@tangle-network/agent-runtime 0.105.0 → 0.106.1

package/dist/index-BGdxAwfO.d.ts

@@ -0,0 +1,838 @@
+import { _ as RunAgentTaskOptions, b as RuntimeSessionStore, g as OpenAIChatToolChoice, h as OpenAIChatTool, i as AgentExecutionBackend, l as AgentTaskRunResult, m as OpenAIChatResponseFormat, n as AgentBackendContext, p as KnowledgeReadinessDecision, r as AgentBackendInput, v as RunAgentTaskStreamOptions, x as RuntimeStreamEvent, y as RuntimeSession } from "./types-C9j4qg6l.js";
+import { i as SurfaceImprovementEdit } from "./improvement-adapter-Cr5TBSji.js";
+import { o as ImprovementProposalSource } from "./types-Cja5OTGh.js";
+import { K as RuntimeHooks } from "./types-BevOjfTY.js";
+import { Iu as ConfigError, en as StructuralRolloutPolicy } from "./index-DruSKs3Z.js";
+import { D as RuntimeTelemetryOptions, c as runLocalHarness, i as LocalHarness, y as ToolLoopChat } from "./local-harness-Dh8PJ0ot.js";
+import "./index-C-FYUuFG.js";
+import "./index-Efjb3nrQ.js";
+import { B as CandidateGenerator, F as Verifier, a as ImproveCandidateValidationInput, k as ReadonlyAgentProfile, p as ImproveMethodFactory, t as Redactor } from "./redact-kbIOjfjM.js";
+import "./index-CbNM40xG.js";
+import "./loop-runner-bin-BXsFEUcf.js";
+import "./openai-tools-B68JaOCx.js";
+import { AnalystFinding, ControlBudget as ControlBudget$1, ControlDecision as ControlDecision$1, ControlEvalResult, ControlEvalResult as ControlEvalResult$1, ControlRunResult as ControlRunResult$1, ControlStep as ControlStep$1, DataAcquisitionPlan as DataAcquisitionPlan$1, KnowledgeReadinessReport, KnowledgeReadinessReport as KnowledgeReadinessReport$1, KnowledgeRequirement as KnowledgeRequirement$1, RunRecord, RunRecord as RunRecord$1 } from "@tangle-network/agent-eval";
+import { GepaOptimizationMethodConfig, SkillOptOptimizationMethodConfig } from "@tangle-network/agent-eval/campaign";
+import { AgentProfile as AgentProfile$1 } from "@tangle-network/agent-interface";
+import { MutableSurface, Scenario as Scenario$1, SelfImproveOptions } from "@tangle-network/agent-eval/contract";
+//#region src/backends.d.ts
+/** Wrap any custom async-iterable stream into a typed `AgentExecutionBackend`. @stable */
+declare function createIterableBackend<TInput extends AgentBackendInput>(options: {
+  kind: string;
+  start?: AgentExecutionBackend<TInput>['start'];
+  resume?: AgentExecutionBackend<TInput>['resume'];
+  stream: AgentExecutionBackend<TInput>['stream'];
+  stop?: AgentExecutionBackend<TInput>['stop'];
+}): AgentExecutionBackend<TInput>;
+/** Build an `AgentExecutionBackend` backed by a sandbox/sidecar `streamPrompt` call. @stable */
+declare function createSandboxPromptBackend<TBox, TInput extends AgentBackendInput = AgentBackendInput>(options: {
+  kind?: string;
+  getBox(input: TInput, context: Omit<AgentBackendContext, 'session'>): Promise<TBox> | TBox;
+  streamPrompt(box: TBox, message: string, context: AgentBackendContext): AsyncIterable<unknown>;
+  mapEvent?: (event: unknown, context: AgentBackendContext) => RuntimeStreamEvent | undefined;
+  getSessionId?: (box: TBox, input: TInput) => string | undefined;
+}): AgentExecutionBackend<TInput>;
+/** @stable */
+/**
+ * Retry policy for transient transport errors (rate limits, upstream
+ * timeouts). Defaults to 5 attempts with exponential backoff starting at
+ * 1s, ±25% jitter, capped at 30s. Set `maxAttempts: 1` to disable retries.
+ *
+ * Retried status codes:
+ *   - 408 Request Timeout
+ *   - 425 Too Early
+ *   - 429 Too Many Requests
+ *   - 500 / 502 / 503 / 504 — upstream transient failures
+ *
+ * Hard failures (401, 403, 4xx other than the above) propagate immediately.
+ */
+interface BackendRetryPolicy {
+  /** Total attempts including the first try. Default 5. */
+  maxAttempts?: number;
+  /** Initial backoff in ms before the second attempt. Default 1000. */
+  initialBackoffMs?: number;
+  /** Hard ceiling on backoff in ms. Default 30000. */
+  maxBackoffMs?: number;
+  /** Jitter fraction in [0, 1]. Default 0.25 (±25%). */
+  jitter?: number;
+  /** Status codes that trigger a retry. Default: 408, 425, 429, 500, 502, 503, 504. */
+  retryStatuses?: ReadonlyArray<number>;
+  /**
+   * Per-attempt wall-clock deadline in ms. If a single fetch attempt does
+   * not return headers within this window the attempt is aborted and
+   * retried. Default 120000 (2 min). Without this a hung upstream blocks
+   * the attempt indefinitely — observed in production as a 15-minute
+   * `fetch failed` that burned an entire eval persona. Set to 0 to disable.
+   */
+  requestTimeoutMs?: number;
+}
+/**
+ *
+ * OpenAI-compat streaming backend. Routes `runAgentTaskStream` through any
+ * `POST /chat/completions` endpoint that speaks OpenAI's SSE protocol —
+ * Tangle Router, OpenAI direct, OpenRouter, Groq, DeepSeek, Together. The
+ * router also fronts Anthropic models in Anthropic-native SSE shape; this
+ * backend handles both.
