niceeval 0.13.1 → 0.13.2

package/dist/runner/attempt.d.cts

@@ -58,6 +58,13 @@ export interface RunAttemptEffectOptions<SealRequirements = never> {
      * 分类照常决议、只是无人消费。回调必须不抛错:它跑在 attempt 的失败路径上,不得掩盖原始失败。
      */
     onFailureClass?: (declaration: AttemptFailureDeclaration) => void;
+    /**
+     * A fresh Sandbox owns its physical Scope inside this Attempt. Its lifecycle
+     * hooks normally turn cleanup errors into diagnostics so the remaining
+     * finalizers can run; an Experiment with sharedState must still retain that
+     * terminal cleanup fact until it decides whether releasing its lease is safe.
+     */
+    onFreshSandboxCleanupFailure?: (failure: FreshSandboxCleanupFailure) => void;
     /**
      * Invocation coordination may consume the single sealed Assert-first result
      * here and pass it to EvaluationRecordContract. The Attempt never opens a
@@ -71,7 +78,12 @@ export interface RunAttemptEffectOptions<SealRequirements = never> {
         reuseOrdinal: number;
     };
 }
-export declare function runAttemptEffect<SealRequirements, AttachmentError, AttachmentRequirements>(a: Attempt, opts: RunOptions<AttachmentError, AttachmentRequirements>, sandboxSem: Effect.Semaphore, { buildLocators, runTiming, parentSignal, invocationSignal, onPhase, concurrencySlot, onFailureClass, onSealedEvaluation, reusedSandbox, }: RunAttemptEffectOptions<SealRequirements>): Effect.Effect<EvalResult, never, SealRequirements | Exclude<SealRequirements, import("effect/Scope").Scope>>;
+/** Internal handoff from a fresh Attempt Scope to its owning Experiment lifecycle. */
+export interface FreshSandboxCleanupFailure {
+    readonly stage: "sandbox.lifecycle" | "sandbox.stop";
+    readonly error: Error;
+}
+export declare function runAttemptEffect<SealRequirements, AttachmentError, AttachmentRequirements>(a: Attempt, opts: RunOptions<AttachmentError, AttachmentRequirements>, sandboxSem: Effect.Semaphore, { buildLocators, runTiming, parentSignal, invocationSignal, onPhase, concurrencySlot, onFailureClass, onFreshSandboxCleanupFailure, onSealedEvaluation, reusedSandbox, }: RunAttemptEffectOptions<SealRequirements>): Effect.Effect<EvalResult, never, SealRequirements | Exclude<SealRequirements, import("effect/Scope").Scope>>;
 /** Runner-originated failures before Fact folding still produce a closed Score terminal outcome. */
 export declare function scoreFactOutcomeForAttemptError(error: AttemptError): import("../assertions/types.cjs").ScoreFactAttemptOutcome;
 /** 把 catch 到的 e(body 里 test()/setup 抛错,或 Sample 层 squash 出来的原始错误)折成

package/dist/runner/attempt.d.mts

@@ -58,6 +58,13 @@ export interface RunAttemptEffectOptions<SealRequirements = never> {
      * 分类照常决议、只是无人消费。回调必须不抛错:它跑在 attempt 的失败路径上,不得掩盖原始失败。
      */
     onFailureClass?: (declaration: AttemptFailureDeclaration) => void;
+    /**
+     * A fresh Sandbox owns its physical Scope inside this Attempt. Its lifecycle
+     * hooks normally turn cleanup errors into diagnostics so the remaining
+     * finalizers can run; an Experiment with sharedState must still retain that
+     * terminal cleanup fact until it decides whether releasing its lease is safe.
+     */
+    onFreshSandboxCleanupFailure?: (failure: FreshSandboxCleanupFailure) => void;
     /**
      * Invocation coordination may consume the single sealed Assert-first result
      * here and pass it to EvaluationRecordContract. The Attempt never opens a
@@ -71,7 +78,12 @@ export interface RunAttemptEffectOptions<SealRequirements = never> {
         reuseOrdinal: number;
     };
 }
-export declare function runAttemptEffect<SealRequirements, AttachmentError, AttachmentRequirements>(a: Attempt, opts: RunOptions<AttachmentError, AttachmentRequirements>, sandboxSem: Effect.Semaphore, { buildLocators, runTiming, parentSignal, invocationSignal, onPhase, concurrencySlot, onFailureClass, onSealedEvaluation, reusedSandbox, }: RunAttemptEffectOptions<SealRequirements>): Effect.Effect<EvalResult, never, SealRequirements | Exclude<SealRequirements, import("effect/Scope").Scope>>;
+/** Internal handoff from a fresh Attempt Scope to its owning Experiment lifecycle. */
+export interface FreshSandboxCleanupFailure {
+    readonly stage: "sandbox.lifecycle" | "sandbox.stop";
+    readonly error: Error;
+}
+export declare function runAttemptEffect<SealRequirements, AttachmentError, AttachmentRequirements>(a: Attempt, opts: RunOptions<AttachmentError, AttachmentRequirements>, sandboxSem: Effect.Semaphore, { buildLocators, runTiming, parentSignal, invocationSignal, onPhase, concurrencySlot, onFailureClass, onFreshSandboxCleanupFailure, onSealedEvaluation, reusedSandbox, }: RunAttemptEffectOptions<SealRequirements>): Effect.Effect<EvalResult, never, SealRequirements | Exclude<SealRequirements, import("effect/Scope").Scope>>;
 /** Runner-originated failures before Fact folding still produce a closed Score terminal outcome. */
 export declare function scoreFactOutcomeForAttemptError(error: AttemptError): import("../assertions/types.mjs").ScoreFactAttemptOutcome;
 /** 把 catch 到的 e(body 里 test()/setup 抛错,或 Sample 层 squash 出来的原始错误)折成

package/dist/runner/attempt.d.ts

@@ -58,6 +58,13 @@ export interface RunAttemptEffectOptions<SealRequirements = never> {
      * 分类照常决议、只是无人消费。回调必须不抛错:它跑在 attempt 的失败路径上,不得掩盖原始失败。
      */
     onFailureClass?: (declaration: AttemptFailureDeclaration) => void;
+    /**
+     * A fresh Sandbox owns its physical Scope inside this Attempt. Its lifecycle
+     * hooks normally turn cleanup errors into diagnostics so the remaining
+     * finalizers can run; an Experiment with sharedState must still retain that
+     * terminal cleanup fact until it decides whether releasing its lease is safe.
+     */
+    onFreshSandboxCleanupFailure?: (failure: FreshSandboxCleanupFailure) => void;
     /**
      * Invocation coordination may consume the single sealed Assert-first result
      * here and pass it to EvaluationRecordContract. The Attempt never opens a
@@ -71,7 +78,12 @@ export interface RunAttemptEffectOptions<SealRequirements = never> {
         reuseOrdinal: number;
     };
 }
-export declare function runAttemptEffect<SealRequirements, AttachmentError, AttachmentRequirements>(a: Attempt, opts: RunOptions<AttachmentError, AttachmentRequirements>, sandboxSem: Effect.Semaphore, { buildLocators, runTiming, parentSignal, invocationSignal, onPhase, concurrencySlot, onFailureClass, onSealedEvaluation, reusedSandbox, }: RunAttemptEffectOptions<SealRequirements>): Effect.Effect<EvalResult, never, SealRequirements | Exclude<SealRequirements, import("effect/Scope").Scope>>;
+/** Internal handoff from a fresh Attempt Scope to its owning Experiment lifecycle. */
+export interface FreshSandboxCleanupFailure {
+    readonly stage: "sandbox.lifecycle" | "sandbox.stop";
+    readonly error: Error;
+}
+export declare function runAttemptEffect<SealRequirements, AttachmentError, AttachmentRequirements>(a: Attempt, opts: RunOptions<AttachmentError, AttachmentRequirements>, sandboxSem: Effect.Semaphore, { buildLocators, runTiming, parentSignal, invocationSignal, onPhase, concurrencySlot, onFailureClass, onFreshSandboxCleanupFailure, onSealedEvaluation, reusedSandbox, }: RunAttemptEffectOptions<SealRequirements>): Effect.Effect<EvalResult, never, SealRequirements | Exclude<SealRequirements, import("effect/Scope").Scope>>;
 /** Runner-originated failures before Fact folding still produce a closed Score terminal outcome. */
 export declare function scoreFactOutcomeForAttemptError(error: AttemptError): import("../assertions/types.js").ScoreFactAttemptOutcome;
 /** 把 catch 到的 e(body 里 test()/setup 抛错,或 Sample 层 squash 出来的原始错误)折成

