@tangle-network/agent-runtime 0.338.0 → 0.340.0

package/dist/agent.d.ts

@@ -1,6 +1,6 @@
-import { BT as OutputAdapter, HT as SandboxClient, S as RuntimeStreamEvent, _T as AgentRunSpec } from "./types-CrNWif8-.js";
-import { C as worktreeCliProfileMaterialization, S as validateProfileMaterialization, _ as promptModelProfileMaterialization, a as DefineProfileMaterializationContractOptions, b as renderProfileMaterializationIssues, c as ProfileMaterializationIssue, d as assertProfileMaterializes, f as controlProfileMaterialization, g as promptControlProfileMaterialization, h as profileMaterializationAxes, i as CanonicalAgentProfileMaterializationAxis, l as ValidateProfileMaterializationOptions, m as fullProfileMaterialization, n as AgentProfileMaterializationAxis, o as KnownAgentProfileMaterializationAxis, p as defineProfileMaterializationContract, r as AssertProfileMaterializationOptions, s as ProfileMaterializationContract, t as AGENT_PROFILE_MATERIALIZATION_AXES, u as assertProfileMaterialization, v as promptOnlyProfileMaterialization, x as sandboxActProfileMaterialization, y as promptResourceProfileMaterialization } from "./profile-materialization-BnoEf1co.js";
-import { a as createSurfaceImprovementProposer, c as SurfaceValidationIssue, d as validateSurfaces, i as SurfaceImprovementEdit, l as renderSurfaceIssues, n as DraftPatchInput, o as AgentSurfaces, r as DraftPatchOutput, s as ResolvedSurface, t as CreateSurfaceImprovementProposerOptions, u as resolveSubjectPath } from "./improvement-adapter-D5gwwoXQ.js";
+import { Px as AgentRunSpec, S as RuntimeStreamEvent, aS as SandboxClient, rS as OutputAdapter } from "./types-DZ6L0Bv3.js";
+import { a as ProfileMaterializationContract, c as assertProfileMaterializes, n as AssertProfileMaterializationOptions, o as ProfileMaterializationIssue, r as DefineProfileMaterializationContractOptions, s as ValidateProfileMaterializationOptions, t as AgentProfileMaterializationAxis } from "./profile-materialization-bPm0gGLO.js";
+import { a as createSurfaceImprovementProposer, c as SurfaceValidationIssue, i as SurfaceImprovementEdit, l as renderSurfaceIssues, n as DraftPatchInput, o as AgentSurfaces, r as DraftPatchOutput, s as ResolvedSurface, t as CreateSurfaceImprovementProposerOptions, u as validateSurfaces } from "./improvement-adapter-sIthWkcN.js";
 import { AgentProfile, AgentProfileFileMount, AgentProfileMcpServer } from "@tangle-network/agent-interface";
 import { TraceAnalystDefinition } from "@tangle-network/agent-eval";
 import { SandboxEvent } from "@tangle-network/sandbox";
@@ -167,20 +167,6 @@ interface AgentRunInvocation<TRunOutput> {
  * the eval path consumes the manifest end-to-end.
  */
 declare function unimplementedAgentRun<TRunOutput = unknown>(reason?: string): AgentRunInvocation<TRunOutput>;
-/**
- * Drain `act`'s `events` into an array AND await its `output`. Useful for
- * eval / outcome-measurement code paths that don't care about live
- * rendering. The events array is preserved so the substrate can inspect
- * tool calls / readiness / questions retrospectively.
- *
- * IMPORTANT: chat-centric UX MUST NOT call this — it defeats streaming
- * (no incremental render). Use `for await (const ev of invocation.events)`
- * directly in the chat surface.
- */
-declare function collectAgentRun<TRunOutput>(invocation: AgentRunInvocation<TRunOutput>): Promise<{
-  events: ReadonlyArray<RuntimeStreamEvent>;
-  output: TRunOutput;
-}>;
 interface AgentRunContext {
   /** Substrate-managed trace emitter. */
   emitter: import('@tangle-network/agent-eval').TraceEmitter;
@@ -274,5 +260,5 @@ interface CreateSandboxActOptions<TPersona, TRunOutput> {
  */
 declare function createSandboxAct<TPersona, TRunOutput>(options: CreateSandboxActOptions<TPersona, TRunOutput>): (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput>;
 //#endregion
-export { AGENT_PROFILE_MATERIALIZATION_AXES, type AgentManifest, AgentManifestError, type AgentProfileMaterializationAxis, type AgentRubric, type AgentRunContext, type AgentRunInvocation, type AgentRuntime, type AgentSurfaces, type AnalystConfig, type AssertProfileMaterializationOptions, type CanonicalAgentProfileMaterializationAxis, type CreateSandboxActOptions, type CreateSurfaceImprovementProposerOptions, type DefineProfileMaterializationContractOptions, type DraftPatchInput, type DraftPatchOutput, type JudgeConfig, type KnownAgentProfileMaterializationAxis, type ProfileMaterializationContract, type ProfileMaterializationIssue, type ResolvedSurface, type RubricDimension, type SandboxActComposeOverrides, type SurfaceImprovementEdit, type SurfaceValidationIssue, type ValidateProfileMaterializationOptions, assertProfileMaterialization, assertProfileMaterializes, collectAgentRun, controlProfileMaterialization, createSandboxAct, createSurfaceImprovementProposer, defineAgent, defineProfileMaterializationContract, fullProfileMaterialization, profileMaterializationAxes, promptControlProfileMaterialization, promptModelProfileMaterialization, promptOnlyProfileMaterialization, promptResourceProfileMaterialization, renderProfileMaterializationIssues, renderSurfaceIssues, resolveSubjectPath, sandboxActProfileMaterialization, unimplementedAgentRun, validateProfileMaterialization, validateSurfaces, worktreeCliProfileMaterialization };
+export { type AgentManifest, AgentManifestError, type AgentRubric, type AgentRunContext, type AgentRunInvocation, type AgentRuntime, type AgentSurfaces, type AnalystConfig, type AssertProfileMaterializationOptions, type CreateSandboxActOptions, type CreateSurfaceImprovementProposerOptions, type DefineProfileMaterializationContractOptions, type DraftPatchInput, type DraftPatchOutput, type JudgeConfig, type ProfileMaterializationContract, type ProfileMaterializationIssue, type ResolvedSurface, type RubricDimension, type SandboxActComposeOverrides, type SurfaceImprovementEdit, type SurfaceValidationIssue, type ValidateProfileMaterializationOptions, assertProfileMaterializes, createSandboxAct, createSurfaceImprovementProposer, defineAgent, renderSurfaceIssues, unimplementedAgentRun, validateSurfaces };
 //# sourceMappingURL=agent.d.ts.map

package/dist/agent.js

@@ -1,6 +1,6 @@
-import { Ca as mapSandboxEvent, Ci as validateProfileMaterialization, Dt as createSandboxForSpec, _i as promptResourceProfileMaterialization, bi as sandboxActProfileMaterialization, ci as assertProfileMaterialization, di as defineProfileMaterializationContract, fi as fullProfileMaterialization, gi as promptOnlyProfileMaterialization, hi as promptModelProfileMaterialization, li as assertProfileMaterializes, mi as promptControlProfileMaterialization, pi as profileMaterializationAxes, si as AGENT_PROFILE_MATERIALIZATION_AXES, ui as controlProfileMaterialization, vi as renderProfileMaterializationIssues, wi as worktreeCliProfileMaterialization } from "./supervisor-CPG1I9UN.js";
+import { Dr as assertProfileMaterializes, Er as assertProfileMaterialization, Fi as mapSandboxEvent, Fr as sandboxActProfileMaterialization, xt as createSandboxForSpec } from "./supervisor-VXuN2OHT.js";
 import { t as sha256 } from "./content-digest-sBTLujlK.js";
-import "./runtime-D37zRSs7.js";
+import "./runtime-C55Zgo1R.js";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { parseFindingSubject } from "@tangle-network/agent-eval/analyst";
@@ -262,24 +262,6 @@ function unimplementedAgentRun(reason = "AgentRuntime.act is not yet wired for t
 		output: Promise.reject(new Error(reason))
 	};
 }
-/**
-* Drain `act`'s `events` into an array AND await its `output`. Useful for
-* eval / outcome-measurement code paths that don't care about live
-* rendering. The events array is preserved so the substrate can inspect
-* tool calls / readiness / questions retrospectively.
-*
-* IMPORTANT: chat-centric UX MUST NOT call this — it defeats streaming
-* (no incremental render). Use `for await (const ev of invocation.events)`
-* directly in the chat surface.
-*/
-async function collectAgentRun(invocation) {
-	const events = [];
-	for await (const ev of invocation.events) events.push(ev);
-	return {
-		events,
-		output: await invocation.output
-	};
-}
 /** Thrown when `defineAgent` finds a required surface missing on disk. */
 var AgentManifestError = class extends Error {
 	agentId;
@@ -513,6 +495,6 @@ function applyComposeOverrides(base, overrides) {
 	};
 }
 //#endregion
-export { AGENT_PROFILE_MATERIALIZATION_AXES, AgentManifestError, assertProfileMaterialization, assertProfileMaterializes, collectAgentRun, controlProfileMaterialization, createSandboxAct, createSurfaceImprovementProposer, defineAgent, defineProfileMaterializationContract, fullProfileMaterialization, profileMaterializationAxes, promptControlProfileMaterialization, promptModelProfileMaterialization, promptOnlyProfileMaterialization, promptResourceProfileMaterialization, renderProfileMaterializationIssues, renderSurfaceIssues, resolveSubjectPath, sandboxActProfileMaterialization, unimplementedAgentRun, validateProfileMaterialization, validateSurfaces, worktreeCliProfileMaterialization };
+export { AgentManifestError, assertProfileMaterializes, createSandboxAct, createSurfaceImprovementProposer, defineAgent, renderSurfaceIssues, unimplementedAgentRun, validateSurfaces };
 
 //# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","names":[],"sources":["../src/agent/surfaces.ts","../src/agent/define-agent.ts","../src/agent/improvement-adapter.ts","../src/agent/sandbox-act.ts"],"sourcesContent":["/**\n * `AgentSurfaces` — declarative map of the mutable file/directory paths\n * the self-improvement loop can edit on behalf of an agent.\n *\n * The substrate uses this map to resolve every parsed `FindingSubject`\n * (from agent-eval) to a real on-disk path. No per-vertical glue;\n * no fabricated paths; no silent `existsSync(...)` skips that hide\n * misconfiguration from the operator.\n *\n * Surfaces are validated at `defineAgent` time — missing paths fail\n * loud with a list of every offender. A surface that's not needed\n * (e.g. an agent with no RAG corpora) is simply omitted; the loop\n * refuses to route those subjects rather than fabricating a target.\n */\n\nimport { existsSync, statSync } from 'node:fs'\nimport { isAbsolute, join, relative, resolve, sep } from 'node:path'\nimport type { FindingSubject } from '@tangle-network/agent-eval'\n\n/**\n * Surface declarations. Every path is repo-relative (or absolute) at\n * `defineAgent` time. At resolution time, paths are joined against the\n * agent's `repoRoot`.\n *\n * `systemPrompt`, `tools`, `personas` are DIRECTORIES; the loop appends\n * `<section>.md`, `<tool>/README.md`, `<persona-id>.yaml` etc.\n * `rubric`, `outputSchema` are SINGLE FILES; the loop edits them in\n * place.\n *\n * `knowledge` is the agent-knowledge root (typically `.agent-knowledge`);\n * `applyKnowledgeWriteBlocks` writes pages relative to it.\n *\n * Optional surfaces (`scaffolding`, `memory`, `rag`, `outputSchema`)\n * can be omitted — the loop will reject findings targeting them with a\n * clear log message instead of fabricating a path.\n */\nexport interface AgentSurfaces {\n  /** Directory containing one markdown file per system-prompt section. */\n  systemPrompt: string\n  /** Directory containing one subdir per tool (`<tool>/README.md`). */\n  tools: string\n  /** Single file (TypeScript module) defining the rubric weights + dimensions. */\n  rubric: string\n  /** Knowledge-base root; typically `.agent-knowledge`. */\n  knowledge: string\n  /** Directory containing one YAML/JSON file per persona. */\n  personas: string\n  /** Optional: directory containing scaffolding rules (precondition checks, retry policies). */\n  scaffolding?: string\n  /** Optional: memory store path (JSONL / SQLite / DB). */\n  memory?: string\n  /** Optional: directory containing RAG corpora (`<corpus>/<doc-id>.md`). */\n  rag?: string\n  /** Optional: single file defining the output schema (Zod / JSON Schema). */\n  outputSchema?: string\n  /** Optional: directory containing Agent Skill packages. */\n  skills?: string\n  /** Optional: directory containing MCP server/tool configuration. */\n  mcp?: string\n  /** Optional: directory containing hook definitions. */\n  hooks?: string\n  /** Optional: directory containing subagent definitions. */\n  subagents?: string\n  /** Optional: directory containing orchestration/workflow policies. */\n  workflows?: string\n  /** Optional: single file containing rollout-policy settings. */\n  rolloutPolicy?: string\n  /** Optional: single canonical AgentProfile file. */\n  agentProfile?: string\n  /** Optional: source root for code findings. */\n  code?: string\n}\n\nexport interface ResolvedSurface {\n  /** Absolute filesystem path the operator can `cat` / `vim`. */\n  absolutePath: string\n  /** Repo-relative path for PR descriptions, diffs, audit logs. */\n  repoRelativePath: string\n  /** Whether the path currently exists on disk. */\n  exists: boolean\n  /** The substrate's intent: edit an existing file or create a new one. */\n  intent: 'edit-existing' | 'create-new'\n}\n\n/**\n * Resolve a parsed `FindingSubject` to the file path the substrate\n * should edit (or create) on disk.\n *\n * Returns `null` when:\n *   - the subject targets a surface the agent didn't declare\n *     (e.g. `rag:*` when `surfaces.rag` is undefined), OR\n *   - the subject is a `cluster` (failure-mode emits these as evidence,\n *     not actionable mutations — they don't route to a file).\n *\n * Returns a `ResolvedSurface` with `intent: 'create-new'` when the\n * subject names a path that doesn't yet exist (e.g. a new wiki page).\n * The caller chooses whether to honour the create — for tightly-managed\n * surfaces like `systemPrompt` it's usually a contract violation\n * (the analyst named a section that doesn't exist); for `knowledge`\n * it's the whole point.\n */\nexport function resolveSubjectPath(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ResolvedSurface | null {\n  const candidates = candidatePathsForSubject(subject, surfaces)\n  if (candidates.length === 0) return null\n\n  // Probe candidates in order, preferring the first one that exists on disk.\n  // Lets the substrate accept both the flat `<section>.md` convention and\n  // the skill-dir `<section>/SKILL.md` convention without forcing one layout.\n  // When none exists, fall back to the first candidate (canonical create-new).\n  for (const rel of candidates) {\n    const abs = isAbsolute(rel) ? rel : join(repoRoot, rel)\n    if (existsSync(abs)) {\n      return { absolutePath: abs, repoRelativePath: rel, exists: true, intent: 'edit-existing' }\n    }\n  }\n  const fallback = candidates[0]!\n  const fallbackAbs = isAbsolute(fallback) ? fallback : join(repoRoot, fallback)\n  return {\n    absolutePath: fallbackAbs,\n    repoRelativePath: fallback,\n    exists: false,\n    intent: 'create-new',\n  }\n}\n\nfunction candidatePathsForSubject(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n): ReadonlyArray<string> {\n  switch (subject.kind) {\n    case 'knowledge.wiki':\n    case 'knowledge.stale':\n      return optionalPath(safeJoin(surfaces.knowledge, `${subject.slug}.md`))\n    case 'knowledge.claim':\n      // Claims land in a per-topic claims directory under the knowledge root.\n      return optionalPath(safeJoin(surfaces.knowledge, 'claims', `${slugify(subject.topic)}.md`))\n    case 'knowledge.raw':\n      return optionalPath(safeJoin(surfaces.knowledge, 'raw', `${subject.sourceId}.md`))\n    case 'system-prompt': {\n      const slug = slugify(subject.section)\n      // Prefer flat layout for create-new (canonical); probe skill-dir layout\n      // in case the existing repo (tax/legal/gtm/creative) uses\n      // `<section>/SKILL.md` already.\n      return [\n        safeJoin(surfaces.systemPrompt, `${slug}.md`),\n        safeJoin(surfaces.systemPrompt, slug, 'SKILL.md'),\n        safeJoin(surfaces.systemPrompt, slug, 'index.md'),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'skill': {\n      if (!surfaces.skills) return []\n      return [\n        safeJoin(surfaces.skills, subject.name, 'SKILL.md'),\n        safeJoin(surfaces.skills, `${subject.name}.md`),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'tool-doc':\n      if (subject.aspect) {\n        return optionalPath(safeJoin(surfaces.tools, subject.tool, `${slugify(subject.aspect)}.md`))\n      }\n      // tool-doc default: `<tool>/README.md`; also probe `<tool>.md` for flat\n      // tool-list repos.\n      return [\n        safeJoin(surfaces.tools, subject.tool, 'README.md'),\n        safeJoin(surfaces.tools, `${subject.tool}.md`),\n      ].filter((path): path is string => path !== null)\n    case 'new-tool':\n      return optionalPath(safeJoin(surfaces.tools, subject.name, 'README.md'))\n    case 'mcp':\n      if (!surfaces.mcp) return []\n      return subject.tool\n        ? optionalPath(safeJoin(surfaces.mcp, subject.server, `${subject.tool}.md`))\n        : [\n            safeJoin(surfaces.mcp, `${subject.server}.json`),\n            safeJoin(surfaces.mcp, subject.server, 'README.md'),\n          ].filter((path): path is string => path !