@tangle-network/agent-runtime 3.0.2 → 3.0.7

package/dist/tui/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { S as writeWorkerSteer, c as cancelWorker, v as supervisorRunsRoot } from "../scope-CwhYLg6s.js";
-import { n as cancelRun } from "../run-cancellation-3tqWES3A.js";
-import { c as numberValue, f as totalSpend, i as aggregateSnapshot, l as parseSpend, n as runTopWeb, s as loadTopSnapshot, u as parseTime } from "../top-web-B0a7QfaZ.js";
+import { S as writeWorkerSteer, c as cancelWorker, v as supervisorRunsRoot } from "../scope-C4ZapleE.js";
+import { n as cancelRun } from "../run-cancellation-BO3M3tSr.js";
+import { c as numberValue, f as totalSpend, i as aggregateSnapshot, l as parseSpend, n as runTopWeb, s as loadTopSnapshot, u as parseTime } from "../top-web-BRL2-jUk.js";
 import { randomUUID } from "node:crypto";
 import { resolve } from "node:path";
 import { hostname, userInfo } from "node:os";

package/dist/tui/index.d.ts

@@ -1,4 +1,4 @@
-import { $i as ResultBlobStore, Ju as PursuitRunProjection, Jv as RouteFlowEvent, Kx as HarnessTranscriptEvidence, L as Spend, M as Budget, Ux as HarnessTranscriptArtifact, Wr as provisionSupervisor, Wu as PursuitNodeProjection, Zb as ExecutionBindingReceipt, ix as ProfileMaterializationReceipt, qu as PursuitProjection, rx as NodeExecutionIdentity } from "../types-QS0ItMiE.js";
+import { $i as ResultBlobStore, Ju as PursuitRunProjection, Jv as RouteFlowEvent, Kx as HarnessTranscriptEvidence, L as Spend, M as Budget, Ux as HarnessTranscriptArtifact, Wr as provisionSupervisor, Wu as PursuitNodeProjection, Zb as ExecutionBindingReceipt, ix as ProfileMaterializationReceipt, qu as PursuitProjection, rx as NodeExecutionIdentity } from "../types-Bn1qbOZi.js";
 import { _ as AgentCandidateArtifactPort } from "../workspace-streams-DbKiDOWA.js";
 type BaselineAuthority = {
   readonly kind: 'retained-workspace' | 'git-object' | 'git-diff';
@@ -366,7 +366,7 @@ interface TopSnapshotFrame {
 }
 interface TopWebOptions {
   readonly roots: readonly string[];
-  /** Defaults to the installed agent-record browser asset export. */
+  /** Defaults to the installed Sandbox UI browser asset export. */
   readonly assets?: string;
   readonly host?: string;
   readonly port?: number;

package/dist/tui/index.js

@@ -1,3 +1,3 @@
-import { t as provisionSupervisor } from "../provision-supervisor-BoOIYwov.js";
-import { _ as topAgentMetadata, a as buildSupervisorView, d as topSnapshot, g as readTopAgentInspection, h as readTopAgentHistory, m as harnessSessionRows, o as isSpawnEvent, p as createTopAgentStream, r as serveTopWeb, s as loadTopSnapshot, t as TOP_SNAPSHOT_RECONCILE_MS, v as topAgentWorker } from "../top-web-B0a7QfaZ.js";
+import { t as provisionSupervisor } from "../provision-supervisor-BaVWgFww.js";
+import { _ as topAgentMetadata, a as buildSupervisorView, d as topSnapshot, g as readTopAgentInspection, h as readTopAgentHistory, m as harnessSessionRows, o as isSpawnEvent, p as createTopAgentStream, r as serveTopWeb, s as loadTopSnapshot, t as TOP_SNAPSHOT_RECONCILE_MS, v as topAgentWorker } from "../top-web-BRL2-jUk.js";
 export { TOP_SNAPSHOT_RECONCILE_MS, createTopAgentStream, harnessSessionRows, isSpawnEvent as isTopJournalEvent, loadTopSnapshot, topSnapshot as projectTopSnapshot, buildSupervisorView as projectTopSupervisor, provisionSupervisor, readTopAgentHistory, readTopAgentInspection, serveTopWeb, topAgentMetadata, topAgentWorker };

package/dist/{types-QS0ItMiE.d.ts → types-Bn1qbOZi.d.ts}

@@ -11601,11 +11601,9 @@ interface DefinedLeaderboard<TCase, TArtifact = string> {
  * exposes the same domain as a structural `BenchmarkAdapter`.
  */
 declare function defineLeaderboard<TCase, TArtifact = string>(spec: LeaderboardSpec<TCase, TArtifact>): DefinedLeaderboard<TCase, TArtifact>;
-/** Adapt a neutral environment provider to the `SandboxClient` interface used by existing loop paths.
- * @experimental */
+/** Expose a neutral provider through the existing Sandbox client port. @experimental */
 declare function providerAsSandboxClient(provider: AgentEnvironmentProvider, options?: ProviderAsSandboxClientOptions): SandboxClient;
-/** Options for exposing an `AgentEnvironmentProvider` through the legacy sandbox client port.
- * @experimental */
+/** Legacy Sandbox client adapter options. @experimental */
 interface ProviderAsSandboxClientOptions {
   defaults?: Partial<CreateAgentEnvironmentInput>;
   requireTerminalEvent?: boolean;
@@ -11621,8 +11619,7 @@ interface ProviderAsSandboxClientOptions {
   };
   /** Called after verification and before deletion so the run result can retain the exact join. */
   onWorkspaceCaptured?: (receipt: ProviderWorkspaceCaptureReceipt) => void | Promise<void>;
-  /** Translate Sandbox-specific controls that have no neutral representation. Without this
-   * callback, unsupported fields are refused before any environment is created. */
+  /** Translate unsupported Sandbox controls while preserving requested custody. */
   mapCreateOptions?: (options: CreateSandboxOptions | undefined) => Partial<CreateAgentEnvironmentInput>;
 }
 /**
@@ -19761,4 +19758,4 @@ interface KnowledgeReadinessDecision {
   nonBlockingGapIds: string[];
 }
 export { NoWinnerError as $, Validator as $S, bestSoFar as $_, composeCheckSources as $a, ExecutorMaterialization as $b, ObservationError as $c, SuperviseRegistryTable as $d, SupervisorToolDescriptor as $f, ExecutorResultMapping as $g, DelegationResumeContext as $h, ResultBlobStore as $i, LeaderboardBenchScore as $l, providerAsExecutor as $m, validateStoredGraph as $n, startRetainedInteractiveRun as $o, DriverRetryPolicy as $p, InteractiveWorkerEnvironment as $r, TERMINAL_DECISIONS as $s, createVerifierEnvironment as $t, ObserverJournal as $u, EscalateQuestion as $v, harnessTranscriptArtifact as $x, defaultToolDetectors as $y, TraceRootArtifact as A, RetainedRunSnapshot as AC, LoopDecisionPayload as AS, createCodeModeTools as A_, AuthoredProfile as Aa, FileResultBlobStore as Ab, runAgentic as Ac, naiveContinuationPrompt as Ad, ReservationHolder as Af, UiLens as Ag, ToolLoopMessageRecord as Ah, listGraphRuns as Ai, TrajectoryReportOptions as Al, AuthorityInboxMessage as Am, settledWorkerOut as An, SandboxRun as Ao, CoordinationPublicAddress as Ap, writeWorkerSteer as Ar, observationFromRegistry as As, AgentEnvironmentStatus as At, VersionJudge as Au, WorktreeCheckRunner as Av, ScopeProgressInput as Ax, PeerMailOutcome as Ay, Handle as B, LoopStartedPayload as BS, ProfileKeyOf as B_, CheckOutcome as Ba, BackendTransportError as Bb, assertStrategyContract as Bc, SuperviseOptions as Bd, supervisorAgent as Bf, readTraceContextFromEnv as Bg, UiAuditorDelegate as Bh, DispatchStopReason as Bi, LoopShape as Bl, SharedBoxStats as Bm, WorkspaceRun as Bn, S3PrivateCasStoreOptions as Bo, CheckRead as Bp, ProvisionSupervisorConnection as Br, BenchmarkTaskRow as Bs, CreateAgentEnvironmentInput$1 as Bt, PursuitObserverDelivery as Bu, ManagerWake as Bv, RetainedInteractiveStartMaterial as Bx, peerMailVerbNames as By, RuntimeFailureCause as C, RetainedRunDispatchedAdmission as CC, TokenUsageProvenance as CS, decodeHarnessUsage as C_, ChatSessionStore as Ca, SpawnForest as Cb, RunAgenticOptions as Cc, analyzesFindingsReportPrompt as Cd, RunParkingRecord as Cf, FeedbackRefersTo as Cg, RouterTransportConfig as Ch, StoredGraphInput as Ci, RenderCorpusToInstructionsOptions as Cl, RouterToolsSeam as Cm, readWorkerInteractiveBinding as Cn, TournamentRow as Co, FinalizeContext as Cp, readWorkerCancellation as Cr, widen as Cs, SuperviseProfileEntry as Ct, JudgedPursuitVersion as Cu, RuntimeTelemetryOptions as Cv, ToolStepInput as Cx, MapTraversalEvent as Cy, RetainedPendingCause as D, RetainedRunHandle as DC, Driver as DS, CodeModeToolsOptions as D_, chatTransportExecutor as Da, SpawnForestNode as Db, breadthStrategy as Dc, dumbContinuationPassPrompt as Dd, BudgetReadout as Df, UiFinding as Dg, ToolLoopChat as Dh, graphFromStored as Di, SteerContext as Dl, SteerableSandboxArgs as Dm, WorkerEvidenceInput as Dn, OpenSandboxRunBeforeStartContext as Do, CoordinationAuthentication as Dp, supervisorRunDir as Dr, buildSteerContext as Ds, AgentEnvironmentEvent$1 as Dt, PursuitVersionStop as Du, createRuntimeStreamEventCollector as Dv, ActivityNote as Dx, PeerMailEnvelope as Dy, EvidencePendingEvent as E, RetainedRunEventOptions as EC, DefaultVerdict$2 as ES, CodeModeToolContext as E_, ChatWorkerSeamOptions as Ea, SpawnForestMissingTree as Eb, SurfaceScore as Ec, dumbContinuationFailPrompt as Ed, BudgetPoolRestore as Ef, UiAuditorDelegationOutput as Eg, ToolLoopCallContext as Eh, graphDigest as Ei, ScopeWidenGate as El, SandboxSteeringOptions as Em, VERIFY_TAIL_CHARS as En, Deliverable as Eo, bestDelivered as Ep, safeWorkerFile as Er, assertTraceDerivedFindings as Es, AgentEnvironmentCapabilities$1 as Et, PursuitVersionChain as Eu, createRuntimeEventCollector as Ev, ActivityLog as Ex, PEER_MAIL_WIRE_KEY as Ey, ResourceLimit as F, LoopLineageOptions as FS, Leaderboard as F_, defaultProfileRichnessThresholds as Fa, contentAddress as Fb, Strategy as Fc, superviseFleetCapabilities as Fd, ReserveOptions as Ff, ResearchTask as Fg, CoderReview as Fh, recordStoredGraphRun as Fi, WidenLineage as Fl, DEFAULT_SHARED_BOX_RESOURCES as Fm, withUntrackedArtifacts as Fn, SandboxLineageHandle as Fo, CoordinationRejectReason as Fp, RemoteSupervisorSteerResult as Fr, BenchmarkCell as Fs, AgentSessionStatus$1 as Ft, SupervisePursuitOptions as Fu, AwaitWakeInput as Fv, ReconnectRetainedInteractiveRunOptions as Fx, PeerMailboxOptions as Fy, Settled as G, LoopWinner as GS, renderLeaderboardMarkdown as G_, RepairStop as Ga, AgentSpec as Gb, strategyAuthorSystemPrompt as Gc, WorkerSpawnRetryAttempt as Gd, DriveHarnessOwnerContext as Gf, FileDelegationStore as Gg, SiblingSandboxExecutorOptions as Gh, rollingDispatch as Gi, RunPersonified as Gl, sharedWorkerClientName as Gm, TrajectoryAnalysis as Gn, reconnectRetainedRun as Go, ContinuationPanelResult as Gp, ProfileRegistryDir as Gr, LoopDispatchOptions as Gs, PlacementInfo as Gt, PursuitNodeTiming as Gu, GateRequest as Gv, HarnessTranscriptCapture as Gx, McpTransport as Gy, NodeSnapshot as H, LoopTokenUsage as HS, leaderboard as H_, CheckRunner as Ha, JudgeError as Hb, defineStrategy as Hc, WorkerSlots as Hd, CoordinationToolFace as Hf, composeLoopTraceEmitters as Hg, DelegationExecutor as Hh, RollingDispatchOptions as Hi, Persona as Hl, sharedBoxPlacement as Hm, jjWorkspace as Hn, PrivateCasNamespaceInventory as Ho, ContinuationEntry as Hp, ProvisionedSupervisor as Hr, printBenchmarkReport as Hs, ExecRequest as Ht, PursuitNodeCost as Hu, WorkerWatchOptions as Hv, HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS as Hx, JsonRpcResponse as Hy, ResourceSpend as I, LoopPlanDescription as IS, LeaderboardOptions as I_, profileRichnessFinding as Ia, Redactor as Ib, StrategyArtifacts as Ic, superviseWithTestBrain as Id, createBudgetPool as If, ResearcherProfileOptions as Ig, CoderReviewer as Ih, storedGraphDigests as Ii, WidenSpec as Il, DEFAULT_SHARED_BOX_WORKERS as Im, GitWorkspaceOptions as In, createSandboxLineage as Io, CoordinationDeliveryEvidence as Ip, RemoteSupervisorTree as Ir, BenchmarkConfig as Is, AgentTurnResult$2 as It, SupervisedPursuitResult as Iu, CoordinationEvent as Iv, RecoverRetainedInteractiveRunOptions as Ix, claimsAuthority as Iy, SpawnRejection as J, OutputAdapter as JS, AnytimeReport as J_, StructuralRolloutPolicy as Ja, ExecutorRegistry as Jb, HarvestFailure as Jc, isPreSpawnExecutorFailure as Jd, ResolveSupervisorTools as Jf, CoderTask as Jg, DetachedTurn as Jh, GraphDesignerExtraTools as Ji, ShapeContext as Jl, createAgentEnvironmentProviderRegistry as Jm, parseWorkerToolTraceArtifact as Jn, startRetainedRunInEnvironment as Jo, PanelFinding as Jp, loadProfile as Jr, SuperviseOptionsForDispatch as Js, SandboxInstance$1 as Jt, PursuitRunProjection as Ju, RouteFlowEvent as Jv, HarnessTranscriptUnavailable as Jx, BusStats as Jy, SpawnOpts as K, MountManifestEntry as KS, renderLeaderboardSvg as K_, StructuralRolloutConfig as Ka, ExecutorContext as Kb, HarvestCorpusOptions as Kc, WorkerSpawnRetryHooks as Kd, ObserveSupervisorNodeEvent as Kf, FileDelegationStoreOptions as Kg, createFleetWorkspaceExecutor as Kh, DesignerRunGraphEnv as Ki, RunPersonifiedOptions as Kl, AgentEnvironmentProviderRef as Km, analyzeTrace as Kn, recoverRetainedRun as Ko, ContinuationPolicy as Kp, ProfileRunRecord as Kr, LoopOptionsForDispatch as Ks, ResourceRequest as