@tangle-network/agent-runtime 0.128.0 → 0.131.0

package/README.md

@@ -31,8 +31,15 @@ That file defines the scripted `worker`, `output`, and `validator` used below so
 Replace the scripted worker with a sandbox, CLI bridge, or router backend without changing the driver.
 
 ```ts
+import type { AgentProfile } from '@tangle-network/agent-interface'
 import { inProcessSandboxClient, runAgentRounds } from '@tangle-network/agent-runtime/kernel'
 
+const noteWriterProfile = {
+  name: 'note-writer',
+  harness: 'cli-base',
+  model: { provider: 'scripted', default: 'scripted/note-writer' },
+} satisfies AgentProfile
+
 const result = await runAgentRounds<Task, Note, 'refine' | 'pick-winner' | 'fail'>({
   task: { prompt: 'Write a one-line release note for one-click restore.' },
   driver: {
@@ -47,7 +54,7 @@ const result = await runAgentRounds<Task, Note, 'refine' | 'pick-winner' | 'fail
     decide: (history) =>
       history.some((shot) => shot.verdict?.valid) ? 'pick-winner' : history.length < 3 ? 'refine' : 'fail',
   },
-  agentRun: { profile: { name: 'note-writer' } as AgentProfile, taskToPrompt: (t) => t.prompt },
+  agentRun: { profile: noteWriterProfile, taskToPrompt: (t) => t.prompt },
   output,    // parses the worker's event stream into { note }
   validator, // pass/fail check: does the note mention "rollback"?
   ctx: { sandboxClient: worker },
@@ -60,9 +67,9 @@ Run it from a clone of this repo and you get exactly this:
 ```bash
 $ pnpm i && pnpm build
 $ pnpm tsx examples/quickstart/quickstart.ts
-shot 0: reject: "Shipped one-click restore."
-shot 1: PASS: "Shipped one-click restore with an instant rollback path."
-decision: pick-winner: winner: shot 1
+shot 0: reject — "Shipped one-click restore."
+shot 1: PASS — "Shipped one-click restore with an instant rollback path."
+decision: pick-winner — winner: shot 1
 ```
 
 The annotated version is [`examples/driver-loop`](./examples/driver-loop).
@@ -119,6 +126,7 @@ const result = await supervise(
   {
     name: 'supervisor',
     harness: 'cli-base',
+    model: { provider: 'tangle-router', default: process.env.TANGLE_MODEL! },
     prompt: {
       systemPrompt: 'Delegate to workers; do not solve the task yourself.',
     },
@@ -137,7 +145,12 @@ The profile is never changed.
 
 ```ts
 import { improve, officialGepa } from '@tangle-network/agent-runtime'
-import { canonicalCandidateDigest } from '@tangle-network/agent-interface'
+import { profileOptimizerModelCall } from '@tangle-network/agent-runtime/kernel'
+import {
+  type AgentProfile,
+  canonicalAgentProfileDigest,
+  canonicalCandidateDigest,
+} from '@tangle-network/agent-interface'
 
 const executionRef = canonicalCandidateDigest({
   deployment: process.env.AGENT_DEPLOYMENT_SHA!,
@@ -145,20 +158,42 @@ const executionRef = canonicalCandidateDigest({
   tools: process.env.AGENT_TOOLSET_SHA!,
 })
 
+const optimizerProfile = {
+  name: 'support-prompt-optimizer',
+  harness: 'cli-base',
+  model: {
+    provider: 'tangle-router',
+    default: process.env.OPTIMIZER_MODEL!,
+    metadata: { maxTokens: 16_384 },
+  },
+} satisfies AgentProfile
+const optimizerPricing = {
+  inputUsdPerMillion: Number(process.env.OPTIMIZER_INPUT_USD_PER_MILLION),
+  outputUsdPerMillion: Number(process.env.OPTIMIZER_OUTPUT_USD_PER_MILLION),
+}
 const optimizer = {
-  model: process.env.OPTIMIZER_MODEL!,
-  baseUrl: process.env.OPTIMIZER_BASE_URL!,
-  apiKey: process.env.OPTIMIZER_API_KEY!,
+  model: optimizerProfile.model.default,
+  call: profileOptimizerModelCall({
+    profile: optimizerProfile,
+    context: 'support-prompt optimizer',
+    executor: {
+      backend: 'router',
+      routerBaseUrl: process.env.OPTIMIZER_BASE_URL!,
+      routerKey: process.env.OPTIMIZER_API_KEY!,
+    },
+    pricing: optimizerPricing,
+  }),
+  callRef: canonicalCandidateDigest({
+    profile: canonicalAgentProfileDigest(optimizerProfile),
+    deployment: process.env.OPTIMIZER_DEPLOYMENT_SHA!,
+  }),
   budget: {
     maxCostUsd: 10,
     maxRequests: 50,
     maxRequestBytes: 2_000_000,
     maxResponseBytes: 2_000_000,
     maxOutputTokensPerRequest: 16_384,
-    pricing: {
-      inputUsdPerMillion: Number(process.env.OPTIMIZER_INPUT_USD_PER_MILLION),
-      outputUsdPerMillion: Number(process.env.OPTIMIZER_OUTPUT_USD_PER_MILLION),
-    },
+    pricing: optimizerPricing,
   },
 }
 
@@ -207,7 +242,7 @@ There is no local fallback.
 Install its optional Python process before using it:
 
 ```bash
-python -m pip install "agent-eval-rpc==0.143.0"
+python -m pip install "agent-eval-rpc==0.144.6"
 python -m pip install "gepa[full]==0.1.4"
 ```
 
@@ -221,14 +256,14 @@ python -m pip install "gepa[full] @ git+https://github.com/gepa-ai/gepa.git@f919
 Use `officialSkillOpt(...)` for Microsoft's SkillOpt:
 
 ```bash
-python -m pip install "agent-eval-rpc==0.143.0"
+python -m pip install "agent-eval-rpc==0.144.6"
 python -m pip install "skillopt @ git+https://github.com/microsoft/SkillOpt.git@61735e3922efc2b90c6d6cab561e62e98452ca90"
 ```
 
 SkillOpt 0.2.0's published wheel omits prompt files required by `ReflACTTrainer`, so the tested SkillOpt source revision remains necessary.
-SkillOpt and GEPA's standard reflection engine require `optimizer: { model, baseUrl, apiKey, budget }`.
+SkillOpt and GEPA's standard reflection engine require `optimizer: { model, call, callRef, budget }`.
 Agent-based GEPA engines may own their model connection instead.
-Agent Eval proxies those model calls, enforces the nested budget, and records their cost.
+Runtime owns those model calls through one exact `AgentProfile`; Agent Eval enforces the nested budget and records their measured cost and execution evidence without receiving provider credentials.
 `costCeiling` is the total limit for optimizer calls, candidate runs, judges, and final scoring.
 Runtime returns `hold` when any part of that cost is unknown.
 Runtime rejects a reported total above the limit.
@@ -269,7 +304,7 @@ It uses Runtime's isolated git worktrees and coding-agent candidate execution:
 ```ts
 const result = await improve({
   surface: 'code',
-  code: { repoRoot, baseRef, generator },
+  code: { repoRoot, baseRef, profile, generator },
   scenarios,
   judge,
   agent,
@@ -414,13 +449,27 @@ Here, `runProductAgent` is the application's existing entry point, not another l
 
 ```ts
 import {
-  createPrimeIntellectBackend,
+  primeIntellectExecutorConfig,
   runPrimeIntellectProgram,
 } from '@tangle-network/agent-runtime/primeintellect'
+import {
+  collectAgentTurn,
+  createExecutor,
+  streamAgentTurn,
+} from '@tangle-network/agent-runtime/kernel'
 
 await runPrimeIntellectProgram(async (episode) => {
-  const backend = createPrimeIntellectBackend(episode)
-  return runProductAgent({ task: episode.task, backend })
+  const profile = makeProductProfile({ model: episode.model.name })
+  return collectAgentTurn(
+    streamAgentTurn(
+      {
+        kind: 'executor',
+        profile,
+        factory: createExecutor(primeIntellectExecutorConfig(episode)),
+      },
+      episode.task.prompt,
+    ),
+  )
 })
 ```
 
@@ -480,6 +529,7 @@ All 29 live in [`examples/`](./examples).
 - New here? [`docs/concepts.md`](./docs/concepts.md), the mental model in plain terms.
 - [`docs/canonical-api.md`](./docs/canonical-api.md), find the primitive: "I want to ___ → use ___".
 - [`docs/api/primitive-catalog.md`](./docs/api/primitive-catalog.md), every export in one generated, never-stale list with its import path. Check it before building anything new.
+- [`docs/STABILITY.md`](./docs/STABILITY.md), what `@stable` / `@experimental` promise you, and how a symbol graduates.
 - [`docs/design.md`](./docs/design.md), the design philosophy and the internal research docs behind it: background reading, not required to use the package.
 - [`bench/HARNESS.md`](./bench/HARNESS.md), the experiment harness and how to run a benchmark.
 

package/dist/{activation-DhWJ3p8N.js → activation-BCzMOTaV.js}

@@ -1,5 +1,5 @@
-import { it as canonicalCandidateDocument, rt as canonicalCandidateDigest$1, st as immutableCandidateValue, ut as verifyCanonicalCandidateDocument } from "./prepare--8EvLqCr.js";
-import { C as agentImprovementTargetInput, S as agentImprovementTargetDigest, T as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal } from "./improvement-cycle-IJgCbKWQ.js";
+import { it as canonicalCandidateDocument, rt as canonicalCandidateDigest$1, st as immutableCandidateValue, ut as verifyCanonicalCandidateDocument } from "./prepare-DYWjVcPx.js";
+import { C as agentImprovementTargetInput, S as agentImprovementTargetDigest, T as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal } from "./improvement-cycle-Csp38cWg.js";
 import { agentImprovementActivationResultSchema, agentImprovementActivationSchema, agentProfileImprovementExperimentSchema } from "@tangle-network/agent-interface";
 //#region src/intelligence/activation.ts
 /** Create the exact result a product stores in the same transaction as its target write. */
@@ -201,4 +201,4 @@ function targetIdentity(target) {
 //#endregion
 export { executeAgentImprovementActivation as n, verifyAgentImprovementActivationResult as r, createAgentImprovementActivationResult as t };
 
-//# sourceMappingURL=activation-DhWJ3p8N.js.map
+//# sourceMappingURL=activation-BCzMOTaV.js.map

package/dist/{activation-DhWJ3p8N.js.map → activation-BCzMOTaV.js.map}

@@ -1 +1 @@
-{"version":3,"file":"activation-DhWJ3p8N.js","names":["canonicalCandidateDigest"],"sources":["../src/intelligence/activation.ts"],"sourcesContent":["import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;;AA6IA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}
+{"version":3,"file":"activation-BCzMOTaV.js","names":["canonicalCandidateDigest"],"sources":["../src/intelligence/activation.ts"],"sourcesContent":["import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;;AA6IA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}

package/dist/agent.d.ts

@@ -1,7 +1,6 @@
-import { x as RuntimeStreamEvent } from "./types-C9j4qg6l.js";
+import { E as SandboxClient, it as RuntimeStreamEvent, t as AgentRunSpec, w as OutputAdapter } from "./types-ebIY0dMG.js";
 import { a as createSurfaceImprovementProposer, c as SurfaceValidationIssue, d as validateSurfaces, i as SurfaceImprovementEdit, l as renderSurfaceIssues, n as DraftPatchInput, o as AgentSurfaces, r as DraftPatchOutput, s as ResolvedSurface, t as CreateSurfaceImprovementProposerOptions, u as resolveSubjectPath } from "./improvement-adapter-D5gwwoXQ.js";
-import { $f as assertProfileMaterialization, Gf as AgentProfileMaterializationAxis, Jf as DefineProfileMaterializationContractOptions, Kf as AssertProfileMaterializationOptions, Qf as ValidateProfileMaterializationOptions, Wf as AGENT_PROFILE_MATERIALIZATION_AXES, Xf as ProfileMaterializationContract, Yf as KnownAgentProfileMaterializationAxis, Zf as ProfileMaterializationIssue, ap as promptModelProfileMaterialization, cp as renderProfileMaterializationIssues, dp as worktreeCliProfileMaterialization, ep as controlProfileMaterialization, ip as promptControlProfileMaterialization, lp as sandboxActProfileMaterialization, np as fullProfileMaterialization, op as promptOnlyProfileMaterialization, qf as CanonicalAgentProfileMaterializationAxis, rp as profileMaterializationAxes, sp as promptResourceProfileMaterialization, tp as defineProfileMaterializationContract, up as validateProfileMaterialization } from "./index-BhZhQw77.js";
-import { E as SandboxClient, t as AgentRunSpec, w as OutputAdapter } from "./types-DnNGJ5Gz.js";
+import { Af as fullProfileMaterialization, Cf as KnownAgentProfileMaterializationAxis, Df as assertProfileMaterialization, Ef as ValidateProfileMaterializationOptions, Ff as promptResourceProfileMaterialization, If as renderProfileMaterializationIssues, Lf as sandboxActProfileMaterialization, Mf as promptControlProfileMaterialization, Nf as promptModelProfileMaterialization, Of as controlProfileMaterialization, Pf as promptOnlyProfileMaterialization, Rf as validateProfileMaterialization, Sf as DefineProfileMaterializationContractOptions, Tf as ProfileMaterializationIssue, bf as AssertProfileMaterializationOptions, jf as profileMaterializationAxes, kf as defineProfileMaterializationContract, vf as AGENT_PROFILE_MATERIALIZATION_AXES, wf as ProfileMaterializationContract, xf as CanonicalAgentProfileMaterializationAxis, yf as AgentProfileMaterializationAxis, zf as worktreeCliProfileMaterialization } from "./index-CoO7atyo.js";
 import { TraceAnalystDefinition } from "@tangle-network/agent-eval";
 import { AgentProfile as AgentProfile$1, AgentProfileFileMount, AgentProfileMcpServer } from "@tangle-network/agent-interface";
 import { SandboxEvent } from "@tangle-network/sandbox";

package/dist/agent.js

@@ -1,10 +1,9 @@
-import { At as controlProfileMaterialization, Bt as validateProfileMaterialization, Ft as promptModelProfileMaterialization, It as promptOnlyProfileMaterialization, Lt as promptResourceProfileMaterialization, Mt as fullProfileMaterialization, Nt as profileMaterializationAxes, Ot as AGENT_PROFILE_MATERIALIZATION_AXES, Pt as promptControlProfileMaterialization, Rt as renderProfileMaterializationIssues, Vt as worktreeCliProfileMaterialization, jt as defineProfileMaterializationContract, kt as assertProfileMaterialization, zt as sandboxActProfileMaterialization } from "./supervisor-DpjO0Gmy.js";
-import "./runtime-5uDVVfER.js";
-import { r as mapSandboxEvent } from "./sandbox-events-Yhd1GYWl.js";
-import { Mt as createSandboxForSpec } from "./supervise-CsTKbH9R.js";
+import { r as mapSandboxEvent } from "./sandbox-events-CRDwc5WN.js";
+import { Bt as defineProfileMaterializationContract, Gt as promptOnlyProfileMaterialization, Ht as profileMaterializationAxes, Jt as sandboxActProfileMaterialization, Kt as promptResourceProfileMaterialization, Lt as AGENT_PROFILE_MATERIALIZATION_AXES, Rt as assertProfileMaterialization, Ut as promptControlProfileMaterialization, Vt as fullProfileMaterialization, Wt as promptModelProfileMaterialization, X as createSandboxForSpec, Xt as worktreeCliProfileMaterialization, Yt as validateProfileMaterialization, qt as renderProfileMaterializationIssues, zt as controlProfileMaterialization } from "./supervisor-CV6Jh28D.js";
