@tangle-network/agent-runtime 0.138.1 → 0.140.0

package/dist/intelligence.d.ts

@@ -1,15 +1,15 @@
-import { b as LoopTraceEvent, it as RuntimeStreamEvent } from "./types-BBwGSiAj.js";
+import { at as RuntimeStreamEvent, b as LoopTraceEvent } from "./types-C244Huc9.js";
 import { d as RunAnalystLoopOpts, f as RunAnalystLoopResult } from "./types-zWfqDjeL.js";
-import { Bt as RuntimeTelemetryOptions } from "./types-BCkweg3w.js";
-import { it as ToolSpec } from "./runtime-DhPCNvuH.js";
-import { a as AgentEnvironmentProviderRef, o as AgentEnvironmentProviderRegistry } from "./environment-provider-DA8LqBV-.js";
-import { T as AgentCandidateExecutionClaimStore, _ as PrepareAgentCandidateExecutionOptions, o as CreateProtectedAgentCandidateModelPortOptions, p as parseAgentCandidateProfileActivation, y as ExecutePreparedAgentCandidateOptions } from "./protected-model-port-DEsTWOFs.js";
-import { D as AgentCandidateRunFinalization, O as AgentCandidateTaskExecution, a as AgentCandidateExecutionPorts, c as AgentCandidateExecutorPort, r as AgentCandidateBenchmarkGraderPort, y as AgentCandidateOutputArtifactPort } from "./types-CxU37Uzr.js";
-import { D as ImproveScenarioPartitions, T as ImproveResult, _ as ImproveMethodOptions, n as defaultRedactor, r as resolveRedactor, t as Redactor, v as ImproveMethodResult, x as ImproveOptions } from "./redact-BwEdhuVH.js";
+import { Bt as RuntimeTelemetryOptions } from "./types-D4arYjUl.js";
+import { it as ToolSpec } from "./runtime-CVNWEw16.js";
+import { a as AgentEnvironmentProviderRef, o as AgentEnvironmentProviderRegistry } from "./environment-provider-Bu3S3v78.js";
+import { T as AgentCandidateExecutionClaimStore, _ as PrepareAgentCandidateExecutionOptions, o as CreateProtectedAgentCandidateModelPortOptions, p as parseAgentCandidateProfileActivation, y as ExecutePreparedAgentCandidateOptions } from "./protected-model-port-B8ssMyUg.js";
+import { D as AgentCandidateRunFinalization, O as AgentCandidateTaskExecution, a as AgentCandidateExecutionPorts, c as AgentCandidateExecutorPort, r as AgentCandidateBenchmarkGraderPort, y as AgentCandidateOutputArtifactPort } from "./types-19ZOddS3.js";
+import { D as ImproveScenarioPartitions, T as ImproveResult, _ as ImproveMethodOptions, n as defaultRedactor, r as resolveRedactor, t as Redactor, v as ImproveMethodResult, x as ImproveOptions } from "./redact-CLw2B7Qj.js";
 import { a as AgentImprovementActivationTransitionInput, c as CreateAgentImprovementActivationResultOptions, d as ProfileImprovementActivationTransitionInput, f as SealedCandidateActivationTransitionInput, h as verifyAgentImprovementActivationResult, i as AgentImprovementActivationTransition, l as ExecuteAgentImprovementActivationInput, m as executeAgentImprovementActivation, n as AgentImprovementActivationResultStore, o as AgentProfileImprovementActivationOperation, p as createAgentImprovementActivationResult, r as AgentImprovementActivationTargetPlan, s as AgentProfileImprovementActivationTargetPlan, t as AgentImprovementActivationReconciliation, u as ExecuteAgentImprovementActivationOptions } from "./activation-DyWB0K6E.js";
+import { AgentCandidateBenchmarkCellRef, AgentCandidateBundle, AgentCandidateEvaluationPolicy, AgentCandidateExperiment, AgentCandidateExperimentMaterial, AgentCandidateExperimentMeasurement, AgentCandidateLineage, AgentCandidateProfileActivation as CandidateProfileMaterialization, AgentImprovementActivation, AgentImprovementActivation as AgentImprovementActivation$1, AgentImprovementActivationIntent, AgentImprovementActivationIntent as AgentImprovementActivationIntent$1, AgentImprovementActivationOutcome, AgentImprovementActivationResult, AgentImprovementActivationTarget, AgentImprovementActivationTargetState, AgentImprovementActivationTargetTransition, AgentImprovementEvaluation, AgentImprovementEvaluation as AgentImprovementEvaluation$1, AgentImprovementMeasuredComparison, AgentImprovementMeasuredComparison as AgentImprovementMeasuredComparison$1, AgentImprovementProposal, AgentImprovementProposal as AgentImprovementProposal$1, AgentImprovementReview, AgentImprovementReview as AgentImprovementReview$1, AgentImprovementReviewDecision, AgentImprovementReviewDecision as AgentImprovementReviewDecision$1, AgentImprovementSource, AgentImprovementSurface, AgentProfile, AgentProfileDiff, AgentProfileImprovementChange, AgentProfileImprovementExecutionRef, AgentProfileImprovementExperiment, AgentProfileImprovementMeasuredComparison, AgentProfileImprovementMeasurement, AgentProfileImprovementRunReceipt, AgentProfileImprovementTaskMaterial, AgentProfileMcpServer, CandidateExecutionEvidence, CandidateExecutionEvidence as CandidateExecutionEvidence$1, Sha256Digest } from "@tangle-network/agent-interface";
 import { CostLedgerHandle, TraceStore } from "@tangle-network/agent-eval";
-import { OptimizationMethodComparison, OptimizationPackageSource, OptimizationTokenUsage } from "@tangle-network/agent-eval/campaign";
-import { AgentCandidateBenchmarkCellRef, AgentCandidateBundle, AgentCandidateEvaluationPolicy, AgentCandidateExperiment, AgentCandidateExperimentMaterial, AgentCandidateExperimentMeasurement, AgentCandidateProfileActivation as CandidateProfileMaterialization, AgentImprovementActivation, AgentImprovementActivation as AgentImprovementActivation$1, AgentImprovementActivationIntent, AgentImprovementActivationIntent as AgentImprovementActivationIntent$1, AgentImprovementActivationOutcome, AgentImprovementActivationResult, AgentImprovementActivationTarget, AgentImprovementActivationTargetState, AgentImprovementActivationTargetTransition, AgentImprovementEvaluation, AgentImprovementEvaluation as AgentImprovementEvaluation$1, AgentImprovementMeasuredComparison, AgentImprovementMeasuredComparison as AgentImprovementMeasuredComparison$1, AgentImprovementProposal, AgentImprovementProposal as AgentImprovementProposal$1, AgentImprovementReview, AgentImprovementReview as AgentImprovementReview$1, AgentImprovementReviewDecision, AgentImprovementReviewDecision as AgentImprovementReviewDecision$1, AgentImprovementSource, AgentImprovementSurface, AgentProfile as AgentProfile$1, AgentProfileDiff, AgentProfileImprovementChange, AgentProfileImprovementExecutionRef, AgentProfileImprovementExperiment, AgentProfileImprovementMeasuredComparison, AgentProfileImprovementMeasurement, AgentProfileImprovementRunReceipt, AgentProfileImprovementTaskMaterial, AgentProfileMcpServer, CandidateExecutionEvidence, CandidateExecutionEvidence as CandidateExecutionEvidence$1, Sha256Digest } from "@tangle-network/agent-interface";
+import { CampaignScenarioIdentity, OptimizationMethodComparison, OptimizationPackageSource, OptimizationTokenUsage } from "@tangle-network/agent-eval/campaign";
 import { ProposalFinding as ProposalFinding$1 } from "@tangle-network/agent-eval/analyst";
 import { AgentProfileImprovementExperimentExecutionInput, CandidateExperimentExecutionInput, CompareCandidateExperimentOptions, Scenario as Scenario$1 } from "@tangle-network/agent-eval/contract";
 import { AgentExactProcessResources } from "@tangle-network/agent-interface/environment-provider";
@@ -127,748 +127,803 @@ interface EffortOverridesCompiled {
  */
 declare function compileEffort(settings: EffortSettings): EffortOverridesCompiled;
 //#endregion
-//#region src/intelligence/delivery.d.ts
-/** A promoted, certified artifact (one entry in the composed profile). */
-interface CertifiedArtifact {
-  path: string | null;
-  content: string;
-  contentHash: string;
-  version: number | null;
-  /** Held-out gate lift attached at certification, e.g. "+3.1pp" — never a
-   *  within-run claim. `null` when the promotion carried no lift record. */
-  lift: string | null;
-  promotedAt: string;
-}
-/** The active promoted prompt surface for a target. */
-interface CertifiedPromptSurface {
-  surface: string;
-  surfaceHash: string;
-  version: number | null;
-  lift: string | null;
-}
-/** The held-out provenance the plane's certify step stamps on a promoted diff.
- *  `lift` is the held-out gate lift (e.g. "+3.1pp"), never a within-run claim. */
-interface DiffProvenance {
-  version: number | null;
-  lift: string | null;
-  contentHash: string;
-  promotedAt: string;
-}
+//#region src/intelligence/improvement-surfaces.d.ts
+/** Agent improvement surfaces delivered as exact `AgentProfileDiff` replacements. */
+declare const AGENT_IMPROVEMENT_PROFILE_SURFACES: readonly ["prompt", "skills", "tools", "mcp", "hooks", "subagents"];
+type AgentImprovementProfileSurface = (typeof AGENT_IMPROVEMENT_PROFILE_SURFACES)[number];
 /**
- * A gate-certified profile diff the plane has already promoted, plus the
- * held-out provenance it carries. This is the previously-DROPPED typed diff the
- * composed endpoint returns; `withIntelligence` deserializes it and surfaces it
- * as a PROPOSAL — a human, or the gated local `improve()` loop, turns a proposal
- * into a shipped profile. It is NEVER auto-applied at runtime.
+ * Profile changes eligible for the product-owned measured comparison path.
+ * The six directly deliverable profile surfaces retain their granular labels;
+ * any residual profile axis also adds the complete `agent-profile` surface.
  */
-interface ProposedProfileDiff {
-  diff: AgentProfileDiff;
-  provenance: DiffProvenance;
-}
-/** The composed endpoint's per-capability summary — the narrow shape on the
- *  wire (id + surface + path/content + provenance). Distinct from the richer
- *  `CertifiedCapability` the capability resolver lowers a manifest into. */
-interface CertifiedCapabilitySummary {
+declare const AGENT_PROFILE_MEASURED_SURFACES: readonly ["prompt", "skills", "tools", "mcp", "hooks", "subagents", "agent-profile"];
+type AgentProfileMeasuredSurface = (typeof AGENT_PROFILE_MEASURED_SURFACES)[number];
+interface AgentImprovementTargetProfileDiffOptions {
   id: string;
-  iface: {
-    surface: string;
-  };
-  binding: {
-    path: string | null;
-    content: string;
-  };
-  provenance: DiffProvenance;
-}
-/** The composed certified profile — exactly the shape the plane's
- *  `GET /v1/profiles/:target/composed` returns. */
-interface CertifiedProfile {
-  target: string;
-  generatedAt: string;
-  promptSurface: CertifiedPromptSurface | null;
-  artifacts: Record<string, CertifiedArtifact[]>;
-  /** The typed profile diffs the plane has promoted, each with held-out
-   *  provenance. Surfaced as proposals; never auto-applied. Empty when none. */
-  agentProfileDiffs: ProposedProfileDiff[];
-  /** The composed capability summaries the plane returns. Empty when none. */
-  capabilities: CertifiedCapabilitySummary[];
-  /** The composed profile the promoted diffs fold to, for inspection. `null`
-   *  when no diffs are promoted. */
-  agentProfile: AgentProfile$1 | null;
-}
-/** Typed outcome for the pull — inspect `succeeded` before `value`. A 404
- *  (nothing promoted yet) is a normal, non-error `succeeded: false`. */
-type PullOutcome = {
-  succeeded: true;
-  value: CertifiedProfile;
-} | {
-  succeeded: false;
-  error: string;
-  status?: number;
-};
-interface PullCertifiedOptions {
-  /** The agent target certified artifacts are promoted under. */
-  target: string;
-  /** Bearer key. Defaults to `process.env.TANGLE_API_KEY`. */
-  apiKey?: string;
-  /** Plane base URL. Defaults to `process.env.TANGLE_INTELLIGENCE_URL` then
-   *  `https://intelligence.tangle.tools`. */
-  baseUrl?: string;
-  /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */
-  fetchImpl?: typeof fetch;
-  /** Abort the request after this many ms. Default 10000. */
-  timeoutMs?: number;
-}
-/** What Runtime knows about a failed proposal submission.
