@tangle-network/agent-runtime 0.103.1 → 0.105.0

package/dist/intelligence.d.ts

@@ -1,10 +1,12 @@
-import { AgentProfileDiff, AgentProfile, AgentProfileMcpServer, AgentImprovementActivationTarget, Sha256Digest, AgentImprovementSurface, AgentCandidateExperiment, AgentImprovementActivationIntent, AgentCandidateExperimentMaterial, AgentImprovementMeasuredComparison, AgentCandidateExperimentMeasurement, AgentImprovementProposal, AgentImprovementReviewDecision, AgentCandidateBenchmarkCellRef, AgentImprovementReview, AgentImprovementActivation, CandidateExecutionEvidence, AgentImprovementActivationTargetState, AgentImprovementActivationTargetTransition } from '@tangle-network/agent-interface';
+import { AgentProfileDiff, AgentProfile, AgentImprovementProposal, AgentProfileMcpServer, AgentImprovementActivationTarget, Sha256Digest, AgentImprovementSurface, AgentCandidateExperiment, AgentImprovementActivationIntent, AgentCandidateExperimentMaterial, AgentImprovementMeasuredComparison, AgentCandidateExperimentMeasurement, AgentImprovementReviewDecision, AgentCandidateBenchmarkCellRef, AgentImprovementReview, AgentImprovementActivation, CandidateExecutionEvidence, AgentImprovementActivationTargetState, AgentImprovementActivationTargetTransition } from '@tangle-network/agent-interface';
 export { AgentImprovementActivation, AgentImprovementActivationIntent, AgentImprovementActivationOutcome, AgentImprovementActivationResult, AgentImprovementMeasuredComparison, AgentImprovementProposal, AgentImprovementReview, AgentImprovementReviewDecision, CandidateExecutionEvidence, AgentCandidateProfileActivation as CandidateProfileMaterialization } from '@tangle-network/agent-interface';
-import { c as LoopTraceEvent } from './types-DK11_O4L.js';
+import { I as ImproveOptions, a as ImproveResult, b as ImproveMethodResult, R as Redactor } from './redact-BuFjxBUJ.js';
+export { d as defaultRedactor, r as resolveRedactor } from './redact-BuFjxBUJ.js';
+import { c as LoopTraceEvent } from './types-BCoemcXU.js';
 import { b as ToolSpec, c as RuntimeTelemetryOptions } from './sanitize-DEbPNtyI.js';
 import { R as RuntimeStreamEvent } from './types-BwoZWq-i.js';
-import { P as PrepareAgentCandidateExecutionOptions, E as ExecutePreparedAgentCandidateOptions, A as AgentCandidateExecutionClaimStore, C as CreateProtectedAgentCandidateModelPortOptions } from './protected-model-port-DzkUY3HQ.js';
-export { p as parseCandidateProfileMaterialization } from './protected-model-port-DzkUY3HQ.js';
+import { P as PrepareAgentCandidateExecutionOptions, E as ExecutePreparedAgentCandidateOptions, A as AgentCandidateExecutionClaimStore, C as CreateProtectedAgentCandidateModelPortOptions } from './protected-model-port-B4t-OQjL.js';
+export { p as parseCandidateProfileMaterialization } from './protected-model-port-B4t-OQjL.js';
 import { A as AgentImprovementActivationTargetPlan } from './activation-Cm-9MMX1.js';
 export { a as AgentImprovementActivationReconciliation, b as AgentImprovementActivationResultStore, c as AgentImprovementActivationTransition, d as AgentImprovementActivationTransitionInput, C as CreateAgentImprovementActivationResultOptions, E as ExecuteAgentImprovementActivationInput, e as ExecuteAgentImprovementActivationOptions, f as createAgentImprovementActivationResult, g as executeAgentImprovementActivation, v as verifyAgentImprovementActivationResult } from './activation-Cm-9MMX1.js';