+import "./runtime-hiAABiTk.js";
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync, statSync } from "node:fs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { existsSync, readFileSync, statSync } from "node:fs";
 import { parseFindingSubject } from "@tangle-network/agent-eval/analyst";
 //#region src/agent/surfaces.ts
 /**

package/dist/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","names":[],"sources":["../src/agent/surfaces.ts","../src/agent/define-agent.ts","../src/agent/improvement-adapter.ts","../src/agent/sandbox-act.ts"],"sourcesContent":["/**\n * `AgentSurfaces` — declarative map of the mutable file/directory paths\n * the self-improvement loop can edit on behalf of an agent.\n *\n * The substrate uses this map to resolve every parsed `FindingSubject`\n * (from agent-eval) to a real on-disk path. No per-vertical glue;\n * no fabricated paths; no silent `existsSync(...)` skips that hide\n * misconfiguration from the operator.\n *\n * Surfaces are validated at `defineAgent` time — missing paths fail\n * loud with a list of every offender. A surface that's not needed\n * (e.g. an agent with no RAG corpora) is simply omitted; the loop\n * refuses to route those subjects rather than fabricating a target.\n */\n\nimport { existsSync, statSync } from 'node:fs'\nimport { isAbsolute, join, relative, resolve, sep } from 'node:path'\nimport type { FindingSubject } from '@tangle-network/agent-eval'\n\n/**\n * Surface declarations. Every path is repo-relative (or absolute) at\n * `defineAgent` time. At resolution time, paths are joined against the\n * agent's `repoRoot`.\n *\n * `systemPrompt`, `tools`, `personas` are DIRECTORIES; the loop appends\n * `<section>.md`, `<tool>/README.md`, `<persona-id>.yaml` etc.\n * `rubric`, `outputSchema` are SINGLE FILES; the loop edits them in\n * place.\n *\n * `knowledge` is the agent-knowledge root (typically `.agent-knowledge`);\n * `applyKnowledgeWriteBlocks` writes pages relative to it.\n *\n * Optional surfaces (`scaffolding`, `memory`, `rag`, `outputSchema`)\n * can be omitted — the loop will reject findings targeting them with a\n * clear log message instead of fabricating a path.\n */\nexport interface AgentSurfaces {\n  /** Directory containing one markdown file per system-prompt section. */\n  systemPrompt: string\n  /** Directory containing one subdir per tool (`<tool>/README.md`). */\n  tools: string\n  /** Single file (TypeScript module) defining the rubric weights + dimensions. */\n  rubric: string\n  /** Knowledge-base root; typically `.agent-knowledge`. */\n  knowledge: string\n  /** Directory containing one YAML/JSON file per persona. */\n  personas: string\n  /** Optional: directory containing scaffolding rules (precondition checks, retry policies). */\n  scaffolding?: string\n  /** Optional: memory store path (JSONL / SQLite / DB). */\n  memory?: string\n  /** Optional: directory containing RAG corpora (`<corpus>/<doc-id>.md`). */\n  rag?: string\n  /** Optional: single file defining the output schema (Zod / JSON Schema). */\n  outputSchema?: string\n  /** Optional: directory containing Agent Skill packages. */\n  skills?: string\n  /** Optional: directory containing MCP server/tool configuration. */\n  mcp?: string\n  /** Optional: directory containing hook definitions. */\n  hooks?: string\n  /** Optional: directory containing subagent definitions. */\n  subagents?: string\n  /** Optional: directory containing orchestration/workflow policies. */\n  workflows?: string\n  /** Optional: single file containing rollout-policy settings. */\n  rolloutPolicy?: string\n  /** Optional: single canonical AgentProfile file. */\n  agentProfile?: string\n  /** Optional: source root for code findings. */\n  code?: string\n}\n\nexport interface ResolvedSurface {\n  /** Absolute filesystem path the operator can `cat` / `vim`. */\n  absolutePath: string\n  /** Repo-relative path for PR descriptions, diffs, audit logs. */\n  repoRelativePath: string\n  /** Whether the path currently exists on disk. */\n  exists: boolean\n  /** The substrate's intent: edit an existing file or create a new one. */\n  intent: 'edit-existing' | 'create-new'\n}\n\n/**\n * Resolve a parsed `FindingSubject` to the file path the substrate\n * should edit (or create) on disk.\n *\n * Returns `null` when:\n *   - the subject targets a surface the agent didn't declare\n *     (e.g. `rag:*` when `surfaces.rag` is undefined), OR\n *   - the subject is a `cluster` (failure-mode emits these as evidence,\n *     not actionable mutations — they don't route to a file).\n *\n * Returns a `ResolvedSurface` with `intent: 'create-new'` when the\n * subject names a path that doesn't yet exist (e.g. a new wiki page).\n * The caller chooses whether to honour the create — for tightly-managed\n * surfaces like `systemPrompt` it's usually a contract violation\n * (the analyst named a section that doesn't exist); for `knowledge`\n * it's the whole point.\n */\nexport function resolveSubjectPath(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ResolvedSurface | null {\n  const candidates = candidatePathsForSubject(subject, surfaces)\n  if (candidates.length === 0) return null\n\n  // Probe candidates in order, preferring the first one that exists on disk.\n  // Lets the substrate accept both the flat `<section>.md` convention and\n  // the skill-dir `<section>/SKILL.md` convention without forcing one layout.\n  // When none exists, fall back to the first candidate (canonical create-new).\n  for (const rel of candidates) {\n    const abs = isAbsolute(rel) ? rel : join(repoRoot, rel)\n    if (existsSync(abs)) {\n      return { absolutePath: abs, repoRelativePath: rel, exists: true, intent: 'edit-existing' }\n    }\n  }\n  const fallback = candidates[0]!\n  const fallbackAbs = isAbsolute(fallback) ? fallback : join(repoRoot, fallback)\n  return {\n    absolutePath: fallbackAbs,\n    repoRelativePath: fallback,\n    exists: false,\n    intent: 'create-new',\n  }\n}\n\nfunction candidatePathsForSubject(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n): ReadonlyArray<string> {\n  switch (subject.kind) {\n    case 'knowledge.wiki':\n    case 'knowledge.stale':\n      return optionalPath(safeJoin(surfaces.knowledge, `${subject.slug}.md`))\n    case 'knowledge.claim':\n      // Claims land in a per-topic claims directory under the knowledge root.\n      return optionalPath(safeJoin(surfaces.knowledge, 'claims', `${slugify(subject.topic)}.md`))\n    case 'knowledge.raw':\n      return optionalPath(safeJoin(surfaces.knowledge, 'raw', `${subject.sourceId}.md`))\n    case 'system-prompt': {\n      const slug = slugify(subject.section)\n      // Prefer flat layout for create-new (canonical); probe skill-dir layout\n      // in case the existing repo (tax/legal/gtm/creative) uses\n      // `<section>/SKILL.md` already.\n      return [\n        safeJoin(surfaces.systemPrompt, `${slug}.md`),\n        safeJoin(surfaces.systemPrompt, slug, 'SKILL.md'),\n        safeJoin(surfaces.systemPrompt, slug, 'index.md'),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'skill': {\n      if (!surfaces.skills) return []\n      return [\n        safeJoin(surfaces.skills, subject.name, 'SKILL.md'),\n        safeJoin(surfaces.skills, `${subject.name}.md`),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'tool-doc':\n      if (subject.aspect) {\n        return optionalPath(safeJoin(surfaces.tools, subject.tool, `${slugify(subject.aspect)}.md`))\n      }\n      // tool-doc default: `<tool>/README.md`; also probe `<tool>.md` for flat\n      // tool-list repos.\n      return [\n        safeJoin(surfaces.tools, subject.tool, 'README.md'),\n        safeJoin(surfaces.tools, `${subject.tool}.md`),\n      ].filter((path): path is string => path !== null)\n    case 'new-tool':\n      return optionalPath(safeJoin(surfaces.tools, subject.name, 'README.md'))\n    case 'mcp':\n      if (!surfaces.mcp) return []\n      return subject.tool\n        ? optionalPath(safeJoin(surfaces.mcp, subject.server, `${subject.tool}.md`))\n        : [\n            safeJoin(surfaces.mcp, `${subject.server}.json`),\n            safeJoin(surfaces.mcp, subject.server, 'README.md'),\n          ].filter((path): path is string => path !== null)\n    case 'hook':\n      if (!surfaces.hooks) return []\n      return [\n        safeJoin(surfaces.hooks, `${subject.name}.md`),\n        safeJoin(surfaces.hooks, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'subagent':\n      if (!surfaces.subagents) return []\n      return [\n        safeJoin(surfaces.subagents, `${subject.name}.md`),\n        safeJoin(surfaces.subagents, `${subject.name}.yaml`),\n        safeJoin(surfaces.subagents, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'workflow':\n      if (!surfaces.workflows) return []\n      return [\n        safeJoin(surfaces.workflows, `${subject.name}.md`),\n        safeJoin(surfaces.workflows, `${subject.name}.yaml`),\n        safeJoin(surfaces.workflows, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'rollout-policy':\n      return surfaces.rolloutPolicy ? [surfaces.rolloutPolicy] : []\n    case 'agent-profile':\n      return surfaces.agentProfile ? [surfaces.agentProfile] : []\n    case 'code': {\n      if (!surfaces.code) return []\n      const path = safeJoin(surfaces.code, subject.path)\n      return path ? [path] : []\n    }\n    case 'rag':\n      if (!surfaces.rag) return []\n      return optionalPath(safeJoin(surfaces.rag, subject.corpus, `${subject.docId}.md`))\n    case 'memory':\n      if (!surfaces.memory) return []\n      return optionalPath(safeJoin(surfaces.memory, `${slugify(subject.key)}.json`))\n    case 'scaffolding':\n      if (!surfaces.scaffolding) return []\n      return optionalPath(safeJoin(surfaces.scaffolding, `${slugify(subject.concern)}.md`))\n    case 'output-schema':\n      if (!surfaces.outputSchema) return []\n      return [surfaces.outputSchema]\n    case 'websearch.outdated':\n    case 'prior-run-summary':\n      // Stale signals don't map to a single file — handled by the knowledge\n      // adapter as `agent-knowledge:stale:*` after operator review.\n      return []\n    case 'cluster':\n      // failure-mode cluster labels are evidence, not mutations.\n      return []\n  }\n}\n\nfunction safeJoin(root: string, ...children: string[]): string | null {\n  if (children.some((child) => child.includes('\\0') || isAbsolute(child))) return null\n  const rootAbsolute = resolve(root)\n  const targetAbsolute = resolve(rootAbsolute, ...children)\n  const escaped = relative(rootAbsolute, targetAbsolute)\n  if (escaped === '..' || escaped.startsWith(`..${sep}`) || isAbsolute(escaped)) return null\n  return join(root, ...children)\n}\n\nfunction optionalPath(path: string | null): string[] {\n  return path ? [path] : []\n}\n\nfunction slugify(s: string): string {\n  return (\n    s\n      .toLowerCase()\n      .replace(/[^a-z0-9-]+/g, '-')\n      .replace(/^-+|-+$/g, '')\n      .slice(0, 200) || 'untitled'\n  )\n}\n\n/**\n * Validate that every declared surface exists on disk under `repoRoot`.\n *\n * Returns an array of `SurfaceValidationIssue` — empty when all required\n * surfaces resolve. `defineAgent` throws with the issues rendered, so\n * a misconfigured manifest fails at startup (not at the first finding\n * the loop produces 20 minutes later).\n */\nexport interface SurfaceValidationIssue {\n  surface: keyof AgentSurfaces\n  path: string\n  reason: 'missing' | 'not-directory' | 'not-file'\n}\n\n/** Validate an `AgentSurfaces` map on disk — missing paths fail loud at `defineAgent` time instead of silently skipping self-improvement edits. */\nexport function validateSurfaces(\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ReadonlyArray<SurfaceValidationIssue> {\n  const issues: SurfaceValidationIssue[] = []\n  const dirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'systemPrompt',\n    'tools',\n    'personas',\n    'knowledge',\n  ]\n  const fileSurfaces: ReadonlyArray<keyof AgentSurfaces> = ['rubric']\n  const optionalDirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'scaffolding',\n    'memory',\n    'rag',\n    'skills',\n    'mcp',\n    'hooks',\n    'subagents',\n    'workflows',\n    'code',\n  ]\n  const optionalFileSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'outputSchema',\n    'rolloutPolicy',\n    'agentProfile',\n  ]\n\n  for (const key of dirSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    }\n  }\n  for (const key of fileSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  for (const key of [...optionalDirSurfaces, ...optionalFileSurfaces]) {\n    const p = surfaces[key] as string | undefined\n    if (p === undefined) continue\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n      continue\n    }\n    const expectedDirectory = optionalDirSurfaces.includes(key)\n    if (expectedDirectory && !statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    } else if (!expectedDirectory && !statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  return issues\n}\n\n/** Format a list of surface validation issues into a human-readable error string. */\nexport function renderSurfaceIssues(\n  issues: ReadonlyArray<SurfaceValidationIssue>,\n  repoRoot: string,\n): string {\n  if (issues.length === 0) return ''\n  const lines = issues.map(\n    (i) => `  - ${i.surface}: ${i.path ? `\"${i.path}\"` : '<not set>'} (${i.reason})`,\n  )\n  return [\n    `Agent surface validation failed against repoRoot=${repoRoot}:`,\n    ...lines,\n    '',\n    'Fix the manifest: every required surface must point at an existing',\n    'directory (systemPrompt / tools / personas / knowledge) or file',\n    '(rubric). Optional surfaces (scaffolding / memory / rag / outputSchema)',\n    'may be omitted; the loop will reject findings targeting omitted',\n    'surfaces rather than fabricating a path.',\n  ].join('\\n')\n}\n","/**\n * `defineAgent` — typed, validated manifest API for declarative agent\n * configuration. The substrate consumes this manifest to wire the\n * canonical eval pattern + analyst self-improvement loop without any\n * per-vertical glue.