@tangle-network/agent-runtime 4.0.0 → 6.0.1

package/dist/candidate-execution/index.d.ts

@@ -1,8 +1,8 @@
-import { $ as ResolvedAgentCandidateContainer, A as AgentCandidateMemoryPort, B as AgentCandidateProtectedRunCapture, C as AgentCandidateExecutorPort, D as AgentCandidateExecutorTaskOutcomeCapture, E as AgentCandidateExecutorStopRequest, F as AgentCandidateOutputPurpose, G as AgentCandidateWorkspacePort, H as AgentCandidateRunFinalization, I as AgentCandidateProtectedModelActivation, J as PreparedAgentCandidateExecution, K as CanonicalCandidateDocument, L as AgentCandidateProtectedModelReservation, M as AgentCandidateModelLimits, N as AgentCandidateModelPort, O as AgentCandidateExecutorWorkspaceFile, P as AgentCandidateOutputArtifactPort, Q as PreparedAgentCandidateTrace, R as AgentCandidateProtectedModelSettlement, S as AgentCandidateExecutorMemoryCapture, T as AgentCandidateExecutorRequest, U as AgentCandidateTaskExecution, V as AgentCandidateRepositoryPort, W as AgentCandidateVerificationPorts, X as PreparedAgentCandidateKnowledge, Y as PreparedAgentCandidateInstruction, Z as PreparedAgentCandidateLaunch, _ as AgentCandidateArtifactPort, a as captureAgentCandidateWorkspaceTreeToArtifacts, b as AgentCandidateExecutionPorts, c as verifyAgentCandidateWorkspaceArtifacts, d as CapturedAgentCandidateWorkspace, et as VerifiedAgentCandidate, f as captureAgentCandidateWorkspaceFiles, g as createAgentCandidateWorkspacePort, h as captureAgentCandidateWorkspace, i as captureAgentCandidateWorkspaceToArtifacts, j as AgentCandidateMemoryResetResult, k as AgentCandidateExecutorWorkspaceInput, l as verifyAgentCandidateWorkspaceTree, m as CreateAgentCandidateWorkspacePortOptions, n as AgentCandidateWorkspaceTree, nt as AgentCandidateExecutionRoots, o as materializeAgentCandidateWorkspaceFromArtifacts, p as CaptureAgentCandidateWorkspaceOptions, q as PersistedTaskOutcomeEvidence, r as CaptureAgentCandidateWorkspaceToArtifactsOptions, s as readAgentCandidateWorkspaceArtifactFiles, t as AgentCandidateWorkspaceArtifactsOptions, tt as VerifiedAgentCandidateTaskOutcome, u as AgentCandidateWorkspaceArchiveLimits, v as AgentCandidateBenchmarkGraderPort, w as AgentCandidateExecutorProfileFile, x as AgentCandidateExecutorFinalCapture, y as AgentCandidateContainerPort, z as AgentCandidateProtectedModelSettlementCall } from "../workspace-streams-DbKiDOWA.js";
-import { A as AgentCandidateExecutionTerminalResult, C as AgentCandidateExecutionFinishResult, D as AgentCandidateExecutionRecoveryEvidence, E as AgentCandidateExecutionPhaseResult, M as AgentCandidatePreparationEvidence, O as AgentCandidateExecutionStageResult, S as AgentCandidateExecutionFailureClass, T as AgentCandidateExecutionPhase, _ as AgentCandidateExecutionAttemptRef, a as createProtectedAgentCandidateModelPort, b as AgentCandidateExecutionClaimStore, c as assertCandidateProfileBinding, d as parseExactAgentProfileDiff, g as AgentCandidateExecutionAttemptRecord, h as executePreparedAgentCandidate, i as CreateProtectedAgentCandidateModelPortOptions, j as AgentCandidateRetryRejection, k as AgentCandidateExecutionTerminalRecord, l as freezeGenericAgentCandidateProfile, m as ExecutePreparedAgentCandidateOptions, n as AgentCandidateModelGrantClient, o as agentCandidateProfileAsAgentProfile, p as prepareAgentCandidateExecution, r as AgentCandidateModelGrantReserveInput, s as applyExactAgentProfileDiff, t as AgentCandidateModelGrantActivateInput, v as AgentCandidateExecutionClaim, w as AgentCandidateExecutionLease, x as AgentCandidateExecutionCleanupHandles, y as AgentCandidateExecutionClaimResult } from "../protected-model-port-DEsNIYi1.js";
+import { A as AgentCandidateProtectedModelSettlementCall, B as PreparedAgentCandidateInstruction, C as AgentCandidateModelLimits, D as AgentCandidateProtectedModelActivation, E as AgentCandidateOutputPurpose, F as AgentCandidateVerificationPorts, G as VerifiedAgentCandidate, H as PreparedAgentCandidateLaunch, I as AgentCandidateWorkspacePort, K as VerifiedAgentCandidateTaskOutcome, L as CanonicalCandidateDocument, M as AgentCandidateRepositoryPort, N as AgentCandidateRunFinalization, O as AgentCandidateProtectedModelReservation, P as AgentCandidateTaskExecution, R as PersistedTaskOutcomeEvidence, S as AgentCandidateMemoryResetResult, T as AgentCandidateOutputArtifactPort, U