package/dist/runner/config-identity.cjs

@@ -28,12 +28,14 @@ function freezeJson(value) {
     return Object.freeze(Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, freezeJson(entry)])));
 }
 function freezeConfigIdentity(identity) {
+    const { sharedState, ...withoutSharedState } = identity;
     return Object.freeze({
-        ...identity,
+        ...withoutSharedState,
         model: Object.freeze(identity.model),
         reasoningEffort: Object.freeze(identity.reasoningEffort),
         flags: freezeJson({ ...identity.flags }),
         plugins: freezeJson(identity.plugins),
+        ...(sharedState === undefined ? {} : { sharedState }),
         sandboxLayer: freezeJson(identity.sandboxLayer),
         judge: identity.judge._tag === "Unconfigured"
             ? Object.freeze({ _tag: "Unconfigured" })
@@ -104,6 +106,7 @@ function configIdentityForRun(run, plan, judge = run.judge) {
         flags: run.flags,
         plugins: run.pluginBehavior ?? [],
         sandboxReuse: run.sandboxReuse ?? false,
+        ...(run.sharedState === undefined ? {} : { sharedState: run.sharedState.key }),
         sandboxLayer: (0, link_ts_1.sandboxLayerIdentityFor)(plan.pair, "experiment"),
         judge: judgeIdentity(judge),
         agentInstalls: agentInstallPlansForRun(run),
@@ -124,13 +127,14 @@ function configIdentityFromResult(result) {
         flags: exp.flags ?? {},
         plugins: exp.plugins ?? [],
         sandboxReuse: exp.sandboxReuse ?? false,
+        ...(exp.sharedState === undefined ? {} : { sharedState: exp.sharedState.key }),
         sandboxLayer: exp.sandboxLayer,
         judge: judgeIdentity(exp.judge),
         agentInstalls: exp.agentInstalls,
     });
 }
 /**
- * 身份 → 字段路径表。可省略配置先归一为完整 ADT，再由 `_tag` 决定是否产生字段路径。
+ * 身份 → 字段路径表。真正未声明的配置不会生成对象键或字段路径。
  */
 function flatten(identity) {
     const out = new Map();
@@ -143,6 +147,8 @@ function flatten(identity) {
     putDeclared("model", identity.model);
     putDeclared("reasoningEffort", identity.reasoningEffort);
     put("sandboxReuse", identity.sandboxReuse);
+    if (identity.sharedState !== undefined)
+        put("sharedState.key", identity.sharedState);
     for (const [key, value] of Object.entries(identity.flags))
         put(`flags.${key}`, value);
     put("plugins", identity.plugins);
@@ -242,6 +248,7 @@ function counterfactualConfigIdentity(current, historical, accepted) {
         else
             agentInstalls = historical.agentInstalls;
     }
+    const sharedState = accepted.has("config:sharedState.key") ? historical.sharedState : current.sharedState;
     return freezeConfigIdentity({
         agent: accepted.has("config:agent") ? historical.agent : current.agent,
         model: accepted.has("config:model") ? historical.model : current.model,
@@ -251,6 +258,7 @@ function counterfactualConfigIdentity(current, historical, accepted) {
         flags,
         plugins,
         sandboxReuse: accepted.has("config:sandboxReuse") ? historical.sandboxReuse : current.sandboxReuse,
+        ...(sharedState === undefined ? {} : { sharedState }),
         sandboxLayer,
         judge,
         agentInstalls,