- * `not-sent` means no request began, `rejected` means Intelligence returned a
- * definitive 4xx response, and `unconfirmed` means the caller may safely retry
- * the same immutable proposal. */
-type AgentImprovementProposalSubmissionState = 'not-sent' | 'rejected' | 'unconfirmed';
-/** Submit a completed measured proposal for product-side review. */
-interface SubmitAgentImprovementProposalOptions {
-  proposal: AgentImprovementProposal$1;
-  /** Bearer key. Defaults to `process.env.TANGLE_API_KEY`. */
-  apiKey?: string;
-  /** Plane base URL. Defaults to `process.env.TANGLE_INTELLIGENCE_URL` then
-   * `https://intelligence.tangle.tools`. */
-  baseUrl?: string;
-  /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */
-  fetchImpl?: typeof fetch;
-  /** Abort the request after this many ms. Default 10000. */
-  timeoutMs?: number;
+  source?: AgentProfileDiff['source'];
+  metadata?: Record<string, unknown>;
 }
-/** Typed result for proposal submission. A successful result contains the
- * exact immutable proposal Intelligence recorded. */
-type SubmitAgentImprovementProposalOutcome = {
-  succeeded: true;
-  value: AgentImprovementProposal$1;
-  status: number;
-} | {
-  succeeded: false;
-  submission: AgentImprovementProposalSubmissionState;
-  error: string;
-  status?: number;
-  code?: string;
-};
-/** Resolve the ONE Intelligence base URL — the single knob both the send and
- *  receive paths derive from. Env fallback: `TANGLE_INTELLIGENCE_URL`. */
-declare function resolveIntelligenceBaseUrl(baseUrl: string | undefined): string;
-/**
- * Deserialize the composed-endpoint response into a `CertifiedProfile`. The
- * previously-dropped `agentProfileDiffs`/`capabilities`/`agentProfile` are read
- * here so they round-trip to the consumer; a plane that has not yet promoted any
- * diffs simply yields empty arrays / a null profile (fail-closed, never a crash).
- */
-declare function normalizeCertifiedProfile(raw: unknown): CertifiedProfile;
+type AgentImprovementActivationTargetIdentity = Pick<AgentImprovementActivationTarget, 'surface' | 'identity'>;
+/** Bind caller-owned target identities to the exact source state Runtime measured. */
+declare function buildAgentImprovementActivationTargets(surfaces: readonly AgentImprovementSurface[], experiment: AgentImprovementEvaluation$1['experiment'], intent: AgentImprovementActivationIntent$1, identities: readonly AgentImprovementActivationTargetIdentity[]): [AgentImprovementActivationTarget, ...AgentImprovementActivationTarget[]];
+/** Return whether a measured surface can be delivered through an agent profile. */
+declare function isAgentImprovementProfileSurface(surface: AgentImprovementSurface): surface is AgentImprovementProfileSurface;
+/** Return whether a surface is eligible for shared profile measurement. */
+declare function isAgentProfileMeasuredSurface(surface: string): surface is AgentProfileMeasuredSurface;
 /**
- * Pull the certified composed profile for a target. Fail-closed: a network
- * error or a non-2xx returns a typed `succeeded: false` (never throws), so a
- * caller can run on its base surface when Intelligence is unreachable. A 404 is
- * the normal "nothing promoted yet" signal, carried as `status: 404`.
+ * Return the canonical current-state input for one profile-deliverable improvement target.
+ * Missing slots become `null`; tools and subagents include both their direct and resource slots.
+ * Unrelated profile fields are excluded. The result matches `agentImprovementTargetInput` for the
+ * same profile inside a candidate bundle.
  */
-declare function pullCertified(opts: PullCertifiedOptions): Promise<PullOutcome>;
+declare function agentImprovementProfileSurfaceInput(profile: AgentProfile, surface: AgentImprovementProfileSurface): unknown;
+/** Return the `Sha256Digest` of one profile surface using Runtime's canonical candidate digest. */
+declare function agentImprovementProfileSurfaceDigest(profile: AgentProfile, surface: AgentImprovementProfileSurface): Sha256Digest;
 /**
- * Submit a completed Runtime proposal to Intelligence for product-side review.
- * This never runs an experiment, approves a proposal, or applies a candidate.
- * A 4xx response is a confirmed `rejected` request. Network failures, timeouts,
- * 5xx responses, and invalid success responses are `unconfirmed`, so callers
- * can retry the same digest because Intelligence stores proposals idempotently.
+ * Replace one measured profile surface exactly, including array-valued resources.
+ * Apply the returned diffs in order: a diff applies its set before its removal,
+ * so exact replacement requires a reset record followed by a set record.
  */
-declare function submitAgentImprovementProposal(opts: SubmitAgentImprovementProposalOptions): Promise<SubmitAgentImprovementProposalOutcome>;
+declare function agentImprovementTargetProfileDiffs(target: {
+  surface: AgentImprovementProfileSurface;
+  desiredInput: unknown;
+}, options: AgentImprovementTargetProfileDiffOptions): [AgentProfileDiff, ...AgentProfileDiff[]];
 /**
- * Fold the certified prompt surface (and any certified prompt-folding artifacts:
- * `prompt-surface` / `skill` / `instructions`) into a base system prompt under a
- * marked section, so the deployed agent prompt == base + the gate-certified
- * additions. Order is stable (prompt surface first, then artifact buckets in
- * `promptFoldTypes` order, then by path within a bucket) so the same profile
- * renders byte-identically each call. Returns `base` unchanged when there is no
- * usable certified content. Reads only the prompt-folding slice of a profile.
+ * Derive the ordered profile patch that changes one executable profile into
+ * another, then prove the patch preserves the complete candidate state.
  */
-declare function composeCertifiedPrompt(base: string, certified: Pick<CertifiedProfile, 'promptSurface' | 'artifacts'> | null): string;
-/** A cached, self-refreshing source of a target's certified prompt additions —
- *  the prompt-only delivery lane for callers that assemble their OWN system
- *  prompt (product chat routes) rather than wrapping an agent fn. Same
- *  fail-closed semantics as {@link pullCertified}: pulls at most every
- *  `refreshMs`, coalesces concurrent pulls, keeps the last-known profile on a
- *  failed/404 pull, never throws, never blocks past the pull timeout. */
-interface CertifiedPromptSource {
-  /** Refresh (window-respecting) then fold the certified additions into a
-   *  base system prompt. Returns `base` unchanged when nothing is promoted. */
-  compose(base: string): Promise<string>;
-  /** The certified profile currently in effect (`null` = none pulled yet). */
-  current(): CertifiedProfile | null;
-  /** Pull now if the refresh window has elapsed; coalesced and fail-closed. */
-  refresh(): Promise<void>;
+declare function agentImprovementProfileDiffs(baselineInput: AgentProfile, candidateInput: AgentProfile, options: AgentImprovementTargetProfileDiffOptions): [AgentProfileDiff, ...AgentProfileDiff[]];
+//#endregion
+//#region src/intelligence/profile-activation.d.ts
+type AgentImprovementProfileActivationTarget = Omit<AgentImprovementActivationTargetPlan, 'surface'> & {
+  surface: AgentImprovementProfileSurface;
+};
+type AgentImprovementProfileTargetState = Omit<AgentImprovementActivationTargetState, 'surface'> & {
+  surface: AgentProfileMeasuredSurface;
+};
+type AgentImprovementProfileTargetTransition = Omit<AgentImprovementActivationTargetTransition, 'surface'> & {
+  surface: AgentProfileMeasuredSurface;
+};
+interface AgentImprovementProfileReplacement {
+  identity: string;
+  profile: AgentProfile;
 }
-/** Options for {@link createCertifiedPromptSource} — the pull coordinates plus
- *  the refresh cadence. */
-interface CertifiedPromptSourceOptions extends PullCertifiedOptions {
-  /** Min interval between certified-profile pulls. Default 5m. */
-  refreshMs?: number;
+interface AgentImprovementProfileStateDigestInput {
+  identity: string;
+  profile: AgentProfile;
+}
+/** Product-defined hash of the complete profile state that actually runs. */
+type AgentImprovementProfileStateDigest = (input: AgentImprovementProfileStateDigestInput) => Sha256Digest;
+interface AgentImprovementProfileStateResolverInput {
+  identity: string;
+  stateDigest: Sha256Digest;
 }
+/** Product-owned retained-state lookup used only for an explicit restore. */
+type AgentImprovementProfileStateResolver = (input: AgentImprovementProfileStateResolverInput) => AgentProfile | undefined;
+type AgentImprovementProfileActivationInput = {
+  currentByIdentity: ReadonlyMap<string, AgentProfile>;
+  targets: readonly [AgentImprovementProfileActivationTarget, ...AgentImprovementProfileActivationTarget[]];
+} | {
+  currentByIdentity: ReadonlyMap<string, AgentProfile>;
+  profileTransition: ProfileImprovementActivationTransitionInput;
+  stateDigest: AgentImprovementProfileStateDigest;
+  resolveState?: AgentImprovementProfileStateResolver;
+};
+type AgentImprovementProfileActivationPreparation = {
+  status: 'missing';
+  identities: readonly string[];
+} | {
+  status: 'unavailable';
+  code: 'PROFILE_STATE_UNAVAILABLE';
+  identities: readonly string[];
+  requiredStateDigest: Sha256Digest;
+} | {
+  status: 'already-applied' | 'conflict';
+  targets: [AgentImprovementProfileTargetState, ...AgentImprovementProfileTargetState[]];
+} | {
+  status: 'apply';
+  replacements: [AgentImprovementProfileReplacement, ...AgentImprovementProfileReplacement[]];
+  targets: [AgentImprovementProfileTargetTransition, ...AgentImprovementProfileTargetTransition[]];
+};
 /**
- * Create the cached certified-prompt source — the ONE module-scope-cache +
- * coalesced-refresh + keep-last-known implementation. Product wiring uses this
- * rather than hand-rolling the same lines around `pullCertified`. The
- * `withIntelligence` hook rides this same source for its prompt delivery.
+ * Compare product-owned profiles with an exact measured transition and prepare
+ * all-or-none replacements. The product owns locking, persistence, and retained
+ * state; Runtime owns the profile diff semantics and digest checks.
  */
-declare function createCertifiedPromptSource(opts: CertifiedPromptSourceOptions): CertifiedPromptSource;
+declare function prepareAgentImprovementProfileActivation(input: AgentImprovementProfileActivationInput): AgentImprovementProfileActivationPreparation;
 //#endregion
-//#region src/intelligence/capability.d.ts
-/** A JSON Schema object describing a tool's parameters. Kept structural — the
- *  resolver forwards it verbatim into a `ToolSpec` / MCP `tools/list` check. */
-type JsonSchema = Record<string, unknown>;
-/**
- * What the agent consumes. CLOSED — a new runtime kind NEVER extends this. Each
- * arm maps slot-for-slot onto `AgentProfile` + the host `RouterToolsSeam`.
- */
-type CapabilityInterface = {
-  surface: 'tool';
-  name: string;
-  description?: string;
-  parameters: JsonSchema;
-  returns?: JsonSchema;
-} | {
-  surface: 'mcp';
-  serverName: string;
-  toolset?: string[];
-} | {
-  surface: 'context';
-  kind: 'prompt-surface' | 'skill' | 'instructions';
-  name: string;
-} | {
-  surface: 'retrieval';
-  name: string;
-  description?: string;
-  topK?: number;
-} | {
-  surface: 'hook';
-  event: string;
-  matcher?: string;
-} | {
-  surface: 'subagent';
-  name: string;
-  description?: string;
-};
-/** Every interface surface tag — the closed set the resolver fans into slots. */
-type CapabilitySurface = CapabilityInterface['surface'];
-/**
- * Where a capability's bytes live. A leaked manifest carries no live secret and
- * no inlined blob: `github`/`blob` are pointers resolved at provision time.
