@tangle-network/agent-runtime 0.94.1 → 0.94.2

package/dist/{chunk-SJHFJOCY.js → chunk-ZLPKMFOE.js}

@@ -1,6 +1,6 @@
 import {
   agenticGenerator
-} from "./chunk-JEP2WM24.js";
+} from "./chunk-OAVVQAOQ.js";
 import {
   assertModelAllowed
 } from "./chunk-ISTDY47H.js";
@@ -532,4 +532,4 @@ export {
   applyImprovementWinnerToProfile,
   improve
 };
-//# sourceMappingURL=chunk-SJHFJOCY.js.map
+//# sourceMappingURL=chunk-ZLPKMFOE.js.map

package/dist/{completion-gate-BAj3dXeW.d.ts → completion-gate-Bz7VYs7a.d.ts}

@@ -1,4 +1,4 @@
-import { L as LocalHarness, C as CodexTokenUsage, a as CodexExecutionPolicy } from './local-harness-B7bNuNJw.js';
+import { L as LocalHarness, C as CodexTokenUsage, a as CodexExecutionPolicy } from './local-harness-C2HDGiOY.js';
 import { c as Executor } from './types-Bb-CqxJH.js';
 
 /**
@@ -140,12 +140,20 @@ interface WorktreeHarnessResult {
         usage?: CodexTokenUsage;
         /** Installed CLI version captured immediately before execution. */
         cliVersion?: string;
+        /** SHA-256 of the native Codex executable staged read-only in the candidate worktree. */
+        executableSha256?: string;
         /** SHA-256 of `codex debug prompt-input` output for the exact isolated prompt. */
         effectivePromptSha256?: string;
         /** SHA-256 of the exact executable + argv with prompt content replaced by `<PROMPT>`. */
         nonPromptArgsSha256?: string;
         /** SHA-256 of the isolated config that fixes permissions and shell environment. */
         controlledConfigSha256?: string;
+        /** SHA-256 of the normalized caller-supplied host read-denial paths. */
+        readDeniedPathsSha256?: string;
+        /** Sorted normalized caller-supplied host read-denial paths. */
+        readDeniedPaths?: string[];
+        /** Number of normalized caller-supplied host read-denial paths. */
+        readDeniedPathCount?: number;
         /** Explicit isolation claims checked before model execution. */
         executionPolicy?: CodexExecutionPolicy;
     };

package/dist/{coordination-B3ZuApR_.d.ts → coordination-CdU8LyvB.d.ts}

@@ -5,8 +5,8 @@ import { S as SandboxClient, E as ExecCtx, g as LoopTraceEmitter, f as LoopTrace
 import { BackendType, SandboxEvent, SandboxInstance } from '@tangle-network/sandbox';
 import { AgentEvalError } from '@tangle-network/agent-eval';
 import { b as ToolSpec, c as RuntimeTelemetryOptions, R as RouterConfig } from './sanitize-C2jicjNf.js';
-import { G as GitRunner, a as WorktreeCheckRunner, D as DeliverableSpec } from './completion-gate-BAj3dXeW.js';
-import { L as LocalHarness } from './local-harness-B7bNuNJw.js';
+import { G as GitRunner, a as WorktreeCheckRunner, D as DeliverableSpec } from './completion-gate-Bz7VYs7a.js';
+import { L as LocalHarness } from './local-harness-C2HDGiOY.js';
 import { ProviderExecutorOptions, AgentEnvironmentProviderRegistry } from './environment-provider.js';
 import { AgentEnvironmentProvider } from '@tangle-network/agent-interface/environment-provider';
 
@@ -89,6 +89,8 @@ interface CliWorktreeSeam {
     harnessTimeoutMs?: number;
     /** Isolated, network-off Codex execution with terminal JSONL usage capture. */
     codexReproducible?: boolean;
+    /** Absolute host paths denied to reproducible Codex. */
+    codexReadDeniedPaths?: ReadonlyArray<string>;
     testCmd?: string;
     typecheckCmd?: string;
     checkTimeoutMs?: number;

package/dist/{improve-r8SvIxYv.d.ts → improve-mrYmy_1e.d.ts}

@@ -1,7 +1,7 @@
 import { Scenario, SelfImproveOptions, SurfaceProposer, SelfImproveResult, MutableSurface } from '@tangle-network/agent-eval/contract';
 import { AgentProfile } from '@tangle-network/agent-interface';
-import { L as LocalHarness } from './local-harness-B7bNuNJw.js';
-import { V as Verifier, C as CandidateGenerator } from './agentic-generator-D9ZmAuiL.js';
+import { L as LocalHarness } from './local-harness-C2HDGiOY.js';
+import { V as Verifier, C as CandidateGenerator } from './agentic-generator-B7Cyl6cn.js';
 