package/dist/runner/config-identity.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"config-identity.js","sourceRoot":"","sources":["config-identity.ts"],"names":[],"mappings":";;AAkEA,4CAEC;AACD,gDAEC;AACD,gDAEC;AAiDD,0DAaC;AAgBD,oDAYC;AAKD,4DAeC;AAgCD,kDAKC;AAQD,oCAyBC;AAWD,oEAiDC;AAjTD,gDAA6D;AAyD7D,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,EAAU;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AACD,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,IAAY;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AACD,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAU;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,SAAS,UAAU,CAA0B,KAAY;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3C,OAAO,KAAK,CAAC;IACjB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAU,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAU,CAAC;AAC7H,CAAC;AACD,SAAS,oBAAoB,CAAC,QAAwB;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,GAAG,QAAQ;QACX,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;QACxD,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/C,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;YACzC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAuB,EAAE,CAAC;YAClD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,YAAqB;gBAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC9C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;aACrD,CAAC;QACN,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;KACzF,CAAC,CAAC;AACP,CAAC;AACD,SAAS,iBAAiB,CAAC,IAAmB,EAAE,KAAoB;IAChE,OAAO,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AAC5G,CAAC;AACD,SAAS,iBAAiB,CAAC,SAAqC;IAC5D,IAAI,SAAS,KAAK,SAAS;QACvB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/B,OAAO;QACH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACN,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC/B,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;YACnC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;SACxC;QACD,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,SAAS,EAAE,SAAS,CAAC,SAAS,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;YACjB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,EAAE;KAC7D,CAAC;AACN,CAAC;AACD,kEAAkE;AAClE,SAAgB,uBAAuB,CAAC,GAAa;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;QAChE,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE;YACJ,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;YAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;SACrC;QACD,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC7H,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AACD,SAAS,cAAc,CAAC,KAAyB;IAC7C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACrF,CAAC;AACD,SAAS,aAAa,CAAC,KAAoD;IACvE,OAAO,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE;QAC1B,CAAC,CAAC;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;YAClC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE;SAClH,CAAC;AACV,CAAC;AACD,oBAAoB;AACpB,SAAgB,oBAAoB,CAAC,GAAa,EAAE,IAAmB,EAAE,QAAuD,GAAG,CAAC,KAAK;IACrI,OAAO,oBAAoB,CAAC;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;QACrB,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACjC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,KAAK;QACvC,YAAY,EAAE,IAAA,iCAAuB,EAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC9D,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;QAC3B,aAAa,EAAE,uBAAuB,CAAC,GAAG,CAAC;KAC9C,CAAC,CAAC;AACP,CAAC;AACD;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,MAAkB;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QACjB,OAAO,SAAS,CAAC;IACrB,OAAO,oBAAoB,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,KAAK;QACvC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;KACnC,CAAC,CAAC;AACP,CAAC;AACD;;GAEG;AACH,SAAS,OAAO,CAAC,QAAwB;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAgB,EAAQ,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,CAA0B,IAAY,EAAE,KAAiC,EAAQ,EAAE;QACnG,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAC3B,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzD,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrD,GAAG,CAAC,SAAS,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/B,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACvC,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrD,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACf,CAAC;AACD;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,QAAwB;IAIxD,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClC,CAAC;AACD,gGAAgG;AAChG,SAAS,cAAc,CAAC,KAAgB;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AACD;;GAEG;AACH,SAAgB,YAAY,CAAC,UAA0B,EAAE,OAAuB;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnF,SAAS;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,OAAO,IAAI,SAAS,KAAK,SAAS;YAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,IAAI,OAAO,KAAK,SAAS;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,GAAG,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,UAAU,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO;YACR,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;aAC9D,IAAI,CAAC,KAAK;YACX,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC;;YAEnE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,SAAU,CAAC,EAAE,cAAc,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AACD;;;;;;;;;GASG;AACH,SAAgB,4BAA4B,CAAC,OAAuB,EAAE,UAA0B,EAAE,QAA6B;IAC3H,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAyC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IACzE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;YACrC,SAAS;QACb,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS;gBACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,GAAG,CAAC,CAAC;YACjE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;;YAEG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACxC,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC1C,MAAM,cAAc,GAAwE;QACxF,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe;KACtD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,UAAU,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxE,SAAS;QACb,IAAI,KAAK,KAAK,cAAc;YACxB,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;aACtC,IAAI,KAAK,KAAK,SAAS;YACxB,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;aAC5B,IAAI,KAAK,KAAK,OAAO;YACtB,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;;YAEzB,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IACjD,CAAC;IACD,OAAO,oBAAoB,CAAC;QACxB,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;QACtE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;QACtE,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACnD,CAAC,CAAC,UAAU,CAAC,eAAe;YAC5B,CAAC,CAAC,OAAO,CAAC,eAAe;QAC7B,KAAK;QACL,OAAO;QACP,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;QAClG,YAAY;QACZ,KAAK;QACL,aAAa;KAChB,CAAC,CAAC;AACP,CAAC","sourcesContent":["// 配置身份的字段级投影:`configHash` 的哈希输入本身,加上「同一份输入怎样按字段路径比对」。\n//\n// 哈希只回答「等不等」,回答不了「哪里变了」。`--accept config:<字段路径>` 与 `--dry` 的逐条\n// 作废原因都要后一个答案,而两侧必须来自同一份字段集合——configHash 里有的字段,这里就能按\n// 点路径指名;这里指不出来的路径,`--accept` 也就没有对应的差异可授权。\n//\n// 历史侧的同名投影从落盘重建(`ExperimentRunInfo` + 结果顶层的 agent/model),这正是\n// 「进 configHash 的字段必须落进 run.json」那条规则存在的理由。\nimport type { LinkedRunPlan } from \"../sandbox/plan.ts\";\nimport { sandboxLayerIdentityFor } from \"../sandbox/link.ts\";\nimport type { AgentIdentity, AgentInstaller } from \"../agents/types.ts\";\nimport type { EvalResult, JsonValue, JudgeConfig, ResolvedJudgeConfig } from \"../types.ts\";\nimport type { AgentRun } from \"./types.ts\";\n/**\n * 一次运行的**配置身份**:`computeConfigHash` 的哈希输入,字段集合与\n * docs/feature/experiments/cache.md「指纹:两个哈希嵌套」逐字对应。\n *\n * 键恒存在(值可以是 `undefined`):稳定序列化把键本身也算进字节,少一个键就是另一个哈希。\n * 新增公开配置字段时只在这里裁决一次「进不进 configHash」。\n */\nexport interface ConfigIdentity {\n    readonly agent: string;\n    readonly model: DeclaredConfigValue<string>;\n    readonly reasoningEffort: DeclaredConfigValue<string>;\n    readonly flags: Readonly<globalThis.Record<string, JsonValue>>;\n    /** Credential-free Experiment Plugin and receiver behavior. */\n    readonly plugins: JsonValue;\n    readonly sandboxReuse: boolean;\n    /** Experiment 作者 layer 身份；物理 provider plan 属于逐 Eval fingerprint，不进入 Run 级身份。 */\n    readonly sandboxLayer: JsonValue;\n    readonly judge: JudgeConfigIdentity;\n    /** 声明顺序、精确 installer 配对、安装模式与计划目标平台的完整静态身份。 */\n    readonly agentInstalls: readonly JsonValue[];\n}\nexport type DeclaredConfigValue<Value> = {\n    readonly _tag: \"Omitted\";\n} | {\n    readonly _tag: \"Configured\";\n    readonly value: Value;\n};\nexport type JudgeConfigIdentity = {\n    readonly _tag: \"Unconfigured\";\n} | {\n    readonly _tag: \"Configured\";\n    readonly model: DeclaredConfigValue<string>;\n    readonly baseUrl: DeclaredConfigValue<string>;\n    readonly apiKeyEnv: DeclaredConfigValue<string>;\n    readonly timeoutMs: DeclaredConfigValue<number>;\n};\n/** manifest 相减得出的一条具名差异;`selector` 原样可复制进 `--accept`。 */\nexport type ConfigFieldDelta = {\n    readonly _tag: \"Added\";\n    readonly selector: string;\n    readonly from?: never;\n    readonly to: string;\n} | {\n    readonly _tag: \"Removed\";\n    readonly selector: string;\n    readonly from: string;\n    readonly to?: never;\n} | {\n    readonly _tag: \"Changed\";\n    readonly selector: string;\n    readonly from: string;\n    readonly to: string;\n};\nexport function addedConfigField(selector: string, to: string): ConfigFieldDelta {\n    return Object.freeze({ _tag: \"Added\", selector, to });\n}\nexport function removedConfigField(selector: string, from: string): ConfigFieldDelta {\n    return Object.freeze({ _tag: \"Removed\", selector, from });\n}\nexport function changedConfigField(selector: string, from: string, to: string): ConfigFieldDelta {\n    return Object.freeze({ _tag: \"Changed\", selector, from, to });\n}\nfunction freezeJson<Value extends JsonValue>(value: Value): Value {\n    if (value === null || typeof value !== \"object\")\n        return value;\n    if (Array.isArray(value)) {\n        return Object.freeze(value.map((entry) => freezeJson(entry))) as Value;\n    }\n    return Object.freeze(Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, freezeJson(entry)]))) as Value;\n}\nfunction freezeConfigIdentity(identity: ConfigIdentity): ConfigIdentity {\n    return Object.freeze({\n        ...identity,\n        model: Object.freeze(identity.model),\n        reasoningEffort: Object.freeze(identity.reasoningEffort),\n        flags: freezeJson({ ...identity.flags }),\n        plugins: freezeJson(identity.plugins),\n        sandboxLayer: freezeJson(identity.sandboxLayer),\n        judge: identity.judge._tag === \"Unconfigured\"\n            ? Object.freeze({ _tag: \"Unconfigured\" as const })\n            : Object.freeze({\n                _tag: \"Configured\" as const,\n                model: Object.freeze(identity.judge.model),\n                baseUrl: Object.freeze(identity.judge.baseUrl),\n                apiKeyEnv: Object.freeze(identity.judge.apiKeyEnv),\n                timeoutMs: Object.freeze(identity.judge.timeoutMs),\n            }),\n        agentInstalls: Object.freeze(identity.agentInstalls.map((entry) => freezeJson(entry))),\n    });\n}\nfunction sameAgentIdentity(left: AgentIdentity, right: AgentIdentity): boolean {\n    return left.agent === right.agent && left.version === right.version && left.revision === right.revision;\n}\nfunction installerIdentity(installer: AgentInstaller | undefined): JsonValue {\n    if (installer === undefined)\n        return { _tag: \"Missing\" };\n    return {\n        _tag: \"Matched\",\n        identity: {\n            agent: installer.identity.agent,\n            version: installer.identity.version,\n            revision: installer.identity.revision,\n        },\n        installMode: installer.installMode,\n        platforms: installer.platforms === undefined\n            ? { _tag: \"All\" }\n            : { _tag: \"Listed\", values: [...installer.platforms] },\n    };\n}\n/** 计划期一次性冻结全部 ensure/installer 配对；运行事实与 staged digest 不反写配置身份。 */\nexport function agentInstallPlansForRun(run: AgentRun): readonly JsonValue[] {\n    const agent = run.agent;\n    if (agent.kind === \"direct\")\n        return Object.freeze([]);\n    return Object.freeze(agent.ensure.map((ensure, index) => freezeJson({\n        order: index,\n        ensure: {\n            agent: ensure.identity.agent,\n            version: ensure.identity.version,\n            revision: ensure.identity.revision,\n        },\n        installer: installerIdentity(agent.installers.find((candidate) => sameAgentIdentity(candidate.identity, ensure.identity))),\n    })));\n}\nfunction declaredString(value: string | undefined): DeclaredConfigValue<string> {\n    return value === undefined ? { _tag: \"Omitted\" } : { _tag: \"Configured\", value };\n}\nfunction judgeIdentity(judge: JudgeConfig | ResolvedJudgeConfig | undefined): JudgeConfigIdentity {\n    return judge === undefined\n        ? { _tag: \"Unconfigured\" }\n        : {\n            _tag: \"Configured\",\n            model: declaredString(judge.model),\n            baseUrl: declaredString(judge.baseUrl),\n            apiKeyEnv: declaredString(judge.apiKeyEnv),\n            timeoutMs: judge.timeoutMs === undefined ? { _tag: \"Omitted\" } : { _tag: \"Configured\", value: judge.timeoutMs },\n        };\n}\n/** 本次解析后配置的身份投影。 */\nexport function configIdentityForRun(run: AgentRun, plan: LinkedRunPlan, judge: JudgeConfig | ResolvedJudgeConfig | undefined = run.judge): ConfigIdentity {\n    return freezeConfigIdentity({\n        agent: run.agent.name,\n        model: declaredString(run.model),\n        reasoningEffort: declaredString(run.reasoningEffort),\n        flags: run.flags,\n        plugins: run.pluginBehavior ?? [],\n        sandboxReuse: run.sandboxReuse ?? false,\n        sandboxLayer: sandboxLayerIdentityFor(plan.pair, \"experiment\"),\n        judge: judgeIdentity(judge),\n        agentInstalls: agentInstallPlansForRun(run),\n    });\n}\n/**\n * 历史条目的同一份投影,从落盘重建。缺 `ExperimentRunInfo`(第三方 harness 写的结果)时\n * 配置面无从重算,返回 `undefined`——差异算不出就如实算不出,不猜。\n */\nexport function configIdentityFromResult(result: EvalResult): ConfigIdentity | undefined {\n    const exp = result.experiment;\n    if (exp === undefined)\n        return undefined;\n    return freezeConfigIdentity({\n        agent: result.agent,\n        model: declaredString(result.model),\n        reasoningEffort: declaredString(exp.reasoningEffort),\n        flags: exp.flags ?? {},\n        plugins: exp.plugins ?? [],\n        sandboxReuse: exp.sandboxReuse ?? false,\n        sandboxLayer: exp.sandboxLayer,\n        judge: judgeIdentity(exp.judge),\n        agentInstalls: exp.agentInstalls,\n    });\n}\n/**\n * 身份 → 字段路径表。可省略配置先归一为完整 ADT，再由 `_tag` 决定是否产生字段路径。\n */\nfunction flatten(identity: ConfigIdentity): Map<string, JsonValue> {\n    const out = new Map<string, JsonValue>();\n    const put = (path: string, value: JsonValue): void => { out.set(path, value); };\n    const putDeclared = <Value extends JsonValue>(path: string, value: DeclaredConfigValue<Value>): void => {\n        if (value._tag === \"Configured\")\n            put(path, value.value);\n    };\n    put(\"agent\", identity.agent);\n    putDeclared(\"model\", identity.model);\n    putDeclared(\"reasoningEffort\", identity.reasoningEffort);\n    put(\"sandboxReuse\", identity.sandboxReuse);\n    for (const [key, value] of Object.entries(identity.flags))\n        put(`flags.${key}`, value);\n    put(\"plugins\", identity.plugins);\n    put(\"sandboxLayer\", identity.sandboxLayer);\n    if (identity.judge._tag === \"Configured\") {\n        putDeclared(\"judge.model\", identity.judge.model);\n        putDeclared(\"judge.baseUrl\", identity.judge.baseUrl);\n        putDeclared(\"judge.apiKeyEnv\", identity.judge.apiKeyEnv);\n        putDeclared(\"judge.timeoutMs\", identity.judge.timeoutMs);\n    }\n    put(\"agentInstalls\", [...identity.agentInstalls]);\n    return out;\n}\n/**\n * 身份的字段路径投影,供 manifest 的配置面落盘(见 `runner/manifest.ts`)。与差异比对读的是\n * 同一个 `flatten`:清单里指得出的路径,`--accept config:<路径>` 就授权得了,两侧不可能分叉。\n */\nexport function configIdentityPaths(identity: ConfigIdentity): Array<[\n    string,\n    JsonValue\n]> {\n    return [...flatten(identity)];\n}\n/** 值的字符串投影:差异明细与 `carriedAccepting` 留痕共用完整值,有界呈现是人读 renderer(`feedback/human.ts`)的职责,不在构造点做。 */\nfunction serializeValue(value: JsonValue): string {\n    return typeof value === \"string\" ? value : JSON.stringify(value);\n}\n/**\n * 历史侧与本次侧的字段级差异,按 selector 字典序。键的增删同样是一条差异。