@tangle-network/agent-runtime 0.105.0 → 0.106.1

package/dist/redact-BuFjxBUJ.d.ts

@@ -1,481 +0,0 @@
-import { LabeledScenarioStore, WorktreeAdapter, OptimizationMethod, CompareOptimizationMethodsOptions, OptimizationMethodComparison } from '@tangle-network/agent-eval/campaign';
-import { MutableSurface, Scenario, SelfImproveResult, SelfImproveOptions, SelfImproveBudget } from '@tangle-network/agent-eval/contract';
-import { AgentProfile, ReasoningEffort, Sha256Digest } from '@tangle-network/agent-interface';
-import { L as LocalHarness, C as CodexTokenUsage, b as CodexExecutionEvidence, c as LocalHarnessResult, r as runLocalHarness } from './local-harness-BDNcl6jI.js';
-import { AnalystFinding, CostLedgerHandle, MaximumCharge } from '@tangle-network/agent-eval';
-
-/**
- * Code-only candidate driver for Runtime-owned git worktrees.
- *
- * A `CandidateGenerator` edits an isolated checkout. This driver finalizes each
- * accepted edit as a `CodeSurface` and disposes rejected worktrees.
- *
- * @experimental
- */
-
-/** The byte-producing seam — the ONE thing that differs between the cheap
- *  reflective path and the full agentic path. A generator makes (uncommitted)
- *  changes inside `worktreePath`; the driver commits them via the worktree
- *  adapter's `finalize`. */
-interface CandidateGenerator {
-    kind: string;
-    /** Whether this generator can produce a candidate from an EMPTY findings set
-     *  and no phase-2 report — i.e. it draws its change signal from the repo and
-     *  the raw-trace filesystem context on disk, not only from pre-summarized
-     *  findings. An agentic coder (`agenticGenerator`) sets this: the seed repo +
-     *  raw traces ARE the signal, so it must still run the full `populationSize`
-     *  when the distiller yielded nothing (this is the meta-harness contract — the
-     *  agent diagnoses from the raw traces itself). A patch-applier
-     *  (`reflectiveGenerator`) leaves it unset — with no findings there is no
-     *  patch to draft, so the driver short-circuits rather than spin up worktrees
-     *  for a guaranteed no-op. Default `false`. */
-    proposesWithoutFindings?: boolean;
-    generate(args: {
-        /** The candidate worktree — a clean checkout of the current incumbent. */
-        worktreePath: string;
-        /** Phase-2 research report (analyst findings + diff), opaque. */
-        report: unknown;
-        /** Findings resolved from the report or the loop context. */
-        findings: AnalystFinding[];
-        /** Handle to all captured data, to ground the change. */
-        dataset?: LabeledScenarioStore;
-        /** DEPTH: max iterations the generator may take (agentic uses this; the
-         *  reflective generator ignores it). */
-        maxShots: number;
-        signal: AbortSignal;
-        /** Generation coordinates supplied by Runtime's internal code candidate driver. */
-        generation?: number;
-        candidateIndex?: number;
-        /** Shared run-wide paid-call account supplied by agent-eval 0.117+. */
-        costLedger?: CostLedgerHandle;
-        /** Receipt attribution phase supplied alongside `costLedger`. */
-        costPhase?: string;
-    }): Promise<{
-        applied: boolean;
-        summary: string;
-        /** Short slug for the candidate. When present (with `rationale`), the
-         *  driver returns a `ProposedCandidate` wrapper so the label survives to
-         *  `GenerationRecord` and the emitted provenance. */
-        label?: string;
-        /** Why this change was proposed — bounded, derived from the findings the
-         *  shot addressed. Paired with `label`. */
-        rationale?: string;
-    }>;
-}
-
-/**
- *
- * `agenticGenerator` — the full-agentic `CandidateGenerator`. It runs a real
- * coding harness (claude / codex / opencode) inside the candidate worktree the
- * driver already created, letting the agent read the codebase + the research
- * report and make the change in place. The driver then commits the worktree
- * into a `CodeSurface`.
