@tangle-network/agent-runtime 0.105.0 → 0.106.0

package/dist/environment-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/improvement-adapter-HAZz-7vK.d.ts

@@ -1,203 +0,0 @@
-import { FindingSubject, AnalystFinding } from '@tangle-network/agent-eval';
-import { I as ImprovementProposalSource } from './types-CmYCMbFT.js';
-
-/**
- * `AgentSurfaces` — declarative map of the mutable file/directory paths
- * the self-improvement loop can edit on behalf of an agent.
- *
- * The substrate uses this map to resolve every parsed `FindingSubject`
- * (from agent-eval) to a real on-disk path. No per-vertical glue;
- * no fabricated paths; no silent `existsSync(...)` skips that hide
- * misconfiguration from the operator.
- *
- * Surfaces are validated at `defineAgent` time — missing paths fail
- * loud with a list of every offender. A surface that's not needed
- * (e.g. an agent with no RAG corpora) is simply omitted; the loop
- * refuses to route those subjects rather than fabricating a target.
- */
-
-/**
- * Surface declarations. Every path is repo-relative (or absolute) at
- * `defineAgent` time. At resolution time, paths are joined against the
- * agent's `repoRoot`.
- *
- * `systemPrompt`, `tools`, `personas` are DIRECTORIES; the loop appends
- * `<section>.md`, `<tool>/README.md`, `<persona-id>.yaml` etc.
- * `rubric`, `outputSchema` are SINGLE FILES; the loop edits them in
- * place.
- *
- * `knowledge` is the agent-knowledge root (typically `.agent-knowledge`);
- * `applyKnowledgeWriteBlocks` writes pages relative to it.
- *
- * Optional surfaces (`scaffolding`, `memory`, `rag`, `outputSchema`)
- * can be omitted — the loop will reject findings targeting them with a
- * clear log message instead of fabricating a path.
- */
-interface AgentSurfaces {
-    /** Directory containing one markdown file per system-prompt section. */
-    systemPrompt: string;
-    /** Directory containing one subdir per tool (`<tool>/README.md`). */
-    tools: string;
-    /** Single file (TypeScript module) defining the rubric weights + dimensions. */
-    rubric: string;
-    /** Knowledge-base root; typically `.agent-knowledge`. */
-    knowledge: string;
-    /** Directory containing one YAML/JSON file per persona. */
-    personas: string;
-    /** Optional: directory containing scaffolding rules (precondition checks, retry policies). */
-    scaffolding?: string;
-    /** Optional: memory store path (JSONL / SQLite / DB). */
-    memory?: string;
-    /** Optional: directory containing RAG corpora (`<corpus>/<doc-id>.md`). */
-    rag?: string;
-    /** Optional: single file defining the output schema (Zod / JSON Schema). */
-    outputSchema?: string;
-    /** Optional: directory containing Agent Skill packages. */
-    skills?: string;
-    /** Optional: directory containing MCP server/tool configuration. */
-    mcp?: string;
-    /** Optional: directory containing hook definitions. */
-    hooks?: string;
-    /** Optional: directory containing subagent definitions. */
-    subagents?: string;
-    /** Optional: directory containing orchestration/workflow policies. */
-    workflows?: string;
-    /** Optional: single file containing rollout-policy settings. */
-    rolloutPolicy?: string;
-    /** Optional: single canonical AgentProfile file. */
-    agentProfile?: string;
-    /** Optional: source root for code findings. */
-    code?: string;
-}
-interface ResolvedSurface {
-    /** Absolute filesystem path the operator can `cat` / `vim`. */
-    absolutePath: string;
-    /** Repo-relative path for PR descriptions, diffs, audit logs. */
-    repoRelativePath: string;
-    /** Whether the path currently exists on disk. */
-    exists: boolean;
-    /** The substrate's intent: edit an existing file or create a new one. */
-    intent: 'edit-existing' | 'create-new';
-}
-/**
- * Resolve a parsed `FindingSubject` to the file path the substrate
- * should edit (or create) on disk.
