@tangle-network/agent-runtime 0.173.0 → 0.174.0

package/dist/{activation-DkZiIzqK.js → activation-DQo7-oIF.js}

@@ -1,5 +1,5 @@
 import { at as canonicalCandidateDocument, ct as immutableCandidateValue, dt as verifyCanonicalCandidateDocument, it as canonicalCandidateDigest$1 } from "./prepare-BAyaNoZu.js";
-import { A as agentImprovementTargetInput, M as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal, k as agentImprovementTargetDigest } from "./improvement-cycle-lP-F7B60.js";
+import { A as agentImprovementTargetInput, M as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal, k as agentImprovementTargetDigest } from "./improvement-cycle-BZH9dewp.js";
 import { agentImprovementActivationResultSchema, agentImprovementActivationSchema, agentProfileImprovementExperimentSchema } from "@tangle-network/agent-interface";
 //#region src/intelligence/activation.ts
 /** Create the exact result a product stores in the same transaction as its target write. */
@@ -201,4 +201,4 @@ function targetIdentity(target) {
 //#endregion
 export { executeAgentImprovementActivation as n, verifyAgentImprovementActivationResult as r, createAgentImprovementActivationResult as t };
 
-//# sourceMappingURL=activation-DkZiIzqK.js.map
+//# sourceMappingURL=activation-DQo7-oIF.js.map

package/dist/{activation-DkZiIzqK.js.map → activation-DQo7-oIF.js.map}

@@ -1 +1 @@
-{"version":3,"file":"activation-DkZiIzqK.js","names":["canonicalCandidateDigest"],"sources":["../src/intelligence/activation.ts"],"sourcesContent":["import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;;AA6IA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}
+{"version":3,"file":"activation-DQo7-oIF.js","names":["canonicalCandidateDigest"],"sources":["../src/intelligence/activation.ts"],"sourcesContent":["import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;;AA6IA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}