- *
- * Mechanism: identical to the proven Phase-2.8 in-process executor — spawn the
- * harness as a subprocess with `cwd` = the worktree, on the same filesystem,
- * so edits land in place (no sandbox-mount round-trip). `runLocalHarness` is
- * the verified primitive. The OUTER sandbox is the improvement loop's own
- * execution context; the generator does not nest a second sandbox per
- * candidate (which would reintroduce a host↔sandbox worktree-transport
- * problem that does not need solving here).
- *
- * `maxShots` is the DEPTH dial — a multi-shot verify-in-session loop, NOT the
- * kernel `runAgentRounds`. Each shot runs one full harness session in the (persistent)
- * worktree; between shots the loop refines based on what the last shot produced:
- *   - empty tree   → "you changed nothing, make the edits" → retry
- *   - dirty + `verify` fails → feed the verifier's failure into the next shot
- *       (the worktree persists, so the harness RESUMES atop its own failing
- *       edits with the error in hand — no `--resume` session plumbing needed,
- *       and harness-agnostic across claude/codex/opencode)
- *   - dirty + `verify` ok (or no verifier configured) → return the candidate
- * A candidate that never verifies within `maxShots` is discarded (`applied:
- * false`), never shipped — if you configured a verifier, a non-passing tree is
- * not a candidate. With no verifier the legacy behavior holds: first dirty shot
- * is the candidate.
- *
- * @experimental
- */
-
-/** Dedicated ephemeral root for generic author-profile files. Every declared
- * file must live below this root so cleanup cannot alter candidate-owned files. */
-declare const AGENTIC_PROFILE_RESOURCE_ROOT = ".agent-runtime-profile-resources";
-/** Outcome of verifying a candidate worktree. `feedback` (compiler errors,
- *  failing test output) is fed into the next shot when `ok` is false. */
-interface VerifyResult {
-    ok: boolean;
-    feedback?: string;
-}
-/** Verifies the edited worktree. Sync or async; throws only on a setup fault
- *  (a candidate that fails verification returns `{ok:false}`, it does not
- *  throw). */
-type Verifier = (worktreePath: string, signal?: AbortSignal) => Promise<VerifyResult> | VerifyResult;
-interface AgenticGeneratorShotReceipt {
-    readonly generation: number | null;
-    readonly candidateIndex: number | null;
-    /** One-based shot number within this candidate. */
-    readonly shot: number;
-    readonly maxShots: number;
-    readonly harness: LocalHarness;
-    readonly model: string | null;
-    readonly reasoningEffort: ReasoningEffort | null;
-    readonly promptSha256: `sha256:${string}`;
-    readonly startedAt: string;
-    readonly completedAt: string;
-    readonly durationMs: number;
-    readonly exitCode: number | null;
-    readonly timedOut: boolean;
-    /** True when caller cancellation reached the author process; absent in older receipts. */
-    readonly aborted?: boolean;
-    readonly killedBySignal: NodeJS.Signals | null;
-    readonly stdoutBytes: number | null;
-    readonly stdoutSha256: `sha256:${string}` | null;
-    readonly stderrBytes: number | null;
-    readonly stderrSha256: `sha256:${string}` | null;
-    readonly usage: CodexTokenUsage | null;
-    /** Digest of the exact profile-file workspace plan applied for this shot. */
-    readonly profileWorkspacePlanDigest: string | null;
-    readonly profileWorkspaceFileCount: number;
-    /** Shared run-ledger call id for this exact shot. */
-    readonly costCallId: string | null;
-    /** Whether dollars came from the provider, the pricing table, or are unknown. */
-    readonly costBasis: 'provider-reported' | 'estimated-pricing' | 'unknown';
-    readonly costUsd: number | null;
-    /** True only for a provider-reported amount, never for a pricing estimate. */
-    readonly costUsdKnown: boolean;
-    readonly evidence: CodexExecutionEvidence | null;
-    readonly error: {
-        readonly name: string;
-        readonly message: string;
-    } | null;
-}
-/** Frozen exact harness result for an author shot: full streams, process state,
- *  token usage, and execution-policy evidence.
