@tangle-network/agent-runtime 0.325.5 → 0.325.7

package/dist/agent.js

@@ -1,5 +1,5 @@
 import { Gr as defineProfileMaterializationContract, Hr as assertProfileMaterialization, Jr as promptControlProfileMaterialization, Kr as fullProfileMaterialization, Qr as renderProfileMaterializationIssues, Ur as assertProfileMaterializes, Vr as AGENT_PROFILE_MATERIALIZATION_AXES, Wi as mapSandboxEvent, Wr as controlProfileMaterialization, Xr as promptOnlyProfileMaterialization, Yr as promptModelProfileMaterialization, Zr as promptResourceProfileMaterialization, ei as sandboxActProfileMaterialization, hn as createSandboxForSpec, ii as worktreeCliProfileMaterialization, qr as profileMaterializationAxes, ri as validateProfileMaterialization } from "./supervisor-Crul0LFI.js";
-import "./runtime-B1dDO_VV.js";
+import "./runtime-CpIVXSDx.js";
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";

package/dist/index.js

@@ -4,12 +4,12 @@ import { $ as createIterableBackend, Q as streamAgentTurn, X as strategyAuthorMe
 import { B as omitTopLevelDigest, F as canonicalCandidateDigest$1, P as canonicalCandidateBytes$1, R as embeddedCandidateArtifact, l as captureAgentCandidateWorkspace, m as persistCandidateOutputArtifact, z as immutableCandidateValue } from "./sandbox-profile-compat-Dq7ujONv.js";
 import { t as assertExecutableAgentProfile } from "./model-policy-CyCUwHed.js";
 import { a as createRuntimeUsageTotals, i as addRuntimeUsage, o as isUsageAmount, t as createAgentImprovementActivationResult } from "./activation-CHJAawWa.js";
-import { $t as McpSpawnFault, en as connectStdioMcp } from "./runtime-B1dDO_VV.js";
+import { $t as McpSpawnFault, en as connectStdioMcp } from "./runtime-CpIVXSDx.js";
 import { i as notifyRuntimeHookEvent, n as defineRuntimeHooks, r as notifyRuntimeDecisionPoint, t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { $ as commandVerifier, B as assertCandidateValidator, G as rawTraceDistiller, H as parseExecutionRef, J as normalizeRolloutPolicy, K as ROLLOUT_POLICY_EXTENSION, L as improve, Q as agenticGenerator, R as createCommandProfileTrainer, U as privateValuePaths, W as withMethodRuntimeControls, X as serializeRolloutPolicy, Y as parseRolloutPolicy, Z as structuralRolloutPolicyFromProfile, et as defaultBuildPrompt, q as applyRolloutPolicyToProfile, z as searchMethod } from "./improvement-cycle-VPes2yY3.js";
 import { t as sealAgentCandidateBundle } from "./bundle-KZGUQqRM.js";
 import { r as supervise } from "./supervise-ttbcgYgS.js";
-import { a as isDelegatedLoopMode, c as worktreeLoopRunner, i as auditLoopRunner, n as runLoopRunnerCli, o as researchLoopRunner, r as DELEGATED_LOOP_MODES, s as runDelegatedLoop, t as parseLoopRunnerArgv } from "./loop-runner-bin-CdDJs_hF.js";
+import { a as isDelegatedLoopMode, c as worktreeLoopRunner, i as auditLoopRunner, n as runLoopRunnerCli, o as researchLoopRunner, r as DELEGATED_LOOP_MODES, s as runDelegatedLoop, t as parseLoopRunnerArgv } from "./loop-runner-bin-CzewdsxT.js";
 import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "./openai-tools-DoQ32vpe.js";
 import { agentCandidateKnowledgeSchema, agentCandidateWorkspaceManifestMaterialSchema, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256DigestSchema } from "@tangle-network/agent-interface";
 import { FAILURE_CLASSES, acquisitionPlansForKnowledgeGaps, blockingKnowledgeEval, canonicalJson, runAgentControlLoop, scoreKnowledgeReadiness, userQuestionsForKnowledgeGaps } from "@tangle-network/agent-eval";

package/dist/kernel.js

@@ -3,7 +3,7 @@ import { A as resolveEntrySymbol, B as runAgentic, C as compareCheckOutcomes, D
 import { bt as DEFAULT_CHECK_IN_IDLE_MS, yt as DEADLINE_CHECK_IN_MESSAGE } from "./sandbox-profile-compat-Dq7ujONv.js";
 import { runTaskQueue } from "./task-queue.js";
 import { n as assertModelAllowed, r as assertProfileModelsAllowed } from "./model-policy-CyCUwHed.js";
-import { $ as runBenchmark, $t as McpSpawnFault, A as connectRemoteSupervisor, At as inlineSandboxClient, B as chatTransportExecutor, Bt as runIsolatedCheck, C as analyzeTrace, Ct as observationFromRegistry, D as compileSearchSpec, Dt as defineLeaderboard, E as assertSearchSpec, Et as harvestCorpus, F as profileRunsForName, Ft as checkProgramDigest, G as assertStrategyContract, Gt as leaderboard, H as createChatSessionStore, Ht as deterministicCompletion, I as recordProfileRun, It as declaredCheckDeliverable, J as strategyAuthorSystemPrompt, Jt as renderLeaderboardMarkdown, K as authorStrategy, Kt as pairwiseSignificance, L as patchDelivered, Lt as declaredCheckDigest, M as loadProfile, Mt as loopDispatch, N as pickBestProfile, Nt as superviseDispatch, O as searchPresets, Ot as resolveSandboxClient, P as profileRegistry, Pt as assertDeclaredCheck, Q as printBenchmarkReport, Qt as openSqlRunStore, Rt as declaredCheckJudge, S as withUntrackedArtifacts, St as registryScopeAnalyst, T as SEARCH_SPEC_CORRELATION_KEY, Tt as HarvestError, U as runStrategyEvolution, Ut as sentinelCompletion, V as chatWorkerSeam, Vt as completionAuthorizes, W as strategyTournament, Wt as stopSentinel, X as openSandboxRun, Xt as renderPairwiseMarkdown, Y as SandboxRunAbortError, Yt as renderLeaderboardSvg, Z as createS3PrivateCasStore, Zt as SqlRunOwnershipError, _ as VERIFY_TAIL_CHARS, _t as verify, a as localShell, an as mcpSecretEnvMetadataKey, at as builtinShapes, b as settledWorkerOut, bt as buildSteerContext, c as createVerifierEnvironment, cn as secretEnvOfMcpServer, ct as FileCorpus, d as harvestSurfaceDiffs, dt as fanout, en as connectStdioMcp, et as createPrivateCasArtifactPort, f as analystsFromRegistry, ft as flatWidenGate, g as NOTE_MAX_CHARS, gt as selectValidWinner, h as EVIDENCE_MAX_CHARS, ht as pipeline, i as jjWorkspace, in as envKeyProvider, it as runPersonified, j as bestProfileFor, jt as loopCampaignDispatch, k as searchSpecDigest, kt as localSandboxClient, l as boxSurfaceReader, ln as createTangleSandboxExactProcessProvider, lt as InMemoryCorpus, m as worktreeFanout, mt as panel, n as makeFinding, nn as createMcpEnvironment, nt as trajectoryReport, o as runInWorkspace, on as resolveMcpServerLaunch, ot as createShapeRegistry, p as failuresAnalyst, pt as loopUntil, q as strategyAuthorContract, qt as renderLeaderboardHtml, r as gitWorkspace, rn as sanitizeMcpToolSchema, rt as definePersona, s as createWaterfallCollector, sn as resolveSecretEnv, st as registerShape, t as computeFindingId, tn as materializeLocalMcp, tt as equalKOnCost, u as fsSurfaceReader, ut as renderCorpusToInstructions, v as closingWorkerNote, vt as widen, w as createFencedSqlRunContext, wt as inProcessSandboxClient, x as copyUntrackedIntoClone, xt as createScopeAnalyst, y as composeWorkerEvidence, yt as assertTraceDerivedFindings, z as graphDesignerExtraTools, zt as readDeclaredCheck } from "./runtime-B1dDO_VV.js";
+import { $ as runBenchmark, $t as McpSpawnFault, A as connectRemoteSupervisor, At as inlineSandboxClient, B as chatTransportExecutor, Bt as runIsolatedCheck, C as analyzeTrace, Ct as observationFromRegistry, D as compileSearchSpec, Dt as defineLeaderboard, E as assertSearchSpec, Et as harvestCorpus, F as profileRunsForName, Ft as checkProgramDigest, G as assertStrategyContract, Gt as leaderboard, H as createChatSessionStore, Ht as deterministicCompletion, I as recordProfileRun, It as declaredCheckDeliverable, J as strategyAuthorSystemPrompt, Jt as renderLeaderboardMarkdown, K as authorStrategy, Kt as pairwiseSignificance, L as patchDelivered, Lt as declaredCheckDigest, M as loadProfile, Mt as loopDispatch, N as pickBestProfile, Nt as superviseDispatch, O as searchPresets, Ot as resolveSandboxClient, P as profileRegistry, Pt as assertDeclaredCheck, Q as printBenchmarkReport, Qt as openSqlRunStore, Rt as declaredCheckJudge, S as withUntrackedArtifacts, St as registryScopeAnalyst, T as SEARCH_SPEC_CORRELATION_KEY, Tt as HarvestError, U as runStrategyEvolution, Ut as sentinelCompletion, V as chatWorkerSeam, Vt as completionAuthorizes, W as strategyTournament, Wt as stopSentinel, X as openSandboxRun, Xt as renderPairwiseMarkdown, Y as SandboxRunAbortError, Yt as renderLeaderboardSvg, Z as createS3PrivateCasStore, Zt as SqlRunOwnershipError, _ as VERIFY_TAIL_CHARS, _t as verify, a as localShell, an as mcpSecretEnvMetadataKey, at as builtinShapes, b as settledWorkerOut, bt as buildSteerContext, c as createVerifierEnvironment, cn as secretEnvOfMcpServer, ct as FileCorpus, d as harvestSurfaceDiffs, dt as fanout, en as connectStdioMcp, et as createPrivateCasArtifactPort, f as analystsFromRegistry, ft as flatWidenGate, g as NOTE_MAX_CHARS, gt as selectValidWinner, h as EVIDENCE_MAX_CHARS, ht as pipeline, i as jjWorkspace, in as envKeyProvider, it as runPersonified, j as bestProfileFor, jt as loopCampaignDispatch, k as searchSpecDigest, kt as localSandboxClient, l as boxSurfaceReader, ln as createTangleSandboxExactProcessProvider, lt as InMemoryCorpus, m as worktreeFanout, mt as panel, n as makeFinding, nn as createMcpEnvironment, nt as trajectoryReport, o as runInWorkspace, on as resolveMcpServerLaunch, ot as createShapeRegistry, p as failuresAnalyst, pt as loopUntil, q as strategyAuthorContract, qt as renderLeaderboardHtml, r as gitWorkspace, rn as sanitizeMcpToolSchema, rt as definePersona, s as createWaterfallCollector, sn as resolveSecretEnv, st as registerShape, t as computeFindingId, tn as materializeLocalMcp, tt as equalKOnCost, u as fsSurfaceReader, ut as renderCorpusToInstructions, v as closingWorkerNote, vt as widen, w as createFencedSqlRunContext, wt as inProcessSandboxClient, x as copyUntrackedIntoClone, xt as createScopeAnalyst, y as composeWorkerEvidence, yt as assertTraceDerivedFindings, z as graphDesignerExtraTools, zt as readDeclaredCheck } from "./runtime-CpIVXSDx.js";
 import { B as createEventBus, C as createFileRunContext, E as FileCoordinationLog, H as watchTrace, L as normalizeAnalyzeOnSettle, M as canonicalFindingEvent, S as renderAnytimeTable, T as withRunContext, V as defaultToolDetectors, _ as sampleFromSettled, a as DEFAULT_DEADLINE_WARNING_MS, b as bestSoFar, d as allWorkersStalled, f as anyOf, h as plateau, i as finalizeBestDelivered, m as noProgressFor, p as createProgressTracker, u as allOf, v as anytimeReport, w as createInMemoryRunContext, x as plateauLength, y as areaUnderCurve } from "./coordination-driver-B2XzW5aV.js";
 import { A as dumbContinuationPassPrompt, C as defaultEdgeTraversalCap, D as createPromptRegistry, E as analyzesFindingsReportPrompt, F as serveCoordinationMcp, M as kernelPromptRegistry, N as naiveContinuationPrompt, O as delegatesWorkerBriefPrompt, P as promptHandle, b as composeReentryTask, c as isPreSpawnExecutorFailure, d as withWorkerSpawnRetry, f as assertCoordinationBinding, i as superviseFleetCapabilities, j as formatPromptHandle, k as dumbContinuationFailPrompt, l as resolveWorkerSpawnRetry, m as supervisorAgent, p as resolveSupervisorProfile, r as supervise, s as workerFromBackend, t as DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY, u as retryPreSpawnRefusals, x as createSupervisorSpanRecorder, y as UNPROVEN_CONTINUITY } from "./supervise-ttbcgYgS.js";
 import { a as graphRunsFor, c as loadGraph, d as recordGraphRun, f as storedGraphDigests, i as graphRegistry, l as lookupGraph, n as graphDigest, p as taskShapeDigest, r as graphFromStored, s as listGraphRuns, t as digestOfGraph, u as pickBestGraph } from "./graph-registry-DAI6KNXB.js";