- */
-type ContentRef = {
-  kind: 'inline';
-  content: string;
-} | {
-  kind: 'github';
-  repository?: string;
-  path: string;
-  ref?: string;
-} | {
-  kind: 'blob';
-  uri: string;
-  sha256: string;
-  bytes?: number;
+//#region src/intelligence/improvement-cycle.d.ts
+interface AgentCandidateExperimentCellPlacement {
+  executionId: string;
+  attempt?: number;
+  executionRoots: AgentCandidateTaskExecution['executionRoots'];
+  stagingRoots: AgentCandidateTaskExecution['stagingRoots'];
+  ports: AgentCandidateExecutionPorts;
+  preparation?: PrepareAgentCandidateExecutionOptions;
+  execution: ExecutePreparedAgentCandidateOptions;
+}
+interface RunAgentCandidateExperimentOptions extends Omit<CompareCandidateExperimentOptions, 'experiment' | 'measurements' | 'measurement' | 'preparation'> {
+  experiment: AgentCandidateExperiment;
+  placeCell: (input: CandidateExperimentExecutionInput) => AgentCandidateExperimentCellPlacement | Promise<AgentCandidateExperimentCellPlacement>;
+  maxConcurrency?: number;
+  /** Work before this call. Omit when this function is only measuring a sealed experiment. */
+  preparation?: CompareCandidateExperimentOptions['preparation'];
+  /** Shared account when preparation and held-out work have one customer budget. */
+  costLedger?: CostLedgerHandle;
+  signal?: AbortSignal;
+}
+interface RunAgentCandidateExperimentResult {
+  experiment: AgentCandidateExperiment;
+  measurements: AgentCandidateExperimentMeasurement[];
+  evaluation: AgentImprovementMeasuredComparison$1;
+}
+interface ExecuteAgentCandidateExperimentCellOptions extends CandidateExperimentExecutionInput, AgentCandidateExperimentCellPlacement {}
+interface VerifyCandidateExecutionEvidenceOptions {
+  experiment: AgentCandidateExperiment;
+  arm: 'baseline' | 'candidate';
+  benchmarkCell: AgentCandidateBenchmarkCellRef;
+  seed: number;
+  attempt?: number;
+  resolvedResources?: ReadonlyMap<Sha256Digest, string>;
+}
+/** A failed baseline or candidate cell with its complete Runtime failure result. */
+declare class AgentCandidateExperimentCellExecutionError extends Error {
+  readonly finalization: Extract<AgentCandidateRunFinalization, {
+    succeeded: false;
+  }>;
+  constructor(finalization: Extract<AgentCandidateRunFinalization, {
+    succeeded: false;
+  }>);
+}
+interface CreateAgentImprovementProposalOptions {
+  runId: string;
+  findings: readonly ProposalFinding$1[];
+  evaluation: AgentImprovementEvaluation$1;
+  now?: () => Date;
+}
+type CreateAgentImprovementMeasuredComparisonOptions = CompareCandidateExperimentOptions;
+interface ReviewAgentImprovementInput {
+  decision: AgentImprovementReviewDecision$1;
+  reviewedBy: string;
+  reason: string;
+  feedback?: string;
+  now?: () => Date;
+}
+interface CreateAgentImprovementActivationOptions {
+  intent: AgentImprovementActivationIntent$1;
+  /** Runtime derives each exact source digest; callers identify only the records to change. */
+  targets: [AgentImprovementActivationTargetIdentity, ...AgentImprovementActivationTargetIdentity[]];
+  fundingOwner: string;
+  authorizedBy: string;
+  expiresAt: string;
+  /** Required only when an activation targets the complete `agent-profile` surface. */
+  executionRef?: AgentProfileImprovementExecutionRef;
+  now?: () => Date;
+}
+type AgentImprovementAnalysisOptions = Omit<RunAnalystLoopOpts, 'runId' | 'inputs' | 'improvementProposalSource' | 'knowledgeProposalSource' | 'onEvent' | 'log' | 'costLedger' | 'costPhase' | 'signal'> & {
+  inputs: Omit<RunAnalystLoopOpts['inputs'], 'judgeInput'> & {
+    judgeInput?: never;
+  };
 };
-/** A named secret a binding requires — declared, never carried. */
-interface CredentialRef {
-  key: string;
+type WithProposalFindings<T> = T extends unknown ? Omit<T, 'findings'> & {
+  findings?: readonly ProposalFinding$1[];
+} : never;
+interface ProposeAgentImprovementOptions<TScenario extends Scenario$1, TArtifact> {
+  runId: string;
+  profile: AgentProfile;
+  analysis: AgentImprovementAnalysisOptions;
+  improvement: WithProposalFindings<ImproveOptions<TScenario, TArtifact>>;
+  buildExperiment: (input: {
+    analysis: RunAnalystLoopResult;
+    improvement: ImproveResult<TScenario, TArtifact>;
+  }) => AgentImprovementExperimentMaterial | Promise<AgentImprovementExperimentMaterial>;
+  placeCell: RunAgentCandidateExperimentOptions['placeCell'];
+  maxConcurrency?: number;
+  signal?: AbortSignal;
+  candidate?: AgentImprovementMeasuredComparison$1['candidate'];
+  metadata?: AgentImprovementMeasuredComparison$1['metadata'];
+  now?: () => Date;
+}
+/** Product-supplied experiment material. Runtime supplies optimizer ancestry and the final digest. */
+type AgentImprovementExperimentMaterial = Omit<AgentCandidateExperimentMaterial, 'candidateLineage'>;
+interface ProposeAgentImprovementResult<TScenario extends Scenario$1, TArtifact> {
+  analysis: RunAnalystLoopResult;
+  improvement: ImproveResult<TScenario, TArtifact>;
+  experiment: AgentCandidateExperiment;
+  measurements: AgentCandidateExperimentMeasurement[];
+  proposal: AgentImprovementProposal$1;
+}
+/** Product-owned task material that Runtime freezes before either profile state runs. */
+interface AgentProfileImprovementBenchmark {
+  tasks: [AgentProfileImprovementTaskMaterial, ...AgentProfileImprovementTaskMaterial[]];
+  reps: number;
+  seeds: [number, ...number[]];
+  policy: AgentCandidateEvaluationPolicy;
 }
 /**
- * How a binding authenticates at resolve time. Declared as a REQUIREMENT in the
- * manifest; the live secret is resolved per-tenant by the resolver context,
- * never inlined here.
+ * One product execution adapter shared by optimizer search and exact profile
+ * measurement. `executionRef` must identify both operations and their closure.
  */
-type CapabilityAuth = {
-  mode: 'none';
-} | {
-  mode: 'tangle-key';
-} | {
-  mode: 'hub-connection';
-  providerId: string;
-  scopes?: string[];
-} | {
-  mode: 'secret-ref';
-  key: string;
+interface AgentProfileImprovementExecutor<TScenario extends Scenario$1, TArtifact> {
+  executionRef: AgentProfileImprovementExecutionRef;
+  optimize: ImproveMethodOptions<TScenario, TArtifact>['agent'];
+  measure(input: AgentProfileImprovementExperimentExecutionInput & {
+    profile: AgentProfile;
+  }): Promise<AgentProfileImprovementRunReceipt>;
+}
+/** The portable profile changes that the measured-profile contract permits. */
+type AgentProfileImprovementMethodOptions<TScenario extends Scenario$1, TArtifact> = Omit<ImproveMethodOptions<TScenario, TArtifact>, 'agent' | 'executionRef' | 'findings' | 'surface'> & {
+  surface?: AgentProfileMeasuredSurface;
+  findings?: readonly ProposalFinding$1[];
 };
 /**
- * The host a `process-on-infra` binding provisions before its inner binding.
- * Reuses `createExecutor`'s backend-as-data vocabulary — no new runtime invented.
- * `image` is the sandbox image tag; `warm`/`idleTtlMs`/`costTag` meter standing
- * cost; `ports` are the inner server's listen ports the host must expose.
+ * Complete profile-improvement path for a product-owned source.
+ * Runtime owns analysis, search ancestry, profile diffs, experiment sealing,
+ * paired evaluation, and the reviewable proposal. The product keeps its
+ * profile bytes, task executor, billing, trace capture, and persistence.
  */
-interface HostSpec {
-  backend: 'sandbox' | 'router' | 'cli';
-  image?: string;
-  ports?: number[];
-  warm?: boolean;
-  idleTtlMs?: number;
-  costTag?: string;
+interface ProposeAgentProfileImprovementOptions<TScenario extends Scenario$1, TArtifact> {
+  runId: string;
+  source: AgentImprovementSource;
+  profile: AgentProfile;
+  stateDigest: AgentImprovementProfileStateDigest;
+  analysis: AgentImprovementAnalysisOptions;
+  improvement: AgentProfileImprovementMethodOptions<TScenario, TArtifact>;
+  benchmark: AgentProfileImprovementBenchmark;
+  executor: AgentProfileImprovementExecutor<TScenario, TArtifact>;
+  /** One customer-approved maximum for analysis, optimization, and measurement. */
+  budgetUsd: number;
+  maxConcurrency?: number;
+  signal?: AbortSignal;
+  candidate?: AgentProfileImprovementMeasuredComparison['candidate'];
+  metadata?: AgentProfileImprovementMeasuredComparison['metadata'];
+  now?: () => Date;
+}
+interface ProposeAgentProfileImprovementResult {
+  analysis: RunAnalystLoopResult;
+  improvement: ImproveMethodResult;
+  experiment: AgentProfileImprovementExperiment;
+  measurements: AgentProfileImprovementMeasurement[];
+  proposal: AgentImprovementProposal$1;
 }
+/** Execute both arms of one immutable experiment and derive its paired result. */
+declare function runAgentCandidateExperiment(options: RunAgentCandidateExperimentOptions): Promise<RunAgentCandidateExperimentResult>;
+/** Execute one exact arm, task, repetition, seed, and attempt through Runtime. */
+declare function executeAgentCandidateExperimentCell(options: ExecuteAgentCandidateExperimentCellOptions): Promise<CandidateExecutionEvidence$1>;
+/** Delegate all statistics and promotion checks to agent-eval's receipt-based comparison. */
+declare function createAgentImprovementMeasuredComparison(options: CreateAgentImprovementMeasuredComparisonOptions): AgentImprovementMeasuredComparison$1;
 /**
- * How a capability is backed. OPEN tagged union — THE extension point. All arms
- * are typed even when the resolver does not yet admit them; an un-admitted arm
- * throws {@link CapabilityNotAdmittedError} at resolve, never silently no-ops.
+ * Analyze a product-owned profile, search one profile surface, then run the
+ * exact baseline and candidate through the product executor before proposing.
