@tangle-network/agent-runtime 0.50.0 → 0.51.0

package/dist/intelligence.js

@@ -0,0 +1,427 @@
+import {
+  createOtelExporter,
+  loopEventToOtelSpan
+} from "./chunk-G3RGMA7C.js";
+import "./chunk-DGUM43GV.js";
+
+// src/intelligence/effort.ts
+var presets = {
+  off: {
+    analysts: false,
+    corpus: "off",
+    fanout: 1,
+    loops: false,
+    intelligenceBudgetUsd: 0
+  },
+  eco: {
+    analysts: true,
+    corpus: "read",
+    fanout: 1,
+    loops: false,
+    intelligenceBudgetUsd: 0.25
+  },
+  standard: {
+    analysts: true,
+    corpus: "read-write",
+    fanout: 3,
+    loops: true,
+    intelligenceBudgetUsd: 2
+  },
+  thorough: {
+    analysts: true,
+    corpus: "read-write",
+    fanout: 5,
+    loops: true,
+    intelligenceBudgetUsd: 10
+  },
+  max: {
+    analysts: true,
+    corpus: "read-write",
+    fanout: 8,
+    loops: true,
+    intelligenceBudgetUsd: null
+  }
+};
+var defaultEffortTier = "standard";
+function resolveEffort(tier, overrides) {
+  const preset = presets[tier];
+  if (!preset) {
+    throw new Error(
+      `resolveEffort: unknown effort tier ${JSON.stringify(tier)} (expected one of ${Object.keys(presets).map((t) => `'${t}'`).join(", ")})`
+    );
+  }
+  return { ...preset, ...overrides ?? {} };
+}
+function isIntelligenceOff(settings) {
+  return settings.analysts === false && settings.corpus === "off" && settings.fanout <= 1 && settings.loops === false && settings.intelligenceBudgetUsd === 0;
+}
+
+// src/intelligence/redact.ts
+var redactedMarker = "[redacted]";
+var secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
+var valuePatterns = [
+  // Bearer tokens.
+  /\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
+  // Provider-style API keys (sk-..., sk-tan-..., pk_live_..., ghp_...).
+  /\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
+  /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+  // AWS access key ids.
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  // PEM private-key blocks.
+  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+  // Email addresses.
+  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
+];
+function scrubString(input) {
+  let out = input;
+  for (const pattern of valuePatterns) {
+    out = out.replace(pattern, redactedMarker);
+  }
+  return out;
+}
+function defaultRedactor(value) {
+  return walk(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+var maxDepth = 32;
+function walk(value, seen, depth) {
+  if (depth > maxDepth) return "[truncated]";
+  if (typeof value === "string") return scrubString(value);
+  if (value === null || typeof value !== "object") return value;
+  if (seen.has(value)) return "[circular]";
+  seen.add(value);
+  if (Array.isArray(value)) {
+    return value.map((item) => walk(item, seen, depth + 1));
+  }
+  const out = {};
+  for (const [key, v] of Object.entries(value)) {
+    if (secretKeyPattern.test(key)) {
+      out[key] = redactedMarker;
+      continue;
+    }
+    out[key] = walk(v, seen, depth + 1);
+  }
+  return out;
+}
+function resolveRedactor(redact) {
+  if (redact === false) return (value) => value;
+  return redact ?? defaultRedactor;
+}
+
+// src/intelligence/delivery.ts
+var defaultPlaneBaseUrl = "https://intelligence.tangle.tools";
+var defaultRefreshMs = 3e5;
+function resolvePlaneBaseUrl(baseUrl) {
+  if (baseUrl) return baseUrl.replace(/\/+$/, "");
+  if (typeof process !== "undefined" && process.env.TANGLE_INTELLIGENCE_URL) {
+    return process.env.TANGLE_INTELLIGENCE_URL.replace(/\/+$/, "");
+  }
+  return defaultPlaneBaseUrl;
+}
+function resolveApiKey(apiKey) {
+  if (apiKey) return apiKey;
+  if (typeof process !== "undefined" && process.env.TANGLE_API_KEY)
+    return process.env.TANGLE_API_KEY;
+  return "";
+}
+async function pullCertified(opts) {
+  const doFetch = opts.fetchImpl ?? globalThis.fetch;
+  if (!doFetch) return { succeeded: false, error: "no fetch implementation available" };
+  const apiKey = resolveApiKey(opts.apiKey);
+  if (!apiKey) return { succeeded: false, error: "no apiKey (set TANGLE_API_KEY or opts.apiKey)" };
+  const baseUrl = resolvePlaneBaseUrl(opts.baseUrl);
+  const url = `${baseUrl}/v1/profiles/${encodeURIComponent(opts.target)}/composed`;
+  let res;
+  try {
+    res = await doFetch(url, { headers: { authorization: `Bearer ${apiKey}` } });
+  } catch (err) {
+    return {
+      succeeded: false,
+      error: `pull request failed: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  if (res.status === 404) {
+    return {
+      succeeded: false,
+      error: "no certified artifacts promoted for target yet",
+      status: 404
+    };
+  }
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    return {
+      succeeded: false,
+      error: `pull ${res.status}: ${body.slice(0, 200)}`,
+      status: res.status
+    };
+  }
+  try {
+    return { succeeded: true, value: await res.json() };
+  } catch (err) {
+    return {
+      succeeded: false,
+      error: `pull response parse failed: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+}
+function composeCertifiedPrompt(base, certified) {
+  if (!certified) return base;
+  const parts = [];
+  if (certified.promptSurface?.surface.trim()) parts.push(certified.promptSurface.surface.trim());
+  for (const type of Object.keys(certified.artifacts).sort()) {
+    if (type !== "prompt-surface" && type !== "skill") continue;
+    const bucket = certified.artifacts[type] ?? [];
+    for (const a of [...bucket].sort((x, y) => (x.path ?? "").localeCompare(y.path ?? ""))) {
+      if (a.content.trim()) parts.push(a.content.trim());
+    }
+  }
+  if (parts.length === 0) return base;
+  return `${base.trim()}
+
+## Certified guidance (Tangle Intelligence)
+
+${parts.join("\n\n")}`;
+}
+function withCertifiedDelivery(agent, config) {
+  const client = createIntelligenceClient(config);
+  const target = config.target ?? config.project;
+  const refreshMs = config.refreshMs ?? defaultRefreshMs;
+  let certified = null;
+  let lastPullAt = 0;
+  let inflight = null;
+  async function refresh() {
+    if (Date.now() - lastPullAt < refreshMs) return;
+    if (inflight) return inflight;
+    inflight = (async () => {
+      const outcome = await pullCertified({
+        target,
+        apiKey: config.apiKey,
+        baseUrl: config.baseUrl,
+        fetchImpl: config.fetchImpl
+      });
+      lastPullAt = Date.now();
+      if (outcome.succeeded) certified = outcome.value;
+    })();
+    try {
+      await inflight;
+    } finally {
+      inflight = null;
+    }
+  }
+  const wrapped = (async (input) => {
+    await refresh();
+    const applied = {
+      certified,
+      composePrompt: (base) => composeCertifiedPrompt(base, certified)
+    };
+    return client.traceRun(
+      { input, labels: { "tangle.certified_version": certified?.promptSurface?.version ?? -1 } },
+      async (trace) => {
+        const out = await agent(input, applied);
+        trace.recordOutput(out);
+        return out;
+      }
+    );
+  });
+  wrapped.refresh = refresh;
+  return wrapped;
+}
+
+// src/intelligence/index.ts
+function resolveEffortConfig(effort) {
+  if (effort === void 0) return resolveEffort(defaultEffortTier);
+  if (typeof effort === "string") return resolveEffort(effort);
+  return resolveEffort(effort.tier, effort.overrides);
+}
+function resolveEndpoint(endpoint) {
+  if (endpoint) return endpoint;
+  if (typeof process === "undefined") return void 0;
+  return process.env.INTELLIGENCE_OTLP_ENDPOINT ?? process.env.OTEL_EXPORTER_OTLP_ENDPOINT;
+}
+function freshTraceId() {
+  return randomHex(32);
+}
+function freshRunId() {
+  return `run-${randomHex(16)}`;
+}
+var previewMaxChars = 4096;
+function previewJson(value) {
+  let s;
