@tangle-network/agent-runtime 0.126.0 → 0.131.0

package/dist/{prepare--8EvLqCr.js → prepare-DYWjVcPx.js}

@@ -1,12 +1,12 @@
-import { x as contentAddress } from "./spawn-journal-DsZKDqeh.js";
+import { x as contentAddress } from "./spawn-journal-saHQzqYi.js";
 import { i as redactProtectedValue, n as createProtectedRecordRedactor, r as redactProtectedReason, t as assertNoProtectedBytes } from "./protected-redaction--F3v1oo8.js";
 import { REDACTION_VERSION, canonicalJson, isLlmSpan } from "@tangle-network/agent-eval";
 import { agentCandidateArtifactRefSchema, agentCandidateBenchmarkResultEvidenceSchema, agentCandidateBenchmarkSuiteSchema, agentCandidateBenchmarkTaskSchema, agentCandidateBundleSchema, agentCandidateContainerSchema, agentCandidateExecutionLimitsSchema, agentCandidateExecutionPlanEvidenceSchema, agentCandidateExecutionPlanMaterialSchema, agentCandidateMaterializationReceiptSchema, agentCandidateModelAccessNetworkSchema, agentCandidateModelSettlementEvidenceSchema, agentCandidateProfileActivationSchema, agentCandidateProfilePlanEvidenceSchema, agentCandidateProfileSchema, agentCandidateResolvedModelSchema, agentCandidateRunCellSchema, agentCandidateRunReceiptSchema, agentCandidateTaskOutcomeEvidenceSchema, agentCandidateTaskOutcomeSpecSchema, agentCandidateTerminationSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentProfileDiffSchema, agentProfileSchema, applyAgentProfileDiff, sha256DigestSchema } from "@tangle-network/agent-interface";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { applyAgentCandidateWorkspacePlan, isMaterializerHarness, materializeCandidateProfile } from "@tangle-network/agent-profile-materialize";
 import { lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rm, stat } from "node:fs/promises";
 import { constants } from "node:fs";
-import { isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { spawn } from "node:child_process";
 import { tmpdir } from "node:os";
 import { hashKnowledgeBase } from "@tangle-network/agent-knowledge";
@@ -64,11 +64,166 @@ function deepFreezeCandidate(value, seen = /* @__PURE__ */ new Set()) {
 	return Object.freeze(value);
 }
 //#endregion
+//#region src/candidate-execution/system-prompt.ts
+const SYSTEM_PROMPT_FILE = ".tangle/system-prompt.md";
+const APPEND_SYSTEM_PROMPT_FILE = ".tangle/append-system-prompt.md";
+const SYSTEM_PROMPT_FLAGS = ["--system-prompt", "--system-prompt-file"];
+const APPEND_SYSTEM_PROMPT_FLAGS = ["--append-system-prompt", "--append-system-prompt-file"];
+function argsSetSystemPromptFlag(values) {
+	return values.some((value) => SYSTEM_PROMPT_FLAGS.some((flag) => value === flag || value.startsWith(`${flag}=`)));
+}
+function argsSetAppendSystemPromptFlag(values) {
+	return values.some((value) => APPEND_SYSTEM_PROMPT_FLAGS.some((flag) => value === flag || value.startsWith(`${flag}=`)));
+}
+/** Codex keys that can replace or contaminate the materializer's sealed instructions file. */
+const CODEX_INSTRUCTION_KEYS = ["model_instructions_file", "developer_instructions"];
+function argsSetCodexInstructionOverride(values) {
+	for (let index = 0; index < values.length; index++) {
+		const value = values[index];
+		const config = value === "-c" || value === "--config" ? values[index + 1] : value.startsWith("--config=") ? value.slice(9) : void 0;
+		if (config !== void 0 && CODEX_INSTRUCTION_KEYS.some((key) => config.trimStart().startsWith(`${key}=`))) return true;
+	}
+	return false;
+}
+const HARNESS_SYSTEM_PROMPTS = {
+	"claude-code": {
+		executable: "claude",
+		project: (plan, systemPrompt, path) => appendFlags(addPromptFile(plan, SYSTEM_PROMPT_FILE, systemPrompt), "--system-prompt-file", path),
+		projectAppend: (plan, appendSystemPrompt, path) => appendFlags(addPromptFile(plan, APPEND_SYSTEM_PROMPT_FILE, appendSystemPrompt), "--append-system-prompt-file", path),