- *  The `onShotCompleted` callback receives `null` when execution failed before
- *  the harness returned. */
-type AgenticGeneratorShotExecution = Readonly<Omit<LocalHarnessResult, 'usage' | 'evidence'> & {
-    readonly usage?: Readonly<CodexTokenUsage>;
-    readonly evidence?: Readonly<Omit<CodexExecutionEvidence, 'readDeniedPaths' | 'policy'>> & {
-        readonly readDeniedPaths: ReadonlyArray<string>;
-        readonly policy: Readonly<CodexExecutionEvidence['policy']>;
-    };
-}>;
-/** Worktree decision emitted before a completed shot is retried, accepted, or
- *  discarded. The callback runs while `worktreePath` is still available, so
- *  callers can persist the exact diff. */
-type AgenticGeneratorShotDisposition = {
-    readonly kind: 'clean';
-    readonly worktreePath: string;
-} | {
-    readonly kind: 'rejected';
-    readonly worktreePath: string;
-    readonly stage: 'raw-trace-evidence' | 'verification';
-    readonly feedback: string | null;
-} | {
-    readonly kind: 'accepted';
-    readonly worktreePath: string;
-    readonly verified: boolean;
-} | {
-    readonly kind: 'setup-error';
-    readonly worktreePath: string;
-    readonly stage: 'worktree-inspection' | 'raw-trace-evidence' | 'verification';
-    readonly error: {
-        readonly name: string;
-        readonly message: string;
-    };
-};
-interface AgenticGeneratorOptions {
-    /** Local coding harness to run in the worktree. Default `claude`. */
-    harness?: LocalHarness;
-    /** Author profile rendered through the canonical harness mapper. Required
-     *  for reproducible Codex so model and reasoning settings are explicit. */
-    profile?: AgentProfile;
-    /** Run Codex with isolated configuration, exact prompt evidence, and required
-     *  terminal token usage. Requires `harness: 'codex'` and `profile`. */
-    codexReproducible?: boolean;
-    /** Absolute paths reproducible Codex must not read. A function can derive
-     *  candidate-specific paths after the driver creates its worktree. */
-    codexReadDeniedPaths?: ReadonlyArray<string> | ((worktreePath: string) => ReadonlyArray<string>);
-    /** Awaited once for every attempted author shot, including process failures.
-     *  The second argument preserves the exact harness result, including stdout
-     *  and stderr, before worktree inspection or verification can reject the
-     *  shot. Throwing aborts the candidate so evidence persistence fails closed. */
-    onShotCompleted?: (receipt: AgenticGeneratorShotReceipt, execution: AgenticGeneratorShotExecution | null) => void | Promise<void>;
-    /** Awaited after worktree inspection and before the shot is accepted,
-     *  retried, or discarded. Throwing aborts the candidate. */
-    onShotDisposition?: (receipt: AgenticGeneratorShotReceipt, disposition: AgenticGeneratorShotDisposition) => void | Promise<void>;
-    /** Optional hard upper bound passed to the run-wide CostLedger before each
-     *  author shot. This MUST be enforced by the provider or executor; a planning
-     *  estimate is not an admissible bound. Omit for an uncapped ledger. A capped
-     *  ledger rejects before model dispatch when this is absent. */
-    maximumCharge?: MaximumCharge;
-    /** Per-shot wall-clock timeout (ms). Default = `runLocalHarness` default (5m). */
-    timeoutMs?: number;
-    /** Build the harness task prompt from the report + findings. Override for
-     *  domain phrasing; the default turns findings into a concrete coder task. */
-    buildPrompt?: (args: {
-        report: unknown;
-        findings: AnalystFinding[];
-    }) => string;
-    /** Verify the worktree after each dirtying shot. When set, a candidate that
