\n        .flush()\n        .catch(() => {})\n        .finally(() => process.exit(0))\n      return\n    }\n    process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function buildDurableQueueFromEnv(\n  traceContext: TraceContext,\n): Promise<DelegationTaskQueue | undefined> {\n  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim()\n  if (!stateFile) return undefined\n  const store = new FileDelegationStore({\n    filePath: stateFile,\n    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === '1',\n  })\n  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL)\n  const queue = await DelegationTaskQueue.restore({\n    store,\n    traceContext,\n    ...(maxTerminalRecords !== undefined ? { maxTerminalRecords } : {}),\n    onPersistError: (error) => {\n      // Durable mode that can no longer write is a broken contract: crash\n      // loud instead of degrading to memory-only behind the caller's back.\n      process.stderr.write(`agent-runtime-mcp: ${error.message}\\n`)\n      process.exit(1)\n    },\n  })\n  process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\\n`)\n  return queue\n}\n\nfunction parseRetention(raw: string | undefined): number | undefined {\n  if (raw === undefined || raw.trim() === '') return undefined\n  const n = Number(raw)\n  if (!Number.isInteger(n) || n < 1) {\n    process.stderr.write(\n      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got \"${raw}\"\\n`,\n    )\n    process.exit(2)\n  }\n  return n\n}\n\n/** The Sandbox API key: the dedicated variable when set, else the legacy single key. The router key\n *  (`MCP_SUPERVISOR_ROUTER_KEY`) is read only by the supervisor provisioning. */\nfunction sandboxApiKey(env: NodeJS.ProcessEnv): string | undefined {\n  return env.TANGLE_SANDBOX_API_KEY?.trim() || env.TANGLE_API_KEY?.trim() || undefined\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // `delegate` requires a real client; the stub fails loud at create() so the\n  // agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: no Sandbox API key is set; `delegate` is disabled in diagnostic mode. Set TANGLE_SANDBOX_API_KEY (or TANGLE_API_KEY) or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Diagnostic mode does not need a client, so defer SDK initialization until\n  // delegation is requested. Runtime declares the SDK as a required peer.\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  // @tangle-network/sandbox ≥0.6 makes baseUrl required; default it so the MCP server\n  // starts without forcing every caller to set SANDBOX_BASE_URL. Treat empty/whitespace as\n  // unset (|| not ??) so `SANDBOX_BASE_URL=` still resolves to the default.\n  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL\n  return new SandboxCtor({ apiKey, baseUrl })\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;AAwBA,SAAS,QAAQ,OAA+C;CAC9D,MAAM,IAAI,OAAO,KAAK;CACtB,OAAO,IAAI,IAAI,KAAA;AACjB;AAEA,SAAS,YAAY,KAAwB,MAAsB;CACjE,MAAM,QAAQ,QAAQ,IAAI,KAAK;CAC/B,IAAI,OAAO,OAAO;CAClB,MAAM,IAAI,YAAY,sBAAsB,KAAK,wCAAwC;AAC3F;;;AAIA,SAAgB,gBAAgB,MAAyB,QAAQ,KAAc;CAC7E,OAAO,IAAI,wBAAwB;AACrC;;;;;;;AAQA,MAAM,0BAA0B;CAC9B;CACA;CACA;CACA;CACA;AACF;;;;;;;AAQA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI;;;;;;AAOX,SAAS,wBAAwB,KAG/B;CACA,MAAM,YAAY,YAAY,KAAK,2BAA2B;CAC9D,MAAM,OAAO,YAAY,KAAK,gCAAgC;CAC9D,MAAM,gBAAgB,aAAa,KAAK,IAAI,IACxC,KAAK,QAAQ,OAAO,EAAE,IACtB,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE;CAC/B,MAAM,QAAQ,YAAY,KAAK,sBAAsB;CAIrD,MAAM,uBAAuB,QAAQ,IAAI,2BAA2B;CACpE,OAAO;EACL,QAAQ;GAAE;GAAe;EAAU;EACnC,SAAS;GACP,MAAM;GACN,SAAS;GACT,OAAO;IAAE,UAAU;IAAiB,SAAS;GAAM;GACnD,QAAQ,EACN,cAAc;IACZ,uBAAuB;IACvB;IACA,GAAI,uBAAuB,CAAC,IAAI,oBAAoB,IAAI,CAAC;GAC3D,CAAC,CAAC,KAAK,IAAI,EACb;GACA,OAAO,OAAO,YACZ,wBAAwB,KAAK,SAAS,CAAC,GAAG,gCAAgC,QAAQ,IAAI,CAAC,CACzF;EACF;CACF;AACF;;;;;;;AAQA,SAAgB,0BACd,eACA,MAAyB,QAAQ,KACG;CACpC,IAAI,CAAC,gBAAgB,GAAG,GAAG,OAAO,KAAA;CAClC,MAAM,aAAa,wBAAwB,GAAG;CAC9C,MAAM,UAA0B;EAC9B,SAAS;EACT;CACF;CACA,OAAO;EACL,QAAQ,WAAW;EACnB,mBAAmB,WAAW;EAC9B;CACF;AACF;;;ACvEA,MAAM,2BAA2B;AAEjC,eAAe,OAAsB;CACnC,MAAM,eAAe,gBAAgB,QAAQ,GAAG;CAKhD,IAAI;CACJ,IAAI,cAAc;EAChB,MAAM,SAAS,cAAc,QAAQ,GAAG;EACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;GAC1D,QAAQ,OAAO,MACb,iSACF;GACA,QAAQ,KAAK,CAAC;EAChB;EACA,gBAAgB,MAAM,kBAAkB,MAAM;CAChD;CAMA,MAAM,eAAe,wBAAwB;CAC7C,IAAI,QAAQ,IAAI,6BACd,QAAQ,OAAO,MACb,gDAAgD,QAAQ,IAAI,4BAA4B,GAC1F;CAOF,IAAI;CACJ,IAAI,gBAAgB,eAClB,IAAI;EACF,qBAAqB,0BAA0B,aAAa;CAC9D,SAAS,OAAO;EAId,QAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;EAClF,QAAQ,KAAK,CAAC;CAChB;CAEF,IAAI,oBACF,QAAQ,OAAO,MACb,yEAAyE,mBAAmB,kBAAkB,OAAO,QAAQ,GAC/H;CAGF,MAAM,eAAe,MAAM,yBAAyB,YAAY;CAChE,MAAM,SAAS,gBAAgB;EAC7B,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;EACnD;EACA,GAAI,eAAe,EAAE,OAAO,aAAa,IAAI,CAAC;CAChD,CAAC;CAED,MAAM,iBAAiB;EACrB,OAAO,KAAK;EAIZ,IAAI,cAAc;GAChB,aACG,MAAM,CAAC,CACP,YAAY,CAAC,CAAC,CAAC,CACf,cAAc,QAAQ,KAAK,CAAC,CAAC;GAChC;EACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,QAAQ;CAE9B,MAAM,OAAO,MAAM;AACrB;AAEA,eAAe,yBACb,cAC0C;CAC1C,MAAM,YAAY,QAAQ,IAAI,qCAAqC,KAAK;CACxE,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,MAAM,QAAQ,IAAI,oBAAoB;EACpC,UAAU;EACV,gBAAgB,QAAQ,IAAI,2CAA2C;CACzE,CAAC;CACD,MAAM,qBAAqB,eAAe,QAAQ,IAAI,wCAAwC;CAC9F,MAAM,QAAQ,