 import { TraceStore } from '@tangle-network/agent-eval';
@@ -14,12 +16,11 @@ import { c as AgentCandidateRunFinalization, d as AgentCandidateTaskExecution, e
 import { AgentEnvironmentProviderRef, AgentEnvironmentProviderRegistry } from './environment-provider.js';
 import { AnalystFinding } from '@tangle-network/agent-eval/analyst';
 import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-CmYCMbFT.js';
-import { I as ImproveOptions, a as ImproveResult } from './improve-B40dRu0X.js';
-import '@tangle-network/sandbox';
-import './types-lZTE_LBd.js';
-import '@tangle-network/agent-eval/campaign';
-import './local-harness-CtK9dSny.js';
+import { OptimizationPackageSource, OptimizationMethodComparison, OptimizationTokenUsage } from '@tangle-network/agent-eval/campaign';
+import './local-harness-BDNcl6jI.js';
 import 'node:child_process';
+import '@tangle-network/sandbox';
+import './types-CvNwMzQt.js';
 
 /**
  *
@@ -134,39 +135,6 @@ interface EffortOverridesCompiled {
  */
 declare function compileEffort(settings: EffortSettings): EffortOverridesCompiled;
 
-/**
- *
- * Redaction for Intelligence trace export. The trace carries the customer's
- * real input/output; before any of it leaves the process it passes through a
- * `Redactor`. The default scrubs the obvious leak classes (API keys, bearer
- * tokens, emails, private keys) from strings and walks nested objects/arrays,
- * but a customer with domain-specific PII supplies their own `redact` hook.
- *
- * This is intentionally narrower than `src/sanitize.ts` (which redacts the
- * runtime's *event envelope* field-by-field): here the value is opaque
- * customer payload, so the scrub is value-shaped, not schema-shaped.
- *
- * @experimental
- */
-/** A redactor maps an arbitrary trace value to a safe-to-export value. Pure;
- *  must not throw on cyclic input (the default tolerates cycles). */
-type Redactor = (value: unknown) => unknown;
-/**
- * The built-in redactor. Walks objects and arrays; replaces values under
- * secret-bearing keys wholesale; scrubs in-value patterns from every string.
- * Cycle-safe (a seen-set short-circuits self-referential payloads to
- * `'[circular]'`), depth-bounded, and total — never throws on customer input.
- */
-declare function defaultRedactor(value: unknown): unknown;
-/**
- * Resolve the redactor a client uses. A caller-supplied hook replaces the
- * default entirely (the customer owns their PII rules); absent one, the
- * built-in `defaultRedactor` runs. Returning `false` is the explicit opt-out —
- * NO redaction, for a caller who has already sanitized upstream and wants raw
- * fidelity. Opt-out is loud (an explicit `false`), never a silent default.
- */
-declare function resolveRedactor(redact: Redactor | false | undefined): Redactor;
-
 /**
  *
  * Tangle Intelligence — the RECEIVE half of the loop (pull-by-default).
@@ -282,11 +250,40 @@ interface PullCertifiedOptions {
     baseUrl?: string;
     /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */
     fetchImpl?: typeof fetch;
-    /** Abort the pull after this many ms so a hung plane never blocks the caller.
-     *  Default 10000. The timeout surfaces as a normal fail-closed `succeeded:
-     *  false` (the agent runs on its base surface). */
+    /** Abort the request after this many ms. Default 10000. */
     timeoutMs?: number;
 }
+/** What Runtime knows about a failed proposal submission.
