@tangle-network/agent-runtime 0.264.0 → 0.271.0

package/dist/{activation-Bx4kfVU3.d.ts → activation-BrJmwTLB.d.ts}

@@ -1,4 +1,4 @@
-import { f as ExecutorConfig, i as CollectedAgentTurn, r as AgentTurnUsage } from "./stream-agent-turn-D1zelVx6.js";
+import { f as ExecutorConfig, i as CollectedAgentTurn, r as AgentTurnUsage } from "./stream-agent-turn-DbEsKgb_.js";
 import { AgentCandidateBundle, AgentImprovementActivation, AgentImprovementActivationOutcome, AgentImprovementActivationResult, AgentImprovementActivationTarget, AgentImprovementProposal, AgentImprovementReview, AgentImprovementSurface, AgentProfile, AgentProfileDiff, AgentProfileImprovementChange, AgentProfileImprovementExperiment, AgentTrainingReceipt, AgentTrainingTask, HarnessType, ReasoningEffort, Sha256Digest } from "@tangle-network/agent-interface";
 import { CostLedgerHandle, MaximumCharge, ProposalFinding } from "@tangle-network/agent-eval";
 import { CampaignScenarioIdentity, CompareOptimizationMethodsOptions, OptimizationMethod, OptimizationMethodComparison, WorktreeAdapter } from "@tangle-network/agent-eval/campaign";
@@ -417,7 +417,7 @@ interface ImprovementMaterializedProfilePopulationCandidate {
   surfaceDigest: Sha256Digest;
   /** Exact complete profile produced by Runtime's configured materializer. */
   profile: ReadonlyAgentProfile;
-  /** Interface identity of `profile`. */
+  /** `canonicalAgentProfileDigest(profile)`: the one AgentProfile identity Runtime records. */
   profileDigest: Sha256Digest;
   /** Ordered Interface diffs that reproduce `profile` from the baseline. */
   diffs: readonly AgentProfileDiff[];
@@ -497,7 +497,7 @@ interface ImproveLineage {
   scenarioPartitions?: ImproveScenarioPartitions;
   /** Complete callback, materializer, model, tool, and closure identity for a profile run. */
   executionRef?: Sha256Digest;
-  /** Complete baseline profile identity for a profile run. */
+  /** `canonicalAgentProfileDigest` of the baseline profile for a profile run. */
   baselineProfileDigest?: Sha256Digest;
 }
 interface ImproveResultBase<TCandidate extends ImprovementCandidate> {
@@ -768,4 +768,4 @@ declare function verifyAgentImprovementActivationResult(input: {
 declare function executeAgentImprovementActivation(input: ExecuteAgentImprovementActivationInput, options: ExecuteAgentImprovementActivationOptions): Promise<AgentImprovementActivationResult>;
 //#endregion
 export { ImprovementMaterializedProfilePopulationCandidate as $, ImproveCodeResult as A, ImproveMethodSource as B, TrainingBoundaryResult as C, CandidateGenerator as Ct, ImproveCandidateValidator as D, ImproveCandidateValidationInput as E, ImproveMethodContext as F, ImproveProfileSurface as G, ImproveOptions as H, ImproveMethodFactory as I, ImproveScenarioPartitions as J, ImproveResult as K, ImproveMethodLineage as L, ImproveCost as M, ImproveCustomCodeGeneratorOptions as N, ImproveCodeBaseOptions as O, ImproveLineage as P, ImprovementCodeCandidate as Q, ImproveMethodOptions as R, ProfileTrainerRequest as S, defaultBuildPrompt as St, createCommandProfileTrainer as T, ImproveProfileAgent as U, ImproveOptimizationRunOptions as V, ImproveProfileComponents as W, ImproveSurface as X, ImproveSkillsOptions as Y, ImprovementCandidate as Z, CheckpointServingPort as _, AgenticGeneratorShotReceipt as _t, AgentImprovementActivationTransitionInput as a, ImprovementProfilePopulationCandidate as at, ImproveTrainingResult as b, agenticGenerator as bt, CreateAgentImprovementActivationResultOptions as c, ImprovementProfilePopulationLineageNode as ct, ProfileImprovementActivationTransitionInput as d, DeepReadonly as dt, ImprovementProfileCandidate as et, SealedCandidateActivationTransitionInput as f, ReadonlyAgentProfile as ft, improve as g, AgenticGeneratorShotExecution as gt, verifyAgentImprovementActivationResult as h, AgenticGeneratorShotDisposition as ht, AgentImprovementActivationTransition as i, ImprovementProfilePopulationArtifactSource as it, ImproveCodeRunOptions as j, ImproveCodeOptions as k, ExecuteAgentImprovementActivationInput as l, ImprovementProfilePopulationObservationSource as lt, executeAgentImprovementActivation as m, AgenticGeneratorOptions as mt, AgentImprovementActivationResultStore as n, ImprovementProfileCandidatePopulationAvailable as nt, AgentProfileImprovementActivationOperation as o, ImprovementProfilePopulationCandidateSource as ot, createAgentImprovementActivationResult as p, AgenticGeneratorExecutorForWorktree as pt, ImproveRuntimeCodeGeneratorOptions as q, AgentImprovementActivationTargetPlan as r, ImprovementProfileCandidatePopulationUnavailable as rt, AgentProfileImprovementActivationTargetPlan as s, ImprovementProfilePopulationLineage as st, AgentImprovementActivationReconciliation as t, ImprovementProfileCandidatePopulation as tt, ExecuteAgentImprovementActivationOptions as u, ImprovementRefusedProfilePopulationCandidate as ut, ControlledTrainingCommand as v, Verifier as vt, TrainingDatasetDocument as w, ProfileTrainer as x, commandVerifier as xt, ImproveTrainingOptions as y, VerifyResult as yt, ImproveMethodResult as z };
