@tangle-network/agent-runtime 0.318.0 → 0.319.5

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { Bt as RunGraphTestOptions, Cc as superviseWithTestBrain, Dv as ToolLoopChat, Ev as ToolLoopCallContext, Wt as runGraphWithTestBrain, hl as supervisorAgentWithTestBrain, mn as driverAgent, ol as SupervisorAgentTestDeps, pn as DriverAgentOptions, xc as SuperviseTestOptions } from "./index-CHlWvoo5.js";
+import { Hn as driverAgent, Pl as SupervisorAgentTestDeps, Tn as runGraphWithTestBrain, Ul as supervisorAgentWithTestBrain, Vn as DriverAgentOptions, Yc as SuperviseTestOptions, Zc as superviseWithTestBrain, ey as ToolLoopCallContext, ty as ToolLoopChat, xn as RunGraphTestOptions } from "./index-Da7w2H86.js";
 import { AgentImprovementProposal, AgentProfile, AgentProfileImprovementMeasuredComparison, SandboxSizePreset } from "@tangle-network/agent-interface";
 //#region src/testing/index.d.ts
 /** A proposal produced by Runtime's opaque profile-improvement path. */

package/dist/testing.js

@@ -1,14 +1,14 @@
-import { I as immutableCandidateValue, M as canonicalCandidateDigest$1 } from "./workspace-streams-DkijayqX.js";
-import { f as verifyAgentImprovementProposal } from "./improvement-cycle-jp80l_ZQ.js";
-import { i as applyExactAgentProfileDiff, p as parseExactAgentProfile } from "./profile-CHXYmpGd.js";
-import { r as driverAgent } from "./coordination-driver-DK3pI_HB.js";
-import { a as superviseWithTestBrain, m as supervisorAgentWithTestBrain } from "./supervise-C41ywfFd.js";
-import { i as runGraphWithTestBrain } from "./graph-DYBCYZjg.js";
+import { L as immutableCandidateValue, N as canonicalCandidateDigest$1 } from "./workspace-streams-DFAhW7hF.js";
+import { f as verifyAgentImprovementProposal } from "./improvement-cycle-Dkrb5nVc.js";
+import { i as applyExactAgentProfileDiff, p as parseExactAgentProfile } from "./profile-DmVM4Gxb.js";
+import { r as driverAgent } from "./coordination-driver-woTI2Vpr.js";
+import { a as superviseWithTestBrain, m as supervisorAgentWithTestBrain } from "./supervise-CvKx8rlw.js";
+import { i as runGraphWithTestBrain } from "./graph-joXNwtkE.js";
 import { SANDBOX_SIZE_PRESET_NAMES, canonicalAgentProfileDigest } from "@tangle-network/agent-interface";
 //#region src/testing/fixtures/agent-improvement-proposal.json
 var agent_improvement_proposal_default = {
 	changedSurfaces: ["prompt"],
-	digest: "sha256:6fa8d47783fd932aec5ede5b31e1b1eda4cdf2b40e9180c5da9c0c5d5298d174",
+	digest: "sha256:f8c3cb727d2492dc2905479b6004f6e6ccf5618869d3a92e7c2bd00abcb0b47b",
 	evaluation: {
 		"decision": {
 			"contributingChecks": [
@@ -4579,7 +4579,7 @@ var agent_improvement_proposal_default = {
 		],
 		"metadata": {
 			"fixture": "agent-improvement-proposal",
-			"runtimeVersion": "0.318.0"
+			"runtimeVersion": "0.319.5"
 		},
 		"objectives": [
 			{
@@ -4690,8 +4690,8 @@ var agent_improvement_proposal_default = {
 			"baselineContentHash": "sha256:5c21ee53e513fc604cb09754e21c392b24a424da0ef37dbf8f1ee4a8a0b08f09",
 			"candidateContentHash": "sha256:60fcbb1c728194bd51d7d19cb732d1c3f1881dce7e0a6266b41c8b98cfd65693",
 			"kind": "agent-eval-loop",
-			"recordDigest": "sha256:ac37057ac69db1739b5e62c052813c08efc956a8eaee649ce0146044ff40b7e5",
-			"runId": "agent-runtime-0.318.0-proposal-fixture",
+			"recordDigest": "sha256:9c02079c1e46abdc3821c1f2feec5bb2ddb1d7dd5f9cd2b9db6c9ed101d5f560",
+			"runId": "agent-runtime-0.319.5-proposal-fixture",
 			"schema": "agent-candidate-experiment"
 		}
 	},
@@ -4714,13 +4714,13 @@ var agent_improvement_proposal_default = {
 	}],
 	kind: "agent-improvement-proposal",
 	proposedAt: "2026-07-10T01:00:00.000Z",
-	runId: "agent-runtime-0.318.0-proposal-fixture"
+	runId: "agent-runtime-0.319.5-proposal-fixture"
 };
 //#endregion
 //#region src/testing/fixtures/agent-profile-improvement-proposal.json
 var agent_profile_improvement_proposal_default = {
 	changedSurfaces: ["prompt", "skills"],
-	digest: "sha256:3884e3f5c91e1007b37615c5ee1261c385c3548e0acd0d58453a8db73c3b513f",
+	digest: "sha256:a3d4efbd0e7a95c16413801313cfea534676477dd50347a2d7b2dca5cbdd75a4",
 	evaluation: {
 		"decision": {
 			"contributingChecks": [
@@ -6354,7 +6354,7 @@ var agent_profile_improvement_proposal_default = {
 		],
 		"metadata": {
 			"fixture": "agent-profile-improvement-proposal",
-			"runtimeVersion": "0.318.0"
+			"runtimeVersion": "0.319.5"
 		},
 		"objectives": [
 			{
@@ -6465,7 +6465,7 @@ var agent_profile_improvement_proposal_default = {
 			"baselineContentHash": "sha256:21c495a37c418c10bde64fbaa188beddeed31f1f051ea60a6a6582a9ee0db704",
 			"candidateContentHash": "sha256:103f77bc8481601eef1ad5fe6ba84a40dffabc3a44f421f8c8559121edab84e9",
 			"kind": "agent-eval-loop",
-			"recordDigest": "sha256:f5da112352ed105eaf6a64b9979fc67f608bd359d677fade6ac080c31563d886",
+			"recordDigest": "sha256:c70404980d0f4a369d2dc1de283ebeaf2c91bb554bda9af1372f4cf83db7c343",
 			"runId": "profile-improvement-1",
 			"schema": "agent-profile-improvement-experiment"
 		}