  */
-type DeliveryBinding = {
-  kind: 'inline';
-  content: ContentRef;
-} | {
-  kind: 'file';
-  path: string;
-  content: ContentRef;
-  executable?: boolean;
-} | {
-  kind: 'http';
-  url: string;
-  method?: string;
-  auth?: CapabilityAuth;
-} | {
-  kind: 'sandbox-code';
-  entry: string;
-  code: ContentRef;
-  runtime?: string;
-  harness?: string;
-} | {
-  kind: 'mcp-stdio';
-  command: string;
-  args?: string[];
-  env?: Record<string, string>;
-  cwd?: string;
-} | {
-  kind: 'mcp-remote';
-  url: string;
-  transport: 'http' | 'sse';
-  headers?: Record<string, string>;
-} | {
-  kind: 'process-on-infra';
-  host: HostSpec;
-  inner: DeliveryBinding;
-} | {
-  kind: 'rag-index';
-  index: ContentRef;
-  embedModel: string;
-  topK?: number;
-} | {
-  kind: 'memory-store';
-  provision: 'sqlite' | 'neo4j' | 'vector';
-  seed?: ContentRef;
-} | {
-  kind: 'wasm';
-  module: ContentRef;
-  exports: string[];
-} | {
-  kind: 'a2a';
-  endpoint: string;
-  card: ContentRef;
-  auth?: CapabilityAuth;
+declare function proposeAgentProfileImprovement<TScenario extends Scenario$1, TArtifact>(options: ProposeAgentProfileImprovementOptions<TScenario, TArtifact>): Promise<ProposeAgentProfileImprovementResult>;
+/** Analyze, search, then remeasure the resulting exact candidate before proposing it. */
+declare function proposeAgentImprovement<TScenario extends Scenario$1, TArtifact>(options: ProposeAgentImprovementOptions<TScenario, TArtifact>): Promise<ProposeAgentImprovementResult<TScenario, TArtifact>>;
+/** Create the reviewable record only from a complete, recomputable experiment result. */
+declare function createAgentImprovementProposal(options: CreateAgentImprovementProposalOptions): AgentImprovementProposal$1;
+/** Persist a human or tenant-policy decision bound to one exact proposal. */
+declare function reviewAgentImprovementProposal(inputProposal: AgentImprovementProposal$1, input: ReviewAgentImprovementInput): AgentImprovementReview$1;
+/** Authorize product-owned writes only after the exact candidate was measured and approved. */
+declare function createAgentImprovementActivation(inputProposal: AgentImprovementProposal$1, inputReview: AgentImprovementReview$1, options: CreateAgentImprovementActivationOptions): AgentImprovementActivation$1;
+/** Validate a proposal and recompute every binding to its measured experiment. */
+declare function verifyAgentImprovementProposal(input: unknown): AgentImprovementProposal$1;
+/** Validate the canonical identity and wire shape of an improvement review. */
+declare function verifyAgentImprovementReview(input: unknown): AgentImprovementReview$1;
+/** Validate activation authority against the exact proposal, review, experiment, and base state. */
+declare function verifyAgentImprovementActivation(input: {
+  proposal: unknown;
+  review: unknown;
+  activation: unknown;
+}): AgentImprovementActivation$1;
+/** Recheck one Runtime receipt against its exact signed experiment cell. */
+declare function verifyCandidateExecutionEvidence(input: unknown, options: VerifyCandidateExecutionEvidenceOptions): CandidateExecutionEvidence$1;
+//#endregion
+//#region src/intelligence/authored-profile-improvement.d.ts
+/** Lineage accepted by the direct candidate path. Optimizer lineage belongs to `improve()`. */
+type AuthoredAgentProfileCandidateLineage = Omit<AgentCandidateLineage, 'source' | 'profileDiffIds'> & {
+  source: Exclude<AgentCandidateLineage['source'], 'optimizer'>;
+  /** Runtime derives these from the exact profile change it seals. */
+  profileDiffIds?: never;
 };
-/** Every binding kind — the open set the resolver dispatches over. */
-type DeliveryBindingKind = DeliveryBinding['kind'];
+/** Provenance attached while Runtime derives the exact profile diff. */
+type AuthoredAgentProfileDiffOptions = NonNullable<Parameters<typeof agentImprovementProfileDiffs>[2]>;
+/** Product-owned executor for exact baseline/candidate profile measurement. */
+interface AgentProfileCandidateMeasurementExecutor {
+  executionRef: AgentProfileImprovementExecutionRef;
+  measure(input: AgentProfileImprovementExperimentExecutionInput & {
+    profile: AgentProfile;
+  }): Promise<AgentProfileImprovementRunReceipt>;
+}
 /**
- * The certify lane's held-out lift travelling WITH delivery. The shipped
- * `CertifiedArtifact` envelope minus its content (which moves into the binding
- * arm): `version`/`contentHash`/`lift` are stamped by the promote step, never
- * the author.
- *
- * `sourcePath` is the artifact's ORIGINAL path (including `null`). It is the
- * byte-stable fold sort key — the resolver folds context artifacts in
- * `composeCertifiedPrompt` order, which sorts by `path ?? ''`, so a `null` path
- * is load-bearing and MUST round-trip exactly. It is distinct from a context
- * `iface.name` (display only): collapsing the two flips the fold order for a
- * mix of null-path and non-null-path artifacts.
+ * Measure a complete human-authored, imported, or compound profile candidate.
+ * No optimizer runs and no optimizer receipt is fabricated.
  */
-interface CertProvenance {
+interface ProposeAuthoredAgentProfileImprovementOptions {
+  runId: string;
+  source: AgentImprovementSource;
+  profile: AgentProfile;
+  stateDigest: AgentImprovementProfileStateDigest;
+  candidateProfile: AgentProfile;
+  candidateLineage: AuthoredAgentProfileCandidateLineage;
+  /** Optional source/artifact metadata used on Runtime-derived profile diff steps. */
+  diff?: AuthoredAgentProfileDiffOptions;
+  findings?: readonly ProposalFinding$1[];
+  benchmark: AgentProfileImprovementBenchmark;
+  executor: AgentProfileCandidateMeasurementExecutor;
+  /** One customer-approved maximum for the held-out paired measurement. */
+  budgetUsd: number;
+  /** Optional identities used to prove authored/imported development work is held out. */
+  developmentScenarios?: readonly CampaignScenarioIdentity[];
+  maxConcurrency?: number;
+  signal?: AbortSignal;
+  candidate?: AgentProfileImprovementMeasuredComparison['candidate'];
+  metadata?: AgentProfileImprovementMeasuredComparison['metadata'];
+  now?: () => Date;
+}
+interface ProposeAuthoredAgentProfileImprovementResult {
+  candidateProfile: AgentProfile;
+  candidateLineage: AgentCandidateLineage;
+  experiment: AgentProfileImprovementExperiment;
+  measurements: AgentProfileImprovementMeasurement[];
+  proposal: AgentImprovementProposal$1;
+}
+/**
+ * Put a complete authored/imported profile through the canonical profile
+ * experiment and proposal path without invoking `improve()`.
+ */
+declare function proposeAuthoredAgentProfileImprovement(options: ProposeAuthoredAgentProfileImprovementOptions): Promise<ProposeAuthoredAgentProfileImprovementResult>;
+//#endregion
+//#region src/intelligence/delivery.d.ts
+/** A promoted, certified artifact (one entry in the composed profile). */
+interface CertifiedArtifact {
+  path: string | null;
+  content: string;
   contentHash: string;
   version: number | null;
+  /** Held-out gate lift attached at certification, e.g. "+3.1pp" — never a
+   *  within-run claim. `null` when the promotion carried no lift record. */
   lift: string | null;
   promotedAt: string;
-  sourcePath: string | null;
 }
-/** One certified unit of agent power. */
-interface CertifiedCapability {
-  id: string;
-  iface: CapabilityInterface;
-  binding: DeliveryBinding;
-  auth: CapabilityAuth;
-  provenance: CertProvenance;
+/** The active promoted prompt surface for a target. */
+interface CertifiedPromptSurface {
+  surface: string;
+  surfaceHash: string;
+  version: number | null;
+  lift: string | null;
+}
+/** The held-out provenance the plane's certify step stamps on a promoted diff.
+ *  `lift` is the held-out gate lift (e.g. "+3.1pp"), never a within-run claim. */
+interface DiffProvenance {
+  version: number | null;
+  lift: string | null;
+  contentHash: string;
+  promotedAt: string;
 }
 /**
- * The strict generalization of `CertifiedProfile`. `promptSurface` is kept
- * during the migration window (the shipped pull lane still emits it); new
- * capabilities live in `capabilities`.
+ * A gate-certified profile diff the plane has already promoted, plus the
+ * held-out provenance it carries. This is the previously-DROPPED typed diff the
+ * composed endpoint returns; `withIntelligence` deserializes it and surfaces it
+ * as a PROPOSAL — a human, or the gated local `improve()` loop, turns a proposal
+ * into a shipped profile. It is NEVER auto-applied at runtime.
  */
-interface CapabilityManifest {
+interface ProposedProfileDiff {
+  diff: AgentProfileDiff;
+  provenance: DiffProvenance;
+}
+/** The composed endpoint's per-capability summary — the narrow shape on the
+ *  wire (id + surface + path/content + provenance). Distinct from the richer
+ *  `CertifiedCapability` the capability resolver lowers a manifest into. */
+interface CertifiedCapabilitySummary {
+  id: string;
+  iface: {
+    surface: string;
+  };
+  binding: {
+    path: string | null;
+    content: string;
+  };
+  provenance: DiffProvenance;
+}
+/** The composed certified profile — exactly the shape the plane's
+ *  `GET /v1/profiles/:target/composed` returns. */
+interface CertifiedProfile {
   target: string;
   generatedAt: string;
   promptSurface: CertifiedPromptSurface | null;
-  capabilities: CertifiedCapability[];
-}
-/** One retrieval handle. The agent never learns vector vs graph vs index. */
-interface ResolvedRetrieval {
-  name: string;
-  retrieve(query: string, k?: number): Promise<Array<{
-    text: string;
-    score?: number;
-  }>>;
-}
-/** One resolved hook — event + the command/matcher the seam folds into
- *  `AgentProfile.hooks`. */
-interface ResolvedHook {
-  event: string;
-  command: string;
-  matcher?: string;
-}
-/** One resolved subagent — folded into `AgentProfile.subagents`. */
-interface ResolvedSubagent {
-  name: string;
-  description?: string;
-  prompt?: string;
+  artifacts: Record<string, CertifiedArtifact[]>;
+  /** The typed profile diffs the plane has promoted, each with held-out
+   *  provenance. Surfaced as proposals; never auto-applied. Empty when none. */
+  agentProfileDiffs: ProposedProfileDiff[];
+  /** The composed capability summaries the plane returns. Empty when none. */
+  capabilities: CertifiedCapabilitySummary[];
+  /** The composed profile the promoted diffs fold to, for inspection. `null`
+   *  when no diffs are promoted. */
+  agentProfile: AgentProfile | null;
 }
-/**
- * What `composeCertifiedProfile` produces. Every binding fans into the same
- * slots, consumed identically by the in-process seam (`RouterToolsSeam.{tools,
- * executeToolCall}` + folded prompt) and the sandbox seam (`AgentProfile`).
- * `dispose()` tears provisioned hosts down in REVERSE dependency order.
- */
-interface ResolvedSurface {
-  /** Host-side tool defs → `RouterToolsSeam.tools` / agent-app `extraTools`. */
-  tools: ToolSpec[];
-  /** Host-side dispatch for a resolved tool. Throws when `name` is unknown so a
-   *  mis-dispatch is loud, never a silent empty string. */
-  execute(name: string, args: Record<string, unknown>, task: unknown): Promise<string>;
-  /** Sandbox-side tool delivery → `AgentProfile.mcp` / in-proc `createMcpEnvironment`. */
-  mcpConnections: Record<string, AgentProfileMcpServer>;
-  /** Prompt-context additions, byte-stable-ordered → folded system prompt. */
-  promptAdditions: string[];
-  /** Workspace files → `AgentProfile.resources.files`. */
-  files: Array<{
-    path: string;
-    content: string;
-    executable?: boolean;
-  }>;
-  /** Uniform retrieval handles. */
-  retrieval: ResolvedRetrieval[];
-  /** Hooks → `AgentProfile.hooks`. */
-  hooks: ResolvedHook[];
-  /** Subagents → `AgentProfile.subagents`. */
-  subagents: ResolvedSubagent[];
-  /** The folded system prompt — base + the byte-stable prompt additions, exactly
-   *  as `composeCertifiedPrompt` renders the inline/context capabilities. */
-  systemPrompt: string;
-  /** Tear down provisioned hosts (reverse dependency order). */
-  dispose(): Promise<void>;
+/** Typed outcome for the pull — inspect `succeeded` before `value`. A 404
+ *  (nothing promoted yet) is a normal, non-error `succeeded: false`. */
+type PullOutcome = {
+  succeeded: true;
+  value: CertifiedProfile;
+} | {
+  succeeded: false;
+  error: string;
+  status?: number;
+};
+interface PullCertifiedOptions {
+  /** The agent target certified artifacts are promoted under. */
+  target: string;
+  /** Bearer key. Defaults to `process.env.TANGLE_API_KEY`. */
+  apiKey?: string;
+  /** Plane base URL. Defaults to `process.env.TANGLE_INTELLIGENCE_URL` then
+   *  `https://intelligence.tangle.tools`. */
+  baseUrl?: string;
+  /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */
+  fetchImpl?: typeof fetch;
+  /** Abort the request after this many ms. Default 10000. */
+  timeoutMs?: number;
 }
-/**
- * A binding kind whose resolver case is typed but not yet admitted (rag-index,
- * memory-store, wasm, a2a). Thrown by the resolver — NEVER faked into a working
- * surface. The TYPE arms exist so the union is closed against the spec; the
- * resolver grows them later behind their lifecycle + admission gate.