\n */\nexport function configDeltas(historical: ConfigIdentity, current: ConfigIdentity): ConfigFieldDelta[] {\n    const from = flatten(historical);\n    const to = flatten(current);\n    const paths = [...new Set([...from.keys(), ...to.keys()])].sort();\n    const out: ConfigFieldDelta[] = [];\n    for (const path of paths) {\n        const hasFrom = from.has(path);\n        const hasTo = to.has(path);\n        if (hasFrom && hasTo && JSON.stringify(from.get(path)) === JSON.stringify(to.get(path)))\n            continue;\n        const fromValue = from.get(path);\n        const toValue = to.get(path);\n        if (hasFrom && fromValue === undefined)\n            throw new Error(`Missing historical config value for ${path}.`);\n        if (hasTo && toValue === undefined)\n            throw new Error(`Missing current config value for ${path}.`);\n        const selector = `config:${path}`;\n        if (!hasFrom)\n            out.push(addedConfigField(selector, serializeValue(toValue!)));\n        else if (!hasTo)\n            out.push(removedConfigField(selector, serializeValue(fromValue!)));\n        else\n            out.push(changedConfigField(selector, serializeValue(fromValue!), serializeValue(toValue!)));\n    }\n    return out;\n}\n/**\n * 反事实身份:把本次身份里**被授权的那些字段**换回历史值,其余原样。\n *\n * 换出来的身份再算一次指纹,与历史条目落盘的那个相等,才证明「两侧只差这些被授权的字段」——\n * 授权因此不是绕开判据,而是把判据挪到一个明确写下来的口径上重算一次。\n *\n * `sandbox` / `judge` 是整对象进哈希的分组:键在不在本身改变字节,逐字段拼回去会造出两侧都\n * 不存在的形状。分组内**每一条**差异都被授权才整体换回历史对象,否则保持本次值——那样指纹\n * 自然对不上,条目照常重跑,不会静默跨过没被授权的那半。\n */\nexport function counterfactualConfigIdentity(current: ConfigIdentity, historical: ConfigIdentity, accepted: ReadonlySet<string>): ConfigIdentity {\n    const differing = new Set(configDeltas(historical, current).map((d) => d.selector));\n    const flags: globalThis.Record<string, JsonValue> = { ...current.flags };\n    for (const selector of accepted) {\n        if (!selector.startsWith(\"config:flags.\"))\n            continue;\n        const key = selector.slice(\"config:flags.\".length);\n        if (Object.hasOwn(historical.flags, key)) {\n            const value = historical.flags[key];\n            if (value === undefined)\n                throw new Error(`Missing historical flag value for ${key}.`);\n            flags[key] = value;\n        }\n        else\n            delete flags[key];\n    }\n    let sandboxLayer = current.sandboxLayer;\n    let plugins = current.plugins;\n    let judge = current.judge;\n    let agentInstalls = current.agentInstalls;\n    const rollbackGroups: readonly (\"sandboxLayer\" | \"plugins\" | \"judge\" | \"agentInstalls\")[] = [\n        \"sandboxLayer\", \"plugins\", \"judge\", \"agentInstalls\",\n    ];\n    for (const group of rollbackGroups) {\n        const paths = [...differing].filter((selector) => selector === `config:${group}` || selector.startsWith(`config:${group}.`));\n        if (paths.length === 0 || !paths.every((selector) => accepted.has(selector)))\n            continue;\n        if (group === \"sandboxLayer\")\n            sandboxLayer = historical.sandboxLayer;\n        else if (group === \"plugins\")\n            plugins = historical.plugins;\n        else if (group === \"judge\")\n            judge = historical.judge;\n        else\n            agentInstalls = historical.agentInstalls;\n    }\n    return freezeConfigIdentity({\n        agent: accepted.has(\"config:agent\") ? historical.agent : current.agent,\n        model: accepted.has(\"config:model\") ? historical.model : current.model,\n        reasoningEffort: accepted.has(\"config:reasoningEffort\")\n            ? historical.reasoningEffort\n            : current.reasoningEffort,\n        flags,\n        plugins,\n        sandboxReuse: accepted.has(\"config:sandboxReuse\") ? historical.sandboxReuse : current.sandboxReuse,\n        sandboxLayer,\n        judge,\n        agentInstalls,\n    });\n}\n"]}
+{"version":3,"file":"config-identity.js","sourceRoot":"","sources":["config-identity.ts"],"names":[],"mappings":";;AAoEA,4CAEC;AACD,gDAEC;AACD,gDAEC;AAmDD,0DAaC;AAgBD,oDAaC;AAKD,4DAgBC;AAkCD,kDAKC;AAQD,oCAyBC;AAWD,oEAmDC;AA3TD,gDAA6D;AA2D7D,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,EAAU;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AACD,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,IAAY;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AACD,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAU;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,SAAS,UAAU,CAA0B,KAAY;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3C,OAAO,KAAK,CAAC;IACjB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAU,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAU,CAAC;AAC7H,CAAC;AACD,SAAS,oBAAoB,CAAC,QAAwB;IAClD,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,GAAG,QAAQ,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,GAAG,kBAAkB;QACrB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;QACxD,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/C,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;YACzC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAuB,EAAE,CAAC;YAClD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,YAAqB;gBAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC9C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;aACrD,CAAC;QACN,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;KACzF,CAAC,CAAC;AACP,CAAC;AACD,SAAS,iBAAiB,CAAC,IAAmB,EAAE,KAAoB;IAChE,OAAO,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AAC5G,CAAC;AACD,SAAS,iBAAiB,CAAC,SAAqC;IAC5D,IAAI,SAAS,KAAK,SAAS;QACvB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/B,OAAO;QACH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACN,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC/B,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;YACnC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;SACxC;QACD,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,SAAS,EAAE,SAAS,CAAC,SAAS,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;YACjB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,EAAE;KAC7D,CAAC;AACN,CAAC;AACD,kEAAkE;AAClE,SAAgB,uBAAuB,CAAC,GAAa;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;QAChE,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE;YACJ,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;YAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;SACrC;QACD,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC7H,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AACD,SAAS,cAAc,CAAC,KAAyB;IAC7C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACrF,CAAC;AACD,SAAS,aAAa,CAAC,KAAoD;IACvE,OAAO,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE;QAC1B,CAAC,CAAC;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;YAClC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE;SAClH,CAAC;AACV,CAAC;AACD,oBAAoB;AACpB,SAAgB,oBAAoB,CAAC,GAAa,EAAE,IAAmB,EAAE,QAAuD,GAAG,CAAC,KAAK;IACrI,OAAO,oBAAoB,CAAC;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;QACrB,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACjC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,KAAK;QACvC,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9E,YAAY,EAAE,IAAA,iCAAuB,EAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC9D,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;QAC3B,aAAa,EAAE,uBAAuB,CAAC,GAAG,CAAC;KAC9C,CAAC,CAAC;AACP,CAAC;AACD;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,MAAkB;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QACjB,OAAO,SAAS,CAAC;IACrB,OAAO,oBAAoB,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,KAAK;QACvC,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9E,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;KACnC,CAAC,CAAC;AACP,CAAC;AACD;;GAEG;AACH,SAAS,OAAO,CAAC,QAAwB;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAgB,EAAQ,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,CAA0B,IAAY,EAAE,KAAiC,EAAQ,EAAE;QACnG,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAC3B,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzD,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;QAClC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrD,GAAG,CAAC,SAAS,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/B,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACvC,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrD,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACf,CAAC;AACD;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,QAAwB;IAIxD,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClC,CAAC;AACD,gGAAgG;AAChG,SAAS,cAAc,CAAC,KAAgB;