-     *  fails verification is NOT returned — the failure feeds the next shot
-     *  (verify-in-session), up to `maxShots`; a candidate that never verifies is
-     *  discarded (`applied:false`), never shipped. Omitted ⇒ legacy behavior:
-     *  the first dirty shot is the candidate. See `commandVerifier`. */
-    verify?: Verifier;
-    /** Test seam — inject the harness runner (defaults to `runLocalHarness`). */
-    runHarness?: typeof runLocalHarness;
-    /** Test seam — inject the worktree-dirty check (defaults to `git status`). */
-    isDirty?: (worktreePath: string) => boolean;
-}
-/** Full-agentic `CandidateGenerator` (the `shots=N, sandbox=on` setting): run a real coding harness inside the candidate worktree so the agent makes the change in place. */
-declare function agenticGenerator(opts?: AgenticGeneratorOptions): CandidateGenerator;
-/** Turn the analyst's findings (+ optional report) into a concrete coder task —
- *  the senior scientific-method framing shared with the tool/MCP build prompts. */
-declare function defaultBuildPrompt(args: {
-    report: unknown;
-    findings: AnalystFinding[];
-}): string;
-/** A `Verifier` that runs a command in the worktree: exit 0 ⇒ ok, any other
- *  exit ⇒ failed with stdout+stderr as feedback. The common case — verify by
- *  `tsc --noEmit`, `pnpm build`, or a test command. A timeout is treated as a
- *  FAILED candidate (a change that hangs the build is a bad change); a missing
- *  binary or spawn fault throws (a setup bug, not a failed candidate — no
- *  silent fallback). */
-declare function commandVerifier(command: string, args?: string[], timeoutMs?: number): Verifier;
-
-type DeepReadonly<T> = T extends (...args: never[]) => unknown ? T : T extends readonly (infer TItem)[] ? readonly DeepReadonly<TItem>[] : T extends object ? {
-    readonly [TKey in keyof T]: DeepReadonly<T[TKey]>;
-} : T;
-/** Complete immutable profile value used during measured execution. */
-type ReadonlyAgentProfile = DeepReadonly<AgentProfile>;
-
-/** The executable agent lever `improve` optimizes. Profile fields remain
- * portable AgentProfile coordinates; implementation and orchestration files
- * use the code surface so a winner can be sealed into an exact candidate.
- * `rollout-policy` is the inference-time structuralRollout dials
- * (`profile.extensions['structural-rollout']`). */
-type ImproveSurface = 'prompt' | 'skills' | 'tools' | 'mcp' | 'hooks' | 'subagents' | 'agent-profile' | 'memory' | 'code' | 'rollout-policy';
-type ImproveProfileSurface = Exclude<ImproveSurface, 'code'>;
-interface ImproveMethodContext {
-    /** Validated baseline profile. */
-    readonly profile: ReadonlyAgentProfile;
-    /** Runtime-derived identity for upstream optimizer resume state. */
-    readonly evaluationRef: Sha256Digest;
-    /** Exact profile coordinate being optimized. */
-    readonly surface: ImproveProfileSurface;
-    /** Exact bytes supplied to the optimization method. */
-    readonly baselineSurface: MutableSurface;
-    /** Structured value represented by `baselineSurface`, before serialization. */
-    readonly baselineValue: unknown;
-    /** Findings produced before this search, if any. */
-    readonly findings: readonly unknown[];
-}
-/** Build a complete method after trace findings are available. */
-type ImproveMethodFactory<TScenario extends Scenario, TArtifact> = (context: ImproveMethodContext) => OptimizationMethod<TScenario, TArtifact>;
-type ImproveMethodSource<TScenario extends Scenario, TArtifact> = OptimizationMethod<TScenario, TArtifact> | ImproveMethodFactory<TScenario, TArtifact>;
-/** Runs one exact materialized profile on one scenario. */
