@tangle-network/agent-runtime 0.95.0 → 0.96.1

package/dist/knowledge.d.ts

@@ -1,5 +1,6 @@
-import { AgentImprovementProposal, AgentImprovementReview, AgentImprovementActivation, AgentCandidateKnowledge } from '@tangle-network/agent-interface';
-import { RagKnowledgeUpdateResult, KnowledgeReadinessSpec, BuildEvalKnowledgeBundleOptions, KnowledgeBaseQualityOptions, KnowledgeImprovementResult, KnowledgeImprovementOptions } from '@tangle-network/agent-knowledge';
+import { PromoteKnowledgeCandidateOptions, RagKnowledgeUpdateResult, KnowledgeReadinessSpec, BuildEvalKnowledgeBundleOptions, KnowledgeBaseQualityOptions, KnowledgeImprovementResult, KnowledgeImprovementOptions } from '@tangle-network/agent-knowledge';
+import { a as AgentImprovementActivationResultStore, c as AgentImprovementActivationTransition, A as AgentImprovementActivationReconciliation } from './activation-B0ZD7nfX.js';
+import { AgentCandidateKnowledge, AgentCandidateCapturedArtifact, AgentCandidateBundle } from '@tangle-network/agent-interface';
 import { b as AgentCandidateOutputArtifactPort } from './types-CWqfCO8s.js';
 import { E as ExecutorConfig } from './coordination-BFE3Den7.js';
 import { a as SuperviseOptions, S as SupervisorProfile } from './supervise-BLPI50-w.js';
@@ -17,6 +18,18 @@ import './environment-provider.js';
 import '@tangle-network/agent-interface/environment-provider';
 import '@tangle-network/agent-profile-materialize';
 
+interface CreateKnowledgeImprovementActivationExecutorOptions extends Omit<PromoteKnowledgeCandidateOptions, 'root' | 'candidate'> {
+    root: string;
+    identity: string;
+    results: AgentImprovementActivationResultStore;
+}
+interface KnowledgeImprovementActivationExecutor {
+    transition: AgentImprovementActivationTransition;
+    reconcile: AgentImprovementActivationReconciliation;
+}
+/** Apply or restore one local knowledge candidate through the shared activation contract. */
+declare function createKnowledgeImprovementActivationExecutor(options: CreateKnowledgeImprovementActivationExecutorOptions): KnowledgeImprovementActivationExecutor;
+
 /** Standing prompt for a supervisor that grows a shared knowledge base through spawned researchers. */
 declare const RESEARCH_SUPERVISOR_SYSTEM_PROMPT: string;
 interface KnowledgeReadinessCheckInput {
@@ -86,15 +99,8 @@ interface RunKnowledgeImprovementJobOptions extends Omit<KnowledgeImprovementOpt
     allowedModels?: readonly string[];
     runSupervised?: (profile: SupervisorProfile, task: unknown, opts: SuperviseOptions) => Promise<SupervisedResult<unknown>>;
     candidateArtifacts?: AgentCandidateOutputArtifactPort;
-    approval?: ApprovedKnowledgeImprovementCandidate;
     onMeasurement?: (measurement: KnowledgeImprovementJobMeasurement) => Promise<void> | void;
 }
-interface ApprovedKnowledgeImprovementCandidate {
-    proposal: AgentImprovementProposal;
-    review: AgentImprovementReview;
-    activation: AgentImprovementActivation;
-    authorizeActivation: (activation: AgentImprovementActivation, proposal: AgentImprovementProposal, review: AgentImprovementReview) => boolean | Promise<boolean>;
-}
 interface KnowledgeImprovementJobMeasurement {
     startedAt: string;
     finishedAt: string;
@@ -112,11 +118,20 @@ interface KnowledgeImprovementJobMeasurement {
 }
 interface KnowledgeImprovementJobResult {
     improvement: KnowledgeImprovementResult;
-    candidateKnowledge?: AgentCandidateKnowledge;
+    knowledge?: KnowledgeImprovementCandidatePair;
     measurement: KnowledgeImprovementJobMeasurement;
-    promoted: boolean;
     blocked: boolean;
 }
+interface KnowledgeImprovementCandidatePair {
+    reference: AgentCandidateKnowledge['candidate'];
+    evaluation: AgentCandidateCapturedArtifact;
+    baseline: AgentCandidateKnowledge['snapshot'];
+    candidate: AgentCandidateKnowledge['snapshot'];
+}
+interface KnowledgeImprovementExperimentBundles {
+    baseline: AgentCandidateBundle;
+    candidate: AgentCandidateBundle;
+}
 interface AgentKnowledgeReadinessCheckOptions {
     goal: string;
     readinessSpecs?: readonly KnowledgeReadinessSpec[];
@@ -127,7 +142,9 @@ interface AgentKnowledgeReadinessCheckOptions {
 }
 /** Build the default readiness check backed by `@tangle-network/agent-knowledge` validation and scoring. */
 declare function createAgentKnowledgeReadinessCheck(options: AgentKnowledgeReadinessCheckOptions): KnowledgeReadinessCheck;
-/** Produce a frozen KB candidate, and promote it only when an exact signed review is supplied. */
+/** Produce a frozen KB candidate while leaving live knowledge content unchanged. */
 declare function runKnowledgeImprovementJob(options: RunKnowledgeImprovementJobOptions): Promise<KnowledgeImprovementJobResult>;
+/** Attach both frozen knowledge inputs to one otherwise-identical bundle pair. */
+declare function buildKnowledgeImprovementExperimentBundles(bundle: AgentCandidateBundle, knowledge: KnowledgeImprovementCandidatePair): KnowledgeImprovementExperimentBundles;
 
-export { type AgentKnowledgeReadinessCheckOptions, type ApprovedKnowledgeImprovementCandidate, type KnowledgeImprovementJobMeasurement, type KnowledgeImprovementJobResult, type KnowledgeReadinessCheck, type KnowledgeReadinessCheckInput, type KnowledgeReadinessCheckResult, RESEARCH_SUPERVISOR_SYSTEM_PROMPT, type RunKnowledgeImprovementJobOptions, type SupervisedKnowledgeUpdateInput, type SupervisedKnowledgeUpdateOptions, type SupervisedKnowledgeUpdateResult, type SupervisedKnowledgeUpdater, createAgentKnowledgeReadinessCheck, createSupervisedKnowledgeUpdater, formatSupervisedKnowledgeTask, knowledgeReadinessDeliverable, runKnowledgeImprovementJob, runSupervisedKnowledgeUpdate };
+export { type AgentKnowledgeReadinessCheckOptions, type CreateKnowledgeImprovementActivationExecutorOptions, type KnowledgeImprovementActivationExecutor, type KnowledgeImprovementCandidatePair, type KnowledgeImprovementExperimentBundles, type KnowledgeImprovementJobMeasurement, type KnowledgeImprovementJobResult, type KnowledgeReadinessCheck, type KnowledgeReadinessCheckInput, type KnowledgeReadinessCheckResult, RESEARCH_SUPERVISOR_SYSTEM_PROMPT, type RunKnowledgeImprovementJobOptions, type SupervisedKnowledgeUpdateInput, type SupervisedKnowledgeUpdateOptions, type SupervisedKnowledgeUpdateResult, type SupervisedKnowledgeUpdater, buildKnowledgeImprovementExperimentBundles, createAgentKnowledgeReadinessCheck, createKnowledgeImprovementActivationExecutor, createSupervisedKnowledgeUpdater, formatSupervisedKnowledgeTask, knowledgeReadinessDeliverable, runKnowledgeImprovementJob, runSupervisedKnowledgeUpdate };

