@tangle-network/agent-runtime 0.45.0 → 0.47.0

package/dist/loops.js

@@ -9,11 +9,11 @@ import {
   assertTraceDerivedFindings,
   buildSteerContext,
   builtinShapes,
-  cliExecutor,
   completionAuthorizes,
   contentAddress,
   createBudgetPool,
-  createDynamicDriver,
+  createDriver,
+  createExecutor,
   createExecutorRegistry,
   createRootHandle,
   createSandboxForSpec,
@@ -28,21 +28,25 @@ import {
   equalKOnCost,
   fanout,
   flatWidenGate,
+  gitWorkspace,
+  inlineSandboxClient,
+  localShell,
   loopDispatch,
   loopUntil,
   materializeTreeView,
+  observe,
+  openSandboxRun,
   panel,
   pipeline,
   probeSandboxCapabilities,
   registerShape,
   renderAnalyses,
   renderCorpusToInstructions,
+  renderReport,
   replaySpawnTree,
   reportLoopUsage,
-  routerInlineExecutor,
   runLoop,
   runPersonified,
-  sandboxExecutor,
   sentinelCompletion,
   settledToIteration,
   spendFromUsageEvents,
@@ -50,11 +54,11 @@ import {
   trajectoryReport,
   verify,
   widen
-} from "./chunk-KEWO4KI6.js";
+} from "./chunk-72JQCHOZ.js";
 import {
   extractLlmCallEvent,
   mapSandboxEvent
-} from "./chunk-PRX45WE2.js";
+} from "./chunk-GSUO5QS6.js";
 import "./chunk-DGUM43GV.js";
 export {
   FileCorpus,
@@ -67,11 +71,11 @@ export {
   assertTraceDerivedFindings,
   buildSteerContext,
   builtinShapes,
-  cliExecutor,
   completionAuthorizes,
   contentAddress,
   createBudgetPool,
-  createDynamicDriver,
+  createDriver,
+  createExecutor,
   createExecutorRegistry,
   createRootHandle,
   createSandboxForSpec,
@@ -87,22 +91,26 @@ export {
   extractLlmCallEvent,
   fanout,
   flatWidenGate,
+  gitWorkspace,
+  inlineSandboxClient,
+  localShell,
   loopDispatch,
   loopUntil,
   mapSandboxEvent,
   materializeTreeView,
+  observe,
+  openSandboxRun,
   panel,
   pipeline,
   probeSandboxCapabilities,
   registerShape,
   renderAnalyses,
   renderCorpusToInstructions,
+  renderReport,
   replaySpawnTree,
   reportLoopUsage,
-  routerInlineExecutor,
   runLoop,
   runPersonified,
-  sandboxExecutor,
   sentinelCompletion,
   settledToIteration,
   spendFromUsageEvents,

package/dist/mcp/bin.js

@@ -4,18 +4,18 @@ import {
   createPropagatingTraceEmitter,
   detectExecutor,
   readTraceContextFromEnv
-} from "../chunk-Z2QXVBA6.js";
+} from "../chunk-T4OQQEE3.js";
 import "../chunk-WIR4HOOJ.js";
-import "../chunk-IJGS6J7X.js";
+import "../chunk-JNPK46YH.js";
 import {
   createDefaultCoderDelegate
-} from "../chunk-IJ6FGOPO.js";
-import "../chunk-QR4UUC5P.js";
+} from "../chunk-5YDS7BLC.js";
+import "../chunk-KADIJAD4.js";
 import "../chunk-GLR25NG7.js";
 import {
   runLoop
-} from "../chunk-KEWO4KI6.js";
-import "../chunk-PRX45WE2.js";
+} from "../chunk-72JQCHOZ.js";
+import "../chunk-GSUO5QS6.js";
 import "../chunk-DGUM43GV.js";
 
 // src/mcp/bin.ts

package/dist/mcp/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/bin.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * @experimental\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Spins up a server with the default coder delegate (wired against the\n * real `@tangle-network/sandbox` client) and, when the optional\n * `@tangle-network/agent-knowledge` peer is installed, a researcher\n * delegate against `multiHarnessResearcherFanout`.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   TANGLE_FLEET_ID                  optional — when set, delegations dispatch\n *                                    INTO this fleet's shared workspace instead\n *                                    of creating sibling sandboxes. Set by the\n *                                    parent sandbox when launching this MCP\n *                                    server so worker diffs land on the caller's\n *                                    filesystem with no cross-sandbox boundary.\n *   TANGLE_FLEET_EXCLUDE_MACHINES    optional — comma-separated machine ids to\n *                                    skip during fleet-mode round-robin\n *                                    (typically the coordinator machine this\n *                                    MCP server is running on).\n *   MCP_MAX_CONCURRENT_SANDBOXES     default 4 — kernel maxConcurrency cap\n *   MCP_CODER_FANOUT_HARNESSES       comma-separated harness ids to use for variants > 1\n *   MCP_DISABLE_CODER                set to `1` to omit `delegate_code`\n *   MCP_DISABLE_RESEARCHER           set to `1` to omit `delegate_research` even when peer is present\n */\n\nimport type { LoopSandboxClient, LoopTraceEmitter } from '../runtime'\nimport { runLoop } from '../runtime'\nimport { detectExecutor } from './bin-helpers'\nimport { createDefaultCoderDelegate, type ResearcherDelegate } from './delegates'\nimport type { DelegationExecutor } from './executor'\nimport { createMcpServer } from './server'\nimport { createPropagatingTraceEmitter, readTraceContextFromEnv } from './trace-propagation'\nimport type { ResearchOutputShape } from './types'\n\nasync function main(): Promise<void> {\n  const fanoutHarnesses = parseHarnesses(process.env.MCP_CODER_FANOUT_HARNESSES)\n  const maxConcurrency = parseConcurrency(process.env.MCP_MAX_CONCURRENT_SANDBOXES)\n  const wantCoder = !process.env.MCP_DISABLE_CODER\n  const wantResearcher = !process.env.MCP_DISABLE_RESEARCHER\n  const fleetId = parseFleetId(process.env.TANGLE_FLEET_ID)\n\n  // Skip the sandbox client load entirely when no profile delegate needs it —\n  // the feedback + status + history tools are queue-bound and require no\n  // sandbox. Useful for tooling that mounts the MCP server purely for\n  // self-introspection.\n  const needsSandbox = wantCoder || wantResearcher\n  let sandboxClient: LoopSandboxClient | undefined\n  let executor: DelegationExecutor | undefined\n  if (needsSandbox) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    // Fleet mode against a diagnostic stub is meaningless — the stub can't\n    // resolve a real fleet handle. Refuse rather than silently degrading,\n    // otherwise a fleet-mounted MCP would behave differently than configured.\n    if (fleetId && !apiKey) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_FLEET_ID was set but TANGLE_API_KEY is missing; cannot resolve fleet handle. Provide an api key or unset TANGLE_FLEET_ID.