@tangle-network/agent-runtime 0.102.2 → 0.103.0

package/README.md

@@ -1,8 +1,8 @@
 # @tangle-network/agent-runtime
 
-The engine Tangle's AI agents run on. It runs an agent as a **chat turn**, a **one-shot task**, or a **team of agents** working toward a goal, records every run, and uses those records to **measure and improve** agents against real pass/fail checks.
+A TypeScript runtime for running AI agents — as a **chat turn**, a **one-shot task**, or a **team of agents** working toward a goal — that records every run and uses those records to **measure and improve** agents against real pass/fail checks. It is the engine Tangle's own production agents run on.
 
-One loop, used four common ways. Domain behavior (models, tools, knowledge) plugs in as adapters; the scoring statistics and the ship decision come from [`@tangle-network/agent-eval`](https://www.npmjs.com/package/@tangle-network/agent-eval); sandboxed execution from [`@tangle-network/sandbox`](https://www.npmjs.com/package/@tangle-network/sandbox).
+Domain behavior (models, tools, knowledge) plugs in as adapters; the scoring statistics and the ship decision come from [`@tangle-network/agent-eval`](https://www.npmjs.com/package/@tangle-network/agent-eval); sandboxed execution from [`@tangle-network/sandbox`](https://www.npmjs.com/package/@tangle-network/sandbox).
 
 ```bash
 pnpm add @tangle-network/agent-runtime @tangle-network/agent-eval @tangle-network/sandbox
@@ -10,6 +10,7 @@ pnpm add @tangle-network/agent-runtime @tangle-network/agent-eval @tangle-networ
 
 ## Contents
 
+- [Quickstart](#quickstart-offline-no-api-keys)
 - [What you do with it](#what-you-do-with-it)
 - [Run a chat turn](#run-a-chat-turn)
 - [Supervise a team of agents](#supervise-a-team-of-agents)
@@ -17,15 +18,51 @@ pnpm add @tangle-network/agent-runtime @tangle-network/agent-eval @tangle-networ
 - [Improve a knowledge base](#improve-a-knowledge-base)
 - [Run on PrimeIntellect](#run-on-primeintellect)
 - [How it works](#how-it-works-the-short-version)
+- [Primitives](#primitives)
 - [Examples](#examples)
 - [Where to go next](#where-to-go-next)
 
-**See it run in 30 seconds** (offline, no keys): the one move everything else builds on, a driver reading a worker's output and composing the next step from it:
+## Quickstart (offline, no API keys)
+
+The core move everything else builds on: a driver runs a worker, reads the worker's real output, and writes the next prompt from it until a check passes. This is the full working loop from [`examples/quickstart/quickstart.ts`](./examples/quickstart/quickstart.ts) (the worker is a scripted stand-in so it runs with zero credentials; swap it for a real sandbox, CLI-harness, or router backend without changing the driver):
+
+```ts
+import { inProcessSandboxClient, runLoop } from '@tangle-network/agent-runtime/loops'
+
+const result = await runLoop<Task, Note, 'refine' | 'pick-winner' | 'fail'>({
+  task: { prompt: 'Write a one-line release note for one-click restore.' },
+  driver: {
+    name: 'refine',
+    plan: async (task, history) => {
+      const last = history[history.length - 1]
+      if (!last) return [task] // shot 0: run the task as written
+      if (last.verdict?.valid || history.length >= 3) return [] // done, or out of shots
+      // The core move: read the last worker's real output, write the next prompt FROM it.
+      return [{ prompt: `Rewrite "${last.output?.note}" to mention the rollback path.` }]
+    },
+    decide: (history) =>
+      history.some((shot) => shot.verdict?.valid) ? 'pick-winner' : history.length < 3 ? 'refine' : 'fail',
+  },
+  agentRun: { profile: { name: 'note-writer' } as AgentProfile, taskToPrompt: (t) => t.prompt },
+  output,    // parses the worker's event stream into { note }
+  validator, // pass/fail check: does the note mention "rollback"?
+  ctx: { sandboxClient: worker },
+  maxIterations: 3,
+})
+```
+
+Run it from a clone of this repo and you get exactly this:
 