as PreparedAgentCandidateTrace, V as PreparedAgentCandidateKnowledge, W as ResolvedAgentCandidateContainer, _ as AgentCandidateExecutorStopRequest, a as CreateAgentCandidateWorkspacePortOptions, b as AgentCandidateExecutorWorkspaceInput, c as AgentCandidateArtifactPort, d as AgentCandidateExecutionPorts, f as AgentCandidateExecutorFinalCapture, g as AgentCandidateExecutorRequest, h as AgentCandidateExecutorProfileFile, i as CaptureAgentCandidateWorkspaceOptions, j as AgentCandidateProtectedRunCapture, k as AgentCandidateProtectedModelSettlement, l as AgentCandidateBenchmarkGraderPort, m as AgentCandidateExecutorPort, n as CapturedAgentCandidateWorkspace, o as captureAgentCandidateWorkspace, p as AgentCandidateExecutorMemoryCapture, q as AgentCandidateExecutionRoots, r as captureAgentCandidateWorkspaceFiles, s as createAgentCandidateWorkspacePort, t as AgentCandidateWorkspaceArchiveLimits, u as AgentCandidateContainerPort, v as AgentCandidateExecutorTaskOutcomeCapture, w as AgentCandidateModelPort, x as AgentCandidateMemoryPort, y as AgentCandidateExecutorWorkspaceFile, z as PreparedAgentCandidateExecution } from "../workspace-archive-DS9E9tUr.js";
+import { A as AgentCandidateExecutionTerminalResult, C as AgentCandidateExecutionFinishResult, D as AgentCandidateExecutionRecoveryEvidence, E as AgentCandidateExecutionPhaseResult, M as AgentCandidatePreparationEvidence, O as AgentCandidateExecutionStageResult, S as AgentCandidateExecutionFailureClass, T as AgentCandidateExecutionPhase, _ as AgentCandidateExecutionAttemptRef, a as createProtectedAgentCandidateModelPort, b as AgentCandidateExecutionClaimStore, c as assertCandidateProfileBinding, d as parseExactAgentProfileDiff, g as AgentCandidateExecutionAttemptRecord, h as executePreparedAgentCandidate, i as CreateProtectedAgentCandidateModelPortOptions, j as AgentCandidateRetryRejection, k as AgentCandidateExecutionTerminalRecord, l as freezeGenericAgentCandidateProfile, m as ExecutePreparedAgentCandidateOptions, n as AgentCandidateModelGrantClient, o as agentCandidateProfileAsAgentProfile, p as prepareAgentCandidateExecution, r as AgentCandidateModelGrantReserveInput, s as applyExactAgentProfileDiff, t as AgentCandidateModelGrantActivateInput, v as AgentCandidateExecutionClaim, w as AgentCandidateExecutionLease, x as AgentCandidateExecutionCleanupHandles, y as AgentCandidateExecutionClaimResult } from "../protected-model-port-uN4M48vT.js";
 import { AgentCandidateArtifactRef, AgentCandidateBundle, AgentCandidateCapturedArtifact, AgentCandidateCodeDisabled, AgentCandidateCodeNoOp, AgentCandidateExecution, AgentCandidateGitHubRepository, AgentCandidateKnowledge, AgentCandidateMemoryPolicy, AgentCandidateProfile, AgentCandidateResolvedModel, AgentCandidateWorkspaceManifestMaterial, AgentCandidateWorkspaceSnapshotEvidence, AgentProfile, AgentProfileDiff, Sha256Digest } from "@tangle-network/agent-interface";
-import { CodeSurface } from "@tangle-network/agent-eval/campaign";
 import { AgentEnvironmentProvider, AgentExactProcessResources } from "@tangle-network/agent-interface/environment-provider";
+import { CodeSurface } from "@tangle-network/agent-eval/campaign";
 /** The per-scan caps a bounded capture applies. */
 interface WorkspaceScanLimits {
   readonly maxFiles: number;
@@ -169,6 +169,73 @@ interface RunProtectedAgentCandidateModelGrantResult<TResult> {
 export declare function runProtectedAgentCandidateModelGrant<TResult>(options: RunProtectedAgentCandidateModelGrantOptions<TResult>): Promise<RunProtectedAgentCandidateModelGrantResult<TResult>>;
 /** Verifies every digest, resource, workspace, and Git object in a candidate bundle. */
 export declare function verifyAgentCandidateBundle(input: unknown, ports: AgentCandidateVerificationPorts): Promise<VerifiedAgentCandidate>;
+interface CaptureAgentCandidateWorkspaceToArtifactsOptions {
+  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>;
+  /**
+   * Root-relative files or directories to leave out of the capture, each by its exact path. A
+   * caller whose root holds data another capture already keeps, such as a provider's retained
+   * native session trees, or an environment it can rebuild, such as a virtualenv, names them here
+   * instead of storing them on every capture. The manifest then describes only what was kept.