 /**
  *

package/dist/index.d.ts

@@ -5,29 +5,29 @@ export { r as AgentAdapter, s as AgentKnowledgeProvider, A as AgentRuntimeEvent,
 export { AgentCandidateCodeSource, AgentCandidateCodeSurfaceSource, AgentCandidateModelGrantActivateInput, AgentCandidateModelGrantClient, AgentCandidateModelGrantReservation, AgentCandidateModelGrantReserveInput, AgentCandidateModelGrantSettleInput, AgentCandidateProfileSource, BuildAgentCandidateBundleInput, CreateProtectedAgentCandidateModelPortOptions, DisposePreparedAgentCandidateOptions, FileAgentCandidateExecutionClaimStore, FileAgentCandidateExecutionClaimStoreOptions, RecoverExpiredAgentCandidateOptions, applyExactAgentProfileDiff, buildAgentCandidateBundle, candidateExecutionClaim, createProtectedAgentCandidateModelPort, disposePreparedAgentCandidateExecution, parseExactAgentProfile, parseExactAgentProfileDiff, persistCandidateOutputArtifact, recoverExpiredAgentCandidateExecution, verifyAgentCandidateBundle } from './candidate-execution/index.js';
 export { d as AgentCandidateArtifactPort, e as AgentCandidateBenchmarkGraderIdentity, f as AgentCandidateBenchmarkGraderPort, A as AgentCandidateBundleInput, g as AgentCandidateContainerPort, h as AgentCandidateExecutionAttemptRecord, i as AgentCandidateExecutionAttemptRef, j as AgentCandidateExecutionClaim, k as AgentCandidateExecutionClaimResult, l as AgentCandidateExecutionClaimStore, m as AgentCandidateExecutionCleanupHandles, n as AgentCandidateExecutionFailureClass, o as AgentCandidateExecutionFinishResult, p as AgentCandidateExecutionLease, q as AgentCandidateExecutionPhase, r as AgentCandidateExecutionPhaseResult, b as AgentCandidateExecutionPorts, s as AgentCandidateExecutionRecoveryEvidence, t as AgentCandidateExecutionStageResult, u as AgentCandidateExecutionTerminalRecord, v as AgentCandidateExecutionTerminalResult, w as AgentCandidateExecutionUsage, x as AgentCandidateExecutorFinalCapture, y as AgentCandidateExecutorMemoryCapture, z as AgentCandidateExecutorPort, B as AgentCandidateExecutorProfileFile, C as AgentCandidateExecutorRequest, D as AgentCandidateExecutorStopRequest, F as AgentCandidateExecutorTaskOutcomeCapture, G as AgentCandidateExecutorWorkspaceFile, H as AgentCandidateExecutorWorkspaceInput, I as AgentCandidateMemoryPort, J as AgentCandidateMemoryResetResult, K as AgentCandidateModelLimits, L as AgentCandidateModelPort, M as AgentCandidateOutputArtifactPort, N as AgentCandidateOutputPurpose, O as AgentCandidateProtectedModelActivation, Q as AgentCandidateProtectedModelCall, R as AgentCandidateProtectedModelReservation, S as AgentCandidateProtectedModelSettlement, T as AgentCandidateProtectedRunCapture, U as AgentCandidateRepositoryPort, V as AgentCandidateRetryRejection, c as AgentCandidateRunFinalization, a as AgentCandidateTaskExecution, W as AgentCandidateVerificationPorts, X as AgentCandidateWorkspacePort, Y as CANDIDATE_TRACE_ENV, Z as CANDIDATE_TRACE_TAGS, _ as CanonicalCandidateDocument, E as ExecutePreparedAgentCandidateOptions, $ as InMemoryAgentCandidateExecutionClaimStore, P as PrepareAgentCandidateExecutionOptions, a0 as PreparedAgentCandidateExecution, a1 as PreparedAgentCandidateInstruction, a2 as PreparedAgentCandidateLaunch, a3 as PreparedAgentCandidateTrace, a4 as ResolvedAgentCandidateContainer, a5 as VerifiedAgentCandidate, a6 as VerifiedAgentCandidateTaskOutcome, a7 as executePreparedAgentCandidate, a8 as prepareAgentCandidateExecution, a9 as sealAgentCandidateBundle } from './prepare-BKxAiUcH.js';
 import { Scenario, ProfileDispatchFn, ProposeContext, SurfaceProposer } from '@tangle-network/agent-eval/campaign';
-import { C as CandidateGenerator } from './agentic-generator-D9ZmAuiL.js';
-export { A as AgenticGeneratorOptions, I as ImprovementDriverOptions, M as ManagedImprovementDriver, V as Verifier, a as VerifyResult, b as agenticGenerator, c as commandVerifier, i as improvementDriver } from './agentic-generator-D9ZmAuiL.js';
-export { c as ImproveCodeOptions, d as ImproveMemoryOptions, a as ImproveOptions, b as ImproveResult, e as ImproveSkillsOptions, I as ImproveSurface, f as applyImprovementWinnerToProfile, i as improve } from './improve-r8SvIxYv.js';
-export { M as McpServeSpec, m as mcpServeVerifier } from './mcp-serve-verifier-BuXjaZDE.js';
+import { C as CandidateGenerator } from './agentic-generator-B7Cyl6cn.js';
+export { A as AgenticGeneratorOptions, I as ImprovementDriverOptions, M as ManagedImprovementDriver, V as Verifier, a as VerifyResult, b as agenticGenerator, c as commandVerifier, i as improvementDriver } from './agentic-generator-B7Cyl6cn.js';
+export { c as ImproveCodeOptions, d as ImproveMemoryOptions, a as ImproveOptions, b as ImproveResult, e as ImproveSkillsOptions, I as ImproveSurface, f as applyImprovementWinnerToProfile, i as improve } from './improve-mrYmy_1e.js';
+export { M as McpServeSpec, m as mcpServeVerifier } from './mcp-serve-verifier-C65X30mY.js';
 import { AgentProfileDiff, AgentProfile as AgentProfile$1 } from '@tangle-network/agent-interface';
 import { Scenario as Scenario$1, SelfImproveOptions } from '@tangle-network/agent-eval/contract';
 import { S as SurfaceImprovementEdit } from './improvement-adapter-BieWeK5J.js';
 import { I as ImprovementAdapter } from './types-BC3bZpH0.js';
 export { AgentKnowledgeReadinessCheckOptions, KnowledgeImprovementJobMeasurement, KnowledgeImprovementJobResult, KnowledgeReadinessCheck, KnowledgeReadinessCheckInput, KnowledgeReadinessCheckResult, RESEARCH_SUPERVISOR_SYSTEM_PROMPT, RunKnowledgeImprovementJobOptions, SupervisedKnowledgeUpdateInput, SupervisedKnowledgeUpdateOptions, SupervisedKnowledgeUpdateResult, SupervisedKnowledgeUpdater, createAgentKnowledgeReadinessCheck, createSupervisedKnowledgeUpdater, formatSupervisedKnowledgeTask, knowledgeReadinessDeliverable, runKnowledgeImprovementJob, runSupervisedKnowledgeUpdate } from './knowledge.js';
-export { D as DELEGATED_LOOP_MODES, a as DelegatedLoopMode, b as DelegatedLoopRegistry, c as DelegatedLoopResult, d as DelegatedLoopRunner, L as LoopRunnerCliArgs, e as LoopRunnerCliResult, R as ResearchLoopResult, f as ResearchLoopRunnerOptions, g as RunDelegatedLoopOptions, V as VetoedFact, W as WorktreeLoopRunnerOptions, h as auditLoopRunner, i as isDelegatedLoopMode, p as parseLoopRunnerArgv, r as researchLoopRunner, j as runDelegatedLoop, k as runLoopRunnerCli, s as selfImproveLoopRunner, w as worktreeLoopRunner } from './loop-runner-bin-D4bMIxmB.js';
+export { D as DELEGATED_LOOP_MODES, a as DelegatedLoopMode, b as DelegatedLoopRegistry, c as DelegatedLoopResult, d as DelegatedLoopRunner, L as LoopRunnerCliArgs, e as LoopRunnerCliResult, R as ResearchLoopResult, f as ResearchLoopRunnerOptions, g as RunDelegatedLoopOptions, V as VetoedFact, W as WorktreeLoopRunnerOptions, h as auditLoopRunner, i as isDelegatedLoopMode, p as parseLoopRunnerArgv, r as researchLoopRunner, j as runDelegatedLoop, k as runLoopRunnerCli, s as selfImproveLoopRunner, w as worktreeLoopRunner } from './loop-runner-bin-BSvtOPMv.js';
 export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from './openai-tools-D0ZSRCC6.js';
-export { b0 as EvalRunEvent, b1 as EvalRunGeneration, b2 as EvalRunsExportConfig, b3 as EvalRunsExportResult, b4 as INTELLIGENCE_WIRE_VERSION, b5 as LoopSpanNode, b6 as OtelAttribute, b7 as OtelExportConfig, b8 as OtelExporter, b9 as OtelSpan, ba as RuntimeEventOtelOptions, bb as buildLoopOtelSpans, bc as buildLoopSpanNodes, bd as buildRuntimeEventOtelSpans, be as createOtelExporter, bf as exportEvalRuns, bg as loopEventToOtelSpan } from './coordination-B3ZuApR_.js';
+export { b0 as EvalRunEvent, b1 as EvalRunGeneration, b2 as EvalRunsExportConfig, b3 as EvalRunsExportResult, b4 as INTELLIGENCE_WIRE_VERSION, b5 as LoopSpanNode, b6 as OtelAttribute, b7 as OtelExportConfig, b8 as OtelExporter, b9 as OtelSpan, ba as RuntimeEventOtelOptions, bb as buildLoopOtelSpans, bc as buildLoopSpanNodes, bd as buildRuntimeEventOtelSpans, be as createOtelExporter, bf as exportEvalRuns, bg as loopEventToOtelSpan } from './coordination-CdU8LyvB.js';
 import { c as RuntimeTelemetryOptions } from './sanitize-C2jicjNf.js';
 export { d as RuntimeEventCollector, e as RuntimeStreamEventCollector, S as SanitizedKnowledgeReadinessReport, f as createRuntimeEventCollector, g as createRuntimeStreamEventCollector, s as sanitizeAgentRuntimeEvent, h as sanitizeKnowledgeReadinessReport, i as sanitizeRuntimeStreamEvent } from './sanitize-C2jicjNf.js';
 import '@tangle-network/sandbox';
-import './local-harness-B7bNuNJw.js';
+import './local-harness-C2HDGiOY.js';
 import 'node:child_process';
 import '@tangle-network/agent-knowledge';
-import './supervise-DTNcLDl2.js';
+import './supervise-U6DTnQu6.js';
 import './types-Bb-CqxJH.js';
-import './completion-gate-BAj3dXeW.js';
+import './completion-gate-Bz7VYs7a.js';
 import './kb-gate-CwHO0vz6.js';
-import './worktree-fanout-IMKqdV_E.js';
+import './worktree-fanout-DqzIBWMW.js';
 import './substrate-DO2GHNg2.js';
 import './environment-provider.js';
 import '@tangle-network/agent-interface/environment-provider';