+ *
+ * ### Tool calls
+ *
+ * Pass `tools` (and optionally `toolChoice`) to forward an OpenAI Chat
+ * Completions `tools[]` array on every request. Streamed `tool_call` chunks
+ * are buffered until the model finalizes them (either `finish_reason:
+ * 'tool_calls'` for OpenAI shape or a `content_block_stop` for Anthropic
+ * `tool_use` blocks proxied through the router), then emitted as a single
+ * `tool_call` RuntimeStreamEvent with the assembled `args`.
+ *
+ * The backend does NOT execute tools — it surfaces calls for the caller's
+ * own dispatcher (typically the product's MCP / sandbox runtime) to fulfill
+ * and feed back as a subsequent `messages` turn. This keeps the transport
+ * thin and lets the agent host own tool dispatch policy.
+ *
+ * ### Fail-loud errors
+ *
+ * Non-success HTTP responses (4xx/5xx) and exhausted retry budgets throw
+ * `BackendTransportError` from inside the `stream()` generator. The runtime
+ * catches the throw, yields a `backend_error` with a typed `error` field
+ * (`kind`, `status`, truncated `body`) and a terminal `final` event with
+ * `status: 'failed'` carrying the same detail. Consumers MUST map
+ * `final.error` onto their `RunRecord.error` — silently treating an empty
+ * `finalText` as "agent produced nothing" hides credit exhaustion, auth
+ * failure, and upstream outages.
+ *
+ * @stable
+ */
+declare function createOpenAICompatibleBackend<TInput extends AgentBackendInput = AgentBackendInput>(options: {
+  apiKey: string;
+  baseUrl: string;
+  model: string;
+  kind?: string;
+  /**
+   * OpenAI Chat Completions `tools[]` definitions surfaced to the model on
+   * every request. Omit to send a tool-free request (existing behavior).
+   * The runtime makes no assumption about the dispatcher — calls stream out
+   * as `tool_call` events and the caller is responsible for executing them
+   * and feeding `tool_result` messages back on a follow-up turn.
+   */
+  tools?: ReadonlyArray<OpenAIChatTool>;
+  /**
+   * OpenAI Chat Completions `tool_choice`. Default `undefined` (request
+   * omits the field; provider falls back to its own default — typically
+   * `'auto'`).
+   */
+  toolChoice?: OpenAIChatToolChoice;
+  /**
+   * OpenAI Chat Completions `response_format`. Omit for provider default text.
+   */
+  responseFormat?: OpenAIChatResponseFormat;
+  /** OpenAI Chat Completions `temperature`. Omit for provider default. */
+  temperature?: number;
+  /** Maximum completion tokens, sent as OpenAI-compatible `max_tokens`. Omit for provider default. */
+  maxTokens?: number;
+  fetchImpl?: typeof fetch;
+  retry?: BackendRetryPolicy;
+}): AgentExecutionBackend<TInput>;
+//#endregion
+//#region src/durable/chat-engine.d.ts
+/**
+ * `handleChatTurn` — framework-neutral chat-turn HTTP orchestrator.
+ * Owns the NDJSON `ChatStreamEvent` line protocol, the `session.run.*`
+ * lifecycle vocabulary, and the persist / post-process / trace-flush
+ * hook order. Returns a `ReadableStream` body the product hands to its
+ * platform `Response`.
+ *
+ * Execution durability is the substrate's concern: `box.streamPrompt`
+ * auto-reconnects in-call; cross-process reconnect via `X-Execution-ID`
+ * is the product's job. The producer this engine wraps already speaks
+ * that protocol — the engine just frames the events.
+ *
+ * Hooks (`ChatTurnHooks`):
+ *   - `produce`                  — build the backend event stream
+ *   - `persistAssistantMessage`  — write the assistant turn to the product DB
+ *   - `onTurnComplete?`          — post-process (proposals, citations, …)
+ *   - `onEvent?`                 — per-event side channel (e.g. DO broadcast)
+ *   - `transformFinalText?`      — pre-persist transform (e.g. PII redact)
+ *   - `traceFlush?`              — handed to waitUntil so OTLP export lands
+ *
+ * Framework neutrality: takes already-resolved values (`identity` tuple,
+ * a `waitUntil`), never a `Request` or a `Context`. The product's thin
+ * route adapter does auth + parse + access-control, then calls
+ * `handleChatTurn(...)` and returns `result.body` as its platform `Response`.
+ */
+/** The NDJSON line protocol every product chat client already speaks. */
+interface ChatStreamEvent {
+  type: string;
+  data?: Record<string, unknown>;
+}
+/** Identity of a chat turn. `tenantId` is the workspace id for workspace-
+ *  scoped products and the user id for session-scoped products. */
+interface ChatTurnIdentity {
+  tenantId: string;
+  /** Thread / session id. */
+  sessionId: string;
+  userId: string;
+  /** Monotonic 0-based turn index within the session. */
+  turnIndex: number;
+}
+/** The live side of a turn — what the product's `produce` hook returns. */
+interface ChatTurnProducer<TEvent extends ChatStreamEvent = ChatStreamEvent> {
+  /** The turn's event stream. Forwarded verbatim to the caller. */
+  stream: AsyncGenerator<TEvent, void, unknown>;
+  /** The turn's final assistant text. Read once, after `stream` drains. */
+  finalText(): string;
+}
+interface ChatTurnHooks {
+  /** Build the backend stream. The engine forwards events verbatim and
+   *  reads `finalText()` once the stream drains. */
+  produce(): ChatTurnProducer;
+  /** Persist the assistant message to the product's own store. Called
+   *  once, after drain, with the assembled (transform-applied) text. */
+  persistAssistantMessage(input: {
+    identity: ChatTurnIdentity;
+    finalText: string;
+  }): Promise<void>;
+  /** Optional post-processing (proposals, citations, credit metering …).