- *
- * Returns `null` when:
- *   - the subject targets a surface the agent didn't declare
- *     (e.g. `rag:*` when `surfaces.rag` is undefined), OR
- *   - the subject is a `cluster` (failure-mode emits these as evidence,
- *     not actionable mutations — they don't route to a file).
- *
- * Returns a `ResolvedSurface` with `intent: 'create-new'` when the
- * subject names a path that doesn't yet exist (e.g. a new wiki page).
- * The caller chooses whether to honour the create — for tightly-managed
- * surfaces like `systemPrompt` it's usually a contract violation
- * (the analyst named a section that doesn't exist); for `knowledge`
- * it's the whole point.
- */
-declare function resolveSubjectPath(subject: FindingSubject, surfaces: AgentSurfaces, repoRoot: string): ResolvedSurface | null;
-/**
- * Validate that every declared surface exists on disk under `repoRoot`.
- *
- * Returns an array of `SurfaceValidationIssue` — empty when all required
- * surfaces resolve. `defineAgent` throws with the issues rendered, so
- * a misconfigured manifest fails at startup (not at the first finding
- * the loop produces 20 minutes later).
- */
-interface SurfaceValidationIssue {
-    surface: keyof AgentSurfaces;
-    path: string;
-    reason: 'missing' | 'not-directory' | 'not-file';
-}
-/** Validate an `AgentSurfaces` map on disk — missing paths fail loud at `defineAgent` time instead of silently skipping self-improvement edits. */
-declare function validateSurfaces(surfaces: AgentSurfaces, repoRoot: string): ReadonlyArray<SurfaceValidationIssue>;
-/** Format a list of surface validation issues into a human-readable error string. */
-declare function renderSurfaceIssues(issues: ReadonlyArray<SurfaceValidationIssue>, repoRoot: string): string;
-
-/**
- * Surface improvement proposer — resolves analyst findings into LLM-drafted
- * candidate patches without changing the caller's repository.
- *
- * The proposer parses each finding's `subject` via
- * `parseFindingSubject` (agent-eval), resolves it to a real file path
- * via the agent's `AgentSurfaces`, reads the current content, and asks
- * an LLM to draft a unified-diff patch given the finding + current
- * content + per-kind editing-discipline rules.
- *
- * Fail-loud rules:
- *   - Findings whose subject doesn't parse → counted in `errors`.
- *   - Findings whose subject targets an undeclared surface → counted in
- *     `errors` with the offending kind in the message.
- *   - Findings whose target path doesn't exist AND the kind isn't a
- *     create-new variant (`new-tool`, `knowledge.wiki`) → counted in
- *     `errors` with the resolved path in the message.
- *   - LLM drafts that fail JSON-schema validation → counted in
- *     `errors` with the schema issue.
- *
- * No silent skips. Every dropped finding has a recorded reason the
- * loop's report surfaces.
- */
-
-interface SurfaceImprovementEdit {
-    /** Stable id derived from the source finding so re-proposals are idempotent. */
-    id: string;
-    /** The finding that produced this edit — for revert + audit trail. */
-    sourceFindingId: string;
-    /** Parsed subject; included so the apply step doesn't re-parse. */
-    subject: FindingSubject;
-    /** Resolved on-disk target. */
-    target: ResolvedSurface;
-    /** SHA-256 of the current file content the patch was drafted against. */
-    baseSha256: string;
-    /** Unified-diff patch the LLM drafted (relative to `target.absolutePath`). */
-    patch: string;
-    /** One-line summary the operator sees in the report / PR title. */
-    summary: string;
-    /** Multi-line rationale for the PR body — finding context + LLM reasoning. */
-    rationale: string;
-    /** Carry-forward from the finding so the apply gate can check the threshold. */
-    confidence: number;
-    /** Carry-forward severity for prioritization. */
-    severity: AnalystFinding['severity'];
-}
-interface CreateSurfaceImprovementProposerOptions {
-    surfaces: AgentSurfaces;
-    repoRoot: string;
-    /**
-     * LLM-draft callback. Given a finding + current file content + the
-     * resolved target, returns a unified-diff patch + summary + rationale.
