@tangle-network/agent-runtime 0.349.0 → 0.350.2

package/dist/{runtime-hooks-tXpAarhW.js → runtime-hooks-CsW2pfFk.js}

@@ -1,4 +1,4 @@
-//#region src/runtime-hooks.ts
+// src/runtime-hooks.ts
 /** Identity helper that types a {@link RuntimeHooks} literal so the fields are inferred. */
 function defineRuntimeHooks(hooks) {
 	return hooks;
@@ -119,7 +119,6 @@ function isThenable(value) {
 function toError(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
-//#endregion
 export { withPursuitContext as a, notifyRuntimeHookEvent as i, defineRuntimeHooks as n, notifyRuntimeDecisionPoint as r, composeRuntimeHooks as t };
 
-//# sourceMappingURL=runtime-hooks-tXpAarhW.js.map
+//# sourceMappingURL=runtime-hooks-CsW2pfFk.js.map

package/dist/{runtime-hooks-tXpAarhW.js.map → runtime-hooks-CsW2pfFk.js.map}

@@ -1 +1 @@
-{"version":3,"file":"runtime-hooks-tXpAarhW.js","names":[],"sources":["../src/runtime-hooks.ts"],"sourcesContent":["/**\n *\n * Runtime hook contracts. Hooks are execution-scoped observers, not part of an\n * `AgentProfile`: profiles stay portable agent recipes; hooks attach to the\n * loop or product harness that is running the profile.\n *\n * A `pursuitId` is deliberately orthogonal to `runId`: a pursuit can span many\n * resumed/retried/forked runs while every event remains attributable to the\n * durable objective that caused it. The observer plane is outside the agent\n * environment and must never be required for agent correctness.\n *\n * @experimental\n */\n\nexport type RuntimeHookPhase = 'before' | 'after' | 'error' | 'event'\n\nexport type RuntimeHookTarget =\n  | 'agent.run'\n  | 'agent.turn'\n  | 'agent.tool_call'\n  | 'agent.spawn'\n  | 'agent.child'\n  | 'agent.plan'\n  | 'agent.decision'\n  | (string & {})\n\nexport type RuntimeDecisionKind =\n  | 'continue'\n  | 'verify'\n  | 'ask'\n  | 'retry'\n  | 'stop'\n  | 'memory-write'\n  | 'memory-read'\n  | 'tool-select'\n  | 'skill-select'\n  | 'workflow-select'\n  | 'surface-promote'\n  | (string & {})\n\nexport interface RuntimeHookEvent<Payload = unknown> {\n  id: string\n  /** Stable identity for the long-lived objective. One pursuit may contain many runs. */\n  pursuitId?: string\n  runId: string\n  scenarioId?: string\n  target: RuntimeHookTarget\n  phase: RuntimeHookPhase\n  timestamp: number\n  stepIndex?: number\n  parentId?: string\n  payload?: Payload\n  metadata?: Record<string, unknown>\n}\n\nexport interface RuntimeHookContext {\n  signal?: AbortSignal\n}\n\nexport interface RuntimeDecisionEvidenceRef {\n  source: string\n  id: string\n  detail?: string\n  metadata?: Record<string, unknown>\n}\n\nexport interface RuntimeDecisionPoint {\n  id: string\n  /** Stable identity for the long-lived objective. One pursuit may contain many runs. */\n  pursuitId?: string\n  runId: string\n  scenarioId?: string\n  stepIndex: number\n  kind: RuntimeDecisionKind\n  candidateActions: string[]\n  context?: string\n  evidence: RuntimeDecisionEvidenceRef[]\n  metadata?: Record<string, unknown>\n}\n\nexport interface RuntimeHookErrorContext {\n  hook: 'onEvent' | 'onDecisionPoint'\n  eventId?: string\n  target?: RuntimeHookTarget\n  phase?: RuntimeHookPhase\n  decisionId?: string\n  decisionKind?: RuntimeDecisionKind\n}\n\n/**\n * The observation seam attached to a running loop (never to the portable genome).\n * Implement the optional hooks to receive lifecycle events, semantic decision points,\n * and hook errors. Author with {@link defineRuntimeHooks} for inference, and attach N\n * observers at once with {@link composeRuntimeHooks} — there is ONE event stream, not a\n * callback-prop zoo.\n */\nexport interface RuntimeHooks {\n  /**\n   * General before/after/event hook. Use this for telemetry, memory capture,\n   * policy wrapping, child lifecycle observers, or product-specific extension\n   * points.\n   */\n  onEvent?: (event: RuntimeHookEvent, context: RuntimeHookContext) => void | Promise<void>\n  /**\n   * Semantic decision hook. Belief-state evaluation consumes this, but runtime\n   * code should keep emitting ordinary lifecycle events as the base layer.\n   */\n  onDecisionPoint?: (\n    point: RuntimeDecisionPoint,\n    context: RuntimeHookContext,\n  ) => void | Promise<void>\n  onHookError?: (error: Error, context: RuntimeHookErrorContext) => void | Promise<void>\n}\n\n/** Identity helper that types a {@link RuntimeHooks} literal so the fields are inferred. */\nexport function defineRuntimeHooks(hooks: RuntimeHooks): RuntimeHooks {\n  return hooks\n}\n\n/**\n * Attach a stable pursuit identity to the entire observer stream without changing\n * agent code or teaching individual runtimes about pursuits. Because recursive Scope\n * execution already inherits one RuntimeHooks instance, this wrapper automatically\n * covers descendants, nested drivers, and resumed execution that reuses the wrapper.\n *\n * Existing matching pursuit ids are preserved. A conflicting id fails closed: silently\n * rewriting attribution would make the meta-observer untrustworthy.\n */\nexport function withPursuitContext(pursuitId: string, hooks: RuntimeHooks): RuntimeHooks {\n  const stableId = pursuitId.trim()\n  if (stableId.length === 0) throw new TypeError('withPursuitContext: pursuitId must be non-empty')\n\n  const assertAndStamp = <T extends RuntimeHookEvent | RuntimeDecisionPoint>(value: T): T => {\n    if (value.pursuitId !== undefined && value.pursuitId !