+		conflictsWithArgs: argsSetSystemPromptFlag,
+		conflictsWithAppendArgs: argsSetAppendSystemPromptFlag
+	},
+	/** OpenCode's bound primary agent is already selected by the materializer's --agent flag. */
+	opencode: {
+		executable: "opencode",
+		project: (plan) => plan,
+		retainsProjectedSystemPrompt: true,
+		conflictsWithArgs: (values) => values.some((value) => value === "--agent" || value.startsWith("--agent=")),
+		conflictsWithAppendArgs: argsSetAppendSystemPromptFlag
+	},
+	pi: {
+		executable: "pi",
+		project: (plan, systemPrompt, path) => appendFlags(addPromptFile(plan, SYSTEM_PROMPT_FILE, systemPrompt), "--system-prompt", path),
+		projectAppend: (plan, appendSystemPrompt, path) => appendFlags(addPromptFile(plan, APPEND_SYSTEM_PROMPT_FILE, appendSystemPrompt), "--append-system-prompt", path),
+		conflictsWithArgs: argsSetSystemPromptFlag,
+		conflictsWithAppendArgs: argsSetAppendSystemPromptFlag
+	},
+	prime: {
+		executable: "prime-agent",
+		project: (plan, systemPrompt, path) => appendFlags(addPromptFile(plan, SYSTEM_PROMPT_FILE, systemPrompt), "--system-prompt", path),
+		projectAppend: (plan, appendSystemPrompt, path) => appendFlags(addPromptFile(plan, APPEND_SYSTEM_PROMPT_FILE, appendSystemPrompt), "--append-system-prompt", path),
+		conflictsWithArgs: argsSetSystemPromptFlag,
+		conflictsWithAppendArgs: argsSetAppendSystemPromptFlag
+	},
+	/** Gemini's file and env lowering is materializer-owned; this row supplies the launch proof. */
+	gemini: {
+		executable: "gemini",
+		project: (plan) => plan,
+		conflictsWithArgs: argsSetSystemPromptFlag,
+		conflictsWithAppendArgs: argsSetAppendSystemPromptFlag
+	}
+};
+/**
+* These controls are lowered by agent-profile-materialize into files plus launch inputs. The
+* candidate adapter does not own the spawn, so it must reject an arbitrary entrypoint even when
+* the plan has the right bytes: only the native binary can make those inputs effective.
+*/
+const MATERIALIZED_PROMPT_DELIVERIES = {
+	codex: {
+		executable: "codex",
+		delivered: (plan) => plan.files.some((file) => file.relPath === ".codex/system-prompt.md") && plan.flags.some((flag) => flag.value === "model_instructions_file=.codex/system-prompt.md"),
+		conflictsWithArgs: argsSetCodexInstructionOverride
+	},
+	gemini: {
+		executable: "gemini",
+		delivered: (plan) => plan.files.some((file) => file.relPath === ".gemini/system.md") && plan.env.GEMINI_SYSTEM_MD?.value === "1",
+		conflictsWithArgs: argsSetSystemPromptFlag
+	}
+};
+/** Project both prompt intents onto their distinct native process controls. */
+function projectCandidatePromptIntents(plan, launch, systemPromptFilePath, requestedSystemPrompt = plan.systemPrompt?.value, requestedAppendSystemPrompt = plan.appendSystemPrompt?.value) {
+	const systemPrompt = plan.systemPrompt;
+	const appendSystemPrompt = plan.appendSystemPrompt;
+	const delivery = MATERIALIZED_PROMPT_DELIVERIES[plan.harness];
+	if (systemPrompt === void 0 && delivery?.delivered(plan)) {
+		assertProvableNativeLaunch(plan.harness, delivery.executable, launch, "replacement");
+		assertNoShadowingArgs(plan.harness, delivery.conflictsWithArgs, launch, "replacement");
+		if (requestedSystemPrompt === void 0) return plan;
+		return plan;
+	}
+	if (requestedSystemPrompt === void 0 && requestedAppendSystemPrompt === void 0) return plan;
+	const projection = HARNESS_SYSTEM_PROMPTS[plan.harness];
+	if (!projection) throw new Error(`candidate system prompt has no native launch projection for ${plan.harness}`);
+	const requestedReplacement = requestedSystemPrompt !== void 0;
+	if (requestedReplacement && systemPrompt === void 0) throw new Error(`profile materializer did not deliver the candidate system prompt for ${plan.harness}`);