== null)\n    case 'hook':\n      if (!surfaces.hooks) return []\n      return [\n        safeJoin(surfaces.hooks, `${subject.name}.md`),\n        safeJoin(surfaces.hooks, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'subagent':\n      if (!surfaces.subagents) return []\n      return [\n        safeJoin(surfaces.subagents, `${subject.name}.md`),\n        safeJoin(surfaces.subagents, `${subject.name}.yaml`),\n        safeJoin(surfaces.subagents, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'workflow':\n      if (!surfaces.workflows) return []\n      return [\n        safeJoin(surfaces.workflows, `${subject.name}.md`),\n        safeJoin(surfaces.workflows, `${subject.name}.yaml`),\n        safeJoin(surfaces.workflows, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'rollout-policy':\n      return surfaces.rolloutPolicy ? [surfaces.rolloutPolicy] : []\n    case 'agent-profile':\n      return surfaces.agentProfile ? [surfaces.agentProfile] : []\n    case 'code': {\n      if (!surfaces.code) return []\n      const path = safeJoin(surfaces.code, subject.path)\n      return path ? [path] : []\n    }\n    case 'rag':\n      if (!surfaces.rag) return []\n      return optionalPath(safeJoin(surfaces.rag, subject.corpus, `${subject.docId}.md`))\n    case 'memory':\n      if (!surfaces.memory) return []\n      return optionalPath(safeJoin(surfaces.memory, `${slugify(subject.key)}.json`))\n    case 'scaffolding':\n      if (!surfaces.scaffolding) return []\n      return optionalPath(safeJoin(surfaces.scaffolding, `${slugify(subject.concern)}.md`))\n    case 'output-schema':\n      if (!surfaces.outputSchema) return []\n      return [surfaces.outputSchema]\n    case 'websearch.outdated':\n    case 'prior-run-summary':\n      // Stale signals don't map to a single file — handled by the knowledge\n      // adapter as `agent-knowledge:stale:*` after operator review.\n      return []\n    case 'cluster':\n      // failure-mode cluster labels are evidence, not mutations.\n      return []\n  }\n}\n\nfunction safeJoin(root: string, ...children: string[]): string | null {\n  if (children.some((child) => child.includes('\\0') || isAbsolute(child))) return null\n  const rootAbsolute = resolve(root)\n  const targetAbsolute = resolve(rootAbsolute, ...children)\n  const escaped = relative(rootAbsolute, targetAbsolute)\n  if (escaped === '..' || escaped.startsWith(`..${sep}`) || isAbsolute(escaped)) return null\n  return join(root, ...children)\n}\n\nfunction optionalPath(path: string | null): string[] {\n  return path ? [path] : []\n}\n\nfunction slugify(s: string): string {\n  return (\n    s\n      .toLowerCase()\n      .replace(/[^a-z0-9-]+/g, '-')\n      .replace(/^-+|-+$/g, '')\n      .slice(0, 200) || 'untitled'\n  )\n}\n\n/**\n * Validate that every declared surface exists on disk under `repoRoot`.\n *\n * Returns an array of `SurfaceValidationIssue` — empty when all required\n * surfaces resolve. `defineAgent` throws with the issues rendered, so\n * a misconfigured manifest fails at startup (not at the first finding\n * the loop produces 20 minutes later).\n */\nexport interface SurfaceValidationIssue {\n  surface: keyof AgentSurfaces\n  path: string\n  reason: 'missing' | 'not-directory' | 'not-file'\n}\n\n/** Validate an `AgentSurfaces` map on disk — missing paths fail loud at `defineAgent` time instead of silently skipping self-improvement edits. */\nexport function validateSurfaces(\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ReadonlyArray<SurfaceValidationIssue> {\n  const issues: SurfaceValidationIssue[] = []\n  const dirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'systemPrompt',\n    'tools',\n    'personas',\n    'knowledge',\n  ]\n  const fileSurfaces: ReadonlyArray<keyof AgentSurfaces> = ['rubric']\n  const optionalDirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'scaffolding',\n    'memory',\n    'rag',\n    'skills',\n    'mcp',\n    'hooks',\n    'subagents',\n    'workflows',\n    'code',\n  ]\n  const optionalFileSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'outputSchema',\n    'rolloutPolicy',\n    'agentProfile',\n  ]\n\n  for (const key of dirSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    }\n  }\n  for (const key of fileSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  for (const key of [...optionalDirSurfaces, ...optionalFileSurfaces]) {\n    const p = surfaces[key] as string | undefined\n    if (p === undefined) continue\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n      continue\n    }\n    const expectedDirectory = optionalDirSurfaces.includes(key)\n    if (expectedDirectory && !statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    } else if (!expectedDirectory && !statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  return issues\n}\n\n/** Format a list of surface validation issues into a human-readable error string. */\nexport function renderSurfaceIssues(\n  issues: ReadonlyArray<SurfaceValidationIssue>,\n  repoRoot: string,\n): string {\n  if (issues.length === 0) return ''\n  const lines = issues.map(\n    (i) => `  - ${i.surface}: ${i.path ? `\"${i.path}\"` : '<not set>'} (${i.reason})`,\n  )\n  return [\n    `Agent surface validation failed against repoRoot=${repoRoot}:`,\n    ...lines,\n    '',\n    'Fix the manifest: every required surface must point at an existing',\n    'directory (systemPrompt / tools / personas / knowledge) or file',\n    '(rubric). Optional surfaces (scaffolding / memory / rag / outputSchema)',\n    'may be omitted; the loop will reject findings targeting omitted',\n    'surfaces rather than fabricating a path.',\n  ].join('\\n')\n}\n","/**\n * `defineAgent` — typed, validated manifest API for declarative agent\n * configuration. The substrate consumes this manifest to wire the\n * canonical eval pattern + analyst self-improvement loop without any\n * per-vertical glue.\n *\n * Design goal: scale to 1000s of vertical agents. Every agent declares\n * its surfaces, rubric, runtime, and analyst configuration in ~50 lines.\n * No per-vertical `ImprovementProposalSource`. No per-vertical CLI. No\n * fabricated paths.\n *\n * Validation: `defineAgent` runs `validateSurfaces` synchronously and\n * throws a structured error if any required surface is missing on\n * disk. The cost is one filesystem stat per surface (cheap); the\n * benefit is a manifest that can't ship broken.\n *\n * @experimental Manifests validate and load, but `runtime.act` is not yet wired\n * end-to-end into the substrate's eval path (`unimplementedAgentRun` is the\n * shipped default).\n */\n\nimport type { TraceAnalystDefinition } from '@tangle-network/agent-eval'\nimport type { RuntimeStreamEvent } from '../types'\nimport { type AgentSurfaces, renderSurfaceIssues, validateSurfaces } from './surfaces'\n\n// ── manifest ─────────────────────────────────────────────────────────\n\n/**\n * The full agent manifest. Each agent ships ONE of these.\n *\n * Generics:\n *   `TPersona` — the agent's persona shape (loaded from\n *     `surfaces.personas`). Defaults to `unknown` so the substrate's\n *     persona discovery (`loadPersonas`) can accept anything; per-agent\n *     code re-narrows when it matters.\n *   `TRunOutput` — the shape `runtime.act` returns. Used by the rubric\n *     scorers and emitted into the trace.\n */\nexport interface AgentManifest<TPersona = unknown, TRunOutput = unknown> {\n  /**\n   * Stable identifier — used as `projectId` in traces, as the analyst\n   * loop's `runId` prefix, and as the namespace under which findings\n   * are persisted. MUST match the agent's repo name to keep\n   * cross-repo telemetry joinable.\n   */\n  id: string\n\n  /**\n   * Filesystem root the substrate resolves surface paths against.\n   * Typically `process.cwd()` or a fixed absolute path. Use an\n   * absolute path when the agent's tests may run from subdirectories\n   * (vitest sometimes shifts cwd).\n   */\n  repoRoot: string\n\n  /**\n   * Map of mutable surfaces the self-improvement loop can edit. See\n   * `AgentSurfaces` — required: `systemPrompt`, `tools`, `rubric`,\n   * `knowledge`, `personas`. Optional: `scaffolding`, `memory`, `rag`,\n   * `outputSchema`.\n   *\n   * Every required path is validated at `defineAgent` time. Missing\n   * paths throw with the full list of offenders.\n   */\n  surfaces: AgentSurfaces\n\n  /**\n   * Rubric the substrate uses to score each run. Dimensions × weights\n   * × judges. The substrate computes the weighted composite and\n   * stamps it into the RunRecord.\n   */\n  rubric: AgentRubric<TRunOutput>\n\n  /**\n   * Runtime adapter — how the substrate INVOKES the agent against a\n   * persona. The `act` function takes a persona + a context (with the\n   * tracer the substrate threads through for span emission) and\n   * returns the run output the rubric will score.\n   *\n   * The agent's existing production runtime goes in here; the\n   * substrate is intentionally thin around it.\n   */\n  runtime: AgentRuntime<TPersona, TRunOutput>\n\n  /**\n   * Persona discovery — the substrate loads personas via this function\n   * at eval start. Can read from `surfaces.personas`, an API, or be\n   * hardcoded. The substrate calls it once per `runAgentEval` call;\n   * persona ordering is preserved.\n   */\n  personas: () => Promise<ReadonlyArray<TPersona>>\n\n  /**\n   * Analyst kinds the substrate runs against each persona's trace.\n   * Defaults to `DEFAULT_TRACE_ANALYST_KINDS` from agent-eval. Per-agent\n   * authors can prune (e.g. skip `knowledge-poisoning` when there's no\n   * knowledge base) or extend (custom domain kinds).\n   *\n   * Empty array disables the loop — useful for `pnpm eval --no-analyst`.\n   */\n  analystKinds: ReadonlyArray<TraceAnalystDefinition>\n\n  /**\n   * Analyst LLM configuration. The substrate uses these for all four\n   * kinds (override per-kind via `analystKinds` if needed).\n   */\n  analyst: AnalystConfig\n}\n\nexport interface AgentRubric<TRunOutput> {\n  /** Dimensions composing the weighted score. Weights sum to 1.0 by convention. */\n  dimensions: ReadonlyArray<RubricDimension<TRunOutput>>\n  /**\n   * Optional judges layered on top of deterministic dimensions. Each\n   * judge returns a score per dimension; the substrate averages judges\n   * (mean by default) for the LLM contribution.\n   */\n  judges?: ReadonlyArray<JudgeConfig<TRunOutput>>\n}\n\nexport interface RubricDimension<TRunOutput> {\n  /** Unique identifier — appears in finding subjects (`rubric:<id>`). */\n  id: string\n  /** 0..1 — weight in the composite. */\n  weight: number\n  /**\n   * Deterministic scorer: given the persona + run output, returns a\n   * 0..1 score. The substrate sums weight × score across dimensions\n   * for the deterministic composite; judges supplement subjective dims.\n   */\n  score: (input: { persona: unknown; output: TRunOutput }) => number\n  /** Optional human-readable label for reports. */\n  label?: string\n}\n\nexport interface JudgeConfig<TRunOutput> {\n  /** Judge identifier — appears in trace spans + manifest. */\n  id: string\n  /** Model snapshot to invoke. Pin the snapshot (`claude-sonnet-4-6@2025-04-15`); the validator rejects bare aliases. */\n  model: string\n  /** Dimensions this judge scores. */\n  dimensions: ReadonlyArray<string>\n  /**\n   * Optional rubric anchors — text examples the judge sees as a\n   * few-shot prompt to calibrate. STRONGLY recommended for subjective\n   * dimensions; required by the calibration gate (Pearson ≥0.7).\n   */\n  anchors?: ReadonlyArray<{ input: string; output: TRunOutput; expected: Record<string, number> }>\n}\n\nexport interface AgentRuntime<TPersona, TRunOutput> {\n  /**\n   * Invoke the agent against one persona. Returns BOTH:\n   *   - `events`: an `AsyncIterable<RuntimeStreamEvent>` the chat-centric\n   *     product consumes verbatim (SSE / WebSocket / inline render).\n   *     **Streaming is mandatory — never collapse this to a single Promise.**\n   *     The agent's existing `runChatTurn` (or equivalent async generator)\n   *     plugs in here directly.\n   *   - `output`: a `Promise<TRunOutput>` resolved AFTER the event stream\n   *     drains. The eval substrate awaits this for rubric scoring; chat\n   *     products usually ignore it (they already rendered incrementally).\n   *\n   * Implementation contract:\n   *   1. `act` MUST return immediately (synchronous construction of the\n   *      `events` iterator + the `output` promise).\n   *   2. Iterating `events` drives the underlying LLM/tool calls — the\n   *      caller chooses when to consume.\n   *   3. `output` resolves only after the iterator yields its terminal\n   *      event (typically `task_end`); see `collectAgentRun` helper.\n   *\n   * `ctx.emitter` is the substrate-threaded `TraceEmitter` — runtimes\n   * SHOULD record LLM/tool spans through it for capture integrity.\n   * `ctx.deadlineMs` is wall-clock; the runtime SHOULD honour for graceful\n   * cancel. `ctx.signal` is the standard abort signal.\n   */\n  act: (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput>\n}\n\nexport interface AgentRunInvocation<TRunOutput> {\n  /** Live stream of typed runtime events. Consumed by chat UX directly. */\n  events: AsyncIterable<RuntimeStreamEvent>\n  /** Final structured output the rubric scores. Resolves after `events` drains. */\n  output: Promise<TRunOutput>\n}\n\n/**\n * Stub for agents whose `runtime.act` is not yet wired to the substrate's\n * eval path. Preserves the streaming contract (empty event stream + a\n * rejected `output` promise that tells the caller exactly what to fix).\n *\n * Per-vertical manifests usually start with this stub and replace it with\n * the agent's real streaming runtime (`runChatTurn` or equivalent) once\n * the eval path consumes the manifest end-to-end.\n */\nexport function unimplementedAgentRun<TRunOutput = unknown>(\n  reason = 'AgentRuntime.act is not yet wired for this manifest',\n): AgentRunInvocation<TRunOutput> {\n  return {\n    events: (async function* empty(): AsyncIterable<RuntimeStreamEvent> {})(),\n    output: Promise.reject(new Error(reason)),\n  }\n}\n\n/**\n * Drain `act`'s `events` into an array AND await its `output`. Useful for\n * eval / outcome-measurement code paths that don't care about live\n * rendering. The events array is preserved so the substrate can inspect\n * tool calls / readiness / questions retrospectively.\n *\n * IMPORTANT: chat-centric UX MUST NOT call this — it defeats streaming\n * (no incremental render). Use `for await (const ev of invocation.events)`\n * directly in the chat surface.\n */\nexport async function collectAgentRun<TRunOutput>(\n  invocation: AgentRunInvocation<TRunOutput>,\n): Promise<{ events: ReadonlyArray<RuntimeStreamEvent>; output: TRunOutput }> {\n  const events: RuntimeStreamEvent[] = []\n  for await (const ev of invocation.events) events.push(ev)\n  const output = await invocation.output\n  return { events, output }\n}\n\nexport interface AgentRunContext {\n  /** Substrate-managed trace emitter. */\n  emitter: import('@tangle-network/agent-eval').TraceEmitter\n  /** Stable run id for this persona × variant cell. */\n  runId: string\n  /** Variant the runtime is exercising (e.g. `'baseline'`, `'source-grounded'`). */\n  variantId?: string\n  /** Wall-clock deadline (epoch ms). The runtime SHOULD honour for graceful cancel. */\n  deadlineMs?: number\n  /** Optional abort signal. */\n  signal?: AbortSignal\n}\n\nexport interface AnalystConfig {\n  /** Model the analyst kinds use. Override per-kind via `analystKinds[i].cost.models`. */\n  model: string\n  /** Optional total budget across all kinds for one run. Substrate enforces via `BudgetGuard`. */\n  budgetUsd?: number\n  /** Backend hint for the AxAIService factory — same shape every kind uses. */\n  backend?: {\n    name?: 'openai' | 'router'\n    apiKey?: string\n    baseUrl?: string\n  }\n}\n\n// ── factory + validation ─────────────────────────────────────────────\n\n/** Thrown when `defineAgent` finds a required surface missing on disk. */\nexport class AgentManifestError extends Error {\n  constructor(\n    message: string,\n    public readonly agentId: string,\n    public readonly issues: ReadonlyArray<unknown> = [],\n  ) {\n    super(message)\n    this.name = 'AgentManifestError'\n  }\n}\n\n/**\n * Construct a validated agent manifest. Throws `AgentManifestError`\n * if any required surface is missing on disk.\n *\n * Generics: pass your persona / output types if you want narrowed\n * `runtime.act` signatures:\n *   `defineAgent<TaxPersona, TaxRunOutput>({ ... })`\n *\n * Most callers don't need the generics — the substrate operates on\n * `unknown` payloads internally and the manifest's `score` /\n * `runtime.act` see the typed shapes via TypeScript inference at\n * the call site.\n */\nexport function defineAgent<TPersona = unknown, TRunOutput = unknown>(\n  manifest: AgentManifest<TPersona, TRunOutput>,\n): AgentManifest<TPersona, TRunOutput> {\n  if (!manifest.id || manifest.id.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `id` is required', manifest.id ?? '')\n  }\n  if (!manifest.repoRoot || manifest.repoRoot.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `repoRoot` is required', manifest.id)\n  }\n  const issues = validateSurfaces(manifest.surfaces, manifest.repoRoot)\n  if (issues.length > 0) {\n    throw new AgentManifestError(\n      renderSurfaceIssues(issues, manifest.repoRoot),\n      manifest.id,\n      issues,\n    )\n  }\n  // Lightweight rubric sanity: weights sum to ~1.0 (no hard requirement —\n  // the substrate normalizes — but flag wildly miscalibrated weights).\n  const total = manifest.rubric.dimensions.reduce((acc, d) => acc + d.weight, 0)\n  if (manifest.rubric.dimensions.length > 0 && (total < 0.5 || total > 1.5)) {\n    throw new AgentManifestError(\n      `defineAgent(${manifest.id}): rubric dimension weights sum to ${total.toFixed(3)} — should be ~1.0`,\n      manifest.id,\n    )\n  }\n  return manifest\n}\n","/**\n * Surface improvement proposer — resolves analyst findings into LLM-drafted\n * candidate patches without changing the caller's repository.