@tangle-network/agent-runtime 0.143.0 → 0.153.2

package/dist/{run-layout-Be_Z0dF8.js → run-layout-C2jgwsCq.js}

@@ -28,7 +28,15 @@ import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeF
 *                                  {@link WorkerCancelRequest}
 *   cancellations/<opId>.json      the acknowledgement for one cancel operation — a
 *                                  {@link WorkerCancellation} written ONLY by the runtime
-*                                  acknowledger (the coordination driver's turn loop)
+*                                  acknowledger in the OWNING manager's turn loop: exact node
+*                                  ids route to the manager that parents them (any depth);
+*                                  label/profile-name references to the root manager alone
+*   cancellations/run.request.json the run-scoped cancel request — one {@link RunCancelRequest},
+*                                  the whole RUN rather than one worker
+*   cancellations/run.json         the acknowledgement for the run-scoped request — a
+*                                  {@link RunCancellation} written ONLY by the runtime (the root
+*                                  manager issues the abort; the `supervise()` settle path records
+*                                  what the run actually did)
 *
 * Reads are tolerant by contract: a partial trailing line (a writer mid-append) or a corrupt line
 * never poisons the rest of the file — later valid lines still matter.
@@ -217,9 +225,10 @@ function writeWorkerCancellation(eventDir, record) {
 * durable state.
 *
 * The write half of the acknowledged-cancellation contract (`writeWorkerSteer` is the steer
-* analog): append the request to the run's cancellation inbox, where the runtime's acknowledger
-* (the coordination driver's turn loop) applies it — aborting exactly that worker's subtree and
-* recording what it proved. This function never applies the cancellation itself; writing a
+* analog): append the request to the run's cancellation inbox, where the OWNING manager's
+* acknowledger (its turn loop — the root for label/profile references, the parent manager for an
+* exact node id at any depth) applies it — aborting exactly that worker's subtree and recording
+* what it proved. This function never applies the cancellation itself; writing a
 * request file is not an acknowledgement.
 *
 * Idempotency is a lookup: when an acknowledgement for `operationId` already exists, it is
@@ -266,6 +275,102 @@ function cancelWorker(eventDir, worker, operationId, options = {}) {
 		terminated: []
 	};
 }
+/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */
+function runCancelRequestFile(eventDir) {
+	return join(workerCancellationsDir(eventDir), "run.request.json");
+}
+/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */
+function runCancellationFile(eventDir) {
+	return join(workerCancellationsDir(eventDir), "run.json");
+}
+/** Read the run-scoped cancel request, or `undefined` when none was written. */
+function readRunCancelRequest(eventDir) {
+	const file = runCancelRequestFile(eventDir);
+	if (!existsSync(file)) return void 0;
+	const parsed = JSON.parse(readFileSync(file, "utf8"));
+	if (!isRunCancelRequest(parsed)) throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`);
+	return parsed;
+}
+/**
+* Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has
+* not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the
+* same run — fail loud rather than answer for it.
+*/
+function readRunCancellation(eventDir, operationId) {
+	const file = runCancellationFile(eventDir);
+	if (!existsSync(file)) return void 0;
+	const parsed = JSON.parse(readFileSync(file, "utf8"));
+	if (parsed.operationId !== operationId) throw new Error(`run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not '${operationId}' — one run carries one run-scoped cancel operation`);
+	return parsed;
+}
+/**
+* Durably write the run-scoped acknowledgement. Write-then-rename, so a concurrent reader sees the
+* prior complete record or the new complete record, never a partial file.
+*
+* @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}
+* or {@link cancelRun}.
+*/
+function writeRunCancellation(eventDir, record) {
+	mkdirSync(workerCancellationsDir(eventDir), { recursive: true });
+	const file = runCancellationFile(eventDir);
+	const tmp = `${file}.${randomUUID()}.tmp`;
+	writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\n`, "utf8");
+	renameSync(tmp, file);
+}
+/**
+* Request the cancellation of the WHOLE run, idempotently, and return the operation's current
+* durable state.
+*
+* The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation
+* directory, where the run's own root manager applies it — aborting the root through the one
+* cascade controller the run already has, so every live worker comes down with it. This function
+* never applies the cancellation itself; writing a request file is not an acknowledgement.
+*
+* Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned
+* AS-IS and nothing is written. A request the runtime has not answered yet returns
+* `effect: 'unknown'` (never a success); call again with the same `operationId` — or
+* {@link readRunCancellation} — to read the acknowledged result after a reconnect.
+*
+* A run carries ONE run-scoped operation: a second request under a different `operationId` throws
+* rather than silently replacing the pending one, because both would claim the same single abort.
+*/
+function cancelRun(eventDir, operationId, options = {}) {
+	const opId = operationId.trim();
+	if (!opId) throw new Error("cancelRun: operationId is empty");
+	const acknowledged = readRunCancellation(eventDir, opId);
+	if (acknowledged) return acknowledged;
+	const pending = readRunCancelRequest(eventDir);
+	if (pending !== void 0 && pending.operationId !== opId) throw new Error(`cancelRun: run cancel '${pending.operationId}' is already pending for this run; read it with readRunCancellation instead of issuing '${opId}'`);
+	const source = options.source ?? "human";
+	const request = pending ?? {
+		operationId: opId,
+		at: (/* @__PURE__ */ new Date()).toISOString(),
+		source,
+		...options.reason === void 0 ? {} : { reason: options.reason }
+	};
+	if (pending === void 0) {
+		mkdirSync(workerCancellationsDir(eventDir), { recursive: true });
+		writeFileSync(runCancelRequestFile(eventDir), `${JSON.stringify(request, null, 2)}\n`, "utf8");
+		appendWorkerControlEvent(eventDir, "run", {
+			kind: "run-cancel-request",
+			operationId: opId,
+			source,
+			queued: true,
+			...options.reason === void 0 ? {} : { reason: options.reason }
+		});
+	}
+	return {
+		operationId: opId,
+		effect: "unknown",
+		requestedAt: request.at,
+		observedAt: request.at,
+		...request.reason === void 0 ? {} : { reason: request.reason },
+		detail: "request queued; no runtime acknowledger has answered yet"
+	};
+}
+function isRunCancelRequest(value) {
+	return typeof value.operationId === "string" && value.operationId.length > 0 && typeof value.at === "string" && typeof value.source === "string" && (value.reason === void 0 || typeof value.reason === "string");
+}
 function isWorkerCancelRequest(value) {
 	return typeof value.operationId === "string" && value.operationId.length > 0 && typeof value.at === "string" && typeof value.source === "string" && typeof value.worker === "string" && value.worker.length > 0 && (value.reason === void 0 || typeof value.reason === "string");
 }
@@ -283,6 +388,6 @@ function isWorkerSteerRequest(value) {