package/dist/knowledge.js

@@ -1,31 +1,32 @@
 import {
   RESEARCH_SUPERVISOR_SYSTEM_PROMPT,
+  buildKnowledgeImprovementExperimentBundles,
   createAgentKnowledgeReadinessCheck,
+  createKnowledgeImprovementActivationExecutor,
   createSupervisedKnowledgeUpdater,
   formatSupervisedKnowledgeTask,
   knowledgeReadinessDeliverable,
   runKnowledgeImprovementJob,
   runSupervisedKnowledgeUpdate
-} from "./chunk-AP7CPGMZ.js";
+} from "./chunk-3XKSBI2U.js";
 import "./chunk-5QOB7H74.js";
-import "./chunk-MKGRLDWB.js";
-import "./chunk-G55QE4IQ.js";
-import "./chunk-WTZ37EQY.js";
-import "./chunk-IADLKE7I.js";
+import "./chunk-BLQIYRVR.js";
+import "./chunk-PSOCBNM3.js";
+import "./chunk-YOLKCWRV.js";
+import "./chunk-UQ6PNNXM.js";
 import "./chunk-DPEUKJRO.js";
-import "./chunk-ISTDY47H.js";
+import "./chunk-HZDEXTSL.js";
 import "./chunk-IMSNJSXH.js";
 import "./chunk-M6MD6JBS.js";
 import "./chunk-3MDZX7YU.js";
-import "./chunk-QDSOD7RC.js";
+import "./chunk-FD2MBMOH.js";
 import "./chunk-M22PL4GH.js";
-import "./chunk-DHCHL6OG.js";
-import "./chunk-EP6RVHMX.js";
 import "./chunk-YEJR7IXO.js";
-import "./chunk-DGUM43GV.js";
 export {
   RESEARCH_SUPERVISOR_SYSTEM_PROMPT,
+  buildKnowledgeImprovementExperimentBundles,
   createAgentKnowledgeReadinessCheck,
+  createKnowledgeImprovementActivationExecutor,
   createSupervisedKnowledgeUpdater,
   formatSupervisedKnowledgeTask,
   knowledgeReadinessDeliverable,

package/dist/{loop-runner-bin-BIQldFS8.d.ts → loop-runner-bin-Cn1N2rRo.d.ts}

@@ -1,6 +1,6 @@
 import { Scenario } from '@tangle-network/agent-eval/campaign';
 import { SelfImproveOptions, SelfImproveResult } from '@tangle-network/agent-eval/contract';
-import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-BC3bZpH0.js';
+import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-CmYCMbFT.js';
 import { F as FactCandidate, C as CreateKbGateOptions } from './kb-gate-CwHO0vz6.js';
 import { B as Budget } from './types-CmnA2iL3.js';
 import { A as AuthoredHarness, W as WinnerStrategy, a as WorktreeFanoutOptions, b as WorktreePatchArtifact } from './worktree-fanout-DCA3G4bO.js';

package/dist/loop-runner-bin.d.ts

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-export { L as LoopRunnerCliArgs, e as LoopRunnerCliResult, p as parseLoopRunnerArgv, k as runLoopRunnerCli } from './loop-runner-bin-BIQldFS8.js';
+export { L as LoopRunnerCliArgs, e as LoopRunnerCliResult, p as parseLoopRunnerArgv, k as runLoopRunnerCli } from './loop-runner-bin-Cn1N2rRo.js';
 import '@tangle-network/agent-eval/campaign';
 import '@tangle-network/agent-eval/contract';
-import './types-BC3bZpH0.js';
+import './types-CmYCMbFT.js';
 import '@tangle-network/agent-eval';
 import './kb-gate-CwHO0vz6.js';
 import './types-CmnA2iL3.js';

package/dist/loop-runner-bin.js

@@ -2,21 +2,19 @@
 import {
   parseLoopRunnerArgv,
   runLoopRunnerCli
-} from "./chunk-BPGXIKK7.js";
+} from "./chunk-SGQ4YIQW.js";
 import "./chunk-SGKPNBXE.js";
-import "./chunk-YLUOTX6U.js";
-import "./chunk-IADLKE7I.js";
-import "./chunk-DPEUKJRO.js";
+import "./chunk-FXF2OL34.js";
 import "./chunk-Q2JSAVQ3.js";
-import "./chunk-ISTDY47H.js";
+import "./chunk-UQ6PNNXM.js";
+import "./chunk-DPEUKJRO.js";
+import "./chunk-HZDEXTSL.js";
 import "./chunk-IMSNJSXH.js";
 import "./chunk-M6MD6JBS.js";
 import "./chunk-3MDZX7YU.js";
-import "./chunk-QDSOD7RC.js";
+import "./chunk-FD2MBMOH.js";
 import "./chunk-M22PL4GH.js";
-import "./chunk-EP6RVHMX.js";
 import "./chunk-YEJR7IXO.js";
-import "./chunk-DGUM43GV.js";
 export {
   parseLoopRunnerArgv,
   runLoopRunnerCli