+   *  Errors are swallowed + logged — post-process must never fail a turn
+   *  that already streamed successfully. */
+  onTurnComplete?(input: {
+    identity: ChatTurnIdentity;
+    finalText: string;
+  }): Promise<void>;
+  /** Optional per-event side channel (e.g. DO broadcast). Runs for every
+   *  emitted event, lifecycle envelope included. Errors swallowed — a
+   *  broadcast failure must not break the chat stream. */
+  onEvent?(event: ChatStreamEvent): void | Promise<void>;
+  /** Optional pre-persist transform of the final text (e.g. PII
+   *  redaction). Affects only what is persisted; the live stream is
+   *  never altered. */
+  transformFinalText?(text: string): string | Promise<string>;
+  /** Optional trace flush — resolves when OTLP export completes. Handed
+   *  to `waitUntil` so the worker isolate stays alive for the POST. */
+  traceFlush?(): Promise<void>;
+}
+interface RunChatTurnInput {
+  identity: ChatTurnIdentity;
+  hooks: ChatTurnHooks;
+  /** Worker liveness hook. When omitted, trace flush is awaited inline
+   *  before the stream closes. */
+  waitUntil?: (p: Promise<unknown>) => void;
+  /** Structured logger for swallowed hook errors. Defaults to
+   *  `console.error` so failures surface without product wiring. */
+  log?: (message: string, meta?: Record<string, unknown>) => void;
+}
+interface ChatTurnResult {
+  /** NDJSON body — return this as the platform `Response` body. */
+  body: ReadableStream<Uint8Array>;
+  /** Content type for the response. */
+  contentType: 'application/x-ndjson';
+}
+/**
+ * Run one chat turn. Returns immediately with a `ReadableStream` body;
+ * the turn executes as the body is pulled. Never rejects — backend
+ * failures surface as `error` + `session.run.failed` events.
+ */
+declare function handleChatTurn(input: RunChatTurnInput): ChatTurnResult;
+//#endregion
+//#region src/durable/execution-handle.d.ts
+/**
+ * Derive a stable executionId from the run identity. The same
+ * `(projectId, sessionId, turnIndex)` tuple yields the same id — so a
+ * client retry of the same turn lands on the same substrate execution
+ * and the orchestrator's buffer replays instead of starting a second
+ * prompt.
+ *
+ * Format is readable, not hashed: operators grepping orchestrator logs
+ * for `gtm-agent:thread-abc:3` find the run without translating an
+ * opaque id. Substrate executionIds are not a secrecy boundary.
+ *
+ * Wire integration:
+ *   - Sandbox PromptOptions accepts `executionId` and `lastEventId`.
+ *     Products pass this id to make cross-process reconnect land on the
+ *     same substrate execution instead of spawning a duplicate run.
+ */
+declare function deriveExecutionId(input: {
+  projectId: string;
+  sessionId: string;
+  turnIndex: number;
+}): string;
+//#endregion
+//#region src/improvement/build-prompts.d.ts
+/** Evidence supplied to a generated tool or MCP build instruction. */
+interface BuildPromptFindingsInput {
+  report: unknown;
+  findings: AnalystFinding[];
+}
+/** Render findings as the ranked-evidence block every build prompt ends with. */
+declare function findingLines(findings: AnalystFinding[]): string[];
+/** Build the starting instruction for a coder agent tasked with implementing a new tool. */
+declare function toolBuildPrompt(args: BuildPromptFindingsInput): string;
+/** Build the starting instruction for a coder agent tasked with implementing a new MCP server. */
+declare function mcpBuildPrompt(args: BuildPromptFindingsInput): string;
+//#endregion
+//#region src/improvement/driver-loop-generator.d.ts
+interface DriverLoopGeneratorOptions {
+  /** The driver-LLM seam — ONE inference turn over the conversation + tool specs (the canonical
+   *  `ToolLoopChat`, same seam as `driverAgent`): `routerBrain(cfg)` in production, a scripted
+   *  mock in tests. */
+  brain: ToolLoopChat;
+  /** Local coding harness the driver's worker sessions run in the worktree. Default `claude`. */
+  harness?: LocalHarness;
+  /** Per-worker-session wall-clock timeout (ms). Default = `runLocalHarness` default (5m). */
+  timeoutMs?: number;
+  /** Build the driver's task briefing (domain framing + method + findings) — the same senior
+   *  prompt the worker path uses (`toolBuildPrompt` / `mcpBuildPrompt`). The driver reads it and
+   *  folds what each worker needs into its instruction. Default `defaultBuildPrompt`. */
+  buildPrompt?: (args: {
+    report: unknown;
+    findings: AnalystFinding[];
+  }) => string;
+  /** Verify the worktree (the intrinsic check). Exposed to the driver as `run_verifier` AND
+   *  re-run by code as the final keep/discard gate. Omitted ⇒ the final gate is dirty-tree only
+   *  (legacy `agenticGenerator` behavior sans verifier). */
+  verify?: Verifier;
+  /** Max driver inference turns. Default `max(8, 2 + maxShots * 3)` — room for one
+   *  observe/rate/decide cycle per worker session plus orientation. */
+  maxTurns?: number;
+  /** The research seam (adopt-not-build): when set, the driver gets a
+   *  `research{query}` tool + the `researchDriverNote` doctrine, so it can
+   *  discover an EXISTING external MCP instead of building one. Wire a real
+   *  web/search backend here — none is provisioned by default (the build
+   *  harness has no live web access yet; flagged). */
+  research?: (query: string) => Promise<string>;
+  /** Test seam — inject the harness runner (defaults to `runLocalHarness`). */
+  runHarness?: typeof runLocalHarness;
+  /** Test seam — inject the worktree diff reader (defaults to `git diff` in the worktree). */
+  readDiff?: (worktreePath: string) => string;
+  /** Test seam — inject the changed-paths reader (defaults to `git status --porcelain`). */
+  changedPaths?: (worktreePath: string) => string[];
+}
+/** Driver→worker `CandidateGenerator`: an LLM driver on the canonical tool-loop authors, observes, rates, and steers coding-harness sessions in the worktree until the verifier passes or the session budget is spent. */
+declare function driverLoopGenerator(opts: DriverLoopGeneratorOptions): CandidateGenerator;
+//#endregion
+//#region src/improvement/findings.d.ts
+/** Analyst id stamped on findings lifted from untyped seed values. */
+declare const LIFTED_FINDING_ANALYST_ID = "lifted-seed";
+/** Structural guard for the schema-versioned `AnalystFinding` envelope.