+	if (systemPrompt !== void 0 && requestedSystemPrompt === void 0) throw new Error(`profile materializer added an unexpected candidate system prompt for ${plan.harness}`);
+	if (systemPrompt !== void 0 && systemPrompt.value !== requestedSystemPrompt) throw new Error("profile materializer changed the candidate system prompt");
+	if (appendSystemPrompt !== void 0 && appendSystemPrompt.value !== requestedAppendSystemPrompt) throw new Error("profile materializer changed the candidate append system prompt");
+	const intent = requestedReplacement ? "replacement" : "addition";
+	assertProvableNativeLaunch(plan.harness, projection.executable, launch, intent);
+	const launchArgs = (launch.args ?? []).map((value) => value.value);
+	if (requestedReplacement && projection.conflictsWithArgs(launchArgs)) throw new Error(`${plan.harness} launch arguments conflict with the candidate profile system prompt`);
+	if (requestedAppendSystemPrompt !== void 0 && projection.conflictsWithAppendArgs(launchArgs)) throw new Error(`${plan.harness} launch arguments conflict with the candidate profile append system prompt`);
+	let projected = plan;
+	if (systemPrompt !== void 0) projected = projection.project(projection.retainsProjectedSystemPrompt ? projected : omitPromptIntent(projected, "systemPrompt"), systemPrompt.value, systemPromptFilePath);
+	if (appendSystemPrompt !== void 0) {
+		if (!projection.projectAppend) throw new Error(`candidate append system prompt has no native launch projection for ${plan.harness}`);
+		projected = projection.projectAppend(omitPromptIntent(projected, "appendSystemPrompt"), appendSystemPrompt.value, posix.join(posix.dirname(systemPromptFilePath), "append-system-prompt.md"));
+	}
+	return projected;
+}
+function assertProvableNativeLaunch(harness, expectedExecutable, launch, intent) {
+	if (launch.kind !== "container-command") throw new Error(`candidate-entrypoint launch cannot prove ${harness} system-prompt ${intent}`);
+	if (launch.executable !== expectedExecutable && !(posix.isAbsolute(launch.executable) && posix.basename(launch.executable) === expectedExecutable)) throw new Error(`${harness} system-prompt ${intent} requires the native ${expectedExecutable} executable`);
+}
+function assertNoShadowingArgs(harness, conflictsWithArgs, launch, intent) {
+	if (conflictsWithArgs((launch.args ?? []).map((value) => value.value))) throw new Error(`${harness} launch arguments conflict with the candidate profile ${intent === "replacement" ? "system" : "append system"} prompt`);
+}
+function omitPromptIntent(plan, intent) {
+	const projected = { ...plan };
+	delete projected[intent];
+	return projected;
+}
+function appendFlags(plan, ...values) {
+	return {
+		...plan,
+		flags: [...plan.flags, ...values.map(publicValue$1)]
+	};
+}
+function publicValue$1(value) {
+	return {
+		kind: "public",
+		value
+	};
+}
+function addPromptFile(plan, relPath, prompt) {
+	if (plan.files.some((file) => file.relPath === relPath)) throw new Error(`candidate profile conflicts with reserved ${relPath}`);
+	return {
+		...plan,
+		files: [...plan.files, {
+			relPath,
+			content: prompt,
+			source: "generated"
+		}]
+	};
+}
+//#endregion
 //#region src/candidate-execution/profile.ts
 function candidateMaterializerHarness(harness) {
 	if (!isMaterializerHarness(harness)) throw new Error(`sealed candidate profile materialization is unsupported for harness ${harness}`);
 	return harness;
 }
+/** Runtime applies the materializer's launch flags to the candidate process. */
+const CANDIDATE_PROFILE_MATERIALIZER_BINDS = ["systemPrompt"];
+/** Derive the exact native profile plan used by preparation and later evidence checks. */
+function materializeAgentCandidateProfilePlan(options) {
+	const root = options.workspace === "task" ? options.workspaces.taskRoot : options.workspaces.candidateRoot;