-     *
-     * Required — the substrate doesn't ship a hardcoded prompt; the agent
-     * author picks the model (Haiku for cheap routine drafts, Sonnet for
-     * substantive prompt rewrites, etc.) via this callback.
-     */
-    draftPatch: (input: DraftPatchInput) => Promise<DraftPatchOutput>;
-    /**
-     * When the resolved target doesn't exist, allow the substrate to
-     * CREATE the file (for `knowledge.wiki`, `new-tool` subjects). Default
-     * true for those kinds, false for `system-prompt` / `rubric` / etc.
-     * (named sections that don't exist are a contract violation, not a
-     * scaffolding opportunity).
-     */
-    allowCreateForKinds?: ReadonlyArray<FindingSubject['kind']>;
-}
-interface DraftPatchInput {
-    finding: AnalystFinding;
-    subject: FindingSubject;
-    target: ResolvedSurface;
-    /** Current file content (empty string when `intent === 'create-new'`). */
-    currentContent: string;
-}
-interface DraftPatchOutput {
-    /** Unified diff against the current file content. Empty string skips this finding. */
-    patch: string;
-    /** One-line summary for the operator. */
-    summary: string;
-    /** Multi-line rationale for the PR body. */
-    rationale: string;
-}
-/** Resolve each finding to a real surface and draft a detached patch candidate. */
-declare function createSurfaceImprovementProposer(opts: CreateSurfaceImprovementProposerOptions): ImprovementProposalSource<SurfaceImprovementEdit>;
-
-export { type AgentSurfaces as A, type CreateSurfaceImprovementProposerOptions as C, type DraftPatchInput as D, type ResolvedSurface as R, type SurfaceImprovementEdit as S, type DraftPatchOutput as a, type SurfaceValidationIssue as b, createSurfaceImprovementProposer as c, resolveSubjectPath as d, renderSurfaceIssues as r, validateSurfaces as v };

package/dist/knowledge.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/local-harness-BDNcl6jI.d.ts

@@ -1,175 +0,0 @@
-import { ChildProcess } from 'node:child_process';
-
-/**
- *
- * Subprocess wrappers for the local coding-harness CLIs installed in the
- * sandbox image (claude-code, codex, opencode). Used by the in-process
- * delegation executor (`createInProcessExecutor`) so a delegated coding task
- * spawns a real harness on a real git worktree instead of provisioning a
- * sibling sandbox.
- *
- * All harness invocations:
- *   - run with `cwd` set to the worktree
- *   - inherit env from the parent (the MCP server inside the sandbox has
- *     the harness's auth already)
- *   - capture stdout/stderr
- *   - support cancellation via AbortSignal
- *   - enforce a wall-clock timeout
- *
- * @experimental
- */
-
-/** Local coding harness available inside the sandbox. */
-type LocalHarness = 'claude' | 'codex' | 'opencode';
-/** @experimental */
-interface RunLocalHarnessOptions {
-    harness: LocalHarness;
-    /** Working directory for the subprocess (typically a worktree path). */
-    cwd: string;
-    /** Prompt forwarded as the harness CLI's task argument. */
-    taskPrompt: string;
-    /**
-     * Pre-built command + args (e.g. from `harnessInvocation` so the full authored
-     * `AgentProfile` — systemPrompt + model — reaches the harness). When set it OVERRIDES the
-     * default prompt-only `buildArgs(taskPrompt)` path; `command` defaults to the harness's
-     * default binary when only `args` is supplied. When absent the legacy prompt-only shape
-     * is used unchanged.