+ *  Strict on the identity fields `makeFinding` always populates — a partial
+ *  look-alike is lifted (re-enveloped), not trusted. */
+declare function isAnalystFinding(value: unknown): value is AnalystFinding;
+interface ToAnalystFindingsOptions {
+  /** `analyst_id` stamped on lifted (non-conforming) values.
+   *  Default {@link LIFTED_FINDING_ANALYST_ID}. */
+  analystId?: string;
+  /** `area` stamped on lifted values. Default `'seed'`. */
+  area?: string;
+}
+/**
+ * Normalize a mixed `unknown[]` findings array to `AnalystFinding[]`:
+ * conforming findings pass through by reference; strings and finding-ish
+ * objects are lifted into envelopes (claim = most actionable text, original
+ * value under `metadata.raw`); values with no extractable text are dropped.
+ * Never throws — a malformed seed must not kill a proposal round.
+ */
+declare function toAnalystFindings(findings: readonly unknown[], opts?: ToAnalystFindingsOptions): AnalystFinding[];
+//#endregion
+//#region src/improvement/mcp-serve-verifier.d.ts
+interface McpServeSpec {
+  /** Command that starts the built MCP server in the worktree (stdio transport). */
+  command: string;
+  args?: string[];
+  /** Extra env for the server process (merged over `process.env`). */
+  env?: Record<string, string>;
+  /** Handshake timeout (ms). Default 30s. */
+  timeoutMs?: number;
+  /** Minimum tools the server must expose to pass. Default 1. */
+  minTools?: number;
+}
+/** Build a `Verifier` that boots a generated MCP server over stdio and checks it exposes tools. */
+declare function mcpServeVerifier(spec: McpServeSpec): Verifier;
+//#endregion
+//#region src/improvement/official-optimizers.d.ts
+/** Runtime context appended to an official optimizer's own configuration. */
+interface OfficialOptimizerContextOptions {
+  /** Context supplied to the optimizer before Runtime appends the profile surface and findings. */
+  background?: string;
+  /** Include current trace or analyst findings in the optimizer background. Default true. */
+  includeFindings?: boolean;
+  /** Reject oversized serialized findings before starting Python. Default 50,000 characters. */
+  maxFindingsChars?: number;
+  /**
+   * Redact caller-supplied context and descriptors before they leave Runtime.
+   * The built-in redactor is the default. Pass `false` only for public data
+   * that has already been reviewed.
+   */
+  redact?: Redactor | false;
+  /** Authorize one exact candidate containing structurally sensitive fields.
+   * The callback must return true for every accepted baseline and candidate. */
+  authorizeSensitiveCandidate?: (input: OfficialSensitiveCandidateInput) => boolean;
+}
+interface OfficialSensitiveCandidateInput extends ImproveCandidateValidationInput {
+  sensitivePaths: readonly string[];
+}
+/** Official GEPA configuration plus bounded Runtime findings context. */
+type OfficialGepaOptions<TScenario extends {
+  id: string;
+  kind: string;
+}, TArtifact = unknown> = Omit<GepaOptimizationMethodConfig<TScenario, TArtifact>, 'background' | 'evaluationId'> & OfficialOptimizerContextOptions;
+/** Official SkillOpt configuration plus bounded Runtime findings context. */
+type OfficialSkillOptOptions<TScenario extends {
+  id: string;
+  kind: string;
+}, TArtifact = unknown> = Omit<SkillOptOptimizationMethodConfig<TScenario, TArtifact>, 'background' | 'evaluationId'> & OfficialOptimizerContextOptions;
+/** Missing optional Python dependencies for an official optimizer. */
+declare class OfficialOptimizerUnavailableError extends ConfigError {
+  readonly optimizer: 'gepa' | 'skillopt';
+  constructor(optimizer: 'gepa' | 'skillopt', cause: unknown);
+}
+/**
+ * Build a complete method backed by GEPA's official Optimize Anything API.
+ *
+ * The recipe is passed through unchanged. Use `engine`, `sequential`,
+ * `adaptive-sequential`, `best-of`, `vote`, or `omni` explicitly.
+ */
+declare function officialGepa<TScenario extends {
+  id: string;
+  kind: string;
+}, TArtifact = unknown>(options: OfficialGepaOptions<TScenario, TArtifact>): ImproveMethodFactory<TScenario, TArtifact>;
+/** Build a complete method backed by Microsoft's official SkillOpt trainer. */
+declare function officialSkillOpt<TScenario extends {
+  id: string;
+  kind: string;
+}, TArtifact = unknown>(options: OfficialSkillOptOptions<TScenario, TArtifact>): ImproveMethodFactory<TScenario, TArtifact>;
+//#endregion
+//#region src/improvement/optimizer-prompt.d.ts
+/**
+ * The senior scientific-method optimizer doctrine — the ONE substantial prompt
+ * core shared by every builder/author surface (tool build, MCP build, codebase
+ * improvement, strategy authoring) and by the driver that steers build workers
+ * (`driverLoopGenerator`).
+ *
+ * Seeded from the proven senior prompts rather than invented: GEPA's
+ * `REFLECTION_SYSTEM` (localize → diagnose → minimal generalizable fix →
+ * preserve what works), the /evolve loop (one hypothesis with a mechanism and a
+ * falsifiable prediction; attack the largest measured gap first), /pursue (one
+ * coherent change set, no partial scaffolding), and the self-improving-loop /
+ * supervisor doctrine (a keep is decided by a real check, never by the author;
+ * observe → rate → decide). Generalized from "mutate a prompt string" to
+ * "build a code surface a held-out measurement will grade".
+ */
+/**
+ * The shared method block every build/author prompt embeds. Domain framing
+ * (what a tool/MCP/codebase-edit deliverable looks like) wraps around it; this
+ * is the process itself.