 ```bash
-pnpm tsx examples/driver-loop/driver-loop.ts
+$ pnpm i && pnpm build
+$ pnpm tsx examples/quickstart/quickstart.ts
+shot 0: reject — "Shipped one-click restore."
+shot 1: PASS — "Shipped one-click restore with an instant rollback path."
+decision: pick-winner — winner: shot 1
 ```
 
+The fully annotated version of this loop, with every seam explained, is [`examples/driver-loop`](./examples/driver-loop).
+
 ## What you do with it
 
 | You want to… | Call |
@@ -113,12 +150,19 @@ import {
   reviewAgentImprovementProposal,
 } from '@tangle-network/agent-runtime/intelligence'
 
+const baseline = freezeBaseline(liveProfile)
 const result = await proposeAgentImprovement({
   runId,
   profile: liveProfile,
   analysis,
   improvement: { surface: 'prompt', scenarios, judge, agent },
-  buildExperiment: ({ improvement }) => freezeExperiment(liveProfile, improvement.candidate),
+  buildExperiment: ({ improvement }) =>
+    buildExperimentMaterial({
+      baseline,
+      candidate: compileCandidateBundle({ baseline, improvement: improvement.candidate }),
+      benchmark: heldOutBenchmark,
+      policy: comparisonPolicy,
+    }),
   placeCell,
 })
 
@@ -140,7 +184,8 @@ const outcome = await executeAgentImprovementActivation(
 )
 ```
 
-`freezeExperiment`, `placeCell`, and the transaction functions are application ports because storage and compute differ by product.
+`buildExperimentMaterial`, `placeCell`, and the transaction functions are application ports because storage and compute differ by product.
+The builder returns only baseline, candidate, tasks, and policy; Runtime adds the search ancestry and seals the final experiment.
 Runtime owns candidate identity, measurement, review binding, expiry, retry identity, and result validation; the application owns its atomic write.
 
 ### Improve a knowledge base
@@ -232,12 +277,31 @@ Use `importPrimeIntellectTraces(...)` to convert them to agent-eval `RunRecord`s
 - **Improvement is gated.** A change ships only after it beats the current agent on fresh tasks no tuning step ever saw, with a statistical test, not a single lucky run.
 - **The grader is honest.** Whatever gives feedback never sees the answer key, and scores are recomputed from the attempts actually run. An agent cannot fabricate its own win.
 
+## Primitives
+
+The general-purpose pieces, by import path. Every export with its one-line summary lives in the generated [`docs/api/primitive-catalog.md`](./docs/api/primitive-catalog.md) — check it before building anything new.
+
+| Primitive | What it does | Import |
+|---|---|---|
+| Chat-turn runtime | Stream, trace, and persist one production chat turn (`handleChatTurn`); normalize any backend's stream into one event shape (`streamAgentTurn`) | root · `/loops` |
+| Supervision | One agent spawns, budgets, and steers workers toward a goal (`supervise`, `delegate`), on an in-process loop or a sandboxed coding harness | `/loops` · `/mcp` |
+| Loop kernel + combinators | Write a driver (`plan`/`decide`) and run it (`runLoop`), or compose fixed shapes: refine (`loopUntil`), best-of-N (`fanout`), chain (`pipeline`), multi-judge (`panel`) | `/loops` |
+| Improvement driver | Optimize one part of an agent and ship only if it wins on tasks it never practiced on (`improve`); production proposal/review/activation flow | root · `/intelligence` |
+| Benchmarks + leaderboards | Compare strategies with significance stats (`runBenchmark`), stand up a harness×model leaderboard (`defineLeaderboard`, `leaderboard`) | `/loops` |
+| Knowledge improvement | Produce a measured candidate copy of a KB/wiki/RAG corpus without touching the live one (`runKnowledgeImprovementJob`) | `/knowledge` |
+| MCP tool servers | Give an agent a `delegate` tool or live worker-coordination tools over MCP | `/mcp` |
+| Conversations + durability | Multi-turn two-agent sessions with SQL-backed resume (D1/pg/sqlite/libSQL adapters) | `/conversation` |
+| Training/eval adapter | Package the same runtime program as a PrimeIntellect Verifiers environment; import its traces back | `/primeintellect` |
+
+Remaining subpaths: `/agent`, `/profiles`, `/platform`, `/analyst-loop`, `/environment-provider`, `/testing` (validated fixture records for consumer tests).
+
 ## Examples
 