Kt, PursuitNodeUsage as Ku, JsonScalar as Kv, HarnessTranscriptEvidence as Kx, BusEvent as Ky, Spend as L, LoopPlanPayload as LS, LeaderboardRow as L_, supervisorInstructions as La, defaultRedactor as Lb, StrategyCtx as Lc, workerFromBackend as Ld, RootStreamRecord as Lf, researcherProfile as Lg, DelegateRunCtx as Lh, taskShapeDigest as Li, WinnerStrategy as Ll, SharedBoxCloseReceipt as Lm, Shell as Ln, AcquireOptions as Lo, CoordinationLog as Lp, RemoteWorkerEvents as Lr, BenchmarkLift as Ls, AnalystFinding$1 as Lt, superviseGraphPursuit as Lu, EventAcknowledgement as Lv, RetainedInteractiveAdmissionHook as Lx, createPeerMailbox as Ly, Budget as M, RetainedRunTurnInput as MC, LoopIterationDispatchPayload as MS, AxisScoresOf as M_, ProfileRichnessThresholds as Ma, FileSpawnJournal as Mb, AuthorStrategyOptions as Mc, PursuitFork as Md, ReservationShortfall as Mf, KnowledgeUpdate as Mg, FeedbackEvent as Mh, lookupGraph as Mi, VerifySpec as Ml, InboxLease as Mm, CopyOptions as Mn, TurnResult as Mo, CoordinationTransportOptions as Mp, RemoteSupervisorCancelResult as Mr, McpEnvironmentOptions as Ms, AgentProfile$2 as Mt, assertPursuitVersions as Mu, WorktreeHarnessResult as Mv, WorkerProgress as Mx, PeerMailRefusal as My, BudgetOverspend as N, StartRetainedRunInEnvironmentOptions as NC, LoopIterationEndedPayload as NS, GroupOf as N_, asAuthoredProfile as Na, InMemoryResultBlobStore as Nb, AuthoredStrategy as Nc, RUN_FORK_CORRELATION_KEYS as Nd, ReservationStage as Nf, ResearchOutput as Ng, FeedbackStore as Nh, pickBestGraph as Ni, Widen as Nl, InboxMessage as Nm, UntrackedCopyStats as Nn, openSandboxRun as No, serveCoordinationMcp as Np, RemoteSupervisorControl as Nr, createMcpEnvironment as Ns, AgentSession as Nt, SuperviseGraphPursuitOptions as Nu, WorktreeProfileMaterializationReceipt as Nv, createActivityLog as Nx, PeerMailSendInput as Ny, TRACE_ROOT_SCHEMA as O, RetainedRunIntentAdmission as OC, ExecCtx as OS, CodeModeToolset as O_, chatWorkerSeam as Oa, SpawnForestTree as Ob, depthStrategy as Oc, formatPromptHandle as Od, LeakedReservation as Of, UiFindingScreenshot as Og, ToolLoopCompaction as Oh, graphRegistry as Oi, TrajectoryNode as Ol, SteerableSandboxSession as Om, closingWorkerNote as On, OpenSandboxRunOptions as Oo, CoordinationControlAccess as Op, supervisorRunsRoot as Or, createScopeAnalyst as Os, AgentEnvironmentProvider$1 as Ot, PursuitVersions as Ou, sanitizeKnowledgeReadinessReport as Ov, DEFAULT_STALL_AFTER_MS as Ox, PeerMailEvent as Oy, BudgetViolation as P, StartRetainedRunOptions as PC, LoopIterationStartedPayload as PS, Interval as P_, assessAuthoredProfile as Pa, InMemorySpawnJournal as Pb, ShotSpec as Pc, supervise as Pd, ReservationTicket as Pf, ResearchSource as Pg, CoderDelegate as Ph, recordGraphRun as Pi, WidenDecision as Pl, PeerInboxMessage as Pm, copyUntrackedIntoClone as Pn, SandboxLineage as Po, CoordinationHttpAudit as Pp, RemoteSupervisorReader as Pr, sanitizeMcpToolSchema as Ps, AgentSessionRef as Pt, SupervisePursuitError as Pu, GitRunner as Pv, readWorkerProgress as Px, PeerMailbox as Py, FleetYield as Q, ValidationCtx as QS, areaUnderCurve as Q_, compareCheckOutcomes as Qa, ExecutorExecutionBinding as Qb, ObservationAnalysis as Qc, SuperviseRegistry as Qd, SupervisorNodeContextSeed as Qf, DeliverableSpec as Qg, DelegationRecord as Qh, delegate as Qi, DefinedLeaderboard as Ql, ProviderPromptOptions as Qm, ValidateStoredGraphOptions as Qn, recoverRetainedInteractiveRun as Qo, DriverReentry as Qp, recordProfileRun as Qr, LocalSandboxClientOptions as Qs, VerifierEnvironmentOptions as Qt, FileObserverJournal as Qu, ChildQuestionInbox as Qv, captureHarnessTranscript as Qx, WatchTraceOptions as Qy, SpendChannel as R, LoopResult as RS, PairwiseOptions as R_, RunCancellationReason as Ra, AgentEvalError$1 as Rb, StrategyResult as Rc, AuthorizedSpawn as Rd, readRootStream as Rf, TraceContext as Rg, DetachedSessionDelegateOptions as Rh, GraphTriggerBinding as Ri, DefinePersona as Rl, SharedBoxPlacement as Rm, Workspace as Rn, acquireSandbox as Ro, FileCoordinationLog as Rp, connectRemoteSupervisor as Rr, BenchmarkReport as Rs, CheckpointRef as Rt, supervisePursuit as Ru, LeadMessage as Rv, RetainedInteractiveEnvironmentInput as Rx, isPeerMailEnvelope as Ry, RuntimeStreamEvent as S, RetainedRunCancellation as SC, ExecutorToolCall as SS, HarnessUsage as S_, ChatCompletionsTransport as Sa, materializeTreeView as Sb, CorpusReadbackOptions as Sc, RegisteredPrompt as Sd, RunParkingPolicy as Sf, FeedbackRating as Sg, RouterResponseReceipt as Sh, StoredGraph as Si, PipelineStage as Sl, RouterSeam as Sm, attachWorker as Sn, TournamentCell as So, DeliveredOutput as Sp, legacySupervisorRunDir as Sr, verify as Ss, SpawnRefusalCause as St, runIsolatedCheck as Su, RuntimeStreamEventSummary as Sv, SessionMessageLike as Sx, MapSpawnMarker as Sy, RuntimeFailureOwner as T, RetainedRunEnvironmentAdmission as TC, AgentRunSpec as TS, CodeModeTool as T_, ChatTransportTool as Ta, SpawnForestInDoubtNode as Tb, StrategyShotResult as Tc, delegatesWorkerBriefPrompt as Td, BudgetPool as Tf, UiAuditLensFilter as Tg, ToolSpec as Th, graphCorpusSummary as Ti, ScopeAnalyzeInput as Tl, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Tm, NOTE_MAX_CHARS as Tn, strategyTournament as To, SupervisorFinalizer as Tp, readWorkerSteerRequests as Tr, RegistryAnalyzeProjection as Ts, AgentEnvironment$1 as Tt, NextPursuitVersionInput as Tu, SanitizedKnowledgeRequirement as Tv, createPushTraceSource as Tx, DEFAULT_PEER_MAIL_LIMITS as Ty, NodeStatus as U, LoopTraceEmitter as US, pairwiseSignificance as U_, CheckSource as Ua, NotFoundError as Ub, sampleThenRefine as Uc, createWorkerSlots as Ud, CoordinationVerbs as Uf, DelegationPersistenceError as Ug, FleetHandle as Uh, freeSlots as Ui, PersonaContext as Ul, ROUTER_CLIENT_HEADER as Um, localShell as Un, PrivateCasNamespaceObject as Uo, ContinuationPanel as Up, SupervisorCleanupReceipt as Ur, runBenchmark as Us, ExecResult as Ut, PursuitNodePlatform as Uu, DecideGate as Uv, HarnessTranscriptArtifact as Ux, McpToolAnnotations as Uy, NodeId as V, LoopTeardownFailedPayload as VS, ScoreOf as V_, CheckRunContext as Va, ConfigError as Vb, authorStrategy as Vc, SuperviseTestOptions as Vd, supervisorAgentWithTestBrain as Vf, DelegationTraceSpan as Vg, detachedSessionDelegate as Vh, DispatchUnit as Vi, Outcome as Vl, SharedWorkerIdentity as Vm, gitWorkspace as Vn, createS3PrivateCasStore as Vo, ContinuationAppend as Vp, ProvisionSupervisorRequest as Vr, Environment as Vs, CreateSandboxOptions$1 as Vt, PursuitCostProvenance as Vu, ToolOutcomeEvent as Vv, StartRetainedInteractiveRunOptions as Vx, JsonRpcMessage as Vy, RetainedExecutionState as W, LoopTraceEvent as WS, renderLeaderboardHtml as W_, CheckSourceCtx as Wa, ValidationError as Wb, strategyAuthorContract as Wc, ResolvedWorkerSpawnRetry as Wd, DriveHarness as Wf, DelegationStore as Wg, FleetWorkspaceExecutorOptions as Wh, queueOf as Wi, PersonaExecutors as Wl, sharedBoxRefusal as Wm, runInWorkspace as Wn, PrivateCasNamespaceRetirement as Wo, ContinuationPanelInput as Wp, provisionSupervisor as Wr, LoopCampaignDispatchOptions as Ws, ForkRequest as Wt, PursuitNodeProjection as Wu, GateDecision as Wv, HarnessTranscriptBinding as Wx, McpToolDescriptor as Wy, SubtreeSummary as X, SandboxClient as XS, AnytimeTaskCurve as X_, VisibleCheck as Xa, AgentExecutionRef as Xb, harvestCorpus as Xc, retryPreSpawnRefusals as Xd, SupervisorAgentTestDeps as Xf, CheckVerdict as Xg, runDetachedTurn as Xh, DelegateOptions as Xi, ProviderAsSandboxClientOptions as Xl, ProviderExecutorOptions as Xm, createSupervisor as Xn, claimRetainedInteractiveControl as Xo, admitContinuationPolicy as Xp, profileRegistry as Xr, loopDispatch as Xs, computeFindingId$1 as Xt, PursuitStatus as Xu, RouteMatch as Xv, ReadableEnvironment as Xx, PublishOptions as Xy, SubtreeResult as Y, RunProvenance as YS, AnytimeStrategySummary as Y_, StructuralRolloutResult as Ya, SpawnModelSubstitution as Yb, HarvestReport as Yc, resolveWorkerSpawnRetry as Yd, SupervisorAgentDeps as Yf, CheckUnavailableError as Yg, RunDetachedTurnOptions as Yh, graphDesignerExtraTools as Yi, ShapeRegistry as Yl, resolveAgentEnvironmentProvider as Ym, DEFAULT_MAX_DEPTH as Yn, ClaimRetainedInteractiveControlOptions as Yo, VerdictSummary as Yp, pickBestProfile as Yr, loopCampaignDispatch as Ys, WorkspaceRequest as Yt, PursuitRunTotals as Yu, RouteGate as Yv, HarnessTranscriptUnavailableReason as Yx, EventBus as Yy, TreeView as Z, SelectionReceipt as ZS, anytimeReport as Z_, canDisplace as Za, ExecutionBindingReceipt as Zb, Observation as Zc, withWorkerSpawnRetry as Zd, SupervisorNodeContext as Zf, CompletionCheckContext as Zg, DelegationArgs as Zh, defaultDelegateBudget as Zi, providerAsSandboxClient as Zl, ProviderLeafOut as Zm, createRootHandle as Zn, reconnectRetainedInteractiveRun as Zo, DriverContractState as Zp, profileRunsForName as Zr, superviseDispatch as Zs, makeFinding$1 as Zt, projectPursuit as Zu, RouteWhen as Zv, captureBoundHarnessTranscript as Zx, createEventBus as Zy, RunAgentTaskOptions as _, RetainedInteractiveIntentAdmission as _C, ProviderWorkspaceCaptureResult as _S, CodexStoreDelta as __, UnconfirmedTeardown as _a, CodexTokenUsage as _b, AgenticRunResult as _c, GraphFromStoredOptions as _d, createSupervisorSpanRecorder as _f, DelegationHistoryEntry as _g, mapSandboxToolEvent as _h, GraphCorpusSummary as _i, LoopUntilState as _l, CliInPlaceSeam as _m, WorktreePatchArtifact as _n, EvolutionAuthor as _o, readRunCancellation as _p, WorkerCancellation as _r, flatWidenGate as _s, PeerAuditAccess as _t, readDeclaredCheck as _u, createOtelExporter as _v, Runtime as _x, DownMessageDeliveryOutcome as _y, AgentKnowledgeProvider as a, RuntimeRunRow as aC, HarnessTranscriptReadLimits as aS, CompletionPolicy as a_, RootHandle as aa, AnalystRegistry$1 as ab, InProcessSandboxClientOptions as ac, EdgeTraversal as ad, subscriptionUsageLimitSignal as af, SubmitInput as ag, KeyProvider as ah, createInPlaceCliExecutor as ai, AssertTraceDerivedFindings as al, environmentReader as am, SurfaceReader as an, resolveEntrySymbol as ao, PlateauOptions as ap, SearchSpec as ar, PrivateCasDurableStore as as, DriverAttemptRecord as at, LeaderboardScenario as au, createWaterfallCollector as av, RootMaterialization as ax, QuestionLevel as ay, RuntimeSession as b, RetainedRunAdmissionHook as bC, ProviderWorkspaceRetentionPort as bS, harnessUsageIsEmpty as b_, WorkerEventEntry as ba, openSqlRunStore as bb, AgenticTool as bc, PromptHandle as bd, ParkedRun as bf, DelegationStatus as bg, extractLlmCallEvent as bh, GraphRunRecord as bi, PanelSpec as bl, CliWorktreeSeam as bm, WorkerInteractiveBinding as bn, StrategyEvolutionConfig as bo, UNPROVEN_CONTINUITY as bp, WriteWorkerSteerOptions as br, pipeline as bs, SpawnPreflightContext as bt, IsolatedCheckOptions as bu, RuntimeStreamEventCollector as bv, WorkerTraceEvidence as bx, MapItemFailurePolicy as by, AgentTaskContext as c, NativeContextContinuationExecution as cC, RetainedHarnessTranscriptDescriptor as cS, deterministicCompletion as c_, RootSignal as ca, AuthoredAnalystDefinition as cb, LocalMcpMaterialization as cc, GraphNode as cd, RunContext as cf, DelegateCodeConfig as cg, mcpSecretEnvMetadataKey as ch, graphFromSessionFacts as ci, CorpusFilter as cl, McpServerOptions as cm, fsSurfaceReader as cn, structuralRollout as co, StopRule as cp, assertSearchSpec as cr, createPrivateCasArtifactPort as cs, DriverFailureClass as ct, defineLeaderboard as cu, SandboxEvidenceContext as cv, Executor as cx, QuestionRecord as cy, AgentTaskStatus as d, ReconnectRetainedRunOptions as dC, retainHarnessTranscript as dS, CodexForkBoundary as d_, SupervisorOpts as da, CodexExecutionEvidence as db, McpSpawnFault as dc, RunGraphOptions as dd, createInMemoryRunContext as df, DelegateUiAuditArgs as dg, secretEnvOfMcpServer as dh, GraphFileResolutionError as di, EqualKOnCostOptions as dl, DelegateHandlerOptions as dm, analystsFromRegistry as dn, AgentTurnInput$1 as do, noProgressFor as dp, searchSpecDigest as dr, definePersona as ds, CoordinationStats as dt, DeclaredCheckStateCapture as du, OtelAttribute as dv, ExecutorCancellationRequest as dx, AuthorizeDownMessage as dy, RuntimeRunCompleteInput as eC, persistHarnessTranscript as eS, gateOnDeliverable as e_, SpawnEvent as ea, watchTrace as eb, TerminalDecision as ec, ObserverRecord as ed, SeatSegment as ef, DelegationResumeDriver as eg, UnavailablePausePolicy as eh, InteractiveWorkerKeyInput as ei, ObserveInput