@tangle-network/agent-runtime 0.71.1 → 0.73.0

package/dist/chunk-VLF5RHEQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/errors.ts","../src/runtime/sandbox-events.ts"],"sourcesContent":["/**\n * @stable\n *\n * Error taxonomy for `@tangle-network/agent-runtime`.\n *\n * Public contract: every error this package throws as part of its consumer-\n * facing API either extends `AgentEvalError` (re-exported here for ergonomic\n * `instanceof` checks at the runtime boundary) or extends one of the\n * runtime-specific subclasses below.\n *\n * Internal invariant guards (`throw new Error('this should never happen')`)\n * remain plain `Error` — they are programmer-mistake assertions, not\n * consumer-catchable contract failures.\n *\n * Subclassing strategy: where a runtime-specific failure maps cleanly to an\n * agent-eval code (validation, config, not_found), we re-use the agent-eval\n * subclass. Runtime-only failure modes (session resume against the wrong\n * backend, backend transport errors) get fresh subclasses that still carry an\n * `AgentEvalErrorCode` so cross-package handlers can pattern-match without\n * importing the runtime.\n */\n\nimport { AgentEvalError } from '@tangle-network/agent-eval'\n\nexport {\n  AgentEvalError,\n  type AgentEvalErrorCode,\n  ConfigError,\n  JudgeError,\n  NotFoundError,\n  ValidationError,\n} from '@tangle-network/agent-eval'\n\n/**\n * @stable\n *\n * Caller asked to resume a session against a backend whose `kind` does not\n * match the session's recorded backend. This is a routing bug — the same\n * session id was reused across two different backend implementations — and\n * is not retryable without picking the right backend.\n */\nexport class SessionMismatchError extends AgentEvalError {\n  readonly sessionBackend: string\n  readonly requestedBackend: string\n\n  constructor(sessionBackend: string, requestedBackend: string, options?: { cause?: unknown }) {\n    super(\n      'validation',\n      `Cannot resume ${sessionBackend} session with ${requestedBackend} backend`,\n      options,\n    )\n    this.sessionBackend = sessionBackend\n    this.requestedBackend = requestedBackend\n  }\n}\n\n/**\n * @stable\n *\n * A backend transport call (HTTP, gRPC, sidecar IPC) failed with a non-success\n * status. Distinct from `JudgeError` (which is structural / unrecoverable)\n * because backend failures are sometimes retryable and consumers may want to\n * branch on the upstream status code.\n */\nexport class BackendTransportError extends AgentEvalError {\n  readonly backend: string\n  readonly status?: number\n  /**\n   * Truncated upstream response body (≤2 KiB) when available. Diagnostic\n   * only — surfaces in `backend_error.error.body` and `final.error.body`\n   * so operators can see \"free_tier_limit\", \"invalid_api_key\", etc. without\n   * cracking the log line open.\n   */\n  readonly body?: string\n\n  constructor(\n    backend: string,\n    message: string,\n    options?: { cause?: unknown; status?: number; body?: string },\n  ) {\n    super('config', message, options)\n    this.backend = backend\n    this.status = options?.status\n    this.body = options?.body\n  }\n}\n\n/**\n * @stable\n *\n * A runtime-run lifecycle method was called in an order the state machine does\n * not allow: `persist()` before `complete()`, `complete()` twice, etc.