 Runnable, grouped by what they show. Copy the one nearest your task:
 
 | Do this | Example |
 |---|---|
+| The smallest complete loop (start here) | [`quickstart`](./examples/quickstart) · [`driver-loop`](./examples/driver-loop) |
 | Run a product chat turn | [`chat-handler`](./examples/chat-handler) |
 | Drive a team of agents to a goal | [`supervise`](./examples/supervise) · [`recursive-supervisor`](./examples/recursive-supervisor) |
 | Benchmark strategies on your own domain | [`coding-benchmark`](./examples/coding-benchmark) |
@@ -249,15 +313,14 @@ Runnable, grouped by what they show. Copy the one nearest your task:
 | Evaluate or train a runtime program on PrimeIntellect | `@tangle-network/agent-runtime/primeintellect` |
 | Study coordination vs raw compute | [`ablation-suite`](./examples/ablation-suite) |
 
-All 28 live in [`examples/`](./examples).
+All 29 live in [`examples/`](./examples).
 
 ## Where to go next
 
 - New here? [`docs/concepts.md`](./docs/concepts.md), the mental model in plain terms.
 - [`docs/canonical-api.md`](./docs/canonical-api.md), find the primitive: "I want to ___ → use ___".
 - [`docs/api/primitive-catalog.md`](./docs/api/primitive-catalog.md), every export in one generated, never-stale list with its import path. Check it before building anything new.
-- Import subpaths: the root export is the product surface (`handleChatTurn`, `improve`); deeper capabilities ship as subpaths: `/loops` (multi-agent + the loop kernel), `/conversation` (multi-turn conversations), `/knowledge` (KB improvement), `/primeintellect` (Prime task, runtime, and trace adapter), `/mcp` (tool servers), `/intelligence` (observability drop-in), `/testing` (validated fixture records for consumer tests), `/agent`, `/profiles`, `/platform`, `/analyst-loop`, `/environment-provider`.
-- [`docs/architecture.md`](./docs/architecture.md), the design, end to end.
+- [`docs/design.md`](./docs/design.md), the design philosophy and the internal research docs behind it — background reading, not required to use the package.
 - [`bench/HARNESS.md`](./bench/HARNESS.md), the experiment harness and how to run a benchmark.
 
-**Contributing:** `pnpm i && pnpm test` gets you running; the full local gate is the [`package.json`](./package.json) scripts (`lint`, `typecheck`, `docs:check`).
+**Contributing:** `pnpm i && pnpm build && pnpm test` gets you running; the full local gate is the [`package.json`](./package.json) scripts (`lint`, `typecheck`, `docs:check`).

package/dist/agent.d.ts

@@ -5,7 +5,7 @@ import { A as AgentSurfaces } from './improvement-adapter-HAZz-7vK.js';
 export { C as CreateSurfaceImprovementProposerOptions, D as DraftPatchInput, a as DraftPatchOutput, R as ResolvedSurface, S as SurfaceImprovementEdit, b as SurfaceValidationIssue, c as createSurfaceImprovementProposer, r as renderSurfaceIssues, d as resolveSubjectPath, v as validateSurfaces } from './improvement-adapter-HAZz-7vK.js';
 import { AgentProfile, AgentProfileFileMount, AgentProfileMcpServer } from '@tangle-network/agent-interface';
 import { SandboxEvent } from '@tangle-network/sandbox';
-import { S as SandboxClient, O as OutputAdapter, A as AgentRunSpec } from './types-CLat4bT9.js';
+import { S as SandboxClient, O as OutputAdapter, A as AgentRunSpec } from './types-DK11_O4L.js';
 import './types-CmYCMbFT.js';
 
 /**

package/dist/agent.js

@@ -1,14 +1,14 @@
-import "./chunk-QCXD7NHM.js";
+import "./chunk-3LJF5XSE.js";
 import "./chunk-Q2JSAVQ3.js";
 import {
   createSandboxForSpec
-} from "./chunk-ZUCUAFVF.js";
+} from "./chunk-EAQ5YRRY.js";
 import "./chunk-DPEUKJRO.js";
-import "./chunk-ROILMKDL.js";
+import "./chunk-QYCKIV6C.js";
 import "./chunk-UPWGXKXB.js";
 import "./chunk-2VZYRB55.js";
-import "./chunk-SQ3ZJH3Y.js";
-import "./chunk-IMSNJSXH.js";
+import "./chunk-6WZZXQV5.js";
+import "./chunk-ISPWRSEC.js";
 import "./chunk-M6MD6JBS.js";
 import "./chunk-3MDZX7YU.js";
 import {