\n *\n * The proposer parses each finding's `subject` via\n * `parseFindingSubject` (agent-eval), resolves it to a real file path\n * via the agent's `AgentSurfaces`, reads the current content, and asks\n * an LLM to draft a unified-diff patch given the finding + current\n * content + per-kind editing-discipline rules.\n *\n * Fail-loud rules:\n *   - Findings whose subject doesn't parse → counted in `errors`.\n *   - Findings whose subject targets an undeclared surface → counted in\n *     `errors` with the offending kind in the message.\n *   - Findings whose target path doesn't exist AND the kind isn't a\n *     create-new variant (`new-tool`, `knowledge.wiki`) → counted in\n *     `errors` with the resolved path in the message.\n *   - LLM drafts that fail JSON-schema validation → counted in\n *     `errors` with the schema issue.\n *\n * No silent skips. Every dropped finding has a recorded reason the\n * loop's report surfaces.\n */\n\nimport { readFileSync } from 'node:fs'\nimport type { AnalystFinding, FindingSubject } from '@tangle-network/agent-eval'\nimport { parseFindingSubject } from '@tangle-network/agent-eval/analyst'\nimport type { ImprovementProposalSource } from '../analyst-loop/types'\nimport { sha256 } from '../content-digest'\nimport type { AgentSurfaces, ResolvedSurface } from './surfaces'\nimport { resolveSubjectPath } from './surfaces'\n\n// ── proposal shape ───────────────────────────────────────────────────\n\nexport interface SurfaceImprovementEdit {\n  /** Stable id derived from the source finding so re-proposals are idempotent. */\n  id: string\n  /** The finding that produced this edit — for revert + audit trail. */\n  sourceFindingId: string\n  /** Parsed subject; included so the apply step doesn't re-parse. */\n  subject: FindingSubject\n  /** Resolved on-disk target. */\n  target: ResolvedSurface\n  /** SHA-256 of the current file content the patch was drafted against. */\n  baseSha256: string\n  /** Unified-diff patch the LLM drafted (relative to `target.absolutePath`). */\n  patch: string\n  /** One-line summary the operator sees in the report / PR title. */\n  summary: string\n  /** Multi-line rationale for the PR body — finding context + LLM reasoning. */\n  rationale: string\n  /** Carry-forward from the finding so the apply gate can check the threshold. */\n  confidence: number\n  /** Carry-forward severity for prioritization. */\n  severity: AnalystFinding['severity']\n}\n\nexport interface CreateSurfaceImprovementProposerOptions {\n  surfaces: AgentSurfaces\n  repoRoot: string\n  /**\n   * LLM-draft callback. Given a finding + current file content + the\n   * resolved target, returns a unified-diff patch + summary + rationale.\n   *\n   * Required — the substrate doesn't ship a hardcoded prompt; the agent\n   * author picks the model (Haiku for cheap routine drafts, Sonnet for\n   * substantive prompt rewrites, etc.) via this callback.\n   */\n  draftPatch: (input: DraftPatchInput) => Promise<DraftPatchOutput>\n  /**\n   * When the resolved target doesn't exist, allow the substrate to\n   * CREATE the file (for `knowledge.wiki`, `new-tool` subjects). Default\n   * true for those kinds, false for `system-prompt` / `rubric` / etc.\n   * (named sections that don't exist are a contract violation, not a\n   * scaffolding opportunity).\n   */\n  allowCreateForKinds?: ReadonlyArray<FindingSubject['kind']>\n}\n\nexport interface DraftPatchInput {\n  finding: AnalystFinding\n  subject: FindingSubject\n  target: ResolvedSurface\n  /** Current file content (empty string when `intent === 'create-new'`). */\n  currentContent: string\n}\n\nexport interface DraftPatchOutput {\n  /** Unified diff against the current file content. Empty string skips this finding. */\n  patch: string\n  /** One-line summary for the operator. */\n  summary: string\n  /** Multi-line rationale for the PR body. */\n  rationale: string\n}\n\n// ── factory ──────────────────────────────────────────────────────────\n\nconst DEFAULT_CREATE_KINDS: ReadonlyArray<FindingSubject['kind']> = [\n  'knowledge.wiki',\n  'knowledge.claim',\n  'knowledge.raw',\n  'new-tool',\n]\n\n/** Resolve each finding to a real surface and draft a detached patch candidate. */\nexport function createSurfaceImprovementProposer(\n  opts: CreateSurfaceImprovementProposerOptions,\n): ImprovementProposalSource<SurfaceImprovementEdit> {\n  const allowCreate = opts.allowCreateForKinds ?? DEFAULT_CREATE_KINDS\n\n  return {\n    async proposeFromFindings(findings) {\n      const edits: SurfaceImprovementEdit[] = []\n      const errors: Array<{ findingId: string; subject: string; message: string }> = []\n      let skipped = 0\n\n      for (const f of findings) {\n        const subject = parseFindingSubject(f.subject)\n        if (subject === null) {\n          if (f.subject !== undefined) {\n            errors.push({\n              findingId: f.finding_id,\n              subject: f.subject,\n              message: 'subject does not parse against the finding-subject grammar',\n            })\n          } else {\n            // Subject-less findings are descriptive, not actionable —\n            // legitimate; count in `skipped` not `errors`.\n            skipped += 1\n          }\n          continue\n        }\n\n        // `cluster` findings (failure-mode) are evidence, not mutations.\n        if (subject.kind === 'cluster') {\n          skipped += 1\n          continue\n        }\n\n        // Knowledge findings flow to the knowledge proposal source so they do not double-route.\n        if (subject.kind.startsWith('knowledge.')) {\n          skipped += 1\n          continue\n        }\n\n        const target = resolveSubjectPath(subject, opts.surfaces, opts.repoRoot)\n        if (target === null) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `subject kind \"${subject.kind}\" targets an undeclared surface; declare it in AgentSurfaces or stop emitting this subject`,\n          })\n          continue\n        }\n\n        if (target.intent === 'create-new' && !allowCreate.includes(subject.kind)) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `target ${target.repoRelativePath} does not exist; the kind \"${subject.kind}\" requires an existing target (analyst named a section that isn't in the codebase)`,\n          })\n          continue\n        }\n\n        const currentContent = target.exists ? readFileSync(target.absolutePath, 'utf-8') : ''\n\n        let draft: DraftPatchOutput\n        try {\n          draft = await opts.draftPatch({ finding: f, subject, target, currentContent })\n        } catch (err) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `draftPatch threw: ${err instanceof Error ? err.message : String(err)}`,\n          })\n          continue\n        }\n\n        if (draft.patch.trim().length === 0) {\n          skipped += 1\n          continue\n        }\n\n        edits.push({\n          id: `imp-${f.finding_id}`,\n          sourceFindingId: f.finding_id,\n          subject,\n          target,\n          baseSha256: sha256(currentContent),\n          patch: draft.patch,\n          summary: draft.summary,\n          rationale: draft.rationale,\n          confidence: f.confidence,\n          severity: f.severity,\n        })\n      }\n\n      return { edits, skipped, errors }\n    },\n  }\n}\n","/**\n * Sandbox bridge for `AgentRuntime.act` — prod-faithful eval execution.\n *\n * The point of this adapter is parity: the eval substrate must run the agent\n * through the SAME profile the production chat turn uses, or scorecard numbers\n * grade a profile that never ships. `createSandboxAct` boots a sandbox with the\n * agent's profile (the caller's `baseProfile`, with optional per-persona\n * overrides) through the loop kernel's own {@link createSandboxForSpec},\n * streams the `streamPrompt` events mapped to the `RuntimeStreamEvent`\n * vocabulary, and resolves the `OutputAdapter`-parsed output for rubric scoring\n * — satisfying the `act` streaming contract with one code path shared by chat\n * and eval.\n *\n * Agents with a bespoke streaming chat turn should wire THAT into `act`\n * directly (the contract is designed for it); this adapter is the default for\n * agents whose turn is a plain prod-profile sandbox dispatch — notably the\n * agents agent-builder generates.\n */\n\nimport type {\n  AgentProfile,\n  AgentProfileFileMount,\n  AgentProfileMcpServer,\n} from '@tangle-network/agent-interface'\nimport type { SandboxEvent } from '@tangle-network/sandbox'\nimport type { AgentRunSpec, OutputAdapter, SandboxClient } from '../runtime'\nimport { mapSandboxEvent } from '../runtime'\nimport { createSandboxForSpec } from '../runtime/iteration-sandboxes'\nimport type { RuntimeStreamEvent } from '../types'\nimport type { AgentRunContext, AgentRunInvocation } from './define-agent'\nimport {\n  type AgentProfileMaterializationAxis,\n  assertProfileMaterialization,\n  sandboxActProfileMaterialization,\n} from './profile-materialization'\n\n/** Per-persona profile-merge slots applied over the base profile (§1.5: the caller authors the\n *  per-persona profile). Each slot overlays the base; an absent slot leaves the base untouched. */\nexport interface SandboxActComposeOverrides {\n  /** Replace the base profile's system prompt (e.g. a workspace-augmented prompt). */\n  systemPrompt?: string\n  /** Extra file mounts layered after the base profile's `resources.files`. */\n  extraFiles?: AgentProfileFileMount[]\n  /** Override the profile `name`. Defaults to the base profile's name. */\n  name?: string\n  /** Box built-in tool ON/OFF flags merged over the base profile's `tools` (overlay wins per key). */\n  tools?: Record<string, boolean>\n  /** MCP connections merged over the base profile's `mcp` (overlay wins per key). */\n  mcpConnections?: Record<string, AgentProfileMcpServer>\n}\n\nexport interface CreateSandboxActOptions<TPersona, TRunOutput> {\n  /** Canonical agent profile — the same one the prod chat turn uses. */\n  baseProfile: AgentProfile\n  /** Sandbox client used to boot the per-run sandbox. */\n  sandboxClient: SandboxClient\n  /** Persona → prompt. Pure; the eval cell's input. */\n  buildPrompt: (persona: TPersona) => string\n  /** Sandbox event stream → typed output the rubric scores. */\n  output: OutputAdapter<TRunOutput>\n  /**\n   * Per-persona profile overrides (workspace-augmented system prompt, extra\n   * file mounts, tool flags, MCP connections). Overlaid onto `baseProfile`.\n   */\n  compose?: (persona: TPersona) => SandboxActComposeOverrides\n  /** Sandbox-SDK overrides forwarded to `createSandboxForSpec`. */\n  sandboxOverrides?: AgentRunSpec<unknown>['sandboxOverrides']\n  /** Optional changed axes the caller expects this path to carry. */\n  requiredProfileAxes?: readonly AgentProfileMaterializationAxis[]\n  /** Stable run name surfaced in mapped `llm_call` events. */\n  name?: string\n  /** Override the `SandboxEvent → RuntimeStreamEvent` mapper. */\n  mapEvent?: (\n    event: SandboxEvent,\n    opts: { agentRunName?: string },\n  ) => RuntimeStreamEvent | undefined\n}\n\n/**\n * Build an `AgentRuntime.act` implementation backed by a single prod-profile\n * sandbox run. The returned function honours the `act` contract: it returns\n * synchronously with a live `events` iterator and an `output` promise that\n * resolves only after the iterator drains.\n */\nexport function createSandboxAct<TPersona, TRunOutput>(\n  options: CreateSandboxActOptions<TPersona, TRunOutput>,\n): (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput> {\n  assertProfileMaterialization({\n    contract: sandboxActProfileMaterialization,\n    changedAxes: options.requiredProfileAxes ?? [],\n    context: 'createSandboxAct',\n  })\n  const mapEvent = options.mapEvent ?? mapSandboxEvent\n\n  return (persona: TPersona, ctx: AgentRunContext): AgentRunInvocation<TRunOutput> => {\n    const profile = applyComposeOverrides(options.baseProfile, options.compose?.(persona))\n    const agentRunName = options.name ?? profile.name ?? 'agent'\n    const message = options.buildPrompt(persona)\n    const signal = ctx.signal ?? new AbortController().signal\n\n    const raw: SandboxEvent[] = []\n    let settle!: (value: TRunOutput) => void\n    let fail!: (err: unknown) => void\n    const output = new Promise<TRunOutput>((resolve, reject) => {\n      settle = resolve\n      fail = reject\n    })\n    // The output promise rejects when the stream errors; if the caller ignores\n    // `output` (chat UX) the rejection is still observed by the events iterator\n    // throwing. Attach a no-op catch so an ignored rejection is never \"unhandled\".\n    output.catch(() => {})\n\n    const spec: AgentRunSpec<unknown> = {\n      profile,\n      taskToPrompt: () => message,\n      name: agentRunName,\n      ...(options.sandboxOverrides ? { sandboxOverrides: options.sandboxOverrides } : {}),\n    }\n\n    async function* events(): AsyncIterable<RuntimeStreamEvent> {\n      try {\n        const box = await createSandboxForSpec(options.sandboxClient, spec, signal)\n        for await (const event of box.streamPrompt(message, { signal })) {\n          raw.push(event)\n          const mapped = mapEvent(event, { agentRunName })\n          if (mapped) yield mapped\n        }\n        settle(options.output.parse(raw))\n      } catch (err) {\n        fail(err)\n        throw err\n      }\n    }\n\n    return { events: events(), output }\n  }\n}\n\n/** Overlay the per-persona overrides onto the base profile. Each slot merges over the base; an\n *  absent override leaves the base profile untouched. */\nfunction applyComposeOverrides(\n  base: AgentProfile,\n  overrides: SandboxActComposeOverrides | undefined,\n): AgentProfile {\n  if (!overrides) return base\n  const prompt = overrides.systemPrompt\n    ? { ...base.prompt, systemPrompt: overrides.systemPrompt }\n    : base.prompt\n  const mergedTools = overrides.tools ? { ...(base.tools ?? {}), ...overrides.tools } : base.tools\n  const mergedMcp = overrides.mcpConnections\n    ? { ...(base.mcp ?? {}), ...overrides.mcpConnections }\n    : base.mcp\n  const baseFiles = base.resources?.files ?? []\n  const mergedFiles: AgentProfileFileMount[] = overrides.extraFiles?.length\n    ? [...baseFiles, ...overrides.extraFiles]\n    : [...baseFiles]\n  return {\n    ...base,\n    name: overrides.name ?? base.name,\n    prompt,\n    ...(mergedTools ? { tools: mergedTools } : {}),\n    ...(mergedMcp ? { mcp: mergedMcp } : {}),\n    resources: { ...base.resources, files: mergedFiles },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqGA,SAAgB,mBACd,SACA,UACA,UACwB;CACxB,MAAM,aAAa,yBAAyB,SAAS,QAAQ;CAC7D,IAAI,WAAW,WAAW,GAAG,OAAO;CAMpC,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,MAAM,WAAW,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;EACtD,IAAI,WAAW,GAAG,GAChB,OAAO;GAAE,cAAc;GAAK,kBAAkB;GAAK,QAAQ;GAAM,QAAQ;EAAgB;CAE7F;CACA,MAAM,WAAW,WAAW;CAE5B,OAAO;EACL,cAFkB,WAAW,QAAQ,IAAI,WAAW,KAAK,UAAU,QAAQ;EAG3E,kBAAkB;EAClB,QAAQ;EACR,QAAQ;CACV;AACF;AAEA,SAAS,yBACP,SACA,UACuB;CACvB,QAAQ,QAAQ,MAAhB;EACE,KAAK;EACL,KAAK,mBACH,OAAO,aAAa,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI,CAAC;EACxE,KAAK,mBAEH,OAAO,aAAa,SAAS,SAAS,WAAW,UAAU,GAAG,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC;EAC5F,KAAK,iBACH,OAAO,aAAa,SAAS,SAAS,WAAW,OAAO,GAAG,QAAQ,SAAS,IAAI,CAAC;EACnF,KAAK,iBAAiB;GACpB,MAAM,OAAO,QAAQ,QAAQ,OAAO;GAIpC,OAAO;IACL,SAAS,SAAS,cAAc,GAAG,KAAK,IAAI;IAC5C,SAAS,SAAS,cAAc,MAAM,UAAU;IAChD,SAAS,SAAS,cAAc,MAAM,UAAU;GAClD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD;EACA,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,CACL,SAAS,SAAS,QAAQ,QAAQ,MAAM,UAAU,GAClD,SAAS,SAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAChD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAElD,KAAK;GACH,IAAI,QAAQ,QACV,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,GAAG,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC;GAI7F,OAAO,CACL,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,GAClD,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,CAC/C,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,YACH,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,CAAC;EACzE,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,QAAQ,OACX,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,IACzE,CACE,SAAS,SAAS,KAAK,GAAG,QAAQ,OAAO,MAAM,GAC/C,SAAS,SAAS,KAAK,QAAQ,QAAQ,WAAW,CACpD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EACtD,KAAK;GACH,IAAI,CAAC,SAAS,OAAO,OAAO,CAAC;GAC7B,OAAO,CACL,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,GAC7C,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,MAAM,CACjD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,kBACH,OAAO,SAAS,gBAAgB,CAAC,SAAS,aAAa,IAAI,CAAC;EAC9D,KAAK,iBACH,OAAO,SAAS,eAAe,CAAC,SAAS,YAAY,IAAI,CAAC;EAC5D,KAAK,QAAQ;GACX,IAAI,CAAC,SAAS,MAAM,OAAO,CAAC;GAC5B,MAAM,OAAO,SAAS,SAAS,MAAM,QAAQ,IAAI;GACjD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;EAC1B;EACA,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,MAAM,IAAI,CAAC;EACnF,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,aAAa,SAAS,SAAS,QAAQ,GAAG,QAAQ,QAAQ,GAAG,EAAE,MAAM,CAAC;EAC/E,KAAK;GACH,IAAI,CAAC,SAAS,aAAa,OAAO,CAAC;GACnC,OAAO,aAAa,SAAS,SAAS,aAAa,GAAG,QAAQ,QAAQ,OAAO,EAAE,IAAI,CAAC;EACtF,KAAK;GACH,IAAI,CAAC,SAAS,cAAc,OAAO,CAAC;GACpC,OAAO,CAAC,SAAS,YAAY;EAC/B,KAAK;EACL,KAAK,qBAGH,OAAO,CAAC;EACV,KAAK,WAEH,OAAO,CAAC;CACZ;AACF;AAEA,SAAS,SAAS,MAAc,GAAG,UAAmC;CACpE,IAAI,SAAS,MAAM,UAAU,MAAM,SAAS,IAAI,KAAK,WAAW,KAAK,CAAC,GAAG,OAAO;CAChF,MAAM,eAAe,QAAQ,IAAI;CAEjC,MAAM,UAAU,SAAS,cADF,QAAQ,cAAc,GAAG,QACI,CAAC;CACrD,IAAI,YAAY,QAAQ,QAAQ,WAAW,KAAK,KAAK,KAAK,WAAW,OAAO,GAAG,OAAO;CACtF,OAAO,KAAK,MAAM,GAAG,QAAQ;AAC/B;AAEA,SAAS,aAAa,MAA+B;CACnD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;AAC1B;AAEA,SAAS,QAAQ,GAAmB;CAClC,OACE,EACG,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,GAAG,KAAK;AAExB;;AAiBA,SAAgB,iBACd,UACA,UACuC;CACvC,MAAM,SAAmC,CAAC;CAC1C,MAAM,cAAkD;EACtD;EACA;EACA;EACA;CACF;CACA,MAAM,eAAmD,CAAC,QAAQ;CAClE,MAAM,sBAA0D;EAC9D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,uBAA2D;EAC/D;EACA;EACA;CACF;CAEA,KAAK,MAAM,OAAO,aAAa;EAC7B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GACpC,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;CAElE;CACA,KAAK,MAAM,OAAO,cAAc;EAC9B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GAC/B,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,KAAK,MAAM,OAAO,CAAC,GAAG,qBAAqB,GAAG,oBAAoB,GAAG;EACnE,MAAM,IAAI,SAAS;EACnB,IAAI,MAAM,KAAA,GAAW;EACrB,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GAAG;GACpB,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAG,QAAQ;GAAU,CAAC;GACxD;EACF;EACA,MAAM,oBAAoB,oBAAoB,SAAS,GAAG;EAC1D,IAAI,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GAClD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;OACzD,IAAI,CAAC,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GACrD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,OAAO;AACT;;AAGA,SAAgB,oBACd,QACA,UACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,QAAQ,OAAO,KAClB,MAAM,OAAO,EAAE,QAAQ,IAAI,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI,EAAE,OAAO,EAChF;CACA,OAAO;EACL,oDAAoD,SAAS;EAC7D,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;;;;;;;;;;;ACxKA,SAAgB,sBACd,SAAS,uDACuB;CAChC,OAAO;EACL,SAAS,gBAAgB,QAA2C,CAAC,EAAA,CAAG;EACxE,QAAQ,QAAQ,OAAO,IAAI,MAAM,MAAM,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,eAAsB,gBACpB,YAC4E;CAC5E,MAAM,SAA+B,CAAC;CACtC,WAAW,MAAM,MAAM,WAAW,QAAQ,OAAO,KAAK,EAAE;CAExD,OAAO;EAAE;EAAQ,QAAA,MADI,WAAW;CACR;AAC1B;;AA+BA,IAAa,qBAAb,cAAwC,MAAM;CAG1B;CACA;CAHlB,YACE,SACA,SACA,SAAiD,CAAC,GAClD;EACA,MAAM,OAAO;EAHG,KAAA,UAAA;EACA,KAAA,SAAA;EAGhB,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;;AAeA,SAAgB,YACd,UACqC;CACrC,IAAI,CAAC,SAAS,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,GAChD,MAAM,IAAI,mBAAmB,iCAAiC,SAAS,MAAM,EAAE;CAEjF,IAAI,CAAC,SAAS,YAAY,SAAS,SAAS,KAAK,CAAC,CAAC,WAAW,GAC5D,MAAM,IAAI,mBAAmB,uCAAuC,SAAS,EAAE;CAEjF,MAAM,SAAS,iBAAiB,SAAS,UAAU,SAAS,QAAQ;CACpE,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,mBACR,oBAAoB,QAAQ,SAAS,QAAQ,GAC7C,SAAS,IACT,MACF;CAIF,MAAM,QAAQ,SAAS,OAAO,WAAW,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,CAAC;CAC7E,IAAI,SAAS,OAAO,WAAW,SAAS,MAAM,QAAQ,MAAO,QAAQ,MACnE,MAAM,IAAI,mBACR,eAAe,SAAS,GAAG,qCAAqC,MAAM,QAAQ,CAAC,EAAE,oBACjF,SAAS,EACX;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;AC5MA,MAAM,uBAA8D;CAClE;CACA;CACA;CACA;AACF;;AAGA,SAAgB,iCACd,MACmD;CACnD,MAAM,cAAc,KAAK,uBAAuB;CAEhD,OAAO,EACL,MAAM,oBAAoB,UAAU;EAClC,MAAM,QAAkC,CAAC;EACzC,MAAM,SAAyE,CAAC;EAChF,IAAI,UAAU;EAEd,KAAK,MAAM,KAAK,UAAU;GACxB,MAAM,UAAU,oBAAoB,EAAE,OAAO;GAC7C,IAAI,YAAY,MAAM;IACpB,IAAI,EAAE,YAAY,KAAA,GAChB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE;KACX,SAAS;IACX,CAAC;SAID,WAAW;IAEb;GACF;GAGA,IAAI,QAAQ,SAAS,WAAW;IAC9B,WAAW;IACX;GACF;GAGA,IAAI,QAAQ,KAAK,WAAW,YAAY,GAAG;IACzC,WAAW;IACX;GACF;GAEA,MAAM,SAAS,mBAAmB,SAAS,KAAK,UAAU,KAAK,QAAQ;GACvE,IAAI,WAAW,MAAM;IACnB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,iBAAiB,QAAQ,KAAK;IACzC,CAAC;IACD;GACF;GAEA,IAAI,OAAO,WAAW,gBAAgB,CAAC,YAAY,SAAS,QAAQ,IAAI,GAAG;IACzE,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,UAAU,OAAO,iBAAiB,6BAA6B,QAAQ,KAAK;IACvF,CAAC;IACD;GACF;GAEA,MAAM,iBAAiB,OAAO,SAAS,aAAa,OAAO,cAAc,OAAO,IAAI;GAEpF,IAAI;GACJ,IAAI;IACF,QAAQ,MAAM,KAAK,WAAW;KAAE,SAAS;KAAG;KAAS;KAAQ;IAAe,CAAC;GAC/E,SAAS,KAAK;IACZ,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,qBAAqB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IAC/E,CAAC;IACD;GACF;GAEA,IAAI,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG;IACnC,WAAW;IACX;GACF;GAEA,MAAM,KAAK;IACT,IAAI,OAAO,EAAE;IACb,iBAAiB,EAAE;IACnB;IACA;IACA,YAAY,OAAO,cAAc;IACjC,OAAO,MAAM;IACb,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,YAAY,EAAE;IACd,UAAU,EAAE;GACd,CAAC;EACH;EAEA,OAAO;GAAE;GAAO;GAAS;EAAO;CAClC,EACF;AACF;;;;;;;;;ACrHA,SAAgB,iBACd,SAC6E;CAC7E,6BAA6B;EAC3B,UAAU;EACV,aAAa,QAAQ,uBAAuB,CAAC;EAC7C,SAAS;CACX,CAAC;CACD,MAAM,WAAW,QAAQ,YAAY;CAErC,QAAQ,SAAmB,QAAyD;EAClF,MAAM,UAAU,sBAAsB,QAAQ,aAAa,QAAQ,UAAU,OAAO,CAAC;EACrF,MAAM,eAAe,QAAQ,QAAQ,QAAQ,QAAQ;EACrD,MAAM,UAAU,QAAQ,YAAY,OAAO;EAC3C,MAAM,SAAS,IAAI,UAAU,IAAI,gBAAgB,CAAC,CAAC;EAEnD,MAAM,MAAsB,CAAC;EAC7B,IAAI;EACJ,IAAI;EACJ,MAAM,SAAS,IAAI,SAAqB,SAAS,WAAW;GAC1D,SAAS;GACT,OAAO;EACT,CAAC;EAID,OAAO,YAAY,CAAC,CAAC;EAErB,MAAM,OAA8B;GAClC;GACA,oBAAoB;GACpB,MAAM;GACN,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,QAAQ,iBAAiB,IAAI,CAAC;EACnF;EAEA,gBAAgB,SAA4C;GAC1D,IAAI;IACF,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAe,MAAM,MAAM;IAC1E,WAAW,MAAM,SAAS,IAAI,aAAa,SAAS,EAAE,OAAO,CAAC,GAAG;KAC/D,IAAI,KAAK,KAAK;KACd,MAAM,SAAS,SAAS,OAAO,EAAE,aAAa,CAAC;KAC/C,IAAI,QAAQ,MAAM;IACpB;IACA,OAAO,QAAQ,OAAO,MAAM,GAAG,CAAC;GAClC,SAAS,KAAK;IACZ,KAAK,GAAG;IACR,MAAM;GACR;EACF;EAEA,OAAO;GAAE,QAAQ,OAAO;GAAG;EAAO;CACpC;AACF;;;AAIA,SAAS,sBACP,MACA,WACc;CACd,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,SAAS,UAAU,eACrB;EAAE,GAAG,KAAK;EAAQ,cAAc,UAAU;CAAa,IACvD,KAAK;CACT,MAAM,cAAc,UAAU,QAAQ;EAAE,GAAI,KAAK,SAAS,CAAC;EAAI,GAAG,UAAU;CAAM,IAAI,KAAK;CAC3F,MAAM,YAAY,UAAU,iBACxB;EAAE,GAAI,KAAK,OAAO,CAAC;EAAI,GAAG,UAAU;CAAe,IACnD,KAAK;CACT,MAAM,YAAY,KAAK,WAAW,SAAS,CAAC;CAC5C,MAAM,cAAuC,UAAU,YAAY,SAC/D,CAAC,GAAG,WAAW,GAAG,UAAU,UAAU,IACtC,CAAC,GAAG,SAAS;CACjB,OAAO;EACL,GAAG;EACH,MAAM,UAAU,QAAQ,KAAK;EAC7B;EACA,GAAI,cAAc,EAAE,OAAO,YAAY,IAAI,CAAC;EAC5C,GAAI,YAAY,EAAE,KAAK,UAAU,IAAI,CAAC;EACtC,WAAW;GAAE,GAAG,KAAK;GAAW,OAAO;EAAY;CACrD;AACF"}
+{"version":3,"file":"agent.js","names":[],"sources":["../src/agent/surfaces.ts","../src/agent/define-agent.ts","../src/agent/improvement-adapter.ts","../src/agent/sandbox-act.ts"],"sourcesContent":["/**\n * `AgentSurfaces` — declarative map of the mutable file/directory paths\n * the self-improvement loop can edit on behalf of an agent.\n *\n * The substrate uses this map to resolve every parsed `FindingSubject`\n * (from agent-eval) to a real on-disk path. No per-vertical glue;\n * no fabricated paths; no silent `existsSync(...)` skips that hide\n * misconfiguration from the operator.\n *\n * Surfaces are validated at `defineAgent` time — missing paths fail\n * loud with a list of every offender. A surface that's not needed\n * (e.g. an agent with no RAG corpora) is simply omitted; the loop\n * refuses to route those subjects rather than fabricating a target.\n */\n\nimport { existsSync, statSync } from 'node:fs'\nimport { isAbsolute, join, relative, resolve, sep } from 'node:path'\nimport type { FindingSubject } from '@tangle-network/agent-eval'\n\n/**\n * Surface declarations. Every path is repo-relative (or absolute) at\n * `defineAgent` time. At resolution time, paths are joined against the\n * agent's `repoRoot`.\n *\n * `systemPrompt`, `tools`, `personas` are DIRECTORIES; the loop appends\n * `<section>.md`, `<tool>/README.md`, `<persona-id>.yaml` etc.\n * `rubric`, `outputSchema` are SINGLE FILES; the loop edits them in\n * place.\n *\n * `knowledge` is the agent-knowledge root (typically `.agent-knowledge`);\n * `applyKnowledgeWriteBlocks` writes pages relative to it.\n *\n * Optional surfaces (`scaffolding`, `memory`, `rag`, `outputSchema`)\n * can be omitted — the loop will reject findings targeting them with a\n * clear log message instead of fabricating a path.\n */\nexport interface AgentSurfaces {\n  /** Directory containing one markdown file per system-prompt section. */\n  systemPrompt: string\n  /** Directory containing one subdir per tool (`<tool>/README.md`). */\n  tools: string\n  /** Single file (TypeScript module) defining the rubric weights + dimensions. */\n  rubric: string\n  /** Knowledge-base root; typically `.agent-knowledge`. */\n  knowledge: string\n  /** Directory containing one YAML/JSON file per persona. */\n  personas: string\n  /** Optional: directory containing scaffolding rules (precondition checks, retry policies). */\n  scaffolding?: string\n  /** Optional: memory store path (JSONL / SQLite / DB). */\n  memory?: string\n  /** Optional: directory containing RAG corpora (`<corpus>/<doc-id>.md`). */\n  rag?: string\n  /** Optional: single file defining the output schema (Zod / JSON Schema). */\n  outputSchema?: string\n  /** Optional: directory containing Agent Skill packages. */\n  skills?: string\n  /** Optional: directory containing MCP server/tool configuration. */\n  mcp?: string\n  /** Optional: directory containing hook definitions. */\n  hooks?: string\n  /** Optional: directory containing subagent definitions. */\n  subagents?: string\n  /** Optional: directory containing orchestration/workflow policies. */\n  workflows?: string\n  /** Optional: single file containing rollout-policy settings. */\n  rolloutPolicy?: string\n  /** Optional: single canonical AgentProfile file. */\n  agentProfile?: string\n  /** Optional: source root for code findings. */\n  code?: string\n}\n\nexport interface ResolvedSurface {\n  /** Absolute filesystem path the operator can `cat` / `vim`. */\n  absolutePath: string\n  /** Repo-relative path for PR descriptions, diffs, audit logs. */\n  repoRelativePath: string\n  /** Whether the path currently exists on disk. */\n  exists: boolean\n  /** The substrate's intent: edit an existing file or create a new one. */\n  intent: 'edit-existing' | 'create-new'\n}\n\n/**\n * Resolve a parsed `FindingSubject` to the file path the substrate\n * should edit (or create) on disk.\n *\n * Returns `null` when:\n *   - the subject targets a surface the agent didn't declare\n *     (e.g. `rag:*` when `surfaces.rag` is undefined), OR\n *   - the subject is a `cluster` (failure-mode emits these as evidence,\n *     not actionable mutations — they don't route to a file).\n *\n * Returns a `ResolvedSurface` with `intent: 'create-new'` when the\n * subject names a path that doesn't yet exist (e.g. a new wiki page).\n * The caller chooses whether to honour the create — for tightly-managed\n * surfaces like `systemPrompt` it's usually a contract violation\n * (the analyst named a section that doesn't exist); for `knowledge`\n * it's the whole point.\n */\nexport function resolveSubjectPath(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ResolvedSurface | null {\n  const candidates = candidatePathsForSubject(subject, surfaces)\n  if (candidates.length === 0) return null\n\n  // Probe candidates in order, preferring the first one that exists on disk.\n  // Lets the substrate accept both the flat `<section>.md` convention and\n  // the skill-dir `<section>/SKILL.md` convention without forcing one layout.\n  // When none exists, fall back to the first candidate (canonical create-new).\n  for (const rel of candidates) {\n    const abs = isAbsolute(rel) ? rel : join(repoRoot, rel)\n    if (existsSync(abs)) {\n      return { absolutePath: abs, repoRelativePath: rel, exists: true, intent: 'edit-existing' }\n    }\n  }\n  const fallback = candidates[0]!\n  const fallbackAbs = isAbsolute(fallback) ? fallback : join(repoRoot, fallback)\n  return {\n    absolutePath: fallbackAbs,\n    repoRelativePath: fallback,\n    exists: false,\n    intent: 'create-new',\n  }\n}\n\nfunction candidatePathsForSubject(\n  subject: FindingSubject,\n  surfaces: AgentSurfaces,\n): ReadonlyArray<string> {\n  switch (subject.kind) {\n    case 'knowledge.wiki':\n    case 'knowledge.stale':\n      return optionalPath(safeJoin(surfaces.knowledge, `${subject.slug}.md`))\n    case 'knowledge.claim':\n      // Claims land in a per-topic claims directory under the knowledge root.\n      return optionalPath(safeJoin(surfaces.knowledge, 'claims', `${slugify(subject.topic)}.md`))\n    case 'knowledge.raw':\n      return optionalPath(safeJoin(surfaces.knowledge, 'raw', `${subject.sourceId}.md`))\n    case 'system-prompt': {\n      const slug = slugify(subject.section)\n      // Prefer flat layout for create-new (canonical); probe skill-dir layout\n      // in case the existing repo (tax/legal/gtm/creative) uses\n      // `<section>/SKILL.md` already.\n      return [\n        safeJoin(surfaces.systemPrompt, `${slug}.md`),\n        safeJoin(surfaces.systemPrompt, slug, 'SKILL.md'),\n        safeJoin(surfaces.systemPrompt, slug, 'index.md'),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'skill': {\n      if (!surfaces.skills) return []\n      return [\n        safeJoin(surfaces.skills, subject.name, 'SKILL.md'),\n        safeJoin(surfaces.skills, `${subject.name}.md`),\n      ].filter((path): path is string => path !== null)\n    }\n    case 'tool-doc':\n      if (subject.aspect) {\n        return optionalPath(safeJoin(surfaces.tools, subject.tool, `${slugify(subject.aspect)}.md`))\n      }\n      // tool-doc default: `<tool>/README.md`; also probe `<tool>.md` for flat\n      // tool-list repos.\n      return [\n        safeJoin(surfaces.tools, subject.tool, 'README.md'),\n        safeJoin(surfaces.tools, `${subject.tool}.md`),\n      ].filter((path): path is string => path !== null)\n    case 'new-tool':\n      return optionalPath(safeJoin(surfaces.tools, subject.name, 'README.md'))\n    case 'mcp':\n      if (!surfaces.mcp) return []\n      return subject.tool\n        ? optionalPath(safeJoin(surfaces.mcp, subject.server, `${subject.tool}.md`))\n        : [\n            safeJoin(surfaces.mcp, `${subject.server}.json`),\n            safeJoin(surfaces.mcp, subject.server, 'README.md'),\n          ].filter((path): path is string => path !== null)\n    case 'hook':\n      if (!surfaces.hooks) return []\n      return [\n        safeJoin(surfaces.hooks, `${subject.name}.md`),\n        safeJoin(surfaces.hooks, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'subagent':\n      if (!surfaces.subagents) return []\n      return [\n        safeJoin(surfaces.subagents, `${subject.name}.md`),\n        safeJoin(surfaces.subagents, `${subject.name}.yaml`),\n        safeJoin(surfaces.subagents, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'workflow':\n      if (!surfaces.workflows) return []\n      return [\n        safeJoin(surfaces.workflows, `${subject.name}.md`),\n        safeJoin(surfaces.workflows, `${subject.name}.yaml`),\n        safeJoin(surfaces.workflows, `${subject.name}.json`),\n      ].filter((path): path is string => path !== null)\n    case 'rollout-policy':\n      return surfaces.rolloutPolicy ? [surfaces.rolloutPolicy] : []\n    case 'agent-profile':\n      return surfaces.agentProfile ? [surfaces.agentProfile] : []\n    case 'code': {\n      if (!surfaces.code) return []\n      const path = safeJoin(surfaces.code, subject.path)\n      return path ? [path] : []\n    }\n    case 'rag':\n      if (!surfaces.rag) return []\n      return optionalPath(safeJoin(surfaces.rag, subject.corpus, `${subject.docId}.md`))\n    case 'memory':\n      if (!surfaces.memory) return []\n      return optionalPath(safeJoin(surfaces.memory, `${slugify(subject.key)}.json`))\n    case 'scaffolding':\n      if (!surfaces.scaffolding) return []\n      return optionalPath(safeJoin(surfaces.scaffolding, `${slugify(subject.concern)}.md`))\n    case 'output-schema':\n      if (!surfaces.outputSchema) return []\n      return [surfaces.outputSchema]\n    case 'websearch.outdated':\n    case 'prior-run-summary':\n      // Stale signals don't map to a single file — handled by the knowledge\n      // adapter as `agent-knowledge:stale:*` after operator review.\n      return []\n    case 'cluster':\n      // failure-mode cluster labels are evidence, not mutations.\n      return []\n  }\n}\n\nfunction safeJoin(root: string, ...children: string[]): string | null {\n  if (children.some((child) => child.includes('\\0') || isAbsolute(child))) return null\n  const rootAbsolute = resolve(root)\n  const targetAbsolute = resolve(rootAbsolute, ...children)\n  const escaped = relative(rootAbsolute, targetAbsolute)\n  if (escaped === '..' || escaped.startsWith(`..${sep}`) || isAbsolute(escaped)) return null\n  return join(root, ...children)\n}\n\nfunction optionalPath(path: string | null): string[] {\n  return path ? [path] : []\n}\n\nfunction slugify(s: string): string {\n  return (\n    s\n      .toLowerCase()\n      .replace(/[^a-z0-9-]+/g, '-')\n      .replace(/^-+|-+$/g, '')\n      .slice(0, 200) || 'untitled'\n  )\n}\n\n/**\n * Validate that every declared surface exists on disk under `repoRoot`.\n *\n * Returns an array of `SurfaceValidationIssue` — empty when all required\n * surfaces resolve. `defineAgent` throws with the issues rendered, so\n * a misconfigured manifest fails at startup (not at the first finding\n * the loop produces 20 minutes later).