+ * `not-sent` means no request began, `rejected` means Intelligence returned a
+ * definitive 4xx response, and `unconfirmed` means the caller may safely retry
+ * the same immutable proposal. */
+type AgentImprovementProposalSubmissionState = 'not-sent' | 'rejected' | 'unconfirmed';
+/** Submit a completed measured proposal for product-side review. */
+interface SubmitAgentImprovementProposalOptions {
+    proposal: AgentImprovementProposal;
+    /** Bearer key. Defaults to `process.env.TANGLE_API_KEY`. */
+    apiKey?: string;
+    /** Plane base URL. Defaults to `process.env.TANGLE_INTELLIGENCE_URL` then
+     * `https://intelligence.tangle.tools`. */
+    baseUrl?: string;
+    /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** Abort the request after this many ms. Default 10000. */
+    timeoutMs?: number;
+}
+/** Typed result for proposal submission. A successful result contains the
+ * exact immutable proposal Intelligence recorded. */
+type SubmitAgentImprovementProposalOutcome = {
+    succeeded: true;
+    value: AgentImprovementProposal;
+    status: number;
+} | {
+    succeeded: false;
+    submission: AgentImprovementProposalSubmissionState;
+    error: string;
+    status?: number;
+    code?: string;
+};
 /** Resolve the ONE Intelligence base URL — the single knob both the send and
  *  receive paths derive from. Env fallback: `TANGLE_INTELLIGENCE_URL`. */
 declare function resolveIntelligenceBaseUrl(baseUrl: string | undefined): string;
@@ -304,6 +301,14 @@ declare function normalizeCertifiedProfile(raw: unknown): CertifiedProfile;
  * the normal "nothing promoted yet" signal, carried as `status: 404`.
  */
 declare function pullCertified(opts: PullCertifiedOptions): Promise<PullOutcome>;
+/**
+ * Submit a completed Runtime proposal to Intelligence for product-side review.
+ * This never runs an experiment, approves a proposal, or applies a candidate.
+ * A 4xx response is a confirmed `rejected` request. Network failures, timeouts,
+ * 5xx responses, and invalid success responses are `unconfirmed`, so callers
+ * can retry the same digest because Intelligence stores proposals idempotently.
+ */
+declare function submitAgentImprovementProposal(opts: SubmitAgentImprovementProposalOptions): Promise<SubmitAgentImprovementProposalOutcome>;
 /**
  * Fold the certified prompt surface (and any certified prompt-folding artifacts:
  * `prompt-surface` / `skill` / `instructions`) into a base system prompt under a
@@ -849,6 +854,47 @@ declare function createExactProcessCandidateExperimentExecutor(options: CreateEx
 /** Compose host-owned execution ports with protected model access for one exact-process run. */
 declare function createProtectedExactProcessCandidateExperimentExecutor(options: CreateProtectedExactProcessCandidateExperimentExecutorOptions): ProtectedExactProcessCandidateExperimentExecutor;
 
+type OptimizationProvenance = NonNullable<OptimizationMethodComparison['best']['provenance']>;
+interface OptimizationActivationReceipt {
+    kind: 'optimization-activation-receipt';
+    method: string;
+    source: OptimizationPackageSource;
+    bridge?: OptimizationPackageSource;
+    modules?: OptimizationProvenance['modules'];
+    python?: OptimizationProvenance['python'];
+    models?: {
+        candidate?: NonNullable<AgentProfile['model']>;
+        optimizer?: string;
+    };
+    usage: {
+        optimizerEvaluations: number;
+        optimizerTokens?: OptimizationTokenUsage;
+    };
+    cost: {
+        optimization: OptimizationReceiptCost;
+        finalTest: OptimizationReceiptCost;
+        total: OptimizationReceiptCost;
+    };
+    invocation: {
+        runtimeInvocationId: string;
+        optimizerRunId: string;
+        compatibleOptimizerRunId?: string;
+        resumed: boolean;
+        artifactDir: string;