package/dist/{loop-runner-bin-CdDJs_hF.js → loop-runner-bin-CzewdsxT.js}

@@ -1,6 +1,6 @@
 import { Ft as createExecutorRegistry } from "./supervisor-Crul0LFI.js";
 import { i as ConfigError } from "./errors-DodWX-cb.js";
-import { it as runPersonified, m as worktreeFanout, rt as definePersona } from "./runtime-B1dDO_VV.js";
+import { it as runPersonified, m as worktreeFanout, rt as definePersona } from "./runtime-CpIVXSDx.js";
 import { t as runAnalystLoop } from "./analyst-loop-DZw5QWT9.js";
 import { t as createKbGate } from "./kb-gate-DpaSwXVx.js";
 //#region src/loop-runner.ts
@@ -243,4 +243,4 @@ if (invokedScript && /loop-runner-bin\.(js|ts|mjs)$/.test(invokedScript)) main()
 //#endregion
 export { isDelegatedLoopMode as a, worktreeLoopRunner as c, auditLoopRunner as i, runLoopRunnerCli as n, researchLoopRunner as o, DELEGATED_LOOP_MODES as r, runDelegatedLoop as s, parseLoopRunnerArgv as t };
 
-//# sourceMappingURL=loop-runner-bin-CdDJs_hF.js.map
+//# sourceMappingURL=loop-runner-bin-CzewdsxT.js.map