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n    executor = await detectExecutor({ sandboxClient })\n    if (fleetId) {\n      process.stderr.write(`agent-runtime-mcp: fleet-aware delegation: fleetId=${fleetId}\\n`)\n    }\n    process.stderr.write(`agent-runtime-mcp: delegation placement → ${executor.describe()}\\n`)\n  }\n\n  // Export delegated-loop topology spans to the OTLP / Tangle Intelligence sink\n  // when OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for\n  // correlation with the caller's trace). A cheap no-op when the endpoint is\n  // unset — the fleet forwards the env into this MCP's process to turn it on.\n  const { emitter: traceEmitter, exporter: traceExporter } = createPropagatingTraceEmitter(\n    readTraceContextFromEnv(),\n  )\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  const coderDelegate =\n    wantCoder && executor\n      ? createDefaultCoderDelegate({\n          executor,\n          fanoutHarnesses,\n          maxConcurrency,\n          traceEmitter,\n        })\n      : undefined\n\n  const researcherDelegate =\n    wantResearcher && executor\n      ? await loadResearcherDelegate(executor.client, maxConcurrency, traceEmitter)\n      : undefined\n\n  const server = createMcpServer({ coderDelegate, researcherDelegate })\n\n  const shutdown = () => {\n    server.stop()\n    void traceExporter?.shutdown().finally(() => process.exit(0))\n    if (!traceExporter) process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<LoopSandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // Coder + researcher delegations require a real client; the stub fails loud\n  // at create() so the agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; coder/researcher delegations are disabled in diagnostic mode. Set TANGLE_API_KEY or use MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to remove the unsupported tools from the tool list.',\n        )\n      },\n    } satisfies LoopSandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => LoopSandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  const baseUrl = process.env.SANDBOX_BASE_URL\n  return new SandboxCtor({\n    apiKey,\n    ...(baseUrl ? { baseUrl } : {}),\n  })\n}\n\ninterface ResearcherProfilePreset {\n  agentRunSpec: Parameters<typeof runLoop>[0]['agentRun'] extends infer T ? NonNullable<T> : never\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n}\n\ninterface ResearcherFanoutPreset {\n  agentRuns: NonNullable<Parameters<typeof runLoop>[0]['agentRuns']>\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n  driver: Parameters<typeof runLoop>[0]['driver']\n}\n\nasync function loadResearcherDelegate(\n  sandboxClient: LoopSandboxClient,\n  maxConcurrency: number,\n  traceEmitter?: LoopTraceEmitter,\n): Promise<ResearcherDelegate | undefined> {\n  // Optional peer — when `@tangle-network/agent-knowledge` isn't installed,\n  // we silently omit the researcher tool from the advertisement. The\n  // dynamic-import path is resolved at runtime; TypeScript cannot see the\n  // peer, so we type the module structurally rather than via its own\n  // declaration file.\n  const profilesSpecifier = '@tangle-network/agent-knowledge/profiles'\n  const mod = await import(profilesSpecifier).catch(() => undefined)\n  if (!mod) return undefined\n  type SingleFactory = (opts: { task: unknown }) => ResearcherProfilePreset\n  type FanoutFactory = (opts: { task: unknown }) => ResearcherFanoutPreset\n  const fanoutFactory = (mod as { multiHarnessResearcherFanout?: FanoutFactory })\n    .multiHarnessResearcherFanout\n  const singleFactory = (mod as { researcherProfile?: SingleFactory }).researcherProfile\n  if (!fanoutFactory || !singleFactory) return undefined\n\n  return async (args, ctx) => {\n    const task = {\n      question: args.question,\n      knowledgeNamespace: args.namespace,\n      scope: args.scope,\n      sources: args.sources,\n      recencyWindow: args.config?.recencyWindow\n        ? {\n            since: args.config.recencyWindow.since\n              ? new Date(args.config.recencyWindow.since)\n              : undefined,\n            until: args.config.recencyWindow.until\n              ? new Date(args.config.recencyWindow.until)\n              : undefined,\n          }\n        : undefined,\n      maxItems: args.config?.maxItems,\n      minConfidence: args.config?.minConfidence,\n    }\n    const variants = Math.max(1, Math.trunc(args.variants ?? 1))\n    ctx.report({ iteration: 0, phase: 'starting' })\n    if (variants <= 1) {\n      const preset = singleFactory({ task })\n      const result = await runLoop({\n        driver: {\n          name: 'mcp-researcher-single',\n          async plan(t, history) {\n            return history.length === 0 ? [t] : []\n          },\n          decide(history) {\n            return history.length > 0 ? 'pick-winner' : 'fail'\n          },\n        },\n        agentRun: preset.agentRunSpec,\n        output: preset.output,\n        validator: preset.validator,\n        task,\n        ctx: { sandboxClient, signal: ctx.signal, ...(traceEmitter ? { traceEmitter } : {}) },\n        maxIterations: 1,\n        maxConcurrency,\n      })\n      const output = result.winner?.output\n      if (!output) throw new Error('researcher delegate produced no winner')\n      ctx.report({ iteration: 1, phase: 'completed' })\n      return output as ResearchOutputShape\n    }\n    const fanout = fanoutFactory({ task })\n    const result = await runLoop({\n      driver: fanout.driver,\n      agentRuns: fanout.agentRuns.slice(0, variants),\n      output: fanout.output,\n      validator: fanout.validator,\n      task,\n      ctx: { sandboxClient, signal: ctx.signal, ...(traceEmitter ? { traceEmitter } : {}) },\n      maxIterations: variants,\n      maxConcurrency: Math.min(maxConcurrency, variants),\n    })\n    const output = result.winner?.output\n    if (!output) throw new Error('researcher delegate fanout produced no winner')\n    ctx.report({ iteration: result.iterations.length, phase: 'completed' })\n    return output as ResearchOutputShape\n  }\n}\n\nfunction parseHarnesses(raw: string | undefined): string[] | undefined {\n  if (!raw) return undefined\n  const list = raw\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n  return list.length > 0 ? list : undefined\n}\n\nfunction parseFleetId(raw: string | undefined): string | undefined {\n  if (typeof raw !