+    };
+    developmentDataDigest: Sha256Digest;
+    digest: Sha256Digest;
+}
+interface OptimizationReceiptCost {
+    totalUsd: number;
+    accountingComplete: boolean;
+    incompleteReasons: string[];
+}
+/** Build a detached receipt only for methods backed by an identified external optimizer. */
+declare function createOptimizationActivationReceipt(improvement: ImproveMethodResult): OptimizationActivationReceipt | undefined;
+/** Read and verify the optimizer evidence carried by a measured proposal. */
+declare function optimizationActivationReceiptFromMetadata(metadata: AgentImprovementMeasuredComparison['metadata']): OptimizationActivationReceipt | undefined;
+
 type AgentImprovementProfileActivationTarget = Omit<AgentImprovementActivationTargetPlan, 'surface'> & {
     surface: AgentImprovementProfileSurface;
 };
@@ -1331,7 +1377,7 @@ interface IntelligenceClient {
     traceRun<T>(meta: TraceMeta, fn: (trace: TraceHandle) => Promise<T>): Promise<T>;
     /**
      * Export a run's full loop topology — the ordered `LoopTraceEvent` stream a
-     * `runLoop`/`Supervisor` run emits — as a nested OTLP span tree (loop → round →
+     * `runAgentRounds`/`Supervisor` run emits — as a nested OTLP span tree (loop → round →
      * iteration) into ONE trace. Reuses the shipped `buildLoopOtelSpans` builder
      * (NO second span builder), so the topology a viewer renders matches the
      * kernel's. `traceId` defaults to a fresh id; `rootParentSpanId` parents the
@@ -1386,4 +1432,4 @@ interface DoctorReport {
  */
 declare function createIntelligenceClient(config: IntelligenceConfig): IntelligenceClient;
 
-export { AGENT_IMPROVEMENT_PROFILE_SURFACES, type AgentCandidateExecutionHostPorts, AgentCandidateExperimentCellExecutionError, type AgentCandidateExperimentCellPlacement, type AgentImprovementActivationTargetIdentity, AgentImprovementActivationTargetPlan, type AgentImprovementExperimentMaterial, type AgentImprovementProfileActivationPreparation, type AgentImprovementProfileActivationTarget, type AgentImprovementProfileReplacement, type AgentImprovementProfileSurface, type AgentImprovementProfileTargetState, type AgentImprovementProfileTargetTransition, type AgentImprovementTargetProfileDiffOptions, type AppliedIntelligence, type CapabilityAuth, type CapabilityInterface, type CapabilityManifest, CapabilityNotAdmittedError, type CapabilitySurface, type CertProvenance, type CertifiedArtifact, type CertifiedCapability, type CertifiedCapabilitySummary, type CertifiedProfile, type CertifiedPromptSource, type CertifiedPromptSourceOptions, type CertifiedPromptSurface, type ContentRef, type CorpusAccess, type CreateAgentImprovementActivationOptions, type CreateAgentImprovementProposalOptions, type CreateExactProcessCandidateExperimentExecutorOptions, type CreateProtectedExactProcessCandidateExperimentExecutorOptions, type CredentialRef, type DeliveryBinding, type DeliveryBindingKind, type DiffProvenance, type DoctorReport, type EffortOverrides, type EffortOverridesCompiled, type EffortSettings, type EffortTier, type ExactProcessCandidateExperimentExecution, type ExactProcessCandidateExperimentExecutor, type ExecuteAgentCandidateExperimentCellOptions, type HostSpec, type IntelligenceAgent, type IntelligenceClient, type IntelligenceConfig, type IntelligenceHookConfig, type IntelligenceWrapped, type JsonSchema, type ModeReadiness, type ProposeAgentImprovementOptions, type ProposeAgentImprovementResult, type ProposedProfileDiff, type ProtectedExactProcessCandidateExperimentExecutor, type ProvisionedHost, type PullCertifiedOptions, type PullOutcome, type RecordTraceMeta, type Redactor, type RepoConfig, type ResolveCtx, type ResolvedHook, type ResolvedRetrieval, type ResolvedSubagent, type ResolvedSurface, type ReviewAgentImprovementInput, type