@tangle-network/agent-runtime 2.3.14 → 3.0.2

package/dist/{workspace-streams-Dep2L6XD.js → workspace-streams-COSTjQLW.js}

@@ -689,6 +689,73 @@ function deepFreezeCandidate(value, seen = /* @__PURE__ */ new Set()) {
 	for (const child of Object.values(value)) deepFreezeCandidate(child, seen);
 	return Object.freeze(value);
 }
+// src/candidate-execution/artifact-streams.ts
+/** Verify the complete stream, including its final digest, before accepting its consumer's result. */
+async function* verifiedArtifactChunks(artifact, port, signal) {
+	signal?.throwIfAborted();
+	if (!("content" in artifact) && !port.readStream) throw new Error("streaming workspace artifacts require readStream");
+	const chunks = "content" in artifact ? [Buffer.from(artifact.content, "base64")] : port.readStream(artifact, { signal });
+	const hash = createHash("sha256");
+	let byteLength = 0;
+	for await (const chunk of chunks) {
+		signal?.throwIfAborted();
+		if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
+		byteLength += chunk.byteLength;
+		if (byteLength > artifact.byteLength) throw new Error("candidate artifact exceeds its declared length");
+		hash.update(chunk);
+		yield chunk;
+	}
+	signal?.throwIfAborted();
+	if (byteLength !== artifact.byteLength || `sha256:${hash.digest("hex")}` !== artifact.sha256) throw new Error("candidate artifact failed digest or length verification");
+}
+const selfVerifyingPuts = /* @__PURE__ */ new WeakMap();
+/**
+* Declare that this exact putStream resolves only after reading its stored object back from where
+* this exact readStream reads it, and matching its digest and length. The claim belongs to the
+* pair, so a wrapper that replaces either function never inherits it.
+*/
+function markPutStreamVerified(putStream, readStream) {
+	selfVerifyingPuts.set(putStream, readStream);
+}
+/** Whether a port's putStream already read back what its readStream will return. */
+function putStreamVerifiedBy(port) {
+	return port.putStream !== void 0 && port.readStream !== void 0 && selfVerifyingPuts.get(port.putStream) === port.readStream;
+}
+/** Stream evaluator evidence into its existing store and verify durable readback before returning. */
+async function persistCandidateOutputArtifactStream(port, input) {
+	if (!port.putStream || !port.readStream) throw new Error("streaming workspace persistence requires putStream and readStream");
+	input.signal?.throwIfAborted();
+	const hash = createHash("sha256");
+	let byteLength = 0;
+	let consumed = false;
+	async function* checked() {
+		for await (const chunk of input.chunks) {
+			input.signal?.throwIfAborted();
+			if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
+			byteLength += chunk.byteLength;
+			if (byteLength > input.maxBytes) throw new Error("candidate workspace archive exceeds maxArchiveBytes");
+			hash.update(chunk);
+			yield chunk;
+		}
+		consumed = true;
+		input.signal?.throwIfAborted();
+	}
+	const chunks = checked();
+	try {
+		const ref = agentCandidateArtifactRefSchema.parse(await port.putStream({
+			executionId: input.executionId,
+			purpose: input.purpose,
+			chunks,
+			...input.signal ? { signal: input.signal } : {}
+		}));
+		input.signal?.throwIfAborted();
+		if (!consumed || ref.sha256 !== `sha256:${hash.digest("hex")}` || ref.byteLength !== byteLength) throw new Error("candidate output locator does not identify the submitted bytes");
+		if (!putStreamVerifiedBy(port)) for await (const _chunk of verifiedArtifactChunks(ref, port, input.signal));
+		return immutableCandidateValue(ref);
+	} finally {
+		await chunks.return(void 0);
+	}
+}
 // src/candidate-execution/artifacts.ts
 function artifactCacheKey(artifact) {
 	return `${artifact.sha256}:${artifact.byteLength}`;
@@ -1300,8 +1367,10 @@ function assertWorkspaceFilesWithinLimits(files, limits) {
 		assertWorkspacePathOrder(path, previousPath, observedPaths, "candidate workspace paths must be unique and sorted");
 		previousPath = path;
 		if (!isWorkspaceFileMode(file.mode)) throw new Error(`candidate workspace file has unsupported mode: ${path}`);
-		if (file.bytes.byteLength > limits.maxFileBytes) throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`);
-		totalBytes += file.bytes.byteLength;
+		if ("bytes" in file && "byteLength" in file) throw new Error(`candidate workspace file has ambiguous length: ${path}`);
+		const byteLength = "bytes" in file ? file.bytes.byteLength : file.byteLength;