 	return typeof value.id === "string" && typeof value.at === "string" && typeof value.source === "string" && typeof value.worker === "string" && typeof value.message === "string" && value.message.trim().length > 0;
 }
 //#endregion
-export { writeWorkerCancellation as _, readWorkerCancellation as a, supervisorRunDir as c, workerCancelRequestsFile as d, workerCancellationFile as f, workerInboxFileFromEventDir as g, workerInboxFile as h, readWorkerCancelRequests as i, supervisorRunsRoot as l, workerControlLogFile as m, legacySupervisorRunDir as n, readWorkerSteerRequests as o, workerCancellationsDir as p, legacySupervisorRunsRoot as r, safeWorkerFile as s, cancelWorker as t, supervisorWorkersDir as u, writeWorkerSteer as v };
+export { writeWorkerCancellation as C, writeRunCancellation as S, workerCancellationFile as _, readRunCancelRequest as a, workerInboxFile as b, readWorkerCancellation as c, runCancellationFile as d, safeWorkerFile as f, workerCancelRequestsFile as g, supervisorWorkersDir as h, legacySupervisorRunsRoot as i, readWorkerSteerRequests as l, supervisorRunsRoot as m, cancelWorker as n, readRunCancellation as o, supervisorRunDir as p, legacySupervisorRunDir as r, readWorkerCancelRequests as s, cancelRun as t, runCancelRequestFile as u, workerCancellationsDir as v, writeWorkerSteer as w, workerInboxFileFromEventDir as x, workerControlLogFile as y };
 
-//# sourceMappingURL=run-layout-Be_Z0dF8.js.map
+//# sourceMappingURL=run-layout-C2jgwsCq.js.map

package/dist/run-layout-C2jgwsCq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-layout-C2jgwsCq.js","names":[],"sources":["../src/runtime/supervise/run-layout.ts"],"sourcesContent":["/**\n * The on-disk supervisor-run layout: `<root>/.agent/supervisor/<id>`.\n *\n * This is the durable, cross-process face of a supervisor run — the counterpart to the in-process\n * `Inbox` seam in `./inbox`. A run persists its state under one directory so that any OTHER process\n * can find it after the fact: `@tangle-network/traces` reads exactly this layout via\n * `traces analyze --supervisor-run-dir`, a restarted host can rehydrate a run it no longer holds\n * handles to, and a human can steer a live worker by appending one NDJSON line. Until now the\n * layout was defined only in the unpublished `loops` repo (`src/supervisor-control.ts`) — a\n * published reader depending on an unpublished writer's convention — so the contract is promoted\n * here, names preserved.\n *\n * `.agent` is the one dot-dir for ALL agent-owned state (skills already write\n * `.agent/hypotheses/`, `.agent/skill-runs.jsonl`); supervisor runs live beside them rather than\n * under a product-branded dir. Runs written by older writers used `.loops/supervisor/<id>` —\n * readers that must see those keep a legacy fallback; this writer never creates `.loops` again.\n *\n * Layout, relative to `supervisorRunDir(root, id)`:\n *\n *   workers/<label>.inbox.ndjson   down-leg steer/answer requests for one worker (durable inbox);\n *                                  each line is a {@link WorkerSteerRequest}\n *   workers/<label>.ndjson         best-effort per-worker control-event log (delivery bookkeeping)\n *   cancellations/requests.ndjson  worker-scoped cancel requests (durable inbox); each line is a\n *                                  {@link WorkerCancelRequest}\n *   cancellations/<opId>.json      the acknowledgement for one cancel operation — a\n *                                  {@link WorkerCancellation} written ONLY by the runtime\n *                                  acknowledger in the OWNING manager's turn loop: exact node\n *                                  ids route to the manager that parents them (any depth);\n *                                  label/profile-name references to the root manager alone\n *   cancellations/run.request.json the run-scoped cancel request — one {@link RunCancelRequest},\n *                                  the whole RUN rather than one worker\n *   cancellations/run.json         the acknowledgement for the run-scoped request — a\n *                                  {@link RunCancellation} written ONLY by the runtime (the root\n *                                  manager issues the abort; the `supervise()` settle path records\n *                                  what the run actually did)\n *\n * Reads are tolerant by contract: a partial trailing line (a writer mid-append) or a corrupt line\n * never poisons the rest of the file — later valid lines still matter.\n *\n * Promoted from `loops/src/supervisor-control.ts`. The one deliberate difference: the loops version\n * resolved a worker id to its label through the run journal before writing a steer; that resolution\n * stays with the caller (it is journal-format-specific), so `writeWorkerSteer` here takes the worker\n * LABEL directly.\n *\n * @experimental\n */\n\nimport { randomUUID } from 'node:crypto'\nimport {\n  appendFileSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  writeFileSync,\n} from 'node:fs'\nimport { join, resolve } from 'node:path'\nimport type { RetainedRunEffect } from '../retained-run-types'\n\n/** One durable down-leg request appended to a worker's inbox file. */\nexport interface WorkerSteerRequest {\n  readonly id: string\n  /** ISO timestamp of the append. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** The worker LABEL the request targets (already resolved by the caller). */\n  readonly worker: string\n  readonly message: string\n}\n\n/** One durable worker-scoped cancel request appended to the run's cancellation inbox. */\nexport interface WorkerCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the append. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** The worker the request targets: a workerId (node id — routed to the owning manager at any\n   *  depth), or a profile name or spawn label (resolved by the root manager against its direct\n   *  children only). */\n  readonly worker: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for one worker-scoped cancel operation, keyed by\n * `operationId`. The runtime acknowledger is the ONLY writer; `cancelWorker` only reads it.\n *\n * `effect` reuses the retained-run vocabulary ({@link RetainedRunEffect}) so the runtime has one\n * spelling of the four cancellation states:\n *  - `'unknown'`          — not yet resolved by the runtime (also what `cancelWorker` returns for\n *                           a request no acknowledger has answered), or — terminally, with the\n *                           run-over detail — an abort was issued but the run ended before the\n *                           termination could be observed. Never a success.\n *  - `'cancel_requested'` — the runtime issued the worker's abort; termination not yet proven.\n *  - `'cancelled'`        — the worker reached a terminal `down` state on the settle path.\n *  - `'not_live'`         — the worker was not live to cancel (already settled, it settled\n *                           `done` despite the abort, or the run ended before the request was\n *                           ever applied). Never a success of THIS operation.\n *\n * Expiry is run end: the owning manager's final pass closes every still-open request it owns\n * (`not_live` never applied, `unknown` issued-but-unproven), so a pending request cannot outlive\n * its run and abort a future spawn that happens to reuse a label.