\n */\nexport class RuntimeRunStateError extends AgentEvalError {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super('validation', message, options)\n  }\n}\n\n/**\n * @stable\n *\n * The dynamic-loop planner returned an unusable topology move — the LLM emitted\n * no parseable envelope, an unknown `kind`, or a structurally-invalid move\n * (e.g. a fanout with zero tasks). This is a structural failure of the\n * agent-authored topology, not a config mistake: the planner ran but its output\n * cannot drive the kernel. Carries `validation` so cross-package handlers can\n * pattern-match without importing the runtime. Fail loud — never substitute a\n * default move, or the loop silently runs a topology nobody chose.\n */\nexport class PlannerError extends AgentEvalError {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super('validation', message, options)\n  }\n}\n\n/**\n * The analyst loop could not read or run over a round's trace — e.g. an empty round\n * (no iterations to analyze) or a malformed trace projection. Fail loud: a silent empty\n * store would mask a broken capture path and the driver would steer on nothing.\n */\nexport class AnalystError extends AgentEvalError {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super('validation', message, options)\n  }\n}\n","/**\n * Sandbox-event → runtime-event mapping.\n *\n * The sandbox SDK emits a polymorphic `SandboxEvent = { type, data, id? }`\n * whose `type` vocabulary is backend-determined (opencode, etc.) rather than\n * enumerated by the SDK. Two consumers project it:\n *   - the loop kernel's cost ledger (`extractLlmCallEvent`) — sums usage off\n *     every cost-bearing event, regardless of stream shape;\n *   - the `AgentRuntime.act` streaming contract (`mapSandboxEvent`) — projects\n *     incremental events to the `RuntimeStreamEvent` chat-UX vocabulary.\n *\n * Both live here so the empirically-observed `type` vocabulary has one home.\n */\n\nimport type { SandboxEvent } from '@tangle-network/sandbox'\nimport type { RuntimeStreamEvent } from '../types'\n\n/**\n * Extract a `RuntimeStreamEvent`-shaped `llm_call` from a sandbox event when\n * the event carries usage/cost data. Returns `undefined` for non-cost events\n * so the kernel can iterate the full stream without branching.\n *\n * Canonical cost-carrying types observed in the wild:\n *   - `llm_call` — `data: { model, tokensIn, tokensOut, costUsd, ... }`\n *   - `message.completed` / `result` — `data: { usage: { inputTokens,\n *      outputTokens, totalCostUsd? } }`\n *   - `cost.usage` / `usage` — same shape under a dedicated type\n *\n * Numeric coercion is strict: `Number.isFinite` gates every accumulator write\n * so a sentinel `NaN` from a misbehaving backend cannot poison the ledger.\n */\nexport function extractLlmCallEvent(\n  event: SandboxEvent,\n  agentRunName: string,\n): (RuntimeStreamEvent & { type: 'llm_call' }) | undefined {\n  if (!event || typeof event !== 'object') return undefined\n  const type = String(event.type ?? '')\n  const data =\n    event.data && typeof event.data === 'object'\n      ? (event.data as Record<string, unknown>)\n      : ({} as Record<string, unknown>)\n\n  if (type === 'llm_call' || type === 'cost.usage' || type === 'usage') {\n    return buildLlmCall(data, agentRunName)\n  }\n  if (type === 'message.completed' || type === 'result' || type === 'final') {\n    const usage = data.usage as Record<string, unknown> | undefined\n    if (!usage || typeof usage !== 'object') return undefined\n    return buildLlmCall({ ...usage, model: data.model ?? usage.model }, agentRunName)\n  }\n  // sandbox 0.4.0 terminal event: `data = { tokenUsage: { inputTokens, outputTokens,\n  // reasoningTokens, cacheReadInputTokens }, totalCostUsd }`. Usage lives under\n  // `tokenUsage` (not `usage`) and the cost is top-level — neither matched the\n  // branches above, so an in-process loopDispatch run reported {0,0} and the\n  // backend-integrity guard misread a real run as a stub. Reasoning tokens are\n  // billed output (reasoning models), so they fold into the output count.