@tangle-network/agent-runtime 0.337.2 → 0.338.0

package/dist/{workspace-streams-JLjh5DC6.d.ts → workspace-streams-BZZds1Fw.d.ts}

@@ -523,16 +523,7 @@ declare const CANDIDATE_TRACE_ENV: {
   readonly traceRunId: "TANGLE_TRACE_RUN_ID";
 };
 //#endregion
-//#region src/candidate-execution/workspace-archive.d.ts
-interface AgentCandidateWorkspaceArchiveLimits {
-  maxArchiveBytes: number;
-  maxEmbeddedArtifactBytes: number;
-  maxFiles: number;
-  maxFileBytes: number;
-  maxTotalFileBytes: number;
-  maxPathBytes: number;
-  maxRepositoryBundleBytes: number;
-}
+//#region src/candidate-execution/workspace-archive-local.d.ts
 interface CaptureAgentCandidateWorkspaceOptions {
   /** Include Git HEAD so task preparation can prove its exact commit and tree. */
   includeRepository?: boolean;
@@ -554,17 +545,28 @@ interface CaptureAgentCandidateWorkspaceOptions {
 interface CreateAgentCandidateWorkspacePortOptions {
   limits?: Partial<AgentCandidateWorkspaceArchiveLimits>;
 }
+/** Capture one exact regular-file workspace for immutable candidate execution. */
+declare function captureAgentCandidateWorkspace(rootInput: string, options?: CaptureAgentCandidateWorkspaceOptions): Promise<CapturedAgentCandidateWorkspace>;
+/** Create the standard bounded materializer for candidate execution ports. */
+declare function createAgentCandidateWorkspacePort(options?: CreateAgentCandidateWorkspacePortOptions): AgentCandidateWorkspacePort;
+//#endregion
+//#region src/candidate-execution/workspace-archive.d.ts
+interface AgentCandidateWorkspaceArchiveLimits {
+  maxArchiveBytes: number;
+  maxEmbeddedArtifactBytes: number;
+  maxFiles: number;
+  maxFileBytes: number;
+  maxTotalFileBytes: number;
+  maxPathBytes: number;
+  maxRepositoryBundleBytes: number;
+}
 interface CapturedAgentCandidateWorkspace {
   readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence;
   /** Caller-owned bytes accepted by createAgentCandidateWorkspacePort. */
   readonly archive: Uint8Array;
 }
-/** Capture one exact regular-file workspace for immutable candidate execution. */
-declare function captureAgentCandidateWorkspace(rootInput: string, options?: CaptureAgentCandidateWorkspaceOptions): Promise<CapturedAgentCandidateWorkspace>;
 /** Capture detached files returned by a remote executor into the standard archive. */
 declare function captureAgentCandidateWorkspaceFiles(input: readonly AgentCandidateExecutorWorkspaceFile[], options?: Omit<CaptureAgentCandidateWorkspaceOptions, 'includeRepository' | 'repositoryContents'>): Promise<CapturedAgentCandidateWorkspace>;
-/** Create the standard bounded materializer for candidate execution ports. */
-declare function createAgentCandidateWorkspacePort(options?: CreateAgentCandidateWorkspacePortOptions): AgentCandidateWorkspacePort;
 //#endregion
 //#region src/candidate-execution/workspace-streams.d.ts
 interface CaptureAgentCandidateWorkspaceToArtifactsOptions {
@@ -629,5 +631,5 @@ declare function materializeAgentCandidateWorkspaceFromArtifacts(input: AgentCan
   destination: string;
 }): Promise<void>;
 //#endregion
-export { PreparedAgentCandidateLaunch as $, AgentCandidateMemoryPort as A, AgentCandidateProtectedRunCapture as B, AgentCandidateExecutorPort as C, AgentCandidateExecutorTaskOutcomeCapture as D, AgentCandidateExecutorStopRequest as E, AgentCandidateOutputPurpose as F, AgentCandidateWorkspacePort as G, AgentCandidateRunFinalization as H, AgentCandidateProtectedModelActivation as I, CanonicalCandidateDocument as J, CANDIDATE_TRACE_ENV as K, AgentCandidateProtectedModelReservation as L, AgentCandidateModelLimits as M, AgentCandidateModelPort as N, AgentCandidateExecutorWorkspaceFile as O, AgentCandidateOutputArtifactPort as P, PreparedAgentCandidateKnowledge as Q, AgentCandidateProtectedModelSettlement as R, AgentCandidateExecutorMemoryCapture as S, AgentCandidateExecutorRequest as T, AgentCandidateTaskExecution as U, AgentCandidateRepositoryPort as V, AgentCandidateVerificationPorts as W, PreparedAgentCandidateExecution as X, PersistedTaskOutcomeEvidence as Y, PreparedAgentCandidateInstruction as Z, AgentCandidateBenchmarkGraderIdentity as _, captureAgentCandidateWorkspaceTreeToArtifacts as a, AgentCandidateExecutionPorts as b, verifyAgentCandidateWorkspaceTree as c, CapturedAgentCandidateWorkspace as d, PreparedAgentCandidateTrace as et, CreateAgentCandidateWorkspacePortOptions as f, AgentCandidateArtifactPort as g, createAgentCandidateWorkspacePort as h, captureAgentCandidateWorkspaceToArtifacts as i, AgentCandidateExecutionRoots as it, AgentCandidateMemoryResetResult as j, AgentCandidateExecutorWorkspaceInput as k, AgentCandidateWorkspaceArchiveLimits as l, captureAgentCandidateWorkspaceFiles as m, AgentCandidateWorkspaceTree as n, VerifiedAgentCandidate as nt, materializeAgentCandidateWorkspaceFromArtifacts as o, captureAgentCandidateWorkspace as p, CANDIDATE_TRACE_TAGS as q, CaptureAgentCandidateWorkspaceToArtifactsOptions as r, VerifiedAgentCandidateTaskOutcome as rt, verifyAgentCandidateWorkspaceArtifacts as s, AgentCandidateWorkspaceArtifactsOptions as t, ResolvedAgentCandidateContainer as tt, CaptureAgentCandidateWorkspaceOptions as u, AgentCandidateBenchmarkGraderPort as v, AgentCandidateExecutorProfileFile as w, AgentCandidateExecutorFinalCapture as x, AgentCandidateContainerPort as y, AgentCandidateProtectedModelSettlementCall as z };
-//# sourceMappingURL=workspace-streams-JLjh5DC6.d.ts.map
+export { PreparedAgentCandidateLaunch as $, AgentCandidateMemoryPort as A, AgentCandidateProtectedRunCapture as B, AgentCandidateExecutorPort as C, AgentCandidateExecutorTaskOutcomeCapture as D, AgentCandidateExecutorStopRequest as E, AgentCandidateOutputPurpose as F, AgentCandidateWorkspacePort as G, AgentCandidateRunFinalization as H, AgentCandidateProtectedModelActivation as I, CanonicalCandidateDocument as J, CANDIDATE_TRACE_ENV as K, AgentCandidateProtectedModelReservation as L, AgentCandidateModelLimits as M, AgentCandidateModelPort as N, AgentCandidateExecutorWorkspaceFile as O, AgentCandidateOutputArtifactPort as P, PreparedAgentCandidateKnowledge as Q, AgentCandidateProtectedModelSettlement as R, AgentCandidateExecutorMemoryCapture as S, AgentCandidateExecutorRequest as T, AgentCandidateTaskExecution as U, AgentCandidateRepositoryPort as V, AgentCandidateVerificationPorts as W, PreparedAgentCandidateExecution as X, PersistedTaskOutcomeEvidence as Y, PreparedAgentCandidateInstruction as Z, AgentCandidateBenchmarkGraderIdentity as _, captureAgentCandidateWorkspaceTreeToArtifacts as a, AgentCandidateExecutionPorts as b, verifyAgentCandidateWorkspaceTree as c, captureAgentCandidateWorkspaceFiles as d, PreparedAgentCandidateTrace as et, CaptureAgentCandidateWorkspaceOptions as f, AgentCandidateArtifactPort as g, createAgentCandidateWorkspacePort as h, captureAgentCandidateWorkspaceToArtifacts as i, AgentCandidateExecutionRoots as it, AgentCandidateMemoryResetResult as j, AgentCandidateExecutorWorkspaceInput as k, AgentCandidateWorkspaceArchiveLimits as l, captureAgentCandidateWorkspace as m, AgentCandidateWorkspaceTree as n, VerifiedAgentCandidate as nt, materializeAgentCandidateWorkspaceFromArtifacts as o, CreateAgentCandidateWorkspacePortOptions as p, CANDIDATE_TRACE_TAGS as q, CaptureAgentCandidateWorkspaceToArtifactsOptions as r, VerifiedAgentCandidateTaskOutcome as rt, verifyAgentCandidateWorkspaceArtifacts as s, AgentCandidateWorkspaceArtifactsOptions as t, ResolvedAgentCandidateContainer as tt, CapturedAgentCandidateWorkspace as u, AgentCandidateBenchmarkGraderPort as v, AgentCandidateExecutorProfileFile as w, AgentCandidateExecutorFinalCapture as x, AgentCandidateContainerPort as y, AgentCandidateProtectedModelSettlementCall as z };
+//# sourceMappingURL=workspace-streams-BZZds1Fw.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-runtime",
-  "version": "0.337.2",
+  "version": "0.338.0",
   "description": "Shared task-lifecycle skeleton for agents: a recursive loop kernel for chat turns, one-shot tasks, and multi-attempt loops, with trace capture and eval-gated self-improvement. Domain behavior lives in adapters; scoring and ship-gates in @tangle-network/agent-eval.",
   "homepage": "https://github.com/tangle-network/agent-runtime#readme",
   "repository": {
@@ -186,7 +186,7 @@
     "verify:package": "pnpm run verify:package:static && node scripts/verify-package-exports.mjs && pnpm run verify:edge-tool-loop",
     "verify:package:static": "pnpm run check:model-execution-boundary && pnpm run verify:static-imports && pnpm run build && pnpm run check:api-surface && pnpm run check:testing-fixture && pnpm run check:skills && publint && attw --pack --profile esm-only .",
     "verify:official-optimizers": "node scripts/verify-official-optimizers.mjs",
-    "docs:api": "pnpm run build && typedoc && node scripts/gen-primitive-catalog.mjs",
+    "docs:api": "pnpm run build && typedoc && node scripts/generated-api-links.mjs --write && node scripts/gen-primitive-catalog.mjs",
     "docs:freshness": "node scripts/check-docs-freshness.mjs",
     "docs:check": "pnpm run docs:api && git diff --exit-code -- docs/api && pnpm run docs:freshness"
   }

