@tangle-network/agent-runtime 0.35.0 → 0.37.0

package/dist/loops.d.ts

@@ -1,11 +1,10 @@
 import { AgentProfile, SandboxEvent } from '@tangle-network/sandbox';
 export { AgentProfile, CreateSandboxOptions, SandboxEvent, SandboxInstance } from '@tangle-network/sandbox';
-import { I as Iteration, D as Driver, L as LoopSandboxClient, A as AgentRunSpec, O as OutputAdapter, V as Validator, E as ExecCtx, a as LoopWinner, b as LoopResult } from './types-DrXVR2Fu.js';
-export { c as LoopDecisionPayload, d as LoopEndedPayload, e as LoopIterationDispatchPayload, f as LoopIterationEndedPayload, g as LoopIterationStartedPayload, h as LoopPlanDescription, i as LoopPlanPayload, j as LoopSandboxPlacement, k as LoopStartedPayload, l as LoopTokenUsage, m as LoopTraceEmitter, n as LoopTraceEvent, o as ValidationCtx } from './types-DrXVR2Fu.js';
+import { I as Iteration, D as Driver, L as LoopSandboxClient, A as AgentRunSpec, O as OutputAdapter, V as Validator, E as ExecCtx, a as LoopWinner, b as LoopResult } from './types-CmTjKLyB.js';
+export { c as LoopDecisionPayload, d as LoopEndedPayload, e as LoopIterationDispatchPayload, f as LoopIterationEndedPayload, g as LoopIterationStartedPayload, h as LoopPlanDescription, i as LoopPlanPayload, j as LoopSandboxPlacement, k as LoopStartedPayload, l as LoopTokenUsage, m as LoopTraceEmitter, n as LoopTraceEvent, o as ValidationCtx } from './types-CmTjKLyB.js';
 import { DefaultVerdict, AgentProfile as AgentProfile$1 } from '@tangle-network/agent-eval';
 export { DefaultVerdict } from '@tangle-network/agent-eval';
 import { Scenario, DispatchFn, ProfileDispatchFn } from '@tangle-network/agent-eval/campaign';
-import './runtime-run-B8VIiOhI.js';
 import './types-CsCCryln.js';
 
 /**

package/dist/mcp/bin.js

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
 import {
-  createDefaultCoderDelegate,
   createMcpServer,
   detectExecutor
-} from "../chunk-TT3IHIQT.js";
-import "../chunk-HSX6PFZR.js";
+} from "../chunk-M65QJD35.js";
+import {
+  createDefaultCoderDelegate
+} from "../chunk-V6GURW4W.js";
 import "../chunk-GLR25NG7.js";
 import {
   runLoop
 } from "../chunk-7JBDJQLO.js";
-import "../chunk-5QVVET72.js";
+import "../chunk-3HMHSN22.js";
 import "../chunk-PY6NMZYX.js";
 import "../chunk-SQSCRJ7U.js";
 import "../chunk-DGUM43GV.js";