MAAM,oBAAoB,QAAQ;EAC9C;EACA;EACA,GAAI,uBAAuB,KAAA,IAAY,EAAE,mBAAmB,IAAI,CAAC;EACjE,iBAAiB,UAAU;GAGzB,QAAQ,OAAO,MAAM,sBAAsB,MAAM,QAAQ,GAAG;GAC5D,QAAQ,KAAK,CAAC;EAChB;CACF,CAAC;CACD,QAAQ,OAAO,MAAM,iDAAiD,UAAU,GAAG;CACnF,OAAO;AACT;AAEA,SAAS,eAAe,KAA6C;CACnE,IAAI,QAAQ,KAAA,KAAa,IAAI,KAAK,MAAM,IAAI,OAAO,KAAA;CACnD,MAAM,IAAI,OAAO,GAAG;CACpB,IAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;EACjC,QAAQ,OAAO,MACb,gGAAgG,IAAI,IACtG;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,OAAO;AACT;;;AAIA,SAAS,cAAc,KAA4C;CACjE,OAAO,IAAI,wBAAwB,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC7E;AAEA,eAAe,kBAAkB,QAAoD;CAKnF,IAAI,CAAC,QACH,OAAO,EACL,MAAM,SAAS;EACb,MAAM,IAAI,MACR,yNACF;CACF,EACF;CAUF,MAAM,eAAe,MANH,OAAO,0BAA0B,CAAC,OAAO,QAAQ;EACjE,QAAQ,OAAO,MACb,8DAA8D,IAAI,QAAQ,iCAC5E;EACA,QAAQ,KAAK,CAAC;CAChB,CAAC,EAAA,CACiF;CAClF,IAAI,CAAC,aAAa;EAChB,QAAQ,OAAO,MACb,+FACF;EACA,QAAQ,KAAK,CAAC;CAChB;CAKA,OAAO,IAAI,YAAY;EAAE;EAAQ,SADjB,QAAQ,IAAI,kBAAkB,KAAK,KAAK;CACf,CAAC;AAC5C;AAEA,KAAK,CAAC,CAAC,OAAO,QAAQ;CACpB,QAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,EAAE,GAAG;CAC7F,QAAQ,KAAK,CAAC;AAChB,CAAC"}
+{"version":3,"file":"bin.js","names":[],"sources":["../../src/mcp/delegate-supervisor-provisioning.ts","../../src/mcp/bin.ts"],"sourcesContent":["/**\n *\n * Resolve the `delegate` supervisor substrate (router brain + worker backend) from env, so the\n * `agent-runtime-mcp` bin can serve the ONE generic `delegate` verb by env, over the SAME stdio\n * invocation a consumer already mounts.\n *\n * `delegate` is wired into `createMcpServer` via `McpServerOptions.delegateSupervisor`, which needs a\n * router (the supervisor brain's transport) and a backend (WHERE the authored workers run). Inside a\n * sandbox child the natural backend is `sandbox`: authored workers run as sub-sandboxes through the\n * SAME `SandboxClient` the bin already loads from its sandbox key. Dedicated MCP variables name\n * the supervisor's router connection and exact model; inherited worker/model aliases are rejected.\n *\n * @experimental\n */\n\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { ConfigError } from '../errors'\nimport type { SandboxClient } from '../runtime'\nimport type { RouterTransportConfig } from '../runtime/router-http-transport'\nimport { supervisorInstructions } from '../runtime/supervise/authoring'\nimport { coordinationProfileToolPrefix } from '../runtime/supervise/provider-visible-profile'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { DelegateHandlerOptions } from './tools/delegate'\n\nfunction trimmed(value: string | undefined): string | undefined {\n  const v = value?.trim()\n  return v ? v : undefined\n}\n\nfunction requiredEnv(env: NodeJS.ProcessEnv, name: string): string {\n  const value = trimmed(env[name])\n  if (value) return value\n  throw new ConfigError(`agent-runtime-mcp: ${name} is required when MCP_ENABLE_DELEGATE=1`)\n}\n\n/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:\n *  the wiring is additive, so consumers that do not enable it are unaffected. */\nexport function delegateEnabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.MCP_ENABLE_DELEGATE === '1'\n}\n\n/**\n * The Runtime verbs the authoring supervisor is granted. A profile gets no coordination tool it does\n * not declare, so without `spawn_worker` the brain is offered no tools and every delegation settles\n * `no-children-spawned`. The rest let it inspect, steer, stop, and re-read what it already spawned,\n * which its authoring instruction tells it to do.\n */\nconst delegateSupervisorVerbs = [\n  'spawn_worker',\n  'observe_agent',\n  'steer_agent',\n  'cancel_worker',\n  'read_journal',\n] as const\n\n/**\n * The `delegate` caller asked for a worker to do the task, and only a worker's settled result is\n * delivered. A capable brain otherwise answers a small intent itself (gemini-3.7-flash and kimi-k3\n * both replied to \"Reply with exactly DELEGATED-391\" directly), which settles `no-children-spawned`\n * and discards the answer.\n */\nconst delegateContract = [\n  '',\n  'This task came through `delegate`: the caller wants a worker to do it. However small the task,',\n  'call spawn_worker at least once before you end your turn. Your own reply is never delivered;',\n  \"only a worker's settled result is.\",\n].join('\\n')\n\n/**\n * Resolve the supervisor brain from dedicated MCP configuration. The model is part of the exact\n * profile; the URL and key are transport-only. No generic worker/model/key variable may silently\n * select this paid execution path.\n */\nfunction resolveRouterSupervisor(env: NodeJS.ProcessEnv): {\n  router: RouterTransportConfig\n  profile: AgentProfile\n} {\n  const routerKey = requiredEnv(env, 'MCP_SUPERVISOR_ROUTER_KEY')\n  const base = requiredEnv(env, 'MCP_SUPERVISOR_ROUTER_BASE_URL')\n  const routerBaseUrl = /\\/v\\d+\\/?$/.test(base)\n    ? base.replace(/\\/$/, '')\n    : `${base.replace(/\\/$/, '')}/v1`\n  const model = requiredEnv(env, 'MCP_SUPERVISOR_MODEL')\n  // The consumer's own policy for the workers this supervisor authors, such as the only harness and\n  // model its worker boxes can run. Without it the brain picks instruments from memory, and on\n  // 2026-10-19 every one it picked (claude-code on Anthropic, nanoclaw, cli-base) died in the box.