+   */
+  excludedPaths?: readonly string[];
+  artifactPersistence: NonNullable<CaptureAgentCandidateWorkspaceOptions['artifactPersistence']>;
+}
+/** Capture regular files to durable artifacts with memory bounded by the manifest and stream buffers. */
+export declare function captureAgentCandidateWorkspaceToArtifacts(rootInput: string, options: CaptureAgentCandidateWorkspaceToArtifactsOptions): Promise<{
+  readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence;
+}>;
+/**
+ * A workspace stored as one content-addressed object per file plus the manifest that names them.
+ *
+ * Its digest is the manifest's, the same identity an archived capture of the same files has. Two
+ * trees share every file they have in common, so storing one costs only the files no earlier
+ * capture in the store holds: on Discovery Lab run terraform-dc-tokens-20261006d, the files a
+ * director changed between two captures one to two minutes apart were 5.5 to 8.2 MB of a
+ * 60 to 70 MB workspace.
+ */
+interface AgentCandidateWorkspaceTree {
+  readonly kind: 'agent-candidate-workspace-tree';
+  /** The manifest's digest; the manifest is the object of this digest. */
+  readonly digest: Sha256Digest;
+  readonly manifest: AgentCandidateArtifactRef;
+  readonly files: number;
+  /** The bytes of every file in the workspace. */
+  readonly bytes: number;
+  /** The bytes this capture added to the store; every other file was already there. */
+  readonly storedBytes: number;
+}
+/**
+ * Store a workspace as a tree: each regular file the store does not already hold, then the
+ * manifest. The store must find objects by content (`locate`) and stream them.
+ */
+export declare function captureAgentCandidateWorkspaceTreeToArtifacts(rootInput: string, options: CaptureAgentCandidateWorkspaceToArtifactsOptions): Promise<AgentCandidateWorkspaceTree>;
+/**
+ * Read a tree back by its digest and confirm the store holds every file it names. Returns the
+ * manifest; reading a file is `artifacts.read` of what `locate` returns for its digest.
+ */
+export declare function verifyAgentCandidateWorkspaceTree(tree: Pick<AgentCandidateWorkspaceTree, 'digest' | 'manifest'>, artifacts: AgentCandidateArtifactPort, options?: {
+  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>;
+  signal?: AbortSignal;
+}): Promise<AgentCandidateWorkspaceManifestMaterial>;
+interface AgentCandidateWorkspaceArtifactsOptions {
+  role: 'task' | 'candidate' | 'knowledge' | 'memory';
+  snapshot: AgentCandidateWorkspaceSnapshotEvidence;
+  artifacts: AgentCandidateArtifactPort;
+  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>;
+  signal?: AbortSignal;
+}
+/** Verify durable regular-file workspace evidence without retaining archive or file contents. */
+export declare function verifyAgentCandidateWorkspaceArtifacts(input: AgentCandidateWorkspaceArtifactsOptions): Promise<void>;
+/** Read selected files only after the existing verifier has accepted the entire archive. */
+export declare function readAgentCandidateWorkspaceArtifactFiles(input: AgentCandidateWorkspaceArtifactsOptions & {
+  readonly paths: readonly string[];
+  readonly maxReadBytes: number;
+}): Promise<ReadonlyMap<string, Uint8Array>>;
+/** Restore regular files into an empty destination after complete verification; paths selects a subset. */
+export declare function materializeAgentCandidateWorkspaceFromArtifacts(input: AgentCandidateWorkspaceArtifactsOptions & {
+  destination: string;
+  paths?: readonly string[];
+}): Promise<void>;
 /** The canonical workspace evidence without manifest material or embedded file bytes. */
 type AgentCandidateWorkspaceSnapshotReferences = Pick<AgentCandidateWorkspaceSnapshotEvidence, 'kind' | 'digest'> & {
   readonly manifest: AgentCandidateArtifactRef;
@@ -258,5 +325,5 @@ interface SeedWorkspaceTreeInput {
   /** Default `'tree-v1'`; decides only the digest this returns, never the bytes it writes. */
   readonly algorithm?: WorkspaceTreeAlgorithm;
 }
-export { type AgentCandidateArtifactPort, type AgentCandidateBenchmarkGraderPort, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, type AgentCandidateContainerPort, type AgentCandidateExecutionAttemptRecord, type AgentCandidateExecutionAttemptRef, type AgentCandidateExecutionClaim, type AgentCandidateExecutionClaimResult, type AgentCandidateExecutionClaimStore, type AgentCandidateExecutionCleanupHandles, type AgentCandidateExecutionFailureClass, type AgentCandidateExecutionFinishResult, type AgentCandidateExecutionLease, type AgentCandidateExecutionPhase, type AgentCandidateExecutionPhaseResult, type AgentCandidateExecutionPorts, type AgentCandidateExecutionRecoveryEvidence, type AgentCandidateExecutionRoots, type AgentCandidateExecutionStageResult, type AgentCandidateExecutionTerminalRecord, type