== 'string') return undefined\n  const trimmed = raw.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\nfunction parseConcurrency(raw: string | undefined): number {\n  if (!raw) return 4\n  const n = Number(raw)\n  if (!Number.isFinite(n) || n < 1) return 4\n  return Math.min(Math.trunc(n), 32)\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwCA,eAAe,OAAsB;AACnC,QAAM,kBAAkB,eAAe,QAAQ,IAAI,0BAA0B;AAC7E,QAAM,iBAAiB,iBAAiB,QAAQ,IAAI,4BAA4B;AAChF,QAAM,YAAY,CAAC,QAAQ,IAAI;AAC/B,QAAM,iBAAiB,CAAC,QAAQ,IAAI;AACpC,QAAM,UAAU,aAAa,QAAQ,IAAI,eAAe;AAMxD,QAAM,eAAe,aAAa;AAClC,MAAI;AACJ,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAIA,QAAI,WAAW,CAAC,QAAQ;AACtB,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAC9C,eAAW,MAAM,eAAe,EAAE,cAAc,CAAC;AACjD,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM,sDAAsD,OAAO;AAAA,CAAI;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,kDAA6C,SAAS,SAAS,CAAC;AAAA,CAAI;AAAA,EAC3F;AAMA,QAAM,EAAE,SAAS,cAAc,UAAU,cAAc,IAAI;AAAA,IACzD,wBAAwB;AAAA,EAC1B;AACA,MAAI,QAAQ,IAAI,6BAA6B;AAC3C,YAAQ,OAAO;AAAA,MACb,qDAAgD,QAAQ,IAAI,2BAA2B;AAAA;AAAA,IACzF;AAAA,EACF;AAEA,QAAM,gBACJ,aAAa,WACT,2BAA2B;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,IACD;AAEN,QAAM,qBACJ,kBAAkB,WACd,MAAM,uBAAuB,SAAS,QAAQ,gBAAgB,YAAY,IAC1E;AAEN,QAAM,SAAS,gBAAgB,EAAE,eAAe,mBAAmB,CAAC;AAEpE,QAAM,WAAW,MAAM;AACrB,WAAO,KAAK;AACZ,SAAK,eAAe,SAAS,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC5D,QAAI,CAAC,cAAe,SAAQ,KAAK,CAAC;AAAA,EACpC;AACA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,kBAAkB,QAAwD;AAKvF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAAiE;AACtF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,UAAU,QAAQ,IAAI;AAC5B,SAAO,IAAI,YAAY;AAAA,IACrB;AAAA,IACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AACH;AAeA,eAAe,uBACb,eACA,gBACA,cACyC;AAMzC,QAAM,oBAAoB;AAC1B,QAAM,MAAM,MAAM,OAAO,mBAAmB,MAAM,MAAM,MAAS;AACjE,MAAI,CAAC,IAAK,QAAO;AAGjB,QAAM,gBAAiB,IACpB;AACH,QAAM,gBAAiB,IAA8C;AACrE,MAAI,CAAC,iBAAiB,CAAC,cAAe,QAAO;AAE7C,SAAO,OAAO,MAAM,QAAQ;AAC1B,UAAM,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,oBAAoB,KAAK;AAAA,MACzB,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,eAAe,KAAK,QAAQ,gBACxB;AAAA,QACE,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,QACJ,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,MACN,IACA;AAAA,MACJ,UAAU,KAAK,QAAQ;AAAA,MACvB,eAAe,KAAK,QAAQ;AAAA,IAC9B;AACA,UAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC,CAAC;AAC3D,QAAI,OAAO,EAAE,WAAW,GAAG,OAAO,WAAW,CAAC;AAC9C,QAAI,YAAY,GAAG;AACjB,YAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,YAAMA,UAAS,MAAM,QAAQ;AAAA,QAC3B,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM,KAAK,GAAG,SAAS;AACrB,mBAAO,QAAQ,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC;AAAA,UACvC;AAAA,UACA,OAAO,SAAS;AACd,mBAAO,QAAQ,SAAS,IAAI,gBAAgB;AAAA,UAC9C;AAAA,QACF;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,WAAW,OAAO;AAAA,QAClB;AAAA,QACA,KAAK,EAAE,eAAe,QAAQ,IAAI,QAAQ,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC,EAAG;AAAA,QACpF,eAAe;AAAA,QACf;AAAA,MACF,CAAC;AACD,YAAMC,UAASD,QAAO,QAAQ;AAC9B,UAAI,CAACC,QAAQ,OAAM,IAAI,MAAM,wCAAwC;AACrE,UAAI,OAAO,EAAE,WAAW,GAAG,OAAO,YAAY,CAAC;AAC/C,aAAOA;AAAA,IACT;AACA,UAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO,UAAU,MAAM,GAAG,QAAQ;AAAA,MAC7C,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,KAAK,EAAE,eAAe,QAAQ,IAAI,QAAQ,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC,EAAG;AAAA,MACpF,eAAe;AAAA,MACf,gBAAgB,KAAK,IAAI,gBAAgB,QAAQ;AAAA,IACnD,CAAC;AACD,UAAM,SAAS,OAAO,QAAQ;AAC9B,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+CAA+C;AAC5E,QAAI,OAAO,EAAE,WAAW,OAAO,WAAW,QAAQ,OAAO,YAAY,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,KAA+C;AACrE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,IACV,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACjB,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,aAAa,KAA6C;AACjE,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,KAAK;AACzB,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,iBAAiB,KAAiC;AACzD,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,IAAI,KAAK,MAAM,CAAC,GAAG,EAAE;AACnC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["result","output"]}
+{"version":3,"sources":["../../src/mcp/bin.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * @experimental\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Spins up a server with the default coder delegate (wired against the\n * real `@tangle-network/sandbox` client) and, when the optional\n * `@tangle-network/agent-knowledge` peer is installed, a researcher\n * delegate against `multiHarnessResearcherFanout`.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   TANGLE_FLEET_ID                  optional — when set, delegations dispatch\n *                                    INTO this fleet's shared workspace instead\n *                                    of creating sibling sandboxes. Set by the\n *                                    parent sandbox when launching this MCP\n *                                    server so worker diffs land on the caller's\n *                                    filesystem with no cross-sandbox boundary.\n *   TANGLE_FLEET_EXCLUDE_MACHINES    optional — comma-separated machine ids to\n *                                    skip during fleet-mode round-robin\n *                                    (typically the coordinator machine this\n *                                    MCP server is running on).