package/dist/analyst-loop.d.ts

@@ -1,5 +1,5 @@
 import { TraceAnalystByteBudgets, TraceAnalysisStore } from '@tangle-network/agent-eval';
-import { I as Iteration } from './types-CLat4bT9.js';
+import { I as Iteration } from './types-DK11_O4L.js';
 import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-CmYCMbFT.js';
 export { A as AnalystLoopEvent, b as AnalystRegistryLike, c as AnalystRegistryStreamingLike, F as FindingsStoreLike, d as ImprovementEditBatch, I as ImprovementProposalSource, e as ImprovementReport, K as KnowledgeProposalBatch, f as KnowledgeProposalSource, g as KnowledgeReport } from './types-CmYCMbFT.js';
 import '@tangle-network/sandbox';

package/dist/candidate-execution/index.d.ts

@@ -1,10 +1,10 @@
 import { CodeSurface } from '@tangle-network/agent-eval/campaign';
 import { AgentCandidateBundle, AgentCandidateCodeDisabled, AgentCandidateCodeNoOp, AgentCandidateGitHubRepository, AgentProfile, AgentProfileDiff, AgentCandidateProfile, AgentCandidateExecution, AgentCandidateKnowledge, AgentCandidateMemoryPolicy, AgentCandidateArtifactRef, Sha256Digest, AgentCandidateWorkspaceSnapshotEvidence } from '@tangle-network/agent-interface';
 export { AgentCandidateBenchmarkGraderIdentity } from '@tangle-network/agent-interface';
-import { c as AgentCandidateExecutionClaim, A as AgentCandidateExecutionClaimStore, d as AgentCandidateExecutionClaimResult, b as AgentCandidateExecutionAttemptRef, a as AgentCandidateExecutionAttemptRecord, h as AgentCandidateExecutionLease, j as AgentCandidateExecutionPhaseResult, n as AgentCandidateExecutionTerminalResult, l as AgentCandidateExecutionStageResult, g as AgentCandidateExecutionFinishResult, k as AgentCandidateExecutionRecoveryEvidence } from '../profile-DbfaMTdk.js';
-export { e as AgentCandidateExecutionCleanupHandles, f as AgentCandidateExecutionFailureClass, i as AgentCandidateExecutionPhase, m as AgentCandidateExecutionTerminalRecord, o as AgentCandidatePreparationEvidence, q as AgentCandidateRetryRejection, E as ExecutePreparedAgentCandidateOptions, I as InMemoryAgentCandidateExecutionClaimStore, P as PrepareAgentCandidateExecutionOptions, r as applyExactAgentProfileDiff, s as executePreparedAgentCandidate, t as parseExactAgentProfile, u as parseExactAgentProfileDiff, v as prepareAgentCandidateExecution } from '../profile-DbfaMTdk.js';
-import { P as PreparedAgentCandidateExecution, A as AgentCandidateExecutorPort, b as AgentCandidateOutputArtifactPort, t as AgentCandidateOutputPurpose, s as AgentCandidateModelPort, v as AgentCandidateProtectedModelReservation, u as AgentCandidateProtectedModelActivation, w as AgentCandidateProtectedModelSettlement, e as AgentCandidateExecutionPorts, z as AgentCandidateVerificationPorts, V as VerifiedAgentCandidate, n as AgentCandidateExecutorWorkspaceFile, B as AgentCandidateWorkspacePort } from '../types-CWqfCO8s.js';
-export { f as AgentCandidateArtifactPort, a as AgentCandidateBenchmarkGraderPort, g as AgentCandidateContainerPort, h as AgentCandidateExecutorFinalCapture, i as AgentCandidateExecutorMemoryCapture, j as AgentCandidateExecutorProfileFile, k as AgentCandidateExecutorRequest, l as AgentCandidateExecutorStopRequest, m as AgentCandidateExecutorTaskOutcomeCapture, o as AgentCandidateExecutorWorkspaceInput, p as AgentCandidateMemoryPort, q as AgentCandidateMemoryResetResult, r as AgentCandidateModelLimits, x as AgentCandidateProtectedRunCapture, y as AgentCandidateRepositoryPort, c as AgentCandidateRunFinalization, d as AgentCandidateTaskExecution, C as CANDIDATE_TRACE_ENV, D as CANDIDATE_TRACE_TAGS, E as CanonicalCandidateDocument, F as PreparedAgentCandidateInstruction, G as PreparedAgentCandidateKnowledge, H as PreparedAgentCandidateLaunch, I as PreparedAgentCandidateTrace, R as ResolvedAgentCandidateContainer, J as VerifiedAgentCandidateTaskOutcome } from '../types-CWqfCO8s.js';