\n */\nexport interface SurfaceValidationIssue {\n  surface: keyof AgentSurfaces\n  path: string\n  reason: 'missing' | 'not-directory' | 'not-file'\n}\n\n/** Validate an `AgentSurfaces` map on disk — missing paths fail loud at `defineAgent` time instead of silently skipping self-improvement edits. */\nexport function validateSurfaces(\n  surfaces: AgentSurfaces,\n  repoRoot: string,\n): ReadonlyArray<SurfaceValidationIssue> {\n  const issues: SurfaceValidationIssue[] = []\n  const dirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'systemPrompt',\n    'tools',\n    'personas',\n    'knowledge',\n  ]\n  const fileSurfaces: ReadonlyArray<keyof AgentSurfaces> = ['rubric']\n  const optionalDirSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'scaffolding',\n    'memory',\n    'rag',\n    'skills',\n    'mcp',\n    'hooks',\n    'subagents',\n    'workflows',\n    'code',\n  ]\n  const optionalFileSurfaces: ReadonlyArray<keyof AgentSurfaces> = [\n    'outputSchema',\n    'rolloutPolicy',\n    'agentProfile',\n  ]\n\n  for (const key of dirSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    }\n  }\n  for (const key of fileSurfaces) {\n    const p = surfaces[key] as string | undefined\n    if (!p) {\n      issues.push({ surface: key, path: '', reason: 'missing' })\n      continue\n    }\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n    } else if (!statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  for (const key of [...optionalDirSurfaces, ...optionalFileSurfaces]) {\n    const p = surfaces[key] as string | undefined\n    if (p === undefined) continue\n    const abs = isAbsolute(p) ? p : join(repoRoot, p)\n    if (!existsSync(abs)) {\n      issues.push({ surface: key, path: p, reason: 'missing' })\n      continue\n    }\n    const expectedDirectory = optionalDirSurfaces.includes(key)\n    if (expectedDirectory && !statSync(abs).isDirectory()) {\n      issues.push({ surface: key, path: p, reason: 'not-directory' })\n    } else if (!expectedDirectory && !statSync(abs).isFile()) {\n      issues.push({ surface: key, path: p, reason: 'not-file' })\n    }\n  }\n  return issues\n}\n\n/** Format a list of surface validation issues into a human-readable error string. */\nexport function renderSurfaceIssues(\n  issues: ReadonlyArray<SurfaceValidationIssue>,\n  repoRoot: string,\n): string {\n  if (issues.length === 0) return ''\n  const lines = issues.map(\n    (i) => `  - ${i.surface}: ${i.path ? `\"${i.path}\"` : '<not set>'} (${i.reason})`,\n  )\n  return [\n    `Agent surface validation failed against repoRoot=${repoRoot}:`,\n    ...lines,\n    '',\n    'Fix the manifest: every required surface must point at an existing',\n    'directory (systemPrompt / tools / personas / knowledge) or file',\n    '(rubric). Optional surfaces (scaffolding / memory / rag / outputSchema)',\n    'may be omitted; the loop will reject findings targeting omitted',\n    'surfaces rather than fabricating a path.',\n  ].join('\\n')\n}\n","/**\n * `defineAgent` — typed, validated manifest API for declarative agent\n * configuration. The substrate consumes this manifest to wire the\n * canonical eval pattern + analyst self-improvement loop without any\n * per-vertical glue.\n *\n * Design goal: scale to 1000s of vertical agents. Every agent declares\n * its surfaces, rubric, runtime, and analyst configuration in ~50 lines.\n * No per-vertical `ImprovementProposalSource`. No per-vertical CLI. No\n * fabricated paths.\n *\n * Validation: `defineAgent` runs `validateSurfaces` synchronously and\n * throws a structured error if any required surface is missing on\n * disk. The cost is one filesystem stat per surface (cheap); the\n * benefit is a manifest that can't ship broken.\n *\n * @experimental Manifests validate and load, but `runtime.act` is not yet wired\n * end-to-end into the substrate's eval path (`unimplementedAgentRun` is the\n * shipped default).\n */\n\nimport type { TraceAnalystDefinition } from '@tangle-network/agent-eval'\nimport type { RuntimeStreamEvent } from '../types'\nimport { type AgentSurfaces, renderSurfaceIssues, validateSurfaces } from './surfaces'\n\n// ── manifest ─────────────────────────────────────────────────────────\n\n/**\n * The full agent manifest. Each agent ships ONE of these.\n *\n * Generics:\n *   `TPersona` — the agent's persona shape (loaded from\n *     `surfaces.personas`). Defaults to `unknown` so the substrate's\n *     persona discovery (`loadPersonas`) can accept anything; per-agent\n *     code re-narrows when it matters.\n *   `TRunOutput` — the shape `runtime.act` returns. Used by the rubric\n *     scorers and emitted into the trace.\n */\nexport interface AgentManifest<TPersona = unknown, TRunOutput = unknown> {\n  /**\n   * Stable identifier — used as `projectId` in traces, as the analyst\n   * loop's `runId` prefix, and as the namespace under which findings\n   * are persisted. MUST match the agent's repo name to keep\n   * cross-repo telemetry joinable.\n   */\n  id: string\n\n  /**\n   * Filesystem root the substrate resolves surface paths against.\n   * Typically `process.cwd()` or a fixed absolute path. Use an\n   * absolute path when the agent's tests may run from subdirectories\n   * (vitest sometimes shifts cwd).\n   */\n  repoRoot: string\n\n  /**\n   * Map of mutable surfaces the self-improvement loop can edit. See\n   * `AgentSurfaces` — required: `systemPrompt`, `tools`, `rubric`,\n   * `knowledge`, `personas`. Optional: `scaffolding`, `memory`, `rag`,\n   * `outputSchema`.\n   *\n   * Every required path is validated at `defineAgent` time. Missing\n   * paths throw with the full list of offenders.\n   */\n  surfaces: AgentSurfaces\n\n  /**\n   * Rubric the substrate uses to score each run. Dimensions × weights\n   * × judges. The substrate computes the weighted composite and\n   * stamps it into the RunRecord.\n   */\n  rubric: AgentRubric<TRunOutput>\n\n  /**\n   * Runtime adapter — how the substrate INVOKES the agent against a\n   * persona. The `act` function takes a persona + a context (with the\n   * tracer the substrate threads through for span emission) and\n   * returns the run output the rubric will score.\n   *\n   * The agent's existing production runtime goes in here; the\n   * substrate is intentionally thin around it.\n   */\n  runtime: AgentRuntime<TPersona, TRunOutput>\n\n  /**\n   * Persona discovery — the substrate loads personas via this function\n   * at eval start. Can read from `surfaces.personas`, an API, or be\n   * hardcoded. The substrate calls it once per `runAgentEval` call;\n   * persona ordering is preserved.\n   */\n  personas: () => Promise<ReadonlyArray<TPersona>>\n\n  /**\n   * Analyst kinds the substrate runs against each persona's trace.\n   * Defaults to `DEFAULT_TRACE_ANALYST_KINDS` from agent-eval. Per-agent\n   * authors can prune (e.g. skip `knowledge-poisoning` when there's no\n   * knowledge base) or extend (custom domain kinds).\n   *\n   * Empty array disables the loop — useful for `pnpm eval --no-analyst`.\n   */\n  analystKinds: ReadonlyArray<TraceAnalystDefinition>\n\n  /**\n   * Analyst LLM configuration. The substrate uses these for all four\n   * kinds (override per-kind via `analystKinds` if needed).\n   */\n  analyst: AnalystConfig\n}\n\nexport interface AgentRubric<TRunOutput> {\n  /** Dimensions composing the weighted score. Weights sum to 1.0 by convention. */\n  dimensions: ReadonlyArray<RubricDimension<TRunOutput>>\n  /**\n   * Optional judges layered on top of deterministic dimensions. Each\n   * judge returns a score per dimension; the substrate averages judges\n   * (mean by default) for the LLM contribution.\n   */\n  judges?: ReadonlyArray<JudgeConfig<TRunOutput>>\n}\n\nexport interface RubricDimension<TRunOutput> {\n  /** Unique identifier — appears in finding subjects (`rubric:<id>`). */\n  id: string\n  /** 0..1 — weight in the composite. */\n  weight: number\n  /**\n   * Deterministic scorer: given the persona + run output, returns a\n   * 0..1 score. The substrate sums weight × score across dimensions\n   * for the deterministic composite; judges supplement subjective dims.\n   */\n  score: (input: { persona: unknown; output: TRunOutput }) => number\n  /** Optional human-readable label for reports. */\n  label?: string\n}\n\nexport interface JudgeConfig<TRunOutput> {\n  /** Judge identifier — appears in trace spans + manifest. */\n  id: string\n  /** Model snapshot to invoke. Pin the snapshot (`claude-sonnet-4-6@2025-04-15`); the validator rejects bare aliases. */\n  model: string\n  /** Dimensions this judge scores. */\n  dimensions: ReadonlyArray<string>\n  /**\n   * Optional rubric anchors — text examples the judge sees as a\n   * few-shot prompt to calibrate. STRONGLY recommended for subjective\n   * dimensions; required by the calibration gate (Pearson ≥0.7).\n   */\n  anchors?: ReadonlyArray<{ input: string; output: TRunOutput; expected: Record<string, number> }>\n}\n\nexport interface AgentRuntime<TPersona, TRunOutput> {\n  /**\n   * Invoke the agent against one persona. Returns BOTH:\n   *   - `events`: an `AsyncIterable<RuntimeStreamEvent>` the chat-centric\n   *     product consumes verbatim (SSE / WebSocket / inline render).\n   *     **Streaming is mandatory — never collapse this to a single Promise.**\n   *     The agent's existing `runChatTurn` (or equivalent async generator)\n   *     plugs in here directly.\n   *   - `output`: a `Promise<TRunOutput>` resolved AFTER the event stream\n   *     drains. The eval substrate awaits this for rubric scoring; chat\n   *     products usually ignore it (they already rendered incrementally).\n   *\n   * Implementation contract:\n   *   1. `act` MUST return immediately (synchronous construction of the\n   *      `events` iterator + the `output` promise).\n   *   2. Iterating `events` drives the underlying LLM/tool calls — the\n   *      caller chooses when to consume.\n   *   3. `output` resolves only after the iterator yields its terminal\n   *      event (typically `task_end`); see `collectAgentRun` helper.\n   *\n   * `ctx.emitter` is the substrate-threaded `TraceEmitter` — runtimes\n   * SHOULD record LLM/tool spans through it for capture integrity.\n   * `ctx.deadlineMs` is wall-clock; the runtime SHOULD honour for graceful\n   * cancel. `ctx.signal` is the standard abort signal.\n   */\n  act: (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput>\n}\n\nexport interface AgentRunInvocation<TRunOutput> {\n  /** Live stream of typed runtime events. Consumed by chat UX directly. */\n  events: AsyncIterable<RuntimeStreamEvent>\n  /** Final structured output the rubric scores. Resolves after `events` drains. */\n  output: Promise<TRunOutput>\n}\n\n/**\n * Stub for agents whose `runtime.act` is not yet wired to the substrate's\n * eval path. Preserves the streaming contract (empty event stream + a\n * rejected `output` promise that tells the caller exactly what to fix).\n *\n * Per-vertical manifests usually start with this stub and replace it with\n * the agent's real streaming runtime (`runChatTurn` or equivalent) once\n * the eval path consumes the manifest end-to-end.\n */\nexport function unimplementedAgentRun<TRunOutput = unknown>(\n  reason = 'AgentRuntime.act is not yet wired for this manifest',\n): AgentRunInvocation<TRunOutput> {\n  return {\n    events: (async function* empty(): AsyncIterable<RuntimeStreamEvent> {})(),\n    output: Promise.reject(new Error(reason)),\n  }\n}\n\n/**\n * Drain `act`'s `events` into an array AND await its `output`. Useful for\n * eval / outcome-measurement code paths that don't care about live\n * rendering. The events array is preserved so the substrate can inspect\n * tool calls / readiness / questions retrospectively.\n *\n * IMPORTANT: chat-centric UX MUST NOT call this — it defeats streaming\n * (no incremental render). Use `for await (const ev of invocation.events)`\n * directly in the chat surface.\n */\nexport async function collectAgentRun<TRunOutput>(\n  invocation: AgentRunInvocation<TRunOutput>,\n): Promise<{ events: ReadonlyArray<RuntimeStreamEvent>; output: TRunOutput }> {\n  const events: RuntimeStreamEvent[] = []\n  for await (const ev of invocation.events) events.push(ev)\n  const output = await invocation.output\n  return { events, output }\n}\n\nexport interface AgentRunContext {\n  /** Substrate-managed trace emitter. */\n  emitter: import('@tangle-network/agent-eval').TraceEmitter\n  /** Stable run id for this persona × variant cell. */\n  runId: string\n  /** Variant the runtime is exercising (e.g. `'baseline'`, `'source-grounded'`). */\n  variantId?: string\n  /** Wall-clock deadline (epoch ms). The runtime SHOULD honour for graceful cancel. */\n  deadlineMs?: number\n  /** Optional abort signal. */\n  signal?: AbortSignal\n}\n\nexport interface AnalystConfig {\n  /** Model the analyst kinds use. Override per-kind via `analystKinds[i].cost.models`. */\n  model: string\n  /** Optional total budget across all kinds for one run. Substrate enforces via `BudgetGuard`. */\n  budgetUsd?: number\n  /** Backend hint for the AxAIService factory — same shape every kind uses. */\n  backend?: {\n    name?: 'openai' | 'router'\n    apiKey?: string\n    baseUrl?: string\n  }\n}\n\n// ── factory + validation ─────────────────────────────────────────────\n\n/** Thrown when `defineAgent` finds a required surface missing on disk. */\nexport class AgentManifestError extends Error {\n  constructor(\n    message: string,\n    public readonly agentId: string,\n    public readonly issues: ReadonlyArray<unknown> = [],\n  ) {\n    super(message)\n    this.name = 'AgentManifestError'\n  }\n}\n\n/**\n * Construct a validated agent manifest. Throws `AgentManifestError`\n * if any required surface is missing on disk.\n *\n * Generics: pass your persona / output types if you want narrowed\n * `runtime.act` signatures:\n *   `defineAgent<TaxPersona, TaxRunOutput>({ ... })`\n *\n * Most callers don't need the generics — the substrate operates on\n * `unknown` payloads internally and the manifest's `score` /\n * `runtime.act` see the typed shapes via TypeScript inference at\n * the call site.\n */\nexport function defineAgent<TPersona = unknown, TRunOutput = unknown>(\n  manifest: AgentManifest<TPersona, TRunOutput>,\n): AgentManifest<TPersona, TRunOutput> {\n  if (!manifest.id || manifest.id.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `id` is required', manifest.id ?? '')\n  }\n  if (!manifest.repoRoot || manifest.repoRoot.trim().length === 0) {\n    throw new AgentManifestError('defineAgent: `repoRoot` is required', manifest.id)\n  }\n  const issues = validateSurfaces(manifest.surfaces, manifest.repoRoot)\n  if (issues.length > 0) {\n    throw new AgentManifestError(\n      renderSurfaceIssues(issues, manifest.repoRoot),\n      manifest.id,\n      issues,\n    )\n  }\n  // Lightweight rubric sanity: weights sum to ~1.0 (no hard requirement —\n  // the substrate normalizes — but flag wildly miscalibrated weights).\n  const total = manifest.rubric.dimensions.reduce((acc, d) => acc + d.weight, 0)\n  if (manifest.rubric.dimensions.length > 0 && (total < 0.5 || total > 1.5)) {\n    throw new AgentManifestError(\n      `defineAgent(${manifest.id}): rubric dimension weights sum to ${total.toFixed(3)} — should be ~1.0`,\n      manifest.id,\n    )\n  }\n  return manifest\n}\n","/**\n * Surface improvement proposer — resolves analyst findings into LLM-drafted\n * candidate patches without changing the caller's repository.\n *\n * The proposer parses each finding's `subject` via\n * `parseFindingSubject` (agent-eval), resolves it to a real file path\n * via the agent's `AgentSurfaces`, reads the current content, and asks\n * an LLM to draft a unified-diff patch given the finding + current\n * content + per-kind editing-discipline rules.\n *\n * Fail-loud rules:\n *   - Findings whose subject doesn't parse → counted in `errors`.\n *   - Findings whose subject targets an undeclared surface → counted in\n *     `errors` with the offending kind in the message.\n *   - Findings whose target path doesn't exist AND the kind isn't a\n *     create-new variant (`new-tool`, `knowledge.wiki`) → counted in\n *     `errors` with the resolved path in the message.\n *   - LLM drafts that fail JSON-schema validation → counted in\n *     `errors` with the schema issue.\n *\n * No silent skips. Every dropped finding has a recorded reason the\n * loop's report surfaces.\n */\n\nimport { readFileSync } from 'node:fs'\nimport type { AnalystFinding, FindingSubject } from '@tangle-network/agent-eval'\nimport { parseFindingSubject } from '@tangle-network/agent-eval/analyst'\nimport type { ImprovementProposalSource } from '../analyst-loop/types'\nimport { sha256 } from '../content-digest'\nimport type { AgentSurfaces, ResolvedSurface } from './surfaces'\nimport { resolveSubjectPath } from './surfaces'\n\n// ── proposal shape ───────────────────────────────────────────────────\n\nexport interface SurfaceImprovementEdit {\n  /** Stable id derived from the source finding so re-proposals are idempotent. */\n  id: string\n  /** The finding that produced this edit — for revert + audit trail. */\n  sourceFindingId: string\n  /** Parsed subject; included so the apply step doesn't re-parse. */\n  subject: FindingSubject\n  /** Resolved on-disk target. */\n  target: ResolvedSurface\n  /** SHA-256 of the current file content the patch was drafted against. */\n  baseSha256: string\n  /** Unified-diff patch the LLM drafted (relative to `target.absolutePath`). */\n  patch: string\n  /** One-line summary the operator sees in the report / PR title. */\n  summary: string\n  /** Multi-line rationale for the PR body — finding context + LLM reasoning. */\n  rationale: string\n  /** Carry-forward from the finding so the apply gate can check the threshold. */\n  confidence: number\n  /** Carry-forward severity for prioritization. */\n  severity: AnalystFinding['severity']\n}\n\nexport interface CreateSurfaceImprovementProposerOptions {\n  surfaces: AgentSurfaces\n  repoRoot: string\n  /**\n   * LLM-draft callback. Given a finding + current file content + the\n   * resolved target, returns a unified-diff patch + summary + rationale.\n   *\n   * Required — the substrate doesn't ship a hardcoded prompt; the agent\n   * author picks the model (Haiku for cheap routine drafts, Sonnet for\n   * substantive prompt rewrites, etc.) via this callback.