+		if (!Number.isSafeInteger(byteLength) || byteLength < 0 || byteLength > limits.maxFileBytes) throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`);
+		totalBytes += byteLength;
 		if (totalBytes > limits.maxTotalFileBytes) throw new Error("candidate workspace exceeds maxTotalFileBytes");
 	}
 }
@@ -1406,73 +1475,6 @@ function workspaceTarHeader(name, mode, size) {
 		gname: ""
 	};
 }
-// src/candidate-execution/artifact-streams.ts
-/** Verify the complete stream, including its final digest, before accepting its consumer's result. */
-async function* verifiedArtifactChunks(artifact, port, signal) {
-	signal?.throwIfAborted();
-	if (!("content" in artifact) && !port.readStream) throw new Error("streaming workspace artifacts require readStream");
-	const chunks = "content" in artifact ? [Buffer.from(artifact.content, "base64")] : port.readStream(artifact, { signal });
-	const hash = createHash("sha256");
-	let byteLength = 0;
-	for await (const chunk of chunks) {
-		signal?.throwIfAborted();
-		if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
-		byteLength += chunk.byteLength;
-		if (byteLength > artifact.byteLength) throw new Error("candidate artifact exceeds its declared length");
-		hash.update(chunk);
-		yield chunk;
-	}
-	signal?.throwIfAborted();
-	if (byteLength !== artifact.byteLength || `sha256:${hash.digest("hex")}` !== artifact.sha256) throw new Error("candidate artifact failed digest or length verification");
-}
-const selfVerifyingPuts = /* @__PURE__ */ new WeakMap();
-/**
-* Declare that this exact putStream resolves only after reading its stored object back from where
-* this exact readStream reads it, and matching its digest and length. The claim belongs to the
-* pair, so a wrapper that replaces either function never inherits it.
-*/
-function markPutStreamVerified(putStream, readStream) {
-	selfVerifyingPuts.set(putStream, readStream);
-}
-/** Whether a port's putStream already read back what its readStream will return. */
-function putStreamVerifiedBy(port) {
-	return port.putStream !== void 0 && port.readStream !== void 0 && selfVerifyingPuts.get(port.putStream) === port.readStream;
-}
-/** Stream evaluator evidence into its existing store and verify durable readback before returning. */
-async function persistCandidateOutputArtifactStream(port, input) {
-	if (!port.putStream || !port.readStream) throw new Error("streaming workspace persistence requires putStream and readStream");
-	input.signal?.throwIfAborted();
-	const hash = createHash("sha256");
-	let byteLength = 0;
-	let consumed = false;
-	async function* checked() {
-		for await (const chunk of input.chunks) {
-			input.signal?.throwIfAborted();
-			if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
-			byteLength += chunk.byteLength;
-			if (byteLength > input.maxBytes) throw new Error("candidate workspace archive exceeds maxArchiveBytes");
-			hash.update(chunk);
-			yield chunk;
-		}
-		consumed = true;
-		input.signal?.throwIfAborted();
-	}
-	const chunks = checked();
-	try {
-		const ref = agentCandidateArtifactRefSchema.parse(await port.putStream({
-			executionId: input.executionId,
-			purpose: input.purpose,
-			chunks,
-			...input.signal ? { signal: input.signal } : {}
-		}));
-		input.signal?.throwIfAborted();
-		if (!consumed || ref.sha256 !== `sha256:${hash.digest("hex")}` || ref.byteLength !== byteLength) throw new Error("candidate output locator does not identify the submitted bytes");
-		if (!putStreamVerifiedBy(port)) for await (const _chunk of verifiedArtifactChunks(ref, port, input.signal));
-		return immutableCandidateValue(ref);
-	} finally {
-		await chunks.return(void 0);
-	}
-}
 // src/candidate-execution/git-materialize.ts
 async function verifyCandidateCode(code, repositories, patchBytes) {
 	if (code.kind === "disabled") return void 0;
@@ -2306,15 +2308,17 @@ async function readAgentCandidateWorkspaceArtifactFiles(input) {
 	await consumeWorkspaceArtifacts(input, void 0, selected);
 	return new Map([...selected].map(([path, chunks]) => [path, Buffer.concat(chunks)]));
 }
-/** Restore regular-file artifacts into an empty destination, publishing only after complete verification. */
+/** Restore regular files into an empty destination after complete verification; paths selects a subset. */
 async function materializeAgentCandidateWorkspaceFromArtifacts(input) {
 	input.signal?.throwIfAborted();