\n *   MCP_MAX_CONCURRENT_SANDBOXES     default 4 — kernel maxConcurrency cap\n *   MCP_CODER_FANOUT_HARNESSES       comma-separated harness ids to use for variants > 1\n *   MCP_DISABLE_CODER                set to `1` to omit `delegate_code`\n *   MCP_DISABLE_RESEARCHER           set to `1` to omit `delegate_research` even when peer is present\n */\n\nimport type { LoopTraceEmitter, SandboxClient } from '../runtime'\nimport { runLoop } from '../runtime'\nimport { detectExecutor } from './bin-helpers'\nimport { createDefaultCoderDelegate, type ResearcherDelegate } from './delegates'\nimport type { DelegationExecutor } from './executor'\nimport { createMcpServer } from './server'\nimport { createPropagatingTraceEmitter, readTraceContextFromEnv } from './trace-propagation'\nimport type { ResearchOutputShape } from './types'\n\nasync function main(): Promise<void> {\n  const fanoutHarnesses = parseHarnesses(process.env.MCP_CODER_FANOUT_HARNESSES)\n  const maxConcurrency = parseConcurrency(process.env.MCP_MAX_CONCURRENT_SANDBOXES)\n  const wantCoder = !process.env.MCP_DISABLE_CODER\n  const wantResearcher = !process.env.MCP_DISABLE_RESEARCHER\n  const fleetId = parseFleetId(process.env.TANGLE_FLEET_ID)\n\n  // Skip the sandbox client load entirely when no profile delegate needs it —\n  // the feedback + status + history tools are queue-bound and require no\n  // sandbox. Useful for tooling that mounts the MCP server purely for\n  // self-introspection.\n  const needsSandbox = wantCoder || wantResearcher\n  let sandboxClient: SandboxClient | undefined\n  let executor: DelegationExecutor | undefined\n  if (needsSandbox) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    // Fleet mode against a diagnostic stub is meaningless — the stub can't\n    // resolve a real fleet handle. Refuse rather than silently degrading,\n    // otherwise a fleet-mounted MCP would behave differently than configured.\n    if (fleetId && !apiKey) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_FLEET_ID was set but TANGLE_API_KEY is missing; cannot resolve fleet handle. Provide an api key or unset TANGLE_FLEET_ID.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n    executor = await detectExecutor({ sandboxClient })\n    if (fleetId) {\n      process.stderr.write(`agent-runtime-mcp: fleet-aware delegation: fleetId=${fleetId}\\n`)\n    }\n    process.stderr.write(`agent-runtime-mcp: delegation placement → ${executor.describe()}\\n`)\n  }\n\n  // Export delegated-loop topology spans to the OTLP / Tangle Intelligence sink\n  // when OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for\n  // correlation with the caller's trace). A cheap no-op when the endpoint is\n  // unset — the fleet forwards the env into this MCP's process to turn it on.\n  const { emitter: traceEmitter, exporter: traceExporter } = createPropagatingTraceEmitter(\n    readTraceContextFromEnv(),\n  )\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  const coderDelegate =\n    wantCoder && executor\n      ? createDefaultCoderDelegate({\n          executor,\n          fanoutHarnesses,\n          maxConcurrency,\n          traceEmitter,\n        })\n      : undefined\n\n  const researcherDelegate =\n    wantResearcher && executor\n      ? await loadResearcherDelegate(executor.client, maxConcurrency, traceEmitter)\n      : undefined\n\n  const server = createMcpServer({ coderDelegate, researcherDelegate })\n\n  const shutdown = () => {\n    server.stop()\n    void traceExporter?.shutdown().finally(() => process.exit(0))\n    if (!traceExporter) process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // Coder + researcher delegations require a real client; the stub fails loud\n  // at create() so the agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; coder/researcher delegations are disabled in diagnostic mode. Set TANGLE_API_KEY or use MCP_DISABLE_CODER=1 MCP_DISABLE_RESEARCHER=1 to remove the unsupported tools from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  const baseUrl = process.env.SANDBOX_BASE_URL\n  return new SandboxCtor({\n    apiKey,\n    ...(baseUrl ? { baseUrl } : {}),\n  })\n}\n\ninterface ResearcherProfilePreset {\n  agentRunSpec: Parameters<typeof runLoop>[0]['agentRun'] extends infer T ? NonNullable<T> : never\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n}\n\ninterface ResearcherFanoutPreset {\n  agentRuns: NonNullable<Parameters<typeof runLoop>[0]['agentRuns']>\n  output: Parameters<typeof runLoop>[0]['output']\n  validator: Parameters<typeof runLoop>[0]['validator']\n  driver: Parameters<typeof runLoop>[0]['driver']\n}\n\nasync function loadResearcherDelegate(\n  sandboxClient: SandboxClient,\n  maxConcurrency: number,\n  traceEmitter?: LoopTraceEmitter,\n): Promise<ResearcherDelegate | undefined> {\n  // Optional peer — when `@tangle-network/agent-knowledge` isn't installed,\n  // we silently omit the researcher tool from the advertisement. The\n  // dynamic-import path is resolved at runtime; TypeScript cannot see the\n  // peer, so we type the module structurally rather than via its own\n  // declaration file.\n  const profilesSpecifier = '@tangle-network/agent-knowledge/profiles'\n  const mod = await import(profilesSpecifier).catch(() => undefined)\n  if (!mod) return undefined\n  type SingleFactory = (opts: { task: unknown }) => ResearcherProfilePreset\n  type FanoutFactory = (opts: { task: unknown }) => ResearcherFanoutPreset\n  const fanoutFactory = (mod as { multiHarnessResearcherFanout?: FanoutFactory })\n    .multiHarnessResearcherFanout\n  const singleFactory = (mod as { researcherProfile?: SingleFactory }).researcherProfile\n  if (!fanoutFactory || !singleFactory) return undefined\n\n  return async (args, ctx) => {\n    const task = {\n      question: args.question,\n      knowledgeNamespace: args.namespace,\n      scope: args.scope,\n      sources: args.sources,\n      recencyWindow: args.config?.recencyWindow\n        ? {\n            since: args.config.recencyWindow.since\n              ? new Date(args.config.recencyWindow.since)\n              : undefined,\n            until: args.config.recencyWindow.until\n              ? new Date(args.config.recencyWindow.until)\n              : undefined,\n          }\n        : undefined,\n      maxItems: args.config?.maxItems,\n      minConfidence: args.config?.minConfidence,\n    }\n    const variants = Math.max(1, Math.trunc(args.variants ?? 