\n */\nexport interface WorkerCancellation {\n  readonly operationId: string\n  /** The worker reference exactly as requested. */\n  readonly worker: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The node id the acknowledger resolved `worker` to, once resolved. */\n  readonly workerId?: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n  /**\n   * Every node id this operation PROVED terminated: the requested worker plus each descendant of\n   * its subtree observed to reach a terminal `down`/`cancelled` journal record at or after the\n   * abort was ISSUED — the acknowledger's own `observedAt` on the `cancel_requested` record\n   * (runtime clock), never the client's `requestedAt` (a cancelled lead cascades to its subtree\n   * by design — the scope signal chain — so the acknowledgement names the set, not one id).\n   * Proven at acknowledgement time; post-abort causation is approximate: a descendant that died\n   * of its own cause after the abort is indistinguishable from the cascade and may be included,\n   * a late teardown journal joins the set on a later pass while the manager still runs, and one\n   * still absent at run end is absent from the set. Grows monotonically; empty until termination\n   * is proven.\n   */\n  readonly terminated: ReadonlyArray<string>\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal state ABORTED after that request.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The root every supervisor run of one workspace lives under. */\nexport function supervisorRunsRoot(rootDir: string): string {\n  return join(resolve(rootDir), '.agent', 'supervisor')\n}\n\n/** The run directory every artifact of one supervisor run lives under. */\nexport function supervisorRunDir(rootDir: string, id: string): string {\n  return join(supervisorRunsRoot(rootDir), id)\n}\n\n/**\n * Where a pre-rename writer put the same run (`<root>/.loops/supervisor/<id>`). Readers that must\n * see historical runs check {@link supervisorRunDir} first and fall back to this; nothing writes\n * here anymore.\n */\nexport function legacySupervisorRunDir(rootDir: string, id: string): string {\n  return join(legacySupervisorRunsRoot(rootDir), id)\n}\n\n/**\n * The pre-rename runs root (`<root>/.loops/supervisor`). Only readers that ENUMERATE historical\n * runs need this — the per-id form is {@link legacySupervisorRunDir}. Nothing writes here.\n */\nexport function legacySupervisorRunsRoot(rootDir: string): string {\n  return join(resolve(rootDir), '.loops', 'supervisor')\n}\n\n/** A worker label reduced to a safe filename stem. Empty labels get a stable fallback. */\nexport function safeWorkerFile(label: string): string {\n  const safe = label.replace(/[^A-Za-z0-9._-]/g, '_')\n  return safe.length > 0 ? safe : 'worker'\n}\n\n/** The directory holding every per-worker file of one run (inboxes and control-event logs). */\nexport function supervisorWorkersDir(eventDir: string): string {\n  return join(eventDir, 'workers')\n}\n\n/** The durable inbox file for one worker of one run. */\nexport function workerInboxFile(rootDir: string, supervisorId: string, worker: string): string {\n  return workerInboxFileFromEventDir(supervisorRunDir(rootDir, supervisorId), worker)\n}\n\n/** Same, addressed from an already-known run directory (the reader's usual entry point). */\nexport function workerInboxFileFromEventDir(eventDir: string, worker: string): string {\n  return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.inbox.ndjson`)\n}\n\n/**\n * The best-effort control-event log for one worker (`workers/<label>.ndjson`) — delivery\n * bookkeeping for steers, plus whatever lifecycle events a writer chooses to append. Distinct from\n * the inbox: the inbox is the durable down-leg queue, this is the record of what happened to it.\n */\nexport function workerControlLogFile(eventDir: string, worker: string): string {\n  return join(supervisorWorkersDir(eventDir), `${safeWorkerFile(worker)}.ndjson`)\n}\n\n/**\n * Durably append one steer request to a worker's inbox and log the delivery attempt.\n *\n * The inbox append is the durable act; the control-event log is best-effort bookkeeping and may\n * silently fail without voiding the steer.\n */\nexport function writeWorkerSteer(\n  rootDir: string,\n  supervisorId: string,\n  worker: string,\n  message: string,\n  source = 'human',\n): { worker: string; file: string; request: WorkerSteerRequest } {\n  const trimmed = message.trim()\n  if (!trimmed) throw new Error('steer message is empty')\n  const dir = supervisorRunDir(rootDir, supervisorId)\n  mkdirSync(supervisorWorkersDir(dir), { recursive: true })\n  const request: WorkerSteerRequest = {\n    id: randomUUID(),\n    at: new Date().toISOString(),\n    source,\n    worker,\n    message: trimmed,\n  }\n  const file = workerInboxFile(rootDir, supervisorId, worker)\n  appendFileSync(file, `${JSON.stringify(request)}\\n`, 'utf8')\n  appendWorkerControlEvent(dir, worker, {\n    kind: 'message',\n    direction: 'down',\n    source,\n    requestId: request.id,\n    message: trimmed,\n    queued: true,\n    delivered: false,\n  })\n  return { worker, file, request }\n}\n\n/** Read every valid steer request in a worker's inbox. Corrupt or partial lines are skipped. */\nexport function readWorkerSteerRequests(eventDir: string, worker: string): WorkerSteerRequest[] {\n  const file = workerInboxFileFromEventDir(eventDir, worker)\n  if (!existsSync(file)) return []\n  const out: WorkerSteerRequest[] = []\n  let raw = ''\n  try {\n    raw = readFileSync(file, 'utf8')\n  } catch {\n    return out\n  }\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed) continue\n    try {\n      const parsed = JSON.parse(trimmed) as Partial<WorkerSteerRequest>\n      if (isWorkerSteerRequest(parsed)) out.push(parsed)\n    } catch {\n      // Ignore partial or corrupt input lines; later valid lines still matter.\n    }\n  }\n  return out\n}\n\n/** The directory holding every cancellation artifact of one run (request inbox + acknowledgements). */\nexport function workerCancellationsDir(eventDir: string): string {\n  return join(eventDir, 'cancellations')\n}\n\n/** The durable cancel-request inbox of one run — one NDJSON line per {@link WorkerCancelRequest}. */\nexport function workerCancelRequestsFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'requests.ndjson')\n}\n\n/**\n * The acknowledgement file for one cancel operation. The filename is a sanitized stem of the\n * `operationId`; the record inside carries the exact id, and readers verify it so two distinct\n * ids that sanitize to one stem fail loud instead of answering for each other.\n */\nexport function workerCancellationFile(eventDir: string, operationId: string): string {\n  return join(workerCancellationsDir(eventDir), `${safeOperationFile(operationId)}.json`)\n}\n\nfunction safeOperationFile(operationId: string): string {\n  const safe = operationId.replace(/[^A-Za-z0-9._-]/g, '_')\n  if (safe.length === 0) throw new Error('cancel operationId is empty')\n  return safe\n}\n\n/** Read every valid cancel request in the run's cancellation inbox. Corrupt lines are skipped. */\nexport function readWorkerCancelRequests(eventDir: string): WorkerCancelRequest[] {\n  const file = workerCancelRequestsFile(eventDir)\n  if (!existsSync(file)) return []\n  const out: WorkerCancelRequest[] = []\n  let raw = ''\n  try {\n    raw = readFileSync(file, 'utf8')\n  } catch {\n    return out\n  }\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed) continue\n    try {\n      const parsed = JSON.parse(trimmed) as Partial<WorkerCancelRequest>\n      if (isWorkerCancelRequest(parsed)) out.push(parsed)\n    } catch {\n      // Ignore partial or corrupt input lines; later valid lines still matter.