 	if (!input.artifacts.readStream) throw new Error("streaming workspace artifacts require readStream");
+	const paths = input.paths === void 0 ? void 0 : new Set(input.paths);
+	if (paths && paths.size !== input.paths?.length) throw new Error("workspace selection must name unique manifest files");
 	const destination = resolve(input.destination);
 	await prepareEmptyDestination(destination);
 	const staging = await mkdtemp(`${destination}.materializing-`);
 	try {
-		await consumeWorkspaceArtifacts(input, staging);
+		await consumeWorkspaceArtifacts(input, staging, void 0, paths);
 		input.signal?.throwIfAborted();
 		await rename(staging, destination);
 	} catch (error) {
@@ -2325,13 +2329,17 @@ async function materializeAgentCandidateWorkspaceFromArtifacts(input) {
 		throw error;
 	}
 }
-async function consumeWorkspaceArtifacts(input, destination, selected) {
+async function consumeWorkspaceArtifacts(input, destination, selected, paths) {
 	const { artifacts, signal } = input;
 	const snapshot = deepFreezeCandidate(structuredClone(input.snapshot));
 	signal?.throwIfAborted();
 	if (!artifacts.readStream) throw new Error("streaming workspace artifacts require readStream");
 	const limits = workspaceLimits(input.limits);
 	validateManifest(snapshot.material, limits);
+	if (paths) {
+		const files = new Set(snapshot.material.files.map((file) => file.path));
+		if ([...paths].some((path) => !files.has(path))) throw new Error("workspace selection must name unique manifest files");
+	}
 	if (snapshot.archive.byteLength > limits.maxArchiveBytes) throw new Error("candidate workspace archive exceeds maxArchiveBytes");
 	const manifest = canonicalCandidateBytes$1(snapshot.material);
 	verifyBytes(manifest, snapshot.manifest.sha256, snapshot.manifest.byteLength, "candidate workspace manifest");
@@ -2353,7 +2361,7 @@ async function consumeWorkspaceArtifacts(input, destination, selected) {
 			signal?.throwIfAborted();
 			const expected = snapshot.material.files[index++];
 			if (!expected || entry.header.type !== "file" || entry.header.name !== `workspace/${expected.path}` || entry.header.mode !== expected.mode || entry.header.size !== expected.byteLength) throw new Error("candidate workspace archive does not match its snapshot manifest");
-			const file = destination ? await openDestination(destination, expected.path) : void 0;
+			const file = destination && (!paths || paths.has(expected.path)) ? await openDestination(destination, expected.path) : void 0;
 			try {
 				async function* checked() {
 					const hash = createHash("sha256");
@@ -2467,19 +2475,8 @@ async function digestChunks(chunks, maxBytes, signal) {
 	};
 }
 function validateManifest(material, limits) {
-	if (material.kind !== "agent-candidate-workspace-manifest" || material.files.length > limits.maxFiles) throw new Error("candidate workspace exceeds maxFiles");
-	let total = 0;
-	let previous;
-	const paths = /* @__PURE__ */ new Set();
-	for (const file of material.files) {
-		safeArchivePath(file.path, limits.maxPathBytes);
-		assertWorkspacePathOrder(file.path, previous, paths, "candidate workspace paths must be unique and sorted");
-		previous = file.path;
-		if (!Number.isSafeInteger(file.mode) || file.mode < 0 || file.mode > 511) throw new Error("candidate workspace file has unsupported mode");
-		if (!Number.isSafeInteger(file.byteLength) || file.byteLength < 0 || file.byteLength > limits.maxFileBytes) throw new Error("candidate workspace file exceeds maxFileBytes");
-		total += file.byteLength;
-		if (total > limits.maxTotalFileBytes) throw new Error("candidate workspace exceeds maxTotalFileBytes");
-	}
+	if (material.kind !== "agent-candidate-workspace-manifest") throw new Error("candidate workspace has an invalid manifest kind");
+	assertWorkspaceFilesWithinLimits(material.files, limits);
 }
 async function* oneChunk(bytes) {
 	yield bytes;
@@ -2487,6 +2484,6 @@ async function* oneChunk(bytes) {
 function asError(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