AgentCandidateExecutionTerminalResult, type AgentCandidateExecutorFinalCapture, type AgentCandidateExecutorMemoryCapture, type AgentCandidateExecutorPort, type AgentCandidateExecutorProfileFile, type AgentCandidateExecutorRequest, type AgentCandidateExecutorStopRequest, type AgentCandidateExecutorTaskOutcomeCapture, type AgentCandidateExecutorWorkspaceFile, type AgentCandidateExecutorWorkspaceInput, type AgentCandidateMemoryPort, type AgentCandidateMemoryResetResult, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantRunReservationInput, type AgentCandidateModelLimits, type AgentCandidateModelPort, type AgentCandidateOutputArtifactPort, type AgentCandidateOutputPurpose, type AgentCandidatePreparationEvidence, type AgentCandidateProfileSource, type AgentCandidateProtectedModelActivation, type AgentCandidateProtectedModelReservation, type AgentCandidateProtectedModelSettlement, type AgentCandidateProtectedModelSettlementCall, type AgentCandidateProtectedRunCapture, type AgentCandidateRepositoryPort, type AgentCandidateRetryRejection, type AgentCandidateRunFinalization, type AgentCandidateTaskExecution, type AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArtifactsOptions, type AgentCandidateWorkspacePort, type AgentCandidateWorkspaceSnapshotReferences, type AgentCandidateWorkspaceTree, type BuildAgentCandidateBundleInput, type CanonicalCandidateDocument, type CaptureAgentCandidateWorkspaceOptions, type CaptureAgentCandidateWorkspaceToArtifactsOptions, type CaptureAgentWorkspaceSnapshotOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DescribeWorkspaceTreeOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, type ExecutePreparedAgentCandidateOptions, type FileAgentCandidateExecutionClaimStoreOptions, type MaterializeAgentWorkspaceSnapshotOptions, type PersistedTaskOutcomeEvidence, type PreparedAgentCandidateExecution, type PreparedAgentCandidateInstruction, type PreparedAgentCandidateKnowledge, type PreparedAgentCandidateLaunch, type PreparedAgentCandidateTrace, type ProtectedAgentCandidateModelGrantContext, type ResolvedAgentCandidateContainer, type RunProtectedAgentCandidateModelGrantOptions, type RunProtectedAgentCandidateModelGrantResult, type SeedWorkspaceTreeInput, type VerifiedAgentCandidate, type VerifiedAgentCandidateTaskOutcome, type WorkspaceScanLimits, type WorkspaceScanOptions, type WorkspaceTreeAlgorithm, type WorkspaceTreeDescriptor, type WorkspaceTreeEntryPolicy, type WorkspaceTreeExclusion, type WorkspaceTreeExclusionReason, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, captureAgentCandidateWorkspaceToArtifacts, captureAgentCandidateWorkspaceTreeToArtifacts, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, materializeAgentCandidateWorkspaceFromArtifacts, parseExactAgentProfileDiff, prepareAgentCandidateExecution, readAgentCandidateWorkspaceArtifactFiles, verifyAgentCandidateWorkspaceArtifacts, verifyAgentCandidateWorkspaceTree };
+export { type AgentCandidateArtifactPort, type AgentCandidateBenchmarkGraderPort, type AgentCandidateBundleInput, type AgentCandidateCodeSource, type AgentCandidateCodeSurfaceSource, type AgentCandidateContainerPort, type AgentCandidateExecutionAttemptRecord, type AgentCandidateExecutionAttemptRef, type AgentCandidateExecutionClaim, type AgentCandidateExecutionClaimResult, type AgentCandidateExecutionClaimStore, type AgentCandidateExecutionCleanupHandles, type AgentCandidateExecutionFailureClass, type AgentCandidateExecutionFinishResult, type AgentCandidateExecutionLease, type AgentCandidateExecutionPhase, type AgentCandidateExecutionPhaseResult, type AgentCandidateExecutionPorts, type AgentCandidateExecutionRecoveryEvidence, type AgentCandidateExecutionRoots, type AgentCandidateExecutionStageResult, type AgentCandidateExecutionTerminalRecord, type AgentCandidateExecutionTerminalResult, type AgentCandidateExecutorFinalCapture, type AgentCandidateExecutorMemoryCapture, type AgentCandidateExecutorPort, type AgentCandidateExecutorProfileFile, type AgentCandidateExecutorRequest, type AgentCandidateExecutorStopRequest, type AgentCandidateExecutorTaskOutcomeCapture, type AgentCandidateExecutorWorkspaceFile, type AgentCandidateExecutorWorkspaceInput, type AgentCandidateMemoryPort, type AgentCandidateMemoryResetResult, type AgentCandidateModelGrantClient, type AgentCandidateModelGrantReserveInput, type AgentCandidateModelGrantRunReservationInput, type AgentCandidateModelLimits, type AgentCandidateModelPort, type AgentCandidateOutputArtifactPort, type AgentCandidateOutputPurpose, type AgentCandidatePreparationEvidence, type AgentCandidateProfileSource, type AgentCandidateProtectedModelActivation, type AgentCandidateProtectedModelReservation, type AgentCandidateProtectedModelSettlement, type AgentCandidateProtectedModelSettlementCall, type AgentCandidateProtectedRunCapture, type