\n  if (type === 'done') {\n    const usage = data.tokenUsage as Record<string, unknown> | undefined\n    if (!usage || typeof usage !== 'object') return undefined\n    const out = pickFiniteNumber(usage, ['outputTokens', 'completion_tokens', 'tokensOut'])\n    const reasoning = pickFiniteNumber(usage, ['reasoningTokens'])\n    const mergedOut =\n      out !== undefined || reasoning !== undefined ? (out ?? 0) + (reasoning ?? 0) : undefined\n    return buildLlmCall(\n      {\n        inputTokens: usage.inputTokens,\n        outputTokens: mergedOut,\n        totalCostUsd: data.totalCostUsd,\n        model: data.model ?? usage.model,\n      },\n      agentRunName,\n    )\n  }\n  return undefined\n}\n\nfunction buildLlmCall(\n  data: Record<string, unknown>,\n  agentRunName: string,\n): (RuntimeStreamEvent & { type: 'llm_call' }) | undefined {\n  const tokensIn = pickFiniteNumber(data, ['tokensIn', 'inputTokens', 'prompt_tokens'])\n  const tokensOut = pickFiniteNumber(data, ['tokensOut', 'outputTokens', 'completion_tokens'])\n  const costUsd = pickFiniteNumber(data, ['costUsd', 'totalCostUsd', 'cost_usd', 'cost'])\n  if (tokensIn === undefined && tokensOut === undefined && costUsd === undefined) {\n    return undefined\n  }\n  const model = typeof data.model === 'string' && data.model.length > 0 ? data.model : agentRunName\n  const event: RuntimeStreamEvent & { type: 'llm_call' } = {\n    type: 'llm_call',\n    model,\n  }\n  if (tokensIn !== undefined) event.tokensIn = tokensIn\n  if (tokensOut !== undefined) event.tokensOut = tokensOut\n  if (costUsd !== undefined) event.costUsd = costUsd\n  return event\n}\n\nfunction pickFiniteNumber(data: Record<string, unknown>, keys: string[]): number | undefined {\n  for (const key of keys) {\n    const value = data[key]\n    if (typeof value === 'number' && Number.isFinite(value)) return value\n  }\n  return undefined\n}\n\n/**\n * Project one `SandboxEvent` onto the `RuntimeStreamEvent` chat-UX vocabulary,\n * for runtimes that bridge a sandbox `streamPrompt` into the\n * `AgentRuntime.act` streaming contract. Returns `undefined` for events that\n * have no faithful projection — the raw stream is preserved separately for the\n * `OutputAdapter`, so an unmapped event never loses data.\n *\n * Mapped (the task-optional incremental variants — no synthesized task\n * lifecycle, no guessed tool-part shapes):\n *   - `message.part.updated` text part → `text_delta`\n *   - `message.part.updated` reasoning/thinking part → `reasoning_delta`\n *   - cost-bearing events → `llm_call` (shared with the ledger extractor)\n *\n * The opencode backend emits incremental text as\n * `{ type: 'message.part.updated', data: { part: { type, text }, delta } }`;\n * `delta` is the increment, `part.text` the running accumulation.\n */\nexport function mapSandboxEvent(\n  event: SandboxEvent,\n  opts: { agentRunName?: string } = {},\n): RuntimeStreamEvent | undefined {\n  if (!event || typeof event !== 'object') return undefined\n  const type = String(event.type ?? '')\n  const data =\n    event.data && typeof event.data === 'object'\n      ? (event.data as Record<string, unknown>)\n      : ({} as Record<string, unknown>)\n\n  if (type === 'message.part.updated') {\n    const part =\n      data.part && typeof data.part === 'object' ? (data.part as Record<string, unknown>) : {}\n    const partType = String(part.type ?? '')\n    const delta = typeof data.delta === 'string' ? data.delta : undefined\n    const text = delta ?? (typeof part.text === 'string' ? part.text : undefined)\n    if (text === undefined) return undefined\n    if (partType === 'text') return { type: 'text_delta', text }\n    if (partType === 'reasoning' || partType === 'thinking')\n      return { type: 'reasoning_delta', text }\n    return undefined\n  }\n\n  return extractLlmCallEvent(event, opts.agentRunName ?? 