1))\n    ctx.report({ iteration: 0, phase: 'starting' })\n    if (variants <= 1) {\n      const preset = singleFactory({ task })\n      const result = await runLoop({\n        driver: {\n          name: 'mcp-researcher-single',\n          async plan(t, history) {\n            return history.length === 0 ? [t] : []\n          },\n          decide(history) {\n            return history.length > 0 ? 'pick-winner' : 'fail'\n          },\n        },\n        agentRun: preset.agentRunSpec,\n        output: preset.output,\n        validator: preset.validator,\n        task,\n        ctx: { sandboxClient, signal: ctx.signal, ...(traceEmitter ? { traceEmitter } : {}) },\n        maxIterations: 1,\n        maxConcurrency,\n      })\n      const output = result.winner?.output\n      if (!output) throw new Error('researcher delegate produced no winner')\n      ctx.report({ iteration: 1, phase: 'completed' })\n      return output as ResearchOutputShape\n    }\n    const fanout = fanoutFactory({ task })\n    const result = await runLoop({\n      driver: fanout.driver,\n      agentRuns: fanout.agentRuns.slice(0, variants),\n      output: fanout.output,\n      validator: fanout.validator,\n      task,\n      ctx: { sandboxClient, signal: ctx.signal, ...(traceEmitter ? { traceEmitter } : {}) },\n      maxIterations: variants,\n      maxConcurrency: Math.min(maxConcurrency, variants),\n    })\n    const output = result.winner?.output\n    if (!output) throw new Error('researcher delegate fanout produced no winner')\n    ctx.report({ iteration: result.iterations.length, phase: 'completed' })\n    return output as ResearchOutputShape\n  }\n}\n\nfunction parseHarnesses(raw: string | undefined): string[] | undefined {\n  if (!raw) return undefined\n  const list = raw\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n  return list.length > 0 ? list : undefined\n}\n\nfunction parseFleetId(raw: string | undefined): string | undefined {\n  if (typeof raw !== 'string') return undefined\n  const trimmed = raw.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\nfunction parseConcurrency(raw: string | undefined): number {\n  if (!raw) return 4\n  const n = Number(raw)\n  if (!Number.isFinite(n) || n < 1) return 4\n  return Math.min(Math.trunc(n), 32)\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwCA,eAAe,OAAsB;AACnC,QAAM,kBAAkB,eAAe,QAAQ,IAAI,0BAA0B;AAC7E,QAAM,iBAAiB,iBAAiB,QAAQ,IAAI,4BAA4B;AAChF,QAAM,YAAY,CAAC,QAAQ,IAAI;AAC/B,QAAM,iBAAiB,CAAC,QAAQ,IAAI;AACpC,QAAM,UAAU,aAAa,QAAQ,IAAI,eAAe;AAMxD,QAAM,eAAe,aAAa;AAClC,MAAI;AACJ,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAIA,QAAI,WAAW,CAAC,QAAQ;AACtB,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAC9C,eAAW,MAAM,eAAe,EAAE,cAAc,CAAC;AACjD,QAAI,SAAS;AACX,cAAQ,OAAO,MAAM,sDAAsD,OAAO;AAAA,CAAI;AAAA,IACxF;AACA,YAAQ,OAAO,MAAM,kDAA6C,SAAS,SAAS,CAAC;AAAA,CAAI;AAAA,EAC3F;AAMA,QAAM,EAAE,SAAS,cAAc,UAAU,cAAc,IAAI;AAAA,IACzD,wBAAwB;AAAA,EAC1B;AACA,MAAI,QAAQ,IAAI,6BAA6B;AAC3C,YAAQ,OAAO;AAAA,MACb,qDAAgD,QAAQ,IAAI,2BAA2B;AAAA;AAAA,IACzF;AAAA,EACF;AAEA,QAAM,gBACJ,aAAa,WACT,2BAA2B;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,IACD;AAEN,QAAM,qBACJ,kBAAkB,WACd,MAAM,uBAAuB,SAAS,QAAQ,gBAAgB,YAAY,IAC1E;AAEN,QAAM,SAAS,gBAAgB,EAAE,eAAe,mBAAmB,CAAC;AAEpE,QAAM,WAAW,MAAM;AACrB,WAAO,KAAK;AACZ,SAAK,eAAe,SAAS,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC5D,QAAI,CAAC,cAAe,SAAQ,KAAK,CAAC;AAAA,EACpC;AACA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,kBAAkB,QAAoD;AAKnF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAA6D;AAClF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,UAAU,QAAQ,IAAI;AAC5B,SAAO,IAAI,YAAY;AAAA,IACrB;AAAA,IACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AACH;AAeA,eAAe,uBACb,eACA,gBACA,cACyC;AAMzC,QAAM,oBAAoB;AAC1B,QAAM,MAAM,MAAM,OAAO,mBAAmB,MAAM,MAAM,MAAS;AACjE,MAAI,CAAC,IAAK,QAAO;AAGjB,QAAM,gBAAiB,IACpB;AACH,QAAM,gBAAiB,IAA8C;AACrE,MAAI,CAAC,iBAAiB,CAAC,cAAe,QAAO;AAE7C,SAAO,OAAO,MAAM,QAAQ;AAC1B,UAAM,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,oBAAoB,KAAK;AAAA,MACzB,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,eAAe,KAAK,QAAQ,gBACxB;AAAA,QACE,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,QACJ,OAAO,KAAK,OAAO,cAAc,QAC7B,IAAI,KAAK,KAAK,OAAO,cAAc,KAAK,IACxC;AAAA,MACN,IACA;AAAA,MACJ,UAAU,KAAK,QAAQ;AAAA,MACvB,eAAe,KAAK,QAAQ;AAAA,IAC9B;AACA,UAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC,CAAC;AAC3D,QAAI,OAAO,EAAE,WAAW,GAAG,OAAO,WAAW,CAAC;AAC9C,QAAI,YAAY,GAAG;AACjB,YAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,YAAMA,UAAS,MAAM,QAAQ;AAAA,QAC3B,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM,KAAK,GAAG,SAAS;AACrB,mBAAO,QAAQ,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC;AAAA,UACvC;AAAA,UACA,OAAO,SAAS;AACd,mBAAO,QAAQ,SAAS,IAAI,gBAAgB;AAAA,UAC9C;AAAA,QACF;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,WAAW,OAAO;AAAA,QAClB;AAAA,QACA,KAAK,EAAE,eAAe,QAAQ,IAAI,QAAQ,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC,EAAG;AAAA,QACpF,eAAe;AAAA,QACf;AAAA,MACF,CAAC;AACD,YAAMC,UAASD,QAAO,QAAQ;AAC9B,UAAI,CAACC,QAAQ,OAAM,IAAI,MAAM,wCAAwC;AACrE,UAAI,OAAO,EAAE,WAAW,GAAG,OAAO,YAAY,CAAC;AAC/C,aAAOA;AAAA,IACT;AACA,UAAM,SAAS,cAAc,EAAE,KAAK,CAAC;AACrC,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO,UAAU,MAAM,GAAG,QAAQ;AAAA,MAC7C,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,KAAK,EAAE,eAAe,QAAQ,IAAI,QAAQ,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC,EAAG;AAAA,MACpF,eAAe;AAAA,MACf,gBAAgB,KAAK,IAAI,gBAAgB,QAAQ;AAAA,IACnD,CAAC;AACD,UAAM,SAAS,OAAO,QAAQ;AAC9B,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+CAA+C;AAC5E,QAAI,OAAO,EAAE,WAAW,OAAO,WAAW,QAAQ,OAAO,YAAY,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,KAA+C;AACrE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,IACV,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACjB,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,aAAa,KAA6C;AACjE,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,KAAK;AACzB,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,iBAAiB,KAAiC;AACzD,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO,KAAK,IAAI,KAAK,MAAM,CAAC,GAAG,EAAE;AACnC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["result","output"]}

package/dist/mcp/index.d.ts

@@ -1,17 +1,17 @@