package/dist/index.js

@@ -8,7 +8,7 @@ import {
 import {
   mcpToolsForRuntimeMcp,
   mcpToolsForRuntimeMcpSubset
-} from "./chunk-K7OPNHU4.js";
+} from "./chunk-DNK3L7QB.js";
 import {
   DEFAULT_ROUTER_BASE_URL,
   cleanModelId,
@@ -27,14 +27,14 @@ import {
   runLoopRunnerCli,
   selfImproveLoopRunner,
   worktreeLoopRunner
-} from "./chunk-RTSZNYXM.js";
+} from "./chunk-PV6Q3OKU.js";
 import "./chunk-SGKPNBXE.js";
 import {
   applyImprovementWinnerToProfile,
   improve,
   improvementDriver,
   rawTraceDistiller
-} from "./chunk-SJHFJOCY.js";
+} from "./chunk-ZLPKMFOE.js";
 import {
   CANDIDATE_TRACE_ENV,
   CANDIDATE_TRACE_TAGS,
@@ -59,7 +59,7 @@ import {
   normalizeBackendStreamEvent,
   nowIso,
   touchSession
-} from "./chunk-D336OZHK.js";
+} from "./chunk-L4CACVIJ.js";
 import "./chunk-ZQZX77MM.js";
 import {
   mcpBuildPrompt,
@@ -69,7 +69,7 @@ import {
 import {
   agenticGenerator,
   commandVerifier
-} from "./chunk-JEP2WM24.js";
+} from "./chunk-OAVVQAOQ.js";
 import {
   RESEARCH_SUPERVISOR_SYSTEM_PROMPT,
   createAgentKnowledgeReadinessCheck,
@@ -78,14 +78,14 @@ import {
   knowledgeReadinessDeliverable,
   runKnowledgeImprovementJob,
   runSupervisedKnowledgeUpdate
-} from "./chunk-HPCJBBLS.js";
+} from "./chunk-7ESP4C3O.js";
 import "./chunk-5QOB7H74.js";
 import {
   composeRuntimeHooks,
   defineRuntimeHooks,
   notifyRuntimeDecisionPoint,
   notifyRuntimeHookEvent
-} from "./chunk-URMJTSXB.js";
+} from "./chunk-TTWMSNFZ.js";
 import "./chunk-DPEUKJRO.js";
 import {
   INTELLIGENCE_WIRE_VERSION,
@@ -105,7 +105,7 @@ import "./chunk-WIPGQ4GT.js";
 import "./chunk-VSWBYWFK.js";
 import "./chunk-3MDZX7YU.js";
 import "./chunk-FVJ7M3DA.js";
-import "./chunk-PJNGPWTA.js";
+import "./chunk-JFAGXZKR.js";
 import {
   AgentEvalError,
   BackendTransportError,

package/dist/intelligence.d.ts

@@ -5,12 +5,12 @@ import { AnalystFinding } from '@tangle-network/agent-eval/analyst';
 import { Scenario, SelfImproveResult } from '@tangle-network/agent-eval/contract';
 import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-BC3bZpH0.js';
 import { A as AgentCandidateBundleInput, a as AgentCandidateTaskExecution, b as AgentCandidateExecutionPorts, P as PrepareAgentCandidateExecutionOptions, E as ExecutePreparedAgentCandidateOptions, c as AgentCandidateRunFinalization } from './prepare-BKxAiUcH.js';
-import { I as ImproveSurface, a as ImproveOptions, b as ImproveResult } from './improve-r8SvIxYv.js';
+import { I as ImproveSurface, a as ImproveOptions, b as ImproveResult } from './improve-mrYmy_1e.js';
 import '@tangle-network/agent-eval';
 import '@tangle-network/sandbox';
-import './local-harness-B7bNuNJw.js';
+import './local-harness-C2HDGiOY.js';
 import 'node:child_process';
-import './agentic-generator-D9ZmAuiL.js';
+import './agentic-generator-B7Cyl6cn.js';
 import '@tangle-network/agent-eval/campaign';
 
 /**

package/dist/intelligence.js

@@ -1,7 +1,7 @@
 import {
   applyImprovementWinnerToProfile,
   improve
-} from "./chunk-SJHFJOCY.js";
+} from "./chunk-ZLPKMFOE.js";
 import {
   assertCandidateProfileBinding,
   canonicalCandidateDigest,
@@ -17,7 +17,7 @@ import {
 import {
   runAnalystLoop
 } from "./chunk-ZQZX77MM.js";
-import "./chunk-JEP2WM24.js";
+import "./chunk-OAVVQAOQ.js";
 import {
   buildLoopOtelSpans,
   buildRuntimeEventOtelSpans,
@@ -27,7 +27,7 @@ import {
 import "./chunk-WIPGQ4GT.js";
 import "./chunk-3MDZX7YU.js";
 import "./chunk-FVJ7M3DA.js";
-import "./chunk-PJNGPWTA.js";
+import "./chunk-JFAGXZKR.js";
 import "./chunk-YEJR7IXO.js";
 import "./chunk-DGUM43GV.js";
 