+  if (typeof value === "string") s = value;
+  else {
+    try {
+      s = JSON.stringify(value) ?? String(value);
+    } catch {
+      s = String(value);
+    }
+  }
+  return s.length > previewMaxChars ? `${s.slice(0, previewMaxChars)}\u2026[truncated]` : s;
+}
+function randomHex(chars) {
+  const bytes = new Uint8Array(Math.ceil(chars / 2));
+  if (typeof globalThis.crypto?.getRandomValues === "function") {
+    globalThis.crypto.getRandomValues(bytes);
+  } else {
+    for (let i = 0; i < bytes.length; i++) bytes[i] = Math.floor(Math.random() * 256);
+  }
+  return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, chars);
+}
+function createIntelligenceClient(config) {
+  if (!config.project) {
+    throw new Error("createIntelligenceClient: `project` is required");
+  }
+  const effort = resolveEffortConfig(config.effort);
+  const intelligenceOff = isIntelligenceOff(effort);
+  const redactor = resolveRedactor(config.redact);
+  const apiKey = config.apiKey ?? (typeof process !== "undefined" ? process.env.TANGLE_API_KEY : void 0);
+  const endpoint = resolveEndpoint(config.endpoint);
+  let exporter;
+  let exporterResolved = false;
+  function getExporter() {
+    if (exporterResolved) return exporter;
+    exporterResolved = true;
+    if (!endpoint) return void 0;
+    exporter = createOtelExporter({
+      endpoint,
+      headers: apiKey ? { authorization: `Bearer ${apiKey}` } : {},
+      serviceName: config.project,
+      resourceAttributes: { "tangle.project": config.project }
+    });
+    return exporter;
+  }
+  function exportTrace(meta, outcome, output) {
+    const ex = getExporter();
+    if (!ex) return;
+    const labels = {
+      project: config.project,
+      "tangle.effort.intelligence_off": outcome.intelligenceOff,
+      "tangle.usage.inference_usd": outcome.usage.inferenceUsd,
+      "tangle.usage.intelligence_usd": outcome.usage.intelligenceUsd,
+      ...meta.model ? { "gen_ai.request.model": meta.model } : {},
+      ...meta.provider ? { "provider.name": meta.provider } : {},
+      ...typeof outcome.success === "boolean" ? { "tangle.outcome.success": outcome.success } : {},
+      ...typeof outcome.score === "number" ? { "tangle.outcome.score": outcome.score } : {},
+      ...meta.labels ?? {}
+    };
+    const redactedInput = meta.input !== void 0 ? redactor(meta.input) : void 0;
+    const redactedOutput = output !== void 0 ? redactor(output) : void 0;
+    if (redactedInput !== void 0) labels["tangle.input"] = previewJson(redactedInput);
+    if (redactedOutput !== void 0) labels["tangle.output"] = previewJson(redactedOutput);
+    try {
+      ex.exportSpan(
+        loopEventToOtelSpan(
+          {
+            kind: "tangle.intelligence.run",
+            runId: outcome.runId,
+            timestamp: Date.now(),
+            payload: labels
+          },
+          outcome.traceId
+        )
+      );
+    } catch {
+    }
+  }
+  return {
+    project: config.project,
+    effort,
+    async traceRun(meta, fn) {
+      const runId = meta.runId ?? freshRunId();
+      const traceId = meta.traceId ?? freshTraceId();
+      let recordedOutput;
+      const usage = { inferenceUsd: 0, intelligenceUsd: 0 };
+      let success;
+      let score;
+      const trace = {
+        recordOutput(output) {
+          recordedOutput = output;
+        },
+        recordOutcome(outcome2) {
+          if (typeof outcome2.success === "boolean") success = outcome2.success;
+          if (typeof outcome2.score === "number") score = outcome2.score;
+          if (outcome2.usage) {
+            if (typeof outcome2.usage.inferenceUsd === "number") {
+              usage.inferenceUsd = outcome2.usage.inferenceUsd;
+            }
+            if (typeof outcome2.usage.intelligenceUsd === "number") {
+              usage.intelligenceUsd = outcome2.usage.intelligenceUsd;
+            }
+          } else if (typeof outcome2.costUsd === "number") {
+            usage.inferenceUsd = outcome2.costUsd;
+          }
+        }
+      };
+      const result = await fn(trace);
+      if (intelligenceOff) usage.intelligenceUsd = 0;
+      const outcome = {
+        runId,
+        traceId,
+        project: config.project,
+        effort,
+        intelligenceOff,
+        ...success !== void 0 ? { success } : {},
+        ...score !== void 0 ? { score } : {},
+        usage
+      };
+      exportTrace(meta, outcome, recordedOutput);
+      return result;
+    },
+    doctor() {
+      const hasRepo = Boolean(config.repo?.owner && config.repo?.name && config.repo?.baseBranch);
+      const hasChecks = Boolean(config.checks && config.checks.length > 0);
+      const hasSurfaces = Boolean(config.surfaces && config.surfaces.length > 0);
+      const prMissing = [];
+      if (!hasChecks) prMissing.push("checks");
+      if (!hasSurfaces) prMissing.push("surfaces");
+      if (!hasRepo) prMissing.push("repo");
+      const recommendMissing = [];
+      if (intelligenceOff) recommendMissing.push("effort above off");
+      return {
+        project: config.project,
+        effort,
+        exportConfigured: Boolean(endpoint),
+        modes: {
+          observe: { ready: true, missing: [] },
+          recommend: {
+            ready: recommendMissing.length === 0,
+            missing: recommendMissing
+          },
+          pr: { ready: prMissing.length === 0, missing: prMissing }
+        }
+      };
+    },
+    async flush() {
+      const ex = getExporter();
+      if (!ex) return;
+      try {
+        await ex.flush();
+      } catch {
+      }
+    }
+  };
+}
+function isClient(value) {
+  return typeof value.traceRun === "function";
+}
+function withTangleIntelligence(agent, clientOrConfig) {
+  const client = isClient(clientOrConfig) ? clientOrConfig : createIntelligenceClient(clientOrConfig);
+  return async (input) => {
+    return client.traceRun({ input }, async (trace) => {
+      const output = await agent(input);
+      trace.recordOutput(output);
+      return output;
+    });
+  };
+}
+export {
+  composeCertifiedPrompt,
+  createIntelligenceClient,
+  defaultEffortTier,
+  defaultRedactor,
+  isIntelligenceOff,
+  pullCertified,
+  resolveEffort,
+  resolveRedactor,
+  withCertifiedDelivery,
+  withTangleIntelligence
+};
+//# sourceMappingURL=intelligence.js.map

package/dist/intelligence.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/intelligence/effort.ts","../src/intelligence/redact.ts","../src/intelligence/delivery.ts","../src/intelligence/index.ts"],"sourcesContent":["/**\n * @experimental\n *\n * EffortPolicy — pure data, no execution. Resolves a named tier into a flat\n * settings object the Intelligence wrapper reads to decide WHICH intelligence\n * spawns are admitted. The composer never runs anything; it only describes the\n * shape of intelligence a tier permits.\n *\n * The billing boundary lives one layer above this (the wrapper tags trace usage\n * by class). What this module owns is the single law the OFF tier rests on:\n * `'off'` ⇒ every intelligence knob OFF (analysts:false, corpus:'off',\n * fanout:1, loops:false, intelligenceBudgetUsd:0). At OFF the wrapper runs the\n * agent as pure passthrough and only intelligence-class usage can prove to be\n * zero — there is nothing to spawn.\n */\n\n/** The named effort tiers, lowest to highest. `'off'` is the honest floor\n *  below `'eco'`: intelligence fully off, telemetry still best-effort. */\nexport type EffortTier = 'off' | 'eco' | 'standard' | 'thorough' | 'max'\n\n/** Corpus access an intelligence tier permits. `'off'` reads and writes\n *  nothing; `'read'` consults the cross-run corpus without contributing;\n *  `'read-write'` both consults and accumulates. */\nexport type CorpusAccess = 'off' | 'read' | 'read-write'\n\n/**\n * The flat, resolved settings a tier compiles to. Every field is individually\n * overridable through `resolveEffort`. Pure data — read by the wrapper, never\n * self-executing.