as el, ResolveSpawnResourcePathsResult as em, BoxSurfaceReaderOptions as en, defaultExtractCandidate as eo, SupervisorToolInvocationContext as ep, FencedSqlRunContext as er, ResolveSandboxClientOptions as es, ProviderModelAttemptEvidence as et, LeaderboardBenchTask as eu, plateauLength as ev, ExecutorNodeContext as ex, Question as ey, BackendErrorDetail as f, RecoverRetainedRunIntentOptions as fC, ProviderCheckpointCaptureContext as fS, CodexRolloutIdentity as f_, Agent as fa, LocalHarnessResult as fb, StdioMcpConnection as fc, RunGraphTestOptions as fd, withRunContext as ff, DelegateUiAuditConfig as fg, SandboxLeafOut as fh, GraphFileSeat as fi, EqualKVerdict as fl, DelegateResult as fm, failuresAnalyst as fn, AgentTurnUsage as fo, plateau as fp, settledToIteration as fr, runPersonified as fs, CoordinationTools as ft, assertDeclaredCheck as fu, OtelExportConfig as fv, ExecutorResult as fx, AuthorizedDownMessage as fy, OpenAIChatToolChoice as g, RetainedInteractiveEnvironmentAdmission as gC, ProviderWorkspaceCaptureReceipt as gS, CodexRolloutTurn as g_, Scope as ga, LocalHarness as gb, AgenticOptions as gc, GraphCommandCheck as gd, SupervisorSpanRecorder as gf, DelegationHistoryArgs as gg, mapSandboxEvent as gh, GraphCorpusGroup as gi, LoopUntilSpec as gl, createExecutor as gm, WorktreeCliExecutorOptions as gn, streamAgentTurn as go, readRunCancelRequest as gp, runToolSpans as gr, fanout as gs, MakeWorkerAgent as gt, declaredCheckJudge as gu, buildLoopOtelSpans as gv, HeldRelease as gx, DownMessageDeliveryAttempt as gy, OpenAIChatTool as h, RetainedInteractiveAdmission as hC, ProviderWorkspaceCaptureProvenance as hS, CodexRolloutStoreRef as h_, ResumedWork as ha, LOCAL_HARNESSES as hb, materializeLocalMcp as hc, runGraphWithTestBrain as hd, SupervisorSpanOutcome as hf, DelegationFeedbackSnapshot as hg, createSandboxToolPartState as hh, loadGraphFile as hi, FanoutWinnerSelector as hl, ExecutorConfig as hm, worktreeFanout as hn, collectAgentTurn as ho, cancelRun as hp, RunTraceSources as hr, renderCorpusToInstructions as hs, GraphSubtasks as ht, declaredCheckDigest as hu, OtelSpan as hv, HeldForContinuation as hx, DownMessageAuthorizationInput as hy, AgentExecutionBackend as i, RuntimeRunPersistenceAdapter as iC, HarnessTranscriptMetadata as iS, CompletionEvidence as i_, RecursiveReservationPolicy as ia, AnalystLensOutput as ib, InProcessPromptCtx as ic, EdgeDeliveryOutcome as id, SelectSeat as if, DelegationTaskQueueOptions as ig, BridgeSeam as ih, InPlaceCliExecutorOptions as ii, renderReport as il, SpawnResourceReader as im, SurfaceReadOutcome as in, officialChecksFromMeta as io, NoProgressForOptions as ip, SEARCH_SPEC_CORRELATION_KEY as ir, PrivateCasArtifactPort as is, SupervisedResult as it, LeaderboardRunContext as iu, WaterfallSpan as iv, ProfileMaterializationReceipt as ix, QuestionEscalationTarget as iy, TraceSummary as j, RetainedRunStartMaterial as jC, LoopEndedPayload as jS, runCodeMode as j_, ProfileRichness as ja, replaySpawnTree as jb, sample as jc, promptHandle as jd, ReservationRejection as jf, KnowledgeItem as jg, ToolLoopToolCall as jh, loadGraph as ji, Verify as jl, Inbox as jm, spendFromUsageEvents as jn, SandboxRunAbortError as jo, CoordinationReadAccess as jp, RemoteSupervisorAgent as jr, McpEndpoint as js, AgentEnvironmentSummary as jt, VersionVerdict as ju, WorktreeCommandResult as jv, TeamProgress as jx, PeerMailReadout as jy, TRACE_SUMMARY_SCHEMA as k, RetainedRunReplayPoint as kC, Iteration as kS, RunCodeModeOptions as k_, createChatSessionStore as ka, loadSpawnForest as kb, refine as kc, kernelPromptRegistry as kd, ReservationFloor as kf, UiFindingSeverity as kg, ToolLoopCompactionOptions as kh, graphRunsFor as ki, TrajectoryReport as kl, createSteerableSandboxSession as km, composeWorkerEvidence as kn, OpenSandboxRunPromptOptions as ko, CoordinationMcpHandle as kp, workerInboxFileFromEventDir as kr, registryScopeAnalyst as ks, AgentEnvironmentQuery as kt, SettledPursuitVersion as ku, InPlaceHarnessResult as kv, ExecutorProgress as kx, PeerMailLimits as ky, AgentTaskRunResult as l, NativeContextContinuationHandle as lC, readBoundHarnessSessions as lS, sentinelCompletion as l_, SteerableRootHandle as la, AuthoredAnalystLimits as lb, MaterializeLocalMcpOptions as lc, GraphResult as ld, RunContextLease as lf, DelegateResearchArgs as lg, resolveMcpServerLaunch as lh, graphFileSchema as li, CorpusRecord as ll, createMcpServer as lm, harvestSurfaceDiffs as ln, visibleCheckScore as lo, allWorkersStalled as lp, compileSearchSpec as lr, equalKOnCost as ls, DriverRepromptRefusal as lt, DeclaredCheck as lu, SandboxEvidenceReceipt as lv, ExecutorAccounting as lx, QuestionUrgency as ly, OpenAIChatResponseFormat as m, RecoverRetainedRunResult as mC, ProviderWorkspaceAttemptProvenance as mS, CodexRolloutStoreReader as m_, ResumedKeyState as ma, runLocalHarness as mb, connectStdioMcp as mc, runGraph as md, SupervisorSpanOptions as mf, DelegationError as mg, SandboxToolPartState as mh, LoadedGraphFile as mi, FanoutSynthesis as ml, createExecutorRegistry as mm, WorktreeFanoutOptions as mn, StreamAgentTurnOptions as mo, RunCancellation as mp, ScopeArgs as mr, InMemoryCorpus as ms, GraphSubtaskPreparation as mt, declaredCheckDeliverable as mu, OtelExporter as mv, HeldEnvironment as mx, ContinuityMode as my, AgentBackendContext as n, RuntimeRunHandle as nC, HARNESS_TRANSCRIPT_READ_LIMITS as nS, verdictFromJudgeScore as n_, TraceRootReceipt as na, AnalystFindingEvent as nb, inlineSandboxClient as nc, observerRecordDigest as nd, SeatSelectionInput as nf, DelegationRunContext as ng, BridgeHarnessStore as nh, InteractiveWorkerResult as ni, defaultAnalystInstruction as nl, SpawnResourceBytes as nm, SurfaceDiff as nn, filterAuthoredAsserts as no, SupervisorProfile as np, createFencedSqlRunContext as nr, profileChatClient as ns, RootProviderModelEvidence as nt, LeaderboardFlagSpec as nu, WaterfallCollector as nv, MaterializedModelIdentity as nx, QuestionEscalationOutcome as ny, AgentRuntimeEvent as o, RuntimeRunStatus as oC, HarnessTranscriptReadOptions as oS, CompletionVerdict as o_, RootSegment as oa, AnalystRunContext as ob, inProcessSandboxClient as oc, GraphEdge as od, InMemoryRunContext as of, SubmitOutput as og, ResolvedMcpServerLaunch as oh, GraphSessionObservationOptions as oi, CombinatorShape as ol, resolveSpawnResourcePaths as om, WatchedSurface as on, sandboxCheckRunner as oo, ProgressView as op, SearchSpecInputs as or, PrivateCasOffloadReport as os, DriverAttemptStop as ot, LeaderboardScore as ou, RunAgentRoundsOptions as ov, UnknownMaterializationReason as ox, QuestionOption as oy, KnowledgeReadinessDecision as p, RecoverRetainedRunOptions as pC, ProviderNativeCapturePhase as pS, CodexRolloutSession as p_, ReenteredWorkers as pa, RunLocalHarnessOptions as pb, StdioMcpServerSpec as pc, TraversalContinuity as pd, SupervisorSpanAttributes as pf, DelegateUiAuditRoute as pg, SandboxOutputMarker as ph, LoadGraphFileOptions as pi, FanoutOptions as pl, createDelegateHandler as pm, AuthoredHarness as pn, CollectedAgentTurn as po, RunCancelRequest as pp, createScope as pr, FileCorpus as ps, CoordinationToolsOptions as pt, checkProgramDigest as pu, OtelExportStats as pv, ExecutorTeardownWarning as px, ContinuationInstruction as py, SpawnPrior as q, MountRecorder as qS, renderPairwiseMarkdown as q_, StructuralRolloutMessage as qa, ExecutorFactory as qb, HarvestError as qc, WorkerSpawnRetryPolicy as qd, ResolveDriveHarness as qf, CoderOutput as qg, createSiblingSandboxExecutor as qh, DesignerToolsEnv as qi, ShapeBudget as ql, AgentEnvironmentProviderRegistry as qm, WorkerToolTraceArtifact as qn, startRetainedRun as qo, ContinuationProfile as qp, bestProfileFor as qr, SuperviseDispatchOptions as qs, SandboxEvent$1 as qt, PursuitProjection as qu, RouteFlow as qv, HarnessTranscriptFile as qx, BusRecord as qy, AgentBackendInput as r, RuntimeRunOptions as rC, HarnessFileBinding as rS, CompletionAnalyst as r_, WorkspaceCheckpointMarker as ra, AnalystKind as rb, InProcessOnPrompt as rc, AgentGraph as rd, SeatStage as rf, DelegationTaskQueue as rg, BridgeModelCredential as rh, workerFromInteractiveProvider as ri, observe as rl, SpawnResourceRead as rm, SurfaceReadBox as rn, modelAuthoredChecks as ro, AllWorkersStalledOptions as rp, CompiledSearchSpec as rr, profileOptimizerModelCall as rs, RootStreamReceipt as rt, LeaderboardIterationInfo as ru, WaterfallReport as rv, NodeExecutionIdentity as rx, QuestionEscalationRecord as ry, AgentRuntimeEventSink as s, startRuntimeRun as sC, RetainedHarnessTranscriptCapture as sS, completionAuthorizes as s_, RootSegmentEntry as sa, AnalyzeOnSettleRoute as sb, HttpMcpServerSpec as sc, GraphEdgeCapError as sd, InMemoryRunContextOptions as sf, DelegateCodeArgs as sg, envKeyProvider as sh, ObservedSessionFacts as si, Corpus as sl, McpServer as sm, boxSurfaceReader as sn, selectBestIndex as so, StopDecision as sp, SearchSpecOwnedOption as sr, PrivateCasOptions as ss, DriverContinuationRecord as st, LeaderboardSpec as su, runAgentRounds as sv, EnvironmentTeardownReceipt as sx, QuestionPolicy as sy, AgentAdapter as t, RuntimeRunCost as tC, BoundHarnessSession as tS, mapExecutorResult as t_, SpawnJournal as ta, AnalystAssignmentRecord as tb, defaultSelectWinner as tc, ObserverRecordKind as td, SeatSelection as tf, DelegationResumeTick as tg, ProviderPlacement as th, InteractiveWorkerOptions as ti, ObserveOptions as tl, ResolvedSpawnResourcePath as tm, HarvestSurfaceDiffsOptions as tn, defaultStructuralRolloutPolicy as to, ManagerWakePolicy as tp, SqlRunContextOptions as tr, resolveSandboxClient as ts, ProviderModelExecutionEvidence as tt, LeaderboardBenchmarkAdapter as tu, renderAnytimeTable as tv, MaterializedExecutionIdentity as tx, QuestionDecision as ty, AgentTaskSpec as u, NativeContextContinuationInput as uC, resolveHarnessTranscriptCapture as uS, stopSentinel as u_, Supervisor as ua, DefinedAnalystRecord as ub, McpListedTool as uc, GraphTopology as ud, createFileRunContext as uf, DelegateResearchConfig as ug, resolveSecretEnv as uh, graphRouteWhenSchema as ui, EqualKArm as ul, DelegateError as um, AnalystAuthoring as un, AgentTurnBackend as uo, anyOf as up, searchPresets as ur, trajectoryReport as us, BlockedToolReport as ut, DeclaredCheckPlacement as uu, SandboxEvidenceRetentionPort as uv, ExecutorCancellation as ux, questionEscalationTargets as uy, RunAgentTaskStreamOptions as v, RetainedInteractiveStartedAdmission as vC, ProviderWorkspaceEntryMetadata as vS, addHarnessUsage as v_, WidenGate as va, CodexExecutionPolicy as vb, AgenticSurface as vc, defaultEdgeTraversalCap as vd, WorkerTraceResolver as vf, DelegationProgress as vg, SandboxServedBackend as vh, GraphRegistryDir as vi, Panel as vl, CliSeam as vm, createWorktreeCliExecutor as vn, EvolutionReport as vo, ReentryContinuity as vp, WorkerSteerAcknowledgement as vr, loopUntil as vs, SettledWorker as vt, IsolatedCheckBox as vu, loopEventToOtelSpan as vv, WorkerInteractiveSession as vx, DownMessageEvent as vy, RuntimeFailureCode as w, RetainedRunEffect as wC, UsageEvent as wS, CodeModeStore as w_, ChatTransportExecutorOptions as wa, SpawnForestEvent as wb, StrategyMessage as wc, createPromptRegistry as wd, readRunParking as wf, ResearchOutputShape as wg, RouterRouting as wh, digestOfGraph as wi, ScopeAnalyst as wl, SandboxSeam as wm, EVIDENCE_MAX_CHARS as wn, runStrategyEvolution as wo, FinalizerSettled as wp, readWorkerSteerAcknowledgement as wr, CreateScopeAnalystOptions as ws, WorkerSpawnContext as wt, NextPursuitVersion as wu, SanitizedKnowledgeReadinessReport as wv, TraceSource as wx, AUTHORITY_MARKERS as wy, RuntimeSessionStore as x, RetainedRunCancelOptions as xC, ExecutorProgressEvent as xS, readCodexRolloutSession as x_, WorkerEventPage as xa, SqlAdapter as xb, ArtifactHandle as xc, PromptRegistry as xd, RunParkedError as xf, DelegationStatusResult as xg, sumSandboxUsage as xh, GraphSelection as xi, PanelVerdict as xl, ProviderSeam as xm, WorkerInteractiveProviderSource as xn, StrategyTournament as xo, composeReentryTask as xp, cancelWorker as xr, selectValidWinner as xs, SpawnRefusal as xt, IsolatedCheckResult as xu, RuntimeStreamEventSink as xv, WorkerTraceUnavailableReason as xx, MapOnSettleRoute as xy, RuntimeCanonicalStreamEvent as y, RetainedRunAdmission as yC, ProviderWorkspaceRetentionContext as yS, createCodexRolloutStoreReader as y_, WorkerEventCursor as ya, SqlRunOwnershipError as yb, AgenticTask as yc, GraphRouteError as yd, DeadlineCheckIn as yf, DelegationResultPayload as yg, SandboxUsageLedger as yh, GraphRunQuery as yi, PanelJudge as yl, CliWorktreeBridgeSeam as ym, AttachWorkerOptions as yn, EvolutionStrategy as yo, ReentryTaskInput as yp, WorkerSteerRequest as yr, panel as ys, SpawnPreflight as yt, IsolatedCheckBoxEvidence as yu, RuntimeEventCollector as yv, WorkerInteractiveUnavailableReason as yx, WorkerResumeContext as yy, SpendGap as z, LoopSandboxPlacement as zS, PairwiseVerdict as z_, CheckExecChannel as za, AgentEvalErrorCode as zb, adaptiveRefine as zc, AuthorizedSpawnContext as zd, readRootStreamReceipt as zf, createPropagatingTraceEmitter as zg, DetachedWinnerSelection as zh, DispatchReport as zi, DefinePersonaInput as zl, SharedBoxPlacementOptions as zm, WorkspaceCommit as zn, S3PrivateCasStore as zo, PriorCoordination as zp, connectRemoteSupervisorControl as zr, BenchmarkStrategySummary as zs, CheckpointRequest as zt, RunReopen as zu, ManagerReentryState as zv, RetainedInteractiveRunHandle as zx, peerMailTools as zy };