\n   */\n  draftPatch: (input: DraftPatchInput) => Promise<DraftPatchOutput>\n  /**\n   * When the resolved target doesn't exist, allow the substrate to\n   * CREATE the file (for `knowledge.wiki`, `new-tool` subjects). Default\n   * true for those kinds, false for `system-prompt` / `rubric` / etc.\n   * (named sections that don't exist are a contract violation, not a\n   * scaffolding opportunity).\n   */\n  allowCreateForKinds?: ReadonlyArray<FindingSubject['kind']>\n}\n\nexport interface DraftPatchInput {\n  finding: AnalystFinding\n  subject: FindingSubject\n  target: ResolvedSurface\n  /** Current file content (empty string when `intent === 'create-new'`). */\n  currentContent: string\n}\n\nexport interface DraftPatchOutput {\n  /** Unified diff against the current file content. Empty string skips this finding. */\n  patch: string\n  /** One-line summary for the operator. */\n  summary: string\n  /** Multi-line rationale for the PR body. */\n  rationale: string\n}\n\n// ── factory ──────────────────────────────────────────────────────────\n\nconst DEFAULT_CREATE_KINDS: ReadonlyArray<FindingSubject['kind']> = [\n  'knowledge.wiki',\n  'knowledge.claim',\n  'knowledge.raw',\n  'new-tool',\n]\n\n/** Resolve each finding to a real surface and draft a detached patch candidate. */\nexport function createSurfaceImprovementProposer(\n  opts: CreateSurfaceImprovementProposerOptions,\n): ImprovementProposalSource<SurfaceImprovementEdit> {\n  const allowCreate = opts.allowCreateForKinds ?? DEFAULT_CREATE_KINDS\n\n  return {\n    async proposeFromFindings(findings) {\n      const edits: SurfaceImprovementEdit[] = []\n      const errors: Array<{ findingId: string; subject: string; message: string }> = []\n      let skipped = 0\n\n      for (const f of findings) {\n        const subject = parseFindingSubject(f.subject)\n        if (subject === null) {\n          if (f.subject !== undefined) {\n            errors.push({\n              findingId: f.finding_id,\n              subject: f.subject,\n              message: 'subject does not parse against the finding-subject grammar',\n            })\n          } else {\n            // Subject-less findings are descriptive, not actionable —\n            // legitimate; count in `skipped` not `errors`.\n            skipped += 1\n          }\n          continue\n        }\n\n        // `cluster` findings (failure-mode) are evidence, not mutations.\n        if (subject.kind === 'cluster') {\n          skipped += 1\n          continue\n        }\n\n        // Knowledge findings flow to the knowledge proposal source so they do not double-route.\n        if (subject.kind.startsWith('knowledge.')) {\n          skipped += 1\n          continue\n        }\n\n        const target = resolveSubjectPath(subject, opts.surfaces, opts.repoRoot)\n        if (target === null) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `subject kind \"${subject.kind}\" targets an undeclared surface; declare it in AgentSurfaces or stop emitting this subject`,\n          })\n          continue\n        }\n\n        if (target.intent === 'create-new' && !allowCreate.includes(subject.kind)) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `target ${target.repoRelativePath} does not exist; the kind \"${subject.kind}\" requires an existing target (analyst named a section that isn't in the codebase)`,\n          })\n          continue\n        }\n\n        const currentContent = target.exists ? readFileSync(target.absolutePath, 'utf-8') : ''\n\n        let draft: DraftPatchOutput\n        try {\n          draft = await opts.draftPatch({ finding: f, subject, target, currentContent })\n        } catch (err) {\n          errors.push({\n            findingId: f.finding_id,\n            subject: f.subject ?? '',\n            message: `draftPatch threw: ${err instanceof Error ? err.message : String(err)}`,\n          })\n          continue\n        }\n\n        if (draft.patch.trim().length === 0) {\n          skipped += 1\n          continue\n        }\n\n        edits.push({\n          id: `imp-${f.finding_id}`,\n          sourceFindingId: f.finding_id,\n          subject,\n          target,\n          baseSha256: sha256(currentContent),\n          patch: draft.patch,\n          summary: draft.summary,\n          rationale: draft.rationale,\n          confidence: f.confidence,\n          severity: f.severity,\n        })\n      }\n\n      return { edits, skipped, errors }\n    },\n  }\n}\n","/**\n * Sandbox bridge for `AgentRuntime.act` — prod-faithful eval execution.\n *\n * The point of this adapter is parity: the eval substrate must run the agent\n * through the SAME profile the production chat turn uses, or scorecard numbers\n * grade a profile that never ships. `createSandboxAct` boots a sandbox with the\n * agent's profile (the caller's `baseProfile`, with optional per-persona\n * overrides) through the loop kernel's own {@link createSandboxForSpec},\n * streams the `streamPrompt` events mapped to the `RuntimeStreamEvent`\n * vocabulary, and resolves the `OutputAdapter`-parsed output for rubric scoring\n * — satisfying the `act` streaming contract with one code path shared by chat\n * and eval.\n *\n * Agents with a bespoke streaming chat turn should wire THAT into `act`\n * directly (the contract is designed for it); this adapter is the default for\n * agents whose turn is a plain prod-profile sandbox dispatch — notably the\n * agents agent-builder generates.\n */\n\nimport type {\n  AgentProfile,\n  AgentProfileFileMount,\n  AgentProfileMcpServer,\n} from '@tangle-network/agent-interface'\nimport type { SandboxEvent } from '@tangle-network/sandbox'\nimport type { AgentRunSpec, OutputAdapter, SandboxClient } from '../runtime'\nimport { mapSandboxEvent } from '../runtime'\nimport { createSandboxForSpec } from '../runtime/iteration-sandboxes'\nimport type { RuntimeStreamEvent } from '../types'\nimport type { AgentRunContext, AgentRunInvocation } from './define-agent'\nimport {\n  type AgentProfileMaterializationAxis,\n  assertProfileMaterialization,\n  sandboxActProfileMaterialization,\n} from './profile-materialization'\n\n/** Per-persona profile-merge slots applied over the base profile (§1.5: the caller authors the\n *  per-persona profile). Each slot overlays the base; an absent slot leaves the base untouched. */\nexport interface SandboxActComposeOverrides {\n  /** Replace the base profile's system prompt (e.g. a workspace-augmented prompt). */\n  systemPrompt?: string\n  /** Extra file mounts layered after the base profile's `resources.files`. */\n  extraFiles?: AgentProfileFileMount[]\n  /** Override the profile `name`. Defaults to the base profile's name. */\n  name?: string\n  /** Box built-in tool ON/OFF flags merged over the base profile's `tools` (overlay wins per key). */\n  tools?: Record<string, boolean>\n  /** MCP connections merged over the base profile's `mcp` (overlay wins per key). */\n  mcpConnections?: Record<string, AgentProfileMcpServer>\n}\n\nexport interface CreateSandboxActOptions<TPersona, TRunOutput> {\n  /** Canonical agent profile — the same one the prod chat turn uses. */\n  baseProfile: AgentProfile\n  /** Sandbox client used to boot the per-run sandbox. */\n  sandboxClient: SandboxClient\n  /** Persona → prompt. Pure; the eval cell's input. */\n  buildPrompt: (persona: TPersona) => string\n  /** Sandbox event stream → typed output the rubric scores. */\n  output: OutputAdapter<TRunOutput>\n  /**\n   * Per-persona profile overrides (workspace-augmented system prompt, extra\n   * file mounts, tool flags, MCP connections). Overlaid onto `baseProfile`.\n   */\n  compose?: (persona: TPersona) => SandboxActComposeOverrides\n  /** Sandbox-SDK overrides forwarded to `createSandboxForSpec`. */\n  sandboxOverrides?: AgentRunSpec<unknown>['sandboxOverrides']\n  /** Optional changed axes the caller expects this path to carry. */\n  requiredProfileAxes?: readonly AgentProfileMaterializationAxis[]\n  /** Stable run name surfaced in mapped `llm_call` events. */\n  name?: string\n  /** Override the `SandboxEvent → RuntimeStreamEvent` mapper. */\n  mapEvent?: (\n    event: SandboxEvent,\n    opts: { agentRunName?: string },\n  ) => RuntimeStreamEvent | undefined\n}\n\n/**\n * Build an `AgentRuntime.act` implementation backed by a single prod-profile\n * sandbox run. The returned function honours the `act` contract: it returns\n * synchronously with a live `events` iterator and an `output` promise that\n * resolves only after the iterator drains.\n */\nexport function createSandboxAct<TPersona, TRunOutput>(\n  options: CreateSandboxActOptions<TPersona, TRunOutput>,\n): (persona: TPersona, ctx: AgentRunContext) => AgentRunInvocation<TRunOutput> {\n  assertProfileMaterialization({\n    contract: sandboxActProfileMaterialization,\n    changedAxes: options.requiredProfileAxes ?? [],\n    context: 'createSandboxAct',\n  })\n  const mapEvent = options.mapEvent ?? mapSandboxEvent\n\n  return (persona: TPersona, ctx: AgentRunContext): AgentRunInvocation<TRunOutput> => {\n    const profile = applyComposeOverrides(options.baseProfile, options.compose?.(persona))\n    const agentRunName = options.name ?? profile.name ?? 'agent'\n    const message = options.buildPrompt(persona)\n    const signal = ctx.signal ?? new AbortController().signal\n\n    const raw: SandboxEvent[] = []\n    let settle!: (value: TRunOutput) => void\n    let fail!: (err: unknown) => void\n    const output = new Promise<TRunOutput>((resolve, reject) => {\n      settle = resolve\n      fail = reject\n    })\n    // The output promise rejects when the stream errors; if the caller ignores\n    // `output` (chat UX) the rejection is still observed by the events iterator\n    // throwing. Attach a no-op catch so an ignored rejection is never \"unhandled\".\n    output.catch(() => {})\n\n    const spec: AgentRunSpec<unknown> = {\n      profile,\n      taskToPrompt: () => message,\n      name: agentRunName,\n      ...(options.sandboxOverrides ? { sandboxOverrides: options.sandboxOverrides } : {}),\n    }\n\n    async function* events(): AsyncIterable<RuntimeStreamEvent> {\n      try {\n        const box = await createSandboxForSpec(options.sandboxClient, spec, signal)\n        for await (const event of box.streamPrompt(message, { signal })) {\n          raw.push(event)\n          const mapped = mapEvent(event, { agentRunName })\n          if (mapped) yield mapped\n        }\n        settle(options.output.parse(raw))\n      } catch (err) {\n        fail(err)\n        throw err\n      }\n    }\n\n    return { events: events(), output }\n  }\n}\n\n/** Overlay the per-persona overrides onto the base profile. Each slot merges over the base; an\n *  absent override leaves the base profile untouched. */\nfunction applyComposeOverrides(\n  base: AgentProfile,\n  overrides: SandboxActComposeOverrides | undefined,\n): AgentProfile {\n  if (!overrides) return base\n  const prompt = overrides.systemPrompt\n    ? { ...base.prompt, systemPrompt: overrides.systemPrompt }\n    : base.prompt\n  const mergedTools = overrides.tools ? { ...(base.tools ?? {}), ...overrides.tools } : base.tools\n  const mergedMcp = overrides.mcpConnections\n    ? { ...(base.mcp ?? {}), ...overrides.mcpConnections }\n    : base.mcp\n  const baseFiles = base.resources?.files ?? []\n  const mergedFiles: AgentProfileFileMount[] = overrides.extraFiles?.length\n    ? [...baseFiles, ...overrides.extraFiles]\n    : [...baseFiles]\n  return {\n    ...base,\n    name: overrides.name ?? base.name,\n    prompt,\n    ...(mergedTools ? { tools: mergedTools } : {}),\n    ...(mergedMcp ? { mcp: mergedMcp } : {}),\n    resources: { ...base.resources, files: mergedFiles },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqGA,SAAgB,mBACd,SACA,UACA,UACwB;CACxB,MAAM,aAAa,yBAAyB,SAAS,QAAQ;CAC7D,IAAI,WAAW,WAAW,GAAG,OAAO;CAMpC,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,MAAM,WAAW,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;EACtD,IAAI,WAAW,GAAG,GAChB,OAAO;GAAE,cAAc;GAAK,kBAAkB;GAAK,QAAQ;GAAM,QAAQ;EAAgB;CAE7F;CACA,MAAM,WAAW,WAAW;CAE5B,OAAO;EACL,cAFkB,WAAW,QAAQ,IAAI,WAAW,KAAK,UAAU,QAAQ;EAG3E,kBAAkB;EAClB,QAAQ;EACR,QAAQ;CACV;AACF;AAEA,SAAS,yBACP,SACA,UACuB;CACvB,QAAQ,QAAQ,MAAhB;EACE,KAAK;EACL,KAAK,mBACH,OAAO,aAAa,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI,CAAC;EACxE,KAAK,mBAEH,OAAO,aAAa,SAAS,SAAS,WAAW,UAAU,GAAG,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC;EAC5F,KAAK,iBACH,OAAO,aAAa,SAAS,SAAS,WAAW,OAAO,GAAG,QAAQ,SAAS,IAAI,CAAC;EACnF,KAAK,iBAAiB;GACpB,MAAM,OAAO,QAAQ,QAAQ,OAAO;GAIpC,OAAO;IACL,SAAS,SAAS,cAAc,GAAG,KAAK,IAAI;IAC5C,SAAS,SAAS,cAAc,MAAM,UAAU;IAChD,SAAS,SAAS,cAAc,MAAM,UAAU;GAClD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD;EACA,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,CACL,SAAS,SAAS,QAAQ,QAAQ,MAAM,UAAU,GAClD,SAAS,SAAS,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAChD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAElD,KAAK;GACH,IAAI,QAAQ,QACV,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,GAAG,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC;GAI7F,OAAO,CACL,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,GAClD,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,CAC/C,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,YACH,OAAO,aAAa,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,CAAC;EACzE,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,QAAQ,OACX,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,IACzE,CACE,SAAS,SAAS,KAAK,GAAG,QAAQ,OAAO,MAAM,GAC/C,SAAS,SAAS,KAAK,QAAQ,QAAQ,WAAW,CACpD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EACtD,KAAK;GACH,IAAI,CAAC,SAAS,OAAO,OAAO,CAAC;GAC7B,OAAO,CACL,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,IAAI,GAC7C,SAAS,SAAS,OAAO,GAAG,QAAQ,KAAK,MAAM,CACjD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK;GACH,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;GACjC,OAAO;IACL,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,IAAI;IACjD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;IACnD,SAAS,SAAS,WAAW,GAAG,QAAQ,KAAK,MAAM;GACrD,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;EAClD,KAAK,kBACH,OAAO,SAAS,gBAAgB,CAAC,SAAS,aAAa,IAAI,CAAC;EAC9D,KAAK,iBACH,OAAO,SAAS,eAAe,CAAC,SAAS,YAAY,IAAI,CAAC;EAC5D,KAAK,QAAQ;GACX,IAAI,CAAC,SAAS,MAAM,OAAO,CAAC;GAC5B,MAAM,OAAO,SAAS,SAAS,MAAM,QAAQ,IAAI;GACjD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;EAC1B;EACA,KAAK;GACH,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;GAC3B,OAAO,aAAa,SAAS,SAAS,KAAK,QAAQ,QAAQ,GAAG,QAAQ,MAAM,IAAI,CAAC;EACnF,KAAK;GACH,IAAI,CAAC,SAAS,QAAQ,OAAO,CAAC;GAC9B,OAAO,aAAa,SAAS,SAAS,QAAQ,GAAG,QAAQ,QAAQ,GAAG,EAAE,MAAM,CAAC;EAC/E,KAAK;GACH,IAAI,CAAC,SAAS,aAAa,OAAO,CAAC;GACnC,OAAO,aAAa,SAAS,SAAS,aAAa,GAAG,QAAQ,QAAQ,OAAO,EAAE,IAAI,CAAC;EACtF,KAAK;GACH,IAAI,CAAC,SAAS,cAAc,OAAO,CAAC;GACpC,OAAO,CAAC,SAAS,YAAY;EAC/B,KAAK;EACL,KAAK,qBAGH,OAAO,CAAC;EACV,KAAK,WAEH,OAAO,CAAC;CACZ;AACF;AAEA,SAAS,SAAS,MAAc,GAAG,UAAmC;CACpE,IAAI,SAAS,MAAM,UAAU,MAAM,SAAS,IAAI,KAAK,WAAW,KAAK,CAAC,GAAG,OAAO;CAChF,MAAM,eAAe,QAAQ,IAAI;CAEjC,MAAM,UAAU,SAAS,cADF,QAAQ,cAAc,GAAG,QACI,CAAC;CACrD,IAAI,YAAY,QAAQ,QAAQ,WAAW,KAAK,KAAK,KAAK,WAAW,OAAO,GAAG,OAAO;CACtF,OAAO,KAAK,MAAM,GAAG,QAAQ;AAC/B;AAEA,SAAS,aAAa,MAA+B;CACnD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC;AAC1B;AAEA,SAAS,QAAQ,GAAmB;CAClC,OACE,EACG,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,GAAG,KAAK;AAExB;;AAiBA,SAAgB,iBACd,UACA,UACuC;CACvC,MAAM,SAAmC,CAAC;CAC1C,MAAM,cAAkD;EACtD;EACA;EACA;EACA;CACF;CACA,MAAM,eAAmD,CAAC,QAAQ;CAClE,MAAM,sBAA0D;EAC9D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,uBAA2D;EAC/D;EACA;EACA;CACF;CAEA,KAAK,MAAM,OAAO,aAAa;EAC7B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GACpC,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;CAElE;CACA,KAAK,MAAM,OAAO,cAAc;EAC9B,MAAM,IAAI,SAAS;EACnB,IAAI,CAAC,GAAG;GACN,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAI,QAAQ;GAAU,CAAC;GACzD;EACF;EACA,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GACjB,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAU,CAAC;OACnD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GAC/B,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,KAAK,MAAM,OAAO,CAAC,GAAG,qBAAqB,GAAG,oBAAoB,GAAG;EACnE,MAAM,IAAI,SAAS;EACnB,IAAI,MAAM,KAAA,GAAW;EACrB,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;EAChD,IAAI,CAAC,WAAW,GAAG,GAAG;GACpB,OAAO,KAAK;IAAE,SAAS;IAAK,MAAM;IAAG,QAAQ;GAAU,CAAC;GACxD;EACF;EACA,MAAM,oBAAoB,oBAAoB,SAAS,GAAG;EAC1D,IAAI,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,GAClD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAgB,CAAC;OACzD,IAAI,CAAC,qBAAqB,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,GACrD,OAAO,KAAK;GAAE,SAAS;GAAK,MAAM;GAAG,QAAQ;EAAW,CAAC;CAE7D;CACA,OAAO;AACT;;AAGA,SAAgB,oBACd,QACA,UACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,QAAQ,OAAO,KAClB,MAAM,OAAO,EAAE,QAAQ,IAAI,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI,EAAE,OAAO,EAChF;CACA,OAAO;EACL,oDAAoD,SAAS;EAC7D,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;;;;;;;;;;;ACxKA,SAAgB,sBACd,SAAS,uDACuB;CAChC,OAAO;EACL,SAAS,gBAAgB,QAA2C,CAAC,EAAA,CAAG;EACxE,QAAQ,QAAQ,OAAO,IAAI,MAAM,MAAM,CAAC;CAC1C;AACF;;AAkDA,IAAa,qBAAb,cAAwC,MAAM;CAG1B;CACA;CAHlB,YACE,SACA,SACA,SAAiD,CAAC,GAClD;EACA,MAAM,OAAO;EAHG,KAAA,UAAA;EACA,KAAA,SAAA;EAGhB,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;;AAeA,SAAgB,YACd,UACqC;CACrC,IAAI,CAAC,SAAS,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,GAChD,MAAM,IAAI,mBAAmB,iCAAiC,SAAS,MAAM,EAAE;CAEjF,IAAI,CAAC,SAAS,YAAY,SAAS,SAAS,KAAK,CAAC,CAAC,WAAW,GAC5D,MAAM,IAAI,mBAAmB,uCAAuC,SAAS,EAAE;CAEjF,MAAM,SAAS,iBAAiB,SAAS