-//# sourceMappingURL=activation-Bx4kfVU3.d.ts.map
+//# sourceMappingURL=activation-BrJmwTLB.d.ts.map

package/dist/{activation-DHFdvps3.js → activation-DGbFPGR3.js}

@@ -1,5 +1,5 @@
 import { A as verifyCanonicalCandidateDocument, C as canonicalCandidateDigest$1, D as immutableCandidateValue, w as canonicalCandidateDocument } from "./workspace-archive-C9lgf77y.js";
-import { A as agentImprovementTargetInput, M as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal, k as agentImprovementTargetDigest } from "./improvement-cycle-WRWcFyuO.js";
+import { A as agentImprovementTargetInput, M as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal, k as agentImprovementTargetDigest } from "./improvement-cycle-1IyRJo5h.js";
 import { agentImprovementActivationResultSchema, agentImprovementActivationSchema, agentProfileImprovementExperimentSchema } from "@tangle-network/agent-interface";
 //#region src/runtime-usage.ts
 function createRuntimeUsageTotals() {
@@ -231,4 +231,4 @@ function targetIdentity(target) {
 //#endregion
 export { createRuntimeUsageTotals as a, addRuntimeUsage as i, executeAgentImprovementActivation as n, isUsageAmount as o, verifyAgentImprovementActivationResult as r, createAgentImprovementActivationResult as t };
 
-//# sourceMappingURL=activation-DHFdvps3.js.map
+//# sourceMappingURL=activation-DGbFPGR3.js.map

package/dist/{activation-DHFdvps3.js.map → activation-DGbFPGR3.js.map}

@@ -1 +1 @@
-{"version":3,"file":"activation-DHFdvps3.js","names":["canonicalCandidateDigest"],"sources":["../src/runtime-usage.ts","../src/intelligence/activation.ts"],"sourcesContent":["import type { RuntimeStreamEvent } from './types'\n\n/** Observed subtotals, with missing measurements kept separate from measured zeroes. */\nexport interface RuntimeUsageTotals {\n  /** Observed input tokens across normalized per-call events. */\n  tokensIn: number\n  /** Observed output tokens across normalized per-call events. */\n  tokensOut: number\n  /** Observed dollar subtotal; incomplete when `usdKnown` is false. */\n  costUsd: number\n  /** Number of observed model calls, including unpriced or incompletely metered calls. */\n  llmCalls: number\n  /** False when any observed call has incomplete token usage. */\n  tokensKnown?: false\n  /** False when any observed call lacks complete provider-billed cost. */\n  usdKnown?: false\n  /** Sum of reported external estimates; never included in `costUsd` or proof of complete cost. */\n  estimatedCostUsd?: number\n}\n\nexport function createRuntimeUsageTotals(): RuntimeUsageTotals {\n  return { tokensIn: 0, tokensOut: 0, costUsd: 0, llmCalls: 0 }\n}\n\nexport function isUsageAmount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0\n}\n\n/** Fold normalized per-call events. Backend adapters own cumulative receipt reconciliation. */\nexport function addRuntimeUsage(\n  totals: RuntimeUsageTotals,\n  event: Extract<RuntimeStreamEvent, { type: 'llm_call' }>,\n): void {\n  totals.llmCalls += 1\n  for (const key of ['tokensIn', 'tokensOut', 'costUsd'] as const) {\n    const value = event[key]\n    if (isUsageAmount(value)) totals[key] += value\n    else if (key === 'costUsd') totals.usdKnown = false\n    else totals.tokensKnown = false\n  }\n  if (event.tokensKnown === false) totals.tokensKnown = false\n  if (event.usdKnown === false) totals.usdKnown = false\n  if (isUsageAmount(event.estimatedCostUsd)) {\n    totals.estimatedCostUsd = (totals.estimatedCostUsd ?? 0) + event.estimatedCostUsd\n  }\n}\n","import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;AAoBA,SAAgB,2BAA+C;CAC7D,OAAO;EAAE,UAAU;EAAG,WAAW;EAAG,SAAS;EAAG,UAAU;CAAE;AAC9D;AAEA,SAAgB,cAAc,OAAiC;CAC7D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS;AACzE;;AAGA,SAAgB,gBACd,QACA,OACM;CACN,OAAO,YAAY;CACnB,KAAK,MAAM,OAAO;EAAC;EAAY;EAAa;CAAS,GAAY;EAC/D,MAAM,QAAQ,MAAM;EACpB,IAAI,cAAc,KAAK,GAAG,OAAO,QAAQ;OACpC,IAAI,QAAQ,WAAW,OAAO,WAAW;OACzC,OAAO,cAAc;CAC5B;CACA,IAAI,MAAM,gBAAgB,OAAO,OAAO,cAAc;CACtD,IAAI,MAAM,aAAa,OAAO,OAAO,WAAW;CAChD,IAAI,cAAc,MAAM,gBAAgB,GACtC,OAAO,oBAAoB,OAAO,oBAAoB,KAAK,MAAM;AAErE;;;;ACgGA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}