package/dist/mcp/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/bin.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * @experimental\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Spins up a server with the default coder delegate (wired against the\n * real `@tangle-network/sandbox` client) and, when the optional\n * `@tangle-network/agent-knowledge` peer is installed, a researcher\n * delegate against `multiHarnessResearcherFanout`.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   TANGLE_FLEET_ID                  optional — when set, delegations dispatch\n *                                    INTO this fleet's shared workspace instead\n *                                    of creating sibling sandboxes. Set by the\n *                                    parent sandbox when launching this MCP\n *                                    server so worker diffs land on the caller's\n *                                    filesystem with no cross-sandbox boundary.\n *   TANGLE_FLEET_EXCLUDE_MACHINES    optional — comma-separated machine ids to\n *                                    skip during fleet-mode round-robin\n *                                    (typically the coordinator machine this\n *                                    MCP server is running on).\n *   MCP_MAX_CONCURRENT_SANDBOXES     default 4 — kernel maxConcurrency cap\n *   MCP_CODER_FANOUT_HARNESSES       comma-separated harness ids to use for variants > 1\n *   MCP_DISABLE_CODER                set to `1` to omit `delegate_code`\n *   MCP_DISABLE_RESEARCHER           set to `1` to omit `delegate_research` even when peer is present\n */\n\nimport type { LoopSandboxClient } from '../loops'\nimport { runLoop } from '../loops'\nimport { detectExecutor } from './bin-helpers'\nimport { createDefaultCoderDelegate, type ResearcherDelegate } from './delegates'\nimport type { DelegationExecutor } from './executor'\nimport { createMcpServer } from './server'\nimport type { ResearchOutputShape } from './types'\n\nasync function main(): Promise<void> {\n  const fanoutHarnesses = parseHarnesses(process.env.MCP_CODER_FANOUT_HARNESSES)\n  const maxConcurrency = parseConcurrency(process.env.MCP_MAX_CONCURRENT_SANDBOXES)\n  const wantCoder = !process.env.MCP_DISABLE_CODER\n  const wantResearcher = !process.env.MCP_DISABLE_RESEARCHER\n  const fleetId = parseFleetId(process.env.TANGLE_FLEET_ID)\n\n  // Skip the sandbox client load entirely when no profile delegate needs it —\n  // the feedback + status + history tools are queue-bound and require no\n  // sandbox. Useful for tooling that mounts the MCP server purely for\n  // self-introspection.\n  const needsSandbox = wantCoder || wantResearcher\n  let sandboxClient: LoopSandboxClient | undefined\n  let executor: DelegationExecutor | undefined\n  if (needsSandbox) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    // Fleet mode against a diagnostic stub is meaningless — the stub can't\n    // resolve a real fleet handle. Refuse rather than silently degrading,\n    // otherwise a fleet-mounted MCP would behave differently than configured.\n    if (fleetId && !apiKey) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_FLEET_ID was set but TANGLE_API_KEY is missing; cannot resolve fleet handle. Provide an api key or unset TANGLE_FLEET_ID.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n    executor = await detectExecutor({ sandboxClient })\n    if (fleetId) {\n      process.stderr.write(`agent-runtime-mcp: fleet-aware delegation: fleetId=${fleetId}\\n`)\n    }\n    process.stderr.write(`agent-runtime-mcp: delegation placement → ${executor.describe()}\\n`)\n  }\n\n  const coderDelegate =\n    wantCoder && executor\n      ? createDefaultCoderDelegate({\n          executor,\n          fanoutHarnesses,\n          maxConcurrency,\n        })\n      : undefined\n\n  const researcherDelegate =\n    wantResearcher && executor\n      ? await loadResearcherDelegate(executor.client, maxConcurrency)\n      : undefined\n\n  const server = createMcpServer({ coderDelegate, researcherDelegate })\n\n  process.on('SIGINT', () => {\n    server.stop()\n    process.exit(0)\n  })\n  process.on('SIGTERM', () => {\n    server.stop()\n    process.exit(0)\n  })\n\n  await server.serve()\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<LoopSandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // Coder + researcher delegations require a real client; the stub fails loud\n  // at create() so the agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; coder/researcher delegations are disabled in diagnostic mode. Set TANGLE_API_KEY or use MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to remove the unsupported tools from the tool list.',\n        )\n      },\n    } satisfies LoopSandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => LoopSandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  const baseUrl = process.env.SANDBOX_BASE_URL\n  return new SandboxCtor({\n    apiKey,\n    ...(baseUrl ? { baseUrl } : {}),\n  })\n}\n\ninterface ResearcherProfilePreset {\n  agentRunSpec: Parameters<typeof runLoop>[0]['agentRun'] extends infer T ? NonNullable<T> : never\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n}\n\ninterface ResearcherFanoutPreset {\n  agentRuns: NonNullable<Parameters<typeof runLoop>[0]['agentRuns']>\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n  driver: Parameters<typeof runLoop>[0]['driver']\n}\n\nasync function loadResearcherDelegate(\n  sandboxClient: LoopSandboxClient,\n  maxConcurrency: number,\n): Promise<ResearcherDelegate | undefined> {\n  // Optional peer — when `@tangle-network/agent-knowledge` isn't installed,\n  // we silently omit the researcher tool from the advertisement. The\n  // dynamic-import path is resolved at runtime; TypeScript cannot see the\n  // peer, so we type the module structurally rather than via its own\n  // declaration file.\n  const profilesSpecifier = '@tangle-network/agent-knowledge/profiles'\n  const mod = await import(profilesSpecifier).catch(() => undefined)\n  if (!mod) return undefined\n  type SingleFactory = (opts: { task: unknown }) => ResearcherProfilePreset\n  type FanoutFactory = (opts: { task: unknown }) => ResearcherFanoutPreset\n  const fanoutFactory = (mod as { multiHarnessResearcherFanout?: FanoutFactory })\n    .multiHarnessResearcherFanout\n  const singleFactory = (mod as { researcherProfile?: SingleFactory }).researcherProfile\n  if (!fanoutFactory || !singleFactory) return undefined\n\n  return async (args, ctx) => {\n    const task = {\n      question: args.question,\n      knowledgeNamespace: args.namespace,\n      scope: args.scope,\n      sources: args.sources,\n      recencyWindow: args.config?.recencyWindow\n        ? {\n            since: args.config.recencyWindow.since\n              ? new Date(args.config.recencyWindow.since)\n              : undefined,\n            until: args.config.recencyWindow.until\n              ? new Date(args.config.recencyWindow.until)\n              : undefined,\n          }\n        : undefined,\n      maxItems: args.config?.maxItems,\n      minConfidence: args.config?.minConfidence,\n    }\n    const variants = Math.max(1, Math.trunc(args.variants ?? 1))\n    ctx.report({ iteration: 0, phase: 'starting' })\n    if (variants <= 1) {\n      const preset = singleFactory({ task })\n      const result = await runLoop({\n        driver: {\n          name: 'mcp-researcher-single',\n          async plan(t, history) {\n            return history.length === 0 ? [t] : []\n          },\n          decide(history) {\n            return history.length > 0 ? 'pick-winner' : 'fail'\n          },\n        },\n        agentRun: preset.agentRunSpec,\n        output: preset.output,\n        validator: preset.validator,\n        task,\n        ctx: { sandboxClient, signal: ctx.signal },\n        maxIterations: 1,\n        maxConcurrency,\n      })\n      const output = result.winner?.output\n      if (!output) throw new Error('researcher delegate produced no winner')\n      ctx.report({ iteration: 1, phase: 'completed' })\n      return output as ResearchOutputShape\n    }\n    const fanout = fanoutFactory({ task })\n    const result = await runLoop({\n      driver: fanout.driver,\n      agentRuns: fanout.agentRuns.slice(0, variants),\n      output: fanout.output,\n      validator: fanout.validator,\n      task,\n      ctx: { sandboxClient, signal: ctx.signal },\n      maxIterations: variants,\n      maxConcurrency: Math.min(maxConcurrency, variants),\n    })\n    const output = result.winner?.output\n    if (!output) throw new Error('researcher delegate fanout produced no winner')\n    ctx.report({ iteration: result.iterations.length, phase: 'completed' })\n    return output as ResearchOutputShape\n  }\n}\n\nfunction parseHarnesses(raw: string | undefined): string[] | undefined {\n  if (!raw) return undefined\n  const list = raw\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n  return list.length > 0 ? list : undefined\n}\n\nfunction parseFleetId(raw: string | undefined): string | undefined {\n  if (typeof raw !