-type ImproveProfileAgent<TScenario extends Scenario, TArtifact> = (profile: ReadonlyAgentProfile, scenario: TScenario, ctx: Parameters<CompareOptimizationMethodsOptions<TScenario, TArtifact>['dispatchWithSurface']>[2]) => Promise<TArtifact>;
-/** Exact materialized profile presented for validation before any candidate run. */
-interface ImproveCandidateValidationInput {
-    profile: ReadonlyAgentProfile;
-    surface: ImproveProfileSurface;
-    candidateSurface: MutableSurface;
-    value: unknown;
-    isBaseline: boolean;
-}
-type ImproveCandidateValidator = (input: ImproveCandidateValidationInput) => void;
-type ImproveOptimizationRunOptions<TScenario extends Scenario, TArtifact> = Omit<NonNullable<CompareOptimizationMethodsOptions<TScenario, TArtifact>['optimizationRunOptions']>, 'dispatchRef'>;
-/** Complete-method configuration for every non-code profile surface. */
-type ImproveMethodOptions<TScenario extends Scenario, TArtifact> = Omit<CompareOptimizationMethodsOptions<TScenario, TArtifact>, 'baselineSurface' | 'dispatchRef' | 'dispatchWithSurface' | 'methods' | 'optimizationConcurrency' | 'optimizationRunOptions'> & {
-    /** Exact profile coordinate optimized by `method`. Default `'prompt'`. */
-    surface?: ImproveProfileSurface;
-    /**
-     * Immutable digest of `agent`, profile component mapping, models, tools, and
-     * every closure or external setting that can change measured behavior.
-     */
-    executionRef: Sha256Digest;
-    /** A complete optimizer or a factory that can incorporate current findings. */
-    method: ImproveMethodSource<TScenario, TArtifact>;
-    /** Runs the exact complete profile materialized from one candidate surface. */
-    agent: ImproveProfileAgent<TScenario, TArtifact>;
-    /** Reject a materialized profile before it reaches the agent callback. */
-    validateCandidate?: ImproveCandidateValidator;
-    /** Trace or analyst findings available to a method factory. */
-    findings?: readonly unknown[];
-    /** Select the exact inline skill document for `surface: 'skills'`. */
-    skills?: ImproveSkillsOptions;
-    /**
-     * Map a profile to named text components and apply the winning components.
-     * Valid only with `surface: 'agent-profile'`.
-     */
-    profileComponents?: ImproveProfileComponents;
-    /** Shared settings for method train and selection calls. */
-    optimizationRunOptions?: ImproveOptimizationRunOptions<TScenario, TArtifact>;
-    /** Ship only when the paired final-test interval is entirely above this lift. Default `0`. */
-    minimumLift?: number;
-};
-/** Runtime-owned code search in isolated git worktrees. */
-type ImproveCodeRunOptions<TScenario extends Scenario, TArtifact> = Omit<SelfImproveOptions<TScenario, TArtifact>, 'analyzeGeneration' | 'baselineSurface' | 'budget' | 'findings' | 'gate' | 'llm' | 'method' | 'mutationPrimitives' | 'proposer' | 'proposerTarget' | 'selectionScenarios'> & {
-    surface: 'code';
-    /** Local code-search budget. Method-only selection controls do not apply. */
-    budget?: Omit<SelfImproveBudget, 'selectionFraction'>;
-    /** Findings supplied to Runtime's code candidate driver. */
-    findings?: readonly unknown[];
-    /** Gate mode. `'holdout'` (default) runs the held-out promotion gate;
-     * `'none'` is a baseline-only run (`budget.generations = 0`). */
-    gate?: 'holdout' | 'none';
-    /** Per-generation findings producer for Runtime's code search.
-     * Pass your own producer to replace the code-trace distiller; pass `null`
-     * to keep the static findings for every generation. */
-    analyzeGeneration?: SelfImproveOptions<TScenario, TArtifact>['analyzeGeneration'] | null;
-    /** Feed code candidates paths to prior raw traces instead of a failure digest.