package/dist/tui/index.d.ts

@@ -1,4 +1,4 @@
-import { _t as SupervisorCleanupReceipt, gt as ProvisionedSupervisor, ht as ProvisionSupervisorRequest, mt as ProvisionSupervisorConnection, vt as provisionSupervisor } from "../index-CHlWvoo5.js";
+import { _t as SupervisorCleanupReceipt, gt as ProvisionedSupervisor, ht as ProvisionSupervisorRequest, mt as ProvisionSupervisorConnection, vt as provisionSupervisor } from "../index-Da7w2H86.js";
 //#region src/tui/top-app.d.ts
 /**
  * The interactive side of the supervisor-run TUI: a keypress/mouse loop over the frames

package/dist/tui/index.js

@@ -1,3 +1,3 @@
-import { t as provisionSupervisor } from "../provision-supervisor-CunKnayY.js";
+import { t as provisionSupervisor } from "../provision-supervisor-CN16EdkE.js";
 import { a as renderTopFrameWithLayout, i as renderTopFrame, n as runTopApp, r as loadTopSnapshot, t as renderTopOnce } from "../top-app-DaiR4LXM.js";
 export { loadTopSnapshot, provisionSupervisor, renderTopFrame, renderTopFrameWithLayout, renderTopOnce, runTopApp };