package/skills/agent-graphs/SKILL.md

@@ -1,11 +1,16 @@
 ---
 name: agent-graphs
-description: Author fixed AgentGraph roles with explicit delegation, analysis, completion, and budgets.
+description: Author fixed AgentGraph roles, routes, delegation, analysis, completion and budgets.
 ---
 
 # Agent Graphs
 
 Use `runGraph` when roles are known before execution and their relationships must be explicit Runtime data.
+When the order, branches, repair loops and stop rules are known too, author a flow graph: `entry` plus `routes` edges, with no root and no brain.
+Parallel stages are a fork (`to` lists several nodes, spawned at once) and waiting for all of them is a join (`from` lists several nodes); converging plain routes into one running node throw `GraphRouteError` with reason `target-live`.
+A loop per item is a flow graph inside a maps item, and a flow graph can run as a `run_graph` subtask.
+A human approval in a flow is a gate (`gates: [{ id, question, choices }]` with one routes edge per choice matching `/choice`), answered by the caller's `decideGate` while the run is held; a wait of days without a held process belongs to a Platform workflow `wait.*` or `decision` action.
+Keep a root (delegation edges) only when a model must decide what runs next; a root brain that only orders fixed stages is the anti-pattern a flow graph replaces.
 Use a smaller maintained composition when it provides the required behavior.
 Use dynamic supervision when the agent must discover or create roles while working.
 A request for review alone does not require a graph.
@@ -19,7 +24,7 @@ Define the artifact and independent completion check before choosing roles.
 Give each required role a complete AgentProfile and capabilities appropriate to its task.
 Preserve requested parallel instances and independent reviewers rather than collapsing their distinct work into a root prompt.
 
-When authoring nodes, directives, traversal limits, or analyst routes, read [the graph contract](references/authoring.md).
+When authoring nodes, directives, routes, traversal limits, or analyst routes, read [the graph contract](references/authoring.md).
 The runtime validates structure and prompt references before execution.
 Keep the shared budget, per-worker allocation, concurrency, and supported limits in their actual API fields.
 Use measured execution cost when available; do not turn a prior run into a universal minimum budget.
@@ -31,7 +36,9 @@ Then exercise the intended backend, profiles, tools, and completion check on a r
 Offline control-flow tests do not establish that a real agent solves the task.
 
 Inspect the terminal result, complete cost and token accounting, edge delivery records, exhausted edges, and journal evidence.
-An expected edge with zero traversals did not exercise its intended relationship.
+An expected edge with zero traversals did not exercise its intended relationship, unless it is a branch the test chose not to take.
+A flow run that ends early names why on `stopped`; a settle no routes edge matches throws `GraphRouteError` with the ledger.
+Each gate visit is one `gate:<id>` ledger row whose `gate.by` names who decided.
 Unknown usage is missing evidence, not zero cost.
 A passing check proves only the outcome it actually tests.
 

package/skills/agent-graphs/references/authoring.md

@@ -6,6 +6,7 @@ Start from a matching [example](https://github.com/tangle-network/agent-runtime/
 ## Nodes and work
 
 AgentGraph requires nodes, edges, a deliverable, and a shared budget.
+Adding `entry` makes it a flow graph: Runtime spawns each entry node with its task and traverses `routes` edges itself, so no node is a root.
 Each node holds an id and a canonical AgentProfile; its profile name matches the node id for routing.
 Standing roles belong in the profile prompt, with explicit tools and resources.
 Put the concrete mission in the deliverable description and supply an independent completion check that rejects incomplete output.
@@ -43,10 +44,26 @@ A list longer than `maxItems`, a pointer that does not select an array, or a `co
 Each item reserves `itemBudget` from the shared budget.
 Map state is process-local: a restarted run does not re-expand a map whose source settled before the restart.
 
+Routes edges run a flow graph and need `entry`; a flow graph takes no delegation or analysis edge.
+On each usable settle of `from`, its routes edges are tried in declaration order and the first whose `when` holds fires; one settle fires at most one edge.
+`when` compares JSON scalars only (`equals`, `in`, `exists` at an RFC 6901 pointer, or `all` of several); a numeric or stateful rule is a field the node settles, such as a boolean or a counter.
+A match reads `from` unless it names a node listed in the edge's `evidence`; a pointer that does not resolve does not match.
+An edge without `when` is the default branch: at most one per node, and last.
+A node target receives `{ from: { node, result }, evidence }` and the edge directive; `{ stop: reason }` ends the run with no winner; `{ finish: reason }` makes this settle part of the output.
+The output is `{ [node]: latest usable result }` over terminal nodes (no outgoing routes or map edge) and finish sources, and the deliverable decides it.
+Every routes cycle, each subcycle included, must cross an edge with an explicit `maxTraversals`: a cap on `a -> b` does not bound a `b <-> c` loop beside it. An edge at its cap is skipped and matching continues, so give a repair loop a fallback edge.
+`continuity: 'resume'` continues the target's latest settled session.
+A fork lists two or more nodes in `to`: one traversal spawns them all at once, each under key `route:<edge>#<traversal>:<node>`.
+A join lists two or more nodes in `from`: it fires once every member has settled usably since it last fired, its target's evidence holds each member's latest result, it carries no `when`, and it is the only routes edge leaving each member.
+A route into a node that still has a running worker throws `GraphRouteError` with reason `target-live`; converging branches use a join.
+A map edge may leave any flow node, and its join may have routes edges.
+A maps edge's `graph` item and a `run_graph` subtask may be flow graphs (`entry` on the topology). Inside a maps item, every entry whose task is `{ item: true }` receives the item value, and a down settle ends that item only, so `onItemFailure` decides the join.
+
 ## Check the result
 