package/dist/loops.d.ts

@@ -12,7 +12,7 @@ import { RunProfileMatrixResult, Scenario, ProfileDispatchFn, JudgeConfig, RunPr
 export { AgentEnvironmentProviderRef, AgentEnvironmentProviderRegistry, ProviderAsSandboxClientOptions, ProviderExecutorOptions, SandboxClientProviderOptions, createAgentEnvironmentProviderRegistry, providerAsExecutor, providerAsSandboxClient, resolveAgentEnvironmentProvider, sandboxClientAsProvider } from './environment-provider.js';
 import { C as CorpusRecord, c as Corpus, O as Outcome, S as ScopeAnalyzeInput, d as AssertTraceDerivedFindings, e as SteerContext, f as ScopeAnalyst, F as FanoutOptions, g as CombinatorShape, h as ScopeWidenGate, L as LoopUntilSpec, P as PanelSpec, i as PipelineStage, W as WinnerStrategy, j as FanoutWinnerSelector, V as VerifySpec, k as WidenSpec, l as CorpusFilter, R as RenderCorpusToInstructionsOptions, D as DefinePersonaInput, m as Persona, n as RunPersonifiedOptions, o as ShapeRegistry, p as LoopShape, E as EqualKArm, q as EqualKOnCostOptions, r as EqualKVerdict, T as TrajectoryReportOptions, s as TrajectoryReport } from './worktree-fanout-DCA3G4bO.js';
 export { A as AuthoredHarness, t as DefinePersona, u as EqualKOnCost, v as Fanout, w as FanoutSynthesis, x as FlatWidenGate, y as LoopUntil, z as LoopUntilState, B as Panel, G as PanelJudge, H as PanelVerdict, I as PatchDeliverableOptions, J as PersonaContext, K as PersonaExecutors, M as Pipeline, N as RenderCorpusToInstructions, Q as RunPersonified, U as ShapeBudget, X as ShapeContext, Y as TrajectoryNode, Z as TrajectoryReportFn, _ as Verify, $ as Widen, a0 as WidenDecision, a1 as WidenLineage, a2 as WorktreeCliExecutorOptions, a as WorktreeFanoutOptions, b as WorktreePatchArtifact, a3 as createWorktreeCliExecutor, a4 as patchDelivered, a5 as worktreeFanout } from './worktree-fanout-DCA3G4bO.js';
-import { b as AnalystRegistryLike } from './types-BC3bZpH0.js';
+import { b as AnalystRegistryLike } from './types-CmYCMbFT.js';
 import { AgentProfile as AgentProfile$1 } from '@tangle-network/agent-interface';
 import { R as RouterConfig, T as ToolLoopChat, a as ToolLoopCompactionOptions } from './sanitize-BTSsdBXw.js';
 export { j as RouterChatResult, k as RouterChatToolsResult, l as RouterToolCall, m as RouterToolLoopResult, n as ToolLoopCompaction, b as ToolSpec, r as routerBrain, o as routerChatWithTools, p as routerChatWithUsage, q as routerToolLoop } from './sanitize-BTSsdBXw.js';

package/dist/loops.js

@@ -102,7 +102,8 @@ import {
   watchTrace,
   widen,
   worktreeFanout
-} from "./chunk-YLUOTX6U.js";
+} from "./chunk-FXF2OL34.js";
+import "./chunk-Q2JSAVQ3.js";
 import {
   acquireSandbox,
   asAuthoredProfile,
@@ -140,12 +141,11 @@ import {
   supervisorAgent,
   supervisorInstructions,
   workerFromBackend
-} from "./chunk-IADLKE7I.js";
+} from "./chunk-UQ6PNNXM.js";
 import "./chunk-DPEUKJRO.js";
-import "./chunk-Q2JSAVQ3.js";
 import {
   assertModelAllowed
-} from "./chunk-ISTDY47H.js";
+} from "./chunk-HZDEXTSL.js";
 import {
   InMemoryResultBlobStore,
   InMemorySpawnJournal,
@@ -166,9 +166,7 @@ import {
   mapSandboxToolEvent,
   sumSandboxUsage
 } from "./chunk-M22PL4GH.js";
-import "./chunk-EP6RVHMX.js";
 import "./chunk-YEJR7IXO.js";
-import "./chunk-DGUM43GV.js";
 export {
   FileCorpus,
   InMemoryCorpus,

package/dist/mcp/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   readTraceContextFromEnv
-} from "../chunk-ZEYAT33L.js";
+} from "../chunk-Y3SRWZMP.js";
 import {
   resolveRouterBaseUrl
 } from "../chunk-NURIQBJQ.js";
@@ -9,16 +9,14 @@ import {
   DelegationTaskQueue,
   FileDelegationStore,
   createMcpServer
-} from "../chunk-IADLKE7I.js";
+} from "../chunk-UQ6PNNXM.js";
 import "../chunk-DPEUKJRO.js";
-import "../chunk-ISTDY47H.js";
+import "../chunk-HZDEXTSL.js";
 import "../chunk-IMSNJSXH.js";
 import "../chunk-M6MD6JBS.js";
 import "../chunk-3MDZX7YU.js";
 import "../chunk-M22PL4GH.js";
-import "../chunk-EP6RVHMX.js";
 import "../chunk-YEJR7IXO.js";
-import "../chunk-DGUM43GV.js";
 
 // src/mcp/delegate-supervisor-provisioning.ts
 var DEFAULT_SUPERVISOR_MODEL = "moonshotai/kimi-k2.6";