+ */
+declare const optimizerMethod: string;
+/**
+ * The driver's stance for `driverLoopGenerator` — the build-domain instance of
+ * the supervisor doctrine (observe → rate → decide; refine / re-scope /
+ * decompose; the check decides delivery, never the driver's prose).
+ */
+declare const buildDriverSystem: string;
+/**
+ * The driver's ADOPT-not-build doctrine, appended to `buildDriverSystem` when
+ * a `research` tool is wired into the loop (`DriverLoopGeneratorOptions.
+ * research`). Kept separate so a driver WITHOUT the tool is never told to
+ * call a tool it does not have.
+ */
+declare const researchDriverNote: string;
+/**
+ * The senior authoring process for `authorStrategy` — the same method, shaped
+ * to the strategy contract (author-blind, conserved budget, one module out).
+ */
+declare const strategyAuthorMethod: string;
+//#endregion
+//#region src/improvement/raw-trace-distiller.d.ts
+interface RawTraceDistillerOptions {
+  /** Anchor the emitted paths at this run root instead of the generation `runDir`
+   *  the loop passes in. Normally unset — each call points at that generation's
+   *  own directory (`input.runDir`). Pass an absolute path when you construct the
+   *  producer ahead of the loop and want a fixed anchor (e.g. a test fixture). */
+  runDir?: string;
+  /** Max candidates to surface trace paths for, worst-scoring first. Default 12. */
+  maxCandidates?: number;
+  /** Max failing cells to enumerate per candidate before collapsing the rest into
+   *  an "ls the candidate dir" pointer. Default 8. */
+  maxCellsPerCandidate?: number;
+  /** Max concrete file paths to list per cell (the agent can always `ls` the dir
+   *  for the rest). Default 24. */
+  maxFilesPerCell?: number;
+  /** Findings to fall back to when the generation had NO failing cells, so a
+   *  clean round never wipes the proposer's steering context. Mirrors the default
+   *  distiller's static-seed fallback. Default: a single instruction finding. */
+  fallbackFindings?: unknown[];
+}
+/**
+ * Build an `analyzeGeneration` producer that feeds the proposer RAW-TRACE
+ * FILESYSTEM CONTEXT — paths into the prior generation's real run traces plus a
+ * grep/cat-to-diagnose instruction — instead of a pre-summarized digest.
+ *
+ * Drop-in for `analyzeGeneration` on `improve({ surface: 'code' })`:
+ *
+ *   await improve({
+ *     surface: 'code',
+ *     findings: seedFindings,
+ *     code: { repoRoot },
+ *     runDir: '/abs/run',                 // MUST be a real path — the traces live here
+ *     analyzeGeneration: rawTraceDistiller(),
+ *     scenarios, judge, agent,
+ *   })
+ */
+declare function rawTraceDistiller<TScenario extends Scenario$1 = Scenario$1, TArtifact = unknown>(options?: RawTraceDistillerOptions): NonNullable<SelfImproveOptions<TScenario, TArtifact>['analyzeGeneration']>;
+//#endregion
+//#region src/improvement/reflective-generator.d.ts
+interface ReflectiveGeneratorOptions {
+  improvementProposalSource: ImprovementProposalSource<SurfaceImprovementEdit>;
+}
+/** Cheap no-sandbox `CandidateGenerator` (the `shots=1` setting): draft surface edits via the improvement adapter and apply them as one coherent candidate. */
+declare function reflectiveGenerator(opts: ReflectiveGeneratorOptions): CandidateGenerator;
+//#endregion
+//#region src/improvement/rollout-policy.d.ts
+/** The profile extensions namespace the policy persists under. */
+declare const ROLLOUT_POLICY_EXTENSION = "structural-rollout";
+/** Parse a serialized policy surface. Returns `undefined` for non-strings,
+ * malformed JSON, or values outside the policy invariants. Unknown fields are
+ * dropped; supported optional fields are preserved. */
+declare function parseRolloutPolicy(surface: MutableSurface): StructuralRolloutPolicy | undefined;
+/** Normalize an untyped policy bag (a parsed surface or a profile extension) into
+ *  a full `StructuralRolloutPolicy`, defaults merged. Returns `undefined` when any
+ *  present dial violates the policy invariants (mirrors `resolvePolicy`: integer
+ *  k ≥ 1, repairRounds ≥ 0, testgen ≥ 0) — a corrupt config must read as "not
+ *  configured", never as a fabricated recipe. */
+declare function normalizeRolloutPolicy(raw: unknown): StructuralRolloutPolicy | undefined;
+/** Stable serialization with fixed field order. */
+declare function serializeRolloutPolicy(policy: StructuralRolloutPolicy): string;
+/** Read the persisted policy off the profile. `undefined` when the profile does
+ *  not opt into structural rollout. */
+declare function structuralRolloutPolicyFromProfile(profile: ReadonlyAgentProfile): StructuralRolloutPolicy | undefined;
+/** Persist a detached policy under the profile extension without mutating the input. */
+declare function applyRolloutPolicyToProfile(profile: ReadonlyAgentProfile, policy: StructuralRolloutPolicy): AgentProfile$1;
+//#endregion
+//#region src/model-resolution.d.ts
+/**
+ *
+ * Chat-model resolution + catalog validation — the shared primitive every
+ * product chat handler needs and was, until now, hand-rolling. Lifts the
+ * router `/v1/models` fetch, the fail-closed id validation, and the
+ * precedence resolver out of four near-identical per-repo copies.
+ *
+ * Policy-free by design: callers pass their own precedence order
+ * (`resolveChatModel`) and their own known-good `allowlist`
+ * (`validateChatModelId`), so each product keeps its resolution policy while
+ * sharing the catalog fetch, the malformed-id guard, and the fail-closed
+ * admission rule. No React, no `process.env` assumption — `env` is an
+ * explicit narrow record so this runs unchanged in Node and in Workers.
+ *
+ * @stable
+ */
+/**
+ * A model entry as returned by the Tangle Router `/v1/models` endpoint.
+ * Intentionally minimal — only the fields resolution + validation read.