+import { c as AgentCandidateExecutionClaim, A as AgentCandidateExecutionClaimStore, d as AgentCandidateExecutionClaimResult, b as AgentCandidateExecutionAttemptRef, a as AgentCandidateExecutionAttemptRecord, h as AgentCandidateExecutionLease, j as AgentCandidateExecutionPhaseResult, n as AgentCandidateExecutionTerminalResult, l as AgentCandidateExecutionStageResult, g as AgentCandidateExecutionFinishResult, k as AgentCandidateExecutionRecoveryEvidence } from '../protected-model-port-DzkUY3HQ.js';
+export { e as AgentCandidateExecutionCleanupHandles, f as AgentCandidateExecutionFailureClass, i as AgentCandidateExecutionPhase, m as AgentCandidateExecutionTerminalRecord, o as AgentCandidateModelGrantActivateInput, q as AgentCandidateModelGrantClient, r as AgentCandidateModelGrantReservation, s as AgentCandidateModelGrantReserveInput, t as AgentCandidateModelGrantSettleInput, u as AgentCandidatePreparationEvidence, v as AgentCandidateRetryRejection, C as CreateProtectedAgentCandidateModelPortOptions, E as ExecutePreparedAgentCandidateOptions, I as InMemoryAgentCandidateExecutionClaimStore, P as PrepareAgentCandidateExecutionOptions, w as applyExactAgentProfileDiff, x as assertCandidateProfileBinding, y as createProtectedAgentCandidateModelPort, z as executePreparedAgentCandidate, B as parseExactAgentProfile, D as parseExactAgentProfileDiff, F as prepareAgentCandidateExecution } from '../protected-model-port-DzkUY3HQ.js';
+import { P as PreparedAgentCandidateExecution, A as AgentCandidateExecutorPort, b as AgentCandidateOutputArtifactPort, w as AgentCandidateOutputPurpose, e as AgentCandidateExecutionPorts, z as AgentCandidateVerificationPorts, V as VerifiedAgentCandidate, r as AgentCandidateExecutorWorkspaceFile, B as AgentCandidateWorkspacePort } from '../types-Cbp72qyu.js';
+export { j as AgentCandidateArtifactPort, a as AgentCandidateBenchmarkGraderPort, k as AgentCandidateContainerPort, l as AgentCandidateExecutorFinalCapture, m as AgentCandidateExecutorMemoryCapture, n as AgentCandidateExecutorProfileFile, o as AgentCandidateExecutorRequest, p as AgentCandidateExecutorStopRequest, q as AgentCandidateExecutorTaskOutcomeCapture, s as AgentCandidateExecutorWorkspaceInput, t as AgentCandidateMemoryPort, u as AgentCandidateMemoryResetResult, v as AgentCandidateModelLimits, f as AgentCandidateModelPort, h as AgentCandidateProtectedModelActivation, g as AgentCandidateProtectedModelReservation, i as AgentCandidateProtectedModelSettlement, x as AgentCandidateProtectedRunCapture, y as AgentCandidateRepositoryPort, c as AgentCandidateRunFinalization, d as AgentCandidateTaskExecution, C as CANDIDATE_TRACE_ENV, D as CANDIDATE_TRACE_TAGS, E as CanonicalCandidateDocument, F as PreparedAgentCandidateInstruction, G as PreparedAgentCandidateKnowledge, H as PreparedAgentCandidateLaunch, I as PreparedAgentCandidateTrace, R as ResolvedAgentCandidateContainer, J as VerifiedAgentCandidateTaskOutcome } from '../types-Cbp72qyu.js';
 import { AgentEnvironmentProvider, AgentExactProcessResources } from '@tangle-network/agent-interface/environment-provider';
 import { TraceStore } from '@tangle-network/agent-eval';
 