-//# sourceMappingURL=types-QS0ItMiE.d.ts.map
+//# sourceMappingURL=types-Bn1qbOZi.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-runtime",
-  "version": "3.0.2",
+  "version": "3.0.7",
   "description": "Shared task-lifecycle skeleton for agents: a recursive loop kernel for chat turns, one-shot tasks, and multi-attempt loops, with trace capture and eval-gated self-improvement. Domain behavior lives in adapters; scoring and ship-gates in @tangle-network/agent-eval.",
   "homepage": "https://github.com/tangle-network/agent-runtime#readme",
   "repository": {
@@ -120,12 +120,12 @@
     "@biomejs/biome": "^2.6.3",
     "@modelcontextprotocol/sdk": "1.32.2",
     "@tangle-network/agent-eval": "1.0.0",
-    "@tangle-network/agent-interface": "5.10.2",
+    "@tangle-network/agent-interface": "5.10.6",
     "@tangle-network/agent-provider-cli-bridge": "2.0.2",
     "@tangle-network/agent-provider-daytona": "0.6.1",
     "@tangle-network/agent-provider-e2b": "0.6.1",
-    "@tangle-network/agent-provider-tangle": "4.5.1",
-    "@tangle-network/sandbox": "1.0.40",
+    "@tangle-network/agent-provider-tangle": "4.5.6",
+    "@tangle-network/sandbox": "1.0.73",
     "@types/node": "26.6.5",
     "@types/tar-stream": "3.1.5",
     "miniflare": "4.20260730.0",
@@ -146,7 +146,7 @@
   "license": "MIT",
   "peerDependencies": {
     "@tangle-network/agent-eval": "^1.0.0",
-    "@tangle-network/agent-interface": "^5.10.2",
+    "@tangle-network/agent-interface": "^5.10.5",
     "@tangle-network/sandbox": "^1.0.1"
   },
   "dependencies": {
@@ -155,6 +155,7 @@
     "@tangle-network/agent-knowledge": "^23.0.0",
     "@tangle-network/agent-profile-materialize": "^1.1.4",
     "@tangle-network/agent-trace-contract": "^2.2.0",
+    "@tangle-network/sandbox-ui": "^2.0.20",
     "tar-stream": "3.2.2",
     "yaml": "2.9.1",
     "zod": "^4.6.6"
@@ -166,7 +167,7 @@
     "test:watch": "vitest",
     "lint": "biome check src tests examples",
     "lint:fix": "biome check --write src tests examples",
-    "typecheck": "tsc --noEmit && pnpm run typecheck:examples",
+    "typecheck": "tsc --noEmit && pnpm run typecheck:examples && pnpm --filter @tangle-network/agent-bench run typecheck:public",
     "typecheck:examples": "tsc --noEmit -p tsconfig.examples.json",
     "generate:testing-fixture": "node --import tsx scripts/generate-agent-improvement-proposal-fixtures.ts",
     "check:testing-fixture": "node --import tsx scripts/generate-agent-improvement-proposal-fixtures.ts --check",

package/dist/profile-CvucOo-Q.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-CvucOo-Q.js","names":["canonicalCandidateDigest","canonicalCandidateBytes","sha256Bytes"],"sources":["../src/candidate-execution/public-config.ts","../src/candidate-execution/system-prompt.ts","../src/candidate-execution/profile.ts"],"sourcesContent":["import type { AgentCandidateConfigValue } from '@tangle-network/agent-interface'\nimport { ValidationError } from '../errors'\n\n/** Candidate execution has no private secret resolver; never lower a reference to argv or env. */\nexport function requirePublicCandidateConfigValue(\n  value: AgentCandidateConfigValue,\n  path: string,\n): string {\n  if (value.kind !== 'public') {\n    throw new ValidationError(\n      `candidate ${path} requires a public value; secret references are unsupported`,\n    )\n  }\n  return value.value\n}\n","import { posix } from 'node:path'\nimport type {\n  AgentCandidateConfigValue,\n  AgentCandidateLaunch,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentCandidateWorkspacePlan,\n  HarnessId,\n} from '@tangle-network/agent-profile-materialize'\nimport { nativeSystemPrompt } from '../agent/native-system-prompt'\nimport { requirePublicCandidateConfigValue } from './public-config'\n\ninterface HarnessSystemPrompt {\n  readonly executable: string\n  readonly conflictsWithArgs: (values: readonly string[]) => boolean\n  readonly conflictsWithAppendArgs: (values: readonly string[]) => boolean\n}\n\nconst SYSTEM_PROMPT_FLAGS = ['--system-prompt', '--system-prompt-file'] as const\nconst APPEND_SYSTEM_PROMPT_FLAGS = [\n  '--append-system-prompt',\n  '--append-system-prompt-file',\n] as const\n\nfunction argsSetSystemPromptFlag(values: readonly string[]): boolean {\n  return values.some((value) =>\n    SYSTEM_PROMPT_FLAGS.some((flag) => value === flag || value.startsWith(`${flag}=`)),\n  )\n}\n\nfunction argsSetAppendSystemPromptFlag(values: readonly string[]): boolean {\n  return values.some((value) =>\n    APPEND_SYSTEM_PROMPT_FLAGS.some((flag) => value === flag || value.startsWith(`${flag}=`)),\n  )\n}\n\n/** Codex keys that can replace or contaminate the materializer's sealed instructions file. */\nconst CODEX_INSTRUCTION_KEYS = ['model_instructions_file', 'developer_instructions'] as const\n\nfunction argsSetCodexInstructionOverride(values: readonly string[]): boolean {\n  for (let index = 0; index < values.length; index++) {\n    const value = values[index]!\n    const config =\n      value === '-c' || value === '--config'\n        ? values[index + 1]\n        : value.startsWith('--config=')\n          ? value.slice('--config='.length)\n          : undefined\n    if (\n      config !== undefined &&\n      CODEX_INSTRUCTION_KEYS.some((key) => config.trimStart().startsWith(`${key}=`))\n    ) {\n      return true\n    }\n  }\n  return false\n}\n\nconst HARNESS_SYSTEM_PROMPTS = {\n  'claude-code': {\n    executable: 'claude',\n    conflictsWithArgs: argsSetSystemPromptFlag,\n    conflictsWithAppendArgs: argsSetAppendSystemPromptFlag,\n  },\n  codex: {\n    executable: 'codex',\n    conflictsWithArgs: argsSetCodexInstructionOverride,\n    conflictsWithAppendArgs: argsSetCodexInstructionOverride,\n  },\n  opencode: {\n    executable: 'opencode',\n    conflictsWithArgs: (values: readonly string[]) =>\n      values.some((value) => value === '--agent' || value.startsWith('--agent=')),\n    conflictsWithAppendArgs: argsSetAppendSystemPromptFlag,\n  },\n  pi: {\n    executable: 'pi',\n    conflictsWithArgs: argsSetSystemPromptFlag,\n    conflictsWithAppendArgs: argsSetAppendSystemPromptFlag,\n  },\n  prime: {\n    executable: 'prime-agent',\n    conflictsWithArgs: argsSetSystemPromptFlag,\n    conflictsWithAppendArgs: argsSetAppendSystemPromptFlag,\n  },\n  gemini: {\n    executable: 'gemini',\n    conflictsWithArgs: argsSetSystemPromptFlag,\n    conflictsWithAppendArgs: argsSetAppendSystemPromptFlag,\n  },\n} satisfies Partial<Record<HarnessId, HarnessSystemPrompt>>\n\n/** Project both prompt intents onto their distinct native process controls. */\nexport function projectCandidatePromptIntents(\n  plan: AgentCandidateWorkspacePlan,\n  launch: AgentCandidateLaunch,\n  systemPromptFilePath: string,\n  requestedSystemPrompt: string | undefined = plan.systemPrompt === undefined\n    ? undefined\n    : requirePublicCandidateConfigValue(plan.systemPrompt, 'profile.systemPrompt'),\n  requestedAppendSystemPrompt: string | undefined = plan.appendSystemPrompt === undefined\n    ? undefined\n    : requirePublicCandidateConfigValue(plan.appendSystemPrompt, 'profile.appendSystemPrompt'),\n): AgentCandidateWorkspacePlan {\n  const systemPrompt = plan.systemPrompt\n  const appendSystemPrompt = plan.appendSystemPrompt\n  const geminiSystem = plan.files.find((file) => file.relPath === '.gemini/system.md')\n  const delivered =\n    plan.harness === 'gemini' &&\n    geminiSystem?.content === requestedSystemPrompt &&\n    plan.env.GEMINI_SYSTEM_MD !== undefined &&\n    requirePublicCandidateConfigValue(plan.env.GEMINI_SYSTEM_MD, 'profile.env.GEMINI_SYSTEM_MD') ===\n      '1'\n\n  if (requestedSystemPrompt === undefined && requestedAppendSystemPrompt === undefined) {\n    return plan\n  }\n\n  const projection = HARNESS_SYSTEM_PROMPTS[plan.harness as keyof typeof HARNESS_SYSTEM_PROMPTS] as\n    | HarnessSystemPrompt\n    | undefined\n  if (!projection) {\n    throw new Error(`candidate system prompt has no native launch projection for ${plan.harness}`)\n  }\n\n  const requestedReplacement = requestedSystemPrompt !== undefined\n  if (requestedReplacement && systemPrompt === undefined && !delivered) {\n    throw new Error(\n      `profile materializer did not deliver the candidate system prompt for ${plan.harness}`,\n    )\n  }\n  if (systemPrompt !== undefined && requestedSystemPrompt === undefined) {\n    throw new Error(\n      `profile materializer added an unexpected candidate system prompt for ${plan.harness}`,\n    )\n  }\n  if (\n    systemPrompt !== undefined &&\n    requirePublicCandidateConfigValue(systemPrompt, 'profile.systemPrompt') !==\n      requestedSystemPrompt\n  ) {\n    throw new Error('profile materializer changed the candidate system prompt')\n  }\n  if (\n    appendSystemPrompt !== undefined &&\n    requirePublicCandidateConfigValue(appendSystemPrompt, 'profile.appendSystemPrompt') !==\n      requestedAppendSystemPrompt\n  ) {\n    throw new Error('profile materializer changed the candidate append system prompt')\n  }\n\n  const intent = requestedReplacement ? 'replacement' : 'addition'\n  assertProvableNativeLaunch(plan.harness, projection.executable, launch, intent)\n  const launchArgs = (launch.args ?? []).map((value, index) =>\n    requirePublicCandidateConfigValue(value, `launch.args[${index}]`),\n  )\n  if (requestedReplacement && projection.conflictsWithArgs(launchArgs)) {\n    throw new Error(\n      `${plan.harness} launch arguments conflict with the candidate profile system prompt`,\n    )\n  }\n  if (requestedAppendSystemPrompt !== undefined && projection.conflictsWithAppendArgs(launchArgs)) {\n    throw new Error(\n      `${plan.harness} launch arguments conflict with the candidate profile append system prompt`,\n    )\n  }\n\n  // These harnesses already have native file/config delivery owned by the materializer.\n  if (plan.harness === 'opencode' || plan.harness === 'gemini') return plan\n  const native = nativeSystemPrompt(\n    plan.harness,\n    {\n      ...(systemPrompt === undefined ? {} : { systemPrompt: requestedSystemPrompt }),\n      appendSystemPrompt: requestedAppendSystemPrompt,\n    },\n    systemPromptFilePath,\n  )\n  for (const file of native.files) {\n    if (plan.files.some((existing) => existing.relPath === file.relPath)) {\n      throw new Error(`candidate profile conflicts with reserved ${file.relPath}`)\n    }\n  }\n  const { systemPrompt: _system, appendSystemPrompt: _append, ...projected } = plan\n  return {\n    ...projected,\n    files: [...plan.files, ...native.files],\n    flags: [\n      ...plan.flags,\n      ...native.flags.map((value): AgentCandidateConfigValue => ({ kind: 'public', value })),\n    ],\n  }\n}\n\nfunction assertProvableNativeLaunch(\n  harness: string,\n  expectedExecutable: string,\n  launch: AgentCandidateLaunch,\n  intent: 'replacement' | 'addition',\n): asserts launch is AgentCandidateLaunch & { kind: 'container-command' } {\n  if (launch.kind !== 'container-command') {\n    throw new Error(`candidate-entrypoint launch cannot prove ${harness} system-prompt ${intent}`)\n  }\n  if (\n    launch.executable !== expectedExecutable &&\n    !