,UAAU,SAAS,QAAQ;CACpE,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,mBACR,oBAAoB,QAAQ,SAAS,QAAQ,GAC7C,SAAS,IACT,MACF;CAIF,MAAM,QAAQ,SAAS,OAAO,WAAW,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,CAAC;CAC7E,IAAI,SAAS,OAAO,WAAW,SAAS,MAAM,QAAQ,MAAO,QAAQ,MACnE,MAAM,IAAI,mBACR,eAAe,SAAS,GAAG,qCAAqC,MAAM,QAAQ,CAAC,EAAE,oBACjF,SAAS,EACX;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;AC5MA,MAAM,uBAA8D;CAClE;CACA;CACA;CACA;AACF;;AAGA,SAAgB,iCACd,MACmD;CACnD,MAAM,cAAc,KAAK,uBAAuB;CAEhD,OAAO,EACL,MAAM,oBAAoB,UAAU;EAClC,MAAM,QAAkC,CAAC;EACzC,MAAM,SAAyE,CAAC;EAChF,IAAI,UAAU;EAEd,KAAK,MAAM,KAAK,UAAU;GACxB,MAAM,UAAU,oBAAoB,EAAE,OAAO;GAC7C,IAAI,YAAY,MAAM;IACpB,IAAI,EAAE,YAAY,KAAA,GAChB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE;KACX,SAAS;IACX,CAAC;SAID,WAAW;IAEb;GACF;GAGA,IAAI,QAAQ,SAAS,WAAW;IAC9B,WAAW;IACX;GACF;GAGA,IAAI,QAAQ,KAAK,WAAW,YAAY,GAAG;IACzC,WAAW;IACX;GACF;GAEA,MAAM,SAAS,mBAAmB,SAAS,KAAK,UAAU,KAAK,QAAQ;GACvE,IAAI,WAAW,MAAM;IACnB,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,iBAAiB,QAAQ,KAAK;IACzC,CAAC;IACD;GACF;GAEA,IAAI,OAAO,WAAW,gBAAgB,CAAC,YAAY,SAAS,QAAQ,IAAI,GAAG;IACzE,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,UAAU,OAAO,iBAAiB,6BAA6B,QAAQ,KAAK;IACvF,CAAC;IACD;GACF;GAEA,MAAM,iBAAiB,OAAO,SAAS,aAAa,OAAO,cAAc,OAAO,IAAI;GAEpF,IAAI;GACJ,IAAI;IACF,QAAQ,MAAM,KAAK,WAAW;KAAE,SAAS;KAAG;KAAS;KAAQ;IAAe,CAAC;GAC/E,SAAS,KAAK;IACZ,OAAO,KAAK;KACV,WAAW,EAAE;KACb,SAAS,EAAE,WAAW;KACtB,SAAS,qBAAqB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IAC/E,CAAC;IACD;GACF;GAEA,IAAI,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG;IACnC,WAAW;IACX;GACF;GAEA,MAAM,KAAK;IACT,IAAI,OAAO,EAAE;IACb,iBAAiB,EAAE;IACnB;IACA;IACA,YAAY,OAAO,cAAc;IACjC,OAAO,MAAM;IACb,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,YAAY,EAAE;IACd,UAAU,EAAE;GACd,CAAC;EACH;EAEA,OAAO;GAAE;GAAO;GAAS;EAAO;CAClC,EACF;AACF;;;;;;;;;ACrHA,SAAgB,iBACd,SAC6E;CAC7E,6BAA6B;EAC3B,UAAU;EACV,aAAa,QAAQ,uBAAuB,CAAC;EAC7C,SAAS;CACX,CAAC;CACD,MAAM,WAAW,QAAQ,YAAY;CAErC,QAAQ,SAAmB,QAAyD;EAClF,MAAM,UAAU,sBAAsB,QAAQ,aAAa,QAAQ,UAAU,OAAO,CAAC;EACrF,MAAM,eAAe,QAAQ,QAAQ,QAAQ,QAAQ;EACrD,MAAM,UAAU,QAAQ,YAAY,OAAO;EAC3C,MAAM,SAAS,IAAI,UAAU,IAAI,gBAAgB,CAAC,CAAC;EAEnD,MAAM,MAAsB,CAAC;EAC7B,IAAI;EACJ,IAAI;EACJ,MAAM,SAAS,IAAI,SAAqB,SAAS,WAAW;GAC1D,SAAS;GACT,OAAO;EACT,CAAC;EAID,OAAO,YAAY,CAAC,CAAC;EAErB,MAAM,OAA8B;GAClC;GACA,oBAAoB;GACpB,MAAM;GACN,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,QAAQ,iBAAiB,IAAI,CAAC;EACnF;EAEA,gBAAgB,SAA4C;GAC1D,IAAI;IACF,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAe,MAAM,MAAM;IAC1E,WAAW,MAAM,SAAS,IAAI,aAAa,SAAS,EAAE,OAAO,CAAC,GAAG;KAC/D,IAAI,KAAK,KAAK;KACd,MAAM,SAAS,SAAS,OAAO,EAAE,aAAa,CAAC;KAC/C,IAAI,QAAQ,MAAM;IACpB;IACA,OAAO,QAAQ,OAAO,MAAM,GAAG,CAAC;GAClC,SAAS,KAAK;IACZ,KAAK,GAAG;IACR,MAAM;GACR;EACF;EAEA,OAAO;GAAE,QAAQ,OAAO;GAAG;EAAO;CACpC;AACF;;;AAIA,SAAS,sBACP,MACA,WACc;CACd,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,SAAS,UAAU,eACrB;EAAE,GAAG,KAAK;EAAQ,cAAc,UAAU;CAAa,IACvD,KAAK;CACT,MAAM,cAAc,UAAU,QAAQ;EAAE,GAAI,KAAK,SAAS,CAAC;EAAI,GAAG,UAAU;CAAM,IAAI,KAAK;CAC3F,MAAM,YAAY,UAAU,iBACxB;EAAE,GAAI,KAAK,OAAO,CAAC;EAAI,GAAG,UAAU;CAAe,IACnD,KAAK;CACT,MAAM,YAAY,KAAK,WAAW,SAAS,CAAC;CAC5C,MAAM,cAAuC,UAAU,YAAY,SAC/D,CAAC,GAAG,WAAW,GAAG,UAAU,UAAU,IACtC,CAAC,GAAG,SAAS;CACjB,OAAO;EACL,GAAG;EACH,MAAM,UAAU,QAAQ,KAAK;EAC7B;EACA,GAAI,cAAc,EAAE,OAAO,YAAY,IAAI,CAAC;EAC5C,GAAI,YAAY,EAAE,KAAK,UAAU,IAAI,CAAC;EACtC,WAAW;GAAE,GAAG,KAAK;GAAW,OAAO;EAAY;CACrD;AACF"}

package/dist/analyst-loop.d.ts

@@ -1,7 +1,7 @@
-import { a as ImprovementEditBatch, c as KnowledgeProposalBatch, d as RunAnalystLoopOpts, f as RunAnalystLoopResult, i as FindingsStoreLike, l as KnowledgeProposalSource, n as AnalystRegistryLike, o as ImprovementProposalSource, r as AnalystRegistryStreamingLike, s as ImprovementReport, t as AnalystLoopEvent, u as KnowledgeReport } from "./types-zWfqDjeL.js";
+import { a as ImprovementProposalSource, c as KnowledgeProposalSource, d as RunAnalystLoopResult, i as ImprovementEditBatch, l as KnowledgeReport, n as AnalystRegistryLike, o as ImprovementReport, r as FindingsStoreLike, s as KnowledgeProposalBatch, t as AnalystLoopEvent, u as RunAnalystLoopOpts } from "./types-Cwrea-bU.js";
 //#region src/analyst-loop/run-analyst-loop.d.ts
 /** Analyze a run and apply accepted knowledge and agent-surface proposals. */
 declare function runAnalystLoop<TProposal = unknown, TEdit = unknown>(opts: RunAnalystLoopOpts): Promise<RunAnalystLoopResult<TProposal, TEdit>>;
 //#endregion
-export { type AnalystLoopEvent, type AnalystRegistryLike, type AnalystRegistryStreamingLike, type FindingsStoreLike, type ImprovementEditBatch, type ImprovementProposalSource, type ImprovementReport, type KnowledgeProposalBatch, type KnowledgeProposalSource, type KnowledgeReport, type RunAnalystLoopOpts, type RunAnalystLoopResult, runAnalystLoop };
+export { type AnalystLoopEvent, type AnalystRegistryLike, type FindingsStoreLike, type ImprovementEditBatch, type ImprovementProposalSource, type ImprovementReport, type KnowledgeProposalBatch, type KnowledgeProposalSource, type KnowledgeReport, type RunAnalystLoopOpts, type RunAnalystLoopResult, runAnalystLoop };
 //# sourceMappingURL=analyst-loop.d.ts.map

package/dist/{bundle-DM60AI2B.js → bundle-DNUq-OPW.js}

@@ -1,4 +1,4 @@
-import { B as omitTopLevelDigest, F as canonicalCandidateDigest$1, z as immutableCandidateValue } from "./sandbox-profile-compat-xSoVtdWw.js";
+import { P as canonicalCandidateDigest$1, R as immutableCandidateValue, z as omitTopLevelDigest } from "./sandbox-profile-compat-DRr3JwDx.js";
 import { agentCandidateBundleSchema } from "@tangle-network/agent-interface";
 //#region src/candidate-execution/bundle.ts
 /** Validate and content-address a candidate bundle before it crosses an approval boundary. */
@@ -14,4 +14,4 @@ function sealAgentCandidateBundle(input) {
 //#endregion
 export { sealAgentCandidateBundle as t };
 
-//# sourceMappingURL=bundle-DM60AI2B.js.map
+//# sourceMappingURL=bundle-DNUq-OPW.js.map

package/dist/{bundle-DM60AI2B.js.map → bundle-DNUq-OPW.js.map}

@@ -1 +1 @@
-{"version":3,"file":"bundle-DM60AI2B.js","names":["canonicalCandidateDigest"],"sources":["../src/candidate-execution/bundle.ts"],"sourcesContent":["import type { AgentCandidateBundle } from '@tangle-network/agent-interface'\nimport { agentCandidateBundleSchema } from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue, omitTopLevelDigest } from './digest'\n\n/** Exact candidate wire shape before the runtime computes its canonical digest. */\nexport type AgentCandidateBundleInput = Omit<AgentCandidateBundle, 'digest'>\n\n/** Validate and content-address a candidate bundle before it crosses an approval boundary. */\nexport function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle {\n  const digest = canonicalCandidateDigest(input)\n  const parsed = agentCandidateBundleSchema.parse({ ...input, digest })\n  const parsedDigest = canonicalCandidateDigest(omitTopLevelDigest(parsed))\n  if (parsedDigest !== digest) {\n    throw new Error('candidate bundle changed while validating its canonical wire shape')\n  }\n  return immutableCandidateValue(parsed)\n}\n"],"mappings":";;;;AASA,SAAgB,yBAAyB,OAAwD;CAC/F,MAAM,SAASA,2BAAyB,KAAK;CAC7C,MAAM,SAAS,2BAA2B,MAAM;EAAE,GAAG;EAAO;CAAO,CAAC;CAEpE,IADqBA,2BAAyB,mBAAmB,MAAM,CACxD,MAAM,QACnB,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO,wBAAwB,MAAM;AACvC"}
+{"version":3,"file":"bundle-DNUq-OPW.js","names":["canonicalCandidateDigest"],"sources":["../src/candidate-execution/bundle.ts"],"sourcesContent":["import type { AgentCandidateBundle } from '@tangle-network/agent-interface'\nimport { agentCandidateBundleSchema } from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue, omitTopLevelDigest } from './digest'\n\n/** Exact candidate wire shape before the runtime computes its canonical digest. */\nexport type AgentCandidateBundleInput = Omit<AgentCandidateBundle, 'digest'>\n\n/** Validate and content-address a candidate bundle before it crosses an approval boundary. */\nexport function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle {\n  const digest = canonicalCandidateDigest(input)\n  const parsed = agentCandidateBundleSchema.parse({ ...input, digest })\n  const parsedDigest = canonicalCandidateDigest(omitTopLevelDigest(parsed))\n  if (parsedDigest !== digest) {\n    throw new Error('candidate bundle changed while validating its canonical wire shape')\n  }\n  return immutableCandidateValue(parsed)\n}\n"],"mappings":";;;;AASA,SAAgB,yBAAyB,OAAwD;CAC/F,MAAM,SAASA,2BAAyB,KAAK;CAC7C,MAAM,SAAS,2BAA2B,MAAM;EAAE,GAAG;EAAO;CAAO,CAAC;CAEpE,IADqBA,2BAAyB,mBAAmB,MAAM,CACxD,MAAM,QACnB,MAAM,IAAI,MAAM,oEAAoE;CAEtF,OAAO,wBAAwB,MAAM;AACvC"}

package/dist/candidate-execution/index.d.ts

@@ -1,7 +1,6 @@
-import { $ as PreparedAgentCandidateLaunch, A as AgentCandidateMemoryPort, B as AgentCandidateProtectedRunCapture, C as AgentCandidateExecutorPort, D as AgentCandidateExecutorTaskOutcomeCapture, E as AgentCandidateExecutorStopRequest, F as AgentCandidateOutputPurpose, G as AgentCandidateWorkspacePort, H as AgentCandidateRunFinalization, I as AgentCandidateProtectedModelActivation, J as CanonicalCandidateDocument, K as CANDIDATE_TRACE_ENV, L as AgentCandidateProtectedModelReservation, M as AgentCandidateModelLimits, N as AgentCandidateModelPort, O as AgentCandidateExecutorWorkspaceFile, P as AgentCandidateOutputArtifactPort, Q as PreparedAgentCandidateKnowledge, R as AgentCandidateProtectedModelSettlement, S as AgentCandidateExecutorMemoryCapture, T as AgentCandidateExecutorRequest, U as AgentCandidateTaskExecution, V as AgentCandidateRepositoryPort, W as AgentCandidateVerificationPorts, X as PreparedAgentCandidateExecution, Y as PersistedTaskOutcomeEvidence, Z as PreparedAgentCandidateInstruction, _ as AgentCandidateBenchmarkGraderIdentity, a as captureAgentCandidateWorkspaceTreeToArtifacts, b as AgentCandidateExecutionPorts, c as verifyAgentCandidateWorkspaceTree, d as captureAgentCandidateWorkspaceFiles, et as PreparedAgentCandidateTrace, f as CaptureAgentCandidateWorkspaceOptions, g as AgentCandidateArtifactPort, h as createAgentCandidateWorkspacePort, i as captureAgentCandidateWorkspaceToArtifacts, it as AgentCandidateExecutionRoots, j as AgentCandidateMemoryResetResult, k as AgentCandidateExecutorWorkspaceInput, l as AgentCandidateWorkspaceArchiveLimits, m as captureAgentCandidateWorkspace, n as AgentCandidateWorkspaceTree, nt as VerifiedAgentCandidate, o as materializeAgentCandidateWorkspaceFromArtifacts, p as CreateAgentCandidateWorkspacePortOptions, q as CANDIDATE_TRACE_TAGS, r as CaptureAgentCandidateWorkspaceToArtifactsOptions, rt as VerifiedAgentCandidateTaskOutcome, s as verifyAgentCandidateWorkspaceArtifacts, t as AgentCandidateWorkspaceArtifactsOptions, tt as ResolvedAgentCandidateContainer, u as CapturedAgentCandidateWorkspace, v as AgentCandidateBenchmarkGraderPort, w as AgentCandidateExecutorProfileFile, x as AgentCandidateExecutorFinalCapture, y as AgentCandidateContainerPort, z as AgentCandidateProtectedModelSettlementCall } from "../workspace-streams-BZZds1Fw.js";
-import { A as AgentCandidateExecutionPhase, B as AgentCandidatePreparationEvidence, C as AgentCandidateExecutionClaim, D as AgentCandidateExecutionFailureClass, E as AgentCandidateExecutionCleanupHandles, F as AgentCandidateExecutionTerminalResult, I as AgentCandidateRetryRejection, L as InMemoryAgentCandidateExecutionClaimStore, M as AgentCandidateExecutionRecoveryEvidence, N as AgentCandidateExecutionStageResult, O as AgentCandidateExecutionFinishResult, P as AgentCandidateExecutionTerminalRecord, R as InMemoryAgentCandidateExecutionClaimStoreOptions, S as AgentCandidateExecutionAttemptRef, T as AgentCandidateExecutionClaimStore, _ as PrepareAgentCandidateExecutionOptions, a as AgentCandidateModelGrantSettleInput, b as executePreparedAgentCandidate, c as agentCandidateProfileAsAgentProfile, d as freezeGenericAgentCandidateProfile, f as omitUndefinedObjectFields, g as parseExactCandidateProfile, h as parseExactAgentProfileDiff, i as AgentCandidateModelGrantReserveInput, j as AgentCandidateExecutionPhaseResult, k as AgentCandidateExecutionLease, l as applyExactAgentProfileDiff, m as parseExactAgentProfile, n as AgentCandidateModelGrantClient, o as CreateProtectedAgentCandidateModelPortOptions, r as AgentCandidateModelGrantReservation, s as createProtectedAgentCandidateModelPort, t as AgentCandidateModelGrantActivateInput, u as assertCandidateProfileBinding, v as prepareAgentCandidateExecution, w as AgentCandidateExecutionClaimResult, x as AgentCandidateExecutionAttemptRecord, y as ExecutePreparedAgentCandidateOptions, z as candidateExecutionClaim } from "../protected-model-port-DGxQ8_YM.js";
-import { AgentCandidateArtifactRef, AgentCandidateBundle, AgentCandidateCapturedArtifact, AgentCandidateCodeDisabled, AgentCandidateCodeNoOp, AgentCandidateExecution, AgentCandidateGitHubRepository, AgentCandidateKnowledge, AgentCandidateMemoryPolicy, AgentCandidateProfile, AgentCandidateResolvedModel, AgentCandidateRunCell, AgentCandidateWorkspaceManifestMaterial, AgentCandidateWorkspaceSnapshotEvidence, AgentProfile, AgentProfileDiff, Sha256Digest } from "@tangle-network/agent-interface";
-import { TraceStore } from "@tangle-network/agent-eval";
+import { $ as VerifiedAgentCandidate, A as AgentCandidateMemoryResetResult, B as AgentCandidateRepositoryPort, C as AgentCandidateExecutorProfileFile, D as AgentCandidateExecutorWorkspaceFile, E as AgentCandidateExecutorTaskOutcomeCapture, F as AgentCandidateProtectedModelActivation, G as CanonicalCandidateDocument, H as AgentCandidateTaskExecution, I as AgentCandidateProtectedModelReservation, J as PreparedAgentCandidateInstruction, K as PersistedTaskOutcomeEvidence, L as AgentCandidateProtectedModelSettlement, M as AgentCandidateModelPort, N as AgentCandidateOutputArtifactPort, O as AgentCandidateExecutorWorkspaceInput, P as AgentCandidateOutputPurpose, Q as ResolvedAgentCandidateContainer, R as AgentCandidateProtectedModelSettlementCall, S as AgentCandidateExecutorPort, T as AgentCandidateExecutorStopRequest, U as AgentCandidateVerificationPorts, V as AgentCandidateRunFinalization, W as AgentCandidateWorkspacePort, X as PreparedAgentCandidateLaunch, Y as PreparedAgentCandidateKnowledge, Z as PreparedAgentCandidateTrace, _ as AgentCandidateBenchmarkGraderPort, a as captureAgentCandidateWorkspaceTreeToArtifacts, b as AgentCandidateExecutorFinalCapture, c as verifyAgentCandidateWorkspaceTree, d as captureAgentCandidateWorkspaceFiles, et as VerifiedAgentCandidateTaskOutcome, f as CaptureAgentCandidateWorkspaceOptions, g as AgentCandidateArtifactPort, h as createAgentCandidateWorkspacePort, i as captureAgentCandidateWorkspaceToArtifacts, j as AgentCandidateModelLimits, k as AgentCandidateMemoryPort, l as AgentCandidateWorkspaceArchiveLimits, m as captureAgentCandidateWorkspace, n as AgentCandidateWorkspaceTree, o as materializeAgentCandidateWorkspaceFromArtifacts, p as CreateAgentCandidateWorkspacePortOptions, q as PreparedAgentCandidateExecution, r as CaptureAgentCandidateWorkspaceToArtifactsOptions, s as verifyAgentCandidateWorkspaceArtifacts, t as AgentCandidateWorkspaceArtifactsOptions, tt as AgentCandidateExecutionRoots, u as CapturedAgentCandidateWorkspace, v as AgentCandidateContainerPort, w as AgentCandidateExecutorRequest, x as AgentCandidateExecutorMemoryCapture, y as AgentCandidateExecutionPorts, z as AgentCandidateProtectedRunCapture } from "../workspace-streams-BiS4ABah.js";
+import { A as AgentCandidateExecutionTerminalResult, C as AgentCandidateExecutionFinishResult, D as AgentCandidateExecutionRecoveryEvidence, E as AgentCandidateExecutionPhaseResult, M as AgentCandidatePreparationEvidence, O as AgentCandidateExecutionStageResult, S as AgentCandidateExecutionFailureClass, T as AgentCandidateExecutionPhase, _ as AgentCandidateExecutionAttemptRef, a as createProtectedAgentCandidateModelPort, b as AgentCandidateExecutionClaimStore, c as assertCandidateProfileBinding, d as parseExactAgentProfileDiff, g as AgentCandidateExecutionAttemptRecord, h as executePreparedAgentCandidate, i as CreateProtectedAgentCandidateModelPortOptions, j as AgentCandidateRetryRejection, k as AgentCandidateExecutionTerminalRecord, l as freezeGenericAgentCandidateProfile, m as ExecutePreparedAgentCandidateOptions, n as AgentCandidateModelGrantClient, o as agentCandidateProfileAsAgentProfile, p as prepareAgentCandidateExecution, r as AgentCandidateModelGrantReserveInput, s as applyExactAgentProfileDiff, t as AgentCandidateModelGrantActivateInput, v as AgentCandidateExecutionClaim, w as AgentCandidateExecutionLease, x as AgentCandidateExecutionCleanupHandles, y as AgentCandidateExecutionClaimResult } from "../protected-model-port-DVVh-hEk.js";
+import { AgentCandidateArtifactRef, AgentCandidateBundle, AgentCandidateCapturedArtifact, AgentCandidateCodeDisabled, AgentCandidateCodeNoOp, AgentCandidateExecution, AgentCandidateGitHubRepository, AgentCandidateKnowledge, AgentCandidateMemoryPolicy, AgentCandidateProfile, AgentCandidateResolvedModel, AgentCandidateWorkspaceManifestMaterial, AgentCandidateWorkspaceSnapshotEvidence, AgentProfile, AgentProfileDiff, Sha256Digest } from "@tangle-network/agent-interface";
 import { CodeSurface } from "@tangle-network/agent-eval/campaign";
 import { AgentEnvironmentProvider, AgentExactProcessResources } from "@tangle-network/agent-interface/environment-provider";
 //#region src/candidate-execution/artifacts.d.ts
@@ -35,24 +34,6 @@ interface WorkspaceScanOptions {
    */
   readonly portableTree?: boolean;
 }
-/**
- * Refuse a materialized workspace whose files, modes, or bytes are not the signed manifest.