package/dist/knowledge.d.ts

@@ -1,15 +1,15 @@
 import { KnowledgeReadinessSpec, BuildEvalKnowledgeBundleOptions, KnowledgeBaseQualityOptions, KnowledgeImprovementResult, KnowledgeImprovementOptions } from '@tangle-network/agent-knowledge';
-import { E as ExecutorConfig } from './coordination-B3ZuApR_.js';
-import { a as SuperviseOptions, S as SupervisorProfile } from './supervise-DTNcLDl2.js';
+import { E as ExecutorConfig } from './coordination-CdU8LyvB.js';
+import { a as SuperviseOptions, S as SupervisorProfile } from './supervise-U6DTnQu6.js';
 import { B as Budget, b as SupervisedResult } from './types-Bb-CqxJH.js';
-import { D as DeliverableSpec } from './completion-gate-BAj3dXeW.js';
+import { D as DeliverableSpec } from './completion-gate-Bz7VYs7a.js';
 import '@tangle-network/agent-interface';
 import './substrate-DO2GHNg2.js';
 import './types-DWA64rbJ.js';
 import '@tangle-network/agent-eval';
 import '@tangle-network/sandbox';
 import './sanitize-C2jicjNf.js';
-import './local-harness-B7bNuNJw.js';
+import './local-harness-C2HDGiOY.js';
 import 'node:child_process';
 import './environment-provider.js';
 import '@tangle-network/agent-interface/environment-provider';

package/dist/knowledge.js

@@ -6,16 +6,16 @@ import {
   knowledgeReadinessDeliverable,
   runKnowledgeImprovementJob,
   runSupervisedKnowledgeUpdate
-} from "./chunk-HPCJBBLS.js";
+} from "./chunk-7ESP4C3O.js";
 import "./chunk-5QOB7H74.js";
-import "./chunk-URMJTSXB.js";
+import "./chunk-TTWMSNFZ.js";
 import "./chunk-DPEUKJRO.js";
 import "./chunk-ISTDY47H.js";
 import "./chunk-WIPGQ4GT.js";
 import "./chunk-VSWBYWFK.js";
 import "./chunk-3MDZX7YU.js";
 import "./chunk-FVJ7M3DA.js";
-import "./chunk-PJNGPWTA.js";
+import "./chunk-JFAGXZKR.js";
 import "./chunk-YEJR7IXO.js";
 import "./chunk-DGUM43GV.js";
 export {

package/dist/lifecycle.d.ts

@@ -2,9 +2,9 @@ import { AgentProfile } from '@tangle-network/agent-interface';
 import { a as ProfileArtifact, A as ArtifactKind, b as ArtifactStatus, c as ArtifactInput, E as EvalRunner, d as EvalResult, G as GenerateContext, C as CandidateGenerator, e as PromotionVerdict, P as PromotionGate } from './generator-YkAQrOoD.js';
 export { f as ArtifactPayloads, H as HeldOutPromotionGateOptions, M as MarginalLift, g as MeasureMarginalLiftOptions, h as heldOutPromotionGate, m as measureMarginalLift, t as thresholdPromotionGate } from './generator-YkAQrOoD.js';
 import { LlmClientOptions, AnalystFinding } from '@tangle-network/agent-eval';
-import { M as McpServeSpec } from './mcp-serve-verifier-BuXjaZDE.js';
-import { L as LocalHarness } from './local-harness-B7bNuNJw.js';
-import './agentic-generator-D9ZmAuiL.js';
+import { M as McpServeSpec } from './mcp-serve-verifier-C65X30mY.js';
+import { L as LocalHarness } from './local-harness-C2HDGiOY.js';
+import './agentic-generator-B7Cyl6cn.js';
 import '@tangle-network/agent-eval/campaign';
 import 'node:child_process';
 

package/dist/lifecycle.js

@@ -6,8 +6,8 @@ import {
 import {
   agenticGenerator,
   commandVerifier
-} from "./chunk-JEP2WM24.js";
-import "./chunk-PJNGPWTA.js";
+} from "./chunk-OAVVQAOQ.js";
+import "./chunk-JFAGXZKR.js";
 import {
   ValidationError
 } from "./chunk-YEJR7IXO.js";

package/dist/{local-harness-B7bNuNJw.d.ts → local-harness-C2HDGiOY.d.ts}

@@ -45,6 +45,9 @@ interface RunLocalHarnessOptions {
     /** Isolate Codex from ambient configuration/instructions and require JSONL token usage.
      *  The invocation should come from `harnessInvocation(..., { codexReproducible: true })`. */
     codexReproducible?: boolean;
+    /** Absolute host paths that reproducible Codex must not read. The normalized set is compiled
+     *  into the controlled permission profile and its digest is returned in execution evidence. */
+    codexReadDeniedPaths?: ReadonlyArray<string>;
     /** Wall-clock kill deadline (ms). Default 5 min. Subprocess SIGTERMed on expiry. */
     timeoutMs?: number;
     /** Caller cancellation. SIGTERM is sent on abort. */
@@ -59,7 +62,10 @@ interface RunLocalHarnessOptions {
         cwd: string;
         env: NodeJS.ProcessEnv;
         stdio: 'pipe';
+        detached: boolean;
     }) => ChildProcess;
+    /** Test seam for locating the native Codex executable before it is staged in the worktree. */
+    resolveCodexExecutable?: (command: string, env: NodeJS.ProcessEnv) => Promise<string>;
 }
 /** Exact aggregate usage emitted by Codex's terminal `turn.completed` JSONL event. */
 interface CodexTokenUsage {
@@ -87,17 +93,27 @@ interface CodexExecutionPolicy {
     shellEnvironment: 'core-filtered';
     loginShell: false;
     credentialsReadable: false;
+    hostHomeReadable: false;
+    procEnvironment: 'private-sanitized';
+    sensitiveEnvironmentNamesVisible: false;
     parentRepoRead: false;
     gitMetadata: false;
     temporaryDirectory: 'workspace-private';
+    stagedExecutable: 'static-elf-read-only';
+    callerReadDeniedPaths: 'enforced';
     containerSockets: false;
 }
 /** Zero-model-call evidence for the exact Codex process about to run. */
 interface CodexExecutionEvidence {
     cliVersion: string;
+    executableSha256: string;
     effectivePromptSha256: string;
     nonPromptArgsSha256: string;
     controlledConfigSha256: string;
+    /** Sorted normalized paths compiled into the permission profile. */
+    readDeniedPaths: string[];
+    readDeniedPathsSha256: string;
+    readDeniedPathCount: number;
     policy: CodexExecutionPolicy;
 }
 /** @experimental */

package/dist/{loop-runner-bin-D4bMIxmB.d.ts → loop-runner-bin-BSvtOPMv.d.ts}

@@ -3,7 +3,7 @@ import { SelfImproveOptions, SelfImproveResult } from '@tangle-network/agent-eva
 import { R as RunAnalystLoopOpts, a as RunAnalystLoopResult } from './types-BC3bZpH0.js';
 import { F as FactCandidate, C as CreateKbGateOptions } from './kb-gate-CwHO0vz6.js';
 import { B as Budget } from './types-Bb-CqxJH.js';
-import { A as AuthoredHarness, W as WinnerStrategy, a as WorktreeFanoutOptions, b as WorktreePatchArtifact } from './worktree-fanout-IMKqdV_E.js';
+import { A as AuthoredHarness, W as WinnerStrategy, a as WorktreeFanoutOptions, b as WorktreePatchArtifact } from './worktree-fanout-DqzIBWMW.js';
 