== 'string') return undefined\n  const trimmed = raw.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\nfunction parseConcurrency(raw: string | undefined): number {\n  if (!raw) return 4\n  const n = Number(raw)\n  if (!Number.isFinite(n) || n < 1) return 4\n  return Math.min(Math.trunc(n), 32)\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;AAuCA,eAAe,OAAsB;AACnC,QAAM,kBAAkB,eAAe,QAAQ,IAAI,0BAA0B;AAC7E,QAAM,iBAAiB,iBAAiB,QAAQ,IAAI,4BAA4B;AAChF,QAAM,YAAY,CAAC,QAAQ,IAAI;AAC/B,QAAM,iBAAiB,CAAC,QAAQ,IAAI;AACpC,QAAM,UAAU,aAAa,QAAQ,IAAI,eAAe;AAMxD,QAAM,eAAe,aAAa;AAClC,MAAI;AACJ,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAIA,QAAI,WAAW,CAAC,QAAQ;AACtB,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAC9C,eAAW,MAAM,eAAe,EAAE,cAAc,CAAC;AACjD,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM,sDAAsD,OAAO;AAAA,CAAI;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,kDAA6C,SAAS,SAAS,CAAC;AAAA,CAAI;AAAA,EAC3F;AAEA,QAAM,gBACJ,aAAa,WACT,2BAA2B;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,IACD;AAEN,QAAM,qBACJ,kBAAkB,WACd,MAAM,uBAAuB,SAAS,QAAQ,cAAc,IAC5D;AAEN,QAAM,SAAS,gBAAgB,EAAE,eAAe,mBAAmB,CAAC;AAEpE,UAAQ,GAAG,UAAU,MAAM;AACzB,WAAO,KAAK;AACZ,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,UAAQ,GAAG,WAAW,MAAM;AAC1B,WAAO,KAAK;AACZ,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AAED,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,kBAAkB,QAAwD;AAKvF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAAiE;AACtF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,UAAU,QAAQ,IAAI;AAC5B,SAAO,IAAI,YAAY;AAAA,IACrB;AAAA,IACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AACH;AAeA,eAAe,uBACb,eACA,gBACyC;AAMzC,QAAM,oBAAoB;AAC1B,QAAM,MAAM,MAAM,OAAO,mBAAmB,MAAM,MAAM,MAAS;AACjE,MAAI,CAAC,IAAK,QAAO;AAGjB,QAAM,gBAAiB,IACpB;AACH,QAAM,gBAAiB,IAA8C;AACrE,MAAI,CAAC,iBAAiB,CAAC,cAAe,QAAO;AAE7C,SAAO,OAAO,MAAM,QAAQ;AAC1B,UAAM,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,oBAAoB,KAAK;AAAA,MACzB,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,eAAe,KAAK,QAAQ,gBACxB;AAAA,QACE,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,QACJ,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,MACN,IACA;AAAA,MACJ,UAAU,KAAK,QAAQ;AAAA,MACvB,eAAe,KAAK,QAAQ;AAAA,IAC9B;AACA,UAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC,CAAC;AAC3D,QAAI,OAAO,EAAE,WAAW,GAAG,OAAO,WAAW,CAAC;AAC9C,QAAI,YAAY,GAAG;AACjB,YAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,YAAMA,UAAS,MAAM,QAAQ;AAAA,QAC3B,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM,KAAK,GAAG,SAAS;AACrB,mBAAO,QAAQ,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC;AAAA,UACvC;AAAA,UACA,OAAO,SAAS;AACd,mBAAO,QAAQ,SAAS,IAAI,gBAAgB;AAAA,UAC9C;AAAA,QACF;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,WAAW,OAAO;AAAA,QAClB;AAAA,QACA,KAAK,EAAE,eAAe,QAAQ,IAAI,OAAO;AAAA,QACzC,eAAe;AAAA,QACf;AAAA,MACF,CAAC;AACD,YAAMC,UAASD,QAAO,QAAQ;AAC9B,UAAI,CAACC,QAAQ,OAAM,IAAI,MAAM,wCAAwC;AACrE,UAAI,OAAO,EAAE,WAAW,GAAG,OAAO,YAAY,CAAC;AAC/C,aAAOA;AAAA,IACT;AACA,UAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO,UAAU,MAAM,GAAG,QAAQ;AAAA,MAC7C,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,KAAK,EAAE,eAAe,QAAQ,IAAI,OAAO;AAAA,MACzC,eAAe;AAAA,MACf,gBAAgB,KAAK,IAAI,gBAAgB,QAAQ;AAAA,IACnD,CAAC;AACD,UAAM,SAAS,OAAO,QAAQ;AAC9B,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+CAA+C;AAC5E,QAAI,OAAO,EAAE,WAAW,OAAO,WAAW,QAAQ,OAAO,YAAY,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,KAA+C;AACrE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,IACV,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACjB,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,aAAa,KAA6C;AACjE,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,KAAK;AACzB,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,iBAAiB,KAAiC;AACzD,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,IAAI,KAAK,MAAM,CAAC,GAAG,EAAE;AACnC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["result","output"]}
+{"version":3,"sources":["../../src/mcp/bin.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * @experimental\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Spins up a server with the default coder delegate (wired against the\n * real `@tangle-network/sandbox` client) and, when the optional\n * `@tangle-network/agent-knowledge` peer is installed, a researcher\n * delegate against `multiHarnessResearcherFanout`.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   TANGLE_FLEET_ID                  optional — when set, delegations dispatch\n *                                    INTO this fleet's shared workspace instead\n *                                    of creating sibling sandboxes. Set by the\n *                                    parent sandbox when launching this MCP\n *                                    server so worker diffs land on the caller's\n *                                    filesystem with no cross-sandbox boundary.\n *   TANGLE_FLEET_EXCLUDE_MACHINES    optional — comma-separated machine ids to\n *                                    skip during fleet-mode round-robin\n *                                    (typically the coordinator machine this\n *                                    MCP server is running on).\n *   MCP_MAX_CONCURRENT_SANDBOXES     default 4 — kernel maxConcurrency cap\n *   MCP_CODER_FANOUT_HARNESSES       comma-separated harness ids to use for variants > 1\n *   MCP_DISABLE_CODER                set to `1` to omit `delegate_code`\n *   MCP_DISABLE_RESEARCHER           set to `1` to omit `delegate_research` even when peer is present\n */\n\nimport type { LoopSandboxClient } from '../loops'\nimport { runLoop } from '../loops'\nimport { detectExecutor } from './bin-helpers'\nimport { createDefaultCoderDelegate, type ResearcherDelegate } from './delegates'\nimport type { DelegationExecutor } from './executor'\nimport { createMcpServer } from './server'\nimport type { ResearchOutputShape } from './types'\n\nasync function main(): Promise<void> {\n  const fanoutHarnesses = parseHarnesses(process.env.MCP_CODER_FANOUT_HARNESSES)\n  const maxConcurrency = parseConcurrency(process.env.MCP_MAX_CONCURRENT_SANDBOXES)\n  const wantCoder = !process.env.MCP_DISABLE_CODER\n  const wantResearcher = !process.env.MCP_DISABLE_RESEARCHER\n  const fleetId = parseFleetId(process.env.TANGLE_FLEET_ID)\n\n  // Skip the sandbox client load entirely when no profile delegate needs it —\n  // the feedback + status + history tools are queue-bound and require no\n  // sandbox. Useful for tooling that mounts the MCP server purely for\n  // self-introspection.\n  const needsSandbox = wantCoder || wantResearcher\n  let sandboxClient: LoopSandboxClient | undefined\n  let executor: DelegationExecutor | undefined\n  if (needsSandbox) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    // Fleet mode against a diagnostic stub is meaningless — the stub can't\n    // resolve a real fleet handle. Refuse rather than silently degrading,\n    // otherwise a fleet-mounted MCP would behave differently than configured.\n    if (fleetId && !apiKey) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_FLEET_ID was set but TANGLE_API_KEY is missing; cannot resolve fleet handle. Provide an api key or unset TANGLE_FLEET_ID.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n    executor = await detectExecutor({ sandboxClient })\n    if (fleetId) {\n      process.stderr.write(`agent-runtime-mcp: fleet-aware delegation: fleetId=${fleetId}\\n`)\n    }\n    process.stderr.write(`agent-runtime-mcp: delegation placement → ${executor.describe()}\\n`)\n  }\n\n  const coderDelegate =\n    wantCoder && executor\n      ? createDefaultCoderDelegate({\n          executor,\n          fanoutHarnesses,\n          maxConcurrency,\n        })\n      : undefined\n\n  const researcherDelegate =\n    wantResearcher && executor\n      ? await loadResearcherDelegate(executor.client, maxConcurrency)\n      : undefined\n\n  const server = createMcpServer({ coderDelegate, researcherDelegate })\n\n  process.on('SIGINT', () => {\n    server.stop()\n    process.exit(0)\n  })\n  process.on('SIGTERM', () => {\n    server.stop()\n    process.exit(0)\n  })\n\n  await server.serve()\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<LoopSandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // Coder + researcher delegations require a real client; the stub fails loud\n  // at create() so the agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; coder/researcher delegations are disabled in diagnostic mode. Set TANGLE_API_KEY or use MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to remove the unsupported tools from the tool list.',\n        )\n      },\n    } satisfies LoopSandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => LoopSandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  const baseUrl = process.env.SANDBOX_BASE_URL\n  return new SandboxCtor({\n    apiKey,\n    ...