package/dist/{loop-runner-bin-CdDJs_hF.js.map → loop-runner-bin-CzewdsxT.js.map}

@@ -1 +1 @@
-{"version":3,"file":"loop-runner-bin-CdDJs_hF.js","names":[],"sources":["../src/loop-runner.ts","../src/loop-runner-bin.ts"],"sourcesContent":["/**\n *\n * `runDelegatedLoop` — the configured delegated loop-runner.\n *\n * One typed entrypoint a worker agent (or a scheduled routine) calls to run a\n * disciplined loop in a chosen MODE, over agent-runtime's hardened engines:\n *\n *   code         → build-in-a-loop on the GENERIC recursive path (worktreeLoopRunner: author one\n *                  `AgentProfile` per harness → worktree-CLI leaves → `patchDelivered` gate)\n *   review       → caller-registered runner — a `code` runner with an approval gate over candidates\n *   research     → research-in-a-loop with valid-only KB growth (createKbGate)\n *   audit        → analyze trace/run data → findings (runAnalystLoop, caller-wired)\n *   self-improve → caller-registered `improve(profile, options)` run\n *\n * It is intentionally a thin façade: the value is that EVERY product reuses the\n * one hardened engine instead of forking delegation logic. The dispatcher owns\n * mode routing, timing, fail-loud on an unregistered mode, and a uniform result\n * shape; each mode's engine is a pre-configured runner in the registry (build it\n * with the factories below, or inject your own / a stub).\n *\n * @experimental\n */\n\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { runAnalystLoop } from './analyst-loop'\nimport type { RunAnalystLoopOpts, RunAnalystLoopResult } from './analyst-loop/types'\nimport { ConfigError } from './errors'\nimport { type CreateKbGateOptions, createKbGate, type FactCandidate } from './mcp/kb-gate'\nimport {\n  type AuthoredHarness,\n  type Budget,\n  createExecutorRegistry,\n  definePersona,\n  runPersonified,\n  type WinnerStrategy,\n  type WorktreeFanoutOptions,\n  type WorktreePatchArtifact,\n  worktreeFanout,\n} from './runtime'\n\n/** All valid delegated-loop mode names — used for validation and CLI surfaces. @experimental */\nexport const DELEGATED_LOOP_MODES = ['code', 'review', 'research', 'audit', 'self-improve'] as const\n\n/** @experimental */\nexport type DelegatedLoopMode = (typeof DELEGATED_LOOP_MODES)[number]\n\n/** Type guard — returns true when `value` is a valid `DelegatedLoopMode` string. @experimental */\nexport function isDelegatedLoopMode(value: unknown): value is DelegatedLoopMode {\n  return typeof value === 'string' && (DELEGATED_LOOP_MODES as readonly string[]).includes(value)\n}\n\n/** @experimental A pre-configured loop for one mode. Returns the mode's raw\n *  output; the dispatcher wraps it in a {@link DelegatedLoopResult}. */\nexport type DelegatedLoopRunner<T = unknown> = (signal: AbortSignal) => Promise<T>\n\n/** @experimental Mode → configured runner. Partial: only register the modes a\n *  given product/routine actually uses. */\nexport type DelegatedLoopRegistry = Partial<Record<DelegatedLoopMode, DelegatedLoopRunner>>\n\n/** @experimental Uniform result — never throws from a registered runner; a\n *  thrown engine becomes `{ ok: false, error }` so a routine can record + move on. */\nexport interface DelegatedLoopResult<T = unknown> {\n  mode: DelegatedLoopMode\n  ok: boolean\n  output?: T\n  error?: string\n  durationMs: number\n}\n\n/** @experimental */\nexport interface RunDelegatedLoopOptions {\n  signal?: AbortSignal\n  /** Clock override for deterministic tests. */\n  now?: () => number\n}\n\n/**\n *\n * Dispatch a configured loop by mode. Fails loud (throws `ConfigError`) when no\n * runner is registered for the mode — a routine pointed at an unwired mode is a\n * config bug, not a silent no-op. A runner that throws is captured as\n * `{ ok: false }` so unattended runs record the failure rather than crash.\n *\n * @experimental\n */\nexport async function runDelegatedLoop<T = unknown>(\n  mode: DelegatedLoopMode,\n  registry: DelegatedLoopRegistry,\n  options: RunDelegatedLoopOptions = {},\n): Promise<DelegatedLoopResult<T>> {\n  const runner = registry[mode] as DelegatedLoopRunner<T> | undefined\n  if (!runner) {\n    throw new ConfigError(\n      `runDelegatedLoop: no runner registered for mode '${mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    )\n  }\n  const now = options.now ?? Date.now\n  const signal = options.signal ?? new AbortController().signal\n  const start = now()\n  try {\n    const output = await runner(signal)\n    return { mode, ok: true, output, durationMs: now() - start }\n  } catch (err) {\n    return {\n      mode,\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      durationMs: now() - start,\n    }\n  }\n}\n\n/** @experimental Options for the local-repo `code` runner over the GENERIC recursive path. */\nexport interface WorktreeLoopRunnerOptions {\n  /** Exact profile carried by the personified root that owns this fanout. */\n  rootProfile: AgentProfile\n  /** Absolute path to the local git checkout each worktree is cut from. */\n  repoRoot: string\n  /** The instruction handed to every authored harness (composed under each profile's systemPrompt). */\n  taskPrompt: string\n  /** The supervisor-authored harness profiles — one fanout item (one worktree-CLI leaf) each. */\n  harnesses: ReadonlyArray<AuthoredHarness>\n  /** Conserved budget pool bounding the fanout (equal-k holds by construction). */\n  budget: Budget\n  /** Shell command run in each worktree to derive the tests-PASS signal. */\n  testCmd?: string\n  /** Shell command run in each worktree to derive the typecheck-PASS signal. */\n  typecheckCmd?: string\n  /** Which verification signals the deliverable REQUIRES present-and-passing (default none). */\n  require?: ReadonlyArray<'tests' | 'typecheck'>\n  /** Diff-size cap (lines). */\n  maxDiffLines?: number\n  /** Literal path prefixes the patch must not touch (the secret-floor is always on regardless). */\n  forbiddenPaths?: string[]\n  /** Winner-selection strategy among gated candidates. Default `highest-score`. */\n  winnerStrategy?: WinnerStrategy\n  /** Test seams forwarded to the worktree-CLI leaves so the runner drives offline. */\n  runGit?: WorktreeFanoutOptions['runGit']\n  runHarness?: WorktreeFanoutOptions['runHarness']\n  runCommand?: WorktreeFanoutOptions['runCommand']\n}\n\n/**\n *\n * `code` mode on the GENERIC recursive path: author one `AgentProfile` per harness, run them as a\n * `worktreeFanout` (N `createWorktreeCliExecutor` leaves, each `gateOnDeliverable`) through\n * `runPersonified` on the keystone Supervisor. The sandbox-session counterpart that drives the in-box\n * harness over a `SandboxClient` is `detachedSessionDelegate` (`./mcp/delegates`); here there is no\n * `runAgentRounds` driver, no role-coupled delegate — the harness list is the fanout, the gate is\n * `patchDelivered`,\n * the winner is the shared valid-only selector (NOT `defaultSelectWinner`, whose non-valid fallback\n * would surface an ungated patch). Equal-k holds by the conserved budget pool. Returns the winning\n * patch artifact, or throws when no candidate is delivered (fail loud, never a vacuous done).\n *\n * @experimental\n */\nexport function worktreeLoopRunner(\n  options: WorktreeLoopRunnerOptions,\n): DelegatedLoopRunner<WorktreePatchArtifact> {\n  const shape = worktreeFanout<string>({\n    repoRoot: options.repoRoot,\n    taskPrompt: options.taskPrompt,\n    harnesses: options.harnesses,\n    ...(options.testCmd !== undefined ? { testCmd: options.testCmd } : {}),\n    ...(options.typecheckCmd !== undefined ? { typecheckCmd: options.typecheckCmd } : {}),\n    ...(options.require !== undefined ? { require: options.require } : {}),\n    ...(options.maxDiffLines !== undefined ? { maxDiffLines: options.maxDiffLines } : {}),\n    ...(options.forbiddenPaths !== undefined ? { forbiddenPaths: options.forbiddenPaths } : {}),\n    ...(options.winnerStrategy !== undefined ? { winnerStrategy: options.winnerStrategy } : {}),\n    ...(options.runGit ? { runGit: options.runGit } : {}),\n    ...(options.runHarness ? { runHarness: options.runHarness } : {}),\n    ...(options.runCommand ? { runCommand: options.runCommand } : {}),\n  })\n  // The persona's only role here is to carry the fanout shape onto the Supervisor; each item's\n  // executor is BYO (the gated worktree-CLI leaf), so the registry only needs to pass BYO through.\n  const persona = definePersona<WorktreePatchArtifact>({\n    name: 'worktree-coder',\n    root: { profile: options.rootProfile, harness: null },\n    directive: 'deliver a minimal validated patch on a fresh worktree',\n    context: { role: 'coder' },\n    executors: { registry: createExecutorRegistry() },\n  })\n  return async (signal) => {\n    const result = await runPersonified<string, WorktreePatchArtifact>({\n      persona,\n      shape,\n      task: options.taskPrompt,\n      budget: options.budget,\n      signal,\n    })\n    if (result.kind !== 'winner' || result.out.kind !== 'done') {\n      const blockers =\n        result.kind === 'winner' && result.out.kind === 'blocked'\n          ? result.out.blockers.join('; ')\n          : `supervisor settled ${result.kind}`\n      throw new Error(`worktreeLoopRunner: no delivered patch (${blockers})`)\n    }\n    return result.out.deliverable\n  }\n}\n\n/** @experimental A fact rejected at the KB gate — surfaced, never dropped. */\nexport interface VetoedFact {\n  candidate: FactCandidate\n  vetoedBy?: string\n  reason?: string\n}\n\n/** @experimental */\nexport interface ResearchLoopResult {\n  /** Facts that passed the fail-closed gate — safe to write to the KB. */\n  accepted: FactCandidate[]\n  /** Facts the gate vetoed in the final round — escalate, do not silently drop. */\n  vetoed: VetoedFact[]\n  /** Research rounds actually run. */\n  rounds: number\n}\n\n/** @experimental Options for the default `research` runner. */\nexport interface ResearchLoopRunnerOptions {\n  /**\n   * The research engine (the consumer's web/doc searcher + extractor). Called\n   * each round with the prior round's vetoes so it can re-research the gaps.\n   * Returns fact candidates carrying their grounding (`verbatimPassage` +\n   * `sourceText`).\n   */\n  research: (round: number, vetoed: VetoedFact[]) => Promise<FactCandidate[]>\n  /** Gate config (extra judges, self-artifact kinds, …). The floor is always on. */\n  gate?: CreateKbGateOptions\n  /** Max research rounds (correct-on-veto remediation). Default 1. */\n  maxRounds?: number\n}\n\n/**\n * `research` mode — research-in-a-loop with valid-only KB growth.