\n    }\n  }\n  return out\n}\n\n/**\n * Read the acknowledgement for one cancel operation. `undefined` when the runtime has not\n * answered. A record whose stored `operationId` differs from the requested one is a filename\n * collision between two sanitized ids — fail loud rather than return another operation's answer.\n */\nexport function readWorkerCancellation(\n  eventDir: string,\n  operationId: string,\n): WorkerCancellation | undefined {\n  const file = workerCancellationFile(eventDir, operationId)\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as WorkerCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `cancel acknowledgement collision: '${file}' holds operation '${parsed.operationId}', ` +\n        `not '${operationId}' — use operation ids that stay distinct after filename sanitization`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write one acknowledgement record. Write-then-rename, so a concurrent reader sees the\n * prior complete record or the new complete record, never a partial file.\n *\n * @internal The runtime acknowledger is the only intended writer; clients read via\n * {@link readWorkerCancellation} or {@link cancelWorker}.\n */\nexport function writeWorkerCancellation(eventDir: string, record: WorkerCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  mkdirSync(dir, { recursive: true })\n  const file = workerCancellationFile(eventDir, record.operationId)\n  const tmp = `${file}.${randomUUID()}.tmp`\n  writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\\n`, 'utf8')\n  renameSync(tmp, file)\n}\n\n/**\n * Request the cancellation of ONE worker, idempotently, and return the operation's current\n * durable state.\n *\n * The write half of the acknowledged-cancellation contract (`writeWorkerSteer` is the steer\n * analog): append the request to the run's cancellation inbox, where the OWNING manager's\n * acknowledger (its turn loop — the root for label/profile references, the parent manager for an\n * exact node id at any depth) applies it — aborting exactly that worker's subtree and recording\n * what it proved. This function never applies the cancellation itself; writing a\n * request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists, it is\n * returned AS-IS and nothing is appended — repeating one operation can never apply twice. A\n * request the runtime has not answered yet returns `effect: 'unknown'` (never a success); call\n * again with the same `operationId` — or `readWorkerCancellation` — to read the acknowledged\n * result after a reconnect.\n */\nexport function cancelWorker(\n  eventDir: string,\n  worker: string,\n  operationId: string,\n  options: { readonly reason?: string; readonly source?: string } = {},\n): WorkerCancellation {\n  const ref = worker.trim()\n  if (!ref) throw new Error('cancelWorker: worker reference is empty')\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelWorker: operationId is empty')\n  const acknowledged = readWorkerCancellation(eventDir, opId)\n  if (acknowledged) return acknowledged\n  const source = options.source ?? 'human'\n  const pending = readWorkerCancelRequests(eventDir).find((r) => r.operationId === opId)\n  const request: WorkerCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    worker: ref,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n  }\n  if (!pending) {\n    mkdirSync(workerCancellationsDir(eventDir), { recursive: true })\n    appendFileSync(workerCancelRequestsFile(eventDir), `${JSON.stringify(request)}\\n`, 'utf8')\n    appendWorkerControlEvent(eventDir, ref, {\n      kind: 'cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n    })\n  }\n  return {\n    operationId: opId,\n    worker: request.worker,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n    terminated: [],\n  }\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const file = runCancelRequestFile(eventDir)\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const file = runCancellationFile(eventDir)\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. Write-then-rename, so a concurrent reader sees the\n * prior complete record or the new complete record, never a partial file.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  mkdirSync(dir, { recursive: true })\n  const file = runCancellationFile(eventDir)\n  const tmp = `${file}.${randomUUID()}.tmp`\n  writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\\n`, 'utf8')\n  renameSync(tmp, file)\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A request the runtime has not answered yet returns\n * `effect: 'unknown'` (never a success); call again with the same `operationId` — or\n * {@link readRunCancellation} — to read the acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: { readonly reason?: string; readonly source?: string } = {},\n): RunCancellation {\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged) return acknowledged\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n  }\n  if (pending === undefined) {\n    mkdirSync(workerCancellationsDir(eventDir), { recursive: true })\n    writeFileSync(runCancelRequestFile(eventDir), `${JSON.stringify(request, null, 2)}\\n`, 'utf8')\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.reason === undefined || typeof value.reason === 'string')\n  )\n}\n\nfunction isWorkerCancelRequest(value: Partial<WorkerCancelRequest>): value is WorkerCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    typeof value.worker === 'string' &&\n    value.worker.length > 0 &&\n    (value.reason === undefined || typeof value.reason === 'string')\n  )\n}\n\nfunction appendWorkerControlEvent(\n  eventDir: string,\n  label: string,\n  event: Record<string, unknown>,\n): void {\n  try {\n    mkdirSync(supervisorWorkersDir(eventDir), { recursive: true })\n    appendFileSync(\n      workerControlLogFile(eventDir, label),\n      `${JSON.stringify({ at: new Date().toISOString(), label, ...event })}\\n`,\n      'utf8',\n    )\n  } catch {\n    // Control logging is best-effort; the inbox write above is the durable part.\n  }\n}\n\nfunction isWorkerSteerRequest(value: Partial<WorkerSteerRequest>): value is WorkerSteerRequest {\n  return (\n    typeof value.id === 'string' &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    typeof value.worker === 'string' &&\n    typeof value.message === 'string' &&\n    value.message.trim().length > 0\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8KA,SAAgB,mBAAmB,SAAyB;CAC1D,OAAO,KAAK,QAAQ,OAAO,GAAG,UAAU,YAAY;AACtD;;AAGA,SAAgB,iBAAiB,SAAiB,IAAoB;CACpE,OAAO,KAAK,mBAAmB,OAAO,GAAG,EAAE;AAC7C;;;;;;AAOA,SAAgB,uBAAuB,SAAiB,IAAoB;CAC1E,OAAO,KAAK,yBAAyB,OAAO,GAAG,EAAE;AACnD;;;;;AAMA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,KAAK,QAAQ,OAAO,GAAG,UAAU,YAAY;AACtD;;AAGA,SAAgB,eAAe,OAAuB;CACpD,MAAM,OAAO,MAAM,QAAQ,oBAAoB,GAAG;CAClD,OAAO,KAAK,SAAS,IAAI,OAAO;AAClC;;AAGA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,UAAU,SAAS;AACjC;;AAGA,SAAgB,gBAAgB,SAAiB,cAAsB,QAAwB;CAC7F,OAAO,4BAA4B,iBAAiB,SAAS,YAAY,GAAG,MAAM;AACpF;;AAGA,SAAgB,4BAA4B,UAAkB,QAAwB;CACpF,OAAO,KAAK,qBAAqB,QAAQ,GAAG,GAAG,eAAe,MAAM,EAAE,cAAc;AACtF;;;;;;AAOA,SAAgB,qBAAqB,UAAkB,QAAwB;CAC7E,OAAO,KAAK,qBAAqB,QAAQ,GAAG,GAAG,eAAe,MAAM,EAAE,QAAQ;AAChF;;;;;;;AAQA,SAAgB,iBACd,SACA,cACA,QACA,SACA,SAAS,SACsD;CAC/D,MAAM,UAAU,QAAQ,KAAK;CAC7B,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,wBAAwB;CACtD,MAAM,MAAM,iBAAiB,SAAS,YAAY;CAClD,UAAU,qBAAqB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CACxD,MAAM,UAA8B;EAClC,IAAI,WAAW;EACf,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA;EACA,SAAS;CACX;CACA,MAAM,OAAO,gBAAgB,SAAS,cAAc,MAAM;