== stableId) {\n      throw new Error(\n        `withPursuitContext: observer identity conflict (${value.pursuitId} !== ${stableId})`,\n      )\n    }\n    if (value.pursuitId === stableId) return value\n    return { ...value, pursuitId: stableId }\n  }\n\n  return {\n    onEvent: hooks.onEvent\n      ? (event, context) => hooks.onEvent?.(assertAndStamp(event), context)\n      : undefined,\n    onDecisionPoint: hooks.onDecisionPoint\n      ? (point, context) => hooks.onDecisionPoint?.(assertAndStamp(point), context)\n      : undefined,\n    onHookError: hooks.onHookError,\n  }\n}\n\n/**\n * Merge several {@link RuntimeHooks} into one. Falsy entries are dropped (so you can\n * pass `flag && hooks`), and every observer's `onEvent`/`onDecisionPoint` fires for each\n * event. Use this to attach N observers to a loop instead of a second event bus.\n */\nexport function composeRuntimeHooks(\n  ...entries: Array<RuntimeHooks | undefined | null | false>\n): RuntimeHooks {\n  const hooks = entries.filter((entry): entry is RuntimeHooks => !!entry)\n  return {\n    onEvent: hooks.some((hook) => hook.onEvent)\n      ? (event, context) => {\n          const pending: Promise<unknown>[] = []\n          for (const hook of hooks) {\n            const result = hook.onEvent?.(event, context)\n            if (isThenable(result)) pending.push(Promise.resolve(result))\n          }\n          if (pending.length > 0) return Promise.all(pending).then(() => undefined)\n          return undefined\n        }\n      : undefined,\n    onDecisionPoint: hooks.some((hook) => hook.onDecisionPoint)\n      ? (point, context) => {\n          const pending: Promise<unknown>[] = []\n          for (const hook of hooks) {\n            const result = hook.onDecisionPoint?.(point, context)\n            if (isThenable(result)) pending.push(Promise.resolve(result))\n          }\n          if (pending.length > 0) return Promise.all(pending).then(() => undefined)\n          return undefined\n        }\n      : undefined,\n    onHookError: hooks.some((hook) => hook.onHookError)\n      ? (error, context) => {\n          const pending: Promise<unknown>[] = []\n          for (const hook of hooks) {\n            const result = hook.onHookError?.(error, context)\n            if (isThenable(result)) pending.push(Promise.resolve(result))\n          }\n          if (pending.length > 0) return Promise.all(pending).then(() => undefined)\n          return undefined\n        }\n      : undefined,\n  }\n}\n\n/** Fire `hooks.onEvent`, swallowing sync throws and surfacing async failures to `onError`. */\nexport function notifyRuntimeHookEvent(\n  hooks: RuntimeHooks | undefined,\n  event: RuntimeHookEvent,\n  context: RuntimeHookContext = {},\n): void {\n  const onEvent = hooks?.onEvent\n  if (!onEvent) return\n\n  try {\n    const result = onEvent(event, context)\n    if (isThenable(result)) {\n      void result.catch((error) => {\n        notifyRuntimeHookError(hooks, toError(error), {\n          hook: 'onEvent',\n          eventId: event.id,\n          target: event.target,\n          phase: event.phase,\n        })\n      })\n    }\n  } catch (error) {\n    notifyRuntimeHookError(hooks, toError(error), {\n      hook: 'onEvent',\n      eventId: event.id,\n      target: event.target,\n      phase: event.phase,\n    })\n  }\n}\n\n/** Fire `hooks.onDecisionPoint`, swallowing sync throws and surfacing async failures to `onError`. */\nexport function notifyRuntimeDecisionPoint(\n  hooks: RuntimeHooks | undefined,\n  point: RuntimeDecisionPoint,\n  context: RuntimeHookContext = {},\n): void {\n  const onDecisionPoint = hooks?.onDecisionPoint\n  if (!onDecisionPoint) return\n\n  try {\n    const result = onDecisionPoint(point, context)\n    if (isThenable(result)) {\n      void result.catch((error) => {\n        notifyRuntimeHookError(hooks, toError(error), {\n          hook: 'onDecisionPoint',\n          decisionId: point.id,\n          decisionKind: point.kind,\n        })\n      })\n    }\n  } catch (error) {\n    notifyRuntimeHookError(hooks, toError(error), {\n      hook: 'onDecisionPoint',\n      decisionId: point.id,\n      decisionKind: point.kind,\n    })\n  }\n}\n\nfunction notifyRuntimeHookError(\n  hooks: RuntimeHooks | undefined,\n  error: Error,\n  context: RuntimeHookErrorContext,\n): void {\n  try {\n    const result = hooks?.onHookError?.(error, context)\n    if (isThenable(result)) void result.catch(() => undefined)\n  } catch {\n    // Hook errors must never become agent-loop errors.\n  }\n}\n\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'then' in value &&\n    typeof (value as { then?: unknown }).then === 'function'\n  )\n}\n\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error))\n}\n"],"mappings":";;AAmHA,SAAgB,mBAAmB,OAAmC;CACpE,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,mBAAmB,WAAmB,OAAmC;CACvF,MAAM,WAAW,UAAU,KAAK;CAChC,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,UAAU,iDAAiD;CAEhG,MAAM,kBAAqE,UAAgB;EACzF,IAAI,MAAM,cAAc,KAAA,KAAa,MAAM,cAAc,UACvD,MAAM,IAAI,MACR,mDAAmD,MAAM,UAAU,OAAO,SAAS,EACrF;EAEF,IAAI,MAAM,cAAc,UAAU,OAAO;EACzC,OAAO;GAAE,GAAG;GAAO,WAAW;EAAS;CACzC;CAEA,OAAO;EACL,SAAS,MAAM,WACV,OAAO,YAAY,MAAM,UAAU,eAAe,KAAK,GAAG,OAAO,IAClE,KAAA;EACJ,iBAAiB,MAAM,mBAClB,OAAO,YAAY,MAAM,kBAAkB,eAAe,KAAK,GAAG,OAAO,IAC1E,KAAA;EACJ,aAAa,MAAM;CACrB;AACF;;;;;;AAOA,SAAgB,oBACd,GAAG,SACW;CACd,MAAM,QAAQ,QAAQ,QAAQ,UAAiC,CAAC,CAAC,KAAK;CACtE,OAAO;EACL,SAAS,MAAM,MAAM,SAAS,KAAK,OAAO,KACrC,OAAO,YAAY;GAClB,MAAM,UAA8B,CAAC;