(baseUrl ? { baseUrl } : {}),\n  })\n}\n\ninterface ResearcherProfilePreset {\n  agentRunSpec: Parameters<typeof runLoop>[0]['agentRun'] extends infer T ? NonNullable<T> : never\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n}\n\ninterface ResearcherFanoutPreset {\n  agentRuns: NonNullable<Parameters<typeof runLoop>[0]['agentRuns']>\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n  driver: Parameters<typeof runLoop>[0]['driver']\n}\n\nasync function loadResearcherDelegate(\n  sandboxClient: LoopSandboxClient,\n  maxConcurrency: number,\n): Promise<ResearcherDelegate | undefined> {\n  // Optional peer — when `@tangle-network/agent-knowledge` isn't installed,\n  // we silently omit the researcher tool from the advertisement. The\n  // dynamic-import path is resolved at runtime; TypeScript cannot see the\n  // peer, so we type the module structurally rather than via its own\n  // declaration file.\n  const profilesSpecifier = '@tangle-network/agent-knowledge/profiles'\n  const mod = await import(profilesSpecifier).catch(() => undefined)\n  if (!mod) return undefined\n  type SingleFactory = (opts: { task: unknown }) => ResearcherProfilePreset\n  type FanoutFactory = (opts: { task: unknown }) => ResearcherFanoutPreset\n  const fanoutFactory = (mod as { multiHarnessResearcherFanout?: FanoutFactory })\n    .multiHarnessResearcherFanout\n  const singleFactory = (mod as { researcherProfile?: SingleFactory }).researcherProfile\n  if (!fanoutFactory || !singleFactory) return undefined\n\n  return async (args, ctx) => {\n    const task = {\n      question: args.question,\n      knowledgeNamespace: args.namespace,\n      scope: args.scope,\n      sources: args.sources,\n      recencyWindow: args.config?.recencyWindow\n        ? {\n            since: args.config.recencyWindow.since\n              ? new Date(args.config.recencyWindow.since)\n              : undefined,\n            until: args.config.recencyWindow.until\n              ? new Date(args.config.recencyWindow.until)\n              : undefined,\n          }\n        : undefined,\n      maxItems: args.config?.maxItems,\n      minConfidence: args.config?.minConfidence,\n    }\n    const variants = Math.max(1, Math.trunc(args.variants ?? 1))\n    ctx.report({ iteration: 0, phase: 'starting' })\n    if (variants <= 1) {\n      const preset = singleFactory({ task })\n      const result = await runLoop({\n        driver: {\n          name: 'mcp-researcher-single',\n          async plan(t, history) {\n            return history.length === 0 ? [t] : []\n          },\n          decide(history) {\n            return history.length > 0 ? 'pick-winner' : 'fail'\n          },\n        },\n        agentRun: preset.agentRunSpec,\n        output: preset.output,\n        validator: preset.validator,\n        task,\n        ctx: { sandboxClient, signal: ctx.signal },\n        maxIterations: 1,\n        maxConcurrency,\n      })\n      const output = result.winner?.output\n      if (!output) throw new Error('researcher delegate produced no winner')\n      ctx.report({ iteration: 1, phase: 'completed' })\n      return output as ResearchOutputShape\n    }\n    const fanout = fanoutFactory({ task })\n    const result = await runLoop({\n      driver: fanout.driver,\n      agentRuns: fanout.agentRuns.slice(0, variants),\n      output: fanout.output,\n      validator: fanout.validator,\n      task,\n      ctx: { sandboxClient, signal: ctx.signal },\n      maxIterations: variants,\n      maxConcurrency: Math.min(maxConcurrency, variants),\n    })\n    const output = result.winner?.output\n    if (!output) throw new Error('researcher delegate fanout produced no winner')\n    ctx.report({ iteration: result.iterations.length, phase: 'completed' })\n    return output as ResearchOutputShape\n  }\n}\n\nfunction parseHarnesses(raw: string | undefined): string[] | undefined {\n  if (!raw) return undefined\n  const list = raw\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n  return list.length > 0 ? list : undefined\n}\n\nfunction parseFleetId(raw: string | undefined): string | undefined {\n  if (typeof raw !== 'string') return undefined\n  const trimmed = raw.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\nfunction parseConcurrency(raw: string | undefined): number {\n  if (!raw) return 4\n  const n = Number(raw)\n  if (!Number.isFinite(n) || n < 1) return 4\n  return Math.min(Math.trunc(n), 32)\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;AAuCA,eAAe,OAAsB;AACnC,QAAM,kBAAkB,eAAe,QAAQ,IAAI,0BAA0B;AAC7E,QAAM,iBAAiB,iBAAiB,QAAQ,IAAI,4BAA4B;AAChF,QAAM,YAAY,CAAC,QAAQ,IAAI;AAC/B,QAAM,iBAAiB,CAAC,QAAQ,IAAI;AACpC,QAAM,UAAU,aAAa,QAAQ,IAAI,eAAe;AAMxD,QAAM,eAAe,aAAa;AAClC,MAAI;AACJ,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAIA,QAAI,WAAW,CAAC,QAAQ;AACtB,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAC9C,eAAW,MAAM,eAAe,EAAE,cAAc,CAAC;AACjD,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM,sDAAsD,OAAO;AAAA,CAAI;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,kDAA6C,SAAS,SAAS,CAAC;AAAA,CAAI;AAAA,EAC3F;AAEA,QAAM,gBACJ,aAAa,WACT,2BAA2B;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,IACD;AAEN,QAAM,qBACJ,kBAAkB,WACd,MAAM,uBAAuB,SAAS,QAAQ,cAAc,IAC5D;AAEN,QAAM,SAAS,gBAAgB,EAAE,eAAe,mBAAmB,CAAC;AAEpE,UAAQ,GAAG,UAAU,MAAM;AACzB,WAAO,KAAK;AACZ,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,UAAQ,GAAG,WAAW,MAAM;AAC1B,WAAO,KAAK;AACZ,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AAED,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,kBAAkB,QAAwD;AAKvF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAAiE;AACtF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,UAAU,QAAQ,IAAI;AAC5B,SAAO,IAAI,YAAY;AAAA,IACrB;AAAA,IACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AACH;AAeA,eAAe,uBACb,eACA,gBACyC;AAMzC,QAAM,oBAAoB;AAC1B,QAAM,MAAM,MAAM,OAAO,mBAAmB,MAAM,MAAM,MAAS;AACjE,MAAI,CAAC,IAAK,QAAO;AAGjB,QAAM,gBAAiB,IACpB;AACH,QAAM,gBAAiB,IAA8C;AACrE,MAAI,CAAC,iBAAiB,CAAC,cAAe,QAAO;AAE7C,SAAO,OAAO,MAAM,QAAQ;AAC1B,UAAM,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,oBAAoB,KAAK;AAAA,MACzB,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,eAAe,KAAK,QAAQ,gBACxB;AAAA,QACE,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,QACJ,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,MACN,IACA;AAAA,MACJ,UAAU,KAAK,QAAQ;AAAA,MACvB,eAAe,KAAK,QAAQ;AAAA,IAC9B;AACA,UAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC,CAAC;AAC3D,QAAI,OAAO,EAAE,WAAW,GAAG,OAAO,WAAW,CAAC;AAC9C,QAAI,YAAY,GAAG;AACjB,YAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,YAAMA,UAAS,MAAM,QAAQ;AAAA,QAC3B,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM,KAAK,GAAG,SAAS;AACrB,mBAAO,QAAQ,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC;AAAA,UACvC;AAAA,UACA,OAAO,SAAS;AACd,mBAAO,QAAQ,SAAS,IAAI,gBAAgB;AAAA,UAC9C;AAAA,QACF;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,WAAW,OAAO;AAAA,QAClB;AAAA,QACA,KAAK,EAAE,eAAe,QAAQ,IAAI,OAAO;AAAA,QACzC,eAAe;AAAA,QACf;AAAA,MACF,CAAC;AACD,YAAMC,UAASD,QAAO,QAAQ;AAC9B,UAAI,CAACC,QAAQ,OAAM,IAAI,MAAM,wCAAwC;AACrE,UAAI,OAAO,EAAE,WAAW,GAAG,OAAO,YAAY,CAAC;AAC/C,aAAOA;AAAA,IACT;AACA,UAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO,UAAU,MAAM,GAAG,QAAQ;AAAA,MAC7C,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,KAAK,EAAE,eAAe,QAAQ,IAAI,OAAO;AAAA,MACzC,eAAe;AAAA,MACf,gBAAgB,KAAK,IAAI,gBAAgB,QAAQ;AAAA,IACnD,CAAC;AACD,UAAM,SAAS,OAAO,QAAQ;AAC9B,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+CAA+C;AAC5E,QAAI,OAAO,EAAE,WAAW,OAAO,WAAW,QAAQ,OAAO,YAAY,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,KAA+C;AACrE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,IACV,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACjB,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,aAAa,KAA6C;AACjE,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,KAAK;AACzB,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,iBAAiB,KAAiC;AACzD,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,IAAI,KAAK,MAAM,CAAC,GAAG,EAAE;AACnC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["result","output"]}