+{"version":3,"file":"activation-DGbFPGR3.js","names":["canonicalCandidateDigest"],"sources":["../src/runtime-usage.ts","../src/intelligence/activation.ts"],"sourcesContent":["import type { RuntimeStreamEvent } from './types'\n\n/** Observed subtotals, with missing measurements kept separate from measured zeroes. */\nexport interface RuntimeUsageTotals {\n  /** Observed input tokens across normalized per-call events. */\n  tokensIn: number\n  /** Observed output tokens across normalized per-call events. */\n  tokensOut: number\n  /** Observed dollar subtotal; incomplete when `usdKnown` is false. */\n  costUsd: number\n  /** Number of observed model calls, including unpriced or incompletely metered calls. */\n  llmCalls: number\n  /** False when any observed call has incomplete token usage. */\n  tokensKnown?: false\n  /** False when any observed call lacks complete provider-billed cost. */\n  usdKnown?: false\n  /** Sum of reported external estimates; never included in `costUsd` or proof of complete cost. */\n  estimatedCostUsd?: number\n}\n\nexport function createRuntimeUsageTotals(): RuntimeUsageTotals {\n  return { tokensIn: 0, tokensOut: 0, costUsd: 0, llmCalls: 0 }\n}\n\nexport function isUsageAmount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0\n}\n\n/** Fold normalized per-call events. Backend adapters own cumulative receipt reconciliation. */\nexport function addRuntimeUsage(\n  totals: RuntimeUsageTotals,\n  event: Extract<RuntimeStreamEvent, { type: 'llm_call' }>,\n): void {\n  totals.llmCalls += 1\n  for (const key of ['tokensIn', 'tokensOut', 'costUsd'] as const) {\n    const value = event[key]\n    if (isUsageAmount(value)) totals[key] += value\n    else if (key === 'costUsd') totals.usdKnown = false\n    else totals.tokensKnown = false\n  }\n  if (event.tokensKnown === false) totals.tokensKnown = false\n  if (event.usdKnown === false) totals.usdKnown = false\n  if (isUsageAmount(event.estimatedCostUsd)) {\n    totals.estimatedCostUsd = (totals.estimatedCostUsd ?? 0) + event.estimatedCostUsd\n  }\n}\n","import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;AAoBA,SAAgB,2BAA+C;CAC7D,OAAO;EAAE,UAAU;EAAG,WAAW;EAAG,SAAS;EAAG,UAAU;CAAE;AAC9D;AAEA,SAAgB,cAAc,OAAiC;CAC7D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS;AACzE;;AAGA,SAAgB,gBACd,QACA,OACM;CACN,OAAO,YAAY;CACnB,KAAK,MAAM,OAAO;EAAC;EAAY;EAAa;CAAS,GAAY;EAC/D,MAAM,QAAQ,MAAM;EACpB,IAAI,cAAc,KAAK,GAAG,OAAO,QAAQ;OACpC,IAAI,QAAQ,WAAW,OAAO,WAAW;OACzC,OAAO,cAAc;CAC5B;CACA,IAAI,MAAM,gBAAgB,OAAO,OAAO,cAAc;CACtD,IAAI,MAAM,aAAa,OAAO,OAAO,WAAW;CAChD,IAAI,cAAc,MAAM,gBAAgB,GACtC,OAAO,oBAAoB,OAAO,oBAAoB,KAAK,MAAM;AAErE;;;;ACgGA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}

package/dist/agent.d.ts

@@ -1,6 +1,6 @@
-import { Ci as AgentRunSpec, Da as RuntimeStreamEvent, Ji as SandboxClient, Ki as OutputAdapter } from "./types-BV14WTyW.js";
+import { Pi as AgentRunSpec, Ra as RuntimeStreamEvent, aa as SandboxClient, ra as OutputAdapter } from "./types-Bo7z5aG5.js";
 import { a as createSurfaceImprovementProposer, c as SurfaceValidationIssue, d as validateSurfaces, i as SurfaceImprovementEdit, l as renderSurfaceIssues, n as DraftPatchInput, o as AgentSurfaces, r as DraftPatchOutput, s as ResolvedSurface, t as CreateSurfaceImprovementProposerOptions, u as resolveSubjectPath } from "./improvement-adapter-D5gwwoXQ.js";
-import { Cm as promptOnlyProfileMaterialization, Dm as validateProfileMaterialization, Em as sandboxActProfileMaterialization, Om as worktreeCliProfileMaterialization, Sm as promptModelProfileMaterialization, Tm as renderProfileMaterializationIssues, _m as controlProfileMaterialization, bm as profileMaterializationAxes, cm as AgentProfileMaterializationAxis, dm as DefineProfileMaterializationContractOptions, fm as KnownAgentProfileMaterializationAxis, gm as assertProfileMaterialization, hm as ValidateProfileMaterializationOptions, lm as AssertProfileMaterializationOptions, mm as ProfileMaterializationIssue, pm as ProfileMaterializationContract, sm as AGENT_PROFILE_MATERIALIZATION_AXES, um as CanonicalAgentProfileMaterializationAxis, vm as defineProfileMaterializationContract, wm as promptResourceProfileMaterialization, xm as promptControlProfileMaterialization, ym as fullProfileMaterialization } from "./index-9wXpbjbX.js";
+import { Am as renderProfileMaterializationIssues, Cm as defineProfileMaterializationContract, Dm as promptModelProfileMaterialization, Em as promptControlProfileMaterialization, Mm as validateProfileMaterialization, Nm as worktreeCliProfileMaterialization, Om as promptOnlyProfileMaterialization, Sm as controlProfileMaterialization, Tm as profileMaterializationAxes, _m as KnownAgentProfileMaterializationAxis, bm as ValidateProfileMaterializationOptions, fm as AGENT_PROFILE_MATERIALIZATION_AXES, gm as DefineProfileMaterializationContractOptions, hm as CanonicalAgentProfileMaterializationAxis, jm as sandboxActProfileMaterialization, km as promptResourceProfileMaterialization, mm as AssertProfileMaterializationOptions, pm as AgentProfileMaterializationAxis, vm as ProfileMaterializationContract, wm as fullProfileMaterialization, xm as assertProfileMaterialization, ym as ProfileMaterializationIssue } from "./index-CL1dduJd.js";