package/dist/workspace-store/index.d.ts

@@ -55,6 +55,14 @@ interface WorkspacePutInput {
   readonly bytes?: WorkspaceBytesRef;
   /** Id for a new entry; ignored on update. Defaults to a random UUID. */
   readonly id?: string;
+  /**
+   * The caller's key for this write, for at-least-once callers such as a queue
+   * consumer or a sidecar capture hook. While the path's live entry is the one
+   * this operation wrote, with the same kind and content, repeating the call
+   * returns that entry instead of a conflict. Honoured only by a store that sets
+   * {@link WorkspaceStore.idempotentOperations}; others ignore it.
+   */
+  readonly operationId?: string;
 }
 interface WorkspaceDeleteInput {
   readonly workspaceId: string;
@@ -62,6 +70,13 @@ interface WorkspaceDeleteInput {
   /** When present, the delete is refused unless the live revision matches. */
   readonly ifRevision?: number;
   readonly actor: string;
+  /**
+   * The caller's key for this delete. While the path's latest tombstone is the
+   * one this operation made, repeating the call returns that tombstone instead
+   * of a conflict. Honoured only by a store that sets
+   * {@link WorkspaceStore.idempotentOperations}.
+   */
+  readonly operationId?: string;
 }
 /**
  * Versioned path store for one or many tenants. Every write is a compare-and-set
@@ -77,6 +92,8 @@ interface WorkspaceStore {
   delete(input: WorkspaceDeleteInput): Promise<WorkspaceTombstone | null>;
   /** Erasure audit rows whose path starts with `prefix`, oldest first. */
   tombstones(workspaceId: string, prefix?: string): Promise<WorkspaceTombstone[]>;
+  /** True when put and delete honour `operationId`; the contract then checks it. */
+  readonly idempotentOperations?: boolean;
 }
 /** A write lost a compare-and-set race or targeted the wrong revision. Re-read and retry. */
 declare class WorkspaceConflictError extends Error {
@@ -92,12 +109,81 @@ declare function assertWorkspacePath(path: string): void;
 declare function memberIdFromPath(path: string): string | null;
 /** Validate a put before any adapter touches storage; adapters call this first. */
 declare function checkWorkspacePut(input: WorkspacePutInput): void;
+/** Refuse an `operationId` that is present but empty, not a string, or over 256 chars. */
+declare function checkOperationId(path: string, operationId: unknown): void;
+/** Whether `entry` is exactly what `input` would write: same kind, content and bytes. */
+declare function isSameWorkspaceWrite(entry: WorkspaceEntry, input: WorkspacePutInput): boolean;
 /** Process-local adapter for tests, previews, and single-instance hosts. */
 declare function createInMemoryWorkspaceStore(options?: {
   now?: () => Date;
   newId?: () => string;
 }): WorkspaceStore;
 //#endregion
+//#region src/workspace-store/codec.d.ts
+/** Where a value lives; bound into the ciphertext. */
+interface WorkspaceCodecContext {
+  readonly tenant: string;
+  readonly path: string;
+  /**
+   * The write's `operationId`, when it has one. A codec then seals the same
+   * plaintext to the same bytes, so a replayed put is the same write.
+   */
+  readonly operationId?: string;
+}
+interface WorkspaceContentCodec {
+  seal(plain: Uint8Array, context: WorkspaceCodecContext): Promise<Uint8Array>;
+  open(sealed: Uint8Array, context: WorkspaceCodecContext): Promise<Uint8Array>;
+}
+/** A value did not open: unknown key, wrong tenant or path, tampering, or plaintext where a seal was required. */
+declare class WorkspaceCodecError extends Error {
+  readonly code: "codec";
+  constructor(message: string);
+}
+/**
+ * AES-256-GCM with a key id per value. `keys` maps key id to 32 raw bytes
+ * (base64 or base64url when a string). The encryption key and the key that
+ * derives replay-stable IVs are both derived from the raw key with HKDF, so the
+ * raw key is never used for two algorithms.
+ *
+ * Without an `operationId` every seal uses a random 96-bit IV. With one, the IV
+ * is an HMAC of the tenant, path, operation and plaintext, as in SIV: only an
+ * identical write repeats it, and that repeat reveals only that the write was
+ * repeated.
+ */
+declare function createAesGcmContentCodec(options: {
+  keys: Readonly<Record<string, string | Uint8Array>>;
+  activeKeyId: string;
+}): WorkspaceContentCodec;
+/**
+ * The AES-256-GCM codec from an app's env, or `null` when neither variable is
+ * set. `WORKSPACE_STORE_KEYS` is `id:base64,id:base64`; `WORKSPACE_STORE_KEY_ID`
+ * names the key new writes use. Setting one without the other is refused.
+ */