\n  const consumerInstructions = trimmed(env.MCP_SUPERVISOR_INSTRUCTIONS)\n  return {\n    router: { routerBaseUrl, routerKey },\n    profile: {\n      name: 'delegate-supervisor',\n      harness: 'cli-base',\n      model: { provider: 'tangle-router', default: model },\n      prompt: {\n        systemPrompt: [\n          supervisorInstructions(),\n          delegateContract,\n          ...(consumerInstructions ? ['', consumerInstructions] : []),\n        ].join('\\n'),\n      },\n      tools: Object.fromEntries(\n        delegateSupervisorVerbs.map((verb) => [`${coordinationProfileToolPrefix}${verb}`, true]),\n      ),\n    },\n  }\n}\n\n/**\n * Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded\n * `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only\n * when asked. The worker backend is `sandbox`; every authored worker's exact profile selects its\n * own harness/provider/model.\n */\nexport function resolveDelegateSupervisor(\n  sandboxClient: SandboxClient,\n  env: NodeJS.ProcessEnv = process.env,\n): DelegateHandlerOptions | undefined {\n  if (!delegateEnabled(env)) return undefined\n  const supervisor = resolveRouterSupervisor(env)\n  const backend: ExecutorConfig = {\n    backend: 'sandbox',\n    sandboxClient,\n  }\n  return {\n    router: supervisor.router,\n    supervisorProfile: supervisor.profile,\n    backend,\n  }\n}\n","#!/usr/bin/env node\n\n/**\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Serves the ONE generic `delegate` verb (opt-in via `MCP_ENABLE_DELEGATE=1`): one intent → a\n * supervisor that authors + drives its own worker over `supervise()`, returning the delivered output\n * with its cost. The supervisor brain runs on the router; authored workers run as sub-sandboxes\n * through the `SandboxClient` the bin loads from the sandbox key. The queue-bound tools\n * (`delegate_feedback`, `delegation_status`, `delegation_history`) are always served.\n *\n * A platform key serves one product, so the Sandbox API key and the router key are separate\n * variables: the sandbox key only constructs the Sandbox client, and the router key only reaches\n * the supervisor brain. Neither is forwarded into a worker box; each worker's model access comes\n * from the box its profile provisions.\n *\n * Environment variables:\n *   TANGLE_SANDBOX_API_KEY           Sandbox API key passed to `new Sandbox({ apiKey })`. Falls back\n *                                    to TANGLE_API_KEY when unset, so one key that serves the Sandbox\n *                                    API keeps working.\n *   TANGLE_API_KEY                   Sandbox API key when TANGLE_SANDBOX_API_KEY is unset\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   MCP_ENABLE_DELEGATE              set to `1` to serve the generic `delegate` verb. Its authoring\n *                                    supervisor runs the brain on the router and spawns authored\n *                                    workers as sub-sandboxes via the same client; needs a sandbox key.\n *   MCP_SUPERVISOR_MODEL             required exact supervisor brain model id\n *   MCP_SUPERVISOR_ROUTER_KEY        required router key for the supervisor brain\n *   MCP_SUPERVISOR_ROUTER_BASE_URL   required router base, normalized to `/v1`\n *   MCP_SUPERVISOR_INSTRUCTIONS      optional text appended to the supervisor's system prompt: the\n *                                    caller's policy for the workers it authors, such as the harness\n *                                    and model its worker boxes can run\n *   AGENT_RUNTIME_DELEGATION_STATE_FILE\n *                                    optional — absolute path of a JSON state\n *                                    file. When set, delegation records persist\n *                                    across MCP restarts (FileDelegationStore):\n *                                    status/history survive and idempotency keys\n *                                    dedupe across processes.\n *   AGENT_RUNTIME_DELEGATION_STATE_RECOVER\n *                                    set to `1` to archive a corrupt state file\n *                                    (`<file>.corrupt-<ts>`) and start empty\n *                                    instead of refusing to boot.\n *   AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL\n *                                    optional — positive integer cap on retained\n *                                    terminal records. Unset = keep forever.\n *\n * @experimental\n */\n\nimport type { SandboxClient } from '../runtime'\nimport { delegateEnabled, resolveDelegateSupervisor } from './delegate-supervisor-provisioning'\nimport { FileDelegationStore } from './delegation-store'\nimport { createMcpServer } from './server'\nimport { DelegationTaskQueue } from './task-queue'\nimport type { DelegateHandlerOptions } from './tools/delegate'\nimport { readTraceContextFromEnv, type TraceContext } from './trace-propagation'\n\nconst DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nasync function main(): Promise<void> {\n  const wantDelegate = delegateEnabled(process.env)\n\n  // The generic `delegate` verb needs the sandbox client: its authored workers run as sub-sandboxes\n  // (the `sandbox` backend). When `delegate` is not opted in, the server runs the queue-only subset\n  // (feedback + status + history) with no sandbox.