+ */
+interface ModelInfo {
+  id: string;
+  name?: string;
+  description?: string;
+  /** Provider slug, when the router exposes it (`provider` or `_provider`). */
+  provider?: string;
+  _provider?: string;
+  architecture?: {
+    modality?: string;
+    input_modalities?: string[];
+    output_modalities?: string[];
+  };
+}
+/** Env keys the router base URL is resolved from. */
+interface RouterEnv {
+  TANGLE_ROUTER_URL?: string;
+  TANGLE_ROUTER_BASE_URL?: string;
+}
+/** Default Tangle Router base URL used when no env override is set. */
+declare const DEFAULT_ROUTER_BASE_URL = "https://router.tangle.tools";
+/** Resolve the router base URL from env, normalised — no trailing `/v1` or `/`. */
+declare function resolveRouterBaseUrl(env?: RouterEnv): string;
+/**
+ * Fetch the model catalog from the router's `/v1/models`. Throws on a non-2xx
+ * response — callers decide whether to fail open (empty catalog) or closed.
+ */
+declare function getModels(routerBaseUrl?: string): Promise<ModelInfo[]>;
+/** Trim a candidate model id; `undefined` for non-strings and blanks. */
+declare function cleanModelId(value: unknown): string | undefined;
+interface ChatModelCandidate {
+  /** Stable label for telemetry — e.g. `request`, `workspace`, `env`. */
+  source: string;
+  model: string | undefined;
+}
+interface ResolvedChatModel {
+  source: string;
+  model: string;
+}
+/**
+ * Resolve a chat model by precedence: the first candidate carrying a
+ * non-blank model wins, else `fallback`. The caller owns the precedence
+ * order, so each product keeps its own policy (request → workspace → env,
+ * etc.) while the first-non-blank logic and the telemetry shape stay shared.
+ */
+declare function resolveChatModel(candidates: ChatModelCandidate[], fallback: ResolvedChatModel): ResolvedChatModel;
+type ChatModelValidation = {
+  succeeded: true;
+  value: string;
+} | {
+  succeeded: false;
+  error: string;
+};
+/**
+ * Validate a caller-supplied chat-model id. Rejects non-strings, malformed
+ * ids, and ids absent from both the caller's `allowlist` and the live router
+ * catalog. Fails closed: when the catalog cannot be fetched, an unverifiable
+ * id is rejected rather than admitted — a bad model never reaches the agent.
+ */
+declare function validateChatModelId(modelId: unknown, options?: {
+  /**
+   * Known-good ids that skip the catalog round trip — e.g. the product's
+   * default model plus any env-configured ids.
+   */
+  allowlist?: string[];
+  routerBaseUrl?: string;
+  /** Injectable catalog loader — overridden in tests. */
+  loadModels?: (routerBaseUrl: string) => Promise<ModelInfo[]>;
+}): Promise<ChatModelValidation>;
+//#endregion
+//#region src/readiness.d.ts
+/**
+ * Map a `KnowledgeReadinessReport` to a three-state branch (`ready` / `blocked` / `caveat`) the runtime, route handlers, and UI shells all switch on.
+ *
+ * @stable
+ */
+declare function decideKnowledgeReadiness(report: KnowledgeReadinessReport, options?: {
+  minimumScore?: number;
+}): KnowledgeReadinessDecision;
+//#endregion
+//#region src/resolve-agent-backend.d.ts
+/** The transport a chat backend runs on. */
+type AgentBackendKind = 'router' | 'tcloud' | 'cli-bridge' | 'sandbox';
+/**
+ * OpenAI-compat passthrough forwarded to `createOpenAICompatibleBackend` for
+ * the `router` / `tcloud` / `cli-bridge` kinds. Mirrors that factory's optional
+ * inputs so a product keeps its tool advertising / capture-fetch without
+ * re-implementing the backend branch.
+ */
+type OpenAICompatPassthrough = Pick<Parameters<typeof createOpenAICompatibleBackend>[0], 'tools' | 'toolChoice' | 'responseFormat' | 'temperature' | 'maxTokens' | 'fetchImpl' | 'retry'>;
+interface ResolveAgentBackendOptions<TInput extends AgentBackendInput = AgentBackendInput> extends OpenAICompatPassthrough {
+  /** The chat transport to resolve. */
+  kind: AgentBackendKind;
+  /**
+   * Bearer credential for the OpenAI-compat kinds. Empty string is valid for a
+   * loopback-anonymous cli-bridge; a `router`/`tcloud` route with an empty key
+   * is a caller bug the product surfaces before calling in.
+   */
+  apiKey: string;
+  /** Base URL for the OpenAI-compat kinds. cli-bridge's is its `/v1`. */
+  baseUrl: string;
+  /** Model id sent on every request. cli-bridge rejects a request without it. */
+  model: string;
+  /** `kind` label stamped on the resolved backend + its traces. Defaults to `kind`. */
+  label?: string;
+  /**
+   * `sandbox` kind: the product's own domain backend. Required for that kind —
+   * the substrate owns no product sandbox shape, so a `sandbox` resolution with
+   * no seam is a caller bug, not a silent fallback.
+   */
+  sandboxBackend?: () => AgentExecutionBackend<TInput>;
+}
+/**
+ * Resolve the `AgentExecutionBackend` for the chosen `kind`. Reuse this instead
+ * of hand-rolling the `createOpenAICompatibleBackend` branch in each product.
+ */
+declare function resolveAgentBackend<TInput extends AgentBackendInput = AgentBackendInput>(opts: ResolveAgentBackendOptions<TInput>): AgentExecutionBackend<TInput>;
+//#endregion
+//#region src/run.d.ts
+/** Stamp cross-cutting defaults onto adapter-projected RunRecords without
+ *  overriding anything the adapter set explicitly:
+ *   - `scenarioId` — the run's scenario, when the record omits one.