- *
- * The scan streams, so the size of the largest file does not decide whether the check can run, and
- * the refusal names the one mismatch a caller can produce on its own: a capture and a verify that
- * disagree about `portableTree`.
- */
-declare function verifyMaterializedWorkspace(root: string, expected: AgentCandidateWorkspaceManifestMaterial, options?: Omit<WorkspaceScanOptions, 'limits'>): Promise<void>;
-/**
- * The canonical manifest of one materialized workspace, read without holding any file.
- *
- * Every file is digested by streaming, so the size of the largest file does not decide whether the
- * workspace can be described. `FileHandle.readFile` refuses anything above 2 GiB with
- * `ERR_FS_FILE_TOO_LARGE`, which made a workspace holding one such artifact impossible to verify
- * against a manifest it already matched. The digest is sha-256 over the same bytes either way, so
- * a manifest a buffered read produced is reproduced exactly.
- */
-declare function scanMaterializedWorkspaceManifest(root: string, options?: WorkspaceScanOptions): Promise<AgentCandidateWorkspaceManifestMaterial>;
 /**
  * Build the canonical manifest for files a caller already holds — the shape a remote executor
  * returns. Pass `portableTree` to record Git's two file modes instead of exact permission bits, and
@@ -161,26 +142,6 @@ interface ExactProcessCandidateExecutorOptions {
 /** Adapt one neutral exact-process provider to Runtime's trusted candidate boundary. */
 declare function exactProcessProviderAsCandidateExecutor(options: ExactProcessCandidateExecutorOptions): AgentCandidateExecutorPort;
 //#endregion
-//#region src/candidate-execution/knowledge.d.ts
-/** Environment variable containing the materialized candidate knowledge root. */
-declare const CANDIDATE_KNOWLEDGE_ROOT_ENV = "TANGLE_CANDIDATE_KNOWLEDGE_ROOT";
-/** Environment variable containing the materialized retrieval configuration path. */
-declare const CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV = "TANGLE_CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG";
-/** Deterministic, signed locations used by every candidate executor. */
-declare function candidateKnowledgeExecutionPaths(taskRoot: string, hasRetrievalConfig: boolean): {
-  root: string;
-  retrievalConfig?: string;
-};
-//#endregion
-//#region src/candidate-execution/output-artifacts.d.ts
-/** Persist evaluator evidence, read it back, and bind the returned locator to the exact bytes. */
-declare function persistCandidateOutputArtifact(port: AgentCandidateOutputArtifactPort, input: {
-  executionId: string;
-  purpose: AgentCandidateOutputPurpose;
-  bytes: Uint8Array;
-  signal?: AbortSignal;
-}): Promise<AgentCandidateArtifactRef>;
-//#endregion
 //#region src/candidate-execution/protected-model-grant.d.ts
 /** Reservation fields supplied by a caller before Runtime resolves the model. */
 type AgentCandidateModelGrantRunReservationInput = Omit<AgentCandidateModelGrantReserveInput, 'resolved'>;
@@ -220,37 +181,7 @@ interface RunProtectedAgentCandidateModelGrantResult<TResult> {
  */
 declare function runProtectedAgentCandidateModelGrant<TResult>(options: RunProtectedAgentCandidateModelGrantOptions<TResult>): Promise<RunProtectedAgentCandidateModelGrantResult<TResult>>;
 //#endregion
-//#region src/candidate-execution/recover.d.ts
-interface RecoverExpiredAgentCandidateOptions {
-  attempt: AgentCandidateExecutionAttemptRef;
-  claimStore: AgentCandidateExecutionClaimStore;
-  executor: AgentCandidateExecutorPort;
-  traceStore: TraceStore;
-  ports: Pick<AgentCandidateExecutionPorts, 'models' | 'memory'>;
-  outputArtifacts: AgentCandidateOutputArtifactPort;
-  cleanupTimeoutMs?: number;
-  /** Evaluator clock; must be the same clock used by the claim store. */
-  now?: () => number;
-}
-/** Close an expired crashed attempt from persisted non-secret handles, then record failure. */
-declare function recoverExpiredAgentCandidateExecution(options: RecoverExpiredAgentCandidateOptions): Promise<AgentCandidateExecutionFinishResult>;
-//#endregion
 //#region src/candidate-execution/verify.d.ts
-/** Surfaces admitted by Runtime's verifier before an environment adapter is selected. */
-declare const AGENT_CANDIDATE_EXECUTION_SUPPORT: Readonly<{
-  outcomes: readonly ["workspace", "output"];
-  code: readonly ["disabled", "no-op", "git-patch"];
-  memory: readonly ["disabled", "isolated"];
-  knowledge: true;
-  profile: Readonly<{
-    mcpTransports: readonly ["stdio"];
-    remoteMcp: false;
-    tools: false;
-    permissions: false;
-    modes: false;
-    confidential: false;
-  }>;
-}>;
 /** Verifies every digest, resource, workspace, and Git object in a candidate bundle. */
 declare function verifyAgentCandidateBundle(input: unknown, ports: AgentCandidateVerificationPorts): Promise<VerifiedAgentCandidate>;
 //#endregion
@@ -346,34 +277,6 @@ interface SeedWorkspaceTreeInput {
   /** Default `'tree-v1'`; decides only the digest this returns, never the bytes it writes. */
   readonly algorithm?: WorkspaceTreeAlgorithm;
 }
-/**
- * Describe one directory tree by content, streaming every file.
- *
- * The digest covers, for every entry in sorted order: its kind, its tree-relative path, its mode
- * under the selected algorithm, and then — for a file, its length and its own sha-256; for a kept
- * link, its target; for an excluded entry, the reason and the target. A file's content therefore
- * never enters the tree hash directly, which is what removes any in-memory size ceiling: the tree
- * hash consumes 32 bytes per file however large the file is.
- *
- * A hard-linked regular file is described like any other regular file. Its content is what the
- * digest is about, and a package manager that links a store into `node_modules` is ordinary
- * content, not a reason to refuse a workspace.
- */
-declare function describeWorkspaceTree(directory: string, options?: DescribeWorkspaceTreeOptions): Promise<WorkspaceTreeDescriptor>;
-/**
- * Seed a workspace from a directory, one entry at a time, and return the digest of what was
- * seeded.
- *
- * Nothing is packed: `cp` walks and copies file by file, so a multi-gigabyte seed costs one file
- * handle rather than one archive in memory. Existing destination entries are never overwritten —
- * a seed that could replace a file the workspace already holds would make the resulting tree
- * depend on the order two seeds ran in.
- *
- * Links are copied verbatim, exactly as they were written. Following them would copy bytes from
- * outside the seed into the workspace, which is the same rule {@link describeWorkspaceTree}
- * applies to the digest.
- */
-declare function seedWorkspaceTree(input: SeedWorkspaceTreeInput): Promise<WorkspaceTreeDescriptor>;
 //#endregion
-export { AGENT_CANDIDATE_EXECUTION_SUPPORT, type AgentCandidateArtifactPort, type AgentCandidateBenchmarkGraderIdentity, type AgentCandidateBenchmarkGraderPort, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, type AgentCandidateContainerPort, type AgentCandidateExecutionAttemptRecord, type AgentCandidateExecutionAttemptRef, type AgentCandidateExecutionClaim, type AgentCandidateExecutionClaimResult, type AgentCandidateExecutionClaimStore, type AgentCandidateExecutionCleanupHandles, type AgentCandidateExecutionFailureClass, type AgentCandidateExecutionFinishResult, type AgentCandidateExecutionLease, type AgentCandidateExecutionPhase, type AgentCandidateExecutionPhaseResult, type AgentCandidateExecutionPorts, type AgentCandidateExecutionRecoveryEvidence, type AgentCandidateExecutionRoots, type AgentCandidateExecutionStageResult, type AgentCandidateExecutionTerminalRecord, type AgentCandidateExecutionTerminalResult, type AgentCandidateExecutorFinalCapture, type AgentCandidateExecutorMemoryCapture, type AgentCandidateExecutorPort, type AgentCandidateExecutorProfileFile, type AgentCandidateExecutorRequest, type AgentCandidateExecutorStopRequest, type AgentCandidateExecutorTaskOutcomeCapture, type AgentCandidateExecutorWorkspaceFile, type AgentCandidateExecutorWorkspaceInput, type AgentCandidateMemoryPort, type AgentCandidateMemoryResetResult, type AgentCandidateModelGrantActivateInput, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReservation, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantRunReservationInput, type AgentCandidateModelGrantSettleInput, type AgentCandidateModelLimits, type AgentCandidateModelPort, type AgentCandidateOutputArtifactPort, type AgentCandidateOutputPurpose, type AgentCandidatePreparationEvidence, type AgentCandidateProfileSource, type AgentCandidateProtectedModelActivation, type AgentCandidateProtectedModelReservation, type AgentCandidateProtectedModelSettlement, type AgentCandidateProtectedModelSettlementCall, type AgentCandidateProtectedRunCapture, type AgentCandidateRepositoryPort, type AgentCandidateRetryRejection, type AgentCandidateRunFinalization, type AgentCandidateTaskExecution, type AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArchiveLimits, type AgentCandidateWorkspaceArtifactsOptions, type AgentCandidateWorkspacePort, type AgentCandidateWorkspaceSnapshotReferences, type AgentCandidateWorkspaceTree, type BuildAgentCandidateBundleInput, CANDIDATE_KNOWLEDGE_RETRIEVAL_CONFIG_ENV, CANDIDATE_KNOWLEDGE_ROOT_ENV, CANDIDATE_TRACE_ENV, CANDIDATE_TRACE_TAGS, type CanonicalCandidateDocument, type CaptureAgentCandidateWorkspaceOptions, type CaptureAgentCandidateWorkspaceToArtifactsOptions, type CaptureAgentWorkspaceSnapshotOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DescribeWorkspaceTreeOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, type ExecutePreparedAgentCandidateOptions, FileAgentCandidateExecutionClaimStore, type FileAgentCandidateExecutionClaimStoreOptions, InMemoryAgentCandidateExecutionClaimStore, type InMemoryAgentCandidateExecutionClaimStoreOptions, type MaterializeAgentWorkspaceSnapshotOptions, type PersistedTaskOutcomeEvidence, type PrepareAgentCandidateExecutionOptions, type PreparedAgentCandidateExecution, type PreparedAgentCandidateInstruction, type PreparedAgentCandidateKnowledge, type PreparedAgentCandidateLaunch, type PreparedAgentCandidateTrace, type ProtectedAgentCandidateModelGrantContext, type RecoverExpiredAgentCandidateOptions, type ResolvedAgentCandidateContainer, type RunProtectedAgentCandidateModelGrantOptions, type RunProtectedAgentCandidateModelGrantResult, type SeedWorkspaceTreeInput, type VerifiedAgentCandidate, type VerifiedAgentCandidateTaskOutcome, type WorkspaceScanLimits, type WorkspaceScanOptions, type WorkspaceTreeAlgorithm, type WorkspaceTreeDescriptor, type WorkspaceTreeEntryPolicy, type WorkspaceTreeExclusion, type WorkspaceTreeExclusionReason, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, buildAgentCandidateBundle, candidateExecutionClaim, candidateKnowledgeExecutionPaths, candidateWorkspaceManifest, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, captureAgentCandidateWorkspaceToArtifacts, captureAgentCandidateWorkspaceTreeToArtifacts, captureAgentWorkspaceSnapshot, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, describeWorkspaceTree, disposePreparedAgentCandidateExecution, exactProcessProviderAsCandidateExecutor, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, materializeAgentCandidateWorkspaceFromArtifacts, materializeAgentWorkspaceSnapshot, omitUndefinedObjectFields, parseExactAgentProfile, parseExactAgentProfileDiff, parseExactCandidateProfile, persistCandidateOutputArtifact, prepareAgentCandidateExecution, recoverExpiredAgentCandidateExecution, runProtectedAgentCandidateModelGrant, scanMaterializedWorkspaceManifest, sealAgentCandidateBundle, seedWorkspaceTree, verifyAgentCandidateBundle, verifyAgentCandidateWorkspaceArtifacts, verifyAgentCandidateWorkspaceTree, verifyMaterializedWorkspace };
+export { type AgentCandidateArtifactPort, type AgentCandidateBenchmarkGraderPort, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, type AgentCandidateContainerPort, type AgentCandidateExecutionAttemptRecord, type AgentCandidateExecutionAttemptRef, type AgentCandidateExecutionClaim, type AgentCandidateExecutionClaimResult, type AgentCandidateExecutionClaimStore, type AgentCandidateExecutionCleanupHandles, type AgentCandidateExecutionFailureClass, type AgentCandidateExecutionFinishResult, type AgentCandidateExecutionLease, type AgentCandidateExecutionPhase, type AgentCandidateExecutionPhaseResult, type AgentCandidateExecutionPorts, type AgentCandidateExecutionRecoveryEvidence, type AgentCandidateExecutionRoots, type AgentCandidateExecutionStageResult, type AgentCandidateExecutionTerminalRecord, type AgentCandidateExecutionTerminalResult, type AgentCandidateExecutorFinalCapture, type AgentCandidateExecutorMemoryCapture, type AgentCandidateExecutorPort, type AgentCandidateExecutorProfileFile, type AgentCandidateExecutorRequest, type AgentCandidateExecutorStopRequest, type AgentCandidateExecutorTaskOutcomeCapture, type AgentCandidateExecutorWorkspaceFile, type AgentCandidateExecutorWorkspaceInput, type AgentCandidateMemoryPort, type AgentCandidateMemoryResetResult, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantRunReservationInput, type AgentCandidateModelLimits, type AgentCandidateModelPort, type AgentCandidateOutputArtifactPort, type AgentCandidateOutputPurpose, type AgentCandidatePreparationEvidence, type AgentCandidateProfileSource, type AgentCandidateProtectedModelActivation, type AgentCandidateProtectedModelReservation, type AgentCandidateProtectedModelSettlement, type AgentCandidateProtectedModelSettlementCall, type AgentCandidateProtectedRunCapture, type AgentCandidateRepositoryPort, type AgentCandidateRetryRejection, type AgentCandidateRunFinalization, type AgentCandidateTaskExecution, type AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArtifactsOptions, type AgentCandidateWorkspacePort, type AgentCandidateWorkspaceSnapshotReferences, type AgentCandidateWorkspaceTree, type BuildAgentCandidateBundleInput, type CanonicalCandidateDocument, type CaptureAgentCandidateWorkspaceOptions, type CaptureAgentCandidateWorkspaceToArtifactsOptions, type CaptureAgentWorkspaceSnapshotOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DescribeWorkspaceTreeOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, type ExecutePreparedAgentCandidateOptions, FileAgentCandidateExecutionClaimStore, type FileAgentCandidateExecutionClaimStoreOptions, type MaterializeAgentWorkspaceSnapshotOptions, type PersistedTaskOutcomeEvidence, type PreparedAgentCandidateExecution, type PreparedAgentCandidateInstruction, type PreparedAgentCandidateKnowledge, type PreparedAgentCandidateLaunch, type PreparedAgentCandidateTrace, type ProtectedAgentCandidateModelGrantContext, type ResolvedAgentCandidateContainer, type RunProtectedAgentCandidateModelGrantOptions, type RunProtectedAgentCandidateModelGrantResult, type SeedWorkspaceTreeInput, type VerifiedAgentCandidate, type VerifiedAgentCandidateTaskOutcome, type WorkspaceScanLimits, type WorkspaceScanOptions, type WorkspaceTreeAlgorithm, type WorkspaceTreeDescriptor, type WorkspaceTreeEntryPolicy, type WorkspaceTreeExclusion, type WorkspaceTreeExclusionReason, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, buildAgentCandidateBundle, candidateWorkspaceManifest, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, captureAgentCandidateWorkspaceToArtifacts, captureAgentCandidateWorkspaceTreeToArtifacts, captureAgentWorkspaceSnapshot, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, disposePreparedAgentCandidateExecution, exactProcessProviderAsCandidateExecutor, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, materializeAgentCandidateWorkspaceFromArtifacts, materializeAgentWorkspaceSnapshot, parseExactAgentProfileDiff, prepareAgentCandidateExecution, runProtectedAgentCandidateModelGrant, sealAgentCandidateBundle, verifyAgentCandidateBundle, verifyAgentCandidateWorkspaceArtifacts, verifyAgentCandidateWorkspaceTree };
 //# sourceMappingURL=index.d.ts.map