package/dist/mcp/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/delegate-supervisor-provisioning.ts","../../src/mcp/bin.ts"],"sourcesContent":["/**\n *\n * Resolve the `delegate` supervisor substrate (router brain + worker backend) from env, so the\n * `agent-runtime-mcp` bin can serve the ONE generic `delegate` verb by env, over the SAME stdio\n * invocation a consumer already mounts.\n *\n * `delegate` is wired into `createMcpServer` via `McpServerOptions.delegateSupervisor`, which needs a\n * router (the supervisor brain's substrate) and a backend (WHERE the authored workers run). Inside a\n * sandbox child the natural backend is `sandbox`: authored workers run as sub-sandboxes through the\n * SAME `SandboxClient` the bin already loads from `TANGLE_API_KEY`. The brain's router reuses the\n * repo's `resolveRouterBaseUrl` convention\n * (`TANGLE_ROUTER_URL` / `TANGLE_ROUTER_BASE_URL`), normalised to an OpenAI-compatible `/v1` endpoint,\n * keyed by `TANGLE_API_KEY`.\n *\n * @experimental\n */\n\nimport type { BackendType } from '@tangle-network/sandbox'\nimport { type RouterEnv, resolveRouterBaseUrl } from '../model-resolution.js'\nimport type { SandboxClient } from '../runtime'\nimport type { RouterConfig } from '../runtime/router-client'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { DelegateHandlerOptions } from './tools/delegate'\n\nconst DEFAULT_SUPERVISOR_MODEL = 'moonshotai/kimi-k2.6'\nconst DEFAULT_WORKER_HARNESS = 'opencode'\n\nfunction trimmed(value: string | undefined): string | undefined {\n  const v = value?.trim()\n  return v ? v : undefined\n}\n\n/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:\n *  the wiring is additive, so consumers that do not enable it are unaffected. */\nexport function delegateEnabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.MCP_ENABLE_DELEGATE === '1'\n}\n\n/** Resolve the supervisor brain's router substrate from env. The key falls back through the platform\n *  key the bin already requires; the base reuses `resolveRouterBaseUrl`, normalised to `/v1`. */\nfunction resolveRouter(env: NodeJS.ProcessEnv): RouterConfig {\n  const routerKey = trimmed(env.MCP_SUPERVISOR_ROUTER_KEY) ?? trimmed(env.TANGLE_API_KEY) ?? ''\n  const base = trimmed(env.MCP_SUPERVISOR_ROUTER_BASE_URL) ?? resolveRouterBaseUrl(env as RouterEnv)\n  const routerBaseUrl = /\\/v\\d+\\/?$/.test(base)\n    ? base.replace(/\\/$/, '')\n    : `${base.replace(/\\/$/, '')}/v1`\n  const model =\n    trimmed(env.MCP_SUPERVISOR_MODEL) ??\n    trimmed(env.MCP_WORKER_MODEL) ??\n    trimmed(env.WORKER_MODEL) ??\n    DEFAULT_SUPERVISOR_MODEL\n  return { routerBaseUrl, routerKey, model }\n}\n\n/**\n * Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded\n * `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only\n * when asked. The worker backend is `sandbox` (authored workers run as sub-sandboxes via the same\n * client) on the harness named by `MCP_DELEGATE_WORKER_HARNESS` (default `opencode`).\n */\nexport function resolveDelegateSupervisor(\n  sandboxClient: SandboxClient,\n  env: NodeJS.ProcessEnv = process.env,\n): DelegateHandlerOptions | undefined {\n  if (!delegateEnabled(env)) return undefined\n  const router = resolveRouter(env)\n  const harness = (trimmed(env.MCP_DELEGATE_WORKER_HARNESS) ??\n    DEFAULT_WORKER_HARNESS) as BackendType\n  const backend: ExecutorConfig = {\n    backend: 'sandbox',\n    harness,\n    sandboxClient,\n  }\n  return {\n    router,\n    backend,\n    model: router.model,\n  }\n}\n","#!/usr/bin/env node\n\n/**\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Serves the ONE generic `delegate` verb (opt-in via `MCP_ENABLE_DELEGATE=1`): one intent → a\n * supervisor that authors + drives its own worker over `supervise()`, returning the delivered output\n * with its cost. The supervisor brain runs on the router; authored workers run as sub-sandboxes\n * through the same `SandboxClient` the bin loads from `TANGLE_API_KEY`. The queue-bound tools\n * (`delegate_feedback`, `delegation_status`, `delegation_history`) are always served.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   MCP_ENABLE_DELEGATE              set to `1` to serve the generic `delegate` verb. Its authoring\n *                                    supervisor runs the brain on the router and spawns authored\n *                                    workers as sub-sandboxes via the same client; needs TANGLE_API_KEY.\n *   MCP_SUPERVISOR_MODEL             supervisor brain model id (falls back to MCP_WORKER_MODEL, then\n *                                    WORKER_MODEL, then a default). Must be a tool-calling model.\n *   MCP_SUPERVISOR_ROUTER_KEY        router key for the supervisor brain (defaults to TANGLE_API_KEY)\n *   MCP_SUPERVISOR_ROUTER_BASE_URL   router base for the supervisor brain (defaults to the repo's\n *                                    resolveRouterBaseUrl, normalized to `/v1`)\n *   MCP_DELEGATE_WORKER_HARNESS      harness the authored workers run on (default `opencode`)\n *   AGENT_RUNTIME_DELEGATION_STATE_FILE\n *                                    optional — absolute path of a JSON state\n *                                    file. When set, delegation records persist\n *                                    across MCP restarts (FileDelegationStore):\n *                                    status/history survive and idempotency keys\n *                                    dedupe across processes.\n *   AGENT_RUNTIME_DELEGATION_STATE_RECOVER\n *                                    set to `1` to archive a corrupt state file\n *                                    (`<file>.corrupt-<ts>`) and start empty\n *                                    instead of refusing to boot.\n *   AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL\n *                                    optional — positive integer cap on retained\n *                                    terminal records. Unset = keep forever.\n *\n * @experimental\n */\n\nimport type { SandboxClient } from '../runtime'\nimport { delegateEnabled, resolveDelegateSupervisor } from './delegate-supervisor-provisioning'\nimport { FileDelegationStore } from './delegation-store'\nimport { createMcpServer } from './server'\nimport { DelegationTaskQueue } from './task-queue'\nimport { readTraceContextFromEnv, type TraceContext } from './trace-propagation'\n\nconst DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nasync function main(): Promise<void> {\n  const wantDelegate = delegateEnabled(process.env)\n\n  // The generic `delegate` verb needs the sandbox client: its authored workers run as sub-sandboxes\n  // (the `sandbox` backend). When `delegate` is not opted in, the server runs the queue-only subset\n  // (feedback + status + history) with no sandbox.\n  let sandboxClient: SandboxClient | undefined\n  if (wantDelegate) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required to serve `delegate`. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n  }\n\n  // The supervisor's loop topology spans export to the OTLP / Tangle Intelligence sink when\n  // OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for correlation). The same\n  // context is stamped onto every delegation record so journal consumers join records into the\n  // caller's trace.