@tangle-network/agent-runtime 0.190.0 → 0.191.0

package/dist/{stream-agent-turn-uqzf9ZEh.d.ts → stream-agent-turn-_GgUW49y.d.ts}

@@ -1,9 +1,41 @@
 import { J as AgentTaskStatus, Y as BackendErrorDetail, at as RuntimeStreamEvent } from "./types-BdolQ6Zi.js";
-import { p as ExecutorFactory } from "./types-02hXqnSP.js";
+import { p as ExecutorFactory } from "./types-DKA_PDv0.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 import { AgentRunOutcome } from "@tangle-network/sandbox/runtime";
 import { PromptOptions, SandboxEvent, SandboxInstance } from "@tangle-network/sandbox";
 import { AgentTurnInput, AgentTurnInput as AgentTurnInput$1 } from "@tangle-network/agent-interface/environment-provider";
+//#region src/redact.d.ts
+/**
+ *
+ * Redaction for values that may leave the Runtime process. The default scrubs
+ * common leak classes (API keys, bearer tokens, emails, private keys) from
+ * strings and walks nested objects and arrays. A customer with domain-specific
+ * PII supplies their own `redact` hook.
+ *
+ * This is intentionally narrower than `src/sanitize.ts` (which redacts the
+ * runtime's *event envelope* field-by-field): here the value is opaque
+ * customer payload, so the scrub is value-shaped, not schema-shaped.
+ *
+ * @experimental
+ */
+/** A redactor maps an arbitrary trace value to a safe-to-export value. Pure;
+ *  must not throw on cyclic input (the default tolerates cycles). */
+type Redactor = (value: unknown) => unknown;
+/**
+ * The built-in redactor. Walks objects and arrays; replaces values under
+ * secret-bearing keys wholesale; scrubs in-value patterns from every string.
+ * Cycle-safe (a seen-set short-circuits self-referential payloads to
+ * `'[circular]'`), depth-bounded, and total — never throws on customer input.
+ */
+declare function defaultRedactor(value: unknown): unknown;
+/**
+ * Resolve the redactor a client uses. A caller-supplied hook handles
+ * domain-specific values first, then the built-in scrubber still removes
+ * common credentials and email addresses. Returning `false` is the explicit
+ * opt-out for already-reviewed public values.
+ */
+declare function resolveRedactor(redact: Redactor | false | undefined): Redactor;
+//#endregion
 //#region src/runtime/stream-agent-turn.d.ts
 /**
  * The execution substrate one turn runs on — a closed discriminated union over
@@ -124,5 +156,5 @@ declare function streamAgentTurn(backend: AgentTurnBackend, input: AgentTurnInpu
  */
 declare function collectAgentTurn(stream: AsyncIterable<RuntimeStreamEvent>): Promise<CollectedAgentTurn>;
 //#endregion
-export { StreamAgentTurnOptions as a, CollectedAgentTurn as i, AgentTurnInput$1 as n, collectAgentTurn as o, AgentTurnUsage as r, streamAgentTurn as s, AgentTurnBackend as t };
-//# sourceMappingURL=stream-agent-turn-uqzf9ZEh.d.ts.map
+export { StreamAgentTurnOptions as a, Redactor as c, CollectedAgentTurn as i, defaultRedactor as l, AgentTurnInput$1 as n, collectAgentTurn as o, AgentTurnUsage as r, streamAgentTurn as s, AgentTurnBackend as t, resolveRedactor as u };
+//# sourceMappingURL=stream-agent-turn-_GgUW49y.d.ts.map

package/dist/{structural-rollout-0NKvKuFm.js → structural-rollout-ChpGSR0q.js}

@@ -2,7 +2,7 @@ import { n as streamAgentTurn, t as collectAgentTurn } from "./stream-agent-turn
 import { i as InMemorySpawnJournal, r as InMemoryResultBlobStore } from "./spawn-journal-B9eTmVAn.js";
 import { t as executableAgentProfileSnapshot } from "./executable-spec-DxuiDFAU.js";
 import { c as profileModelExecutionSettings, i as concreteModelId, o as enforceTokenLimits, t as assertExecutableAgentProfile } from "./model-policy-Wf2MxXJ9.js";
-import { Jt as observedModelMatchesDeclared, at as createExecutor, f as withDriverExecutor, n as createSupervisor, nt as captureReusableExecutorConfig } from "./supervisor-CqJW4qap.js";
+import { Zt as observedModelMatchesDeclared, a as createSupervisor, at as captureReusableExecutorConfig, ct as createExecutor, h as withDriverExecutor } from "./redact-BP8Xn2A3.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { costForTokenPricing, makeProposalFinding } from "@tangle-network/agent-eval";
 import { randomBytes } from "node:crypto";
@@ -1727,4 +1727,4 @@ function structuralRollout(config = {}) {
 //#endregion
 export { observe as C, optimizerMethod as D, profileOptimizerModelCall as E, strategyAuthorMethod as O, defaultAnalystInstruction as S, profileChatClient as T, depthStrategy as _, defaultStructuralRolloutPolicy as a, sample as b, officialChecksFromMeta as c, selectBestIndex as d, structuralRollout as f, defineStrategy as g, breadthStrategy as h, defaultExtractCandidate as i, resolveEntrySymbol as l, adaptiveRefine as m, compareCheckOutcomes as n, filterAuthoredAsserts as o, visibleCheckScore as p, composeCheckSources as r, modelAuthoredChecks as s, canDisplace as t, sandboxCheckRunner as u, refine as v, renderReport as w, sampleThenRefine as x, runAgentic as y };
 
-//# sourceMappingURL=structural-rollout-0NKvKuFm.js.map
+//# sourceMappingURL=structural-rollout-ChpGSR0q.js.map