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AACD;;GAEG;AACH,SAAgB,YAAY,CAAC,UAA0B,EAAE,OAAuB;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnF,SAAS;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,OAAO,IAAI,SAAS,KAAK,SAAS;YAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,IAAI,OAAO,KAAK,SAAS;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,GAAG,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,UAAU,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO;YACR,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;aAC9D,IAAI,CAAC,KAAK;YACX,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC;;YAEnE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,SAAU,CAAC,EAAE,cAAc,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AACD;;;;;;;;;GASG;AACH,SAAgB,4BAA4B,CAAC,OAAuB,EAAE,UAA0B,EAAE,QAA6B;IAC3H,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAyC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IACzE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;YACrC,SAAS;QACb,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS;gBACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,GAAG,CAAC,CAAC;YACjE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;;YAEG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACxC,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC1C,MAAM,cAAc,GAAwE;QACxF,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe;KACtD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,UAAU,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxE,SAAS;QACb,IAAI,KAAK,KAAK,cAAc;YACxB,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;aACtC,IAAI,KAAK,KAAK,SAAS;YACxB,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;aAC5B,IAAI,KAAK,KAAK,OAAO;YACtB,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;;YAEzB,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IACjD,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC1G,OAAO,oBAAoB,CAAC;QACxB,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;QACtE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;QACtE,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACnD,CAAC,CAAC,UAAU,CAAC,eAAe;YAC5B,CAAC,CAAC,OAAO,CAAC,eAAe;QAC7B,KAAK;QACL,OAAO;QACP,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;QAClG,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,YAAY;QACZ,KAAK;QACL,aAAa;KAChB,CAAC,CAAC;AACP,CAAC","sourcesContent":["// 配置身份的字段级投影:`configHash` 的哈希输入本身,加上「同一份输入怎样按字段路径比对」。\n//\n// 哈希只回答「等不等」,回答不了「哪里变了」。`--accept config:<字段路径>` 与 `--dry` 的逐条\n// 作废原因都要后一个答案,而两侧必须来自同一份字段集合——configHash 里有的字段,这里就能按\n// 点路径指名;这里指不出来的路径,`--accept` 也就没有对应的差异可授权。\n//\n// 历史侧的同名投影从落盘重建(`ExperimentRunInfo` + 结果顶层的 agent/model),这正是\n// 「进 configHash 的字段必须落进 run.json」那条规则存在的理由。\nimport type { LinkedRunPlan } from \"../sandbox/plan.ts\";\nimport { sandboxLayerIdentityFor } from \"../sandbox/link.ts\";\nimport type { AgentIdentity, AgentInstaller } from \"../agents/types.ts\";\nimport type { EvalResult, JsonValue, JudgeConfig, ResolvedJudgeConfig } from \"../types.ts\";\nimport type { AgentRun } from \"./types.ts\";\n/**\n * 一次运行的**配置身份**:`computeConfigHash` 的哈希输入,字段集合与\n * docs/feature/experiments/cache.md「指纹:两个哈希嵌套」逐字对应。\n *\n * 可选配置必须真的省略键，而不是写入 `undefined` 或一个 Omitted 哨兵；否则未声明配置会\n * 无端改变基础 configHash。新增公开配置字段时只在这里裁决一次「进不进 configHash」。\n */\nexport interface ConfigIdentity {\n    readonly agent: string;\n    readonly model: DeclaredConfigValue<string>;\n    readonly reasoningEffort: DeclaredConfigValue<string>;\n    readonly flags: Readonly<globalThis.Record<string, JsonValue>>;\n    /** Credential-free Experiment Plugin and receiver behavior. */\n    readonly plugins: JsonValue;\n    readonly sandboxReuse: boolean;\n    /** Stable public key for the shared-state mutex, never a secret or stored state. */\n    readonly sharedState?: string;\n    /** Experiment 作者 layer 身份；物理 provider plan 属于逐 Eval fingerprint，不进入 Run 级身份。 */\n    readonly sandboxLayer: JsonValue;\n    readonly judge: JudgeConfigIdentity;\n    /** 声明顺序、精确 installer 配对、安装模式与计划目标平台的完整静态身份。 */\n    readonly agentInstalls: readonly JsonValue[];\n}\nexport type DeclaredConfigValue<Value> = {\n    readonly _tag: \"Omitted\";\n} | {\n    readonly _tag: \"Configured\";\n    readonly value: Value;\n};\nexport type JudgeConfigIdentity = {\n    readonly _tag: \"Unconfigured\";\n} | {\n    readonly _tag: \"Configured\";\n    readonly model: DeclaredConfigValue<string>;\n    readonly baseUrl: DeclaredConfigValue<string>;\n    readonly apiKeyEnv: DeclaredConfigValue<string>;\n    readonly timeoutMs: DeclaredConfigValue<number>;\n};\n/** manifest 相减得出的一条具名差异;`selector` 原样可复制进 `--accept`。 */\nexport type ConfigFieldDelta = {\n    readonly _tag: \"Added\";\n    readonly selector: string;\n    readonly from?: never;\n    readonly to: string;\n} | {\n    readonly _tag: \"Removed\";\n    readonly selector: string;\n    readonly from: string;\n    readonly to?: never;\n} | {\n    readonly _tag: \"Changed\";\n    readonly selector: string;\n    readonly from: string;\n    readonly to: string;\n};\nexport function addedConfigField(selector: string, to: string): ConfigFieldDelta {\n    return Object.freeze({ _tag: \"Added\", selector, to });\n}\nexport function removedConfigField(selector: string, from: string): ConfigFieldDelta {\n    return Object.freeze({ _tag: \"Removed\", selector, from });\n}\nexport function changedConfigField(selector: string, from: string, to: string): ConfigFieldDelta {\n    return Object.freeze({ _tag: \"Changed\", selector, from, to });\n}\nfunction freezeJson<Value extends JsonValue>(value: Value): Value {\n    if (value === null || typeof value !== \"object\")\n        return value;\n    if (Array.isArray(value)) {\n        return Object.freeze(value.map((entry) => freezeJson(entry))) as Value;\n    }\n    return Object.freeze(Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, freezeJson(entry)]))) as Value;\n}\nfunction freezeConfigIdentity(identity: ConfigIdentity): ConfigIdentity {\n    const { sharedState, ...withoutSharedState } = identity;\n    return Object.freeze({\n        ...withoutSharedState,\n        model: Object.freeze(identity.model),\n        reasoningEffort: Object.freeze(identity.reasoningEffort),\n        flags: freezeJson({ ...identity.flags }),\n        plugins: freezeJson(identity.plugins),\n        ...(sharedState === undefined ? {} : { sharedState }),\n        sandboxLayer: freezeJson(identity.sandboxLayer),\n        judge: identity.judge._tag === \"Unconfigured\"\n            ? Object.freeze({ _tag: \"Unconfigured\" as const })\n            : Object.freeze({\n                _tag: \"Configured\" as const,\n                model: Object.freeze(identity.judge.model),\n                baseUrl: Object.freeze(identity.judge.baseUrl),\n                apiKeyEnv: Object.freeze(identity.judge.apiKeyEnv),\n                timeoutMs: Object.freeze(identity.judge.timeoutMs),\n            }),\n        agentInstalls: Object.freeze(identity.agentInstalls.map((entry) => freezeJson(entry))),\n    });\n}\nfunction sameAgentIdentity(left: AgentIdentity, right: AgentIdentity): boolean {\n    return left.agent === right.agent && left.version === right.version && left.revision === right.revision;\n}\nfunction installerIdentity(installer: AgentInstaller | undefined): JsonValue {\n    if (installer === undefined)\n        return { _tag: \"Missing\" };\n    return {\n        _tag: \"Matched\",\n        identity: {\n            agent: installer.identity.agent,\n            version: installer.identity.version,\n            revision: installer.identity.revision,\n        },\n        installMode: installer.installMode,\n        platforms: installer.platforms === undefined\n            ? { _tag: \"All\" }\n            : { _tag: \"Listed\", values: [...installer.platforms] },\n    };\n}\n/** 计划期一次性冻结全部 ensure/installer 配对；运行事实与 staged digest 不反写配置身份。 */\nexport function agentInstallPlansForRun(run: AgentRun): readonly JsonValue[] {\n    const agent = run.agent;\n    if (agent.kind === \"direct\")\n        return Object.freeze([]);\n    return Object.freeze(agent.ensure.map((ensure, index) => freezeJson({\n        order: index,\n        ensure: {\n            agent: ensure.identity.agent,\n            version: ensure.identity.version,\n            revision: ensure.identity.revision,\n        },\n        installer: installerIdentity(agent.installers.find((candidate) => sameAgentIdentity(candidate.identity, ensure.identity))),\n    })));\n}\nfunction declaredString(value: string | undefined): DeclaredConfigValue<string> {\n    return value === undefined ? { _tag: \"Omitted\" } : { _tag: \"Configured\", value };\n}\nfunction judgeIdentity(judge: JudgeConfig | ResolvedJudgeConfig | undefined): JudgeConfigIdentity {\n    return judge === undefined\n        ? { _tag: \"Unconfigured\" }\n        : {\n            _tag: \"Configured\",\n            model: declaredString(judge.model),\n            baseUrl: declaredString(judge.baseUrl),\n            apiKeyEnv: declaredString(judge.apiKeyEnv),\n            timeoutMs: judge.timeoutMs === undefined ? { _tag: \"Omitted\" } : { _tag: \"Configured\", value: judge.timeoutMs },\n        };\n}\n/** 本次解析后配置的身份投影。 */\nexport function configIdentityForRun(run: AgentRun, plan: LinkedRunPlan, judge: JudgeConfig | ResolvedJudgeConfig | undefined = run.judge): ConfigIdentity {\n    return freezeConfigIdentity({\n        agent: run.agent.name,\n        model: declaredString(run.model),\n        reasoningEffort: declaredString(run.reasoningEffort),\n        flags: run.flags,\n        plugins: run.pluginBehavior ?? [],\n        sandboxReuse: run.sandboxReuse ?? false,\n        ...(run.sharedState === undefined ? {} : { sharedState: run.sharedState.key }),\n        sandboxLayer: sandboxLayerIdentityFor(plan.pair, \"experiment\"),\n        judge: judgeIdentity(judge),\n        agentInstalls: agentInstallPlansForRun(run),\n    });\n}\n/**\n * 历史条目的同一份投影,从落盘重建。缺 `ExperimentRunInfo`(第三方 harness 写的结果)时\n * 配置面无从重算,返回 `undefined`——差异算不出就如实算不出,不猜。\n */\nexport function configIdentityFromResult(result: EvalResult): ConfigIdentity | undefined {\n    const exp = result.experiment;\n    if (exp === undefined)\n        return undefined;\n    return freezeConfigIdentity({\n        agent: result.agent,\n        model: declaredString(result.model),\n        reasoningEffort: declaredString(exp.reasoningEffort),\n        flags: exp.flags ?? {},\n        plugins: exp.plugins ?? [],\n        sandboxReuse: exp.sandboxReuse ?? false,\n        ...(exp.sharedState === undefined ? {} : { sharedState: exp.sharedState.key }),\n        sandboxLayer: exp.sandboxLayer,\n        judge: judgeIdentity(exp.judge),\n        agentInstalls: exp.agentInstalls,\n    });\n}\n/**\n * 身份 → 字段路径表。真正未声明的配置不会生成对象键或字段路径。\n */\nfunction flatten(identity: ConfigIdentity): Map<string, JsonValue> {\n    const out = new Map<string, JsonValue>();\n    const put = (path: string, value: JsonValue): void => { out.set(path, value); };\n    const putDeclared = <Value extends JsonValue>(path: string, value: DeclaredConfigValue<Value>): void => {\n        if (value._tag === \"Configured\")\n            put(path, value.value);\n    };\n    put(\"agent\", identity.agent);\n    putDeclared(\"model\", identity.model);\n    putDeclared(\"reasoningEffort\", identity.reasoningEffort);\n    put(\"sandboxReuse\", identity.sandboxReuse);\n    if (identity.sharedState !== undefined)\n        put(\"sharedState.key\", identity.sharedState);\n    for (const [key, value] of Object.entries(identity.flags))\n        put(`flags.${key}`, value);\n    put(\"plugins\", identity.plugins);\n    put(\"sandboxLayer\", identity.sandboxLayer);\n    if (identity.judge._tag === \"Configured\") {\n        putDeclared(\"judge.model\", identity.judge.model);\n        putDeclared(\"judge.baseUrl\", identity.judge.baseUrl);\n        putDeclared(\"judge.apiKeyEnv\", identity.judge.apiKeyEnv);\n        putDeclared(\"judge.timeoutMs\", identity.judge.timeoutMs);\n    }\n    put(\"agentInstalls\", [...identity.agentInstalls]);\n    return out;\n}\n/**\n * 身份的字段路径投影,供 manifest 的配置面落盘(见 `runner/manifest.ts`)。与差异比对读的是\n * 同一个 `flatten`:清单里指得出的路径,`--accept config:<路径>` 就授权得了,两侧不可能分叉。\n */\nexport function configIdentityPaths(identity: ConfigIdentity): Array<[\n    string,\n    JsonValue\n]> {\n    return [...flatten(identity)];\n}\n/** 值的字符串投影:差异明细与 `carriedAccepting` 留痕共用完整值,有界呈现是人读 renderer(`feedback/human.ts`)的职责,不在构造点做。 */\nfunction serializeValue(value: JsonValue): string {\n    return typeof value === \"string\" ? value : JSON.stringify(value);\n}\n/**\n * 历史侧与本次侧的字段级差异,按 selector 字典序。键的增删同样是一条差异。\n */\nexport function configDeltas(historical: ConfigIdentity, current: ConfigIdentity): ConfigFieldDelta[] {\n    const from = flatten(historical);\n    const to = flatten(current);\n    const paths = [...new Set([...from.keys(), ...to.keys()])].sort();\n    const out: ConfigFieldDelta[] = [];\n    for (const path of paths) {\n        const hasFrom = from.has(path);\n        const hasTo = to.has(path);\n        if (hasFrom && hasTo && JSON.stringify(from.get(path)) === JSON.stringify(to.get(path)))\n            continue;\n        const fromValue = from.get(path);\n        const toValue = to.get(path);\n        if (hasFrom && fromValue === undefined)\n            throw new Error(`Missing historical config value for ${path}.`);\n        if (hasTo && toValue === undefined)\n            throw new Error(`Missing current config value for ${path}.`);\n        const selector = `config:${path}`;\n        if (!hasFrom)\n            out.push(addedConfigField(selector, serializeValue(toValue!)));\n        else if (!hasTo)\n            out.push(removedConfigField(selector, serializeValue(fromValue!)));\n        else\n            out.push(changedConfigField(selector, serializeValue(fromValue!), serializeValue(toValue!)));\n    }\n    return out;\n}\n/**\n * 反事实身份:把本次身份里**被授权的那些字段**换回历史值,其余原样。\n *\n * 换出来的身份再算一次指纹,与历史条目落盘的那个相等,才证明「两侧只差这些被授权的字段」——\n * 授权因此不是绕开判据,而是把判据挪到一个明确写下来的口径上重算一次。\n *\n * `sandbox` / `judge` 是整对象进哈希的分组:键在不在本身改变字节,逐字段拼回去会造出两侧都\n * 不存在的形状。分组内**每一条**差异都被授权才整体换回历史对象,否则保持本次值——那样指纹\n * 自然对不上,条目照常重跑,不会静默跨过没被授权的那半。\n */\nexport function counterfactualConfigIdentity(current: ConfigIdentity, historical: ConfigIdentity, accepted: ReadonlySet<string>): ConfigIdentity {\n    const differing = new Set(configDeltas(historical, current).map((d) => d.selector));\n    const flags: globalThis.Record<string, JsonValue> = { ...current.flags };\n    for (const selector of accepted) {\n        if (!selector.startsWith(\"config:flags.\"))\n            continue;\n        const key = selector.slice(\"config:flags.\".length);\n        if (Object.hasOwn(historical.flags, key)) {\n            const value = historical.flags[key];\n            if (value === undefined)\n                throw new Error(`Missing historical flag value for ${key}.`);\n            flags[key] = value;\n        }\n        else\n            delete flags[key];\n    }\n    let sandboxLayer = current.sandboxLayer;\n    let plugins = current.plugins;\n    let judge = current.judge;\n    let agentInstalls = current.agentInstalls;\n    const rollbackGroups: readonly (\"sandboxLayer\" | \"plugins\" | \"judge\" | \"agentInstalls\")[] = [\n        \"sandboxLayer\", \"plugins\", \"judge\", \"agentInstalls\",\n    ];\n    for (const group of rollbackGroups) {\n        const paths = [...differing].filter((selector) => selector === `config:${group}` || selector.startsWith(`config:${group}.`));\n        if (paths.length === 0 || !paths.every((selector) => accepted.has(selector)))\n            continue;\n        if (group === \"sandboxLayer\")\n            sandboxLayer = historical.sandboxLayer;\n        else if (group === \"plugins\")\n            plugins = historical.plugins;\n        else if (group === \"judge\")\n            judge = historical.judge;\n        else\n            agentInstalls = historical.agentInstalls;\n    }\n    const sharedState = accepted.has(\"config:sharedState.key\") ? historical.sharedState : current.sharedState;\n    return freezeConfigIdentity({\n        agent: accepted.has(\"config:agent\") ? historical.agent : current.agent,\n        model: accepted.has(\"config:model\") ? historical.model : current.model,\n        reasoningEffort: accepted.has(\"config:reasoningEffort\")\n            ? historical.reasoningEffort\n            : current.reasoningEffort,\n        flags,\n        plugins,\n        sandboxReuse: accepted.has(\"config:sandboxReuse\") ? historical.sandboxReuse : current.sandboxReuse,\n        ...(sharedState === undefined ? {} : { sharedState }),\n        sandboxLayer,\n        judge,\n        agentInstalls,\n    });\n}\n"]}