\n  const traceContext = readTraceContextFromEnv()\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  // The ONE generic `delegate` verb — opt-in via MCP_ENABLE_DELEGATE=1. Its authoring supervisor\n  // runs the brain on the router and spawns authored workers as sub-sandboxes through the SAME\n  // client, so it needs the loaded `sandboxClient`. Gated on the client resolving (no key → no\n  // delegate, fail-closed).\n  const delegateSupervisor =\n    wantDelegate && sandboxClient ? resolveDelegateSupervisor(sandboxClient) : undefined\n  if (wantDelegate && delegateSupervisor) {\n    process.stderr.write('agent-runtime-mcp: delegate enabled — generic authoring supervisor\\n')\n  }\n\n  const durableQueue = await buildDurableQueueFromEnv(traceContext)\n  const server = createMcpServer({\n    ...(delegateSupervisor ? { delegateSupervisor } : {}),\n    traceContext,\n    ...(durableQueue ? { queue: durableQueue } : {}),\n  })\n\n  const shutdown = () => {\n    server.stop()\n    // Drain journal writes so the state file reflects the final record\n    // states before the process exits. A persist failure already routed\n    // through onPersistError; swallow the duplicate rejection here.\n    if (durableQueue) {\n      void durableQueue\n        .flush()\n        .catch(() => {})\n        .finally(() => process.exit(0))\n      return\n    }\n    process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function buildDurableQueueFromEnv(\n  traceContext: TraceContext,\n): Promise<DelegationTaskQueue | undefined> {\n  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim()\n  if (!stateFile) return undefined\n  const store = new FileDelegationStore({\n    filePath: stateFile,\n    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === '1',\n  })\n  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL)\n  const queue = await DelegationTaskQueue.restore({\n    store,\n    traceContext,\n    ...(maxTerminalRecords !== undefined ? { maxTerminalRecords } : {}),\n    onPersistError: (error) => {\n      // Durable mode that can no longer write is a broken contract: crash\n      // loud instead of degrading to memory-only behind the caller's back.\n      process.stderr.write(`agent-runtime-mcp: ${error.message}\\n`)\n      process.exit(1)\n    },\n  })\n  process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\\n`)\n  return queue\n}\n\nfunction parseRetention(raw: string | undefined): number | undefined {\n  if (raw === undefined || raw.trim() === '') return undefined\n  const n = Number(raw)\n  if (!Number.isInteger(n) || n < 1) {\n    process.stderr.write(\n      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got \"${raw}\"\\n`,\n    )\n    process.exit(2)\n  }\n  return n\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // `delegate` requires a real client; the stub fails loud at create() so the\n  // agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; `delegate` is disabled in diagnostic mode. Set TANGLE_API_KEY or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  // @tangle-network/sandbox ≥0.6 makes baseUrl required; default it so the MCP server\n  // starts without forcing every caller to set SANDBOX_BASE_URL. Treat empty/whitespace as\n  // unset (|| not ??) so `SANDBOX_BASE_URL=` still resolves to the default.\n  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL\n  return new SandboxCtor({ apiKey, baseUrl })\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAwBA,IAAM,2BAA2B;AACjC,IAAM,yBAAyB;AAE/B,SAAS,QAAQ,OAA+C;AAC9D,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,IAAI,IAAI;AACjB;AAIO,SAAS,gBAAgB,MAAyB,QAAQ,KAAc;AAC7E,SAAO,IAAI,wBAAwB;AACrC;AAIA,SAAS,cAAc,KAAsC;AAC3D,QAAM,YAAY,QAAQ,IAAI,yBAAyB,KAAK,QAAQ,IAAI,cAAc,KAAK;AAC3F,QAAM,OAAO,QAAQ,IAAI,8BAA8B,KAAK,qBAAqB,GAAgB;AACjG,QAAM,gBAAgB,aAAa,KAAK,IAAI,IACxC,KAAK,QAAQ,OAAO,EAAE,IACtB,GAAG,KAAK,QAAQ,OAAO,EAAE,CAAC;AAC9B,QAAM,QACJ,QAAQ,IAAI,oBAAoB,KAChC,QAAQ,IAAI,gBAAgB,KAC5B,QAAQ,IAAI,YAAY,KACxB;AACF,SAAO,EAAE,eAAe,WAAW,MAAM;AAC3C;AAQO,SAAS,0BACd,eACA,MAAyB,QAAQ,KACG;AACpC,MAAI,CAAC,gBAAgB,GAAG,EAAG,QAAO;AAClC,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,UAAW,QAAQ,IAAI,2BAA2B,KACtD;AACF,QAAM,UAA0B;AAAA,IAC9B,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,EAChB;AACF;;;AC9BA,IAAM,2BAA2B;AAEjC,eAAe,OAAsB;AACnC,QAAM,eAAe,gBAAgB,QAAQ,GAAG;AAKhD,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAAA,EAChD;AAMA,QAAM,eAAe,wBAAwB;AAC7C,MAAI,QAAQ,IAAI,6BAA6B;AAC3C,YAAQ,OAAO;AAAA,MACb,qDAAgD,QAAQ,IAAI,2BAA2B;AAAA;AAAA,IACzF;AAAA,EACF;AAMA,QAAM,qBACJ,gBAAgB,gBAAgB,0BAA0B,aAAa,IAAI;AAC7E,MAAI,gBAAgB,oBAAoB;AACtC,YAAQ,OAAO,MAAM,2EAAsE;AAAA,EAC7F;AAEA,QAAM,eAAe,MAAM,yBAAyB,YAAY;AAChE,QAAM,SAAS,gBAAgB;AAAA,IAC7B,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACnD;AAAA,IACA,GAAI,eAAe,EAAE,OAAO,aAAa,IAAI,CAAC;AAAA,EAChD,CAAC;AAED,QAAM,WAAW,MAAM;AACrB,WAAO,KAAK;AAIZ,QAAI,cAAc;AAChB,WAAK,aACF,MAAM,EACN,MAAM,MAAM;AAAA,MAAC,CAAC,EACd,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAChC;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,yBACb,cAC0C;AAC1C,QAAM,YAAY,QAAQ,IAAI,qCAAqC,KAAK;AACxE,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,QAAQ,IAAI,oBAAoB;AAAA,IACpC,UAAU;AAAA,IACV,gBAAgB,QAAQ,IAAI,2CAA2C;AAAA,EACzE,CAAC;AACD,QAAM,qBAAqB,eAAe,QAAQ,IAAI,wCAAwC;AAC9F,QAAM,QAAQ,MAAM,oBAAoB,QAAQ;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,GAAI,uBAAuB,SAAY,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACjE,gBAAgB,CAAC,UAAU;AAGzB,cAAQ,OAAO,MAAM,sBAAsB,MAAM,OAAO;AAAA,CAAI;AAC5D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,CAAC;AACD,UAAQ,OAAO,MAAM,sDAAiD,SAAS;AAAA,CAAI;AACnF,SAAO;AACT;AAEA,SAAS,eAAe,KAA6C;AACnE,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,GAAI,QAAO;AACnD,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;AACjC,YAAQ,OAAO;AAAA,MACb,gGAAgG,GAAG;AAAA;AAAA,IACrG;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,eAAe,kBAAkB,QAAoD;AAKnF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAA6D;AAClF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAIA,QAAM,UAAU,QAAQ,IAAI,kBAAkB,KAAK,KAAK;AACxD,SAAO,IAAI,YAAY,EAAE,QAAQ,QAAQ,CAAC;AAC5C;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../../src/mcp/delegate-supervisor-provisioning.ts","../../src/mcp/bin.ts"],"sourcesContent":["/**\n *\n * Resolve the `delegate` supervisor substrate (router brain + worker backend) from env, so the\n * `agent-runtime-mcp` bin can serve the ONE generic `delegate` verb by env, over the SAME stdio\n * invocation a consumer already mounts.\n *\n * `delegate` is wired into `createMcpServer` via `McpServerOptions.delegateSupervisor`, which needs a\n * router (the supervisor brain's substrate) and a backend (WHERE the authored workers run). Inside a\n * sandbox child the natural backend is `sandbox`: authored workers run as sub-sandboxes through the\n * SAME `SandboxClient` the bin already loads from `TANGLE_API_KEY`. The brain's router reuses the\n * repo's `resolveRouterBaseUrl` convention\n * (`TANGLE_ROUTER_URL` / `TANGLE_ROUTER_BASE_URL`), normalised to an OpenAI-compatible `/v1` endpoint,\n * keyed by `TANGLE_API_KEY`.