\n  let sandboxClient: SandboxClient | undefined\n  if (wantDelegate) {\n    const apiKey = sandboxApiKey(process.env)\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: a Sandbox API key is required to serve `delegate`: set TANGLE_SANDBOX_API_KEY (or TANGLE_API_KEY when that key serves the Sandbox API). Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n  }\n\n  // The supervisor's loop topology spans export to the OTLP / Tangle Intelligence sink when\n  // OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for correlation). The same\n  // context is stamped onto every delegation record so journal consumers join records into the\n  // caller's trace.\n  const traceContext = readTraceContextFromEnv()\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  // The ONE generic `delegate` verb — opt-in via MCP_ENABLE_DELEGATE=1. Its authoring supervisor\n  // runs the brain on the router and spawns authored workers as sub-sandboxes through the SAME\n  // client, so it needs the loaded `sandboxClient`. Gated on the client resolving (no key → no\n  // delegate, fail-closed).\n  let delegateSupervisor: DelegateHandlerOptions | undefined\n  if (wantDelegate && sandboxClient) {\n    try {\n      delegateSupervisor = resolveDelegateSupervisor(sandboxClient)\n    } catch (error) {\n      // Refuse to serve a verb that cannot work. Advertising `delegate` on an\n      // unresolvable substrate spends an agent's turn on a tool whose first\n      // inference is guaranteed to reject.\n      process.stderr.write(`${error instanceof Error ? error.message : String(error)}\\n`)\n      process.exit(2)\n    }\n  }\n  if (delegateSupervisor) {\n    process.stderr.write(\n      `agent-runtime-mcp: delegate enabled — generic authoring supervisor on ${delegateSupervisor.supervisorProfile.model?.default}\\n`,\n    )\n  }\n\n  const durableQueue = await buildDurableQueueFromEnv(traceContext)\n  const server = createMcpServer({\n    ...(delegateSupervisor ? { delegateSupervisor } : {}),\n    traceContext,\n    ...(durableQueue ? { queue: durableQueue } : {}),\n  })\n\n  const shutdown = () => {\n    server.stop()\n    // Drain journal writes so the state file reflects the final record\n    // states before the process exits. A persist failure already routed\n    // through onPersistError; swallow the duplicate rejection here.\n    if (durableQueue) {\n      void durableQueue\n        .flush()\n        .catch(() => {})\n        .finally(() => process.exit(0))\n      return\n    }\n    process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function buildDurableQueueFromEnv(\n  traceContext: TraceContext,\n): Promise<DelegationTaskQueue | undefined> {\n  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim()\n  if (!stateFile) return undefined\n  const store = new FileDelegationStore({\n    filePath: stateFile,\n    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === '1',\n  })\n  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL)\n  const queue = await DelegationTaskQueue.restore({\n    store,\n    traceContext,\n    ...(maxTerminalRecords !== undefined ? { maxTerminalRecords } : {}),\n    onPersistError: (error) => {\n      // Durable mode that can no longer write is a broken contract: crash\n      // loud instead of degrading to memory-only behind the caller's back.\n      process.stderr.write(`agent-runtime-mcp: ${error.message}\\n`)\n      process.exit(1)\n    },\n  })\n  process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\\n`)\n  return queue\n}\n\nfunction parseRetention(raw: string | undefined): number | undefined {\n  if (raw === undefined || raw.trim() === '') return undefined\n  const n = Number(raw)\n  if (!Number.isInteger(n) || n < 1) {\n    process.stderr.write(\n      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got \"${raw}\"\\n`,\n    )\n    process.exit(2)\n  }\n  return n\n}\n\n/** The Sandbox API key: the dedicated variable when set, else the legacy single key. The router key\n *  (`MCP_SUPERVISOR_ROUTER_KEY`) is read only by the supervisor provisioning. */\nfunction sandboxApiKey(env: NodeJS.ProcessEnv): string | undefined {\n  return env.TANGLE_SANDBOX_API_KEY?.trim() || env.TANGLE_API_KEY?.trim() || undefined\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // `delegate` requires a real client; the stub fails loud at create() so the\n  // agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: no Sandbox API key is set; `delegate` is disabled in diagnostic mode. Set TANGLE_SANDBOX_API_KEY (or TANGLE_API_KEY) or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Diagnostic mode does not need a client, so defer SDK initialization until\n  // delegation is requested. Runtime declares the SDK as a required peer.\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  // @tangle-network/sandbox ≥0.6 makes baseUrl required; default it so the MCP server\n  // starts without forcing every caller to set SANDBOX_BASE_URL. Treat empty/whitespace as\n  // unset (|| not ??) so `SANDBOX_BASE_URL=` still resolves to the default.