-import { b as LoopSandboxClient, g as LoopSandboxPlacement, f as LoopTraceEmitter } from '../types-DdzkffAm.js';
-import { c as FleetHandle, d as DelegationExecutor, e as DelegateFeedbackArgs, f as DelegationFeedbackSnapshot, g as DelegationProfile, D as DelegateCodeArgs, h as DelegateResearchArgs, i as DelegateUiAuditArgs, j as DelegationStatus, k as DelegationProgress, l as DelegationResultPayload, m as DelegationError, n as DelegationStatusResult, o as DelegationHistoryArgs, p as DelegationHistoryEntry, q as CoderDelegate, R as ResearcherDelegate, U as UiAuditorDelegate, r as DelegateCodeResult, s as DelegateFeedbackResult, t as ResearchSource, u as DelegateResearchResult, v as DelegateUiAuditResult, w as DelegationHistoryResult, x as DelegationStatusArgs } from '../kb-gate-D9GBocLN.js';
-export { y as CoderReview, C as CoderReviewer, a as CoderWinnerSelection, z as CreateDefaultCoderDelegateOptions, b as CreateKbGateOptions, A as DelegateCodeConfig, B as DelegateResearchConfig, E as DelegateRunCtx, G as DelegateUiAuditConfig, H as DelegateUiAuditRoute, F as FactCandidate, I as FactJudge, J as FactJudgeVerdict, K as FeedbackRating, L as FeedbackRefersTo, M as FleetWorkspaceExecutorOptions, N as KbGateResult, O as ResearchOutputShape, S as SiblingSandboxExecutorOptions, P as UiAuditorDelegationOutput, Q as createDefaultCoderDelegate, T as createFleetWorkspaceExecutor, V as createKbGate, W as createSiblingSandboxExecutor } from '../kb-gate-D9GBocLN.js';
+import { S as SandboxClient, f as LoopSandboxPlacement, e as LoopTraceEmitter } from '../types-nBMuollC.js';
+import { c as FleetHandle, d as DelegationExecutor, e as DelegateFeedbackArgs, f as DelegationFeedbackSnapshot, g as DelegationProfile, D as DelegateCodeArgs, h as DelegateResearchArgs, i as DelegateUiAuditArgs, j as DelegationStatus, k as DelegationProgress, l as DelegationResultPayload, m as DelegationError, n as DelegationStatusResult, o as DelegationHistoryArgs, p as DelegationHistoryEntry, q as CoderDelegate, R as ResearcherDelegate, U as UiAuditorDelegate, r as DelegateCodeResult, s as DelegateFeedbackResult, t as ResearchSource, u as DelegateResearchResult, v as DelegateUiAuditResult, w as DelegationHistoryResult, x as DelegationStatusArgs } from '../kb-gate-51BlLlVM.js';
+export { y as CoderReview, C as CoderReviewer, a as CoderWinnerSelection, z as CreateDefaultCoderDelegateOptions, b as CreateKbGateOptions, A as DelegateCodeConfig, B as DelegateResearchConfig, E as DelegateRunCtx, G as DelegateUiAuditConfig, H as DelegateUiAuditRoute, F as FactCandidate, I as FactJudge, J as FactJudgeVerdict, K as FeedbackRating, L as FeedbackRefersTo, M as FleetWorkspaceExecutorOptions, N as KbGateResult, O as ResearchOutputShape, S as SiblingSandboxExecutorOptions, P as UiAuditorDelegationOutput, Q as createDefaultCoderDelegate, T as createFleetWorkspaceExecutor, V as createKbGate, W as createSiblingSandboxExecutor } from '../kb-gate-51BlLlVM.js';
 export { B as BuildDelegationMcpServerOptions, C as ComposeProductionAgentProfileOptions, D as DELEGATION_MCP_SERVER_KEY, b as buildDelegationMcpServer, c as composeProductionAgentProfile } from '../delegation-profile-1GbW5yA3.js';
 import { L as LocalHarness, r as runLocalHarness } from '../local-harness-KrdFTY5R.js';
 export { a as LocalHarnessResult, R as RunLocalHarnessOptions } from '../local-harness-KrdFTY5R.js';
-import { O as OtelExporter } from '../otel-export-Dy2DyUCU.js';
-export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from '../otel-export-Dy2DyUCU.js';
+import { O as OtelExporter } from '../otel-export-EzfsVUhh.js';
+export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from '../otel-export-EzfsVUhh.js';
 import { AnalystFinding } from '@tangle-network/agent-eval';
-import { S as Scope, R as ResultBlobStore, A as Agent, B as Budget } from '../types-1HbsFa7H.js';
+import { S as Scope, R as ResultBlobStore, A as Agent, B as Budget } from '../types-Cbx3dNK5.js';
 import { a as UiLens } from '../substrate-CUgk7F7s.js';
 import '@tangle-network/sandbox';
 import '../runtime-hooks-C7JwKb9E.js';
-import '../coder-CczgMqFx.js';
+import '../coder-CVZNGbyg.js';
 import 'node:child_process';
 
 /**
@@ -24,7 +24,7 @@ import 'node:child_process';
 
 /** @experimental */
 interface DetectExecutorArgs {
-    sandboxClient: LoopSandboxClient;
+    sandboxClient: SandboxClient;
     /** Raw env (defaults to `process.env`). Pass an explicit map for tests. */
     env?: Record<string, string | undefined>;
     /**
@@ -32,7 +32,7 @@ interface DetectExecutorArgs {
      * default reads `client.fleets.get(fleetId)` and validates the returned
      * shape against the structural `FleetHandle` contract.
      */
-    resolveFleet?: (client: LoopSandboxClient, fleetId: string) => Promise<FleetHandle>;
+    resolveFleet?: (client: SandboxClient, fleetId: string) => Promise<FleetHandle>;
 }
 /**
  * Pick the right executor for an MCP server invocation based on env vars.
@@ -442,7 +442,7 @@ interface McpServerOptions {
     researcherDelegate?: ResearcherDelegate;
     /**
      * Required to enable delegate_ui_audit. Wire one that closes over your
-     * `runLoop` + `uiAuditorProfile` + a `LoopSandboxClient` (the
+     * `runLoop` + `uiAuditorProfile` + a `SandboxClient` (the
      * canonical in-process choice is `createInProcessUiAuditClient` from
      * `@tangle-network/agent-runtime/profiles`) + your vision judge.
      */
@@ -452,10 +452,9 @@ interface McpServerOptions {
     /** Override the default in-memory task queue. */
     queue?: DelegationTaskQueue;
     /**
-     * Extra tools to serve alongside the delegation tools — e.g. the operator toolbox
-     * (`createCoordinationTools(...).tools`), which exposes the driver's spawn/observe/steer verbs over
-     * MCP so a sandbox agent can BE the driver. Registered after the built-ins; a duplicate name
-     * throws (fail loud — no silent shadowing of a delegation tool).
+     * Extra tools to serve alongside the delegation tools, for example
+     * `createCoordinationTools(...).tools`. Registered after the built-ins; a
+     * duplicate name throws so delegation tools cannot be shadowed silently.
