@tangle-network/agent-runtime 3.0.35 → 3.0.36

package/dist/{runtime-Cxlb_vie.js → runtime-BmAGI6UG.js}

@@ -9,13 +9,13 @@ import { a as writeAtomicDurableFile } from "./durable-file-DstVeHcj.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
 import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-A2dtsTlx.js";
 import { y as foldCoordinationRecords } from "./run-cancellation-Cy8NtCtz.js";
-import { a as downMessageRefusalReasons, p as createInMemoryRunContext } from "./coordination-manager-CZzhPx_F.js";
-import { E as validateFlowGraph, I as kernelPromptRegistry, _ as coordinationControlToolNames, k as validateGraphTopology, t as supervise, y as runBrainLoop } from "./supervise-CeUM7jMe.js";
+import { a as downMessageRefusalReasons, p as createInMemoryRunContext } from "./coordination-manager-CvWBnD3a.js";
+import { E as validateFlowGraph, I as kernelPromptRegistry, _ as coordinationControlToolNames, k as validateGraphTopology, t as supervise, y as runBrainLoop } from "./supervise-zmX0eE6B.js";
 import { _ as compileGraphParameters, a as graphRegistry, b as graphRouteWhenSchema, d as recordGraphRun, g as bindGraphParameters, h as assertGraphTriggerBindings, i as graphFromStored, l as lookupGraph, m as taskShapeDigest, o as graphRunsFor, r as graphDigest, t as digestOfGraph, v as graphTriggerBindingsSchema, y as graphFileSchema } from "./graph-registry-D6y6zffC.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DilFZch5.js";
-import "./provision-supervisor-BqbXjSYT.js";
-import "./delegate-D0NpQF_z.js";
-import "./graph-BKMPvIk6.js";
+import "./provision-supervisor-DFZxaxuY.js";
+import "./delegate-EaeQed8U.js";
+import "./graph-XqPnqBK7.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256Bytes, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -929,8 +929,6 @@ const BOX_TREE = "tree";
 const BOX_SETUP_SECONDS = 900;
 /** The box's own process timeout is a backstop behind this module's deadline. */
 const BOX_PROCESS_BACKSTOP_MS = 3e4;
-/** Concurrent file deliveries into one check box. */
-const BOX_UPLOADS = 4;
 /** The box's process supervisor prefixes this to stderr when it cannot start the executable. */
 const BOX_EXEC_FAILURE = "process-supervisor: exec failed";
 async function runInBox(options, placement) {
@@ -975,23 +973,22 @@ async function runInBox(options, placement) {
 		const egress = (await box.egress.get()).policy;
 		const wanted = egressFor(placement);
 		if (egress.mode !== wanted.mode || wanted.mode === "strict" && (egress.includeImplicitDomains === true || [...egress.allowDomains ?? []].sort().join(",") !== [...wanted.allowDomains ?? []].sort().join(","))) throw new Error(`Check box egress is ${egress.mode} ${JSON.stringify(egress.allowDomains ?? [])}, not ${wanted.mode} ${JSON.stringify(wanted.allowDomains ?? [])}`);
-		await box.fs.mkdir(BOX_TREE, { recursive: true });
-		const digests = new Map(captured.manifest.files.map((entry) => [entry.path, entry.sha256]));
-		const target = box;
-		const pending = [...captured.files];
-		const deliver = async () => {
-			try {
-				for (let file = pending.shift(); file; file = pending.shift()) {
-					options.signal?.throwIfAborted();
-					const received = await target.fs.uploadData(`${BOX_TREE}/${file.path}`, file.bytes, { mode: file.mode });
-					if (`sha256:${received.hash.replace(/^sha256:/, "").toLowerCase()}` !== digests.get(file.path) || received.size !== file.bytes.byteLength) throw new Error(`Check box received different bytes for ${file.path}`);
-				}
-			} catch (error) {
-				pending.length = 0;
-				throw error;
+		const staging = await mkdtemp(join(tmpdir(), "runtime-check-box-"));
+		try {
+			for (const file of captured.files) {
+				const path = join(staging, file.path);
+				await mkdir(dirname(path), { recursive: true });
+				await writeFile(path, file.bytes, { mode: file.mode });
 			}
-		};
-		await Promise.all(Array.from({ length: BOX_UPLOADS }, deliver));
+			options.signal?.throwIfAborted();
+			await box.fs.uploadDir(staging, BOX_TREE);
+		} finally {
+			await rm(staging, {
+				recursive: true,
+				force: true
+			});
+		}
+		await verifyBoxTree(box, captured.manifest.files);
 		evidence = {
 			sandboxId: box.id,
 			account,