@@ -122,42 +122,6 @@ declare function persistCandidateOutputArtifact(port: AgentCandidateOutputArtifa
     signal?: AbortSignal;
 }): Promise<AgentCandidateArtifactRef>;
 
-type AgentCandidateModelGrantReserveInput = Parameters<AgentCandidateModelPort['reserveGrant']>[0];
-type AgentCandidateModelGrantActivateInput = Parameters<AgentCandidateModelPort['activateGrant']>[0];
-type AgentCandidateModelGrantSettleInput = Parameters<AgentCandidateModelPort['settleGrant']>[0];
-/** Secret-free response from the service's reservation endpoint. */
-type AgentCandidateModelGrantReservation = AgentCandidateProtectedModelReservation;
-/**
- * Narrow transport contract for a service that owns scoped model credentials
- * and the authoritative per-call usage ledger.
- *
- * An HTTP client can bind these methods to control-plane endpoints. Keeping
- * transport out of the runtime prevents parent credentials, endpoint paths,
- * and retry policy from becoming part of the portable candidate contract.
- */
-interface AgentCandidateModelGrantClient {
-    reserve(input: AgentCandidateModelGrantReserveInput): Promise<AgentCandidateModelGrantReservation>;
-    activate(input: AgentCandidateModelGrantActivateInput): Promise<AgentCandidateProtectedModelActivation>;
-    settle(input: AgentCandidateModelGrantSettleInput): Promise<AgentCandidateProtectedModelSettlement>;
-}
-interface CreateProtectedAgentCandidateModelPortOptions {
-    client: AgentCandidateModelGrantClient;
-    /** Catalog/snapshot resolution stays separate from credential issuance. */
-    resolveModel: AgentCandidateModelPort['resolve'];
-    /** The only public DNS name candidate processes may reach for inference. */
-    gatewayDomain: string;
-    /** Exact environment names the activation endpoint must return, no more or fewer. */
-    activationEnvNames: readonly string[];
-}
-/**
- * Bind a protected model-grant service to the immutable candidate runtime.
- *
- * The service remains the authority for expiry, admission, revocation, and
- * metering. This adapter independently checks every response before allowing
- * it to cross into candidate execution or durable receipt finalization.
- */
-declare function createProtectedAgentCandidateModelPort(options: CreateProtectedAgentCandidateModelPortOptions): AgentCandidateModelPort;
-
 interface RecoverExpiredAgentCandidateOptions {
     attempt: AgentCandidateExecutionAttemptRef;
     claimStore: AgentCandidateExecutionClaimStore;
@@ -225,4 +189,4 @@ declare function captureAgentCandidateWorkspaceFiles(input: readonly AgentCandid
 /** Create the standard bounded materializer for candidate execution ports. */
 declare function createAgentCandidateWorkspacePort(options?: CreateAgentCandidateWorkspacePortOptions): AgentCandidateWorkspacePort;
 