\n *\n * @experimental\n */\n\nimport type { BackendType } from '@tangle-network/sandbox'\nimport { type RouterEnv, resolveRouterBaseUrl } from '../model-resolution.js'\nimport type { SandboxClient } from '../runtime'\nimport type { RouterConfig } from '../runtime/router-client'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { DelegateHandlerOptions } from './tools/delegate'\n\nconst DEFAULT_SUPERVISOR_MODEL = 'moonshotai/kimi-k2.6'\nconst DEFAULT_WORKER_HARNESS = 'opencode'\n\nfunction trimmed(value: string | undefined): string | undefined {\n  const v = value?.trim()\n  return v ? v : undefined\n}\n\n/** True when the operator opted the generic `delegate` verb in (`MCP_ENABLE_DELEGATE=1`). Default off:\n *  the wiring is additive, so consumers that do not enable it are unaffected. */\nexport function delegateEnabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.MCP_ENABLE_DELEGATE === '1'\n}\n\n/** Resolve the supervisor brain's router substrate from env. The key falls back through the platform\n *  key the bin already requires; the base reuses `resolveRouterBaseUrl`, normalised to `/v1`. */\nfunction resolveRouter(env: NodeJS.ProcessEnv): RouterConfig {\n  const routerKey = trimmed(env.MCP_SUPERVISOR_ROUTER_KEY) ?? trimmed(env.TANGLE_API_KEY) ?? ''\n  const base = trimmed(env.MCP_SUPERVISOR_ROUTER_BASE_URL) ?? resolveRouterBaseUrl(env as RouterEnv)\n  const routerBaseUrl = /\\/v\\d+\\/?$/.test(base)\n    ? base.replace(/\\/$/, '')\n    : `${base.replace(/\\/$/, '')}/v1`\n  const model =\n    trimmed(env.MCP_SUPERVISOR_MODEL) ??\n    trimmed(env.MCP_WORKER_MODEL) ??\n    trimmed(env.WORKER_MODEL) ??\n    DEFAULT_SUPERVISOR_MODEL\n  return { routerBaseUrl, routerKey, model }\n}\n\n/**\n * Build the `delegateSupervisor` substrate for `createMcpServer` from env + the bin's loaded\n * `SandboxClient`. Returns `undefined` when `delegate` is not opted in, so the caller mounts it only\n * when asked. The worker backend is `sandbox` (authored workers run as sub-sandboxes via the same\n * client) on the harness named by `MCP_DELEGATE_WORKER_HARNESS` (default `opencode`).\n */\nexport function resolveDelegateSupervisor(\n  sandboxClient: SandboxClient,\n  env: NodeJS.ProcessEnv = process.env,\n): DelegateHandlerOptions | undefined {\n  if (!delegateEnabled(env)) return undefined\n  const router = resolveRouter(env)\n  const harness = (trimmed(env.MCP_DELEGATE_WORKER_HARNESS) ??\n    DEFAULT_WORKER_HARNESS) as BackendType\n  const backend: ExecutorConfig = {\n    backend: 'sandbox',\n    harness,\n    sandboxClient,\n  }\n  return {\n    router,\n    backend,\n    model: router.model,\n  }\n}\n","#!/usr/bin/env node\n\n/**\n *\n * `agent-runtime-mcp` — stdio MCP server entry point.\n *\n * Serves the ONE generic `delegate` verb (opt-in via `MCP_ENABLE_DELEGATE=1`): one intent → a\n * supervisor that authors + drives its own worker over `supervise()`, returning the delivered output\n * with its cost. The supervisor brain runs on the router; authored workers run as sub-sandboxes\n * through the same `SandboxClient` the bin loads from `TANGLE_API_KEY`. The queue-bound tools\n * (`delegate_feedback`, `delegation_status`, `delegation_history`) are always served.\n *\n * Environment variables:\n *   TANGLE_API_KEY                   required — passed to `new Sandbox({ apiKey })`\n *   SANDBOX_BASE_URL                 optional — sandbox-SDK base URL override\n *   MCP_ENABLE_DELEGATE              set to `1` to serve the generic `delegate` verb. Its authoring\n *                                    supervisor runs the brain on the router and spawns authored\n *                                    workers as sub-sandboxes via the same client; needs TANGLE_API_KEY.\n *   MCP_SUPERVISOR_MODEL             supervisor brain model id (falls back to MCP_WORKER_MODEL, then\n *                                    WORKER_MODEL, then a default). Must be a tool-calling model.\n *   MCP_SUPERVISOR_ROUTER_KEY        router key for the supervisor brain (defaults to TANGLE_API_KEY)\n *   MCP_SUPERVISOR_ROUTER_BASE_URL   router base for the supervisor brain (defaults to the repo's\n *                                    resolveRouterBaseUrl, normalized to `/v1`)\n *   MCP_DELEGATE_WORKER_HARNESS      harness the authored workers run on (default `opencode`)\n *   AGENT_RUNTIME_DELEGATION_STATE_FILE\n *                                    optional — absolute path of a JSON state\n *                                    file. When set, delegation records persist\n *                                    across MCP restarts (FileDelegationStore):\n *                                    status/history survive and idempotency keys\n *                                    dedupe across processes.\n *   AGENT_RUNTIME_DELEGATION_STATE_RECOVER\n *                                    set to `1` to archive a corrupt state file\n *                                    (`<file>.corrupt-<ts>`) and start empty\n *                                    instead of refusing to boot.\n *   AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL\n *                                    optional — positive integer cap on retained\n *                                    terminal records. Unset = keep forever.\n *\n * @experimental\n */\n\nimport type { SandboxClient } from '../runtime'\nimport { delegateEnabled, resolveDelegateSupervisor } from './delegate-supervisor-provisioning'\nimport { FileDelegationStore } from './delegation-store'\nimport { createMcpServer } from './server'\nimport { DelegationTaskQueue } from './task-queue'\nimport { readTraceContextFromEnv, type TraceContext } from './trace-propagation'\n\nconst DEFAULT_SANDBOX_BASE_URL = 'https://sandbox.tangle.tools'\n\nasync function main(): Promise<void> {\n  const wantDelegate = delegateEnabled(process.env)\n\n  // The generic `delegate` verb needs the sandbox client: its authored workers run as sub-sandboxes\n  // (the `sandbox` backend). When `delegate` is not opted in, the server runs the queue-only subset\n  // (feedback + status + history) with no sandbox.\n  let sandboxClient: SandboxClient | undefined\n  if (wantDelegate) {\n    const apiKey = process.env.TANGLE_API_KEY\n    if (!apiKey && !process.env.AGENT_RUNTIME_MCP_ALLOW_NO_KEY) {\n      process.stderr.write(\n        'agent-runtime-mcp: TANGLE_API_KEY is required to serve `delegate`. Set AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 to run without it for diagnostics, or unset MCP_ENABLE_DELEGATE to run the queue-only subset.\\n',\n      )\n      process.exit(2)\n    }\n    sandboxClient = await loadSandboxClient(apiKey)\n  }\n\n  // The supervisor's loop topology spans export to the OTLP / Tangle Intelligence sink when\n  // OTEL_EXPORTER_OTLP_ENDPOINT is set (+ TRACE_ID / PARENT_SPAN_ID for correlation). The same\n  // context is stamped onto every delegation record so journal consumers join records into the\n  // caller's trace.\n  const traceContext = readTraceContextFromEnv()\n  if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {\n    process.stderr.write(\n      `agent-runtime-mcp: exporting loop topology → ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT}\\n`,\n    )\n  }\n\n  // The ONE generic `delegate` verb — opt-in via MCP_ENABLE_DELEGATE=1. Its authoring supervisor\n  // runs the brain on the router and spawns authored workers as sub-sandboxes through the SAME\n  // client, so it needs the loaded `sandboxClient`. Gated on the client resolving (no key → no\n  // delegate, fail-closed).\n  const delegateSupervisor =\n    wantDelegate && sandboxClient ? resolveDelegateSupervisor(sandboxClient) : undefined\n  if (wantDelegate && delegateSupervisor) {\n    process.stderr.write('agent-runtime-mcp: delegate enabled — generic authoring supervisor\\n')\n  }\n\n  const durableQueue = await buildDurableQueueFromEnv(traceContext)\n  const server = createMcpServer({\n    ...