@@ -1028,6 +1025,33 @@ async function runInBox(options, placement) {
 		box: evidence
 	} : result;
 }
+/** Refuse unless the box reads each file with its manifest digest. `find` names the files: a box
+* process takes 256 arguments at most. A name holding a newline or backslash, which coreutils
+* escapes, does not compare. */
+async function verifyBoxTree(box, files) {
+	const child = await box.process.spawnExact("find", [
+		".",
+		"-type",
+		"f",
+		"-exec",
+		"sha256sum",
+		"{}",
+		"+"
+	], {
+		cwd: BOX_TREE,
+		env: {
+			PATH: "/usr/bin:/bin",
+			LANG: "C"
+		},
+		inheritEnv: false,
+		timeoutMs: BOX_SETUP_SECONDS * 1e3
+	});
+	let listing = "";
+	for await (const text of child.stdout()) listing += text;
+	if (await child.wait() !== 0) throw new Error("Check box could not hash the tree it received");
+	const read = new Set(listing.split("\n").map((line) => `sha256:${line.slice(0, 64)} ${line.slice(68)}`));
+	for (const file of files) if (!read.has(`${file.sha256} ${file.path}`)) throw new Error(`Check box received different bytes for ${file.path}`);
+}
 /** Blocked unless the placement names domains; then strict, with no implicit domain list. */
 function egressFor(placement) {
 	const domains = [...new Set(placement.egress ?? [])].filter((domain) => domain.trim() !== "");
@@ -10071,4 +10095,4 @@ function tail(s) {
 }
 export { runBenchmark as $, renderLeaderboardHtml as $t, searchPresets as A, sanitizeMcpToolSchema as At, graphFromSessionFacts as B, assertDeclaredCheck as Bt, withUntrackedArtifacts as C, harvestCorpus as Ct, SEARCH_SPEC_CORRELATION_KEY as D, connectStdioMcp as Dt, createFencedSqlRunContext as E, McpSpawnFault as Et, loadProfile as F, secretEnvOfMcpServer as Ft, chatWorkerSeam as G, readDeclaredCheck as Gt, loadGraphFile as H, declaredCheckDeliverable as Ht, pickBestProfile as I, inlineSandboxClient as It, strategyTournament as J, deterministicCompletion as Jt, createChatSessionStore as K, runIsolatedCheck as Kt, profileRegistry as L, loopCampaignDispatch as Lt, connectRemoteSupervisor as M, mcpSecretEnvMetadataKey as Mt, connectRemoteSupervisorControl as N, resolveMcpServerLaunch as Nt, assertSearchSpec as O, materializeLocalMcp as Ot, bestProfileFor as P, resolveSecretEnv as Pt, printBenchmarkReport as Q, pairwiseSignificance as Qt, profileRunsForName as R, loopDispatch as Rt, copyUntrackedIntoClone as S, HarvestError as St, validateStoredGraph as T, resolveSandboxClient as Tt, graphDesignerExtraTools as U, declaredCheckDigest as Ut, GraphFileResolutionError as V, checkProgramDigest as Vt, chatTransportExecutor as W, declaredCheckJudge as Wt, openSandboxRun as X, stopSentinel as Xt, SandboxRunAbortError as Y, sentinelCompletion as Yt, createS3PrivateCasStore as Z, leaderboard as Zt, NOTE_MAX_CHARS as _, buildSteerContext as _t, localShell as a, FileCorpus as at, composeWorkerEvidence as b, observationFromRegistry as bt, createVerifierEnvironment as c, fanout as ct, harvestSurfaceDiffs as d, panel as dt, renderLeaderboardMarkdown as en, createPrivateCasArtifactPort as et, analystsFromRegistry as f, pipeline as ft, EVIDENCE_MAX_CHARS as g, assertTraceDerivedFindings as gt, runCoderChecks as h, widen as ht, jjWorkspace as i, openSqlRunStore as in, runPersonified as it, searchSpecDigest as j, envKeyProvider as jt, compileSearchSpec as k, createMcpEnvironment as kt, boxSurfaceReader as l, flatWidenGate as lt, worktreeFanout as m, verify as mt, makeFinding$1 as n, renderPairwiseMarkdown as nn, trajectoryReport as nt, runInWorkspace as o, InMemoryCorpus as ot, failuresAnalyst as p, selectValidWinner as pt, runStrategyEvolution as q, completionAuthorizes as qt, gitWorkspace as r, SqlRunOwnershipError as rn, definePersona as rt, createWaterfallCollector as s, renderCorpusToInstructions as st, computeFindingId$1 as t, renderLeaderboardSvg as tn, equalKOnCost as tt, fsSurfaceReader as u, loopUntil as ut, VERIFY_TAIL_CHARS as v, createScopeAnalyst as vt, analyzeTrace as w, defineLeaderboard as wt, settledWorkerOut as x, inProcessSandboxClient as xt, closingWorkerNote as y, registryScopeAnalyst as yt, recordProfileRun as z, superviseDispatch as zt };
 
-//# sourceMappingURL=runtime-Cxlb_vie.js.map
+//# sourceMappingURL=runtime-BmAGI6UG.js.map