\n *\n * Each round: research → gate every candidate (fail-closed; passage MUST be in\n * the source) → accept the clean ones → re-research the vetoed ones next round,\n * up to `maxRounds`. Vetoed facts in the final round are RETURNED (escalate,\n * never silently dropped) so the caller audits vs retries.\n *\n * @experimental\n */\nexport function researchLoopRunner(\n  o: ResearchLoopRunnerOptions,\n): DelegatedLoopRunner<ResearchLoopResult> {\n  const gate = createKbGate(o.gate)\n  const maxRounds = Math.max(1, Math.trunc(o.maxRounds ?? 1))\n  return async (signal) => {\n    const accepted: FactCandidate[] = []\n    let vetoed: VetoedFact[] = []\n    let rounds = 0\n    for (let round = 0; round < maxRounds; round += 1) {\n      if (signal.aborted) break\n      rounds += 1\n      const candidates = await o.research(round, vetoed)\n      if (candidates.length === 0) break\n      vetoed = []\n      for (const c of candidates) {\n        const v = await gate(c)\n        if (v.accepted) accepted.push(c)\n        else vetoed.push({ candidate: c, vetoedBy: v.vetoedBy, reason: v.reason })\n      }\n      if (vetoed.length === 0) break\n    }\n    return { accepted, vetoed, rounds }\n  }\n}\n\n/**\n * `audit` mode — analyst loop over captured trace/run data.\n *\n * @experimental\n */\nexport function auditLoopRunner<TProposal = unknown, TEdit = unknown>(\n  options: RunAnalystLoopOpts,\n): DelegatedLoopRunner<RunAnalystLoopResult<TProposal, TEdit>> {\n  return async () => runAnalystLoop<TProposal, TEdit>(options)\n}\n","#!/usr/bin/env node\n/**\n *\n * `agent-runtime-loop` — the schedulable entrypoint for the configured\n * delegated loop-runner. A cron job / routine / Makefile target invokes:\n *\n *   agent-runtime-loop --mode research --config ./loops.config.js\n *\n * The config module wires the registry (with full access to env / creds —\n * which is why the deps live there, not in this generic bin). It must default-\n * export a `DelegatedLoopRegistry`, or a `() => DelegatedLoopRegistry | Promise<…>`.\n * The bin runs the selected mode, prints the `DelegatedLoopResult` as JSON, and\n * exits 0 on `ok`, 1 on a recorded failure, 2 on a usage/config error.\n *\n * @experimental\n */\n\nimport {\n  DELEGATED_LOOP_MODES,\n  type DelegatedLoopMode,\n  type DelegatedLoopRegistry,\n  type DelegatedLoopResult,\n  isDelegatedLoopMode,\n  runDelegatedLoop,\n} from './loop-runner'\n\n/** @experimental Parsed CLI invocation. */\nexport interface LoopRunnerCliArgs {\n  mode: string\n  /** Loads the registry — the bin wires this from `--config`; tests inject a stub. */\n  loadRegistry: () => Promise<DelegatedLoopRegistry> | DelegatedLoopRegistry\n  now?: () => number\n}\n\n/** @experimental */\nexport interface LoopRunnerCliResult {\n  exitCode: number\n  result?: DelegatedLoopResult\n  error?: string\n}\n\n/**\n *\n * Pure CLI core (no process / argv / IO) so it's unit-testable: validate the\n * mode, load the registry, dispatch, map to an exit code (0 ok / 1 failed /\n * 2 usage). Exported for embedding in custom runners + tests.\n *\n * @experimental\n */\nexport async function runLoopRunnerCli(args: LoopRunnerCliArgs): Promise<LoopRunnerCliResult> {\n  if (!isDelegatedLoopMode(args.mode)) {\n    return {\n      exitCode: 2,\n      error: `unknown mode '${args.mode}' (expected one of: ${DELEGATED_LOOP_MODES.join(', ')})`,\n    }\n  }\n  let registry: DelegatedLoopRegistry\n  try {\n    registry = await args.loadRegistry()\n  } catch (err) {\n    return { exitCode: 2, error: `failed to load registry: ${errMsg(err)}` }\n  }\n  if (!registry[args.mode]) {\n    return {\n      exitCode: 2,\n      error: `config registers no runner for mode '${args.mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    }\n  }\n  // runDelegatedLoop throws only on a missing runner (guarded above); a failing\n  // engine is captured as { ok: false } → exit 1, not a crash.\n  const result = await runDelegatedLoop(args.mode as DelegatedLoopMode, registry, {\n    ...(args.now ? { now: args.now } : {}),\n  })\n  return { exitCode: result.ok ? 0 : 1, result }\n}\n\n/** Parse `--mode X --config Y` from an argv tail (`process.argv.slice(2)`). */\nexport function parseLoopRunnerArgv(argv: string[]): { mode?: string; config?: string } {\n  const out: { mode?: string; config?: string } = {}\n  for (let i = 0; i < argv.length; i += 1) {\n    const a = argv[i]\n    if (a === '--mode') out.mode = argv[++i]\n    else if (a === '--config') out.config = argv[++i]\n    else if (a?.startsWith('--mode=')) out.mode = a.slice('--mode='.length)\n    else if (a?.startsWith('--config=')) out.config = a.slice('--config='.length)\n  }\n  return out\n}\n\n/** Normalize a config module's default export → a registry. */\nfunction resolveRegistry(mod: unknown): DelegatedLoopRegistry {\n  const def = (mod as { default?: unknown })?.default ?? mod\n  const value = typeof def === 'function' ? (def as () => unknown)() : def\n  return value as DelegatedLoopRegistry\n}\n\nfunction errMsg(err: unknown): string {\n  return err instanceof Error ? err.message : String(err)\n}\n\n/** The argv → IO → exit shell. Kept thin; logic lives in `runLoopRunnerCli`. */\nasync function main(): Promise<void> {\n  const { mode, config } = parseLoopRunnerArgv(process.argv.slice(2))\n  if (!mode || !config) {\n    process.stderr.write(\n      'usage: agent-runtime-loop --mode <mode> --config <module>\\n' +\n        `  modes: ${DELEGATED_LOOP_MODES.join(' | ')}\\n` +\n        '  config: a JS/TS module default-exporting a DelegatedLoopRegistry (or a factory)\\n',\n    )\n    process.exit(2)\n  }\n  const { pathToFileURL } = await import('node:url')\n  const { resolve } = await import('node:path')\n  const cli = await runLoopRunnerCli({\n    mode,\n    loadRegistry: async () => resolveRegistry(await import(pathToFileURL(resolve(config)).href)),\n  })\n  process.stdout.write(`${JSON.stringify(cli.result ?? { error: cli.error }, null, 2)}\\n`)\n  if (cli.error) process.stderr.write(`${cli.error}\\n`)\n  process.exit(cli.exitCode)\n}\n\n// Run only when executed as the bin — never when imported for the testable\n// core, and never when bundled into a runtime that has no `process.argv`\n// (e.g. Cloudflare Workers, where `process` is a shim without `argv`). Reading\n// `process.argv[1]` directly would throw at module load there; `process.argv?.`\n// keeps the guard a no-op instead of crashing the Worker on startup.\nconst invokedScript = typeof process !== 'undefined' ? process.argv?.[1] : undefined\nif (invokedScript && /loop-runner-bin\\.(js|ts|mjs)$/.test(invokedScript)) {\n  void main()\n}\n"],"mappings":";;;;;;;AAyCA,MAAa,uBAAuB;CAAC;CAAQ;CAAU;CAAY;CAAS;AAAc;;AAM1F,SAAgB,oBAAoB,OAA4C;CAC9E,OAAO,OAAO,UAAU,YAAa,qBAA2C,SAAS,KAAK;AAChG;;;;;;;;;;AAoCA,eAAsB,iBACpB,MACA,UACA,UAAmC,CAAC,GACH;CACjC,MAAM,SAAS,SAAS;CACxB,IAAI,CAAC,QACH,MAAM,IAAI,YACR,oDAAoD,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC,EACH;CAEF,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,CAAC,CAAC;CACvD,MAAM,QAAQ,IAAI;CAClB,IAAI;EAEF,OAAO;GAAE;GAAM,IAAI;GAAM,QAAA,MADJ,OAAO,MAAM;GACD,YAAY,IAAI,IAAI;EAAM;CAC7D,SAAS,KAAK;EACZ,OAAO;GACL;GACA,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACtD,YAAY,IAAI,IAAI;EACtB;CACF;AACF;;;;;;;;;;;;;;;AA8CA,SAAgB,mBACd,SAC4C;CAC5C,MAAM,QAAQ,eAAuB;EACnC,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACnD,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAC/D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;CACjE,CAAC;CAGD,MAAM,UAAU,cAAqC;EACnD,MAAM;EACN,MAAM;GAAE,SAAS,QAAQ;GAAa,SAAS;EAAK;EACpD,WAAW;EACX,SAAS,EAAE,MAAM,QAAQ;EACzB,WAAW,EAAE,UAAU,uBAAuB,EAAE;CAClD,CAAC;CACD,OAAO,OAAO,WAAW;EACvB,MAAM,SAAS,MAAM,eAA8C;GACjE;GACA;GACA,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB;EACF,CAAC;EACD,IAAI,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC1D,MAAM,WACJ,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,YAC5C,OAAO,IAAI,SAAS,KAAK,IAAI,IAC7B,sBAAsB,OAAO;GACnC,MAAM,IAAI,MAAM,2CAA2C,SAAS,EAAE;EACxE;EACA,OAAO,OAAO,IAAI;CACpB;AACF;;;;;;;;;;;AA4CA,SAAgB,mBACd,GACyC;CACzC,MAAM,OAAO,aAAa,EAAE,IAAI;CAChC,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1D,OAAO,OAAO,WAAW;EACvB,MAAM,WAA4B,CAAC;EACnC,IAAI,SAAuB,CAAC;EAC5B,IAAI,SAAS;EACb,KAAK,IAAI,QAAQ,GAAG,QAAQ,WAAW,SAAS,GAAG;GACjD,IAAI,OAAO,SAAS;GACpB,UAAU;GACV,MAAM,aAAa,MAAM,EAAE,SAAS,OAAO,MAAM;GACjD,IAAI,WAAW,WAAW,GAAG;GAC7B,SAAS,CAAC;GACV,KAAK,MAAM,KAAK,YAAY;IAC1B,MAAM,IAAI,MAAM,KAAK,CAAC;IACtB,IAAI,EAAE,UAAU,SAAS,KAAK,CAAC;SAC1B,OAAO,KAAK;KAAE,WAAW;KAAG,UAAU,EAAE;KAAU,QAAQ,EAAE;IAAO,CAAC;GAC3E;GACA,IAAI,OAAO,WAAW,GAAG;EAC3B;EACA,OAAO;GAAE;GAAU;GAAQ;EAAO;CACpC;AACF;;;;;;AAOA,SAAgB,gBACd,SAC6D;CAC7D,OAAO,YAAY,eAAiC,OAAO;AAC7D;;;;;;;;;;;;;;;;;;;;;;;;;;ACvOA,eAAsB,iBAAiB,MAAuD;CAC5F,IAAI,CAAC,oBAAoB,KAAK,IAAI,GAChC,OAAO;EACL,UAAU;EACV,OAAO,iBAAiB,KAAK,KAAK,sBAAsB,qBAAqB,KAAK,IAAI,EAAE;CAC1F;CAEF,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,KAAK,aAAa;CACrC,SAAS,KAAK;EACZ,OAAO;GAAE,UAAU;GAAG,OAAO,4BAA4B,OAAO,GAAG;EAAI;CACzE;CACA,IAAI,CAAC,SAAS,KAAK,OACjB,OAAO;EACL,UAAU;EACV,OAAO,wCAAwC,KAAK,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC;CACH;CAIF,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAA2B,UAAU,EAC9E,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,EACtC,CAAC;CACD,OAAO;EAAE,UAAU,OAAO,KAAK,IAAI;EAAG;CAAO;AAC/C;;AAGA,SAAgB,oBAAoB,MAAoD;CACtF,MAAM,MAA0C,CAAC;CACjD,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;EACvC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACjC,IAAI,MAAM,YAAY,IAAI,SAAS,KAAK,EAAE;OAC1C,IAAI,GAAG,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAgB;OACjE,IAAI,GAAG,WAAW,WAAW,GAAG,IAAI,SAAS,EAAE,MAAM,CAAkB;CAC9E;CACA,OAAO;AACT;;AAGA,SAAS,gBAAgB,KAAqC;CAC5D,MAAM,MAAO,KAA+B,WAAW;CAEvD,OADc,OAAO,QAAQ,aAAc,IAAsB,IAAI;AAEvE;AAEA,SAAS,OAAO,KAAsB;CACpC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;;AAGA,eAAe,OAAsB;CACnC,MAAM,EAAE,MAAM,WAAW,oBAAoB,QAAQ,KAAK,MAAM,CAAC,CAAC;CAClE,IAAI,CAAC,QAAQ,CAAC,QAAQ;EACpB,QAAQ,OAAO,MACb;WACc,qBAAqB,KAAK,KAAK,EAAE;CAEjD;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,MAAM,EAAE,kBAAkB,MAAM,OAAO;CACvC,MAAM,EAAE,YAAY,MAAM,OAAO;CACjC,MAAM,MAAM,MAAM,iBAAiB;EACjC;EACA,cAAc,YAAY,gBAAgB,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,CAAC,KAAK;CAC7F,CAAC;CACD,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,IAAI,UAAU,EAAE,OAAO,IAAI,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG;CACvF,IAAI,IAAI,OAAO,QAAQ,OAAO,MAAM,GAAG,IAAI,MAAM,GAAG;CACpD,QAAQ,KAAK,IAAI,QAAQ;AAC3B;AAOA,MAAM,gBAAgB,OAAO,YAAY,cAAc,QAAQ,OAAO,KAAK,KAAA;AAC3E,IAAI,iBAAiB,gCAAgC,KAAK,aAAa,GACrE,KAAU"}