-     */
-    invocation?: {
-        command?: string;
-        args: ReadonlyArray<string>;
-    };
-    /** Allow autonomous Claude edits without an interactive permission prompt.
-     *  Use only when `cwd` is an isolated candidate worktree. */
-    dangerouslySkipPermissions?: boolean;
-    /** Isolate Codex from ambient configuration/instructions and require JSONL token usage.
-     *  The invocation should come from `harnessInvocation(..., { codexReproducible: true })`. */
-    codexReproducible?: boolean;
-    /** Absolute host paths that reproducible Codex must not read. The normalized set is compiled
-     *  into the controlled permission profile and its digest is returned in execution evidence. */
-    codexReadDeniedPaths?: ReadonlyArray<string>;
-    /** Wall-clock kill deadline (ms). Default 5 min. Subprocess SIGTERMed on expiry. */
-    timeoutMs?: number;
-    /** Newest stdout/stderr bytes retained per stream. Default 64 MiB. */
-    maxOutputBytes?: number;
-    /** Caller cancellation. SIGTERM is sent on abort. */
-    signal?: AbortSignal;
-    /** Override env (defaults to inheriting from the parent). */
-    env?: NodeJS.ProcessEnv;
-    /**
-     * Test seam — inject a custom spawner so unit tests can mock the
-     * subprocess without touching the OS. Defaults to node's `child_process.spawn`.
-     */
-    spawn?: (command: string, args: ReadonlyArray<string>, opts: {
-        cwd: string;
-        env: NodeJS.ProcessEnv;
-        stdio: 'pipe';
-        detached: boolean;
-    }) => ChildProcess;
-    /** Test seam for locating the native Codex executable before it is staged in the worktree. */
-    resolveCodexExecutable?: (command: string, env: NodeJS.ProcessEnv) => Promise<string>;
-}
-/** Exact aggregate usage emitted by Codex's terminal `turn.completed` JSONL event. */
-interface CodexTokenUsage {
-    inputTokens: number;
-    cachedInputTokens: number;
-    outputTokens: number;
-    reasoningOutputTokens: number;
-}
-/** Isolation settings asserted before a reproducible Codex run is allowed to start. */
-interface CodexExecutionPolicy {
-    sessionPersistence: 'ephemeral';
-    userConfig: false;
-    rules: false;
-    projectInstructions: false;
-    skillInstructions: false;
-    appInstructions: false;
-    toolSuggestions: false;
-    multiAgentInstructions: false;
-    sandbox: 'workspace-write';
-    permissionProfile: 'agent_runtime_reproducible';
-    approvalPolicy: 'never';
-    shellNetwork: false;
-    webSearch: false;
-    serviceTier: 'default';
-    shellEnvironment: 'core-filtered';
-    loginShell: false;
-    credentialsReadable: false;
-    hostHomeReadable: false;
-    procEnvironment: 'private-sanitized';
-    sensitiveEnvironmentNamesVisible: false;
-    parentRepoRead: false;
-    gitMetadata: false;
-    temporaryDirectory: 'workspace-private';
-    stagedExecutable: 'static-elf-read-only';
-    callerReadDeniedPaths: 'enforced';
-    containerSockets: false;
-}
-/** Zero-model-call evidence for the exact Codex process about to run. */
-interface CodexExecutionEvidence {
-    cliVersion: string;
-    executableSha256: string;
-    /** SHA-256 of the exact composed prompt argument proved present in the rendered prompt. */
-    requestedPromptSha256: string;
-    effectivePromptSha256: string;
-    nonPromptArgsSha256: string;
-    controlledConfigSha256: string;
-    /** Sorted normalized paths compiled into the permission profile. */
-    readDeniedPaths: string[];
-    readDeniedPathsSha256: string;
-    readDeniedPathCount: number;
-    policy: CodexExecutionPolicy;
-}
-/** @experimental */
-interface LocalHarnessResult {
-    /** OS exit code. `null` when killed before exit. */
-    exitCode: number | null;
-    /** Concatenated stdout. */
-    stdout: string;
-    /** Concatenated stderr. */
-    stderr: string;
-    /** Set when the process exited via signal (timeout / abort). */
-    killedBySignal: NodeJS.Signals | null;
-    /** Wall-clock duration ms (spawn → exit). */
-    durationMs: number;
-    /** Set when timeoutMs elapsed before exit. */
-    timedOut: boolean;
-    /**
-     * Set when the caller's AbortSignal fired before this result settled.