+	if (!root) throw new Error("candidate profile target is missing its execution workspace root");
+	return projectCandidatePromptIntents(materializeCandidateProfile(options.profile, candidateMaterializerHarness(options.harness), {
+		binds: CANDIDATE_PROFILE_MATERIALIZER_BINDS,
+		resolvedResources: options.resolvedResources
+	}), options.launch, posix.join(root, ".tangle/system-prompt.md"), options.profile.prompt?.systemPrompt, options.profile.prompt?.appendSystemPrompt);
+}
 /** Bind exact native profile text to the canonical plan captured during preparation. */
 function createAgentCandidateProfileActivation(plan, profilePlan) {
 	const sourceByPath = new Map(plan.files.map((file) => [file.relPath, file]));
@@ -207,7 +362,7 @@ function agentCandidateProfileAsAgentProfile(candidate) {
 	if (candidate.modes) output.modes = cloneRecord(candidate.modes);
 	if (candidate.hooks) output.hooks = Object.fromEntries(Object.entries(candidate.hooks).map(([event, hooks]) => [event, hooks.map(({ executable, args, env, ...hook }) => ({
 		...hook,
-		command: [executable, ...(args ?? []).map(publicValue$1)].map(shellQuote).join(" "),
+		command: [executable, ...(args ?? []).map(publicValue)].map(shellQuote).join(" "),
 		...env ? { env: cloneRecord(env) } : {}
 	}))]));
 	if (candidate.resources) {
@@ -309,7 +464,7 @@ function candidatePublicValue(value, path) {
 function mapCandidatePublicValues(values, pathPrefix) {
 	return Object.fromEntries(Object.entries(values).map(([name, value]) => [name, candidatePublicValue(value, `${pathPrefix}.${name}`)]));
 }
-function publicValue$1(value) {
+function publicValue(value) {
 	return value.value;
 }
 function cloneRecord(values) {
@@ -3735,146 +3890,6 @@ var CandidateExecutionDeadlineError = class extends Error {
 	}
 };
 //#endregion
-//#region src/candidate-execution/system-prompt.ts
-const SYSTEM_PROMPT_FILE = ".tangle/system-prompt.md";
-const SYSTEM_PROMPT_FLAGS = ["--system-prompt", "--system-prompt-file"];
-/** Shared by the harnesses whose native control IS a `--system-prompt*` flag. */
-function argsSetSystemPromptFlag(values) {
-	return values.some((value) => SYSTEM_PROMPT_FLAGS.some((flag) => value === flag || value.startsWith(`${flag}=`)));
-}
-function argsSetCodexDeveloperInstructions(values) {
-	for (let index = 0; index < values.length; index++) {
-		const value = values[index];
-		if ((value === "-c" || value === "--config" ? values[index + 1] : value.startsWith("--config=") ? value.slice(9) : void 0)?.trimStart().startsWith("developer_instructions=")) return true;
-	}
-	return false;
-}
-const HARNESS_SYSTEM_PROMPTS = {
-	"claude-code": {
-		executable: "claude",
-		project: (plan, systemPrompt, path) => appendFlags(addSystemPromptFile(plan, systemPrompt), "--system-prompt-file", path),
-		conflictsWithArgs: argsSetSystemPromptFlag
-	},
-	codex: {
-		executable: "codex",
-		project: (plan, systemPrompt) => appendFlags(plan, "-c", `developer_instructions=${tomlString(systemPrompt)}`),
-		conflictsWithArgs: argsSetCodexDeveloperInstructions
-	},
-	opencode: {
-		executable: "opencode",
-		project: (plan, systemPrompt) => ({
-			...plan,
-			files: projectOpenCodeSystemPrompt(plan.files, systemPrompt)
-		}),
-		conflictsWithArgs: () => false
-	},
-	pi: {
-		executable: "pi",
-		project: (plan, systemPrompt, path) => appendFlags(addSystemPromptFile(plan, systemPrompt), "--system-prompt", path),
-		conflictsWithArgs: argsSetSystemPromptFlag
-	}
-};
-/** Project a replacement system prompt onto the exact native process control. */
-function projectCandidateSystemPrompt(plan, launch, systemPromptFilePath) {
-	const systemPrompt = plan.systemPrompt;
-	if (systemPrompt === void 0) return plan;
-	const projection = HARNESS_SYSTEM_PROMPTS[plan.harness];