AgentCandidateRepositoryPort, type AgentCandidateRetryRejection, type AgentCandidateRunFinalization, type AgentCandidateTaskExecution, type AgentCandidateVerificationPorts, type AgentCandidateWorkspaceArtifactsOptions, type AgentCandidateWorkspacePort, type AgentCandidateWorkspaceSnapshotReferences, type AgentCandidateWorkspaceTree, type BuildAgentCandidateBundleInput, type CanonicalCandidateDocument, type CaptureAgentCandidateWorkspaceOptions, type CaptureAgentCandidateWorkspaceToArtifactsOptions, type CaptureAgentWorkspaceSnapshotOptions, type CapturedAgentCandidateWorkspace, type CreateAgentCandidateWorkspacePortOptions, type CreateProtectedAgentCandidateModelPortOptions, type DescribeWorkspaceTreeOptions, type DisposePreparedAgentCandidateOptions, type ExactProcessCandidateExecutorOptions, type ExecutePreparedAgentCandidateOptions, type FileAgentCandidateExecutionClaimStoreOptions, type MaterializeAgentWorkspaceSnapshotOptions, type PersistedTaskOutcomeEvidence, type PreparedAgentCandidateExecution, type PreparedAgentCandidateInstruction, type PreparedAgentCandidateKnowledge, type PreparedAgentCandidateLaunch, type PreparedAgentCandidateTrace, type ProtectedAgentCandidateModelGrantContext, type ResolvedAgentCandidateContainer, type RunProtectedAgentCandidateModelGrantOptions, type RunProtectedAgentCandidateModelGrantResult, type SeedWorkspaceTreeInput, type VerifiedAgentCandidate, type VerifiedAgentCandidateTaskOutcome, type WorkspaceScanLimits, type WorkspaceScanOptions, type WorkspaceTreeAlgorithm, type WorkspaceTreeDescriptor, type WorkspaceTreeEntryPolicy, type WorkspaceTreeExclusion, type WorkspaceTreeExclusionReason, agentCandidateProfileAsAgentProfile, applyExactAgentProfileDiff, assertCandidateProfileBinding, captureAgentCandidateWorkspace, captureAgentCandidateWorkspaceFiles, createAgentCandidateWorkspacePort, createProtectedAgentCandidateModelPort, executePreparedAgentCandidate, freezeGenericAgentCandidateProfile, parseExactAgentProfileDiff, prepareAgentCandidateExecution };
 //# sourceMappingURL=index.d.ts.map

package/dist/candidate-execution/index.js

@@ -1,7 +1,7 @@
-import { F as deepFreezeCandidate, I as embeddedCandidateArtifact, M as canonicalCandidateBytes$1, S as candidateWorkspaceManifest, a as verifyAgentCandidateWorkspaceArtifacts, c as createAgentCandidateWorkspacePort, g as workspaceLimits, i as readAgentCandidateWorkspaceArtifactFiles, j as verifiedArtifactChunks, n as captureAgentCandidateWorkspaceTreeToArtifacts, o as verifyAgentCandidateWorkspaceTree, p as captureAgentCandidateWorkspaceFiles, r as materializeAgentCandidateWorkspaceFromArtifacts, s as captureAgentCandidateWorkspace, t as captureAgentCandidateWorkspaceToArtifacts } from "../workspace-streams-8ALHaZzx.js";
-import { a as applyExactAgentProfileDiff, b as parseExactCandidateProfile, i as agentCandidateProfileAsAgentProfile, o as assertCandidateProfileBinding, p as freezeGenericAgentCandidateProfile, v as parseExactAgentProfile, y as parseExactAgentProfileDiff } from "../profile-ClvuI8aY.js";
-import { t as sealAgentCandidateBundle } from "../bundle-CV4Ts0cS.js";
-import { _ as sealTerminalDigest, a as consumePreparedCandidateExecution, b as sealAgentCandidateModelSettlement, c as withinCandidateCleanupDeadline, d as assertTerminalMatchesClaim, f as assertTerminalMatchesStaged, g as requireStagedTerminal, h as rejectedStage, i as beginPreparedCandidateDisposal, l as assertRecoveryMatchesStaged, m as rejectedFinish, n as executePreparedAgentCandidate, o as candidateClaimFileInternals, p as recoveredTerminalRecord, r as assertPreparedCandidateIntegrity, s as candidateCleanupDeadline, t as prepareAgentCandidateExecution, u as assertTerminalAllowedInPhase, v as terminalRecord, w as verifyAgentCandidateBundle, x as exactProcessProviderAsCandidateExecutor, y as createProtectedAgentCandidateModelPort } from "../prepare-DutbxpWr.js";
+import { A as verifiedArtifactChunks, F as embeddedCandidateArtifact, P as deepFreezeCandidate, a as verifyAgentCandidateWorkspaceArtifacts, c as createAgentCandidateWorkspacePort, h as workspaceLimits, i as readAgentCandidateWorkspaceArtifactFiles, j as canonicalCandidateBytes$1, n as captureAgentCandidateWorkspaceTreeToArtifacts, o as verifyAgentCandidateWorkspaceTree, p as captureAgentCandidateWorkspaceFiles, r as materializeAgentCandidateWorkspaceFromArtifacts, s as captureAgentCandidateWorkspace, t as captureAgentCandidateWorkspaceToArtifacts, x as candidateWorkspaceManifest } from "../workspace-streams-BqNM06y4.js";
+import { a as applyExactAgentProfileDiff, b as parseExactCandidateProfile, i as agentCandidateProfileAsAgentProfile, o as assertCandidateProfileBinding, p as freezeGenericAgentCandidateProfile, v as parseExactAgentProfile, y as parseExactAgentProfileDiff } from "../profile-DN8Dw2Kp.js";