      */
     extraTools?: McpToolDescriptor[];
     /** Server display name surfaced via `initialize`. Default `'agent-runtime-mcp'`. */
@@ -570,9 +569,11 @@ interface CheckRunnerOptions {
 /** Run ONE lens over a trace → findings. Generic over any kind: prompt = the lens + the agent-eval
  *  finding schema; the model's JSON array is parsed (`parseRawFinding`), lifted, and firewalled. */
 declare function runCheck(kind: Check, trace: unknown, opts: CheckRunnerOptions, producedAt: string): Promise<AnalystFinding[]>;
-/** Build a `run_analyst` runner over a kind directory — the seam the operator toolbox is wired with.
- *  Returns the findings, or a typed error for an unknown kind. `producedAt` is passed in (the runtime
- *  forbids `Date.now` in replay-safe paths; the caller stamps it). */
+/**
+ * Build a `run_analyst` runner over a kind directory.
+ * Returns findings, or a typed error for an unknown kind. `producedAt` is
+ * passed in because replay-safe paths must not read `Date.now`.
+ */
 declare function makeCheckRunner(kinds: Record<string, Check>, opts: CheckRunnerOptions): (kindId: string, trace: unknown, producedAt: string) => Promise<AnalystFinding[] | {
     error: string;
 }>;
@@ -580,84 +581,84 @@ declare function makeCheckRunner(kinds: Record<string, Check>, opts: CheckRunner
 /**
  * @experimental
  *
- * COORDINATION TOOLS — the verbs a parent agent uses to coordinate the child agents it spawns,
- * exposed as MCP tools backed by a live keystone `Scope`. This is `Scope`-as-MCP.
- *
- * NOT a transport. The cross-org message bus (`docs/agent-bus-protocol.md`) and the SDK's
- * `dispatchPrompt`/`SessionMessage` are the *transports* the `steer` verb rides; THIS file is the
- * verb set (the API). One verb, several bindings: in-process `Scope.send` is a direct call; across
- * sandboxes it rides SDK session-messaging; across orgs it rides the agent-bus protocol.
- *
- *   spawn_worker  → scope.spawn   (budget-bounded, fail-closed — equal-k holds even for an LLM driver)
- *   await_next    → scope.next    (THE wake event: block until the next spawned child settles)
- *   observe_worker→ scope.view + the result blob (a child's status, spend, and settled output)
- *   steer_worker  → scope.send    (deliver a next-instruction / interrupt to a RUNNING child)
- *   list_analysts → the check menu (the trace lenses the agent can apply — see checks.ts)
- *   run_analyst   → apply a CHECK  (run a kind over a child's trace → trace-derived findings)
- *   stop          → declare the run complete (the terminal move)
- *
- * The check verbs are present only when the check seam (`analystKinds` + `runAnalyst`) is wired —
- * an agent that does not review traces (a pure dispatcher) omits them. A trace check is a SEPARATE
- * lens (selector ≠ judge: it reads the trace, never the score); authoring a NEW check at runtime is
- * the next addition.
- *
- * A worker the driver spawns may itself carry the driver profile — `spawn_worker` does not care what
- * the profile is, so drivers-of-drivers fall out for free (each sub-driver gets its own sub-scope,
- * bounded by `maxDepth` + the conserved pool).
+ * MCP binding for a live `Scope`. A sandbox driver gets the same small verbs
+ * the in-process driver has: spawn, observe, await, steer, ask/answer, analyze,
+ * and stop. Settled outputs remain Scope artifacts; product code can project
+ * them into any UI/report envelope it needs.
  */
 
-/** A worker the driver has drained via `await_next` — the operator's running ledger of settled
- *  workers + their DEPLOYABLE verdict (the driver IS the selector, so it legitimately reads the
- *  verdict; the analyst, which reads only the trace, is the separate selector≠judge lens). The
- *  driver picks its deliverable from this ledger at `stop`. */
+/** A worker the driver has drained via `await_next`. */
 interface SettledWorker {
     readonly id: string;
     readonly status: 'done' | 'down';
-    /** Deployable score in [0,1] from the worker's verdict (done only). */
     readonly score?: number;
-    /** Whether the deployable verdict passed (done only). */
     readonly valid?: boolean;
-    /** Result-blob pointer for the worker's output/trace (done only). */
     readonly outRef?: string;
-    /** Failure reason (down only). */
     readonly reason?: string;
 }
-/** How a `spawn_worker` profile becomes a spawnable leaf `Agent`. The caller wires this (e.g. the
- *  surface registry turns a profile into a shot executor) so the toolbox stays domain-blind. */
+type QuestionLevel = 'worker' | 'driver' | 'loop';
+type QuestionUrgency = 'continue-without' | 'blocks-step' | 'blocks-run';
+interface QuestionOption {
+    readonly label: string;
+    readonly tradeoff: string;
+}
+interface Question {
+    readonly id: string;
+    readonly from: string;
+    readonly level: QuestionLevel;
+    readonly question: string;
+    readonly reason: string;
+    readonly urgency: QuestionUrgency;
+    readonly options?: ReadonlyArray<QuestionOption>;
+}
+type QuestionDecision = {
+    readonly kind: 'answer';
+    readonly answer: string;
+    readonly by: string;
+} | {
+    readonly kind: 'defer';
+    readonly reason: string;
+} | {
+    readonly kind: 'escalate';
+    readonly to: 'parent' | 'user' | string;
+    readonly reason: string;
+};
+interface QuestionRecord extends Question {
+    readonly status: 'open' | 'answered' | 'deferred' | 'escalated';
+    readonly decision?: QuestionDecision;
+    readonly openedAt: number;
+}
+type QuestionPolicy = 'auto' | 'mustDecide' | 'bubble' | 'failClosed';
+interface AnalystRegistry {
+    readonly kinds: ReadonlyArray<{
+        id: string;
+        description: string;
+        area: string;
+    }>;
+    readonly run: (kindId: string, trace: unknown) => Promise<unknown>;
+}
+type CoordinationEvent = {
+    readonly type: 'question';
+    readonly question: QuestionRecord;
+};
 type MakeWorkerAgent = (profile: unknown) => Agent<unknown, unknown>;
 interface CoordinationToolsOptions {
-    /** The DRIVER's live scope — spawn/observe/steer all act on this. */
     readonly scope: Scope<unknown>;
-    /** Result blobs, so `observe_worker` can rehydrate a settled worker's output. */
     readonly blobs: ResultBlobStore;
-    /** Turn a spawn_worker `profile` into a leaf agent (registry-resolved on spawn). */
     readonly makeWorkerAgent: MakeWorkerAgent;
-    /** Per-worker conserved budget the driver reserves on each spawn. */
     readonly perWorker: Budget;
-    /** The analyst lens menu (for `list_analysts`) — id + one-line + area. Injected so the toolbox
-     *  stays domain-blind; wire it from `analyst-kinds.ts`'s directory. Omit to disable analyst tools. */
-    readonly analystKinds?: ReadonlyArray<{
-        id: string;
-        description: string;
-        area: string;
-    }>;
-    /** Run a lens over a worker's trace → findings (or a typed error). Wire it from
-     *  `makeCheckRunner(...)`. `run_analyst` fetches the worker's settled output and passes it here. */
-    readonly runAnalyst?: (kindId: string, trace: unknown) => Promise<unknown>;
+    readonly analysts?: AnalystRegistry;
+    readonly onEvent?: (event: CoordinationEvent) => void | Promise<void>;
+    readonly questionPolicy?: QuestionPolicy;
 }
 interface CoordinationTools {
-    /** MCP tools — register on an `McpServer`, or call the handlers directly in-process. */
     readonly tools: McpToolDescriptor[];
-    /** True once the driver called `stop` — the operator loop reads this to terminate. */
     isStopped(): boolean;
-    /** The reason passed to `stop`, if any. */
     stopReason(): string | undefined;
-    /** The workers drained so far via `await_next` (the driver's selection ledger). */
     settled(): ReadonlyArray<SettledWorker>;
+    questions(): ReadonlyArray<QuestionRecord>;
 }
-/** Build the operator toolbox over a live scope. The tools are the driver's verbs; their handlers
- *  are thin wrappers over the keystone (spawn/view/send), so the budget/journal/abort discipline of
- *  the Supervisor applies to a sandbox driver exactly as to the in-process one. */
+/** Build the driver's MCP tools over a live scope. */
 declare function createCoordinationTools(opts: CoordinationToolsOptions): CoordinationTools;
 
 /**
@@ -916,7 +917,7 @@ declare function createDelegateResearchHandler(options: DelegateResearchHandlerO
  * The handler does not import the auditor profile directly — consumers
  * inject a `UiAuditorDelegate` via `createMcpServer({ uiAuditorDelegate })`.