RunAgentCandidateExperimentOptions, type RunAgentCandidateExperimentResult, type RunRecord, type RunReport, type TraceHandle, type TraceMeta, type TraceOutcome, type UsageClass, type UsageSplit, type VerifyCandidateExecutionEvidenceOptions, agentImprovementProfileSurfaceDigest, agentImprovementProfileSurfaceInput, agentImprovementTargetProfileDiffs, buildAgentImprovementActivationTargets, compileEffort, composeCertifiedProfile, composeCertifiedProfileFromWire, composeCertifiedPrompt, createAgentImprovementActivation, createAgentImprovementMeasuredComparison, createAgentImprovementProposal, createCertifiedPromptSource, createExactProcessCandidateExperimentExecutor, createIntelligenceClient, createProtectedExactProcessCandidateExperimentExecutor, defaultEffortTier, defaultRedactor, exactProcessCandidateExperimentExecutionSupport, executeAgentCandidateExperimentCell, isAgentImprovementProfileSurface, isIntelligenceOff, manifestFromProfile, normalizeCertifiedProfile, prepareAgentImprovementProfileActivation, proposeAgentImprovement, pullCertified, resolveEffort, resolveIntelligenceBaseUrl, resolveRedactor, reviewAgentImprovementProposal, runAgentCandidateExperiment, verifyAgentImprovementActivation, verifyAgentImprovementProposal, verifyAgentImprovementReview, verifyCandidateExecutionEvidence, withIntelligence };
+export { AGENT_IMPROVEMENT_PROFILE_SURFACES, type AgentCandidateExecutionHostPorts, AgentCandidateExperimentCellExecutionError, type AgentCandidateExperimentCellPlacement, type AgentImprovementActivationTargetIdentity, AgentImprovementActivationTargetPlan, type AgentImprovementExperimentMaterial, type AgentImprovementProfileActivationPreparation, type AgentImprovementProfileActivationTarget, type AgentImprovementProfileReplacement, type AgentImprovementProfileSurface, type AgentImprovementProfileTargetState, type AgentImprovementProfileTargetTransition, type AgentImprovementProposalSubmissionState, type AgentImprovementTargetProfileDiffOptions, type AppliedIntelligence, type CapabilityAuth, type CapabilityInterface, type CapabilityManifest, CapabilityNotAdmittedError, type CapabilitySurface, type CertProvenance, type CertifiedArtifact, type CertifiedCapability, type CertifiedCapabilitySummary, type CertifiedProfile, type CertifiedPromptSource, type CertifiedPromptSourceOptions, type CertifiedPromptSurface, type ContentRef, type CorpusAccess, type CreateAgentImprovementActivationOptions, type CreateAgentImprovementProposalOptions, type CreateExactProcessCandidateExperimentExecutorOptions, type CreateProtectedExactProcessCandidateExperimentExecutorOptions, type CredentialRef, type DeliveryBinding, type DeliveryBindingKind, type DiffProvenance, type DoctorReport, type EffortOverrides, type EffortOverridesCompiled, type EffortSettings, type EffortTier, type ExactProcessCandidateExperimentExecution, type ExactProcessCandidateExperimentExecutor, type ExecuteAgentCandidateExperimentCellOptions, type HostSpec, type IntelligenceAgent, type IntelligenceClient, type IntelligenceConfig, type IntelligenceHookConfig, type IntelligenceWrapped, type JsonSchema, type ModeReadiness, type OptimizationActivationReceipt, type OptimizationReceiptCost, type ProposeAgentImprovementOptions, type ProposeAgentImprovementResult, type ProposedProfileDiff, type ProtectedExactProcessCandidateExperimentExecutor, type ProvisionedHost, type PullCertifiedOptions, type PullOutcome, type RecordTraceMeta, Redactor, type RepoConfig, type ResolveCtx, type ResolvedHook, type ResolvedRetrieval, type ResolvedSubagent, type ResolvedSurface, type ReviewAgentImprovementInput, type RunAgentCandidateExperimentOptions, type RunAgentCandidateExperimentResult, type RunRecord, type RunReport, type SubmitAgentImprovementProposalOptions, type SubmitAgentImprovementProposalOutcome, type