package/dist/runner/config-identity.d.cts

@@ -5,8 +5,8 @@ import type { AgentRun } from "./types.cjs";
  * 一次运行的**配置身份**:`computeConfigHash` 的哈希输入,字段集合与
  * docs/feature/experiments/cache.md「指纹:两个哈希嵌套」逐字对应。
  *
- * 键恒存在(值可以是 `undefined`):稳定序列化把键本身也算进字节,少一个键就是另一个哈希。
- * 新增公开配置字段时只在这里裁决一次「进不进 configHash」。
+ * 可选配置必须真的省略键，而不是写入 `undefined` 或一个 Omitted 哨兵；否则未声明配置会
+ * 无端改变基础 configHash。新增公开配置字段时只在这里裁决一次「进不进 configHash」。
  */
 export interface ConfigIdentity {
     readonly agent: string;
@@ -16,6 +16,8 @@ export interface ConfigIdentity {
     /** Credential-free Experiment Plugin and receiver behavior. */
     readonly plugins: JsonValue;
     readonly sandboxReuse: boolean;
+    /** Stable public key for the shared-state mutex, never a secret or stored state. */
+    readonly sharedState?: string;
     /** Experiment 作者 layer 身份；物理 provider plan 属于逐 Eval fingerprint，不进入 Run 级身份。 */
     readonly sandboxLayer: JsonValue;
     readonly judge: JudgeConfigIdentity;

package/dist/runner/config-identity.d.mts

@@ -5,8 +5,8 @@ import type { AgentRun } from "./types.mjs";
  * 一次运行的**配置身份**:`computeConfigHash` 的哈希输入,字段集合与
  * docs/feature/experiments/cache.md「指纹:两个哈希嵌套」逐字对应。
  *
- * 键恒存在(值可以是 `undefined`):稳定序列化把键本身也算进字节,少一个键就是另一个哈希。
- * 新增公开配置字段时只在这里裁决一次「进不进 configHash」。
+ * 可选配置必须真的省略键，而不是写入 `undefined` 或一个 Omitted 哨兵；否则未声明配置会
+ * 无端改变基础 configHash。新增公开配置字段时只在这里裁决一次「进不进 configHash」。
  */
 export interface ConfigIdentity {
     readonly agent: string;
@@ -16,6 +16,8 @@ export interface ConfigIdentity {
     /** Credential-free Experiment Plugin and receiver behavior. */
     readonly plugins: JsonValue;
     readonly sandboxReuse: boolean;
+    /** Stable public key for the shared-state mutex, never a secret or stored state. */
+    readonly sharedState?: string;
     /** Experiment 作者 layer 身份；物理 provider plan 属于逐 Eval fingerprint，不进入 Run 级身份。 */
     readonly sandboxLayer: JsonValue;
     readonly judge: JudgeConfigIdentity;

package/dist/runner/config-identity.d.ts

@@ -5,8 +5,8 @@ import type { AgentRun } from "./types.js";
  * 一次运行的**配置身份**:`computeConfigHash` 的哈希输入,字段集合与
  * docs/feature/experiments/cache.md「指纹:两个哈希嵌套」逐字对应。
  *
- * 键恒存在(值可以是 `undefined`):稳定序列化把键本身也算进字节,少一个键就是另一个哈希。
- * 新增公开配置字段时只在这里裁决一次「进不进 configHash」。
+ * 可选配置必须真的省略键，而不是写入 `undefined` 或一个 Omitted 哨兵；否则未声明配置会
+ * 无端改变基础 configHash。新增公开配置字段时只在这里裁决一次「进不进 configHash」。
  */
 export interface ConfigIdentity {
     readonly agent: string;
@@ -16,6 +16,8 @@ export interface ConfigIdentity {
     /** Credential-free Experiment Plugin and receiver behavior. */
     readonly plugins: JsonValue;
     readonly sandboxReuse: boolean;
+    /** Stable public key for the shared-state mutex, never a secret or stored state. */
+    readonly sharedState?: string;
     /** Experiment 作者 layer 身份；物理 provider plan 属于逐 Eval fingerprint，不进入 Run 级身份。 */
     readonly sandboxLayer: JsonValue;
     readonly judge: JudgeConfigIdentity;