 /**
  *

package/dist/loop-runner-bin.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-export { L as LoopRunnerCliArgs, e as LoopRunnerCliResult, p as parseLoopRunnerArgv, k as runLoopRunnerCli } from './loop-runner-bin-D4bMIxmB.js';
+export { L as LoopRunnerCliArgs, e as LoopRunnerCliResult, p as parseLoopRunnerArgv, k as runLoopRunnerCli } from './loop-runner-bin-BSvtOPMv.js';
 import '@tangle-network/agent-eval/campaign';
 import '@tangle-network/agent-eval/contract';
 import './types-BC3bZpH0.js';
@@ -9,7 +9,7 @@ import './types-Bb-CqxJH.js';
 import '@tangle-network/agent-interface';
 import '@tangle-network/sandbox';
 import './types-DWA64rbJ.js';
-import './worktree-fanout-IMKqdV_E.js';
-import './completion-gate-BAj3dXeW.js';
-import './local-harness-B7bNuNJw.js';
+import './worktree-fanout-DqzIBWMW.js';
+import './completion-gate-Bz7VYs7a.js';
+import './local-harness-C2HDGiOY.js';
 import 'node:child_process';

package/dist/loop-runner-bin.js

@@ -2,18 +2,18 @@
 import {
   parseLoopRunnerArgv,
   runLoopRunnerCli
-} from "./chunk-RTSZNYXM.js";
+} from "./chunk-PV6Q3OKU.js";
 import "./chunk-SGKPNBXE.js";
-import "./chunk-D336OZHK.js";
+import "./chunk-L4CACVIJ.js";
 import "./chunk-ZQZX77MM.js";
-import "./chunk-URMJTSXB.js";
+import "./chunk-TTWMSNFZ.js";
 import "./chunk-DPEUKJRO.js";
 import "./chunk-ISTDY47H.js";
 import "./chunk-WIPGQ4GT.js";
 import "./chunk-VSWBYWFK.js";
 import "./chunk-3MDZX7YU.js";
 import "./chunk-FVJ7M3DA.js";
-import "./chunk-PJNGPWTA.js";
+import "./chunk-JFAGXZKR.js";
 import "./chunk-YEJR7IXO.js";
 import "./chunk-DGUM43GV.js";
 export {

package/dist/loops.d.ts

@@ -4,26 +4,26 @@ import { SandboxEvent, SandboxInstance, CreateSandboxOptions, PromptOptions, Tas
 export { AgentProfile, CreateSandboxOptions, SandboxEvent, SandboxInstance } from '@tangle-network/sandbox';
 import { a as ResultBlobStore, f as SpawnJournal, N as NodeId, j as SpawnEvent, E as ExecutorFactory, A as Agent, B as Budget, S as Scope, h as Settled, b as SupervisedResult, i as Spend, U as UsageEvent, e as ExecutorRegistry, k as Supervisor } from './types-Bb-CqxJH.js';
 export { d as AgentSpec, c as Executor, l as ExecutorContext, m as ExecutorResult, R as Runtime, n as SupervisorOpts, T as TreeView, W as WidenGate } from './types-Bb-CqxJH.js';
-import { M as MakeWorkerAgent, A as AnalystRegistry, o as CoordinationTools, n as CoordinationEvent, as as QuestionPolicy, E as ExecutorConfig } from './coordination-B3ZuApR_.js';
-export { bh as BusEvent, bi as BusRecord, bj as BusStats, bk as EventBus, bl as ProviderSeam, bm as PublishOptions, bn as cliWorktreeExecutor, bo as createEventBus, bp as createExecutor, bq as createExecutorRegistry } from './coordination-B3ZuApR_.js';
+import { M as MakeWorkerAgent, A as AnalystRegistry, o as CoordinationTools, n as CoordinationEvent, as as QuestionPolicy, E as ExecutorConfig } from './coordination-CdU8LyvB.js';
+export { bh as BusEvent, bi as BusRecord, bj as BusStats, bk as EventBus, bl as ProviderSeam, bm as PublishOptions, bn as cliWorktreeExecutor, bo as createEventBus, bp as createExecutor, bq as createExecutorRegistry } from './coordination-CdU8LyvB.js';
 import { R as RuntimeHooks, I as Iteration, S as SandboxClient, D as Driver, d as AgentRunSpec, c as OutputAdapter, V as Validator, E as ExecCtx, X as LoopWinner, Y as LoopLineageOptions, Z as LoopResult, L as LoopTokenUsage, a as RuntimeStreamEvent, _ as MountRecorder, k as AgentExecutionBackend, b as AgentTaskStatus, B as BackendErrorDetail, $ as SelectionReceipt } from './types-DWA64rbJ.js';
 export { a0 as LoopDecisionPayload, a1 as LoopEndedPayload, a2 as LoopIterationDispatchPayload, a3 as LoopIterationEndedPayload, a4 as LoopIterationStartedPayload, a5 as LoopPlanDescription, a6 as LoopPlanPayload, e as LoopSandboxPlacement, a7 as LoopStartedPayload, a8 as LoopTeardownFailedPayload, g as LoopTraceEmitter, f as LoopTraceEvent, a9 as MountManifestEntry, aa as RunProvenance, ab as ValidationCtx } from './types-DWA64rbJ.js';
 import { RunProfileMatrixResult, Scenario, ProfileDispatchFn, JudgeConfig, RunProfileMatrixOptions, DispatchFn } from '@tangle-network/agent-eval/campaign';
 export { AgentEnvironmentProviderRef, AgentEnvironmentProviderRegistry, ProviderAsSandboxClientOptions, ProviderExecutorOptions, SandboxClientProviderOptions, createAgentEnvironmentProviderRegistry, providerAsExecutor, providerAsSandboxClient, resolveAgentEnvironmentProvider, sandboxClientAsProvider } from './environment-provider.js';
-import { C as CorpusRecord, c as Corpus, O as Outcome, S as ScopeAnalyzeInput, d as AssertTraceDerivedFindings, e as SteerContext, f as ScopeAnalyst, F as FanoutOptions, g as CombinatorShape, h as ScopeWidenGate, L as LoopUntilSpec, P as PanelSpec, i as PipelineStage, W as WinnerStrategy, j as FanoutWinnerSelector, V as VerifySpec, k as WidenSpec, l as CorpusFilter, R as RenderCorpusToInstructionsOptions, D as DefinePersonaInput, m as Persona, n as RunPersonifiedOptions, o as ShapeRegistry, p as LoopShape, E as EqualKArm, q as EqualKOnCostOptions, r as EqualKVerdict, T as TrajectoryReportOptions, s as TrajectoryReport } from './worktree-fanout-IMKqdV_E.js';
-export { A as AuthoredHarness, t as DefinePersona, u as EqualKOnCost, v as Fanout, w as FanoutSynthesis, x as FlatWidenGate, y as LoopUntil, z as LoopUntilState, B as Panel, G as PanelJudge, H as PanelVerdict, I as PatchDeliverableOptions, J as PersonaContext, K as PersonaExecutors, M as Pipeline, N as RenderCorpusToInstructions, Q as RunPersonified, U as ShapeBudget, X as ShapeContext, Y as TrajectoryNode, Z as TrajectoryReportFn, _ as Verify, $ as Widen, a0 as WidenDecision, a1 as WidenLineage, a2 as WorktreeCliExecutorOptions, a as WorktreeFanoutOptions, b as WorktreePatchArtifact, a3 as createWorktreeCliExecutor, a4 as patchDelivered, a5 as worktreeFanout } from './worktree-fanout-IMKqdV_E.js';
+import { C as CorpusRecord, c as Corpus, O as Outcome, S as ScopeAnalyzeInput, d as AssertTraceDerivedFindings, e as SteerContext, f as ScopeAnalyst, F as FanoutOptions, g as CombinatorShape, h as ScopeWidenGate, L as LoopUntilSpec, P as PanelSpec, i as PipelineStage, W as WinnerStrategy, j as FanoutWinnerSelector, V as VerifySpec, k as WidenSpec, l as CorpusFilter, R as RenderCorpusToInstructionsOptions, D as DefinePersonaInput, m as Persona, n as RunPersonifiedOptions, o as ShapeRegistry, p as LoopShape, E as EqualKArm, q as EqualKOnCostOptions, r as EqualKVerdict, T as TrajectoryReportOptions, s as TrajectoryReport } from './worktree-fanout-DqzIBWMW.js';
+export { A as AuthoredHarness, t as DefinePersona, u as EqualKOnCost, v as Fanout, w as FanoutSynthesis, x as FlatWidenGate, y as LoopUntil, z as LoopUntilState, B as Panel, G as PanelJudge, H as PanelVerdict, I as PatchDeliverableOptions, J as PersonaContext, K as PersonaExecutors, M as Pipeline, N as RenderCorpusToInstructions, Q as RunPersonified, U as ShapeBudget, X as ShapeContext, Y as TrajectoryNode, Z as TrajectoryReportFn, _ as Verify, $ as Widen, a0 as WidenDecision, a1 as WidenLineage, a2 as WorktreeCliExecutorOptions, a as WorktreeFanoutOptions, b as WorktreePatchArtifact, a3 as createWorktreeCliExecutor, a4 as patchDelivered, a5 as worktreeFanout } from './worktree-fanout-DqzIBWMW.js';
 import { b as AnalystRegistryLike } from './types-BC3bZpH0.js';
 import { AgentProfile as AgentProfile$1 } from '@tangle-network/agent-interface';
 import { R as RouterConfig, T as ToolLoopChat, a as ToolLoopCompactionOptions } from './sanitize-C2jicjNf.js';
 export { j as RouterChatResult, k as RouterChatToolsResult, l as RouterToolCall, m as RouterToolLoopResult, n as ToolLoopCompaction, b as ToolSpec, r as routerBrain, o as routerChatWithTools, p as routerChatWithUsage, q as routerToolLoop } from './sanitize-C2jicjNf.js';
-import { D as DeliverableSpec } from './completion-gate-BAj3dXeW.js';
-export { g as WorktreeCommandResult, h as gateOnDeliverable } from './completion-gate-BAj3dXeW.js';
-import { S as SupervisorProfile } from './supervise-DTNcLDl2.js';
-export { D as DriveHarness, a as SuperviseOptions, b as SupervisorAgentDeps, s as supervise, c as supervisorAgent, w as workerFromBackend } from './supervise-DTNcLDl2.js';
+import { D as DeliverableSpec } from './completion-gate-Bz7VYs7a.js';
+export { g as WorktreeCommandResult, h as gateOnDeliverable } from './completion-gate-Bz7VYs7a.js';
+import { S as SupervisorProfile } from './supervise-U6DTnQu6.js';
+export { D as DriveHarness, a as SuperviseOptions, b as SupervisorAgentDeps, s as supervise, c as supervisorAgent, w as workerFromBackend } from './supervise-U6DTnQu6.js';
 import { stuckLoopView, toolWasteView } from '@tangle-network/agent-eval/pipelines';
 export { AgentEnvironment, AgentEnvironmentCapabilities, AgentEnvironmentEvent, AgentEnvironmentProvider, AgentEnvironmentQuery, AgentEnvironmentStatus, AgentEnvironmentSummary, AgentProfileRef, AgentSession, AgentSessionRef, AgentSessionStatus, AgentTurnInput, AgentTurnResult, CheckpointRef, CheckpointRequest, CreateAgentEnvironmentInput, ExecRequest, ExecResult, ForkRequest, PlacementInfo, ResourceRequest, WorkspaceRequest } from '@tangle-network/agent-interface/environment-provider';
 import './substrate-DO2GHNg2.js';
-import './local-harness-B7bNuNJw.js';
+import './local-harness-C2HDGiOY.js';
 import 'node:child_process';
 