+import { t as sealAgentCandidateBundle } from "../bundle-vFFiCigS.js";
+import { _ as sealTerminalDigest, a as consumePreparedCandidateExecution, b as sealAgentCandidateModelSettlement, c as withinCandidateCleanupDeadline, d as assertTerminalMatchesClaim, f as assertTerminalMatchesStaged, g as requireStagedTerminal, h as rejectedStage, i as beginPreparedCandidateDisposal, l as assertRecoveryMatchesStaged, m as rejectedFinish, n as executePreparedAgentCandidate, o as candidateClaimFileInternals, p as recoveredTerminalRecord, r as assertPreparedCandidateIntegrity, s as candidateCleanupDeadline, t as prepareAgentCandidateExecution, u as assertTerminalAllowedInPhase, v as terminalRecord, w as verifyAgentCandidateBundle, x as exactProcessProviderAsCandidateExecutor, y as createProtectedAgentCandidateModelPort } from "../prepare-B6SQA12v.js";
 import { agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
 import { linkSync } from "node:fs";

package/dist/{coordination-manager-C-ZoeZ73.js → coordination-manager-RSJg5GmY.js}

@@ -1,8 +1,8 @@
-import { C as writeWorkerSteerAcknowledgement, L as FileSpawnJournal, O as parseWorkerToolTraceArtifact, Qr as settlementFailureCause, Y as runtimeGraphMetadataKey, Yt as FileResultBlobStore, f as readWorkerCancelRequests, h as readWorkerSteerRequests, ji as assertValidBudget, k as workerTraceAnalysisStore, l as claimWorkerSteerDelivery, lr as isLiveNodeStatus, m as readWorkerSteerAcknowledgement, ot as meterRuntimeOwnedAccounting, p as readWorkerCancellation, ur as isTerminalNodeStatus, wt as resolveSpawnResourcePaths, x as writeWorkerCancellation, yi as contentAddress, z as spawnJournalRecordEvents } from "./scope-CJ7xtrs8.js";
-import { b as resolveRedactor, m as errMessage, u as detachedFrozen } from "./jsonl-file-CvPuwM0a.js";
-import { Dt as failedItems, Tt as checkVerdictOf, Y as INBOX_RECEIPT_KEY, _ as withDriverExecutor, _t as CheckUnavailableError, b as createExecutorRegistry, nt as createPeerMailbox, v as InMemoryResultBlobStore, y as InMemorySpawnJournal } from "./supervisor-CwANBb9-.js";
-import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, t as applyRunCancellation, v as FileCoordinationLog } from "./run-cancellation-CGgk54Md.js";
-import { a as admitRuntimeSpawn, i as workerSettlement, n as resolveJsonPointer, o as safeJsonText, r as textBytes, t as createMapRouting } from "./coordination-map-routing-SnsZp287.js";
+import { $t as FileResultBlobStore, B as FileSpawnJournal, C as writeWorkerSteerAcknowledgement, H as spawnJournalRecordEvents, M as workerTraceAnalysisStore, Pt as runtimeGraphMetadataKey, Xr as settlementFailureCause, _i as contentAddress, et as meterRuntimeOwnedAccounting, f as readWorkerCancelRequests, h as readWorkerSteerRequests, j as parseWorkerToolTraceArtifact, ji as assertValidBudget, l as claimWorkerSteerDelivery, m as readWorkerSteerAcknowledgement, or as isLiveNodeStatus, p as readWorkerCancellation, sr as isTerminalNodeStatus, vt as resolveSpawnResourcePaths, x as writeWorkerCancellation } from "./scope-DzhBJrRN.js";
+import { b as resolveRedactor, m as errMessage, u as detachedFrozen } from "./jsonl-file-CeVYTIQJ.js";
+import { Dt as failedItems, Tt as checkVerdictOf, Y as INBOX_RECEIPT_KEY, _ as withDriverExecutor, _t as CheckUnavailableError, b as createExecutorRegistry, nt as createPeerMailbox, v as InMemoryResultBlobStore, y as InMemorySpawnJournal } from "./supervisor-B6sl14OR.js";
+import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, t as applyRunCancellation, v as FileCoordinationLog } from "./run-cancellation-BCuu6khW.js";
+import { a as admitRuntimeSpawn, i as workerSettlement, n as resolveJsonPointer, o as safeJsonText, r as textBytes, t as createMapRouting } from "./coordination-map-routing-DVjW5Gx0.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { argHash, errorStreakDetector, observeAll, repeatedActionDetector } from "@tangle-network/agent-eval";
 import { registry } from "zod";
@@ -2389,7 +2389,8 @@ async function waitForWakeCondition(env, input, startedAt) {
 		let cursorIdle = false;
 		for (;;) {
 			while (bus.pending(wakeEventKinds) === 0 && !workerQuestionPending(env) && !outsideWake && !input.signal.aborted && Date.now() < wakeAt) {
-				const drained = !cursorIdle && workers.openWork().running.length > 0 ? ensureDrain(env) : new Promise(() => void 0);
+				const { running, unqueued } = workers.openWork();
+				const drained = !cursorIdle && (running.length > 0 || unqueued.length > 0) ? ensureDrain(env) : new Promise(() => void 0);
 				if (await Promise.race([
 					drained.then((value) => value ? "drained" : "idle"),
 					queuedEvent.then(() => "queued"),
@@ -3483,7 +3484,7 @@ function createSettlementDrain({ opts, ledger, unwatchWorker, bus, analysis, map
 		return true;
 	};