TraceHandle, type TraceMeta, type TraceOutcome, type UsageClass, type UsageSplit, type VerifyCandidateExecutionEvidenceOptions, agentImprovementProfileSurfaceDigest, agentImprovementProfileSurfaceInput, agentImprovementTargetProfileDiffs, buildAgentImprovementActivationTargets, compileEffort, composeCertifiedProfile, composeCertifiedProfileFromWire, composeCertifiedPrompt, createAgentImprovementActivation, createAgentImprovementMeasuredComparison, createAgentImprovementProposal, createCertifiedPromptSource, createExactProcessCandidateExperimentExecutor, createIntelligenceClient, createOptimizationActivationReceipt, createProtectedExactProcessCandidateExperimentExecutor, defaultEffortTier, exactProcessCandidateExperimentExecutionSupport, executeAgentCandidateExperimentCell, isAgentImprovementProfileSurface, isIntelligenceOff, manifestFromProfile, normalizeCertifiedProfile, optimizationActivationReceiptFromMetadata, prepareAgentImprovementProfileActivation, proposeAgentImprovement, pullCertified, resolveEffort, resolveIntelligenceBaseUrl, reviewAgentImprovementProposal, runAgentCandidateExperiment, submitAgentImprovementProposal, verifyAgentImprovementActivation, verifyAgentImprovementProposal, verifyAgentImprovementReview, verifyCandidateExecutionEvidence, withIntelligence };

package/dist/intelligence.js

@@ -1,12 +1,16 @@
+import {
+  defaultRedactor,
+  resolveRedactor
+} from "./chunk-OPVWXJ2H.js";
 import {
   createProtectedAgentCandidateModelPort,
   exactProcessProviderAsCandidateExecutor
-} from "./chunk-ZXICDSAK.js";
+} from "./chunk-H5QPIZNX.js";
 import {
   createAgentImprovementActivationResult,
   executeAgentImprovementActivation,
   verifyAgentImprovementActivationResult
-} from "./chunk-5AITUUHO.js";
+} from "./chunk-VISA6CI3.js";
 import {
   AGENT_IMPROVEMENT_PROFILE_SURFACES,
   AgentCandidateExperimentCellExecutionError,
@@ -17,8 +21,10 @@ import {
   createAgentImprovementActivation,
   createAgentImprovementMeasuredComparison,
   createAgentImprovementProposal,
+  createOptimizationActivationReceipt,
   executeAgentCandidateExperimentCell,
   isAgentImprovementProfileSurface,
+  optimizationActivationReceiptFromMetadata,
   proposeAgentImprovement,
   reviewAgentImprovementProposal,
   runAgentCandidateExperiment,
@@ -26,7 +32,7 @@ import {
   verifyAgentImprovementProposal,
   verifyAgentImprovementReview,
   verifyCandidateExecutionEvidence
-} from "./chunk-LFM4JBRW.js";
+} from "./chunk-UHEZW5BU.js";
 import {
   AGENT_CANDIDATE_EXECUTION_SUPPORT,
   applyExactAgentProfileDiff,
@@ -34,8 +40,8 @@ import {
   omitUndefinedObjectFields,
   parseAgentCandidateProfileActivation,
   parseExactAgentProfile
-} from "./chunk-SBTWKPVR.js";
-import "./chunk-QYCKIV6C.js";
+} from "./chunk-WSTRQZYQ.js";
+import "./chunk-YJZA2BIK.js";
 import "./chunk-UPWGXKXB.js";
 import {
   buildLoopOtelSpans,
@@ -43,11 +49,11 @@ import {
   createOtelExporter,
   flatOtelSpan
 } from "./chunk-2VZYRB55.js";
-import "./chunk-6WZZXQV5.js";
+import "./chunk-HLKC4UYB.js";
 import "./chunk-ISPWRSEC.js";
 import {
   resolveAgentEnvironmentProvider
-} from "./chunk-M6MD6JBS.js";
+} from "./chunk-KRBFHMV6.js";
 import "./chunk-3MDZX7YU.js";
 import "./chunk-FD2MBMOH.js";
 import "./chunk-M22PL4GH.js";
@@ -59,7 +65,8 @@ import { contentHash } from "@tangle-network/agent-eval";
 // src/intelligence/delivery.ts
 var defaultPlaneBaseUrl = "https://intelligence.tangle.tools";
 var defaultRefreshMs = 3e5;
-var defaultPullTimeoutMs = 1e4;
+var defaultPlaneRequestTimeoutMs = 1e4;
+var maxPlaneErrorTextLength = 200;
 function resolveIntelligenceBaseUrl(baseUrl) {
   if (baseUrl) return baseUrl.replace(/\/+$/, "");
   if (typeof process !== "undefined" && process.env.TANGLE_INTELLIGENCE_URL) {
@@ -73,9 +80,44 @@ function resolveApiKey(apiKey) {
     return process.env.TANGLE_API_KEY;