- */
-declare class CapabilityNotAdmittedError extends Error {
-  readonly kind: DeliveryBindingKind;
-  readonly capabilityId: string;
-  constructor(kind: DeliveryBindingKind, capabilityId: string, reason: string);
+/** What Runtime knows about a failed proposal submission.
+ * `not-sent` means no request began, `rejected` means Intelligence returned a
+ * definitive 4xx response, and `unconfirmed` means the caller may safely retry
+ * the same immutable proposal. */
+type AgentImprovementProposalSubmissionState = 'not-sent' | 'rejected' | 'unconfirmed';
+/** Submit a completed measured proposal for product-side review. */
+interface SubmitAgentImprovementProposalOptions {
+  proposal: AgentImprovementProposal$1;
+  /** Bearer key. Defaults to `process.env.TANGLE_API_KEY`. */
+  apiKey?: string;
+  /** Plane base URL. Defaults to `process.env.TANGLE_INTELLIGENCE_URL` then
+   * `https://intelligence.tangle.tools`. */
+  baseUrl?: string;
+  /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */
+  fetchImpl?: typeof fetch;
+  /** Abort the request after this many ms. Default 10000. */
+  timeoutMs?: number;
 }
+/** Typed result for proposal submission. A successful result contains the
+ * exact immutable proposal Intelligence recorded. */
+type SubmitAgentImprovementProposalOutcome = {
+  succeeded: true;
+  value: AgentImprovementProposal$1;
+  status: number;
+} | {
+  succeeded: false;
+  submission: AgentImprovementProposalSubmissionState;
+  error: string;
+  status?: number;
+  code?: string;
+};
+/** Resolve the ONE Intelligence base URL — the single knob both the send and
+ *  receive paths derive from. Env fallback: `TANGLE_INTELLIGENCE_URL`. */
+declare function resolveIntelligenceBaseUrl(baseUrl: string | undefined): string;
 /**
- * Lower the EXISTING plane wire (`CertifiedProfile`) into a `CapabilityManifest`.
- * `prompt-surface`/`skill` artifacts → `context`/inline capabilities (the
- * shipped fold, generalized); any other artifact type → best-effort binding
- * inference. `promptSurface` is carried through so
- * the resolver folds it first, exactly as `composeCertifiedPrompt` does today.
- * This delivers the spine against today's wire before the plane changes.
+ * Deserialize the composed-endpoint response into a `CertifiedProfile`. The
+ * previously-dropped `agentProfileDiffs`/`capabilities`/`agentProfile` are read
+ * here so they round-trip to the consumer; a plane that has not yet promoted any
+ * diffs simply yields empty arrays / a null profile (fail-closed, never a crash).
  */
-declare function manifestFromProfile(profile: CertifiedProfile): CapabilityManifest;
-//#endregion
-//#region src/intelligence/improvement-surfaces.d.ts
-/** Agent improvement surfaces delivered as exact `AgentProfileDiff` replacements. */
-declare const AGENT_IMPROVEMENT_PROFILE_SURFACES: readonly ["prompt", "skills", "tools", "mcp", "hooks", "subagents"];
-type AgentImprovementProfileSurface = (typeof AGENT_IMPROVEMENT_PROFILE_SURFACES)[number];
+declare function normalizeCertifiedProfile(raw: unknown): CertifiedProfile;
 /**
- * Profile changes eligible for the product-owned measured comparison path.
- * The six directly deliverable profile surfaces retain their granular labels;
- * any residual profile axis also adds the complete `agent-profile` surface.
- */
-declare const AGENT_PROFILE_MEASURED_SURFACES: readonly ["prompt", "skills", "tools", "mcp", "hooks", "subagents", "agent-profile"];
-type AgentProfileMeasuredSurface = (typeof AGENT_PROFILE_MEASURED_SURFACES)[number];
-interface AgentImprovementTargetProfileDiffOptions {
-  id: string;
-  source?: AgentProfileDiff['source'];
-  metadata?: Record<string, unknown>;
-}
-type AgentImprovementActivationTargetIdentity = Pick<AgentImprovementActivationTarget, 'surface' | 'identity'>;
-/** Bind caller-owned target identities to the exact source state Runtime measured. */
-declare function buildAgentImprovementActivationTargets(surfaces: readonly AgentImprovementSurface[], experiment: AgentImprovementEvaluation$1['experiment'], intent: AgentImprovementActivationIntent$1, identities: readonly AgentImprovementActivationTargetIdentity[]): [AgentImprovementActivationTarget, ...AgentImprovementActivationTarget[]];
-/** Return whether a measured surface can be delivered through an agent profile. */
-declare function isAgentImprovementProfileSurface(surface: AgentImprovementSurface): surface is AgentImprovementProfileSurface;
-/** Return whether a surface is eligible for shared profile measurement. */
-declare function isAgentProfileMeasuredSurface(surface: string): surface is AgentProfileMeasuredSurface;
+ * Pull the certified composed profile for a target. Fail-closed: a network
+ * error or a non-2xx returns a typed `succeeded: false` (never throws), so a
+ * caller can run on its base surface when Intelligence is unreachable. A 404 is
+ * the normal "nothing promoted yet" signal, carried as `status: 404`.
+ */
+declare function pullCertified(opts: PullCertifiedOptions): Promise<PullOutcome>;
 /**
- * Return the canonical current-state input for one profile-deliverable improvement target.
- * Missing slots become `null`; tools and subagents include both their direct and resource slots.
- * Unrelated profile fields are excluded. The result matches `agentImprovementTargetInput` for the
- * same profile inside a candidate bundle.
+ * Submit a completed Runtime proposal to Intelligence for product-side review.
+ * This never runs an experiment, approves a proposal, or applies a candidate.
+ * A 4xx response is a confirmed `rejected` request. Network failures, timeouts,
+ * 5xx responses, and invalid success responses are `unconfirmed`, so callers
+ * can retry the same digest because Intelligence stores proposals idempotently.
  */
-declare function agentImprovementProfileSurfaceInput(profile: AgentProfile$1, surface: AgentImprovementProfileSurface): unknown;
-/** Return the `Sha256Digest` of one profile surface using Runtime's canonical candidate digest. */
-declare function agentImprovementProfileSurfaceDigest(profile: AgentProfile$1, surface: AgentImprovementProfileSurface): Sha256Digest;
+declare function submitAgentImprovementProposal(opts: SubmitAgentImprovementProposalOptions): Promise<SubmitAgentImprovementProposalOutcome>;
 /**
- * Replace one measured profile surface exactly, including array-valued resources.
- * Apply the returned diffs in order: a diff applies its set before its removal,
- * so exact replacement requires a reset record followed by a set record.
+ * Fold the certified prompt surface (and any certified prompt-folding artifacts:
+ * `prompt-surface` / `skill` / `instructions`) into a base system prompt under a
+ * marked section, so the deployed agent prompt == base + the gate-certified
+ * additions. Order is stable (prompt surface first, then artifact buckets in
+ * `promptFoldTypes` order, then by path within a bucket) so the same profile
+ * renders byte-identically each call. Returns `base` unchanged when there is no
+ * usable certified content. Reads only the prompt-folding slice of a profile.
  */
-declare function agentImprovementTargetProfileDiffs(target: {
-  surface: AgentImprovementProfileSurface;
-  desiredInput: unknown;
-}, options: AgentImprovementTargetProfileDiffOptions): [AgentProfileDiff, ...AgentProfileDiff[]];
+declare function composeCertifiedPrompt(base: string, certified: Pick<CertifiedProfile, 'promptSurface' | 'artifacts'> | null): string;
+/** A cached, self-refreshing source of a target's certified prompt additions —
+ *  the prompt-only delivery lane for callers that assemble their OWN system
+ *  prompt (product chat routes) rather than wrapping an agent fn. Same
+ *  fail-closed semantics as {@link pullCertified}: pulls at most every
+ *  `refreshMs`, coalesces concurrent pulls, keeps the last-known profile on a
+ *  failed/404 pull, never throws, never blocks past the pull timeout. */
+interface CertifiedPromptSource {
+  /** Refresh (window-respecting) then fold the certified additions into a
+   *  base system prompt. Returns `base` unchanged when nothing is promoted. */
+  compose(base: string): Promise<string>;
+  /** The certified profile currently in effect (`null` = none pulled yet). */
+  current(): CertifiedProfile | null;
+  /** Pull now if the refresh window has elapsed; coalesced and fail-closed. */
+  refresh(): Promise<void>;
+}
+/** Options for {@link createCertifiedPromptSource} — the pull coordinates plus
+ *  the refresh cadence. */
+interface CertifiedPromptSourceOptions extends PullCertifiedOptions {
+  /** Min interval between certified-profile pulls. Default 5m. */
+  refreshMs?: number;
+}
 /**
- * Derive the ordered profile patch that changes one executable profile into
- * another, then prove the patch preserves the complete candidate state.
+ * Create the cached certified-prompt source — the ONE module-scope-cache +
+ * coalesced-refresh + keep-last-known implementation. Product wiring uses this
+ * rather than hand-rolling the same lines around `pullCertified`. The
+ * `withIntelligence` hook rides this same source for its prompt delivery.
  */
-declare function agentImprovementProfileDiffs(baselineInput: AgentProfile$1, candidateInput: AgentProfile$1, options: AgentImprovementTargetProfileDiffOptions): [AgentProfileDiff, ...AgentProfileDiff[]];
+declare function createCertifiedPromptSource(opts: CertifiedPromptSourceOptions): CertifiedPromptSource;
 //#endregion
-//#region src/intelligence/profile-activation.d.ts
-type AgentImprovementProfileActivationTarget = Omit<AgentImprovementActivationTargetPlan, 'surface'> & {
-  surface: AgentImprovementProfileSurface;
-};
-type AgentImprovementProfileTargetState = Omit<AgentImprovementActivationTargetState, 'surface'> & {
-  surface: AgentProfileMeasuredSurface;
-};
-type AgentImprovementProfileTargetTransition = Omit<AgentImprovementActivationTargetTransition, 'surface'> & {
-  surface: AgentProfileMeasuredSurface;
+//#region src/intelligence/capability.d.ts
+/** A JSON Schema object describing a tool's parameters. Kept structural — the
+ *  resolver forwards it verbatim into a `ToolSpec` / MCP `tools/list` check. */
+type JsonSchema = Record<string, unknown>;
+/**
+ * What the agent consumes. CLOSED — a new runtime kind NEVER extends this. Each
+ * arm maps slot-for-slot onto `AgentProfile` + the host `RouterToolsSeam`.