+{"version":3,"file":"loop-runner-bin-CzewdsxT.js","names":[],"sources":["../src/loop-runner.ts","../src/loop-runner-bin.ts"],"sourcesContent":["/**\n *\n * `runDelegatedLoop` — the configured delegated loop-runner.\n *\n * One typed entrypoint a worker agent (or a scheduled routine) calls to run a\n * disciplined loop in a chosen MODE, over agent-runtime's hardened engines:\n *\n *   code         → build-in-a-loop on the GENERIC recursive path (worktreeLoopRunner: author one\n *                  `AgentProfile` per harness → worktree-CLI leaves → `patchDelivered` gate)\n *   review       → caller-registered runner — a `code` runner with an approval gate over candidates\n *   research     → research-in-a-loop with valid-only KB growth (createKbGate)\n *   audit        → analyze trace/run data → findings (runAnalystLoop, caller-wired)\n *   self-improve → caller-registered `improve(profile, options)` run\n *\n * It is intentionally a thin façade: the value is that EVERY product reuses the\n * one hardened engine instead of forking delegation logic. The dispatcher owns\n * mode routing, timing, fail-loud on an unregistered mode, and a uniform result\n * shape; each mode's engine is a pre-configured runner in the registry (build it\n * with the factories below, or inject your own / a stub).\n *\n * @experimental\n */\n\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { runAnalystLoop } from './analyst-loop'\nimport type { RunAnalystLoopOpts, RunAnalystLoopResult } from './analyst-loop/types'\nimport { ConfigError } from './errors'\nimport { type CreateKbGateOptions, createKbGate, type FactCandidate } from './mcp/kb-gate'\nimport {\n  type AuthoredHarness,\n  type Budget,\n  createExecutorRegistry,\n  definePersona,\n  runPersonified,\n  type WinnerStrategy,\n  type WorktreeFanoutOptions,\n  type WorktreePatchArtifact,\n  worktreeFanout,\n} from './runtime'\n\n/** All valid delegated-loop mode names — used for validation and CLI surfaces. @experimental */\nexport const DELEGATED_LOOP_MODES = ['code', 'review', 'research', 'audit', 'self-improve'] as const\n\n/** @experimental */\nexport type DelegatedLoopMode = (typeof DELEGATED_LOOP_MODES)[number]\n\n/** Type guard — returns true when `value` is a valid `DelegatedLoopMode` string. @experimental */\nexport function isDelegatedLoopMode(value: unknown): value is DelegatedLoopMode {\n  return typeof value === 'string' && (DELEGATED_LOOP_MODES as readonly string[]).includes(value)\n}\n\n/** @experimental A pre-configured loop for one mode. Returns the mode's raw\n *  output; the dispatcher wraps it in a {@link DelegatedLoopResult}. */\nexport type DelegatedLoopRunner<T = unknown> = (signal: AbortSignal) => Promise<T>\n\n/** @experimental Mode → configured runner. Partial: only register the modes a\n *  given product/routine actually uses. */\nexport type DelegatedLoopRegistry = Partial<Record<DelegatedLoopMode, DelegatedLoopRunner>>\n\n/** @experimental Uniform result — never throws from a registered runner; a\n *  thrown engine becomes `{ ok: false, error }` so a routine can record + move on. */\nexport interface DelegatedLoopResult<T = unknown> {\n  mode: DelegatedLoopMode\n  ok: boolean\n  output?: T\n  error?: string\n  durationMs: number\n}\n\n/** @experimental */\nexport interface RunDelegatedLoopOptions {\n  signal?: AbortSignal\n  /** Clock override for deterministic tests. */\n  now?: () => number\n}\n\n/**\n *\n * Dispatch a configured loop by mode. Fails loud (throws `ConfigError`) when no\n * runner is registered for the mode — a routine pointed at an unwired mode is a\n * config bug, not a silent no-op. A runner that throws is captured as\n * `{ ok: false }` so unattended runs record the failure rather than crash.\n *\n * @experimental\n */\nexport async function runDelegatedLoop<T = unknown>(\n  mode: DelegatedLoopMode,\n  registry: DelegatedLoopRegistry,\n  options: RunDelegatedLoopOptions = {},\n): Promise<DelegatedLoopResult<T>> {\n  const runner = registry[mode] as DelegatedLoopRunner<T> | undefined\n  if (!runner) {\n    throw new ConfigError(\n      `runDelegatedLoop: no runner registered for mode '${mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    )\n  }\n  const now = options.now ?? Date.now\n  const signal = options.signal ?? new AbortController().signal\n  const start = now()\n  try {\n    const output = await runner(signal)\n    return { mode, ok: true, output, durationMs: now() - start }\n  } catch (err) {\n    return {\n      mode,\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      durationMs: now() - start,\n    }\n  }\n}\n\n/** @experimental Options for the local-repo `code` runner over the GENERIC recursive path. */\nexport interface WorktreeLoopRunnerOptions {\n  /** Exact profile carried by the personified root that owns this fanout. */\n  rootProfile: AgentProfile\n  /** Absolute path to the local git checkout each worktree is cut from. */\n  repoRoot: string\n  /** The instruction handed to every authored harness (composed under each profile's systemPrompt). */\n  taskPrompt: string\n  /** The supervisor-authored harness profiles — one fanout item (one worktree-CLI leaf) each. */\n  harnesses: ReadonlyArray<AuthoredHarness>\n  /** Conserved budget pool bounding the fanout (equal-k holds by construction). */\n  budget: Budget\n  /** Shell command run in each worktree to derive the tests-PASS signal. */\n  testCmd?: string\n  /** Shell command run in each worktree to derive the typecheck-PASS signal. */\n  typecheckCmd?: string\n  /** Which verification signals the deliverable REQUIRES present-and-passing (default none). */\n  require?: ReadonlyArray<'tests' | 'typecheck'>\n  /** Diff-size cap (lines). */\n  maxDiffLines?: number\n  /** Literal path prefixes the patch must not touch (the secret-floor is always on regardless). */\n  forbiddenPaths?: string[]\n  /** Winner-selection strategy among gated candidates. Default `highest-score`. */\n  winnerStrategy?: WinnerStrategy\n  /** Test seams forwarded to the worktree-CLI leaves so the runner drives offline. */\n  runGit?: WorktreeFanoutOptions['runGit']\n  runHarness?: WorktreeFanoutOptions['runHarness']\n  runCommand?: WorktreeFanoutOptions['runCommand']\n}\n\n/**\n *\n * `code` mode on the GENERIC recursive path: author one `AgentProfile` per harness, run them as a\n * `worktreeFanout` (N `createWorktreeCliExecutor` leaves, each `gateOnDeliverable`) through\n * `runPersonified` on the keystone Supervisor. The sandbox-session counterpart that drives the in-box\n * harness over a `SandboxClient` is `detachedSessionDelegate` (`./mcp/delegates`); here there is no\n * `runAgentRounds` driver, no role-coupled delegate — the harness list is the fanout, the gate is\n * `patchDelivered`,\n * the winner is the shared valid-only selector (NOT `defaultSelectWinner`, whose non-valid fallback\n * would surface an ungated patch). Equal-k holds by the conserved budget pool. Returns the winning\n * patch artifact, or throws when no candidate is delivered (fail loud, never a vacuous done).\n *\n * @experimental\n */\nexport function worktreeLoopRunner(\n  options: WorktreeLoopRunnerOptions,\n): DelegatedLoopRunner<WorktreePatchArtifact> {\n  const shape = worktreeFanout<string>({\n    repoRoot: options.repoRoot,\n    taskPrompt: options.taskPrompt,\n    harnesses: options.harnesses,\n    ...(options.testCmd !== undefined ? { testCmd: options.testCmd } : {}),\n    ...(options.typecheckCmd !== undefined ? { typecheckCmd: options.typecheckCmd } : {}),\n    ...(options.require !== undefined ? { require: options.require } : {}),\n    ...(options.maxDiffLines !== undefined ? { maxDiffLines: options.maxDiffLines } : {}),\n    ...(options.forbiddenPaths !== undefined ? { forbiddenPaths: options.forbiddenPaths } : {}),\n    ...(options.winnerStrategy !== undefined ? { winnerStrategy: options.winnerStrategy } : {}),\n    ...(options.runGit ? { runGit: options.runGit } : {}),\n    ...(options.runHarness ? { runHarness: options.runHarness } : {}),\n    ...(options.runCommand ? { runCommand: options.runCommand } : {}),\n  })\n  // The persona's only role here is to carry the fanout shape onto the Supervisor; each item's\n  // executor is BYO (the gated worktree-CLI leaf), so the registry only needs to pass BYO through.\n  const persona = definePersona<WorktreePatchArtifact>({\n    name: 'worktree-coder',\n    root: { profile: options.rootProfile, harness: null },\n    directive: 'deliver a minimal validated patch on a fresh worktree',\n    context: { role: 'coder' },\n    executors: { registry: createExecutorRegistry() },\n  })\n  return async (signal) => {\n    const result = await runPersonified<string, WorktreePatchArtifact>({\n      persona,\n      shape,\n      task: options.taskPrompt,\n      budget: options.budget,\n      signal,\n    })\n    if (result.kind !== 'winner' || result.out.kind !== 'done') {\n      const blockers =\n        result.kind === 'winner' && result.out.kind === 'blocked'\n          ? result.out.blockers.join('; ')\n          : `supervisor settled ${result.kind}`\n      throw new Error(`worktreeLoopRunner: no delivered patch (${blockers})`)\n    }\n    return result.out.deliverable\n  }\n}\n\n/** @experimental A fact rejected at the KB gate — surfaced, never dropped. */\nexport interface VetoedFact {\n  candidate: FactCandidate\n  vetoedBy?: string\n  reason?: string\n}\n\n/** @experimental */\nexport interface ResearchLoopResult {\n  /** Facts that passed the fail-closed gate — safe to write to the KB. */\n  accepted: FactCandidate[]\n  /** Facts the gate vetoed in the final round — escalate, do not silently drop. */\n  vetoed: VetoedFact[]\n  /** Research rounds actually run. */\n  rounds: number\n}\n\n/** @experimental Options for the default `research` runner. */\nexport interface ResearchLoopRunnerOptions {\n  /**\n   * The research engine (the consumer's web/doc searcher + extractor). Called\n   * each round with the prior round's vetoes so it can re-research the gaps.\n   * Returns fact candidates carrying their grounding (`verbatimPassage` +\n   * `sourceText`).\n   */\n  research: (round: number, vetoed: VetoedFact[]) => Promise<FactCandidate[]>\n  /** Gate config (extra judges, self-artifact kinds, …). The floor is always on. */\n  gate?: CreateKbGateOptions\n  /** Max research rounds (correct-on-veto remediation). Default 1. */\n  maxRounds?: number\n}\n\n/**\n * `research` mode — research-in-a-loop with valid-only KB growth.\n *\n * Each round: research → gate every candidate (fail-closed; passage MUST be in\n * the source) → accept the clean ones → re-research the vetoed ones next round,\n * up to `maxRounds`. Vetoed facts in the final round are RETURNED (escalate,\n * never silently dropped) so the caller audits vs retries.