+ *   - `failureClass` — the control layer's failure classification promoted
+ *     onto the canonical cross-agent key, but ONLY when it's a real taxonomy
+ *     class. This is what lets the substrate aggregate failures across every
+ *     agent in one vocabulary instead of per-agent ad-hoc strings. */
+declare function applyRunRecordDefaults(records: RunRecord[], scenarioId: string, controlFailureClass: string | undefined): RunRecord[];
+/**
+ * Single-shot task lifecycle for adapter-driven tasks: readiness-gated, emits the runtime lifecycle event vocabulary, session-store pluggable.
+ *
+ * @stable
+ */
+declare function runAgentTask<TState, TAction, TActionResult, TEval extends ControlEvalResult = ControlEvalResult>(options: RunAgentTaskOptions<TState, TAction, TActionResult, TEval>): Promise<AgentTaskRunResult<TState, TAction, TActionResult, TEval>>;
+/**
+ * Streaming task lifecycle: delegates execution to an `AgentExecutionBackend` (model API, sandbox, or custom iterable) and yields lifecycle events as they happen.
+ *
+ * @stable
+ */
+declare function runAgentTaskStream<TInput extends AgentBackendInput = AgentBackendInput>(options: RunAgentTaskStreamOptions<TInput>): AsyncIterable<RuntimeStreamEvent>;
+//#endregion
+//#region src/sessions.d.ts
+/** In-memory `RuntimeSessionStore` for single-process use and tests. @stable */
+declare class InMemoryRuntimeSessionStore implements RuntimeSessionStore {
+  private readonly sessions;
+  private readonly events;
+  get(sessionId: string): RuntimeSession | undefined;
+  put(session: RuntimeSession): void;
+  appendEvent(sessionId: string, event: RuntimeStreamEvent): void;
+  listEvents(sessionId: string): RuntimeStreamEvent[];
+}
+//#endregion
+//#region src/sse.d.ts
+/** @stable */
+interface ServerSentEventOptions {
+  event?: string;
+  id?: string;
+  retry?: number;
+}
+/** Serialize a `KnowledgeReadinessReport` as a Server-Sent Event string. @stable */
+declare function readinessServerSentEvent(report: KnowledgeReadinessReport, options?: RuntimeTelemetryOptions & ServerSentEventOptions): string;
+/** Serialize a `RuntimeStreamEvent` as a Server-Sent Event string. @stable */
+declare function runtimeStreamServerSentEvent(event: RuntimeStreamEvent, options?: RuntimeTelemetryOptions & ServerSentEventOptions): string;
+//#endregion
+//#region src/tool-loop.d.ts
+interface ToolLoopCall {
+  toolCallId?: string;
+  toolName: string;
+  args: Record<string, unknown>;
+}
+/** Outcome of one tool dispatch — structurally compatible with a hub/integration
+ *  tool-outcome union, so callers can fold either through the loop. */
+type ToolCallOutcome = {
+  ok: true;
+  result: unknown;
+} | {
+  ok: false;
+  code: string;
+  message: string;
+  status?: number;
+};
+/** One OpenAI-shaped tool-call entry carried on an assistant message. */
+interface ToolLoopAssistantToolCall {
+  id: string;
+  type: 'function';
+  function: {
+    name: string;
+    arguments: string;
+  };
+}
+/**
+ * A message in the running conversation the loop sends to `streamTurn`.
+ *
+ * The base `{ role, content }` covers `system` / `user` / plain `assistant`
+ * turns. Two optional fields carry the OpenAI function-calling contract so a
+ * strict model (Claude, and any OpenAI-compatible provider that validates tool
+ * history) reads its own tool use back instead of re-issuing the same call:
+ *
+ *   - an assistant turn that emitted tool calls carries `tool_calls`, and its
+ *     `content` is `null` when the turn was tool-only;
+ *   - each tool result is its own `{ role: 'tool', tool_call_id, content }`
+ *     message keyed to the call that produced it.
+ *
+ * Widening is additive: a `streamTurn` that reads only `role` + `content` still
+ * works; one that forwards the whole message to an OpenAI-compatible endpoint
+ * now sends correct tool history.
+ */
+type ToolLoopMessage = {
+  role: string;
+  content: string | null;
+  tool_calls?: ToolLoopAssistantToolCall[];
+  tool_call_id?: string;
+};
+type ToolLoopEvent = {
+  type: 'text';
+  text: string;
+} | {
+  type: 'tool_call';
+  call: ToolLoopCall;
+} | {
+  type: 'other';
+  event: unknown;
+};
+/** Why the loop stopped. `completed` = model finished naturally; `stuck-loop` =
+ *  ≥3 consecutive identical tool calls (same tool + args); `backstop` = hit the
+ *  runaway-backstop cap (200 by default); `deadline` = wall-clock deadlineMs
+ *  exceeded; `budget` = maxCostUsd exhausted. Non-`completed` stops are infra /
+ *  resource outcomes — eval scoring must distinguish them from capability failure. */
+type ToolLoopStopReason = 'completed' | 'stuck-loop' | 'backstop' | 'deadline' | 'budget';
+interface ToolLoopResult {
+  finalText: string;
+  toolResults: Array<{
+    call: ToolLoopCall;
+    label: string;
+    outcome: ToolCallOutcome;
+  }>;
+  turns: number;
+  stopReason: ToolLoopStopReason;
+  /** @deprecated Use `stopReason !== 'completed'` instead. */
+  cappedOut: boolean;
+}
+interface RunToolLoopOptions {
+  systemPrompt: string;
+  userMessage: string;
+  priorMessages?: ToolLoopMessage[];
+  streamTurn: (messages: ToolLoopMessage[]) => AsyncIterable<ToolLoopEvent>;
+  executeToolCall: (call: ToolLoopCall) => Promise<ToolCallOutcome>;
+  isExecutableTool: (toolName: string) => boolean;
+  /** Runaway-backstop cap. Default 200 — set far above any legitimate workflow.