\n */\nexport interface EffortSettings {\n  /** Whether trace-derived analyst diagnosis may spawn. `false` ⇒ no analyst. */\n  analysts: boolean\n  /** Cross-run corpus access this tier permits. */\n  corpus: CorpusAccess\n  /** Parallel candidate width. `1` ⇒ single-shot, no breadth. */\n  fanout: number\n  /** Whether multi-step improvement loops (refine / fanout-vote) may run. */\n  loops: boolean\n  /**\n   * Ceiling, in USD, for INTELLIGENCE-class spawns only (analysts, corpus,\n   * loops) — NOT base inference. `0` refuses every intelligence spawn; `null`\n   * means uncapped (the spend lands on the Pareto receipt). Base-stream\n   * inference is billed on its own channel and is never constrained here.\n   */\n  intelligenceBudgetUsd: number | null\n}\n\n/** Per-field overrides applied on top of a tier preset. Any subset of the\n *  resolved settings; each provided field wins over the preset. */\nexport type EffortOverrides = Partial<EffortSettings>\n\nconst presets: Readonly<Record<EffortTier, Readonly<EffortSettings>>> = {\n  off: {\n    analysts: false,\n    corpus: 'off',\n    fanout: 1,\n    loops: false,\n    intelligenceBudgetUsd: 0,\n  },\n  eco: {\n    analysts: true,\n    corpus: 'read',\n    fanout: 1,\n    loops: false,\n    intelligenceBudgetUsd: 0.25,\n  },\n  standard: {\n    analysts: true,\n    corpus: 'read-write',\n    fanout: 3,\n    loops: true,\n    intelligenceBudgetUsd: 2,\n  },\n  thorough: {\n    analysts: true,\n    corpus: 'read-write',\n    fanout: 5,\n    loops: true,\n    intelligenceBudgetUsd: 10,\n  },\n  max: {\n    analysts: true,\n    corpus: 'read-write',\n    fanout: 8,\n    loops: true,\n    intelligenceBudgetUsd: null,\n  },\n}\n\n/** The default tier when a client declares no effort. `'standard'` turns\n *  intelligence on with sensible knobs; opt down to `'off'`/`'eco'` or up to\n *  `'thorough'`/`'max'`. */\nexport const defaultEffortTier: EffortTier = 'standard'\n\n/**\n * Compile a named tier (plus optional per-field overrides) into the flat\n * `EffortSettings` the wrapper reads. Pure: same inputs → same object, no I/O,\n * no execution. Fails loud on an unknown tier rather than silently defaulting —\n * a typo'd tier must not quietly grant or deny intelligence.\n *\n * Invariant preserved for the billing floor: `resolveEffort('off')` always\n * yields `intelligenceBudgetUsd: 0` with every intelligence knob off UNLESS the\n * caller explicitly overrides a field — overriding off is an opt-in the caller\n * owns, not a default the composer leaks.\n */\nexport function resolveEffort(tier: EffortTier, overrides?: EffortOverrides): EffortSettings {\n  const preset = presets[tier]\n  if (!preset) {\n    throw new Error(\n      `resolveEffort: unknown effort tier ${JSON.stringify(tier)} (expected one of ${(\n        Object.keys(presets) as EffortTier[]\n      )\n        .map((t) => `'${t}'`)\n        .join(', ')})`,\n    )\n  }\n  return { ...preset, ...(overrides ?? {}) }\n}\n\n/**\n * True when these settings admit NO intelligence spawn — the passthrough\n * predicate the wrapper branches on. Every intelligence axis must be off:\n * analysts disabled, corpus off, no breadth, no loops, and a zero intelligence\n * budget. A caller who overrides any one of these back on is no longer at the\n * OFF floor and the wrapper treats them as an intelligence-enabled run.\n */\nexport function isIntelligenceOff(settings: EffortSettings): boolean {\n  return (\n    settings.analysts === false &&\n    settings.corpus === 'off' &&\n    settings.fanout <= 1 &&\n    settings.loops === false &&\n    settings.intelligenceBudgetUsd === 0\n  )\n}\n","/**\n * @experimental\n *\n * Redaction for Intelligence trace export. The trace carries the customer's\n * real input/output; before any of it leaves the process it passes through a\n * `Redactor`. The default scrubs the obvious leak classes (API keys, bearer\n * tokens, emails, private keys) from strings and walks nested objects/arrays,\n * but a customer with domain-specific PII supplies their own `redact` hook.\n *\n * This is intentionally narrower than `src/sanitize.ts` (which redacts the\n * runtime's *event envelope* field-by-field): here the value is opaque\n * customer payload, so the scrub is value-shaped, not schema-shaped.\n */\n\n/** A redactor maps an arbitrary trace value to a safe-to-export value. Pure;\n *  must not throw on cyclic input (the default tolerates cycles). */\nexport type Redactor = (value: unknown) => unknown\n\nconst redactedMarker = '[redacted]'\n\n/** Secret-bearing key names: when an object key matches, its value is fully\n *  replaced regardless of the value's own content. Lowercased compare. */\nconst secretKeyPattern =\n  /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i\n\n/** In-value secret/PII patterns scrubbed from any string, regardless of key. */\nconst valuePatterns: ReadonlyArray<RegExp> = [\n  // Bearer tokens.\n  /\\bBearer\\s+[A-Za-z0-9._\\-+/=]{8,}/gi,\n  // Provider-style API keys (sk-..., sk-tan-..., pk_live_..., ghp_...).\n  /\\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}/g,\n  // AWS access key ids.\n  /\\bAKIA[0-9A-Z]{16}\\b/g,\n  // PEM private-key blocks.\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\\s\\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,\n  // Email addresses.\n  /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/g,\n]\n\n/** Scrub a single string of in-value secret/PII patterns. */\nfunction scrubString(input: string): string {\n  let out = input\n  for (const pattern of valuePatterns) {\n    out = out.replace(pattern, redactedMarker)\n  }\n  return out\n}\n\n/**\n * The built-in redactor. Walks objects and arrays; replaces values under\n * secret-bearing keys wholesale; scrubs in-value patterns from every string.\n * Cycle-safe (a seen-set short-circuits self-referential payloads to\n * `'[circular]'`), depth-bounded, and total — never throws on customer input.\n */\nexport function defaultRedactor(value: unknown): unknown {\n  return walk(value, new WeakSet(), 0)\n}\n\nconst maxDepth = 32\n\nfunction walk(value: unknown, seen: WeakSet<object>, depth: number): unknown {\n  if (depth > maxDepth) return '[truncated]'\n  if (typeof value === 'string') return scrubString(value)\n  if (value === null || typeof value !== 'object') return value\n  if (seen.has(value)) return '[circular]'\n  seen.add(value)\n\n  if (Array.isArray(value)) {\n    return value.map((item) => walk(item, seen, depth + 1))\n  }\n\n  const out: Record<string, unknown> = {}\n  for (const [key, v] of Object.entries(value as Record<string, unknown>)) {\n    if (secretKeyPattern.test(key)) {\n      out[key] = redactedMarker\n      continue\n    }\n    out[key] = walk(v, seen, depth + 1)\n  }\n  return out\n}\n\n/**\n * Resolve the redactor a client uses. A caller-supplied hook replaces the\n * default entirely (the customer owns their PII rules); absent one, the\n * built-in `defaultRedactor` runs. Returning `false` is the explicit opt-out —\n * NO redaction, for a caller who has already sanitized upstream and wants raw\n * fidelity. Opt-out is loud (an explicit `false`), never a silent default.\n */\nexport function resolveRedactor(redact: Redactor | false | undefined): Redactor {\n  if (redact === false) return (value) => value\n  return redact ?? defaultRedactor\n}\n","/**\n * @experimental\n *\n * Tangle Intelligence — the DELIVERY half of the loop (pull-by-default).