'agent')\n}\n"],"mappings":";AAsBA,SAAS,sBAAsB;AAE/B;AAAA,EACE,kBAAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUA,IAAM,uBAAN,cAAmC,eAAe;AAAA,EAC9C;AAAA,EACA;AAAA,EAET,YAAY,gBAAwB,kBAA0B,SAA+B;AAC3F;AAAA,MACE;AAAA,MACA,iBAAiB,cAAc,iBAAiB,gBAAgB;AAAA,MAChE;AAAA,IACF;AACA,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAAA,EAC1B;AACF;AAUO,IAAM,wBAAN,cAAoC,eAAe;AAAA,EAC/C;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AAAA,EAET,YACE,SACA,SACA,SACA;AACA,UAAM,UAAU,SAAS,OAAO;AAChC,SAAK,UAAU;AACf,SAAK,SAAS,SAAS;AACvB,SAAK,OAAO,SAAS;AAAA,EACvB;AACF;AAQO,IAAM,uBAAN,cAAmC,eAAe;AAAA,EACvD,YAAY,SAAiB,SAA+B;AAC1D,UAAM,cAAc,SAAS,OAAO;AAAA,EACtC;AACF;AAaO,IAAM,eAAN,cAA2B,eAAe;AAAA,EAC/C,YAAY,SAAiB,SAA+B;AAC1D,UAAM,cAAc,SAAS,OAAO;AAAA,EACtC;AACF;AAOO,IAAM,eAAN,cAA2B,eAAe;AAAA,EAC/C,YAAY,SAAiB,SAA+B;AAC1D,UAAM,cAAc,SAAS,OAAO;AAAA,EACtC;AACF;;;AC9FO,SAAS,oBACd,OACA,cACyD;AACzD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,OAAO,OAAO,MAAM,QAAQ,EAAE;AACpC,QAAM,OACJ,MAAM,QAAQ,OAAO,MAAM,SAAS,WAC/B,MAAM,OACN,CAAC;AAER,MAAI,SAAS,cAAc,SAAS,gBAAgB,SAAS,SAAS;AACpE,WAAO,aAAa,MAAM,YAAY;AAAA,EACxC;AACA,MAAI,SAAS,uBAAuB,SAAS,YAAY,SAAS,SAAS;AACzE,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,WAAO,aAAa,EAAE,GAAG,OAAO,OAAO,KAAK,SAAS,MAAM,MAAM,GAAG,YAAY;AAAA,EAClF;AAOA,MAAI,SAAS,QAAQ;AACnB,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,UAAM,MAAM,iBAAiB,OAAO,CAAC,gBAAgB,qBAAqB,WAAW,CAAC;AACtF,UAAM,YAAY,iBAAiB,OAAO,CAAC,iBAAiB,CAAC;AAC7D,UAAM,YACJ,QAAQ,UAAa,cAAc,UAAa,OAAO,MAAM,aAAa,KAAK;AACjF,WAAO;AAAA,MACL;AAAA,QACE,aAAa,MAAM;AAAA,QACnB,cAAc;AAAA,QACd,cAAc,KAAK;AAAA,QACnB,OAAO,KAAK,SAAS,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aACP,MACA,cACyD;AACzD,QAAM,WAAW,iBAAiB,MAAM,CAAC,YAAY,eAAe,eAAe,CAAC;AACpF,QAAM,YAAY,iBAAiB,MAAM,CAAC,aAAa,gBAAgB,mBAAmB,CAAC;AAC3F,QAAM,UAAU,iBAAiB,MAAM,CAAC,WAAW,gBAAgB,YAAY,MAAM,CAAC;AACtF,MAAI,aAAa,UAAa,cAAc,UAAa,YAAY,QAAW;AAC9E,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;AACrF,QAAM,QAAmD;AAAA,IACvD,MAAM;AAAA,IACN;AAAA,EACF;AACA,MAAI,aAAa,OAAW,OAAM,WAAW;AAC7C,MAAI,cAAc,OAAW,OAAM,YAAY;AAC/C,MAAI,YAAY,OAAW,OAAM,UAAU;AAC3C,SAAO;AACT;AAEA,SAAS,iBAAiB,MAA+B,MAAoC;AAC3F,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,KAAK,GAAG;AACtB,QAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,EAAG,QAAO;AAAA,EAClE;AACA,SAAO;AACT;AAmBO,SAAS,gBACd,OACA,OAAkC,CAAC,GACH;AAChC,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,OAAO,OAAO,MAAM,QAAQ,EAAE;AACpC,QAAM,OACJ,MAAM,QAAQ,OAAO,MAAM,SAAS,WAC/B,MAAM,OACN,CAAC;AAER,MAAI,SAAS,wBAAwB;AACnC,UAAM,OACJ,KAAK,QAAQ,OAAO,KAAK,SAAS,WAAY,KAAK,OAAmC,CAAC;AACzF,UAAM,WAAW,OAAO,KAAK,QAAQ,EAAE;AACvC,UAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAC5D,UAAM,OAAO,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACnE,QAAI,SAAS,OAAW,QAAO;AAC/B,QAAI,aAAa,OAAQ,QAAO,EAAE,MAAM,cAAc,KAAK;AAC3D,QAAI,aAAa,eAAe,aAAa;AAC3C,aAAO,EAAE,MAAM,mBAAmB,KAAK;AACzC,WAAO;AAAA,EACT;AAEA,SAAO,oBAAoB,OAAO,KAAK,gBAAgB,OAAO;AAChE;","names":["AgentEvalError"]}

package/dist/chunk-XRYEZPR6.js

@@ -1,88 +0,0 @@
-// src/mcp/delegation-profile.ts
-var DELEGATION_MCP_SERVER_KEY = "agent-runtime-delegation";
-var OTEL_FORWARD_KEYS = [
-  "OTEL_EXPORTER_OTLP_ENDPOINT",
-  "OTEL_EXPORTER_OTLP_HEADERS",
-  "TRACE_ID",
-  "PARENT_SPAN_ID"
-];
-var DEFAULT_SANDBOX_BASE_URL = "https://sandbox.tangle.tools";
-function buildDelegationMcpServer(options = {}) {