-	if (!projection) throw new Error(`candidate system prompt has no native launch projection for ${plan.harness}`);
-	const expectedExecutable = projection.executable;
-	if (launch.kind !== "container-command") throw new Error(`candidate-entrypoint launch cannot prove ${plan.harness} system-prompt replacement`);
-	if (launch.executable !== expectedExecutable && !(posix.isAbsolute(launch.executable) && posix.basename(launch.executable) === expectedExecutable)) throw new Error(`${plan.harness} system-prompt replacement requires the native ${expectedExecutable} executable`);
-	if (projection.conflictsWithArgs((launch.args ?? []).map((value) => value.value))) throw new Error(`${plan.harness} launch arguments conflict with the candidate profile system prompt`);
-	return projection.project(omitUnappliedSystemPrompt(plan), systemPrompt.value, systemPromptFilePath);
-}
-function omitUnappliedSystemPrompt(plan) {
-	const { systemPrompt: _systemPrompt, ...projected } = plan;
-	return projected;
-}
-function appendFlags(plan, ...values) {
-	return {
-		...plan,
-		flags: [...plan.flags, ...values.map(publicValue)]
-	};
-}
-function publicValue(value) {
-	return {
-		kind: "public",
-		value
-	};
-}
-function addSystemPromptFile(plan, systemPrompt) {
-	if (plan.files.some((file) => file.relPath === SYSTEM_PROMPT_FILE)) throw new Error(`candidate profile conflicts with reserved ${SYSTEM_PROMPT_FILE}`);
-	return {
-		...plan,
-		files: [...plan.files, {
-			relPath: SYSTEM_PROMPT_FILE,
-			content: systemPrompt,
-			source: "generated"
-		}]
-	};
-}
-function projectOpenCodeSystemPrompt(files, prompt) {
-	const configIndex = files.findIndex((file) => file.relPath === "opencode.json");
-	if (configIndex === -1) return [...files, {
-		relPath: "opencode.json",
-		content: openCodeConfigWithPrompt({}, prompt),
-		source: "generated"
-	}];
-	const configFile = files[configIndex];
-	if (configFile.source !== "generated") throw new Error("opencode system-prompt replacement requires generated opencode.json");
-	const config = parseJsonObject(configFile.content, "generated opencode.json");
-	const output = [...files];
-	output[configIndex] = {
-		...configFile,
-		content: openCodeConfigWithPrompt(config, prompt)
-	};
-	return output;
-}
-function openCodeConfigWithPrompt(config, prompt) {
-	const agent = optionalJsonObject(config.agent, "generated opencode.json agent");
-	const build = optionalJsonObject(agent.build, "generated opencode.json agent.build");
-	const plan = optionalJsonObject(agent.plan, "generated opencode.json agent.plan");
-	assertCompatiblePrompt(build.prompt, prompt, "build");
-	assertCompatiblePrompt(plan.prompt, prompt, "plan");
-	return JSON.stringify({
-		$schema: "https://opencode.ai/config.json",
-		...config,
-		agent: {
-			...agent,
-			build: {
-				...build,
-				prompt
-			},
-			plan: {
-				...plan,
-				prompt
-			}
-		}
-	}, null, 2);
-}
-function parseJsonObject(content, label) {
-	let value;
-	try {
-		value = JSON.parse(content);
-	} catch (cause) {
-		throw new Error(`${label} must contain valid JSON`, { cause });
-	}
-	return jsonObject(value, label);
-}
-function optionalJsonObject(value, label) {
-	return value === void 0 ? {} : jsonObject(value, label);
-}
-function jsonObject(value, label) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be a JSON object`);
-	return value;
-}
-function assertCompatiblePrompt(value, prompt, agent) {
-	if (value !== void 0 && value !== prompt) throw new Error(`generated opencode.json agent.${agent}.prompt conflicts with the profile`);
-}
-function tomlString(value) {
-	return `"${value.replaceAll("\\", "\\\\").replaceAll("\"", "\\\"").replaceAll("\n", "\\n").replaceAll("\r", "\\r").replaceAll("	", "\\t")}"`;
-}
-//#endregion
 //#region src/candidate-execution/prepare.ts