package/dist/{improvement-cycle-lP-F7B60.js → improvement-cycle-BZH9dewp.js}

@@ -12,11 +12,78 @@ import { campaignScenarioIdentity, campaignSplitDigestFromIdentities, compareOpt
 import { createHash, randomUUID } from "node:crypto";
 import { basename, join, resolve } from "node:path";
 import { realpath } from "node:fs/promises";
-import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
+import { existsSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync } from "node:fs";
 import { spawnSync } from "node:child_process";
+import { tmpdir } from "node:os";
 import { isDeepStrictEqual } from "node:util";
 import { assertProposalFindings } from "@tangle-network/agent-eval/analyst";
 import { measuredComparisonFromAgentProfileImprovementExperiment, measuredComparisonFromCandidateExperiment, runAgentProfileImprovementExperiment, runCandidateExperiment, sealAgentProfileImprovementExperiment, sealAgentProfileImprovementSuite, sealAgentProfileImprovementTask, sealCandidateExperiment, selfImprove, verifyAgentProfileImprovementExperimentComparison, verifyCandidateExperiment, verifyCandidateExperimentComparison } from "@tangle-network/agent-eval/contract";
+//#region src/improvement/worktree-tree.ts
+/**
+* The exact content of a candidate worktree, as a Git tree object.
+*
+* A multi-shot candidate edits ONE directory in place, so the tree a shot
+* produced is gone as soon as the next shot writes over it. Writing that
+* content into the object store is what makes an earlier tree recoverable:
+* `agenticGenerator` snapshots a tree that verified, and puts it back when a
+* later shot ends the budget on a worse one.
+*
+* The snapshot stages into a PRIVATE index file, so the index the driver later
+* commits from is untouched.
+*/
+/** Write the worktree's current content into the object store and return its tree id. */
+function snapshotWorktreeTree(worktreePath) {
+	const scratch = mkdtempSync(join(tmpdir(), "agentic-generator-tree-"));
+	const indexFile = join(scratch, "index");
+	try {
+		git(worktreePath, ["read-tree", "HEAD"], indexFile);
+		git(worktreePath, ["add", "--all"], indexFile);
+		return git(worktreePath, ["write-tree"], indexFile);
+	} finally {
+		rmSync(scratch, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+/**
+* Put a snapshotted tree back into the worktree, then prove the directory
+* holds exactly that tree.
+*
+* The proof is not ceremony: a restore that lands the wrong bytes ships the
+* wrong candidate, and every artifact downstream still reads as though the
+* best tree shipped.
+*/
+function restoreWorktreeTree(worktreePath, tree) {
+	git(worktreePath, [
+		"read-tree",
+		"-u",
+		"--reset",
+		tree
+	]);
+	git(worktreePath, [
+		"clean",
+		"--force",
+		"-d",
+		"--quiet"
+	]);
+	const restored = snapshotWorktreeTree(worktreePath);
+	if (restored !== tree) throw new Error(`agenticGenerator: restoring tree ${tree} into ${worktreePath} produced ${restored}`);
+}
+function git(cwd, args, indexFile) {
+	const env = { ...process.env };
+	if (indexFile) env.GIT_INDEX_FILE = indexFile;
+	else delete env.GIT_INDEX_FILE;
+	const result = spawnSync("git", args, {
+		cwd,
+		encoding: "utf-8",
+		env
+	});
+	if (result.error) throw new Error(`agenticGenerator: git ${args[0]} failed to spawn in ${cwd}: ${result.error.message}`);
+	if (result.status !== 0) throw new Error(`agenticGenerator: git ${args[0]} exited ${result.status} in ${cwd}: ${result.stderr.trim()}`);
+	return result.stdout.trim();
+}
+//#endregion
 //#region src/improvement/agentic-generator.ts
 /**
 *
@@ -43,10 +110,20 @@ import { measuredComparisonFromAgentProfileImprovementExperiment, measuredCompar
 *       (the worktree persists, so the harness RESUMES atop its own failing
 *       edits with the error in hand — no session-specific retry path needed)
 *   - dirty + `verify` ok (or no verifier configured) → return the candidate
+*   - dirty + `verify` ok + `keepGoing` → bank the tree and spend the next shot
 * A candidate that never verifies within `maxShots` is discarded (`applied:
 * false`), never shipped — if you configured a verifier, a non-passing tree is
 * not a candidate. With no verifier, the first dirty shot is the candidate.
 *