-export { AGENT_CANDIDATE_EXECUTION_SUPPORT, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, AgentCandidateExecutionAttemptRecord, AgentCandidateExecutionAttemptRef, AgentCandidateExecutionClaim, AgentCandidateExecutionClaimResult, AgentCandidateExecutionClaimStore, AgentCandidateExecutionFinishResult, AgentCandidateExecutionLease, AgentCandidateExecutionPhaseResult, AgentCandidateExecutionPorts, AgentCandidateExecutionRecoveryEvidence, AgentCandidateExecutionStageResult, AgentCandidateExecutionTerminalResult, AgentCandidateExecutorPort, AgentCandidateExecutorWorkspaceFile, type AgentCandidateModelGrantActivateInput, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReservation, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantSettleInput, AgentCandidateModelPort, AgentCandidateOutputArtifactPort, AgentCandidateOutputPurpose, type AgentCandidateProfileSource, AgentCandidateProtectedModelActivation, AgentCandidateProtectedModelReservation, AgentCandidateProtectedModelSettlement, AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArchiveLimits, AgentCandidateWorkspacePort, type BuildAgentCandidateBundleInput, CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV, CANDIDATE_KNOWLEDGE_ROOT_ENV, type CaptureAgentCandidateWorkspaceOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, FileAgentCandidateExecutionClaimStore, type FileAgentCandidateExecutionClaimStoreOptions, PreparedAgentCandidateExecution, type RecoverExpiredAgentCandidateOptions, VerifiedAgentCandidate, buildAgentCandidateBundle, candidateExecutionClaim, candidateKnowledgeExecutionPaths, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, disposePreparedAgentCandidateExecution, exactProcessProviderAsCandidateExecutor, persistCandidateOutputArtifact, recoverExpiredAgentCandidateExecution, sealAgentCandidateBundle, verifyAgentCandidateBundle };
+export { AGENT_CANDIDATE_EXECUTION_SUPPORT, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, AgentCandidateExecutionAttemptRecord, AgentCandidateExecutionAttemptRef, AgentCandidateExecutionClaim, AgentCandidateExecutionClaimResult, AgentCandidateExecutionClaimStore, AgentCandidateExecutionFinishResult, AgentCandidateExecutionLease, AgentCandidateExecutionPhaseResult, AgentCandidateExecutionPorts, AgentCandidateExecutionRecoveryEvidence, AgentCandidateExecutionStageResult, AgentCandidateExecutionTerminalResult, AgentCandidateExecutorPort, AgentCandidateExecutorWorkspaceFile, AgentCandidateOutputArtifactPort, AgentCandidateOutputPurpose, type AgentCandidateProfileSource, AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArchiveLimits, AgentCandidateWorkspacePort, type BuildAgentCandidateBundleInput, CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV, CANDIDATE_KNOWLEDGE_ROOT_ENV, type CaptureAgentCandidateWorkspaceOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, FileAgentCandidateExecutionClaimStore, type FileAgentCandidateExecutionClaimStoreOptions, PreparedAgentCandidateExecution, type RecoverExpiredAgentCandidateOptions, VerifiedAgentCandidate, buildAgentCandidateBundle, candidateExecutionClaim, candidateKnowledgeExecutionPaths, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, createAgentCandidateWorkspacePort, disposePreparedAgentCandidateExecution, exactProcessProviderAsCandidateExecutor, persistCandidateOutputArtifact, recoverExpiredAgentCandidateExecution, sealAgentCandidateBundle, verifyAgentCandidateBundle };

package/dist/candidate-execution/index.js

@@ -1,19 +1,19 @@
 import {
   FileAgentCandidateExecutionClaimStore,
   buildAgentCandidateBundle,
-  createProtectedAgentCandidateModelPort,
   disposePreparedAgentCandidateExecution,
   recoverExpiredAgentCandidateExecution
-} from "../chunk-CK76OZPM.js";
+} from "../chunk-SNSMRT6H.js";
 import {
+  createProtectedAgentCandidateModelPort,
   exactProcessProviderAsCandidateExecutor
-} from "../chunk-377GOJHJ.js";
+} from "../chunk-ZXICDSAK.js";
 import {
   captureAgentCandidateWorkspace,
   captureAgentCandidateWorkspaceFiles,
   createAgentCandidateWorkspacePort,
   sealAgentCandidateBundle
-} from "../chunk-KSM6GFHP.js";
+} from "../chunk-B7K7V22Y.js";
 import {
   AGENT_CANDIDATE_EXECUTION_SUPPORT,
   CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV,
@@ -22,6 +22,7 @@ import {
   CANDIDATE_TRACE_TAGS,
   InMemoryAgentCandidateExecutionClaimStore,
   applyExactAgentProfileDiff,
+  assertCandidateProfileBinding,
   candidateExecutionClaim,
   candidateKnowledgeExecutionPaths,
   executePreparedAgentCandidate,
@@ -30,9 +31,9 @@ import {
   persistCandidateOutputArtifact,
   prepareAgentCandidateExecution,
   verifyAgentCandidateBundle
-} from "../chunk-LJLG734E.js";
+} from "../chunk-SBTWKPVR.js";
 import "../chunk-UPWGXKXB.js";
-import "../chunk-IMSNJSXH.js";
+import "../chunk-ISPWRSEC.js";
 import "../chunk-3MDZX7YU.js";
 export {
   AGENT_CANDIDATE_EXECUTION_SUPPORT,
@@ -43,6 +44,7 @@ export {
   FileAgentCandidateExecutionClaimStore,
   InMemoryAgentCandidateExecutionClaimStore,
   applyExactAgentProfileDiff,
+  assertCandidateProfileBinding,
   buildAgentCandidateBundle,
   candidateExecutionClaim,
   candidateKnowledgeExecutionPaths,