   return "";
 }
+async function requestPlane(input) {
+  const doFetch = input.fetchImpl ?? globalThis.fetch;
+  if (!doFetch) {
+    return { succeeded: false, attempted: false, error: "no fetch implementation available" };
+  }
+  const apiKey = resolveApiKey(input.apiKey);
+  if (!apiKey) {
+    return {
+      succeeded: false,
+      attempted: false,
+      error: "no apiKey (set TANGLE_API_KEY or opts.apiKey)"
+    };
+  }
+  try {
+    const response = await doFetch(`${resolveIntelligenceBaseUrl(input.baseUrl)}${input.path}`, {
+      ...input.method === void 0 ? {} : { method: input.method },
+      headers: {
+        authorization: `Bearer ${apiKey}`,
+        ...input.headers ?? {}
+      },
+      ...input.body === void 0 ? {} : { body: input.body },
+      signal: AbortSignal.timeout(input.timeoutMs ?? defaultPlaneRequestTimeoutMs)
+    });
+    return { succeeded: true, response };
+  } catch (err) {
+    return {
+      succeeded: false,
+      attempted: true,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
 function asRecord(value) {
   return value && typeof value === "object" ? value : {};
 }
+function capPlaneErrorText(value) {
+  return value.slice(0, maxPlaneErrorTextLength);
+}
 function toDiffProvenance(value) {
   const p = asRecord(value);
   return {
@@ -105,24 +147,17 @@ function normalizeCertifiedProfile(raw) {
   };
 }
 async function pullCertified(opts) {
-  const doFetch = opts.fetchImpl ?? globalThis.fetch;
-  if (!doFetch) return { succeeded: false, error: "no fetch implementation available" };
-  const apiKey = resolveApiKey(opts.apiKey);
-  if (!apiKey) return { succeeded: false, error: "no apiKey (set TANGLE_API_KEY or opts.apiKey)" };
-  const baseUrl = resolveIntelligenceBaseUrl(opts.baseUrl);
-  const url = `${baseUrl}/v1/profiles/${encodeURIComponent(opts.target)}/composed`;
-  let res;
-  try {
-    res = await doFetch(url, {
-      headers: { authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(opts.timeoutMs ?? defaultPullTimeoutMs)
-    });
-  } catch (err) {
+  const request = await requestPlane({
+    ...opts,
+    path: `/v1/profiles/${encodeURIComponent(opts.target)}/composed`
+  });
+  if (!request.succeeded) {
     return {
       succeeded: false,
-      error: `pull request failed: ${err instanceof Error ? err.message : String(err)}`
+      error: request.attempted ? `pull request failed: ${request.error}` : request.error
     };
   }
+  const res = request.response;
   if (res.status === 404) {
     return {
       succeeded: false,
@@ -147,6 +182,73 @@ async function pullCertified(opts) {
     };
   }
 }
+async function submitAgentImprovementProposal(opts) {
+  let proposal;
+  try {
+    proposal = verifyAgentImprovementProposal(opts.proposal);
+  } catch (err) {
+    return {
+      succeeded: false,
+      submission: "not-sent",
+      error: `proposal validation failed: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  const request = await requestPlane({
+    ...opts,
+    path: "/v1/improvements/proposals",
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ proposal })
+  });
+  if (!request.succeeded) {
+    return {
+      succeeded: false,
+      submission: request.attempted ? "unconfirmed" : "not-sent",
+      error: request.attempted ? `proposal submission request failed: ${request.error}` : request.error
+    };
+  }
+  const res = request.response;
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    let code;
+    let message = capPlaneErrorText(body);
+    try {
+      const parsed = asRecord(JSON.parse(body));
+      if (typeof parsed.error === "string") code = capPlaneErrorText(parsed.error);
+      if (typeof parsed.message === "string") message = capPlaneErrorText(parsed.message);
+    } catch {
+    }
+    return {
+      succeeded: false,