-     * Defaults to true for durable runs and false for in-memory runs. */
-    rawTraceContext?: boolean;
-    /** Isolated repository and candidate generator settings. */
-    code: ImproveCodeOptions;
-    /** Custom held-back-exam decision. The string `gate` above controls whether
-     * the exam runs; this callback controls how its evidence decides promotion. */
-    promotionGate?: SelfImproveOptions<TScenario, TArtifact>['gate'];
-};
-/** The canonical improvement API: complete methods for profiles, worktrees for code. */
-type ImproveOptions<TScenario extends Scenario, TArtifact> = ImproveMethodOptions<TScenario, TArtifact> | ImproveCodeRunOptions<TScenario, TArtifact>;
-interface ImproveSkillsOptions {
-    /** `name` of one inline entry in `profile.resources.skills`. */
-    resourceName: string;
-}
-/** Caller-owned mapping for optimizing several profile fields as one candidate. */
-interface ImproveProfileComponents {
-    /** Extract the exact named text components optimized together. */
-    read(profile: ReadonlyAgentProfile): Readonly<Record<string, string>>;
-    /** Apply a complete winning component map to a detached profile. */
-    apply(profile: ReadonlyAgentProfile, components: Readonly<Record<string, string>>): ReadonlyAgentProfile;
-}
-interface ImproveCodeOptions {
-    /** Repo root candidate worktrees fork from. */
-    repoRoot: string;
-    /** Base ref candidates fork from. Default `main`. */
-    baseRef?: string;
-    /** Directory worktrees are created under. Default `<repoRoot>/.worktrees`. */
-    worktreeDir?: string;
-    /** Git-compatible adapter override, primarily for tests. Candidate advancement
-     * still requires normal Git worktree and commit semantics. */
-    worktree?: WorktreeAdapter;
-    /** Coding harness the agentic generator runs in each worktree. Default `claude`. */
-    harness?: LocalHarness;
-    /** Verify a candidate worktree before it becomes a measurable surface; failures
-     * feed the next shot (see `agenticGenerator.verify` / `commandVerifier`). */
-    verify?: Verifier;
-    /** Per-shot wall-clock timeout for the harness (ms). */
-    timeoutMs?: number;
-    /** Byte-producer override, used for tests and custom candidate production.
-     * When set, `harness`, `verify`, and `timeoutMs` are unused. */
-    generator?: CandidateGenerator;
-}
-interface ImprovementProfileCandidate {
-    /** Surface searched by this run. */
-    surface: ImproveProfileSurface;
-    /** Exact winning value returned by agent-eval. */
-    value: MutableSurface;
-    /** Exact complete profile instance measured on the final cases. */
-    profile: ReadonlyAgentProfile;
-}
-interface ImprovementCodeCandidate {
-    surface: 'code';
-    value: MutableSurface;
-    profile?: never;
-}
-type ImprovementCandidate = ImprovementProfileCandidate | ImprovementCodeCandidate;
-/** Normalized spend reported for one Runtime improvement run. */
-interface ImproveCost {
-    totalCostUsd: number;
-    accountingComplete: boolean;
-    incompleteReasons: string[];
-}
-/** Optimizer ancestry sealed into downstream candidate experiments. */
-interface ImproveLineage {
-    /** Unique Runtime invocation used to isolate this run's cost receipts. */
-    invocationId: string;
-    /** Upstream optimizer run when reported, otherwise this Runtime optimization invocation. */
-    runId: string;
-    /** Exact train-plus-selection scenario payloads exposed to candidate selection. */
-    developmentSplitDigest: Sha256Digest;
-    /** Complete callback, materializer, model, tool, and closure identity for a profile run. */
-    executionRef?: Sha256Digest;
-    /** Complete baseline profile identity for a profile run. */
-    baselineProfileDigest?: Sha256Digest;
-}
-interface ImproveResultBase<TCandidate extends ImprovementCandidate> {
-    /** Frozen candidate only. Live state is changed through an approved activation. */
-    candidate: TCandidate;
-    /** Final-test decision for this search result. */
-    decision: SelfImproveResult<Scenario, unknown>['gateDecision'];
-    /** Final-test lift when one was measured. */
-    lift?: number;