\n *\n * The sibling Observe layer (`./index`) sends traces UP to the plane. This\n * module pulls certified artifacts DOWN: it reads the tenant's promoted,\n * gate-certified profile from the deployed Intelligence plane and folds it into\n * the running agent's prompt — so an approved improvement actually reaches the\n * agent. This is \"shipping intelligence to people's agents\", pull-by-default;\n * the push/Gated-PR opt-in composes on top of this.\n *\n * Pull contract (deployed plane): GET /v1/profiles/:target/composed →\n *   { target, generatedAt, promptSurface: {surface,surfaceHash,version,lift}|null,\n *     artifacts: { <artifactType>: [{path,content,contentHash,version,lift,promotedAt}] } }\n * Auth: Bearer <apiKey> (the one TANGLE_API_KEY shared by router + sandbox +\n * intelligence), resolved to a tenant by platform-api's key-verify S2S contract.\n *\n *   import { withCertifiedDelivery } from '@tangle-network/agent-runtime/intelligence'\n *\n *   export const agent = withCertifiedDelivery(\n *     async (input, applied) => myAgent(input, { systemPrompt: applied.composePrompt(BASE) }),\n *     { project: 'support-agent', target: 'support-agent' },\n *   )\n */\n\nimport { createIntelligenceClient, type IntelligenceConfig } from './index'\n\nconst defaultPlaneBaseUrl = 'https://intelligence.tangle.tools'\nconst defaultRefreshMs = 300_000\n\n/** A promoted, certified artifact (one entry in the composed profile). */\nexport interface CertifiedArtifact {\n  path: string | null\n  content: string\n  contentHash: string\n  version: number | null\n  /** Held-out gate lift attached at certification, e.g. \"+3.1pp\" — never a\n   *  within-run claim. `null` when the promotion carried no lift record. */\n  lift: string | null\n  promotedAt: string\n}\n\n/** The active promoted prompt surface for a target. */\nexport interface CertifiedPromptSurface {\n  surface: string\n  surfaceHash: string\n  version: number | null\n  lift: string | null\n}\n\n/** The composed certified profile — exactly the shape the plane's\n *  `GET /v1/profiles/:target/composed` returns. */\nexport interface CertifiedProfile {\n  target: string\n  generatedAt: string\n  promptSurface: CertifiedPromptSurface | null\n  artifacts: Record<string, CertifiedArtifact[]>\n}\n\n/** Typed outcome for the pull — inspect `succeeded` before `value`. A 404\n *  (nothing promoted yet) is a normal, non-error `succeeded: false`. */\nexport type PullOutcome =\n  | { succeeded: true; value: CertifiedProfile }\n  | { succeeded: false; error: string; status?: number }\n\nexport interface PullCertifiedOptions {\n  /** The agent target certified artifacts are promoted under. */\n  target: string\n  /** Bearer key. Defaults to `process.env.TANGLE_API_KEY`. */\n  apiKey?: string\n  /** Plane base URL. Defaults to `process.env.TANGLE_INTELLIGENCE_URL` then\n   *  `https://intelligence.tangle.tools`. */\n  baseUrl?: string\n  /** fetch impl (tests / non-global-fetch runtimes). Defaults to global fetch. */\n  fetchImpl?: typeof fetch\n}\n\nfunction resolvePlaneBaseUrl(baseUrl: string | undefined): string {\n  if (baseUrl) return baseUrl.replace(/\\/+$/, '')\n  if (typeof process !== 'undefined' && process.env.TANGLE_INTELLIGENCE_URL) {\n    return process.env.TANGLE_INTELLIGENCE_URL.replace(/\\/+$/, '')\n  }\n  return defaultPlaneBaseUrl\n}\n\nfunction resolveApiKey(apiKey: string | undefined): string {\n  if (apiKey) return apiKey\n  if (typeof process !== 'undefined' && process.env.TANGLE_API_KEY)\n    return process.env.TANGLE_API_KEY\n  return ''\n}\n\n/**\n * Pull the certified composed profile for a target. Fail-closed: a network\n * error or a non-2xx returns a typed `succeeded: false` (never throws), so a\n * caller can run on its base surface when Intelligence is unreachable. A 404 is\n * the normal \"nothing promoted yet\" signal, carried as `status: 404`.\n */\nexport async function pullCertified(opts: PullCertifiedOptions): Promise<PullOutcome> {\n  const doFetch = opts.fetchImpl ?? (globalThis.fetch as typeof fetch | undefined)\n  if (!doFetch) return { succeeded: false, error: 'no fetch implementation available' }\n  const apiKey = resolveApiKey(opts.apiKey)\n  if (!apiKey) return { succeeded: false, error: 'no apiKey (set TANGLE_API_KEY or opts.apiKey)' }\n  const baseUrl = resolvePlaneBaseUrl(opts.baseUrl)\n  const url = `${baseUrl}/v1/profiles/${encodeURIComponent(opts.target)}/composed`\n  let res: Response\n  try {\n    res = await doFetch(url, { headers: { authorization: `Bearer ${apiKey}` } })\n  } catch (err) {\n    return {\n      succeeded: false,\n      error: `pull request failed: ${err instanceof Error ? err.message : String(err)}`,\n    }\n  }\n  if (res.status === 404) {\n    return {\n      succeeded: false,\n      error: 'no certified artifacts promoted for target yet',\n      status: 404,\n    }\n  }\n  if (!res.ok) {\n    const body = await res.text().catch(() => '')\n    return {\n      succeeded: false,\n      error: `pull ${res.status}: ${body.slice(0, 200)}`,\n      status: res.status,\n    }\n  }\n  try {\n    return { succeeded: true, value: (await res.json()) as CertifiedProfile }\n  } catch (err) {\n    return {\n      succeeded: false,\n      error: `pull response parse failed: ${err instanceof Error ? err.message : String(err)}`,\n    }\n  }\n}\n\n/**\n * Fold the certified prompt surface (and any certified `prompt-surface` /\n * `skill` artifacts) into a base system prompt under a marked section, so the\n * deployed agent prompt == base + the gate-certified additions. Order is stable\n * (prompt surface first, then artifacts by type then path) so the same profile\n * renders byte-identically each call. Returns `base` unchanged when there is no\n * usable certified content.\n */\nexport function composeCertifiedPrompt(base: string, certified: CertifiedProfile | null): string {\n  if (!certified) return base\n  const parts: string[] = []\n  if (certified.promptSurface?.surface.trim()) parts.push(certified.promptSurface.surface.trim())\n  for (const type of Object.keys(certified.artifacts).sort()) {\n    if (type !== 'prompt-surface' && type !== 'skill') continue\n    const bucket = certified.artifacts[type] ?? []\n    for (const a of [...bucket].sort((x, y) => (x.path ?? '').localeCompare(y.path ?? ''))) {\n      if (a.content.trim()) parts.push(a.content.trim())\n    }\n  }\n  if (parts.length === 0) return base\n  return `${base.trim()}\\n\\n## Certified guidance (Tangle Intelligence)\\n\\n${parts.join('\\n\\n')}`\n}\n\n/** What the delivery wrapper hands the agent each run. */\nexport interface AppliedIntelligence {\n  /** The certified profile in effect (null when none promoted / pull failed —\n   *  fail-closed: the agent runs on its base surface). */\n  certified: CertifiedProfile | null\n  /** Fold the certified prompt surface into a base system prompt. */\n  composePrompt(base: string): string\n}\n\n/** An agent wrapped by {@link withCertifiedDelivery}: receives the input plus\n *  the certified intelligence delivered for this run. */\nexport type DeliveredAgent<I, O> = (input: I, applied: AppliedIntelligence) => Promise<O>\n\n/** Delivery config = the Observe config plus the pull target + refresh cadence. */\nexport interface DeliveryConfig extends IntelligenceConfig {\n  /** Pull target. Defaults to `project`. */\n  target?: string\n  /** Plane base URL for the pull (NOT the OTLP `endpoint`). Defaults to\n   *  `TANGLE_INTELLIGENCE_URL` then `https://intelligence.tangle.tools`. */\n  baseUrl?: string\n  /** Min interval between certified-profile pulls. Default 5m. */\n  refreshMs?: number\n  /** fetch impl for the pull (tests). Defaults to global fetch. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Wrap an agent so it (a) Observes each run via the shipped Observe client and\n * (b) RECEIVES the tenant's certified artifacts pulled from the deployed plane.