 	const settleCommitted = async (workerId) => {
-		if (hooked.has(workerId)) return;
+		if (hooked.has(workerId) || opts.scope.view.nodes.some((node) => node.id === workerId)) return;
 		const settled = opts.scope.resume?.settled.find((s) => s.handle.id === workerId);
 		if (settled === void 0) throw new Error(`committed worker ${workerId} has no settlement in the resumed journal`);
 		hooked.add(workerId);
@@ -4366,7 +4367,7 @@ function spawnWorkerTool(ctx) {
 	const { profileTable } = ctx;
 	return {
 		name: "spawn_worker",
-		description: "Start a worker the driver will drive. `profile` is the worker or another driver; `task` is what it should do. Reserves budget from the conserved pool and fails closed. Pass an optional `budget` (per-field) to give a sub-task more or less than the default — it merges over the per-worker default; the conserved pool is still the hard fence. Each worker reserves its whole budget when it starts, so the pool divided by the per-worker budget is how many run at once: to run a wide team at once, give each worker less. When every worker slot is busy, or the pool cannot cover the budget until your running workers return what they hold, the worker is admitted with `status: \"queued\"` and starts on its own when a slot and its budget free — it is never refused for concurrency, so spawn all the work you want done, then end your turn: you are woken with each result. A queued worker whose budget never frees settles down as budget-exhausted. Pass a `key` naming the assignment to make it run-once ACROSS restarts: a key that already completed returns the finished result (`resumed: \"completed\"` — no work re-runs, nothing is spent). A keyed worker that settled with a `budgetStop` keeps its session for a while: spawn the same key with a larger `budget` and a new worker continues that same session where it stopped (`resumed: \"continued\"`, `priorWorkerId`), or cancel_worker the stopped worker to release it. A key whose prior attempt failed (`down`) spawns fresh and says so (`resumed: \"retried\"`), and a key the process died with IN FLIGHT retries under the same key when the executor provably died with the process (an inline worker — the same `resumed: \"retried\"`, naming the interruption). A key with no terminal receipt whose execution may still exist elsewhere (sandbox, CLI bridge, router) is refused (`error: \"in-doubt\"`) until its exact prior execution is recovered. A key still running is refused (`error: \"duplicate-key\"`). Returns `freeSlots`: how many MORE workers start at once (`null` = no slot bound), and `queued`: how many of your workers wait for a slot. Parallel workers finish the run sooner than one at a time." + (profileTable === void 0 ? "" : " This run has a profiles table: pass `profile` as one of the table's names to run that exact profile, or write a new profile under a name the table does not hold."),
+		description: "Start a worker the driver will drive. `profile` is the worker or another driver; `task` is what it should do. Reserves budget from the conserved pool and fails closed. Pass an optional `budget` (per-field) to give a sub-task more or less than the default — it merges over the per-worker default; the conserved pool is still the hard fence. Each worker reserves only the channels capped by the pool. workerSlots sets concurrency. A funded worker waits with `status: \"queued\"` when every slot is busy and starts when one frees. A new worker whose budget cannot fit is refused immediately. Wait for settlements or request a smaller allocation before trying again. End your turn to be woken with results. Pass a `key` naming the assignment to make it run-once ACROSS restarts: a key that already completed returns the finished result (`resumed: \"completed\"` — no work re-runs, nothing is spent). A keyed worker that settled with a `budgetStop` keeps its session for a while: spawn the same key with a larger `budget` and a new worker continues that same session where it stopped (`resumed: \"continued\"`, `priorWorkerId`), or cancel_worker the stopped worker to release it. A key whose prior attempt failed (`down`) spawns fresh and says so (`resumed: \"retried\"`), and a key the process died with IN FLIGHT retries under the same key when the executor provably died with the process (an inline worker — the same `resumed: \"retried\"`, naming the interruption). A key with no terminal receipt whose execution may still exist elsewhere (sandbox, CLI bridge, router) is refused (`error: \"in-doubt\"`) until its exact prior execution is recovered. A key still running is refused (`error: \"duplicate-key\"`). Returns `freeSlots`: how many MORE workers start at once (`null` = no slot bound), and `queued`: how many of your workers wait for a slot. Parallel workers finish the run sooner than one at a time." + (profileTable === void 0 ? "" : " This run has a profiles table: pass `profile` as one of the table's names to run that exact profile, or write a new profile under a name the table does not hold."),