(delegateSupervisor ? { delegateSupervisor } : {}),\n    traceContext,\n    ...(durableQueue ? { queue: durableQueue } : {}),\n  })\n\n  const shutdown = () => {\n    server.stop()\n    // Drain journal writes so the state file reflects the final record\n    // states before the process exits. A persist failure already routed\n    // through onPersistError; swallow the duplicate rejection here.\n    if (durableQueue) {\n      void durableQueue\n        .flush()\n        .catch(() => {})\n        .finally(() => process.exit(0))\n      return\n    }\n    process.exit(0)\n  }\n  process.on('SIGINT', shutdown)\n  process.on('SIGTERM', shutdown)\n\n  await server.serve()\n}\n\nasync function buildDurableQueueFromEnv(\n  traceContext: TraceContext,\n): Promise<DelegationTaskQueue | undefined> {\n  const stateFile = process.env.AGENT_RUNTIME_DELEGATION_STATE_FILE?.trim()\n  if (!stateFile) return undefined\n  const store = new FileDelegationStore({\n    filePath: stateFile,\n    recoverCorrupt: process.env.AGENT_RUNTIME_DELEGATION_STATE_RECOVER === '1',\n  })\n  const maxTerminalRecords = parseRetention(process.env.AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL)\n  const queue = await DelegationTaskQueue.restore({\n    store,\n    traceContext,\n    ...(maxTerminalRecords !== undefined ? { maxTerminalRecords } : {}),\n    onPersistError: (error) => {\n      // Durable mode that can no longer write is a broken contract: crash\n      // loud instead of degrading to memory-only behind the caller's back.\n      process.stderr.write(`agent-runtime-mcp: ${error.message}\\n`)\n      process.exit(1)\n    },\n  })\n  process.stderr.write(`agent-runtime-mcp: durable delegation state → ${stateFile}\\n`)\n  return queue\n}\n\nfunction parseRetention(raw: string | undefined): number | undefined {\n  if (raw === undefined || raw.trim() === '') return undefined\n  const n = Number(raw)\n  if (!Number.isInteger(n) || n < 1) {\n    process.stderr.write(\n      `agent-runtime-mcp: AGENT_RUNTIME_DELEGATION_RETAIN_TERMINAL must be a positive integer, got \"${raw}\"\\n`,\n    )\n    process.exit(2)\n  }\n  return n\n}\n\nasync function loadSandboxClient(apiKey: string | undefined): Promise<SandboxClient> {\n  // Diagnostic mode: AGENT_RUNTIME_MCP_ALLOW_NO_KEY=1 enables tools/list + the\n  // queue-bound tools (status / history / feedback) without sandbox creds.\n  // `delegate` requires a real client; the stub fails loud at create() so the\n  // agent observes the cause instead of silent success.\n  if (!apiKey) {\n    return {\n      async create() {\n        throw new Error(\n          'agent-runtime-mcp: TANGLE_API_KEY is unset; `delegate` is disabled in diagnostic mode. Set TANGLE_API_KEY or unset MCP_ENABLE_DELEGATE to remove the unsupported tool from the tool list.',\n        )\n      },\n    } satisfies SandboxClient\n  }\n  // Dynamic import keeps the bin importable in environments that haven't\n  // installed `@tangle-network/sandbox` yet (the runtime package lists it\n  // as a peer dep, not a hard dep).\n  const mod = await import('@tangle-network/sandbox').catch((err) => {\n    process.stderr.write(\n      `agent-runtime-mcp: failed to load @tangle-network/sandbox (${err.message}); install the peer dependency\\n`,\n    )\n    process.exit(2)\n  })\n  const SandboxCtor = (mod as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (!SandboxCtor) {\n    process.stderr.write(\n      'agent-runtime-mcp: @tangle-network/sandbox does not export Sandbox; cannot construct client\\n',\n    )\n    process.exit(2)\n  }\n  // @tangle-network/sandbox ≥0.6 makes baseUrl required; default it so the MCP server\n  // starts without forcing every caller to set SANDBOX_BASE_URL. Treat empty/whitespace as\n  // unset (|| not ??) so `SANDBOX_BASE_URL=` still resolves to the default.\n  const baseUrl = process.env.SANDBOX_BASE_URL?.trim() || DEFAULT_SANDBOX_BASE_URL\n  return new SandboxCtor({ apiKey, baseUrl })\n}\n\nmain().catch((err) => {\n  process.stderr.write(`agent-runtime-mcp: ${err instanceof Error ? err.stack : String(err)}\\n`)\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,IAAM,2BAA2B;AACjC,IAAM,yBAAyB;AAE/B,SAAS,QAAQ,OAA+C;AAC9D,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,IAAI,IAAI;AACjB;AAIO,SAAS,gBAAgB,MAAyB,QAAQ,KAAc;AAC7E,SAAO,IAAI,wBAAwB;AACrC;AAIA,SAAS,cAAc,KAAsC;AAC3D,QAAM,YAAY,QAAQ,IAAI,yBAAyB,KAAK,QAAQ,IAAI,cAAc,KAAK;AAC3F,QAAM,OAAO,QAAQ,IAAI,8BAA8B,KAAK,qBAAqB,GAAgB;AACjG,QAAM,gBAAgB,aAAa,KAAK,IAAI,IACxC,KAAK,QAAQ,OAAO,EAAE,IACtB,GAAG,KAAK,QAAQ,OAAO,EAAE,CAAC;AAC9B,QAAM,QACJ,QAAQ,IAAI,oBAAoB,KAChC,QAAQ,IAAI,gBAAgB,KAC5B,QAAQ,IAAI,YAAY,KACxB;AACF,SAAO,EAAE,eAAe,WAAW,MAAM;AAC3C;AAQO,SAAS,0BACd,eACA,MAAyB,QAAQ,KACG;AACpC,MAAI,CAAC,gBAAgB,GAAG,EAAG,QAAO;AAClC,QAAM,SAAS,cAAc,GAAG;AAChC,QAAM,UAAW,QAAQ,IAAI,2BAA2B,KACtD;AACF,QAAM,UAA0B;AAAA,IAC9B,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,EAChB;AACF;;;AC9BA,IAAM,2BAA2B;AAEjC,eAAe,OAAsB;AACnC,QAAM,eAAe,gBAAgB,QAAQ,GAAG;AAKhD,MAAI;AACJ,MAAI,cAAc;AAChB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gCAAgC;AAC1D,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,oBAAgB,MAAM,kBAAkB,MAAM;AAAA,EAChD;AAMA,QAAM,eAAe,wBAAwB;AAC7C,MAAI,QAAQ,IAAI,6BAA6B;AAC3C,YAAQ,OAAO;AAAA,MACb,qDAAgD,QAAQ,IAAI,2BAA2B;AAAA;AAAA,IACzF;AAAA,EACF;AAMA,QAAM,qBACJ,gBAAgB,gBAAgB,0BAA0B,aAAa,IAAI;AAC7E,MAAI,gBAAgB,oBAAoB;AACtC,YAAQ,OAAO,MAAM,2EAAsE;AAAA,EAC7F;AAEA,QAAM,eAAe,MAAM,yBAAyB,YAAY;AAChE,QAAM,SAAS,gBAAgB;AAAA,IAC7B,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACnD;AAAA,IACA,GAAI,eAAe,EAAE,OAAO,aAAa,IAAI,CAAC;AAAA,EAChD,CAAC;AAED,QAAM,WAAW,MAAM;AACrB,WAAO,KAAK;AAIZ,QAAI,cAAc;AAChB,WAAK,aACF,MAAM,EACN,MAAM,MAAM;AAAA,MAAC,CAAC,EACd,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAChC;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,QAAM,OAAO,MAAM;AACrB;AAEA,eAAe,yBACb,cAC0C;AAC1C,QAAM,YAAY,QAAQ,IAAI,qCAAqC,KAAK;AACxE,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,QAAQ,IAAI,oBAAoB;AAAA,IACpC,UAAU;AAAA,IACV,gBAAgB,QAAQ,IAAI,2CAA2C;AAAA,EACzE,CAAC;AACD,QAAM,qBAAqB,eAAe,QAAQ,IAAI,wCAAwC;AAC9F,QAAM,QAAQ,MAAM,oBAAoB,QAAQ;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,GAAI,uBAAuB,SAAY,EAAE,mBAAmB,IAAI,CAAC;AAAA,IACjE,gBAAgB,CAAC,UAAU;AAGzB,cAAQ,OAAO,MAAM,sBAAsB,MAAM,OAAO;AAAA,CAAI;AAC5D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,CAAC;AACD,UAAQ,OAAO,MAAM,sDAAiD,SAAS;AAAA,CAAI;AACnF,SAAO;AACT;AAEA,SAAS,eAAe,KAA6C;AACnE,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,GAAI,QAAO;AACnD,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;AACjC,YAAQ,OAAO;AAAA,MACb,gGAAgG,GAAG;AAAA;AAAA,IACrG;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,eAAe,kBAAkB,QAAoD;AAKnF,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,MAAM,SAAS;AACb,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,MAAM,MAAM,OAAO,yBAAyB,EAAE,MAAM,CAAC,QAAQ;AACjE,YAAQ,OAAO;AAAA,MACb,8DAA8D,IAAI,OAAO;AAAA;AAAA,IAC3E;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACD,QAAM,cAAe,IAA6D;AAClF,MAAI,CAAC,aAAa;AAChB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAIA,QAAM,UAAU,QAAQ,IAAI,kBAAkB,KAAK,KAAK;AACxD,SAAO,IAAI,YAAY,EAAE,QAAQ,QAAQ,CAAC;AAC5C;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,sBAAsB,eAAe,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC;AAAA,CAAI;AAC7F,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}