 import { AgentProfile, AgentProfileFileMount, AgentProfileMcpServer } from "@tangle-network/agent-interface";
 import { TraceAnalystDefinition } from "@tangle-network/agent-eval";
 import { SandboxEvent } from "@tangle-network/sandbox";

package/dist/agent.js

@@ -1,5 +1,5 @@
-import { $r as sandboxActProfileMaterialization, Gr as fullProfileMaterialization, Hr as assertProfileMaterialization, Jr as promptModelProfileMaterialization, Kr as profileMaterializationAxes, Ri as mapSandboxEvent, Ur as controlProfileMaterialization, Vr as AGENT_PROFILE_MATERIALIZATION_AXES, Wr as defineProfileMaterializationContract, Xr as promptResourceProfileMaterialization, Yr as promptOnlyProfileMaterialization, Zr as renderProfileMaterializationIssues, ni as worktreeCliProfileMaterialization, qr as promptControlProfileMaterialization, ti as validateProfileMaterialization, yn as createSandboxForSpec } from "./supervisor-C26k7X5-.js";
-import "./runtime-CUZC75EX.js";
+import { $r as controlProfileMaterialization, Ji as mapSandboxEvent, Qr as assertProfileMaterialization, Zr as AGENT_PROFILE_MATERIALIZATION_AXES, ai as promptOnlyProfileMaterialization, di as validateProfileMaterialization, ei as defineProfileMaterializationContract, fi as worktreeCliProfileMaterialization, ii as promptModelProfileMaterialization, li as sandboxActProfileMaterialization, ni as profileMaterializationAxes, oi as promptResourceProfileMaterialization, ri as promptControlProfileMaterialization, si as renderProfileMaterializationIssues, ti as fullProfileMaterialization, wn as createSandboxForSpec } from "./supervisor-Cvd5mf7x.js";
+import "./runtime-DVjIH1eo.js";
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";

package/dist/{coordination-driver-Bz-H17bC.js → coordination-driver-iBGMKDvB.js}

@@ -1,4 +1,4 @@
-import { Ct as FileSpawnJournal, Ft as workerTraceAnalysisStore, Gi as chargedTokens, Lt as assertValidBudget, Oi as detachedFrozen, Pt as parseWorkerToolTraceArtifact, Qt as createInbox, St as FileResultBlobStore, T as meterRuntimeOwnedProviderAttempt, Tt as InMemorySpawnJournal, W as scopeRetainedOwnerResourceReader, Xi as promptCacheTokenClasses, Y as resolveSpawnResourcePaths, a as pickBestDelivered, aa as addResourceSpend, ai as prepareJsonlAppend, cn as isTerminalNodeStatus, ct as freeSlots, gi as providerAttemptEvidence, gt as createExecutorRegistry, kn as runBrainLoop, na as unmeteredSpend, nr as resolveRedactor, o as runFinalizer, oi as readCommittedJsonLines, ot as errMessage, r as bestDelivered, rn as createPeerMailbox, s as runTree, sa as withBudgetResources, si as writeAllBytes, sn as isLiveNodeStatus, wt as InMemoryResultBlobStore, y as withDriverExecutor } from "./supervisor-C26k7X5-.js";
+import { Ct as FileResultBlobStore, D as meterRuntimeOwnedProviderAttempt, Ei as providerAttemptEvidence, Et as InMemorySpawnJournal, Ht as assertValidBudget, Pn as runBrainLoop, Q as resolveSpawnResourcePaths, Ri as detachedFrozen, Rt as parseWorkerToolTraceArtifact, Tt as InMemoryResultBlobStore, Zn as errMessage, _a as withBudgetResources, _i as writeAllBytes, _t as createExecutorRegistry, b as withDriverExecutor, c as runTree, cn as createPeerMailbox, dr as resolveRedactor, fa as unmeteredSpend, fn as isLiveNodeStatus, gi as readCommittedJsonLines, ha as addResourceSpend, hi as prepareJsonlAppend, i as bestDelivered, o as pickBestDelivered, oa as promptCacheTokenClasses, pn as isTerminalNodeStatus, q as scopeRetainedOwnerResourceReader, rn as createInbox, s as runFinalizer, ta as chargedTokens, wt as FileSpawnJournal, zt as workerTraceAnalysisStore } from "./supervisor-Cvd5mf7x.js";
 import { f as RuntimeRunStateError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { A as writeWorkerCancellation, M as writeWorkerSteerAcknowledgement, b as workerCancellationsDir, c as readWorkerCancelRequests, d as readWorkerSteerRequests, k as writeRunCancellation, l as readWorkerCancellation, o as readRunCancelRequest, r as claimWorkerSteerDelivery, s as readRunCancellation, u as readWorkerSteerAcknowledgement } from "./run-layout-vwd4SwX_.js";
 import { agentProfileSchema, canonicalCandidateDigest } from "@tangle-network/agent-interface";
@@ -518,10 +518,11 @@ const journalEventKinds = [
 *  server name, so the two never collide on the wire — but a driver reads a BARE word out of a
 *  prompt, and a bare word that the harness also publishes resolves to the harness's own tool.