-export { mapWithConcurrency as $, verifyWorkspaceSnapshotArtifacts as A, hasControlCharacter as B, candidateWorkspaceManifest as C, checkInIdleMs as Ct, verifyBytes as D, teardownSurfaces as Dt, readVerifiedArtifact as E, teardownExecutor as Et, embeddedCandidateArtifact as F, cloneSpend as G, addSpend as H, immutableCandidateValue as I, errorMessage as J, cloneTokenUsage as K, omitTopLevelDigest as L, canonicalCandidateDigest$1 as M, canonicalCandidateDocument as N, verifyMaterializedProfileWorkspace as O, deepFreezeCandidate as P, isAsyncIterable as Q, sha256Bytes$1 as R, artifactCacheKey as S, boundedChildDeadlineAt as St, readMaterializedWorkspaceFiles as T, singleFlightTeardown as Tt, addTokenUsage as U, abortError as V, chargedTokens as W, hasCompleteCacheBreakdown as X, fnv1a32Hex as Y, isAbortError as Z, workspaceLimits as _, CHILD_DEADLINE_REASON as _t, verifyAgentCandidateWorkspaceArtifacts as a, stringifySafe as at, isWellFormedUnicode as b, ROOT_DEADLINE_REASON as bt, createAgentCandidateWorkspacePort as c, unmeteredSpend as ct, verifyTaskCheckout as d, zeroTokenUsage as dt, promptCacheTokenClasses as et, verifyTaskOutcomePatch as f, addResourceSpend as ft, verifyAgentCandidateWorkspaceArchive as g, ACCEPTED_RESULT_GRACE_MS as gt, captureAgentCandidateWorkspaceFiles as h, withBudgetResources as ht, readAgentCandidateWorkspaceArtifactFiles as i, sleep as it, canonicalCandidateBytes$1 as j, verifyMaterializedWorkspace as k, readCandidateGitHubResource as l, withTimeout as lt, verifiedArtifactChunks as m, resourceTelemetry as mt, captureAgentCandidateWorkspaceTreeToArtifacts as n, randomUuid as nt, verifyAgentCandidateWorkspaceTree as o, throwAbort as ot, markPutStreamVerified as p, assertResources as pt, deleteBoxSafe as q, materializeAgentCandidateWorkspaceFromArtifacts as r, roundBoxMinutes as rt, captureAgentCandidateWorkspace as s, throwIfAborted as st, captureAgentCandidateWorkspaceToArtifacts as t, randomSuffix as tt, verifyCandidateCode as u, zeroSpend as ut, persistCandidateOutputArtifact as v, DEADLINE_CHECK_IN_MESSAGE as vt, captureMaterializedWorkspace as w, isDeadlineAbortReason as wt, WorkspaceScanLimitError as x, armDeadlineTimer as xt, assertExactObjectKeys as y, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as yt, verifyCanonicalCandidateDocument as z };
+export { isAsyncIterable as $, markPutStreamVerified as A, verifyCanonicalCandidateDocument as B, captureMaterializedWorkspace as C, boundedChildDeadlineAt as Ct, verifyMaterializedProfileWorkspace as D, teardownExecutor as Dt, verifyBytes as E, singleFlightTeardown as Et, deepFreezeCandidate as F, chargedTokens as G, abortError as H, embeddedCandidateArtifact as I, deleteBoxSafe as J, cloneSpend as K, immutableCandidateValue as L, canonicalCandidateBytes$1 as M, canonicalCandidateDigest$1 as N, verifyMaterializedWorkspace as O, teardownSurfaces as Ot, canonicalCandidateDocument as P, isAbortError as Q, omitTopLevelDigest as R, candidateWorkspaceManifest as S, armDeadlineTimer as St, readVerifiedArtifact as T, isDeadlineAbortReason as Tt, addSpend as U, hasControlCharacter as V, addTokenUsage as W, fnv1a32Hex as X, errorMessage as Y, hasCompleteCacheBreakdown as Z, persistCandidateOutputArtifact as _, ACCEPTED_RESULT_GRACE_MS as _t, verifyAgentCandidateWorkspaceArtifacts as a, sleep as at, WorkspaceScanLimitError as b, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as bt, createAgentCandidateWorkspacePort as c, throwIfAborted as ct, verifyTaskCheckout as d, zeroSpend as dt, mapWithConcurrency as et, verifyTaskOutcomePatch as f, zeroTokenUsage as ft, workspaceLimits as g, withBudgetResources as gt, verifyAgentCandidateWorkspaceArchive as h, resourceTelemetry as ht, readAgentCandidateWorkspaceArtifactFiles as i, roundBoxMinutes as it, verifiedArtifactChunks as j, verifyWorkspaceSnapshotArtifacts as k, readCandidateGitHubResource as l, unmeteredSpend as lt, safeArchivePath as m, assertResources as mt, captureAgentCandidateWorkspaceTreeToArtifacts as n, randomSuffix as nt, verifyAgentCandidateWorkspaceTree as o, stringifySafe as ot, captureAgentCandidateWorkspaceFiles as p, addResourceSpend as pt, cloneTokenUsage as q, materializeAgentCandidateWorkspaceFromArtifacts as r, randomUuid as rt, captureAgentCandidateWorkspace as s, throwAbort as st, captureAgentCandidateWorkspaceToArtifacts as t, promptCacheTokenClasses as tt, verifyCandidateCode as u, withTimeout as ut, assertExactObjectKeys as v, CHILD_DEADLINE_REASON as vt, readMaterializedWorkspaceFiles as w, checkInIdleMs as wt, artifactCacheKey as x, ROOT_DEADLINE_REASON as xt, isWellFormedUnicode as y, DEADLINE_CHECK_IN_MESSAGE as yt, sha256Bytes$1 as z };
 
-//# sourceMappingURL=workspace-streams-Dep2L6XD.js.map
+//# sourceMappingURL=workspace-streams-COSTjQLW.js.map