 Inspect delivered, stripped, empty, unpropagated, and failed edge records and their byte counts.
 A map edge records one expansion row, one row per item with its index, and one join row.
+A flow records one `routes:entry-><node>` row per entry and one `routes:<from>#<ordinal>-><target>` row per traversal, cap skip or refused spawn; a fork records one row per spawned node, and a join's `<from>` and a fork's `<target>` join their nodes with `+`.
 Read exhausted edges even when execution ended through completion, budget, or cancellation rather than a thrown error.
 Check journal records when recovery or auditability is part of the task.
 Preserve run, profile, directive, and artifact identity so a resumed or measured run cannot silently change its inputs.

package/skills/profile-authoring/SKILL.md

@@ -25,7 +25,7 @@ Start from a profile that already ran (in a Discovery play, `inputs/profile-exam
 | `prompt` | The role in `instructions[0]`, the procedure after it. No `systemPrompt`: it replaces the harness's own guidance (17,730 characters on Codex), and Discovery refuses one under 4,000 characters. No `appendSystemPrompt` on Codex or Gemini. |
 | `resources` | `failOnError: true`. Hand each file by path, `{"path": "<mount>", "resource": {"kind": "inline", "name": "<name>", "path": "<file in your workspace>"}}`: Runtime reads the bytes (UTF-8, at most 4 MiB). Never retype a file into `content`: a manager that did delivered 5 wrong characters in 24,008. |
 
-Native tool ids (agent-container `packages/agent-profile-materialize/src/control-maps.ts` and `execution-controls.ts`; matching ignores case and all but letters, digits and `_`):
+Native tool ids (agent-container's `agent-profile-materialize` package (`control-maps` and `execution-controls`); matching ignores case and all but letters, digits and `_`):
 
 | Harness | Accepted | Refused |
 |---|---|---|
@@ -35,9 +35,9 @@ Native tool ids (agent-container `packages/agent-profile-materialize/src/control
 | pi | names in Pi's own registry: read, bash, edit, write (glob becomes find, shell becomes bash); a named tool Pi lacks ends the session | names Pi lacks |
 | any other | no `tools` and no `permissions` | every entry |
 
-A harness's own subagent runs outside Runtime: no journal row, no reservation from the shared budget, no grade. Turn native subagents on when the agent needs internal throughput (split and merge, maker and critic, best of N) and separate Runtime identity, budget and grading are unnecessary; their work counts only through the delivered artifact. Use Runtime spawn (`agent_runtime_coordination_spawn_worker`) when a child needs its own record, budget or check. agent-dev-container maps these tools in `packages/agent-profile-materialize/src/control-maps.ts`.
+A harness's own subagent runs outside Runtime: no journal row, no reservation from the shared budget, no grade. Turn native subagents on when the agent needs internal throughput (split and merge, maker and critic, best of N) and separate Runtime identity, budget and grading are unnecessary; their work counts only through the delivered artifact. Use Runtime spawn (`agent_runtime_coordination_spawn_worker`) when a child needs its own record, budget or check. agent-dev-container maps these tools in its `agent-profile-materialize` package (`control-maps`).
 
-Runtime keys (agent-runtime `src/runtime/supervise/provider-visible-profile.ts`; verbs from `coordinationVerbNames` in `src/mcp/tools/coordination.ts`):
+Runtime keys (agent-runtime `src/runtime/supervise/provider-visible-profile.ts`; verbs from `coordinationVerbNames` in `src/mcp/tools/coordination-events.ts`):
 
 - Runtime removes every key that starts with `agent_runtime_coordination_` before the harness sees the profile. Any other spelling reaches the harness and is refused: a bare `knowledge_record`, OpenCode's `agent-runtime-coordination_spawn_worker`, Claude Code's `mcp__agent-runtime-coordination__spawn_worker`, or `agent_runtime_spawn_worker`.
 - Verbs: `spawn_worker`, `cancel_worker`, `observe_agent`, `steer_agent`, `read_journal`, `submit_result`, `report_blocked`, `ask_parent`, `list_questions`, `answer_question`, `read_continuation`, `stop`, `list_analysts`, `run_analyst`, `define_analyst`, `run_graph`.

package/skills/supervise/SKILL.md

@@ -13,12 +13,12 @@ Author agents that can perform the required work, then direct them from checked
 Put research choices, methods, revision rules, and stopping criteria in each profile's prompt.
 Runtime owns shared budgets, recursion limits, concurrency, cancellation, journals, and recovery.
 The caller configures root execution through [SuperviseOptions](https://github.com/tangle-network/agent-runtime/blob/main/src/runtime/supervise/supervise.ts).
-Per-assignment budgets, continuity, and keys belong to the [coordination tools](https://github.com/tangle-network/agent-runtime/blob/main/src/mcp/tools/coordination.ts), not invented profile fields.
+Per-assignment budgets, continuity, and keys belong to the [coordination tools](https://github.com/tangle-network/agent-runtime/blob/main/src/mcp/tools/coordination-worker-tools.ts), not invented profile fields.
 
 An agent receives recursive authority by declaring `agent_runtime_coordination_spawn_worker: true` in its tools.
 Declare each other Runtime tool it needs explicitly.
 Metadata describes work; it does not grant authority.
-Every profile that can spawn workers carries the complete `profile-authoring/SKILL.md` skill shipped beside this one, as an immutable inline snapshot with `resources.failOnError: true`.
+Every profile that can spawn workers carries the complete `skills/profile-authoring/SKILL.md` skill shipped beside this one, as an immutable inline snapshot with `resources.failOnError: true`.
 The authored profile must explain its own ability to delegate; Runtime does not invent that policy.
 
 Before creating or changing any profile, follow [profile authoring](../profile-authoring/SKILL.md): the audience and its acceptance test, the probed proxy gap, the referee, the honest null, and the profile contract.