 *  The spawn verb is `spawn_worker` for that reason: the runtime's vocabulary for the spawned
-*  thing is a worker (`workerId`, `maxLiveWorkers`, the per-worker budget), and no known harness
+*  thing is a worker (`workerId`, `workerSlots`, the per-worker budget), and no known harness
 *  publishes that name. `tests/kernel/harness-native-tools.test.ts` holds the set clear. */
 const coordinationVerbNames = [
 	"spawn_worker",
+	"cancel_worker",
 	"observe_agent",
 	"steer_agent",
 	"await_event",
@@ -765,9 +766,12 @@ function shortfallClause(shortfall) {
 	const field = budgetField(channel);
 	if (shortfall.closedByUnknownSpend === true) return `${channel} is closed: work with unmeasured ${channel} usage ran under the run's enforced limit, so this run admits no further spawn at any budget`;
 	const asked = `this spawn asked for budget.${field} ${requested}`;
-	if (free === 0) return `${channel} has nothing free (${asked}); an unused reservation returns only when its live worker settles`;
-	if (channel === "iterations" || channel.startsWith("resource:")) return `${channel} has ${free} free (${asked}); budget.${field} at most ${free} fits`;
-	return `${channel} has ${free} free right now (${asked}); your own turns draw ${channel} from this same pool before a retry is admitted, so ask for well under ${free}`;
+	const held = shortfall.held ?? 0;
+	const most = free + held;
+	if (most === 0) return `${channel} has nothing free and none held by your running workers (${asked})`;
+	const room = held > 0 ? `${free} free now and ${held} held by your running workers, which a spawn waits for` : `${free} free${channel === "iterations" || channel.startsWith("resource:") ? "" : " right now"}`;
+	if (channel === "iterations" || channel.startsWith("resource:")) return `${channel} has ${room} (${asked}); budget.${field} at most ${most} fits`;
+	return `${channel} has ${room} (${asked}); your own turns draw ${channel} from this same pool before a retry is admitted, so ask for well under ${most}`;
 }
 /**
 * The reason text `spawn_worker` returns for a refused spawn. Every rejection kind names its own
@@ -782,7 +786,6 @@ function spawnRefusalReason(reason, shortfalls, pinned) {
 		case "scope-settled": return pinned.scopeSettled;
 		case "scope-aborted": return "this run stopped admitting work (it was cancelled, passed its deadline, or too many children went down); no further worker can start";
 		case "depth-exceeded": return "this spawn would exceed the run's maxDepth; a worker at the deepest level cannot start children of its own";
-		case "max-live-workers": return "the run already has its maximum number of live workers; wait for one to settle (await_event), then spawn again";
 		case "duplicate-key": return "a worker under this key is still live; wait for it to settle, or use a different key for different work";
 		case "key-conflict": return "this key is already recorded for a different profile or task in this run's journal; use a new key for different work";
 		case "invalid-identity": return "a keyed spawn needs a complete execution identity to journal, and this profile and task did not produce one; spawn again without a key";
@@ -817,14 +820,12 @@ function createCoordinationToolsForManager(opts, lifetime) {
 		stopNotified = true;
 		opts.onStop?.(reason);
 	};
-	const completedKeys = /* @__PURE__ */ new Set();
-	const keyByWorker = /* @__PURE__ */ new Map();
 	const profileNameByWorker = /* @__PURE__ */ new Map();
 	const liveHandles = /* @__PURE__ */ new Map();
 	let unkeyedAssignmentOrdinal = nextUnkeyedAssignmentOrdinal(opts.scope);
 	const preflightCounts = emptyPreflightCounts();
-	for (const [key, prior] of opts.scope.resume?.keys ?? []) if (prior.state === "completed") completedKeys.add(key);
 	const nodeForWorker = (id) => opts.scope.view.nodes.find((node) => node.id === id) ?? opts.scope.resume?.view.nodes.find((node) => node.id === id);
+	const descendantOutRefs = /* @__PURE__ */ new Set();
 	const projectSettled = (settled, resumed = false) => {
 		const node = nodeForWorker(settled.handle.id);
 		const assignmentId = settled.handle.assignmentId ?? node?.assignmentId;
@@ -845,8 +846,10 @@ function createCoordinationToolsForManager(opts, lifetime) {
 			...settledAt === void 0 ? {} : { settledAt },
 			...settled.budgetViolation === void 0 ? {} : { budgetViolation: settled.budgetViolation },
 			trace,
+			...settled.subtree === void 0 ? {} : { subtree: settled.subtree },
 			...resumed ? { resumed: true } : {}
 		};
+		for (const result of settled.subtree?.results ?? []) if (result.outRef !== void 0) descendantOutRefs.add(result.outRef);
 		return detachedFrozen(settled.kind === "done" ? {
 			...common,
 			status: "done",
@@ -961,9 +964,7 @@ function createCoordinationToolsForManager(opts, lifetime) {
 		if (v === "continue-without" || v === "blocks-step" || v === "blocks-run") return v;
 		throw new Error("coordination tools: \"urgency\" must be continue-without, blocks-step, or blocks-run");
 	};
-	const commitSettled = (s, w) => {
-		const settledKey = keyByWorker.get(s.handle.id);
-		if (settledKey !== void 0 && s.kind === "done") completedKeys.add(settledKey);
+	const commitSettled = (w) => {
 		ledger.push(w);
 		unwatchWorker(w.id);
 	};
@@ -1187,7 +1188,7 @@ function createCoordinationToolsForManager(opts, lifetime) {
 			}, pending.event.finding.findings);
 			return true;
 		}
-		commitSettled(pending.settled, pending.worker);
+		commitSettled(pending.worker);
 		pendingSettlement = void 0;
 		if (pending.analyze && pending.worker.status === "done" && pending.worker.trace.status === "available" && opts.analyzeOnSettle?.length) {
 			const routes = opts.analyzeOnSettle.map(normalizeAnalyzeOnSettle);
@@ -1715,16 +1716,8 @@ function createCoordinationToolsForManager(opts, lifetime) {
 			defined: definedAnalysts.length
 		};
 	};
-	const maxLiveWorkers = opts.maxLiveWorkers;
-	const localLiveWorkerCount = () => opts.scope.view.nodes.filter((n) => isLiveNodeStatus(n.status)).length;
-	const sharedWorkerCapacity = () => {
-		return opts.scope.workerCapacity;
-	};
-	const usesTreeWideLimit = () => {
-		const capacity = sharedWorkerCapacity();