(\n      posix.isAbsolute(launch.executable) &&\n      posix.basename(launch.executable) === expectedExecutable\n    )\n  ) {\n    throw new Error(\n      `${harness} system-prompt ${intent} requires the native ${expectedExecutable} executable`,\n    )\n  }\n}\n","import { posix } from 'node:path'\nimport type {\n  AgentCandidateConfigValue,\n  AgentCandidateExecutionPlanMaterial,\n  AgentCandidateLaunch,\n  AgentCandidateProfile,\n  AgentCandidateProfileActivation,\n  AgentCandidateProfilePlanEvidence,\n  AgentCandidateResourceRef,\n  AgentProfile,\n  AgentProfileConfigValue,\n  AgentProfileDiff,\n  AgentProfileMcpServer,\n  AgentProfileResourceRef,\n  HarnessType,\n  Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport {\n  agentCandidateProfileActivationSchema,\n  agentCandidateProfileSchema,\n  agentProfileDiffSchema,\n  agentProfileSchema,\n  applyAgentProfileDiff,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentCandidateWorkspacePlan,\n  HarnessId,\n} from '@tangle-network/agent-profile-materialize'\nimport {\n  isMaterializerHarness,\n  materializeCandidateProfile,\n  resolvePiRuntimePaths,\n} from '@tangle-network/agent-profile-materialize'\nimport {\n  assertSandboxProfileCompatibility,\n  refuseSandboxProfileField,\n} from '../runtime/sandbox-profile-compat'\nimport {\n  canonicalCandidateBytes,\n  canonicalCandidateDigest,\n  canonicalCandidateDocument,\n  embeddedCandidateArtifact,\n  immutableCandidateValue,\n  omitTopLevelDigest,\n  sha256Bytes,\n} from './digest'\nimport { requirePublicCandidateConfigValue } from './public-config'\nimport { projectCandidatePromptIntents } from './system-prompt'\nimport type { AgentCandidateTaskExecution, VerifiedAgentCandidate } from './types'\n\nexport function candidateMaterializerHarness(harness: HarnessType): HarnessId {\n  if (!isMaterializerHarness(harness)) {\n    throw new Error(\n      `sealed candidate profile materialization is unsupported for harness ${harness}`,\n    )\n  }\n  return harness\n}\n\n/** Runtime applies the materializer's launch flags to the candidate process. */\nconst CANDIDATE_PROFILE_MATERIALIZER_BINDS = ['systemPrompt'] as const\nexport const PI_CANDIDATE_AGENT_DIR_ENV = 'PI_CODING_AGENT_DIR'\nexport const PI_CANDIDATE_SESSION_DIR_ENV = 'PI_CODING_AGENT_SESSION_DIR'\n\ninterface MaterializeAgentCandidateProfilePlanOptions {\n  profile: AgentCandidateProfile\n  harness: HarnessType\n  launch: AgentCandidateLaunch\n  workspace: 'task' | 'candidate'\n  workspaces: {\n    taskRoot: string\n    candidateRoot?: string\n  }\n  resolvedResources?: ReadonlyMap<Sha256Digest, string>\n}\n\n/** Derive the exact native profile plan used by preparation and later evidence checks. */\nexport function materializeAgentCandidateProfilePlan(\n  options: MaterializeAgentCandidateProfilePlanOptions,\n): AgentCandidateWorkspacePlan {\n  const root =\n    options.workspace === 'task' ? options.workspaces.taskRoot : options.workspaces.candidateRoot\n  if (!root) throw new Error('candidate profile target is missing its execution workspace root')\n  const nativePrompt = ['claude-code', 'codex', 'pi', 'prime'].includes(options.harness)\n    ? options.profile.prompt\n    : undefined\n  const { systemPrompt, appendSystemPrompt, ...structuralPrompt } = nativePrompt ?? {}\n  const plan = materializeCandidateProfile(\n    nativePrompt === undefined\n      ? options.profile\n      : {\n          ...options.profile,\n          prompt: structuralPrompt,\n        },\n    candidateMaterializerHarness(options.harness),\n    {\n      binds: CANDIDATE_PROFILE_MATERIALIZER_BINDS,\n      resolvedResources: options.resolvedResources,\n    },\n  )\n  return projectCandidatePromptIntents(\n    nativePrompt === undefined\n      ? plan\n      : {\n          ...plan,\n          sourceProfileDigest: canonicalCandidateDigest(options.profile),\n          ...(systemPrompt === undefined\n            ? {}\n            : { systemPrompt: { kind: 'public', value: systemPrompt } }),\n          ...(appendSystemPrompt === undefined\n            ? {}\n            : { appendSystemPrompt: { kind: 'public', value: appendSystemPrompt } }),\n        },\n    options.launch,\n    posix.join(root, '.tangle/system-prompt.md'),\n    options.profile.prompt?.systemPrompt,\n    options.profile.prompt?.appendSystemPrompt,\n  )\n}\n\n/** Resolve the private Pi roots needed by an agent-root profile plan. */\nexport function candidateProfileAgentPaths(\n  plan: {\n    harness: HarnessType\n    files: ReadonlyArray<{ root?: 'agent' | 'workspace' }>\n  },\n  runtimeHome: string | undefined,\n): { agentDir: string; sessionDir: string } | undefined {\n  if (!plan.files.some((file) => file.root === 'agent')) return undefined\n  if (plan.harness !== 'pi') {\n    throw new Error(`candidate profile agent-root files are unsupported for ${plan.harness}`)\n  }\n  if (runtimeHome === undefined) {\n    throw new Error('candidate profile agent-root files require executionRoots.profileRoot')\n  }\n  return resolvePiRuntimePaths(runtimeHome)\n}\n\n/** Bind exact native profile text to the canonical plan captured during preparation. */\nexport function createAgentCandidateProfileActivation(\n  plan: AgentCandidateWorkspacePlan,\n  profilePlan: AgentCandidateProfilePlanEvidence,\n): AgentCandidateProfileActivation {\n  const sourceByIdentity = new Map(\n    plan.files.map((file) => [profileFileIdentity(file.root, file.relPath), file]),\n  )\n  if (sourceByIdentity.size !== plan.files.length) {\n    throw new Error('candidate profile activation contains duplicate rooted native file paths')\n  }\n  const files = profilePlan.material.files.map((expected) => {\n    const source = sourceByIdentity.get(profileFileIdentity(expected.root, expected.relPath))\n    if (!source) {\n      throw new Error(\n        `candidate profile activation is missing ${profileFileLabel(expected.root, expected.relPath)}`,\n      )\n    }\n    const mode = source.mode ?? 0o644\n    if (!Number.isSafeInteger(mode) || mode < 0 || mode > 0o777) {\n      throw new Error(\n        `candidate profile activation has invalid mode for ${profileFileLabel(expected.root, expected.relPath)}`,\n      )\n    }\n    return { path: expected.relPath, mode, content: source.content }\n  })\n  if (files.length !== plan.files.length) {\n    throw new Error('candidate profile activation contains unplanned native files')\n  }\n  return parseAgentCandidateProfileActivation(\n    canonicalCandidateDocument<AgentCandidateProfileActivation>({\n      kind: 'agent-candidate-profile-activation',\n      profilePlan,\n      files,\n    }).value,\n    profilePlan.digest,\n  )\n}\n\nfunction profileFileIdentity(root: 'agent' | 'workspace' | undefined, relPath: string): string {\n  return `${root ?? 'workspace'}\\0${relPath}`\n}\n\nfunction profileFileLabel(root: 'agent' | 'workspace' | undefined, relPath: string): string {\n  return root === 'agent' ? `agent:${relPath}` : relPath\n}\n\n/** Parse and check every native file hash plus both canonical document digests. */\nexport function parseAgentCandidateProfileActivation(\n  input: unknown,\n  expectedProfilePlanDigest?: AgentCandidateProfilePlanEvidence['digest'],\n): AgentCandidateProfileActivation {\n  const activation = agentCandidateProfileActivationSchema.parse(input)\n  const planBytes = canonicalCandidateBytes(activation.profilePlan.material)\n  const profilePlanArtifact = activation.profilePlan.artifact\n  if (\n    sha256Bytes(planBytes) !== activation.profilePlan.digest ||\n    profilePlanArtifact.sha256 !== activation.profilePlan.digest ||\n    profilePlanArtifact.byteLength !== planBytes.byteLength ||\n    ('content' in profilePlanArtifact &&\n      !Buffer.from(profilePlanArtifact.content, 'base64').equals(Buffer.from(planBytes))) ||\n    (expectedProfilePlanDigest !== undefined &&\n      activation.profilePlan.digest !== expectedProfilePlanDigest)\n  ) {\n    throw new Error('candidate profile activation has an invalid canonical profile plan')\n  }\n  if (canonicalCandidateDigest(omitTopLevelDigest(activation)) !== activation.digest) {\n    throw new Error('candidate profile activation digest does not match')\n  }\n  return immutableCandidateValue(activation)\n}\n\nconst CANDIDATE_PROFILE_DIRECT_FIELDS = [\n  'name',\n  'description',\n  'version',\n  'tags',\n  'prompt',\n  'harness',\n  'permissions',\n  'tools',\n  'confidential',\n] as const\n\n/** Convert only behavior-preserving generic profile fields into the closed candidate contract. */\nexport function freezeGenericAgentCandidateProfile(input: AgentProfile): AgentCandidateProfile {\n  assertSandboxProfileCompatibility(input)\n  const profile = parseExactAgentProfile(input, 'profile')\n  return candidateProfileFromGenericProfile(profile)\n}\n\n/**\n * Keep every generic-profile-to-candidate conversion in one place.\n * Callers use this both when sealing a new bundle and when proving a measured\n * profile is exactly the profile in an existing candidate.\n */\nfunction candidateProfileFromGenericProfile(profile: AgentProfile): AgentCandidateProfile {\n  assertResolvedKnowledgeResources(profile.resources)\n  if (profile.connections !== undefined) unsupportedProfileField('connections')\n  if (profile.metadata !== undefined) unsupportedProfileField('metadata')\n  if (profile.extensions !== undefined) unsupportedProfileField('extensions')\n  if (profile.model?.metadata !== undefined) unsupportedProfileField('model.metadata')\n\n  const candidate: Record<string, unknown> = {}\n  copyDirectProfileFields(candidate, profile as Record<string, unknown>)\n  if (profile.model) {\n    const { metadata: _metadata, ...model } = profile.model\n    candidate.model = model\n  }\n  if (profile.mcp) candidate.mcp = freezeMcpServers(profile.mcp)\n  if (profile.subagents) {\n    candidate.subagents = Object.fromEntries(\n      Object.entries(profile.subagents).map(([name, subagent]) => {\n        if (subagent.metadata !== undefined) unsupportedProfileField(`subagents.${name}.metadata`)\n        const { metadata: _metadata, ...value } = subagent\n        return [name, value]\n      }),\n    )\n  }\n  if (profile.resources) candidate.resources = freezeResources(profile.resources)\n  if (profile.hooks && Object.values(profile.hooks).some((commands) => commands.length > 0)) {\n    throw new Error(\n      'generic AgentProfile hooks cannot be safely tokenized; use a candidate-profile source with executable/args',\n    )\n  }\n  if (profile.hooks) candidate.hooks = profile.hooks\n  if (profile.modes) {\n    candidate.modes = Object.fromEntries(\n      Object.entries(profile.modes).map(([name, mode]) => {\n        if (mode.metadata !== undefined) unsupportedProfileField(`modes.${name}.metadata`)\n        const { metadata: _metadata, ...value } = mode\n        return [name, value]\n      }),\n    )\n  }\n  const parsed = parseExactCandidateProfile(candidate)\n  return parsed\n}\n\n/** Prove the measured generic profile and sealed candidate profile describe the same behavior. */\nexport function assertCandidateProfileBinding(\n  measuredInput: unknown,\n  bundled: AgentCandidateProfile,\n): void {\n  assertSandboxProfileCompatibility(measuredInput)\n  const measured = parseExactAgentProfile(measuredInput, 'measured agent profile')\n  const expected = candidateProfileFromGenericProfile(measured)\n  if (canonicalCandidateDigest(expected) !