refactor(runtime): delete the program op-set — collapse the third move-encoding (~-940 LOC) by drewstone · Pull Request #168 · tangle-network/agent-runtime

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone · 2026-06-05T20:55:29Z

Aggressive collapse toward the smallest best-in-class kernel. You're the only consumer; verified runProgram is not used by anything live (the diverse@k gate runs on fanout in keystone-gate.ts, never runProgram — confirmed by a dedicated audit + ground-truth grep), so the breaking-change caution is moot.

What & why

runProgram / Program / compileProgram / flattenProgram / runAgent / agentProgramPlanner were a third, parallel "pick the next move" encoding with zero live consumers (test-only). The two real layers are the recursive Scope atom (the tree) and the runLoopDriver (a leaf backend composed inside the tree). The op-set was redundant. Its ideas survive, mapped onto the atom:

op-set	atom
`fanout` / `sample(n)`	N × `scope.spawn`
`steer` / `refine`	`scope.send`
`parallel{branches}`	spawn N driver-agents (sub-loops)
`select`	`defaultSelectWinner`
`stop`	`act` returns

Cuts (net ≈ −940 LOC)

delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355)
drop the ./program re-exports + dead summarizeHistory/HistorySummaryRow from the barrel
slim the public surface: un-export internal-only AcquireOptions / ScopeArgs / createShapeContext
fix 5 stale JSDoc refs to the long-deleted createSandboxPlanner (anti-staleness law)

Verification

670 tests green (−16 = the deleted op-set's own tests); typecheck + lint + build + verify:package clean. Breaking to the ./runtime + ./loops subpaths — every removed symbol was @experimental with no external consumer; the ./loops alias itself is unchanged.

🤖 Generated with Claude Code

@experimental

…e-encoding into the atom runProgram/Program/compileProgram/flattenProgram/runAgent/agentProgramPlanner were a parallel 'pick the next move' encoding with ZERO live consumers (test-only; the diverse@k gate runs on `fanout` in keystone-gate.ts, never on runProgram — verified). The recursive Scope atom + the runLoop Driver are the two real layers (leaf-backend composed inside the tree); the op-set was a redundant third. Its ideas map onto the atom: fanout=N×scope.spawn, refine=scope.send, parallel-sub-loops=spawn N driver-agents, select=defaultSelectWinner. - delete src/runtime/program.ts (546) + tests/loops/program.test.ts (355) - drop the ./program re-exports + the dead summarizeHistory/HistorySummaryRow from the barrel - slim the public surface: un-export internal-only AcquireOptions/ScopeArgs/createShapeContext - fix 5 stale JSDoc refs to the deleted createSandboxPlanner (anti-staleness law) Net ~-940 LOC. 670 tests green; typecheck+lint+build+verify:package clean. Breaking to the ./runtime + ./loops subpaths (all removed symbols @experimental, no external consumers).

… §7 post-#168 (#169) §8 (DESIGNED, not built): the question/command hierarchy as a resumable effect with handlers — ask (up, blocking, terminates at the first answerer), notify (up, non-blocking, salience-filtered = the lifecycle hook stream), override (down = scope.send, supersedes). Optimistic + async (never synchronous approval), command one-level-deep (composes), block-vs-settle-and-resume via the shipped sandbox-lineage, budget-pauses-on-human + oracle-confound-off-in-gate. PI agent = the top handler. Implementation gated on the gate result + the PI human-handler contract. §7: the program op-set is DELETED (#168) — the diverse@k gate runs on fanout (keystone-gate.ts), not runProgram; the kernel is now two layers (Scope atom + runLoop leaf backend), no redundant third.

drewstone merged commit fe3b220 into mainJun 5, 2026
1 check passed

drewstone mentioned this pull request Jun 5, 2026
docs(visual): the command-hierarchy edges (ask/notify/override) + fix §7 post-#168 #169
Merged

drewstone mentioned this pull request Jun 6, 2026
chore(hygiene): fix stale CLAUDE.md code-map; (wip) de-dup steer-firewall + bench stats #183
Merged