\n *\n * @experimental\n */\nexport function researchLoopRunner(\n  o: ResearchLoopRunnerOptions,\n): DelegatedLoopRunner<ResearchLoopResult> {\n  const gate = createKbGate(o.gate)\n  const maxRounds = Math.max(1, Math.trunc(o.maxRounds ?? 1))\n  return async (signal) => {\n    const accepted: FactCandidate[] = []\n    let vetoed: VetoedFact[] = []\n    let rounds = 0\n    for (let round = 0; round < maxRounds; round += 1) {\n      if (signal.aborted) break\n      rounds += 1\n      const candidates = await o.research(round, vetoed)\n      if (candidates.length === 0) break\n      vetoed = []\n      for (const c of candidates) {\n        const v = await gate(c)\n        if (v.accepted) accepted.push(c)\n        else vetoed.push({ candidate: c, vetoedBy: v.vetoedBy, reason: v.reason })\n      }\n      if (vetoed.length === 0) break\n    }\n    return { accepted, vetoed, rounds }\n  }\n}\n\n/**\n * `audit` mode — analyst loop over captured trace/run data.\n *\n * @experimental\n */\nexport function auditLoopRunner<TProposal = unknown, TEdit = unknown>(\n  options: RunAnalystLoopOpts,\n): DelegatedLoopRunner<RunAnalystLoopResult<TProposal, TEdit>> {\n  return async () => runAnalystLoop<TProposal, TEdit>(options)\n}\n","#!/usr/bin/env node\n/**\n *\n * `agent-runtime-loop` — the schedulable entrypoint for the configured\n * delegated loop-runner. A cron job / routine / Makefile target invokes:\n *\n *   agent-runtime-loop --mode research --config ./loops.config.js\n *\n * The config module wires the registry (with full access to env / creds —\n * which is why the deps live there, not in this generic bin). It must default-\n * export a `DelegatedLoopRegistry`, or a `() => DelegatedLoopRegistry | Promise<…>`.\n * The bin runs the selected mode, prints the `DelegatedLoopResult` as JSON, and\n * exits 0 on `ok`, 1 on a recorded failure, 2 on a usage/config error.\n *\n * @experimental\n */\n\nimport {\n  DELEGATED_LOOP_MODES,\n  type DelegatedLoopMode,\n  type DelegatedLoopRegistry,\n  type DelegatedLoopResult,\n  isDelegatedLoopMode,\n  runDelegatedLoop,\n} from './loop-runner'\n\n/** @experimental Parsed CLI invocation. */\nexport interface LoopRunnerCliArgs {\n  mode: string\n  /** Loads the registry — the bin wires this from `--config`; tests inject a stub. */\n  loadRegistry: () => Promise<DelegatedLoopRegistry> | DelegatedLoopRegistry\n  now?: () => number\n}\n\n/** @experimental */\nexport interface LoopRunnerCliResult {\n  exitCode: number\n  result?: DelegatedLoopResult\n  error?: string\n}\n\n/**\n *\n * Pure CLI core (no process / argv / IO) so it's unit-testable: validate the\n * mode, load the registry, dispatch, map to an exit code (0 ok / 1 failed /\n * 2 usage). Exported for embedding in custom runners + tests.\n *\n * @experimental\n */\nexport async function runLoopRunnerCli(args: LoopRunnerCliArgs): Promise<LoopRunnerCliResult> {\n  if (!isDelegatedLoopMode(args.mode)) {\n    return {\n      exitCode: 2,\n      error: `unknown mode '${args.mode}' (expected one of: ${DELEGATED_LOOP_MODES.join(', ')})`,\n    }\n  }\n  let registry: DelegatedLoopRegistry\n  try {\n    registry = await args.loadRegistry()\n  } catch (err) {\n    return { exitCode: 2, error: `failed to load registry: ${errMsg(err)}` }\n  }\n  if (!registry[args.mode]) {\n    return {\n      exitCode: 2,\n      error: `config registers no runner for mode '${args.mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    }\n  }\n  // runDelegatedLoop throws only on a missing runner (guarded above); a failing\n  // engine is captured as { ok: false } → exit 1, not a crash.\n  const result = await runDelegatedLoop(args.mode as DelegatedLoopMode, registry, {\n    ...(args.now ? { now: args.now } : {}),\n  })\n  return { exitCode: result.ok ? 0 : 1, result }\n}\n\n/** Parse `--mode X --config Y` from an argv tail (`process.argv.slice(2)`). */\nexport function parseLoopRunnerArgv(argv: string[]): { mode?: string; config?: string } {\n  const out: { mode?: string; config?: string } = {}\n  for (let i = 0; i < argv.length; i += 1) {\n    const a = argv[i]\n    if (a === '--mode') out.mode = argv[++i]\n    else if (a === '--config') out.config = argv[++i]\n    else if (a?.startsWith('--mode=')) out.mode = a.slice('--mode='.length)\n    else if (a?.startsWith('--config=')) out.config = a.slice('--config='.length)\n  }\n  return out\n}\n\n/** Normalize a config module's default export → a registry. */\nfunction resolveRegistry(mod: unknown): DelegatedLoopRegistry {\n  const def = (mod as { default?: unknown })?.default ?? mod\n  const value = typeof def === 'function' ? (def as () => unknown)() : def\n  return value as DelegatedLoopRegistry\n}\n\nfunction errMsg(err: unknown): string {\n  return err instanceof Error ? err.message : String(err)\n}\n\n/** The argv → IO → exit shell. Kept thin; logic lives in `runLoopRunnerCli`. */\nasync function main(): Promise<void> {\n  const { mode, config } = parseLoopRunnerArgv(process.argv.slice(2))\n  if (!mode || !config) {\n    process.stderr.write(\n      'usage: agent-runtime-loop --mode <mode> --config <module>\\n' +\n        `  modes: ${DELEGATED_LOOP_MODES.join(' | ')}\\n` +\n        '  config: a JS/TS module default-exporting a DelegatedLoopRegistry (or a factory)\\n',\n    )\n    process.exit(2)\n  }\n  const { pathToFileURL } = await import('node:url')\n  const { resolve } = await import('node:path')\n  const cli = await runLoopRunnerCli({\n    mode,\n    loadRegistry: async () => resolveRegistry(await import(pathToFileURL(resolve(config)).href)),\n  })\n  process.stdout.write(`${JSON.stringify(cli.result ?? { error: cli.error }, null, 2)}\\n`)\n  if (cli.error) process.stderr.write(`${cli.error}\\n`)\n  process.exit(cli.exitCode)\n}\n\n// Run only when executed as the bin — never when imported for the testable\n// core, and never when bundled into a runtime that has no `process.argv`\n// (e.g. Cloudflare Workers, where `process` is a shim without `argv`). Reading\n// `process.argv[1]` directly would throw at module load there; `process.argv?.`\n// keeps the guard a no-op instead of crashing the Worker on startup.\nconst invokedScript = typeof process !== 'undefined' ? process.argv?.[1] : undefined\nif (invokedScript && /loop-runner-bin\\.(js|ts|mjs)$/.test(invokedScript)) {\n  void main()\n}\n"],"mappings":";;;;;;;AAyCA,MAAa,uBAAuB;CAAC;CAAQ;CAAU;CAAY;CAAS;AAAc;;AAM1F,SAAgB,oBAAoB,OAA4C;CAC9E,OAAO,OAAO,UAAU,YAAa,qBAA2C,SAAS,KAAK;AAChG;;;;;;;;;;AAoCA,eAAsB,iBACpB,MACA,UACA,UAAmC,CAAC,GACH;CACjC,MAAM,SAAS,SAAS;CACxB,IAAI,CAAC,QACH,MAAM,IAAI,YACR,oDAAoD,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC,EACH;CAEF,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,CAAC,CAAC;CACvD,MAAM,QAAQ,IAAI;CAClB,IAAI;EAEF,OAAO;GAAE;GAAM,IAAI;GAAM,QAAA,MADJ,OAAO,MAAM;GACD,YAAY,IAAI,IAAI;EAAM;CAC7D,SAAS,KAAK;EACZ,OAAO;GACL;GACA,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACtD,YAAY,IAAI,IAAI;EACtB;CACF;AACF;;;;;;;;;;;;;;;AA8CA,SAAgB,mBACd,SAC4C;CAC5C,MAAM,QAAQ,eAAuB;EACnC,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACpE,GAAI,QAAQ,iBAAiB,KAAA,IAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACnF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EACzF,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACnD,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAC/D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;CACjE,CAAC;CAGD,MAAM,UAAU,cAAqC;EACnD,MAAM;EACN,MAAM;GAAE,SAAS,QAAQ;GAAa,SAAS;EAAK;EACpD,WAAW;EACX,SAAS,EAAE,MAAM,QAAQ;EACzB,WAAW,EAAE,UAAU,uBAAuB,EAAE;CAClD,CAAC;CACD,OAAO,OAAO,WAAW;EACvB,MAAM,SAAS,MAAM,eAA8C;GACjE;GACA;GACA,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB;EACF,CAAC;EACD,IAAI,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC1D,MAAM,WACJ,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,YAC5C,OAAO,IAAI,SAAS,KAAK,IAAI,IAC7B,sBAAsB,OAAO;GACnC,MAAM,IAAI,MAAM,2CAA2C,SAAS,EAAE;EACxE;EACA,OAAO,OAAO,IAAI;CACpB;AACF;;;;;;;;;;;AA4CA,SAAgB,mBACd,GACyC;CACzC,MAAM,OAAO,aAAa,EAAE,IAAI;CAChC,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1D,OAAO,OAAO,WAAW;EACvB,MAAM,WAA4B,CAAC;EACnC,IAAI,SAAuB,CAAC;EAC5B,IAAI,SAAS;EACb,KAAK,IAAI,QAAQ,GAAG,QAAQ,WAAW,SAAS,GAAG;GACjD,IAAI,OAAO,SAAS;GACpB,UAAU;GACV,MAAM,aAAa,MAAM,EAAE,SAAS,OAAO,MAAM;GACjD,IAAI,WAAW,WAAW,GAAG;GAC7B,SAAS,CAAC;GACV,KAAK,MAAM,KAAK,YAAY;IAC1B,MAAM,IAAI,MAAM,KAAK,CAAC;IACtB,IAAI,EAAE,UAAU,SAAS,KAAK,CAAC;SAC1B,OAAO,KAAK;KAAE,WAAW;KAAG,UAAU,EAAE;KAAU,QAAQ,EAAE;IAAO,CAAC;GAC3E;GACA,IAAI,OAAO,WAAW,GAAG;EAC3B;EACA,OAAO;GAAE;GAAU;GAAQ;EAAO;CACpC;AACF;;;;;;AAOA,SAAgB,gBACd,SAC6D;CAC7D,OAAO,YAAY,eAAiC,OAAO;AAC7D;;;;;;;;;;;;;;;;;;;;;;;;;;ACvOA,eAAsB,iBAAiB,MAAuD;CAC5F,IAAI,CAAC,oBAAoB,KAAK,IAAI,GAChC,OAAO;EACL,UAAU;EACV,OAAO,iBAAiB,KAAK,KAAK,sBAAsB,qBAAqB,KAAK,IAAI,EAAE;CAC1F;CAEF,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,KAAK,aAAa;CACrC,SAAS,KAAK;EACZ,OAAO;GAAE,UAAU;GAAG,OAAO,4BAA4B,OAAO,GAAG;EAAI;CACzE;CACA,IAAI,CAAC,SAAS,KAAK,OACjB,OAAO;EACL,UAAU;EACV,OAAO,wCAAwC,KAAK,KAAK,iBACvD,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,IAAI,KAAK,OACrC;CACH;CAIF,MAAM,SAAS,MAAM,iBAAiB,KAAK,MAA2B,UAAU,EAC9E,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,EACtC,CAAC;CACD,OAAO;EAAE,UAAU,OAAO,KAAK,IAAI;EAAG;CAAO;AAC/C;;AAGA,SAAgB,oBAAoB,MAAoD;CACtF,MAAM,MAA0C,CAAC;CACjD,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;EACvC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACjC,IAAI,MAAM,YAAY,IAAI,SAAS,KAAK,EAAE;OAC1C,IAAI,GAAG,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAgB;OACjE,IAAI,GAAG,WAAW,WAAW,GAAG,IAAI,SAAS,EAAE,MAAM,CAAkB;CAC9E;CACA,OAAO;AACT;;AAGA,SAAS,gBAAgB,KAAqC;CAC5D,MAAM,MAAO,KAA+B,WAAW;CAEvD,OADc,OAAO,QAAQ,aAAc,IAAsB,IAAI;AAEvE;AAEA,SAAS,OAAO,KAAsB;CACpC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;;AAGA,eAAe,OAAsB;CACnC,MAAM,EAAE,MAAM,WAAW,oBAAoB,QAAQ,KAAK,MAAM,CAAC,CAAC;CAClE,IAAI,CAAC,QAAQ,CAAC,QAAQ;EACpB,QAAQ,OAAO,MACb;WACc,qBAAqB,KAAK,KAAK,EAAE;CAEjD;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,MAAM,EAAE,kBAAkB,MAAM,OAAO;CACvC,MAAM,EAAE,YAAY,MAAM,OAAO;CACjC,MAAM,MAAM,MAAM,iBAAiB;EACjC;EACA,cAAc,YAAY,gBAAgB,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,CAAC,KAAK;CAC7F,CAAC;CACD,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,IAAI,UAAU,EAAE,OAAO,IAAI,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG;CACvF,IAAI,IAAI,OAAO,QAAQ,OAAO,MAAM,GAAG,IAAI,MAAM,GAAG;CACpD,QAAQ,KAAK,IAAI,QAAQ;AAC3B;AAOA,MAAM,gBAAgB,OAAO,YAAY,cAAc,QAAQ,OAAO,KAAK,KAAA;AAC3E,IAAI,iBAAiB,gCAAgC,KAAK,aAAa,GACrE,KAAU"}