 /**

package/dist/loops.js

@@ -102,7 +102,7 @@ import {
   watchTrace,
   widen,
   worktreeFanout
-} from "./chunk-D336OZHK.js";
+} from "./chunk-L4CACVIJ.js";
 import {
   acquireSandbox,
   asAuthoredProfile,
@@ -140,7 +140,7 @@ import {
   supervisorAgent,
   supervisorInstructions,
   workerFromBackend
-} from "./chunk-URMJTSXB.js";
+} from "./chunk-TTWMSNFZ.js";
 import "./chunk-DPEUKJRO.js";
 import {
   assertModelAllowed
@@ -165,7 +165,7 @@ import {
   mapSandboxToolEvent,
   sumSandboxUsage
 } from "./chunk-FVJ7M3DA.js";
-import "./chunk-PJNGPWTA.js";
+import "./chunk-JFAGXZKR.js";
 import "./chunk-YEJR7IXO.js";
 import "./chunk-DGUM43GV.js";
 export {

package/dist/mcp/bin.js

@@ -9,14 +9,14 @@ import {
   DelegationTaskQueue,
   FileDelegationStore,
   createMcpServer
-} from "../chunk-URMJTSXB.js";
+} from "../chunk-TTWMSNFZ.js";
 import "../chunk-DPEUKJRO.js";
 import "../chunk-ISTDY47H.js";
 import "../chunk-WIPGQ4GT.js";
 import "../chunk-VSWBYWFK.js";
 import "../chunk-3MDZX7YU.js";
 import "../chunk-FVJ7M3DA.js";
-import "../chunk-PJNGPWTA.js";
+import "../chunk-JFAGXZKR.js";
 import "../chunk-YEJR7IXO.js";
 import "../chunk-DGUM43GV.js";
 