\n  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL\n  return new SandboxCtor({ apiKey, baseUrl })\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;AAwBA,SAAS,QAAQ,OAA+C;CAC9D,MAAM,IAAI,OAAO,KAAK;CACtB,OAAO,IAAI,IAAI,KAAA;AACjB;AAEA,SAAS,YAAY,KAAwB,MAAsB;CACjE,MAAM,QAAQ,QAAQ,IAAI,KAAK;CAC/B,IAAI,OAAO,OAAO;CAClB,MAAM,IAAI,YAAY,sBAAsB,KAAK,wCAAwC;AAC3F;;;AAIA,SAAgB,gBAAgB,MAAyB,QAAQ,KAAc;CAC7E,OAAO,IAAI,wBAAwB;AACrC;;;;;;;AAQA,MAAM,0BAA0B;CAC9B;CACA;CACA;CACA;CACA;AACF;;;;;;;AAQA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI;;;;;;AAOX,SAAS,wBAAwB,KAG/B;CACA,MAAM,YAAY,YAAY,KAAK,2BAA2B;CAC9D,MAAM,OAAO,YAAY,KAAK,gCAAgC;CAC9D,MAAM,gBAAgB,aAAa,KAAK,IAAI,IACxC,KAAK,QAAQ,OAAO,EAAE,IACtB,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE;CAC/B,MAAM,QAAQ,YAAY,KAAK,sBAAsB;CAIrD,MAAM,uBAAuB,QAAQ,IAAI,2BAA2B;CACpE,OAAO;EACL,QAAQ;GAAE;GAAe;EAAU;EACnC,SAAS;GACP,MAAM;GACN,SAAS;GACT,OAAO;IAAE,UAAU;IAAiB,SAAS;GAAM;GACnD,QAAQ,EACN,cAAc;IACZ,uBAAuB;IACvB;IACA,GAAI,uBAAuB,CAAC,IAAI,oBAAoB,IAAI,CAAC;GAC3D,CAAC,CAAC,KAAK,IAAI,EACb;GACA,OAAO,OAAO,YACZ,wBAAwB,KAAK,SAAS,CAAC,GAAG,gCAAgC,QAAQ,IAAI,CAAC,CACzF;EACF;CACF;AACF;;;;;;;AAQA,SAAgB,0BACd,eACA,MAAyB,QAAQ,KACG;CACpC,IAAI,CAAC,gBAAgB,GAAG,GAAG,OAAO,KAAA;CAClC,MAAM,aAAa,wBAAwB,GAAG;CAC9C,MAAM,UAA0B;EAC9B,SAAS;EACT;CACF;CACA,OAAO;EACL,QAAQ,WAAW;EACnB,mBAAmB,WAAW;EAC9B;CACF;AACF;;ACvEA,MAAM,2BAA2B;AAEjC,eAAe,OAAsB;CACnC,MAAM,eAAe,gBAAgB,QAAQ,GAAG;CAKhD,IAAI;CACJ,IAAI,cAAc;EAChB,MAAM,SAAS,cAAc,QAAQ,GAAG;EACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;GAC1D,QAAQ,OAAO,MACb,iSACF;GACA,QAAQ,KAAK,CAAC;EAChB;EACA,gBAAgB,MAAM,kBAAkB,MAAM;CAChD;CAMA,MAAM,eAAe,wBAAwB;CAC7C,IAAI,QAAQ,IAAI,6BACd,QAAQ,OAAO,MACb,gDAAgD,QAAQ,IAAI,4BAA4B,GAC1F;CAOF,IAAI;CACJ,IAAI,gBAAgB,eAClB,IAAI;EACF,qBAAqB,0BAA0B,aAAa;CAC9D,SAAS,OAAO;EAId,QAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG;EAClF,QAAQ,KAAK,CAAC;CAChB;CAEF,IAAI,oBACF,QAAQ,OAAO,MACb,yEAAyE,mBAAmB,kBAAkB,OAAO,QAAQ,GAC/H;CAGF,MAAM,eAAe,MAAM,yBAAyB,YAAY;CAChE,MAAM,SAAS,gBAAgB;EAC7B,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;EACnD;EACA,GAAI,eAAe,EAAE,OAAO,aAAa,IAAI,CAAC;CAChD,CAAC;CAED,MAAM,iBAAiB;EACrB,OAAO,KAAK;EAIZ,IAAI,cAAc;GAChB,aACG,MAAM,CAAC,CACP,YAAY,CAAC,CAAC,CAAC,CACf,cAAc,QAAQ,KAAK,CAAC,CAAC;GAChC;EACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,QAAQ;CAE9B,MAAM,OAAO,MAAM;AACrB;AAEA,eAAe,yBACb,cAC0C;CAC1C,MAAM,YAAY,QAAQ,IAAI,qCAAqC,KAAK;CACxE,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,MAAM,QAAQ,IAAI,oBAAoB;EACpC,UAAU;EACV,gBAAgB,QAAQ,IAAI,2CAA2C;CACzE,CAAC;CACD,MAAM,qBAAqB,eAAe,QAAQ,IAAI,wCAAwC;CAC9F,MAAM,QAAQ,MAAM,oBAAoB,QAAQ;EAC9C;EACA;EACA,GAAI,uBAAuB,KAAA,IAAY,EAAE,mBAAmB,IAAI,CAAC;EACjE,iBAAiB,UAAU;GAGzB,QAAQ,OAAO,MAAM,sBAAsB,MAAM,QAAQ,GAAG;GAC5D,QAAQ,KAAK,CAAC;EAChB;CACF,CAAC;CACD,QAAQ,OAAO,MAAM,iDAAiD,UAAU,GAAG;CACnF,OAAO;AACT;AAEA,SAAS,eAAe,KAA6C;CACnE,IAAI,QAAQ,KAAA,KAAa,IAAI,KAAK,MAAM,IAAI,OAAO,KAAA;CACnD,MAAM,IAAI,OAAO,GAAG;CACpB,IAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;EACjC,QAAQ,OAAO,MACb,gGAAgG,IAAI,IACtG;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,OAAO;AACT;;;AAIA,SAAS,cAAc,KAA4C;CACjE,OAAO,IAAI,wBAAwB,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC7E;AAEA,eAAe,kBAAkB,QAAoD;CAKnF,IAAI,CAAC,QACH,OAAO,EACL,MAAM,SAAS;EACb,MAAM,IAAI,MACR,yNACF;CACF,EACF;CAUF,MAAM,eAAe,MANH,OAAO,0BAA0B,CAAC,OAAO,QAAQ;EACjE,QAAQ,OAAO,MACb,8DAA8D,IAAI,QAAQ,iCAC5E;EACA,QAAQ,KAAK,CAAC;CAChB,CAAC,EAAA,CACiF;CAClF,IAAI,CAAC,aAAa;EAChB,QAAQ,OAAO,MACb,+FACF;EACA,QAAQ,KAAK,CAAC;CAChB;CAKA,OAAO,IAAI,YAAY;EAAE;EAAQ,SADjB,QAAQ,IAAI,kBAAkB,KAAK,KAAK;CACf,CAAC;AAC5C;AAEA,KAAK,CAAC,CAAC,OAAO,QAAQ;CACpB,QAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,EAAE,GAAG;CAC7F,QAAQ,KAAK,CAAC;AAChB,CAAC"}

package/dist/mcp/index.d.ts

@@ -1,6 +1,5 @@
-import { Ah as SubmitInput, Ap as environmentReader, Av as QuestionLevel, Ay as AnalystRegistry, Bh as DelegationFeedbackSnapshot, By as LOCAL_HARNESSES, Ch as DelegationRecord, Dh as DelegationRunContext, Dp as SpawnResourceBytes, Eh as DelegationResumeTick, Ep as ResolvedSpawnResourcePath, Fh as DelegateResearchConfig, Fp as DelegateError, Gh as DelegationStatus, Hh as DelegationHistoryEntry, Ih as DelegateUiAuditArgs, Ip as DelegateHandlerOptions, Jh as FeedbackRefersTo, Kh as DelegationStatusResult, Lh as DelegateUiAuditConfig, Lp as DelegateResult, Mh as DelegateCodeArgs, Mp as McpServer, Nh as DelegateCodeConfig, Np as McpServerOptions, Oh as DelegationTaskQueue, Op as SpawnResourceRead, Ph as DelegateResearchArgs, Pp as createMcpServer, Pv as QuestionUrgency, Rh as DelegateUiAuditRoute, Rp as createDelegateHandler, Ry as RunLocalHarnessOptions, Sh as DelegationArgs, St as SpawnRefusalCause, Th as DelegationResumeDriver, Tp as ResolveSpawnResourcePathsResult, Tv as Question, Uh as DelegationProgress, Vh as DelegationHistoryArgs, Vy as LocalHarness, Wh as DelegationResultPayload, Xh as UiAuditLensFilter, Yh as ResearchOutputShape, Zh as UiAuditorDelegationOutput, _g as FileDelegationStoreOptions, _h as createFleetWorkspaceExecutor, ah as CoderDelegate, bh as RunDetachedTurnOptions, ch as DelegateRunCtx, cv as CoordinationEvent, dg as readTraceContextFromEnv, dh as UiAuditorDelegate, dp as CheckRead, dt as CoordinationStats, fg as DelegationTraceSpan, fh as detachedSessionDelegate, ft