\n * The certified profile is cached and refreshed at most every `refreshMs`; a\n * failed pull is fail-closed — the agent runs on its base surface and never\n * breaks because Intelligence is unreachable. When the plane promotes a new\n * gate-certified surface, the next refresh delivers it to the running agent.\n */\nexport function withCertifiedDelivery<I, O>(\n  agent: DeliveredAgent<I, O>,\n  config: DeliveryConfig,\n): ((input: I) => Promise<O>) & { refresh(): Promise<void> } {\n  const client = createIntelligenceClient(config)\n  const target = config.target ?? config.project\n  const refreshMs = config.refreshMs ?? defaultRefreshMs\n  let certified: CertifiedProfile | null = null\n  let lastPullAt = 0\n  let inflight: Promise<void> | null = null\n\n  async function refresh(): Promise<void> {\n    if (Date.now() - lastPullAt < refreshMs) return\n    if (inflight) return inflight\n    inflight = (async () => {\n      const outcome = await pullCertified({\n        target,\n        apiKey: config.apiKey,\n        baseUrl: config.baseUrl,\n        fetchImpl: config.fetchImpl,\n      })\n      lastPullAt = Date.now()\n      // Only replace the cache on a real pull; a 404/error keeps the last-known\n      // certified profile (or null) — fail-closed, never wipe a good surface.\n      if (outcome.succeeded) certified = outcome.value\n    })()\n    try {\n      await inflight\n    } finally {\n      inflight = null\n    }\n  }\n\n  const wrapped = (async (input: I): Promise<O> => {\n    await refresh()\n    const applied: AppliedIntelligence = {\n      certified,\n      composePrompt: (base: string) => composeCertifiedPrompt(base, certified),\n    }\n    return client.traceRun(\n      { input, labels: { 'tangle.certified_version': certified?.promptSurface?.version ?? -1 } },\n      async (trace) => {\n        const out = await agent(input, applied)\n        trace.recordOutput(out)\n        return out\n      },\n    )\n  }) as ((input: I) => Promise<O>) & { refresh(): Promise<void> }\n  wrapped.refresh = refresh\n  return wrapped\n}\n","/**\n * @experimental\n *\n * Tangle Intelligence SDK — the Observe + Mode-0 product layer.\n *\n * A thin, best-effort wrapper over the shipped trace-export substrate\n * (`createOtelExporter` in `../otel-export`). It does exactly two things in\n * this slice:\n *\n *   1. OBSERVE — wrap a generic agent and export one trace span per call to\n *      Tangle Intelligence, swallowing every export failure so a live agent\n *      never fails because Intelligence is down.\n *   2. MODE 0 / OFF — at `effort: 'off'`, run the agent as PURE PASSTHROUGH\n *      (zero intelligence spawns) with best-effort telemetry still on. The\n *      exported trace tags usage by class `{ inferenceUsd, intelligenceUsd }`,\n *      and at OFF `intelligenceUsd` is provably `0` — the mechanism that proves\n *      an OFF customer paid inference-only.\n *\n * Behavior-changing intelligence (analyst steer, candidate promotion, loops)\n * is a LATER phase and is NOT built here. This wrapper only Observes and passes\n * through; there is no abort path, so the only fail-soft surface is the\n * telemetry export.\n */\n\nimport { createOtelExporter, loopEventToOtelSpan, type OtelExporter } from '../otel-export'\nimport {\n  defaultEffortTier,\n  type EffortOverrides,\n  type EffortSettings,\n  type EffortTier,\n  isIntelligenceOff,\n  resolveEffort,\n} from './effort'\nimport { type Redactor, resolveRedactor } from './redact'\n\nexport type {\n  AppliedIntelligence,\n  CertifiedArtifact,\n  CertifiedProfile,\n  CertifiedPromptSurface,\n  DeliveredAgent,\n  DeliveryConfig,\n  PullCertifiedOptions,\n  PullOutcome,\n} from './delivery'\nexport { composeCertifiedPrompt, pullCertified, withCertifiedDelivery } from './delivery'\nexport type {\n  CorpusAccess,\n  EffortOverrides,\n  EffortSettings,\n  EffortTier,\n} from './effort'\nexport {\n  defaultEffortTier,\n  isIntelligenceOff,\n  resolveEffort,\n} from './effort'\nexport type { Redactor } from './redact'\nexport { defaultRedactor, resolveRedactor } from './redact'\n\n/** Usage class for billing. Base-stream tokens bill `'inference'`; every\n *  intelligence spawn (analyst, corpus, loop) bills `'intelligence'`. The\n *  billing line falls on the spawn line. */\nexport type UsageClass = 'inference' | 'intelligence'\n\n/**\n * The per-class cost split carried by every trace and outcome. `off` ⇒\n * `intelligenceUsd: 0` by construction — there is no intelligence spawn to\n * bill. This is a classification on the trace, NOT a budget-pool split.\n */\nexport interface UsageSplit {\n  /** Base-stream (model) spend in USD. */\n  inferenceUsd: number\n  /** Intelligence-spawn spend in USD. Provably `0` at the OFF tier. */\n  intelligenceUsd: number\n}\n\n/** Repo coordinates a product may declare for the (later) Gated-PR mode. The\n *  Observe slice only records their PRESENCE for `doctor()`; it never touches\n *  the repo. */\nexport interface RepoConfig {\n  owner: string\n  name: string\n  baseBranch: string\n}\n\n/** Client configuration. `project` + `apiKey` are the Observe minimum; the\n *  rest tune effort, endpoint, redaction, and (for `doctor()` readiness)\n *  declare the surfaces/checks/repo a later PR mode would need. */\nexport interface IntelligenceConfig {\n  /** Stable project id — the tenant dimension every trace is tagged with. */\n  project: string\n  /** Bearer key for the Intelligence ingest. Reads `TANGLE_API_KEY` when omitted. */\n  apiKey?: string\n  /** Effort tier (default `'standard'`) plus optional per-field overrides. */\n  effort?: EffortTier | { tier: EffortTier; overrides?: EffortOverrides }\n  /**\n   * OTLP ingest base. The underlying exporter appends `/v1/traces`, so point\n   * this at the OTLP route (e.g. `https://intelligence.tangle.tools/v1/otlp`).\n   * Reads `INTELLIGENCE_OTLP_ENDPOINT` then `OTEL_EXPORTER_OTLP_ENDPOINT` when\n   * omitted; absent all three, export is a no-op (best-effort by construction).\n   */\n  endpoint?: string\n  /**\n   * Redaction hook run over every exported input/output. A function replaces\n   * the default scrubber; `false` opts out entirely (raw fidelity, caller has\n   * sanitized upstream); omitted ⇒ the built-in `defaultRedactor`.\n   */\n  redact?: Redactor | false\n  /** Mutable surfaces a later PR mode would edit. Recorded for `doctor()` only. */\n  surfaces?: string[]\n  /** Verification checks a later PR mode would gate on. Recorded for `doctor()` only. */\n  checks?: string[]\n  /** Repo access a later PR mode would need. Recorded for `doctor()` only. */\n  repo?: RepoConfig\n}\n\n/** Metadata describing one traced run. `runId`/`traceId` default to fresh ids. */\nexport interface TraceMeta {\n  /** The run's input — exported through the redactor. */\n  input?: unknown\n  /** Stable run id. Defaults to a fresh id. */\n  runId?: string\n  /** 32-hex trace id. Defaults to a fresh id. */\n  traceId?: string\n  /** Model id, when known — stamped on the span. */\n  model?: string\n  /** Provider name, when known — stamped on the span. */\n  provider?: string\n  /** Arbitrary extra labels (string/number/boolean) stamped on the span. */\n  labels?: Record<string, string | number | boolean>\n}\n\n/**\n * The trace handle a `traceRun` body records into. `recordOutput` captures the\n * agent's result (redacted on export); `recordOutcome` captures the scored\n * outcome + the `{ inferenceUsd, intelligenceUsd }` split. Both are optional —\n * an un-recorded run still exports a span with whatever was set.