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,SAAS,KAAK,UAAU,OAAO,OAAO;IAC5C,IAAI,WAAW,MAAM,GAAG,QAAQ,KAAK,QAAQ,QAAQ,MAAM,CAAC;GAC9D;GACA,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS;EAE1E,IACA,KAAA;EACJ,iBAAiB,MAAM,MAAM,SAAS,KAAK,eAAe,KACrD,OAAO,YAAY;GAClB,MAAM,UAA8B,CAAC;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,SAAS,KAAK,kBAAkB,OAAO,OAAO;IACpD,IAAI,WAAW,MAAM,GAAG,QAAQ,KAAK,QAAQ,QAAQ,MAAM,CAAC;GAC9D;GACA,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS;EAE1E,IACA,KAAA;EACJ,aAAa,MAAM,MAAM,SAAS,KAAK,WAAW,KAC7C,OAAO,YAAY;GAClB,MAAM,UAA8B,CAAC;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,SAAS,KAAK,cAAc,OAAO,OAAO;IAChD,IAAI,WAAW,MAAM,GAAG,QAAQ,KAAK,QAAQ,QAAQ,MAAM,CAAC;GAC9D;GACA,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS;EAE1E,IACA,KAAA;CACN;AACF;;AAGA,SAAgB,uBACd,OACA,OACA,UAA8B,CAAC,GACzB;CACN,MAAM,UAAU,OAAO;CACvB,IAAI,CAAC,SAAS;CAEd,IAAI;EACF,MAAM,SAAS,QAAQ,OAAO,OAAO;EACrC,IAAI,WAAW,MAAM,GACnB,OAAY,OAAO,UAAU;GAC3B,uBAAuB,OAAO,QAAQ,KAAK,GAAG;IAC5C,MAAM;IACN,SAAS,MAAM;IACf,QAAQ,MAAM;IACd,OAAO,MAAM;GACf,CAAC;EACH,CAAC;CAEL,SAAS,OAAO;EACd,uBAAuB,OAAO,QAAQ,KAAK,GAAG;GAC5C,MAAM;GACN,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,OAAO,MAAM;EACf,CAAC;CACH;AACF;;AAGA,SAAgB,2BACd,OACA,OACA,UAA8B,CAAC,GACzB;CACN,MAAM,kBAAkB,OAAO;CAC/B,IAAI,CAAC,iBAAiB;CAEtB,IAAI;EACF,MAAM,SAAS,gBAAgB,OAAO,OAAO;EAC7C,IAAI,WAAW,MAAM,GACnB,OAAY,OAAO,UAAU;GAC3B,uBAAuB,OAAO,QAAQ,KAAK,GAAG;IAC5C,MAAM;IACN,YAAY,MAAM;IAClB,cAAc,MAAM;GACtB,CAAC;EACH,CAAC;CAEL,SAAS,OAAO;EACd,uBAAuB,OAAO,QAAQ,KAAK,GAAG;GAC5C,MAAM;GACN,YAAY,MAAM;GAClB,cAAc,MAAM;EACtB,CAAC;CACH;AACF;AAEA,SAAS,uBACP,OACA,OACA,SACM;CACN,IAAI;EACF,MAAM,SAAS,OAAO,cAAc,OAAO,OAAO;EAClD,IAAI,WAAW,MAAM,GAAG,OAAY,YAAY,KAAA,CAAS;CAC3D,QAAQ,CAER;AACF;AAEA,SAAS,WAAW,OAA+C;CACjE,OACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAQ,MAA6B,SAAS;AAElD;AAEA,SAAS,QAAQ,OAAuB;CACtC,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE"}
+{"version":3,"file":"runtime-hooks-CsW2pfFk.js","names":[],"sources":["../src/runtime-hooks.ts"],"sourcesContent":["/**\n *\n * Runtime hook contracts. Hooks are execution-scoped observers, not part of an\n * `AgentProfile`: profiles stay portable agent recipes; hooks attach to the\n * loop or product harness that is running the profile.\n *\n * A `pursuitId` is deliberately orthogonal to `runId`: a pursuit can span many\n * resumed/retried/forked runs while every event remains attributable to the\n * durable objective that caused it. The observer plane is outside the agent\n * environment and must never be required for agent correctness.\n *\n * @experimental\n */\n\nexport type RuntimeHookPhase = 'before' | 'after' | 'error' | 'event'\n\nexport type RuntimeHookTarget =\n  | 'agent.run'\n  | 'agent.turn'\n  | 'agent.tool_call'\n  | 'agent.spawn'\n  | 'agent.child'\n  | 'agent.plan'\n  | 'agent.decision'\n  | (string & {})\n\nexport type RuntimeDecisionKind =\n  | 'continue'\n  | 'verify'\n  | 'ask'\n  | 'retry'\n  | 'stop'\n  | 'memory-write'\n  | 'memory-read'\n  | 'tool-select'\n  | 'skill-select'\n  | 'workflow-select'\n  | 'surface-promote'\n  | (string & {})\n\nexport interface RuntimeHookEvent<Payload = unknown> {\n  id: string\n  /** Stable identity for the long-lived objective. One pursuit may contain many runs. */\n  pursuitId?: string\n  runId: string\n  scenarioId?: string\n  target: RuntimeHookTarget\n  phase: RuntimeHookPhase\n  timestamp: number\n  stepIndex?: number\n  parentId?: string\n  payload?: Payload\n  metadata?: Record<string, unknown>\n}\n\nexport interface RuntimeHookContext {\n  signal?: AbortSignal\n}\n\nexport interface RuntimeDecisionEvidenceRef {\n  source: string\n  id: string\n  detail?: string\n  metadata?: Record<string, unknown>\n}\n\nexport interface RuntimeDecisionPoint {\n  id: string\n  /** Stable identity for the long-lived objective. One pursuit may contain many runs. */\n  pursuitId?: string\n  runId: string\n  scenarioId?: string\n  stepIndex: number\n  kind: RuntimeDecisionKind\n  candidateActions: string[]\n  context?: string\n  evidence: RuntimeDecisionEvidenceRef[]\n  metadata?: Record<string, unknown>\n}\n\nexport interface RuntimeHookErrorContext {\n  hook: 'onEvent' | 'onDecisionPoint'\n  eventId?: string\n  target?: RuntimeHookTarget\n  phase?: RuntimeHookPhase\n  decisionId?: string\n  decisionKind?: RuntimeDecisionKind\n}\n\n/**\n * The observation seam attached to a running loop (never to the portable genome).\n * Implement the optional hooks to receive lifecycle events, semantic decision points,\n * and hook errors. Author with {@link defineRuntimeHooks} for inference, and attach N\n * observers at once with {@link composeRuntimeHooks} — there is ONE event stream, not a\n * callback-prop zoo.\n */\nexport interface RuntimeHooks {\n  /**\n   * General before/after/event hook. Use this for telemetry, memory capture,\n   * policy wrapping, child lifecycle observers, or product-specific extension\n   * points.\n   */\n  onEvent?: (event: RuntimeHookEvent, context: RuntimeHookContext) => void | Promise<void>\n  /**\n   * Semantic decision hook. Belief-state evaluation consumes this, but runtime\n   * code should keep emitting ordinary lifecycle events as the base layer.