 const MIN_RESERVATION_TTL_MS = 15 * 6e4;
 const PREPARED_HOLD_MARGIN_MS = 5 * 6e4;
@@ -3890,7 +3905,6 @@ async function prepareAgentCandidateExecution(candidate, task, ports, options =
 		maxAttempts: benchmarkTask.attempt.maxAttempts,
 		retryPolicy: benchmarkTask.attempt.retryPolicy
 	};
-	const harness = candidateMaterializerHarness(bundle.execution.harness);
 	assertTaskInput(task, bundle.execution.instructionDelivery);
 	const resultTimeoutMs = candidateResultTimeout(options.resultTimeoutMs, benchmarkTask.limits.timeoutMs);
 	const reservationWindowMs = candidateExecutionOwnerWindowMs(benchmarkTask.limits.timeoutMs, cleanupTimeoutMs, resultTimeoutMs) + PREPARED_HOLD_MARGIN_MS;
@@ -3922,7 +3936,14 @@ async function prepareAgentCandidateExecution(candidate, task, ports, options =
 		candidateExecutorFiles = await readMaterializedWorkspaceFiles(task.stagingRoots.candidateRoot, bundle.execution.workspace.material);
 	} else if (task.stagingRoots.candidateRoot || task.executionRoots.candidateRoot) throw new Error("disabled code cannot receive a candidate workspace root");
 	await assertEmptyDirectory(task.stagingRoots.profileRoot);
-	const profileWorkspacePlan = projectCandidateSystemPrompt(materializeCandidateProfile(bundle.profile, harness, { resolvedResources: verifiedResourceTextByDigest(candidate) }), bundle.execution.launch, profileSystemPromptExecutionPath(bundle.execution.cwd.workspace, task.executionRoots));
+	const profileWorkspacePlan = materializeAgentCandidateProfilePlan({
+		profile: bundle.profile,
+		harness: bundle.execution.harness,
+		launch: bundle.execution.launch,
+		workspace: bundle.execution.cwd.workspace,
+		workspaces: task.executionRoots,
+		resolvedResources: verifiedResourceTextByDigest(candidate)
+	});
 	const profileApplication = applyAgentCandidateWorkspacePlan(profileWorkspacePlan, task.stagingRoots.profileRoot, bundle.execution.cwd.workspace);
 	await verifyMaterializedProfileWorkspace(task.stagingRoots.profileRoot, profileApplication.profileActivation.profilePlan.material);
 	const profilePlanBytes = await readVerifiedArtifact(profileApplication.profileActivation.profilePlan.artifact, ports.artifacts);
@@ -4395,11 +4416,6 @@ function absoluteExecutionCwd(cwd, roots) {
 	if (absolute !== root && !absolute.startsWith(`${root}/`)) throw new Error("candidate cwd escapes its execution workspace");
 	return absolute;
 }
-function profileSystemPromptExecutionPath(workspace, roots) {
-	const root = workspace === "task" ? roots.taskRoot : roots.candidateRoot;
-	if (!root) throw new Error("candidate profile target is missing its execution workspace root");
-	return posix.join(root, ".tangle/system-prompt.md");
-}
 function validateProtectedModelReservation(reservation, expectedLimits, preparationId, expiresAtMs) {
 	if (!/^sha256:[a-f0-9]{64}$/.test(reservation.digest)) throw new Error("protected model reservation has an invalid identity digest");
 	if (reservation.preparationId !== preparationId || reservation.expiresAtMs !== expiresAtMs) throw new Error("protected model reservation is not scoped to this preparation");
@@ -4453,6 +4469,6 @@ function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
-export { parseExactAgentProfile as $, verifyMaterializedWorkspace as A, rejectedStage as B, assertNoGitIndirection as C, captureMaterializedWorkspace as D, candidateWorkspaceManifest as E, assertTerminalAllowedInPhase as F, agentCandidateProfileAsAgentProfile as G, sealTerminalDigest as H, assertTerminalMatchesClaim as I, candidateMaterializerHarness as J, applyExactAgentProfileDiff as K, assertTerminalMatchesStaged as L, candidateCleanupTimeout as M, withinCandidateCleanupDeadline as N, readVerifiedArtifact as O, assertRecoveryMatchesStaged as P, parseAgentCandidateProfileActivation as Q, recoveredTerminalRecord