-		return capacity !== void 0 && capacity.freeSlots !== null;
-	};
-	const liveWorkerCount = () => usesTreeWideLimit() ? sharedWorkerCapacity()?.live ?? localLiveWorkerCount() : localLiveWorkerCount();
+	const liveWorkerCount = () => opts.scope.view.nodes.filter((n) => isLiveNodeStatus(n.status)).length;
+	const queuedWorkerCount = () => opts.scope.view.nodes.filter((n) => n.status === "queued").length;
 	const projectNodeEvidence = (node, resumed = false) => ({
 		id: node.id,
 		status: node.status,
@@ -1772,7 +1765,7 @@ function createCoordinationToolsForManager(opts, lifetime) {
 			}))]
 		};
 	};
-	const freeWorkerSlots = () => usesTreeWideLimit() ? sharedWorkerCapacity()?.freeSlots ?? null : freeSlots(localLiveWorkerCount(), maxLiveWorkers);
+	const freeWorkerSlots = () => opts.scope.workerCapacity?.freeSlots ?? null;
 	const readProgress = (id) => {
 		const scope = opts.scope;
 		if (typeof scope.progress !== "function") return void 0;
@@ -1855,7 +1848,7 @@ function createCoordinationToolsForManager(opts, lifetime) {
 	const tools = [
 		{
 			name: "spawn_worker",
-			description: "Start a worker the driver will drive. `profile` is the worker or another driver; `task` is what it should do. Reserves budget from the conserved pool and fails closed. Pass an optional `budget` (per-field) to give a hard sub-task more than the default — it merges over the per-worker default; the conserved pool is still the hard fence. When a max-live-workers cap is set it also fails closed (`error: \"max-live-workers\"`) while that many workers are still in flight — settle or steer one before spawning another. Pass a `key` naming the assignment to make it run-once ACROSS restarts: a key that already completed returns the finished result (`resumed: \"completed\"` — no work re-runs, nothing is spent), a key whose prior attempt failed (`down`) spawns fresh and says so (`resumed: \"retried\"`), and a key with no terminal receipt is refused (`error: \"in-doubt\"`) until its exact prior execution is recovered. A key still running is refused (`error: \"duplicate-key\"`). Returns `freeSlots`: how many MORE workers you can start right now (`null` = uncapped). While `freeSlots > 0` there is idle capacity — call this again to fill it rather than waiting; parallel workers finish the run sooner than one at a time." + (profileTable === void 0 ? "" : " This run has a profiles table: pass `profile` as one of the table's names to run that exact profile, or write a new profile under a name the table does not hold."),
+			description: "Start a worker the driver will drive. `profile` is the worker or another driver; `task` is what it should do. Reserves budget from the conserved pool and fails closed. Pass an optional `budget` (per-field) to give a hard sub-task more than the default — it merges over the per-worker default; the conserved pool is still the hard fence. When every worker slot is busy, or the pool cannot cover the budget until your running workers return what they hold, the worker is admitted with `status: \"queued\"` and starts on its own when a slot and its budget free — it is never refused for concurrency, so spawn all the work you want done and await_event for the results. A queued worker whose budget never frees settles down as budget-exhausted. Pass a `key` naming the assignment to make it run-once ACROSS restarts: a key that already completed returns the finished result (`resumed: \"completed\"` — no work re-runs, nothing is spent), a key whose prior attempt failed (`down`) spawns fresh and says so (`resumed: \"retried\"`), and a key the process died with IN FLIGHT retries under the same key when the executor provably died with the process (an inline worker — the same `resumed: \"retried\"`, naming the interruption). A key with no terminal receipt whose execution may still exist elsewhere (sandbox, CLI bridge, router) is refused (`error: \"in-doubt\"`) until its exact prior execution is recovered. A key still running is refused (`error: \"duplicate-key\"`). Returns `freeSlots`: how many MORE workers start at once (`null` = no slot bound), and `queued`: how many of your workers wait for a slot. Parallel workers finish the run sooner than one at a time." + (profileTable === void 0 ? "" : " This run has a profiles table: pass `profile` as one of the table's names to run that exact profile, or write a new profile under a name the table does not hold."),
 			inputSchema: {
 				type: "object",
 				properties: {
@@ -1924,12 +1917,6 @@ function createCoordinationToolsForManager(opts, lifetime) {
 			handler: async (raw) => {
 				const a = obj(raw);
 				const key = a.key === void 0 ? void 0 : str(a.key, "key");
-				if (!(key !== void 0 && completedKeys.has(key)) && !usesTreeWideLimit() && maxLiveWorkers !== void 0 && maxLiveWorkers > 0 && liveWorkerCount() >= maxLiveWorkers) return Promise.resolve(((live) => ({
-					error: "max-live-workers",
-					reason: `${live} worker${live === 1 ? " is" : "s are"} already live, which is this manager's ceiling — await_event until one settles, then spawn`,
-					live,
-					freeSlots: freeWorkerSlots()
-				}))(liveWorkerCount()));
 				const tableRefusal = profileTableRefusal(profileTable, a.profile);
 				if (tableRefusal !== void 0) return {
 					error: "invalid-profile",
@@ -2032,7 +2019,6 @@ function createCoordinationToolsForManager(opts, lifetime) {
 				});
 				if (res.ok && res.prior?.state === "completed") {
 					const s = res.prior.settled;
-					if (key !== void 0) completedKeys.add(key);
 					const { id, status, resumed: _resumed, ...evidence } = projectSettled(s);
 					return Promise.resolve({
 						workerId: id,
@@ -2051,7 +2037,6 @@ function createCoordinationToolsForManager(opts, lifetime) {
 					watchWorker(res.handle.id);
 					liveHandles.set(res.handle.id, res.handle);
 					peerMail?.bindCapability(assignmentId, res.handle.id);
-					if (key !== void 0) keyByWorker.set(res.handle.id, key);
 					if (typeof profile.name === "string" && profile.name.length > 0) profileNameByWorker.set(res.handle.id, profile.name);
 				}
 				const priorHistory = res.ok && res.prior !== void 0 && res.prior.state !== "completed" ? {