== canonicalCandidateDigest(bundled)) {\n    throw new Error('measured agent profile does not match sealed candidate profile')\n  }\n}\n\n/** Parse a complete profile without silently discarding unsupported fields. */\nexport function parseExactAgentProfile(input: unknown, label: string): AgentProfile {\n  let parsed: AgentProfile\n  try {\n    parsed = agentProfileSchema.parse(input) as AgentProfile\n  } catch (cause) {\n    throw new Error(`${label} contains unsupported or non-canonical fields`, { cause })\n  }\n  assertCanonicalParse(input, parsed, label)\n  return parsed\n}\n\n/** Parse a profile diff without silently discarding unsupported fields. */\nexport function parseExactAgentProfileDiff(input: unknown, label: string): AgentProfileDiff {\n  let parsed: AgentProfileDiff\n  try {\n    parsed = agentProfileDiffSchema.parse(input) as AgentProfileDiff\n  } catch (cause) {\n    throw new Error(`${label} contains unsupported or non-canonical fields`, { cause })\n  }\n  assertCanonicalParse(input, parsed, label)\n  return parsed\n}\n\n/** Apply one exact diff and reject any value that cannot be preserved canonically. */\nexport function applyExactAgentProfileDiff(\n  baseInput: unknown,\n  diffInput: unknown,\n  label: string,\n): AgentProfile {\n  const base = parseExactAgentProfile(baseInput, `${label} base profile`)\n  const diff = parseExactAgentProfileDiff(diffInput, `${label} diff`)\n  const applied = omitUndefinedObjectFields(applyAgentProfileDiff(base, diff), label)\n  return parseExactAgentProfile(applied, `${label} result`)\n}\n\n/** Parse a candidate profile without silently discarding unsupported or non-canonical fields. */\nexport function parseExactCandidateProfile(input: unknown): AgentCandidateProfile {\n  const parsed = agentCandidateProfileSchema.parse(input)\n  assertCanonicalParse(input, parsed, 'candidate profile')\n  return parsed\n}\n\n/** Reject profile fields whose behavioral effect is not yet proven by candidate executors. */\nexport function assertCandidateProfileExecutionSupport(profile: AgentCandidateProfile): void {\n  assertResolvedKnowledgeResources(profile.resources)\n  assertSandboxProfileCompatibility(profile)\n  const fields = ['tools', 'permissions', 'modes', 'confidential'] as const\n  const unsupported = fields.filter((field) => hasEntries(profile[field]))\n  if (unsupported.length > 0) {\n    throw new Error(\n      `candidate execution cannot prove in-session effects for non-empty AgentProfile fields: ${unsupported.join(', ')}`,\n    )\n  }\n}\n\n/** Convert the candidate profile contract into the portable interface profile it represents. */\nexport function agentCandidateProfileAsAgentProfile(\n  candidate: AgentCandidateProfile,\n): AgentProfile {\n  assertResolvedKnowledgeResources(candidate.resources)\n  assertSandboxProfileCompatibility(candidate)\n  const output: Record<string, unknown> = {}\n  copyDirectProfileFields(output, candidate as unknown as Record<string, unknown>)\n  if (candidate.model) output.model = { ...candidate.model }\n  if (candidate.mcp) {\n    output.mcp = Object.fromEntries(\n      Object.entries(candidate.mcp).map(([name, server]) => [\n        name,\n        {\n          ...server,\n          // Candidate config values ({kind:'public', value}) are already valid\n          // AgentProfileConfigValue entries under interface >=0.40 — clone them\n          // rather than unwrapping to plain strings, which the 0.40 profile\n          // schema rejects.\n          ...(server.args ? { args: server.args.map((value) => ({ ...value })) } : {}),\n          ...(server.env ? { env: cloneRecord(server.env) } : {}),\n        },\n      ]),\n    )\n  }\n  if (candidate.subagents) output.subagents = cloneRecord(candidate.subagents)\n  if (candidate.modes) output.modes = cloneRecord(candidate.modes)\n  if (candidate.hooks) {\n    output.hooks = Object.fromEntries(\n      Object.entries(candidate.hooks).map(([event, hooks]) => [\n        event,\n        hooks.map(({ executable, args, env, ...hook }) => ({\n          ...hook,\n          command: [\n            executable,\n            ...(args ?? []).map((value, index) =>\n              requirePublicCandidateConfigValue(value, `hooks.${event}.args[${index}]`),\n            ),\n          ]\n            .map(shellQuote)\n            .join(' '),\n          // Hook env stays in config-value form: the 0.40 profile hook contract\n          // types env as Record<string, AgentProfileConfigValue>.\n          ...(env ? { env: cloneRecord(env) } : {}),\n        })),\n      ]),\n    )\n  }\n  if (candidate.resources) {\n    if (candidate.resources.failOnError !== true) {\n      throw new Error('sealed candidate profile contains fields unsupported by generic profiles')\n    }\n    output.resources = {\n      failOnError: true,\n      ...(candidate.resources.files\n        ? {\n            files: candidate.resources.files.map((file) => ({\n              ...file,\n              resource: publicResource(file.resource),\n            })),\n          }\n        : {}),\n      ...(candidate.resources.tools\n        ? { tools: candidate.resources.tools.map(publicResource) }\n        : {}),\n      ...(candidate.resources.skills\n        ? { skills: candidate.resources.skills.map(publicResource) }\n        : {}),\n      ...(candidate.resources.agents\n        ? { agents: candidate.resources.agents.map(publicResource) }\n        : {}),\n      ...(candidate.resources.commands\n        ? { commands: candidate.resources.commands.map(publicResource) }\n        : {}),\n      ...(candidate.resources.instructions !== undefined\n        ? {\n            instructions:\n              typeof candidate.resources.instructions === 'string'\n                ? candidate.resources.instructions\n                : publicResource(candidate.resources.instructions),\n          }\n        : {}),\n    }\n  }\n  return output as AgentProfile\n}\n\n/** Recursively remove undefined object fields while refusing undefined array entries. */\nexport function omitUndefinedObjectFields(value: unknown, path: string): unknown {\n  if (Array.isArray(value)) {\n    return value.map((entry, index) => {\n      if (entry === undefined) {\n        throw new Error(`${path} produced an undefined array entry at ${index}`)\n      }\n      return omitUndefinedObjectFields(entry, `${path}[${index}]`)\n    })\n  }\n  if (value === null || typeof value !== 'object') return value\n  return Object.fromEntries(\n    Object.entries(value as Record<string, unknown>)\n      .filter(([, entry]) => entry !== undefined)\n      .map(([key, entry]) => [key, omitUndefinedObjectFields(entry, `${path}.${key}`)]),\n  )\n}\n\nfunction freezeMcpServers(servers: Record<string, AgentProfileMcpServer>): Record<string, unknown> {\n  return Object.fromEntries(\n    Object.entries(servers).map(([name, server]) => {\n      if (server.transport !== undefined && server.transport !== 'stdio') {\n        unsupportedProfileField(`mcp.${name}.transport=${server.transport}`)\n      }\n      if (server.url !== undefined) unsupportedProfileField(`mcp.${name}.url`)\n      if (server.headers !== undefined) unsupportedProfileField(`mcp.${name}.headers`)\n      if (server.metadata !== undefined) unsupportedProfileField(`mcp.${name}.metadata`)\n      return [\n        name,\n        {\n          ...(server.transport ? { transport: server.transport } : {}),\n          ...(server.command ? { command: server.command } : {}),\n          ...(server.args\n            ? {\n                args: server.args.map((value, index) =>\n                  candidatePublicValue(value, `mcp.${name}.args[${index}]`),\n                ),\n              }\n            : {}),\n          ...(server.env ? { env: mapCandidatePublicValues(server.env, `mcp.${name}.env`) } : {}),\n          ...(server.cwd ? { cwd: server.cwd } : {}),\n          ...(server.enabled === undefined ? {} : { enabled: server.enabled }),\n        },\n      ]\n    }),\n  )\n}\n\n/** A newer peer may admit knowledge pins that these candidate conversions cannot preserve. */\nfunction assertResolvedKnowledgeResources(resources: unknown): void {\n  if (\n    resources !== null &&\n    typeof resources === 'object' &&\n    'knowledge' in resources &&\n    resources.knowledge !== undefined\n  ) {\n    throw new Error(\n      'candidate profile resources.knowledge must be owner-authorized and resolved before candidate conversion or execution',\n    )\n  }\n}\n\nfunction freezeResources(resources: NonNullable<AgentProfile['resources']>): unknown {\n  if (resources.failOnError !== true) {\n    throw new Error('candidate profile resources require failOnError: true')\n  }\n  return {\n    failOnError: true,\n    ...(resources.files\n      ? {\n          files: resources.files.map((file) => ({\n            ...file,\n            resource: freezeResource(file.resource),\n          })),\n        }\n      : {}),\n    ...(resources.tools ? { tools: resources.tools.map(freezeResource) } : {}),\n    ...(resources.skills ? { skills: resources.skills.map(freezeResource) } : {}),\n    ...(resources.agents ? { agents: resources.agents.map(freezeResource) } : {}),\n    ...(resources.commands ? { commands: resources.commands.map(freezeResource) } : {}),\n    ...(resources.instructions === undefined\n      ? {}\n      : {\n          instructions:\n            typeof resources.instructions === 'string'\n              ? resources.instructions\n              : freezeResource(resources.instructions),\n        }),\n  }\n}\n\nfunction freezeResource(resource: AgentProfileResourceRef): AgentCandidateResourceRef {\n  if (resource.kind === 'github') {\n    throw new Error(\n      'generic GitHub profile resources do not carry byte identity; use a candidate-profile source with a pinned commit, digest, and byte length',\n    )\n  }\n  const bytes = Buffer.from(resource.content, 'utf8')\n  return {\n    ...resource,\n    sha256: embeddedCandidateArtifact(bytes).sha256,\n    byteLength: bytes.byteLength,\n  }\n}\n\nfunction copyDirectProfileFields(\n  target: Record<string, unknown>,\n  source: Record<string, unknown>,\n): void {\n  for (const key of CANDIDATE_PROFILE_DIRECT_FIELDS) {\n    if (source[key] !== undefined) target[key] = source[key]\n  }\n}\n\nfunction assertCanonicalParse(input: unknown, parsed: unknown, label: string): void {\n  if (!Buffer.from(canonicalCandidateBytes(input)).equals(canonicalCandidateBytes(parsed))) {\n    throw new Error(`${label} contains unsupported or non-canonical fields`)\n  }\n}\n\nfunction publicResource(resource: AgentCandidateResourceRef): unknown {\n  if (resource.kind === 'inline') {\n    return { kind: 'inline', name: resource.name, content: resource.content }\n  }\n  return {\n    kind: 'github',\n    repository: `${resource.repository.owner}/${resource.repository.repo}`,\n    path: resource.path,\n    ref: resource.commit,\n    ...(resource.name ? { name: resource.name } : {}),\n  }\n}\n\n/** Freeze one profile config value into the candidate's PUBLIC-only config\n *  shape. A secret-ref is refused, never silently dropped or unwrapped. */\nfunction candidatePublicValue(\n  value: AgentProfileConfigValue,\n  path: string,\n): { kind: 'public'; value: string } {\n  if (value.kind !== 'public') refuseSandboxProfileField(`${path} (${value.kind})`)\n  return { kind: 'public', value: value.value }\n}\n\nfunction mapCandidatePublicValues(\n  values: Record<string, AgentProfileConfigValue>,\n  pathPrefix: string,\n): Record<string, { kind: 'public'; value: string }> {\n  return Object.fromEntries(\n    Object.entries(values).map(([name, value]) => [\n      name,\n      candidatePublicValue(value, `${pathPrefix}.${name}`),\n    ]),\n  )\n}\n\nfunction cloneRecord<T>(values: Record<string, T>): Record<string, T> {\n  return Object.fromEntries(\n    Object.entries(values).map(([key, value]) => [key, { ...value }]),\n  ) as Record<string, T>\n}\n\nfunction hasEntries(value: unknown): boolean {\n  return value !== undefined && value !== null && typeof value === 'object'\n    ? Object.keys(value).length > 0\n    : false\n}\n\nfunction shellQuote(value: string): string {\n  return /^[A-Za-z0-9_./:@%+=,-]+$/.test(value) ? value : `'${value.replaceAll(\"'\", `'\"'\"'`)}'`\n}\n\nfunction unsupportedProfileField(path: string): never {\n  throw new Error(\n    `generic AgentProfile field ${path} is not representable in a sealed candidate profile`,\n  )\n}\n\nexport function buildLaunch(\n  candidate: VerifiedAgentCandidate,\n  task: AgentCandidateTaskExecution,\n  profileFlags: AgentCandidateConfigValue[],\n): { executable: string; args: AgentCandidateConfigValue[] } {\n  const launch = candidate.bundle.execution.launch\n  if (launch.kind === 'container-command') {\n    return { executable: launch.executable, args: [...(launch.args ?? []), ...profileFlags] }\n  }\n  const candidateRoot = task.executionRoots.candidateRoot\n  if (!candidateRoot) throw new Error('candidate entrypoint requires a container candidate root')\n  const entrypoint = posix.join(candidateRoot, launch.entrypoint)\n  const candidateArgs = launch.args ?? []\n  if (launch.interpreter) {\n    return {\n      executable: launch.interpreter,\n      args: [{ kind: 'public', value: entrypoint }, ...candidateArgs, ...profileFlags],\n    }\n  }\n  return { executable: entrypoint, args: [...candidateArgs, ...profileFlags] }\n}\n\nexport function modelRoutes(\n  profile: VerifiedAgentCandidate['bundle']['profile'],\n  requested: string,\n): AgentCandidateExecutionPlanMaterial['model']['routes'] {\n  const routes: AgentCandidateExecutionPlanMaterial['model']['routes'] = [\n    { kind: 'primary', requested },\n  ]\n  if (profile.model?.small) routes.push({ kind: 'small', requested })\n  for (const name of Object.keys(profile.modes ?? {}).sort()) {\n    if (profile.modes?.[name]?.model) routes.push({ kind: 'mode', name, requested })\n  }\n  for (const name of Object.keys(profile.subagents ?? {}).sort()) {\n    if (profile.subagents?.