package/dist/activation-BDP6Eivv.js

@@ -1,234 +0,0 @@
-import { F as canonicalCandidateDigest$1, H as verifyCanonicalCandidateDocument, I as canonicalCandidateDocument, z as immutableCandidateValue } from "./sandbox-profile-compat-QTkLe1Z6.js";
-import { A as agentImprovementTargetInput, M as agentProfileImprovementStateDigest, c as requireSealedCandidateExperiment, d as verifyAgentImprovementActivation, f as verifyAgentImprovementProposal, k as agentImprovementTargetDigest } from "./improvement-cycle-D1I4hQvf.js";
-import { agentImprovementActivationResultSchema, agentImprovementActivationSchema, agentProfileImprovementExperimentSchema } from "@tangle-network/agent-interface";
-//#region src/runtime-usage.ts
-function createRuntimeUsageTotals() {
-	return {
-		tokensIn: 0,
-		tokensOut: 0,
-		costUsd: 0,
-		llmCalls: 0
-	};
-}
-function isUsageAmount(value) {
-	return typeof value === "number" && Number.isFinite(value) && value >= 0;
-}
-/** Fold normalized per-call events. Backend adapters own cumulative receipt reconciliation. */
-function addRuntimeUsage(totals, event) {
-	totals.llmCalls += 1;
-	for (const key of [
-		"tokensIn",
-		"tokensOut",
-		"costUsd"
-	]) {
-		const value = event[key];
-		if (isUsageAmount(value)) totals[key] += value;
-		else if (key === "costUsd") totals.usdKnown = false;
-		else totals.tokensKnown = false;
-	}
-	if (event.tokensKnown === false) totals.tokensKnown = false;
-	if (event.usdKnown === false) totals.usdKnown = false;
-	if (isUsageAmount(event.estimatedCostUsd)) totals.estimatedCostUsd = (totals.estimatedCostUsd ?? 0) + event.estimatedCostUsd;
-}
-//#endregion
-//#region src/intelligence/activation.ts
-/** Create the exact result a product stores in the same transaction as its target write. */
-function createAgentImprovementActivationResult(transition, options) {
-	const activation = verifyCanonicalCandidateDocument(agentImprovementActivationSchema.parse(transition.activation), "agent improvement activation");
-	assertTransitionInput(activation, transition);
-	const result = agentImprovementActivationResultSchema.parse(canonicalCandidateDocument({
-		kind: "agent-improvement-activation-result",
-		idempotencyKey: activation.digest,
-		attemptedAt: transition.attemptedAt,
-		completedAt: options.completedAt,
-		outcome: options.outcome
-	}).value);
-	assertResultAgainstActivation(activation, result);
-	assertOutcomeDesiredState(activation, result, new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])));
-	return immutableCandidateValue(result);
-}
-/**
-* Recompute one historical activation result against the exact measured proposal and authority.
-* The result records that attempt; it is not a query of the target's current state.
-*/
-function verifyAgentImprovementActivationResult(input) {
-	const proposal = verifyAgentImprovementProposal(input.proposal);
-	const activation = verifyAgentImprovementActivation(input);
-	const result = verifyCanonicalCandidateDocument(agentImprovementActivationResultSchema.parse(input.result), "agent improvement activation result");
-	assertResultAgainstActivation(activation, result);
-	assertResultDesiredState(proposal, activation, result);
-	return result;
-}
-/** Validate and execute one product-owned activation transition. */
-async function executeAgentImprovementActivation(input, options) {
-	const proposal = verifyAgentImprovementProposal(input.proposal);
-	const activation = verifyAgentImprovementActivation(input);
-	const observedAt = (options.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
-	const attemptedAt = Date.parse(observedAt) < Date.parse(activation.authorizedAt) ? activation.authorizedAt : observedAt;
-	const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt);
-	const transition = immutableCandidateValue(proposal.evaluation.kind === "agent-improvement-measured-comparison" ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired) : profileImprovementTransition(proposal.evaluation.experiment, activation, attemptedAt, expired));
-	if (transition.expired) {
-		if (!options.reconcile) return uncertainActivationResult(transition, "RECONCILIATION_UNAVAILABLE");
-		let reconciled;
-		try {
-			reconciled = await options.reconcile(transition);
-		} catch {
-			return uncertainActivationResult(transition, "RECONCILIATION_THROW");
-		}
-		if (reconciled === void 0) return createAgentImprovementActivationResult(transition, {
-			completedAt: transition.attemptedAt,
-			outcome: { status: "expired" }
-		});
-		try {
-			return verifyAgentImprovementActivationResult({
-				...input,
-				result: reconciled
-			});
-		} catch {
-			return uncertainActivationResult(transition, "INVALID_RECONCILIATION");
-		}
-	}
-	let rawResult;
-	try {
-		rawResult = await options.transition(transition);
-	} catch {
-		return uncertainActivationResult(transition, "TRANSITION_THROW");
-	}
-	try {
-		return verifyAgentImprovementActivationResult({
-			...input,
-			result: rawResult
-		});
-	} catch {
-		return uncertainActivationResult(transition, "INVALID_RESULT");
-	}
-}
-function sealedCandidateTransition(experiment, activation, attemptedAt, expired) {
-	const targetArm = activation.intent === "activate-candidate" ? "candidate" : "baseline";
-	return {
-		kind: "sealed-candidate",
-		activation,
-		candidateBundle: experiment.candidate,
-		bundle: experiment[targetArm],
-		targets: activation.targets.map((target) => ({
-			...target,
-			desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),
-			desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface)
-		})),
-		attemptedAt,
-		expired
-	};
-}
-function profileImprovementTransition(experiment, activation, attemptedAt, expired) {
-	const sourceArm = activation.intent === "activate-candidate" ? "baseline" : "candidate";
-	const targetArm = activation.intent === "activate-candidate" ? "candidate" : "baseline";
-	const operation = profileImprovementOperation(experiment, activation.intent);
-	return {
-		kind: "profile-improvement",
-		activation,
-		experiment,
-		sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),
-		desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),
-		operation,
-		targets: activation.targets.map((target) => ({
-			...target,
-			desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),
-			desiredInput: operation
-		})),
-		attemptedAt,
-		expired
-	};
-}
-function profileImprovementOperation(experiment, intent) {
-	return intent === "activate-candidate" ? {
-		kind: "apply-change",
-		changes: experiment.change
-	} : { kind: "restore-state" };
-}
-function uncertainActivationResult(transition, code) {
-	return createAgentImprovementActivationResult(transition, {
-		completedAt: transition.attemptedAt,
-		outcome: {
-			status: "indeterminate",
-			code,
-			message: "The product transition did not return a trustworthy commit result."
-		}
-	});
-}
-function assertTransitionInput(activation, transition) {
-	if (transition.kind === "sealed-candidate") {
-		assertSealedCandidateTransitionInput(activation, transition);
-		return;
-	}
-	assertProfileImprovementTransitionInput(activation, transition);
-}
-function assertSealedCandidateTransitionInput(activation, transition) {
-	assertAuthorizedTransitionTargets(activation, transition.targets);
-	const desiredInputsMatch = transition.targets.every((target) => canonicalCandidateDigest$1(target.desiredInput) === canonicalCandidateDigest$1(agentImprovementTargetInput(transition.bundle, target.surface)));
-	if (transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) || transition.candidateBundle.digest !== activation.candidateDigest || !desiredInputsMatch || activation.intent === "activate-candidate" && transition.bundle.digest !== transition.candidateBundle.digest) throw new Error("activation transition does not match its authorization");
-}
-function assertProfileImprovementTransitionInput(activation, transition) {
-	assertAuthorizedTransitionTargets(activation, transition.targets);
-	const targetsAgentProfile = activation.targets.some((target) => target.surface === "agent-profile");
-	const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment);
-	const sourceArm = activation.intent === "activate-candidate" ? "baseline" : "candidate";
-	const targetArm = activation.intent === "activate-candidate" ? "candidate" : "baseline";
-	const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm);
-	const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm);
-	const operation = profileImprovementOperation(experiment, activation.intent);
-	const targetsMatch = transition.targets.every((target) => target.expectedBaseDigest === sourceStateDigest && target.desiredDigest === desiredStateDigest && canonicalCandidateDigest$1(target.desiredInput) === canonicalCandidateDigest$1(operation));
-	if (transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) || experiment.digest !== activation.experimentDigest || experiment.candidate.stateDigest !== activation.candidateDigest || targetsAgentProfile && (activation.executionRef === void 0 || canonicalCandidateDigest$1(activation.executionRef) !== canonicalCandidateDigest$1(experiment.executionRef)) || transition.sourceStateDigest !== sourceStateDigest || transition.desiredStateDigest !== desiredStateDigest || canonicalCandidateDigest$1(transition.operation) !== canonicalCandidateDigest$1(operation) || !targetsMatch) throw new Error("activation transition does not match its authorization");
-}
-function assertAuthorizedTransitionTargets(activation, targets) {
-	const authorized = targetMap(activation.targets);
-	const planned = targetMap(targets);
-	if (authorized.size !== planned.size || [...authorized.entries()].some(([identity, target]) => planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest)) throw new Error("activation transition does not match its authorization");
-}
-function assertResultAgainstActivation(activation, result) {
-	const attemptedAt = Date.parse(result.attemptedAt);
-	const completedAt = Date.parse(result.completedAt);
-	const expiresAt = Date.parse(activation.expiresAt);
-	if (result.idempotencyKey !== activation.digest || attemptedAt < Date.parse(activation.authorizedAt) || completedAt < attemptedAt) throw new Error("activation result does not bind its authorization");
-	const expired = attemptedAt >= expiresAt;
-	if (result.outcome.status === "expired" && !expired || expired && ![
-		"expired",
-		"indeterminate",
-		"already-applied"
-	].includes(result.outcome.status)) throw new Error("activation result does not honor its authorization expiry");
-	if (!("targets" in result.outcome)) return;
-	const authorized = targetMap(activation.targets);
-	const observed = new Set(result.outcome.targets.map(targetIdentity));
-	if (authorized.size !== observed.size || [...authorized.keys()].some((identity) => !observed.has(identity))) throw new Error("activation result must cover every authorized target exactly once");
-	if (result.outcome.status === "applied" && result.outcome.targets.some((target) => target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest)) throw new Error("applied activation did not start from its authorized base state");
-}
-function assertResultDesiredState(proposal, activation, result) {
-	if (!("targets" in result.outcome)) return;
-	const targetArm = activation.intent === "activate-candidate" ? "candidate" : "baseline";
-	const desiredStateDigest = proposal.evaluation.kind === "agent-profile-improvement-measured-comparison" ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm) : void 0;
-	assertOutcomeDesiredState(activation, result, new Map(activation.targets.map((target) => [targetIdentity(target), desiredStateDigest ?? agentImprovementTargetDigest(requireSealedCandidateExperiment(proposal), targetArm, target.surface)])));
-}
-function assertOutcomeDesiredState(activation, result, desired) {
-	if (!("targets" in result.outcome)) return;
-	if (result.outcome.status === "applied") {
-		if (result.outcome.targets.some((target) => target.afterDigest !== desired.get(targetIdentity(target)))) throw new Error("applied activation does not match the requested bundle");
-		return;
-	}
-	const allDesired = result.outcome.targets.every((target) => target.currentDigest === desired.get(targetIdentity(target)));
-	if (result.outcome.status === "already-applied") {
-		if (!allDesired) throw new Error("already-applied activation is not at the requested state");
-		return;
-	}
-	const authorized = targetMap(activation.targets);
-	const hasStaleTarget = result.outcome.targets.some((target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest);
-	if (allDesired || !hasStaleTarget) throw new Error("activation conflict does not identify stale target state");
-}
-function targetMap(targets) {
-	return new Map(targets.map((target) => [targetIdentity(target), target]));
-}
-function targetIdentity(target) {
-	return `${target.surface}\u0000${target.identity}`;
-}
-//#endregion
-export { createRuntimeUsageTotals as a, addRuntimeUsage as i, executeAgentImprovementActivation as n, isUsageAmount as o, verifyAgentImprovementActivationResult as r, createAgentImprovementActivationResult as t };
-
-//# sourceMappingURL=activation-BDP6Eivv.js.map