@@ -2068,7 +2053,9 @@ function createCoordinationToolsForManager(opts, lifetime) {
 					continuity: continuity.continuity,
 					...continuity.continuity === "resume" ? { resume: continuity.resume } : {},
 					...successorOf !== void 0 ? { successorOf } : {},
+					status: res.handle.status,
 					live: liveWorkerCount(),
+					queued: queuedWorkerCount(),
 					freeSlots: freeWorkerSlots(),
 					...priorHistory,
 					...resourcePaths.resolved.length === 0 ? {} : { resourcesFromPath: resourcePaths.resolved }
@@ -2088,11 +2075,15 @@ function createCoordinationToolsForManager(opts, lifetime) {
 		},
 		{
 			name: "observe_agent",
-			description: "Inspect a worker WHILE IT RUNS, not only after it finishes: status, spend so far, and `progress` — how long since it last did anything (`idleMs`), whether that counts as stalled, how many turns it has taken, the last tools/files it touched (`recentActivity`), what its executor CHANGED about the profile you gave it (`derived` — an MCP config it materialized, an extension it had to add), whether a steer can even reach it (`steerable`), and how many steers it has not yet read (`pendingMessages`). A worker whose executor has FINISHED but whose settlement you have not yet drained reports `settlementPending` with its terminal kind; its `status` still reads running until await_event delivers it, so call await_event, not observe_agent again. The settled output artifact is returned once drained. Select a field with `outputPath`, for example [\"content\"] to read a provider result without its event history. Omit it to read the complete artifact. Large outputs return a bounded JSON `outputPage`; repeat with `outputOffset: outputPage.nextOffset` until it is null, concatenate page text, then parse the JSON. Offsets and limits count UTF-16 characters. The full artifact stays retained; an outRef is a content address, not a workspace path. Use this BEFORE steer_agent: a steer is only worth sending when the progress says the worker is on the wrong path or has stopped making any.",
+			description: "Inspect a worker WHILE IT RUNS, not only after it finishes: status, spend so far, and `progress` — how long since it last did anything (`idleMs`), whether that counts as stalled, how many turns it has taken, the last tools/files it touched (`recentActivity`), what its executor CHANGED about the profile you gave it (`derived` — an MCP config it materialized, an extension it had to add), whether a steer can even reach it (`steerable`), and how many steers it has not yet read (`pendingMessages`). For a worker that leads its own team, `progress.team` counts the agents below it (working, queued, done, down) and its idle clock reads the newest activity anywhere in that team, so a lead whose workers are busy is not stalled. A queued worker waits for a worker slot and is never stalled. A worker whose executor has FINISHED but whose settlement you have not yet drained reports `settlementPending` with its terminal kind; its `status` still reads running until await_event delivers it, so call await_event, not observe_agent again. The settled output artifact is returned once drained. Select a field with `outputPath`, for example [\"content\"] to read a provider result without its event history. Omit it to read the complete artifact. Large outputs return a bounded JSON `outputPage`; repeat with `outputOffset: outputPage.nextOffset` until it is null, concatenate page text, then parse the JSON. Offsets and limits count UTF-16 characters. The full artifact stays retained; an outRef is a content address, not a workspace path. Use this BEFORE steer_agent: a steer is only worth sending when the progress says the worker is on the wrong path or has stopped making any.",
 			inputSchema: {
 				type: "object",
 				properties: {
 					workerId: idArg,
+					outRef: {
+						type: "string",
+						description: "Instead of workerId: the content address of a result listed in a settled worker's `subtree.results`, to read one of its team's outputs in full."
+					},
 					outputPath: {
 						type: "array",
 						items: { type: "string" },
@@ -2109,13 +2100,23 @@ function createCoordinationToolsForManager(opts, lifetime) {
 						maximum: WORKER_OUTPUT_PAGE_CHARS,
 						description: `Maximum JSON characters per page; default ${WORKER_OUTPUT_PAGE_CHARS}.`
 					}
-				},
-				required: ["workerId"]
+				}
 			},
 			handler: async (raw) => {
 				const args = obj(raw);
-				const id = str(args.workerId, "workerId");
 				const outputRead = workerOutputReadOptions(args);
+				if (args.outRef !== void 0 && args.workerId === void 0) {
+					const outRef = str(args.outRef, "outRef");
+					if (!descendantOutRefs.has(outRef)) return {
+						error: "unknown-result",
+						reason: "this outRef was not listed in any subtree summary you received; pass the outRef of an entry in a settled worker’s subtree.results, or observe your own worker by workerId"
+					};
+					return {
+						outRef,
+						...await readWorkerOutput(outRef, outputRead)
+					};
+				}
+				const id = str(args.workerId, "workerId");
 				const node = opts.scope.view.nodes.find((n) => n.id === id);
 				if (!node) {
 					const resumed = opts.scope.resume?.view.nodes.find((n) => n.id === id);
@@ -2179,6 +2180,40 @@ function createCoordinationToolsForManager(opts, lifetime) {
 				};
 			}
 		},
+		{
+			name: "cancel_worker",
+			description: "Cancel one of YOUR live workers — running, or queued for a worker slot — and every worker it leads. Its unspent budget returns to your pool when it settles, so this is how you take back what a stalled or no-longer-needed worker holds (for example when spawn_worker is refused budget-exhausted while workers you no longer need hold the budget). The cancelled worker still settles `down` through await_event with what it spent. Refused (`error: \"not-live\"`) for a worker that already settled or is not yours.",
+			inputSchema: {
+				type: "object",
+				properties: {
+					workerId: idArg,
+					reason: {
+						type: "string",
+						description: "Why it is cancelled; recorded on its settlement."