CAC1D,eAAe,MAAM,GAAG,KAAK,UAAU,OAAO,EAAE,KAAK,MAAM;CAC3D,yBAAyB,KAAK,QAAQ;EACpC,MAAM;EACN,WAAW;EACX;EACA,WAAW,QAAQ;EACnB,SAAS;EACT,QAAQ;EACR,WAAW;CACb,CAAC;CACD,OAAO;EAAE;EAAQ;EAAM;CAAQ;AACjC;;AAGA,SAAgB,wBAAwB,UAAkB,QAAsC;CAC9F,MAAM,OAAO,4BAA4B,UAAU,MAAM;CACzD,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,CAAC;CAC/B,MAAM,MAA4B,CAAC;CACnC,IAAI,MAAM;CACV,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,QAAQ;EACN,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG;EAClC,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,SAAS;EACd,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,OAAO;GACjC,IAAI,qBAAqB,MAAM,GAAG,IAAI,KAAK,MAAM;EACnD,QAAQ,CAER;CACF;CACA,OAAO;AACT;;AAGA,SAAgB,uBAAuB,UAA0B;CAC/D,OAAO,KAAK,UAAU,eAAe;AACvC;;AAGA,SAAgB,yBAAyB,UAA0B;CACjE,OAAO,KAAK,uBAAuB,QAAQ,GAAG,iBAAiB;AACjE;;;;;;AAOA,SAAgB,uBAAuB,UAAkB,aAA6B;CACpF,OAAO,KAAK,uBAAuB,QAAQ,GAAG,GAAG,kBAAkB,WAAW,EAAE,MAAM;AACxF;AAEA,SAAS,kBAAkB,aAA6B;CACtD,MAAM,OAAO,YAAY,QAAQ,oBAAoB,GAAG;CACxD,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,6BAA6B;CACpE,OAAO;AACT;;AAGA,SAAgB,yBAAyB,UAAyC;CAChF,MAAM,OAAO,yBAAyB,QAAQ;CAC9C,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,CAAC;CAC/B,MAAM,MAA6B,CAAC;CACpC,IAAI,MAAM;CACV,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,QAAQ;EACN,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG;EAClC,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,SAAS;EACd,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,OAAO;GACjC,IAAI,sBAAsB,MAAM,GAAG,IAAI,KAAK,MAAM;EACpD,QAAQ,CAER;CACF;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,uBACd,UACA,aACgC;CAChC,MAAM,OAAO,uBAAuB,UAAU,WAAW;CACzD,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,sCAAsC,KAAK,qBAAqB,OAAO,YAAY,UACzE,YAAY,qEACxB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,wBAAwB,UAAkB,QAAkC;CAE1F,UADY,uBAAuB,QACvB,GAAG,EAAE,WAAW,KAAK,CAAC;CAClC,MAAM,OAAO,uBAAuB,UAAU,OAAO,WAAW;CAChE,MAAM,MAAM,GAAG,KAAK,GAAG,WAAW,EAAE;CACpC,cAAc,KAAK,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,MAAM;CACjE,WAAW,KAAK,IAAI;AACtB;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,aACd,UACA,QACA,aACA,UAAkE,CAAC,GAC/C;CACpB,MAAM,MAAM,OAAO,KAAK;CACxB,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,yCAAyC;CACnE,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oCAAoC;CAC/D,MAAM,eAAe,uBAAuB,UAAU,IAAI;CAC1D,IAAI,cAAc,OAAO;CACzB,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAAU,yBAAyB,QAAQ,CAAC,CAAC,MAAM,MAAM,EAAE,gBAAgB,IAAI;CACrF,MAAM,UAA+B,WAAW;EAC9C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,QAAQ;EACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE;CACA,IAAI,CAAC,SAAS;EACZ,UAAU,uBAAuB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC/D,eAAe,yBAAyB,QAAQ,GAAG,GAAG,KAAK,UAAU,OAAO,EAAE,KAAK,MAAM;EACzF,yBAAyB,UAAU,KAAK;GACtC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACnE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ,QAAQ;EAChB,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,QAAQ;EACR,YAAY,CAAC;CACf;AACF;;AAGA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,OAAO,oBAAoB,QAAQ;CACzC,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CAEpF,UADY,uBAAuB,QACvB,GAAG,EAAE,WAAW,KAAK,CAAC;CAClC,MAAM,OAAO,oBAAoB,QAAQ;CACzC,MAAM,MAAM,GAAG,KAAK,GAAG,WAAW,EAAE;CACpC,cAAc,KAAK,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,MAAM;CACjE,WAAW,KAAK,IAAI;AACtB;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,UACd,UACA,aACA,UAAkE,CAAC,GAClD;CACjB,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,cAAc,OAAO;CACzB,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,UAAU,uBAAuB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC/D,cAAc,qBAAqB,QAAQ,GAAG,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,MAAM;EAC7F,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACnE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,QAAQ;CACV;AACF;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW;AAE3D;AAEA,SAAS,sBAAsB,OAAmE;CAChG,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW,YACxB,MAAM,OAAO,SAAS,MACrB,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW;AAE3D;AAEA,SAAS,yBACP,UACA,OACA,OACM;CACN,IAAI;EACF,UAAU,qBAAqB,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAC7D,eACE,qBAAqB,UAAU,KAAK,GACpC,GAAG,KAAK,UAAU;GAAE,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;GAAG;GAAO,GAAG;EAAM,CAAC,EAAE,KACrE,MACF;CACF,QAAQ,CAER;AACF;AAEA,SAAS,qBAAqB,OAAiE;CAC7F,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,KAAK,CAAC,CAAC,SAAS;AAElC"}

package/dist/{runtime-BnqjbOGX.js → runtime--Jsq8JCC.js}

@@ -1,24 +1,25 @@
-import { C as sameControlCoordinates, S as isTerminalSessionStatus, _ as exactSession, a as assertEventBinding, b as freezeControlRef, c as assertSequence, d as awaitAbortable, f as cancellationRequest, g as exactControlRef, h as exactContinuedControlRef, i as assertCanonicalEventBinding, l as assertStableText, m as delay, n as abortError, o as assertInteractionBinding, p as copyControlRef, r as assertBoundaryBinding, s as assertResultBinding, t as RetainedRunProviderContractError, u as assertWaitDuration, v as exactSessionCancel, w as freshTurnInput, x as hasDurableCancel, y as exactSessionResult } from "./retained-run-binding-Dp2e8xne.js";
+import { A as assertInteractionBinding, B as exactControlRef, D as assertBoundaryBinding, E as abortError, F as awaitAbortable, G as hasDurableCancel, H as exactSessionCancel, I as cancellationRequest, J as freshTurnInput, K as isTerminalSessionStatus, L as copyControlRef, M as assertSequence, N as assertStableText, O as assertCanonicalEventBinding, P as assertWaitDuration, R as delay, T as RetainedRunProviderContractError, U as exactSessionResult, V as exactSession, W as freezeControlRef, j as assertResultBinding, k as assertEventBinding, q as sameControlCoordinates, z as exactContinuedControlRef } from "./materialization-Dl9J8ek4.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, l as RetainedInteractiveBindingError, m as ValidationError, n as AnalystError, s as PlannerError, u as RetainedRunAdmissionError } from "./errors-CDZ8XsVj.js";
-import "./stream-agent-turn-CXRugSGO.js";
+import "./stream-agent-turn-DYi8ymsU.js";
 import { t as detachedSnapshot } from "./snapshot-cK9K420n.js";
-import { S as contentAddress, i as InMemorySpawnJournal, r as InMemoryResultBlobStore, y as isTraceAnalysisStore } from "./spawn-journal-D2HKUImC.js";
-import { _ as zeroTokenUsage, a as hasCompleteCacheBreakdown, d as sleep, f as stringifySafe, h as usdEstimatedOf, l as randomSuffix, n as chargedTokens, o as isAbortError, r as cloneTokenUsage, t as addTokenUsage } from "./util-C1bv6yog.js";
+import { i as InMemorySpawnJournal, r as InMemoryResultBlobStore, s as insideCursorNamespace, v as isTraceAnalysisStore, x as contentAddress } from "./spawn-journal-BLnveCRS.js";
+import { c as isAbortError, d as randomSuffix, i as cloneSpend, m as stringifySafe, p as sleep, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, y as zeroSpend } from "./util-D6ZEuBMi.js";
+import { i as writeAllBytes, n as parseCommittedJsonLines, r as prepareJsonlAppend, t as isNoEntError } from "./jsonl-file-CDfsCI5s.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction--F3v1oo8.js";
-import { d as parseCanonicalTransportEvent, s as notifySandboxEventObserver, u as extractTransportEventIdentity } from "./sandbox-events-COwCWUVB.js";
-import { E as executableAgentSpecSnapshot, T as executableAgentProfileSnapshot } from "./materialization-P86EciBw.js";
-import { c as profileProviderModel, i as concreteModelId, s as profileModelExecutionSettings, t as assertExecutableAgentProfile } from "./model-policy-DgRJIJse.js";