\n */\nexport interface TraceHandle {\n  /** Capture the run's output. Exported through the redactor. */\n  recordOutput(output: unknown): void\n  /**\n   * Capture the run's outcome. `usage` defaults to inference-only\n   * (`intelligenceUsd: 0`) — the OFF baseline; an intelligence-enabled run\n   * fills `intelligenceUsd` itself. `costUsd`, when given without a split, is\n   * treated as pure inference.\n   */\n  recordOutcome(outcome: {\n    success?: boolean\n    score?: number\n    costUsd?: number\n    usage?: Partial<UsageSplit>\n  }): void\n}\n\n/** The resolved outcome of one traced run, surfaced on the export span and\n *  available to the caller for downstream billing assertions. */\nexport interface TraceOutcome {\n  runId: string\n  traceId: string\n  project: string\n  /** The resolved effort settings this run executed under. */\n  effort: EffortSettings\n  /** True when this run ran as pure passthrough (the OFF floor). */\n  intelligenceOff: boolean\n  success?: boolean\n  score?: number\n  /** Per-class billing split. `intelligenceUsd` is `0` at the OFF tier. */\n  usage: UsageSplit\n}\n\n/** The Observe-mode Intelligence client. */\nexport interface IntelligenceClient {\n  /** The resolved project id. */\n  readonly project: string\n  /** The resolved effort settings. */\n  readonly effort: EffortSettings\n  /**\n   * Run `fn` under a trace, export one span best-effort, and return whatever\n   * `fn` returns. Telemetry-export failures are swallowed; an error THROWN by\n   * `fn` propagates to the caller (the agent's own failures are not masked).\n   */\n  traceRun<T>(meta: TraceMeta, fn: (trace: TraceHandle) => Promise<T>): Promise<T>\n  /**\n   * Network-free readiness report: which adoption modes are reachable given\n   * this config. Observe is always reachable; Recommend needs outcomes; PR\n   * needs checks + surfaces + repo.\n   */\n  doctor(): DoctorReport\n  /** Flush any pending export spans. Best-effort; resolves even if export fails. */\n  flush(): Promise<void>\n}\n\n/** One mode's readiness verdict. */\nexport interface ModeReadiness {\n  ready: boolean\n  /** Inputs this mode still needs, when not ready. Empty when ready. */\n  missing: string[]\n}\n\n/** The `doctor()` readiness report — Mode-readiness without any network call. */\nexport interface DoctorReport {\n  project: string\n  effort: EffortSettings\n  /** True when an OTLP endpoint is configured (export will actually ship). */\n  exportConfigured: boolean\n  modes: {\n    observe: ModeReadiness\n    recommend: ModeReadiness\n    pr: ModeReadiness\n  }\n}\n\nfunction resolveEffortConfig(effort: IntelligenceConfig['effort']): EffortSettings {\n  if (effort === undefined) return resolveEffort(defaultEffortTier)\n  if (typeof effort === 'string') return resolveEffort(effort)\n  return resolveEffort(effort.tier, effort.overrides)\n}\n\nfunction resolveEndpoint(endpoint: string | undefined): string | undefined {\n  if (endpoint) return endpoint\n  if (typeof process === 'undefined') return undefined\n  return process.env.INTELLIGENCE_OTLP_ENDPOINT ?? process.env.OTEL_EXPORTER_OTLP_ENDPOINT\n}\n\nfunction freshTraceId(): string {\n  return randomHex(32)\n}\n\nfunction freshRunId(): string {\n  return `run-${randomHex(16)}`\n}\n\n/** Serialize a redacted value to a bounded string for a span attribute.\n *  `loopEventToOtelSpan` only stamps string/number/boolean payload fields, so a\n *  structured input/output must be flattened here. Bounded to keep span\n *  attributes small; the full payload is the consumer's own store, not the span. */\nconst previewMaxChars = 4096\nfunction previewJson(value: unknown): string {\n  let s: string\n  if (typeof value === 'string') s = value\n  else {\n    try {\n      s = JSON.stringify(value) ?? String(value)\n    } catch {\n      s = String(value)\n    }\n  }\n  return s.length > previewMaxChars ? `${s.slice(0, previewMaxChars)}…[truncated]` : s\n}\n\nfunction randomHex(chars: number): string {\n  const bytes = new Uint8Array(Math.ceil(chars / 2))\n  if (typeof globalThis.crypto?.getRandomValues === 'function') {\n    globalThis.crypto.getRandomValues(bytes)\n  } else {\n    for (let i = 0; i < bytes.length; i++) bytes[i] = Math.floor(Math.random() * 256)\n  }\n  return Array.from(bytes)\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('')\n    .slice(0, chars)\n}\n\n/**\n * Create an Observe-mode Intelligence client. Resolves effort, endpoint, and\n * redactor up front; the exporter is built lazily and is `undefined` when no\n * endpoint is configured (export becomes a no-op — best-effort by\n * construction).\n */\nexport function createIntelligenceClient(config: IntelligenceConfig): IntelligenceClient {\n  if (!config.project) {\n    throw new Error('createIntelligenceClient: `project` is required')\n  }\n  const effort = resolveEffortConfig(config.effort)\n  const intelligenceOff = isIntelligenceOff(effort)\n  const redactor = resolveRedactor(config.redact)\n  const apiKey =\n    config.apiKey ?? (typeof process !== 'undefined' ? process.env.TANGLE_API_KEY : undefined)\n  const endpoint = resolveEndpoint(config.endpoint)\n\n  // Built lazily: a client with no endpoint never allocates an exporter timer.\n  let exporter: OtelExporter | undefined\n  let exporterResolved = false\n  function getExporter(): OtelExporter | undefined {\n    if (exporterResolved) return exporter\n    exporterResolved = true\n    if (!endpoint) return undefined\n    exporter = createOtelExporter({\n      endpoint,\n      headers: apiKey ? { authorization: `Bearer ${apiKey}` } : {},\n      serviceName: config.project,\n      resourceAttributes: { 'tangle.project': config.project },\n    })\n    return exporter\n  }\n\n  function exportTrace(meta: TraceMeta, outcome: TraceOutcome, output: unknown): void {\n    const ex = getExporter()\n    if (!ex) return\n    const labels: Record<string, string | number | boolean> = {\n      project: config.project,\n      'tangle.effort.intelligence_off': outcome.intelligenceOff,\n      'tangle.usage.inference_usd': outcome.usage.inferenceUsd,\n      'tangle.usage.intelligence_usd': outcome.usage.intelligenceUsd,\n      ...(meta.model ? { 'gen_ai.request.model': meta.model } : {}),\n      ...(meta.provider ? { 'provider.name': meta.provider } : {}),\n      ...(typeof outcome.success === 'boolean'\n        ? { 'tangle.outcome.success': outcome.success }\n        : {}),\n      ...(typeof outcome.score === 'number' ? { 'tangle.outcome.score': outcome.score } : {}),\n      ...(meta.labels ?? {}),\n    }\n    const redactedInput = meta.input !== undefined ? redactor(meta.input) : undefined\n    const redactedOutput = output !== undefined ? redactor(output) : undefined\n    if (redactedInput !== undefined) labels['tangle.input'] = previewJson(redactedInput)\n    if (redactedOutput !== undefined) labels['tangle.output'] = previewJson(redactedOutput)\n    try {\n      ex.exportSpan(\n        loopEventToOtelSpan(\n          {\n            kind: 'tangle.intelligence.run',\n            runId: outcome.runId,\n            timestamp: Date.now(),\n            payload: labels,\n          },\n          outcome.traceId,\n        ),\n      )\n    } catch {\n      // Best-effort — telemetry export must never fail the agent's turn.\n    }\n  }\n\n  return {\n    project: config.project,\n    effort,\n\n    async traceRun<T>(meta: TraceMeta, fn: (trace: TraceHandle) => Promise<T>): Promise<T> {\n      const runId = meta.runId ?? freshRunId()\n      const traceId = meta.traceId ?? freshTraceId()\n      let recordedOutput: unknown\n      // Default split: inference-only. At OFF this is provably the whole bill.