as CoordinationTools, fv as ManagerWake, fy as JsonRpcMessage, gg as FileDelegationStore, gh as SiblingSandboxExecutorOptions, gt as MakeWorkerAgent, gy as McpTransport, hg as DelegationStore, hh as FleetWorkspaceExecutorOptions, hy as McpToolDescriptor, ih as FeedbackStore, jh as SubmitOutput, jp as resolveSpawnResourcePaths, jv as QuestionOption, kh as DelegationTaskQueueOptions, kp as SpawnResourceReader, lg as TraceContext, lh as DetachedSessionDelegateOptions, mg as DelegationPersistenceError, mh as FleetHandle, my as McpToolAnnotations, oh as CoderReview, ov as GitRunner, pg as composeLoopTraceEmitters, ph as DelegationExecutor, pt as CoordinationToolsOptions, py as JsonRpcResponse, qh as FeedbackRating, rh as FeedbackEvent, sh as CoderReviewer, sv as AwaitWakeInput, ug as createPropagatingTraceEmitter, uh as DetachedWinnerSelection, vg as CoderOutput, vh as createSiblingSandboxExecutor, wh as DelegationResumeContext, wt as WorkerSpawnContext, xh as runDetachedTurn, yg as CoderTask, yh as DetachedTurn, zh as DelegationError, zy as runLocalHarness } from "../types-hc4cmSc7.js";
+import { $h as DelegationRunContext, $p as SpawnResourceBytes, Ah as FeedbackStore, Bg as DelegationPersistenceError, Bh as FleetHandle, By as JsonRpcResponse, Cg as UiAuditorDelegationOutput, Fg as TraceContext, Fh as DetachedSessionDelegateOptions, Fv as CoordinationEvent, Gg as CoderTask, Gh as DetachedTurn, Hg as FileDelegationStore, Hh as SiblingSandboxExecutorOptions, Hy as McpToolDescriptor, Ig as createPropagatingTraceEmitter, Ih as DetachedWinnerSelection, Jh as DelegationArgs, Kh as RunDetachedTurnOptions, Lg as readTraceContextFromEnv, Lh as UiAuditorDelegate, Lp as CheckRead, Mh as CoderReview, Nh as CoderReviewer, Nv as GitRunner, Ph as DelegateRunCtx, Pv as AwaitWakeInput, Qh as DelegationResumeTick, Qp as ResolvedSpawnResourcePath, Qv as Question, Rg as DelegationTraceSpan, Rh as detachedSessionDelegate, Sg as UiAuditLensFilter, St as SpawnRefusalCause, Ug as FileDelegationStoreOptions, Uh as createFleetWorkspaceExecutor, Uy as McpTransport, Vg as DelegationStore, Vh as FleetWorkspaceExecutorOptions, Vy as McpToolAnnotations, Wg as CoderOutput, Wh as createSiblingSandboxExecutor, Xh as DelegationResumeContext, Yh as DelegationRecord, Zh as DelegationResumeDriver, Zp as ResolveSpawnResourcePathsResult, _g as DelegationStatus, ag as DelegateCodeConfig, am as McpServerOptions, bg as FeedbackRefersTo, cg as DelegateUiAuditArgs, cm as DelegateHandlerOptions, db as RunLocalHarnessOptions, dg as DelegationError, dt as CoordinationStats, eg as DelegationTaskQueue, em as SpawnResourceRead, fb as runLocalHarness, fg as DelegationFeedbackSnapshot, ft as CoordinationTools, gg as DelegationResultPayload, gt as MakeWorkerAgent, hg as DelegationProgress, ig as DelegateCodeArgs, im as McpServer, iy as QuestionOption, jh as CoderDelegate, kh as FeedbackEvent, lg as DelegateUiAuditConfig, lm as DelegateResult, mb as LocalHarness, mg as DelegationHistoryEntry, ng as SubmitInput, nm as environmentReader, og as DelegateResearchArgs, om as createMcpServer, pb as LOCAL_HARNESSES, pg as DelegationHistoryArgs, pt as CoordinationToolsOptions, qh as runDetachedTurn, rb as AnalystRegistry, rg as SubmitOutput, rm as resolveSpawnResourcePaths, ry as QuestionLevel, sg as DelegateResearchConfig, sm as DelegateError, sy as QuestionUrgency, tg as DelegationTaskQueueOptions, tm as SpawnResourceReader, ug as DelegateUiAuditRoute, um as createDelegateHandler, vg as DelegationStatusResult, wt as WorkerSpawnContext, xg as ResearchOutputShape, yg as FeedbackRating, zg as composeLoopTraceEmitters, zh as DelegationExecutor, zv as ManagerWake, zy as JsonRpcMessage } from "../types-Fowuwdz2.js";
 import { HarnessType } from "@tangle-network/agent-interface";
-//#region src/mcp/kb-gate.d.ts
 /**
  *
  * `createKbGate` — the valid-only knowledge-base growth gate, distilled from
@@ -76,9 +75,7 @@ interface CreateKbGateOptions {
  *
  * @experimental
  */
-declare function createKbGate(options?: CreateKbGateOptions): (candidate: FactCandidate) => Promise<KbGateResult>;
-//#endregion
-//#region src/mcp/harness-native-tools.d.ts
+export declare function createKbGate(options?: CreateKbGateOptions): (candidate: FactCandidate) => Promise<KbGateResult>;
 /**
  * Sourced native sub-agent tool names, keyed by the same `HarnessType` vocabulary the rest of the
  * runtime draws harness names from, so a harness the interface renames is a compile error here.
@@ -94,16 +91,14 @@ type SourcedHarness = keyof typeof harnessNativeTools;
  * The tool names `harness` publishes natively, or `undefined` when no list has been sourced for it.
  * The two are different facts and a caller must not read one as the other.
  */
-declare function harnessNativeToolNames(harness: HarnessType): ReadonlyArray<string> | undefined;
+export declare function harnessNativeToolNames(harness: HarnessType): ReadonlyArray<string> | undefined;
 /**
  * The sourced harnesses that publish `name` natively — empty when the name is clear of all of them.
  *
  * The comparison folds case. A model resolving a bare word out of a prompt does not hold the
  * harness's exact casing, so `task` and `Task` are one collision, not two distinct names.