+* BEST-OF-N is the `keepGoing` path, and the loop owns it end to end. A
+* verifier that passes a tree and asks for another shot has its tree
+* snapshotted as a Git tree object; when the budget ends, the highest-`score`
+* tree is RESTORED into the worktree and returned as the candidate. So the
+* caller ranks and the loop moves the bytes — a caller never has to write a
+* passing tree back itself. The budget ends on the last shot, or earlier on a
+* `keepGoing`-less pass, and a last shot that broke or reverted the change does
+* not cost the candidate the verified tree an earlier shot produced.
+*
 * @stable
 */
 const RAW_TRACE_ANALYST_ID = "raw-trace-distiller";
@@ -77,8 +154,31 @@ function agenticGenerator(opts) {
 			const needsRawTraceEvidence = requiresRawTraceEvidence(findings);
 			const shots = Math.max(1, maxShots);
 			let attemptNote = "";
+			let best = null;
+			let scored = null;
+			let lastReceipt = null;
+			/** Ship the best tree this candidate produced, restoring it when a later
+			*  shot wrote over it. */
+			const shipBankedTree = async (receipt, banked) => {
+				const restoredFromShot = banked.onDisk ? null : banked.shot;
+				if (!banked.onDisk) {
+					if (banked.tree === null) throw new Error(`agenticGenerator: shot ${banked.shot} produced the best tree but it was never snapshotted`);
+					restoreWorktreeTree(worktreePath, banked.tree);
+					banked.onDisk = true;
+				}
+				signal.throwIfAborted();
+				await emitShotDisposition(opts.onShotDisposition, receipt, {
+					kind: "accepted",
+					worktreePath,
+					verified: true,
+					restoredFromShot
+				});
+				signal.throwIfAborted();
+				return acceptedCandidate(findings);
+			};
 			for (let shot = 0; shot < shots; shot++) {
 				signal.throwIfAborted();
+				if (best) best.onDisk = false;
 				const taskPrompt = attemptNote ? `${basePrompt}\n\n${attemptNote}` : basePrompt;
 				const startedAt = /* @__PURE__ */ new Date();
 				let turn = null;
@@ -144,6 +244,7 @@ function agenticGenerator(opts) {
 					costReceipt,
 					error: shotError
 				});
+				lastReceipt = receipt;
 				await emitShotReceipt(opts.onShotCompleted, receipt, execution, shotError);
 				signal.throwIfAborted();
 				if (!execution) throw new Error("agenticGenerator: author shot completed without a Runtime turn");
@@ -190,7 +291,8 @@ function agenticGenerator(opts) {
 					await emitShotDisposition(opts.onShotDisposition, receipt, {
 						kind: "accepted",
 						worktreePath,
-						verified: false
+						verified: false,
+						restoredFromShot: null
 					});
 					signal.throwIfAborted();
 					return acceptedCandidate(findings);
@@ -205,14 +307,35 @@ function agenticGenerator(opts) {
 					return rethrowShotSetupError(opts.onShotDisposition, receipt, worktreePath, "verification", cause);
 				}
 				if (result.ok) {
+					const score = admittedScore(result, scored, shot);
+					scored = score !== null;
+					const previousBest = best;
+					let banked;
+					if (previousBest === null || (score ?? 0) >= (previousBest.score ?? 0)) banked = {
+						shot: shot + 1,
+						score,
+						tree: null,
+						onDisk: true
+					};
+					else banked = previousBest;
+					const becomesBest = banked !== previousBest;
+					best = banked;
+					if (result.keepGoing !== true) {
+						signal.throwIfAborted();
+						return await shipBankedTree(receipt, banked);
+					}
+					if (becomesBest && shot < shots - 1) banked.tree = snapshotWorktreeTree(worktreePath);
 					signal.throwIfAborted();
 					await emitShotDisposition(opts.onShotDisposition, receipt, {
-						kind: "accepted",
+						kind: "kept",
 						worktreePath,
-						verified: true
+						score,
+						best: becomesBest,
+						feedback: result.feedback ?? null
 					});
 					signal.throwIfAborted();
-					return acceptedCandidate(findings);
+					attemptNote = keptNote(result.feedback);
+					continue;
 				}
 				signal.throwIfAborted();
 				await emitShotDisposition(opts.onShotDisposition, receipt, {
@@ -224,6 +347,10 @@ function agenticGenerator(opts) {
 				signal.throwIfAborted();
 				attemptNote = failureNote(result.feedback);
 			}
+			if (best !== null) {
+				if (!lastReceipt) throw new Error("agenticGenerator: a tree was banked without a shot receipt");