-     * Optional so injected runners and stored results from older releases remain valid.
-     */
-    aborted?: boolean;
-    /** Present for a reproducible Codex run; parsed from the real terminal JSONL event. */
-    usage?: CodexTokenUsage;
-    /** Present for reproducible Codex runs; generated and checked before model execution. */
-    evidence?: CodexExecutionEvidence;
-}
-/**
- * Spawn a local coding harness CLI as a subprocess + collect its output.
- *
- * NOT responsible for parsing the harness's output or extracting a diff —
- * the in-process executor's `streamPrompt` orchestrates `git diff` against
- * the worktree after this resolves. This function is intentionally narrow:
- * spawn, wait, capture, return.
- *
- * Fails loud — throws when:
- *   - `cwd` doesn't exist (subprocess emits ENOENT; surfaced as Error)
- *   - the harness binary is not on PATH (ENOENT)
- *   - the caller signal was already aborted before process launch
- *
- * Does NOT throw when:
- *   - the subprocess exits non-zero (`result.exitCode` carries the code)
- *   - a non-reproducible subprocess is aborted / timed out (`result.aborted` /
- *     `result.timedOut` carries the reason even when a TERM-aware child exits zero)
- *
- * Reproducible Codex additionally requires a terminal usage event. If cancellation
- * prevents that event, this rejects with `CodexExecutionDiagnosticError` instead of
- * returning an incomplete reproducibility receipt.
- *
- * @experimental
- */
-declare function runLocalHarness(options: RunLocalHarnessOptions): Promise<LocalHarnessResult>;
-/** Parse and validate the one terminal usage event emitted by `codex exec --json`. */
-declare function parseCodexTokenUsage(stdout: string): CodexTokenUsage;
-
-export { type CodexTokenUsage as C, type LocalHarness as L, type RunLocalHarnessOptions as R, type CodexExecutionPolicy as a, type CodexExecutionEvidence as b, type LocalHarnessResult as c, parseCodexTokenUsage as p, runLocalHarness as r };

package/dist/loop-runner-bin-68aoM9-7.d.ts

@@ -1,199 +0,0 @@
-import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-CmYCMbFT.js';
-import { F as FactCandidate, C as CreateKbGateOptions } from './kb-gate-CwHO0vz6.js';
-import { B as Budget } from './types-CvNwMzQt.js';
-import { A as AuthoredHarness, W as WinnerStrategy, a as WorktreeFanoutOptions, b as WorktreePatchArtifact } from './worktree-fanout-DxhAWr5Z.js';
-
-/**
- *
- * `runDelegatedLoop` — the configured delegated loop-runner.
- *
- * One typed entrypoint a worker agent (or a scheduled routine) calls to run a
- * disciplined loop in a chosen MODE, over agent-runtime's hardened engines:
- *
- *   code         → build-in-a-loop on the GENERIC recursive path (worktreeLoopRunner: author one
- *                  `AgentProfile` per harness → worktree-CLI leaves → `patchDelivered` gate)
- *   review       → caller-registered runner — a `code` runner with an approval gate over candidates
- *   research     → research-in-a-loop with valid-only KB growth (createKbGate)
- *   audit        → analyze trace/run data → findings (runAnalystLoop, caller-wired)
- *   self-improve → caller-registered `improve(profile, options)` run
- *
- * It is intentionally a thin façade: the value is that EVERY product reuses the
- * one hardened engine instead of forking delegation logic. The dispatcher owns
- * mode routing, timing, fail-loud on an unregistered mode, and a uniform result
- * shape; each mode's engine is a pre-configured runner in the registry (build it
- * with the factories below, or inject your own / a stub).