\n *\n * Design goal: scale to 1000s of vertical agents. Every agent declares\n * its surfaces, rubric, runtime, and analyst configuration in ~50 lines.\n * No per-vertical `ImprovementProposalSource`. No per-vertical CLI. No\n * fabricated paths.\n *\n * Validation: `defineAgent` runs `validateSurfaces` synchronously and\n * throws a structured error if any required surface is missing on\n * disk. The cost is one filesystem stat per surface (cheap); the\n * benefit is a manifest that can't ship broken.\n */\n\nimport type { TraceAnalystDefinition } from '@tangle-network/agent-eval'\nimport type { RuntimeStreamEvent } from '../types'\nimport { type AgentSurfaces, renderSurfaceIssues, validateSurfaces } from './surfaces'\n\n// ── manifest ─────────────────────────────────────────────────────────\n\n/**\n * The full agent manifest. Each agent ships ONE of these.\n *\n * Generics:\n *   `TPersona` — the agent's persona shape (loaded from\n *     `surfaces.personas`). Defaults to `unknown` so the substrate's\n *     persona discovery (`loadPersonas`) can accept anything; per-agent\n *     code re-narrows when it matters.\n *   `TRunOutput` — the shape `runtime.act` returns. Used by the rubric\n *     scorers and emitted into the trace.\n */\nexport interface AgentManifest<TPersona = unknown, TRunOutput = unknown> {\n  /**\n   * Stable identifier — used as `projectId` in traces, as the analyst\n   * loop's `runId` prefix, and as the namespace under which findings\n   * are persisted. MUST match the agent's repo name to keep\n   * cross-repo telemetry joinable.\n   */\n  id: string\n\n  /**\n   * Filesystem root the substrate resolves surface paths against.\n   * Typically `process.cwd()` or a fixed absolute path. Use an\n   * absolute path when the agent's tests may run from subdirectories\n   * (vitest sometimes shifts cwd).\n   */\n  repoRoot: string\n\n  /**\n   * Map of mutable surfaces the self-improvement loop can edit. See\n   * `AgentSurfaces` — required: `systemPrompt`, `tools`, `rubric`,\n   * `knowledge`, `personas`. Optional: `scaffolding`, `memory`, `rag`,\n   * `outputSchema`.\n   *\n   * Every required path is validated at `defineAgent` time. Missing\n   * paths throw with the full list of offenders.\n   */\n  surfaces: AgentSurfaces\n\n  /**\n   * Rubric the substrate uses to score each run. Dimensions × weights\n   * × judges. The substrate computes the weighted composite and\n   * stamps it into the RunRecord.\n   */\n  rubric: AgentRubric<TRunOutput>\n\n  /**\n   * Runtime adapter — how the substrate INVOKES the agent against a\n   * persona. The `act` function takes a persona + a context (with the\n   * tracer the substrate threads through for span emission) and\n   * returns the run output the rubric will score.\n   *\n   * The agent's existing production runtime goes in here; the\n   * substrate is intentionally thin around it.\n   */\n  runtime: AgentRuntime<TPersona, TRunOutput>\n\n  /**\n   * Persona discovery — the substrate loads personas via this function\n   * at eval start. Can read from `surfaces.personas`, an API, or be\n   * hardcoded. The substrate calls it once per `runAgentEval` call;\n   * persona ordering is preserved.\n   */\n  personas: () => Promise<ReadonlyArray<TPersona>>\n\n  /**\n   * Analyst kinds the substrate runs against each persona's trace.\n   * Defaults to `DEFAULT_TRACE_ANALYST_KINDS` from agent-eval. Per-agent\n   * authors can prune (e.g. skip `knowledge-poisoning` when there's no\n   * knowledge base) or extend (custom domain kinds).\n   *\n   * Empty array disables the loop — useful for `pnpm eval --no-analyst`.\n   */\n  analystKinds: ReadonlyArray<TraceAnalystDefinition>\n\n  /**\n   * Analyst LLM configuration. The substrate uses these for all four\n   * kinds (override per-kind via `analystKinds` if needed).\n   */\n  analyst: AnalystConfig\n}\n\nexport interface AgentRubric<TRunOutput> {\n  /** Dimensions composing the weighted score. Weights sum to 1.0 by convention. */\n  dimensions: ReadonlyArray<RubricDimension<TRunOutput>>\n  /**\n   * Optional judges layered on top of deterministic dimensions. Each\n   * judge returns a score per dimension; the substrate averages judges\n   * (mean by default) for the LLM contribution.\n   */\n  judges?: ReadonlyArray<JudgeConfig<TRunOutput>>\n}\n\nexport interface RubricDimension<TRunOutput> {\n  /** Unique identifier — appears in finding subjects (`rubric:<id>`). */\n  id: string\n  /** 0..1 — weight in the composite. */\n  weight: number\n  /**\n   * Deterministic scorer: given the persona + run output, returns a\n   * 0..1 score. The substrate sums weight × score across dimensions\n   * for the deterministic composite; judges supplement subjective dims.\n   */\n  score: (input: { persona: unknown; output: TRunOutput }) => number\n  /** Optional human-readable label for reports. */\n  label?: string\n}\n\nexport interface JudgeConfig<TRunOutput> {\n  /** Judge identifier — appears in trace spans + manifest. */\n  id: string\n  /** Model snapshot to invoke. Pin the snapshot (`claude-sonnet-4-6@2025-04-15`); the validator rejects bare aliases. */\n  model: string\n  /** Dimensions this judge scores. */\n  dimensions: ReadonlyArray<string>\n  /**\n   * Optional rubric anchors — text examples the judge sees as a\n   * few-shot prompt to calibrate. STRONGLY recommended for subjective\n   * dimensions; required by the calibration gate (Pearson ≥0.7).\n   */\n  anchors?: ReadonlyArray<{ input: string; output: TRunOutput; expected: Record<string, number> }>\n}\n\nexport interface AgentRuntime<TPersona, TRunOutput> {\n  /**\n   * Invoke the agent against one persona. Returns BOTH:\n   *   - `events`: an `AsyncIterable<RuntimeStreamEvent>` the chat-centric\n   *     product consumes verbatim (SSE / WebSocket / inline render).\n   *     **Streaming is mandatory — never collapse this to a single Promise.**\n   *     The agent's existing `runChatTurn` (or equivalent async generator)\n   *     plugs in here directly.\n   *   - `output`: a `Promise<TRunOutput>` resolved AFTER the event stream\n   *     drains. The eval substrate awaits this for rubric scoring; chat\n   *     products usually ignore it (they already rendered incrementally).\n   *\n   * Implementation contract:\n   *   1. `act` MUST return immediately (synchronous construction of the\n   *      `events` iterator + the `output` promise).\n   *   2. Iterating `events` drives the underlying LLM/tool calls — the\n   *      caller chooses when to consume.\n   *   3. `output` resolves only after the iterator yields its terminal\n   *      event (typically `task_end`); see `collectAgentRun` helper.\n   *\n   * `ctx.emitter` is the substrate-threaded `TraceEmitter` — runtimes\n   * SHOULD record LLM/tool spans through it for capture integrity.\n   * `ctx.deadlineMs` is wall-clock; the runtime SHOULD honour for graceful\n   * cancel. `ctx.signal` is the standard abort signal.\n   */\n  act: (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput>\n}\n\nexport interface AgentRunInvocation<TRunOutput> {\n  /** Live stream of typed runtime events. Consumed by chat UX directly. */\n  events: AsyncIterable<RuntimeStreamEvent>\n  /** Final structured output the rubric scores. Resolves after `events` drains. */\n  output: Promise<TRunOutput>\n}\n\n/**\n * Stub for agents whose `runtime.act` is not yet wired to the substrate's\n * eval path. Preserves the streaming contract (empty event stream + a\n * rejected `output` promise that tells the caller exactly what to fix).\n *\n * Per-vertical manifests usually start with this stub and replace it with\n * the agent's real streaming runtime (`runChatTurn` or equivalent) once\n * the eval path consumes the manifest end-to-end.\n */\nexport function unimplementedAgentRun<TRunOutput = unknown>(\n  reason = 'AgentRuntime.act is not yet wired for this manifest',\n): AgentRunInvocation<TRunOutput> {\n  return {\n    events: (async function* empty(): AsyncIterable<RuntimeStreamEvent> {})(),\n    output: Promise.reject(new Error(reason)),\n  }\n}\n\n/**\n * Drain `act`'s `events` into an array AND await its `output`. Useful for\n * eval / outcome-measurement code paths that don't care about live\n * rendering. The events array is preserved so the substrate can inspect\n * tool calls / readiness / questions retrospectively.\n *\n * IMPORTANT: chat-centric UX MUST NOT call this — it defeats streaming\n * (no incremental render). Use `for await (const ev of invocation.events)`\n * directly in the chat surface.\n */\nexport async function collectAgentRun<TRunOutput>(\n  invocation: AgentRunInvocation<TRunOutput>,\n): Promise<{ events: ReadonlyArray<RuntimeStreamEvent>; output: TRunOutput }> {\n  const events: RuntimeStreamEvent[] = []\n  for await (const ev of invocation.events) events.push(ev)\n  const output = await invocation.output\n  return { events, output }\n}\n\nexport interface AgentRunContext {\n  /** Substrate-managed trace emitter. */\n  emitter: import('@tangle-network/agent-eval').TraceEmitter\n  /** Stable run id for this persona × variant cell. */\n  runId: string\n  /** Variant the runtime is exercising (e.g. `'baseline'`, `'source-grounded'`). */\n  variantId?: string\n  /** Wall-clock deadline (epoch ms). The runtime SHOULD honour for graceful cancel. */\n  deadlineMs?: number\n  /** Optional abort signal. */\n  signal?: AbortSignal\n}\n\nexport interface AnalystConfig {\n  /** Model the analyst kinds use. Override per-kind via `analystKinds[i].cost.models`. */\n  model: string\n  /** Optional total budget across all kinds for one run. Substrate enforces via `BudgetGuard`. */\n  budgetUsd?: number\n  /** Backend hint for the AxAIService factory — same shape every kind uses. */\n  backend?: {\n    name?: 'openai' | 'router'\n    apiKey?: string\n    baseUrl?: string\n  }\n}\n\n// ── factory + validation ─────────────────────────────────────────────\n\n/** Thrown when `defineAgent` finds a required surface missing on disk. */\nexport class AgentManifestError extends Error {\n  constructor(\n    message: string,\n    public readonly agentId: string,\n    public readonly issues: ReadonlyArray<unknown> = [],\n  ) {\n    super(message)\n    this.name = 'AgentManifestError'\n  }\n}\n\n/**\n * Construct a validated agent manifest. Throws `AgentManifestError`\n * if any required surface is missing on disk.\n *\n * Generics: pass your persona / output types if you want narrowed\n * `runtime.act` signatures:\n *   `defineAgent<TaxPersona, TaxRunOutput>({ ... })`\n *\n * Most callers don't need the generics — the substrate operates on\n * `unknown` payloads internally and the manifest's `score` /\n * `runtime.act` see the typed shapes via TypeScript inference at\n * the call site.\n */\nexport function defineAgent<TPersona = unknown, TRunOutput = unknown>(\n  manifest: AgentManifest<TPersona, TRunOutput>,\n): AgentManifest<TPersona, TRunOutput> {\n  if (!manifest.id || manifest.id.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `id` is required', manifest.id ?? '')\n  }\n  if (!manifest.repoRoot || manifest.repoRoot.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `repoRoot` is required', manifest.id)\n  }\n  const issues = validateSurfaces(manifest.surfaces, manifest.repoRoot)\n  if (issues.length > 0) {\n    throw new AgentManifestError(\n      renderSurfaceIssues(issues, manifest.repoRoot),\n      manifest.id,\n      issues,\n    )\n  }\n  // Lightweight rubric sanity: weights sum to ~1.0 (no hard requirement —\n  // the substrate normalizes — but flag wildly miscalibrated weights).\n  const total = manifest.rubric.dimensions.reduce((acc, d) => acc + d.weight, 0)\n  if (manifest.rubric.dimensions.length > 0 && (total < 0.5 || total > 1.5)) {\n    throw new AgentManifestError(\n      `defineAgent(${manifest.id}): rubric dimension weights sum to ${total.toFixed(3)} — should be ~1.0`,\n      manifest.id,\n    )\n  }\n  return manifest\n}\n","/**\n * Surface improvement proposer — resolves analyst findings into LLM-drafted\n * candidate patches without changing the caller's repository.\n *\n * The proposer parses each finding's `subject` via\n * `parseFindingSubject` (agent-eval), resolves it to a real file path\n * via the agent's `AgentSurfaces`, reads the current content, and asks\n * an LLM to draft a unified-diff patch given the finding + current\n * content + per-kind editing-discipline rules.\n *\n * Fail-loud rules:\n *   - Findings whose subject doesn't parse → counted in `errors`.\n *   - Findings whose subject targets an undeclared surface → counted in\n *     `errors` with the offending kind in the message.\n *   - Findings whose target path doesn't exist AND the kind isn't a\n *     create-new variant (`new-tool`, `knowledge.wiki`) → counted in\n *     `errors` with the resolved path in the message.\n *   - LLM drafts that fail JSON-schema validation → counted in\n *     `errors` with the schema issue.\n *\n * No silent skips. Every dropped finding has a recorded reason the\n * loop's report surfaces.\n */\n\nimport { createHash } from 'node:crypto'\nimport { readFileSync } from 'node:fs'\nimport type { AnalystFinding, FindingSubject } from '@tangle-network/agent-eval'\nimport { parseFindingSubject } from '@tangle-network/agent-eval/analyst'\nimport type { ImprovementProposalSource } from '../analyst-loop/types'\nimport type { AgentSurfaces, ResolvedSurface } from './surfaces'\nimport { resolveSubjectPath } from './surfaces'\n\n// ── proposal shape ───────────────────────────────────────────────────\n\nexport interface SurfaceImprovementEdit {\n  /** Stable id derived from the source finding so re-proposals are idempotent. */\n  id: string\n  /** The finding that produced this edit — for revert + audit trail. */\n  sourceFindingId: string\n  /** Parsed subject; included so the apply step doesn't re-parse. */\n  subject: FindingSubject\n  /** Resolved on-disk target. */\n  target: ResolvedSurface\n  /** SHA-256 of the current file content the patch was drafted against. */\n  baseSha256: string\n  /** Unified-diff patch the LLM drafted (relative to `target.absolutePath`). */\n  patch: string\n  /** One-line summary the operator sees in the report / PR title. */\n  summary: string\n  /** Multi-line rationale for the PR body — finding context + LLM reasoning. */\n  rationale: string\n  /** Carry-forward from the finding so the apply gate can check the threshold. */\n  confidence: number\n  /** Carry-forward severity for prioritization. */\n  severity: AnalystFinding['severity']\n}\n\nexport interface CreateSurfaceImprovementProposerOptions {\n  surfaces: AgentSurfaces\n  repoRoot: string\n  /**\n   * LLM-draft callback. Given a finding + current file content + the\n   * resolved target, returns a unified-diff patch + summary + rationale.