package/dist/activation-BDP6Eivv.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"activation-BDP6Eivv.js","names":["canonicalCandidateDigest"],"sources":["../src/runtime-usage.ts","../src/intelligence/activation.ts"],"sourcesContent":["import type { RuntimeStreamEvent } from './types'\n\n/** Observed subtotals, with missing measurements kept separate from measured zeroes. */\nexport interface RuntimeUsageTotals {\n  /** Observed input tokens across normalized per-call events. */\n  tokensIn: number\n  /** Observed output tokens across normalized per-call events. */\n  tokensOut: number\n  /** Observed dollar subtotal; incomplete when `usdKnown` is false. */\n  costUsd: number\n  /** Number of observed model calls, including unpriced or incompletely metered calls. */\n  llmCalls: number\n  /** False when any observed call has incomplete token usage. */\n  tokensKnown?: false\n  /** False when any observed call lacks complete provider-billed cost. */\n  usdKnown?: false\n  /** Sum of reported external estimates; never included in `costUsd` or proof of complete cost. */\n  estimatedCostUsd?: number\n}\n\nexport function createRuntimeUsageTotals(): RuntimeUsageTotals {\n  return { tokensIn: 0, tokensOut: 0, costUsd: 0, llmCalls: 0 }\n}\n\nexport function isUsageAmount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0\n}\n\n/** Fold normalized per-call events. Backend adapters own cumulative receipt reconciliation. */\nexport function addRuntimeUsage(\n  totals: RuntimeUsageTotals,\n  event: Extract<RuntimeStreamEvent, { type: 'llm_call' }>,\n): void {\n  totals.llmCalls += 1\n  for (const key of ['tokensIn', 'tokensOut', 'costUsd'] as const) {\n    const value = event[key]\n    if (isUsageAmount(value)) totals[key] += value\n    else if (key === 'costUsd') totals.usdKnown = false\n    else totals.tokensKnown = false\n  }\n  if (event.tokensKnown === false) totals.tokensKnown = false\n  if (event.usdKnown === false) totals.usdKnown = false\n  if (isUsageAmount(event.estimatedCostUsd)) {\n    totals.estimatedCostUsd = (totals.estimatedCostUsd ?? 0) + event.estimatedCostUsd\n  }\n}\n","import type {\n  AgentCandidateBundle,\n  AgentCandidateExperiment,\n  AgentImprovementActivation,\n  AgentImprovementActivationOutcome,\n  AgentImprovementActivationResult,\n  AgentImprovementActivationTarget,\n  AgentImprovementProposal,\n  AgentImprovementReview,\n  AgentImprovementSurface,\n  AgentProfileImprovementChange,\n  AgentProfileImprovementExperiment,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentImprovementActivationResultSchema,\n  agentImprovementActivationSchema,\n  agentProfileImprovementExperimentSchema,\n} from '@tangle-network/agent-interface'\n\nimport {\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  immutableCandidateValue,\n  verifyCanonicalCandidateDocument,\n} from '../candidate-execution/digest'\nimport {\n  requireSealedCandidateExperiment,\n  verifyAgentImprovementActivation,\n  verifyAgentImprovementProposal,\n} from './improvement-cycle'\nimport {\n  agentImprovementTargetDigest,\n  agentImprovementTargetInput,\n  agentProfileImprovementStateDigest,\n} from './improvement-surfaces'\n\nexport interface CreateAgentImprovementActivationResultOptions {\n  completedAt: string\n  outcome: AgentImprovementActivationOutcome\n}\n\nexport interface AgentImprovementActivationTargetPlan extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  /**\n   * Exact measured input the product must apply to reach `desiredDigest`.\n   * Transition surfaces such as code and knowledge are applied operations, so\n   * their resulting state digest is not the digest of this input document.\n   */\n  desiredInput: unknown\n}\n\nexport type AgentProfileImprovementActivationOperation =\n  | {\n      kind: 'apply-change'\n      changes: AgentProfileImprovementChange\n    }\n  | {\n      /** The product must load its own saved state at `desiredStateDigest`. */\n      kind: 'restore-state'\n    }\n\nexport interface AgentProfileImprovementActivationTargetPlan\n  extends AgentImprovementActivationTarget {\n  desiredDigest: Sha256Digest\n  desiredInput: AgentProfileImprovementActivationOperation\n}\n\nexport interface SealedCandidateActivationTransitionInput {\n  kind: 'sealed-candidate'\n  activation: AgentImprovementActivation\n  candidateBundle: AgentCandidateBundle\n  bundle: AgentCandidateBundle\n  targets: [AgentImprovementActivationTargetPlan, ...AgentImprovementActivationTargetPlan[]]\n  attemptedAt: string\n  expired: boolean\n}\n\n/**\n * A measured profile change without raw profile bytes.\n * The product owns the private state lookup and atomic write.\n */\nexport interface ProfileImprovementActivationTransitionInput {\n  kind: 'profile-improvement'\n  activation: AgentImprovementActivation\n  experiment: AgentProfileImprovementExperiment\n  sourceStateDigest: Sha256Digest\n  desiredStateDigest: Sha256Digest\n  operation: AgentProfileImprovementActivationOperation\n  targets: [\n    AgentProfileImprovementActivationTargetPlan,\n    ...AgentProfileImprovementActivationTargetPlan[],\n  ]\n  attemptedAt: string\n  expired: boolean\n}\n\nexport type AgentImprovementActivationTransitionInput =\n  | SealedCandidateActivationTransitionInput\n  | ProfileImprovementActivationTransitionInput\n\nexport interface AgentImprovementActivationResultStore {\n  load(idempotencyKey: Sha256Digest): Promise<unknown | undefined>\n  putIfAbsent(result: AgentImprovementActivationResult): Promise<unknown>\n}\n\n/**\n * Product-owned or Runtime-composed transition.\n *\n * Implementations resolve a stored result for `activation.digest`, compare\n * every target, and make the write durably idempotent. Co-located targets store\n * the all-or-none write with its result. Other targets throw when result\n * storage fails so a retry can reconcile it. Runtime never invokes this write\n * function after authorization expires.\n */\nexport type AgentImprovementActivationTransition = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown>\n\n/**\n * Target-read-only check for a prior exact write.\n * It may persist recovered result metadata, but must not change an activation target.\n * Return undefined only when no target write can have committed.