package/dist/mcp/index.d.ts

@@ -1,100 +1,14 @@
-import { L as LoopSandboxClient, j as LoopSandboxPlacement, m as LoopTraceEmitter } from '../types-DrXVR2Fu.js';
-import { SandboxInstance } from '@tangle-network/sandbox';
-import { CoderOutput } from '../profiles.js';
+import { L as LoopSandboxClient, j as LoopSandboxPlacement, m as LoopTraceEmitter } from '../types-CmTjKLyB.js';
+import { F as FleetHandle, D as DelegationExecutor, a as DelegateFeedbackArgs, b as DelegationFeedbackSnapshot, c as DelegationProfile, d as DelegateCodeArgs, e as DelegateResearchArgs, f as DelegationStatus, g as DelegationProgress, h as DelegationResultPayload, i as DelegationError, j as DelegationStatusResult, k as DelegationHistoryArgs, l as DelegationHistoryEntry, C as CoderDelegate, R as ResearcherDelegate, m as DelegateCodeResult, n as DelegateFeedbackResult, o as ResearchSource, p as DelegateResearchResult, q as DelegationHistoryResult, r as DelegationStatusArgs, O as OtelExporter } from '../otel-export-DgFMwsVy.js';
+export { s as CoderReview, t as CoderReviewer, u as CoderWinnerSelection, v as CreateDefaultCoderDelegateOptions, w as DelegateCodeConfig, x as DelegateResearchConfig, y as DelegateRunCtx, z as FeedbackRating, A as FeedbackRefersTo, B as FleetWorkspaceExecutorOptions, E as ResearchOutputShape, S as SiblingSandboxExecutorOptions, G as createDefaultCoderDelegate, H as createFleetWorkspaceExecutor, I as createSiblingSandboxExecutor, J as mcpToolsForRuntimeMcp, K as mcpToolsForRuntimeMcpSubset } from '../otel-export-DgFMwsVy.js';
 import { L as LocalHarness, r as runLocalHarness } from '../local-harness-KrdFTY5R.js';
 export { a as LocalHarnessResult, R as RunLocalHarnessOptions } from '../local-harness-KrdFTY5R.js';
-import { O as OtelExporter } from '../otel-export-xgf4J6bo.js';
-export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from '../otel-export-xgf4J6bo.js';
 import '@tangle-network/agent-eval';
-import '../runtime-run-B8VIiOhI.js';
+import '@tangle-network/sandbox';
 import '../types-CsCCryln.js';
+import '../profiles.js';
 import 'node:child_process';
 
-/**
- * @experimental
- *
- * Delegation executors — the layer between MCP delegates and the sandbox
- * substrate. Each executor exposes a {@link LoopSandboxClient} the kernel
- * consumes plus a placement tag so the trace pipeline can correlate workers
- * with their physical placement.
- *
- * Two implementations ship in-box:
- *
- * - {@link createSiblingSandboxExecutor} — every delegation spawns a fresh
- *   sandbox sibling to the caller. Default when the MCP server runs as a
- *   standalone CLI mounted outside a fleet.
- *
- * - {@link createFleetWorkspaceExecutor} — delegations dispatch onto machines
- *   in the caller's existing fleet so worker diffs land directly on the
- *   caller's filesystem (the fleet's shared workspace). Selected when the
- *   parent sandbox passes `TANGLE_FLEET_ID` into the MCP server's env.
- */
-
-/** @experimental */
-interface DelegationExecutor {
-    /** Sandbox client the kernel calls. Returned with `describePlacement` set. */
-    readonly client: LoopSandboxClient;
-    /** Best-effort one-liner used in stderr boot logs and diagnostics. */
-    describe(): string;
-}
-/** @experimental */
-interface SiblingSandboxExecutorOptions {
-    client: LoopSandboxClient;
-}
-/**
- * Wrap a raw sandbox SDK client so the kernel emits
- * `loop.iteration.dispatch` events with `{ placement: 'sibling', sandboxId }`.
- *
- * The returned client `.create()` delegates to the underlying client; the
- * only added behavior is a `describePlacement` tag the kernel reads.
- *
- * @experimental
- */
-declare function createSiblingSandboxExecutor(options: SiblingSandboxExecutorOptions): DelegationExecutor;
-/**
- * Minimal `SandboxFleet` surface the fleet executor calls. Declared
- * structurally so tests can pass an in-memory stub without instantiating the
- * sandbox SDK.
- *
- * @experimental
- */
-interface FleetHandle {
-    readonly fleetId: string;
-    /** Machine ids in dispatch-eligible order. The executor round-robins. */
-    readonly ids: ReadonlyArray<string>;
-    /** Resolve a machine id to its `SandboxInstance` — that machine is mounted
-     * on the fleet's shared workspace, so any diff the worker writes lands on
-     * every other fleet machine's filesystem too. */
-    sandbox(machineId: string): Promise<SandboxInstance>;
-}
-/** @experimental */
-interface FleetWorkspaceExecutorOptions {
-    fleet: FleetHandle;
-    /**
-     * Override the machine-selection policy. Default = round-robin across
-     * `fleet.ids`, skipping the optional `excludeMachineIds` set (typically the
-     * coordinator machine the MCP server is running on).
-     */
-    selectMachine?: (call: {
-        callIndex: number;
-        ids: ReadonlyArray<string>;
-    }) => string;
-    /**
-     * Machine ids to skip during default round-robin. Set to the caller's own
-     * machineId so workers don't compete with the orchestrator on the same VM.
-     */
-    excludeMachineIds?: ReadonlyArray<string>;
-}
-/**
- * Build an executor that resolves each delegated iteration to an existing
- * machine in `fleet`. The fleet's shared-workspace policy means the worker
- * machine sees the caller's filesystem — diffs land in-place with no
- * cross-sandbox copy step.
- *
- * @experimental
- */
-declare function createFleetWorkspaceExecutor(options: FleetWorkspaceExecutorOptions): DelegationExecutor;
-
 /**
  * @experimental
  *
@@ -131,242 +45,6 @@ interface DetectExecutorArgs {
  */
 declare function detectExecutor(args: DetectExecutorArgs): Promise<DelegationExecutor>;
 