+ */
+type CapabilityInterface = {
+  surface: 'tool';
+  name: string;
+  description?: string;
+  parameters: JsonSchema;
+  returns?: JsonSchema;
+} | {
+  surface: 'mcp';
+  serverName: string;
+  toolset?: string[];
+} | {
+  surface: 'context';
+  kind: 'prompt-surface' | 'skill' | 'instructions';
+  name: string;
+} | {
+  surface: 'retrieval';
+  name: string;
+  description?: string;
+  topK?: number;
+} | {
+  surface: 'hook';
+  event: string;
+  matcher?: string;
+} | {
+  surface: 'subagent';
+  name: string;
+  description?: string;
 };
-interface AgentImprovementProfileReplacement {
-  identity: string;
-  profile: AgentProfile$1;
-}
-interface AgentImprovementProfileStateDigestInput {
-  identity: string;
-  profile: AgentProfile$1;
-}
-/** Product-defined hash of the complete profile state that actually runs. */
-type AgentImprovementProfileStateDigest = (input: AgentImprovementProfileStateDigestInput) => Sha256Digest;
-interface AgentImprovementProfileStateResolverInput {
-  identity: string;
-  stateDigest: Sha256Digest;
-}
-/** Product-owned retained-state lookup used only for an explicit restore. */
-type AgentImprovementProfileStateResolver = (input: AgentImprovementProfileStateResolverInput) => AgentProfile$1 | undefined;
-type AgentImprovementProfileActivationInput = {
-  currentByIdentity: ReadonlyMap<string, AgentProfile$1>;
-  targets: readonly [AgentImprovementProfileActivationTarget, ...AgentImprovementProfileActivationTarget[]];
+/** Every interface surface tag — the closed set the resolver fans into slots. */
+type CapabilitySurface = CapabilityInterface['surface'];
+/**
+ * Where a capability's bytes live. A leaked manifest carries no live secret and
+ * no inlined blob: `github`/`blob` are pointers resolved at provision time.
+ */
+type ContentRef = {
+  kind: 'inline';
+  content: string;
 } | {
-  currentByIdentity: ReadonlyMap<string, AgentProfile$1>;
-  profileTransition: ProfileImprovementActivationTransitionInput;
-  stateDigest: AgentImprovementProfileStateDigest;
-  resolveState?: AgentImprovementProfileStateResolver;
+  kind: 'github';
+  repository?: string;
+  path: string;
+  ref?: string;
+} | {
+  kind: 'blob';
+  uri: string;
+  sha256: string;
+  bytes?: number;
 };
-type AgentImprovementProfileActivationPreparation = {
-  status: 'missing';
-  identities: readonly string[];
+/** A named secret a binding requires — declared, never carried. */
+interface CredentialRef {
+  key: string;
+}
+/**
+ * How a binding authenticates at resolve time. Declared as a REQUIREMENT in the
+ * manifest; the live secret is resolved per-tenant by the resolver context,
+ * never inlined here.
+ */
+type CapabilityAuth = {
+  mode: 'none';
 } | {
-  status: 'unavailable';
-  code: 'PROFILE_STATE_UNAVAILABLE';
-  identities: readonly string[];
-  requiredStateDigest: Sha256Digest;
+  mode: 'tangle-key';
 } | {
-  status: 'already-applied' | 'conflict';
-  targets: [AgentImprovementProfileTargetState, ...AgentImprovementProfileTargetState[]];
+  mode: 'hub-connection';
+  providerId: string;
+  scopes?: string[];
 } | {
-  status: 'apply';
-  replacements: [AgentImprovementProfileReplacement, ...AgentImprovementProfileReplacement[]];
-  targets: [AgentImprovementProfileTargetTransition, ...AgentImprovementProfileTargetTransition[]];
+  mode: 'secret-ref';
+  key: string;
 };
 /**
- * Compare product-owned profiles with an exact measured transition and prepare
- * all-or-none replacements. The product owns locking, persistence, and retained
- * state; Runtime owns the profile diff semantics and digest checks.
+ * The host a `process-on-infra` binding provisions before its inner binding.
+ * Reuses `createExecutor`'s backend-as-data vocabulary — no new runtime invented.
+ * `image` is the sandbox image tag; `warm`/`idleTtlMs`/`costTag` meter standing
+ * cost; `ports` are the inner server's listen ports the host must expose.
  */
-declare function prepareAgentImprovementProfileActivation(input: AgentImprovementProfileActivationInput): AgentImprovementProfileActivationPreparation;
-//#endregion
-//#region src/intelligence/improvement-cycle.d.ts
-interface AgentCandidateExperimentCellPlacement {
-  executionId: string;
-  attempt?: number;
-  executionRoots: AgentCandidateTaskExecution['executionRoots'];
-  stagingRoots: AgentCandidateTaskExecution['stagingRoots'];
-  ports: AgentCandidateExecutionPorts;
-  preparation?: PrepareAgentCandidateExecutionOptions;
-  execution: ExecutePreparedAgentCandidateOptions;
-}
-interface RunAgentCandidateExperimentOptions extends Omit<CompareCandidateExperimentOptions, 'experiment' | 'measurements' | 'measurement' | 'preparation'> {
-  experiment: AgentCandidateExperiment;
-  placeCell: (input: CandidateExperimentExecutionInput) => AgentCandidateExperimentCellPlacement | Promise<AgentCandidateExperimentCellPlacement>;
-  maxConcurrency?: number;
-  /** Work before this call. Omit when this function is only measuring a sealed experiment. */
-  preparation?: CompareCandidateExperimentOptions['preparation'];
-  /** Shared account when preparation and held-out work have one customer budget. */
-  costLedger?: CostLedgerHandle;
-  signal?: AbortSignal;
-}
-interface RunAgentCandidateExperimentResult {
-  experiment: AgentCandidateExperiment;
-  measurements: AgentCandidateExperimentMeasurement[];
-  evaluation: AgentImprovementMeasuredComparison$1;
-}
-interface ExecuteAgentCandidateExperimentCellOptions extends CandidateExperimentExecutionInput, AgentCandidateExperimentCellPlacement {}
-interface VerifyCandidateExecutionEvidenceOptions {
-  experiment: AgentCandidateExperiment;
-  arm: 'baseline' | 'candidate';
-  benchmarkCell: AgentCandidateBenchmarkCellRef;
-  seed: number;
-  attempt?: number;
-  resolvedResources?: ReadonlyMap<Sha256Digest, string>;
-}
-/** A failed baseline or candidate cell with its complete Runtime failure result. */
-declare class AgentCandidateExperimentCellExecutionError extends Error {
-  readonly finalization: Extract<AgentCandidateRunFinalization, {
-    succeeded: false;
-  }>;
-  constructor(finalization: Extract<AgentCandidateRunFinalization, {
-    succeeded: false;
-  }>);
+interface HostSpec {
+  backend: 'sandbox' | 'router' | 'cli';
+  image?: string;
+  ports?: number[];
+  warm?: boolean;
+  idleTtlMs?: number;
+  costTag?: string;
 }
-interface CreateAgentImprovementProposalOptions {
-  runId: string;
-  findings: readonly ProposalFinding$1[];
-  evaluation: AgentImprovementEvaluation$1;
-  now?: () => Date;
+/**
+ * How a capability is backed. OPEN tagged union — THE extension point. All arms
+ * are typed even when the resolver does not yet admit them; an un-admitted arm
+ * throws {@link CapabilityNotAdmittedError} at resolve, never silently no-ops.
+ */
+type DeliveryBinding = {
+  kind: 'inline';
+  content: ContentRef;
+} | {
+  kind: 'file';
+  path: string;
+  content: ContentRef;
+  executable?: boolean;
+} | {
+  kind: 'http';
+  url: string;
+  method?: string;
+  auth?: CapabilityAuth;
+} | {
+  kind: 'sandbox-code';
+  entry: string;
+  code: ContentRef;
+  runtime?: string;
+  harness?: string;
+} | {
+  kind: 'mcp-stdio';
+  command: string;
+  args?: string[];
+  env?: Record<string, string>;
+  cwd?: string;
+} | {
+  kind: 'mcp-remote';
+  url: string;
+  transport: 'http' | 'sse';
+  headers?: Record<string, string>;
+} | {
+  kind: 'process-on-infra';
+  host: HostSpec;
+  inner: DeliveryBinding;
+} | {
+  kind: 'rag-index';
+  index: ContentRef;
+  embedModel: string;
+  topK?: number;
+} | {
+  kind: 'memory-store';
+  provision: 'sqlite' | 'neo4j' | 'vector';
+  seed?: ContentRef;
+} | {
+  kind: 'wasm';
+  module: ContentRef;
+  exports: string[];
+} | {
+  kind: 'a2a';
+  endpoint: string;
+  card: ContentRef;
+  auth?: CapabilityAuth;
+};
+/** Every binding kind — the open set the resolver dispatches over. */
+type DeliveryBindingKind = DeliveryBinding['kind'];
+/**
+ * The certify lane's held-out lift travelling WITH delivery. The shipped
+ * `CertifiedArtifact` envelope minus its content (which moves into the binding
+ * arm): `version`/`contentHash`/`lift` are stamped by the promote step, never
+ * the author.
+ *
+ * `sourcePath` is the artifact's ORIGINAL path (including `null`). It is the
+ * byte-stable fold sort key — the resolver folds context artifacts in
+ * `composeCertifiedPrompt` order, which sorts by `path ?? ''`, so a `null` path
+ * is load-bearing and MUST round-trip exactly. It is distinct from a context
+ * `iface.name` (display only): collapsing the two flips the fold order for a
+ * mix of null-path and non-null-path artifacts.
+ */
+interface CertProvenance {
+  contentHash: string;
+  version: number | null;
+  lift: string | null;
+  promotedAt: string;
+  sourcePath: string | null;
 }
-type CreateAgentImprovementMeasuredComparisonOptions = CompareCandidateExperimentOptions;
-interface ReviewAgentImprovementInput {
-  decision: AgentImprovementReviewDecision$1;
-  reviewedBy: string;
-  reason: string;
-  feedback?: string;
-  now?: () => Date;
+/** One certified unit of agent power. */
+interface CertifiedCapability {
+  id: string;
+  iface: CapabilityInterface;
+  binding: DeliveryBinding;
+  auth: CapabilityAuth;
+  provenance: CertProvenance;
 }
-interface CreateAgentImprovementActivationOptions {
-  intent: AgentImprovementActivationIntent$1;
-  /** Runtime derives each exact source digest; callers identify only the records to change. */
-  targets: [AgentImprovementActivationTargetIdentity, ...AgentImprovementActivationTargetIdentity[]];
-  fundingOwner: string;
-  authorizedBy: string;
-  expiresAt: string;
-  /** Required only when an activation targets the complete `agent-profile` surface. */
-  executionRef?: AgentProfileImprovementExecutionRef;
-  now?: () => Date;
+/**
+ * The strict generalization of `CertifiedProfile`. `promptSurface` is kept
+ * during the migration window (the shipped pull lane still emits it); new
+ * capabilities live in `capabilities`.