- *
- * @experimental
- */
-
-/** All valid delegated-loop mode names — used for validation and CLI surfaces. @experimental */
-declare const DELEGATED_LOOP_MODES: readonly ["code", "review", "research", "audit", "self-improve"];
-/** @experimental */
-type DelegatedLoopMode = (typeof DELEGATED_LOOP_MODES)[number];
-/** Type guard — returns true when `value` is a valid `DelegatedLoopMode` string. @experimental */
-declare function isDelegatedLoopMode(value: unknown): value is DelegatedLoopMode;
-/** @experimental A pre-configured loop for one mode. Returns the mode's raw
- *  output; the dispatcher wraps it in a {@link DelegatedLoopResult}. */
-type DelegatedLoopRunner<T = unknown> = (signal: AbortSignal) => Promise<T>;
-/** @experimental Mode → configured runner. Partial: only register the modes a
- *  given product/routine actually uses. */
-type DelegatedLoopRegistry = Partial<Record<DelegatedLoopMode, DelegatedLoopRunner>>;
-/** @experimental Uniform result — never throws from a registered runner; a
- *  thrown engine becomes `{ ok: false, error }` so a routine can record + move on. */
-interface DelegatedLoopResult<T = unknown> {
-    mode: DelegatedLoopMode;
-    ok: boolean;
-    output?: T;
-    error?: string;
-    durationMs: number;
-}
-/** @experimental */
-interface RunDelegatedLoopOptions {
-    signal?: AbortSignal;
-    /** Clock override for deterministic tests. */
-    now?: () => number;
-}
-/**
- *
- * Dispatch a configured loop by mode. Fails loud (throws `ConfigError`) when no
- * runner is registered for the mode — a routine pointed at an unwired mode is a
- * config bug, not a silent no-op. A runner that throws is captured as
- * `{ ok: false }` so unattended runs record the failure rather than crash.
- *
- * @experimental
- */
-declare function runDelegatedLoop<T = unknown>(mode: DelegatedLoopMode, registry: DelegatedLoopRegistry, options?: RunDelegatedLoopOptions): Promise<DelegatedLoopResult<T>>;
-/** @experimental Options for the local-repo `code` runner over the GENERIC recursive path. */
-interface WorktreeLoopRunnerOptions {
-    /** Absolute path to the local git checkout each worktree is cut from. */
-    repoRoot: string;
-    /** The instruction handed to every authored harness (composed under each profile's systemPrompt). */
-    taskPrompt: string;
-    /** The supervisor-authored harness profiles — one fanout item (one worktree-CLI leaf) each. */
-    harnesses: ReadonlyArray<AuthoredHarness>;
-    /** Conserved budget pool bounding the fanout (equal-k holds by construction). */
-    budget: Budget;
-    /** Shell command run in each worktree to derive the tests-PASS signal. */
-    testCmd?: string;
-    /** Shell command run in each worktree to derive the typecheck-PASS signal. */
-    typecheckCmd?: string;
-    /** Which verification signals the deliverable REQUIRES present-and-passing (default none). */
-    require?: ReadonlyArray<'tests' | 'typecheck'>;
-    /** Diff-size cap (lines). */
-    maxDiffLines?: number;
-    /** Literal path prefixes the patch must not touch (the secret-floor is always on regardless). */
-    forbiddenPaths?: string[];
-    /** Winner-selection strategy among gated candidates. Default `highest-score`. */
-    winnerStrategy?: WinnerStrategy;
-    /** Test seams forwarded to the worktree-CLI leaves so the runner drives offline. */
-    runGit?: WorktreeFanoutOptions['runGit'];
-    runHarness?: WorktreeFanoutOptions['runHarness'];
-    runCommand?: WorktreeFanoutOptions['runCommand'];
-}
-/**
- *
- * `code` mode on the GENERIC recursive path: author one `AgentProfile` per harness, run them as a
- * `worktreeFanout` (N `createWorktreeCliExecutor` leaves, each `gateOnDeliverable`) through
- * `runPersonified` on the keystone Supervisor. The sandbox-session counterpart that drives the in-box
- * harness over a `SandboxClient` is `detachedSessionDelegate` (`./mcp/delegates`); here there is no
- * `runAgentRounds` driver, no role-coupled delegate — the harness list is the fanout, the gate is
- * `patchDelivered`,
- * the winner is the shared valid-only selector (NOT `defaultSelectWinner`, whose non-valid fallback
- * would surface an ungated patch). Equal-k holds by the conserved budget pool. Returns the winning
- * patch artifact, or throws when no candidate is delivered (fail loud, never a vacuous done).