-  const env = options.env ?? process.env;
-  const sandboxApiKey = options.sandboxApiKey ?? env.TANGLE_API_KEY;
-  if (!sandboxApiKey) return void 0;
-  const baseUrl = options.sandboxBaseUrl ?? env.SANDBOX_BASE_URL ?? env.SANDBOX_API_URL ?? DEFAULT_SANDBOX_BASE_URL;
-  const otelEnv = {};
-  for (const key of OTEL_FORWARD_KEYS) {
-    const value = env[key];
-    if (value) otelEnv[key] = value;
-  }
-  return {
-    [DELEGATION_MCP_SERVER_KEY]: {
-      transport: "stdio",
-      command: "npx",
-      args: ["-y", "@tangle-network/agent-runtime", "mcp"],
-      env: {
-        TANGLE_API_KEY: sandboxApiKey,
-        SANDBOX_BASE_URL: baseUrl,
-        ...otelEnv
-      },
-      enabled: true,
-      metadata: {
-        surface: "delegation:dispatch",
-        tools: [
-          "delegate_code",
-          "delegate_research",
-          "delegate_feedback",
-          "delegation_status",
-          "delegation_history"
-        ]
-      }
-    }
-  };
-}
-function composeProductionAgentProfile(baseProfile, options = {}) {
-  const delegationMcp = buildDelegationMcpServer({
-    sandboxApiKey: options.sandboxApiKey,
-    sandboxBaseUrl: options.sandboxBaseUrl,
-    env: options.env
-  });
-  const baseMcp = baseProfile.mcp ?? {};
-  const withInjected = options.mcpConnections ? { ...baseMcp, ...options.mcpConnections } : { ...baseMcp };
-  const mergedMcp = delegationMcp ? { ...withInjected, ...delegationMcp } : withInjected;
-  const baseFiles = baseProfile.resources?.files ?? [];
-  const mergedFiles = options.extraFiles?.length ? [...baseFiles, ...options.extraFiles] : [...baseFiles];
-  const prompt = options.systemPrompt ? { ...baseProfile.prompt, systemPrompt: options.systemPrompt } : baseProfile.prompt;
-  const mergedTools = options.tools ? { ...baseProfile.tools ?? {}, ...options.tools } : baseProfile.tools;
-  const mergedHooks = mergeHooks(baseProfile.hooks, options.hooks);
-  const mergedSubagents = options.subagents ? { ...baseProfile.subagents ?? {}, ...options.subagents } : baseProfile.subagents;
-  return {
-    ...baseProfile,
-    name: options.name ?? baseProfile.name,
-    prompt,
-    ...mergedTools ? { tools: mergedTools } : {},
-    ...mergedHooks ? { hooks: mergedHooks } : {},
-    ...mergedSubagents ? { subagents: mergedSubagents } : {},
-    mcp: mergedMcp,
-    resources: {
-      ...baseProfile.resources,
-      files: mergedFiles
-    }
-  };
-}
-function mergeHooks(base, overlay) {
-  if (!overlay) return base;
-  const merged = { ...base ?? {} };
-  for (const [event, commands] of Object.entries(overlay)) {
-    merged[event] = [...merged[event] ?? [], ...commands];
-  }
-  return merged;
-}
-
-export {
-  DELEGATION_MCP_SERVER_KEY,
-  DEFAULT_SANDBOX_BASE_URL,
-  buildDelegationMcpServer,
-  composeProductionAgentProfile
-};
-//# sourceMappingURL=chunk-XRYEZPR6.js.map

package/dist/chunk-XRYEZPR6.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/mcp/delegation-profile.ts"],"sourcesContent":["/**\n * Production-profile composition for the agent-runtime delegation MCP.\n *\n * A product agent's sandbox loads the delegation tools (`delegate_code`,\n * `delegate_research`, `delegate_feedback`, `delegation_status`,\n * `delegation_history`) by mounting the `agent-runtime-mcp` stdio server as\n * an MCP entry in its `AgentProfile`. This module is the single composer for\n * that wiring, so every consumer — the fleet agents and agent-builder's\n * generated agents — shares one implementation instead of copying it.