-import { E as rollingDispatch, I as createExecutor, L as createExecutorRegistry, _t as runBrainLoop, ft as runAgentRounds, g as settledToIteration, gt as routerBrain, l as withDriverExecutor, mt as probeSandboxCapabilities, n as createSupervisor, pt as createSandboxLineage, q as createPushTraceSource, ut as defaultSelectWinner, vt as canonicalObservedModel, z as createWorktreeCliExecutor } from "./supervisor-s8SfZYbW.js";
-import "./environment-provider-DCBJ13VP.js";
+import { c as notifySandboxEventObserver, m as parseCanonicalTransportEvent, p as extractTransportEventIdentity } from "./sandbox-events-BVjstFgb.js";
+import { n as executableAgentSpecSnapshot, t as executableAgentProfileSnapshot } from "./executable-spec-BUcUcEPk.js";
+import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, t as assertExecutableAgentProfile } from "./model-policy-Sw4ywhtL.js";
+import { B as createExecutorRegistry, Ct as canonicalObservedModel, E as rollingDispatch, H as createWorktreeCliExecutor, St as runBrainLoop, X as createPushTraceSource, _t as runAgentRounds, g as settledToIteration, ht as defaultSelectWinner, l as withDriverExecutor, n as createSupervisor, vt as createSandboxLineage, xt as routerBrain, yt as probeSandboxCapabilities, z as createExecutor } from "./supervisor-CMZsJ7Wn.js";
+import "./environment-provider-3eCszBEm.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { C as observe, O as strategyAuthorMethod, T as profileChatClient, b as sample, v as refine, x as sampleThenRefine, y as runAgentic } from "./structural-rollout-CJgj9YXH.js";
-import { It as gateOnDeliverable, Lt as mapExecutorResult, n as supervise } from "./supervise-hCgG6ROJ.js";
-import "./authoring-DuyShLdw.js";
-import "./graph-De_XEsfH.js";
+import { C as observe, O as strategyAuthorMethod, T as profileChatClient, b as sample, v as refine, x as sampleThenRefine, y as runAgentic } from "./structural-rollout-D7V-HgXJ.js";
+import { At as mapExecutorResult, kt as gateOnDeliverable, n as supervise } from "./supervise-k_8VOASb.js";
+import "./authoring-CcVhJ1lP.js";
+import "./graph-CIh2HDmH.js";
 import { AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentTurnResultSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, nativeContextContinuationTurnDigest, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
-import { CODING_HARNESSES, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
+import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { heldoutSignificance, runProfileMatrix } from "@tangle-network/agent-eval/campaign";
-import { createHash } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { mkdir, readFile, realpath, writeFile } from "node:fs/promises";
 import { appendFileSync, chmodSync, constants, copyFileSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readlinkSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
@@ -1390,7 +1391,7 @@ function localSandboxClient(opts) {
 			routerKey: router.key,
 			model,
 			...settings.retry !== void 0 ? { retry: settings.retry } : {},
-			...settings.maxTokens !== void 0 ? { maxTokens: settings.maxTokens } : {},
+			...enforceTokenLimits(settings.tokenLimits, "router", "localSandboxClient").applied,
 			...settings.stream !== void 0 ? { stream: settings.stream } : {}
 		}, {
 			...settings.temperature !== void 0 ? { temperature: settings.temperature } : {},
@@ -2703,8 +2704,9 @@ var InMemoryCorpus = class {
 * back silently) and folding by `id`: a later identical line dedups, a later conflicting line
 * under the same `id` is a corruption (fail loud). `append` first replays to enforce the same
 * idempotence/conflict contract as the in-mem impl, then fsyncs the new line so a crash between
-* writes never loses an acknowledged fact. Shares the JSONL append-line spine with the spawn
-* journal, but the interface stays separate (a learned fact is not a replay record).
+* writes never loses an acknowledged fact. Reads and appends over the shared append-only
+* spine (`durable/jsonl-file`) — the same one the spawn journal uses — but the interface stays
+* separate (a learned fact is not a replay record).
 */
 var FileCorpus = class {
 	path;
@@ -2752,16 +2754,10 @@ var FileCorpus = class {
 			if (isNoEntError(err)) return /* @__PURE__ */ new Map();
 			throw err;
 		}
-		const lines = text.split("\n").filter((line) => line.length > 0);
 		const byId = /* @__PURE__ */ new Map();
-		for (let i = 0; i < lines.length; i++) {
-			const line = lines[i];
-			let parsed;
-			try {
-				parsed = JSON.parse(line);
-			} catch (err) {
-				throw new Error(`corpus corrupted: ${this.path} line ${i + 1} is not valid JSON: ` + (err instanceof Error ? err.message : String(err)));
-			}
+		const records = parseCommittedJsonLines(text, this.path);
+		for (let i = 0; i < records.length; i++) {
+			const parsed = records[i];
 			assertCorpusRecord(parsed, `corpus ${this.path} line ${i + 1}`);
 			const existing = byId.get(parsed.id);
 			if (existing && !recordsEqual(existing, parsed)) throw new Error(`corpus corrupted: ${this.path} has two different records for id '${parsed.id}'; an append-only corpus must never hold a conflicting re-append under one id`);
@@ -2773,9 +2769,10 @@ var FileCorpus = class {
 		const fs = await import("node:fs/promises");
 		const path = await import("node:path");
 		await fs.mkdir(path.dirname(this.path), { recursive: true });
+		const needsSeparator = await prepareJsonlAppend(this.path);
 		const fh = await fs.open(this.path, "a");
 		try {
-			await fh.write(`${JSON.stringify(record)}\n`);
+			await writeAllBytes(fh, `${needsSeparator ? "\n" : ""}${JSON.stringify(record)}\n`);
 			await fh.sync();
 		} finally {
 			await fh.close();
@@ -2828,9 +2825,6 @@ function renderLine(record) {
 function freeze(record) {
 	return Object.freeze({ ...record });
 }
-function isNoEntError(err) {
-	return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
-}
 //#endregion
 //#region src/runtime/personify/registry.ts
 /**
@@ -3062,6 +3056,30 @@ function mergeSeams(ctx, seams) {
 }
 //#endregion
 //#region src/runtime/personify/trajectory.ts
+/**
+*
+* Trajectory trace + cost ledger — the post-hoc tree reconstructor (§4 of `wave-types`).
+*
+* `trajectoryReport` rebuilds the WHOLE realized spawn tree from the durable
+* `SpawnJournal` (+ optionally the `ResultBlobStore` for `done` artifacts): every node
+* (driver AND leaf), the real parent/child edges, each node's terminal status, its OWN
+* conserved `Spend`, and the `Spend` ROLLED UP over its subtree. Roll-up is a post-order
+* fold over the parent edges: a node's `rolledUpSpend` is its own spend plus every
+* descendant's, so a driver is charged for the fanout it caused — the root's roll-up is
+* the whole run's conserved total (tokens + usd + iterations + ms).
+*
+* `equalKOnCost` compares separate runs (arms) on that conserved COST, not on raw
+* iteration COUNT. The sandbox executor reports tokens/usd INCLUSIVE of a leaf's internal
+* sub-agent fanout, so charging an arm by `total.tokens`/`total.usd` (not by how many
+* `next()` cursors it logged) closes the leaf-fanout confound: a treatment leaf that fanned
+* out internally pays for it in cost, where a per-iteration count would hide it. The
+* within-run conserved pool already guarantees `Σk` equal by construction; this check is the
+* CROSS-run analogue the pool cannot reach — proving equal compute before any win is claimed.
+*
+* Pure over the journal/blobs — no live agent calls; safe to run on a finished run's log.