\n   */\n  onDecisionPoint?: (\n    point: RuntimeDecisionPoint,\n    context: RuntimeHookContext,\n  ) => void | Promise<void>\n  onHookError?: (error: Error, context: RuntimeHookErrorContext) => void | Promise<void>\n}\n\n/** Identity helper that types a {@link RuntimeHooks} literal so the fields are inferred. */\nexport function defineRuntimeHooks(hooks: RuntimeHooks): RuntimeHooks {\n  return hooks\n}\n\n/**\n * Attach a stable pursuit identity to the entire observer stream without changing\n * agent code or teaching individual runtimes about pursuits. Because recursive Scope\n * execution already inherits one RuntimeHooks instance, this wrapper automatically\n * covers descendants, nested drivers, and resumed execution that reuses the wrapper.\n *\n * Existing matching pursuit ids are preserved. A conflicting id fails closed: silently\n * rewriting attribution would make the meta-observer untrustworthy.\n */\nexport function withPursuitContext(pursuitId: string, hooks: RuntimeHooks): RuntimeHooks {\n  const stableId = pursuitId.trim()\n  if (stableId.length === 0) throw new TypeError('withPursuitContext: pursuitId must be non-empty')\n\n  const assertAndStamp = <T extends RuntimeHookEvent | RuntimeDecisionPoint>(value: T): T => {\n    if (value.pursuitId !== undefined && value.pursuitId !== stableId) {\n      throw new Error(\n        `withPursuitContext: observer identity conflict (${value.pursuitId} !== ${stableId})`,\n      )\n    }\n    if (value.pursuitId === stableId) return value\n    return { ...value, pursuitId: stableId }\n  }\n\n  return {\n    onEvent: hooks.onEvent\n      ? (event, context) => hooks.onEvent?.(assertAndStamp(event), context)\n      : undefined,\n    onDecisionPoint: hooks.onDecisionPoint\n      ? (point, context) => hooks.onDecisionPoint?.(assertAndStamp(point), context)\n      : undefined,\n    onHookError: hooks.onHookError,\n  }\n}\n\n/**\n * Merge several {@link RuntimeHooks} into one. Falsy entries are dropped (so you can\n * pass `flag && hooks`), and every observer's `onEvent`/`onDecisionPoint` fires for each\n * event. Use this to attach N observers to a loop instead of a second event bus.\n */\nexport function composeRuntimeHooks(\n  ...entries: Array<RuntimeHooks | undefined | null | false>\n): RuntimeHooks {\n  const hooks = entries.filter((entry): entry is RuntimeHooks => !!entry)\n  return {\n    onEvent: hooks.some((hook) => hook.onEvent)\n      ? (event, context) => {\n          const pending: Promise<unknown>[] = []\n          for (const hook of hooks) {\n            const result = hook.onEvent?.(event, context)\n            if (isThenable(result)) pending.push(Promise.resolve(result))\n          }\n          if (pending.length > 0) return Promise.all(pending).then(() => undefined)\n          return undefined\n        }\n      : undefined,\n    onDecisionPoint: hooks.some((hook) => hook.onDecisionPoint)\n      ? (point, context) => {\n          const pending: Promise<unknown>[] = []\n          for (const hook of hooks) {\n            const result = hook.onDecisionPoint?.(point, context)\n            if (isThenable(result)) pending.push(Promise.resolve(result))\n          }\n          if (pending.length > 0) return Promise.all(pending).then(() => undefined)\n          return undefined\n        }\n      : undefined,\n    onHookError: hooks.some((hook) => hook.onHookError)\n      ? (error, context) => {\n          const pending: Promise<unknown>[] = []\n          for (const hook of hooks) {\n            const result = hook.onHookError?.(error, context)\n            if (isThenable(result)) pending.push(Promise.resolve(result))\n          }\n          if (pending.length > 0) return Promise.all(pending).then(() => undefined)\n          return undefined\n        }\n      : undefined,\n  }\n}\n\n/** Fire `hooks.onEvent`, swallowing sync throws and surfacing async failures to `onError`. */\nexport function notifyRuntimeHookEvent(\n  hooks: RuntimeHooks | undefined,\n  event: RuntimeHookEvent,\n  context: RuntimeHookContext = {},\n): void {\n  const onEvent = hooks?.onEvent\n  if (!onEvent) return\n\n  try {\n    const result = onEvent(event, context)\n    if (isThenable(result)) {\n      void result.catch((error) => {\n        notifyRuntimeHookError(hooks, toError(error), {\n          hook: 'onEvent',\n          eventId: event.id,\n          target: event.target,\n          phase: event.phase,\n        })\n      })\n    }\n  } catch (error) {\n    notifyRuntimeHookError(hooks, toError(error), {\n      hook: 'onEvent',\n      eventId: event.id,\n      target: event.target,\n      phase: event.phase,\n    })\n  }\n}\n\n/** Fire `hooks.onDecisionPoint`, swallowing sync throws and surfacing async failures to `onError`. */\nexport function notifyRuntimeDecisionPoint(\n  hooks: RuntimeHooks | undefined,\n  point: RuntimeDecisionPoint,\n  context: RuntimeHookContext = {},\n): void {\n  const onDecisionPoint = hooks?.onDecisionPoint\n  if (!onDecisionPoint) return\n\n  try {\n    const result = onDecisionPoint(point, context)\n    if (isThenable(result)) {\n      void result.catch((error) => {\n        notifyRuntimeHookError(hooks, toError(error), {\n          hook: 'onDecisionPoint',\n          decisionId: point.id,\n          decisionKind: point.kind,\n        })\n      })\n    }\n  } catch (error) {\n    notifyRuntimeHookError(hooks, toError(error), {\n      hook: 'onDecisionPoint',\n      decisionId: point.id,\n      decisionKind: point.kind,\n    })\n  }\n}\n\nfunction notifyRuntimeHookError(\n  hooks: RuntimeHooks | undefined,\n  error: Error,\n  context: RuntimeHookErrorContext,\n): void {\n  try {\n    const result = hooks?.onHookError?.