\n */\nexport type AgentImprovementActivationReconciliation = (\n  input: AgentImprovementActivationTransitionInput,\n) => Promise<unknown | undefined>\n\nexport interface ExecuteAgentImprovementActivationInput {\n  proposal: AgentImprovementProposal\n  review: AgentImprovementReview\n  activation: AgentImprovementActivation\n}\n\nexport interface ExecuteAgentImprovementActivationOptions {\n  transition: AgentImprovementActivationTransition\n  reconcile?: AgentImprovementActivationReconciliation\n  now?: () => Date\n}\n\n/** Create the exact result a product stores in the same transaction as its target write. */\nexport function createAgentImprovementActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  options: CreateAgentImprovementActivationResultOptions,\n): AgentImprovementActivationResult {\n  const activation = verifyCanonicalCandidateDocument(\n    agentImprovementActivationSchema.parse(transition.activation),\n    'agent improvement activation',\n  )\n  assertTransitionInput(activation, transition)\n  const result = agentImprovementActivationResultSchema.parse(\n    canonicalCandidateDocument<AgentImprovementActivationResult>({\n      kind: 'agent-improvement-activation-result',\n      idempotencyKey: activation.digest,\n      attemptedAt: transition.attemptedAt,\n      completedAt: options.completedAt,\n      outcome: options.outcome,\n    }).value,\n  )\n  assertResultAgainstActivation(activation, result)\n  assertOutcomeDesiredState(\n    activation,\n    result,\n    new Map(transition.targets.map((target) => [targetIdentity(target), target.desiredDigest])),\n  )\n  return immutableCandidateValue(result)\n}\n\n/**\n * Recompute one historical activation result against the exact measured proposal and authority.\n * The result records that attempt; it is not a query of the target's current state.\n */\nexport function verifyAgentImprovementActivationResult(input: {\n  proposal: unknown\n  review: unknown\n  activation: unknown\n  result: unknown\n}): AgentImprovementActivationResult {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const result = verifyCanonicalCandidateDocument(\n    agentImprovementActivationResultSchema.parse(input.result),\n    'agent improvement activation result',\n  )\n  assertResultAgainstActivation(activation, result)\n  assertResultDesiredState(proposal, activation, result)\n  return result\n}\n\n/** Validate and execute one product-owned activation transition. */\nexport async function executeAgentImprovementActivation(\n  input: ExecuteAgentImprovementActivationInput,\n  options: ExecuteAgentImprovementActivationOptions,\n): Promise<AgentImprovementActivationResult> {\n  const proposal = verifyAgentImprovementProposal(input.proposal)\n  const activation = verifyAgentImprovementActivation(input)\n  const observedAt = (options.now ?? (() => new Date()))().toISOString()\n  const attemptedAt =\n    Date.parse(observedAt) < Date.parse(activation.authorizedAt)\n      ? activation.authorizedAt\n      : observedAt\n  const expired = Date.parse(attemptedAt) >= Date.parse(activation.expiresAt)\n  const transition = immutableCandidateValue<AgentImprovementActivationTransitionInput>(\n    proposal.evaluation.kind === 'agent-improvement-measured-comparison'\n      ? sealedCandidateTransition(proposal.evaluation.experiment, activation, attemptedAt, expired)\n      : profileImprovementTransition(\n          proposal.evaluation.experiment,\n          activation,\n          attemptedAt,\n          expired,\n        ),\n  )\n\n  if (transition.expired) {\n    if (!options.reconcile) {\n      return uncertainActivationResult(transition, 'RECONCILIATION_UNAVAILABLE')\n    }\n    let reconciled: unknown\n    try {\n      reconciled = await options.reconcile(transition)\n    } catch {\n      return uncertainActivationResult(transition, 'RECONCILIATION_THROW')\n    }\n    if (reconciled === undefined) {\n      return createAgentImprovementActivationResult(transition, {\n        completedAt: transition.attemptedAt,\n        outcome: { status: 'expired' },\n      })\n    }\n    try {\n      return verifyAgentImprovementActivationResult({ ...input, result: reconciled })\n    } catch {\n      return uncertainActivationResult(transition, 'INVALID_RECONCILIATION')\n    }\n  }\n\n  let rawResult: unknown\n  try {\n    rawResult = await options.transition(transition)\n  } catch {\n    return uncertainActivationResult(transition, 'TRANSITION_THROW')\n  }\n  try {\n    return verifyAgentImprovementActivationResult({ ...input, result: rawResult })\n  } catch {\n    return uncertainActivationResult(transition, 'INVALID_RESULT')\n  }\n}\n\nfunction sealedCandidateTransition(\n  experiment: AgentCandidateExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): SealedCandidateActivationTransitionInput {\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  return {\n    kind: 'sealed-candidate',\n    activation,\n    candidateBundle: experiment.candidate,\n    bundle: experiment[targetArm],\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentImprovementTargetDigest(experiment, targetArm, target.surface),\n      desiredInput: agentImprovementTargetInput(experiment[targetArm], target.surface),\n    })) as SealedCandidateActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementTransition(\n  experiment: AgentProfileImprovementExperiment,\n  activation: AgentImprovementActivation,\n  attemptedAt: string,\n  expired: boolean,\n): ProfileImprovementActivationTransitionInput {\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  return {\n    kind: 'profile-improvement',\n    activation,\n    experiment,\n    sourceStateDigest: agentProfileImprovementStateDigest(experiment, sourceArm),\n    desiredStateDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n    operation,\n    targets: activation.targets.map((target) => ({\n      ...target,\n      desiredDigest: agentProfileImprovementStateDigest(experiment, targetArm),\n      desiredInput: operation,\n    })) as ProfileImprovementActivationTransitionInput['targets'],\n    attemptedAt,\n    expired,\n  }\n}\n\nfunction profileImprovementOperation(\n  experiment: AgentProfileImprovementExperiment,\n  intent: AgentImprovementActivation['intent'],\n): AgentProfileImprovementActivationOperation {\n  return intent === 'activate-candidate'\n    ? { kind: 'apply-change', changes: experiment.change }\n    : { kind: 'restore-state' }\n}\n\nfunction uncertainActivationResult(\n  transition: AgentImprovementActivationTransitionInput,\n  code: string,\n): AgentImprovementActivationResult {\n  return createAgentImprovementActivationResult(transition, {\n    completedAt: transition.attemptedAt,\n    outcome: {\n      status: 'indeterminate',\n      code,\n      message: 'The product transition did not return a trustworthy commit result.',\n    },\n  })\n}\n\nfunction assertTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: AgentImprovementActivationTransitionInput,\n): void {\n  if (transition.kind === 'sealed-candidate') {\n    assertSealedCandidateTransitionInput(activation, transition)\n    return\n  }\n  assertProfileImprovementTransitionInput(activation, transition)\n}\n\nfunction assertSealedCandidateTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: SealedCandidateActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const desiredInputsMatch = transition.targets.every(\n    (target) =>\n      canonicalCandidateDigest(target.desiredInput) ===\n      canonicalCandidateDigest(agentImprovementTargetInput(transition.bundle, target.surface)),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    transition.candidateBundle.digest !