+*
+* @experimental
+*/
 const defaultEqualKTolerance = .05;
 /**
 * Reconstruct the whole spawn tree for `root` with per-node + rolled-up `Spend`. Reads the
@@ -3074,7 +3092,7 @@ async function trajectoryReport(journal, blobs, root, options = {}) {
 	const events = await journal.loadTree(root);
 	if (events === void 0) throw new Error(`trajectoryReport: no journaled tree for root '${root}'`);
 	const spawns = events.filter(isNodeCreation).sort(bySeq);
-	const closes = events.filter((ev) => ev.kind !== "spawned" && ev.kind !== "waiting" && ev.kind !== "metered" && ev.kind !== "materialized" && ev.kind !== "execution-bound" && ev.kind !== "edge" && ev.kind !== "trace-unpropagated").sort(bySeq);
+	const closes = events.filter(insideCursorNamespace).sort(bySeq);
 	const nodes = /* @__PURE__ */ new Map();
 	for (const ev of spawns) nodes.set(ev.id, {
 		id: ev.id,
@@ -3104,7 +3122,7 @@ async function trajectoryReport(journal, blobs, root, options = {}) {
 	for (const ev of events) {
 		if (ev.kind !== "metered") continue;
 		const node = requireNode(nodes, ev.id, root);
-		node.ownSpend = addNodeSpend(node.ownSpend, ev.spend);
+		node.ownSpend = addSpend(node.ownSpend, ev.spend);
 	}
 	if (!nodes.has(root)) throw new Error(`trajectoryReport: root '${root}' has no spawned event in its journaled tree (corrupted log)`);
 	for (const ev of spawns) {
@@ -3181,8 +3199,8 @@ function rollUpSpend(nodes, root) {
 			});
 			continue;
 		}
-		const sum = cloneSpend(node.ownSpend);
-		for (const child of node.children) addSpend(sum, requireSpend(rolled, child, root));
+		let sum = cloneSpend(node.ownSpend);
+		for (const child of node.children) sum = addSpend(sum, requireSpend(rolled, child, root));
 		rolled.set(frame.id, sum);
 	}
 	return rolled;
@@ -3226,51 +3244,6 @@ function countStatuses(reported) {
 	for (const node of reported) counts[node.status] += 1;
 	return counts;
 }
-function zeroSpend() {
-	return {
-		iterations: 0,
-		tokens: zeroTokenUsage(),
-		usd: 0,
-		ms: 0
-	};
-}
-/** Add a `metered` event's spend onto a node's accumulated ownSpend (per channel). */
-function addNodeSpend(a, b) {
-	return {
-		iterations: a.iterations + b.iterations,
-		tokens: (() => {
-			const tokens = cloneTokenUsage(a.tokens);
-			addTokenUsage(tokens, b.tokens);
-			return tokens;
-		})(),
-		...a.tokensKnown === false || b.tokensKnown === false ? { tokensKnown: false } : {},
-		usd: a.usd + b.usd,
-		...a.usdKnown === false || b.usdKnown === false ? { usdKnown: false } : {},
-		...usdEstimatedOf(a, b),
-		ms: a.ms + b.ms
-	};
-}
-function cloneSpend(spend) {
-	return {
-		iterations: spend.iterations,
-		tokens: cloneTokenUsage(spend.tokens),
-		...spend.tokensKnown === false ? { tokensKnown: false } : {},
-		usd: spend.usd,
-		...spend.usdKnown === false ? { usdKnown: false } : {},
-		...spend.usdEstimated !== void 0 ? { usdEstimated: spend.usdEstimated } : {},
-		ms: spend.ms
-	};
-}
-/** Add `delta` into `acc` in place across every conserved channel. */
-function addSpend(acc, delta) {
-	acc.iterations += delta.iterations;
-	addTokenUsage(acc.tokens, delta.tokens);
-	if (delta.tokensKnown === false) acc.tokensKnown = false;
-	acc.usd += delta.usd;
-	if (delta.usdKnown === false) acc.usdKnown = false;
-	if (delta.usdEstimated !== void 0) acc.usdEstimated = (acc.usdEstimated ?? 0) + delta.usdEstimated;
-	acc.ms += delta.ms;
-}
 function spreadOf(values) {
 	if (values.length === 0) return 0;
 	return Math.max(...values) - Math.min(...values);
@@ -4069,11 +4042,26 @@ async function dispatchRetainedRun(options) {
 		sessionId: identity.sessionId,
 		executionId: identity.executionId
 	});
-	const reference = await environment.dispatch(freshTurnInput(options.turn, {
-		turnId: options.turn.turnId,
-		detach: true,
-		...identity
-	}));
+	const destroyIfCreated = async (cause) => {
+		if (environment.creation !== "created") throw cause;
+		try {
+			await environment.destroy?.();
+		} catch (cleanupError) {
+			throw new AggregateError([cause, cleanupError], "retained run dispatch failed and the environment it created could not be destroyed");
+		}
+		throw cause;
+	};
+	let reference;
+	try {
+		reference = await environment.dispatch(freshTurnInput(options.turn, {
+			turnId: options.turn.turnId,
+			detach: true,
+			...identity
+		}));
+	} catch (error) {
+		await destroyIfCreated(error);
+		throw error;
+	}
 	let exact;
 	try {
 		if (reference.provider !== void 0 && reference.provider !== options.provider.name) throw new Error("provider dispatch returned a session reference for another provider");
@@ -4086,7 +4074,7 @@ async function dispatchRetainedRun(options) {
 		if (controlRef.executionId !== identity.executionId) throw new Error("provider bound another execution than the requested identity");
 		exact = exactSession(environment, controlRef);
 	} catch (error) {
-		throw new RetainedRunDispatchBindingError({
+		const bindingError = new RetainedRunDispatchBindingError({
 			provider: options.provider.name,
 			environmentId: environment.id,
 			sessionId: identity.sessionId,
@@ -4096,6 +4084,8 @@ async function dispatchRetainedRun(options) {
 			...reference.provider === void 0 ? {} : { provider: reference.provider },
 			...reference.controlRef === void 0 ? {} : { controlRef: reference.controlRef }
 		}, { cause: error });
+		await destroyIfCreated(bindingError);
+		throw bindingError;
 	}
 	await admitDurably(options.onAdmission, {
 		phase: "dispatched",
@@ -4676,13 +4666,13 @@ async function runBenchmark(cfg) {
 					resolved: false,
 					progression: [],
 					usd: 0,
-					usdKnown: true,
+					usdKnown: false,
 					ms: 0,
 					tokens: {
 						input: 0,
 						output: 0
 					},
-					tokensKnown: true
+					tokensKnown: false
 				};
 			}
 			row = {
@@ -6291,6 +6281,43 @@ function traceSurfaceCalls(base) {
 		traceSource: trace.source
 	};
 }
+/**
+* Adapt an `agent-eval` `AnalystRegistry` into the lens shape `supervise({ analysts })` takes.
+*
+* The two registries were never structurally compatible: eval's class exposes `list()` and
+* `run(runId, inputs, opts)` and returns an `AnalystRunResult`, while `supervise` wants `kinds`
+* and `run(kindId, trace)`. So `'kinds' in buildDefaultAnalystRegistry()` is `false` and the five
+* calibrated lenses in `DEFAULT_TRACE_ANALYST_KINDS` were unreachable from any supervised run —
+* every consumer hand-rolled a lens instead (#630).
+*
+* The adapter lives HERE, not in eval, for one reason: eval must never import runtime, and runtime
+* already owns both shapes — it consumes `AnalystFinding` / `AnalystRunResult` from eval for its
+* analyst loop and defines the supervise lens itself. Writing it in eval would mean eval declaring
+* a duck-typed copy of a type this package already exports.
+*
+* `kinds` is the DEFINITION list, not `registry.list()`, because `Analyst` carries no `area` while
+* `TraceAnalystDefinition` does — `list()` cannot supply the field the lens shape requires. Every
+* id must be registered: an unknown kind throws at adapt time rather than returning nothing at run
+* time, when the driver would read the silence as "no findings".