package/dist/loop-runner-bin.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { n as runLoopRunnerCli, t as parseLoopRunnerArgv } from "./loop-runner-bin-CdDJs_hF.js";
+import { n as runLoopRunnerCli, t as parseLoopRunnerArgv } from "./loop-runner-bin-CzewdsxT.js";
 export { parseLoopRunnerArgv, runLoopRunnerCli };

package/dist/mcp/index.js

@@ -2,7 +2,7 @@ import { $ as environmentReader, Ar as captureWorktreeDiff, Cn as assertBoxlessP
 import { i as ConfigError, m as ValidationError } from "../errors-DodWX-cb.js";
 import { J as deleteBoxSafe, at as sleep, ct as throwIfAborted, st as throwAbort } from "../sandbox-profile-compat-Dq7ujONv.js";
 import { t as assertExecutableAgentProfile } from "../model-policy-CyCUwHed.js";
-import { R as runCoderChecks, gt as selectValidWinner } from "../runtime-B1dDO_VV.js";
+import { R as runCoderChecks, gt as selectValidWinner } from "../runtime-CpIVXSDx.js";
 import { A as ANALYST_DEFINITION_BOUNDS, I as downMessageRefusalReasons, P as createCoordinationTools, R as parseAuthoredAnalystDefinition, j as analystToolGroupNames, z as questionEscalationTargets } from "../coordination-driver-B2XzW5aV.js";
 import { n as SUPPORTED_PROTOCOL_VERSIONS, r as createStdioToolServer } from "../tool-server-Dqer2M4_.js";
 import { t as createKbGate } from "../kb-gate-DpaSwXVx.js";