+				return await shipBankedTree(lastReceipt, best);
+			}
 			return {
 				applied: false,
 				summary: ""
@@ -231,6 +358,14 @@ function agenticGenerator(opts) {
 		}
 	};
 }
+/** The rank a passing tree carries, refusing a set of trees that cannot be ordered. */
+function admittedScore(result, scored, shot) {
+	const has = result.score !== void 0;
+	if (scored !== null && has !== scored) throw new Error(`agenticGenerator: verify ${has ? "scored" : "did not score"} the tree from shot ${shot + 1} and ${scored ? "scored" : "did not score"} an earlier passing tree; a scored tree cannot be ranked against an unscored one`);
+	if (!has) return null;
+	if (typeof result.score !== "number" || !Number.isFinite(result.score)) throw new Error(`agenticGenerator: verify returned a non-finite score (${String(result.score)}) for shot ${shot + 1}`);
+	return result.score;
+}
 async function emitShotReceipt(callback, receipt, execution, primaryError) {
 	try {
 		await callback?.(receipt, execution);
@@ -373,6 +508,18 @@ function failureNote(feedback) {
 		detail ? `Verifier output:\n${truncate$1(detail, 4e3)}` : "No verifier detail was captured."
 	].join("\n");
 }
+/** Next-shot feedback when the worktree PASSED and the verifier asked for
+*  another shot. The passing tree is banked, so the author is told to improve
+*  it rather than protect it — a worse tree cannot cost it the candidate. */
+function keptNote(feedback) {
+	const detail = feedback?.trim();
+	return [
+		"NOTE: your edits are in the working tree and verification PASSED.",
+		"Shots remain in this budget — keep improving the change in place, do not revert it.",
+		"The best version you produce is the one that ships.",
+		detail ? `Verifier output:\n${truncate$1(detail, 4e3)}` : "No verifier detail was captured."
+	].join("\n");
+}
 function rawTraceEvidenceProblem(worktreePath, findings) {
 	if (worktreeChangedPaths(worktreePath).filter((path) => path !== RAW_TRACE_DIAGNOSIS_PATH).length === 0) return [`NOTE: raw-trace mode requires a real code/config edit in addition to ${RAW_TRACE_DIAGNOSIS_PATH}.`, "Your previous attempt only changed the diagnosis artifact. Inspect the cited traces and make the causal code change."].join("\n");
 	const diagnosisPath = join(worktreePath, RAW_TRACE_DIAGNOSIS_PATH);
@@ -3080,4 +3227,4 @@ function sameOrderedValues(left, right) {
 //#endregion
 export { agentImprovementTargetInput as A, ROLLOUT_POLICY_EXTENSION as B, optimizationActivationReceiptFromMetadata as C, agentImprovementProfileSurfaceDigest as D, agentImprovementProfileDiffs as E, isAgentImprovementProfileSurface as F, structuralRolloutPolicyFromProfile as G, normalizeRolloutPolicy as H, isAgentProfileMeasuredSurface as I, defaultBuildPrompt as J, agenticGenerator as K, improve as L, agentProfileImprovementStateDigest as M, assertProfileImprovementTargetsShareIdentity as N, agentImprovementProfileSurfaceInput as O, buildAgentImprovementActivationTargets as P, withMethodRuntimeControls as R, createOptimizationActivationReceipt as S, AGENT_PROFILE_MEASURED_SURFACES as T, parseRolloutPolicy as U, applyRolloutPolicyToProfile as V, serializeRolloutPolicy as W, profilePolicyWithBudget as _, executeAgentCandidateExperimentCell as a, profileTaskScenarioIdentity as b, requireSealedCandidateExperiment as c, verifyAgentImprovementActivation as d, verifyAgentImprovementProposal as f, profileImprovementMetadata as g, createProfileImprovementCostLedger as h, createAgentImprovementProposal as i, agentImprovementTargetProfileDiffs as j, agentImprovementTargetDigest as k, reviewAgentImprovementProposal as l, verifyCandidateExecutionEvidence as m, createAgentImprovementActivation as n, proposeAgentImprovement as o, verifyAgentImprovementReview as p, commandVerifier as q, createAgentImprovementMeasuredComparison as r, proposeAgentProfileImprovement as s, AgentCandidateExperimentCellExecutionError as t, runAgentCandidateExperiment as u, profilePreparationAccounting as v, AGENT_IMPROVEMENT_PROFILE_SURFACES as w, sealProfileImprovementBenchmark as x, profileStateDigest as y, rawTraceDistiller as z };
 
-//# sourceMappingURL=improvement-cycle-lP-F7B60.js.map
+//# sourceMappingURL=improvement-cycle-BZH9dewp.js.map