(error, context)\n    if (isThenable(result)) void result.catch(() => undefined)\n  } catch {\n    // Hook errors must never become agent-loop errors.\n  }\n}\n\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'then' in value &&\n    typeof (value as { then?: unknown }).then === 'function'\n  )\n}\n\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error))\n}\n"],"mappings":";;AAmHA,SAAgB,mBAAmB,OAAmC;CACpE,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,mBAAmB,WAAmB,OAAmC;CACvF,MAAM,WAAW,UAAU,KAAK;CAChC,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,UAAU,iDAAiD;CAEhG,MAAM,kBAAqE,UAAgB;EACzF,IAAI,MAAM,cAAc,KAAA,KAAa,MAAM,cAAc,UACvD,MAAM,IAAI,MACR,mDAAmD,MAAM,UAAU,OAAO,SAAS,EACrF;EAEF,IAAI,MAAM,cAAc,UAAU,OAAO;EACzC,OAAO;GAAE,GAAG;GAAO,WAAW;EAAS;CACzC;CAEA,OAAO;EACL,SAAS,MAAM,WACV,OAAO,YAAY,MAAM,UAAU,eAAe,KAAK,GAAG,OAAO,IAClE,KAAA;EACJ,iBAAiB,MAAM,mBAClB,OAAO,YAAY,MAAM,kBAAkB,eAAe,KAAK,GAAG,OAAO,IAC1E,KAAA;EACJ,aAAa,MAAM;CACrB;AACF;;;;;;AAOA,SAAgB,oBACd,GAAG,SACW;CACd,MAAM,QAAQ,QAAQ,QAAQ,UAAiC,CAAC,CAAC,KAAK;CACtE,OAAO;EACL,SAAS,MAAM,MAAM,SAAS,KAAK,OAAO,KACrC,OAAO,YAAY;GAClB,MAAM,UAA8B,CAAC;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,SAAS,KAAK,UAAU,OAAO,OAAO;IAC5C,IAAI,WAAW,MAAM,GAAG,QAAQ,KAAK,QAAQ,QAAQ,MAAM,CAAC;GAC9D;GACA,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS;EAE1E,IACA,KAAA;EACJ,iBAAiB,MAAM,MAAM,SAAS,KAAK,eAAe,KACrD,OAAO,YAAY;GAClB,MAAM,UAA8B,CAAC;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,SAAS,KAAK,kBAAkB,OAAO,OAAO;IACpD,IAAI,WAAW,MAAM,GAAG,QAAQ,KAAK,QAAQ,QAAQ,MAAM,CAAC;GAC9D;GACA,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS;EAE1E,IACA,KAAA;EACJ,aAAa,MAAM,MAAM,SAAS,KAAK,WAAW,KAC7C,OAAO,YAAY;GAClB,MAAM,UAA8B,CAAC;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,SAAS,KAAK,cAAc,OAAO,OAAO;IAChD,IAAI,WAAW,MAAM,GAAG,QAAQ,KAAK,QAAQ,QAAQ,MAAM,CAAC;GAC9D;GACA,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS;EAE1E,IACA,KAAA;CACN;AACF;;AAGA,SAAgB,uBACd,OACA,OACA,UAA8B,CAAC,GACzB;CACN,MAAM,UAAU,OAAO;CACvB,IAAI,CAAC,SAAS;CAEd,IAAI;EACF,MAAM,SAAS,QAAQ,OAAO,OAAO;EACrC,IAAI,WAAW,MAAM,GACnB,OAAY,OAAO,UAAU;GAC3B,uBAAuB,OAAO,QAAQ,KAAK,GAAG;IAC5C,MAAM;IACN,SAAS,MAAM;IACf,QAAQ,MAAM;IACd,OAAO,MAAM;GACf,CAAC;EACH,CAAC;CAEL,SAAS,OAAO;EACd,uBAAuB,OAAO,QAAQ,KAAK,GAAG;GAC5C,MAAM;GACN,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,OAAO,MAAM;EACf,CAAC;CACH;AACF;;AAGA,SAAgB,2BACd,OACA,OACA,UAA8B,CAAC,GACzB;CACN,MAAM,kBAAkB,OAAO;CAC/B,IAAI,CAAC,iBAAiB;CAEtB,IAAI;EACF,MAAM,SAAS,gBAAgB,OAAO,OAAO;EAC7C,IAAI,WAAW,MAAM,GACnB,OAAY,OAAO,UAAU;GAC3B,uBAAuB,OAAO,QAAQ,KAAK,GAAG;IAC5C,MAAM;IACN,YAAY,MAAM;IAClB,cAAc,MAAM;GACtB,CAAC;EACH,CAAC;CAEL,SAAS,OAAO;EACd,uBAAuB,OAAO,QAAQ,KAAK,GAAG;GAC5C,MAAM;GACN,YAAY,MAAM;GAClB,cAAc,MAAM;EACtB,CAAC;CACH;AACF;AAEA,SAAS,uBACP,OACA,OACA,SACM;CACN,IAAI;EACF,MAAM,SAAS,OAAO,cAAc,OAAO,OAAO;EAClD,IAAI,WAAW,MAAM,GAAG,OAAY,YAAY,KAAA,CAAS;CAC3D,QAAQ,CAER;AACF;AAEA,SAAS,WAAW,OAA+C;CACjE,OACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAQ,MAA6B,SAAS;AAElD;AAEA,SAAS,QAAQ,OAAuB;CACtC,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE"}

package/dist/{runtime-hooks-nsqxSUFL.d.ts → runtime-hooks-ZQqPw-0g.d.ts}

@@ -1,4 +1,3 @@
-//#region src/runtime-hooks.d.ts
 /**
  *
  * Runtime hook contracts. Hooks are execution-scoped observers, not part of an
@@ -88,6 +87,5 @@ declare function defineRuntimeHooks(hooks: RuntimeHooks): RuntimeHooks;
  * event. Use this to attach N observers to a loop instead of a second event bus.
  */
 declare function composeRuntimeHooks(...entries: Array<RuntimeHooks | undefined | null | false>): RuntimeHooks;
-//#endregion
 export { RuntimeHookErrorContext as a, RuntimeHookTarget as c, defineRuntimeHooks as d, RuntimeHookContext as i, RuntimeHooks as l, RuntimeDecisionKind as n, RuntimeHookEvent as o, RuntimeDecisionPoint as r, RuntimeHookPhase as s, RuntimeDecisionEvidenceRef as t, composeRuntimeHooks as u };
-//# sourceMappingURL=runtime-hooks-nsqxSUFL.d.ts.map
+//# sourceMappingURL=runtime-hooks-ZQqPw-0g.d.ts.map

package/dist/{sandbox-profile-compat-DtuJWFrM.js → sandbox-profile-compat-BxMQ1VXv.js}

@@ -1,10 +1,10 @@
-import { m as ValidationError } from "./errors-DodWX-cb.js";
+import { m as ValidationError } from "./errors-wuhGvpE3.js";
 import { runTaskQueue } from "./task-queue.js";
 import { agentCandidateArtifactRefSchema, canonicalCandidateBytes as canonicalCandidateBytes$1 } from "@tangle-network/agent-interface";
 import { isRecord } from "@tangle-network/agent-core";
 import { createHash, randomUUID } from "node:crypto";
 import { constants } from "node:fs";
-import { dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
+import { dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
 import { spawn } from "node:child_process";
 import { lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
@@ -12,7 +12,7 @@ import { Readable } from "node:stream";
 import { isAnyArrayBuffer, isSharedArrayBuffer } from "node:util/types";
 import { extract, pack } from "tar-stream";
 import { pipeline } from "node:stream/promises";
-//#region src/runtime/supervise/deadline.ts
+// src/runtime/supervise/deadline.ts
 const MAX_TIMER_DELAY_MS = 2147483647;
 const DEFAULT_SUCCESSFUL_SHUTDOWN_MS = 5e3;
 /** The abort reason a child's own deadline carries. */
@@ -34,7 +34,7 @@ function checkInIdleMs(policy) {
 * session copy (a bounded native capture), metering its usage and committing its result. Its
 * workspace capture is not part of it: the manager's owner runs that after the result.