\n *\n * The load-bearing invariant: the delegation MCP entry is only ever emitted\n * when a sandbox API key is present. Without the key the kernel's\n * coder/researcher delegate cannot construct an authenticated sandbox client,\n * so we omit the entry rather than ship an MCP child that fails to\n * authenticate on startup. No static profile entry, ever.\n */\n\nimport type {\n  AgentProfile,\n  AgentProfileFileMount,\n  AgentProfileMcpServer,\n  AgentSubagentProfile,\n} from '@tangle-network/sandbox'\n\n/** One hook command entry. The SDK declares `AgentProfile.hooks` as\n *  `Record<string, AgentProfileHookCommand[]>` but does not re-export the element\n *  type from the package entry, so derive it from `AgentProfile` by indexed\n *  access — the single source of truth, no drift from the SDK shape. */\ntype AgentProfileHookCommand = NonNullable<AgentProfile['hooks']>[string][number]\n\n/** MCP server key under which the agent-runtime delegation tools mount. */\nexport const DELEGATION_MCP_SERVER_KEY = 'agent-runtime-delegation'\n\n/**\n * Env vars forwarded into the delegation MCP child so its delegated\n * build/research loops export topology spans to the configured OTLP /\n * Tangle Intelligence sink. Each is forwarded only when present, so the\n * child is a no-op exporter until `OTEL_EXPORTER_OTLP_ENDPOINT` is set in the\n * parent env — never a hardcoded endpoint.\n */\nconst OTEL_FORWARD_KEYS = [\n  'OTEL_EXPORTER_OTLP_ENDPOINT',\n  'OTEL_EXPORTER_OTLP_HEADERS',\n  'TRACE_ID',\n  'PARENT_SPAN_ID',\n] as const\n\nexport const DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nexport interface BuildDelegationMcpServerOptions {\n  /** Sandbox API key forwarded as `TANGLE_API_KEY` to the MCP child. The\n   *  agent-runtime MCP bin reads `TANGLE_API_KEY` and passes it straight to\n   *  `new Sandbox({ apiKey })`. Defaults to `env.TANGLE_API_KEY`. */\n  sandboxApiKey?: string\n  /** Sandbox base URL forwarded as `SANDBOX_BASE_URL`. Defaults to\n   *  `env.SANDBOX_BASE_URL`, then `env.SANDBOX_API_URL`, then the public\n   *  sandbox endpoint. */\n  sandboxBaseUrl?: string\n  /** Environment source for key + OTEL resolution. Defaults to `process.env`;\n   *  injectable for tests and non-process callers. */\n  env?: Record<string, string | undefined>\n}\n\n/**\n * Build the delegation MCP entry the sandbox-side agent loads on startup.\n * Returns `undefined` when no sandbox API key is resolvable — callers merge\n * the result into a profile's `mcp` map only when defined.\n */\nexport function buildDelegationMcpServer(\n  options: BuildDelegationMcpServerOptions = {},\n): Record<string, AgentProfileMcpServer> | undefined {\n  const env = options.env ?? process.env\n  const sandboxApiKey = options.sandboxApiKey ?? env.TANGLE_API_KEY\n  if (!sandboxApiKey) return undefined\n  const baseUrl =\n    options.sandboxBaseUrl ??\n    env.SANDBOX_BASE_URL ??\n    env.SANDBOX_API_URL ??\n    DEFAULT_SANDBOX_BASE_URL\n\n  const otelEnv: Record<string, string> = {}\n  for (const key of OTEL_FORWARD_KEYS) {\n    const value = env[key]\n    if (value) otelEnv[key] = value\n  }\n\n  return {\n    [DELEGATION_MCP_SERVER_KEY]: {\n      transport: 'stdio',\n      command: 'npx',\n      args: ['-y', '@tangle-network/agent-runtime', 'mcp'],\n      env: {\n        TANGLE_API_KEY: sandboxApiKey,\n        SANDBOX_BASE_URL: baseUrl,\n        ...otelEnv,\n      },\n      enabled: true,\n      metadata: {\n        surface: 'delegation:dispatch',\n        tools: [\n          'delegate_code',\n          'delegate_research',\n          'delegate_feedback',\n          'delegation_status',\n          'delegation_history',\n        ],\n      },\n    },\n  }\n}\n\nexport interface ComposeProductionAgentProfileOptions {\n  /** Sandbox API key forwarded to