+declare function aesGcmContentCodecFromEnv(env: {
+  WORKSPACE_STORE_KEYS?: string;
+  WORKSPACE_STORE_KEY_ID?: string;
+}): WorkspaceContentCodec | null;
+/** Stored text of a sealed `content`: a prefix, then the sealed bytes in base64. */
+declare const SEALED_CONTENT_PREFIX = "wsc1:";
+/** Seal bytes a host is about to upload (an R2 object) under the entry's tenant and path. */
+declare function sealWorkspaceBytes(codec: WorkspaceContentCodec, context: WorkspaceCodecContext, bytes: Uint8Array): Promise<Uint8Array>;
+/** Open bytes a host downloaded for an entry's `bytes` reference. */
+declare function openWorkspaceBytes(codec: WorkspaceContentCodec, context: WorkspaceCodecContext, sealed: Uint8Array): Promise<Uint8Array>;
+interface ContentCodecOptions {
+  /**
+   * Return stored content that is not sealed as is, for a store being moved
+   * onto a codec. Off by default: a regulated store refuses plaintext.
+   */
+  readonly readPlaintext?: boolean;
+}
+/**
+ * `store` with every entry's `content` sealed at rest. Index fields, `bytes`
+ * references and tombstones pass through untouched; the host seals the bytes
+ * themselves. `idempotentOperations` is the inner store's: a replayed put with
+ * an `operationId` seals to the same bytes, so the inner replay check holds.
+ */
+declare function withContentCodec(store: WorkspaceStore, codec: WorkspaceContentCodec, options?: ContentCodecOptions): WorkspaceStore;
+//#endregion
 //#region src/workspace-store/contract.d.ts
 interface WorkspaceStoreContractCase {
   readonly name: string;
@@ -110,10 +196,14 @@ interface WorkspaceStoreContractResult {
 }
 /** Make a fresh, empty store for one case. */
 type MakeWorkspaceStore = () => WorkspaceStore | Promise<WorkspaceStore>;
+interface WorkspaceStoreContractOptions {
+  /** Also check `operationId` replay; for a store that sets `idempotentOperations`. */
+  readonly idempotentOperations?: boolean;
+}
 /** The contract as named cases; each case builds its own store. */
-declare function workspaceStoreContractCases(makeStore: MakeWorkspaceStore): WorkspaceStoreContractCase[];
+declare function workspaceStoreContractCases(makeStore: MakeWorkspaceStore, options?: WorkspaceStoreContractOptions): WorkspaceStoreContractCase[];
 /** Run every contract case against fresh stores; never throws for a failing case. */
-declare function runWorkspaceStoreContract(makeStore: MakeWorkspaceStore): Promise<WorkspaceStoreContractResult[]>;
+declare function runWorkspaceStoreContract(makeStore: MakeWorkspaceStore, options?: WorkspaceStoreContractOptions): Promise<WorkspaceStoreContractResult[]>;
 //#endregion
 //#region src/workspace-store/tools.d.ts
 /** `viewer` and `guest` are read-only under the default policy. */
@@ -202,5 +292,83 @@ declare function renderPinnedMemory(entries: readonly WorkspaceEntry[], options?
   maxTokens?: number;
 }): string;
 //#endregion
-export { type MakeWorkspaceStore, type MemoryPolicy, type WorkspaceAccess, type WorkspaceBytesRef, WorkspaceConflictError, type WorkspaceDeleteInput, type WorkspaceEntry, type WorkspaceEntryKind, type WorkspaceEntryScope, type WorkspacePolicyDecision, WorkspacePolicyError, type WorkspacePutInput, type WorkspaceRole, type WorkspaceStore, type WorkspaceStoreContractCase, type WorkspaceStoreContractResult, type WorkspaceTombstone, type WorkspaceToolContext, type WorkspaceToolDefinition, type WorkspaceTurn, assertWorkspacePath, checkWorkspacePut, createFileTools, createInMemoryWorkspaceStore, createMemoryTools, defaultMemoryPolicy, memberIdFromPath, rankEntries, readTurnMemories, renderPinnedMemory, runWorkspaceStoreContract, workspaceStoreContractCases };
+//#region src/workspace-store/harness.d.ts
+/** Opening marker for the generated block in a harness's native memory file. */
+declare const HARNESS_MEMORY_BEGIN = "<!-- workspace-store:memory begin. Generated from the workspace store; save memories with memory.remember. -->";
+/** Closing marker for the generated block in a harness's native memory file. */
+declare const HARNESS_MEMORY_END = "<!-- workspace-store:memory end -->";
+/** The generated block a host writes into a harness's native memory location. */
+declare function renderHarnessMemory(entries: readonly WorkspaceEntry[], options?: {
+  maxTokens?: number;
+}): string;
+/** Replace the generated block in `native`, or append one; text outside it is kept byte for byte. */
+declare function projectHarnessMemory(native: string, block: string): string;
+/** Native files keyed by path, as the host read them. A missing file is absent or `undefined`. */