+   *  For per-workflow limits, use `maxCostUsd` or `deadlineMs` instead. */
+  maxToolTurns?: number;
+  /** Wall-clock deadline in ms since epoch (Date.now()-based). When exceeded the
+   *  loop stops with stopReason `deadline`. */
+  deadlineMs?: number;
+  /** Maximum total cost in USD. Requires `costOf` to meter each tool call. */
+  maxCostUsd?: number;
+  /** Return the USD cost of one outcome. Required for `maxCostUsd` to work. */
+  costOf?: (call: ToolLoopCall, outcome: ToolCallOutcome) => number;
+  renderResult?: (label: string, outcome: ToolCallOutcome) => string;
+  labelFor?: (call: ToolLoopCall) => string;
+  runId?: string;
+  scenarioId?: string;
+  hooks?: RuntimeHooks;
+}
+/** Run the bounded tool loop and return the final text + every executed tool
+ *  outcome. Awaitable — callers needing to stream events to a UI use
+ *  {@link streamToolLoop}. */
+declare function runToolLoop(opts: RunToolLoopOptions): Promise<ToolLoopResult>;
+type StreamToolLoopYield<Raw> = {
+  kind: 'event';
+  event: Raw;
+} | {
+  kind: 'tool_result';
+  toolName: string;
+  toolCallId?: string;
+  label: string;
+  outcome: ToolCallOutcome;
+} | {
+  kind: 'capped';
+  pending: number;
+  stopReason: Exclude<ToolLoopStopReason, 'completed'>;
+};
+interface StreamToolLoopOptions<Raw> {
+  systemPrompt: string;
+  userMessage: string;
+  priorMessages?: ToolLoopMessage[];
+  streamTurn: (messages: ToolLoopMessage[]) => AsyncIterable<Raw>;
+  extractText: (event: Raw) => string;
+  extractToolCall: (event: Raw) => ToolLoopCall | null;
+  isExecutableTool: (toolName: string) => boolean;
+  executeToolCall: (call: ToolLoopCall) => Promise<ToolCallOutcome>;
+  /** Runaway-backstop cap. Default 200 — set far above any legitimate workflow. */
+  maxToolTurns?: number;
+  /** Wall-clock deadline in ms since epoch (Date.now()-based). */
+  deadlineMs?: number;
+  /** Maximum total cost in USD. Requires `costOf` to meter each tool call. */
+  maxCostUsd?: number;
+  /** Return the USD cost of one outcome. Required for `maxCostUsd` to work. */
+  costOf?: (call: ToolLoopCall, outcome: ToolCallOutcome) => number;
+  renderResult?: (label: string, outcome: ToolCallOutcome) => string;
+  labelFor?: (call: ToolLoopCall) => string;
+  runId?: string;
+  scenarioId?: string;
+  hooks?: RuntimeHooks;
+}
+/** Streaming bounded tool loop: yields each raw turn event (the caller maps +
+ *  telemetries + re-emits it) and each executed `tool_result`; emits one
+ *  `capped` if it stops for any non-completed reason with calls still pending. */
+declare function streamToolLoop<Raw>(opts: StreamToolLoopOptions<Raw>): AsyncGenerator<StreamToolLoopYield<Raw>, void, unknown>;
+//#endregion
+export { rawTraceDistiller as $, ResolveAgentBackendOptions as A, handleChatTurn as At, getModels as B, readinessServerSentEvent as C, deriveExecutionId as Ct, runAgentTask as D, ChatTurnProducer as Dt, applyRunRecordDefaults as E, ChatTurnIdentity as Et, DEFAULT_ROUTER_BASE_URL as F, applyRolloutPolicyToProfile as G, resolveRouterBaseUrl as H, ModelInfo as I, serializeRolloutPolicy as J, normalizeRolloutPolicy as K, ResolvedChatModel as L, decideKnowledgeReadiness as M, createIterableBackend as Mt, ChatModelCandidate as N, createOpenAICompatibleBackend as Nt, runAgentTaskStream as O, ChatTurnResult as Ot, ChatModelValidation as P, createSandboxPromptBackend as Pt, RawTraceDistillerOptions as Q, RouterEnv as R, ServerSentEventOptions as S, toolBuildPrompt as St, InMemoryRuntimeSessionStore as T, ChatTurnHooks as Tt, validateChatModelId as U, resolveChatModel as V, ROLLOUT_POLICY_EXTENSION as W, ReflectiveGeneratorOptions as X, structuralRolloutPolicyFromProfile as Y, reflectiveGenerator as Z, ToolLoopMessage as _, DriverLoopGeneratorOptions as _t, ControlStep$1 as a, OfficialOptimizerContextOptions as at, runToolLoop as b, findingLines as bt, KnowledgeRequirement$1 as c, OfficialSkillOptOptions as ct, StreamToolLoopOptions as d, McpServeSpec as dt, buildDriverSystem as et, StreamToolLoopYield as f, mcpServeVerifier as ft, ToolLoopEvent as g, toAnalystFindings as gt, ToolLoopCall as h, isAnalystFinding as ht, ControlRunResult$1 as i, OfficialGepaOptions as it, resolveAgentBackend as j, BackendRetryPolicy as jt, AgentBackendKind as k, RunChatTurnInput as kt, RunRecord$1 as l, officialGepa as lt, ToolLoopAssistantToolCall as m, ToAnalystFindingsOptions as mt, ControlDecision$1 as n, researchDriverNote as nt, DataAcquisitionPlan$1 as o, OfficialOptimizerUnavailableError as ot, ToolCallOutcome as p, LIFTED_FINDING_ANALYST_ID as pt, parseRolloutPolicy as q, ControlEvalResult$1 as r, strategyAuthorMethod as rt, KnowledgeReadinessReport$1 as s, OfficialSensitiveCandidateInput as st, ControlBudget$1 as t, optimizerMethod as tt, RunToolLoopOptions as u, officialSkillOpt as ut, ToolLoopResult as v, driverLoopGenerator as vt, runtimeStreamServerSentEvent as w, ChatStreamEvent as wt, streamToolLoop as x, mcpBuildPrompt as xt, ToolLoopStopReason as y, BuildPromptFindingsInput as yt, cleanModelId as z };
+//# sourceMappingURL=index-BGdxAwfO.d.ts.map