\n      const usage: UsageSplit = { inferenceUsd: 0, intelligenceUsd: 0 }\n      let success: boolean | undefined\n      let score: number | undefined\n\n      const trace: TraceHandle = {\n        recordOutput(output: unknown): void {\n          recordedOutput = output\n        },\n        recordOutcome(outcome): void {\n          if (typeof outcome.success === 'boolean') success = outcome.success\n          if (typeof outcome.score === 'number') score = outcome.score\n          if (outcome.usage) {\n            if (typeof outcome.usage.inferenceUsd === 'number') {\n              usage.inferenceUsd = outcome.usage.inferenceUsd\n            }\n            if (typeof outcome.usage.intelligenceUsd === 'number') {\n              usage.intelligenceUsd = outcome.usage.intelligenceUsd\n            }\n          } else if (typeof outcome.costUsd === 'number') {\n            // A bare cost with no split is pure inference (the base stream).\n            usage.inferenceUsd = outcome.costUsd\n          }\n        },\n      }\n\n      // The OFF floor is a HARD invariant, not a default: no intelligence spawn\n      // can occur in this Observe slice, so intelligence-class spend is zero.\n      // We clamp on export rather than trust the caller, so the billing proof\n      // holds even if a caller mis-records an outcome at OFF.\n      const result = await fn(trace)\n      if (intelligenceOff) usage.intelligenceUsd = 0\n\n      const outcome: TraceOutcome = {\n        runId,\n        traceId,\n        project: config.project,\n        effort,\n        intelligenceOff,\n        ...(success !== undefined ? { success } : {}),\n        ...(score !== undefined ? { score } : {}),\n        usage,\n      }\n      exportTrace(meta, outcome, recordedOutput)\n      return result\n    },\n\n    doctor(): DoctorReport {\n      const hasRepo = Boolean(config.repo?.owner && config.repo?.name && config.repo?.baseBranch)\n      const hasChecks = Boolean(config.checks && config.checks.length > 0)\n      const hasSurfaces = Boolean(config.surfaces && config.surfaces.length > 0)\n\n      const prMissing: string[] = []\n      if (!hasChecks) prMissing.push('checks')\n      if (!hasSurfaces) prMissing.push('surfaces')\n      if (!hasRepo) prMissing.push('repo')\n\n      // Recommend needs real outcomes to cluster. In the Observe slice the only\n      // outcome source is `recordOutcome`; we can't introspect future calls, so\n      // readiness reflects that outcome capture is WIRED (the API exists),\n      // gated on the client emitting them — surfaced as the honest dependency.\n      const recommendMissing: string[] = []\n      if (intelligenceOff) recommendMissing.push('effort above off')\n\n      return {\n        project: config.project,\n        effort,\n        exportConfigured: Boolean(endpoint),\n        modes: {\n          observe: { ready: true, missing: [] },\n          recommend: {\n            ready: recommendMissing.length === 0,\n            missing: recommendMissing,\n          },\n          pr: { ready: prMissing.length === 0, missing: prMissing },\n        },\n      }\n    },\n\n    async flush(): Promise<void> {\n      const ex = getExporter()\n      if (!ex) return\n      try {\n        await ex.flush()\n      } catch {\n        // Best-effort — a flush failure must not surface to the caller.\n      }\n    },\n  }\n}\n\n/** A generic agent: one async input → output. The shape `withTangleIntelligence`\n *  preserves exactly. */\nexport type Agent<TInput, TOutput> = (input: TInput) => Promise<TOutput>\n\n/** Either a built client or the config to build one. */\nexport type ClientOrConfig = IntelligenceClient | IntelligenceConfig\n\nfunction isClient(value: ClientOrConfig): value is IntelligenceClient {\n  return typeof (value as IntelligenceClient).traceRun === 'function'\n}\n\n/**\n * Wrap a generic `agent` with best-effort Observe-mode tracing, returning the\n * SAME shape. Each call runs the agent under a trace and exports one span; an\n * export failure is swallowed (the live agent never fails because Intelligence\n * is down) but an error from the agent itself propagates unchanged.\n *\n * At `effort: 'off'` this is pure passthrough plus best-effort telemetry —\n * zero intelligence spawns, `intelligenceUsd: 0` on the trace.\n */\nexport function withTangleIntelligence<TInput, TOutput>(\n  agent: Agent<TInput, TOutput>,\n  clientOrConfig: ClientOrConfig,\n): Agent<TInput, TOutput> {\n  const client = isClient(clientOrConfig)\n    ? clientOrConfig\n    : createIntelligenceClient(clientOrConfig)\n\n  return async (input: TInput): Promise<TOutput> => {\n    return client.traceRun({ input }, async (trace) => {\n      const output = await agent(input)\n      trace.recordOutput(output)\n      return output\n    })\n  }\n}\n"],"mappings":";;;;;;;AAoDA,IAAM,UAAkE;AAAA,EACtE,KAAK;AAAA,IACH,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,uBAAuB;AAAA,EACzB;AAAA,EACA,KAAK;AAAA,IACH,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,uBAAuB;AAAA,EACzB;AAAA,EACA,UAAU;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,uBAAuB;AAAA,EACzB;AAAA,EACA,UAAU;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,uBAAuB;AAAA,EACzB;AAAA,EACA,KAAK;AAAA,IACH,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,uBAAuB;AAAA,EACzB;AACF;AAKO,IAAM,oBAAgC;AAatC,SAAS,cAAc,MAAkB,WAA6C;AAC3F,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR,sCAAsC,KAAK,UAAU,IAAI,CAAC,qBACxD,OAAO,KAAK,OAAO,EAElB,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EACnB,KAAK,IAAI,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO,EAAE,GAAG,QAAQ,GAAI,aAAa,CAAC,EAAG;AAC3C;AASO,SAAS,kBAAkB,UAAmC;AACnE,SACE,SAAS,aAAa,SACtB,SAAS,WAAW,SACpB,SAAS,UAAU,KACnB,SAAS,UAAU,SACnB,SAAS,0BAA0B;AAEvC;;;ACrHA,IAAM,iBAAiB;AAIvB,IAAM,mBACJ;AAGF,IAAM,gBAAuC;AAAA;AAAA,EAE3C;AAAA;AAAA,EAEA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF;AAGA,SAAS,YAAY,OAAuB;AAC1C,MAAI,MAAM;AACV,aAAW,WAAW,eAAe;AACnC,UAAM,IAAI,QAAQ,SAAS,cAAc;AAAA,EAC3C;AACA,SAAO;AACT;AAQO,SAAS,gBAAgB,OAAyB;AACvD,SAAO,KAAK,OAAO,oBAAI,QAAQ,GAAG,CAAC;AACrC;AAEA,IAAM,WAAW;AAEjB,SAAS,KAAK,OAAgB,MAAuB,OAAwB;AAC3E,MAAI,QAAQ,SAAU,QAAO;AAC7B,MAAI,OAAO,UAAU,SAAU,QAAO,YAAY,KAAK;AACvD,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,MAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,OAAK,IAAI,KAAK;AAEd,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,MAAM,QAAQ,CAAC,CAAC;AAAA,EACxD;AAEA,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,CAAC,KAAK,OAAO,QAAQ,KAAgC,GAAG;AACvE,QAAI,iBAAiB,KAAK,GAAG,GAAG;AAC9B,UAAI,GAAG,IAAI;AACX;AAAA,IACF;AACA,QAAI,GAAG,IAAI,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AASO,SAAS,gBAAgB,QAAgD;AAC9E,MAAI,WAAW,MAAO,QAAO,CAAC,UAAU;AACxC,SAAO,UAAU;AACnB;;;ACjEA,IAAM,sBAAsB;AAC5B,IAAM,mBAAmB;AAiDzB,SAAS,oBAAoB,SAAqC;AAChE,MAAI,QAAS,QAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC9C,MAAI,OAAO,YAAY,eAAe,QAAQ,IAAI,yBAAyB;AACzE,WAAO,QAAQ,IAAI,wBAAwB,QAAQ,QAAQ,EAAE;AAAA,EAC/D;AACA,SAAO;AACT;AAEA,SAAS,cAAc,QAAoC;AACzD,MAAI,OAAQ,QAAO;AACnB,MAAI,OAAO,YAAY,eAAe,QAAQ,IAAI;AAChD,WAAO,QAAQ,IAAI;AACrB,SAAO;AACT;AAQA,eAAsB,cAAc,MAAkD;AACpF,QAAM,UAAU,KAAK,aAAc,WAAW;AAC9C,MAAI,CAAC,QAAS,QAAO,EAAE,WAAW,OAAO,OAAO,oCAAoC;AACpF,QAAM,SAAS,cAAc,KAAK,MAAM;AACxC,MAAI,CAAC,OAAQ,QAAO,EAAE,WAAW,OAAO,OAAO,gDAAgD;AAC/F,QAAM,UAAU,oBAAoB,KAAK,OAAO;AAChD,QAAM,MAAM,GAAG,OAAO,gBAAgB,mBAAmB,KAAK,MAAM,CAAC;AACrE,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,QAAQ,KAAK,EAAE,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7E,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,wBAAwB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACjF;AAAA,EACF;AACA,MAAI,IAAI,WAAW,KAAK;AACtB,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,QAAQ,IAAI,MAAM,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,MAChD,QAAQ,IAAI;AAAA,IACd;AAAA,EACF;AACA,MAAI;AACF,WAAO,EAAE,WAAW,MAAM,OAAQ,MAAM,IAAI,KAAK,EAAuB;AAAA,EAC1E,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,+BAA+