package/dist/mcp/index.d.ts

@@ -1,10 +1,10 @@
 import { S as SandboxClient, e as LoopSandboxPlacement } from '../types-DWA64rbJ.js';
-import { F as FleetHandle, D as DelegationExecutor, a as DelegationTaskQueue, b as FeedbackStore, c as DelegateFeedbackResult, d as DelegateFeedbackArgs, U as UiAuditorDelegate, e as DelegateUiAuditArgs, f as DelegateUiAuditResult, g as DelegationHistoryResult, h as DelegationHistoryArgs, i as DelegationStatusResult, j as DelegationStatusArgs } from '../coordination-B3ZuApR_.js';
-export { A as AnalystRegistry, C as CappedDelegationTrace, k as CoderDelegate, l as CoderReview, m as CoderReviewer, n as CoordinationEvent, o as CoordinationTools, p as CoordinationToolsOptions, q as DELEGATE_DESCRIPTION, r as DELEGATE_INPUT_SCHEMA, s as DELEGATE_TOOL_NAME, t as DELEGATION_TRACE_MAX_BYTES, u as DELEGATION_TRACE_MAX_SPANS, v as DelegateArgs, w as DelegateCodeArgs, x as DelegateCodeConfig, y as DelegateCodeResult, z as DelegateHandlerOptions, B as DelegateResearchArgs, G as DelegateResearchConfig, H as DelegateResearchResult, I as DelegateResult, J as DelegateRunCtx, K as DelegateUiAuditConfig, L as DelegateUiAuditRoute, N as DelegationError, O as DelegationFeedbackSnapshot, P as DelegationHistoryEntry, Q as DelegationPersistenceError, R as DelegationProfile, S as DelegationProgress, T as DelegationRecord, V as DelegationResultPayload, W as DelegationResumeContext, X as DelegationResumeDriver, Y as DelegationResumeTick, Z as DelegationRunContext, _ as DelegationStateCorruptError, $ as DelegationStatus, a0 as DelegationStore, a1 as DelegationTaskQueueOptions, a2 as DelegationTraceCaps, a3 as DelegationTraceCollector, a4 as DelegationTraceSpan, a5 as DetachedSessionDelegateOptions, a6 as DetachedSessionRefParts, a7 as DetachedTurn, a8 as DetachedTurnResumeDriverOptions, a9 as DetachedWinnerSelection, aa as DriveTurnCapableBox, ab as DriveTurnTick, ac as FeedbackEvent, ad as FeedbackRating, ae as FeedbackRefersTo, af as FileDelegationStore, ag as FileDelegationStoreOptions, ah as FleetWorkspaceExecutorOptions, ai as InMemoryDelegationStore, aj as InMemoryFeedbackStore, ak as JsonRpcMessage, al as JsonRpcResponse, M as MakeWorkerAgent, am as McpServer, an as McpServerOptions, ao as McpToolDescriptor, ap as McpTransport, aq as Question, ar as QuestionDecision, as as QuestionPolicy, at as QuestionRecord, au as ResearchOutputShape, av as ResearchSource, aw as RunDetachedTurnOptions, ax as SettleDetachedCoderTurnOptions, ay as SettledWorker, az as SiblingSandboxExecutorOptions, aA as SubmitInput, aB as SubmitOutput, aC as TraceContext, aD as UiAuditorDelegationOutput, aE as buildDelegationTraceSpans, aF as capDelegationTrace, aG as coderTaskFromArgs, aH as composeLoopTraceEmitters, aI as createCoordinationTools, aJ as createDelegateHandler, aK as createDelegationTraceCollector, aL as createDetachedTurnResumeDriver, aM as createFleetWorkspaceExecutor, aN as createInProcessTransport, aO as createMcpServer, aP as createPropagatingTraceEmitter, aQ as createSiblingSandboxExecutor, aR as detachedSessionDelegate, aS as detachedTurnEvents, aT as eventToSnapshot, aU as formatDetachedSessionRef, aV as hashIdempotencyInput, aW as parseDetachedSessionRef, aX as readTraceContextFromEnv, aY as runDetachedTurn, aZ as settleDetachedCoderTurn, a_ as traceContextToEnv, a$ as validateDelegateArgs } from '../coordination-B3ZuApR_.js';
-import { L as LocalHarness, r as runLocalHarness } from '../local-harness-B7bNuNJw.js';
-export { b as CodexExecutionEvidence, a as CodexExecutionPolicy, C as CodexTokenUsage, c as LocalHarnessResult, R as RunLocalHarnessOptions, p as parseCodexTokenUsage } from '../local-harness-B7bNuNJw.js';
-import { G as GitRunner } from '../completion-gate-BAj3dXeW.js';
-export { C as CreateWorktreeOptions, b as DiffOptions, c as DiffResult, R as RemoveWorktreeOptions, d as WorktreeHandle, e as captureWorktreeDiff, f as createWorktree, r as removeWorktree } from '../completion-gate-BAj3dXeW.js';
+import { F as FleetHandle, D as DelegationExecutor, a as DelegationTaskQueue, b as FeedbackStore, c as DelegateFeedbackResult, d as DelegateFeedbackArgs, U as UiAuditorDelegate, e as DelegateUiAuditArgs, f as DelegateUiAuditResult, g as DelegationHistoryResult, h as DelegationHistoryArgs, i as DelegationStatusResult, j as DelegationStatusArgs } from '../coordination-CdU8LyvB.js';
+export { A as AnalystRegistry, C as CappedDelegationTrace, k as CoderDelegate, l as CoderReview, m as CoderReviewer, n as CoordinationEvent, o as CoordinationTools, p as CoordinationToolsOptions, q as DELEGATE_DESCRIPTION, r as DELEGATE_INPUT_SCHEMA, s as DELEGATE_TOOL_NAME, t as DELEGATION_TRACE_MAX_BYTES, u as DELEGATION_TRACE_MAX_SPANS, v as DelegateArgs, w as DelegateCodeArgs, x as DelegateCodeConfig, y as DelegateCodeResult, z as DelegateHandlerOptions, B as DelegateResearchArgs, G as DelegateResearchConfig, H as DelegateResearchResult, I as DelegateResult, J as DelegateRunCtx, K as DelegateUiAuditConfig, L as DelegateUiAuditRoute, N as DelegationError, O as DelegationFeedbackSnapshot, P as DelegationHistoryEntry, Q as DelegationPersistenceError, R as DelegationProfile, S as DelegationProgress, T as DelegationRecord, V as DelegationResultPayload, W as DelegationResumeContext, X as DelegationResumeDriver, Y as DelegationResumeTick, Z as DelegationRunContext, _ as DelegationStateCorruptError, $ as DelegationStatus, a0 as DelegationStore, a1 as DelegationTaskQueueOptions, a2 as DelegationTraceCaps, a3 as DelegationTraceCollector, a4 as DelegationTraceSpan, a5 as DetachedSessionDelegateOptions, a6 as DetachedSessionRefParts, a7 as DetachedTurn, a8 as DetachedTurnResumeDriverOptions, a9 as DetachedWinnerSelection, aa as DriveTurnCapableBox, ab as DriveTurnTick, ac as FeedbackEvent, ad as FeedbackRating, ae as FeedbackRefersTo, af as FileDelegationStore, ag as FileDelegationStoreOptions, ah as FleetWorkspaceExecutorOptions, ai as InMemoryDelegationStore, aj as InMemoryFeedbackStore, ak as JsonRpcMessage, al as JsonRpcResponse, M as MakeWorkerAgent, am as McpServer, an as McpServerOptions, ao as McpToolDescriptor, ap as McpTransport, aq as Question, ar as QuestionDecision, as as QuestionPolicy, at as QuestionRecord, au as ResearchOutputShape, av as ResearchSource, aw as RunDetachedTurnOptions, ax as SettleDetachedCoderTurnOptions, ay as SettledWorker, az as SiblingSandboxExecutorOptions, aA as SubmitInput, aB as SubmitOutput, aC as TraceContext, aD as UiAuditorDelegationOutput, aE as buildDelegationTraceSpans, aF as capDelegationTrace, aG as coderTaskFromArgs, aH as composeLoopTraceEmitters, aI as createCoordinationTools, aJ as createDelegateHandler, aK as createDelegationTraceCollector, aL as createDetachedTurnResumeDriver, aM as createFleetWorkspaceExecutor, aN as createInProcessTransport, aO as createMcpServer, aP as createPropagatingTraceEmitter, aQ as createSiblingSandboxExecutor, aR as detachedSessionDelegate, aS as detachedTurnEvents, aT as eventToSnapshot, aU as formatDetachedSessionRef, aV as hashIdempotencyInput, aW as parseDetachedSessionRef, aX as readTraceContextFromEnv, aY as runDetachedTurn, aZ as settleDetachedCoderTurn, a_ as traceContextToEnv, a$ as validateDelegateArgs } from '../coordination-CdU8LyvB.js';
+import { L as LocalHarness, r as runLocalHarness } from '../local-harness-C2HDGiOY.js';
+export { b as CodexExecutionEvidence, a as CodexExecutionPolicy, C as CodexTokenUsage, c as LocalHarnessResult, R as RunLocalHarnessOptions, p as parseCodexTokenUsage } from '../local-harness-C2HDGiOY.js';
+import { G as GitRunner } from '../completion-gate-Bz7VYs7a.js';
+export { C as CreateWorktreeOptions, b as DiffOptions, c as DiffResult, R as RemoveWorktreeOptions, d as WorktreeHandle, e as captureWorktreeDiff, f as createWorktree, r as removeWorktree } from '../completion-gate-Bz7VYs7a.js';
 export { C as CreateKbGateOptions, F as FactCandidate, a as FactJudge, b as FactJudgeVerdict, K as KbGateResult, c as createKbGate } from '../kb-gate-CwHO0vz6.js';
 export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from '../openai-tools-D0ZSRCC6.js';
 import { AnalystFinding } from '@tangle-network/agent-eval';