+					}
+				},
+				required: ["workerId"]
+			},
+			handler: async (raw) => {
+				const a = obj(raw);
+				const workerId = str(a.workerId, "workerId");
+				const why = a.reason === void 0 ? "cancelled by its manager" : str(a.reason, "reason");
+				const cancelled = opts.scope.view.nodes.some((node) => node.id === workerId && isLiveNodeStatus(node.status)) ? abortWorker(workerId, why) : void 0;
+				if (cancelled === void 0) return {
+					error: "not-live",
+					reason: `'${workerId}' is not a live worker you spawned; only your own running or queued workers can be cancelled`,
+					live: liveWorkerCount(),
+					queued: queuedWorkerCount()
+				};
+				return {
+					cancelled: true,
+					workerId: cancelled.id,
+					label: cancelled.label,
+					live: liveWorkerCount(),
+					queued: queuedWorkerCount()
+				};
+			}
+		},
 		{
 			name: "await_event",
 			description: "Wait for and pull the next message a worker, sub-driver, or analyst sent up — the unified inbox. Read a settled artifact with the returned `outputRead` call; the receipt carries its reference, not its bytes. An event is one of: a settled worker output ('settled'), a question needing your answer ('question', from ask_parent / the worker's ask-user), or a trace-analyst finding ('finding', from analyze-on-settle). Pass kinds:['settled'] for just the next finished worker; omit `kinds` to also receive questions and findings. Returns { idle: true } when nothing is queued and no workers are live. If a worker is still running when the wait elapses, returns { pending: true, live: [...] } (the workers still in flight) instead of blocking indefinitely — call await_event again to keep waiting; the settlement is not lost. Every reply carries `freeSlots`: how many more workers you can start right now (`null` = uncapped). A settled worker frees its slot, so `freeSlots > 0` means capacity is sitting idle — spawn into it before waiting again. Each event carries `eventSeq`; pass the ones you have processed in `acknowledge` on a later call. An event delivered to a turn that ends in failure is named again when you are re-entered, until it is acknowledged.",
@@ -2960,7 +2995,7 @@ function applyRunCancellation(dir, abortRun, now, path = "turn-boundary") {
 	return record;
 }
 /** External drivers may remain silent indefinitely, so turn boundaries cannot observe control. */
-function watchRunCancellation(dir, abortRun) {
+function watchRunCancellation(dir, abortRun, createWatch = watch) {
 	mkdirSync(workerCancellationsDir(dir), { recursive: true });
 	let active = true;
 	let failure;
@@ -2973,15 +3008,21 @@ function watchRunCancellation(dir, abortRun) {
 		failure = error;
 		abortRun(`durable run cancellation observer failed: ${String(error)}`);
 	};
-	const watcher = watch(workerCancellationsDir(dir), (_event, filename) => {
-		if (!active || filename !== null && filename !== "run.request.json") return;
-		try {
-			check();
-		} catch (error) {
-			fail(error);
-		}
-	});
-	watcher.on("error", fail);
+	let watcher;
+	try {
+		watcher = createWatch(workerCancellationsDir(dir), (_event, filename) => {
+			if (!active || filename !== null && filename !== "run.request.json") return;
+			try {
+				check();
+			} catch (error) {
+				fail(error);
+			}
+		});
+	} catch (error) {
+		const code = error.code;
+		if (code !== "EMFILE" && code !== "ENOSPC") throw error;
+	}
+	watcher?.on("error", fail);
 	const fallback = setInterval(() => {
 		try {
 			check("fallback");
@@ -2994,7 +3035,7 @@ function watchRunCancellation(dir, abortRun) {
 		check,
 		close() {
 			active = false;
-			watcher.close();
+			watcher?.close();
 			clearInterval(fallback);
 		}
 	};
@@ -4029,7 +4070,6 @@ function driverAgent(opts) {
 				...opts.authorizeDownMessage ? { authorizeDownMessage: opts.authorizeDownMessage } : {},
 				perWorker: opts.perWorker,
 				...opts.deliverable ? { deliverable: opts.deliverable } : {},
-				...opts.maxLiveWorkers !== void 0 ? { maxLiveWorkers: opts.maxLiveWorkers } : {},
 				...opts.analysts ? { analysts: opts.analysts } : {},
 				...opts.analyzeOnSettle ? { analyzeOnSettle: opts.analyzeOnSettle } : {},
 				...opts.watchWorkers ? { watchWorkers: opts.watchWorkers } : {},
@@ -4381,4 +4421,4 @@ function safeJson(v) {
 //#endregion
 export { downMessageRefusalReasons as A, ANALYST_DEFINITION_BOUNDS as C, coordinationVerbNames as D, canonicalFindingEvent as E, defaultToolDetectors as F, watchTrace as I, parseAuthoredAnalystDefinition as M, questionEscalationTargets as N, createCoordinationTools as O, createEventBus as P, watchRunCancellation as S, analystToolGroupNames as T, renderAnytimeTable as _, allOf as a, FileCoordinationLog as b, createProgressTracker as c, progressStop as d, sampleFromSettled as f, plateauLength as g, bestSoFar as h, finalizeBestDelivered as i, normalizeAnalyzeOnSettle as j, createCoordinationToolsForManager as k, noProgressFor as l, areaUnderCurve as m, createSteerAcknowledger as n, allWorkersStalled as o, anytimeReport as p, driverAgent as r, anyOf as s, createCancelAcknowledger as t, plateau as u, createFileRunContext as v, DEFAULT_AWAIT_EVENT_TIMEOUT_MS as w, applyRunCancellation as x, createInMemoryRunContext as y };
 
-//# sourceMappingURL=coordination-driver-Bz-H17bC.js.map
+//# sourceMappingURL=coordination-driver-iBGMKDvB.js.map