as R, CANDIDATE_TRACE_TAGS as S, runCandidateGit as T, terminalRecord as U, requireStagedTerminal as V, assertExactObjectKeys as W, freezeGenericAgentCandidateProfile as X, createAgentCandidateProfileActivation as Y, omitUndefinedObjectFields as Z, candidateExecutionClaim as _, persistCandidateOutputArtifact as a, deepFreezeCandidate as at, consumePreparedCandidateExecution as b, CANDIDATE_KNOWLEDGE_ROOT_ENV as c, omitTopLevelDigest as ct, verifiedResourceTextByDigest as d, parseExactAgentProfileDiff as et, verifyAgentCandidateBundle as f, candidateClaimFileInternals as g, InMemoryAgentCandidateExecutionClaimStore as h, persistCandidateModelSettlementEvidence as i, canonicalCandidateDocument as it, candidateCleanupDeadline as j, verifyBytes as k, candidateKnowledgeExecutionPaths as l, sha256Bytes as lt, usdToNanos as m, executePreparedAgentCandidate as n, canonicalCandidateBytes as nt, sealAgentCandidateExecutorStopAcknowledgement as o, embeddedCandidateArtifact as ot, sealAgentCandidateModelSettlement as p, assertCandidateProfileBinding as q, RecoveryAgentCandidateTraceStore as r, canonicalCandidateDigest$1 as rt, CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV as s, immutableCandidateValue as st, prepareAgentCandidateExecution as t, parseExactCandidateProfile as tt, AGENT_CANDIDATE_EXECUTION_SUPPORT as u, verifyCanonicalCandidateDocument as ut, assertPreparedCandidateIntegrity as v, readCandidateGitTreeFiles as w, CANDIDATE_TRACE_ENV as x, beginPreparedCandidateDisposal as y, rejectedFinish as z };
+export { parseExactAgentProfile as $, verifyMaterializedWorkspace as A, rejectedStage as B, assertNoGitIndirection as C, captureMaterializedWorkspace as D, candidateWorkspaceManifest as E, assertTerminalAllowedInPhase as F, agentCandidateProfileAsAgentProfile as G, sealTerminalDigest as H, assertTerminalMatchesClaim as I, createAgentCandidateProfileActivation as J, applyExactAgentProfileDiff as K, assertTerminalMatchesStaged as L, candidateCleanupTimeout as M, withinCandidateCleanupDeadline as N, readVerifiedArtifact as O, assertRecoveryMatchesStaged as P, parseAgentCandidateProfileActivation as Q, recoveredTerminalRecord as R, CANDIDATE_TRACE_TAGS as S, runCandidateGit as T, terminalRecord as U, requireStagedTerminal as V, assertExactObjectKeys as W, materializeAgentCandidateProfilePlan as X, freezeGenericAgentCandidateProfile as Y, omitUndefinedObjectFields as Z, candidateExecutionClaim as _, persistCandidateOutputArtifact as a, deepFreezeCandidate as at, consumePreparedCandidateExecution as b, CANDIDATE_KNOWLEDGE_ROOT_ENV as c, omitTopLevelDigest as ct, verifiedResourceTextByDigest as d, parseExactAgentProfileDiff as et, verifyAgentCandidateBundle as f, candidateClaimFileInternals as g, InMemoryAgentCandidateExecutionClaimStore as h, persistCandidateModelSettlementEvidence as i, canonicalCandidateDocument as it, candidateCleanupDeadline as j, verifyBytes as k, candidateKnowledgeExecutionPaths as l, sha256Bytes as lt, usdToNanos as m, executePreparedAgentCandidate as n, canonicalCandidateBytes as nt, sealAgentCandidateExecutorStopAcknowledgement as o, embeddedCandidateArtifact as ot, sealAgentCandidateModelSettlement as p, assertCandidateProfileBinding as q, RecoveryAgentCandidateTraceStore as r, canonicalCandidateDigest$1 as rt, CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV as s, immutableCandidateValue as st, prepareAgentCandidateExecution as t, parseExactCandidateProfile as tt, AGENT_CANDIDATE_EXECUTION_SUPPORT as u, verifyCanonicalCandidateDocument as ut, assertPreparedCandidateIntegrity as v, readCandidateGitTreeFiles as w, CANDIDATE_TRACE_ENV as x, beginPreparedCandidateDisposal as y, rejectedFinish as z };
 
-//# sourceMappingURL=prepare--8EvLqCr.js.map
+//# sourceMappingURL=prepare-DYWjVcPx.js.map