B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACxF;AAAA,EACF;AACF;AAUO,SAAS,uBAAuB,MAAc,WAA4C;AAC/F,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU,eAAe,QAAQ,KAAK,EAAG,OAAM,KAAK,UAAU,cAAc,QAAQ,KAAK,CAAC;AAC9F,aAAW,QAAQ,OAAO,KAAK,UAAU,SAAS,EAAE,KAAK,GAAG;AAC1D,QAAI,SAAS,oBAAoB,SAAS,QAAS;AACnD,UAAM,SAAS,UAAU,UAAU,IAAI,KAAK,CAAC;AAC7C,eAAW,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,QAAQ,EAAE,CAAC,GAAG;AACtF,UAAI,EAAE,QAAQ,KAAK,EAAG,OAAM,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,IACnD;AAAA,EACF;AACA,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,GAAG,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA,EAAsD,MAAM,KAAK,MAAM,CAAC;AAC/F;AAoCO,SAAS,sBACd,OACA,QAC2D;AAC3D,QAAM,SAAS,yBAAyB,MAAM;AAC9C,QAAM,SAAS,OAAO,UAAU,OAAO;AACvC,QAAM,YAAY,OAAO,aAAa;AACtC,MAAI,YAAqC;AACzC,MAAI,aAAa;AACjB,MAAI,WAAiC;AAErC,iBAAe,UAAyB;AACtC,QAAI,KAAK,IAAI,IAAI,aAAa,UAAW;AACzC,QAAI,SAAU,QAAO;AACrB,gBAAY,YAAY;AACtB,YAAM,UAAU,MAAM,cAAc;AAAA,QAClC;AAAA,QACA,QAAQ,OAAO;AAAA,QACf,SAAS,OAAO;AAAA,QAChB,WAAW,OAAO;AAAA,MACpB,CAAC;AACD,mBAAa,KAAK,IAAI;AAGtB,UAAI,QAAQ,UAAW,aAAY,QAAQ;AAAA,IAC7C,GAAG;AACH,QAAI;AACF,YAAM;AAAA,IACR,UAAE;AACA,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,WAAW,OAAO,UAAyB;AAC/C,UAAM,QAAQ;AACd,UAAM,UAA+B;AAAA,MACnC;AAAA,MACA,eAAe,CAAC,SAAiB,uBAAuB,MAAM,SAAS;AAAA,IACzE;AACA,WAAO,OAAO;AAAA,MACZ,EAAE,OAAO,QAAQ,EAAE,4BAA4B,WAAW,eAAe,WAAW,GAAG,EAAE;AAAA,MACzF,OAAO,UAAU;AACf,cAAM,MAAM,MAAM,MAAM,OAAO,OAAO;AACtC,cAAM,aAAa,GAAG;AACtB,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,UAAQ,UAAU;AAClB,SAAO;AACT;;;ACjCA,SAAS,oBAAoB,QAAsD;AACjF,MAAI,WAAW,OAAW,QAAO,cAAc,iBAAiB;AAChE,MAAI,OAAO,WAAW,SAAU,QAAO,cAAc,MAAM;AAC3D,SAAO,cAAc,OAAO,MAAM,OAAO,SAAS;AACpD;AAEA,SAAS,gBAAgB,UAAkD;AACzE,MAAI,SAAU,QAAO;AACrB,MAAI,OAAO,YAAY,YAAa,QAAO;AAC3C,SAAO,QAAQ,IAAI,8BAA8B,QAAQ,IAAI;AAC/D;AAEA,SAAS,eAAuB;AAC9B,SAAO,UAAU,EAAE;AACrB;AAEA,SAAS,aAAqB;AAC5B,SAAO,OAAO,UAAU,EAAE,CAAC;AAC7B;AAMA,IAAM,kBAAkB;AACxB,SAAS,YAAY,OAAwB;AAC3C,MAAI;AACJ,MAAI,OAAO,UAAU,SAAU,KAAI;AAAA,OAC9B;AACH,QAAI;AACF,UAAI,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;AAAA,IAC3C,QAAQ;AACN,UAAI,OAAO,KAAK;AAAA,IAClB;AAAA,EACF;AACA,SAAO,EAAE,SAAS,kBAAkB,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC,sBAAiB;AACrF;AAEA,SAAS,UAAU,OAAuB;AACxC,QAAM,QAAQ,IAAI,WAAW,KAAK,KAAK,QAAQ,CAAC,CAAC;AACjD,MAAI,OAAO,WAAW,QAAQ,oBAAoB,YAAY;AAC5D,eAAW,OAAO,gBAAgB,KAAK;AAAA,EACzC,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,IAAK,OAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,EAClF;AACA,SAAO,MAAM,KAAK,KAAK,EACpB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE,EACP,MAAM,GAAG,KAAK;AACnB;AAQO,SAAS,yBAAyB,QAAgD;AACvF,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,QAAM,SAAS,oBAAoB,OAAO,MAAM;AAChD,QAAM,kBAAkB,kBAAkB,MAAM;AAChD,QAAM,WAAW,gBAAgB,OAAO,MAAM;AAC9C,QAAM,SACJ,OAAO,WAAW,OAAO,YAAY,cAAc,QAAQ,IAAI,iBAAiB;AAClF,QAAM,WAAW,gBAAgB,OAAO,QAAQ;AAGhD,MAAI;AACJ,MAAI,mBAAmB;AACvB,WAAS,cAAwC;AAC/C,QAAI,iBAAkB,QAAO;AAC7B,uBAAmB;AACnB,QAAI,CAAC,SAAU,QAAO;AACtB,eAAW,mBAAmB;AAAA,MAC5B;AAAA,MACA,SAAS,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG,IAAI,CAAC;AAAA,MAC3D,aAAa,OAAO;AAAA,MACpB,oBAAoB,EAAE,kBAAkB,OAAO,QAAQ;AAAA,IACzD,CAAC;AACD,WAAO;AAAA,EACT;AAEA,WAAS,YAAY,MAAiB,SAAuB,QAAuB;AAClF,UAAM,KAAK,YAAY;AACvB,QAAI,CAAC,GAAI;AACT,UAAM,SAAoD;AAAA,MACxD,SAAS,OAAO;AAAA,MAChB,kCAAkC,QAAQ;AAAA,MAC1C,8BAA8B,QAAQ,MAAM;AAAA,MAC5C,iCAAiC,QAAQ,MAAM;AAAA,MAC/C,GAAI,KAAK,QAAQ,EAAE,wBAAwB,KAAK,MAAM,IAAI,CAAC;AAAA,MAC3D,GAAI,KAAK,WAAW,EAAE,iBAAiB,KAAK,SAAS,IAAI,CAAC;AAAA,MAC1D,GAAI,OAAO,QAAQ,YAAY,YAC3B,EAAE,0BAA0B,QAAQ,QAAQ,IAC5C,CAAC;AAAA,MACL,GAAI,OAAO,QAAQ,UAAU,WAAW,EAAE,wBAAwB,QAAQ,MAAM,IAAI,CAAC;AAAA,MACrF,GAAI,KAAK,UAAU,CAAC;AAAA,IACtB;AACA,UAAM,gBAAgB,KAAK,UAAU,SAAY,SAAS,KAAK,KAAK,IAAI;AACxE,UAAM,iBAAiB,WAAW,SAAY,SAAS,MAAM,IAAI;AACjE,QAAI,kBAAkB,OAAW,QAAO,cAAc,IAAI,YAAY,aAAa;AACnF,QAAI,mBAAmB,OAAW,QAAO,eAAe,IAAI,YAAY,cAAc;AACtF,QAAI;AACF,SAAG;AAAA,QACD;AAAA,UACE;AAAA,YACE,MAAM;AAAA,YACN,OAAO,QAAQ;AAAA,YACf,WAAW,KAAK,IAAI;AAAA,YACpB,SAAS;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS,OAAO;AAAA,IAChB;AAAA,IAEA,MAAM,SAAY,MAAiB,IAAoD;AACrF,YAAM,QAAQ,KAAK,SAAS,WAAW;AACvC,YAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAI;AAEJ,YAAM,QAAoB,EAAE,cAAc,GAAG,iBAAiB,EAAE;AAChE,UAAI;AACJ,UAAI;AAEJ,YAAM,QAAqB;AAAA,QACzB,aAAa,QAAuB;AAClC,2BAAiB;AAAA,QACnB;AAAA,QACA,cAAcA,UAAe;AAC3B,cAAI,OAAOA,SAAQ,YAAY,UAAW,WAAUA,SAAQ;AAC5D,cAAI,OAAOA,SAAQ,UAAU,SAAU,SAAQA,SAAQ;AACvD,cAAIA,SAAQ,OAAO;AACjB,gBAAI,OAAOA,SAAQ,MAAM,iBAAiB,UAAU;AAClD,oBAAM,eAAeA,SAAQ,MAAM;AAAA,YACrC;AACA,gBAAI,OAAOA,SAAQ,MAAM,oBAAoB,UAAU;AACrD,oBAAM,kBAAkBA,SAAQ,MAAM;AAAA,YACxC;AAAA,UACF,WAAW,OAAOA,SAAQ,YAAY,UAAU;AAE9C,kBAAM,eAAeA,SAAQ;AAAA,UAC/B;AAAA,QACF;AAAA,MACF;AAMA,YAAM,SAAS,MAAM,GAAG,KAAK;AAC7B,UAAI,gBAAiB,OAAM,kBAAkB;AAE7C,YAAM,UAAwB;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,SAAS,OAAO;AAAA,QAChB;AAAA,QACA;AAAA,QACA,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC3C,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACvC;AAAA,MACF;AACA,kBAAY,MAAM,SAAS,cAAc;AACzC,aAAO;AAAA,IACT;AAAA,IAEA,SAAuB;AACrB,YAAM,UAAU,QAAQ,OAAO,MAAM,SAAS,OAAO,MAAM,QAAQ,OAAO,MAAM,UAAU;AAC1F,YAAM,YAAY,QAAQ,OAAO,UAAU,OAAO,OAAO,SAAS,CAAC;AACnE,YAAM,cAAc,QAAQ,OAAO,YAAY,OAAO,SAAS,SAAS,CAAC;AAEzE,YAAM,YAAsB,CAAC;AAC7B,UAAI,CAAC,UAAW,WAAU,KAAK,QAAQ;AACvC,UAAI,CAAC,YAAa,WAAU,KAAK,UAAU;AAC3C,UAAI,CAAC,QAAS,WAAU,KAAK,MAAM;AAMnC,YAAM,mBAA6B,CAAC;AACpC,UAAI,gBAAiB,kBAAiB,KAAK,kBAAkB;AAE7D,aAAO;AAAA,QACL,SAAS,OAAO;AAAA,QAChB;AAAA,QACA,kBAAkB,QAAQ,QAAQ;AAAA,QAClC,OAAO;AAAA,UACL,SAAS,EAAE,OAAO,MAAM,SAAS,CAAC,EAAE;AAAA,UACpC,WAAW;AAAA,YACT,OAAO,iBAAiB,WAAW;AAAA,YACnC,SAAS;AAAA,UACX;AAAA,UACA,IAAI,EAAE,OAAO,UAAU,WAAW,GAAG,SAAS,UAAU;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,QAAuB;AAC3B,YAAM,KAAK,YAAY;AACvB,UAAI,CAAC,GAAI;AACT,UAAI;AACF,cAAM,GAAG,MAAM;AAAA,MACjB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACF;AASA,SAAS,SAAS,OAAoD;AACpE,SAAO,OAAQ,MAA6B,aAAa;AAC3D;AAWO,SAAS,uBACd,OACA,gBACwB;AACxB,QAAM,SAAS,SAAS,cAAc,IAClC,iBACA,yBAAyB,cAAc;AAE3C,SAAO,OAAO,UAAoC;AAChD,WAAO,OAAO,SAAS,EAAE,MAAM,GAAG,OAAO,UAAU;AACjD,YAAM,SAAS,MAAM,MAAM,KAAK;AAChC,YAAM,aAAa,MAAM;AACzB,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;","names":["outcome"]}

package/dist/loop-runner-bin.js

@@ -2,12 +2,13 @@
 import {
   parseLoopRunnerArgv,
   runLoopRunnerCli
-} from "./chunk-BKAIVNFA.js";
+} from "./chunk-XEI7AIHU.js";
 import "./chunk-FNMGYYSS.js";
-import "./chunk-OM3YNZIW.js";
+import "./chunk-HYG4ISNS.js";
 import "./chunk-KADIJAD4.js";
 import "./chunk-HNUXAZIJ.js";
-import "./chunk-CM2IK7VS.js";
+import "./chunk-G3RGMA7C.js";
+import "./chunk-FQH33M5N.js";
 import "./chunk-GSUO5QS6.js";
 import "./chunk-DGUM43GV.js";
 export {

package/dist/loops.js

@@ -85,7 +85,7 @@ import {
   trajectoryReport,
   verify,
   widen
-} from "./chunk-CM2IK7VS.js";
+} from "./chunk-FQH33M5N.js";
 import {
   extractLlmCallEvent,
   mapSandboxEvent

package/dist/mcp/bin.js

@@ -4,12 +4,12 @@ import {
   createPropagatingTraceEmitter,
   detectExecutor,
   readTraceContextFromEnv
-} from "../chunk-NDM5VXZW.js";
+} from "../chunk-HAA4KZUD.js";
 import "../chunk-WIR4HOOJ.js";
 import {
   DelegationTaskQueue,
   FileDelegationStore
-} from "../chunk-RHW75JW5.js";
+} from "../chunk-47SWANFA.js";
 import {
   coderTaskFromArgs,
   composeLoopTraceEmitters,
@@ -20,14 +20,15 @@ import {
   parseDetachedSessionRef,
   runDetachedTurn,
   settleDetachedCoderTurn
-} from "../chunk-OM3YNZIW.js";
+} from "../chunk-HYG4ISNS.js";
 import {
   coderProfile
 } from "../chunk-KADIJAD4.js";
 import "../chunk-GLR25NG7.js";
+import "../chunk-G3RGMA7C.js";
 import {
   runLoop
-} from "../chunk-CM2IK7VS.js";
+} from "../chunk-FQH33M5N.js";
 import "../chunk-GSUO5QS6.js";
 import "../chunk-DGUM43GV.js";