\n   *\n   * Required — the substrate doesn't ship a hardcoded prompt; the agent\n   * author picks the model (Haiku for cheap routine drafts, Sonnet for\n   * substantive prompt rewrites, etc.) via this callback.\n   */\n  draftPatch: (input: DraftPatchInput) => Promise<DraftPatchOutput>\n  /**\n   * When the resolved target doesn't exist, allow the substrate to\n   * CREATE the file (for `knowledge.wiki`, `new-tool` subjects). Default\n   * true for those kinds, false for `system-prompt` / `rubric` / etc.\n   * (named sections that don't exist are a contract violation, not a\n   * scaffolding opportunity).\n   */\n  allowCreateForKinds?: ReadonlyArray<FindingSubject['kind']>\n}\n\nexport interface DraftPatchInput {\n  finding: AnalystFinding\n  subject: FindingSubject\n  target: ResolvedSurface\n  /** Current file content (empty string when `intent === 'create-new'`). */\n  currentContent: string\n}\n\nexport interface DraftPatchOutput {\n  /** Unified diff against the current file content. Empty string skips this finding. */\n  patch: string\n  /** One-line summary for the operator. */\n  summary: string\n  /** Multi-line rationale for the PR body. */\n  rationale: string\n}\n\n// ── factory ──────────────────────────────────────────────────────────\n\nconst DEFAULT_CREATE_KINDS: ReadonlyArray<FindingSubject['kind']> = [\n  'knowledge.wiki',\n  'knowledge.claim',\n  'knowledge.raw',\n  'new-tool',\n]\n\n/** Resolve each finding to a real surface and draft a detached patch candidate. */\nexport function createSurfaceImprovementProposer(\n  opts: CreateSurfaceImprovementProposerOptions,\n): ImprovementProposalSource<SurfaceImprovementEdit> {\n  const allowCreate = opts.allowCreateForKinds ?? DEFAULT_CREATE_KINDS\n\n  return {\n    async proposeFromFindings(findings) {\n      const edits: SurfaceImprovementEdit[] = []\n      const errors: Array<{ findingId: string; subject: string; message: string }> = []\n      let skipped = 0\n\n      for (const f of findings) {\n        const subject = parseFindingSubject(f.subject)\n        if (subject === null) {\n          if (f.subject !== undefined) {\n            errors.push({\n              findingId: f.finding_id,\n              subject: f.subject,\n              message: 'subject does not parse against the finding-subject grammar',\n            })\n          } else {\n            // Subject-less findings are descriptive, not actionable —\n            // legitimate; count in `skipped` not `errors`.\n            skipped += 1\n          }\n          continue\n        }\n\n        // `cluster` findings (failure-mode) are evidence, not mutations.\n        if (subject.kind === 'cluster') {\n          skipped += 1\n          continue\n        }\n\n        // Knowledge findings flow to the knowledge proposal source so they do not double-route.\n        if (subject.kind.startsWith('knowledge.')) {\n          skipped += 1\n          continue\n        }\n\n        const target = resolveSubjectPath(subject, opts.surfaces, opts.repoRoot)\n        if (target === null) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `subject kind \"${subject.kind}\" targets an undeclared surface; declare it in AgentSurfaces or stop emitting this subject`,\n          })\n          continue\n        }\n\n        if (target.intent === 'create-new' && !allowCreate.includes(subject.kind)) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `target ${target.repoRelativePath} does not exist; the kind \"${subject.kind}\" requires an existing target (analyst named a section that isn't in the codebase)`,\n          })\n          continue\n        }\n\n        const currentContent = target.exists ? readFileSync(target.absolutePath, 'utf-8') : ''\n\n        let draft: DraftPatchOutput\n        try {\n          draft = await opts.draftPatch({ finding: f, subject, target, currentContent })\n        } catch (err) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `draftPatch threw: ${err instanceof Error ? err.message : String(err)}`,\n          })\n          continue\n        }\n\n        if (draft.patch.trim().length === 0) {\n          skipped += 1\n          continue\n        }\n\n        edits.push({\n          id: `imp-${f.finding_id}`,\n          sourceFindingId: f.finding_id,\n          subject,\n          target,\n          baseSha256: sha256(currentContent),\n          patch: draft.patch,\n          summary: draft.summary,\n          rationale: draft.rationale,\n          confidence: f.confidence,\n          severity: f.severity,\n        })\n      }\n\n      return { edits, skipped, errors }\n    },\n  }\n}\n\nfunction sha256(s: string): string {\n  return createHash('sha256').update(s, 'utf-8').digest('hex')\n}\n","/**\n * Sandbox bridge for `AgentRuntime.act` — prod-faithful eval execution.\n *\n * The point of this adapter is parity: the eval substrate must run the agent\n * through the SAME profile the production chat turn uses, or scorecard numbers\n * grade a profile that never ships. `createSandboxAct` boots a sandbox with the\n * agent's profile (the caller's `baseProfile`, with optional per-persona\n * overrides) through the loop kernel's own {@link createSandboxForSpec},\n * streams the `streamPrompt` events mapped to the `RuntimeStreamEvent`\n * vocabulary, and resolves the `OutputAdapter`-parsed output for rubric scoring\n * — satisfying the `act` streaming contract with one code path shared by chat\n * and eval.\n *\n * Agents with a bespoke streaming chat turn should wire THAT into `act`\n * directly (the contract is designed for it); this adapter is the default for\n * agents whose turn is a plain prod-profile sandbox dispatch — notably the\n * agents agent-builder generates.\n */\n\nimport type {\n  AgentProfile,\n  AgentProfileFileMount,\n  AgentProfileMcpServer,\n} from '@tangle-network/agent-interface'\nimport type { SandboxEvent } from '@tangle-network/sandbox'\nimport type { AgentRunSpec, OutputAdapter, SandboxClient } from '../runtime'\nimport { mapSandboxEvent } from '../runtime'\nimport { createSandboxForSpec } from '../runtime/run-loop'\nimport type { RuntimeStreamEvent } from '../types'\nimport type { AgentRunContext, AgentRunInvocation } from './define-agent'\nimport {\n  type AgentProfileMaterializationAxis,\n  assertProfileMaterialization,\n  sandboxActProfileMaterialization,\n} from './profile-materialization'\n\n/** Per-persona profile-merge slots applied over the base profile (§1.5: the caller authors the\n *  per-persona profile). Each slot overlays the base; an absent slot leaves the base untouched. */\nexport interface SandboxActComposeOverrides {\n  /** Replace the base profile's system prompt (e.g. a workspace-augmented prompt). */\n  systemPrompt?: string\n  /** Extra file mounts layered after the base profile's `resources.files`. */\n  extraFiles?: AgentProfileFileMount[]\n  /** Override the profile `name`. Defaults to the base profile's name. */\n  name?: string\n  /** Box built-in tool ON/OFF flags merged over the base profile's `tools` (overlay wins per key). */\n  tools?: Record<string, boolean>\n  /** MCP connections merged over the base profile's `mcp` (overlay wins per key). */\n  mcpConnections?: Record<string, AgentProfileMcpServer>\n}\n\nexport interface CreateSandboxActOptions<TPersona, TRunOutput> {\n  /** Canonical agent profile — the same one the prod chat turn uses. */\n  baseProfile: AgentProfile\n  /** Sandbox client used to boot the per-run sandbox. */\n  sandboxClient: SandboxClient\n  /** Persona → prompt. Pure; the eval cell's input. */\n  buildPrompt: (persona: TPersona) => string\n  /** Sandbox event stream → typed output the rubric scores. */\n  output: OutputAdapter<TRunOutput>\n  /**\n   * Per-persona profile overrides (workspace-augmented system prompt, extra\n   * file mounts, tool flags, MCP connections). Overlaid onto `baseProfile`.\n   */\n  compose?: (persona: TPersona) => SandboxActComposeOverrides\n  /** Sandbox-SDK overrides forwarded to `createSandboxForSpec`. */\n  sandboxOverrides?: AgentRunSpec<unknown>['sandboxOverrides']\n  /** Optional changed axes the caller expects this path to carry. */\n  requiredProfileAxes?: readonly AgentProfileMaterializationAxis[]\n  /** Stable run name surfaced in mapped `llm_call` events. */\n  name?: string\n  /** Override the `SandboxEvent → RuntimeStreamEvent` mapper. */\n  mapEvent?: (\n    event: SandboxEvent,\n    opts: { agentRunName?: string },\n  ) => RuntimeStreamEvent | undefined\n}\n\n/**\n * Build an `AgentRuntime.act` implementation backed by a single prod-profile\n * sandbox run. The returned function honours the `act` contract: it returns\n * synchronously with a live `events` iterator and an `output` promise that\n * resolves only after the iterator drains.\n */\nexport function createSandboxAct<TPersona, TRunOutput>(\n  options: CreateSandboxActOptions<TPersona, TRunOutput>,\n): (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput> {\n  assertProfileMaterialization({\n    contract: sandboxActProfileMaterialization,\n    changedAxes: options.requiredProfileAxes ?? [],\n    context: 'createSandboxAct',\n  })\n  const mapEvent = options.mapEvent ?? mapSandboxEvent\n\n  return (persona: TPersona, ctx: AgentRunContext): AgentRunInvocation<TRunOutput> => {\n    const profile = applyComposeOverrides(options.baseProfile, options.compose?.(persona))\n    const agentRunName = options.name ?? profile.name ?? 'agent'\n    const message = options.buildPrompt(persona)\n    const signal = ctx.signal ?? new AbortController().signal\n\n    const raw: SandboxEvent[] = []\n    let settle!: (value: TRunOutput) => void\n    let fail!: (err: unknown) => void\n    const output = new Promise<TRunOutput>((resolve, reject) => {\n      settle = resolve\n      fail = reject\n    })\n    // The output promise rejects when the stream errors; if the caller ignores\n    // `output` (chat UX) the rejection is still observed by the events iterator\n    // throwing. Attach a no-op catch so an ignored rejection is never \"unhandled\".\n    output.catch(() => {})\n\n    const spec: AgentRunSpec<unknown> = {\n      profile,\n      taskToPrompt: () => message,\n      name: agentRunName,\n      ...(options.sandboxOverrides ? { sandboxOverrides: options.sandboxOverrides } : {}),\n    }\n\n    async function* events(): AsyncIterable<RuntimeStreamEvent> {\n      try {\n        const box = await createSandboxForSpec(options.sandboxClient, spec, signal)\n        for await (const event of box.streamPrompt(message, { signal })) {\n          raw.push(event)\n          const mapped = mapEvent(event, { agentRunName })\n          if (mapped) yield mapped\n        }\n        settle(options.output.parse(raw))\n      } catch (err) {\n        fail(err)\n        throw err\n      }\n    }\n\n    return { events: events(), output }\n  }\n}\n\n/** Overlay the per-persona overrides onto the base profile. Each slot merges over the base; an\n *  absent override leaves the base profile untouched. */\nfunction applyComposeOverrides(\n  base: AgentProfile,\n  overrides: SandboxActComposeOverrides | undefined,\n): AgentProfile {\n  if (!overrides) return base\n  const prompt = overrides.systemPrompt\n    ? { ...base.prompt, systemPrompt: overrides.systemPrompt }\n    : base.prompt\n  const mergedTools = overrides.tools ? { ...(base.tools ?? {}), ...overrides.tools } : base.tools\n  const mergedMcp = overrides.mcpConnections\n    ? { ...(base.mcp ?? {}), ...overrides.mcpConnections }\n    : base.mcp\n  const baseFiles = base.resources?.files ?? []\n  const mergedFiles: AgentProfileFileMount[] = overrides.extraFiles?.length\n    ? [...baseFiles, ...overrides.extraFiles]\n    : [...baseFiles]\n  return {\n    ...base,\n    name: overrides.name ?? base.name,\n    prompt,\n    ...(mergedTools ? { tools: mergedTools } : {}),\n    ...