== activation.candidateDigest ||\n    !desiredInputsMatch ||\n    (activation.intent === 'activate-candidate' &&\n      transition.bundle.digest !== transition.candidateBundle.digest)\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertProfileImprovementTransitionInput(\n  activation: AgentImprovementActivation,\n  transition: ProfileImprovementActivationTransitionInput,\n): void {\n  assertAuthorizedTransitionTargets(activation, transition.targets)\n  const targetsAgentProfile = activation.targets.some(\n    (target) => target.surface === 'agent-profile',\n  )\n  const experiment = agentProfileImprovementExperimentSchema.parse(transition.experiment)\n  const sourceArm = activation.intent === 'activate-candidate' ? 'baseline' : 'candidate'\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const sourceStateDigest = agentProfileImprovementStateDigest(experiment, sourceArm)\n  const desiredStateDigest = agentProfileImprovementStateDigest(experiment, targetArm)\n  const operation = profileImprovementOperation(experiment, activation.intent)\n  const targetsMatch = transition.targets.every(\n    (target) =>\n      target.expectedBaseDigest === sourceStateDigest &&\n      target.desiredDigest === desiredStateDigest &&\n      canonicalCandidateDigest(target.desiredInput) === canonicalCandidateDigest(operation),\n  )\n  if (\n    transition.expired !== Date.parse(transition.attemptedAt) >= Date.parse(activation.expiresAt) ||\n    experiment.digest !== activation.experimentDigest ||\n    experiment.candidate.stateDigest !== activation.candidateDigest ||\n    (targetsAgentProfile &&\n      (activation.executionRef === undefined ||\n        canonicalCandidateDigest(activation.executionRef) !==\n          canonicalCandidateDigest(experiment.executionRef))) ||\n    transition.sourceStateDigest !== sourceStateDigest ||\n    transition.desiredStateDigest !== desiredStateDigest ||\n    canonicalCandidateDigest(transition.operation) !== canonicalCandidateDigest(operation) ||\n    !targetsMatch\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertAuthorizedTransitionTargets(\n  activation: AgentImprovementActivation,\n  targets: readonly AgentImprovementActivationTargetPlan[],\n): void {\n  const authorized = targetMap(activation.targets)\n  const planned = targetMap(targets)\n  if (\n    authorized.size !== planned.size ||\n    [...authorized.entries()].some(\n      ([identity, target]) =>\n        planned.get(identity)?.expectedBaseDigest !== target.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('activation transition does not match its authorization')\n  }\n}\n\nfunction assertResultAgainstActivation(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  const attemptedAt = Date.parse(result.attemptedAt)\n  const completedAt = Date.parse(result.completedAt)\n  const expiresAt = Date.parse(activation.expiresAt)\n  if (\n    result.idempotencyKey !== activation.digest ||\n    attemptedAt < Date.parse(activation.authorizedAt) ||\n    completedAt < attemptedAt\n  ) {\n    throw new Error('activation result does not bind its authorization')\n  }\n  const expired = attemptedAt >= expiresAt\n  if (\n    (result.outcome.status === 'expired' && !expired) ||\n    (expired && !['expired', 'indeterminate', 'already-applied'].includes(result.outcome.status))\n  ) {\n    throw new Error('activation result does not honor its authorization expiry')\n  }\n  if (!('targets' in result.outcome)) return\n  const authorized = targetMap(activation.targets)\n  const observed = new Set(result.outcome.targets.map(targetIdentity))\n  if (\n    authorized.size !== observed.size ||\n    [...authorized.keys()].some((identity) => !observed.has(identity))\n  ) {\n    throw new Error('activation result must cover every authorized target exactly once')\n  }\n  if (\n    result.outcome.status === 'applied' &&\n    result.outcome.targets.some(\n      (target) =>\n        target.beforeDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n    )\n  ) {\n    throw new Error('applied activation did not start from its authorized base state')\n  }\n}\n\nfunction assertResultDesiredState(\n  proposal: AgentImprovementProposal,\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n): void {\n  if (!('targets' in result.outcome)) return\n  const targetArm = activation.intent === 'activate-candidate' ? 'candidate' : 'baseline'\n  const desiredStateDigest =\n    proposal.evaluation.kind === 'agent-profile-improvement-measured-comparison'\n      ? agentProfileImprovementStateDigest(proposal.evaluation.experiment, targetArm)\n      : undefined\n  const desired = new Map(\n    activation.targets.map((target) => [\n      targetIdentity(target),\n      desiredStateDigest ??\n        agentImprovementTargetDigest(\n          requireSealedCandidateExperiment(proposal),\n          targetArm,\n          target.surface,\n        ),\n    ]),\n  )\n  assertOutcomeDesiredState(activation, result, desired)\n}\n\nfunction assertOutcomeDesiredState(\n  activation: AgentImprovementActivation,\n  result: AgentImprovementActivationResult,\n  desired: ReadonlyMap<string, Sha256Digest>,\n): void {\n  if (!('targets' in result.outcome)) return\n  if (result.outcome.status === 'applied') {\n    if (\n      result.outcome.targets.some(\n        (target) => target.afterDigest !== desired.get(targetIdentity(target)),\n      )\n    ) {\n      throw new Error('applied activation does not match the requested bundle')\n    }\n    return\n  }\n  const allDesired = result.outcome.targets.every(\n    (target) => target.currentDigest === desired.get(targetIdentity(target)),\n  )\n  if (result.outcome.status === 'already-applied') {\n    if (!allDesired) throw new Error('already-applied activation is not at the requested state')\n    return\n  }\n  const authorized = targetMap(activation.targets)\n  const hasStaleTarget = result.outcome.targets.some(\n    (target) => target.currentDigest !