 		inputSchema: {
 			type: "object",
 			properties: {
@@ -4486,7 +4487,7 @@ async function spawnWorkerHandler(ctx, raw) {
 function observeAgentTool(ctx) {
 	return {
 		name: "observe_agent",
-		description: "Inspect a worker WHILE IT RUNS, not only after it finishes: status, spend so far, and `progress` — how long since it last did anything (`idleMs`), whether that counts as stalled, how many turns it has taken, the last tools/files it touched (`recentActivity`), what its executor CHANGED about the profile you gave it (`derived` — an MCP config it materialized, an extension it had to add), whether a steer can even reach it (`steerable`), and how many steers it has not yet read (`pendingMessages`). For a worker that leads its own team, `progress.team` counts the agents below it (working, queued, done, down) and its idle clock reads the newest activity anywhere in that team, so a lead whose workers are busy is not stalled. A queued worker waits for a worker slot and is never stalled. A worker whose executor has FINISHED but whose settlement you have not yet drained reports `settlementPending` with its terminal kind; its `status` still reads running until your next wake delivers it, so end your turn rather than observing again. The settled output artifact is returned once drained: what the worker submitted, often a plain string, else its provider result. Omit `outputPath` to read it whole; [\"content\"] selects a provider result without its events. Large outputs return a bounded JSON `outputPage`; repeat with `outputOffset: outputPage.nextOffset` until it is null, concatenate page text, then parse the JSON. Offsets and limits count UTF-16 characters. The full artifact stays retained; an outRef is a content address, not a workspace path. Use this BEFORE steer_agent: a steer is only worth sending when the progress says the worker is on the wrong path or has stopped making any.",
+		description: "Inspect a worker WHILE IT RUNS, not only after it finishes: status, spend so far, and `progress` — how long since it last did anything (`idleMs`), whether that counts as stalled, how many turns it has taken, the last tools/files it touched (`recentActivity`), what its executor CHANGED about the profile you gave it (`derived` — an MCP config it materialized, an extension it had to add), whether a steer can even reach it (`steerable`), and how many steers it has not yet read (`pendingMessages`). For a worker that leads its own team, `progress.team` counts the agents below it (working, queued, done, down) and its idle clock reads the newest activity anywhere in that team, so a lead whose workers are busy is not stalled. A queued worker waits for a worker slot and is never stalled. A completed worker reports its terminal status and output before your next wake. `settlementPending` means its event has not yet been delivered. The output is what the worker submitted, often a plain string, else its provider result. Omit `outputPath` to read it whole; [\"content\"] selects a provider result without its events. Large outputs return a bounded JSON `outputPage`; repeat with `outputOffset: outputPage.nextOffset` until it is null, concatenate page text, then parse the JSON. Offsets and limits count UTF-16 characters. The full artifact stays retained; an outRef is a content address, not a workspace path. Use this BEFORE steer_agent: a steer is only worth sending when the progress says the worker is on the wrong path or has stopped making any.",
 		inputSchema: {
 			type: "object",
 			properties: {
@@ -4630,7 +4631,7 @@ async function observeAgentHandler(ctx, raw) {
 		progress: progress ?? null,
 		...pending ? {
 			settlementPending: pending,
-			hint: `this worker has finished (${pending.kind}); its settlement is queued for your next wake — end your turn to receive it, observing again will not change this`
+			hint: `this worker's ${pending.kind} settlement awaits delivery at your next wake`
 		} : {}
 	};
 }
@@ -5133,4 +5134,4 @@ function createResumeReplay({ opts, bus, ledger, analysis, projectSettled }) {
 }
 export { downMessageRefusalReasons as a, createSteerAcknowledger as c, coordinationVerbNames as d, createFileRunContext as f, watchTrace as i, budgetOverspendText as l, withRunContext as m, createCoordinationToolsForManager as n, createEventBus as o, createInMemoryRunContext as p, defaultToolDetectors as r, createCancelAcknowledger as s, createCoordinationTools as t, normalizeAnalyzeOnSettle as u };
 
-//# sourceMappingURL=coordination-manager-C-ZoeZ73.js.map
+//# sourceMappingURL=coordination-manager-RSJg5GmY.js.map