(mergedMcp ? { mcp: mergedMcp } : {}),\n    resources: { ...base.resources, files: mergedFiles },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqGA,SAAgB,mBACd,SACA,UACA,UACwB;CACxB,MAAM,aAAa,yBAAyB,SAAS,QAAQ;CAC7D,IAAI,WAAW,WAAW,GAAG,OAAO;CAMpC,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,MAAM,WAAW,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;EACtD,IAAI,WAAW,GAAG,GAChB,OAAO;GAAE,cAAc;GAAK,kBAAkB;GAAK,QAAQ;GAAM,QAAQ;EAAgB;CAE7F;CACA,MAAM,WAAW,WAAW;CAE5B,OAAO;EACL,cAFkB,WAAW,QAAQ,IAAI,WAAW,KAAK,UAAU,QAAQ;EAG3E,kBAAkB;EAClB,QAAQ;EACR,QAAQ;CACV;AACF;AAEA,SAAS,yBACP,SACA,UACuB;CACvB,QAAQ,QAAQ,MAAhB;EACE,KAAK;EACL,KAAK,mBACH,OAAO,aAAa,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI,CAAC;EACxE,KAAK,mBAEH,OAAO,aAAa,SAAS,SAAS,WAAW,UAAU,GAAG,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC;EAC5F,KAAK,iBACH,OAAO,aAAa,SAAS,SAAS,WAAW,OAAO,GAAG,QAAQ,SAAS,IAAI,CAAC;EACnF,KAAK,iBAAiB;GACpB,MAAM,OAAO,QAAQ,QAAQ,OAAO;GAIpC,OAAO;IACL,SAAS,SAAS,cAAc,GAAG,KAAK,IAAI;IAC5C,SAAS,SAAS,cAAc,MAAM,UAAU;IAChD,SAAS,SAAS,cAAc,MAAM,UAAU;GAClD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD;EACA,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,CACL,SAAS,SAAS,QAAQ,QAAQ,MAAM,UAAU,GAClD,SAAS,SAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAChD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAElD,KAAK;GACH,IAAI,QAAQ,QACV,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,GAAG,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC;GAI7F,OAAO,CACL,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,GAClD,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,CAC/C,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,YACH,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,CAAC;EACzE,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,QAAQ,OACX,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,IACzE,CACE,SAAS,SAAS,KAAK,GAAG,QAAQ,OAAO,MAAM,GAC/C,SAAS,SAAS,KAAK,QAAQ,QAAQ,WAAW,CACpD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EACtD,KAAK;GACH,IAAI,CAAC,SAAS,OAAO,OAAO,CAAC;GAC7B,OAAO,CACL,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,GAC7C,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,MAAM,CACjD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,kBACH,OAAO,SAAS,gBAAgB,CAAC,SAAS,aAAa,IAAI,CAAC;EAC9D,KAAK,iBACH,OAAO,SAAS,eAAe,CAAC,SAAS,YAAY,IAAI,CAAC;EAC5D,KAAK,QAAQ;GACX,IAAI,CAAC,SAAS,MAAM,OAAO,CAAC;GAC5B,MAAM,OAAO,SAAS,SAAS,MAAM,QAAQ,IAAI;GACjD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;EAC1B;EACA,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,MAAM,IAAI,CAAC;EACnF,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,aAAa,SAAS,SAAS,QAAQ,GAAG,QAAQ,QAAQ,GAAG,EAAE,MAAM,CAAC;EAC/E,KAAK;GACH,IAAI,CAAC,SAAS,aAAa,OAAO,CAAC;GACnC,OAAO,aAAa,SAAS,SAAS,aAAa,GAAG,QAAQ,QAAQ,OAAO,EAAE,IAAI,CAAC;EACtF,KAAK;GACH,IAAI,CAAC,SAAS,cAAc,OAAO,CAAC;GACpC,OAAO,CAAC,SAAS,YAAY;EAC/B,KAAK;EACL,KAAK,qBAGH,OAAO,CAAC;EACV,KAAK,WAEH,OAAO,CAAC;CACZ;AACF;AAEA,SAAS,SAAS,MAAc,GAAG,UAAmC;CACpE,IAAI,SAAS,MAAM,UAAU,MAAM,SAAS,IAAI,KAAK,WAAW,KAAK,CAAC,GAAG,OAAO;CAChF,MAAM,eAAe,QAAQ,IAAI;CAEjC,MAAM,UAAU,SAAS,cADF,QAAQ,cAAc,GAAG,QACI,CAAC;CACrD,IAAI,YAAY,QAAQ,QAAQ,WAAW,KAAK,KAAK,KAAK,WAAW,OAAO,GAAG,OAAO;CACtF,OAAO,KAAK,MAAM,GAAG,QAAQ;AAC/B;AAEA,SAAS,aAAa,MAA+B;CACnD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;AAC1B;AAEA,SAAS,QAAQ,GAAmB;CAClC,OACE,EACG,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,GAAG,KAAK;AAExB;;AAiBA,SAAgB,iBACd,UACA,UACuC;CACvC,MAAM,SAAmC,CAAC;CAC1C,MAAM,cAAkD;EACtD;EACA;EACA;EACA;CACF;CACA,MAAM,eAAmD,CAAC,QAAQ;CAClE,MAAM,sBAA0D;EAC9D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,uBAA2D;EAC/D;EACA;EACA;CACF;CAEA,KAAK,MAAM,OAAO,aAAa;EAC7B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GACpC,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;CAElE;CACA,KAAK,MAAM,OAAO,cAAc;EAC9B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GAC/B,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,KAAK,MAAM,OAAO,CAAC,GAAG,qBAAqB,GAAG,oBAAoB,GAAG;EACnE,MAAM,IAAI,SAAS;EACnB,IAAI,MAAM,KAAA,GAAW;EACrB,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GAAG;GACpB,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAG,QAAQ;GAAU,CAAC;GACxD;EACF;EACA,MAAM,oBAAoB,oBAAoB,SAAS,GAAG;EAC1D,IAAI,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GAClD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;OACzD,IAAI,CAAC,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GACrD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,OAAO;AACT;;AAGA,SAAgB,oBACd,QACA,UACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,QAAQ,OAAO,KAClB,MAAM,OAAO,EAAE,QAAQ,IAAI,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI,EAAE,OAAO,EAChF;CACA,OAAO;EACL,oDAAoD,SAAS;EAC7D,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;;;;;;;;;;;AC5KA,SAAgB,sBACd,SAAS,uDACuB;CAChC,OAAO;EACL,SAAS,gBAAgB,QAA2C,CAAC,EAAA,CAAG;EACxE,QAAQ,QAAQ,OAAO,IAAI,MAAM,MAAM,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,eAAsB,gBACpB,YAC4E;CAC5E,MAAM,SAA+B,CAAC;CACtC,WAAW,MAAM,MAAM,WAAW,QAAQ,OAAO,KAAK,EAAE;CAExD,OAAO;EAAE;EAAQ,QAAA,MADI,WAAW;CACR;AAC1B;;AA+BA,IAAa,qBAAb,cAAwC,MAAM;CAG1B;CACA;CAHlB,YACE,SACA,SACA,SAAiD,CAAC,GAClD;EACA,MAAM,OAAO;EAHG,KAAA,UAAA;EACA,KAAA,SAAA;EAGhB,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;;AAeA,SAAgB,YACd,UACqC;CACrC,IAAI,CAAC,SAAS,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,GAChD,MAAM,IAAI,mBAAmB,iCAAiC,SAAS,MAAM,EAAE;CAEjF,IAAI,CAAC,SAAS,YAAY,SAAS,SAAS,KAAK,CAAC,CAAC,WAAW,GAC5D,MAAM,IAAI,mBAAmB,uCAAuC,SAAS,EAAE;CAEjF,MAAM,SAAS,iBAAiB,SAAS,UAAU,SAAS,QAAQ;CACpE,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,mBACR,oBAAoB,QAAQ,SAAS,QAAQ,GAC7C,SAAS,IACT,MACF;CAIF,MAAM,QAAQ,SAAS,OAAO,WAAW,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,CAAC;CAC7E,IAAI,SAAS,OAAO,WAAW,SAAS,MAAM,QAAQ,MAAO,QAAQ,MACnE,MAAM,IAAI,mBACR,eAAe,SAAS,GAAG,qCAAqC,MAAM,QAAQ,CAAC,EAAE,oBACjF,SAAS,EACX;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;ACxMA,MAAM,uBAA8D;CAClE;CACA;CACA;CACA;AACF;;AAGA,SAAgB,iCACd,MACmD;CACnD,MAAM,cAAc,KAAK,uBAAuB;CAEhD,OAAO,EACL,MAAM,oBAAoB,UAAU;EAClC,MAAM,QAAkC,CAAC;EACzC,MAAM,SAAyE,CAAC;EAChF,IAAI,UAAU;EAEd,KAAK,MAAM,KAAK,UAAU;GACxB,MAAM,UAAU,oBAAoB,EAAE,OAAO;GAC7C,IAAI,YAAY,MAAM;IACpB,IAAI,EAAE,YAAY,KAAA,GAChB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE;KACX,SAAS;IACX,CAAC;SAID,WAAW;IAEb;GACF;GAGA,IAAI,QAAQ,SAAS,WAAW;IAC9B,WAAW;IACX;GACF;GAGA,IAAI,QAAQ,KAAK,WAAW,YAAY,GAAG;IACzC,WAAW;IACX;GACF;GAEA,MAAM,SAAS,mBAAmB,SAAS,KAAK,UAAU,KAAK,QAAQ;GACvE,IAAI,WAAW,MAAM;IACnB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,iBAAiB,QAAQ,KAAK;IACzC,CAAC;IACD;GACF;GAEA,IAAI,OAAO,WAAW,gBAAgB,CAAC,YAAY,SAAS,QAAQ,IAAI,GAAG;IACzE,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,UAAU,OAAO,iBAAiB,6BAA6B,QAAQ,KAAK;IACvF,CAAC;IACD;GACF;GAEA,MAAM,iBAAiB,OAAO,SAAS,aAAa,OAAO,cAAc,OAAO,IAAI;GAEpF,IAAI;GACJ,IAAI;IACF,QAAQ,MAAM,KAAK,WAAW;KAAE,SAAS;KAAG;KAAS;KAAQ;IAAe,CAAC;GAC/E,SAAS,KAAK;IACZ,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,qBAAqB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IAC/E,CAAC;IACD;GACF;GAEA,IAAI,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG;IACnC,WAAW;IACX;GACF;GAEA,MAAM,KAAK;IACT,IAAI,OAAO,EAAE;IACb,iBAAiB,EAAE;IACnB;IACA;IACA,YAAY,OAAO,cAAc;IACjC,OAAO,MAAM;IACb,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,YAAY,EAAE;IACd,UAAU,EAAE;GACd,CAAC;EACH;EAEA,OAAO;GAAE;GAAO;GAAS;EAAO;CAClC,EACF;AACF;AAEA,SAAS,OAAO,GAAmB;CACjC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK;AAC7D;;;;;;;;;ACzHA,SAAgB,iBACd,SAC6E;CAC7E,6BAA6B;EAC3B,UAAU;EACV,aAAa,QAAQ,uBAAuB,CAAC;EAC7C,SAAS;CACX,CAAC;CACD,MAAM,WAAW,QAAQ,YAAY;CAErC,QAAQ,SAAmB,QAAyD;EAClF,MAAM,UAAU,sBAAsB,QAAQ,aAAa,QAAQ,UAAU,OAAO,CAAC;EACrF,MAAM,eAAe,QAAQ,QAAQ,QAAQ,QAAQ;EACrD,MAAM,UAAU,QAAQ,YAAY,OAAO;EAC3C,MAAM,SAAS,IAAI,UAAU,IAAI,gBAAgB,CAAC,CAAC;EAEnD,MAAM,MAAsB,CAAC;EAC7B,IAAI;EACJ,IAAI;EACJ,MAAM,SAAS,IAAI,SAAqB,SAAS,WAAW;GAC1D,SAAS;GACT,OAAO;EACT,CAAC;EAID,OAAO,YAAY,CAAC,CAAC;EAErB,MAAM,OAA8B;GAClC;GACA,oBAAoB;GACpB,MAAM;GACN,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,QAAQ,iBAAiB,IAAI,CAAC;EACnF;EAEA,gBAAgB,SAA4C;GAC1D,IAAI;IACF,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAe,MAAM,MAAM;IAC1E,WAAW,MAAM,SAAS,IAAI,aAAa,SAAS,EAAE,OAAO,CAAC,GAAG;KAC/D,IAAI,KAAK,KAAK;KACd,MAAM,SAAS,SAAS,OAAO,EAAE,aAAa,CAAC;KAC/C,IAAI,QAAQ,MAAM;IACpB;IACA,OAAO,QAAQ,OAAO,MAAM,GAAG,CAAC;GAClC,SAAS,KAAK;IACZ,KAAK,GAAG;IACR,MAAM;GACR;EACF;EAEA,OAAO;GAAE,QAAQ,OAAO;GAAG;EAAO;CACpC;AACF;;;AAIA,SAAS,sBACP,MACA,WACc;CACd,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,SAAS,UAAU,eACrB;EAAE,GAAG,KAAK;EAAQ,cAAc,UAAU;CAAa,IACvD,KAAK;CACT,MAAM,cAAc,UAAU,QAAQ;EAAE,GAAI,KAAK,SAAS,CAAC;EAAI,GAAG,UAAU;CAAM,IAAI,KAAK;CAC3F,MAAM,YAAY,UAAU,iBACxB;EAAE,GAAI,KAAK,OAAO,CAAC;EAAI,GAAG,UAAU;CAAe,IACnD,KAAK;CACT,MAAM,YAAY,KAAK,WAAW,SAAS,CAAC;CAC5C,MAAM,cAAuC,UAAU,YAAY,SAC/D,CAAC,GAAG,WAAW,GAAG,UAAU,UAAU,IACtC,CAAC,GAAG,SAAS;CACjB,OAAO;EACL,GAAG;EACH,MAAM,UAAU,QAAQ,KAAK;EAC7B;EACA,GAAI,cAAc,EAAE,OAAO,YAAY,IAAI,CAAC;EAC5C,GAAI,YAAY,EAAE,KAAK,UAAU,IAAI,CAAC;EACtC,WAAW;GAAE,GAAG,KAAK;GAAW,OAAO;EAAY;CACrD;AACF"}
+{"version":3,"file":"agent.js","names":[],"sources":["../src/agent/surfaces.ts","../src/agent/define-agent.ts","../src/agent/improvement-adapter.ts","../src/agent/sandbox-act.ts"],"sourcesContent":["/**\n * `AgentSurfaces` — declarative map of the mutable file/directory paths\n * the self-improvement loop can edit on behalf of an agent.\n *\n * The substrate uses this map to resolve every parsed `FindingSubject`\n * (from agent-eval) to a real on-disk path. No per-vertical glue;\n * no fabricated paths; no silent `existsSync(...)` skips that hide\n * misconfiguration from the operator.\n *\n * Surfaces are validated at `defineAgent` time — missing paths fail\n * loud with a list of every offender. A surface that's not needed\n * (e.g. an agent with no RAG corpora) is simply omitted; the loop\n * refuses to route those subjects rather than fabricating a target.\n */\n\nimport { existsSync, statSync } from 'node:fs'\nimport { isAbsolute, join, relative, resolve, sep } from 'node:path'\nimport type { FindingSubject } from '@tangle-network/agent-eval'\n\n/**\n * Surface declarations. Every path is repo-relative (or absolute) at\n * `defineAgent` time. At resolution time, paths are joined against the\n * agent's `repoRoot`.\n *\n * `systemPrompt`, `tools`, `personas` are DIRECTORIES; the loop appends\n * `<section>.md`, `<tool>/README.md`, `<persona-id>.yaml` etc.\n * `rubric`, `outputSchema` are SINGLE FILES; the loop edits them in\n * place.\n *\n * `knowledge` is the agent-knowledge root (typically `.agent-knowledge`);\n * `applyKnowledgeWriteBlocks` writes pages relative to it.\n *\n * Optional surfaces (`scaffolding`, `memory`, `rag`, `outputSchema`)\n * can be omitted — the loop will reject findings targeting them with a\n * clear log message instead of fabricating a path.\n */\nexport interface AgentSurfaces {\n  /** Directory containing one markdown file per system-prompt section. */\n  systemPrompt: string\n  /** Directory containing one subdir per tool (`<tool>/README.md`). */\n  tools: string\n  /** Single file (TypeScript module) defining the rubric weights + dimensions. */\n  rubric: string\n  /** Knowledge-base root; typically `.agent-knowledge`. */\n  knowledge: string\n  /** Directory containing one YAML/JSON file per persona. */\n  personas: string\n  /** Optional: directory containing scaffolding rules (precondition checks, retry policies). */\n  scaffolding?: string\n  /** Optional: memory store path (JSONL / SQLite / DB). */\n  memory?: string\n  /** Optional: directory containing RAG corpora (`<corpus>/<doc-id>.md`). */\n  rag?: string\n  /** Optional: single file defining the output schema (Zod / JSON Schema). */\n  outputSchema?: string\n  /** Optional: directory containing Agent Skill packages. */\n  skills?: string\n  /** Optional: directory containing MCP server/tool configuration. */\n  mcp?: string\n  /** Optional: directory containing hook definitions. */\n  hooks?: string\n  /** Optional: directory containing subagent definitions. */\n  subagents?: string\n  /** Optional: directory containing orchestration/workflow policies. */\n  workflows?: string\n  /** Optional: single file containing rollout-policy settings. */\n  rolloutPolicy?: string\n  /** Optional: single canonical AgentProfile file. */\n  agentProfile?: string\n  /** Optional: source root for code findings. */\n  code?: string\n}\n\nexport interface ResolvedSurface {\n  /** Absolute filesystem path the operator can `cat` / `vim`. */\n  absolutePath: string\n  /** Repo-relative path for PR descriptions, diffs, audit logs. */\n  repoRelativePath: string\n  /** Whether the path currently exists on disk. */\n  exists: boolean\n  /** The substrate's intent: edit an existing file or create a new one. */\n  intent: 'edit-existing' | 'create-new'\n}\n\n/**\n * Resolve a parsed `FindingSubject` to the file path the substrate\n * should edit (or create) on disk.\n *\n * Returns `null` when:\n *   - the subject targets a surface the agent didn't declare\n *     (e.g. `rag:*` when `surfaces.rag` is undefined), OR\n *   - the subject is a `cluster` (failure-mode emits these as evidence,\n *     not actionable mutations — they don't route to a file).\n *\n * Returns a `ResolvedSurface` with `intent: 'create-new'` when the\n * subject names a path that doesn't yet exist (e.g. a new wiki page).\n * The caller chooses whether to honour the create — for tightly-managed\n * surfaces like `systemPrompt` it's usually a contract violation\n * (the analyst named a section that doesn't exist); for `knowledge`\n * it's the whole point.\n */\nexport function resolveSubjectPath(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ResolvedSurface | null {\n  const candidates = candidatePathsForSubject(subject, surfaces)\n  if (candidates.length === 0) return null\n\n  // Probe candidates in order, preferring the first one that exists on disk.\n  // Lets the substrate accept both the flat `<section>.md` convention and\n  // the skill-dir `<section>/SKILL.md` convention without forcing one layout.\n  // When none exists, fall back to the first candidate (canonical create-new).\n  for (const rel of candidates) {\n    const abs = isAbsolute(rel) ? rel : join(repoRoot, rel)\n    if (existsSync(abs)) {\n      return { absolutePath: abs, repoRelativePath: rel, exists: true, intent: 'edit-existing' }\n    }\n  }\n  const fallback = candidates[0]!\n  const fallbackAbs = isAbsolute(fallback) ? fallback : join(repoRoot, fallback)\n  return {\n    absolutePath: fallbackAbs,\n    repoRelativePath: fallback,\n    exists: false,\n    intent: 'create-new',\n  }\n}\n\nfunction candidatePathsForSubject(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n): ReadonlyArray<string> {\n  switch (subject.kind) {\n    case 'knowledge.wiki':\n    case 'knowledge.stale':\n      return optionalPath(safeJoin(surfaces.knowledge, `${subject.slug}.md`))\n    case 'knowledge.claim':\n      // Claims land in a per-topic claims directory under the knowledge root.\n      return optionalPath(safeJoin(surfaces.knowledge, 'claims', `${slugify(subject.topic)}.md`))\n    case 'knowledge.raw':\n      return optionalPath(safeJoin(surfaces.knowledge, 'raw', `${subject.sourceId}.md`))\n    case 'system-prompt': {\n      const slug = slugify(subject.section)\n      // Prefer flat layout for create-new (canonical); probe skill-dir layout\n      // in case the existing repo (tax/legal/gtm/creative) uses\n      // `<section>/SKILL.md` already.\n      return [\n        safeJoin(surfaces.systemPrompt, `${slug}.md`),\n        safeJoin(surfaces.systemPrompt, slug, 'SKILL.md'),\n        safeJoin(surfaces.systemPrompt, slug, 'index.md'),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'skill': {\n      if (!surfaces.skills) return []\n      return [\n        safeJoin(surfaces.skills, subject.name, 'SKILL.md'),\n        safeJoin(surfaces.skills, `${subject.name}.md`),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'tool-doc':\n      if (subject.aspect) {\n        return optionalPath(safeJoin(surfaces.tools, subject.tool, `${slugify(subject.aspect)}.md`))\n      }\n      // tool-doc default: `<tool>/README.md`; also probe `<tool>.md` for flat\n      // tool-list repos.