 */
-const ACCEPTED_RESULT_GRACE_MS = 5 * 6e4;
+const ACCEPTED_RESULT_GRACE_MS = 3e5;
 /** Whether an abort reason is a deadline: the child's own or the root budget's. */
 function isDeadlineAbortReason(reason) {
 	return reason === "child deadline exceeded" || reason === "root budget deadline exceeded";
@@ -145,8 +145,7 @@ function singleFlightTeardown(executor, onRequest) {
 		return request;
 	};
 }
-//#endregion
-//#region src/runtime/supervise/resources.ts
+// src/runtime/supervise/resources.ts
 /** Validate caller-owned names and units without assigning domain meaning to them. */
 function assertResources(resources, kind, label) {
 	if (resources === void 0) return;
@@ -208,8 +207,7 @@ function resourceTelemetry(streamed, terminal) {
 	}
 	return addResourceSpend(Object.fromEntries(resources));
 }
-//#endregion
-//#region src/runtime/util.ts
+// src/runtime/util.ts
 /**
 * Best-effort sandbox delete. Skips instances without a `delete` (test fakes);
 * swallows errors (the platform reaps on expiry). Returns `false` when delete
@@ -633,8 +631,36 @@ function fnv1a32Hex(text) {
 	}
 	return (h >>> 0).toString(16).padStart(8, "0");
 }
-//#endregion
-//#region src/path-control-characters.ts
+// src/agent/native-system-prompt.ts
+/** Native replace and append controls shared by local and sealed candidate execution. */
+function nativeSystemPrompt(harness, prompt, systemPath = ".tangle/system-prompt.md") {
+	const files = [];
+	const flags = [];
+	for (const intent of ["systemPrompt", "appendSystemPrompt"]) {
+		const text = prompt?.[intent];
+		if (text === void 0) continue;
+		if (typeof text !== "string" || intent === "appendSystemPrompt" && !text.trim()) throw new Error(`profile.prompt.${intent} must be ${intent === "systemPrompt" ? "a string" : "non-empty text"}`);
+		const append = intent === "appendSystemPrompt";
+		const path = append ? posix.join(posix.dirname(systemPath), "append-system-prompt.md") : systemPath;
+		if (harness === "codex" && append) {
+			flags.push("-c", `developer_instructions=${JSON.stringify(text)}`);
+			continue;
+		}
+		const flag = harness === "claude-code" ? append ? "--append-system-prompt-file" : "--system-prompt-file" : harness === "pi" || harness === "prime" ? append ? "--append-system-prompt" : "--system-prompt" : harness === "codex" ? "-c" : void 0;
+		if (!flag) throw new Error(`${harness} has no native ${intent} launch projection`);
+		files.push({
+			relPath: append ? ".tangle/append-system-prompt.md" : ".tangle/system-prompt.md",
+			content: text,
+			source: "generated"
+		});
+		flags.push(flag, harness === "codex" ? `model_instructions_file=${JSON.stringify(path)}` : path);
+	}
+	return {
+		files,
+		flags
+	};
+}
+// src/path-control-characters.ts
 /** Whether a serialized field contains an ASCII control or delete character. */
 function hasControlCharacter(value) {
 	for (let index = 0; index < value.length; index++) {
@@ -643,8 +669,7 @@ function hasControlCharacter(value) {
 	}
 	return false;
 }
-//#endregion
-//#region src/candidate-execution/digest.ts
+// src/candidate-execution/digest.ts
 /** Use native hashing for workspace archives. */
 function sha256Bytes$1(bytes) {
 	return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
@@ -693,8 +718,7 @@ function deepFreezeCandidate(value, seen = /* @__PURE__ */ new Set()) {
 	for (const child of Object.values(value)) deepFreezeCandidate(child, seen);
 	return Object.freeze(value);
 }
-//#endregion
-//#region src/candidate-execution/artifacts.ts
+// src/candidate-execution/artifacts.ts
 function artifactCacheKey(artifact) {
 	return `${artifact.sha256}:${artifact.byteLength}`;
 }
@@ -926,7 +950,7 @@ function isWithin(root, path) {
 */
 async function readWorkspaceFile(descriptor, maxBytes, keepBytes, path, signal) {
 	const hash = createHash("sha256");
-	const buffer = Buffer.allocUnsafe(1024 * 1024);
+	const buffer = Buffer.allocUnsafe(1048576);
 	const chunks = [];
 	let total = 0;
 	while (true) {
@@ -949,8 +973,7 @@ async function readWorkspaceFile(descriptor, maxBytes, keepBytes, path, signal)
 		byteLength: total
 	};
 }
-//#endregion
-//#region src/candidate-execution/exact-object.ts
+// src/candidate-execution/exact-object.ts
 /** Reject unknown fields while requiring every declared non-optional field. */
 function assertExactObjectKeys(value, required, label, optional = []) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object`);
@@ -975,8 +998,7 @@ function isWellFormedUnicode(value) {
 	}
 	return true;
 }
-//#endregion
-//#region src/candidate-execution/output-artifacts.ts
+// src/candidate-execution/output-artifacts.ts
 /** Persist evaluator evidence, read it back, and bind the returned locator to the exact bytes. */
 async function persistCandidateOutputArtifact(port, input) {
 	input.signal?.throwIfAborted();
@@ -995,8 +1017,7 @@ async function persistCandidateOutputArtifact(port, input) {
 	verifyBytes(stored, expectedDigest, bytes.byteLength, "persisted candidate output");
 	return immutableCandidateValue(ref);
 }
-//#endregion
-//#region src/candidate-execution/workspace-archive.ts
+// src/candidate-execution/workspace-archive.ts
 const archiveKind = "agent-candidate-workspace-archive";
 const workspaceEntryPrefix = "workspace/";
 const repositoryMetadataEntry = "metadata/repository.json";
@@ -1005,13 +1026,13 @@ const repositoryIndexEntry = "metadata/repository.index.json";
 const repositoryIndexPrefix = "index/";
 const fixedTarTime = /* @__PURE__ */ new Date(0);
 const defaultLimits = Object.freeze({
-	maxArchiveBytes: 512 * 1024 * 1024,