the delegation MCP child. Defaults to\n   *  `env.TANGLE_API_KEY`. When unset, the delegation MCP entry is omitted. */\n  sandboxApiKey?: string\n  /** Sandbox base URL forwarded as `SANDBOX_BASE_URL` to the MCP child. */\n  sandboxBaseUrl?: string\n  /** Replace the base profile's system prompt. Used by per-turn calls that\n   *  swap in workspace-augmented prompts (board summary, learned style). */\n  systemPrompt?: string\n  /** Extra file mounts layered after the base profile's `resources.files`. */\n  extraFiles?: AgentProfileFileMount[]\n  /** Override the profile `name`. Defaults to the base profile's name. */\n  name?: string\n  /** Environment source for key + OTEL resolution. Defaults to `process.env`. */\n  env?: Record<string, string | undefined>\n  /** Box built-in tool ON/OFF flags merged over the base profile's `tools`\n   *  (overlay wins per key). The sandbox-seam mapping of a certified surface's\n   *  tool grants — `AgentProfile.tools` is `Record<string, boolean>` box flags,\n   *  so it carries grants, not arbitrary tool defs. */\n  tools?: Record<string, boolean>\n  /** Per-event hook commands merged over the base profile's `hooks`. An event\n   *  present in both has the extra commands appended after the base ones. */\n  hooks?: Record<string, AgentProfileHookCommand[]>\n  /** Subagent definitions merged over the base profile's `subagents` (overlay\n   *  wins per key). */\n  subagents?: Record<string, AgentSubagentProfile>\n  /** Resolved certified MCP connections injected into `AgentProfile.mcp` — the\n   *  sandbox-seam delivery of a `ResolvedSurface.mcpConnections`. Merged after\n   *  the base map and before the delegation entry, so a base/delegation key is\n   *  never silently shadowed by an injected one. */\n  mcpConnections?: Record<string, AgentProfileMcpServer>\n}\n\n/**\n * Compose the production `AgentProfile`: the canonical base profile with the\n * delegation MCP merged into `mcp`. Used by every call site that boots a\n * sandbox or runs a chat turn through the sandbox path, and by eval wiring so\n * the scorecard profile hash reflects the actual production profile.\n *\n * Merge rules:\n *   - `mcp`: base map preserved; `options.mcpConnections` (resolved certified\n *     servers) merged over it; the delegation entry is appended last under\n *     {@link DELEGATION_MCP_SERVER_KEY}, and omitted entirely when no sandbox\n *     API key resolves.\n *   - `tools`: base box-flags map preserved; `options.tools` overlaid per key.\n *   - `hooks`: per event, base commands preserved; `options.hooks[event]`\n *     appended after the base ones.\n *   - `subagents`: base map preserved; `options.subagents` overlaid per key.\n *   - `prompt.systemPrompt`: replaced when `options.systemPrompt` is set.\n *   - `resources.files`: `options.extraFiles` concatenated after base files.\n *   - `name`: replaced when `options.name` is set.\n */\nexport function composeProductionAgentProfile(\n  baseProfile: AgentProfile,\n  options: ComposeProductionAgentProfileOptions = {},\n): AgentProfile {\n  const delegationMcp = buildDelegationMcpServer({\n    sandboxApiKey: options.sandboxApiKey,\n    sandboxBaseUrl: options.sandboxBaseUrl,\n    env: options.env,\n  })\n\n  const baseMcp = baseProfile.mcp ?? {}\n  const withInjected: Record<string, AgentProfileMcpServer> = options.mcpConnections\n    ? { ...baseMcp, ...options.mcpConnections }\n    : { ...baseMcp }\n  const mergedMcp: Record<string, AgentProfileMcpServer> = delegationMcp\n    ? { ...withInjected, ...delegationMcp }\n    : withInjected\n\n  const baseFiles = baseProfile.resources?.files ?? []\n  const mergedFiles: AgentProfileFileMount[] = options.extraFiles?.length\n    ? [...baseFiles, ...options.extraFiles]\n    : [...baseFiles]\n\n  const prompt = options.systemPrompt\n    ? { ...baseProfile.prompt, systemPrompt: options.systemPrompt }\n    : baseProfile.prompt\n\n  const mergedTools = options.tools\n    ? { ...