  */
-declare function collidesWithHarnessNativeTool(name: string): ReadonlyArray<SourcedHarness>;
-//#endregion
-//#region src/mcp/in-process-executor.d.ts
+export declare function collidesWithHarnessNativeTool(name: string): ReadonlyArray<SourcedHarness>;
 /** @experimental */
 interface InProcessExecutorOptions {
   /** Absolute path to the git repo (the workspace). Worktrees go under `<repoRoot>/.agent-worktrees/`. */
@@ -140,9 +135,7 @@ interface InProcessExecutorOptions {
  *
  * @experimental
  */
-declare function createInProcessExecutor(options: InProcessExecutorOptions): DelegationExecutor;
-//#endregion
-//#region src/mcp/tool-server.d.ts
+export declare function createInProcessExecutor(options: InProcessExecutorOptions): DelegationExecutor;
 /** @experimental */
 interface StdioToolServerOptions {
   /** Server display name surfaced via `initialize`. */
@@ -164,11 +157,8 @@ interface StdioToolServer {
   stop(): void;
 }
 /** Build the generic stdio JSON-RPC tool server. */
-declare function createStdioToolServer(options: StdioToolServerOptions): StdioToolServer;
-//#endregion
-//#region src/mcp/tools/coordination-manager.d.ts
+export declare function createStdioToolServer(options: StdioToolServerOptions): StdioToolServer;
 /** Build the driver's MCP tools over a live scope. */
-declare function createCoordinationTools(opts: CoordinationToolsOptions): CoordinationTools;
-//#endregion
-export { type AnalystRegistry, type AwaitWakeInput, type CheckRead, type CoderDelegate, type CoderOutput, type CoderReview, type CoderReviewer, type CoderTask, type CoordinationEvent, type CoordinationStats, type CoordinationTools, type CoordinationToolsOptions, type CreateKbGateOptions, type DelegateCodeArgs, type DelegateCodeConfig, type DelegateError, type DelegateHandlerOptions, type DelegateResearchArgs, type DelegateResearchConfig, type DelegateResult, type DelegateRunCtx, type DelegateUiAuditArgs, type DelegateUiAuditConfig, type DelegateUiAuditRoute, type DelegationArgs, type DelegationError, type DelegationExecutor, type DelegationFeedbackSnapshot, type DelegationHistoryArgs, type DelegationHistoryEntry, type DelegationPersistenceError, type DelegationProgress, type DelegationRecord, type DelegationResultPayload, type DelegationResumeContext, type DelegationResumeDriver, type DelegationResumeTick, type DelegationRunContext, type DelegationStatus, type DelegationStatusResult, type DelegationStore, DelegationTaskQueue, type DelegationTaskQueueOptions, type DelegationTraceSpan, type DetachedSessionDelegateOptions, type DetachedTurn, type DetachedWinnerSelection, type FactCandidate, type FactJudge, type FactJudgeVerdict, type FeedbackEvent, type FeedbackRating, type FeedbackRefersTo, type FeedbackStore, FileDelegationStore, type FileDelegationStoreOptions, type FleetHandle, type FleetWorkspaceExecutorOptions, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, type KbGateResult, LOCAL_HARNESSES, type LocalHarness, type MakeWorkerAgent, type ManagerWake, type McpServer, type McpServerOptions, type McpToolAnnotations, type McpToolDescriptor, type McpTransport, type Question, type QuestionLevel, type QuestionOption, type QuestionUrgency, type ResearchOutputShape, type ResolveSpawnResourcePathsResult, type ResolvedSpawnResourcePath, type RunDetachedTurnOptions, type RunLocalHarnessOptions, type SiblingSandboxExecutorOptions, type SpawnRefusalCause, type SpawnResourceBytes, type SpawnResourceRead, type SpawnResourceReader, type StdioToolServer, type StdioToolServerOptions, type SubmitInput, type SubmitOutput, type TraceContext, type UiAuditLensFilter, type UiAuditorDelegate, type UiAuditorDelegationOutput, type WorkerSpawnContext, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateHandler, createFleetWorkspaceExecutor, createInProcessExecutor, createKbGate, createMcpServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, detachedSessionDelegate, environmentReader, harnessNativeToolNames, readTraceContextFromEnv, resolveSpawnResourcePaths, runDetachedTurn };
+export declare function createCoordinationTools(opts: CoordinationToolsOptions): CoordinationTools;
+export { type AnalystRegistry, type AwaitWakeInput, type CheckRead, type CoderDelegate, type CoderOutput, type CoderReview, type CoderReviewer, type CoderTask, type CoordinationEvent, type CoordinationStats, type CoordinationTools, type CoordinationToolsOptions, type CreateKbGateOptions, type DelegateCodeArgs, type DelegateCodeConfig, type DelegateError, type DelegateHandlerOptions, type DelegateResearchArgs, type DelegateResearchConfig, type DelegateResult, type DelegateRunCtx, type DelegateUiAuditArgs, type DelegateUiAuditConfig, type DelegateUiAuditRoute, type DelegationArgs, type DelegationError, type DelegationExecutor, type DelegationFeedbackSnapshot, type DelegationHistoryArgs, type DelegationHistoryEntry, type DelegationPersistenceError, type DelegationProgress, type DelegationRecord, type DelegationResultPayload, type DelegationResumeContext, type DelegationResumeDriver, type DelegationResumeTick, type DelegationRunContext, type DelegationStatus, type DelegationStatusResult, type DelegationStore, DelegationTaskQueue, type DelegationTaskQueueOptions, type DelegationTraceSpan, type DetachedSessionDelegateOptions, type DetachedTurn, type DetachedWinnerSelection, type FactCandidate, type FactJudge, type FactJudgeVerdict, type FeedbackEvent, type FeedbackRating, type FeedbackRefersTo, type FeedbackStore, FileDelegationStore, type FileDelegationStoreOptions, type FleetHandle, type FleetWorkspaceExecutorOptions, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, type KbGateResult, LOCAL_HARNESSES, type LocalHarness, type MakeWorkerAgent, type ManagerWake, type McpServer, type McpServerOptions, type McpToolAnnotations, type McpToolDescriptor, type McpTransport, type Question, type QuestionLevel, type QuestionOption, type QuestionUrgency, type ResearchOutputShape, type ResolveSpawnResourcePathsResult, type ResolvedSpawnResourcePath, type RunDetachedTurnOptions, type RunLocalHarnessOptions, type SiblingSandboxExecutorOptions, type SpawnRefusalCause, type SpawnResourceBytes, type SpawnResourceRead, type SpawnResourceReader, type StdioToolServer, type StdioToolServerOptions, type SubmitInput, type SubmitOutput, type TraceContext, type UiAuditLensFilter, type UiAuditorDelegate, type UiAuditorDelegationOutput, type WorkerSpawnContext, composeLoopTraceEmitters, createDelegateHandler, createFleetWorkspaceExecutor, createMcpServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, detachedSessionDelegate, environmentReader, readTraceContextFromEnv, resolveSpawnResourcePaths, runDetachedTurn };