-/**
- * @experimental
- *
- * MCP delegation tool surface — the typed inputs/outputs the product agent
- * sees over the wire. These types are the contract; the JSON schemas under
- * `tools/*` mirror them for the MCP `tools/list` advertisement.
- *
- * Async semantics: `delegate_code` + `delegate_research` return a `taskId`
- * immediately. The product agent polls `delegation_status` until the task
- * transitions to `completed` | `failed` | `cancelled`. `delegate_feedback`
- * + `delegation_history` are synchronous reads / writes against the local
- * task queue + feedback store.
- */
-
-/** @experimental */
-type DelegationProfile = 'coder' | 'researcher';
-/** @experimental */
-type DelegationStatus = 'pending' | 'running' | 'completed' | 'failed' | 'cancelled';
-/**
- * Minimal `CoderTask` overrides exposed over the MCP wire. The full
- * `CoderTask` carries fields the kernel synthesizes from `goal` +
- * `repoRoot` — the agent only edits the few that materially gate
- * validator behavior.
- *
- * @experimental
- */
-interface DelegateCodeConfig {
-    testCmd?: string;
-    typecheckCmd?: string;
-    forbiddenPaths?: string[];
-    maxDiffLines?: number;
-}
-/** @experimental */
-interface DelegateCodeArgs {
-    /** Natural-language description of what the coder must accomplish. */
-    goal: string;
-    /** Absolute path inside the sandbox where the repo lives. */
-    repoRoot: string;
-    /** Optional free-form context the agent surfaces in the prompt prelude. */
-    contextHint?: string;
-    /**
-     * When > 1, dispatches `multiHarnessCoderFanout` across N harnesses
-     * (claude-code, codex, opencode-glm) and picks the highest-scoring
-     * passing patch. Default 1.
-     */
-    variants?: number;
-    /** Validator + prompt overrides the agent knows for this repo. */
-    config?: DelegateCodeConfig;
-    /** Multi-tenant scope (customer-id, workspace-id). */
-    namespace?: string;
-}
-/** @experimental */
-interface DelegateCodeResult {
-    taskId: string;
-    /** Best-effort hint — coder loops can take minutes-to-hours. */
-    estimatedDurationMs?: number;
-}
-/** @experimental */
-type ResearchSource = 'web' | 'corpus' | 'twitter' | 'github' | 'docs';
-/** @experimental */
-interface DelegateResearchConfig {
-    recencyWindow?: {
-        since?: string;
-        until?: string;
-    };
-    maxItems?: number;
-    minConfidence?: number;
-}
-/** @experimental */
-interface DelegateResearchArgs {
-    question: string;
-    namespace: string;
-    scope?: string;
-    sources?: ResearchSource[];
-    variants?: number;
-    config?: DelegateResearchConfig;
-}
-/** @experimental */
-interface DelegateResearchResult {
-    taskId: string;
-    estimatedDurationMs?: number;
-}
-/** @experimental */
-interface FeedbackRefersTo {
-    kind: 'delegation' | 'artifact' | 'outcome';
-    /** For `'delegation'`, this is the taskId. */
-    ref: string;
-}
-/** @experimental */
-interface FeedbackRating {
-    /** [0, 1]. */
-    score: number;
-    label?: 'good' | 'bad' | 'neutral' | 'mixed';
-    notes: string;
-}
-/** @experimental */
-interface DelegateFeedbackArgs {
-    refersTo: FeedbackRefersTo;
-    rating: FeedbackRating;
-    by: 'agent' | 'user' | 'downstream-judge';
-    /** ISO timestamp; defaults to server clock when omitted. */
-    capturedAt?: string;
-    namespace?: string;
-}
-/** @experimental */
-interface DelegateFeedbackResult {
-    recorded: true;
-    id: string;
-}
-/** @experimental */
-interface DelegationStatusArgs {
-    taskId: string;
-}
-/** @experimental */
-interface DelegationProgress {
-    iteration: number;
-    phase: string;
-}
-/** @experimental */
-interface DelegationError {
-    message: string;
-    kind: string;
-}
-/**
- * Polymorphic `result` field: `CoderOutput` when the underlying profile
- * is `'coder'`, a structurally-typed research output when `'researcher'`.
- * The MCP wire carries it as JSON either way.
- *
- * @experimental
- */
-type DelegationResultPayload = {
-    profile: 'coder';
-    output: CoderOutput;
-} | {
-    profile: 'researcher';
-    output: ResearchOutputShape;
-};
-/**
- * Loose shape of a research output over the wire — the substrate cannot
- * import the `ResearchOutput` type from agent-knowledge without inducing
- * a dependency cycle, so the MCP layer treats it structurally.
- *
- * @experimental
- */
-interface ResearchOutputShape {
-    items: unknown[];
-    citations: unknown[];
-    proposedWrites: unknown[];
-    gaps?: string[];
-    notes?: string;
-    [key: string]: unknown;
-}
-/** @experimental */
-interface DelegationStatusResult {
-    taskId: string;
-    profile: DelegationProfile;
-    status: DelegationStatus;
-    progress?: DelegationProgress;
-    result?: DelegationResultPayload;
-    error?: DelegationError;
-    costUsd?: number;
-    startedAt: string;
-    completedAt?: string;
-}
-/** @experimental */
-interface DelegationHistoryArgs {
-    namespace?: string;
-    profile?: DelegationProfile;
-    /** ISO date — only delegations started at-or-after `since` are returned. */
-    since?: string;
-    /** Default 50. Hard cap 500. */
-    limit?: number;
-}
-/** @experimental */
-interface DelegationFeedbackSnapshot {
-    id: string;
-    score: number;
-    label?: FeedbackRating['label'];
-    by: DelegateFeedbackArgs['by'];
-    notes: string;
-    capturedAt: string;
-}
-/** @experimental */
-interface DelegationHistoryEntry {
-    taskId: string;
-    profile: DelegationProfile;
-    namespace?: string;
-    args: DelegateCodeArgs | DelegateResearchArgs;
-    status: DelegationStatus;
-    feedback?: DelegationFeedbackSnapshot[];
-    costUsd?: number;
-    startedAt: string;
-    completedAt?: string;
-}
-/** @experimental */
-interface DelegationHistoryResult {
-    delegations: DelegationHistoryEntry[];
-}
-
-/** @experimental */
-interface DelegateRunCtx {
-    signal: AbortSignal;
-    report(progress: DelegationProgress): void;
-}
-/** @experimental */
-type CoderDelegate = (args: DelegateCodeArgs, ctx: DelegateRunCtx) => Promise<CoderOutput>;
-/** @experimental */
-type ResearcherDelegate = (args: DelegateResearchArgs, ctx: DelegateRunCtx) => Promise<ResearchOutputShape>;
-/** @experimental */
-interface CreateDefaultCoderDelegateOptions {
-    /**
-     * Execution placement. Pass a {@link DelegationExecutor} (sibling or fleet)
-     * to control where worker iterations land. `sandboxClient` is a
-     * convenience shorthand that wraps the client in a sibling executor — pass
-     * one or the other, not both.
-     */
-    executor?: DelegationExecutor;
-    /**
-     * Convenience shorthand for sibling placement. Equivalent to
-     * `executor: createSiblingSandboxExecutor({ client: sandboxClient })`.
-     */
-    sandboxClient?: LoopSandboxClient;
-    /** Default `['claude-code', 'codex', 'opencode/zai-coding-plan/glm-5.1']` when variants > 1. */
-    fanoutHarnesses?: string[];
-    /** Hard cap on the kernel's per-batch concurrency. Default 4. */
-    maxConcurrency?: number;
-}
-/**
- * Build a coder delegate that drives `runLoop` against the project's
- * sandbox client + coder profile. When `args.variants > 1` it switches
- * to the multi-harness fanout topology.
- *
- * @experimental
- */
-declare function createDefaultCoderDelegate(options: CreateDefaultCoderDelegateOptions): CoderDelegate;
-
 /**
  * @experimental
  *
@@ -607,6 +285,81 @@ interface InProcessExecutorDescribePlacement extends LoopSandboxPlacement {
  */
 declare function createInProcessExecutor(options: InProcessExecutorOptions): DelegationExecutor;
 