(baseProfile.tools ?? {}), ...options.tools }\n    : baseProfile.tools\n\n  const mergedHooks = mergeHooks(baseProfile.hooks, options.hooks)\n\n  const mergedSubagents = options.subagents\n    ? { ...(baseProfile.subagents ?? {}), ...options.subagents }\n    : baseProfile.subagents\n\n  return {\n    ...baseProfile,\n    name: options.name ?? baseProfile.name,\n    prompt,\n    ...(mergedTools ? { tools: mergedTools } : {}),\n    ...(mergedHooks ? { hooks: mergedHooks } : {}),\n    ...(mergedSubagents ? { subagents: mergedSubagents } : {}),\n    mcp: mergedMcp,\n    resources: {\n      ...baseProfile.resources,\n      files: mergedFiles,\n    },\n  }\n}\n\n/** Merge per-event hook command lists: base commands first, overlay commands\n *  appended after. Returns the base map unchanged when no overlay is given. */\nfunction mergeHooks(\n  base: Record<string, AgentProfileHookCommand[]> | undefined,\n  overlay: Record<string, AgentProfileHookCommand[]> | undefined,\n): Record<string, AgentProfileHookCommand[]> | undefined {\n  if (!overlay) return base\n  const merged: Record<string, AgentProfileHookCommand[]> = { ...(base ?? {}) }\n  for (const [event, commands] of Object.entries(overlay)) {\n    merged[event] = [...(merged[event] ?? []), ...commands]\n  }\n  return merged\n}\n"],"mappings":";AA+BO,IAAM,4BAA4B;AASzC,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,2BAA2B;AAqBjC,SAAS,yBACd,UAA2C,CAAC,GACO;AACnD,QAAM,MAAM,QAAQ,OAAO,QAAQ;AACnC,QAAM,gBAAgB,QAAQ,iBAAiB,IAAI;AACnD,MAAI,CAAC,cAAe,QAAO;AAC3B,QAAM,UACJ,QAAQ,kBACR,IAAI,oBACJ,IAAI,mBACJ;AAEF,QAAM,UAAkC,CAAC;AACzC,aAAW,OAAO,mBAAmB;AACnC,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,MAAO,SAAQ,GAAG,IAAI;AAAA,EAC5B;AAEA,SAAO;AAAA,IACL,CAAC,yBAAyB,GAAG;AAAA,MAC3B,WAAW;AAAA,MACX,SAAS;AAAA,MACT,MAAM,CAAC,MAAM,iCAAiC,KAAK;AAAA,MACnD,KAAK;AAAA,QACH,gBAAgB;AAAA,QAChB,kBAAkB;AAAA,QAClB,GAAG;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,UAAU;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAsDO,SAAS,8BACd,aACA,UAAgD,CAAC,GACnC;AACd,QAAM,gBAAgB,yBAAyB;AAAA,IAC7C,eAAe,QAAQ;AAAA,IACvB,gBAAgB,QAAQ;AAAA,IACxB,KAAK,QAAQ;AAAA,EACf,CAAC;AAED,QAAM,UAAU,YAAY,OAAO,CAAC;AACpC,QAAM,eAAsD,QAAQ,iBAChE,EAAE,GAAG,SAAS,GAAG,QAAQ,eAAe,IACxC,EAAE,GAAG,QAAQ;AACjB,QAAM,YAAmD,gBACrD,EAAE,GAAG,cAAc,GAAG,cAAc,IACpC;AAEJ,QAAM,YAAY,YAAY,WAAW,SAAS,CAAC;AACnD,QAAM,cAAuC,QAAQ,YAAY,SAC7D,CAAC,GAAG,WAAW,GAAG,QAAQ,UAAU,IACpC,CAAC,GAAG,SAAS;AAEjB,QAAM,SAAS,QAAQ,eACnB,EAAE,GAAG,YAAY,QAAQ,cAAc,QAAQ,aAAa,IAC5D,YAAY;AAEhB,QAAM,cAAc,QAAQ,QACxB,EAAE,GAAI,YAAY,SAAS,CAAC,GAAI,GAAG,QAAQ,MAAM,IACjD,YAAY;AAEhB,QAAM,cAAc,WAAW,YAAY,OAAO,QAAQ,KAAK;AAE/D,QAAM,kBAAkB,QAAQ,YAC5B,EAAE,GAAI,YAAY,aAAa,CAAC,GAAI,GAAG,QAAQ,UAAU,IACzD,YAAY;AAEhB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM,QAAQ,QAAQ,YAAY;AAAA,IAClC;AAAA,IACA,GAAI,cAAc,EAAE,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5C,GAAI,cAAc,EAAE,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5C,GAAI,kBAAkB,EAAE,WAAW,gBAAgB,IAAI,CAAC;AAAA,IACxD,KAAK;AAAA,IACL,WAAW;AAAA,MACT,GAAG,YAAY;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAIA,SAAS,WACP,MACA,SACuD;AACvD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAoD,EAAE,GAAI,QAAQ,CAAC,EAAG;AAC5E,aAAW,CAAC,OAAO,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG;AACvD,WAAO,KAAK,IAAI,CAAC,GAAI,OAAO,KAAK,KAAK,CAAC,GAAI,GAAG,QAAQ;AAAA,EACxD;AACA,SAAO;AACT;","names":[]}