+ */
+interface CapabilityManifest {
+  target: string;
+  generatedAt: string;
+  promptSurface: CertifiedPromptSurface | null;
+  capabilities: CertifiedCapability[];
 }
-type AgentImprovementAnalysisOptions = Omit<RunAnalystLoopOpts, 'runId' | 'inputs' | 'improvementProposalSource' | 'knowledgeProposalSource' | 'onEvent' | 'log' | 'costLedger' | 'costPhase' | 'signal'> & {
-  inputs: Omit<RunAnalystLoopOpts['inputs'], 'judgeInput'> & {
-    judgeInput?: never;
-  };
-};
-type WithProposalFindings<T> = T extends unknown ? Omit<T, 'findings'> & {
-  findings?: readonly ProposalFinding$1[];
-} : never;
-interface ProposeAgentImprovementOptions<TScenario extends Scenario$1, TArtifact> {
-  runId: string;
-  profile: AgentProfile$1;
-  analysis: AgentImprovementAnalysisOptions;
-  improvement: WithProposalFindings<ImproveOptions<TScenario, TArtifact>>;
-  buildExperiment: (input: {
-    analysis: RunAnalystLoopResult;
-    improvement: ImproveResult<TScenario, TArtifact>;
-  }) => AgentImprovementExperimentMaterial | Promise<AgentImprovementExperimentMaterial>;
-  placeCell: RunAgentCandidateExperimentOptions['placeCell'];
-  maxConcurrency?: number;
-  signal?: AbortSignal;
-  candidate?: AgentImprovementMeasuredComparison$1['candidate'];
-  metadata?: AgentImprovementMeasuredComparison$1['metadata'];
-  now?: () => Date;
+/** One retrieval handle. The agent never learns vector vs graph vs index. */
+interface ResolvedRetrieval {
+  name: string;
+  retrieve(query: string, k?: number): Promise<Array<{
+    text: string;
+    score?: number;
+  }>>;
 }
-/** Product-supplied experiment material. Runtime supplies optimizer ancestry and the final digest. */
-type AgentImprovementExperimentMaterial = Omit<AgentCandidateExperimentMaterial, 'candidateLineage'>;
-interface ProposeAgentImprovementResult<TScenario extends Scenario$1, TArtifact> {
-  analysis: RunAnalystLoopResult;
-  improvement: ImproveResult<TScenario, TArtifact>;
-  experiment: AgentCandidateExperiment;
-  measurements: AgentCandidateExperimentMeasurement[];
-  proposal: AgentImprovementProposal$1;
+/** One resolved hook — event + the command/matcher the seam folds into
+ *  `AgentProfile.hooks`. */
+interface ResolvedHook {
+  event: string;
+  command: string;
+  matcher?: string;
 }
-/** Product-owned task material that Runtime freezes before either profile state runs. */
-interface AgentProfileImprovementBenchmark {
-  tasks: [AgentProfileImprovementTaskMaterial, ...AgentProfileImprovementTaskMaterial[]];
-  reps: number;
-  seeds: [number, ...number[]];
-  policy: AgentCandidateEvaluationPolicy;
+/** One resolved subagent — folded into `AgentProfile.subagents`. */
+interface ResolvedSubagent {
+  name: string;
+  description?: string;
+  prompt?: string;
 }
 /**
- * One product execution adapter shared by optimizer search and exact profile
- * measurement. `executionRef` must identify both operations and their closure.
+ * What `composeCertifiedProfile` produces. Every binding fans into the same
+ * slots, consumed identically by the in-process seam (`RouterToolsSeam.{tools,
+ * executeToolCall}` + folded prompt) and the sandbox seam (`AgentProfile`).
+ * `dispose()` tears provisioned hosts down in REVERSE dependency order.
  */
-interface AgentProfileImprovementExecutor<TScenario extends Scenario$1, TArtifact> {
-  executionRef: AgentProfileImprovementExecutionRef;
-  optimize: ImproveMethodOptions<TScenario, TArtifact>['agent'];
-  measure(input: AgentProfileImprovementExperimentExecutionInput & {
-    profile: AgentProfile$1;
-  }): Promise<AgentProfileImprovementRunReceipt>;
+interface ResolvedSurface {
+  /** Host-side tool defs → `RouterToolsSeam.tools` / agent-app `extraTools`. */
+  tools: ToolSpec[];
+  /** Host-side dispatch for a resolved tool. Throws when `name` is unknown so a
+   *  mis-dispatch is loud, never a silent empty string. */
+  execute(name: string, args: Record<string, unknown>, task: unknown): Promise<string>;
+  /** Sandbox-side tool delivery → `AgentProfile.mcp` / in-proc `createMcpEnvironment`. */
+  mcpConnections: Record<string, AgentProfileMcpServer>;
+  /** Prompt-context additions, byte-stable-ordered → folded system prompt. */
+  promptAdditions: string[];
+  /** Workspace files → `AgentProfile.resources.files`. */
+  files: Array<{
+    path: string;
+    content: string;
+    executable?: boolean;
+  }>;
+  /** Uniform retrieval handles. */
+  retrieval: ResolvedRetrieval[];
+  /** Hooks → `AgentProfile.hooks`. */
+  hooks: ResolvedHook[];
+  /** Subagents → `AgentProfile.subagents`. */
+  subagents: ResolvedSubagent[];
+  /** The folded system prompt — base + the byte-stable prompt additions, exactly
+   *  as `composeCertifiedPrompt` renders the inline/context capabilities. */
+  systemPrompt: string;
+  /** Tear down provisioned hosts (reverse dependency order). */
+  dispose(): Promise<void>;
 }
-/** The portable profile changes that the measured-profile contract permits. */
-type AgentProfileImprovementMethodOptions<TScenario extends Scenario$1, TArtifact> = Omit<ImproveMethodOptions<TScenario, TArtifact>, 'agent' | 'executionRef' | 'findings' | 'surface'> & {
-  surface?: AgentProfileMeasuredSurface;
-  findings?: readonly ProposalFinding$1[];
-};
 /**
- * Complete profile-improvement path for a product-owned source.
- * Runtime owns analysis, search ancestry, profile diffs, experiment sealing,
- * paired evaluation, and the reviewable proposal. The product keeps its
- * profile bytes, task executor, billing, trace capture, and persistence.
+ * A binding kind whose resolver case is typed but not yet admitted (rag-index,
+ * memory-store, wasm, a2a). Thrown by the resolver — NEVER faked into a working
+ * surface. The TYPE arms exist so the union is closed against the spec; the
+ * resolver grows them later behind their lifecycle + admission gate.
  */
-interface ProposeAgentProfileImprovementOptions<TScenario extends Scenario$1, TArtifact> {
-  runId: string;
-  source: AgentImprovementSource;
-  profile: AgentProfile$1;
-  stateDigest: AgentImprovementProfileStateDigest;
-  analysis: AgentImprovementAnalysisOptions;
-  improvement: AgentProfileImprovementMethodOptions<TScenario, TArtifact>;
-  benchmark: AgentProfileImprovementBenchmark;
-  executor: AgentProfileImprovementExecutor<TScenario, TArtifact>;
-  /** One customer-approved maximum for analysis, optimization, and measurement. */
-  budgetUsd: number;
-  maxConcurrency?: number;
-  signal?: AbortSignal;
-  candidate?: AgentProfileImprovementMeasuredComparison['candidate'];
-  metadata?: AgentProfileImprovementMeasuredComparison['metadata'];
-  now?: () => Date;
-}
-interface ProposeAgentProfileImprovementResult {
-  analysis: RunAnalystLoopResult;
-  improvement: ImproveMethodResult;
-  experiment: AgentProfileImprovementExperiment;
-  measurements: AgentProfileImprovementMeasurement[];
-  proposal: AgentImprovementProposal$1;
+declare class CapabilityNotAdmittedError extends Error {
+  readonly kind: DeliveryBindingKind;
+  readonly capabilityId: string;
+  constructor(kind: DeliveryBindingKind, capabilityId: string, reason: string);
 }
-/** Execute both arms of one immutable experiment and derive its paired result. */
-declare function runAgentCandidateExperiment(options: RunAgentCandidateExperimentOptions): Promise<RunAgentCandidateExperimentResult>;
-/** Execute one exact arm, task, repetition, seed, and attempt through Runtime. */
-declare function executeAgentCandidateExperimentCell(options: ExecuteAgentCandidateExperimentCellOptions): Promise<CandidateExecutionEvidence$1>;
-/** Delegate all statistics and promotion checks to agent-eval's receipt-based comparison. */
-declare function createAgentImprovementMeasuredComparison(options: CreateAgentImprovementMeasuredComparisonOptions): AgentImprovementMeasuredComparison$1;
 /**
- * Analyze a product-owned profile, search one profile surface, then run the
- * exact baseline and candidate through the product executor before proposing.
+ * Lower the EXISTING plane wire (`CertifiedProfile`) into a `CapabilityManifest`.
+ * `prompt-surface`/`skill` artifacts → `context`/inline capabilities (the
+ * shipped fold, generalized); any other artifact type → best-effort binding
+ * inference. `promptSurface` is carried through so
+ * the resolver folds it first, exactly as `composeCertifiedPrompt` does today.
+ * This delivers the spine against today's wire before the plane changes.
  */
-declare function proposeAgentProfileImprovement<TScenario extends Scenario$1, TArtifact>(options: ProposeAgentProfileImprovementOptions<TScenario, TArtifact>): Promise<ProposeAgentProfileImprovementResult>;
-/** Analyze, search, then remeasure the resulting exact candidate before proposing it. */
-declare function proposeAgentImprovement<TScenario extends Scenario$1, TArtifact>(options: ProposeAgentImprovementOptions<TScenario, TArtifact>): Promise<ProposeAgentImprovementResult<TScenario, TArtifact>>;
-/** Create the reviewable record only from a complete, recomputable experiment result. */
-declare function createAgentImprovementProposal(options: CreateAgentImprovementProposalOptions): AgentImprovementProposal$1;
-/** Persist a human or tenant-policy decision bound to one exact proposal. */
-declare function reviewAgentImprovementProposal(inputProposal: AgentImprovementProposal$1, input: ReviewAgentImprovementInput): AgentImprovementReview$1;
-/** Authorize product-owned writes only after the exact candidate was measured and approved. */
-declare function createAgentImprovementActivation(inputProposal: AgentImprovementProposal$1, inputReview: AgentImprovementReview$1, options: CreateAgentImprovementActivationOptions): AgentImprovementActivation$1;
-/** Validate a proposal and recompute every binding to its measured experiment. */
-declare function verifyAgentImprovementProposal(input: unknown): AgentImprovementProposal$1;
-/** Validate the canonical identity and wire shape of an improvement review. */
-declare function verifyAgentImprovementReview(input: unknown): AgentImprovementReview$1;
-/** Validate activation authority against the exact proposal, review, experiment, and base state. */
-declare function verifyAgentImprovementActivation(input: {
-  proposal: unknown;
-  review: unknown;
-  activation: unknown;
-}): AgentImprovementActivation$1;
-/** Recheck one Runtime receipt against its exact signed experiment cell. */
-declare function verifyCandidateExecutionEvidence(input: unknown, options: VerifyCandidateExecutionEvidenceOptions): CandidateExecutionEvidence$1;
+declare function manifestFromProfile(profile: CertifiedProfile): CapabilityManifest;
 //#endregion
 //#region src/intelligence/exact-process-candidate.d.ts
 /** Candidate surfaces implemented by the neutral exact-process executor. */
@@ -948,7 +1003,7 @@ interface OptimizationActivationReceipt {
   modules?: OptimizationProvenance['modules'];
   python?: OptimizationProvenance['python'];
   models?: {
-    candidate?: NonNullable<AgentProfile$1['model']>;
+    candidate?: NonNullable<AgentProfile['model']>;
     optimizer?: string;
   };
   usage: {
@@ -1084,7 +1139,7 @@ interface AppliedIntelligence {
   /** Fold every proposal into `base` via `applyAgentProfileDiff`, in promotion
    *  order, and return the result. The caller invokes this EXPLICITLY (it is the
    *  human/gated apply step) — the hook never calls it on the run path. */
-  applyProfile(base: AgentProfile$1): AgentProfile$1;
+  applyProfile(base: AgentProfile): AgentProfile;
   /** Enrich the {@link RunRecord} sent for this call — outcome, usage split,
    *  model/provider, and the loop event stream. Optional; an un-recorded run
    *  still sends input/output with an inference-only zero usage split. */
@@ -1167,7 +1222,7 @@ interface RunRecord {
   provider?: string;
   loopEvents?: LoopTraceEvent[];
   runtimeEvents?: RuntimeStreamEvent[];
-  profile?: AgentProfile$1;
+  profile?: AgentProfile;
   sessionId?: string;
   harness?: string;
   repository?: string;
@@ -1206,7 +1261,7 @@ interface RunReport {
   provider?: string;
   loopEvents?: LoopTraceEvent[];