- *
- * @experimental
- */
-declare function worktreeLoopRunner(options: WorktreeLoopRunnerOptions): DelegatedLoopRunner<WorktreePatchArtifact>;
-/** @experimental A fact rejected at the KB gate — surfaced, never dropped. */
-interface VetoedFact {
-    candidate: FactCandidate;
-    vetoedBy?: string;
-    reason?: string;
-}
-/** @experimental */
-interface ResearchLoopResult {
-    /** Facts that passed the fail-closed gate — safe to write to the KB. */
-    accepted: FactCandidate[];
-    /** Facts the gate vetoed in the final round — escalate, do not silently drop. */
-    vetoed: VetoedFact[];
-    /** Research rounds actually run. */
-    rounds: number;
-}
-/** @experimental Options for the default `research` runner. */
-interface ResearchLoopRunnerOptions {
-    /**
-     * The research engine (the consumer's web/doc searcher + extractor). Called
-     * each round with the prior round's vetoes so it can re-research the gaps.
-     * Returns fact candidates carrying their grounding (`verbatimPassage` +
-     * `sourceText`).
-     */
-    research: (round: number, vetoed: VetoedFact[]) => Promise<FactCandidate[]>;
-    /** Gate config (extra judges, self-artifact kinds, …). The floor is always on. */
-    gate?: CreateKbGateOptions;
-    /** Max research rounds (correct-on-veto remediation). Default 1. */
-    maxRounds?: number;
-}
-/**
- * `research` mode — research-in-a-loop with valid-only KB growth.
- *
- * Each round: research → gate every candidate (fail-closed; passage MUST be in
- * the source) → accept the clean ones → re-research the vetoed ones next round,
- * up to `maxRounds`. Vetoed facts in the final round are RETURNED (escalate,
- * never silently dropped) so the caller audits vs retries.
- *
- * @experimental
- */
-declare function researchLoopRunner(o: ResearchLoopRunnerOptions): DelegatedLoopRunner<ResearchLoopResult>;
-/**
- * `audit` mode — analyst loop over captured trace/run data.
- *
- * @experimental
- */
-declare function auditLoopRunner<TProposal = unknown, TEdit = unknown>(options: RunAnalystLoopOpts): DelegatedLoopRunner<RunAnalystLoopResult<TProposal, TEdit>>;
-
-/**
- *
- * `agent-runtime-loop` — the schedulable entrypoint for the configured
- * delegated loop-runner. A cron job / routine / Makefile target invokes:
- *
- *   agent-runtime-loop --mode research --config ./loops.config.js
- *
- * The config module wires the registry (with full access to env / creds —
- * which is why the deps live there, not in this generic bin). It must default-
- * export a `DelegatedLoopRegistry`, or a `() => DelegatedLoopRegistry | Promise<…>`.
- * The bin runs the selected mode, prints the `DelegatedLoopResult` as JSON, and
- * exits 0 on `ok`, 1 on a recorded failure, 2 on a usage/config error.