-	maxEmbeddedArtifactBytes: 1024 * 1024,
+	maxArchiveBytes: 536870912,
+	maxEmbeddedArtifactBytes: 1048576,
 	maxFiles: 5e4,
-	maxFileBytes: 128 * 1024 * 1024,
-	maxTotalFileBytes: 256 * 1024 * 1024,
+	maxFileBytes: 134217728,
+	maxTotalFileBytes: 268435456,
 	maxPathBytes: 4096,
-	maxRepositoryBundleBytes: 128 * 1024 * 1024
+	maxRepositoryBundleBytes: 134217728
 });
 /** Capture detached files returned by a remote executor into the standard archive. */
 async function captureAgentCandidateWorkspaceFiles(input, options = {}) {
@@ -1414,8 +1435,7 @@ function workspaceTarHeader(name, mode, size) {
 		gname: ""
 	};
 }
-//#endregion
-//#region src/candidate-execution/artifact-streams.ts
+// src/candidate-execution/artifact-streams.ts
 /** Verify the complete stream, including its final digest, before accepting its consumer's result. */
 async function* verifiedArtifactChunks(artifact, port, signal) {
 	signal?.throwIfAborted();
@@ -1482,8 +1502,7 @@ async function persistCandidateOutputArtifactStream(port, input) {
 		await chunks.return(void 0);
 	}
 }
-//#endregion
-//#region src/candidate-execution/git-materialize.ts
+// src/candidate-execution/git-materialize.ts
 async function verifyCandidateCode(code, repositories, patchBytes) {
 	if (code.kind === "disabled") return void 0;
 	const repositoryRoot = await verifiedRepositoryRoot(code.repository, repositories);
@@ -1617,7 +1636,8 @@ async function verifiedRepositoryRoot(repository, repositories) {
 	])).stdout.toString("utf8").trim();
 	const actual = parseGitHubRemote(origin);
 	if (!actual || actual.owner !== repository.owner || actual.repo !== repository.repo) throw new Error(`local repository origin ${origin || "<missing>"} does not match github.com/${repository.owner}/${repository.repo}`);
-	await assertNoGitIndirection(repositoryRoot, resolve((await runCandidateGit(repositoryRoot, ["rev-parse", "--absolute-git-dir"])).stdout.toString("utf8").trim()), "candidate repository");
+	const gitDirText = (await runCandidateGit(repositoryRoot, ["rev-parse", "--absolute-git-dir"])).stdout.toString("utf8").trim();
+	await assertNoGitIndirection(repositoryRoot, resolve(gitDirText), "candidate repository");
 	return repositoryRoot;
 }
 async function assertNoGitIndirection(repositoryRoot, gitDir, label) {
@@ -1811,8 +1831,7 @@ async function runCandidateGit(repositoryRoot, args, input, extraEnv = {}, optio
 function isNoEntry(error) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
-//#endregion
-//#region src/candidate-execution/workspace-archive-local.ts
+// src/candidate-execution/workspace-archive-local.ts
 /** Capture one exact regular-file workspace for immutable candidate execution. */
 async function captureAgentCandidateWorkspace(rootInput, options = {}) {
 	const root = resolve(rootInput);
@@ -1872,7 +1891,8 @@ async function captureRepository(requestedRoot, limits, workingTree) {
 	const root = await realpath(requestedRoot);
 	const resolvedStats = await lstat(root);
 	if (!resolvedStats.isDirectory() || resolvedStats.isSymbolicLink()) throw new Error("candidate repository root must resolve to a real directory");
-	if (await realpath(resolve((await runCandidateGit(root, ["rev-parse", "--show-toplevel"])).stdout.toString("utf8").trim())) !== root) throw new Error("candidate repository capture must start at the Git worktree root");
+	const topLevel = (await runCandidateGit(root, ["rev-parse", "--show-toplevel"])).stdout.toString("utf8").trim();
+	if (await realpath(resolve(topLevel)) !== root) throw new Error("candidate repository capture must start at the Git worktree root");
 	const gitDir = resolve((await runCandidateGit(root, ["rev-parse", "--absolute-git-dir"])).stdout.toString("utf8").trim());
 	if (await realpath(gitDir) !== gitDir || gitDir.includes(":")) throw new Error("candidate repository Git object store has an unsupported path");
 	await assertNoGitIndirection(root, gitDir, "candidate repository");
@@ -2054,7 +2074,8 @@ async function prepareEmptyDestination(destination, options = {}) {
 		throw error;
 	}
 	if (!stats.isDirectory() || stats.isSymbolicLink()) throw new Error("candidate workspace destination must be a real directory");
-	const resolvedStats = await lstat(await realpath(destination));
+	const resolvedDestination = await realpath(destination);
+	const resolvedStats = await lstat(resolvedDestination);
 	if (!resolvedStats.isDirectory() || resolvedStats.isSymbolicLink()) throw new Error("candidate workspace destination must resolve to a real directory");
 	if ((await readdir(destination)).length > 0) throw new Error("candidate workspace destination must be empty");
 }
@@ -2164,8 +2185,7 @@ function workspacePath(root, relativePath) {
 	if (!path.startsWith(`${root}${sep}`)) throw new Error(`candidate workspace archive path escapes its destination: ${relativePath}`);
 	return path;
 }
-//#endregion
-//#region src/candidate-execution/workspace-streams.ts
+// src/candidate-execution/workspace-streams.ts
 /**
 * Files a tree capture stores at once; each waits on a durable-store round trip of its own and on
 * four fsyncs. On drew-gtr-pro, with three 180 ms store requests per file, 64 at once
@@ -2443,7 +2463,7 @@ async function* workspaceFileChunks(root, expected, signal) {
 		let byteLength = 0;
 		for await (const chunk of file.createReadStream({
 			autoClose: false,
-			highWaterMark: 64 * 1024
+			highWaterMark: 65536
 		})) {
 			signal?.throwIfAborted();
 			byteLength += chunk.byteLength;
@@ -2496,8 +2516,7 @@ async function* oneChunk(bytes) {
 function asError(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