+/**
+ * @experimental
+ *
+ * `createKbGate` — the valid-only knowledge-base growth gate, distilled from
+ * physim's KB-research subsystem. A research-in-a-loop delegate (or any KB
+ * writer) runs candidate facts through this before persisting, so the KB grows
+ * with ONLY grounded facts — hallucinated, unsourced, or laundered claims are
+ * vetoed at the gate.
+ *
+ * Fail-closed by construction: every judge must `accept`; the FIRST veto wins
+ * and the fact is rejected. The non-negotiable floor (always on, can't be
+ * disabled) is the **passage-present guard** — a fact's `verbatimPassage` MUST
+ * literally appear in its `sourceText`. That single check kills the dominant
+ * failure mode (a confident claim decoupled from any real source).
+ *
+ * Pure + dependency-free: it operates on fact candidates, not on a store, so it
+ * composes with `@tangle-network/agent-knowledge` or any persistence layer
+ * without importing it. The remediation policy (correct-on-veto vs
+ * escalate-as-unverified) is the caller's — this returns the verdict; it never
+ * drops a fact silently.
+ */
+/** @experimental A fact proposed for the KB, with its grounding. */
+interface FactCandidate {
+    /** The atomic claim text. */
+    claim: string;
+    /** Optional extracted value (number or string) the claim asserts. */
+    value?: string | number;
+    /** Verbatim span lifted from the source that backs the claim. */
+    verbatimPassage: string;
+    /** The raw source text the passage must be grounded in. */
+    sourceText: string;
+    /** Where the fact claims to come from — checked for circular/self citations. */
+    citation?: string;
+}
+/** @experimental */
+interface FactJudgeVerdict {
+    accept: boolean;
+    reason?: string;
+}
+/** @experimental A pluggable fact validator. Throw is NOT allowed — return a
+ *  verdict; a thrown judge is a programmer error, not a veto. */
+interface FactJudge {
+    name: string;
+    judge(candidate: FactCandidate): FactJudgeVerdict | Promise<FactJudgeVerdict>;
+}
+/** @experimental */
+interface KbGateResult {
+    accepted: boolean;
+    /** Name of the judge that vetoed; undefined when accepted. */
+    vetoedBy?: string;
+    reason?: string;
+}
+/** @experimental */
+interface CreateKbGateOptions {
+    /** Extra judges appended after the built-in floor (e.g. an LLM judge). */
+    judges?: FactJudge[];
+    /** Minimum verbatim-passage length. Default 12 — kills empty/stub passages. */
+    minPassageChars?: number;
+    /**
+     * Citation tokens that denote a SELF-generated artifact (e.g. `'spec'`,
+     * `'cad_params'`, `'requirements'`). A citation naming one is circular
+     * (laundering) — the fact cites a derived artifact, not a real source.
+     * Default `[]` (no circular check unless the consumer declares its kinds).
+     */
+    selfArtifactKinds?: string[];
+}
+/**
+ * @experimental
+ *
+ * Build a fail-closed KB gate. The returned function runs the built-in floor
+ * (passage-non-empty → passage-present → value-in-passage → no-circular-citation)
+ * then any consumer judges, returning on the first veto.
+ */
+declare function createKbGate(options?: CreateKbGateOptions): (candidate: FactCandidate) => Promise<KbGateResult>;
+
 /**
  * @experimental
  *
@@ -1194,4 +947,4 @@ declare function createPropagatingTraceEmitter(ctx: TraceContext): {
  */
 declare function traceContextToEnv(ctx: TraceContext): Record<string, string>;
 
-export { type CoderDelegate, type CreateDefaultCoderDelegateOptions, type CreateWorktreeOptions, DELEGATE_CODE_DESCRIPTION, DELEGATE_CODE_INPUT_SCHEMA, DELEGATE_CODE_TOOL_NAME, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_RESEARCH_DESCRIPTION, DELEGATE_RESEARCH_INPUT_SCHEMA, DELEGATE_RESEARCH_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, type DelegateCodeArgs, type DelegateCodeConfig, type DelegateCodeResult, type DelegateFeedbackArgs, type DelegateFeedbackResult, type DelegateResearchArgs, type DelegateResearchConfig, type DelegateResearchResult, type DelegateRunCtx, type DelegationError, type DelegationExecutor, type DelegationFeedbackSnapshot, type DelegationHistoryArgs, type DelegationHistoryEntry, type DelegationHistoryResult, type DelegationProfile, type DelegationProgress, type DelegationRecord, type DelegationResultPayload, type DelegationStatus, type DelegationStatusArgs, type DelegationStatusResult, DelegationTaskQueue, type DelegationTaskQueueOptions, type DetectExecutorArgs, type DiffOptions, type DiffResult, type FeedbackEvent, type FeedbackRating, type FeedbackRefersTo, type FeedbackStore, type FleetHandle, type FleetWorkspaceExecutorOptions, type GitRunner, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, LocalHarness, type McpServer, type McpServerOptions, type McpToolDescriptor, type McpTransport, type RemoveWorktreeOptions, type ResearchOutputShape, type ResearchSource, type ResearcherDelegate, type SiblingSandboxExecutorOptions, type SubmitInput, type SubmitOutput, type TraceContext, type WorktreeHandle, captureWorktreeDiff, createDefaultCoderDelegate, createDelegateCodeHandler, createDelegateFeedbackHandler, createDelegateResearchHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createFleetWorkspaceExecutor, createInProcessExecutor, createInProcessTransport, createMcpServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createWorktree, detectExecutor, eventToSnapshot, hashIdempotencyInput, readTraceContextFromEnv, removeWorktree, runLocalHarness, traceContextToEnv, validateDelegateCodeArgs, validateDelegateFeedbackArgs, validateDelegateResearchArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
+export { CoderDelegate, type CreateKbGateOptions, type CreateWorktreeOptions, DELEGATE_CODE_DESCRIPTION, DELEGATE_CODE_INPUT_SCHEMA, DELEGATE_CODE_TOOL_NAME, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_RESEARCH_DESCRIPTION, DELEGATE_RESEARCH_INPUT_SCHEMA, DELEGATE_RESEARCH_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DelegateCodeArgs, DelegateCodeResult, DelegateFeedbackArgs, DelegateFeedbackResult, DelegateResearchArgs, DelegateResearchResult, DelegationError, DelegationExecutor, DelegationFeedbackSnapshot, DelegationHistoryArgs, DelegationHistoryEntry, DelegationHistoryResult, DelegationProfile, DelegationProgress, type DelegationRecord, DelegationResultPayload, DelegationStatus, DelegationStatusArgs, DelegationStatusResult, DelegationTaskQueue, type DelegationTaskQueueOptions, type DetectExecutorArgs, type DiffOptions, type DiffResult, type FactCandidate, type FactJudge, type FactJudgeVerdict, type FeedbackEvent, type FeedbackStore, FleetHandle, type GitRunner, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, type KbGateResult, LocalHarness, type McpServer, type McpServerOptions, type McpToolDescriptor, type McpTransport, type RemoveWorktreeOptions, ResearchSource, ResearcherDelegate, type SubmitInput, type SubmitOutput, type TraceContext, type WorktreeHandle, captureWorktreeDiff, createDelegateCodeHandler, createDelegateFeedbackHandler, createDelegateResearchHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createInProcessExecutor, createInProcessTransport, createKbGate, createMcpServer, createPropagatingTraceEmitter, createWorktree, detectExecutor, eventToSnapshot, hashIdempotencyInput, readTraceContextFromEnv, removeWorktree, runLocalHarness, traceContextToEnv, validateDelegateCodeArgs, validateDelegateFeedbackArgs, validateDelegateResearchArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };

package/dist/mcp/index.js

@@ -1,21 +1,18 @@
 import {
   captureWorktreeDiff,
-  createDefaultCoderDelegate,
-  createFleetWorkspaceExecutor,
   createInProcessExecutor,
   createInProcessTransport,
   createMcpServer,
-  createSiblingSandboxExecutor,
   createWorktree,
   detectExecutor,
   removeWorktree
-} from "../chunk-TT3IHIQT.js";
+} from "../chunk-M65QJD35.js";
 import {
   buildLoopOtelSpans,
   createOtelExporter,
   mcpToolsForRuntimeMcp,
   mcpToolsForRuntimeMcpSubset
-} from "../chunk-7ZECSZ3C.js";
+} from "../chunk-T3GJBKHA.js";
 import {
   DELEGATE_CODE_DESCRIPTION,
   DELEGATE_CODE_INPUT_SCHEMA,
@@ -34,11 +31,14 @@ import {
   DELEGATION_STATUS_TOOL_NAME,
   DelegationTaskQueue,
   InMemoryFeedbackStore,
+  createDefaultCoderDelegate,
   createDelegateCodeHandler,
   createDelegateFeedbackHandler,
   createDelegateResearchHandler,
   createDelegationHistoryHandler,
   createDelegationStatusHandler,
+  createFleetWorkspaceExecutor,
+  createSiblingSandboxExecutor,
   eventToSnapshot,
   hashIdempotencyInput,
   validateDelegateCodeArgs,
@@ -46,16 +46,72 @@ import {
   validateDelegateResearchArgs,
   validateDelegationHistoryArgs,
   validateDelegationStatusArgs
-} from "../chunk-HSX6PFZR.js";
+} from "../chunk-V6GURW4W.js";
 import {
   runLocalHarness
 } from "../chunk-GLR25NG7.js";
 import "../chunk-7JBDJQLO.js";
-import "../chunk-5QVVET72.js";
+import "../chunk-3HMHSN22.js";
 import "../chunk-PY6NMZYX.js";
 import "../chunk-SQSCRJ7U.js";
 import "../chunk-DGUM43GV.js";
 
+// src/mcp/kb-gate.ts
+var norm = (s) => s.toLowerCase().replace(/\s+/g, " ").trim();
+function valueAppears(value, passageNorm) {
+  if (passageNorm.includes(norm(String(value)))) return true;
+  if (typeof value !== "number" || !Number.isFinite(value)) return false;
+  const forms = [value.toLocaleString("en-US")];
+  if (Math.abs(value) >= 1e9) forms.push(`${trimZero(value / 1e9)} billion`);
+  if (Math.abs(value) >= 1e6) forms.push(`${trimZero(value / 1e6)} million`);
+  return forms.some((f) => passageNorm.includes(norm(f)));
+}
+function trimZero(n) {
+  return Number.isInteger(n) ? String(n) : String(Number(n.toFixed(2)));
+}
+function builtinJudges(minPassageChars, selfArtifactKinds) {
+  const kinds = selfArtifactKinds.map((k) => k.toLowerCase());
+  return [
+    {
+      name: "passage-non-empty",
+      judge: (c) => c.verbatimPassage.trim().length >= minPassageChars ? { accept: true } : { accept: false, reason: `passage shorter than ${minPassageChars} chars` }
+    },
+    {
+      // THE anti-hallucination floor — the passage must literally be in the source.
+      name: "passage-present",
+      judge: (c) => norm(c.sourceText).includes(norm(c.verbatimPassage)) ? { accept: true } : { accept: false, reason: "verbatim passage not found in source (unbacked fact)" }
+    },
+    {
+      name: "value-in-passage",
+      judge: (c) => c.value === void 0 || valueAppears(c.value, norm(c.verbatimPassage)) ? { accept: true } : { accept: false, reason: `value ${JSON.stringify(c.value)} not present in passage` }
+    },
+    {
+      name: "no-circular-citation",
+      judge: (c) => {
+        if (!c.citation || kinds.length === 0) return { accept: true };
+        const cite = c.citation.toLowerCase();
+        const hit = kinds.find((k) => cite.includes(k));
+        return hit ? { accept: false, reason: `circular citation to self-generated artifact "${hit}"` } : { accept: true };
+      }
+    }
+  ];
+}
+function createKbGate(options = {}) {
+  const judges = [
+    ...builtinJudges(options.minPassageChars ?? 12, options.selfArtifactKinds ?? []),
+    ...options.judges ?? []
+  ];
+  return async (candidate) => {
+    for (const j of judges) {
+      const verdict = await j.judge(candidate);
+      if (!verdict.accept) {
+        return { accepted: false, vetoedBy: j.name, reason: verdict.reason };
+      }
+    }
+    return { accepted: true };
+  };
+}
+
 // src/mcp/trace-propagation.ts
 function readTraceContextFromEnv() {
   const traceId = process.env.TRACE_ID || generateTraceId();
@@ -124,6 +180,7 @@ export {
   createFleetWorkspaceExecutor,
   createInProcessExecutor,
   createInProcessTransport,
+  createKbGate,
   createMcpServer,
   createPropagatingTraceEmitter,
   createSiblingSandboxExecutor,