- *
- * @experimental
- */
-
-/** @experimental Parsed CLI invocation. */
-interface LoopRunnerCliArgs {
-    mode: string;
-    /** Loads the registry — the bin wires this from `--config`; tests inject a stub. */
-    loadRegistry: () => Promise<DelegatedLoopRegistry> | DelegatedLoopRegistry;
-    now?: () => number;
-}
-/** @experimental */
-interface LoopRunnerCliResult {
-    exitCode: number;
-    result?: DelegatedLoopResult;
-    error?: string;
-}
-/**
- *
- * Pure CLI core (no process / argv / IO) so it's unit-testable: validate the
- * mode, load the registry, dispatch, map to an exit code (0 ok / 1 failed /
- * 2 usage). Exported for embedding in custom runners + tests.
- *
- * @experimental
- */
-declare function runLoopRunnerCli(args: LoopRunnerCliArgs): Promise<LoopRunnerCliResult>;
-/** Parse `--mode X --config Y` from an argv tail (`process.argv.slice(2)`). */
-declare function parseLoopRunnerArgv(argv: string[]): {
-    mode?: string;
-    config?: string;
-};
-
-export { DELEGATED_LOOP_MODES as D, type LoopRunnerCliArgs as L, type ResearchLoopResult as R, type VetoedFact as V, type WorktreeLoopRunnerOptions as W, type DelegatedLoopMode as a, type DelegatedLoopRegistry as b, type DelegatedLoopResult as c, type DelegatedLoopRunner as d, type LoopRunnerCliResult as e, type ResearchLoopRunnerOptions as f, type RunDelegatedLoopOptions as g, auditLoopRunner as h, isDelegatedLoopMode as i, runDelegatedLoop as j, runLoopRunnerCli as k, parseLoopRunnerArgv as p, researchLoopRunner as r, worktreeLoopRunner as w };

package/dist/loop-runner-bin.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/loops.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/openai-tools-fnj6SRVg.d.ts

@@ -1,46 +0,0 @@
-import { O as OpenAIChatTool } from './types-BwoZWq-i.js';
-
-/**
- *
- * OpenAI Chat Completions `tools[]` projection of the queue-bound agent-runtime
- * MCP delegation tools.
- *
- * Use when configuring `createOpenAICompatibleBackend({ tools: ... })` so the
- * model can call `delegate_feedback`, `delegation_status`, and
- * `delegation_history` through the OpenAI-compat transport (tcloud, OpenRouter,
- * OpenAI direct, cli-bridge). The runtime surfaces tool calls as `tool_call`
- * stream events — execution is the caller's responsibility (typically the
- * parent sandbox runtime's MCP mount).
- *
- * Sandbox-SDK callers do NOT need this helper: the sandbox runtime mounts
- * MCP servers natively and the in-sandbox harness discovers tools via the
- * runtime, not via an OpenAI tools array.
- *
- * Tool name + description + JSON-schema are pulled from the canonical
- * `DELEGATE_*` constants exported by `./tools/*` so the projection cannot
- * drift from the server's own validators.
- *
- * @experimental
- */
-
-/**
- *
- * Returns the queue-bound delegation tools projected into OpenAI Chat
- * Completions `tools[]` shape. The order is stable: `delegate_feedback`,
- * `delegation_status`, `delegation_history`.
- *
- * @experimental
- */
-declare function mcpToolsForRuntimeMcp(): OpenAIChatTool[];
-/**
- *
- * Subset filter — return only the projected tools whose `function.name`
- * appears in `names`. Useful for curated mounts (e.g. only the queue-bound
- * delegation tools, omitting `delegate_feedback`). Unknown names are
- * silently ignored; pass an empty array to get an empty result.
- *
- * @experimental
- */
-declare function mcpToolsForRuntimeMcpSubset(names: ReadonlyArray<string>): OpenAIChatTool[];
-
-export { mcpToolsForRuntimeMcpSubset as a, mcpToolsForRuntimeMcp as m };