package/dist/{runtime-B1dDO_VV.js → runtime-CpIVXSDx.js}

@@ -5061,7 +5061,68 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 		}
 		return objects;
 	};
+	const streamDurably = async (digest, path, byteLength, signal) => {
+		const ref = {
+			locator: {
+				kind: "private-cas",
+				namespace,
+				digest
+			},
+			sha256: digest,
+			byteLength
+		};
+		let failure;
+		for (let attempt = 1; attempt <= DURABLE_ATTEMPTS; attempt++) {
+			signal?.throwIfAborted();
+			const chunks = readObject(path, ref, signal);
+			try {
+				await durable.putStream({
+					namespace,
+					digest,
+					byteLength,
+					chunks,
+					signal
+				});
+				await writeReceipt(digest, byteLength);
+				return;
+			} catch (error) {
+				failure = error;
+				if (signal?.aborted) throw error;
+				if (attempt < DURABLE_ATTEMPTS) await new Promise((settle) => setTimeout(settle, 1e3 * 4 ** (attempt - 1)));
+			} finally {
+				await chunks.return(void 0);
+			}
+		}
+		throw failure;
+	};
+	let lastPass;
+	const settlePut = async (sha, byteLength, linked, upload, signal) => {
+		if (upload !== void 0 && !await hasReceipt(sha)) await copyOnce(sha, upload, signal).catch(() => void 0);
+		const durableNow = await hasReceipt(sha);
+		const added = linked ? byteLength : 0;
+		const known = lastPass;
+		if (durableNow && known !== void 0 && known.pending === 0 && (localBudgetBytes === void 0 || known.localBytes + added <= localBudgetBytes)) {
+			known.localBytes += added;
+			return;
+		}
+		await offload(signal);
+	};
 	const uploading = /* @__PURE__ */ new Map();
+	const copyOnce = async (sha, copy, signal) => {
+		for (let inflight = uploading.get(sha); inflight !== void 0; inflight = uploading.get(sha)) {
+			await inflight.catch(() => void 0);
+			signal?.throwIfAborted();
+			if (await hasReceipt(sha)) return false;
+		}
+		const current = copy();
+		uploading.set(sha, current);
+		try {
+			await current;
+			return true;
+		} finally {
+			if (uploading.get(sha) === current) uploading.delete(sha);
+		}
+	};
 	const sweep = async (signal) => {
 		const objects = await localObjects();
 		const pending = [];
@@ -5069,19 +5130,14 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 		let refusal;
 		const durableHex = /* @__PURE__ */ new Set();
 		for (const object of objects) {
+			await uploading.get(object.hex)?.catch(() => void 0);
+			signal?.throwIfAborted();
 			if (await hasReceipt(object.hex)) {
 				durableHex.add(object.hex);
 				continue;
 			}
 			if (durable === void 0) continue;
 			const digest = `sha256:${object.hex}`;
-			if (uploading.has(object.hex)) {
-				pending.push({
-					digest,
-					error: "durable upload in progress"
-				});
-				continue;
-			}
 			if (refusal !== void 0) {
 				pending.push({
 					digest,
@@ -5090,41 +5146,9 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 				continue;
 			}
 			try {
-				if (durable.putStream && durable.getStream) {
-					const ref = {
-						locator: {
-							kind: "private-cas",
-							namespace,
-							digest
-						},
-						sha256: digest,
-						byteLength: object.size
-					};
-					let failure;
-					for (let attempt = 1; attempt <= DURABLE_ATTEMPTS; attempt++) {
-						signal?.throwIfAborted();
-						const chunks = readObject(object.path, ref, signal);
-						try {
-							await durable.putStream({
-								namespace,
-								digest,
-								byteLength: object.size,
-								chunks,
-								signal
-							});
-							await writeReceipt(digest, object.size);
-							failure = void 0;
-							break;
-						} catch (error) {
-							failure = error;
-							if (signal?.aborted) throw error;
-							if (attempt < DURABLE_ATTEMPTS) await new Promise((settle) => setTimeout(settle, 1e3 * 4 ** (attempt - 1)));
-						} finally {
-							await chunks.return(void 0);
-						}
-					}
-					if (failure !== void 0) throw failure;
-				} else {
+				let copied;
+				if (durable.putStream && durable.getStream) copied = await copyOnce(object.hex, () => streamDurably(digest, object.path, object.size, signal), signal);
+				else {
 					const bytes = await readLocal(object.path);
 					if (bytes === void 0) continue;
 					if (sha256(bytes) !== digest) {
@@ -5134,10 +5158,10 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 						});
 						continue;
 					}
-					await storeDurably(digest, bytes, signal);
+					copied = await copyOnce(object.hex, () => storeDurably(digest, bytes, signal), signal);
 				}
 				durableHex.add(object.hex);
-				uploaded++;
+				if (copied) uploaded++;
 			} catch (error) {
 				if (signal?.aborted) throw error;
 				refusal = message(error);
@@ -5160,6 +5184,10 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 			localBytes -= object.size;
 			evicted++;
 		}
+		lastPass = {
+			localBytes,
+			pending: pending.length
+		};
 		let receiptCount = 0;
 		try {
 			receiptCount = (await readdir(receipts)).filter((name) => HEX.test(name)).length;
@@ -5273,10 +5301,12 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 			const directory = join(store, sha.slice(0, 2));
 			await checkDirectories(directory, true);
 			signal?.throwIfAborted();
+			let linked = true;
 			try {
 				await link(temporary, path);
 			} catch (error) {
 				if (error.code !== "EEXIST") throw error;
+				linked = false;
 				for await (const _chunk of readStream(ref, { signal }));
 			}
 			const dir = await open(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
@@ -5285,7 +5315,7 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 			} finally {
 				await dir.close();
 			}
-			if (durable !== void 0) await offload(signal);
+			if (durable !== void 0) await settlePut(sha, byteLength, linked, () => streamDurably(digest, path, byteLength, signal), signal);
 			return ref;
 		} finally {
 			await unlink(temporary).catch((error) => {
@@ -5301,17 +5331,7 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 		async put({ bytes, signal }) {
 			signal?.throwIfAborted();
 			const digest = sha256(bytes);
-			const sha = hexOf(digest);
-			if (durable !== void 0) uploading.set(sha, (uploading.get(sha) ?? 0) + 1);
-			try {
-				return await putBuffered(bytes, digest, sha, signal);
-			} finally {
-				if (durable !== void 0) {
-					const count = (uploading.get(sha) ?? 1) - 1;
-					if (count === 0) uploading.delete(sha);
-					else uploading.set(sha, count);
-				}
-			}
+			return putBuffered(bytes, digest, hexOf(digest), signal);
 		},
 		async read(ref) {
 			return readRef(ref);
@@ -5355,12 +5375,14 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 		} finally {
 			await file.close();
 		}
+		let linked = true;
 		try {
 			signal?.throwIfAborted();
 			try {
 				await link(temporary, path);
 			} catch (error) {
 				if (error.code !== "EEXIST") throw error;
+				linked = false;
 			}
 			await syncDirectory(directory);
 		} finally {
@@ -5376,10 +5398,7 @@ function createPrivateCasArtifactPort(root, namespace, options = {}) {
 			byteLength: bytes.byteLength
 		};
 		await readRef(ref);
-		if (durable !== void 0) {
-			if (!await hasReceipt(sha)) await storeDurably(digest, bytes, signal).catch(() => void 0);
-			await offload(signal);
-		}
+		if (durable !== void 0) await settlePut(sha, bytes.byteLength, linked, () => storeDurably(digest, bytes, signal), signal);
 		return ref;
 	}
 	async function readRef(ref) {
@@ -9283,4 +9302,4 @@ function tail(s) {
 //#endregion
 export { runBenchmark as $, McpSpawnFault as $t, connectRemoteSupervisor as A, inlineSandboxClient as At, chatTransportExecutor as B, runIsolatedCheck as Bt, analyzeTrace as C, observationFromRegistry as Ct, compileSearchSpec as D, defineLeaderboard as Dt, assertSearchSpec as E, harvestCorpus as Et, profileRunsForName as F, checkProgramDigest as Ft, assertStrategyContract as G, leaderboard as Gt, createChatSessionStore as H, deterministicCompletion as Ht, recordProfileRun as I, declaredCheckDeliverable as It, strategyAuthorSystemPrompt as J, renderLeaderboardMarkdown as Jt, authorStrategy as K, pairwiseSignificance as Kt, patchDelivered as L, declaredCheckDigest as Lt, loadProfile as M, loopDispatch as Mt, pickBestProfile as N, superviseDispatch as Nt, searchPresets as O, resolveSandboxClient as Ot, profileRegistry as P, assertDeclaredCheck as Pt, printBenchmarkReport as Q, openSqlRunStore as Qt, runCoderChecks as R, declaredCheckJudge as Rt, withUntrackedArtifacts as S, registryScopeAnalyst as St, SEARCH_SPEC_CORRELATION_KEY as T, HarvestError as Tt, runStrategyEvolution as U, sentinelCompletion as Ut, chatWorkerSeam as V, completionAuthorizes as Vt, strategyTournament as W, stopSentinel as Wt, openSandboxRun as X, renderPairwiseMarkdown as Xt, SandboxRunAbortError as Y, renderLeaderboardSvg as Yt, createS3PrivateCasStore as Z, SqlRunOwnershipError as Zt, VERIFY_TAIL_CHARS as _, verify as _t, localShell as a, mcpSecretEnvMetadataKey as an, builtinShapes as at, settledWorkerOut as b, buildSteerContext as bt, createVerifierEnvironment as c, secretEnvOfMcpServer as cn, FileCorpus as ct, harvestSurfaceDiffs as d, fanout as dt, connectStdioMcp as en, createPrivateCasArtifactPort as et, analystsFromRegistry as f, flatWidenGate as ft, NOTE_MAX_CHARS as g, selectValidWinner as gt, EVIDENCE_MAX_CHARS as h, pipeline as ht, jjWorkspace as i, envKeyProvider as in, runPersonified as it, bestProfileFor as j, loopCampaignDispatch as jt, searchSpecDigest as k, localSandboxClient as kt, boxSurfaceReader as l, createTangleSandboxExactProcessProvider as ln, InMemoryCorpus as lt, worktreeFanout as m, panel as mt, makeFinding$1 as n, createMcpEnvironment as nn, trajectoryReport as nt, runInWorkspace as o, resolveMcpServerLaunch as on, createShapeRegistry as ot, failuresAnalyst as p, loopUntil as pt, strategyAuthorContract as q, renderLeaderboardHtml as qt, gitWorkspace as r, sanitizeMcpToolSchema as rn, definePersona as rt, createWaterfallCollector as s, resolveSecretEnv as sn, registerShape as st, computeFindingId$1 as t, materializeLocalMcp as tn, equalKOnCost as tt, fsSurfaceReader as u, renderCorpusToInstructions as ut, closingWorkerNote as v, widen as vt, createFencedSqlRunContext as w, inProcessSandboxClient as wt, copyUntrackedIntoClone as x, createScopeAnalyst as xt, composeWorkerEvidence as y, assertTraceDerivedFindings as yt, graphDesignerExtraTools as z, readDeclaredCheck as zt };
 
-//# sourceMappingURL=runtime-B1dDO_VV.js.map
+//# sourceMappingURL=runtime-CpIVXSDx.js.map