+      submission: res.status >= 400 && res.status < 500 ? "rejected" : "unconfirmed",
+      error: `proposal submission ${res.status}: ${message}`,
+      status: res.status,
+      ...code === void 0 ? {} : { code }
+    };
+  }
+  try {
+    const response = asRecord(await res.json());
+    const recorded = verifyAgentImprovementProposal(response.proposal);
+    if (recorded.digest !== proposal.digest) {
+      return {
+        succeeded: false,
+        submission: "unconfirmed",
+        error: "proposal submission returned a different proposal digest",
+        status: res.status
+      };
+    }
+    return { succeeded: true, value: recorded, status: res.status };
+  } catch (err) {
+    return {
+      succeeded: false,
+      submission: "unconfirmed",
+      error: `proposal submission response parse failed: ${capPlaneErrorText(
+        err instanceof Error ? err.message : String(err)
+      )}`,
+      status: res.status
+    };
+  }
+}
 var promptFoldTypes = ["prompt-surface", "skill", "instructions"];
 function composeCertifiedPrompt(base, certified) {
   if (!certified) return base;
@@ -254,57 +356,6 @@ function compileEffort(settings) {
   };
 }
 
-// src/intelligence/redact.ts
-var redactedMarker = "[redacted]";
-var secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
-var valuePatterns = [
-  // Bearer tokens.
-  /\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
-  // Provider-style API keys (sk-..., sk-tan-..., pk_live_..., ghp_...).
-  /\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
-  /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
-  // AWS access key ids.
-  /\bAKIA[0-9A-Z]{16}\b/g,
-  // PEM private-key blocks.
-  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-  // Email addresses.
-  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
-];
-function scrubString(input) {
-  let out = input;
-  for (const pattern of valuePatterns) {
-    out = out.replace(pattern, redactedMarker);
-  }
-  return out;
-}
-function defaultRedactor(value) {
-  return walk(value, /* @__PURE__ */ new WeakSet(), 0);
-}
-var maxDepth = 32;
-function walk(value, seen, depth) {
-  if (depth > maxDepth) return "[truncated]";
-  if (typeof value === "string") return scrubString(value);
-  if (value === null || typeof value !== "object") return value;
-  if (seen.has(value)) return "[circular]";
-  seen.add(value);
-  if (Array.isArray(value)) {
-    return value.map((item) => walk(item, seen, depth + 1));
-  }
-  const out = {};
-  for (const [key, v] of Object.entries(value)) {
-    if (secretKeyPattern.test(key)) {
-      out[key] = redactedMarker;
-      continue;
-    }
-    out[key] = walk(v, seen, depth + 1);
-  }
-  return out;
-}
-function resolveRedactor(redact) {
-  if (redact === false) return (value) => value;
-  return redact ?? defaultRedactor;
-}
-
 // src/intelligence/capability.ts
 var CapabilityNotAdmittedError = class extends Error {
   kind;
@@ -1397,6 +1448,7 @@ export {
   createCertifiedPromptSource,
   createExactProcessCandidateExperimentExecutor,
   createIntelligenceClient,
+  createOptimizationActivationReceipt,
   createProtectedExactProcessCandidateExperimentExecutor,
   defaultEffortTier,
   defaultRedactor,
@@ -1407,6 +1459,7 @@ export {
   isIntelligenceOff,
   manifestFromProfile,
   normalizeCertifiedProfile,
+  optimizationActivationReceiptFromMetadata,
   parseAgentCandidateProfileActivation as parseCandidateProfileMaterialization,
   prepareAgentImprovementProfileActivation,
   proposeAgentImprovement,
@@ -1416,6 +1469,7 @@ export {
   resolveRedactor,
   reviewAgentImprovementProposal,
   runAgentCandidateExperiment,
+  submitAgentImprovementProposal,
   verifyAgentImprovementActivation,
   verifyAgentImprovementActivationResult,
   verifyAgentImprovementProposal,