package/dist/mcp/index.js

@@ -9,7 +9,7 @@ import {
 import {
   mcpToolsForRuntimeMcp,
   mcpToolsForRuntimeMcpSubset
-} from "../chunk-K7OPNHU4.js";
+} from "../chunk-DNK3L7QB.js";
 import {
   createKbGate
 } from "../chunk-SGKPNBXE.js";
@@ -17,7 +17,7 @@ import {
   assertTraceDerivedFindings,
   runCoderChecks,
   selectValidWinner
-} from "../chunk-D336OZHK.js";
+} from "../chunk-L4CACVIJ.js";
 import {
   DELEGATE_DESCRIPTION,
   DELEGATE_FEEDBACK_DESCRIPTION,
@@ -67,7 +67,7 @@ import {
   validateDelegateUiAuditArgs,
   validateDelegationHistoryArgs,
   validateDelegationStatusArgs
-} from "../chunk-URMJTSXB.js";
+} from "../chunk-TTWMSNFZ.js";
 import "../chunk-DPEUKJRO.js";
 import "../chunk-ISTDY47H.js";
 import "../chunk-WIPGQ4GT.js";
@@ -82,7 +82,7 @@ import "../chunk-FVJ7M3DA.js";
 import {
   parseCodexTokenUsage,
   runLocalHarness
-} from "../chunk-PJNGPWTA.js";
+} from "../chunk-JFAGXZKR.js";
 import {
   ValidationError
 } from "../chunk-YEJR7IXO.js";

package/dist/{mcp-serve-verifier-BuXjaZDE.d.ts → mcp-serve-verifier-C65X30mY.d.ts}

@@ -1,4 +1,4 @@
-import { V as Verifier } from './agentic-generator-D9ZmAuiL.js';
+import { V as Verifier } from './agentic-generator-B7Cyl6cn.js';
 
 /**
  * `mcpServeVerifier` — the intrinsic verifier for a built MCP server: the

package/dist/{supervise-DTNcLDl2.d.ts → supervise-U6DTnQu6.d.ts}

@@ -1,7 +1,7 @@
 import { S as Scope, a as ResultBlobStore, B as Budget, A as Agent, b as SupervisedResult } from './types-Bb-CqxJH.js';
-import { M as MakeWorkerAgent, A as AnalystRegistry, E as ExecutorConfig } from './coordination-B3ZuApR_.js';
+import { M as MakeWorkerAgent, A as AnalystRegistry, E as ExecutorConfig } from './coordination-CdU8LyvB.js';
 import { R as RouterConfig, T as ToolLoopChat, a as ToolLoopCompactionOptions } from './sanitize-C2jicjNf.js';
-import { D as DeliverableSpec } from './completion-gate-BAj3dXeW.js';
+import { D as DeliverableSpec } from './completion-gate-Bz7VYs7a.js';
 
 /** The supervisor's profile — the subset of an `AgentProfile` that selects + shapes its brain.
  *  `harness` is the backend-as-data discriminant; `systemPrompt` is the standing instruction. */

package/dist/{worktree-fanout-IMKqdV_E.d.ts → worktree-fanout-DqzIBWMW.d.ts}

@@ -3,8 +3,8 @@ import { AnalystFinding, DefaultVerdict } from '@tangle-network/agent-eval';
 import { d as AgentSpec, e as ExecutorRegistry, B as Budget, A as Agent, f as SpawnJournal, a as ResultBlobStore, g as RootHandle, b as SupervisedResult, N as NodeId, h as Settled, i as Spend, S as Scope, c as Executor } from './types-Bb-CqxJH.js';
 import { R as RuntimeHooks, I as Iteration } from './types-DWA64rbJ.js';
 import { BackendType } from '@tangle-network/sandbox';
-import { W as WorktreeHarnessResult, G as GitRunner, a as WorktreeCheckRunner, D as DeliverableSpec } from './completion-gate-BAj3dXeW.js';
-import { L as LocalHarness, r as runLocalHarness } from './local-harness-B7bNuNJw.js';
+import { W as WorktreeHarnessResult, G as GitRunner, a as WorktreeCheckRunner, D as DeliverableSpec } from './completion-gate-Bz7VYs7a.js';
+import { L as LocalHarness, r as runLocalHarness } from './local-harness-C2HDGiOY.js';
 
 /**
  *
@@ -832,6 +832,9 @@ interface WorktreeCliExecutorOptions {
     /** Run Codex with an ephemeral session, isolated config/instructions, network disabled, and
      *  JSONL usage capture. Requires `harness: 'codex'`; metered by default. */
     codexReproducible?: boolean;
+    /** Absolute host paths denied to reproducible Codex (for benchmark answer copies, credentials,
+     *  or other task-specific ambient state). */
+    codexReadDeniedPaths?: ReadonlyArray<string>;
     /**
      * Shell command run in the live worktree to derive the tests-PASS signal (e.g. `pnpm test`).
      * Its exit code becomes `artifact.checks.tests.passed`. Omit to skip (no signal derived).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-runtime",
-  "version": "0.94.1",
+  "version": "0.94.2",
   "description": "Shared task-lifecycle skeleton for agents: a recursive loop kernel for chat turns, one-shot tasks, and multi-attempt loops, with trace capture and eval-gated self-improvement. Domain behavior lives in adapters; scoring and ship-gates in @tangle-network/agent-eval.",
   "homepage": "https://github.com/tangle-network/agent-runtime#readme",
   "repository": {