\n      return [\n        safeJoin(surfaces.tools, subject.tool, 'README.md'),\n        safeJoin(surfaces.tools, `${subject.tool}.md`),\n      ].filter((path): path is string => path !== null)\n    case 'new-tool':\n      return optionalPath(safeJoin(surfaces.tools, subject.name, 'README.md'))\n    case 'mcp':\n      if (!surfaces.mcp) return []\n      return subject.tool\n        ? optionalPath(safeJoin(surfaces.mcp, subject.server, `${subject.tool}.md`))\n        : [\n            safeJoin(surfaces.mcp, `${subject.server}.json`),\n            safeJoin(surfaces.mcp, subject.server, 'README.md'),\n          ].filter((path): path is string => path !== null)\n    case 'hook':\n      if (!surfaces.hooks) return []\n      return [\n        safeJoin(surfaces.hooks, `${subject.name}.md`),\n        safeJoin(surfaces.hooks, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'subagent':\n      if (!surfaces.subagents) return []\n      return [\n        safeJoin(surfaces.subagents, `${subject.name}.md`),\n        safeJoin(surfaces.subagents, `${subject.name}.yaml`),\n        safeJoin(surfaces.subagents, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'workflow':\n      if (!surfaces.workflows) return []\n      return [\n        safeJoin(surfaces.workflows, `${subject.name}.md`),\n        safeJoin(surfaces.workflows, `${subject.name}.yaml`),\n        safeJoin(surfaces.workflows, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'rollout-policy':\n      return surfaces.rolloutPolicy ? [surfaces.rolloutPolicy] : []\n    case 'agent-profile':\n      return surfaces.agentProfile ? [surfaces.agentProfile] : []\n    case 'code': {\n      if (!surfaces.code) return []\n      const path = safeJoin(surfaces.code, subject.path)\n      return path ? [path] : []\n    }\n    case 'rag':\n      if (!surfaces.rag) return []\n      return optionalPath(safeJoin(surfaces.rag, subject.corpus, `${subject.docId}.md`))\n    case 'memory':\n      if (!surfaces.memory) return []\n      return optionalPath(safeJoin(surfaces.memory, `${slugify(subject.key)}.json`))\n    case 'scaffolding':\n      if (!surfaces.scaffolding) return []\n      return optionalPath(safeJoin(surfaces.scaffolding, `${slugify(subject.concern)}.md`))\n    case 'output-schema':\n      if (!surfaces.outputSchema) return []\n      return [surfaces.outputSchema]\n    case 'websearch.outdated':\n    case 'prior-run-summary':\n      // Stale signals don't map to a single file — handled by the knowledge\n      // adapter as `agent-knowledge:stale:*` after operator review.\n      return []\n    case 'cluster':\n      // failure-mode cluster labels are evidence, not mutations.\n      return []\n  }\n}\n\nfunction safeJoin(root: string, ...children: string[]): string | null {\n  if (children.some((child) => child.includes('\\0') || isAbsolute(child))) return null\n  const rootAbsolute = resolve(root)\n  const targetAbsolute = resolve(rootAbsolute, ...children)\n  const escaped = relative(rootAbsolute, targetAbsolute)\n  if (escaped === '..' || escaped.startsWith(`..${sep}`) || isAbsolute(escaped)) return null\n  return join(root, ...children)\n}\n\nfunction optionalPath(path: string | null): string[] {\n  return path ? [path] : []\n}\n\nfunction slugify(s: string): string {\n  return (\n    s\n      .toLowerCase()\n      .replace(/[^a-z0-9-]+/g, '-')\n      .replace(/^-+|-+$/g, '')\n      .slice(0, 200) || 'untitled'\n  )\n}\n\n/**\n * Validate that every declared surface exists on disk under `repoRoot`.\n *\n * Returns an array of `SurfaceValidationIssue` — empty when all required\n * surfaces resolve. `defineAgent` throws with the issues rendered, so\n * a misconfigured manifest fails at startup (not at the first finding\n * the loop produces 20 minutes later).\n */\nexport interface SurfaceValidationIssue {\n  surface: keyof AgentSurfaces\n  path: string\n  reason: 'missing' | 'not-directory' | 'not-file'\n}\n\n/** Validate an `AgentSurfaces` map on disk — missing paths fail loud at `defineAgent` time instead of silently skipping self-improvement edits. */\nexport function validateSurfaces(\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ReadonlyArray<SurfaceValidationIssue> {\n  const issues: SurfaceValidationIssue[] = []\n  const dirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'systemPrompt',\n    'tools',\n    'personas',\n    'knowledge',\n  ]\n  const fileSurfaces: ReadonlyArray<keyof AgentSurfaces> = ['rubric']\n  const optionalDirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'scaffolding',\n    'memory',\n    'rag',\n    'skills',\n    'mcp',\n    'hooks',\n    'subagents',\n    'workflows',\n    'code',\n  ]\n  const optionalFileSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'outputSchema',\n    'rolloutPolicy',\n    'agentProfile',\n  ]\n\n  for (const key of dirSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    }\n  }\n  for (const key of fileSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  for (const key of [...optionalDirSurfaces, ...optionalFileSurfaces]) {\n    const p = surfaces[key] as string | undefined\n    if (p === undefined) continue\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n      continue\n    }\n    const expectedDirectory = optionalDirSurfaces.includes(key)\n    if (expectedDirectory && !statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    } else if (!expectedDirectory && !statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  return issues\n}\n\n/** Format a list of surface validation issues into a human-readable error string. */\nexport function renderSurfaceIssues(\n  issues: ReadonlyArray<SurfaceValidationIssue>,\n  repoRoot: string,\n): string {\n  if (issues.length === 0) return ''\n  const lines = issues.map(\n    (i) => `  - ${i.surface}: ${i.path ? `\"${i.path}\"` : '<not set>'} (${i.reason})`,\n  )\n  return [\n    `Agent surface validation failed against repoRoot=${repoRoot}:`,\n    ...lines,\n    '',\n    'Fix the manifest: every required surface must point at an existing',\n    'directory (systemPrompt / tools / personas / knowledge) or file',\n    '(rubric). Optional surfaces (scaffolding / memory / rag / outputSchema)',\n    'may be omitted; the loop will reject findings targeting omitted',\n    'surfaces rather than fabricating a path.',\n  ].join('\\n')\n}\n","/**\n * `defineAgent` — typed, validated manifest API for declarative agent\n * configuration. The substrate consumes this manifest to wire the\n * canonical eval pattern + analyst self-improvement loop without any\n * per-vertical glue.\n *\n * Design goal: scale to 1000s of vertical agents. Every agent declares\n * its surfaces, rubric, runtime, and analyst configuration in ~50 lines.\n * No per-vertical `ImprovementProposalSource`. No per-vertical CLI. No\n * fabricated paths.\n *\n * Validation: `defineAgent` runs `validateSurfaces` synchronously and\n * throws a structured error if any required surface is missing on\n * disk. The cost is one filesystem stat per surface (cheap); the\n * benefit is a manifest that can't ship broken.\n *\n * @experimental Manifests validate and load, but `runtime.act` is not yet wired\n * end-to-end into the substrate's eval path (`unimplementedAgentRun` is the\n * shipped default).\n */\n\nimport type { TraceAnalystDefinition } from '@tangle-network/agent-eval'\nimport type { RuntimeStreamEvent } from '../types'\nimport { type AgentSurfaces, renderSurfaceIssues, validateSurfaces } from './surfaces'\n\n// ── manifest ─────────────────────────────────────────────────────────\n\n/**\n * The full agent manifest. Each agent ships ONE of these.\n *\n * Generics:\n *   `TPersona` — the agent's persona shape (loaded from\n *     `surfaces.personas`). Defaults to `unknown` so the substrate's\n *     persona discovery (`loadPersonas`) can accept anything; per-agent\n *     code re-narrows when it matters.\n *   `TRunOutput` — the shape `runtime.act` returns. Used by the rubric\n *     scorers and emitted into the trace.\n */\nexport interface AgentManifest<TPersona = unknown, TRunOutput = unknown> {\n  /**\n   * Stable identifier — used as `projectId` in traces, as the analyst\n   * loop's `runId` prefix, and as the namespace under which findings\n   * are persisted. MUST match the agent's repo name to keep\n   * cross-repo telemetry joinable.\n   */\n  id: string\n\n  /**\n   * Filesystem root the substrate resolves surface paths against.\n   * Typically `process.cwd()` or a fixed absolute path. Use an\n   * absolute path when the agent's tests may run from subdirectories\n   * (vitest sometimes shifts cwd).\n   */\n  repoRoot: string\n\n  /**\n   * Map of mutable surfaces the self-improvement loop can edit. See\n   * `AgentSurfaces` — required: `systemPrompt`, `tools`, `rubric`,\n   * `knowledge`, `personas`. Optional: `scaffolding`, `memory`, `rag`,\n   * `outputSchema`.\n   *\n   * Every required path is validated at `defineAgent` time. Missing\n   * paths throw with the full list of offenders.\n   */\n  surfaces: AgentSurfaces\n\n  /**\n   * Rubric the substrate uses to score each run. Dimensions × weights\n   * × judges. The substrate computes the weighted composite and\n   * stamps it into the RunRecord.\n   */\n  rubric: AgentRubric<TRunOutput>\n\n  /**\n   * Runtime adapter — how the substrate INVOKES the agent against a\n   * persona. The `act` function takes a persona + a context (with the\n   * tracer the substrate threads through for span emission) and\n   * returns the run output the rubric will score.\n   *\n   * The agent's existing production runtime goes in here; the\n   * substrate is intentionally thin around it.\n   */\n  runtime: AgentRuntime<TPersona, TRunOutput>\n\n  /**\n   * Persona discovery — the substrate loads personas via this function\n   * at eval start. Can read from `surfaces.personas`, an API, or be\n   * hardcoded. The substrate calls it once per `runAgentEval` call;\n   * persona ordering is preserved.\n   */\n  personas: () => Promise<ReadonlyArray<TPersona>>\n\n  /**\n   * Analyst kinds the substrate runs against each persona's trace.\n   * Defaults to `DEFAULT_TRACE_ANALYST_KINDS` from agent-eval. Per-agent\n   * authors can prune (e.g. skip `knowledge-poisoning` when there's no\n   * knowledge base) or extend (custom domain kinds).\n   *\n   * Empty array disables the loop — useful for `pnpm eval --no-analyst`.\n   */\n  analystKinds: ReadonlyArray<TraceAnalystDefinition>\n\n  /**\n   * Analyst LLM configuration. The substrate uses these for all four\n   * kinds (override per-kind via `analystKinds` if needed).\n   */\n  analyst: AnalystConfig\n}\n\nexport interface AgentRubric<TRunOutput> {\n  /** Dimensions composing the weighted score. Weights sum to 1.0 by convention. */\n  dimensions: ReadonlyArray<RubricDimension<TRunOutput>>\n  /**\n   * Optional judges layered on top of deterministic dimensions. Each\n   * judge returns a score per dimension; the substrate averages judges\n   * (mean by default) for the LLM contribution.\n   */\n  judges?: ReadonlyArray<JudgeConfig<TRunOutput>>\n}\n\nexport interface RubricDimension<TRunOutput> {\n  /** Unique identifier — appears in finding subjects (`rubric:<id>`). */\n  id: string\n  /** 0..1 — weight in the composite. */\n  weight: number\n  /**\n   * Deterministic scorer: given the persona + run output, returns a\n   * 0..1 score. The substrate sums weight × score across dimensions\n   * for the deterministic composite; judges supplement subjective dims.\n   */\n  score: (input: { persona: unknown; output: TRunOutput }) => number\n  /** Optional human-readable label for reports. */\n  label?: string\n}\n\nexport interface JudgeConfig<TRunOutput> {\n  /** Judge identifier — appears in trace spans + manifest. */\n  id: string\n  /** Model snapshot to invoke. Pin the snapshot (`claude-sonnet-4-6@2025-04-15`); the validator rejects bare aliases. */\n  model: string\n  /** Dimensions this judge scores. */\n  dimensions: ReadonlyArray<string>\n  /**\n   * Optional rubric anchors — text examples the judge sees as a\n   * few-shot prompt to calibrate. STRONGLY recommended for subjective\n   * dimensions; required by the calibration gate (Pearson ≥0.7).\n   */\n  anchors?: ReadonlyArray<{ input: string; output: TRunOutput; expected: Record<string, number> }>\n}\n\nexport interface AgentRuntime<TPersona, TRunOutput> {\n  /**\n   * Invoke the agent against one persona. Returns BOTH:\n   *   - `events`: an `AsyncIterable<RuntimeStreamEvent>` the chat-centric\n   *     product consumes verbatim (SSE / WebSocket / inline render).\n   *     **Streaming is mandatory — never collapse this to a single Promise.**\n   *     The agent's existing `runChatTurn` (or equivalent async generator)\n   *     plugs in here directly.\n   *   - `output`: a `Promise<TRunOutput>` resolved AFTER the event stream\n   *     drains. The eval substrate awaits this for rubric scoring; chat\n   *     products usually ignore it (they already rendered incrementally).\n   *\n   * Implementation contract:\n   *   1. `act` MUST return immediately (synchronous construction of the\n   *      `events` iterator + the `output` promise).\n   *   2. Iterating `events` drives the underlying LLM/tool calls — the\n   *      caller chooses when to consume.\n   *   3. `output` resolves only after the iterator yields its terminal\n   *      event (typically `task_end`); see `collectAgentRun` helper.\n   *\n   * `ctx.emitter` is the substrate-threaded `TraceEmitter` — runtimes\n   * SHOULD record LLM/tool spans through it for capture integrity.\n   * `ctx.deadlineMs` is wall-clock; the runtime SHOULD honour for graceful\n   * cancel. `ctx.signal` is the standard abort signal.\n   */\n  act: (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput>\n}\n\nexport interface AgentRunInvocation<TRunOutput> {\n  /** Live stream of typed runtime events. Consumed by chat UX directly. */\n  events: AsyncIterable<RuntimeStreamEvent>\n  /** Final structured output the rubric scores. Resolves after `events` drains. */\n  output: Promise<TRunOutput>\n}\n\n/**\n * Stub for agents whose `runtime.act` is not yet wired to the substrate's\n * eval path. Preserves the streaming contract (empty event stream + a\n * rejected `output` promise that tells the caller exactly what to fix).\n *\n * Per-vertical manifests usually start with this stub and replace it with\n * the agent's real streaming runtime (`runChatTurn` or equivalent) once\n * the eval path consumes the manifest end-to-end.\n */\nexport function unimplementedAgentRun<TRunOutput = unknown>(\n  reason = 'AgentRuntime.act is not yet wired for this manifest',\n): AgentRunInvocation<TRunOutput> {\n  return {\n    events: (async function* empty(): AsyncIterable<RuntimeStreamEvent> {})(),\n    output: Promise.reject(new Error(reason)),\n  }\n}\n\n/**\n * Drain `act`'s `events` into an array AND await its `output`. Useful for\n * eval / outcome-measurement code paths that don't care about live\n * rendering. The events array is preserved so the substrate can inspect\n * tool calls / readiness / questions retrospectively.\n *\n * IMPORTANT: chat-centric UX MUST NOT call this — it defeats streaming\n * (no incremental render). Use `for await (const ev of invocation.events)`\n * directly in the chat surface.\n */\nexport async function collectAgentRun<TRunOutput>(\n  invocation: AgentRunInvocation<TRunOutput>,\n): Promise<{ events: ReadonlyArray<RuntimeStreamEvent>; output: TRunOutput }> {\n  const events: RuntimeStreamEvent[] = []\n  for await (const ev of invocation.events) events.push(ev)\n  const output = await invocation.output\n  return { events, output }\n}\n\nexport interface AgentRunContext {\n  /** Substrate-managed trace emitter. */\n  emitter: import('@tangle-network/agent-eval').TraceEmitter\n  /** Stable run id for this persona × variant cell. */\n  runId: string\n  /** Variant the runtime is exercising (e.g. `'baseline'`, `'source-grounded'`). */\n  variantId?: string\n  /** Wall-clock deadline (epoch ms). The runtime SHOULD honour for graceful cancel. */\n  deadlineMs?: number\n  /** Optional abort signal. */\n  signal?: AbortSignal\n}\n\nexport interface AnalystConfig {\n  /** Model the analyst kinds use. Override per-kind via `analystKinds[i].cost.models`. */\n  model: string\n  /** Optional total budget across all kinds for one run. Substrate enforces via `BudgetGuard`. */\n  budgetUsd?: number\n  /** Backend hint for the AxAIService factory — same shape every kind uses. */\n  backend?: {\n    name?: 'openai' | 'router'\n    apiKey?: string\n    baseUrl?: string\n  }\n}\n\n// ── factory + validation ─────────────────────────────────────────────\n\n/** Thrown when `defineAgent` finds a required surface missing on disk. */\nexport class AgentManifestError extends Error {\n  constructor(\n    message: string,\n    public readonly agentId: string,\n    public readonly issues: ReadonlyArray<unknown> = [],\n  ) {\n    super(message)\n    this.name = 'AgentManifestError'\n  }\n}\n\n/**\n * Construct a validated agent manifest. Throws `AgentManifestError`\n * if any required surface is missing on disk.\n *\n * Generics: pass your persona / output types if you want narrowed\n * `runtime.act` signatures:\n *   `defineAgent<TaxPersona, TaxRunOutput>({ ... })`\n *\n * Most callers don't need the generics — the substrate operates on\n * `unknown` payloads internally and the manifest's `score` /\n * `runtime.act` see the typed shapes via TypeScript inference at\n * the call site.\n */\nexport function defineAgent<TPersona = unknown, TRunOutput = unknown>(\n  manifest: AgentManifest<TPersona, TRunOutput>,\n): AgentManifest<TPersona, TRunOutput> {\n  if (!manifest.id || manifest.id.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `id` is required', manifest.id ?? '')\n  }\n  if (!manifest.repoRoot || manifest.repoRoot.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `repoRoot` is required', manifest.id)\n  }\n  const issues = validateSurfaces(manifest.surfaces, manifest.repoRoot)\n  if (issues.length > 0) {\n    throw new AgentManifestError(\n      renderSurfaceIssues(issues, manifest.repoRoot),\n      manifest.id,\n      issues,\n    )\n  }\n  // Lightweight rubric sanity: weights sum to ~1.0 (no hard requirement —\n  // the substrate normalizes — but flag wildly miscalibrated weights).\n  const total = manifest.rubric.dimensions.reduce((acc, d) => acc + d.weight, 0)\n  if (manifest.rubric.dimensions.length > 0 && (total < 0.5 || total > 1.5)) {\n    throw new AgentManifestError(\n      `defineAgent(${manifest.id}): rubric dimension weights sum to ${total.toFixed(3)} — should be ~1.0`,\n      manifest.id,\n    )\n  }\n  return manifest\n}\n","/**\n * Surface improvement proposer — resolves analyst findings into LLM-drafted\n * candidate patches without changing the caller's repository.\n *\n * The proposer parses each finding's `subject` via\n * `parseFindingSubject` (agent-eval), resolves it to a real file path\n * via the agent's `AgentSurfaces`, reads the current content, and asks\n * an LLM to draft a unified-diff patch given the finding + current\n * content + per-kind editing-discipline rules.\n *\n * Fail-loud rules:\n *   - Findings whose subject doesn't parse → counted in `errors`.\n *   - Findings whose subject targets an undeclared surface → counted in\n *     `errors` with the offending kind in the message.\n *   - Findings whose target path doesn't exist AND the kind isn't a\n *     create-new variant (`new-tool`, `knowledge.wiki`) → counted in\n *     `errors` with the resolved path in the message.\n *   - LLM drafts that fail JSON-schema validation → counted in\n *     `errors` with the schema issue.\n *\n * No silent skips. Every dropped finding has a recorded reason the\n * loop's report surfaces.\n */\n\nimport { createHash } from 'node:crypto'\nimport { readFileSync } from 'node:fs'\nimport type { AnalystFinding, FindingSubject } from '@tangle-network/agent-eval'\nimport { parseFindingSubject } from '@tangle-network/agent-eval/analyst'\nimport type { ImprovementProposalSource } from '../analyst-loop/types'\nimport type { AgentSurfaces, ResolvedSurface } from './surfaces'\nimport { resolveSubjectPath } from './surfaces'\n\n// ── proposal shape ───────────────────────────────────────────────────\n\nexport interface SurfaceImprovementEdit {\n  /** Stable id derived from the source finding so re-proposals are idempotent. */\n  id: string\n  /** The finding that produced this edit — for revert + audit trail. */\n  sourceFindingId: string\n  /** Parsed subject; included so the apply step doesn't re-parse. */\n  subject: FindingSubject\n  /** Resolved on-disk target. */\n  target: ResolvedSurface\n  /** SHA-256 of the current file content the patch was drafted against. */\n  baseSha256: string\n  /** Unified-diff patch the LLM drafted (relative to `target.absolutePath`). */\n  patch: string\n  /** One-line summary the operator sees in the report / PR title. */\n  summary: string\n  /** Multi-line rationale for the PR body — finding context + LLM reasoning. */\n  rationale: string\n  /** Carry-forward from the finding so the apply gate can check the threshold. */\n  confidence: number\n  /** Carry-forward severity for prioritization. */\n  severity: AnalystFinding['severity']\n}\n\nexport interface CreateSurfaceImprovementProposerOptions {\n  surfaces: AgentSurfaces\n  repoRoot: string\n  /**\n   * LLM-draft callback. Given a finding + current file content + the\n   * resolved target, returns a unified-diff patch + summary + rationale.\n   *\n   * Required — the substrate doesn't ship a hardcoded prompt; the agent\n   * author picks the model (Haiku for cheap routine drafts, Sonnet for\n   * substantive prompt rewrites, etc.) via this callback.\n   */\n  draftPatch: (input: DraftPatchInput) => Promise<DraftPatchOutput>\n  /**\n   * When the resolved target doesn't exist, allow the substrate to\n   * CREATE the file (for `knowledge.wiki`, `new-tool` subjects). Default\n   * true for those kinds, false for `system-prompt` / `rubric` / etc.\n   * (named sections that don't exist are a contract violation, not a\n   * scaffolding opportunity).\n   */\n  allowCreateForKinds?: ReadonlyArray<FindingSubject['kind']>\n}\n\nexport interface DraftPatchInput {\n  finding: AnalystFinding\n  subject: FindingSubject\n  target: ResolvedSurface\n  /** Current file content (empty string when `intent === 'create-new'`). */\n  currentContent: string\n}\n\nexport interface DraftPatchOutput {\n  /** Unified diff against the current file content. Empty string skips this finding. */\n  patch: string\n  /** One-line summary for the operator. */\n  summary: string\n  /** Multi-line rationale for the PR body. */\n  rationale: string\n}\n\n// ── factory ──────────────────────────────────────────────────────────\n\nconst DEFAULT_CREATE_KINDS: ReadonlyArray<FindingSubject['kind']> = [\n  'knowledge.wiki',\n  'knowledge.claim',\n  'knowledge.raw',\n  'new-tool',\n]\n\n/** Resolve each finding to a real surface and draft a detached patch candidate. */\nexport function createSurfaceImprovementProposer(\n  opts: CreateSurfaceImprovementProposerOptions,\n): ImprovementProposalSource<SurfaceImprovementEdit> {\n  const allowCreate = opts.allowCreateForKinds ?? DEFAULT_CREATE_KINDS\n\n  return {\n    async proposeFromFindings(findings) {\n      const edits: SurfaceImprovementEdit[] = []\n      const errors: Array<{ findingId: string; subject: string; message: string }> = []\n      let skipped = 0\n\n      for (const f of findings) {\n        const subject = parseFindingSubject(f.subject)\n        if (subject === null) {\n          if (f.subject !== undefined) {\n            errors.push({\n              findingId: f.finding_id,\n              subject: f.subject,\n              message: 'subject does not parse against the finding-subject grammar',\n            })\n          } else {\n            // Subject-less findings are descriptive, not actionable —\n            // legitimate; count in `skipped` not `errors`.\n            skipped += 1\n          }\n          continue\n        }\n\n        // `cluster` findings (failure-mode) are evidence, not mutations.\n        if (subject.kind === 'cluster') {\n          skipped += 1\n          continue\n        }\n\n        // Knowledge findings flow to the knowledge proposal source so they do not double-route.\n        if (subject.kind.startsWith('knowledge.')) {\n          skipped += 1\n          continue\n        }\n\n        const target = resolveSubjectPath(subject, opts.surfaces, opts.repoRoot)\n        if (target === null) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `subject kind \"${subject.kind}\" targets an undeclared surface; declare it in AgentSurfaces or stop emitting this subject`,\n          })\n          continue\n        }\n\n        if (target.intent === 'create-new' && !allowCreate.includes(subject.kind)) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `target ${target.repoRelativePath} does not exist; the kind \"${subject.kind}\" requires an existing target (analyst named a section that isn't in the codebase)`,\n          })\n          continue\n        }\n\n        const currentContent = target.exists ? readFileSync(target.absolutePath, 'utf-8') : ''\n\n        let draft: DraftPatchOutput\n        try {\n          draft = await opts.draftPatch({ finding: f, subject, target, currentContent })\n        } catch (err) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `draftPatch threw: ${err instanceof Error ? err.message : String(err)}`,\n          })\n          continue\n        }\n\n        if (draft.patch.trim().length === 0) {\n          skipped += 1\n          continue\n        }\n\n        edits.push({\n          id: `imp-${f.finding_id}`,\n          sourceFindingId: f.finding_id,\n          subject,\n          target,\n          baseSha256: sha256(currentContent),\n          patch: draft.patch,\n          summary: draft.summary,\n          rationale: draft.rationale,\n          confidence: f.confidence,\n          severity: f.severity,\n        })\n      }\n\n      return { edits, skipped, errors }\n    },\n  }\n}\n\nfunction sha256(s: string): string {\n  return createHash('sha256').update(s, 'utf-8').digest('hex')\n}\n","/**\n * Sandbox bridge for `AgentRuntime.act` — prod-faithful eval execution.\n *\n * The point of this adapter is parity: the eval substrate must run the agent\n * through the SAME profile the production chat turn uses, or scorecard numbers\n * grade a profile that never ships. `createSandboxAct` boots a sandbox with the\n * agent's profile (the caller's `baseProfile`, with optional per-persona\n * overrides) through the loop kernel's own {@link createSandboxForSpec},\n * streams the `streamPrompt` events mapped to the `RuntimeStreamEvent`\n * vocabulary, and resolves the `OutputAdapter`-parsed output for rubric scoring\n * — satisfying the `act` streaming contract with one code path shared by chat\n * and eval.\n *\n * Agents with a bespoke streaming chat turn should wire THAT into `act`\n * directly (the contract is designed for it); this adapter is the default for\n * agents whose turn is a plain prod-profile sandbox dispatch — notably the\n * agents agent-builder generates.\n */\n\nimport type {\n  AgentProfile,\n  AgentProfileFileMount,\n  AgentProfileMcpServer,\n} from '@tangle-network/agent-interface'\nimport type { SandboxEvent } from '@tangle-network/sandbox'\nimport type { AgentRunSpec, OutputAdapter, SandboxClient } from '../runtime'\nimport { mapSandboxEvent } from '../runtime'\nimport { createSandboxForSpec } from '../runtime/run-loop'\nimport type { RuntimeStreamEvent } from '../types'\nimport type { AgentRunContext, AgentRunInvocation } from './define-agent'\nimport {\n  type AgentProfileMaterializationAxis,\n  assertProfileMaterialization,\n  sandboxActProfileMaterialization,\n} from './profile-materialization'\n\n/** Per-persona profile-merge slots applied over the base profile (§1.5: the caller authors the\n *  per-persona profile). Each slot overlays the base; an absent slot leaves the base untouched. */\nexport interface SandboxActComposeOverrides {\n  /** Replace the base profile's system prompt (e.g. a workspace-augmented prompt). */\n  systemPrompt?: string\n  /** Extra file mounts layered after the base profile's `resources.files`. */\n  extraFiles?: AgentProfileFileMount[]\n  /** Override the profile `name`. Defaults to the base profile's name. */\n  name?: string\n  /** Box built-in tool ON/OFF flags merged over the base profile's `tools` (overlay wins per key). */\n  tools?: Record<string, boolean>\n  /** MCP connections merged over the base profile's `mcp` (overlay wins per key). */\n  mcpConnections?: Record<string, AgentProfileMcpServer>\n}\n\nexport interface CreateSandboxActOptions<TPersona, TRunOutput> {\n  /** Canonical agent profile — the same one the prod chat turn uses. */\n  baseProfile: AgentProfile\n  /** Sandbox client used to boot the per-run sandbox. */\n  sandboxClient: SandboxClient\n  /** Persona → prompt. Pure; the eval cell's input. */\n  buildPrompt: (persona: TPersona) => string\n  /** Sandbox event stream → typed output the rubric scores. */\n  output: OutputAdapter<TRunOutput>\n  /**\n   * Per-persona profile overrides (workspace-augmented system prompt, extra\n   * file mounts, tool flags, MCP connections). Overlaid onto `baseProfile`.\n   */\n  compose?: (persona: TPersona) => SandboxActComposeOverrides\n  /** Sandbox-SDK overrides forwarded to `createSandboxForSpec`. */\n  sandboxOverrides?: AgentRunSpec<unknown>['sandboxOverrides']\n  /** Optional changed axes the caller expects this path to carry. */\n  requiredProfileAxes?: readonly AgentProfileMaterializationAxis[]\n  /** Stable run name surfaced in mapped `llm_call` events. */\n  name?: string\n  /** Override the `SandboxEvent → RuntimeStreamEvent` mapper. */\n  mapEvent?: (\n    event: SandboxEvent,\n    opts: { agentRunName?: string },\n  ) => RuntimeStreamEvent | undefined\n}\n\n/**\n * Build an `AgentRuntime.act` implementation backed by a single prod-profile\n * sandbox run. The returned function honours the `act` contract: it returns\n * synchronously with a live `events` iterator and an `output` promise that\n * resolves only after the iterator drains.\n */\nexport function createSandboxAct<TPersona, TRunOutput>(\n  options: CreateSandboxActOptions<TPersona, TRunOutput>,\n): (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput> {\n  assertProfileMaterialization({\n    contract: sandboxActProfileMaterialization,\n    changedAxes: options.requiredProfileAxes ?? [],\n    context: 'createSandboxAct',\n  })\n  const mapEvent = options.mapEvent ?? mapSandboxEvent\n\n  return (persona: TPersona, ctx: AgentRunContext): AgentRunInvocation<TRunOutput> => {\n    const profile = applyComposeOverrides(options.baseProfile, options.compose?.(persona))\n    const agentRunName = options.name ?? profile.name ?? 'agent'\n    const message = options.buildPrompt(persona)\n    const signal = ctx.signal ?? new AbortController().signal\n\n    const raw: SandboxEvent[] = []\n    let settle!: (value: TRunOutput) => void\n    let fail!: (err: unknown) => void\n    const output = new Promise<TRunOutput>((resolve, reject) => {\n      settle = resolve\n      fail = reject\n    })\n    // The output promise rejects when the stream errors; if the caller ignores\n    // `output` (chat UX) the rejection is still observed by the events iterator\n    // throwing. Attach a no-op catch so an ignored rejection is never \"unhandled\".\n    output.catch(() => {})\n\n    const spec: AgentRunSpec<unknown> = {\n      profile,\n      taskToPrompt: () => message,\n      name: agentRunName,\n      ...(options.sandboxOverrides ? { sandboxOverrides: options.sandboxOverrides } : {}),\n    }\n\n    async function* events(): AsyncIterable<RuntimeStreamEvent> {\n      try {\n        const box = await createSandboxForSpec(options.sandboxClient, spec, signal)\n        for await (const event of box.streamPrompt(message, { signal })) {\n          raw.push(event)\n          const mapped = mapEvent(event, { agentRunName })\n          if (mapped) yield mapped\n        }\n        settle(options.output.parse(raw))\n      } catch (err) {\n        fail(err)\n        throw err\n      }\n    }\n\n    return { events: events(), output }\n  }\n}\n\n/** Overlay the per-persona overrides onto the base profile. Each slot merges over the base; an\n *  absent override leaves the base profile untouched. */\nfunction applyComposeOverrides(\n  base: AgentProfile,\n  overrides: SandboxActComposeOverrides | undefined,\n): AgentProfile {\n  if (!overrides) return base\n  const prompt = overrides.systemPrompt\n    ? { ...base.prompt, systemPrompt: overrides.systemPrompt }\n    : base.prompt\n  const mergedTools = overrides.tools ? { ...(base.tools ?? {}), ...overrides.tools } : base.tools\n  const mergedMcp = overrides.mcpConnections\n    ? { ...(base.mcp ?? {}), ...overrides.mcpConnections }\n    : base.mcp\n  const baseFiles = base.resources?.files ?? []\n  const mergedFiles: AgentProfileFileMount[] = overrides.extraFiles?.length\n    ? [...baseFiles, ...overrides.extraFiles]\n    : [...baseFiles]\n  return {\n    ...base,\n    name: overrides.name ?? base.name,\n    prompt,\n    ...(mergedTools ? { tools: mergedTools } : {}),\n    ...(mergedMcp ? { mcp: mergedMcp } : {}),\n    resources: { ...base.resources, files: mergedFiles },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqGA,SAAgB,mBACd,SACA,UACA,UACwB;CACxB,MAAM,aAAa,yBAAyB,SAAS,QAAQ;CAC7D,IAAI,WAAW,WAAW,GAAG,OAAO;CAMpC,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,MAAM,WAAW,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;EACtD,IAAI,WAAW,GAAG,GAChB,OAAO;GAAE,cAAc;GAAK,kBAAkB;GAAK,QAAQ;GAAM,QAAQ;EAAgB;CAE7F;CACA,MAAM,WAAW,WAAW;CAE5B,OAAO;EACL,cAFkB,WAAW,QAAQ,IAAI,WAAW,KAAK,UAAU,QAAQ;EAG3E,kBAAkB;EAClB,QAAQ;EACR,QAAQ;CACV;AACF;AAEA,SAAS,yBACP,SACA,UACuB;CACvB,QAAQ,QAAQ,MAAhB;EACE,KAAK;EACL,KAAK,mBACH,OAAO,aAAa,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI,CAAC;EACxE,KAAK,mBAEH,OAAO,aAAa,SAAS,SAAS,WAAW,UAAU,GAAG,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC;EAC5F,KAAK,iBACH,OAAO,aAAa,SAAS,SAAS,WAAW,OAAO,GAAG,QAAQ,SAAS,IAAI,CAAC;EACnF,KAAK,iBAAiB;GACpB,MAAM,OAAO,QAAQ,QAAQ,OAAO;GAIpC,OAAO;IACL,SAAS,SAAS,cAAc,GAAG,KAAK,IAAI;IAC5C,SAAS,SAAS,cAAc,MAAM,UAAU;IAChD,SAAS,SAAS,cAAc,MAAM,UAAU;GAClD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD;EACA,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,CACL,SAAS,SAAS,QAAQ,QAAQ,MAAM,UAAU,GAClD,SAAS,SAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAChD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAElD,KAAK;GACH,IAAI,QAAQ,QACV,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,GAAG,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC;GAI7F,OAAO,CACL,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,GAClD,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,CAC/C,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,YACH,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,CAAC;EACzE,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,QAAQ,OACX,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,IACzE,CACE,SAAS,SAAS,KAAK,GAAG,QAAQ,OAAO,MAAM,GAC/C,SAAS,SAAS,KAAK,QAAQ,QAAQ,WAAW,CACpD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EACtD,KAAK;GACH,IAAI,CAAC,SAAS,OAAO,OAAO,CAAC;GAC7B,OAAO,CACL,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,GAC7C,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,MAAM,CACjD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,kBACH,OAAO,SAAS,gBAAgB,CAAC,SAAS,aAAa,IAAI,CAAC;EAC9D,KAAK,iBACH,OAAO,SAAS,eAAe,CAAC,SAAS,YAAY,IAAI,CAAC;EAC5D,KAAK,QAAQ;GACX,IAAI,CAAC,SAAS,MAAM,OAAO,CAAC;GAC5B,MAAM,OAAO,SAAS,SAAS,MAAM,QAAQ,IAAI;GACjD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;EAC1B;EACA,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,MAAM,IAAI,CAAC;EACnF,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,aAAa,SAAS,SAAS,QAAQ,GAAG,QAAQ,QAAQ,GAAG,EAAE,MAAM,CAAC;EAC/E,KAAK;GACH,IAAI,CAAC,SAAS,aAAa,OAAO,CAAC;GACnC,OAAO,aAAa,SAAS,SAAS,aAAa,GAAG,QAAQ,QAAQ,OAAO,EAAE,IAAI,CAAC;EACtF,KAAK;GACH,IAAI,CAAC,SAAS,cAAc,OAAO,CAAC;GACpC,OAAO,CAAC,SAAS,YAAY;EAC/B,KAAK;EACL,KAAK,qBAGH,OAAO,CAAC;EACV,KAAK,WAEH,OAAO,CAAC;CACZ;AACF;AAEA,SAAS,SAAS,MAAc,GAAG,UAAmC;CACpE,IAAI,SAAS,MAAM,UAAU,MAAM,SAAS,IAAI,KAAK,WAAW,KAAK,CAAC,GAAG,OAAO;CAChF,MAAM,eAAe,QAAQ,IAAI;CAEjC,MAAM,UAAU,SAAS,cADF,QAAQ,cAAc,GAAG,QACI,CAAC;CACrD,IAAI,YAAY,QAAQ,QAAQ,WAAW,KAAK,KAAK,KAAK,WAAW,OAAO,GAAG,OAAO;CACtF,OAAO,KAAK,MAAM,GAAG,QAAQ;AAC/B;AAEA,SAAS,aAAa,MAA+B;CACnD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;AAC1B;AAEA,SAAS,QAAQ,GAAmB;CAClC,OACE,EACG,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,GAAG,KAAK;AAExB;;AAiBA,SAAgB,iBACd,UACA,UACuC;CACvC,MAAM,SAAmC,CAAC;CAC1C,MAAM,cAAkD;EACtD;EACA;EACA;EACA;CACF;CACA,MAAM,eAAmD,CAAC,QAAQ;CAClE,MAAM,sBAA0D;EAC9D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,uBAA2D;EAC/D;EACA;EACA;CACF;CAEA,KAAK,MAAM,OAAO,aAAa;EAC7B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GACpC,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;CAElE;CACA,KAAK,MAAM,OAAO,cAAc;EAC9B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GAC/B,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,KAAK,MAAM,OAAO,CAAC,GAAG,qBAAqB,GAAG,oBAAoB,GAAG;EACnE,MAAM,IAAI,SAAS;EACnB,IAAI,MAAM,KAAA,GAAW;EACrB,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GAAG;GACpB,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAG,QAAQ;GAAU,CAAC;GACxD;EACF;EACA,MAAM,oBAAoB,oBAAoB,SAAS,GAAG;EAC1D,IAAI,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GAClD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;OACzD,IAAI,CAAC,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GACrD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,OAAO;AACT;;AAGA,SAAgB,oBACd,QACA,UACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,QAAQ,OAAO,KAClB,MAAM,OAAO,EAAE,QAAQ,IAAI,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI,EAAE,OAAO,EAChF;CACA,OAAO;EACL,oDAAoD,SAAS;EAC7D,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;;;;;;;;;;;ACxKA,SAAgB,sBACd,SAAS,uDACuB;CAChC,OAAO;EACL,SAAS,gBAAgB,QAA2C,CAAC,EAAA,CAAG;EACxE,QAAQ,QAAQ,OAAO,IAAI,MAAM,MAAM,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,eAAsB,gBACpB,YAC4E;CAC5E,MAAM,SAA+B,CAAC;CACtC,WAAW,MAAM,MAAM,WAAW,QAAQ,OAAO,KAAK,EAAE;CAExD,OAAO;EAAE;EAAQ,QAAA,MADI,WAAW;CACR;AAC1B;;AA+BA,IAAa,qBAAb,cAAwC,MAAM;CAG1B;CACA;CAHlB,YACE,SACA,SACA,SAAiD,CAAC,GAClD;EACA,MAAM,OAAO;EAHG,KAAA,UAAA;EACA,KAAA,SAAA;EAGhB,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;;AAeA,SAAgB,YACd,UACqC;CACrC,IAAI,CAAC,SAAS,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,GAChD,MAAM,IAAI,mBAAmB,iCAAiC,SAAS,MAAM,EAAE;CAEjF,IAAI,CAAC,SAAS,YAAY,SAAS,SAAS,KAAK,CAAC,CAAC,WAAW,GAC5D,MAAM,IAAI,mBAAmB,uCAAuC,SAAS,EAAE;CAEjF,MAAM,SAAS,iBAAiB,SAAS,UAAU,SAAS,QAAQ;CACpE,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,mBACR,oBAAoB,QAAQ,SAAS,QAAQ,GAC7C,SAAS,IACT,MACF;CAIF,MAAM,QAAQ,SAAS,OAAO,WAAW,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,CAAC;CAC7E,IAAI,SAAS,OAAO,WAAW,SAAS,MAAM,QAAQ,MAAO,QAAQ,MACnE,MAAM,IAAI,mBACR,eAAe,SAAS,GAAG,qCAAqC,MAAM,QAAQ,CAAC,EAAE,oBACjF,SAAS,EACX;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;AC5MA,MAAM,uBAA8D;CAClE;CACA;CACA;CACA;AACF;;AAGA,SAAgB,iCACd,MACmD;CACnD,MAAM,cAAc,KAAK,uBAAuB;CAEhD,OAAO,EACL,MAAM,oBAAoB,UAAU;EAClC,MAAM,QAAkC,CAAC;EACzC,MAAM,SAAyE,CAAC;EAChF,IAAI,UAAU;EAEd,KAAK,MAAM,KAAK,UAAU;GACxB,MAAM,UAAU,oBAAoB,EAAE,OAAO;GAC7C,IAAI,YAAY,MAAM;IACpB,IAAI,EAAE,YAAY,KAAA,GAChB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE;KACX,SAAS;IACX,CAAC;SAID,WAAW;IAEb;GACF;GAGA,IAAI,QAAQ,SAAS,WAAW;IAC9B,WAAW;IACX;GACF;GAGA,IAAI,QAAQ,KAAK,WAAW,YAAY,GAAG;IACzC,WAAW;IACX;GACF;GAEA,MAAM,SAAS,mBAAmB,SAAS,KAAK,UAAU,KAAK,QAAQ;GACvE,IAAI,WAAW,MAAM;IACnB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,iBAAiB,QAAQ,KAAK;IACzC,CAAC;IACD;GACF;GAEA,IAAI,OAAO,WAAW,gBAAgB,CAAC,YAAY,SAAS,QAAQ,IAAI,GAAG;IACzE,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,UAAU,OAAO,iBAAiB,6BAA6B,QAAQ,KAAK;IACvF,CAAC;IACD;GACF;GAEA,MAAM,iBAAiB,OAAO,SAAS,aAAa,OAAO,cAAc,OAAO,IAAI;GAEpF,IAAI;GACJ,IAAI;IACF,QAAQ,MAAM,KAAK,WAAW;KAAE,SAAS;KAAG;KAAS;KAAQ;IAAe,CAAC;GAC/E,SAAS,KAAK;IACZ,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,qBAAqB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IAC/E,CAAC;IACD;GACF;GAEA,IAAI,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG;IACnC,WAAW;IACX;GACF;GAEA,MAAM,KAAK;IACT,IAAI,OAAO,EAAE;IACb,iBAAiB,EAAE;IACnB;IACA;IACA,YAAY,OAAO,cAAc;IACjC,OAAO,MAAM;IACb,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,YAAY,EAAE;IACd,UAAU,EAAE;GACd,CAAC;EACH;EAEA,OAAO;GAAE;GAAO;GAAS;EAAO;CAClC,EACF;AACF;AAEA,SAAS,OAAO,GAAmB;CACjC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK;AAC7D;;;;;;;;;ACzHA,SAAgB,iBACd,SAC6E;CAC7E,6BAA6B;EAC3B,UAAU;EACV,aAAa,QAAQ,uBAAuB,CAAC;EAC7C,SAAS;CACX,CAAC;CACD,MAAM,WAAW,QAAQ,YAAY;CAErC,QAAQ,SAAmB,QAAyD;EAClF,MAAM,UAAU,sBAAsB,QAAQ,aAAa,QAAQ,UAAU,OAAO,CAAC;EACrF,MAAM,eAAe,QAAQ,QAAQ,QAAQ,QAAQ;EACrD,MAAM,UAAU,QAAQ,YAAY,OAAO;EAC3C,MAAM,SAAS,IAAI,UAAU,IAAI,gBAAgB,CAAC,CAAC;EAEnD,MAAM,MAAsB,CAAC;EAC7B,IAAI;EACJ,IAAI;EACJ,MAAM,SAAS,IAAI,SAAqB,SAAS,WAAW;GAC1D,SAAS;GACT,OAAO;EACT,CAAC;EAID,OAAO,YAAY,CAAC,CAAC;EAErB,MAAM,OAA8B;GAClC;GACA,oBAAoB;GACpB,MAAM;GACN,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,QAAQ,iBAAiB,IAAI,CAAC;EACnF;EAEA,gBAAgB,SAA4C;GAC1D,IAAI;IACF,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAe,MAAM,MAAM;IAC1E,WAAW,MAAM,SAAS,IAAI,aAAa,SAAS,EAAE,OAAO,CAAC,GAAG;KAC/D,IAAI,KAAK,KAAK;KACd,MAAM,SAAS,SAAS,OAAO,EAAE,aAAa,CAAC;KAC/C,IAAI,QAAQ,MAAM;IACpB;IACA,OAAO,QAAQ,OAAO,MAAM,GAAG,CAAC;GAClC,SAAS,KAAK;IACZ,KAAK,GAAG;IACR,MAAM;GACR;EACF;EAEA,OAAO;GAAE,QAAQ,OAAO;GAAG;EAAO;CACpC;AACF;;;AAIA,SAAS,sBACP,MACA,WACc;CACd,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,SAAS,UAAU,eACrB;EAAE,GAAG,KAAK;EAAQ,cAAc,UAAU;CAAa,IACvD,KAAK;CACT,MAAM,cAAc,UAAU,QAAQ;EAAE,GAAI,KAAK,SAAS,CAAC;EAAI,GAAG,UAAU;CAAM,IAAI,KAAK;CAC3F,MAAM,YAAY,UAAU,iBACxB;EAAE,GAAI,KAAK,OAAO,CAAC;EAAI,GAAG,UAAU;CAAe,IACnD,KAAK;CACT,MAAM,YAAY,KAAK,WAAW,SAAS,CAAC;CAC5C,MAAM,cAAuC,UAAU,YAAY,SAC/D,CAAC,GAAG,WAAW,GAAG,UAAU,UAAU,IACtC,CAAC,GAAG,SAAS;CACjB,OAAO;EACL,GAAG;EACH,MAAM,UAAU,QAAQ,KAAK;EAC7B;EACA,GAAI,cAAc,EAAE,OAAO,YAAY,IAAI,CAAC;EAC5C,GAAI,YAAY,EAAE,KAAK,UAAU,IAAI,CAAC;EACtC,WAAW;GAAE,GAAG,KAAK;GAAW,OAAO;EAAY;CACrD;AACF"}