== authorized.get(targetIdentity(target))?.expectedBaseDigest,\n  )\n  if (allDesired || !hasStaleTarget) {\n    throw new Error('activation conflict does not identify stale target state')\n  }\n}\n\nfunction targetMap<T extends { surface: AgentImprovementSurface; identity: string }>(\n  targets: readonly T[],\n): Map<string, T> {\n  return new Map(targets.map((target) => [targetIdentity(target), target]))\n}\n\nfunction targetIdentity(target: { surface: AgentImprovementSurface; identity: string }): string {\n  return `${target.surface}\\u0000${target.identity}`\n}\n"],"mappings":";;;;AAoBA,SAAgB,2BAA+C;CAC7D,OAAO;EAAE,UAAU;EAAG,WAAW;EAAG,SAAS;EAAG,UAAU;CAAE;AAC9D;AAEA,SAAgB,cAAc,OAAiC;CAC7D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS;AACzE;;AAGA,SAAgB,gBACd,QACA,OACM;CACN,OAAO,YAAY;CACnB,KAAK,MAAM,OAAO;EAAC;EAAY;EAAa;CAAS,GAAY;EAC/D,MAAM,QAAQ,MAAM;EACpB,IAAI,cAAc,KAAK,GAAG,OAAO,QAAQ;OACpC,IAAI,QAAQ,WAAW,OAAO,WAAW;OACzC,OAAO,cAAc;CAC5B;CACA,IAAI,MAAM,gBAAgB,OAAO,OAAO,cAAc;CACtD,IAAI,MAAM,aAAa,OAAO,OAAO,WAAW;CAChD,IAAI,cAAc,MAAM,gBAAgB,GACtC,OAAO,oBAAoB,OAAO,oBAAoB,KAAK,MAAM;AAErE;;;;ACgGA,SAAgB,uCACd,YACA,SACkC;CAClC,MAAM,aAAa,iCACjB,iCAAiC,MAAM,WAAW,UAAU,GAC5D,8BACF;CACA,sBAAsB,YAAY,UAAU;CAC5C,MAAM,SAAS,uCAAuC,MACpD,2BAA6D;EAC3D,MAAM;EACN,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,aAAa,QAAQ;EACrB,SAAS,QAAQ;CACnB,CAAC,CAAC,CAAC,KACL;CACA,8BAA8B,YAAY,MAAM;CAChD,0BACE,YACA,QACA,IAAI,IAAI,WAAW,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,OAAO,aAAa,CAAC,CAAC,CAC5F;CACA,OAAO,wBAAwB,MAAM;AACvC;;;;;AAMA,SAAgB,uCAAuC,OAKlB;CACnC,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,SAAS,iCACb,uCAAuC,MAAM,MAAM,MAAM,GACzD,qCACF;CACA,8BAA8B,YAAY,MAAM;CAChD,yBAAyB,UAAU,YAAY,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,kCACpB,OACA,SAC2C;CAC3C,MAAM,WAAW,+BAA+B,MAAM,QAAQ;CAC9D,MAAM,aAAa,iCAAiC,KAAK;CACzD,MAAM,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,YAAY;CACrE,MAAM,cACJ,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,WAAW,YAAY,IACvD,WAAW,eACX;CACN,MAAM,UAAU,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS;CAC1E,MAAM,aAAa,wBACjB,SAAS,WAAW,SAAS,0CACzB,0BAA0B,SAAS,WAAW,YAAY,YAAY,aAAa,OAAO,IAC1F,6BACE,SAAS,WAAW,YACpB,YACA,aACA,OACF,CACN;CAEA,IAAI,WAAW,SAAS;EACtB,IAAI,CAAC,QAAQ,WACX,OAAO,0BAA0B,YAAY,4BAA4B;EAE3E,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,QAAQ,UAAU,UAAU;EACjD,QAAQ;GACN,OAAO,0BAA0B,YAAY,sBAAsB;EACrE;EACA,IAAI,eAAe,KAAA,GACjB,OAAO,uCAAuC,YAAY;GACxD,aAAa,WAAW;GACxB,SAAS,EAAE,QAAQ,UAAU;EAC/B,CAAC;EAEH,IAAI;GACF,OAAO,uCAAuC;IAAE,GAAG;IAAO,QAAQ;GAAW,CAAC;EAChF,QAAQ;GACN,OAAO,0BAA0B,YAAY,wBAAwB;EACvE;CACF;CAEA,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,QAAQ,WAAW,UAAU;CACjD,QAAQ;EACN,OAAO,0BAA0B,YAAY,kBAAkB;CACjE;CACA,IAAI;EACF,OAAO,uCAAuC;GAAE,GAAG;GAAO,QAAQ;EAAU,CAAC;CAC/E,QAAQ;EACN,OAAO,0BAA0B,YAAY,gBAAgB;CAC/D;AACF;AAEA,SAAS,0BACP,YACA,YACA,aACA,SAC0C;CAC1C,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,OAAO;EACL,MAAM;EACN;EACA,iBAAiB,WAAW;EAC5B,QAAQ,WAAW;EACnB,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,6BAA6B,YAAY,WAAW,OAAO,OAAO;GACjF,cAAc,4BAA4B,WAAW,YAAY,OAAO,OAAO;EACjF,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,6BACP,YACA,YACA,aACA,SAC6C;CAC7C,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,OAAO;EACL,MAAM;EACN;EACA;EACA,mBAAmB,mCAAmC,YAAY,SAAS;EAC3E,oBAAoB,mCAAmC,YAAY,SAAS;EAC5E;EACA,SAAS,WAAW,QAAQ,KAAK,YAAY;GAC3C,GAAG;GACH,eAAe,mCAAmC,YAAY,SAAS;GACvE,cAAc;EAChB,EAAE;EACF;EACA;CACF;AACF;AAEA,SAAS,4BACP,YACA,QAC4C;CAC5C,OAAO,WAAW,uBACd;EAAE,MAAM;EAAgB,SAAS,WAAW;CAAO,IACnD,EAAE,MAAM,gBAAgB;AAC9B;AAEA,SAAS,0BACP,YACA,MACkC;CAClC,OAAO,uCAAuC,YAAY;EACxD,aAAa,WAAW;EACxB,SAAS;GACP,QAAQ;GACR;GACA,SAAS;EACX;CACF,CAAC;AACH;AAEA,SAAS,sBACP,YACA,YACM;CACN,IAAI,WAAW,SAAS,oBAAoB;EAC1C,qCAAqC,YAAY,UAAU;EAC3D;CACF;CACA,wCAAwC,YAAY,UAAU;AAChE;AAEA,SAAS,qCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,qBAAqB,WAAW,QAAQ,OAC3C,WACCA,2BAAyB,OAAO,YAAY,MAC5CA,2BAAyB,4BAA4B,WAAW,QAAQ,OAAO,OAAO,CAAC,CAC3F;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,gBAAgB,WAAW,WAAW,mBACjD,CAAC,sBACA,WAAW,WAAW,wBACrB,WAAW,OAAO,WAAW,WAAW,gBAAgB,QAE1D,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,wCACP,YACA,YACM;CACN,kCAAkC,YAAY,WAAW,OAAO;CAChE,MAAM,sBAAsB,WAAW,QAAQ,MAC5C,WAAW,OAAO,YAAY,eACjC;CACA,MAAM,aAAa,wCAAwC,MAAM,WAAW,UAAU;CACtF,MAAM,YAAY,WAAW,WAAW,uBAAuB,aAAa;CAC5E,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,oBAAoB,mCAAmC,YAAY,SAAS;CAClF,MAAM,qBAAqB,mCAAmC,YAAY,SAAS;CACnF,MAAM,YAAY,4BAA4B,YAAY,WAAW,MAAM;CAC3E,MAAM,eAAe,WAAW,QAAQ,OACrC,WACC,OAAO,uBAAuB,qBAC9B,OAAO,kBAAkB,sBACzBA,2BAAyB,OAAO,YAAY,MAAMA,2BAAyB,SAAS,CACxF;CACA,IACE,WAAW,YAAY,KAAK,MAAM,WAAW,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,KAC5F,WAAW,WAAW,WAAW,oBACjC,WAAW,UAAU,gBAAgB,WAAW,mBAC/C,wBACE,WAAW,iBAAiB,KAAA,KAC3BA,2BAAyB,WAAW,YAAY,MAC9CA,2BAAyB,WAAW,YAAY,MACtD,WAAW,sBAAsB,qBACjC,WAAW,uBAAuB,sBAClCA,2BAAyB,WAAW,SAAS,MAAMA,2BAAyB,SAAS,KACrF,CAAC,cAED,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,kCACP,YACA,SACM;CACN,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,UAAU,UAAU,OAAO;CACjC,IACE,WAAW,SAAS,QAAQ,QAC5B,CAAC,GAAG,WAAW,QAAQ,CAAC,CAAC,CAAC,MACvB,CAAC,UAAU,YACV,QAAQ,IAAI,QAAQ,CAAC,EAAE,uBAAuB,OAAO,kBACzD,GAEA,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,8BACP,YACA,QACM;CACN,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,cAAc,KAAK,MAAM,OAAO,WAAW;CACjD,MAAM,YAAY,KAAK,MAAM,WAAW,SAAS;CACjD,IACE,OAAO,mBAAmB,WAAW,UACrC,cAAc,KAAK,MAAM,WAAW,YAAY,KAChD,cAAc,aAEd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,UAAU,eAAe;CAC/B,IACG,OAAO,QAAQ,WAAW,aAAa,CAAC,WACxC,WAAW,CAAC;EAAC;EAAW;EAAiB;CAAiB,CAAC,CAAC,SAAS,OAAO,QAAQ,MAAM,GAE3F,MAAM,IAAI,MAAM,2DAA2D;CAE7E,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,WAAW,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI,cAAc,CAAC;CACnE,IACE,WAAW,SAAS,SAAS,QAC7B,CAAC,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,IAAI,QAAQ,CAAC,GAEjE,MAAM,IAAI,MAAM,mEAAmE;CAErF,IACE,OAAO,QAAQ,WAAW,aAC1B,OAAO,QAAQ,QAAQ,MACpB,WACC,OAAO,iBAAiB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBACpE,GAEA,MAAM,IAAI,MAAM,iEAAiE;AAErF;AAEA,SAAS,yBACP,UACA,YACA,QACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,MAAM,YAAY,WAAW,WAAW,uBAAuB,cAAc;CAC7E,MAAM,qBACJ,SAAS,WAAW,SAAS,kDACzB,mCAAmC,SAAS,WAAW,YAAY,SAAS,IAC5E,KAAA;CAYN,0BAA0B,YAAY,QAAQ,IAX1B,IAClB,WAAW,QAAQ,KAAK,WAAW,CACjC,eAAe,MAAM,GACrB,sBACE,6BACE,iCAAiC,QAAQ,GACzC,WACA,OAAO,OACT,CACJ,CAAC,CAEiD,CAAC;AACvD;AAEA,SAAS,0BACP,YACA,QACA,SACM;CACN,IAAI,EAAE,aAAa,OAAO,UAAU;CACpC,IAAI,OAAO,QAAQ,WAAW,WAAW;EACvC,IACE,OAAO,QAAQ,QAAQ,MACpB,WAAW,OAAO,gBAAgB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACvE,GAEA,MAAM,IAAI,MAAM,wDAAwD;EAE1E;CACF;CACA,MAAM,aAAa,OAAO,QAAQ,QAAQ,OACvC,WAAW,OAAO,kBAAkB,QAAQ,IAAI,eAAe,MAAM,CAAC,CACzE;CACA,IAAI,OAAO,QAAQ,WAAW,mBAAmB;EAC/C,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,0DAA0D;EAC3F;CACF;CACA,MAAM,aAAa,UAAU,WAAW,OAAO;CAC/C,MAAM,iBAAiB,OAAO,QAAQ,QAAQ,MAC3C,WAAW,OAAO,kBAAkB,WAAW,IAAI,eAAe,MAAM,CAAC,CAAC,EAAE,kBAC/E;CACA,IAAI,cAAc,CAAC,gBACjB,MAAM,IAAI,MAAM,0DAA0D;AAE9E;AAEA,SAAS,UACP,SACgB;CAChB,OAAO,IAAI,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,MAAM,GAAG,MAAM,CAAC,CAAC;AAC1E;AAEA,SAAS,eAAe,QAAwE;CAC9F,OAAO,GAAG,OAAO,QAAQ,QAAQ,OAAO;AAC1C"}