[name]?.model) routes.push({ kind: 'subagent', name, requested })\n  }\n  return routes\n}\n\nexport function candidateEntrypointReceipt(\n  candidate: VerifiedAgentCandidate,\n): { path: string; sha256: `sha256:${string}`; byteLength: number } | undefined {\n  const launch = candidate.bundle.execution.launch\n  const workspace = candidate.bundle.execution.workspace\n  if (launch.kind !== 'candidate-entrypoint' || !workspace) return undefined\n  const file = workspace.material.files.find((entry) => entry.path === launch.entrypoint)\n  if (!file) throw new Error('candidate entrypoint is absent from the verified workspace')\n  return { path: file.path, sha256: file.sha256, byteLength: file.byteLength }\n}\n\nexport function absoluteExecutionCwd(\n  cwd: VerifiedAgentCandidate['bundle']['execution']['cwd'],\n  roots: AgentCandidateTaskExecution['executionRoots'],\n): string {\n  const root = workspaceExecutionRoot(cwd.workspace, roots)\n  const absolute = cwd.path === '.' ? root : posix.join(root, cwd.path)\n  if (absolute !== root && !absolute.startsWith(`${root}/`)) {\n    throw new Error('candidate cwd escapes its execution workspace')\n  }\n  return absolute\n}\n\nfunction workspaceExecutionRoot(\n  workspace: 'task' | 'candidate',\n  roots: AgentCandidateTaskExecution['executionRoots'],\n): string {\n  const root = workspace === 'task' ? roots.taskRoot : roots.candidateRoot\n  if (!root) throw new Error(`candidate ${workspace} workspace root is missing`)\n  return root\n}\n\nexport function exactProfileExecutorFiles(\n  sourceFiles: ReadonlyArray<{\n    relPath: string\n    content: string\n    mode?: number\n    root?: 'agent' | 'workspace'\n  }>,\n  expectedFiles: ReadonlyArray<{\n    relPath: string\n    mode: number\n    contentSha256: string\n    root?: 'agent'\n  }>,\n): Array<{ path: string; mode: number; root?: 'agent'; bytes: Uint8Array }> {\n  const byIdentity = new Map(\n    sourceFiles.map((file) => [profileFileIdentity(file.root, file.relPath), file]),\n  )\n  if (byIdentity.size !== sourceFiles.length || sourceFiles.length !== expectedFiles.length) {\n    throw new Error('profile source files do not match the signed profile plan')\n  }\n  return expectedFiles.map((expected) => {\n    const source = byIdentity.get(profileFileIdentity(expected.root, expected.relPath))\n    const mode = source?.mode ?? 0o644\n    const bytes = Buffer.from(source?.content ?? '', 'utf8')\n    if (\n      !source ||\n      !Number.isInteger(mode) ||\n      mode < 0 ||\n      mode > 0o777 ||\n      mode !== expected.mode ||\n      sha256Bytes(bytes) !== expected.contentSha256\n    ) {\n      throw new Error('profile source files do not match the signed profile plan')\n    }\n    return {\n      path: expected.relPath,\n      mode,\n      ...(expected.root === 'agent' ? { root: 'agent' as const } : {}),\n      bytes: Uint8Array.from(bytes),\n    }\n  })\n}\n"],"mappings":";;;;;;;;AAIA,SAAgB,kCACd,OACA,MACQ;CACR,IAAI,MAAM,SAAS,UACjB,MAAM,IAAI,gBACR,aAAa,KAAK,4DACpB;CAEF,OAAO,MAAM;AACf;;ACIA,MAAM,sBAAsB,CAAC,mBAAmB,sBAAsB;AACtE,MAAM,6BAA6B,CACjC,0BACA,6BACF;AAEA,SAAS,wBAAwB,QAAoC;CACnE,OAAO,OAAO,MAAM,UAClB,oBAAoB,MAAM,SAAS,UAAU,QAAQ,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC,CACnF;AACF;AAEA,SAAS,8BAA8B,QAAoC;CACzE,OAAO,OAAO,MAAM,UAClB,2BAA2B,MAAM,SAAS,UAAU,QAAQ,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC,CAC1F;AACF;;AAGA,MAAM,yBAAyB,CAAC,2BAA2B,wBAAwB;AAEnF,SAAS,gCAAgC,QAAoC;CAC3E,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS;EAClD,MAAM,QAAQ,OAAO;EACrB,MAAM,SACJ,UAAU,QAAQ,UAAU,aACxB,OAAO,QAAQ,KACf,MAAM,WAAW,WAAW,IAC1B,MAAM,MAAM,CAAkB,IAC9B,KAAA;EACR,IACE,WAAW,KAAA,KACX,uBAAuB,MAAM,QAAQ,OAAO,UAAU,CAAC,CAAC,WAAW,GAAG,IAAI,EAAE,CAAC,GAE7E,OAAO;CAEX;CACA,OAAO;AACT;AAEA,MAAM,yBAAyB;CAC7B,eAAe;EACb,YAAY;EACZ,mBAAmB;EACnB,yBAAyB;CAC3B;CACA,OAAO;EACL,YAAY;EACZ,mBAAmB;EACnB,yBAAyB;CAC3B;CACA,UAAU;EACR,YAAY;EACZ,oBAAoB,WAClB,OAAO,MAAM,UAAU,UAAU,aAAa,MAAM,WAAW,UAAU,CAAC;EAC5E,yBAAyB;CAC3B;CACA,IAAI;EACF,YAAY;EACZ,mBAAmB;EACnB,yBAAyB;CAC3B;CACA,OAAO;EACL,YAAY;EACZ,mBAAmB;EACnB,yBAAyB;CAC3B;CACA,QAAQ;EACN,YAAY;EACZ,mBAAmB;EACnB,yBAAyB;CAC3B;AACF;;AAGA,SAAgB,8BACd,MACA,QACA,sBACA,wBAA4C,KAAK,iBAAiB,KAAA,IAC9D,KAAA,IACA,kCAAkC,KAAK,cAAc,sBAAsB,GAC/E,8BAAkD,KAAK,uBAAuB,KAAA,IAC1E,KAAA,IACA,kCAAkC,KAAK,oBAAoB,4BAA4B,GAC9D;CAC7B,MAAM,eAAe,KAAK;CAC1B,MAAM,qBAAqB,KAAK;CAChC,MAAM,eAAe,KAAK,MAAM,MAAM,SAAS,KAAK,YAAY,mBAAmB;CACnF,MAAM,YACJ,KAAK,YAAY,YACjB,cAAc,YAAY,yBAC1B,KAAK,IAAI,qBAAqB,KAAA,KAC9B,kCAAkC,KAAK,IAAI,kBAAkB,8BAA8B,MACzF;CAEJ,IAAI,0BAA0B,KAAA,KAAa,gCAAgC,KAAA,GACzE,OAAO;CAGT,MAAM,aAAa,uBAAuB,KAAK;CAG/C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,+DAA+D,KAAK,SAAS;CAG/F,MAAM,uBAAuB,0BAA0B,KAAA;CACvD,IAAI,wBAAwB,iBAAiB,KAAA,KAAa,CAAC,WACzD,MAAM,IAAI,MACR,wEAAwE,KAAK,SAC/E;CAEF,IAAI,iBAAiB,KAAA,KAAa,0BAA0B,KAAA,GAC1D,MAAM,IAAI,MACR,wEAAwE,KAAK,SAC/E;CAEF,IACE,iBAAiB,KAAA,KACjB,kCAAkC,cAAc,sBAAsB,MACpE,uBAEF,MAAM,IAAI,MAAM,0DAA0D;CAE5E,IACE,uBAAuB,KAAA,KACvB,kCAAkC,oBAAoB,4BAA4B,MAChF,6BAEF,MAAM,IAAI,MAAM,iEAAiE;CAGnF,MAAM,SAAS,uBAAuB,gBAAgB;CACtD,2BAA2B,KAAK,SAAS,WAAW,YAAY,QAAQ,MAAM;CAC9E,MAAM,cAAc,OAAO,QAAQ,CAAC,EAAA,CAAG,KAAK,OAAO,UACjD,kCAAkC,OAAO,eAAe,MAAM,EAAE,CAClE;CACA,IAAI,wBAAwB,WAAW,kBAAkB,UAAU,GACjE,MAAM,IAAI,MACR,GAAG,KAAK,QAAQ,oEAClB;CAEF,IAAI,gCAAgC,KAAA,KAAa,WAAW,wBAAwB,UAAU,GAC5F,MAAM,IAAI,MACR,GAAG,KAAK,QAAQ,2EAClB;CAIF,IAAI,KAAK,YAAY,cAAc,KAAK,YAAY,UAAU,OAAO;CACrE,MAAM,SAAS,mBACb,KAAK,SACL;EACE,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,sBAAsB;EAC5E,oBAAoB;CACtB,GACA,oBACF;CACA,KAAK,MAAM,QAAQ,OAAO,OACxB,IAAI,KAAK,MAAM,MAAM,aAAa,SAAS,YAAY,KAAK,OAAO,GACjE,MAAM,IAAI,MAAM,6CAA6C,KAAK,SAAS;CAG/E,MAAM,EAAE,cAAc,SAAS,oBAAoB,SAAS,GAAG,cAAc;CAC7E,OAAO;EACL,GAAG;EACH,OAAO,CAAC,GAAG,KAAK,OAAO,GAAG,OAAO,KAAK;EACtC,OAAO,CACL,GAAG,KAAK,OACR,GAAG,OAAO,MAAM,KAAK,WAAsC;GAAE,MAAM;GAAU;EAAM,EAAE,CACvF;CACF;AACF;AAEA,SAAS,2BACP,SACA,oBACA,QACA,QACwE;CACxE,IAAI,OAAO,SAAS,qBAClB,MAAM,IAAI,MAAM,4CAA4C,QAAQ,iBAAiB,QAAQ;CAE/F,IACE,OAAO,eAAe,sBACtB,EACE,MAAM,WAAW,OAAO,UAAU,KAClC,MAAM,SAAS,OAAO,UAAU,MAAM,qBAGxC,MAAM,IAAI,MACR,GAAG,QAAQ,iBAAiB,OAAO,uBAAuB,mBAAmB,YAC/E;AAEJ;;ACnKA,SAAgB,6BAA6B,SAAiC;CAC5E,IAAI,CAAC,sBAAsB,OAAO,GAChC,MAAM,IAAI,MACR,uEAAuE,SACzE;CAEF,OAAO;AACT;;AAGA,MAAM,uCAAuC,CAAC,cAAc;AAC5D,MAAa,6BAA6B;AAC1C,MAAa,+BAA+B;;AAe5C,SAAgB,qCACd,SAC6B;CAC7B,MAAM,OACJ,QAAQ,cAAc,SAAS,QAAQ,WAAW,WAAW,QAAQ,WAAW;CAClF,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,kEAAkE;CAC7F,MAAM,eAAe;EAAC;EAAe;EAAS;EAAM;CAAO,CAAC,CAAC,SAAS,QAAQ,OAAO,IACjF,QAAQ,QAAQ,SAChB,KAAA;CACJ,MAAM,EAAE,cAAc,oBAAoB,GAAG,qBAAqB,gBAAgB,CAAC;CACnF,MAAM,OAAO,4BACX,iBAAiB,KAAA,IACb,QAAQ,UACR;EACE,GAAG,QAAQ;EACX,QAAQ;CACV,GACJ,6BAA6B,QAAQ,OAAO,GAC5C;EACE,OAAO;EACP,mBAAmB,QAAQ;CAC7B,CACF;CACA,OAAO,8BACL,iBAAiB,KAAA,IACb,OACA;EACE,GAAG;EACH,qBAAqBA,2BAAyB,QAAQ,OAAO;EAC7D,GAAI,iBAAiB,KAAA,IACjB,CAAC,IACD,EAAE,cAAc;GAAE,MAAM;GAAU,OAAO;EAAa,EAAE;EAC5D,GAAI,uBAAuB,KAAA,IACvB,CAAC,IACD,EAAE,oBAAoB;GAAE,MAAM;GAAU,OAAO;EAAmB,EAAE;CAC1E,GACJ,QAAQ,QACR,MAAM,KAAK,MAAM,0BAA0B,GAC3C,QAAQ,QAAQ,QAAQ,cACxB,QAAQ,QAAQ,QAAQ,kBAC1B;AACF;;AAGA,SAAgB,2BACd,MAIA,aACsD;CACtD,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,KAAK,SAAS,OAAO,GAAG,OAAO,KAAA;CAC9D,IAAI,KAAK,YAAY,MACnB,MAAM,IAAI,MAAM,0DAA0D,KAAK,SAAS;CAE1F,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO,sBAAsB,WAAW;AAC1C;;AAGA,SAAgB,sCACd,MACA,aACiC;CACjC,MAAM,mBAAmB,IAAI,IAC3B,KAAK,MAAM,KAAK,SAAS,CAAC,oBAAoB,KAAK,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC,CAC/E;CACA,IAAI,iBAAiB,SAAS,KAAK,MAAM,QACvC,MAAM,IAAI,MAAM,0EAA0E;CAE5F,MAAM,QAAQ,YAAY,SAAS,MAAM,KAAK,aAAa;EACzD,MAAM,SAAS,iBAAiB,IAAI,oBAAoB,SAAS,MAAM,SAAS,OAAO,CAAC;EACxF,IAAI,CAAC,QACH,MAAM,IAAI,MACR,2CAA2C,iBAAiB,SAAS,MAAM,SAAS,OAAO,GAC7F;EAEF,MAAM,OAAO,OAAO,QAAQ;EAC5B,IAAI,CAAC,OAAO,cAAc,IAAI,KAAK,OAAO,KAAK,OAAO,KACpD,MAAM,IAAI,MACR,qDAAqD,iBAAiB,SAAS,MAAM,SAAS,OAAO,GACvG;EAEF,OAAO;GAAE,MAAM,SAAS;GAAS;GAAM,SAAS,OAAO;EAAQ;CACjE,CAAC;CACD,IAAI,MAAM,WAAW,KAAK,MAAM,QAC9B,MAAM,IAAI,MAAM,8DAA8D;CAEhF,OAAO,qCACL,2BAA4D;EAC1D,MAAM;EACN;EACA;CACF,CAAC,CAAC,CAAC,OACH,YAAY,MACd;AACF;AAEA,SAAS,oBAAoB,MAAyC,SAAyB;CAC7F,OAAO,GAAG,QAAQ,YAAY,IAAI;AACpC;AAEA,SAAS,iBAAiB,MAAyC,SAAyB;CAC1F,OAAO,SAAS,UAAU,SAAS,YAAY;AACjD;;AAGA,SAAgB,qCACd,OACA,2BACiC;CACjC,MAAM,aAAa,sCAAsC,MAAM,KAAK;CACpE,MAAM,YAAYC,0BAAwB,WAAW,YAAY,QAAQ;CACzE,MAAM,sBAAsB,WAAW,YAAY;CACnD,IACEC,cAAY,SAAS,MAAM,WAAW,YAAY,UAClD,oBAAoB,WAAW,WAAW,YAAY,UACtD,oBAAoB,eAAe,UAAU,cAC5C,aAAa,uBACZ,CAAC,OAAO,KAAK,oBAAoB,SAAS,QAAQ,CAAC,CAAC,OAAO,OAAO,KAAK,SAAS,CAAC,KAClF,8BAA8B,KAAA,KAC7B,WAAW,YAAY,WAAW,2BAEpC,MAAM,IAAI,MAAM,oEAAoE;CAEtF,IAAIF,2BAAyB,mBAAmB,UAAU,CAAC,MAAM,WAAW,QAC1E,MAAM,IAAI,MAAM,oDAAoD;CAEtE,OAAO,wBAAwB,UAAU;AAC3C;AAEA,MAAM,kCAAkC;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAgB,mCAAmC,OAA4C;CAC7F,kCAAkC,KAAK;CAEvC,OAAO,mCADS,uBAAuB,OAAO,SACE,CAAC;AACnD;;;;;;AAOA,SAAS,mCAAmC,SAA8C;CACxF,iCAAiC,QAAQ,SAAS;CAClD,IAAI,QAAQ,gBAAgB,KAAA,GAAW,wBAAwB,aAAa;CAC5E,IAAI,QAAQ,aAAa,KAAA,GAAW,wBAAwB,UAAU;CACtE,IAAI,QAAQ,eAAe,KAAA,GAAW,wBAAwB,YAAY;CAC1E,IAAI,QAAQ,OAAO,aAAa,KAAA,GAAW,wBAAwB,gBAAgB;CAEnF,MAAM,YAAqC,CAAC;CAC5C,wBAAwB,WAAW,OAAkC;CACrE,IAAI,QAAQ,OAAO;EACjB,MAAM,EAAE,UAAU,WAAW,GAAG,UAAU,QAAQ;EAClD,UAAU,QAAQ;CACpB;CACA,IAAI,QAAQ,KAAK,UAAU,MAAM,iBAAiB,QAAQ,GAAG;CAC7D,IAAI,QAAQ,WACV,UAAU,YAAY,OAAO,YAC3B,OAAO,QAAQ,QAAQ,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,cAAc;EAC1D,IAAI,SAAS,aAAa,KAAA,GAAW,wBAAwB,aAAa,KAAK,UAAU;EACzF,MAAM,EAAE,UAAU,WAAW,GAAG,UAAU;EAC1C,OAAO,CAAC,MAAM,KAAK;CACrB,CAAC,CACH;CAEF,IAAI,QAAQ,WAAW,UAAU,YAAY,gBAAgB,QAAQ,SAAS;CAC9E,IAAI,QAAQ,SAAS,OAAO,OAAO,QAAQ,KAAK,CAAC,CAAC,MAAM,aAAa,SAAS,SAAS,CAAC,GACtF,MAAM,IAAI,MACR,4GACF;CAEF,IAAI,QAAQ,OAAO,UAAU,QAAQ,QAAQ;CAC7C,IAAI,QAAQ,OACV,UAAU,QAAQ,OAAO,YACvB,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,UAAU;EAClD,IAAI,KAAK,aAAa,KAAA,GAAW,wBAAwB,SAAS,KAAK,UAAU;EACjF,MAAM,EAAE,UAAU,WAAW,GAAG,UAAU;EAC1C,OAAO,CAAC,MAAM,KAAK;CACrB,CAAC,CACH;CAGF,OADe,2BAA2B,SAC9B;AACd;;AAGA,SAAgB,8BACd,eACA,SACM;CACN,kCAAkC,aAAa;CAE/C,MAAM,WAAW,mCADA,uBAAuB,eAAe,wBACI,CAAC;CAC5D,IAAIA,2BAAyB,QAAQ,MAAMA,2BAAyB,OAAO,GACzE,MAAM,IAAI,MAAM,gEAAgE;AAEpF;;AAGA,SAAgB,uBAAuB,OAAgB,OAA6B;CAClF,IAAI;CACJ,IAAI;EACF,SAAS,mBAAmB,MAAM,KAAK;CACzC,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,GAAG,MAAM,gDAAgD,EAAE,MAAM,CAAC;CACpF;CACA,qBAAqB,OAAO,QAAQ,KAAK;CACzC,OAAO;AACT;;AAGA,SAAgB,2BAA2B,OAAgB,OAAiC;CAC1F,IAAI;CACJ,IAAI;EACF,SAAS,uBAAuB,MAAM,KAAK;CAC7C,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,GAAG,MAAM,gDAAgD,EAAE,MAAM,CAAC;CACpF;CACA,qBAAqB,OAAO,QAAQ,KAAK;CACzC,OAAO;AACT;;AAGA,SAAgB,2BACd,WACA,WACA,OACc;CACd,MAAM,OAAO,uBAAuB,WAAW,GAAG,MAAM,cAAc;CACtE,MAAM,OAAO,2BAA2B,WAAW,GAAG,MAAM,MAAM;CAElE,OAAO,uBADS,0BAA0B,sBAAsB,MAAM,IAAI,GAAG,KACzC,GAAG,GAAG,MAAM,QAAQ;AAC1D;;AAGA,SAAgB,2BAA2B,OAAuC;CAChF,MAAM,SAAS,4BAA4B,MAAM,KAAK;CACtD,qBAAqB,OAAO,QAAQ,mBAAmB;CACvD,OAAO;AACT;;AAGA,SAAgB,uCAAuC,SAAsC;CAC3F,iCAAiC,QAAQ,SAAS;CAClD,kCAAkC,OAAO;CAEzC,MAAM,cAAc;EADJ;EAAS;EAAe;EAAS;CACxB,CAAC,CAAC,QAAQ,UAAU,WAAW,QAAQ,MAAM,CAAC;CACvE,IAAI,YAAY,SAAS,GACvB,MAAM,IAAI,MACR,0FAA0F,YAAY,KAAK,IAAI,GACjH;AAEJ;;AAGA,SAAgB,oCACd,WACc;CACd,iCAAiC,UAAU,SAAS;CACpD,kCAAkC,SAAS;CAC3C,MAAM,SAAkC,CAAC;CACzC,wBAAwB,QAAQ,SAA+C;CAC/E,IAAI,UAAU,OAAO,OAAO,QAAQ,EAAE,GAAG,UAAU,MAAM;CACzD,IAAI,UAAU,KACZ,OAAO,MAAM,OAAO,YAClB,OAAO,QAAQ,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CACpD,MACA;EACE,GAAG;EAKH,GAAI,OAAO,OAAO,EAAE,MAAM,OAAO,KAAK,KAAK,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC;EAC1E,GAAI,OAAO,MAAM,EAAE,KAAK,YAAY,OAAO,GAAG,EAAE,IAAI,CAAC;CACvD,CACF,CAAC,CACH;CAEF,IAAI,UAAU,WAAW,OAAO,YAAY,YAAY,UAAU,SAAS;CAC3E,IAAI,UAAU,OAAO,OAAO,QAAQ,YAAY,UAAU,KAAK;CAC/D,IAAI,UAAU,OACZ,OAAO,QAAQ,OAAO,YACpB,OAAO,QAAQ,UAAU,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CACtD,OACA,MAAM,KAAK,EAAE,YAAY,MAAM,KAAK,GAAG,YAAY;EACjD,GAAG;EACH,SAAS,CACP,YACA,IAAI,QAAQ,CAAC,EAAA,CAAG,KAAK,OAAO,UAC1B,kCAAkC,OAAO,SAAS,MAAM,QAAQ,MAAM,EAAE,CAC1E,CACF,CAAC,CACE,IAAI,UAAU,CAAC,CACf,KAAK,GAAG;EAGX,GAAI,MAAM,EAAE,KAAK,YAAY,GAAG,EAAE,IAAI,CAAC;CACzC,EAAE,CACJ,CAAC,CACH;CAEF,IAAI,UAAU,WAAW;EACvB,IAAI,UAAU,UAAU,gBAAgB,MACtC,MAAM,IAAI,MAAM,0EAA0E;EAE5F,OAAO,YAAY;GACjB,aAAa;GACb,GAAI,UAAU,UAAU,QACpB,EACE,OAAO,UAAU,UAAU,MAAM,KAAK,UAAU;IAC9C,GAAG;IACH,UAAU,eAAe,KAAK,QAAQ;GACxC,EAAE,EACJ,IACA,CAAC;GACL,GAAI,UAAU,UAAU,QACpB,EAAE,OAAO,UAAU,UAAU,MAAM,IAAI,cAAc,EAAE,IACvD,CAAC;GACL,GAAI,UAAU,UAAU,SACpB,EAAE,QAAQ,UAAU,UAAU,OAAO,IAAI,cAAc,EAAE,IACzD,CAAC;GACL,GAAI,UAAU,UAAU,SACpB,EAAE,QAAQ,UAAU,UAAU,OAAO,IAAI,cAAc,EAAE,IACzD,CAAC;GACL,GAAI,UAAU,UAAU,WACpB,EAAE,UAAU,UAAU,UAAU,SAAS,IAAI,cAAc,EAAE,IAC7D,CAAC;GACL,GAAI,UAAU,UAAU,iBAAiB,KAAA,IACrC,EACE,cACE,OAAO,UAAU,UAAU,iBAAiB,WACxC,UAAU,UAAU,eACpB,eAAe,UAAU,UAAU,YAAY,EACvD,IACA,CAAC;EACP;CACF;CACA,OAAO;AACT;;AAGA,SAAgB,0BAA0B,OAAgB,MAAuB;CAC/E,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,OAAO,UAAU;EACjC,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,GAAG,KAAK,wCAAwC,OAAO;EAEzE,OAAO,0BAA0B,OAAO,GAAG,KAAK,GAAG,MAAM,EAAE;CAC7D,CAAC;CAEH,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAgC,CAAC,CAC7C,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAAC,CAC1C,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,0BAA0B,OAAO,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CACpF;AACF;AAEA,SAAS,iBAAiB,SAAyE;CACjG,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;EAC9C,IAAI,OAAO,cAAc,KAAA,KAAa,OAAO,cAAc,SACzD,wBAAwB,OAAO,KAAK,aAAa,OAAO,WAAW;EAErE,IAAI,OAAO,QAAQ,KAAA,GAAW,wBAAwB,OAAO,KAAK,KAAK;EACvE,IAAI,OAAO,YAAY,KAAA,GAAW,wBAAwB,OAAO,KAAK,SAAS;EAC/E,IAAI,OAAO,aAAa,KAAA,GAAW,wBAAwB,OAAO,KAAK,UAAU;EACjF,OAAO,CACL,MACA;GACE,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,UAAU,IAAI,CAAC;GAC1D,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;GACpD,GAAI,OAAO,OACP,EACE,MAAM,OAAO,KAAK,KAAK,OAAO,UAC5B,qBAAqB,OAAO,OAAO,KAAK,QAAQ,MAAM,EAAE,CAC1D,EACF,IACA,CAAC;GACL,GAAI,OAAO,MAAM,EAAE,KAAK,yBAAyB,OAAO,KAAK,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC;GACrF,GAAI,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC;GACxC,GAAI,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;EACpE,CACF;CACF,CAAC,CACH;AACF;;AAGA,SAAS,iCAAiC,WAA0B;CAClE,IACE,cAAc,QACd,OAAO,cAAc,YACrB,eAAe,aACf,UAAU,cAAc,KAAA,GAExB,MAAM,IAAI,MACR,sHACF;AAEJ;AAEA,SAAS,gBAAgB,WAA4D;CACnF,IAAI,UAAU,gBAAgB,MAC5B,MAAM,IAAI,MAAM,uDAAuD;CAEzE,OAAO;EACL,aAAa;EACb,GAAI,UAAU,QACV,EACE,OAAO,UAAU,MAAM,KAAK,UAAU;GACpC,GAAG;GACH,UAAU,eAAe,KAAK,QAAQ;EACxC,EAAE,EACJ,IACA,CAAC;EACL,GAAI,UAAU,QAAQ,EAAE,OAAO,UAAU,MAAM,IAAI,cAAc,EAAE,IAAI,CAAC;EACxE,GAAI,UAAU,SAAS,EAAE,QAAQ,UAAU,OAAO,IAAI,cAAc,EAAE,IAAI,CAAC;EAC3E,GAAI,UAAU,SAAS,EAAE,QAAQ,UAAU,OAAO,IAAI,cAAc,EAAE,IAAI,CAAC;EAC3E,GAAI,UAAU,WAAW,EAAE,UAAU,UAAU,SAAS,IAAI,cAAc,EAAE,IAAI,CAAC;EACjF,GAAI,UAAU,iBAAiB,KAAA,IAC3B,CAAC,IACD,EACE,cACE,OAAO,UAAU,iBAAiB,WAC9B,UAAU,eACV,eAAe,UAAU,YAAY,EAC7C;CACN;AACF;AAEA,SAAS,eAAe,UAA8D;CACpF,IAAI,SAAS,SAAS,UACpB,MAAM,IAAI,MACR,2IACF;CAEF,MAAM,QAAQ,OAAO,KAAK,SAAS,SAAS,MAAM;CAClD,OAAO;EACL,GAAG;EACH,QAAQ,0BAA0B,KAAK,CAAC,CAAC;EACzC,YAAY,MAAM;CACpB;AACF;AAEA,SAAS,wBACP,QACA,QACM;CACN,KAAK,MAAM,OAAO,iCAChB,IAAI,OAAO,SAAS,KAAA,GAAW,OAAO,OAAO,OAAO;AAExD;AAEA,SAAS,qBAAqB,OAAgB,QAAiB,OAAqB;CAClF,IAAI,CAAC,OAAO,KAAKC,0BAAwB,KAAK,CAAC,CAAC,CAAC,OAAOA,0BAAwB,MAAM,CAAC,GACrF,MAAM,IAAI,MAAM,GAAG,MAAM,8CAA8C;AAE3E;AAEA,SAAS,eAAe,UAA8C;CACpE,IAAI,SAAS,SAAS,UACpB,OAAO;EAAE,MAAM;EAAU,MAAM,SAAS;EAAM,SAAS,SAAS;CAAQ;CAE1E,OAAO;EACL,MAAM;EACN,YAAY,GAAG,SAAS,WAAW,MAAM,GAAG,SAAS,WAAW;EAChE,MAAM,SAAS;EACf,KAAK,SAAS;EACd,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;CACjD;AACF;;;AAIA,SAAS,qBACP,OACA,MACmC;CACnC,IAAI,MAAM,SAAS,UAAU,0BAA0B,GAAG,KAAK,IAAI,MAAM,KAAK,EAAE;CAChF,OAAO;EAAE,MAAM;EAAU,OAAO,MAAM;CAAM;AAC9C;AAEA,SAAS,yBACP,QACA,YACmD;CACnD,OAAO,OAAO,YACZ,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAC5C,MACA,qBAAqB,OAAO,GAAG,WAAW,GAAG,MAAM,CACrD,CAAC,CACH;AACF;AAEA,SAAS,YAAe,QAA8C;CACpE,OAAO,OAAO,YACZ,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAClE;AACF;AAEA,SAAS,WAAW,OAAyB;CAC3C,OAAO,UAAU,KAAA,KAAa,UAAU,QAAQ,OAAO,UAAU,WAC7D,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAC5B;AACN;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,2BAA2B,KAAK,KAAK,IAAI,QAAQ,IAAI,MAAM,WAAW,KAAK,OAAO,EAAE;AAC7F;AAEA,SAAS,wBAAwB,MAAqB;CACpD,MAAM,IAAI,MACR,8BAA8B,KAAK,oDACrC;AACF;AAEA,SAAgB,YACd,WACA,MACA,cAC2D;CAC3D,MAAM,SAAS,UAAU,OAAO,UAAU;CAC1C,IAAI,OAAO,SAAS,qBAClB,OAAO;EAAE,YAAY,OAAO;EAAY,MAAM,CAAC,GAAI,OAAO,QAAQ,CAAC,GAAI,GAAG,YAAY;CAAE;CAE1F,MAAM,gBAAgB,KAAK,eAAe;CAC1C,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,0DAA0D;CAC9F,MAAM,aAAa,MAAM,KAAK,eAAe,OAAO,UAAU;CAC9D,MAAM,gBAAgB,OAAO,QAAQ,CAAC;CACtC,IAAI,OAAO,aACT,OAAO;EACL,YAAY,OAAO;EACnB,MAAM;GAAC;IAAE,MAAM;IAAU,OAAO;GAAW;GAAG,GAAG;GAAe,GAAG;EAAY;CACjF;CAEF,OAAO;EAAE,YAAY;EAAY,MAAM,CAAC,GAAG,eAAe,GAAG,YAAY;CAAE;AAC7E;AAEA,SAAgB,YACd,SACA,WACwD;CACxD,MAAM,SAAiE,CACrE;EAAE,MAAM;EAAW;CAAU,CAC/B;CACA,IAAI,QAAQ,OAAO,OAAO,OAAO,KAAK;EAAE,MAAM;EAAS;CAAU,CAAC;CAClE,KAAK,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,GACvD,IAAI,QAAQ,QAAQ,KAAK,EAAE,OAAO,OAAO,KAAK;EAAE,MAAM;EAAQ;EAAM;CAAU,CAAC;CAEjF,KAAK,MAAM,QAAQ,OAAO,KAAK,QAAQ,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,GAC3D,IAAI,QAAQ,YAAY,KAAK,EAAE,OAAO,OAAO,KAAK;EAAE,MAAM;EAAY;EAAM;CAAU,CAAC;CAEzF,OAAO;AACT;AAEA,SAAgB,2BACd,WAC8E;CAC9E,MAAM,SAAS,UAAU,OAAO,UAAU;CAC1C,MAAM,YAAY,UAAU,OAAO,UAAU;CAC7C,IAAI,OAAO,SAAS,0BAA0B,CAAC,WAAW,OAAO,KAAA;CACjE,MAAM,OAAO,UAAU,SAAS,MAAM,MAAM,UAAU,MAAM,SAAS,OAAO,UAAU;CACtF,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,4DAA4D;CACvF,OAAO;EAAE,MAAM,KAAK;EAAM,QAAQ,KAAK;EAAQ,YAAY,KAAK;CAAW;AAC7E;AAEA,SAAgB,qBACd,KACA,OACQ;CACR,MAAM,OAAO,uBAAuB,IAAI,WAAW,KAAK;CACxD,MAAM,WAAW,IAAI,SAAS,MAAM,OAAO,MAAM,KAAK,MAAM,IAAI,IAAI;CACpE,IAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,KAAK,EAAE,GACtD,MAAM,IAAI,MAAM,+CAA+C;CAEjE,OAAO;AACT;AAEA,SAAS,uBACP,WACA,OACQ;CACR,MAAM,OAAO,cAAc,SAAS,MAAM,WAAW,MAAM;CAC3D,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,aAAa,UAAU,2BAA2B;CAC7E,OAAO;AACT;AAEA,SAAgB,0BACd,aAMA,eAM0E;CAC1E,MAAM,aAAa,IAAI,IACrB,YAAY,KAAK,SAAS,CAAC,oBAAoB,KAAK,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC,CAChF;CACA,IAAI,WAAW,SAAS,YAAY,UAAU,YAAY,WAAW,cAAc,QACjF,MAAM,IAAI,MAAM,2DAA2D;CAE7E,OAAO,cAAc,KAAK,aAAa;EACrC,MAAM,SAAS,WAAW,IAAI,oBAAoB,SAAS,MAAM,SAAS,OAAO,CAAC;EAClF,MAAM,OAAO,QAAQ,QAAQ;EAC7B,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,IAAI,MAAM;EACvD,IACE,CAAC,UACD,CAAC,OAAO,UAAU,IAAI,KACtB,OAAO,KACP,OAAO,OACP,SAAS,SAAS,QAClBC,cAAY,KAAK,MAAM,SAAS,eAEhC,MAAM,IAAI,MAAM,2DAA2D;EAE7E,OAAO;GACL,MAAM,SAAS;GACf;GACA,GAAI,SAAS,SAAS,UAAU,EAAE,MAAM,QAAiB,IAAI,CAAC;GAC9D,OAAO,WAAW,KAAK,KAAK;EAC9B;CACF,CAAC;AACH"}

package/dist/sandbox-profile-compat-DxegoIK5.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox-profile-compat-DxegoIK5.js","names":[],"sources":["../src/agent/native-system-prompt.ts","../src/runtime/sandbox-profile-compat.ts"],"sourcesContent":["import { posix } from 'node:path'\nimport type { AgentProfilePrompt } from '@tangle-network/agent-interface'\nimport type { PlanFile } from '@tangle-network/agent-profile-materialize'\n\n/** Native replace and append controls shared by local and sealed candidate execution. */\nexport function nativeSystemPrompt(\n  harness: string,\n  prompt: Pick<AgentProfilePrompt, 'systemPrompt' | 'appendSystemPrompt'> | undefined,\n  systemPath = '.tangle/system-prompt.md',\n): { files: PlanFile[]; flags: string[] } {\n  const files: PlanFile[] = []\n  const flags: string[] = []\n  for (const intent of ['systemPrompt', 'appendSystemPrompt'] as const) {\n    const text = prompt?.[intent]\n    if (text === undefined) continue\n    if (typeof text !== 'string' || (intent === 'appendSystemPrompt' && !text.trim())) {\n      throw new Error(\n        `profile.prompt.${intent} must be ${intent === 'systemPrompt' ? 'a string' : 'non-empty text'}`,\n      )\n    }\n    const append = intent === 'appendSystemPrompt'\n    const path = append\n      ? posix.join(posix.dirname(systemPath), 'append-system-prompt.md')\n      : systemPath\n    if (harness === 'codex' && append) {\n      flags.push('-c', `developer_instructions=${JSON.stringify(text)}`)\n      continue\n    }\n    const flag =\n      harness === 'claude-code'\n        ? append\n          ? '--append-system-prompt-file'\n          : '--system-prompt-file'\n        : harness === 'pi' || harness === 'prime'\n          ? append\n            ? '--append-system-prompt'\n            : '--system-prompt'\n          : harness === 'codex'\n            ? '-c'\n            : undefined\n    if (!flag) throw new Error(`${harness} has no native ${intent} launch projection`)\n    files.push({\n      relPath: append ? '.tangle/append-system-prompt.md' : '.tangle/system-prompt.md',\n      content: text,\n      source: 'generated',\n    })\n    flags.push(flag, harness === 'codex' ? `model_instructions_file=${JSON.stringify(path)}` : path)\n  }\n  return { files, flags }\n}\n","import { isRecord } from '@tangle-network/agent-core'\nimport { ValidationError } from '../errors'\n\n/**\n * Interface 5.3 admits proxy secrets and private config values, but the current Sandbox SDK\n * carries Interface 4.0. Refuse these fields before either candidate conversion or a direct\n * Sandbox create can silently lose them. Remove this guard when Sandbox carries the fields.\n */\nexport function assertSandboxProfileCompatibility(\n  profile: unknown,\n  context = 'candidate profile',\n): void {\n  if (!isRecord(profile)) return\n  if (profile.proxySecrets !== undefined) refuseSandboxProfileField('proxySecrets', context)\n  if (isRecord(profile.mcp)) {\n    for (const [name, server] of Object.entries(profile.mcp)) {\n      if (!isRecord(server)) continue\n      refuseNonPublicConfigValues(server.args, `mcp.${name}.args`, context)\n      refuseNonPublicConfigValues(server.env, `mcp.${name}.env`, context)\n    }\n  }\n  if (isRecord(profile.hooks)) {\n    for (const [event, hooks] of Object.entries(profile.hooks)) {\n      if (!Array.isArray(hooks)) continue\n      for (const [index, hook] of hooks.entries()) {\n        if (!isRecord(hook)) continue\n        refuseNonPublicConfigValues(hook.args, `hooks.${event}[${index}].args`, context)\n        refuseNonPublicConfigValues(hook.env, `hooks.${event}[${index}].env`, context)\n      }\n    }\n  }\n}\n\nfunction refuseNonPublicConfigValues(values: unknown, path: string, context: string): void {\n  const entries = Array.isArray(values)\n    ? values.map((value, index) => [`${path}[${index}]`, value] as const)\n    : isRecord(values)\n      ? Object.entries(values).map(([name, value]) => [`${path}.${name}`, value] as const)\n      : []\n  for (const [field, value] of entries) {\n    if (isRecord(value) && value.kind !== 'public') {\n      refuseSandboxProfileField(`${field} (${String(value.kind)})`, context)\n    }\n  }\n}\n\nexport function refuseSandboxProfileField(field: string, context = 'candidate profile'): never {\n  throw new ValidationError(\n    `${context} field ${field} is refused: Sandbox's Interface 4.0.0 cannot carry it yet, and Runtime does not drop it`,\n  )\n}\n"],"mappings":";;;;;AAKA,SAAgB,mBACd,SACA,QACA,aAAa,4BAC2B;CACxC,MAAM,QAAoB,CAAC;CAC3B,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,UAAU,CAAC,gBAAgB,oBAAoB,GAAY;EACpE,MAAM,OAAO,SAAS;EACtB,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,OAAO,SAAS,YAAa,WAAW,wBAAwB,CAAC,KAAK,KAAK,GAC7E,MAAM,IAAI,MACR,kBAAkB,OAAO,WAAW,WAAW,iBAAiB,aAAa,kBAC/E;EAEF,MAAM,SAAS,WAAW;EAC1B,MAAM,OAAO,SACT,MAAM,KAAK,MAAM,QAAQ,UAAU,GAAG,yBAAyB,IAC/D;EACJ,IAAI,YAAY,WAAW,QAAQ;GACjC,MAAM,KAAK,MAAM,0BAA0B,KAAK,UAAU,IAAI,GAAG;GACjE;EACF;EACA,MAAM,OACJ,YAAY,gBACR,SACE,gCACA,yBACF,YAAY,QAAQ,YAAY,UAC9B,SACE,2BACA,oBACF,YAAY,UACV,OACA,KAAA;EACV,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,GAAG,QAAQ,iBAAiB,OAAO,mBAAmB;EACjF,MAAM,KAAK;GACT,SAAS,SAAS,oCAAoC;GACtD,SAAS;GACT,QAAQ;EACV,CAAC;EACD,MAAM,KAAK,MAAM,YAAY,UAAU,2BAA2B,KAAK,UAAU,IAAI,MAAM,IAAI;CACjG;CACA,OAAO;EAAE;EAAO;CAAM;AACxB;;;;;;;ACzCA,SAAgB,kCACd,SACA,UAAU,qBACJ;CACN,IAAI,CAAC,SAAS,OAAO,GAAG;CACxB,IAAI,QAAQ,iBAAiB,KAAA,GAAW,0BAA0B,gBAAgB,OAAO;CACzF,IAAI,SAAS,QAAQ,GAAG,GACtB,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAAG,GAAG;EACxD,IAAI,CAAC,SAAS,MAAM,GAAG;EACvB,4BAA4B,OAAO,MAAM,OAAO,KAAK,QAAQ,OAAO;EACpE,4BAA4B,OAAO,KAAK,OAAO,KAAK,OAAO,OAAO;CACpE;CAEF,IAAI,SAAS,QAAQ,KAAK,GACxB,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,QAAQ,KAAK,GAAG;EAC1D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAC3B,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;GAC3C,IAAI,CAAC,SAAS,IAAI,GAAG;GACrB,4BAA4B,KAAK,MAAM,SAAS,MAAM,GAAG,MAAM,SAAS,OAAO;GAC/E,4BAA4B,KAAK,KAAK,SAAS,MAAM,GAAG,MAAM,QAAQ,OAAO;EAC/E;CACF;AAEJ;AAEA,SAAS,4BAA4B,QAAiB,MAAc,SAAuB;CACzF,MAAM,UAAU,MAAM,QAAQ,MAAM,IAChC,OAAO,KAAK,OAAO,UAAU,CAAC,GAAG,KAAK,GAAG,MAAM,IAAI,KAAK,CAAU,IAClE,SAAS,MAAM,IACb,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,KAAK,GAAG,QAAQ,KAAK,CAAU,IACjF,CAAC;CACP,KAAK,MAAM,CAAC,OAAO,UAAU,SAC3B,IAAI,SAAS,KAAK,KAAK,MAAM,SAAS,UACpC,0BAA0B,GAAG,MAAM,IAAI,OAAO,MAAM,IAAI,EAAE,IAAI,OAAO;AAG3E;AAEA,SAAgB,0BAA0B,OAAe,UAAU,qBAA4B;CAC7F,MAAM,IAAI,gBACR,GAAG,QAAQ,SAAS,MAAM,yFAC5B;AACF"}