   runtimeEvents?: RuntimeStreamEvent[];
-  profile?: AgentProfile$1;
+  profile?: AgentProfile;
   sessionId?: string;
   harness?: string;
   commitSha?: string;
@@ -1256,7 +1311,7 @@ interface IntelligenceConfig {
   /** Repo access a later PR mode would need. Recorded for `doctor()` only. */
   repo?: RepoConfig;
   /** Full canonical profile used for this agent. Exported redacted with a stable hash. */
-  profile?: AgentProfile$1;
+  profile?: AgentProfile;
   /** Commit that produced the running agent, when known. */
   commitSha?: string;
   /** Runtime-event payload policy. Tool inputs/results remain off unless explicitly enabled. */
@@ -1398,5 +1453,5 @@ interface DoctorReport {
  */
 declare function createIntelligenceClient(config: IntelligenceConfig): IntelligenceClient;
 //#endregion
-export { AGENT_IMPROVEMENT_PROFILE_SURFACES, AGENT_PROFILE_MEASURED_SURFACES, type AgentCandidateExecutionHostPorts, AgentCandidateExperimentCellExecutionError, type AgentCandidateExperimentCellPlacement, type AgentImprovementActivation, type AgentImprovementActivationIntent, type AgentImprovementActivationOutcome, type AgentImprovementActivationReconciliation, type AgentImprovementActivationResult, type AgentImprovementActivationResultStore, type AgentImprovementActivationTargetIdentity, type AgentImprovementActivationTargetPlan, type AgentImprovementActivationTransition, type AgentImprovementActivationTransitionInput, type AgentImprovementAnalysisOptions, type AgentImprovementEvaluation, type AgentImprovementExperimentMaterial, type AgentImprovementMeasuredComparison, type AgentImprovementProfileActivationInput, type AgentImprovementProfileActivationPreparation, type AgentImprovementProfileActivationTarget, type AgentImprovementProfileReplacement, type AgentImprovementProfileStateDigest, type AgentImprovementProfileStateDigestInput, type AgentImprovementProfileStateResolver, type AgentImprovementProfileStateResolverInput, type AgentImprovementProfileSurface, type AgentImprovementProfileTargetState, type AgentImprovementProfileTargetTransition, type AgentImprovementProposal, type AgentImprovementProposalSubmissionState, type AgentImprovementReview, type AgentImprovementReviewDecision, type AgentImprovementTargetProfileDiffOptions, type AgentProfileImprovementActivationOperation, type AgentProfileImprovementActivationTargetPlan, type AgentProfileImprovementBenchmark, type AgentProfileImprovementExecutor, type AgentProfileImprovementMethodOptions, type AgentProfileMeasuredSurface, type AppliedIntelligence, type CandidateExecutionEvidence, type CandidateProfileMaterialization, type CapabilityAuth, type CapabilityInterface, type CapabilityManifest, CapabilityNotAdmittedError, type CapabilitySurface, type CertProvenance, type CertifiedArtifact, type CertifiedCapability, type CertifiedCapabilitySummary, type CertifiedProfile, type CertifiedPromptSource, type CertifiedPromptSourceOptions, type CertifiedPromptSurface, type ContentRef, type CorpusAccess, type CreateAgentImprovementActivationOptions, type CreateAgentImprovementActivationResultOptions, type CreateAgentImprovementProposalOptions, type CreateExactProcessCandidateExperimentExecutorOptions, type CreateProtectedExactProcessCandidateExperimentExecutorOptions, type CredentialRef, type DeliveryBinding, type DeliveryBindingKind, type DiffProvenance, DoctorReport, type EffortOverrides, type EffortOverridesCompiled, type EffortSettings, type EffortTier, type ExactProcessCandidateExperimentExecution, type ExactProcessCandidateExperimentExecutor, type ExecuteAgentCandidateExperimentCellOptions, type ExecuteAgentImprovementActivationInput, type ExecuteAgentImprovementActivationOptions, type HostSpec, type IntelligenceAgent, IntelligenceClient, IntelligenceConfig, type IntelligenceHookConfig, type IntelligenceWrapped, type JsonSchema, ModeReadiness, type OptimizationActivationReceipt, type OptimizationReceiptCost, type ProfileImprovementActivationTransitionInput, type ProposeAgentImprovementOptions, type ProposeAgentImprovementResult, type ProposeAgentProfileImprovementOptions, type ProposeAgentProfileImprovementResult, type ProposedProfileDiff, type ProtectedExactProcessCandidateExperimentExecutor, type ProvisionedHost, type PullCertifiedOptions, type PullOutcome, RecordTraceMeta, type Redactor, RepoConfig, type ResolveCtx, type ResolvedHook, type ResolvedRetrieval, type ResolvedSubagent, type ResolvedSurface, type ReviewAgentImprovementInput, type RunAgentCandidateExperimentOptions, type RunAgentCandidateExperimentResult, RunRecord, RunReport, type SealedCandidateActivationTransitionInput, type SubmitAgentImprovementProposalOptions, type SubmitAgentImprovementProposalOutcome, TraceHandle, TraceMeta, TraceOutcome, UsageClass, UsageSplit, type VerifyCandidateExecutionEvidenceOptions, agentImprovementProfileDiffs, agentImprovementProfileSurfaceDigest, agentImprovementProfileSurfaceInput, agentImprovementTargetProfileDiffs, buildAgentImprovementActivationTargets, compileEffort, composeCertifiedProfile, composeCertifiedProfileFromWire, composeCertifiedPrompt, createAgentImprovementActivation, createAgentImprovementActivationResult, createAgentImprovementMeasuredComparison, createAgentImprovementProposal, createCertifiedPromptSource, createExactProcessCandidateExperimentExecutor, createIntelligenceClient, createOptimizationActivationReceipt, createProtectedExactProcessCandidateExperimentExecutor, defaultEffortTier, defaultRedactor, exactProcessCandidateExperimentExecutionSupport, executeAgentCandidateExperimentCell, executeAgentImprovementActivation, isAgentImprovementProfileSurface, isAgentProfileMeasuredSurface, isIntelligenceOff, manifestFromProfile, normalizeCertifiedProfile, optimizationActivationReceiptFromMetadata, parseAgentCandidateProfileActivation as parseCandidateProfileMaterialization, prepareAgentImprovementProfileActivation, proposeAgentImprovement, proposeAgentProfileImprovement, pullCertified, resolveEffort, resolveIntelligenceBaseUrl, resolveRedactor, reviewAgentImprovementProposal, runAgentCandidateExperiment, submitAgentImprovementProposal, verifyAgentImprovementActivation, verifyAgentImprovementActivationResult, verifyAgentImprovementProposal, verifyAgentImprovementReview, verifyCandidateExecutionEvidence, withIntelligence };
+export { AGENT_IMPROVEMENT_PROFILE_SURFACES, AGENT_PROFILE_MEASURED_SURFACES, type AgentCandidateExecutionHostPorts, AgentCandidateExperimentCellExecutionError, type AgentCandidateExperimentCellPlacement, type AgentImprovementActivation, type AgentImprovementActivationIntent, type AgentImprovementActivationOutcome, type AgentImprovementActivationReconciliation, type AgentImprovementActivationResult, type AgentImprovementActivationResultStore, type AgentImprovementActivationTargetIdentity, type AgentImprovementActivationTargetPlan, type AgentImprovementActivationTransition, type AgentImprovementActivationTransitionInput, type AgentImprovementAnalysisOptions, type AgentImprovementEvaluation, type AgentImprovementExperimentMaterial, type AgentImprovementMeasuredComparison, type AgentImprovementProfileActivationInput, type AgentImprovementProfileActivationPreparation, type AgentImprovementProfileActivationTarget, type AgentImprovementProfileReplacement, type AgentImprovementProfileStateDigest, type AgentImprovementProfileStateDigestInput, type AgentImprovementProfileStateResolver, type AgentImprovementProfileStateResolverInput, type AgentImprovementProfileSurface, type AgentImprovementProfileTargetState, type AgentImprovementProfileTargetTransition, type AgentImprovementProposal, type AgentImprovementProposalSubmissionState, type AgentImprovementReview, type AgentImprovementReviewDecision, type AgentImprovementTargetProfileDiffOptions, type AgentProfileCandidateMeasurementExecutor, type AgentProfileImprovementActivationOperation, type AgentProfileImprovementActivationTargetPlan, type AgentProfileImprovementBenchmark, type AgentProfileImprovementExecutor, type AgentProfileImprovementMethodOptions, type AgentProfileMeasuredSurface, type AppliedIntelligence, type AuthoredAgentProfileCandidateLineage, type AuthoredAgentProfileDiffOptions, type CandidateExecutionEvidence, type CandidateProfileMaterialization, type CapabilityAuth, type CapabilityInterface, type CapabilityManifest, CapabilityNotAdmittedError, type CapabilitySurface, type CertProvenance, type CertifiedArtifact, type CertifiedCapability, type CertifiedCapabilitySummary, type CertifiedProfile, type CertifiedPromptSource, type CertifiedPromptSourceOptions, type CertifiedPromptSurface, type ContentRef, type CorpusAccess, type CreateAgentImprovementActivationOptions, type CreateAgentImprovementActivationResultOptions, type CreateAgentImprovementProposalOptions, type CreateExactProcessCandidateExperimentExecutorOptions, type CreateProtectedExactProcessCandidateExperimentExecutorOptions, type CredentialRef, type DeliveryBinding, type DeliveryBindingKind, type DiffProvenance, DoctorReport, type EffortOverrides, type EffortOverridesCompiled, type EffortSettings, type EffortTier, type ExactProcessCandidateExperimentExecution, type ExactProcessCandidateExperimentExecutor, type ExecuteAgentCandidateExperimentCellOptions, type ExecuteAgentImprovementActivationInput, type ExecuteAgentImprovementActivationOptions, type HostSpec, type IntelligenceAgent, IntelligenceClient, IntelligenceConfig, type IntelligenceHookConfig, type IntelligenceWrapped, type JsonSchema, ModeReadiness, type OptimizationActivationReceipt, type OptimizationReceiptCost, type ProfileImprovementActivationTransitionInput, type ProposeAgentImprovementOptions, type ProposeAgentImprovementResult, type ProposeAgentProfileImprovementOptions, type ProposeAgentProfileImprovementResult, type ProposeAuthoredAgentProfileImprovementOptions, type ProposeAuthoredAgentProfileImprovementResult, type ProposedProfileDiff, type ProtectedExactProcessCandidateExperimentExecutor, type ProvisionedHost, type PullCertifiedOptions, type PullOutcome, RecordTraceMeta, type Redactor, RepoConfig, type ResolveCtx, type ResolvedHook, type ResolvedRetrieval, type ResolvedSubagent, type ResolvedSurface, type ReviewAgentImprovementInput, type RunAgentCandidateExperimentOptions, type RunAgentCandidateExperimentResult, RunRecord, RunReport, type SealedCandidateActivationTransitionInput, type SubmitAgentImprovementProposalOptions, type SubmitAgentImprovementProposalOutcome, TraceHandle, TraceMeta, TraceOutcome, UsageClass, UsageSplit, type VerifyCandidateExecutionEvidenceOptions, agentImprovementProfileDiffs, agentImprovementProfileSurfaceDigest, agentImprovementProfileSurfaceInput, agentImprovementTargetProfileDiffs, buildAgentImprovementActivationTargets, compileEffort, composeCertifiedProfile, composeCertifiedProfileFromWire, composeCertifiedPrompt, createAgentImprovementActivation, createAgentImprovementActivationResult, createAgentImprovementMeasuredComparison, createAgentImprovementProposal, createCertifiedPromptSource, createExactProcessCandidateExperimentExecutor, createIntelligenceClient, createOptimizationActivationReceipt, createProtectedExactProcessCandidateExperimentExecutor, defaultEffortTier, defaultRedactor, exactProcessCandidateExperimentExecutionSupport, executeAgentCandidateExperimentCell, executeAgentImprovementActivation, isAgentImprovementProfileSurface, isAgentProfileMeasuredSurface, isIntelligenceOff, manifestFromProfile, normalizeCertifiedProfile, optimizationActivationReceiptFromMetadata, parseAgentCandidateProfileActivation as parseCandidateProfileMaterialization, prepareAgentImprovementProfileActivation, proposeAgentImprovement, proposeAgentProfileImprovement, proposeAuthoredAgentProfileImprovement, pullCertified, resolveEffort, resolveIntelligenceBaseUrl, resolveRedactor, reviewAgentImprovementProposal, runAgentCandidateExperiment, submitAgentImprovementProposal, verifyAgentImprovementActivation, verifyAgentImprovementActivationResult, verifyAgentImprovementProposal, verifyAgentImprovementReview, verifyCandidateExecutionEvidence, withIntelligence };
 //# sourceMappingURL=intelligence.d.ts.map