-    /** Paired final-test confidence interval for method-based profile runs. */
-    liftInterval?: {
-        low: number;
-        high: number;
-    };
-    /** Full search and final-test spend. */
-    cost: ImproveCost;
-    /** Full wall-clock duration. */
-    durationMs: number;
-    /** Optimizer ancestry used when sealing a candidate experiment. */
-    lineage: ImproveLineage;
-    /** Number of generations explored by Runtime's code path. */
-    generationsExplored?: number;
-    /** Release resources owned by this result. Idempotent; currently disposes
-     * the returned code worktree and is a no-op for profile-only surfaces. */
-    dispose(): Promise<void>;
-}
-interface ImproveMethodResult extends ImproveResultBase<ImprovementProfileCandidate> {
-    mode: 'method';
-    method: string;
-    /** External optimizer package and resumable run identity, when reported. */
-    provenance?: OptimizationMethodComparison['best']['provenance'];
-    decision: 'ship' | 'hold';
-    lift: number;
-    liftInterval: {
-        low: number;
-        high: number;
-    };
-    raw: OptimizationMethodComparison;
-}
-interface ImproveCodeResult<TScenario extends Scenario, TArtifact> extends ImproveResultBase<ImprovementCodeCandidate> {
-    mode: 'code';
-    raw: SelfImproveResult<TScenario, TArtifact>;
-}
-type ImproveResult<TScenario extends Scenario, TArtifact> = ImproveMethodResult | ImproveCodeResult<TScenario, TArtifact>;
-
-/**
- *
- * Redaction for values that may leave the Runtime process. The default scrubs
- * common leak classes (API keys, bearer tokens, emails, private keys) from
- * strings and walks nested objects and arrays. A customer with domain-specific
- * PII supplies their own `redact` hook.
- *
- * This is intentionally narrower than `src/sanitize.ts` (which redacts the
- * runtime's *event envelope* field-by-field): here the value is opaque
- * customer payload, so the scrub is value-shaped, not schema-shaped.
- *
- * @experimental
- */
-/** A redactor maps an arbitrary trace value to a safe-to-export value. Pure;
- *  must not throw on cyclic input (the default tolerates cycles). */
-type Redactor = (value: unknown) => unknown;
-/**
- * The built-in redactor. Walks objects and arrays; replaces values under
- * secret-bearing keys wholesale; scrubs in-value patterns from every string.
- * Cycle-safe (a seen-set short-circuits self-referential payloads to
- * `'[circular]'`), depth-bounded, and total — never throws on customer input.
- */
-declare function defaultRedactor(value: unknown): unknown;
-/**
- * Resolve the redactor a client uses. A caller-supplied hook handles
- * domain-specific values first, then the built-in scrubber still removes
- * common credentials and email addresses. Returning `false` is the explicit
- * opt-out for already-reviewed public values.
- */
-declare function resolveRedactor(redact: Redactor | false | undefined): Redactor;
-
-export { AGENTIC_PROFILE_RESOURCE_ROOT as A, type ImprovementCandidate as B, type CandidateGenerator as C, type DeepReadonly as D, type ImprovementCodeCandidate as E, type ImprovementProfileCandidate as F, type VerifyResult as G, agenticGenerator as H, type ImproveOptions as I, commandVerifier as J, defaultBuildPrompt as K, type Redactor as R, type Verifier as V, type ImproveResult as a, type ImproveMethodResult as b, type ImproveMethodOptions as c, defaultRedactor as d, type ImproveCodeRunOptions as e, type ImproveCodeResult as f, type ImproveCandidateValidationInput as g, type ImproveMethodFactory as h, type ReadonlyAgentProfile as i, type AgenticGeneratorOptions as j, type AgenticGeneratorShotDisposition as k, type AgenticGeneratorShotExecution as l, type AgenticGeneratorShotReceipt as m, type ImproveCandidateValidator as n, type ImproveCodeOptions as o, type ImproveCost as p, type ImproveLineage as q, resolveRedactor as r, type ImproveMethodContext as s, type ImproveMethodSource as t, type ImproveOptimizationRunOptions as u, type ImproveProfileAgent as v, type ImproveProfileComponents as w, type ImproveProfileSurface as x, type ImproveSkillsOptions as y, type ImproveSurface as z };