+type HarnessNativeFiles = Readonly<Record<string, string | undefined>>;
+/** Lowercase, collapse spaces, drop a leading "Remember:" and trailing punctuation: the duplicate key. */
+declare function normalizeMemoryText(text: string): string;
+/**
+ * What the harness added during the turn, outside the generated block: new
+ * lines in files that existed, and the body of new files (a Claude Code memory
+ * directory entry). Lines removed or present before are ignored; a removal is
+ * not a forget, which only `memory.forget` performs.
+ */
+declare function captureHarnessMemory(before: HarnessNativeFiles, after: HarnessNativeFiles): string[];
+/** Where a captured memory came from. */
+interface HarnessProvenance {
+  readonly harness: string;
+  readonly turnId: string;
+  readonly memberId: string;
+}
+/** The entry `actor` for a captured memory, so `createdBy` carries its provenance. */
+declare function harnessActor({ harness, turnId, memberId }: HarnessProvenance): string;
+/** Read the harness, turn, and member provenance encoded by {@link harnessActor}. */
+declare function parseHarnessActor(actor: string): HarnessProvenance | null;
+interface HarnessIngestResult {
+  readonly saved: WorkspaceEntry[];
+  /** Facts already in the store, by normalized text. */
+  readonly duplicates: string[];
+  /** Facts the policy refused, with the reason. */
+  readonly refused: {
+    text: string;
+    reason: string;
+  }[];
+}
+/**
+ * Save captured facts as workspace memories through the same policy as
+ * `memory.remember`, with the harness and turn as the actor. Duplicates of a
+ * memory the turn can see, or of an earlier fact in the batch, are skipped.
+ */
+declare function ingestHarnessMemories(context: WorkspaceToolContext, input: {
+  harness: string;
+  turnId: string;
+  facts: readonly string[];
+}): Promise<HarnessIngestResult>;
+interface MemoryDivergence {
+  /** Sum of the counts below; 0 means every native copy agrees with the store. */
+  readonly total: number;
+  /** Store memories the turn sees that a native file's generated block omits. */
+  readonly missing: number;
+  /** Generated-block lines whose id is gone from the store or whose text differs. */
+  readonly stale: number;
+  /** Facts a harness wrote outside the generated block that the store does not hold. */
+  readonly uncaptured: number;
+  readonly files: Record<string, {
+    missing: string[];
+    stale: string[];
+    uncaptured: string[];
+  }>;
+}
+/**
+ * Compare each native file with the store as `turn` sees it, after ingest ran.
+ * `before` is the files as projected at session start, `after` as they are now:
+ * only what the harness added since then can be uncaptured, so the profile's own
+ * generated text in the same file never counts. Files that held a generated
+ * block at session start are projection targets: losing the block counts every
+ * visible memory as missing. Other files (a new memory-directory entry) can
+ * only hold uncaptured facts.
+ */
+declare function memoryDivergence(store: WorkspaceStore, turn: WorkspaceTurn, before: HarnessNativeFiles, after: HarnessNativeFiles): Promise<MemoryDivergence>;
+//#endregion
+export { type ContentCodecOptions, HARNESS_MEMORY_BEGIN, HARNESS_MEMORY_END, type HarnessIngestResult, type HarnessNativeFiles, type HarnessProvenance, type MakeWorkspaceStore, type MemoryDivergence, type MemoryPolicy, SEALED_CONTENT_PREFIX, type WorkspaceAccess, type WorkspaceBytesRef, type WorkspaceCodecContext, WorkspaceCodecError, WorkspaceConflictError, type WorkspaceContentCodec, type WorkspaceDeleteInput, type WorkspaceEntry, type WorkspaceEntryKind, type WorkspaceEntryScope, type WorkspacePolicyDecision, WorkspacePolicyError, type WorkspacePutInput, type WorkspaceRole, type WorkspaceStore, type WorkspaceStoreContractCase, type WorkspaceStoreContractOptions, type WorkspaceStoreContractResult, type WorkspaceTombstone, type WorkspaceToolContext, type WorkspaceToolDefinition, type WorkspaceTurn, aesGcmContentCodecFromEnv, assertWorkspacePath, captureHarnessMemory, checkOperationId, checkWorkspacePut, createAesGcmContentCodec, createFileTools, createInMemoryWorkspaceStore, createMemoryTools, defaultMemoryPolicy, harnessActor, ingestHarnessMemories, isSameWorkspaceWrite, memberIdFromPath, memoryDivergence, normalizeMemoryText, openWorkspaceBytes, parseHarnessActor, projectHarnessMemory, rankEntries, readTurnMemories, renderHarnessMemory, renderPinnedMemory, runWorkspaceStoreContract, sealWorkspaceBytes, withContentCodec, workspaceStoreContractCases };
 //# sourceMappingURL=index.d.ts.map