-//#endregion
-//#region src/runtime/sandbox-profile-compat.ts
+// src/runtime/sandbox-profile-compat.ts
 /**
 * Interface 5.3 admits proxy secrets and private config values, but the current Sandbox SDK
 * carries Interface 4.0. Refuse these fields before either candidate conversion or a direct
@@ -2527,7 +2546,6 @@ function refuseNonPublicConfigValues(values, path, context) {
 function refuseSandboxProfileField(field, context = "candidate profile") {
 	throw new ValidationError(`${context} field ${field} is refused: Sandbox's Interface 4.0.0 cannot carry it yet, and Runtime does not drop it`);
 }
-//#endregion
-export { isAbortError as $, verifyMaterializedProfileWorkspace as A, sha256Bytes$1 as B, WorkspaceScanLimitError as C, armDeadlineTimer as Ct, readMaterializedWorkspaceFiles as D, singleFlightTeardown as Dt, captureMaterializedWorkspace as E, isDeadlineAbortReason as Et, canonicalCandidateDocument as F, addTokenUsage as G, hasControlCharacter as H, deepFreezeCandidate as I, cloneTokenUsage as J, chargedTokens as K, embeddedCandidateArtifact as L, verifyWorkspaceSnapshotArtifacts as M, canonicalCandidateBytes$1 as N, readVerifiedArtifact as O, teardownExecutor as Ot, canonicalCandidateDigest$1 as P, hasCompleteCacheBreakdown as Q, immutableCandidateValue as R, isWellFormedUnicode as S, ROOT_DEADLINE_REASON as St, candidateWorkspaceManifest as T, checkInIdleMs as Tt, abortError as U, verifyCanonicalCandidateDocument as V, addSpend as W, errorMessage as X, deleteBoxSafe as Y, fnv1a32Hex as Z, captureAgentCandidateWorkspaceFiles as _, withBudgetResources as _t, materializeAgentCandidateWorkspaceFromArtifacts as a, roundBoxMinutes as at, persistCandidateOutputArtifact as b, DEADLINE_CHECK_IN_MESSAGE as bt, verifyAgentCandidateWorkspaceTree as c, throwAbort as ct, readCandidateGitHubResource as d, withTimeout as dt, isAsyncIterable as et, verifyCandidateCode as f, zeroSpend as ft, verifiedArtifactChunks as g, resourceTelemetry as gt, markPutStreamVerified as h, assertResources as ht, captureAgentCandidateWorkspaceTreeToArtifacts as i, randomUuid as it, verifyMaterializedWorkspace as j, verifyBytes as k, teardownSurfaces as kt, captureAgentCandidateWorkspace as l, throwIfAborted as lt, verifyTaskOutcomePatch as m, addResourceSpend as mt, refuseSandboxProfileField as n, promptCacheTokenClasses as nt, readAgentCandidateWorkspaceArtifactFiles as o, sleep as ot, verifyTaskCheckout as p, zeroTokenUsage as pt, cloneSpend as q, captureAgentCandidateWorkspaceToArtifacts as r, randomSuffix as rt, verifyAgentCandidateWorkspaceArtifacts as s, stringifySafe as st, assertSandboxProfileCompatibility as t, mapWithConcurrency as tt, createAgentCandidateWorkspacePort as u, unmeteredSpend as ut, verifyAgentCandidateWorkspaceArchive as v, ACCEPTED_RESULT_GRACE_MS as vt, artifactCacheKey as w, boundedChildDeadlineAt as wt, assertExactObjectKeys as x, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as xt, workspaceLimits as y, CHILD_DEADLINE_REASON as yt, omitTopLevelDigest as z };
+export { hasCompleteCacheBreakdown as $, verifyMaterializedProfileWorkspace as A, teardownSurfaces as At, sha256Bytes$1 as B, WorkspaceScanLimitError as C, ROOT_DEADLINE_REASON as Ct, readMaterializedWorkspaceFiles as D, isDeadlineAbortReason as Dt, captureMaterializedWorkspace as E, checkInIdleMs as Et, canonicalCandidateDocument as F, addSpend as G, hasControlCharacter as H, deepFreezeCandidate as I, cloneSpend as J, addTokenUsage as K, embeddedCandidateArtifact as L, verifyWorkspaceSnapshotArtifacts as M, canonicalCandidateBytes$1 as N, readVerifiedArtifact as O, singleFlightTeardown as Ot, canonicalCandidateDigest$1 as P, fnv1a32Hex as Q, immutableCandidateValue as R, isWellFormedUnicode as S, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as St, candidateWorkspaceManifest as T, boundedChildDeadlineAt as Tt, nativeSystemPrompt as U, verifyCanonicalCandidateDocument as V, abortError as W, deleteBoxSafe as X, cloneTokenUsage as Y, errorMessage as Z, captureAgentCandidateWorkspaceFiles as _, resourceTelemetry as _t, materializeAgentCandidateWorkspaceFromArtifacts as a, randomUuid as at, persistCandidateOutputArtifact as b, CHILD_DEADLINE_REASON as bt, verifyAgentCandidateWorkspaceTree as c, stringifySafe as ct, readCandidateGitHubResource as d, unmeteredSpend as dt, isAbortError as et, verifyCandidateCode as f, withTimeout as ft, verifiedArtifactChunks as g, assertResources as gt, markPutStreamVerified as h, addResourceSpend as ht, captureAgentCandidateWorkspaceTreeToArtifacts as i, randomSuffix as it, verifyMaterializedWorkspace as j, verifyBytes as k, teardownExecutor as kt, captureAgentCandidateWorkspace as l, throwAbort as lt, verifyTaskOutcomePatch as m, zeroTokenUsage as mt, refuseSandboxProfileField as n, mapWithConcurrency as nt, readAgentCandidateWorkspaceArtifactFiles as o, roundBoxMinutes as ot, verifyTaskCheckout as p, zeroSpend as pt, chargedTokens as q, captureAgentCandidateWorkspaceToArtifacts as r, promptCacheTokenClasses as rt, verifyAgentCandidateWorkspaceArtifacts as s, sleep as st, assertSandboxProfileCompatibility as t, isAsyncIterable as tt, createAgentCandidateWorkspacePort as u, throwIfAborted as ut, verifyAgentCandidateWorkspaceArchive as v, withBudgetResources as vt, artifactCacheKey as w, armDeadlineTimer as wt, assertExactObjectKeys as x, DEADLINE_CHECK_IN_MESSAGE as xt, workspaceLimits as y, ACCEPTED_RESULT_GRACE_MS as yt, omitTopLevelDigest as z };
 
-//# sourceMappingURL=sandbox-profile-compat-DtuJWFrM.js.map
+//# sourceMappingURL=sandbox-profile-compat-BxMQ1VXv.js.map