  * The delegate is the seam where the consumer chooses the judge (vision
- * model) and the `LoopSandboxClient` (in-process Playwright vs fleet vs
+ * model) and the `SandboxClient` (in-process Playwright vs fleet vs
  * remote browser). agent-runtime ships the in-process client under
  * `./profiles` so consumers who want the canonical setup can wire it
  * with a few lines.
@@ -1147,4 +1148,4 @@ declare function createPropagatingTraceEmitter(ctx: TraceContext): {
  */
 declare function traceContextToEnv(ctx: TraceContext): Record<string, string>;
 
-export { type Check, type CheckRunnerOptions, CoderDelegate, type CoordinationTools, type CoordinationToolsOptions, type CreateWorktreeOptions, DELEGATE_CODE_DESCRIPTION, DELEGATE_CODE_INPUT_SCHEMA, DELEGATE_CODE_TOOL_NAME, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_RESEARCH_DESCRIPTION, DELEGATE_RESEARCH_INPUT_SCHEMA, DELEGATE_RESEARCH_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DelegateCodeArgs, DelegateCodeResult, DelegateFeedbackArgs, DelegateFeedbackResult, DelegateResearchArgs, DelegateResearchResult, DelegateUiAuditArgs, DelegateUiAuditResult, DelegationError, DelegationExecutor, DelegationFeedbackSnapshot, DelegationHistoryArgs, DelegationHistoryEntry, DelegationHistoryResult, DelegationProfile, DelegationProgress, type DelegationRecord, DelegationResultPayload, DelegationStatus, DelegationStatusArgs, DelegationStatusResult, DelegationTaskQueue, type DelegationTaskQueueOptions, type DetectExecutorArgs, type DiffOptions, type DiffResult, type FeedbackEvent, type FeedbackStore, FleetHandle, type GitRunner, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, LocalHarness, type MakeWorkerAgent, type McpServer, type McpServerOptions, type McpToolDescriptor, type McpTransport, type RemoveWorktreeOptions, ResearchSource, ResearcherDelegate, type SettledWorker, type SubmitInput, type SubmitOutput, type TraceContext, UiAuditorDelegate, type WorktreeHandle, captureWorktreeDiff, createCoordinationTools, createDelegateCodeHandler, createDelegateFeedbackHandler, createDelegateResearchHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createInProcessExecutor, createInProcessTransport, createMcpServer, createPropagatingTraceEmitter, createWorktree, defaultChecks, detectExecutor, eventToSnapshot, hashIdempotencyInput, liftFindings, makeCheckRunner, readTraceContextFromEnv, removeWorktree, renderTrace, runCheck, runLocalHarness, traceContextToEnv, validateDelegateCodeArgs, validateDelegateFeedbackArgs, validateDelegateResearchArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
+export { type AnalystRegistry, type Check, type CheckRunnerOptions, CoderDelegate, type CoordinationEvent, type CoordinationTools, type CoordinationToolsOptions, type CreateWorktreeOptions, DELEGATE_CODE_DESCRIPTION, DELEGATE_CODE_INPUT_SCHEMA, DELEGATE_CODE_TOOL_NAME, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_RESEARCH_DESCRIPTION, DELEGATE_RESEARCH_INPUT_SCHEMA, DELEGATE_RESEARCH_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DelegateCodeArgs, DelegateCodeResult, DelegateFeedbackArgs, DelegateFeedbackResult, DelegateResearchArgs, DelegateResearchResult, DelegateUiAuditArgs, DelegateUiAuditResult, DelegationError, DelegationExecutor, DelegationFeedbackSnapshot, DelegationHistoryArgs, DelegationHistoryEntry, DelegationHistoryResult, DelegationProfile, DelegationProgress, type DelegationRecord, DelegationResultPayload, DelegationStatus, DelegationStatusArgs, DelegationStatusResult, DelegationTaskQueue, type DelegationTaskQueueOptions, type DetectExecutorArgs, type DiffOptions, type DiffResult, type FeedbackEvent, type FeedbackStore, FleetHandle, type GitRunner, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, LocalHarness, type MakeWorkerAgent, type McpServer, type McpServerOptions, type McpToolDescriptor, type McpTransport, type Question, type QuestionDecision, type QuestionPolicy, type QuestionRecord, type RemoveWorktreeOptions, ResearchSource, ResearcherDelegate, type SettledWorker, type SubmitInput, type SubmitOutput, type TraceContext, UiAuditorDelegate, type WorktreeHandle, captureWorktreeDiff, createCoordinationTools, createDelegateCodeHandler, createDelegateFeedbackHandler, createDelegateResearchHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createInProcessExecutor, createInProcessTransport, createMcpServer, createPropagatingTraceEmitter, createWorktree, defaultChecks, detectExecutor, eventToSnapshot, hashIdempotencyInput, liftFindings, makeCheckRunner, readTraceContextFromEnv, removeWorktree, renderTrace, runCheck, runLocalHarness, traceContextToEnv, validateDelegateCodeArgs, validateDelegateFeedbackArgs, validateDelegateResearchArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };