@tangle-network/agent-runtime 0.131.4 → 0.131.6

package/dist/{knowledge-C7Gly1cw.js.map → knowledge-D4zNvxw5.js.map}

@@ -1 +1 @@
-{"version":3,"file":"knowledge-C7Gly1cw.js","names":[],"sources":["../src/knowledge/activation.ts","../src/knowledge/supervised-update.ts","../src/knowledge/improvement-job.ts"],"sourcesContent":["import type {\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { sha256DigestSchema } from '@tangle-network/agent-interface'\nimport {\n  fromAgentCandidateKnowledgeRef,\n  type KnowledgeImprovementMutationReceipt,\n  loadKnowledgeImprovementActivationResult,\n  type PromoteKnowledgeCandidateOptions,\n  promoteKnowledgeCandidate,\n  restoreKnowledgeCandidateBaseline,\n} from '@tangle-network/agent-knowledge'\n\nimport {\n  type AgentImprovementActivationReconciliation,\n  type AgentImprovementActivationResultStore,\n  type AgentImprovementActivationTransition,\n  type AgentImprovementActivationTransitionInput,\n  createAgentImprovementActivationResult,\n} from '../intelligence/activation'\n\nexport interface CreateKnowledgeImprovementActivationExecutorOptions\n  extends Omit<PromoteKnowledgeCandidateOptions, 'root' | 'candidate'> {\n  root: string\n  identity: string\n  results: AgentImprovementActivationResultStore\n}\n\nexport interface KnowledgeImprovementActivationExecutor {\n  transition: AgentImprovementActivationTransition\n  reconcile: AgentImprovementActivationReconciliation\n}\n\n/** Apply or restore one local knowledge candidate through the shared activation contract. */\nexport function createKnowledgeImprovementActivationExecutor(\n  options: CreateKnowledgeImprovementActivationExecutorOptions,\n): KnowledgeImprovementActivationExecutor {\n  if (!options.identity.trim()) throw new Error('knowledge activation identity is required')\n  return {\n    reconcile: async (transition) => {\n      const inspected = await inspectKnowledgeActivation(options, transition)\n      return inspected.settled ? inspected.result : undefined\n    },\n    transition: async (transition) => {\n      if (transition.expired) {\n        throw new Error('knowledge write transition cannot run after authorization expires')\n      }\n      const inspected = await inspectKnowledgeActivation(options, transition)\n      if (inspected.settled) return inspected.result\n\n      const mutationOptions = {\n        root: options.root,\n        candidate: inspected.candidate,\n        activation: {\n          activation: transition.activation,\n          attemptedAt: transition.attemptedAt,\n          identity: options.identity,\n          createResult: (receipt: KnowledgeImprovementMutationReceipt) =>\n            inspected.create(\n              knowledgeMutationOutcome(receipt, inspected, transition.activation.intent),\n            ),\n        },\n        ...(options.ownerId ? { ownerId: options.ownerId } : {}),\n        ...(options.leaseTtlMs === undefined ? {} : { leaseTtlMs: options.leaseTtlMs }),\n        ...(options.now ? { now: options.now } : {}),\n        ...(options.onState ? { onState: options.onState } : {}),\n      }\n      const improvement =\n        transition.activation.intent === 'activate-candidate'\n          ? await promoteKnowledgeCandidate(mutationOptions)\n          : await restoreKnowledgeCandidateBaseline(mutationOptions)\n      if (!improvement.activationResult) {\n        throw new Error('knowledge mutation did not persist its shared activation result')\n      }\n      return options.results.putIfAbsent(improvement.activationResult)\n    },\n  }\n}\n\ntype CreateKnowledgeActivation = (\n  outcome: AgentImprovementActivationOutcome,\n) => AgentImprovementActivationResult\n\ntype InspectedKnowledgeActivation =\n  | { settled: true; result: unknown | undefined }\n  | {\n      settled: false\n      target: AgentImprovementActivationTransitionInput['targets'][number]\n      candidate: PromoteKnowledgeCandidateOptions['candidate']\n      expectedDigest: Sha256Digest\n      desiredDigest: Sha256Digest\n      create: CreateKnowledgeActivation\n    }\n\nasync function inspectKnowledgeActivation(\n  options: CreateKnowledgeImprovementActivationExecutorOptions,\n  transition: AgentImprovementActivationTransitionInput,\n): Promise<InspectedKnowledgeActivation> {\n  const stored = await options.results.load(transition.activation.digest)\n  if (stored !== undefined) return { settled: true, result: stored }\n\n  const create: CreateKnowledgeActivation = (outcome) =>\n    createAgentImprovementActivationResult(transition, {\n      completedAt: completionTime(transition, options.now),\n      outcome,\n    })\n  const store = (outcome: AgentImprovementActivationOutcome) =>\n    options.results.putIfAbsent(create(outcome))\n  if (transition.kind !== 'sealed-candidate') {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'unsupported',\n        code: 'KNOWLEDGE_PROFILE_TRANSITION_UNSUPPORTED',\n        message: 'The knowledge adapter accepts only sealed knowledge candidates.',\n      }),\n    }\n  }\n  const target = supportedKnowledgeTarget(transition, options.identity)\n  if (!target) {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'unsupported',\n        code: 'KNOWLEDGE_TARGET_SET_UNSUPPORTED',\n        message: 'The knowledge adapter requires exactly one matching knowledge target.',\n      }),\n    }\n  }\n  const knowledge = transition.candidateBundle.knowledge\n  if (!knowledge) {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'unsupported',\n        code: 'KNOWLEDGE_CANDIDATE_MISSING',\n        message: 'The measured candidate bundle does not contain a knowledge candidate.',\n      }),\n    }\n  }\n  const candidate = fromAgentCandidateKnowledgeRef(knowledge.candidate)\n  const expectedDigest =\n    transition.activation.intent === 'activate-candidate'\n      ? knowledge.candidate.baseHash\n      : knowledge.candidate.candidateHash\n  const desiredDigest =\n    transition.activation.intent === 'activate-candidate'\n      ? knowledge.candidate.candidateHash\n      : knowledge.candidate.baseHash\n  if (target.expectedBaseDigest !== expectedDigest || target.desiredDigest !== desiredDigest) {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'failed',\n        code: 'KNOWLEDGE_TARGET_MISMATCH',\n        message: 'The activation target does not match the measured knowledge candidate.',\n      }),\n    }\n  }\n\n  const durable = await loadKnowledgeImprovementActivationResult({\n    root: options.root,\n    candidate,\n    activation: transition.activation,\n    identity: options.identity,\n  })\n  if (durable) {\n    return {\n      settled: true,\n      result: await options.results.putIfAbsent(durable),\n    }\n  }\n  if (transition.expired) return { settled: true, result: undefined }\n  return { settled: false, target, candidate, expectedDigest, desiredDigest, create }\n}\n\nfunction supportedKnowledgeTarget(\n  transition: AgentImprovementActivationTransitionInput,\n  identity: string,\n): AgentImprovementActivationTransitionInput['targets'][number] | undefined {\n  if (transition.targets.length !== 1) return undefined\n  const target = transition.targets[0]\n  return target.surface === 'knowledge' && target.identity === identity ? target : undefined\n}\n\nfunction knowledgeMutationOutcome(\n  receipt: KnowledgeImprovementMutationReceipt,\n  inspected: Extract<InspectedKnowledgeActivation, { settled: false }>,\n  intent: AgentImprovementActivationTransitionInput['activation']['intent'],\n): AgentImprovementActivationOutcome {\n  const expectedTarget = intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const beforeDigest = prefixedDigest(receipt.beforeHash)\n  const afterDigest = prefixedDigest(receipt.afterHash)\n  if (\n    receipt.target !== expectedTarget ||\n    receipt.changed !== (beforeDigest !== afterDigest) ||\n    (!receipt.changed && (receipt.transactionId !== null || receipt.recovered))\n  ) {\n    throw new Error('knowledge mutation returned inconsistent state evidence')\n  }\n  if (receipt.changed) {\n    if (\n      receipt.transactionId === null ||\n      beforeDigest !== inspected.expectedDigest ||\n      afterDigest !== inspected.desiredDigest\n    ) {\n      throw new Error('knowledge activation did not apply its authorized content transition')\n    }\n    return {\n      status: 'applied',\n      transactionId: receipt.transactionId,\n      targets: [\n        {\n          surface: inspected.target.surface,\n          identity: inspected.target.identity,\n          beforeDigest,\n          afterDigest,\n        },\n      ],\n    }\n  }\n  if (afterDigest === inspected.desiredDigest) {\n    return {\n      status: 'already-applied',\n      targets: [targetState(inspected.target, afterDigest)],\n    }\n  }\n  if (afterDigest === inspected.expectedDigest) {\n    throw new Error('knowledge activation did not attempt its authorized content transition')\n  }\n  return {\n    status: 'conflict',\n    targets: [targetState(inspected.target, afterDigest)],\n  }\n}\n\nfunction targetState(target: AgentImprovementActivationTarget, currentDigest: Sha256Digest) {\n  return {\n    surface: target.surface,\n    identity: target.identity,\n    currentDigest,\n  }\n}\n\nfunction prefixedDigest(hash: string): Sha256Digest {\n  return sha256DigestSchema.parse(`sha256:${hash}`)\n}\n\nfunction completionTime(\n  transition: AgentImprovementActivationTransitionInput,\n  now: (() => Date) | undefined,\n): string {\n  const completedAt = (now ?? (() => new Date()))().toISOString()\n  return Date.parse(completedAt) < Date.parse(transition.attemptedAt)\n    ? transition.attemptedAt\n    : completedAt\n}\n","import { agentProfileSchema } from '@tangle-network/agent-interface'\nimport type { RagKnowledgeUpdateResult } from '@tangle-network/agent-knowledge'\nimport { RESEARCHER_SYSTEM_PROMPT } from '../profiles/researcher'\nimport type { DeliverableSpec } from '../runtime/supervise/completion-gate'\nimport { assertExecutableAgentProfile } from '../runtime/supervise/model-policy'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport { type SuperviseOptions, supervise } from '../runtime/supervise/supervise'\nimport type { SupervisorProfile } from '../runtime/supervise/supervisor-agent'\nimport type { Budget, SupervisedResult } from '../runtime/supervise/types'\n\n/** Standing prompt for a supervisor that grows a shared knowledge base through spawned researchers. */\nexport const RESEARCH_SUPERVISOR_SYSTEM_PROMPT = [\n  'You are a research supervisor. You do not answer the research question yourself.',\n  'You create and manage researcher workers that improve one shared knowledge base until it is ready.',\n  '',\n  'Each round:',\n  '1. Read the goal and the gaps the readiness check still reports.',\n  '2. Decompose the open work into independent sub-topics.',\n  '3. Spawn one researcher per sub-topic; split by sub-topic, never duplicate work.',\n  '4. Wait for researchers to settle, steer or re-spawn thin sub-topics, then stop when the check passes.',\n  '',\n  'Conserve the shared budget. Prefer a small number of well-scoped researchers over a large fanout that re-covers the same ground.',\n].join('\\n')\n\nexport interface KnowledgeReadinessCheckInput {\n  root: string\n  goal: string\n  readinessSpecs?: readonly unknown[]\n  readinessTaskId?: string\n  readiness?: unknown\n}\n\nexport type KnowledgeReadinessCheckResult =\n  | boolean\n  | {\n      ready: boolean\n      summary?: string\n      metadata?: Record<string, unknown>\n    }\n\nexport type KnowledgeReadinessCheck = (\n  input: KnowledgeReadinessCheckInput,\n) => Promise<KnowledgeReadinessCheckResult> | KnowledgeReadinessCheckResult\n\nexport interface SupervisedKnowledgeUpdateInput {\n  goal?: string\n  root?: string\n  candidateRoot?: string\n  findings?: readonly unknown[]\n  metadata?: Record<string, unknown>\n}\n\nexport interface SupervisedKnowledgeUpdateResult {\n  applied: boolean\n  summary: string\n  supervised: SupervisedResult<unknown>\n  metadata: NonNullable<RagKnowledgeUpdateResult['metadata']>\n}\n\nexport interface SupervisedKnowledgeUpdateOptions {\n  root: string\n  goal: string\n  readiness: KnowledgeReadinessCheck\n  readinessSpecs?: readonly unknown[]\n  readinessTaskId?: string\n  readinessOptions?: unknown\n  findings?: readonly unknown[]\n  metadata?: Record<string, unknown>\n  budget: Budget\n  backend?: ExecutorConfig\n  makeWorkerAgent?: SuperviseOptions['makeWorkerAgent']\n  /** Caller-owned exact supervisor harness/provider/model identity. */\n  supervisorProfile: SupervisorProfile\n  superviseOptions?: Partial<\n    Omit<\n      SuperviseOptions,\n      'budget' | 'backend' | 'deliverable' | 'makeWorkerAgent' | 'allowedModels'\n    >\n  >\n  allowedModels?: readonly string[]\n  runSupervised?: (\n    profile: SupervisorProfile,\n    task: unknown,\n    opts: SuperviseOptions,\n  ) => Promise<SupervisedResult<unknown>>\n}\n\nexport type SupervisedKnowledgeUpdater = (\n  input: SupervisedKnowledgeUpdateInput,\n) => Promise<SupervisedKnowledgeUpdateResult>\n\n/** Build the completion check a supervised KB update uses to stop only when the KB is ready. */\nexport function knowledgeReadinessDeliverable(\n  options: Pick<\n    SupervisedKnowledgeUpdateOptions,\n    'root' | 'goal' | 'readiness' | 'readinessSpecs' | 'readinessTaskId' | 'readinessOptions'\n  >,\n): DeliverableSpec<unknown> {\n  return {\n    describe: `knowledge base at ${options.root} is ready for: ${options.goal}`,\n    async check() {\n      const result = await options.readiness({\n        root: options.root,\n        goal: options.goal,\n        readinessSpecs: options.readinessSpecs,\n        readinessTaskId: options.readinessTaskId,\n        readiness: options.readinessOptions,\n      })\n      return typeof result === 'boolean' ? result : result.ready\n    },\n  }\n}\n\n/** Create an `improveKnowledgeBase` update callback backed by runtime supervision. */\nexport function createSupervisedKnowledgeUpdater(\n  options: SupervisedKnowledgeUpdateOptions,\n): SupervisedKnowledgeUpdater {\n  return (input) =>\n    runSupervisedKnowledgeUpdate({\n      ...options,\n      root: input.candidateRoot ?? input.root ?? options.root,\n      goal: input.goal ?? options.goal,\n      findings: input.findings ?? options.findings,\n      metadata: { ...options.metadata, ...input.metadata },\n    })\n}\n\n/** Run a runtime supervisor that updates one candidate knowledge base and stops on readiness. */\nexport async function runSupervisedKnowledgeUpdate(\n  options: SupervisedKnowledgeUpdateOptions,\n): Promise<SupervisedKnowledgeUpdateResult> {\n  const exactSupervisor = agentProfileSchema.parse(options.supervisorProfile) as SupervisorProfile\n  assertExecutableAgentProfile(exactSupervisor, 'runSupervisedKnowledgeUpdate')\n  const baseInstructions = exactSupervisor.prompt?.systemPrompt ?? RESEARCH_SUPERVISOR_SYSTEM_PROMPT\n  const workerContract = RESEARCHER_SYSTEM_PROMPT\n  const systemPrompt = workerContract\n    ? `${baseInstructions}\\n\\nEach researcher worker you spawn follows this contract:\\n${workerContract}`\n    : baseInstructions\n\n  const profile: SupervisorProfile = {\n    ...exactSupervisor,\n    prompt: { ...exactSupervisor.prompt, systemPrompt },\n  }\n  const run = options.runSupervised ?? supervise\n  const task = formatSupervisedKnowledgeTask(options)\n  const supervised = await run(profile, task, {\n    ...options.superviseOptions,\n    budget: options.budget,\n    backend: options.backend,\n    deliverable: knowledgeReadinessDeliverable(options),\n    makeWorkerAgent: options.makeWorkerAgent,\n    allowedModels: options.allowedModels,\n  })\n  return {\n    applied: supervised.kind === 'winner',\n    summary:\n      supervised.kind === 'winner'\n        ? 'research supervisor completed and the knowledge base passed readiness'\n        : `research supervisor stopped without a ready knowledge base: ${supervised.reason}`,\n    supervised,\n    metadata: {\n      supervised: true,\n      root: options.root,\n      goal: options.goal,\n      result: supervised.kind,\n    },\n  }\n}\n\n/** Format the supervisor task with the KB root, readiness requirements, current findings, and metadata. */\nexport function formatSupervisedKnowledgeTask(\n  options: Pick<\n    SupervisedKnowledgeUpdateOptions,\n    'root' | 'goal' | 'readinessSpecs' | 'readinessTaskId' | 'findings' | 'metadata'\n  >,\n): string {\n  const sections = [\n    `Goal: ${options.goal}`,\n    `Knowledge base root: ${options.root}`,\n    options.readinessTaskId ? `Readiness task id: ${options.readinessTaskId}` : undefined,\n    options.readinessSpecs?.length\n      ? `Readiness specs:\\n${JSON.stringify(options.readinessSpecs, null, 2)}`\n      : undefined,\n    options.findings?.length\n      ? `Current findings:\\n${JSON.stringify(options.findings, null, 2)}`\n      : undefined,\n    options.metadata && Object.keys(options.metadata).length > 0\n      ? `Metadata:\\n${JSON.stringify(options.metadata, null, 2)}`\n      : undefined,\n  ].filter((section): section is string => Boolean(section))\n  return `${sections.join('\\n\\n')}\\n\\nUpdate files under the knowledge base root only. Stop when the readiness check passes.`\n}\n","import { realpath } from 'node:fs/promises'\nimport {\n  type AgentCandidateBundle,\n  type AgentCandidateCapturedArtifact,\n  type AgentCandidateKnowledge,\n  agentCandidateKnowledgeSchema,\n} from '@tangle-network/agent-interface'\nimport {\n  type BuildEvalKnowledgeBundleOptions,\n  evaluateKnowledgeBaseReadiness,\n  improveKnowledgeBase,\n  type KnowledgeBaseQualityOptions,\n  type KnowledgeImprovementOptions,\n  type KnowledgeImprovementResult,\n  type KnowledgeReadinessSpec,\n  knowledgeImprovementCandidateRef,\n  toAgentCandidateKnowledgeRef,\n  withKnowledgeImprovementComparison,\n} from '@tangle-network/agent-knowledge'\nimport { sealAgentCandidateBundle } from '../candidate-execution/bundle'\nimport {\n  canonicalCandidateBytes,\n  embeddedCandidateArtifact,\n  omitTopLevelDigest,\n} from '../candidate-execution/digest'\nimport { persistCandidateOutputArtifact } from '../candidate-execution/output-artifacts'\nimport type { AgentCandidateOutputArtifactPort } from '../candidate-execution/types'\nimport { captureAgentCandidateWorkspace } from '../candidate-execution/workspace-archive'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { SuperviseOptions } from '../runtime/supervise/supervise'\nimport type { SupervisorProfile } from '../runtime/supervise/supervisor-agent'\nimport type { Budget, SupervisedResult } from '../runtime/supervise/types'\nimport {\n  createSupervisedKnowledgeUpdater,\n  type KnowledgeReadinessCheck,\n  type KnowledgeReadinessCheckResult,\n  type SupervisedKnowledgeUpdateOptions,\n} from './supervised-update'\n\nexport interface RunKnowledgeImprovementJobOptions\n  extends Omit<KnowledgeImprovementOptions, 'updateKnowledge'> {\n  budget: Budget\n  readinessCheck?: KnowledgeReadinessCheck\n  backend?: ExecutorConfig\n  makeWorkerAgent?: SuperviseOptions['makeWorkerAgent']\n  supervisorProfile: SupervisorProfile\n  superviseOptions?: Partial<\n    Omit<\n      SuperviseOptions,\n      'budget' | 'backend' | 'deliverable' | 'makeWorkerAgent' | 'allowedModels'\n    >\n  >\n  allowedModels?: readonly string[]\n  runSupervised?: (\n    profile: SupervisorProfile,\n    task: unknown,\n    opts: SuperviseOptions,\n  ) => Promise<SupervisedResult<unknown>>\n  candidateArtifacts?: AgentCandidateOutputArtifactPort\n  onMeasurement?: (measurement: KnowledgeImprovementJobMeasurement) => Promise<void> | void\n}\n\nexport interface KnowledgeImprovementJobMeasurement {\n  startedAt: string\n  finishedAt: string\n  durationMs: number\n  updateCalls: number\n  updateDurationMs: number\n  supervisedSpent: {\n    iterations: number\n    inputTokens: number\n    outputTokens: number\n    usdKnown: boolean\n    usd: number\n    ms: number\n  }\n}\n\nexport interface KnowledgeImprovementJobResult {\n  improvement: KnowledgeImprovementResult\n  knowledge?: KnowledgeImprovementCandidatePair\n  measurement: KnowledgeImprovementJobMeasurement\n  blocked: boolean\n}\n\nexport interface KnowledgeImprovementCandidatePair {\n  reference: AgentCandidateKnowledge['candidate']\n  evaluation: AgentCandidateCapturedArtifact\n  baseline: AgentCandidateKnowledge['snapshot']\n  candidate: AgentCandidateKnowledge['snapshot']\n}\n\nexport interface KnowledgeImprovementExperimentBundles {\n  baseline: AgentCandidateBundle\n  candidate: AgentCandidateBundle\n}\n\nexport interface AgentKnowledgeReadinessCheckOptions {\n  goal: string\n  readinessSpecs?: readonly KnowledgeReadinessSpec[]\n  readinessTaskId?: string\n  readiness?: Omit<BuildEvalKnowledgeBundleOptions, 'taskId' | 'index' | 'specs'>\n  strict?: boolean\n  kbQuality?: KnowledgeBaseQualityOptions\n}\n\n/** Build the default readiness check backed by `@tangle-network/agent-knowledge` validation and scoring. */\nexport function createAgentKnowledgeReadinessCheck(\n  options: AgentKnowledgeReadinessCheckOptions,\n): KnowledgeReadinessCheck {\n  return async (input): Promise<KnowledgeReadinessCheckResult> => {\n    const readiness = await evaluateKnowledgeBaseReadiness({\n      root: input.root,\n      goal: input.goal ?? options.goal,\n      readinessSpecs:\n        (input.readinessSpecs as readonly KnowledgeReadinessSpec[] | undefined) ??\n        options.readinessSpecs,\n      readinessTaskId: input.readinessTaskId ?? options.readinessTaskId,\n      readiness:\n        (input.readiness as AgentKnowledgeReadinessCheckOptions['readiness'] | undefined) ??\n        options.readiness,\n      strict: options.strict,\n      kbQuality: options.kbQuality,\n    })\n    return {\n      ready: readiness.ready,\n      summary: readiness.summary,\n      metadata: {\n        dimensions: readiness.dimensions,\n        validationOk: readiness.validation.ok,\n        kbQualityOk: readiness.kbQuality.ok,\n        blockingMissing: readiness.readiness?.report.blockingMissingRequirements.length ?? 0,\n      },\n    }\n  }\n}\n\n/** Produce a frozen KB candidate while leaving live knowledge content unchanged. */\nexport async function runKnowledgeImprovementJob(\n  options: RunKnowledgeImprovementJobOptions,\n): Promise<KnowledgeImprovementJobResult> {\n  const {\n    allowedModels,\n    backend,\n    budget,\n    candidateArtifacts,\n    makeWorkerAgent,\n    onMeasurement,\n    readinessCheck,\n    runSupervised,\n    supervisorProfile,\n    superviseOptions,\n    ...knowledgeOptions\n  } = options\n  const startedAtMs = Date.now()\n  const startedAt = new Date(startedAtMs).toISOString()\n  const supervisedSpent = emptySpent()\n  let updateCalls = 0\n  let updateDurationMs = 0\n\n  const readiness = readinessCheck ?? createAgentKnowledgeReadinessCheck(options)\n  const updateKnowledge = createSupervisedKnowledgeUpdater({\n    root: options.root,\n    goal: options.goal,\n    readiness,\n    readinessSpecs: options.readinessSpecs,\n    readinessTaskId: options.readinessTaskId,\n    readinessOptions: options.readiness,\n    budget,\n    backend,\n    makeWorkerAgent,\n    supervisorProfile,\n    superviseOptions,\n    allowedModels,\n    runSupervised,\n  } satisfies SupervisedKnowledgeUpdateOptions)\n\n  const instrumentedUpdateKnowledge: KnowledgeImprovementOptions['updateKnowledge'] = async (\n    input,\n  ) => {\n    const updateStartedAt = Date.now()\n    updateCalls += 1\n    const result = await updateKnowledge(input)\n    updateDurationMs += Date.now() - updateStartedAt\n    addSpent(supervisedSpent, result.supervised)\n    return result\n  }\n  const resolvedImprovement = await improveKnowledgeBase({\n    ...knowledgeOptions,\n    updateKnowledge: instrumentedUpdateKnowledge,\n  })\n  let knowledge: KnowledgeImprovementCandidatePair | undefined\n  if (\n    resolvedImprovement.candidate?.status === 'candidate-ready' ||\n    resolvedImprovement.candidate?.status === 'promoted'\n  ) {\n    knowledge = await freezeKnowledgeCandidatePair(\n      options.root,\n      resolvedImprovement,\n      candidateArtifacts,\n      knowledgeOptions.signal,\n    )\n  }\n  const finishedAtMs = Date.now()\n  const measurement: KnowledgeImprovementJobMeasurement = {\n    startedAt,\n    finishedAt: new Date(finishedAtMs).toISOString(),\n    durationMs: finishedAtMs - startedAtMs,\n    updateCalls,\n    updateDurationMs,\n    supervisedSpent,\n  }\n  await onMeasurement?.(measurement)\n  return {\n    improvement: resolvedImprovement,\n    ...(knowledge ? { knowledge } : {}),\n    measurement,\n    blocked: resolvedImprovement.blocked,\n  }\n}\n\n/** Attach both frozen knowledge inputs to one otherwise-identical bundle pair. */\nexport function buildKnowledgeImprovementExperimentBundles(\n  bundle: AgentCandidateBundle,\n  knowledge: KnowledgeImprovementCandidatePair,\n): KnowledgeImprovementExperimentBundles {\n  const input = omitTopLevelDigest(bundle)\n  const withSnapshot = (snapshot: AgentCandidateKnowledge['snapshot']) =>\n    agentCandidateKnowledgeSchema.parse({\n      candidate: knowledge.reference,\n      snapshot,\n      evaluation: knowledge.evaluation,\n    })\n  return Object.freeze({\n    baseline: sealAgentCandidateBundle({ ...input, knowledge: withSnapshot(knowledge.baseline) }),\n    candidate: sealAgentCandidateBundle({ ...input, knowledge: withSnapshot(knowledge.candidate) }),\n  })\n}\n\nasync function freezeKnowledgeCandidatePair(\n  root: string,\n  improvement: KnowledgeImprovementResult,\n  artifacts: AgentCandidateOutputArtifactPort | undefined,\n  signal: AbortSignal | undefined,\n): Promise<KnowledgeImprovementCandidatePair> {\n  const candidate = knowledgeImprovementCandidateRef(improvement)\n  const candidateRef = toAgentCandidateKnowledgeRef(candidate)\n  return withKnowledgeImprovementComparison({ root, candidate }, async (comparison) => {\n    const freeze = async (\n      target: 'baseline' | 'candidate',\n    ): Promise<AgentCandidateKnowledge['snapshot']> => {\n      const executionId = `knowledge-${candidate.candidateId}-${target}`\n      const captured = await captureAgentCandidateWorkspace(\n        await realpath(comparison[target].root),\n        {\n          ...(artifacts\n            ? {\n                artifactPersistence: {\n                  executionId,\n                  outputArtifacts: artifacts,\n                  ...(signal ? { signal } : {}),\n                },\n              }\n            : {}),\n        },\n      )\n      return captured.snapshot\n    }\n    const evaluation = await captureKnowledgeEvidence(\n      canonicalCandidateBytes({\n        kind: 'agent-knowledge-candidate-evaluation',\n        candidate: candidateRef,\n        metric: comparison.evaluation,\n      }),\n      'knowledge-evaluation',\n      `knowledge-${candidate.candidateId}`,\n      artifacts,\n      signal,\n    )\n    const baseline = await freeze('baseline')\n    const proposed = await freeze('candidate')\n    return Object.freeze({\n      reference: candidateRef,\n      evaluation,\n      baseline,\n      candidate: proposed,\n    })\n  })\n}\n\nasync function captureKnowledgeEvidence(\n  bytes: Uint8Array,\n  purpose: 'knowledge-evaluation',\n  executionId: string,\n  artifacts: AgentCandidateOutputArtifactPort | undefined,\n  signal: AbortSignal | undefined,\n): Promise<AgentCandidateCapturedArtifact> {\n  if (!artifacts) return embeddedCandidateArtifact(bytes)\n  return persistCandidateOutputArtifact(artifacts, {\n    executionId,\n    purpose,\n    bytes,\n    ...(signal ? { signal } : {}),\n  })\n}\n\nfunction emptySpent(): KnowledgeImprovementJobMeasurement['supervisedSpent'] {\n  return { iterations: 0, inputTokens: 0, outputTokens: 0, usdKnown: true, usd: 0, ms: 0 }\n}\n\nfunction addSpent(\n  target: KnowledgeImprovementJobMeasurement['supervisedSpent'],\n  result: SupervisedResult<unknown>,\n): void {\n  const spent = result.spentTotal\n  target.iterations += spent.iterations\n  target.inputTokens += spent.tokens.input\n  target.outputTokens += spent.tokens.output\n  target.usdKnown = target.usdKnown && spent.usdKnown !== false\n  target.usd += spent.usd\n  target.ms += spent.ms\n}\n"],"mappings":";;;;;;;;;;;AAqCA,SAAgB,6CACd,SACwC;CACxC,IAAI,CAAC,QAAQ,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,2CAA2C;CACzF,OAAO;EACL,WAAW,OAAO,eAAe;GAC/B,MAAM,YAAY,MAAM,2BAA2B,SAAS,UAAU;GACtE,OAAO,UAAU,UAAU,UAAU,SAAS,KAAA;EAChD;EACA,YAAY,OAAO,eAAe;GAChC,IAAI,WAAW,SACb,MAAM,IAAI,MAAM,mEAAmE;GAErF,MAAM,YAAY,MAAM,2BAA2B,SAAS,UAAU;GACtE,IAAI,UAAU,SAAS,OAAO,UAAU;GAExC,MAAM,kBAAkB;IACtB,MAAM,QAAQ;IACd,WAAW,UAAU;IACrB,YAAY;KACV,YAAY,WAAW;KACvB,aAAa,WAAW;KACxB,UAAU,QAAQ;KAClB,eAAe,YACb,UAAU,OACR,yBAAyB,SAAS,WAAW,WAAW,WAAW,MAAM,CAC3E;IACJ;IACA,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;IACtD,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;IAC7E,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;IAC1C,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;GACxD;GACA,MAAM,cACJ,WAAW,WAAW,WAAW,uBAC7B,MAAM,0BAA0B,eAAe,IAC/C,MAAM,kCAAkC,eAAe;GAC7D,IAAI,CAAC,YAAY,kBACf,MAAM,IAAI,MAAM,iEAAiE;GAEnF,OAAO,QAAQ,QAAQ,YAAY,YAAY,gBAAgB;EACjE;CACF;AACF;AAiBA,eAAe,2BACb,SACA,YACuC;CACvC,MAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK,WAAW,WAAW,MAAM;CACtE,IAAI,WAAW,KAAA,GAAW,OAAO;EAAE,SAAS;EAAM,QAAQ;CAAO;CAEjE,MAAM,UAAqC,YACzC,uCAAuC,YAAY;EACjD,aAAa,eAAe,YAAY,QAAQ,GAAG;EACnD;CACF,CAAC;CACH,MAAM,SAAS,YACb,QAAQ,QAAQ,YAAY,OAAO,OAAO,CAAC;CAC7C,IAAI,WAAW,SAAS,oBAAoB;EAC1C,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,MAAM,SAAS,yBAAyB,YAAY,QAAQ,QAAQ;CACpE,IAAI,CAAC,QAAQ;EACX,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,MAAM,YAAY,WAAW,gBAAgB;CAC7C,IAAI,CAAC,WAAW;EACd,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,MAAM,YAAY,+BAA+B,UAAU,SAAS;CACpE,MAAM,iBACJ,WAAW,WAAW,WAAW,uBAC7B,UAAU,UAAU,WACpB,UAAU,UAAU;CAC1B,MAAM,gBACJ,WAAW,WAAW,WAAW,uBAC7B,UAAU,UAAU,gBACpB,UAAU,UAAU;CAC1B,IAAI,OAAO,uBAAuB,kBAAkB,OAAO,kBAAkB,eAAe;EAC1F,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CAEA,MAAM,UAAU,MAAM,yCAAyC;EAC7D,MAAM,QAAQ;EACd;EACA,YAAY,WAAW;EACvB,UAAU,QAAQ;CACpB,CAAC;CACD,IAAI,SACF,OAAO;EACL,SAAS;EACT,QAAQ,MAAM,QAAQ,QAAQ,YAAY,OAAO;CACnD;CAEF,IAAI,WAAW,SAAS,OAAO;EAAE,SAAS;EAAM,QAAQ,KAAA;CAAU;CAClE,OAAO;EAAE,SAAS;EAAO;EAAQ;EAAW;EAAgB;EAAe;CAAO;AACpF;AAEA,SAAS,yBACP,YACA,UAC0E;CAC1E,IAAI,WAAW,QAAQ,WAAW,GAAG,OAAO,KAAA;CAC5C,MAAM,SAAS,WAAW,QAAQ;CAClC,OAAO,OAAO,YAAY,eAAe,OAAO,aAAa,WAAW,SAAS,KAAA;AACnF;AAEA,SAAS,yBACP,SACA,WACA,QACmC;CACnC,MAAM,iBAAiB,WAAW,uBAAuB,cAAc;CACvE,MAAM,eAAe,eAAe,QAAQ,UAAU;CACtD,MAAM,cAAc,eAAe,QAAQ,SAAS;CACpD,IACE,QAAQ,WAAW,kBACnB,QAAQ,aAAa,iBAAiB,gBACrC,CAAC,QAAQ,YAAY,QAAQ,kBAAkB,QAAQ,QAAQ,YAEhE,MAAM,IAAI,MAAM,yDAAyD;CAE3E,IAAI,QAAQ,SAAS;EACnB,IACE,QAAQ,kBAAkB,QAC1B,iBAAiB,UAAU,kBAC3B,gBAAgB,UAAU,eAE1B,MAAM,IAAI,MAAM,sEAAsE;EAExF,OAAO;GACL,QAAQ;GACR,eAAe,QAAQ;GACvB,SAAS,CACP;IACE,SAAS,UAAU,OAAO;IAC1B,UAAU,UAAU,OAAO;IAC3B;IACA;GACF,CACF;EACF;CACF;CACA,IAAI,gBAAgB,UAAU,eAC5B,OAAO;EACL,QAAQ;EACR,SAAS,CAAC,YAAY,UAAU,QAAQ,WAAW,CAAC;CACtD;CAEF,IAAI,gBAAgB,UAAU,gBAC5B,MAAM,IAAI,MAAM,wEAAwE;CAE1F,OAAO;EACL,QAAQ;EACR,SAAS,CAAC,YAAY,UAAU,QAAQ,WAAW,CAAC;CACtD;AACF;AAEA,SAAS,YAAY,QAA0C,eAA6B;CAC1F,OAAO;EACL,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB;CACF;AACF;AAEA,SAAS,eAAe,MAA4B;CAClD,OAAO,mBAAmB,MAAM,UAAU,MAAM;AAClD;AAEA,SAAS,eACP,YACA,KACQ;CACR,MAAM,eAAe,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CAC9D,OAAO,KAAK,MAAM,WAAW,IAAI,KAAK,MAAM,WAAW,WAAW,IAC9D,WAAW,cACX;AACN;;;;AC5PA,MAAa,oCAAoC;CAC/C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI;;AAsEX,SAAgB,8BACd,SAI0B;CAC1B,OAAO;EACL,UAAU,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ;EACrE,MAAM,QAAQ;GACZ,MAAM,SAAS,MAAM,QAAQ,UAAU;IACrC,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,gBAAgB,QAAQ;IACxB,iBAAiB,QAAQ;IACzB,WAAW,QAAQ;GACrB,CAAC;GACD,OAAO,OAAO,WAAW,YAAY,SAAS,OAAO;EACvD;CACF;AACF;;AAGA,SAAgB,iCACd,SAC4B;CAC5B,QAAQ,UACN,6BAA6B;EAC3B,GAAG;EACH,MAAM,MAAM,iBAAiB,MAAM,QAAQ,QAAQ;EACnD,MAAM,MAAM,QAAQ,QAAQ;EAC5B,UAAU,MAAM,YAAY,QAAQ;EACpC,UAAU;GAAE,GAAG,QAAQ;GAAU,GAAG,MAAM;EAAS;CACrD,CAAC;AACL;;AAGA,eAAsB,6BACpB,SAC0C;CAC1C,MAAM,kBAAkB,mBAAmB,MAAM,QAAQ,iBAAiB;CAC1E,6BAA6B,iBAAiB,8BAA8B;CAC5E,MAAM,mBAAmB,gBAAgB,QAAQ,gBAAgB;CACjE,MAAM,iBAAiB;CACvB,MAAM,eAAe,iBACjB,GAAG,iBAAiB,+DAA+D,mBACnF;CAEJ,MAAM,UAA6B;EACjC,GAAG;EACH,QAAQ;GAAE,GAAG,gBAAgB;GAAQ;EAAa;CACpD;CAGA,MAAM,aAAa,OAFP,QAAQ,iBAAiB,UAAA,CAER,SADhB,8BAA8B,OACF,GAAG;EAC1C,GAAG,QAAQ;EACX,QAAQ,QAAQ;EAChB,SAAS,QAAQ;EACjB,aAAa,8BAA8B,OAAO;EAClD,iBAAiB,QAAQ;EACzB,eAAe,QAAQ;CACzB,CAAC;CACD,OAAO;EACL,SAAS,WAAW,SAAS;EAC7B,SACE,WAAW,SAAS,WAChB,0EACA,+DAA+D,WAAW;EAChF;EACA,UAAU;GACR,YAAY;GACZ,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,QAAQ,WAAW;EACrB;CACF;AACF;;AAGA,SAAgB,8BACd,SAIQ;CAeR,OAAO,GAdU;EACf,SAAS,QAAQ;EACjB,wBAAwB,QAAQ;EAChC,QAAQ,kBAAkB,sBAAsB,QAAQ,oBAAoB,KAAA;EAC5E,QAAQ,gBAAgB,SACpB,qBAAqB,KAAK,UAAU,QAAQ,gBAAgB,MAAM,CAAC,MACnE,KAAA;EACJ,QAAQ,UAAU,SACd,sBAAsB,KAAK,UAAU,QAAQ,UAAU,MAAM,CAAC,MAC9D,KAAA;EACJ,QAAQ,YAAY,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,SAAS,IACvD,cAAc,KAAK,UAAU,QAAQ,UAAU,MAAM,CAAC,MACtD,KAAA;CACN,CAAC,CAAC,QAAQ,YAA+B,QAAQ,OAAO,CACvC,CAAC,CAAC,KAAK,MAAM,EAAE;AAClC;;;;ACpFA,SAAgB,mCACd,SACyB;CACzB,OAAO,OAAO,UAAkD;EAC9D,MAAM,YAAY,MAAM,+BAA+B;GACrD,MAAM,MAAM;GACZ,MAAM,MAAM,QAAQ,QAAQ;GAC5B,gBACG,MAAM,kBACP,QAAQ;GACV,iBAAiB,MAAM,mBAAmB,QAAQ;GAClD,WACG,MAAM,aACP,QAAQ;GACV,QAAQ,QAAQ;GAChB,WAAW,QAAQ;EACrB,CAAC;EACD,OAAO;GACL,OAAO,UAAU;GACjB,SAAS,UAAU;GACnB,UAAU;IACR,YAAY,UAAU;IACtB,cAAc,UAAU,WAAW;IACnC,aAAa,UAAU,UAAU;IACjC,iBAAiB,UAAU,WAAW,OAAO,4BAA4B,UAAU;GACrF;EACF;CACF;AACF;;AAGA,eAAsB,2BACpB,SACwC;CACxC,MAAM,EACJ,eACA,SACA,QACA,oBACA,iBACA,eACA,gBACA,eACA,mBACA,kBACA,GAAG,qBACD;CACJ,MAAM,cAAc,KAAK,IAAI;CAC7B,MAAM,YAAY,IAAI,KAAK,WAAW,CAAC,CAAC,YAAY;CACpD,MAAM,kBAAkB,WAAW;CACnC,IAAI,cAAc;CAClB,IAAI,mBAAmB;CAEvB,MAAM,YAAY,kBAAkB,mCAAmC,OAAO;CAC9E,MAAM,kBAAkB,iCAAiC;EACvD,MAAM,QAAQ;EACd,MAAM,QAAQ;EACd;EACA,gBAAgB,QAAQ;EACxB,iBAAiB,QAAQ;EACzB,kBAAkB,QAAQ;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAA4C;CAE5C,MAAM,8BAA8E,OAClF,UACG;EACH,MAAM,kBAAkB,KAAK,IAAI;EACjC,eAAe;EACf,MAAM,SAAS,MAAM,gBAAgB,KAAK;EAC1C,oBAAoB,KAAK,IAAI,IAAI;EACjC,SAAS,iBAAiB,OAAO,UAAU;EAC3C,OAAO;CACT;CACA,MAAM,sBAAsB,MAAM,qBAAqB;EACrD,GAAG;EACH,iBAAiB;CACnB,CAAC;CACD,IAAI;CACJ,IACE,oBAAoB,WAAW,WAAW,qBAC1C,oBAAoB,WAAW,WAAW,YAE1C,YAAY,MAAM,6BAChB,QAAQ,MACR,qBACA,oBACA,iBAAiB,MACnB;CAEF,MAAM,eAAe,KAAK,IAAI;CAC9B,MAAM,cAAkD;EACtD;EACA,YAAY,IAAI,KAAK,YAAY,CAAC,CAAC,YAAY;EAC/C,YAAY,eAAe;EAC3B;EACA;EACA;CACF;CACA,MAAM,gBAAgB,WAAW;CACjC,OAAO;EACL,aAAa;EACb,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACjC;EACA,SAAS,oBAAoB;CAC/B;AACF;;AAGA,SAAgB,2CACd,QACA,WACuC;CACvC,MAAM,QAAQ,mBAAmB,MAAM;CACvC,MAAM,gBAAgB,aACpB,8BAA8B,MAAM;EAClC,WAAW,UAAU;EACrB;EACA,YAAY,UAAU;CACxB,CAAC;CACH,OAAO,OAAO,OAAO;EACnB,UAAU,yBAAyB;GAAE,GAAG;GAAO,WAAW,aAAa,UAAU,QAAQ;EAAE,CAAC;EAC5F,WAAW,yBAAyB;GAAE,GAAG;GAAO,WAAW,aAAa,UAAU,SAAS;EAAE,CAAC;CAChG,CAAC;AACH;AAEA,eAAe,6BACb,MACA,aACA,WACA,QAC4C;CAC5C,MAAM,YAAY,iCAAiC,WAAW;CAC9D,MAAM,eAAe,6BAA6B,SAAS;CAC3D,OAAO,mCAAmC;EAAE;EAAM;CAAU,GAAG,OAAO,eAAe;EACnF,MAAM,SAAS,OACb,WACiD;GACjD,MAAM,cAAc,aAAa,UAAU,YAAY,GAAG;GAe1D,QAAO,MAdgB,+BACrB,MAAM,SAAS,WAAW,OAAO,CAAC,IAAI,GACtC,EACE,GAAI,YACA,EACE,qBAAqB;IACnB;IACA,iBAAiB;IACjB,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC7B,EACF,IACA,CAAC,EACP,CACF,EAAA,CACgB;EAClB;EACA,MAAM,aAAa,MAAM,yBACvB,wBAAwB;GACtB,MAAM;GACN,WAAW;GACX,QAAQ,WAAW;EACrB,CAAC,GACD,wBACA,aAAa,UAAU,eACvB,WACA,MACF;EACA,MAAM,WAAW,MAAM,OAAO,UAAU;EACxC,MAAM,WAAW,MAAM,OAAO,WAAW;EACzC,OAAO,OAAO,OAAO;GACnB,WAAW;GACX;GACA;GACA,WAAW;EACb,CAAC;CACH,CAAC;AACH;AAEA,eAAe,yBACb,OACA,SACA,aACA,WACA,QACyC;CACzC,IAAI,CAAC,WAAW,OAAO,0BAA0B,KAAK;CACtD,OAAO,+BAA+B,WAAW;EAC/C;EACA;EACA;EACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;CAC7B,CAAC;AACH;AAEA,SAAS,aAAoE;CAC3E,OAAO;EAAE,YAAY;EAAG,aAAa;EAAG,cAAc;EAAG,UAAU;EAAM,KAAK;EAAG,IAAI;CAAE;AACzF;AAEA,SAAS,SACP,QACA,QACM;CACN,MAAM,QAAQ,OAAO;CACrB,OAAO,cAAc,MAAM;CAC3B,OAAO,eAAe,MAAM,OAAO;CACnC,OAAO,gBAAgB,MAAM,OAAO;CACpC,OAAO,WAAW,OAAO,YAAY,MAAM,aAAa;CACxD,OAAO,OAAO,MAAM;CACpB,OAAO,MAAM,MAAM;AACrB"}
+{"version":3,"file":"knowledge-D4zNvxw5.js","names":[],"sources":["../src/knowledge/activation.ts","../src/knowledge/supervised-update.ts","../src/knowledge/improvement-job.ts"],"sourcesContent":["import type {\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { sha256DigestSchema } from '@tangle-network/agent-interface'\nimport {\n  fromAgentCandidateKnowledgeRef,\n  type KnowledgeImprovementMutationReceipt,\n  loadKnowledgeImprovementActivationResult,\n  type PromoteKnowledgeCandidateOptions,\n  promoteKnowledgeCandidate,\n  restoreKnowledgeCandidateBaseline,\n} from '@tangle-network/agent-knowledge'\n\nimport {\n  type AgentImprovementActivationReconciliation,\n  type AgentImprovementActivationResultStore,\n  type AgentImprovementActivationTransition,\n  type AgentImprovementActivationTransitionInput,\n  createAgentImprovementActivationResult,\n} from '../intelligence/activation'\n\nexport interface CreateKnowledgeImprovementActivationExecutorOptions\n  extends Omit<PromoteKnowledgeCandidateOptions, 'root' | 'candidate'> {\n  root: string\n  identity: string\n  results: AgentImprovementActivationResultStore\n}\n\nexport interface KnowledgeImprovementActivationExecutor {\n  transition: AgentImprovementActivationTransition\n  reconcile: AgentImprovementActivationReconciliation\n}\n\n/** Apply or restore one local knowledge candidate through the shared activation contract. */\nexport function createKnowledgeImprovementActivationExecutor(\n  options: CreateKnowledgeImprovementActivationExecutorOptions,\n): KnowledgeImprovementActivationExecutor {\n  if (!options.identity.trim()) throw new Error('knowledge activation identity is required')\n  return {\n    reconcile: async (transition) => {\n      const inspected = await inspectKnowledgeActivation(options, transition)\n      return inspected.settled ? inspected.result : undefined\n    },\n    transition: async (transition) => {\n      if (transition.expired) {\n        throw new Error('knowledge write transition cannot run after authorization expires')\n      }\n      const inspected = await inspectKnowledgeActivation(options, transition)\n      if (inspected.settled) return inspected.result\n\n      const mutationOptions = {\n        root: options.root,\n        candidate: inspected.candidate,\n        activation: {\n          activation: transition.activation,\n          attemptedAt: transition.attemptedAt,\n          identity: options.identity,\n          createResult: (receipt: KnowledgeImprovementMutationReceipt) =>\n            inspected.create(\n              knowledgeMutationOutcome(receipt, inspected, transition.activation.intent),\n            ),\n        },\n        ...(options.ownerId ? { ownerId: options.ownerId } : {}),\n        ...(options.leaseTtlMs === undefined ? {} : { leaseTtlMs: options.leaseTtlMs }),\n        ...(options.now ? { now: options.now } : {}),\n        ...(options.onState ? { onState: options.onState } : {}),\n      }\n      const improvement =\n        transition.activation.intent === 'activate-candidate'\n          ? await promoteKnowledgeCandidate(mutationOptions)\n          : await restoreKnowledgeCandidateBaseline(mutationOptions)\n      if (!improvement.activationResult) {\n        throw new Error('knowledge mutation did not persist its shared activation result')\n      }\n      return options.results.putIfAbsent(improvement.activationResult)\n    },\n  }\n}\n\ntype CreateKnowledgeActivation = (\n  outcome: AgentImprovementActivationOutcome,\n) => AgentImprovementActivationResult\n\ntype InspectedKnowledgeActivation =\n  | { settled: true; result: unknown | undefined }\n  | {\n      settled: false\n      target: AgentImprovementActivationTransitionInput['targets'][number]\n      candidate: PromoteKnowledgeCandidateOptions['candidate']\n      expectedDigest: Sha256Digest\n      desiredDigest: Sha256Digest\n      create: CreateKnowledgeActivation\n    }\n\nasync function inspectKnowledgeActivation(\n  options: CreateKnowledgeImprovementActivationExecutorOptions,\n  transition: AgentImprovementActivationTransitionInput,\n): Promise<InspectedKnowledgeActivation> {\n  const stored = await options.results.load(transition.activation.digest)\n  if (stored !== undefined) return { settled: true, result: stored }\n\n  const create: CreateKnowledgeActivation = (outcome) =>\n    createAgentImprovementActivationResult(transition, {\n      completedAt: completionTime(transition, options.now),\n      outcome,\n    })\n  const store = (outcome: AgentImprovementActivationOutcome) =>\n    options.results.putIfAbsent(create(outcome))\n  if (transition.kind !== 'sealed-candidate') {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'unsupported',\n        code: 'KNOWLEDGE_PROFILE_TRANSITION_UNSUPPORTED',\n        message: 'The knowledge adapter accepts only sealed knowledge candidates.',\n      }),\n    }\n  }\n  const target = supportedKnowledgeTarget(transition, options.identity)\n  if (!target) {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'unsupported',\n        code: 'KNOWLEDGE_TARGET_SET_UNSUPPORTED',\n        message: 'The knowledge adapter requires exactly one matching knowledge target.',\n      }),\n    }\n  }\n  const knowledge = transition.candidateBundle.knowledge\n  if (!knowledge) {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'unsupported',\n        code: 'KNOWLEDGE_CANDIDATE_MISSING',\n        message: 'The measured candidate bundle does not contain a knowledge candidate.',\n      }),\n    }\n  }\n  const candidate = fromAgentCandidateKnowledgeRef(knowledge.candidate)\n  const expectedDigest =\n    transition.activation.intent === 'activate-candidate'\n      ? knowledge.candidate.baseHash\n      : knowledge.candidate.candidateHash\n  const desiredDigest =\n    transition.activation.intent === 'activate-candidate'\n      ? knowledge.candidate.candidateHash\n      : knowledge.candidate.baseHash\n  if (target.expectedBaseDigest !== expectedDigest || target.desiredDigest !== desiredDigest) {\n    if (transition.expired) return { settled: true, result: undefined }\n    return {\n      settled: true,\n      result: await store({\n        status: 'failed',\n        code: 'KNOWLEDGE_TARGET_MISMATCH',\n        message: 'The activation target does not match the measured knowledge candidate.',\n      }),\n    }\n  }\n\n  const durable = await loadKnowledgeImprovementActivationResult({\n    root: options.root,\n    candidate,\n    activation: transition.activation,\n    identity: options.identity,\n  })\n  if (durable) {\n    return {\n      settled: true,\n      result: await options.results.putIfAbsent(durable),\n    }\n  }\n  if (transition.expired) return { settled: true, result: undefined }\n  return { settled: false, target, candidate, expectedDigest, desiredDigest, create }\n}\n\nfunction supportedKnowledgeTarget(\n  transition: AgentImprovementActivationTransitionInput,\n  identity: string,\n): AgentImprovementActivationTransitionInput['targets'][number] | undefined {\n  if (transition.targets.length !== 1) return undefined\n  const target = transition.targets[0]\n  return target.surface === 'knowledge' && target.identity === identity ? target : undefined\n}\n\nfunction knowledgeMutationOutcome(\n  receipt: KnowledgeImprovementMutationReceipt,\n  inspected: Extract<InspectedKnowledgeActivation, { settled: false }>,\n  intent: AgentImprovementActivationTransitionInput['activation']['intent'],\n): AgentImprovementActivationOutcome {\n  const expectedTarget = intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const beforeDigest = prefixedDigest(receipt.beforeHash)\n  const afterDigest = prefixedDigest(receipt.afterHash)\n  if (\n    receipt.target !== expectedTarget ||\n    receipt.changed !== (beforeDigest !== afterDigest) ||\n    (!receipt.changed && (receipt.transactionId !== null || receipt.recovered))\n  ) {\n    throw new Error('knowledge mutation returned inconsistent state evidence')\n  }\n  if (receipt.changed) {\n    if (\n      receipt.transactionId === null ||\n      beforeDigest !== inspected.expectedDigest ||\n      afterDigest !== inspected.desiredDigest\n    ) {\n      throw new Error('knowledge activation did not apply its authorized content transition')\n    }\n    return {\n      status: 'applied',\n      transactionId: receipt.transactionId,\n      targets: [\n        {\n          surface: inspected.target.surface,\n          identity: inspected.target.identity,\n          beforeDigest,\n          afterDigest,\n        },\n      ],\n    }\n  }\n  if (afterDigest === inspected.desiredDigest) {\n    return {\n      status: 'already-applied',\n      targets: [targetState(inspected.target, afterDigest)],\n    }\n  }\n  if (afterDigest === inspected.expectedDigest) {\n    throw new Error('knowledge activation did not attempt its authorized content transition')\n  }\n  return {\n    status: 'conflict',\n    targets: [targetState(inspected.target, afterDigest)],\n  }\n}\n\nfunction targetState(target: AgentImprovementActivationTarget, currentDigest: Sha256Digest) {\n  return {\n    surface: target.surface,\n    identity: target.identity,\n    currentDigest,\n  }\n}\n\nfunction prefixedDigest(hash: string): Sha256Digest {\n  return sha256DigestSchema.parse(`sha256:${hash}`)\n}\n\nfunction completionTime(\n  transition: AgentImprovementActivationTransitionInput,\n  now: (() => Date) | undefined,\n): string {\n  const completedAt = (now ?? (() => new Date()))().toISOString()\n  return Date.parse(completedAt) < Date.parse(transition.attemptedAt)\n    ? transition.attemptedAt\n    : completedAt\n}\n","import { agentProfileSchema } from '@tangle-network/agent-interface'\nimport type { RagKnowledgeUpdateResult } from '@tangle-network/agent-knowledge'\nimport { RESEARCHER_SYSTEM_PROMPT } from '../profiles/researcher'\nimport type { DeliverableSpec } from '../runtime/supervise/completion-gate'\nimport { assertExecutableAgentProfile } from '../runtime/supervise/model-policy'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport { type SuperviseOptions, supervise } from '../runtime/supervise/supervise'\nimport type { SupervisorProfile } from '../runtime/supervise/supervisor-agent'\nimport type { Budget, SupervisedResult } from '../runtime/supervise/types'\n\n/** Standing prompt for a supervisor that grows a shared knowledge base through spawned researchers. */\nexport const RESEARCH_SUPERVISOR_SYSTEM_PROMPT = [\n  'You are a research supervisor. You do not answer the research question yourself.',\n  'You create and manage researcher workers that improve one shared knowledge base until it is ready.',\n  '',\n  'Each round:',\n  '1. Read the goal and the gaps the readiness check still reports.',\n  '2. Decompose the open work into independent sub-topics.',\n  '3. Spawn one researcher per sub-topic; split by sub-topic, never duplicate work.',\n  '4. Wait for researchers to settle, steer or re-spawn thin sub-topics, then stop when the check passes.',\n  '',\n  'Conserve the shared budget. Prefer a small number of well-scoped researchers over a large fanout that re-covers the same ground.',\n].join('\\n')\n\nexport interface KnowledgeReadinessCheckInput {\n  root: string\n  goal: string\n  readinessSpecs?: readonly unknown[]\n  readinessTaskId?: string\n  readiness?: unknown\n}\n\nexport type KnowledgeReadinessCheckResult =\n  | boolean\n  | {\n      ready: boolean\n      summary?: string\n      metadata?: Record<string, unknown>\n    }\n\nexport type KnowledgeReadinessCheck = (\n  input: KnowledgeReadinessCheckInput,\n) => Promise<KnowledgeReadinessCheckResult> | KnowledgeReadinessCheckResult\n\nexport interface SupervisedKnowledgeUpdateInput {\n  goal?: string\n  root?: string\n  candidateRoot?: string\n  findings?: readonly unknown[]\n  metadata?: Record<string, unknown>\n}\n\nexport interface SupervisedKnowledgeUpdateResult {\n  applied: boolean\n  summary: string\n  supervised: SupervisedResult<unknown>\n  metadata: NonNullable<RagKnowledgeUpdateResult['metadata']>\n}\n\nexport interface SupervisedKnowledgeUpdateOptions {\n  root: string\n  goal: string\n  readiness: KnowledgeReadinessCheck\n  readinessSpecs?: readonly unknown[]\n  readinessTaskId?: string\n  readinessOptions?: unknown\n  findings?: readonly unknown[]\n  metadata?: Record<string, unknown>\n  budget: Budget\n  backend?: ExecutorConfig\n  makeWorkerAgent?: SuperviseOptions['makeWorkerAgent']\n  /** Caller-owned exact supervisor harness/provider/model identity. */\n  supervisorProfile: SupervisorProfile\n  superviseOptions?: Partial<\n    Omit<\n      SuperviseOptions,\n      'budget' | 'backend' | 'deliverable' | 'makeWorkerAgent' | 'allowedModels'\n    >\n  >\n  allowedModels?: readonly string[]\n  runSupervised?: (\n    profile: SupervisorProfile,\n    task: unknown,\n    opts: SuperviseOptions,\n  ) => Promise<SupervisedResult<unknown>>\n}\n\nexport type SupervisedKnowledgeUpdater = (\n  input: SupervisedKnowledgeUpdateInput,\n) => Promise<SupervisedKnowledgeUpdateResult>\n\n/** Build the completion check a supervised KB update uses to stop only when the KB is ready. */\nexport function knowledgeReadinessDeliverable(\n  options: Pick<\n    SupervisedKnowledgeUpdateOptions,\n    'root' | 'goal' | 'readiness' | 'readinessSpecs' | 'readinessTaskId' | 'readinessOptions'\n  >,\n): DeliverableSpec<unknown> {\n  return {\n    describe: `knowledge base at ${options.root} is ready for: ${options.goal}`,\n    async check() {\n      const result = await options.readiness({\n        root: options.root,\n        goal: options.goal,\n        readinessSpecs: options.readinessSpecs,\n        readinessTaskId: options.readinessTaskId,\n        readiness: options.readinessOptions,\n      })\n      return typeof result === 'boolean' ? result : result.ready\n    },\n  }\n}\n\n/** Create an `improveKnowledgeBase` update callback backed by runtime supervision. */\nexport function createSupervisedKnowledgeUpdater(\n  options: SupervisedKnowledgeUpdateOptions,\n): SupervisedKnowledgeUpdater {\n  return (input) =>\n    runSupervisedKnowledgeUpdate({\n      ...options,\n      root: input.candidateRoot ?? input.root ?? options.root,\n      goal: input.goal ?? options.goal,\n      findings: input.findings ?? options.findings,\n      metadata: { ...options.metadata, ...input.metadata },\n    })\n}\n\n/** Run a runtime supervisor that updates one candidate knowledge base and stops on readiness. */\nexport async function runSupervisedKnowledgeUpdate(\n  options: SupervisedKnowledgeUpdateOptions,\n): Promise<SupervisedKnowledgeUpdateResult> {\n  const exactSupervisor = agentProfileSchema.parse(options.supervisorProfile) as SupervisorProfile\n  assertExecutableAgentProfile(exactSupervisor, 'runSupervisedKnowledgeUpdate')\n  const baseInstructions = exactSupervisor.prompt?.systemPrompt ?? RESEARCH_SUPERVISOR_SYSTEM_PROMPT\n  const workerContract = RESEARCHER_SYSTEM_PROMPT\n  const systemPrompt = workerContract\n    ? `${baseInstructions}\\n\\nEach researcher worker you spawn follows this contract:\\n${workerContract}`\n    : baseInstructions\n\n  const profile: SupervisorProfile = {\n    ...exactSupervisor,\n    prompt: { ...exactSupervisor.prompt, systemPrompt },\n  }\n  const run = options.runSupervised ?? supervise\n  const task = formatSupervisedKnowledgeTask(options)\n  const supervised = await run(profile, task, {\n    ...options.superviseOptions,\n    budget: options.budget,\n    backend: options.backend,\n    deliverable: knowledgeReadinessDeliverable(options),\n    makeWorkerAgent: options.makeWorkerAgent,\n    allowedModels: options.allowedModels,\n  })\n  return {\n    applied: supervised.kind === 'winner',\n    summary:\n      supervised.kind === 'winner'\n        ? 'research supervisor completed and the knowledge base passed readiness'\n        : `research supervisor stopped without a ready knowledge base: ${supervised.reason}`,\n    supervised,\n    metadata: {\n      supervised: true,\n      root: options.root,\n      goal: options.goal,\n      result: supervised.kind,\n    },\n  }\n}\n\n/** Format the supervisor task with the KB root, readiness requirements, current findings, and metadata. */\nexport function formatSupervisedKnowledgeTask(\n  options: Pick<\n    SupervisedKnowledgeUpdateOptions,\n    'root' | 'goal' | 'readinessSpecs' | 'readinessTaskId' | 'findings' | 'metadata'\n  >,\n): string {\n  const sections = [\n    `Goal: ${options.goal}`,\n    `Knowledge base root: ${options.root}`,\n    options.readinessTaskId ? `Readiness task id: ${options.readinessTaskId}` : undefined,\n    options.readinessSpecs?.length\n      ? `Readiness specs:\\n${JSON.stringify(options.readinessSpecs, null, 2)}`\n      : undefined,\n    options.findings?.length\n      ? `Current findings:\\n${JSON.stringify(options.findings, null, 2)}`\n      : undefined,\n    options.metadata && Object.keys(options.metadata).length > 0\n      ? `Metadata:\\n${JSON.stringify(options.metadata, null, 2)}`\n      : undefined,\n  ].filter((section): section is string => Boolean(section))\n  return `${sections.join('\\n\\n')}\\n\\nUpdate files under the knowledge base root only. Stop when the readiness check passes.`\n}\n","import { realpath } from 'node:fs/promises'\nimport {\n  type AgentCandidateBundle,\n  type AgentCandidateCapturedArtifact,\n  type AgentCandidateKnowledge,\n  agentCandidateKnowledgeSchema,\n} from '@tangle-network/agent-interface'\nimport {\n  type BuildEvalKnowledgeBundleOptions,\n  evaluateKnowledgeBaseReadiness,\n  improveKnowledgeBase,\n  type KnowledgeBaseQualityOptions,\n  type KnowledgeImprovementOptions,\n  type KnowledgeImprovementResult,\n  type KnowledgeReadinessSpec,\n  knowledgeImprovementCandidateRef,\n  toAgentCandidateKnowledgeRef,\n  withKnowledgeImprovementComparison,\n} from '@tangle-network/agent-knowledge'\nimport { sealAgentCandidateBundle } from '../candidate-execution/bundle'\nimport {\n  canonicalCandidateBytes,\n  embeddedCandidateArtifact,\n  omitTopLevelDigest,\n} from '../candidate-execution/digest'\nimport { persistCandidateOutputArtifact } from '../candidate-execution/output-artifacts'\nimport type { AgentCandidateOutputArtifactPort } from '../candidate-execution/types'\nimport { captureAgentCandidateWorkspace } from '../candidate-execution/workspace-archive'\nimport type { ExecutorConfig } from '../runtime/supervise/runtime'\nimport type { SuperviseOptions } from '../runtime/supervise/supervise'\nimport type { SupervisorProfile } from '../runtime/supervise/supervisor-agent'\nimport type { Budget, SupervisedResult } from '../runtime/supervise/types'\nimport {\n  createSupervisedKnowledgeUpdater,\n  type KnowledgeReadinessCheck,\n  type KnowledgeReadinessCheckResult,\n  type SupervisedKnowledgeUpdateOptions,\n} from './supervised-update'\n\nexport interface RunKnowledgeImprovementJobOptions\n  extends Omit<KnowledgeImprovementOptions, 'updateKnowledge'> {\n  budget: Budget\n  readinessCheck?: KnowledgeReadinessCheck\n  backend?: ExecutorConfig\n  makeWorkerAgent?: SuperviseOptions['makeWorkerAgent']\n  supervisorProfile: SupervisorProfile\n  superviseOptions?: Partial<\n    Omit<\n      SuperviseOptions,\n      'budget' | 'backend' | 'deliverable' | 'makeWorkerAgent' | 'allowedModels'\n    >\n  >\n  allowedModels?: readonly string[]\n  runSupervised?: (\n    profile: SupervisorProfile,\n    task: unknown,\n    opts: SuperviseOptions,\n  ) => Promise<SupervisedResult<unknown>>\n  candidateArtifacts?: AgentCandidateOutputArtifactPort\n  onMeasurement?: (measurement: KnowledgeImprovementJobMeasurement) => Promise<void> | void\n}\n\nexport interface KnowledgeImprovementJobMeasurement {\n  startedAt: string\n  finishedAt: string\n  durationMs: number\n  updateCalls: number\n  updateDurationMs: number\n  supervisedSpent: {\n    iterations: number\n    inputTokens: number\n    outputTokens: number\n    usdKnown: boolean\n    usd: number\n    ms: number\n  }\n}\n\nexport interface KnowledgeImprovementJobResult {\n  improvement: KnowledgeImprovementResult\n  knowledge?: KnowledgeImprovementCandidatePair\n  measurement: KnowledgeImprovementJobMeasurement\n  blocked: boolean\n}\n\nexport interface KnowledgeImprovementCandidatePair {\n  reference: AgentCandidateKnowledge['candidate']\n  evaluation: AgentCandidateCapturedArtifact\n  baseline: AgentCandidateKnowledge['snapshot']\n  candidate: AgentCandidateKnowledge['snapshot']\n}\n\nexport interface KnowledgeImprovementExperimentBundles {\n  baseline: AgentCandidateBundle\n  candidate: AgentCandidateBundle\n}\n\nexport interface AgentKnowledgeReadinessCheckOptions {\n  goal: string\n  readinessSpecs?: readonly KnowledgeReadinessSpec[]\n  readinessTaskId?: string\n  readiness?: Omit<BuildEvalKnowledgeBundleOptions, 'taskId' | 'index' | 'specs'>\n  strict?: boolean\n  kbQuality?: KnowledgeBaseQualityOptions\n}\n\n/** Build the default readiness check backed by `@tangle-network/agent-knowledge` validation and scoring. */\nexport function createAgentKnowledgeReadinessCheck(\n  options: AgentKnowledgeReadinessCheckOptions,\n): KnowledgeReadinessCheck {\n  return async (input): Promise<KnowledgeReadinessCheckResult> => {\n    const readiness = await evaluateKnowledgeBaseReadiness({\n      root: input.root,\n      goal: input.goal ?? options.goal,\n      readinessSpecs:\n        (input.readinessSpecs as readonly KnowledgeReadinessSpec[] | undefined) ??\n        options.readinessSpecs,\n      readinessTaskId: input.readinessTaskId ?? options.readinessTaskId,\n      readiness:\n        (input.readiness as AgentKnowledgeReadinessCheckOptions['readiness'] | undefined) ??\n        options.readiness,\n      strict: options.strict,\n      kbQuality: options.kbQuality,\n    })\n    return {\n      ready: readiness.ready,\n      summary: readiness.summary,\n      metadata: {\n        dimensions: readiness.dimensions,\n        validationOk: readiness.validation.ok,\n        kbQualityOk: readiness.kbQuality.ok,\n        blockingMissing: readiness.readiness?.report.blockingMissingRequirements.length ?? 0,\n      },\n    }\n  }\n}\n\n/** Produce a frozen KB candidate while leaving live knowledge content unchanged. */\nexport async function runKnowledgeImprovementJob(\n  options: RunKnowledgeImprovementJobOptions,\n): Promise<KnowledgeImprovementJobResult> {\n  const {\n    allowedModels,\n    backend,\n    budget,\n    candidateArtifacts,\n    makeWorkerAgent,\n    onMeasurement,\n    readinessCheck,\n    runSupervised,\n    supervisorProfile,\n    superviseOptions,\n    ...knowledgeOptions\n  } = options\n  const startedAtMs = Date.now()\n  const startedAt = new Date(startedAtMs).toISOString()\n  const supervisedSpent = emptySpent()\n  let updateCalls = 0\n  let updateDurationMs = 0\n\n  const readiness = readinessCheck ?? createAgentKnowledgeReadinessCheck(options)\n  const updateKnowledge = createSupervisedKnowledgeUpdater({\n    root: options.root,\n    goal: options.goal,\n    readiness,\n    readinessSpecs: options.readinessSpecs,\n    readinessTaskId: options.readinessTaskId,\n    readinessOptions: options.readiness,\n    budget,\n    backend,\n    makeWorkerAgent,\n    supervisorProfile,\n    superviseOptions,\n    allowedModels,\n    runSupervised,\n  } satisfies SupervisedKnowledgeUpdateOptions)\n\n  const instrumentedUpdateKnowledge: KnowledgeImprovementOptions['updateKnowledge'] = async (\n    input,\n  ) => {\n    const updateStartedAt = Date.now()\n    updateCalls += 1\n    const result = await updateKnowledge(input)\n    updateDurationMs += Date.now() - updateStartedAt\n    addSpent(supervisedSpent, result.supervised)\n    return result\n  }\n  const resolvedImprovement = await improveKnowledgeBase({\n    ...knowledgeOptions,\n    updateKnowledge: instrumentedUpdateKnowledge,\n  })\n  let knowledge: KnowledgeImprovementCandidatePair | undefined\n  if (\n    resolvedImprovement.candidate?.status === 'candidate-ready' ||\n    resolvedImprovement.candidate?.status === 'promoted'\n  ) {\n    knowledge = await freezeKnowledgeCandidatePair(\n      options.root,\n      resolvedImprovement,\n      candidateArtifacts,\n      knowledgeOptions.signal,\n    )\n  }\n  const finishedAtMs = Date.now()\n  const measurement: KnowledgeImprovementJobMeasurement = {\n    startedAt,\n    finishedAt: new Date(finishedAtMs).toISOString(),\n    durationMs: finishedAtMs - startedAtMs,\n    updateCalls,\n    updateDurationMs,\n    supervisedSpent,\n  }\n  await onMeasurement?.(measurement)\n  return {\n    improvement: resolvedImprovement,\n    ...(knowledge ? { knowledge } : {}),\n    measurement,\n    blocked: resolvedImprovement.blocked,\n  }\n}\n\n/** Attach both frozen knowledge inputs to one otherwise-identical bundle pair. */\nexport function buildKnowledgeImprovementExperimentBundles(\n  bundle: AgentCandidateBundle,\n  knowledge: KnowledgeImprovementCandidatePair,\n): KnowledgeImprovementExperimentBundles {\n  const input = omitTopLevelDigest(bundle)\n  const withSnapshot = (snapshot: AgentCandidateKnowledge['snapshot']) =>\n    agentCandidateKnowledgeSchema.parse({\n      candidate: knowledge.reference,\n      snapshot,\n      evaluation: knowledge.evaluation,\n    })\n  return Object.freeze({\n    baseline: sealAgentCandidateBundle({ ...input, knowledge: withSnapshot(knowledge.baseline) }),\n    candidate: sealAgentCandidateBundle({ ...input, knowledge: withSnapshot(knowledge.candidate) }),\n  })\n}\n\nasync function freezeKnowledgeCandidatePair(\n  root: string,\n  improvement: KnowledgeImprovementResult,\n  artifacts: AgentCandidateOutputArtifactPort | undefined,\n  signal: AbortSignal | undefined,\n): Promise<KnowledgeImprovementCandidatePair> {\n  const candidate = knowledgeImprovementCandidateRef(improvement)\n  const candidateRef = toAgentCandidateKnowledgeRef(candidate)\n  return withKnowledgeImprovementComparison({ root, candidate }, async (comparison) => {\n    const freeze = async (\n      target: 'baseline' | 'candidate',\n    ): Promise<AgentCandidateKnowledge['snapshot']> => {\n      const executionId = `knowledge-${candidate.candidateId}-${target}`\n      const captured = await captureAgentCandidateWorkspace(\n        await realpath(comparison[target].root),\n        {\n          ...(artifacts\n            ? {\n                artifactPersistence: {\n                  executionId,\n                  outputArtifacts: artifacts,\n                  ...(signal ? { signal } : {}),\n                },\n              }\n            : {}),\n        },\n      )\n      return captured.snapshot\n    }\n    const evaluation = await captureKnowledgeEvidence(\n      canonicalCandidateBytes({\n        kind: 'agent-knowledge-candidate-evaluation',\n        candidate: candidateRef,\n        metric: comparison.evaluation,\n      }),\n      'knowledge-evaluation',\n      `knowledge-${candidate.candidateId}`,\n      artifacts,\n      signal,\n    )\n    const baseline = await freeze('baseline')\n    const proposed = await freeze('candidate')\n    return Object.freeze({\n      reference: candidateRef,\n      evaluation,\n      baseline,\n      candidate: proposed,\n    })\n  })\n}\n\nasync function captureKnowledgeEvidence(\n  bytes: Uint8Array,\n  purpose: 'knowledge-evaluation',\n  executionId: string,\n  artifacts: AgentCandidateOutputArtifactPort | undefined,\n  signal: AbortSignal | undefined,\n): Promise<AgentCandidateCapturedArtifact> {\n  if (!artifacts) return embeddedCandidateArtifact(bytes)\n  return persistCandidateOutputArtifact(artifacts, {\n    executionId,\n    purpose,\n    bytes,\n    ...(signal ? { signal } : {}),\n  })\n}\n\nfunction emptySpent(): KnowledgeImprovementJobMeasurement['supervisedSpent'] {\n  return { iterations: 0, inputTokens: 0, outputTokens: 0, usdKnown: true, usd: 0, ms: 0 }\n}\n\nfunction addSpent(\n  target: KnowledgeImprovementJobMeasurement['supervisedSpent'],\n  result: SupervisedResult<unknown>,\n): void {\n  const spent = result.spentTotal\n  target.iterations += spent.iterations\n  target.inputTokens += spent.tokens.input\n  target.outputTokens += spent.tokens.output\n  target.usdKnown = target.usdKnown && spent.usdKnown !== false\n  target.usd += spent.usd\n  target.ms += spent.ms\n}\n"],"mappings":";;;;;;;;;;;AAqCA,SAAgB,6CACd,SACwC;CACxC,IAAI,CAAC,QAAQ,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,2CAA2C;CACzF,OAAO;EACL,WAAW,OAAO,eAAe;GAC/B,MAAM,YAAY,MAAM,2BAA2B,SAAS,UAAU;GACtE,OAAO,UAAU,UAAU,UAAU,SAAS,KAAA;EAChD;EACA,YAAY,OAAO,eAAe;GAChC,IAAI,WAAW,SACb,MAAM,IAAI,MAAM,mEAAmE;GAErF,MAAM,YAAY,MAAM,2BAA2B,SAAS,UAAU;GACtE,IAAI,UAAU,SAAS,OAAO,UAAU;GAExC,MAAM,kBAAkB;IACtB,MAAM,QAAQ;IACd,WAAW,UAAU;IACrB,YAAY;KACV,YAAY,WAAW;KACvB,aAAa,WAAW;KACxB,UAAU,QAAQ;KAClB,eAAe,YACb,UAAU,OACR,yBAAyB,SAAS,WAAW,WAAW,WAAW,MAAM,CAC3E;IACJ;IACA,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;IACtD,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;IAC7E,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;IAC1C,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;GACxD;GACA,MAAM,cACJ,WAAW,WAAW,WAAW,uBAC7B,MAAM,0BAA0B,eAAe,IAC/C,MAAM,kCAAkC,eAAe;GAC7D,IAAI,CAAC,YAAY,kBACf,MAAM,IAAI,MAAM,iEAAiE;GAEnF,OAAO,QAAQ,QAAQ,YAAY,YAAY,gBAAgB;EACjE;CACF;AACF;AAiBA,eAAe,2BACb,SACA,YACuC;CACvC,MAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK,WAAW,WAAW,MAAM;CACtE,IAAI,WAAW,KAAA,GAAW,OAAO;EAAE,SAAS;EAAM,QAAQ;CAAO;CAEjE,MAAM,UAAqC,YACzC,uCAAuC,YAAY;EACjD,aAAa,eAAe,YAAY,QAAQ,GAAG;EACnD;CACF,CAAC;CACH,MAAM,SAAS,YACb,QAAQ,QAAQ,YAAY,OAAO,OAAO,CAAC;CAC7C,IAAI,WAAW,SAAS,oBAAoB;EAC1C,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,MAAM,SAAS,yBAAyB,YAAY,QAAQ,QAAQ;CACpE,IAAI,CAAC,QAAQ;EACX,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,MAAM,YAAY,WAAW,gBAAgB;CAC7C,IAAI,CAAC,WAAW;EACd,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,MAAM,YAAY,+BAA+B,UAAU,SAAS;CACpE,MAAM,iBACJ,WAAW,WAAW,WAAW,uBAC7B,UAAU,UAAU,WACpB,UAAU,UAAU;CAC1B,MAAM,gBACJ,WAAW,WAAW,WAAW,uBAC7B,UAAU,UAAU,gBACpB,UAAU,UAAU;CAC1B,IAAI,OAAO,uBAAuB,kBAAkB,OAAO,kBAAkB,eAAe;EAC1F,IAAI,WAAW,SAAS,OAAO;GAAE,SAAS;GAAM,QAAQ,KAAA;EAAU;EAClE,OAAO;GACL,SAAS;GACT,QAAQ,MAAM,MAAM;IAClB,QAAQ;IACR,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CAEA,MAAM,UAAU,MAAM,yCAAyC;EAC7D,MAAM,QAAQ;EACd;EACA,YAAY,WAAW;EACvB,UAAU,QAAQ;CACpB,CAAC;CACD,IAAI,SACF,OAAO;EACL,SAAS;EACT,QAAQ,MAAM,QAAQ,QAAQ,YAAY,OAAO;CACnD;CAEF,IAAI,WAAW,SAAS,OAAO;EAAE,SAAS;EAAM,QAAQ,KAAA;CAAU;CAClE,OAAO;EAAE,SAAS;EAAO;EAAQ;EAAW;EAAgB;EAAe;CAAO;AACpF;AAEA,SAAS,yBACP,YACA,UAC0E;CAC1E,IAAI,WAAW,QAAQ,WAAW,GAAG,OAAO,KAAA;CAC5C,MAAM,SAAS,WAAW,QAAQ;CAClC,OAAO,OAAO,YAAY,eAAe,OAAO,aAAa,WAAW,SAAS,KAAA;AACnF;AAEA,SAAS,yBACP,SACA,WACA,QACmC;CACnC,MAAM,iBAAiB,WAAW,uBAAuB,cAAc;CACvE,MAAM,eAAe,eAAe,QAAQ,UAAU;CACtD,MAAM,cAAc,eAAe,QAAQ,SAAS;CACpD,IACE,QAAQ,WAAW,kBACnB,QAAQ,aAAa,iBAAiB,gBACrC,CAAC,QAAQ,YAAY,QAAQ,kBAAkB,QAAQ,QAAQ,YAEhE,MAAM,IAAI,MAAM,yDAAyD;CAE3E,IAAI,QAAQ,SAAS;EACnB,IACE,QAAQ,kBAAkB,QAC1B,iBAAiB,UAAU,kBAC3B,gBAAgB,UAAU,eAE1B,MAAM,IAAI,MAAM,sEAAsE;EAExF,OAAO;GACL,QAAQ;GACR,eAAe,QAAQ;GACvB,SAAS,CACP;IACE,SAAS,UAAU,OAAO;IAC1B,UAAU,UAAU,OAAO;IAC3B;IACA;GACF,CACF;EACF;CACF;CACA,IAAI,gBAAgB,UAAU,eAC5B,OAAO;EACL,QAAQ;EACR,SAAS,CAAC,YAAY,UAAU,QAAQ,WAAW,CAAC;CACtD;CAEF,IAAI,gBAAgB,UAAU,gBAC5B,MAAM,IAAI,MAAM,wEAAwE;CAE1F,OAAO;EACL,QAAQ;EACR,SAAS,CAAC,YAAY,UAAU,QAAQ,WAAW,CAAC;CACtD;AACF;AAEA,SAAS,YAAY,QAA0C,eAA6B;CAC1F,OAAO;EACL,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB;CACF;AACF;AAEA,SAAS,eAAe,MAA4B;CAClD,OAAO,mBAAmB,MAAM,UAAU,MAAM;AAClD;AAEA,SAAS,eACP,YACA,KACQ;CACR,MAAM,eAAe,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CAC9D,OAAO,KAAK,MAAM,WAAW,IAAI,KAAK,MAAM,WAAW,WAAW,IAC9D,WAAW,cACX;AACN;;;;AC5PA,MAAa,oCAAoC;CAC/C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI;;AAsEX,SAAgB,8BACd,SAI0B;CAC1B,OAAO;EACL,UAAU,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ;EACrE,MAAM,QAAQ;GACZ,MAAM,SAAS,MAAM,QAAQ,UAAU;IACrC,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,gBAAgB,QAAQ;IACxB,iBAAiB,QAAQ;IACzB,WAAW,QAAQ;GACrB,CAAC;GACD,OAAO,OAAO,WAAW,YAAY,SAAS,OAAO;EACvD;CACF;AACF;;AAGA,SAAgB,iCACd,SAC4B;CAC5B,QAAQ,UACN,6BAA6B;EAC3B,GAAG;EACH,MAAM,MAAM,iBAAiB,MAAM,QAAQ,QAAQ;EACnD,MAAM,MAAM,QAAQ,QAAQ;EAC5B,UAAU,MAAM,YAAY,QAAQ;EACpC,UAAU;GAAE,GAAG,QAAQ;GAAU,GAAG,MAAM;EAAS;CACrD,CAAC;AACL;;AAGA,eAAsB,6BACpB,SAC0C;CAC1C,MAAM,kBAAkB,mBAAmB,MAAM,QAAQ,iBAAiB;CAC1E,6BAA6B,iBAAiB,8BAA8B;CAC5E,MAAM,mBAAmB,gBAAgB,QAAQ,gBAAgB;CACjE,MAAM,iBAAiB;CACvB,MAAM,eAAe,iBACjB,GAAG,iBAAiB,+DAA+D,mBACnF;CAEJ,MAAM,UAA6B;EACjC,GAAG;EACH,QAAQ;GAAE,GAAG,gBAAgB;GAAQ;EAAa;CACpD;CAGA,MAAM,aAAa,OAFP,QAAQ,iBAAiB,UAAA,CAER,SADhB,8BAA8B,OACF,GAAG;EAC1C,GAAG,QAAQ;EACX,QAAQ,QAAQ;EAChB,SAAS,QAAQ;EACjB,aAAa,8BAA8B,OAAO;EAClD,iBAAiB,QAAQ;EACzB,eAAe,QAAQ;CACzB,CAAC;CACD,OAAO;EACL,SAAS,WAAW,SAAS;EAC7B,SACE,WAAW,SAAS,WAChB,0EACA,+DAA+D,WAAW;EAChF;EACA,UAAU;GACR,YAAY;GACZ,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,QAAQ,WAAW;EACrB;CACF;AACF;;AAGA,SAAgB,8BACd,SAIQ;CAeR,OAAO,GAdU;EACf,SAAS,QAAQ;EACjB,wBAAwB,QAAQ;EAChC,QAAQ,kBAAkB,sBAAsB,QAAQ,oBAAoB,KAAA;EAC5E,QAAQ,gBAAgB,SACpB,qBAAqB,KAAK,UAAU,QAAQ,gBAAgB,MAAM,CAAC,MACnE,KAAA;EACJ,QAAQ,UAAU,SACd,sBAAsB,KAAK,UAAU,QAAQ,UAAU,MAAM,CAAC,MAC9D,KAAA;EACJ,QAAQ,YAAY,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,SAAS,IACvD,cAAc,KAAK,UAAU,QAAQ,UAAU,MAAM,CAAC,MACtD,KAAA;CACN,CAAC,CAAC,QAAQ,YAA+B,QAAQ,OAAO,CACvC,CAAC,CAAC,KAAK,MAAM,EAAE;AAClC;;;;ACpFA,SAAgB,mCACd,SACyB;CACzB,OAAO,OAAO,UAAkD;EAC9D,MAAM,YAAY,MAAM,+BAA+B;GACrD,MAAM,MAAM;GACZ,MAAM,MAAM,QAAQ,QAAQ;GAC5B,gBACG,MAAM,kBACP,QAAQ;GACV,iBAAiB,MAAM,mBAAmB,QAAQ;GAClD,WACG,MAAM,aACP,QAAQ;GACV,QAAQ,QAAQ;GAChB,WAAW,QAAQ;EACrB,CAAC;EACD,OAAO;GACL,OAAO,UAAU;GACjB,SAAS,UAAU;GACnB,UAAU;IACR,YAAY,UAAU;IACtB,cAAc,UAAU,WAAW;IACnC,aAAa,UAAU,UAAU;IACjC,iBAAiB,UAAU,WAAW,OAAO,4BAA4B,UAAU;GACrF;EACF;CACF;AACF;;AAGA,eAAsB,2BACpB,SACwC;CACxC,MAAM,EACJ,eACA,SACA,QACA,oBACA,iBACA,eACA,gBACA,eACA,mBACA,kBACA,GAAG,qBACD;CACJ,MAAM,cAAc,KAAK,IAAI;CAC7B,MAAM,YAAY,IAAI,KAAK,WAAW,CAAC,CAAC,YAAY;CACpD,MAAM,kBAAkB,WAAW;CACnC,IAAI,cAAc;CAClB,IAAI,mBAAmB;CAEvB,MAAM,YAAY,kBAAkB,mCAAmC,OAAO;CAC9E,MAAM,kBAAkB,iCAAiC;EACvD,MAAM,QAAQ;EACd,MAAM,QAAQ;EACd;EACA,gBAAgB,QAAQ;EACxB,iBAAiB,QAAQ;EACzB,kBAAkB,QAAQ;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAA4C;CAE5C,MAAM,8BAA8E,OAClF,UACG;EACH,MAAM,kBAAkB,KAAK,IAAI;EACjC,eAAe;EACf,MAAM,SAAS,MAAM,gBAAgB,KAAK;EAC1C,oBAAoB,KAAK,IAAI,IAAI;EACjC,SAAS,iBAAiB,OAAO,UAAU;EAC3C,OAAO;CACT;CACA,MAAM,sBAAsB,MAAM,qBAAqB;EACrD,GAAG;EACH,iBAAiB;CACnB,CAAC;CACD,IAAI;CACJ,IACE,oBAAoB,WAAW,WAAW,qBAC1C,oBAAoB,WAAW,WAAW,YAE1C,YAAY,MAAM,6BAChB,QAAQ,MACR,qBACA,oBACA,iBAAiB,MACnB;CAEF,MAAM,eAAe,KAAK,IAAI;CAC9B,MAAM,cAAkD;EACtD;EACA,YAAY,IAAI,KAAK,YAAY,CAAC,CAAC,YAAY;EAC/C,YAAY,eAAe;EAC3B;EACA;EACA;CACF;CACA,MAAM,gBAAgB,WAAW;CACjC,OAAO;EACL,aAAa;EACb,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACjC;EACA,SAAS,oBAAoB;CAC/B;AACF;;AAGA,SAAgB,2CACd,QACA,WACuC;CACvC,MAAM,QAAQ,mBAAmB,MAAM;CACvC,MAAM,gBAAgB,aACpB,8BAA8B,MAAM;EAClC,WAAW,UAAU;EACrB;EACA,YAAY,UAAU;CACxB,CAAC;CACH,OAAO,OAAO,OAAO;EACnB,UAAU,yBAAyB;GAAE,GAAG;GAAO,WAAW,aAAa,UAAU,QAAQ;EAAE,CAAC;EAC5F,WAAW,yBAAyB;GAAE,GAAG;GAAO,WAAW,aAAa,UAAU,SAAS;EAAE,CAAC;CAChG,CAAC;AACH;AAEA,eAAe,6BACb,MACA,aACA,WACA,QAC4C;CAC5C,MAAM,YAAY,iCAAiC,WAAW;CAC9D,MAAM,eAAe,6BAA6B,SAAS;CAC3D,OAAO,mCAAmC;EAAE;EAAM;CAAU,GAAG,OAAO,eAAe;EACnF,MAAM,SAAS,OACb,WACiD;GACjD,MAAM,cAAc,aAAa,UAAU,YAAY,GAAG;GAe1D,QAAO,MAdgB,+BACrB,MAAM,SAAS,WAAW,OAAO,CAAC,IAAI,GACtC,EACE,GAAI,YACA,EACE,qBAAqB;IACnB;IACA,iBAAiB;IACjB,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC7B,EACF,IACA,CAAC,EACP,CACF,EAAA,CACgB;EAClB;EACA,MAAM,aAAa,MAAM,yBACvB,wBAAwB;GACtB,MAAM;GACN,WAAW;GACX,QAAQ,WAAW;EACrB,CAAC,GACD,wBACA,aAAa,UAAU,eACvB,WACA,MACF;EACA,MAAM,WAAW,MAAM,OAAO,UAAU;EACxC,MAAM,WAAW,MAAM,OAAO,WAAW;EACzC,OAAO,OAAO,OAAO;GACnB,WAAW;GACX;GACA;GACA,WAAW;EACb,CAAC;CACH,CAAC;AACH;AAEA,eAAe,yBACb,OACA,SACA,aACA,WACA,QACyC;CACzC,IAAI,CAAC,WAAW,OAAO,0BAA0B,KAAK;CACtD,OAAO,+BAA+B,WAAW;EAC/C;EACA;EACA;EACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;CAC7B,CAAC;AACH;AAEA,SAAS,aAAoE;CAC3E,OAAO;EAAE,YAAY;EAAG,aAAa;EAAG,cAAc;EAAG,UAAU;EAAM,KAAK;EAAG,IAAI;CAAE;AACzF;AAEA,SAAS,SACP,QACA,QACM;CACN,MAAM,QAAQ,OAAO;CACrB,OAAO,cAAc,MAAM;CAC3B,OAAO,eAAe,MAAM,OAAO;CACnC,OAAO,gBAAgB,MAAM,OAAO;CACpC,OAAO,WAAW,OAAO,YAAY,MAAM,aAAa;CACxD,OAAO,OAAO,MAAM;CACpB,OAAO,MAAM,MAAM;AACrB"}

package/dist/knowledge.js

@@ -1,2 +1,2 @@
-import { a as createSupervisedKnowledgeUpdater, c as runSupervisedKnowledgeUpdate, i as RESEARCH_SUPERVISOR_SYSTEM_PROMPT, l as createKnowledgeImprovementActivationExecutor, n as createAgentKnowledgeReadinessCheck, o as formatSupervisedKnowledgeTask, r as runKnowledgeImprovementJob, s as knowledgeReadinessDeliverable, t as buildKnowledgeImprovementExperimentBundles } from "./knowledge-C7Gly1cw.js";
+import { a as createSupervisedKnowledgeUpdater, c as runSupervisedKnowledgeUpdate, i as RESEARCH_SUPERVISOR_SYSTEM_PROMPT, l as createKnowledgeImprovementActivationExecutor, n as createAgentKnowledgeReadinessCheck, o as formatSupervisedKnowledgeTask, r as runKnowledgeImprovementJob, s as knowledgeReadinessDeliverable, t as buildKnowledgeImprovementExperimentBundles } from "./knowledge-D4zNvxw5.js";
 export { RESEARCH_SUPERVISOR_SYSTEM_PROMPT, buildKnowledgeImprovementExperimentBundles, createAgentKnowledgeReadinessCheck, createKnowledgeImprovementActivationExecutor, createSupervisedKnowledgeUpdater, formatSupervisedKnowledgeTask, knowledgeReadinessDeliverable, runKnowledgeImprovementJob, runSupervisedKnowledgeUpdate };

package/dist/{loop-runner-bin-Bt9qFNkq.js → loop-runner-bin-CI9Y0sxT.js}

@@ -1,6 +1,6 @@
 import { i as ConfigError } from "./errors-DEAvWQPy.js";
-import { P as createExecutorRegistry } from "./supervisor-BHS7T4HN.js";
-import { H as runPersonified, V as definePersona, d as worktreeFanout } from "./runtime-BG6VzXf0.js";
+import { P as createExecutorRegistry } from "./supervisor-C16p9KqO.js";
+import { H as runPersonified, V as definePersona, d as worktreeFanout } from "./runtime-ZNVnT8h1.js";
 import { t as runAnalystLoop } from "./analyst-loop-BE8cDs5Q.js";
 import { t as createKbGate } from "./kb-gate-DpaSwXVx.js";
 //#region src/loop-runner.ts
@@ -243,4 +243,4 @@ if (invokedScript && /loop-runner-bin\.(js|ts|mjs)$/.test(invokedScript)) main()
 //#endregion
 export { isDelegatedLoopMode as a, worktreeLoopRunner as c, auditLoopRunner as i, runLoopRunnerCli as n, researchLoopRunner as o, DELEGATED_LOOP_MODES as r, runDelegatedLoop as s, parseLoopRunnerArgv as t };
 
-//# sourceMappingURL=loop-runner-bin-Bt9qFNkq.js.map
+//# sourceMappingURL=loop-runner-bin-CI9Y0sxT.js.map

package/dist/{loop-runner-bin-Bt9qFNkq.js.map → loop-runner-bin-CI9Y0sxT.js.map}

@@ -1 +1 @@
-{"version":3,"file":"loop-runner-bin-Bt9qFNkq.js","names":[],"sources":["../src/loop-runner.ts","../src/loop-runner-bin.ts"],"sourcesContent":["/**\n *\n * `runDelegatedLoop` — the configured delegated loop-runner.\n *\n * One typed entrypoint a worker agent (or a scheduled routine) calls to run a\n * disciplined loop in a chosen MODE, over agent-runtime's hardened engines:\n *\n *   code         → build-in-a-loop on the GENERIC recursive path (worktreeLoopRunner: author one\n *                  `AgentProfile` per harness → worktree-CLI leaves → `patchDelivered` gate)\n *   review       → caller-registered runner — a `code` runner with an approval gate over candidates\n *   research     → research-in-a-loop with valid-only KB growth (createKbGate)\n *   audit        → analyze trace/run data → findings (runAnalystLoop, caller-wired)\n *   self-improve → caller-registered `improve(profile, options)` run\n *\n * It is intentionally a thin façade: the value is that EVERY product reuses the\n * one hardened engine instead of forking delegation logic. The dispatcher owns\n * mode routing, timing, fail-loud on an unregistered mode, and a uniform result\n * shape; each mode's engine is a pre-configured runner in the registry (build it\n * with the factories below, or inject your own / a stub).\n *\n * @experimental\n */\n\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { runAnalystLoop } from './analyst-loop'\nimport type { RunAnalystLoopOpts, RunAnalystLoopResult } from './analyst-loop/types'\nimport { ConfigError } from './errors'\nimport { type CreateKbGateOptions, createKbGate, type FactCandidate } from './mcp/kb-gate'\nimport {\n  type AuthoredHarness,\n  type Budget,\n  createExecutorRegistry,\n  definePersona,\n  runPersonified,\n  type WinnerStrategy,\n  type WorktreeFanoutOptions,\n  type WorktreePatchArtifact,\n  worktreeFanout,\n} from './runtime'\n\n/** All valid delegated-loop mode names — used for validation and CLI surfaces. @experimental */\nexport const DELEGATED_LOOP_MODES = ['code', 'review', 'research', 'audit', 'self-improve'] as const\n\n/** @experimental */\nexport type DelegatedLoopMode = (typeof DELEGATED_LOOP_MODES)[number]\n\n/** Type guard — returns true when `value` is a valid `DelegatedLoopMode` string. @experimental */\nexport function isDelegatedLoopMode(value: unknown): value is DelegatedLoopMode {\n  return typeof value === 'string' && (DELEGATED_LOOP_MODES as readonly string[]).includes(value)\n}\n\n/** @experimental A pre-configured loop for one mode. Returns the mode's raw\n *  output; the dispatcher wraps it in a {@link DelegatedLoopResult}. */\nexport type DelegatedLoopRunner<T = unknown> = (signal: AbortSignal) => Promise<T>\n\n/** @experimental Mode → configured runner. Partial: only register the modes a\n *  given product/routine actually uses. */\nexport type DelegatedLoopRegistry = Partial<Record<DelegatedLoopMode, DelegatedLoopRunner>>\n\n/** @experimental Uniform result — never throws from a registered runner; a\n *  thrown engine becomes `{ ok: false, error }` so a routine can record + move on. */\nexport interface DelegatedLoopResult<T = unknown> {\n  mode: DelegatedLoopMode\n  ok: boolean\n  output?: T\n  error?: string\n  durationMs: number\n}\n\n/** @experimental */\nexport interface RunDelegatedLoopOptions {\n  signal?: AbortSignal\n  /** Clock override for deterministic tests. */\n  now?: () => number\n}\n\n/**\n *\n * Dispatch a configured loop by mode. Fails loud (throws `ConfigError`) when no\n * runner is registered for the mode — a routine pointed at an unwired mode is a\n * config bug, not a silent no-op. A runner that throws is captured as\n * `{ ok: false }` so unattended runs record the failure rather than crash.\n *\n * @experimental\n */\nexport async function runDelegatedLoop<T = unknown>(\n  mode: DelegatedLoopMode,\n  registry: DelegatedLoopRegistry,\n  options: RunDelegatedLoopOptions = {},\n): Promise<DelegatedLoopResult<T>> {\n  const runner = registry[mode] as DelegatedLoopRunner<T> | undefined\n  if (!runner) {\n    throw new ConfigError(\n      `runDelegatedLoop: no runner registered for mode '${mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    )\n  }\n  const now = options.now ?? Date.now\n  const signal = options.signal ?? new AbortController().signal\n  const start = now()\n  try {\n    const output = await runner(signal)\n    return { mode, ok: true, output, durationMs: now() - start }\n  } catch (err) {\n    return {\n      mode,\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      durationMs: now() - start,\n    }\n  }\n}\n\n/** @experimental Options for the local-repo `code` runner over the GENERIC recursive path. */\nexport interface WorktreeLoopRunnerOptions {\n  /** Exact profile carried by the personified root that owns this fanout. */\n  rootProfile: AgentProfile\n  /** Absolute path to the local git checkout each worktree is cut from. */\n  repoRoot: string\n  /** The instruction handed to every authored harness (composed under each profile's systemPrompt). */\n  taskPrompt: string\n  /** The supervisor-authored harness profiles — one fanout item (one worktree-CLI leaf) each. */\n  harnesses: ReadonlyArray<AuthoredHarness>\n  /** Conserved budget pool bounding the fanout (equal-k holds by construction). */\n  budget: Budget\n  /** Shell command run in each worktree to derive the tests-PASS signal. */\n  testCmd?: string\n  /** Shell command run in each worktree to derive the typecheck-PASS signal. */\n  typecheckCmd?: string\n  /** Which verification signals the deliverable REQUIRES present-and-passing (default none). */\n  require?: ReadonlyArray<'tests' | 'typecheck'>\n  /** Diff-size cap (lines). */\n  maxDiffLines?: number\n  /** Literal path prefixes the patch must not touch (the secret-floor is always on regardless). */\n  forbiddenPaths?: string[]\n  /** Winner-selection strategy among gated candidates. Default `highest-score`. */\n  winnerStrategy?: WinnerStrategy\n  /** Test seams forwarded to the worktree-CLI leaves so the runner drives offline. */\n  runGit?: WorktreeFanoutOptions['runGit']\n  runHarness?: WorktreeFanoutOptions['runHarness']\n  runCommand?: WorktreeFanoutOptions['runCommand']\n}\n\n/**\n *\n * `code` mode on the GENERIC recursive path: author one `AgentProfile` per harness, run them as a\n * `worktreeFanout` (N `createWorktreeCliExecutor` leaves, each `gateOnDeliverable`) through\n * `runPersonified` on the keystone Supervisor. The sandbox-session counterpart that drives the in-box\n * harness over a `SandboxClient` is `detachedSessionDelegate` (`./mcp/delegates`); here there is no\n * `runAgentRounds` driver, no role-coupled delegate — the harness list is the fanout, the gate is\n * `patchDelivered`,\n * the winner is the shared valid-only selector (NOT `defaultSelectWinner`, whose non-valid fallback\n * would surface an ungated patch). Equal-k holds by the conserved budget pool. Returns the winning\n * patch artifact, or throws when no candidate is delivered (fail loud, never a vacuous done).\n *\n * @experimental\n */\nexport function worktreeLoopRunner(\n  options: WorktreeLoopRunnerOptions,\n): DelegatedLoopRunner<WorktreePatchArtifact> {\n  const shape = worktreeFanout<string>({\n    repoRoot: options.repoRoot,\n    taskPrompt: options.taskPrompt,\n    harnesses: options.harnesses,\n    ...(options.testCmd !== undefined ? { testCmd: options.testCmd } : {}),\n    ...(options.typecheckCmd !== undefined ? { typecheckCmd: options.typecheckCmd } : {}),\n    ...(options.require !== undefined ? { require: options.require } : {}),\n    ...(options.maxDiffLines !== undefined ? { maxDiffLines: options.maxDiffLines } : {}),\n    ...(options.forbiddenPaths !== undefined ? { forbiddenPaths: options.forbiddenPaths } : {}),\n    ...(options.winnerStrategy !== undefined ? { winnerStrategy: options.winnerStrategy } : {}),\n    ...(options.runGit ? { runGit: options.runGit } : {}),\n    ...(options.runHarness ? { runHarness: options.runHarness } : {}),\n    ...(options.runCommand ? { runCommand: options.runCommand } : {}),\n  })\n  // The persona's only role here is to carry the fanout shape onto the Supervisor; each item's\n  // executor is BYO (the gated worktree-CLI leaf), so the registry only needs to pass BYO through.\n  const persona = definePersona<WorktreePatchArtifact>({\n    name: 'worktree-coder',\n    root: { profile: options.rootProfile, harness: null },\n    directive: 'deliver a minimal validated patch on a fresh worktree',\n    context: { role: 'coder' },\n    executors: { registry: createExecutorRegistry() },\n  })\n  return async (signal) => {\n    const result = await runPersonified<string, WorktreePatchArtifact>({\n      persona,\n      shape,\n      task: options.taskPrompt,\n      budget: options.budget,\n      signal,\n    })\n    if (result.kind !== 'winner' || result.out.kind !== 'done') {\n      const blockers =\n        result.kind === 'winner' && result.out.kind === 'blocked'\n          ? result.out.blockers.join('; ')\n          : `supervisor settled ${result.kind}`\n      throw new Error(`worktreeLoopRunner: no delivered patch (${blockers})`)\n    }\n    return result.out.deliverable\n  }\n}\n\n/** @experimental A fact rejected at the KB gate — surfaced, never dropped. */\nexport interface VetoedFact {\n  candidate: FactCandidate\n  vetoedBy?: string\n  reason?: string\n}\n\n/** @experimental */\nexport interface ResearchLoopResult {\n  /** Facts that passed the fail-closed gate — safe to write to the KB. */\n  accepted: FactCandidate[]\n  /** Facts the gate vetoed in the final round — escalate, do not silently drop. */\n  vetoed: VetoedFact[]\n  /** Research rounds actually run. */\n  rounds: number\n}\n\n/** @experimental Options for the default `research` runner. */\nexport interface ResearchLoopRunnerOptions {\n  /**\n   * The research engine (the consumer's web/doc searcher + extractor). Called\n   * each round with the prior round's vetoes so it can re-research the gaps.\n   * Returns fact candidates carrying their grounding (`verbatimPassage` +\n   * `sourceText`).\n   */\n  research: (round: number, vetoed: VetoedFact[]) => Promise<FactCandidate[]>\n  /** Gate config (extra judges, self-artifact kinds, …). The floor is always on. */\n  gate?: CreateKbGateOptions\n  /** Max research rounds (correct-on-veto remediation). Default 1. */\n  maxRounds?: number\n}\n\n/**\n * `research` mode — research-in-a-loop with valid-only KB growth.\n *\n * Each round: research → gate every candidate (fail-closed; passage MUST be in\n * the source) → accept the clean ones → re-research the vetoed ones next round,\n * up to `maxRounds`. Vetoed facts in the final round are RETURNED (escalate,\n * never silently dropped) so the caller audits vs retries.\n *\n * @experimental\n */\nexport function researchLoopRunner(\n  o: ResearchLoopRunnerOptions,\n): DelegatedLoopRunner<ResearchLoopResult> {\n  const gate = createKbGate(o.gate)\n  const maxRounds = Math.max(1, Math.trunc(o.maxRounds ?? 1))\n  return async (signal) => {\n    const accepted: FactCandidate[] = []\n    let vetoed: VetoedFact[] = []\n    let rounds = 0\n    for (let round = 0; round < maxRounds; round += 1) {\n      if (signal.aborted) break\n      rounds += 1\n      const candidates = await o.research(round, vetoed)\n      if (candidates.length === 0) break\n      vetoed = []\n      for (const c of candidates) {\n        const v = await gate(c)\n        if (v.accepted) accepted.push(c)\n        else vetoed.push({ candidate: c, vetoedBy: v.vetoedBy, reason: v.reason })\n      }\n      if (vetoed.length === 0) break\n    }\n    return { accepted, vetoed, rounds }\n  }\n}\n\n/**\n * `audit` mode — analyst loop over captured trace/run data.\n *\n * @experimental\n */\nexport function auditLoopRunner<TProposal = unknown, TEdit = unknown>(\n  options: RunAnalystLoopOpts,\n): DelegatedLoopRunner<RunAnalystLoopResult<TProposal, TEdit>> {\n  return async () => runAnalystLoop<TProposal, TEdit>(options)\n}\n","#!/usr/bin/env node\n/**\n *\n * `agent-runtime-loop` — the schedulable entrypoint for the configured\n * delegated loop-runner. A cron job / routine / Makefile target invokes:\n *\n *   agent-runtime-loop --mode research --config ./loops.config.js\n *\n * The config module wires the registry (with full access to env / creds —\n * which is why the deps live there, not in this generic bin). It must default-\n * export a `DelegatedLoopRegistry`, or a `() => DelegatedLoopRegistry | Promise<…>`.\n * The bin runs the selected mode, prints the `DelegatedLoopResult` as JSON, and\n * exits 0 on `ok`, 1 on a recorded failure, 2 on a usage/config error.\n *\n * @experimental\n */\n\nimport {\n  DELEGATED_LOOP_MODES,\n  type DelegatedLoopMode,\n  type DelegatedLoopRegistry,\n  type DelegatedLoopResult,\n  isDelegatedLoopMode,\n  runDelegatedLoop,\n} from './loop-runner'\n\n/** @experimental Parsed CLI invocation. */\nexport interface LoopRunnerCliArgs {\n  mode: string\n  /** Loads the registry — the bin wires this from `--config`; tests inject a stub. */\n  loadRegistry: () => Promise<DelegatedLoopRegistry> | DelegatedLoopRegistry\n  now?: () => number\n}\n\n/** @experimental */\nexport interface LoopRunnerCliResult {\n  exitCode: number\n  result?: DelegatedLoopResult\n  error?: string\n}\n\n/**\n *\n * Pure CLI core (no process / argv / IO) so it's unit-testable: validate the\n * mode, load the registry, dispatch, map to an exit code (0 ok / 1 failed /\n * 2 usage). Exported for embedding in custom runners + tests.\n *\n * @experimental\n */\nexport async function runLoopRunnerCli(args: LoopRunnerCliArgs): Promise<LoopRunnerCliResult> {\n  if (!isDelegatedLoopMode(args.mode)) {\n    return {\n      exitCode: 2,\n      error: `unknown mode '${args.mode}' (expected one of: ${DELEGATED_LOOP_MODES.join(', ')})`,\n    }\n  }\n  let registry: DelegatedLoopRegistry\n  try {\n    registry = await args.loadRegistry()\n  } catch (err) {\n    return { exitCode: 2, error: `failed to load registry: ${errMsg(err)}` }\n  }\n  if (!registry[args.mode]) {\n    return {\n      exitCode: 2,\n      error: `config registers no runner for mode '${args.mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    }\n  }\n  // runDelegatedLoop throws only on a missing runner (guarded above); a failing\n  // engine is captured as { ok: false } → exit 1, not a crash.\n  const result = await runDelegatedLoop(args.mode as DelegatedLoopMode, registry, {\n    ...(args.now ? { now: args.now } : {}),\n  })\n  return { exitCode: result.ok ? 0 : 1, result }\n}\n\n/** Parse `--mode X --config Y` from an argv tail (`process.argv.slice(2)`). */\nexport function parseLoopRunnerArgv(argv: string[]): { mode?: string; config?: string } {\n  const out: { mode?: string; config?: string } = {}\n  for (let i = 0; i < argv.length; i += 1) {\n    const a = argv[i]\n    if (a === '--mode') out.mode = argv[++i]\n    else if (a === '--config') out.config = argv[++i]\n    else if (a?.startsWith('--mode=')) out.mode = a.slice('--mode='.length)\n    else if (a?.startsWith('--config=')) out.config = a.slice('--config='.length)\n  }\n  return out\n}\n\n/** Normalize a config module's default export → a registry. */\nfunction resolveRegistry(mod: unknown): DelegatedLoopRegistry {\n  const def = (mod as { default?: unknown })?.default ?? mod\n  const value = typeof def === 'function' ? (def as () => unknown)() : def\n  return value as DelegatedLoopRegistry\n}\n\nfunction errMsg(err: unknown): string {\n  return err instanceof Error ? err.message : String(err)\n}\n\n/** The argv → IO → exit shell. Kept thin; logic lives in `runLoopRunnerCli`. */\nasync function main(): Promise<void> {\n  const { mode, config } = parseLoopRunnerArgv(process.argv.slice(2))\n  if (!mode || !config) {\n    process.stderr.write(\n      'usage: agent-runtime-loop --mode <mode> --config <module>\\n' +\n        `  modes: ${DELEGATED_LOOP_MODES.join(' | ')}\\n` +\n        '  config: a JS/TS module default-exporting a DelegatedLoopRegistry (or a factory)\\n',\n    )\n    process.exit(2)\n  }\n  const { pathToFileURL } = await import('node:url')\n  const { resolve } = await import('node:path')\n  const cli = await runLoopRunnerCli({\n    mode,\n    loadRegistry: async () => resolveRegistry(await import(pathToFileURL(resolve(config)).href)),\n  })\n  process.stdout.write(`${JSON.stringify(cli.result ?? { error: cli.error }, null, 2)}\\n`)\n  if (cli.error) process.stderr.write(`${cli.error}\\n`)\n  process.exit(cli.exitCode)\n}\n\n// Run only when executed as the bin — never when imported for the testable\n// core, and never when bundled into a runtime that has no `process.argv`\n// (e.g. Cloudflare Workers, where `process` is a shim without `argv`). Reading\n// `process.argv[1]` directly would throw at module load there; `process.argv?.`\n// keeps the guard a no-op instead of crashing the Worker on startup.\nconst invokedScript = typeof process !== 'undefined' ? process.argv?.[1] : undefined\nif (invokedScript && /loop-runner-bin\\.(js|ts|mjs)$/.test(invokedScript)) {\n  void main()\n}\n"],"mappings":";;;;;;;AAyCA,MAAa,uBAAuB;CAAC;CAAQ;CAAU;CAAY;CAAS;AAAc;;AAM1F,SAAgB,oBAAoB,OAA4C;CAC9E,OAAO,OAAO,UAAU,YAAa,qBAA2C,SAAS,KAAK;AAChG;;;;;;;;;;AAoCA,eAAsB,iBACpB,MACA,UACA,UAAmC,CAAC,GACH;CACjC,MAAM,SAAS,SAAS;CACxB,IAAI,CAAC,QACH,MAAM,IAAI,YACR,oDAAoD,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC,EACH;CAEF,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,CAAC,CAAC;CACvD,MAAM,QAAQ,IAAI;CAClB,IAAI;EAEF,OAAO;GAAE;GAAM,IAAI;GAAM,QAAA,MADJ,OAAO,MAAM;GACD,YAAY,IAAI,IAAI;EAAM;CAC7D,SAAS,KAAK;EACZ,OAAO;GACL;GACA,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACtD,YAAY,IAAI,IAAI;EACtB;CACF;AACF;;;;;;;;;;;;;;;AA8CA,SAAgB,mBACd,SAC4C;CAC5C,MAAM,QAAQ,eAAuB;EACnC,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACnD,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAC/D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;CACjE,CAAC;CAGD,MAAM,UAAU,cAAqC;EACnD,MAAM;EACN,MAAM;GAAE,SAAS,QAAQ;GAAa,SAAS;EAAK;EACpD,WAAW;EACX,SAAS,EAAE,MAAM,QAAQ;EACzB,WAAW,EAAE,UAAU,uBAAuB,EAAE;CAClD,CAAC;CACD,OAAO,OAAO,WAAW;EACvB,MAAM,SAAS,MAAM,eAA8C;GACjE;GACA;GACA,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB;EACF,CAAC;EACD,IAAI,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC1D,MAAM,WACJ,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,YAC5C,OAAO,IAAI,SAAS,KAAK,IAAI,IAC7B,sBAAsB,OAAO;GACnC,MAAM,IAAI,MAAM,2CAA2C,SAAS,EAAE;EACxE;EACA,OAAO,OAAO,IAAI;CACpB;AACF;;;;;;;;;;;AA4CA,SAAgB,mBACd,GACyC;CACzC,MAAM,OAAO,aAAa,EAAE,IAAI;CAChC,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1D,OAAO,OAAO,WAAW;EACvB,MAAM,WAA4B,CAAC;EACnC,IAAI,SAAuB,CAAC;EAC5B,IAAI,SAAS;EACb,KAAK,IAAI,QAAQ,GAAG,QAAQ,WAAW,SAAS,GAAG;GACjD,IAAI,OAAO,SAAS;GACpB,UAAU;GACV,MAAM,aAAa,MAAM,EAAE,SAAS,OAAO,MAAM;GACjD,IAAI,WAAW,WAAW,GAAG;GAC7B,SAAS,CAAC;GACV,KAAK,MAAM,KAAK,YAAY;IAC1B,MAAM,IAAI,MAAM,KAAK,CAAC;IACtB,IAAI,EAAE,UAAU,SAAS,KAAK,CAAC;SAC1B,OAAO,KAAK;KAAE,WAAW;KAAG,UAAU,EAAE;KAAU,QAAQ,EAAE;IAAO,CAAC;GAC3E;GACA,IAAI,OAAO,WAAW,GAAG;EAC3B;EACA,OAAO;GAAE;GAAU;GAAQ;EAAO;CACpC;AACF;;;;;;AAOA,SAAgB,gBACd,SAC6D;CAC7D,OAAO,YAAY,eAAiC,OAAO;AAC7D;;;;;;;;;;;;;;;;;;;;;;;;;;ACvOA,eAAsB,iBAAiB,MAAuD;CAC5F,IAAI,CAAC,oBAAoB,KAAK,IAAI,GAChC,OAAO;EACL,UAAU;EACV,OAAO,iBAAiB,KAAK,KAAK,sBAAsB,qBAAqB,KAAK,IAAI,EAAE;CAC1F;CAEF,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,KAAK,aAAa;CACrC,SAAS,KAAK;EACZ,OAAO;GAAE,UAAU;GAAG,OAAO,4BAA4B,OAAO,GAAG;EAAI;CACzE;CACA,IAAI,CAAC,SAAS,KAAK,OACjB,OAAO;EACL,UAAU;EACV,OAAO,wCAAwC,KAAK,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC;CACH;CAIF,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAA2B,UAAU,EAC9E,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,EACtC,CAAC;CACD,OAAO;EAAE,UAAU,OAAO,KAAK,IAAI;EAAG;CAAO;AAC/C;;AAGA,SAAgB,oBAAoB,MAAoD;CACtF,MAAM,MAA0C,CAAC;CACjD,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;EACvC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACjC,IAAI,MAAM,YAAY,IAAI,SAAS,KAAK,EAAE;OAC1C,IAAI,GAAG,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAgB;OACjE,IAAI,GAAG,WAAW,WAAW,GAAG,IAAI,SAAS,EAAE,MAAM,CAAkB;CAC9E;CACA,OAAO;AACT;;AAGA,SAAS,gBAAgB,KAAqC;CAC5D,MAAM,MAAO,KAA+B,WAAW;CAEvD,OADc,OAAO,QAAQ,aAAc,IAAsB,IAAI;AAEvE;AAEA,SAAS,OAAO,KAAsB;CACpC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;;AAGA,eAAe,OAAsB;CACnC,MAAM,EAAE,MAAM,WAAW,oBAAoB,QAAQ,KAAK,MAAM,CAAC,CAAC;CAClE,IAAI,CAAC,QAAQ,CAAC,QAAQ;EACpB,QAAQ,OAAO,MACb;WACc,qBAAqB,KAAK,KAAK,EAAE;CAEjD;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,MAAM,EAAE,kBAAkB,MAAM,OAAO;CACvC,MAAM,EAAE,YAAY,MAAM,OAAO;CACjC,MAAM,MAAM,MAAM,iBAAiB;EACjC;EACA,cAAc,YAAY,gBAAgB,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,CAAC,KAAK;CAC7F,CAAC;CACD,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,IAAI,UAAU,EAAE,OAAO,IAAI,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG;CACvF,IAAI,IAAI,OAAO,QAAQ,OAAO,MAAM,GAAG,IAAI,MAAM,GAAG;CACpD,QAAQ,KAAK,IAAI,QAAQ;AAC3B;AAOA,MAAM,gBAAgB,OAAO,YAAY,cAAc,QAAQ,OAAO,KAAK,KAAA;AAC3E,IAAI,iBAAiB,gCAAgC,KAAK,aAAa,GACrE,KAAU"}
+{"version":3,"file":"loop-runner-bin-CI9Y0sxT.js","names":[],"sources":["../src/loop-runner.ts","../src/loop-runner-bin.ts"],"sourcesContent":["/**\n *\n * `runDelegatedLoop` — the configured delegated loop-runner.\n *\n * One typed entrypoint a worker agent (or a scheduled routine) calls to run a\n * disciplined loop in a chosen MODE, over agent-runtime's hardened engines:\n *\n *   code         → build-in-a-loop on the GENERIC recursive path (worktreeLoopRunner: author one\n *                  `AgentProfile` per harness → worktree-CLI leaves → `patchDelivered` gate)\n *   review       → caller-registered runner — a `code` runner with an approval gate over candidates\n *   research     → research-in-a-loop with valid-only KB growth (createKbGate)\n *   audit        → analyze trace/run data → findings (runAnalystLoop, caller-wired)\n *   self-improve → caller-registered `improve(profile, options)` run\n *\n * It is intentionally a thin façade: the value is that EVERY product reuses the\n * one hardened engine instead of forking delegation logic. The dispatcher owns\n * mode routing, timing, fail-loud on an unregistered mode, and a uniform result\n * shape; each mode's engine is a pre-configured runner in the registry (build it\n * with the factories below, or inject your own / a stub).\n *\n * @experimental\n */\n\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { runAnalystLoop } from './analyst-loop'\nimport type { RunAnalystLoopOpts, RunAnalystLoopResult } from './analyst-loop/types'\nimport { ConfigError } from './errors'\nimport { type CreateKbGateOptions, createKbGate, type FactCandidate } from './mcp/kb-gate'\nimport {\n  type AuthoredHarness,\n  type Budget,\n  createExecutorRegistry,\n  definePersona,\n  runPersonified,\n  type WinnerStrategy,\n  type WorktreeFanoutOptions,\n  type WorktreePatchArtifact,\n  worktreeFanout,\n} from './runtime'\n\n/** All valid delegated-loop mode names — used for validation and CLI surfaces. @experimental */\nexport const DELEGATED_LOOP_MODES = ['code', 'review', 'research', 'audit', 'self-improve'] as const\n\n/** @experimental */\nexport type DelegatedLoopMode = (typeof DELEGATED_LOOP_MODES)[number]\n\n/** Type guard — returns true when `value` is a valid `DelegatedLoopMode` string. @experimental */\nexport function isDelegatedLoopMode(value: unknown): value is DelegatedLoopMode {\n  return typeof value === 'string' && (DELEGATED_LOOP_MODES as readonly string[]).includes(value)\n}\n\n/** @experimental A pre-configured loop for one mode. Returns the mode's raw\n *  output; the dispatcher wraps it in a {@link DelegatedLoopResult}. */\nexport type DelegatedLoopRunner<T = unknown> = (signal: AbortSignal) => Promise<T>\n\n/** @experimental Mode → configured runner. Partial: only register the modes a\n *  given product/routine actually uses. */\nexport type DelegatedLoopRegistry = Partial<Record<DelegatedLoopMode, DelegatedLoopRunner>>\n\n/** @experimental Uniform result — never throws from a registered runner; a\n *  thrown engine becomes `{ ok: false, error }` so a routine can record + move on. */\nexport interface DelegatedLoopResult<T = unknown> {\n  mode: DelegatedLoopMode\n  ok: boolean\n  output?: T\n  error?: string\n  durationMs: number\n}\n\n/** @experimental */\nexport interface RunDelegatedLoopOptions {\n  signal?: AbortSignal\n  /** Clock override for deterministic tests. */\n  now?: () => number\n}\n\n/**\n *\n * Dispatch a configured loop by mode. Fails loud (throws `ConfigError`) when no\n * runner is registered for the mode — a routine pointed at an unwired mode is a\n * config bug, not a silent no-op. A runner that throws is captured as\n * `{ ok: false }` so unattended runs record the failure rather than crash.\n *\n * @experimental\n */\nexport async function runDelegatedLoop<T = unknown>(\n  mode: DelegatedLoopMode,\n  registry: DelegatedLoopRegistry,\n  options: RunDelegatedLoopOptions = {},\n): Promise<DelegatedLoopResult<T>> {\n  const runner = registry[mode] as DelegatedLoopRunner<T> | undefined\n  if (!runner) {\n    throw new ConfigError(\n      `runDelegatedLoop: no runner registered for mode '${mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    )\n  }\n  const now = options.now ?? Date.now\n  const signal = options.signal ?? new AbortController().signal\n  const start = now()\n  try {\n    const output = await runner(signal)\n    return { mode, ok: true, output, durationMs: now() - start }\n  } catch (err) {\n    return {\n      mode,\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      durationMs: now() - start,\n    }\n  }\n}\n\n/** @experimental Options for the local-repo `code` runner over the GENERIC recursive path. */\nexport interface WorktreeLoopRunnerOptions {\n  /** Exact profile carried by the personified root that owns this fanout. */\n  rootProfile: AgentProfile\n  /** Absolute path to the local git checkout each worktree is cut from. */\n  repoRoot: string\n  /** The instruction handed to every authored harness (composed under each profile's systemPrompt). */\n  taskPrompt: string\n  /** The supervisor-authored harness profiles — one fanout item (one worktree-CLI leaf) each. */\n  harnesses: ReadonlyArray<AuthoredHarness>\n  /** Conserved budget pool bounding the fanout (equal-k holds by construction). */\n  budget: Budget\n  /** Shell command run in each worktree to derive the tests-PASS signal. */\n  testCmd?: string\n  /** Shell command run in each worktree to derive the typecheck-PASS signal. */\n  typecheckCmd?: string\n  /** Which verification signals the deliverable REQUIRES present-and-passing (default none). */\n  require?: ReadonlyArray<'tests' | 'typecheck'>\n  /** Diff-size cap (lines). */\n  maxDiffLines?: number\n  /** Literal path prefixes the patch must not touch (the secret-floor is always on regardless). */\n  forbiddenPaths?: string[]\n  /** Winner-selection strategy among gated candidates. Default `highest-score`. */\n  winnerStrategy?: WinnerStrategy\n  /** Test seams forwarded to the worktree-CLI leaves so the runner drives offline. */\n  runGit?: WorktreeFanoutOptions['runGit']\n  runHarness?: WorktreeFanoutOptions['runHarness']\n  runCommand?: WorktreeFanoutOptions['runCommand']\n}\n\n/**\n *\n * `code` mode on the GENERIC recursive path: author one `AgentProfile` per harness, run them as a\n * `worktreeFanout` (N `createWorktreeCliExecutor` leaves, each `gateOnDeliverable`) through\n * `runPersonified` on the keystone Supervisor. The sandbox-session counterpart that drives the in-box\n * harness over a `SandboxClient` is `detachedSessionDelegate` (`./mcp/delegates`); here there is no\n * `runAgentRounds` driver, no role-coupled delegate — the harness list is the fanout, the gate is\n * `patchDelivered`,\n * the winner is the shared valid-only selector (NOT `defaultSelectWinner`, whose non-valid fallback\n * would surface an ungated patch). Equal-k holds by the conserved budget pool. Returns the winning\n * patch artifact, or throws when no candidate is delivered (fail loud, never a vacuous done).\n *\n * @experimental\n */\nexport function worktreeLoopRunner(\n  options: WorktreeLoopRunnerOptions,\n): DelegatedLoopRunner<WorktreePatchArtifact> {\n  const shape = worktreeFanout<string>({\n    repoRoot: options.repoRoot,\n    taskPrompt: options.taskPrompt,\n    harnesses: options.harnesses,\n    ...(options.testCmd !== undefined ? { testCmd: options.testCmd } : {}),\n    ...(options.typecheckCmd !== undefined ? { typecheckCmd: options.typecheckCmd } : {}),\n    ...(options.require !== undefined ? { require: options.require } : {}),\n    ...(options.maxDiffLines !== undefined ? { maxDiffLines: options.maxDiffLines } : {}),\n    ...(options.forbiddenPaths !== undefined ? { forbiddenPaths: options.forbiddenPaths } : {}),\n    ...(options.winnerStrategy !== undefined ? { winnerStrategy: options.winnerStrategy } : {}),\n    ...(options.runGit ? { runGit: options.runGit } : {}),\n    ...(options.runHarness ? { runHarness: options.runHarness } : {}),\n    ...(options.runCommand ? { runCommand: options.runCommand } : {}),\n  })\n  // The persona's only role here is to carry the fanout shape onto the Supervisor; each item's\n  // executor is BYO (the gated worktree-CLI leaf), so the registry only needs to pass BYO through.\n  const persona = definePersona<WorktreePatchArtifact>({\n    name: 'worktree-coder',\n    root: { profile: options.rootProfile, harness: null },\n    directive: 'deliver a minimal validated patch on a fresh worktree',\n    context: { role: 'coder' },\n    executors: { registry: createExecutorRegistry() },\n  })\n  return async (signal) => {\n    const result = await runPersonified<string, WorktreePatchArtifact>({\n      persona,\n      shape,\n      task: options.taskPrompt,\n      budget: options.budget,\n      signal,\n    })\n    if (result.kind !== 'winner' || result.out.kind !== 'done') {\n      const blockers =\n        result.kind === 'winner' && result.out.kind === 'blocked'\n          ? result.out.blockers.join('; ')\n          : `supervisor settled ${result.kind}`\n      throw new Error(`worktreeLoopRunner: no delivered patch (${blockers})`)\n    }\n    return result.out.deliverable\n  }\n}\n\n/** @experimental A fact rejected at the KB gate — surfaced, never dropped. */\nexport interface VetoedFact {\n  candidate: FactCandidate\n  vetoedBy?: string\n  reason?: string\n}\n\n/** @experimental */\nexport interface ResearchLoopResult {\n  /** Facts that passed the fail-closed gate — safe to write to the KB. */\n  accepted: FactCandidate[]\n  /** Facts the gate vetoed in the final round — escalate, do not silently drop. */\n  vetoed: VetoedFact[]\n  /** Research rounds actually run. */\n  rounds: number\n}\n\n/** @experimental Options for the default `research` runner. */\nexport interface ResearchLoopRunnerOptions {\n  /**\n   * The research engine (the consumer's web/doc searcher + extractor). Called\n   * each round with the prior round's vetoes so it can re-research the gaps.\n   * Returns fact candidates carrying their grounding (`verbatimPassage` +\n   * `sourceText`).\n   */\n  research: (round: number, vetoed: VetoedFact[]) => Promise<FactCandidate[]>\n  /** Gate config (extra judges, self-artifact kinds, …). The floor is always on. */\n  gate?: CreateKbGateOptions\n  /** Max research rounds (correct-on-veto remediation). Default 1. */\n  maxRounds?: number\n}\n\n/**\n * `research` mode — research-in-a-loop with valid-only KB growth.\n *\n * Each round: research → gate every candidate (fail-closed; passage MUST be in\n * the source) → accept the clean ones → re-research the vetoed ones next round,\n * up to `maxRounds`. Vetoed facts in the final round are RETURNED (escalate,\n * never silently dropped) so the caller audits vs retries.\n *\n * @experimental\n */\nexport function researchLoopRunner(\n  o: ResearchLoopRunnerOptions,\n): DelegatedLoopRunner<ResearchLoopResult> {\n  const gate = createKbGate(o.gate)\n  const maxRounds = Math.max(1, Math.trunc(o.maxRounds ?? 1))\n  return async (signal) => {\n    const accepted: FactCandidate[] = []\n    let vetoed: VetoedFact[] = []\n    let rounds = 0\n    for (let round = 0; round < maxRounds; round += 1) {\n      if (signal.aborted) break\n      rounds += 1\n      const candidates = await o.research(round, vetoed)\n      if (candidates.length === 0) break\n      vetoed = []\n      for (const c of candidates) {\n        const v = await gate(c)\n        if (v.accepted) accepted.push(c)\n        else vetoed.push({ candidate: c, vetoedBy: v.vetoedBy, reason: v.reason })\n      }\n      if (vetoed.length === 0) break\n    }\n    return { accepted, vetoed, rounds }\n  }\n}\n\n/**\n * `audit` mode — analyst loop over captured trace/run data.\n *\n * @experimental\n */\nexport function auditLoopRunner<TProposal = unknown, TEdit = unknown>(\n  options: RunAnalystLoopOpts,\n): DelegatedLoopRunner<RunAnalystLoopResult<TProposal, TEdit>> {\n  return async () => runAnalystLoop<TProposal, TEdit>(options)\n}\n","#!/usr/bin/env node\n/**\n *\n * `agent-runtime-loop` — the schedulable entrypoint for the configured\n * delegated loop-runner. A cron job / routine / Makefile target invokes:\n *\n *   agent-runtime-loop --mode research --config ./loops.config.js\n *\n * The config module wires the registry (with full access to env / creds —\n * which is why the deps live there, not in this generic bin). It must default-\n * export a `DelegatedLoopRegistry`, or a `() => DelegatedLoopRegistry | Promise<…>`.\n * The bin runs the selected mode, prints the `DelegatedLoopResult` as JSON, and\n * exits 0 on `ok`, 1 on a recorded failure, 2 on a usage/config error.\n *\n * @experimental\n */\n\nimport {\n  DELEGATED_LOOP_MODES,\n  type DelegatedLoopMode,\n  type DelegatedLoopRegistry,\n  type DelegatedLoopResult,\n  isDelegatedLoopMode,\n  runDelegatedLoop,\n} from './loop-runner'\n\n/** @experimental Parsed CLI invocation. */\nexport interface LoopRunnerCliArgs {\n  mode: string\n  /** Loads the registry — the bin wires this from `--config`; tests inject a stub. */\n  loadRegistry: () => Promise<DelegatedLoopRegistry> | DelegatedLoopRegistry\n  now?: () => number\n}\n\n/** @experimental */\nexport interface LoopRunnerCliResult {\n  exitCode: number\n  result?: DelegatedLoopResult\n  error?: string\n}\n\n/**\n *\n * Pure CLI core (no process / argv / IO) so it's unit-testable: validate the\n * mode, load the registry, dispatch, map to an exit code (0 ok / 1 failed /\n * 2 usage). Exported for embedding in custom runners + tests.\n *\n * @experimental\n */\nexport async function runLoopRunnerCli(args: LoopRunnerCliArgs): Promise<LoopRunnerCliResult> {\n  if (!isDelegatedLoopMode(args.mode)) {\n    return {\n      exitCode: 2,\n      error: `unknown mode '${args.mode}' (expected one of: ${DELEGATED_LOOP_MODES.join(', ')})`,\n    }\n  }\n  let registry: DelegatedLoopRegistry\n  try {\n    registry = await args.loadRegistry()\n  } catch (err) {\n    return { exitCode: 2, error: `failed to load registry: ${errMsg(err)}` }\n  }\n  if (!registry[args.mode]) {\n    return {\n      exitCode: 2,\n      error: `config registers no runner for mode '${args.mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    }\n  }\n  // runDelegatedLoop throws only on a missing runner (guarded above); a failing\n  // engine is captured as { ok: false } → exit 1, not a crash.\n  const result = await runDelegatedLoop(args.mode as DelegatedLoopMode, registry, {\n    ...(args.now ? { now: args.now } : {}),\n  })\n  return { exitCode: result.ok ? 0 : 1, result }\n}\n\n/** Parse `--mode X --config Y` from an argv tail (`process.argv.slice(2)`). */\nexport function parseLoopRunnerArgv(argv: string[]): { mode?: string; config?: string } {\n  const out: { mode?: string; config?: string } = {}\n  for (let i = 0; i < argv.length; i += 1) {\n    const a = argv[i]\n    if (a === '--mode') out.mode = argv[++i]\n    else if (a === '--config') out.config = argv[++i]\n    else if (a?.startsWith('--mode=')) out.mode = a.slice('--mode='.length)\n    else if (a?.startsWith('--config=')) out.config = a.slice('--config='.length)\n  }\n  return out\n}\n\n/** Normalize a config module's default export → a registry. */\nfunction resolveRegistry(mod: unknown): DelegatedLoopRegistry {\n  const def = (mod as { default?: unknown })?.default ?? mod\n  const value = typeof def === 'function' ? (def as () => unknown)() : def\n  return value as DelegatedLoopRegistry\n}\n\nfunction errMsg(err: unknown): string {\n  return err instanceof Error ? err.message : String(err)\n}\n\n/** The argv → IO → exit shell. Kept thin; logic lives in `runLoopRunnerCli`. */\nasync function main(): Promise<void> {\n  const { mode, config } = parseLoopRunnerArgv(process.argv.slice(2))\n  if (!mode || !config) {\n    process.stderr.write(\n      'usage: agent-runtime-loop --mode <mode> --config <module>\\n' +\n        `  modes: ${DELEGATED_LOOP_MODES.join(' | ')}\\n` +\n        '  config: a JS/TS module default-exporting a DelegatedLoopRegistry (or a factory)\\n',\n    )\n    process.exit(2)\n  }\n  const { pathToFileURL } = await import('node:url')\n  const { resolve } = await import('node:path')\n  const cli = await runLoopRunnerCli({\n    mode,\n    loadRegistry: async () => resolveRegistry(await import(pathToFileURL(resolve(config)).href)),\n  })\n  process.stdout.write(`${JSON.stringify(cli.result ?? { error: cli.error }, null, 2)}\\n`)\n  if (cli.error) process.stderr.write(`${cli.error}\\n`)\n  process.exit(cli.exitCode)\n}\n\n// Run only when executed as the bin — never when imported for the testable\n// core, and never when bundled into a runtime that has no `process.argv`\n// (e.g. Cloudflare Workers, where `process` is a shim without `argv`). Reading\n// `process.argv[1]` directly would throw at module load there; `process.argv?.`\n// keeps the guard a no-op instead of crashing the Worker on startup.\nconst invokedScript = typeof process !== 'undefined' ? process.argv?.[1] : undefined\nif (invokedScript && /loop-runner-bin\\.(js|ts|mjs)$/.test(invokedScript)) {\n  void main()\n}\n"],"mappings":";;;;;;;AAyCA,MAAa,uBAAuB;CAAC;CAAQ;CAAU;CAAY;CAAS;AAAc;;AAM1F,SAAgB,oBAAoB,OAA4C;CAC9E,OAAO,OAAO,UAAU,YAAa,qBAA2C,SAAS,KAAK;AAChG;;;;;;;;;;AAoCA,eAAsB,iBACpB,MACA,UACA,UAAmC,CAAC,GACH;CACjC,MAAM,SAAS,SAAS;CACxB,IAAI,CAAC,QACH,MAAM,IAAI,YACR,oDAAoD,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC,EACH;CAEF,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,CAAC,CAAC;CACvD,MAAM,QAAQ,IAAI;CAClB,IAAI;EAEF,OAAO;GAAE;GAAM,IAAI;GAAM,QAAA,MADJ,OAAO,MAAM;GACD,YAAY,IAAI,IAAI;EAAM;CAC7D,SAAS,KAAK;EACZ,OAAO;GACL;GACA,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACtD,YAAY,IAAI,IAAI;EACtB;CACF;AACF;;;;;;;;;;;;;;;AA8CA,SAAgB,mBACd,SAC4C;CAC5C,MAAM,QAAQ,eAAuB;EACnC,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACnD,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAC/D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;CACjE,CAAC;CAGD,MAAM,UAAU,cAAqC;EACnD,MAAM;EACN,MAAM;GAAE,SAAS,QAAQ;GAAa,SAAS;EAAK;EACpD,WAAW;EACX,SAAS,EAAE,MAAM,QAAQ;EACzB,WAAW,EAAE,UAAU,uBAAuB,EAAE;CAClD,CAAC;CACD,OAAO,OAAO,WAAW;EACvB,MAAM,SAAS,MAAM,eAA8C;GACjE;GACA;GACA,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB;EACF,CAAC;EACD,IAAI,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC1D,MAAM,WACJ,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,YAC5C,OAAO,IAAI,SAAS,KAAK,IAAI,IAC7B,sBAAsB,OAAO;GACnC,MAAM,IAAI,MAAM,2CAA2C,SAAS,EAAE;EACxE;EACA,OAAO,OAAO,IAAI;CACpB;AACF;;;;;;;;;;;AA4CA,SAAgB,mBACd,GACyC;CACzC,MAAM,OAAO,aAAa,EAAE,IAAI;CAChC,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1D,OAAO,OAAO,WAAW;EACvB,MAAM,WAA4B,CAAC;EACnC,IAAI,SAAuB,CAAC;EAC5B,IAAI,SAAS;EACb,KAAK,IAAI,QAAQ,GAAG,QAAQ,WAAW,SAAS,GAAG;GACjD,IAAI,OAAO,SAAS;GACpB,UAAU;GACV,MAAM,aAAa,MAAM,EAAE,SAAS,OAAO,MAAM;GACjD,IAAI,WAAW,WAAW,GAAG;GAC7B,SAAS,CAAC;GACV,KAAK,MAAM,KAAK,YAAY;IAC1B,MAAM,IAAI,MAAM,KAAK,CAAC;IACtB,IAAI,EAAE,UAAU,SAAS,KAAK,CAAC;SAC1B,OAAO,KAAK;KAAE,WAAW;KAAG,UAAU,EAAE;KAAU,QAAQ,EAAE;IAAO,CAAC;GAC3E;GACA,IAAI,OAAO,WAAW,GAAG;EAC3B;EACA,OAAO;GAAE;GAAU;GAAQ;EAAO;CACpC;AACF;;;;;;AAOA,SAAgB,gBACd,SAC6D;CAC7D,OAAO,YAAY,eAAiC,OAAO;AAC7D;;;;;;;;;;;;;;;;;;;;;;;;;;ACvOA,eAAsB,iBAAiB,MAAuD;CAC5F,IAAI,CAAC,oBAAoB,KAAK,IAAI,GAChC,OAAO;EACL,UAAU;EACV,OAAO,iBAAiB,KAAK,KAAK,sBAAsB,qBAAqB,KAAK,IAAI,EAAE;CAC1F;CAEF,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,KAAK,aAAa;CACrC,SAAS,KAAK;EACZ,OAAO;GAAE,UAAU;GAAG,OAAO,4BAA4B,OAAO,GAAG;EAAI;CACzE;CACA,IAAI,CAAC,SAAS,KAAK,OACjB,OAAO;EACL,UAAU;EACV,OAAO,wCAAwC,KAAK,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC;CACH;CAIF,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAA2B,UAAU,EAC9E,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,EACtC,CAAC;CACD,OAAO;EAAE,UAAU,OAAO,KAAK,IAAI;EAAG;CAAO;AAC/C;;AAGA,SAAgB,oBAAoB,MAAoD;CACtF,MAAM,MAA0C,CAAC;CACjD,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;EACvC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACjC,IAAI,MAAM,YAAY,IAAI,SAAS,KAAK,EAAE;OAC1C,IAAI,GAAG,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAgB;OACjE,IAAI,GAAG,WAAW,WAAW,GAAG,IAAI,SAAS,EAAE,MAAM,CAAkB;CAC9E;CACA,OAAO;AACT;;AAGA,SAAS,gBAAgB,KAAqC;CAC5D,MAAM,MAAO,KAA+B,WAAW;CAEvD,OADc,OAAO,QAAQ,aAAc,IAAsB,IAAI;AAEvE;AAEA,SAAS,OAAO,KAAsB;CACpC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;;AAGA,eAAe,OAAsB;CACnC,MAAM,EAAE,MAAM,WAAW,oBAAoB,QAAQ,KAAK,MAAM,CAAC,CAAC;CAClE,IAAI,CAAC,QAAQ,CAAC,QAAQ;EACpB,QAAQ,OAAO,MACb;WACc,qBAAqB,KAAK,KAAK,EAAE;CAEjD;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,MAAM,EAAE,kBAAkB,MAAM,OAAO;CACvC,MAAM,EAAE,YAAY,MAAM,OAAO;CACjC,MAAM,MAAM,MAAM,iBAAiB;EACjC;EACA,cAAc,YAAY,gBAAgB,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,CAAC,KAAK;CAC7F,CAAC;CACD,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,IAAI,UAAU,EAAE,OAAO,IAAI,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG;CACvF,IAAI,IAAI,OAAO,QAAQ,OAAO,MAAM,GAAG,IAAI,MAAM,GAAG;CACpD,QAAQ,KAAK,IAAI,QAAQ;AAC3B;AAOA,MAAM,gBAAgB,OAAO,YAAY,cAAc,QAAQ,OAAO,KAAK,KAAA;AAC3E,IAAI,iBAAiB,gCAAgC,KAAK,aAAa,GACrE,KAAU"}

package/dist/loop-runner-bin.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { n as runLoopRunnerCli, t as parseLoopRunnerArgv } from "./loop-runner-bin-Bt9qFNkq.js";
+import { n as runLoopRunnerCli, t as parseLoopRunnerArgv } from "./loop-runner-bin-CI9Y0sxT.js";
 export { parseLoopRunnerArgv, runLoopRunnerCli };

package/dist/{materialization-COJ1UYQ-.js → materialization-DBXuH34A.js}

@@ -1,6 +1,6 @@
 import { u as ValidationError } from "./errors-DEAvWQPy.js";
 import { t as detachedSnapshot } from "./snapshot-CXiiuHhL.js";
-import { t as assertExecutableAgentProfile } from "./model-policy-CqziaqS1.js";
+import { t as assertExecutableAgentProfile } from "./model-policy-mWSoToiQ.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
 //#region src/runtime/supervise/executable-spec.ts
@@ -269,4 +269,4 @@ function jsonWireSnapshot(value, path = "$") {
 //#endregion
 export { unknownMaterializationReceipt as _, authoredProfileDigest as a, knownExecutionBindingReceipt as c, runtimeOwnedDeferredExecutorRuntime as d, runtimeOwnedExecutorExecutionBinding as f, unknownExecutionBindingReceipt as g, runtimeOwnedScopeOwnerRuntime as h, attestRuntimeOwnedScopeOwner as i, knownMaterializationReceipt as l, runtimeOwnedPendingExecutorMaterialization as m, attestRuntimeOwnedExecutor as n, finalizeRuntimeOwnedPendingExecutor as o, runtimeOwnedExecutorMaterialization as p, attestRuntimeOwnedPendingExecutor as r, inheritRuntimeOwnedExecutorAttestation as s, attestRuntimeOwnedDeferredExecutor as t, newExecutionAttemptId as u, executableAgentProfileSnapshot as v, executableAgentSpecSnapshot as y };
 
-//# sourceMappingURL=materialization-COJ1UYQ-.js.map
+//# sourceMappingURL=materialization-DBXuH34A.js.map

package/dist/{materialization-COJ1UYQ-.js.map → materialization-DBXuH34A.js.map}

@@ -1 +1 @@
-{"version":3,"file":"materialization-COJ1UYQ-.js","names":[],"sources":["../src/runtime/supervise/executable-spec.ts","../src/runtime/supervise/materialization.ts"],"sourcesContent":["import { type AgentProfile, agentProfileSchema } from '@tangle-network/agent-interface'\nimport { assertExecutableAgentProfile } from './model-policy'\nimport { detachedSnapshot } from './snapshot'\nimport type { AgentSpec } from './types'\n\n/**\n * Parse one untrusted profile into the exact immutable value execution may consume.\n *\n * Snapshotting before schema parsing reads caller-owned fields once. Snapshotting the parsed\n * result prevents downstream custom code from changing any identity or authority field.\n */\nexport function executableAgentProfileSnapshot(raw: unknown, context: string): AgentProfile {\n  const input = detachedSnapshot(raw, `${context}: AgentProfile input`)\n  const profile = agentProfileSchema.parse(input)\n  assertExecutableAgentProfile(profile, context)\n  return detachedSnapshot(profile, `${context}: parsed AgentProfile`)\n}\n\n/** Snapshot an executable spec while retaining trusted callbacks by reference. */\nexport function executableAgentSpecSnapshot(raw: AgentSpec, context: string): AgentSpec {\n  const {\n    profile: rawProfile,\n    harness,\n    execution: rawExecution,\n    ...runtimeExtensions\n  } = raw as AgentSpec & Readonly<Record<string, unknown>>\n  const profile = executableAgentProfileSnapshot(rawProfile, context)\n  const execution =\n    rawExecution === undefined\n      ? undefined\n      : detachedSnapshot(rawExecution, `${context}: execution attribution`)\n  return Object.freeze({\n    ...runtimeExtensions,\n    profile,\n    harness,\n    ...(execution === undefined ? {} : { execution }),\n  }) as AgentSpec\n}\n","import { randomUUID } from 'node:crypto'\nimport {\n  agentProfileSchema,\n  canonicalAgentProfileDigest,\n  canonicalCandidateDigest,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { ValidationError } from '../../errors'\nimport { detachedSnapshot } from './snapshot'\nimport type {\n  ExecutionBindingReceipt,\n  Executor,\n  ExecutorExecutionBinding,\n  ExecutorMaterialization,\n  ProfileMaterializationReceipt,\n  Runtime,\n  UnknownMaterializationReason,\n} from './types'\n\ntype RuntimeOwnedExecutorMaterialization =\n  | {\n      readonly kind: 'known'\n      readonly declaration: ExecutorMaterialization\n      readonly binding?: ExecutorExecutionBinding\n    }\n  | {\n      /** A Runtime-owned external executor whose exact launch is known, but whose remote\n       * materializer has not yet returned its terminal acknowledgement. This private state lets\n       * Runtime validate the planned authority before execution without presenting it as proof\n       * that the remote process actually used that plan. */\n      readonly kind: 'pending'\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | { readonly kind: 'deferred'; readonly runtime: Runtime }\n\ninterface RuntimeOwnedExecutorMaterializationRef {\n  current: RuntimeOwnedExecutorMaterialization\n}\n\nconst runtimeOwnedExecutorMaterializations = new WeakMap<\n  object,\n  RuntimeOwnedExecutorMaterializationRef\n>()\nconst runtimeOwnedScopeOwners = new WeakMap<object, Runtime>()\n\ninterface KnownReceiptInput {\n  readonly authoredProfileDigest: Sha256Digest\n  readonly runtime: Runtime\n  readonly declaration: ExecutorMaterialization\n}\n\ninterface UnknownReceiptInput {\n  readonly authoredProfileDigest?: Sha256Digest\n  readonly runtime: Runtime\n  readonly reason: UnknownMaterializationReason\n}\n\nconst declarationKeys = new Set([\n  'effectiveProfile',\n  'backend',\n  'model',\n  'execution',\n  'materializer',\n  'plan',\n  'platformAttachments',\n])\n\n/**\n * Bind a declaration to a runtime-owned executor without putting an attestable method on the\n * public Executor interface. This module is not a package export: arbitrary caller executors stay\n * unknown even if they add a lookalike `materialization()` property.\n */\nexport function attestRuntimeOwnedExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding?: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'known',\n      declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n      ...(binding === undefined\n        ? {}\n        : {\n            binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n          }),\n    }),\n  })\n  return executor\n}\n\n/** Brand an external Runtime executor whose exact remote materialization is provable only after\n * its terminal protocol acknowledgement. The declaration is a planned authority check, never a\n * known receipt; callers must finalize this same object after validating the acknowledgement. */\nexport function attestRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'pending',\n      runtime,\n      declaration: detachedSnapshot(declaration, 'pending executor materialization'),\n      binding: detachedSnapshot(binding, 'pending executor execution binding'),\n    }),\n  })\n  return executor\n}\n\n/** Replace a private pending brand with terminally acknowledged evidence. A caller-owned executor\n * cannot enter this path because only this module can create the pending WeakMap entry. */\nexport function finalizeRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(executor as object)\n  if (ref?.current.kind !== 'pending' || ref.current.runtime !== executor.runtime) {\n    throw new ValidationError(\n      'executor materialization: terminal acknowledgement has no matching Runtime-owned pending executor',\n    )\n  }\n  ref.current = Object.freeze({\n    kind: 'known',\n    declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n    binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n  })\n  return executor\n}\n\n/** Mark a runtime-owned orchestration executor whose exact leaf declaration is published through\n * its private nested Scope before the first backend inference. Arbitrary executors cannot opt in. */\nexport function attestRuntimeOwnedDeferredExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({ kind: 'deferred', runtime }),\n  })\n  return executor\n}\n\n/** Preserve the runtime-owned attestation when a trusted wrapper changes result semantics only. */\nexport function inheritRuntimeOwnedExecutorAttestation<In, Out>(\n  source: Executor<In>,\n  wrapper: Executor<Out>,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(source as object)\n  if (ref !== undefined) {\n    runtimeOwnedExecutorMaterializations.set(wrapper as object, ref)\n  }\n  return wrapper\n}\n\n/** Read a declaration only when Runtime itself branded this exact executor object. */\nexport function runtimeOwnedExecutorMaterialization<Out>(\n  executor: Executor<Out>,\n): ExecutorMaterialization | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.declaration : undefined\n}\n\n/** Read one attempt binding only from the private brand on this exact executor object. */\nexport function runtimeOwnedExecutorExecutionBinding<Out>(\n  executor: Executor<Out>,\n): ExecutorExecutionBinding | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.binding : undefined\n}\n\n/** Read a planned external declaration only for Runtime's private pending brand. This is useful for\n * pre-execution authority checks, but must never be turned into a known durable receipt. */\nexport function runtimeOwnedPendingExecutorMaterialization<Out>(executor: Executor<Out>):\n  | {\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'pending'\n    ? {\n        runtime: attestation.runtime,\n        declaration: attestation.declaration,\n        binding: attestation.binding,\n      }\n    : undefined\n}\n\n/** Read the expected leaf runtime only for a privately branded deferred orchestration executor. */\nexport function runtimeOwnedDeferredExecutorRuntime<Out>(\n  executor: Executor<Out>,\n): Runtime | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'deferred' ? attestation.runtime : undefined\n}\n\n/** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */\nexport function attestRuntimeOwnedScopeOwner<T extends object>(owner: T, runtime: Runtime): T {\n  runtimeOwnedScopeOwners.set(owner, runtime)\n  return owner\n}\n\n/** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents\n * deliberately have no entry even if they add lookalike fields. */\nexport function runtimeOwnedScopeOwnerRuntime(owner: object): Runtime | undefined {\n  return runtimeOwnedScopeOwners.get(owner)\n}\n\n/** Build one kernel-owned known receipt from a data-only executor declaration. */\nexport function knownMaterializationReceipt(\n  input: KnownReceiptInput,\n): ProfileMaterializationReceipt {\n  const declaration = detachedSnapshot(input.declaration, 'executor materialization')\n  assertExactDeclaration(declaration)\n  const effectiveProfile = agentProfileSchema.safeParse(declaration.effectiveProfile)\n  if (!effectiveProfile.success) {\n    throw new ValidationError('executor materialization: effectiveProfile must be an AgentProfile')\n  }\n  assertNonEmpty(declaration.backend, 'backend')\n  assertNonEmpty(declaration.materializer, 'materializer')\n  assertNonEmpty(declaration.execution?.kind, 'execution.kind')\n  assertNonEmpty(declaration.execution?.id, 'execution.id')\n  assertModel(declaration.model)\n\n  let effectiveProfileDigest: Sha256Digest\n  let materializationPlanDigest: Sha256Digest\n  let platformAttachmentsDigest: Sha256Digest | undefined\n  try {\n    effectiveProfileDigest = canonicalAgentProfileDigest(effectiveProfile.data)\n    materializationPlanDigest = canonicalCandidateDigest(jsonWireSnapshot(declaration.plan))\n    platformAttachmentsDigest =\n      declaration.platformAttachments === undefined\n        ? undefined\n        : canonicalCandidateDigest(jsonWireSnapshot(declaration.platformAttachments))\n  } catch (error) {\n    throw new ValidationError(\n      'executor materialization: profile, plan, and attachments must be finite RFC 8785 JSON',\n      { cause: error },\n    )\n  }\n\n  return Object.freeze({\n    status: 'known' as const,\n    authoredProfileDigest: input.authoredProfileDigest,\n    effectiveProfileDigest,\n    materializationPlanDigest,\n    ...(platformAttachmentsDigest === undefined ? {} : { platformAttachmentsDigest }),\n    runtime: input.runtime,\n    backend: declaration.backend,\n    model: declaration.model,\n    execution: declaration.execution,\n    materializer: declaration.materializer,\n  })\n}\n\n/** Build an explicit unknown receipt without fabricating any executor-owned identity. */\nexport function unknownMaterializationReceipt(\n  input: UnknownReceiptInput,\n): ProfileMaterializationReceipt {\n  return Object.freeze({\n    status: 'unknown' as const,\n    ...(input.authoredProfileDigest === undefined\n      ? {}\n      : { authoredProfileDigest: input.authoredProfileDigest }),\n    runtime: input.runtime,\n    reason: input.reason,\n  })\n}\n\n/** Mint a process-unique attempt id before executor construction. */\nexport function newExecutionAttemptId(nodeId: string): string {\n  return `${nodeId}:attempt:${randomUUID()}`\n}\n\n/** Build the immutable safe receipt for a full, transient execution binding. */\nexport function knownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  bindingInput: ExecutorExecutionBinding,\n): ExecutionBindingReceipt {\n  const binding = detachedSnapshot(bindingInput, 'executor execution binding')\n  assertNonEmpty(binding.attemptId, 'binding.attemptId')\n  assertSafeDescriptor(binding.descriptor)\n  let materializationReceiptDigest: Sha256Digest\n  let bindingDigest: Sha256Digest\n  try {\n    materializationReceiptDigest = canonicalCandidateDigest(materialization)\n    // Bind the exact JSON document a backend receives. Optional AgentProfile fields are represented\n    // as `undefined` in memory but omitted by JSON transport; normalize that one distinction while\n    // rejecting every non-finite/non-data value instead of silently coercing it.\n    bindingDigest = canonicalCandidateDigest(jsonWireSnapshot(binding.binding))\n  } catch (error) {\n    throw new ValidationError('executor binding must be finite RFC 8785 JSON', { cause: error })\n  }\n  return Object.freeze({\n    status: 'known' as const,\n    attemptId: binding.attemptId,\n    materializationReceiptDigest,\n    bindingDigest,\n    descriptor: binding.descriptor,\n  })\n}\n\n/** Preserve an attempt boundary even when its caller-owned transport cannot be attested. */\nexport function unknownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  attemptId: string,\n  reason: UnknownMaterializationReason,\n): ExecutionBindingReceipt {\n  assertNonEmpty(attemptId, 'binding.attemptId')\n  return Object.freeze({\n    status: 'unknown' as const,\n    attemptId,\n    materializationReceiptDigest: canonicalCandidateDigest(materialization),\n    reason,\n  })\n}\n\n/** Derive an authored-profile digest without turning non-canonical input into a fake identity. */\nexport function authoredProfileDigest(profile: unknown): Sha256Digest | undefined {\n  try {\n    return canonicalAgentProfileDigest(agentProfileSchema.parse(profile))\n  } catch {\n    return undefined\n  }\n}\n\nfunction assertExactDeclaration(value: ExecutorMaterialization): void {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw new ValidationError('executor materialization: declaration must be an object')\n  }\n  const unknown = Object.keys(value).filter((key) => !declarationKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(\n      `executor materialization: unknown declaration fields: ${unknown.sort().join(', ')}`,\n    )\n  }\n  if (!Object.hasOwn(value, 'plan')) {\n    throw new ValidationError('executor materialization: plan is required')\n  }\n}\n\nfunction assertModel(model: ExecutorMaterialization['model']): void {\n  if (typeof model !== 'object' || model === null || Array.isArray(model)) {\n    throw new ValidationError('executor materialization: model must be a known/unknown identity')\n  }\n  const keys = Object.keys(model).sort()\n  if (model.status === 'known') {\n    if (keys.join(',') !== 'id,status') {\n      throw new ValidationError('executor materialization: known model accepts only status and id')\n    }\n    assertNonEmpty(model.id, 'model.id')\n    return\n  }\n  if (model.status === 'unknown') {\n    if (keys.join(',') !== 'reason,status') {\n      throw new ValidationError(\n        'executor materialization: unknown model accepts only status and reason',\n      )\n    }\n    assertNonEmpty(model.reason, 'model.reason')\n    return\n  }\n  throw new ValidationError('executor materialization: model.status must be known or unknown')\n}\n\nfunction assertNonEmpty(value: unknown, field: string): asserts value is string {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    throw new ValidationError(`executor materialization: ${field} must be a non-empty string`)\n  }\n}\n\nfunction assertSafeDescriptor(descriptor: ExecutorExecutionBinding['descriptor']): void {\n  if (typeof descriptor !== 'object' || descriptor === null || Array.isArray(descriptor)) {\n    throw new ValidationError('executor binding: descriptor must be an object')\n  }\n  for (const [key, value] of Object.entries(descriptor)) {\n    if (/(url|uri|token|key|secret|bearer|credential|authorization)/i.test(key)) {\n      throw new ValidationError(`executor binding: unsafe descriptor key ${JSON.stringify(key)}`)\n    }\n    if (\n      value !== null &&\n      typeof value !== 'string' &&\n      typeof value !== 'number' &&\n      typeof value !== 'boolean'\n    ) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} must be scalar`,\n      )\n    }\n    if (typeof value === 'string' && (value.includes('://') || value.includes('@'))) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} contains transport or credential text`,\n      )\n    }\n  }\n}\n\nfunction jsonWireSnapshot(value: unknown, path = '$'): unknown {\n  if (value === null || typeof value === 'string' || typeof value === 'boolean') return value\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) {\n      throw new ValidationError(`executor binding: ${path} must be finite`)\n    }\n    return value\n  }\n  if (Array.isArray(value)) {\n    return value.map((item, index) => {\n      if (item === undefined) {\n        throw new ValidationError(`executor binding: ${path}[${index}] cannot be undefined`)\n      }\n      return jsonWireSnapshot(item, `${path}[${index}]`)\n    })\n  }\n  if (typeof value !== 'object' || value === null) {\n    throw new ValidationError(`executor binding: ${path} must be JSON data`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new ValidationError(`executor binding: ${path} must be a plain object`)\n  }\n  const out: Record<string, unknown> = {}\n  for (const [key, item] of Object.entries(value as Record<string, unknown>)) {\n    if (item === undefined) continue\n    out[key] = jsonWireSnapshot(item, `${path}.${key}`)\n  }\n  return out\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,+BAA+B,KAAc,SAA+B;CAC1F,MAAM,QAAQ,iBAAiB,KAAK,GAAG,QAAQ,qBAAqB;CACpE,MAAM,UAAU,mBAAmB,MAAM,KAAK;CAC9C,6BAA6B,SAAS,OAAO;CAC7C,OAAO,iBAAiB,SAAS,GAAG,QAAQ,sBAAsB;AACpE;;AAGA,SAAgB,4BAA4B,KAAgB,SAA4B;CACtF,MAAM,EACJ,SAAS,YACT,SACA,WAAW,cACX,GAAG,sBACD;CACJ,MAAM,UAAU,+BAA+B,YAAY,OAAO;CAClE,MAAM,YACJ,iBAAiB,KAAA,IACb,KAAA,IACA,iBAAiB,cAAc,GAAG,QAAQ,wBAAwB;CACxE,OAAO,OAAO,OAAO;EACnB,GAAG;EACH;EACA;EACA,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;CACjD,CAAC;AACH;;;ACIA,MAAM,uDAAuC,IAAI,QAG/C;AACF,MAAM,0CAA0B,IAAI,QAAyB;AAc7D,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,2BACd,UACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,GAAI,YAAY,KAAA,IACZ,CAAC,IACD,EACE,SAAS,iBAAiB,SAAS,0CAA0C,EAC/E;CACN,CAAC,EACH,CAAC;CACD,OAAO;AACT;;;;AAKA,SAAgB,kCACd,UACA,SACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN;EACA,aAAa,iBAAiB,aAAa,kCAAkC;EAC7E,SAAS,iBAAiB,SAAS,oCAAoC;CACzE,CAAC,EACH,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,oCACd,UACA,aACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,QAAkB;CACvE,IAAI,KAAK,QAAQ,SAAS,aAAa,IAAI,QAAQ,YAAY,SAAS,SACtE,MAAM,IAAI,gBACR,mGACF;CAEF,IAAI,UAAU,OAAO,OAAO;EAC1B,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,SAAS,iBAAiB,SAAS,0CAA0C;CAC/E,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,mCACd,UACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EAAE,MAAM;EAAY;CAAQ,CAAC,EACtD,CAAC;CACD,OAAO;AACT;;AAGA,SAAgB,uCACd,QACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,MAAgB;CACrE,IAAI,QAAQ,KAAA,GACV,qCAAqC,IAAI,SAAmB,GAAG;CAEjE,OAAO;AACT;;AAGA,SAAgB,oCACd,UACqC;CACrC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,cAAc,KAAA;AACnE;;AAGA,SAAgB,qCACd,UACsC;CACtC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,UAAU,KAAA;AAC/D;;;AAIA,SAAgB,2CAAgD,UAMlD;CACZ,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,YACzB;EACE,SAAS,YAAY;EACrB,aAAa,YAAY;EACzB,SAAS,YAAY;CACvB,IACA,KAAA;AACN;;AAGA,SAAgB,oCACd,UACqB;CACrB,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,aAAa,YAAY,UAAU,KAAA;AAClE;;AAGA,SAAgB,6BAA+C,OAAU,SAAqB;CAC5F,wBAAwB,IAAI,OAAO,OAAO;CAC1C,OAAO;AACT;;;AAIA,SAAgB,8BAA8B,OAAoC;CAChF,OAAO,wBAAwB,IAAI,KAAK;AAC1C;;AAGA,SAAgB,4BACd,OAC+B;CAC/B,MAAM,cAAc,iBAAiB,MAAM,aAAa,0BAA0B;CAClF,uBAAuB,WAAW;CAClC,MAAM,mBAAmB,mBAAmB,UAAU,YAAY,gBAAgB;CAClF,IAAI,CAAC,iBAAiB,SACpB,MAAM,IAAI,gBAAgB,oEAAoE;CAEhG,eAAe,YAAY,SAAS,SAAS;CAC7C,eAAe,YAAY,cAAc,cAAc;CACvD,eAAe,YAAY,WAAW,MAAM,gBAAgB;CAC5D,eAAe,YAAY,WAAW,IAAI,cAAc;CACxD,YAAY,YAAY,KAAK;CAE7B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,yBAAyB,4BAA4B,iBAAiB,IAAI;EAC1E,4BAA4B,yBAAyB,iBAAiB,YAAY,IAAI,CAAC;EACvF,4BACE,YAAY,wBAAwB,KAAA,IAChC,KAAA,IACA,yBAAyB,iBAAiB,YAAY,mBAAmB,CAAC;CAClF,SAAS,OAAO;EACd,MAAM,IAAI,gBACR,yFACA,EAAE,OAAO,MAAM,CACjB;CACF;CAEA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,uBAAuB,MAAM;EAC7B;EACA;EACA,GAAI,8BAA8B,KAAA,IAAY,CAAC,IAAI,EAAE,0BAA0B;EAC/E,SAAS,MAAM;EACf,SAAS,YAAY;EACrB,OAAO,YAAY;EACnB,WAAW,YAAY;EACvB,cAAc,YAAY;CAC5B,CAAC;AACH;;AAGA,SAAgB,8BACd,OAC+B;CAC/B,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,GAAI,MAAM,0BAA0B,KAAA,IAChC,CAAC,IACD,EAAE,uBAAuB,MAAM,sBAAsB;EACzD,SAAS,MAAM;EACf,QAAQ,MAAM;CAChB,CAAC;AACH;;AAGA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,GAAG,OAAO,WAAW,WAAW;AACzC;;AAGA,SAAgB,6BACd,iBACA,cACyB;CACzB,MAAM,UAAU,iBAAiB,cAAc,4BAA4B;CAC3E,eAAe,QAAQ,WAAW,mBAAmB;CACrD,qBAAqB,QAAQ,UAAU;CACvC,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,+BAA+B,yBAAyB,eAAe;EAIvE,gBAAgB,yBAAyB,iBAAiB,QAAQ,OAAO,CAAC;CAC5E,SAAS,OAAO;EACd,MAAM,IAAI,gBAAgB,iDAAiD,EAAE,OAAO,MAAM,CAAC;CAC7F;CACA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,WAAW,QAAQ;EACnB;EACA;EACA,YAAY,QAAQ;CACtB,CAAC;AACH;;AAGA,SAAgB,+BACd,iBACA,WACA,QACyB;CACzB,eAAe,WAAW,mBAAmB;CAC7C,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR;EACA,8BAA8B,yBAAyB,eAAe;EACtE;CACF,CAAC;AACH;;AAGA,SAAgB,sBAAsB,SAA4C;CAChF,IAAI;EACF,OAAO,4BAA4B,mBAAmB,MAAM,OAAO,CAAC;CACtE,QAAQ;EACN;CACF;AACF;AAEA,SAAS,uBAAuB,OAAsC;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,yDAAyD;CAErF,MAAM,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBACR,yDAAyD,QAAQ,KAAK,CAAC,CAAC,KAAK,IAAI,GACnF;CAEF,IAAI,CAAC,OAAO,OAAO,OAAO,MAAM,GAC9B,MAAM,IAAI,gBAAgB,4CAA4C;AAE1E;AAEA,SAAS,YAAY,OAA+C;CAClE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,kEAAkE;CAE9F,MAAM,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,KAAK;CACrC,IAAI,MAAM,WAAW,SAAS;EAC5B,IAAI,KAAK,KAAK,GAAG,MAAM,aACrB,MAAM,IAAI,gBAAgB,kEAAkE;EAE9F,eAAe,MAAM,IAAI,UAAU;EACnC;CACF;CACA,IAAI,MAAM,WAAW,WAAW;EAC9B,IAAI,KAAK,KAAK,GAAG,MAAM,iBACrB,MAAM,IAAI,gBACR,wEACF;EAEF,eAAe,MAAM,QAAQ,cAAc;EAC3C;CACF;CACA,MAAM,IAAI,gBAAgB,iEAAiE;AAC7F;AAEA,SAAS,eAAe,OAAgB,OAAwC;CAC9E,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,GACvD,MAAM,IAAI,gBAAgB,6BAA6B,MAAM,4BAA4B;AAE7F;AAEA,SAAS,qBAAqB,YAA0D;CACtF,IAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GACnF,MAAM,IAAI,gBAAgB,gDAAgD;CAE5E,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,IAAI,8DAA8D,KAAK,GAAG,GACxE,MAAM,IAAI,gBAAgB,2CAA2C,KAAK,UAAU,GAAG,GAAG;EAE5F,IACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,WAEjB,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,gBACtD;EAEF,IAAI,OAAO,UAAU,aAAa,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,GAAG,IAC3E,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,uCACtD;CAEJ;AACF;AAEA,SAAS,iBAAiB,OAAgB,OAAO,KAAc;CAC7D,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CACtF,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,gBAAgB;EAEtE,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,GAAG,MAAM,sBAAsB;EAErF,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE;CACnD,CAAC;CAEH,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,mBAAmB;CAEzE,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,OAAO,aAAa,cAAc,MAClD,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,wBAAwB;CAE9E,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAgC,GAAG;EAC1E,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,KAAK;CACpD;CACA,OAAO;AACT"}
+{"version":3,"file":"materialization-DBXuH34A.js","names":[],"sources":["../src/runtime/supervise/executable-spec.ts","../src/runtime/supervise/materialization.ts"],"sourcesContent":["import { type AgentProfile, agentProfileSchema } from '@tangle-network/agent-interface'\nimport { assertExecutableAgentProfile } from './model-policy'\nimport { detachedSnapshot } from './snapshot'\nimport type { AgentSpec } from './types'\n\n/**\n * Parse one untrusted profile into the exact immutable value execution may consume.\n *\n * Snapshotting before schema parsing reads caller-owned fields once. Snapshotting the parsed\n * result prevents downstream custom code from changing any identity or authority field.\n */\nexport function executableAgentProfileSnapshot(raw: unknown, context: string): AgentProfile {\n  const input = detachedSnapshot(raw, `${context}: AgentProfile input`)\n  const profile = agentProfileSchema.parse(input)\n  assertExecutableAgentProfile(profile, context)\n  return detachedSnapshot(profile, `${context}: parsed AgentProfile`)\n}\n\n/** Snapshot an executable spec while retaining trusted callbacks by reference. */\nexport function executableAgentSpecSnapshot(raw: AgentSpec, context: string): AgentSpec {\n  const {\n    profile: rawProfile,\n    harness,\n    execution: rawExecution,\n    ...runtimeExtensions\n  } = raw as AgentSpec & Readonly<Record<string, unknown>>\n  const profile = executableAgentProfileSnapshot(rawProfile, context)\n  const execution =\n    rawExecution === undefined\n      ? undefined\n      : detachedSnapshot(rawExecution, `${context}: execution attribution`)\n  return Object.freeze({\n    ...runtimeExtensions,\n    profile,\n    harness,\n    ...(execution === undefined ? {} : { execution }),\n  }) as AgentSpec\n}\n","import { randomUUID } from 'node:crypto'\nimport {\n  agentProfileSchema,\n  canonicalAgentProfileDigest,\n  canonicalCandidateDigest,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { ValidationError } from '../../errors'\nimport { detachedSnapshot } from './snapshot'\nimport type {\n  ExecutionBindingReceipt,\n  Executor,\n  ExecutorExecutionBinding,\n  ExecutorMaterialization,\n  ProfileMaterializationReceipt,\n  Runtime,\n  UnknownMaterializationReason,\n} from './types'\n\ntype RuntimeOwnedExecutorMaterialization =\n  | {\n      readonly kind: 'known'\n      readonly declaration: ExecutorMaterialization\n      readonly binding?: ExecutorExecutionBinding\n    }\n  | {\n      /** A Runtime-owned external executor whose exact launch is known, but whose remote\n       * materializer has not yet returned its terminal acknowledgement. This private state lets\n       * Runtime validate the planned authority before execution without presenting it as proof\n       * that the remote process actually used that plan. */\n      readonly kind: 'pending'\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | { readonly kind: 'deferred'; readonly runtime: Runtime }\n\ninterface RuntimeOwnedExecutorMaterializationRef {\n  current: RuntimeOwnedExecutorMaterialization\n}\n\nconst runtimeOwnedExecutorMaterializations = new WeakMap<\n  object,\n  RuntimeOwnedExecutorMaterializationRef\n>()\nconst runtimeOwnedScopeOwners = new WeakMap<object, Runtime>()\n\ninterface KnownReceiptInput {\n  readonly authoredProfileDigest: Sha256Digest\n  readonly runtime: Runtime\n  readonly declaration: ExecutorMaterialization\n}\n\ninterface UnknownReceiptInput {\n  readonly authoredProfileDigest?: Sha256Digest\n  readonly runtime: Runtime\n  readonly reason: UnknownMaterializationReason\n}\n\nconst declarationKeys = new Set([\n  'effectiveProfile',\n  'backend',\n  'model',\n  'execution',\n  'materializer',\n  'plan',\n  'platformAttachments',\n])\n\n/**\n * Bind a declaration to a runtime-owned executor without putting an attestable method on the\n * public Executor interface. This module is not a package export: arbitrary caller executors stay\n * unknown even if they add a lookalike `materialization()` property.\n */\nexport function attestRuntimeOwnedExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding?: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'known',\n      declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n      ...(binding === undefined\n        ? {}\n        : {\n            binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n          }),\n    }),\n  })\n  return executor\n}\n\n/** Brand an external Runtime executor whose exact remote materialization is provable only after\n * its terminal protocol acknowledgement. The declaration is a planned authority check, never a\n * known receipt; callers must finalize this same object after validating the acknowledgement. */\nexport function attestRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'pending',\n      runtime,\n      declaration: detachedSnapshot(declaration, 'pending executor materialization'),\n      binding: detachedSnapshot(binding, 'pending executor execution binding'),\n    }),\n  })\n  return executor\n}\n\n/** Replace a private pending brand with terminally acknowledged evidence. A caller-owned executor\n * cannot enter this path because only this module can create the pending WeakMap entry. */\nexport function finalizeRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(executor as object)\n  if (ref?.current.kind !== 'pending' || ref.current.runtime !== executor.runtime) {\n    throw new ValidationError(\n      'executor materialization: terminal acknowledgement has no matching Runtime-owned pending executor',\n    )\n  }\n  ref.current = Object.freeze({\n    kind: 'known',\n    declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n    binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n  })\n  return executor\n}\n\n/** Mark a runtime-owned orchestration executor whose exact leaf declaration is published through\n * its private nested Scope before the first backend inference. Arbitrary executors cannot opt in. */\nexport function attestRuntimeOwnedDeferredExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({ kind: 'deferred', runtime }),\n  })\n  return executor\n}\n\n/** Preserve the runtime-owned attestation when a trusted wrapper changes result semantics only. */\nexport function inheritRuntimeOwnedExecutorAttestation<In, Out>(\n  source: Executor<In>,\n  wrapper: Executor<Out>,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(source as object)\n  if (ref !== undefined) {\n    runtimeOwnedExecutorMaterializations.set(wrapper as object, ref)\n  }\n  return wrapper\n}\n\n/** Read a declaration only when Runtime itself branded this exact executor object. */\nexport function runtimeOwnedExecutorMaterialization<Out>(\n  executor: Executor<Out>,\n): ExecutorMaterialization | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.declaration : undefined\n}\n\n/** Read one attempt binding only from the private brand on this exact executor object. */\nexport function runtimeOwnedExecutorExecutionBinding<Out>(\n  executor: Executor<Out>,\n): ExecutorExecutionBinding | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.binding : undefined\n}\n\n/** Read a planned external declaration only for Runtime's private pending brand. This is useful for\n * pre-execution authority checks, but must never be turned into a known durable receipt. */\nexport function runtimeOwnedPendingExecutorMaterialization<Out>(executor: Executor<Out>):\n  | {\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'pending'\n    ? {\n        runtime: attestation.runtime,\n        declaration: attestation.declaration,\n        binding: attestation.binding,\n      }\n    : undefined\n}\n\n/** Read the expected leaf runtime only for a privately branded deferred orchestration executor. */\nexport function runtimeOwnedDeferredExecutorRuntime<Out>(\n  executor: Executor<Out>,\n): Runtime | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'deferred' ? attestation.runtime : undefined\n}\n\n/** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */\nexport function attestRuntimeOwnedScopeOwner<T extends object>(owner: T, runtime: Runtime): T {\n  runtimeOwnedScopeOwners.set(owner, runtime)\n  return owner\n}\n\n/** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents\n * deliberately have no entry even if they add lookalike fields. */\nexport function runtimeOwnedScopeOwnerRuntime(owner: object): Runtime | undefined {\n  return runtimeOwnedScopeOwners.get(owner)\n}\n\n/** Build one kernel-owned known receipt from a data-only executor declaration. */\nexport function knownMaterializationReceipt(\n  input: KnownReceiptInput,\n): ProfileMaterializationReceipt {\n  const declaration = detachedSnapshot(input.declaration, 'executor materialization')\n  assertExactDeclaration(declaration)\n  const effectiveProfile = agentProfileSchema.safeParse(declaration.effectiveProfile)\n  if (!effectiveProfile.success) {\n    throw new ValidationError('executor materialization: effectiveProfile must be an AgentProfile')\n  }\n  assertNonEmpty(declaration.backend, 'backend')\n  assertNonEmpty(declaration.materializer, 'materializer')\n  assertNonEmpty(declaration.execution?.kind, 'execution.kind')\n  assertNonEmpty(declaration.execution?.id, 'execution.id')\n  assertModel(declaration.model)\n\n  let effectiveProfileDigest: Sha256Digest\n  let materializationPlanDigest: Sha256Digest\n  let platformAttachmentsDigest: Sha256Digest | undefined\n  try {\n    effectiveProfileDigest = canonicalAgentProfileDigest(effectiveProfile.data)\n    materializationPlanDigest = canonicalCandidateDigest(jsonWireSnapshot(declaration.plan))\n    platformAttachmentsDigest =\n      declaration.platformAttachments === undefined\n        ? undefined\n        : canonicalCandidateDigest(jsonWireSnapshot(declaration.platformAttachments))\n  } catch (error) {\n    throw new ValidationError(\n      'executor materialization: profile, plan, and attachments must be finite RFC 8785 JSON',\n      { cause: error },\n    )\n  }\n\n  return Object.freeze({\n    status: 'known' as const,\n    authoredProfileDigest: input.authoredProfileDigest,\n    effectiveProfileDigest,\n    materializationPlanDigest,\n    ...(platformAttachmentsDigest === undefined ? {} : { platformAttachmentsDigest }),\n    runtime: input.runtime,\n    backend: declaration.backend,\n    model: declaration.model,\n    execution: declaration.execution,\n    materializer: declaration.materializer,\n  })\n}\n\n/** Build an explicit unknown receipt without fabricating any executor-owned identity. */\nexport function unknownMaterializationReceipt(\n  input: UnknownReceiptInput,\n): ProfileMaterializationReceipt {\n  return Object.freeze({\n    status: 'unknown' as const,\n    ...(input.authoredProfileDigest === undefined\n      ? {}\n      : { authoredProfileDigest: input.authoredProfileDigest }),\n    runtime: input.runtime,\n    reason: input.reason,\n  })\n}\n\n/** Mint a process-unique attempt id before executor construction. */\nexport function newExecutionAttemptId(nodeId: string): string {\n  return `${nodeId}:attempt:${randomUUID()}`\n}\n\n/** Build the immutable safe receipt for a full, transient execution binding. */\nexport function knownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  bindingInput: ExecutorExecutionBinding,\n): ExecutionBindingReceipt {\n  const binding = detachedSnapshot(bindingInput, 'executor execution binding')\n  assertNonEmpty(binding.attemptId, 'binding.attemptId')\n  assertSafeDescriptor(binding.descriptor)\n  let materializationReceiptDigest: Sha256Digest\n  let bindingDigest: Sha256Digest\n  try {\n    materializationReceiptDigest = canonicalCandidateDigest(materialization)\n    // Bind the exact JSON document a backend receives. Optional AgentProfile fields are represented\n    // as `undefined` in memory but omitted by JSON transport; normalize that one distinction while\n    // rejecting every non-finite/non-data value instead of silently coercing it.\n    bindingDigest = canonicalCandidateDigest(jsonWireSnapshot(binding.binding))\n  } catch (error) {\n    throw new ValidationError('executor binding must be finite RFC 8785 JSON', { cause: error })\n  }\n  return Object.freeze({\n    status: 'known' as const,\n    attemptId: binding.attemptId,\n    materializationReceiptDigest,\n    bindingDigest,\n    descriptor: binding.descriptor,\n  })\n}\n\n/** Preserve an attempt boundary even when its caller-owned transport cannot be attested. */\nexport function unknownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  attemptId: string,\n  reason: UnknownMaterializationReason,\n): ExecutionBindingReceipt {\n  assertNonEmpty(attemptId, 'binding.attemptId')\n  return Object.freeze({\n    status: 'unknown' as const,\n    attemptId,\n    materializationReceiptDigest: canonicalCandidateDigest(materialization),\n    reason,\n  })\n}\n\n/** Derive an authored-profile digest without turning non-canonical input into a fake identity. */\nexport function authoredProfileDigest(profile: unknown): Sha256Digest | undefined {\n  try {\n    return canonicalAgentProfileDigest(agentProfileSchema.parse(profile))\n  } catch {\n    return undefined\n  }\n}\n\nfunction assertExactDeclaration(value: ExecutorMaterialization): void {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw new ValidationError('executor materialization: declaration must be an object')\n  }\n  const unknown = Object.keys(value).filter((key) => !declarationKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(\n      `executor materialization: unknown declaration fields: ${unknown.sort().join(', ')}`,\n    )\n  }\n  if (!Object.hasOwn(value, 'plan')) {\n    throw new ValidationError('executor materialization: plan is required')\n  }\n}\n\nfunction assertModel(model: ExecutorMaterialization['model']): void {\n  if (typeof model !== 'object' || model === null || Array.isArray(model)) {\n    throw new ValidationError('executor materialization: model must be a known/unknown identity')\n  }\n  const keys = Object.keys(model).sort()\n  if (model.status === 'known') {\n    if (keys.join(',') !== 'id,status') {\n      throw new ValidationError('executor materialization: known model accepts only status and id')\n    }\n    assertNonEmpty(model.id, 'model.id')\n    return\n  }\n  if (model.status === 'unknown') {\n    if (keys.join(',') !== 'reason,status') {\n      throw new ValidationError(\n        'executor materialization: unknown model accepts only status and reason',\n      )\n    }\n    assertNonEmpty(model.reason, 'model.reason')\n    return\n  }\n  throw new ValidationError('executor materialization: model.status must be known or unknown')\n}\n\nfunction assertNonEmpty(value: unknown, field: string): asserts value is string {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    throw new ValidationError(`executor materialization: ${field} must be a non-empty string`)\n  }\n}\n\nfunction assertSafeDescriptor(descriptor: ExecutorExecutionBinding['descriptor']): void {\n  if (typeof descriptor !== 'object' || descriptor === null || Array.isArray(descriptor)) {\n    throw new ValidationError('executor binding: descriptor must be an object')\n  }\n  for (const [key, value] of Object.entries(descriptor)) {\n    if (/(url|uri|token|key|secret|bearer|credential|authorization)/i.test(key)) {\n      throw new ValidationError(`executor binding: unsafe descriptor key ${JSON.stringify(key)}`)\n    }\n    if (\n      value !== null &&\n      typeof value !== 'string' &&\n      typeof value !== 'number' &&\n      typeof value !== 'boolean'\n    ) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} must be scalar`,\n      )\n    }\n    if (typeof value === 'string' && (value.includes('://') || value.includes('@'))) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} contains transport or credential text`,\n      )\n    }\n  }\n}\n\nfunction jsonWireSnapshot(value: unknown, path = '$'): unknown {\n  if (value === null || typeof value === 'string' || typeof value === 'boolean') return value\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) {\n      throw new ValidationError(`executor binding: ${path} must be finite`)\n    }\n    return value\n  }\n  if (Array.isArray(value)) {\n    return value.map((item, index) => {\n      if (item === undefined) {\n        throw new ValidationError(`executor binding: ${path}[${index}] cannot be undefined`)\n      }\n      return jsonWireSnapshot(item, `${path}[${index}]`)\n    })\n  }\n  if (typeof value !== 'object' || value === null) {\n    throw new ValidationError(`executor binding: ${path} must be JSON data`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new ValidationError(`executor binding: ${path} must be a plain object`)\n  }\n  const out: Record<string, unknown> = {}\n  for (const [key, item] of Object.entries(value as Record<string, unknown>)) {\n    if (item === undefined) continue\n    out[key] = jsonWireSnapshot(item, `${path}.${key}`)\n  }\n  return out\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,+BAA+B,KAAc,SAA+B;CAC1F,MAAM,QAAQ,iBAAiB,KAAK,GAAG,QAAQ,qBAAqB;CACpE,MAAM,UAAU,mBAAmB,MAAM,KAAK;CAC9C,6BAA6B,SAAS,OAAO;CAC7C,OAAO,iBAAiB,SAAS,GAAG,QAAQ,sBAAsB;AACpE;;AAGA,SAAgB,4BAA4B,KAAgB,SAA4B;CACtF,MAAM,EACJ,SAAS,YACT,SACA,WAAW,cACX,GAAG,sBACD;CACJ,MAAM,UAAU,+BAA+B,YAAY,OAAO;CAClE,MAAM,YACJ,iBAAiB,KAAA,IACb,KAAA,IACA,iBAAiB,cAAc,GAAG,QAAQ,wBAAwB;CACxE,OAAO,OAAO,OAAO;EACnB,GAAG;EACH;EACA;EACA,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;CACjD,CAAC;AACH;;;ACIA,MAAM,uDAAuC,IAAI,QAG/C;AACF,MAAM,0CAA0B,IAAI,QAAyB;AAc7D,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,2BACd,UACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,GAAI,YAAY,KAAA,IACZ,CAAC,IACD,EACE,SAAS,iBAAiB,SAAS,0CAA0C,EAC/E;CACN,CAAC,EACH,CAAC;CACD,OAAO;AACT;;;;AAKA,SAAgB,kCACd,UACA,SACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN;EACA,aAAa,iBAAiB,aAAa,kCAAkC;EAC7E,SAAS,iBAAiB,SAAS,oCAAoC;CACzE,CAAC,EACH,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,oCACd,UACA,aACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,QAAkB;CACvE,IAAI,KAAK,QAAQ,SAAS,aAAa,IAAI,QAAQ,YAAY,SAAS,SACtE,MAAM,IAAI,gBACR,mGACF;CAEF,IAAI,UAAU,OAAO,OAAO;EAC1B,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,SAAS,iBAAiB,SAAS,0CAA0C;CAC/E,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,mCACd,UACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EAAE,MAAM;EAAY;CAAQ,CAAC,EACtD,CAAC;CACD,OAAO;AACT;;AAGA,SAAgB,uCACd,QACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,MAAgB;CACrE,IAAI,QAAQ,KAAA,GACV,qCAAqC,IAAI,SAAmB,GAAG;CAEjE,OAAO;AACT;;AAGA,SAAgB,oCACd,UACqC;CACrC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,cAAc,KAAA;AACnE;;AAGA,SAAgB,qCACd,UACsC;CACtC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,UAAU,KAAA;AAC/D;;;AAIA,SAAgB,2CAAgD,UAMlD;CACZ,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,YACzB;EACE,SAAS,YAAY;EACrB,aAAa,YAAY;EACzB,SAAS,YAAY;CACvB,IACA,KAAA;AACN;;AAGA,SAAgB,oCACd,UACqB;CACrB,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,aAAa,YAAY,UAAU,KAAA;AAClE;;AAGA,SAAgB,6BAA+C,OAAU,SAAqB;CAC5F,wBAAwB,IAAI,OAAO,OAAO;CAC1C,OAAO;AACT;;;AAIA,SAAgB,8BAA8B,OAAoC;CAChF,OAAO,wBAAwB,IAAI,KAAK;AAC1C;;AAGA,SAAgB,4BACd,OAC+B;CAC/B,MAAM,cAAc,iBAAiB,MAAM,aAAa,0BAA0B;CAClF,uBAAuB,WAAW;CAClC,MAAM,mBAAmB,mBAAmB,UAAU,YAAY,gBAAgB;CAClF,IAAI,CAAC,iBAAiB,SACpB,MAAM,IAAI,gBAAgB,oEAAoE;CAEhG,eAAe,YAAY,SAAS,SAAS;CAC7C,eAAe,YAAY,cAAc,cAAc;CACvD,eAAe,YAAY,WAAW,MAAM,gBAAgB;CAC5D,eAAe,YAAY,WAAW,IAAI,cAAc;CACxD,YAAY,YAAY,KAAK;CAE7B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,yBAAyB,4BAA4B,iBAAiB,IAAI;EAC1E,4BAA4B,yBAAyB,iBAAiB,YAAY,IAAI,CAAC;EACvF,4BACE,YAAY,wBAAwB,KAAA,IAChC,KAAA,IACA,yBAAyB,iBAAiB,YAAY,mBAAmB,CAAC;CAClF,SAAS,OAAO;EACd,MAAM,IAAI,gBACR,yFACA,EAAE,OAAO,MAAM,CACjB;CACF;CAEA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,uBAAuB,MAAM;EAC7B;EACA;EACA,GAAI,8BAA8B,KAAA,IAAY,CAAC,IAAI,EAAE,0BAA0B;EAC/E,SAAS,MAAM;EACf,SAAS,YAAY;EACrB,OAAO,YAAY;EACnB,WAAW,YAAY;EACvB,cAAc,YAAY;CAC5B,CAAC;AACH;;AAGA,SAAgB,8BACd,OAC+B;CAC/B,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,GAAI,MAAM,0BAA0B,KAAA,IAChC,CAAC,IACD,EAAE,uBAAuB,MAAM,sBAAsB;EACzD,SAAS,MAAM;EACf,QAAQ,MAAM;CAChB,CAAC;AACH;;AAGA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,GAAG,OAAO,WAAW,WAAW;AACzC;;AAGA,SAAgB,6BACd,iBACA,cACyB;CACzB,MAAM,UAAU,iBAAiB,cAAc,4BAA4B;CAC3E,eAAe,QAAQ,WAAW,mBAAmB;CACrD,qBAAqB,QAAQ,UAAU;CACvC,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,+BAA+B,yBAAyB,eAAe;EAIvE,gBAAgB,yBAAyB,iBAAiB,QAAQ,OAAO,CAAC;CAC5E,SAAS,OAAO;EACd,MAAM,IAAI,gBAAgB,iDAAiD,EAAE,OAAO,MAAM,CAAC;CAC7F;CACA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,WAAW,QAAQ;EACnB;EACA;EACA,YAAY,QAAQ;CACtB,CAAC;AACH;;AAGA,SAAgB,+BACd,iBACA,WACA,QACyB;CACzB,eAAe,WAAW,mBAAmB;CAC7C,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR;EACA,8BAA8B,yBAAyB,eAAe;EACtE;CACF,CAAC;AACH;;AAGA,SAAgB,sBAAsB,SAA4C;CAChF,IAAI;EACF,OAAO,4BAA4B,mBAAmB,MAAM,OAAO,CAAC;CACtE,QAAQ;EACN;CACF;AACF;AAEA,SAAS,uBAAuB,OAAsC;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,yDAAyD;CAErF,MAAM,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBACR,yDAAyD,QAAQ,KAAK,CAAC,CAAC,KAAK,IAAI,GACnF;CAEF,IAAI,CAAC,OAAO,OAAO,OAAO,MAAM,GAC9B,MAAM,IAAI,gBAAgB,4CAA4C;AAE1E;AAEA,SAAS,YAAY,OAA+C;CAClE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,kEAAkE;CAE9F,MAAM,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,KAAK;CACrC,IAAI,MAAM,WAAW,SAAS;EAC5B,IAAI,KAAK,KAAK,GAAG,MAAM,aACrB,MAAM,IAAI,gBAAgB,kEAAkE;EAE9F,eAAe,MAAM,IAAI,UAAU;EACnC;CACF;CACA,IAAI,MAAM,WAAW,WAAW;EAC9B,IAAI,KAAK,KAAK,GAAG,MAAM,iBACrB,MAAM,IAAI,gBACR,wEACF;EAEF,eAAe,MAAM,QAAQ,cAAc;EAC3C;CACF;CACA,MAAM,IAAI,gBAAgB,iEAAiE;AAC7F;AAEA,SAAS,eAAe,OAAgB,OAAwC;CAC9E,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,GACvD,MAAM,IAAI,gBAAgB,6BAA6B,MAAM,4BAA4B;AAE7F;AAEA,SAAS,qBAAqB,YAA0D;CACtF,IAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GACnF,MAAM,IAAI,gBAAgB,gDAAgD;CAE5E,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,IAAI,8DAA8D,KAAK,GAAG,GACxE,MAAM,IAAI,gBAAgB,2CAA2C,KAAK,UAAU,GAAG,GAAG;EAE5F,IACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,WAEjB,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,gBACtD;EAEF,IAAI,OAAO,UAAU,aAAa,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,GAAG,IAC3E,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,uCACtD;CAEJ;AACF;AAEA,SAAS,iBAAiB,OAAgB,OAAO,KAAc;CAC7D,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CACtF,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,gBAAgB;EAEtE,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,GAAG,MAAM,sBAAsB;EAErF,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE;CACnD,CAAC;CAEH,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,mBAAmB;CAEzE,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,OAAO,aAAa,cAAc,MAClD,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,wBAAwB;CAE9E,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAgC,GAAG;EAC1E,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,KAAK;CACpD;CACA,OAAO;AACT"}

package/dist/mcp/bin.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { i as ConfigError } from "../errors-DEAvWQPy.js";
-import { ot as readTraceContextFromEnv } from "../supervisor-BHS7T4HN.js";
-import { C as createMcpServer, Z as DelegationTaskQueue, st as FileDelegationStore } from "../supervise-eOjGprUt.js";
-import { a as supervisorInstructions } from "../authoring-Bxlrj57J.js";
+import { ot as readTraceContextFromEnv } from "../supervisor-C16p9KqO.js";
+import { C as createMcpServer, Z as DelegationTaskQueue, st as FileDelegationStore } from "../supervise-msTRhTN7.js";
+import { a as supervisorInstructions } from "../authoring-DI778qK7.js";
 //#region src/mcp/delegate-supervisor-provisioning.ts
 function trimmed(value) {
 	const v = value?.trim();

package/dist/mcp/index.js

@@ -1,12 +1,12 @@
 import { i as ConfigError, u as ValidationError } from "../errors-DEAvWQPy.js";
 import { l as throwAbort, n as deleteBoxSafe, s as sleep, u as throwIfAborted } from "../util-Bw6srryQ.js";
-import { t as assertExecutableAgentProfile } from "../model-policy-CqziaqS1.js";
-import { At as removeWorktree, Dt as runWorktreeHarness, Ft as parseCodexTokenUsage, It as CodexExecutionDiagnosticError, Mt as LOCAL_HARNESSES, Nt as harnessSupportsReasoningEffort, Ot as captureWorktreeDiff, Pt as localHarnessExecutable, Q as runAgentRounds, X as createSandboxForSpec, at as mergeTraceEnv, it as createPropagatingTraceEmitter, jt as DEFAULT_LOCAL_HARNESS, kt as createWorktree, ot as readTraceContextFromEnv, st as traceContextToEnv } from "../supervisor-BHS7T4HN.js";
-import { S as runCoderChecks, et as selectValidWinner } from "../runtime-BG6VzXf0.js";
-import { $ as DELEGATION_TRACE_MAX_BYTES, A as DELEGATION_HISTORY_INPUT_SCHEMA, B as DELEGATE_FEEDBACK_INPUT_SCHEMA, C as createMcpServer, D as createDelegationStatusHandler, Dt as createCoordinationTools, E as DELEGATION_STATUS_TOOL_NAME, F as DELEGATE_UI_AUDIT_INPUT_SCHEMA, G as DELEGATE_INPUT_SCHEMA, H as createDelegateFeedbackHandler, I as DELEGATE_UI_AUDIT_TOOL_NAME, J as validateDelegateArgs, K as DELEGATE_TOOL_NAME, L as createDelegateUiAuditHandler, M as createDelegationHistoryHandler, N as validateDelegationHistoryArgs, O as validateDelegationStatusArgs, P as DELEGATE_UI_AUDIT_DESCRIPTION, Q as hashIdempotencyInput, R as validateDelegateUiAuditArgs, S as createInProcessTransport, T as DELEGATION_STATUS_INPUT_SCHEMA, Tt as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, U as validateDelegateFeedbackArgs, V as DELEGATE_FEEDBACK_TOOL_NAME, W as DELEGATE_DESCRIPTION, Z as DelegationTaskQueue, at as DelegationPersistenceError, ct as InMemoryDelegationStore, et as DELEGATION_TRACE_MAX_SPANS, it as createDelegationTraceCollector, j as DELEGATION_HISTORY_TOOL_NAME, k as DELEGATION_HISTORY_DESCRIPTION, lt as InMemoryFeedbackStore, nt as capDelegationTrace, ot as DelegationStateCorruptError, q as createDelegateHandler, rt as composeLoopTraceEmitters, st as FileDelegationStore, tt as buildDelegationTraceSpans, ut as eventToSnapshot, w as DELEGATION_STATUS_DESCRIPTION, z as DELEGATE_FEEDBACK_DESCRIPTION } from "../supervise-eOjGprUt.js";
+import { t as assertExecutableAgentProfile } from "../model-policy-mWSoToiQ.js";
+import { At as removeWorktree, Dt as runWorktreeHarness, Ft as parseCodexTokenUsage, It as CodexExecutionDiagnosticError, Mt as LOCAL_HARNESSES, Nt as harnessSupportsReasoningEffort, Ot as captureWorktreeDiff, Pt as localHarnessExecutable, Q as runAgentRounds, X as createSandboxForSpec, at as mergeTraceEnv, it as createPropagatingTraceEmitter, jt as DEFAULT_LOCAL_HARNESS, kt as createWorktree, ot as readTraceContextFromEnv, st as traceContextToEnv } from "../supervisor-C16p9KqO.js";
+import { S as runCoderChecks, et as selectValidWinner } from "../runtime-ZNVnT8h1.js";
+import { $ as DELEGATION_TRACE_MAX_BYTES, A as DELEGATION_HISTORY_INPUT_SCHEMA, B as DELEGATE_FEEDBACK_INPUT_SCHEMA, C as createMcpServer, D as createDelegationStatusHandler, Dt as createCoordinationTools, E as DELEGATION_STATUS_TOOL_NAME, F as DELEGATE_UI_AUDIT_INPUT_SCHEMA, G as DELEGATE_INPUT_SCHEMA, H as createDelegateFeedbackHandler, I as DELEGATE_UI_AUDIT_TOOL_NAME, J as validateDelegateArgs, K as DELEGATE_TOOL_NAME, L as createDelegateUiAuditHandler, M as createDelegationHistoryHandler, N as validateDelegationHistoryArgs, O as validateDelegationStatusArgs, P as DELEGATE_UI_AUDIT_DESCRIPTION, Q as hashIdempotencyInput, R as validateDelegateUiAuditArgs, S as createInProcessTransport, T as DELEGATION_STATUS_INPUT_SCHEMA, Tt as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, U as validateDelegateFeedbackArgs, V as DELEGATE_FEEDBACK_TOOL_NAME, W as DELEGATE_DESCRIPTION, Z as DelegationTaskQueue, at as DelegationPersistenceError, ct as InMemoryDelegationStore, et as DELEGATION_TRACE_MAX_SPANS, it as createDelegationTraceCollector, j as DELEGATION_HISTORY_TOOL_NAME, k as DELEGATION_HISTORY_DESCRIPTION, lt as InMemoryFeedbackStore, nt as capDelegationTrace, ot as DelegationStateCorruptError, q as createDelegateHandler, rt as composeLoopTraceEmitters, st as FileDelegationStore, tt as buildDelegationTraceSpans, ut as eventToSnapshot, w as DELEGATION_STATUS_DESCRIPTION, z as DELEGATE_FEEDBACK_DESCRIPTION } from "../supervise-msTRhTN7.js";
 import { t as createStdioToolServer } from "../tool-server-Gs3VvfSK.js";
 import { t as createKbGate } from "../kb-gate-DpaSwXVx.js";
-import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "../openai-tools-U-hmk_yS.js";
+import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "../openai-tools-CupeHJEv.js";
 import { t as coderTaskToPrompt } from "../coder-yhVWbdWc.js";
 import { a as createMemoryToolServer, c as resolveMemoryFromEnv, i as MEMORY_NAME_ENV, n as MEMORY_ITEMS_ENV, o as parseMemoryItems, r as MEMORY_LOG_ENV, s as readMemoryItemsFile, t as MEMORY_FILE_ENV } from "../memory-server-eD2baiRO.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";

package/dist/{model-policy-CqziaqS1.js → model-policy-mWSoToiQ.js}

@@ -126,8 +126,9 @@ function profileProviderModel(profile) {
 function profileBridgeWireModel(profile) {
 	const model = concreteProfileModel(profile);
 	const provider = profile.model?.provider;
-	const providerModel = model ? provider && !model.includes("/") ? `${provider}/${model}` : model : void 0;
 	const harness = agentHarness(profile.harness);
+	const modelWithoutHarness = model && harness && model.startsWith(`${harness}/`) ? model.slice(harness.length + 1) : model;
+	const providerModel = modelWithoutHarness ? provider && !modelWithoutHarness.startsWith(`${provider}/`) ? `${provider}/${modelWithoutHarness}` : modelWithoutHarness : void 0;
 	if (!harness) return providerModel;
 	if (!providerModel) return harness;
 	return providerModel.startsWith(`${harness}/`) ? providerModel : `${harness}/${providerModel}`;
@@ -229,4 +230,4 @@ function assertProfileModelsAllowed(profile, allowed) {
 //#endregion
 export { concreteProfileModel as a, profileProviderModel as c, harnessRunsAgent as d, concreteModelId as i, resolveRouterRetryPolicy as l, assertModelAllowed as n, profileBridgeWireModel as o, assertProfileModelsAllowed as r, profileModelExecutionSettings as s, assertExecutableAgentProfile as t, agentHarness as u };
 
-//# sourceMappingURL=model-policy-CqziaqS1.js.map
+//# sourceMappingURL=model-policy-mWSoToiQ.js.map

package/dist/model-policy-mWSoToiQ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-policy-mWSoToiQ.js","names":["positiveInteger"],"sources":["../src/runtime/harness-role.ts","../src/runtime/router-retry-policy.ts","../src/runtime/supervise/model-policy.ts"],"sourcesContent":["/**\n * Which `HarnessType` values name a real coding-agent runtime, and which name a MODE that has no\n * agent behind it.\n *\n * `cli-base` is the router-backed mode — a plain multi-turn router call with no coding-agent\n * harness (`@tangle-network/agent-interface`'s `HarnessType` doc, and the same table's\n * `harnessReasoningCeiling['cli-base'] = 'none'` commented \"cli-base has no agent\"). The\n * distinction is REAL; what was accidental is that three call sites each spelled the test\n * themselves, so a second no-agent mode would have to be remembered in three places.\n *\n * SHOULD UPSTREAM: this belongs next to `harnessHonorsEffort` in agent-interface's\n * `harness-capabilities.ts`, which already encodes the fact but exports no predicate for it.\n * Until it does, this is the one local copy — extend the set here, never re-test the name.\n */\n\nimport type { HarnessType } from '@tangle-network/agent-interface'\n\n/**\n * Harness ids that select a router/no-agent mode rather than a coding-agent runtime.\n *\n * `nanoclaw` is deliberately ABSENT: the shared capability table clamps its reasoning ceiling the\n * same way it clamps `cli-base`, but nanoclaw does run an agent (a socket-bridge runner to the\n * NanoClaw daemon) and every caller here treats it as a full harness. Add a row only with the\n * behavior change stated, never to make the two clamps look symmetric.\n */\nconst NO_AGENT_HARNESSES: ReadonlySet<string> = new Set<string>(['cli-base' satisfies HarnessType])\n\n/** Whether this profile harness selects a real coding-agent runtime (vs. the router/no-agent mode\n *  or no preference at all). Accepts the looser `string` some local profile shapes declare, and\n *  preserves the caller's own harness type when it is narrower. */\nexport function harnessRunsAgent<T extends string>(harness: T | null | undefined): harness is T {\n  return harness != null && !NO_AGENT_HARNESSES.has(harness)\n}\n\n/** The coding-agent harness this profile selects, or `undefined` when it selects none — the shape\n *  callers want when a no-agent mode must fall through to the router arm. */\nexport function agentHarness<T extends string>(harness: T | null | undefined): T | undefined {\n  return harnessRunsAgent(harness) ? harness : undefined\n}\n","import { ValidationError } from '../errors'\n\n/** Exact retry controls accepted at `AgentProfile.model.metadata.retry`. */\nexport interface RouterRetryPolicy {\n  /** Total attempts, including the first request. */\n  readonly maxAttempts?: number\n  /** Delay before the second attempt. Later delays grow exponentially. */\n  readonly initialBackoffMs?: number\n  /** Maximum delay between attempts. */\n  readonly maxBackoffMs?: number\n  /** Symmetric random variation around each delay, from 0 through 1. */\n  readonly jitter?: number\n  /** HTTP statuses that may be retried. */\n  readonly retryStatuses?: ReadonlyArray<number>\n  /** Deadline for receiving one attempt's response headers. Zero disables it. */\n  readonly requestTimeoutMs?: number\n}\n\nexport interface ResolvedRouterRetryPolicy {\n  readonly maxAttempts: number\n  readonly initialBackoffMs: number\n  readonly maxBackoffMs: number\n  readonly jitter: number\n  readonly retryStatuses: ReadonlyArray<number>\n  readonly requestTimeoutMs: number\n}\n\nconst maximumTimerMs = 2_147_483_647\nconst defaultRetryStatuses = Object.freeze([408, 425, 429, 500, 502, 503, 504, 520, 522, 524])\nconst retryPolicyKeys = new Set([\n  'initialBackoffMs',\n  'jitter',\n  'maxAttempts',\n  'maxBackoffMs',\n  'requestTimeoutMs',\n  'retryStatuses',\n])\n\n/** Parse untrusted profile/config data once and return an immutable complete policy. */\nexport function resolveRouterRetryPolicy(\n  input: unknown,\n  context: string,\n): ResolvedRouterRetryPolicy {\n  if (\n    input !== undefined &&\n    (typeof input !== 'object' || input === null || Array.isArray(input))\n  ) {\n    throw new ValidationError(`${context} must be an object`)\n  }\n  const policy = input === undefined ? {} : Object.fromEntries(Object.entries(input))\n  const unknown = Object.keys(policy).filter((key) => !retryPolicyKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(`${context} has unsupported fields: ${unknown.join(', ')}`)\n  }\n  const maxAttempts = positiveInteger(policy.maxAttempts, 5, `${context}.maxAttempts`)\n  const initialBackoffMs = timerInteger(\n    policy.initialBackoffMs,\n    1_000,\n    `${context}.initialBackoffMs`,\n  )\n  const maxBackoffMs = timerInteger(policy.maxBackoffMs, 30_000, `${context}.maxBackoffMs`)\n  const requestTimeoutMs = timerInteger(policy.requestTimeoutMs, 0, `${context}.requestTimeoutMs`)\n  const jitter = policy.jitter ?? 0.25\n  if (typeof jitter !== 'number' || !Number.isFinite(jitter) || jitter < 0 || jitter > 1) {\n    throw new ValidationError(`${context}.jitter must be a finite number from 0 through 1`)\n  }\n  const retryStatuses = parseRetryStatuses(policy.retryStatuses, context)\n  return Object.freeze({\n    maxAttempts,\n    initialBackoffMs,\n    maxBackoffMs,\n    jitter,\n    retryStatuses,\n    requestTimeoutMs,\n  })\n}\n\nfunction parseRetryStatuses(value: unknown, context: string): ReadonlyArray<number> {\n  if (value === undefined) return defaultRetryStatuses\n  if (!Array.isArray(value)) {\n    throw new ValidationError(`${context}.retryStatuses must be an array of HTTP statuses`)\n  }\n  const statuses: number[] = []\n  const seen = new Set<number>()\n  for (const status of value) {\n    if (!Number.isSafeInteger(status) || status < 100 || status > 599) {\n      throw new ValidationError(\n        `${context}.retryStatuses must contain integer HTTP statuses from 100 through 599`,\n      )\n    }\n    if (seen.has(status)) {\n      throw new ValidationError(`${context}.retryStatuses must not contain duplicates`)\n    }\n    seen.add(status)\n    statuses.push(status)\n  }\n  return Object.freeze(statuses)\n}\n\nfunction positiveInteger(value: unknown, fallback: number, context: string): number {\n  const parsed = value ?? fallback\n  if (typeof parsed !== 'number' || !Number.isSafeInteger(parsed) || parsed < 1) {\n    throw new ValidationError(`${context} must be a positive safe integer`)\n  }\n  return parsed\n}\n\nfunction timerInteger(value: unknown, fallback: number, context: string): number {\n  const parsed = value ?? fallback\n  if (\n    typeof parsed !== 'number' ||\n    !Number.isSafeInteger(parsed) ||\n    parsed < 0 ||\n    parsed > maximumTimerMs\n  ) {\n    throw new ValidationError(\n      `${context} must be a nonnegative safe integer no greater than ${maximumTimerMs}`,\n    )\n  }\n  return parsed\n}\n","/**\n * `assertModelAllowed` — a fail-loud guard that restricts a run to a chosen subset of\n * models. The two front doors (`supervise()` / `improve()`) call it once per configured\n * model at resolve time, so a run that names a model outside the allowed set throws before\n * any compute is spent — never silently swapped or silently allowed.\n */\nimport { HARNESS_NATIVE_MODEL } from '@tangle-network/agent-eval'\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { ConfigError } from '../../errors'\nimport { agentHarness } from '../harness-role'\nimport { type ResolvedRouterRetryPolicy, resolveRouterRetryPolicy } from '../router-retry-policy'\n\n/**\n * Return the model id an executor may send to a provider.\n *\n * Eval stamps {@link HARNESS_NATIVE_MODEL} into a profile when model selection is deliberately\n * delegated to the configured runtime. That marker belongs in experiment identity and cost\n * admission; it is not a provider model id.\n */\nexport function concreteModelId(model: string | undefined): string | undefined {\n  if (model === undefined) return undefined\n  const id = model.trim()\n  return id.length > 0 && !isHarnessNativeModel(id) ? id : undefined\n}\n\n/** Whether a model value delegates selection to the chosen execution system. */\nexport function isHarnessNativeModel(model: string | undefined): boolean {\n  return model?.trim() === HARNESS_NATIVE_MODEL\n}\n\n/** Return a profile's explicitly selected provider model, if it has one. */\nexport function concreteProfileModel(profile: Pick<AgentProfile, 'model'>): string | undefined {\n  return concreteModelId(profile.model?.default)\n}\n\n/** The provider-facing model id declared by a profile. Direct Router execution uses this form:\n * the endpoint already selects the provider, so the model id itself is not harness-prefixed. */\nexport function profileProviderModel(profile: Pick<AgentProfile, 'model'>): string | undefined {\n  return concreteProfileModel(profile)\n}\n\n/** The full cli-bridge wire id declared by a profile: harness/provider/model. */\nexport function profileBridgeWireModel(\n  profile: Pick<AgentProfile, 'harness' | 'model'>,\n): string | undefined {\n  const model = concreteProfileModel(profile)\n  const provider = profile.model?.provider\n  const harness = agentHarness(profile.harness)\n  const modelWithoutHarness =\n    model && harness && model.startsWith(`${harness}/`) ? model.slice(harness.length + 1) : model\n  const providerModel = modelWithoutHarness\n    ? provider && !modelWithoutHarness.startsWith(`${provider}/`)\n      ? `${provider}/${modelWithoutHarness}`\n      : modelWithoutHarness\n    : undefined\n  if (!harness) return providerModel\n  if (!providerModel) return harness\n  return providerModel.startsWith(`${harness}/`) ? providerModel : `${harness}/${providerModel}`\n}\n\n/**\n * Refuse an incomplete execution identity before any backend may fill it from ambient config.\n * `AgentProfile` is the sole behavioral authority: harness, provider, and concrete model all\n * participate in its digest. Eval's runtime-selected marker is a matrix-planning value, never an\n * executable model.\n */\nexport function assertExecutableAgentProfile(profile: AgentProfile, context: string): void {\n  if (profile.harness === undefined) {\n    throw new ConfigError(`${context}: AgentProfile.harness must be explicit before execution`)\n  }\n  const declared = profile.model?.default\n  const model = concreteModelId(declared)\n  if (!model) {\n    const reason = isHarnessNativeModel(declared) ? 'runtime-selected' : 'missing'\n    throw new ConfigError(\n      `${context}: AgentProfile.model.default is ${reason}; execution requires a concrete model`,\n    )\n  }\n  if (!profile.model?.provider?.trim()) {\n    throw new ConfigError(\n      `${context}: AgentProfile.model.provider must be explicit before execution`,\n    )\n  }\n}\n\n/** Generation and loop controls that may affect one model execution. */\nexport interface ProfileModelExecutionSettings {\n  readonly temperature?: number\n  readonly maxTokens?: number\n  readonly retry?: ResolvedRouterRetryPolicy\n  readonly seed?: number\n  readonly toolChoice?: 'auto' | 'required' | 'none'\n  readonly extraBody?: Readonly<Record<string, unknown>>\n  /** Zero means no turn-count cap; conserved budgets and deadlines still apply. */\n  readonly maxTurns?: number\n  readonly stream?: boolean\n}\n\nconst PROFILE_MODEL_METADATA_KEYS = new Set([\n  'extraBody',\n  'maxTokens',\n  'maxTurns',\n  'retry',\n  'seed',\n  'stream',\n  'temperature',\n  'toolChoice',\n])\n\n/**\n * Read every Router-affecting control from the exact profile and reject unknown controls.\n * Backends receive endpoint/auth and executable ports only; they cannot silently alter behavior.\n */\nexport function profileModelExecutionSettings(\n  profile: Pick<AgentProfile, 'model'>,\n  context: string,\n): ProfileModelExecutionSettings {\n  const metadata = profile.model?.metadata ?? {}\n  const unknown = Object.keys(metadata).filter((key) => !PROFILE_MODEL_METADATA_KEYS.has(key))\n  if (unknown.length > 0) {\n    throw new ConfigError(\n      `${context}: unsupported AgentProfile.model.metadata fields: ${unknown.join(', ')}`,\n    )\n  }\n  const temperature = finiteNumber(metadata.temperature, `${context}: temperature`)\n  const maxTokens = positiveInteger(metadata.maxTokens, `${context}: maxTokens`)\n  const retryInput = metadata.retry\n  const retry =\n    retryInput === undefined\n      ? undefined\n      : resolveRouterRetryPolicy(retryInput, `${context}: AgentProfile.model.metadata.retry`)\n  const seed = safeInteger(metadata.seed, `${context}: seed`)\n  const maxTurns = nonnegativeInteger(metadata.maxTurns, `${context}: maxTurns`)\n  const stream = optionalBoolean(metadata.stream, `${context}: stream`)\n  const toolChoice = metadata.toolChoice\n  if (\n    toolChoice !== undefined &&\n    toolChoice !== 'auto' &&\n    toolChoice !== 'required' &&\n    toolChoice !== 'none'\n  ) {\n    throw new ConfigError(`${context}: toolChoice must be auto, required, or none`)\n  }\n  const extraBody = metadata.extraBody\n  if (\n    extraBody !== undefined &&\n    (typeof extraBody !== 'object' || extraBody === null || Array.isArray(extraBody))\n  ) {\n    throw new ConfigError(`${context}: extraBody must be an object`)\n  }\n  return {\n    ...(temperature !== undefined ? { temperature } : {}),\n    ...(maxTokens !== undefined ? { maxTokens } : {}),\n    ...(retry !== undefined ? { retry } : {}),\n    ...(seed !== undefined ? { seed } : {}),\n    ...(toolChoice !== undefined ? { toolChoice } : {}),\n    ...(extraBody !== undefined\n      ? { extraBody: Object.freeze({ ...(extraBody as Record<string, unknown>) }) }\n      : {}),\n    ...(maxTurns !== undefined ? { maxTurns } : {}),\n    ...(stream !== undefined ? { stream } : {}),\n  }\n}\n\nfunction finiteNumber(value: unknown, context: string): number | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    throw new ConfigError(`${context} must be a finite number`)\n  }\n  return value\n}\n\nfunction safeInteger(value: unknown, context: string): number | undefined {\n  if (value === undefined) return undefined\n  if (!Number.isSafeInteger(value)) throw new ConfigError(`${context} must be a safe integer`)\n  return value as number\n}\n\nfunction positiveInteger(value: unknown, context: string): number | undefined {\n  const parsed = safeInteger(value, context)\n  if (parsed !== undefined && parsed < 1) {\n    throw new ConfigError(`${context} must be positive`)\n  }\n  return parsed\n}\n\nfunction nonnegativeInteger(value: unknown, context: string): number | undefined {\n  const parsed = safeInteger(value, context)\n  if (parsed !== undefined && parsed < 0) {\n    throw new ConfigError(`${context} must be nonnegative`)\n  }\n  return parsed\n}\n\nfunction optionalBoolean(value: unknown, context: string): boolean | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'boolean') throw new ConfigError(`${context} must be boolean`)\n  return value\n}\n\n/**\n * Throw a `ConfigError` when `allowed` is set, `model` is defined, and `model` is not a\n * member of `allowed`. No-op when `allowed` is unset (the unrestricted default) or when\n * `model` is undefined (nothing was configured to check).\n */\nexport function assertModelAllowed(\n  model: string | undefined,\n  allowed: readonly string[] | undefined,\n): void {\n  if (!allowed || model === undefined) return\n  if (!allowed.includes(model)) {\n    throw new ConfigError(\n      `model ${JSON.stringify(model)} is not in the allowed set ${JSON.stringify([...allowed])}`,\n    )\n  }\n}\n\n/** Check every canonical model-bearing field in a complete profile, including the models a\n * backend may select for cheap work, named subagents, or modes. */\nexport function assertProfileModelsAllowed(\n  profile: AgentProfile,\n  allowed: readonly string[] | undefined,\n): void {\n  assertModelAllowed(profile.model?.default, allowed)\n  assertModelAllowed(profile.model?.small, allowed)\n  for (const subagent of Object.values(profile.subagents ?? {})) {\n    assertModelAllowed(subagent.model, allowed)\n  }\n  for (const mode of Object.values(profile.modes ?? {})) {\n    assertModelAllowed(mode.model, allowed)\n  }\n}\n"],"mappings":";;;;;;;;;;;AAyBA,MAAM,qCAA0C,IAAI,IAAY,CAAC,UAAgC,CAAC;;;;AAKlG,SAAgB,iBAAmC,SAA6C;CAC9F,OAAO,WAAW,QAAQ,CAAC,mBAAmB,IAAI,OAAO;AAC3D;;;AAIA,SAAgB,aAA+B,SAA8C;CAC3F,OAAO,iBAAiB,OAAO,IAAI,UAAU,KAAA;AAC/C;;;ACXA,MAAM,iBAAiB;AACvB,MAAM,uBAAuB,OAAO,OAAO;CAAC;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC7F,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,SAAgB,yBACd,OACA,SAC2B;CAC3B,IACE,UAAU,KAAA,MACT,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,IAEnE,MAAM,IAAI,gBAAgB,GAAG,QAAQ,mBAAmB;CAE1D,MAAM,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC;CAClF,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC7E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,2BAA2B,QAAQ,KAAK,IAAI,GAAG;CAEtF,MAAM,cAAcA,kBAAgB,OAAO,aAAa,GAAG,GAAG,QAAQ,aAAa;CACnF,MAAM,mBAAmB,aACvB,OAAO,kBACP,KACA,GAAG,QAAQ,kBACb;CACA,MAAM,eAAe,aAAa,OAAO,cAAc,KAAQ,GAAG,QAAQ,cAAc;CACxF,MAAM,mBAAmB,aAAa,OAAO,kBAAkB,GAAG,GAAG,QAAQ,kBAAkB;CAC/F,MAAM,SAAS,OAAO,UAAU;CAChC,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,KAAK,SAAS,GACnF,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iDAAiD;CAExF,MAAM,gBAAgB,mBAAmB,OAAO,eAAe,OAAO;CACtE,OAAO,OAAO,OAAO;EACnB;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAgB,SAAwC;CAClF,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iDAAiD;CAExF,MAAM,WAAqB,CAAC;CAC5B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,UAAU,OAAO;EAC1B,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,OAAO,SAAS,KAC5D,MAAM,IAAI,gBACR,GAAG,QAAQ,uEACb;EAEF,IAAI,KAAK,IAAI,MAAM,GACjB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,2CAA2C;EAElF,KAAK,IAAI,MAAM;EACf,SAAS,KAAK,MAAM;CACtB;CACA,OAAO,OAAO,OAAO,QAAQ;AAC/B;AAEA,SAASA,kBAAgB,OAAgB,UAAkB,SAAyB;CAClF,MAAM,SAAS,SAAS;CACxB,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAC1E,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iCAAiC;CAExE,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,UAAkB,SAAyB;CAC/E,MAAM,SAAS,SAAS;CACxB,IACE,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAS,gBAET,MAAM,IAAI,gBACR,GAAG,QAAQ,sDAAsD,gBACnE;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;ACrGA,SAAgB,gBAAgB,OAA+C;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,KAAK,MAAM,KAAK;CACtB,OAAO,GAAG,SAAS,KAAK,CAAC,qBAAqB,EAAE,IAAI,KAAK,KAAA;AAC3D;;AAGA,SAAgB,qBAAqB,OAAoC;CACvE,OAAO,OAAO,KAAK,MAAM;AAC3B;;AAGA,SAAgB,qBAAqB,SAA0D;CAC7F,OAAO,gBAAgB,QAAQ,OAAO,OAAO;AAC/C;;;AAIA,SAAgB,qBAAqB,SAA0D;CAC7F,OAAO,qBAAqB,OAAO;AACrC;;AAGA,SAAgB,uBACd,SACoB;CACpB,MAAM,QAAQ,qBAAqB,OAAO;CAC1C,MAAM,WAAW,QAAQ,OAAO;CAChC,MAAM,UAAU,aAAa,QAAQ,OAAO;CAC5C,MAAM,sBACJ,SAAS,WAAW,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,MAAM,MAAM,QAAQ,SAAS,CAAC,IAAI;CAC1F,MAAM,gBAAgB,sBAClB,YAAY,CAAC,oBAAoB,WAAW,GAAG,SAAS,EAAE,IACxD,GAAG,SAAS,GAAG,wBACf,sBACF,KAAA;CACJ,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,CAAC,eAAe,OAAO;CAC3B,OAAO,cAAc,WAAW,GAAG,QAAQ,EAAE,IAAI,gBAAgB,GAAG,QAAQ,GAAG;AACjF;;;;;;;AAQA,SAAgB,6BAA6B,SAAuB,SAAuB;CACzF,IAAI,QAAQ,YAAY,KAAA,GACtB,MAAM,IAAI,YAAY,GAAG,QAAQ,yDAAyD;CAE5F,MAAM,WAAW,QAAQ,OAAO;CAEhC,IAAI,CADU,gBAAgB,QACrB,GAEP,MAAM,IAAI,YACR,GAAG,QAAQ,kCAFE,qBAAqB,QAAQ,IAAI,qBAAqB,UAEf,sCACtD;CAEF,IAAI,CAAC,QAAQ,OAAO,UAAU,KAAK,GACjC,MAAM,IAAI,YACR,GAAG,QAAQ,gEACb;AAEJ;AAeA,MAAM,8CAA8B,IAAI,IAAI;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;AAMD,SAAgB,8BACd,SACA,SAC+B;CAC/B,MAAM,WAAW,QAAQ,OAAO,YAAY,CAAC;CAC7C,MAAM,UAAU,OAAO,KAAK,QAAQ,CAAC,CAAC,QAAQ,QAAQ,CAAC,4BAA4B,IAAI,GAAG,CAAC;CAC3F,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,YACR,GAAG,QAAQ,oDAAoD,QAAQ,KAAK,IAAI,GAClF;CAEF,MAAM,cAAc,aAAa,SAAS,aAAa,GAAG,QAAQ,cAAc;CAChF,MAAM,YAAY,gBAAgB,SAAS,WAAW,GAAG,QAAQ,YAAY;CAC7E,MAAM,aAAa,SAAS;CAC5B,MAAM,QACJ,eAAe,KAAA,IACX,KAAA,IACA,yBAAyB,YAAY,GAAG,QAAQ,oCAAoC;CAC1F,MAAM,OAAO,YAAY,SAAS,MAAM,GAAG,QAAQ,OAAO;CAC1D,MAAM,WAAW,mBAAmB,SAAS,UAAU,GAAG,QAAQ,WAAW;CAC7E,MAAM,SAAS,gBAAgB,SAAS,QAAQ,GAAG,QAAQ,SAAS;CACpE,MAAM,aAAa,SAAS;CAC5B,IACE,eAAe,KAAA,KACf,eAAe,UACf,eAAe,cACf,eAAe,QAEf,MAAM,IAAI,YAAY,GAAG,QAAQ,6CAA6C;CAEhF,MAAM,YAAY,SAAS;CAC3B,IACE,cAAc,KAAA,MACb,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,IAE/E,MAAM,IAAI,YAAY,GAAG,QAAQ,8BAA8B;CAEjE,OAAO;EACL,GAAI,gBAAgB,KAAA,IAAY,EAAE,YAAY,IAAI,CAAC;EACnD,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;EAC/C,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;EACvC,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACrC,GAAI,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC;EACjD,GAAI,cAAc,KAAA,IACd,EAAE,WAAW,OAAO,OAAO,EAAE,GAAI,UAAsC,CAAC,EAAE,IAC1E,CAAC;EACL,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;EAC7C,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;CAC3C;AACF;AAEA,SAAS,aAAa,OAAgB,SAAqC;CACzE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,YAAY,GAAG,QAAQ,yBAAyB;CAE5D,OAAO;AACT;AAEA,SAAS,YAAY,OAAgB,SAAqC;CACxE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,OAAO,cAAc,KAAK,GAAG,MAAM,IAAI,YAAY,GAAG,QAAQ,wBAAwB;CAC3F,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAgB,SAAqC;CAC5E,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,IAAI,WAAW,KAAA,KAAa,SAAS,GACnC,MAAM,IAAI,YAAY,GAAG,QAAQ,kBAAkB;CAErD,OAAO;AACT;AAEA,SAAS,mBAAmB,OAAgB,SAAqC;CAC/E,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,IAAI,WAAW,KAAA,KAAa,SAAS,GACnC,MAAM,IAAI,YAAY,GAAG,QAAQ,qBAAqB;CAExD,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAgB,SAAsC;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,WAAW,MAAM,IAAI,YAAY,GAAG,QAAQ,iBAAiB;CAClF,OAAO;AACT;;;;;;AAOA,SAAgB,mBACd,OACA,SACM;CACN,IAAI,CAAC,WAAW,UAAU,KAAA,GAAW;CACrC,IAAI,CAAC,QAAQ,SAAS,KAAK,GACzB,MAAM,IAAI,YACR,SAAS,KAAK,UAAU,KAAK,EAAE,6BAA6B,KAAK,UAAU,CAAC,GAAG,OAAO,CAAC,GACzF;AAEJ;;;AAIA,SAAgB,2BACd,SACA,SACM;CACN,mBAAmB,QAAQ,OAAO,SAAS,OAAO;CAClD,mBAAmB,QAAQ,OAAO,OAAO,OAAO;CAChD,KAAK,MAAM,YAAY,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,GAC1D,mBAAmB,SAAS,OAAO,OAAO;CAE5C,KAAK,MAAM,QAAQ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,GAClD,mBAAmB,KAAK,OAAO,OAAO;AAE1C"}

package/dist/{openai-tools-U-hmk_yS.js → openai-tools-CupeHJEv.js}

@@ -1,4 +1,4 @@
-import { A as DELEGATION_HISTORY_INPUT_SCHEMA, B as DELEGATE_FEEDBACK_INPUT_SCHEMA, E as DELEGATION_STATUS_TOOL_NAME, T as DELEGATION_STATUS_INPUT_SCHEMA, V as DELEGATE_FEEDBACK_TOOL_NAME, j as DELEGATION_HISTORY_TOOL_NAME, k as DELEGATION_HISTORY_DESCRIPTION, w as DELEGATION_STATUS_DESCRIPTION, z as DELEGATE_FEEDBACK_DESCRIPTION } from "./supervise-eOjGprUt.js";
+import { A as DELEGATION_HISTORY_INPUT_SCHEMA, B as DELEGATE_FEEDBACK_INPUT_SCHEMA, E as DELEGATION_STATUS_TOOL_NAME, T as DELEGATION_STATUS_INPUT_SCHEMA, V as DELEGATE_FEEDBACK_TOOL_NAME, j as DELEGATION_HISTORY_TOOL_NAME, k as DELEGATION_HISTORY_DESCRIPTION, w as DELEGATION_STATUS_DESCRIPTION, z as DELEGATE_FEEDBACK_DESCRIPTION } from "./supervise-msTRhTN7.js";
 //#region src/mcp/openai-tools.ts
 function buildTool(name, description, parameters) {
 	return {
@@ -41,4 +41,4 @@ function mcpToolsForRuntimeMcpSubset(names) {
 //#endregion
 export { mcpToolsForRuntimeMcpSubset as n, mcpToolsForRuntimeMcp as t };
 
-//# sourceMappingURL=openai-tools-U-hmk_yS.js.map
+//# sourceMappingURL=openai-tools-CupeHJEv.js.map