package/dist/mcp/index.js

@@ -5,11 +5,11 @@ import {
   createPropagatingTraceEmitter,
   readTraceContextFromEnv,
   traceContextToEnv
-} from "../chunk-ZEYAT33L.js";
+} from "../chunk-Y3SRWZMP.js";
 import {
   mcpToolsForRuntimeMcp,
   mcpToolsForRuntimeMcpSubset
-} from "../chunk-Z5I642SY.js";
+} from "../chunk-WYC2XJF2.js";
 import {
   createKbGate
 } from "../chunk-SGKPNBXE.js";
@@ -17,7 +17,8 @@ import {
   assertTraceDerivedFindings,
   runCoderChecks,
   selectValidWinner
-} from "../chunk-YLUOTX6U.js";
+} from "../chunk-FXF2OL34.js";
+import "../chunk-Q2JSAVQ3.js";
 import {
   DELEGATE_DESCRIPTION,
   DELEGATE_FEEDBACK_DESCRIPTION,
@@ -67,10 +68,13 @@ import {
   validateDelegateUiAuditArgs,
   validateDelegationHistoryArgs,
   validateDelegationStatusArgs
-} from "../chunk-IADLKE7I.js";
+} from "../chunk-UQ6PNNXM.js";
 import "../chunk-DPEUKJRO.js";
-import "../chunk-Q2JSAVQ3.js";
-import "../chunk-ISTDY47H.js";
+import {
+  CodexExecutionDiagnosticError,
+  parseCodexTokenUsage,
+  runLocalHarness
+} from "../chunk-HZDEXTSL.js";
 import "../chunk-IMSNJSXH.js";
 import "../chunk-M6MD6JBS.js";
 import {
@@ -80,15 +84,9 @@ import {
   throwIfAborted
 } from "../chunk-3MDZX7YU.js";
 import "../chunk-M22PL4GH.js";
-import {
-  CodexExecutionDiagnosticError,
-  parseCodexTokenUsage,
-  runLocalHarness
-} from "../chunk-EP6RVHMX.js";
 import {
   ValidationError
 } from "../chunk-YEJR7IXO.js";
-import "../chunk-DGUM43GV.js";
 
 // src/mcp/executor.ts
 function createSiblingSandboxExecutor(options) {