 //# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.js

@@ -1,15 +1,15 @@
-import { $ as resolveSpawnResourcePaths, Br as LOCAL_HARNESSES, Ft as assertBoxlessPromptOptions, Lt as createSandboxForSpec, Pt as runAgentRounds, Q as environmentReader, vn as createPropagatingTraceEmitter, yn as readTraceContextFromEnv, zr as runWorktreeHarness } from "../supervisor-DDy0aEtR.js";
-import { i as ConfigError, m as ValidationError } from "../errors-DodWX-cb.js";
-import { Y as deleteBoxSafe, lt as throwIfAborted, ot as sleep } from "../sandbox-profile-compat-_fEtHPCj.js";
-import { t as assertExecutableAgentProfile } from "../model-policy-CyCUwHed.js";
-import { t as createCoordinationTools } from "../coordination-manager-Bm6leXc6.js";
-import { n as createStdioToolServer } from "../tool-server-XV4aJwoQ.js";
-import { ct as selectValidWinner, h as runCoderChecks } from "../runtime-B_40dXlF.js";
-import { a as composeLoopTraceEmitters, i as FileDelegationStore, n as createDelegateHandler, r as DelegationTaskQueue, t as createMcpServer } from "../server-BGB4R4wQ.js";
+import { $ as resolveSpawnResourcePaths, Br as runWorktreeHarness, Ft as assertBoxlessPromptOptions, Lt as createSandboxForSpec, Pt as runAgentRounds, Q as environmentReader, Vr as LOCAL_HARNESSES, vn as createPropagatingTraceEmitter, yn as readTraceContextFromEnv } from "../supervisor-C1OePYE-.js";
+import { i as ConfigError, m as ValidationError } from "../errors-wuhGvpE3.js";
+import { X as deleteBoxSafe, st as sleep, ut as throwIfAborted } from "../sandbox-profile-compat-BxMQ1VXv.js";
+import { t as assertExecutableAgentProfile } from "../model-policy-GSxWwP-b.js";
+import { t as createCoordinationTools } from "../coordination-manager-BkVfWlMz.js";
+import { n as createStdioToolServer } from "../tool-server-CwuYeW_Z.js";
+import { h as runCoderChecks, pt as selectValidWinner } from "../runtime-6Ec9sHRe.js";
+import { a as composeLoopTraceEmitters, i as FileDelegationStore, n as createDelegateHandler, r as DelegationTaskQueue, t as createMcpServer } from "../server-fvEMwGMQ.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { isRecord } from "@tangle-network/agent-core";
 import { randomUUID } from "node:crypto";
-//#region src/mcp/kb-gate.ts
+// src/mcp/kb-gate.ts
 const norm = (s) => s.toLowerCase().replace(/\s+/g, " ").trim();
 /** Does `value` appear in the (normalized) passage — literally, comma-grouped,
 *  or in billion/million shorthand (the forms a source actually writes). */
@@ -85,8 +85,7 @@ function createKbGate(options = {}) {
 		return { accepted: true };
 	};
 }
-//#endregion
-//#region src/profiles/coder.ts
+// src/profiles/coder.ts
 /**
 *
 * `CoderTask` + `coderTaskToPrompt` — the per-task DATA + pure formatter for code-modification tasks
@@ -122,8 +121,7 @@ function coderTaskToPrompt(task) {
 		"returning. Emit the final JSON result block exactly as instructed."
 	].join("\n");
 }
-//#endregion
-//#region src/mcp/detached-coder.ts
+// src/mcp/detached-coder.ts
 /**
 *
 * Sandbox-session coder decode layer. The sandbox-session delegate (`./delegates`) and the
@@ -371,8 +369,7 @@ function toFiniteInt(value) {
 	if (!Number.isFinite(value)) return 0;
 	return Math.max(0, Math.trunc(value));
 }
-//#endregion
-//#region src/mcp/detached-turn.ts
+// src/mcp/detached-turn.ts
 const DEFAULT_TICK_INTERVAL_MS = 5e3;
 /**
 * Encode ref parts into the JSON-safe string stored on the record:
@@ -586,8 +583,7 @@ function createDetachedTurnTrace(options) {
 function detachedRunningPhase(elapsedMs) {
 	return elapsedMs === void 0 ? "detached-running" : `detached-running ${Math.round(elapsedMs / 1e3)}s`;
 }
-//#endregion
-//#region src/mcp/executor.ts
+// src/mcp/executor.ts
 /**
 * Wrap a raw sandbox SDK client so the kernel emits
 * `loop.iteration.dispatch` events with `{ placement: 'sibling', sandboxId }`.
@@ -669,8 +665,7 @@ function readId(box) {
 	const raw = box.id;
 	return typeof raw === "string" && raw.length > 0 ? raw : void 0;
 }
-//#endregion
-//#region src/mcp/delegates.ts
+// src/mcp/delegates.ts
 /**
 * Build the sandbox-session coder delegate. It drives `runAgentRounds` against the project's
 * sandbox client + coder profile; when `args.variants > 1` it switches to the multi-harness fanout
@@ -927,8 +922,7 @@ const singleShotDriver = {
 		return history.length > 0 ? "pick-winner" : "fail";
 	}
 };
-//#endregion
-//#region src/mcp/harness-native-tools.ts
+// src/mcp/harness-native-tools.ts
 /**
 * Sourced native sub-agent tool names, keyed by the same `HarnessType` vocabulary the rest of the
 * runtime draws harness names from, so a harness the interface renames is a compile error here.
@@ -973,8 +967,7 @@ function collidesWithHarnessNativeTool(name) {
 	const wanted = name.toLowerCase();
 	return sourcedHarnesses.filter((harness) => harnessNativeTools[harness].some((native) => native.toLowerCase() === wanted));
 }
-//#endregion
-//#region src/mcp/in-process-executor.ts
+// src/mcp/in-process-executor.ts
 /**
 *
 * In-process delegation executor — when `agent-runtime-mcp` runs inside a sandbox whose image
@@ -993,7 +986,7 @@ function collidesWithHarnessNativeTool(name) {
 *
 * @experimental
 */
-const DEFAULT_POSTCHECK_TIMEOUT_MS = 120 * 1e3;
+const DEFAULT_POSTCHECK_TIMEOUT_MS = 12e4;
 /**
 * Build an in-process executor. Returns a {@link DelegationExecutor} whose `client.create()`
 * returns a minimal virtual `SandboxInstance`; the kernel calls `streamPrompt(msg)` on it, which
@@ -1154,7 +1147,6 @@ async function defaultRunPostCheck(cmd, cwd, signal) {
 		});
 	});
 }
-//#endregion
 export { DelegationTaskQueue, FileDelegationStore, LOCAL_HARNESSES, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateHandler, createFleetWorkspaceExecutor, createInProcessExecutor, createKbGate, createMcpServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, detachedSessionDelegate, environmentReader, harnessNativeToolNames, readTraceContextFromEnv, resolveSpawnResourcePaths, runDetachedTurn };
 
 //# sourceMappingURL=index.js.map