+*/
+function analystsFromRegistry(registry, kinds = DEFAULT_TRACE_ANALYST_KINDS, opts) {
+	const registered = new Set(registry.list().map((analyst) => analyst.id));
+	const missing = kinds.map((kind) => kind.id).filter((id) => !registered.has(id));
+	if (missing.length > 0) throw new ValidationError(`analystsFromRegistry: ${missing.map((id) => JSON.stringify(id)).join(", ")} ${missing.length === 1 ? "is" : "are"} not registered; the registry has ${[...registered].map((id) => JSON.stringify(id)).join(", ") || "<none>"}`);
+	return {
+		kinds: kinds.map((kind) => ({
+			id: kind.id,
+			description: kind.description,
+			area: kind.area
+		})),
+		run: async (kindId, trace) => {
+			return (await registry.run(`supervise-analyst-${kindId}-${randomUUID()}`, { traceStore: trace }, {
+				...opts?.runOpts,
+				only: [kindId]
+			})).findings;
+		}
+	};
+}
 /** The default self-improvement LENS — authored content, not a code path. On each settled worker it hands
 *  the driver the still-FAILING tests (not just a score), so the next spawn targets the persistently-hard
 *  cases. Swap `analysts` to change what the driver improves from — that's the one knob. */
@@ -6431,7 +6458,7 @@ async function superviseSurface(profile, task, opts) {
 		maxIterations: (innerTurns + 2) * 5 + 16,
 		maxTokens: 1e9
 	};
-	const workerMaxTokens = profileMaxTokens(opts.worker.profile) ?? Math.max(1, Math.floor(budget.maxTokens / 8));
+	const workerMaxTokens = Math.max(1, Math.floor(budget.maxTokens / 8));
 	const makeWorkerAgent = (rawProfile) => {
 		const p = rawProfile ?? {};
 		return {
@@ -6476,12 +6503,6 @@ async function superviseSurface(profile, task, opts) {
 		completions: sp.iterations
 	};
 }
-function profileMaxTokens(profile) {
-	const value = profile.model?.metadata?.maxTokens;
-	if (value === void 0) return void 0;
-	if (!Number.isSafeInteger(value) || value < 1) throw new Error("superviseSurface: AgentProfile.model.metadata.maxTokens must be a positive safe integer");
-	return value;
-}
 //#endregion
 //#region src/runtime/surface-diff.ts
 /**
@@ -7095,6 +7116,6 @@ function tail(s) {
 	return s.slice(-400);
 }
 //#endregion
-export { runPersonified as $, pickChampion as A, stopSentinel as At, runBenchmark as B, connectStdioMcp as Bt, analyzeTrace as C, inlineSandboxClient as Ct, chatWorkerSeam as D, completionAuthorizes as Dt, chatTransportExecutor as E, superviseDispatch as Et, strategyAuthorContract as F, renderLeaderboardSvg as Ft, reconnectRetainedRun as G, mcpSecretEnvMetadataKey as Gt, reconnectRetainedInteractiveRun as H, createMcpEnvironment as Ht, strategyAuthorSystemPrompt as I, renderPairwiseMarkdown as It, startRetainedRunInEnvironment as J, secretEnvOfMcpServer as Jt, recoverRetainedRun as K, resolveMcpServerLaunch as Kt, SandboxRunAbortError as L, auditIntent as Lt, selectChampion as M, pairwiseSignificance as Mt, assertStrategyContract as N, renderLeaderboardHtml as Nt, createChatSessionStore as O, deterministicCompletion as Ot, authorStrategy as P, renderLeaderboardMarkdown as Pt, definePersona as Q, openSandboxRun as R, defaultAuditorInstruction as Rt, withUntrackedArtifacts as S, localSandboxClient as St, runCoderChecks as T, loopDispatch as Tt, recoverRetainedInteractiveRun as U, sanitizeMcpToolSchema as Ut, claimRetainedInteractiveControl as V, materializeLocalMcp as Vt, startRetainedInteractiveRun as W, envKeyProvider as Wt, equalKOnCost as X, promotionGate as Y, trajectoryReport as Z, VERIFY_TAIL_CHARS as _, registryScopeAnalyst as _t, localShell as a, renderCorpusToInstructions as at, settledWorkerOut as b, defineLeaderboard as bt, createVerifierEnvironment as c, loopUntil as ct, harvestSurfaceDiffs as d, selectValidWinner as dt, builtinShapes as et, failuresAnalyst as f, verify as ft, NOTE_MAX_CHARS as g, createScopeAnalyst as gt, EVIDENCE_MAX_CHARS as h, buildSteerContext as ht, jjWorkspace as i, InMemoryCorpus as it, runStrategyEvolution as j, leaderboard as jt, discriminatingMeans as k, sentinelCompletion as kt, boxSurfaceReader as l, panel as lt, worktreeFanout as m, assertTraceDerivedFindings as mt, makeFinding$1 as n, registerShape as nt, runInWorkspace as o, fanout as ot, superviseSurface as p, widen as pt, startRetainedRun as q, resolveSecretEnv as qt, gitWorkspace as r, FileCorpus as rt, createWaterfallCollector as s, flatWidenGate as st, computeFindingId$1 as t, createShapeRegistry as tt, fsSurfaceReader as u, pipeline as ut, closingWorkerNote as v, inProcessSandboxClient as vt, patchDelivered as w, loopCampaignDispatch as wt, copyUntrackedIntoClone as x, resolveSandboxClient as xt, composeWorkerEvidence as y, harvestCorpus as yt, printBenchmarkReport as z, McpSpawnFault as zt };
+export { definePersona as $, discriminatingMeans as A, sentinelCompletion as At, printBenchmarkReport as B, McpSpawnFault as Bt, withUntrackedArtifacts as C, localSandboxClient as Ct, chatTransportExecutor as D, superviseDispatch as Dt, runCoderChecks as E, loopDispatch as Et, authorStrategy as F, renderLeaderboardMarkdown as Ft, startRetainedInteractiveRun as G, envKeyProvider as Gt, claimRetainedInteractiveControl as H, materializeLocalMcp as Ht, strategyAuthorContract as I, renderLeaderboardSvg as It, startRetainedRun as J, resolveSecretEnv as Jt, reconnectRetainedRun as K, mcpSecretEnvMetadataKey as Kt, strategyAuthorSystemPrompt as L, renderPairwiseMarkdown as Lt, runStrategyEvolution as M, leaderboard as Mt, selectChampion as N, pairwiseSignificance as Nt, chatWorkerSeam as O, completionAuthorizes as Ot, assertStrategyContract as P, renderLeaderboardHtml as Pt, trajectoryReport as Q, SandboxRunAbortError as R, auditIntent as Rt, copyUntrackedIntoClone as S, resolveSandboxClient as St, patchDelivered as T, loopCampaignDispatch as Tt, reconnectRetainedInteractiveRun as U, createMcpEnvironment as Ut, runBenchmark as V, connectStdioMcp as Vt, recoverRetainedInteractiveRun as W, sanitizeMcpToolSchema as Wt, promotionGate as X, startRetainedRunInEnvironment as Y, secretEnvOfMcpServer as Yt, equalKOnCost as Z, NOTE_MAX_CHARS as _, createScopeAnalyst as _t, localShell as a, InMemoryCorpus as at, composeWorkerEvidence as b, harvestCorpus as bt, createVerifierEnvironment as c, flatWidenGate as ct, harvestSurfaceDiffs as d, pipeline as dt, runPersonified as et, analystsFromRegistry as f, selectValidWinner as ft, EVIDENCE_MAX_CHARS as g, buildSteerContext as gt, worktreeFanout as h, assertTraceDerivedFindings as ht, jjWorkspace as i, FileCorpus as it, pickChampion as j, stopSentinel as jt, createChatSessionStore as k, deterministicCompletion as kt, boxSurfaceReader as l, loopUntil as lt, superviseSurface as m, widen as mt, makeFinding$1 as n, createShapeRegistry as nt, runInWorkspace as o, renderCorpusToInstructions as ot, failuresAnalyst as p, verify as pt, recoverRetainedRun as q, resolveMcpServerLaunch as qt, gitWorkspace as r, registerShape as rt, createWaterfallCollector as s, fanout as st, computeFindingId$1 as t, builtinShapes as tt, fsSurfaceReader as u, panel as ut, VERIFY_TAIL_CHARS as v, registryScopeAnalyst as vt, analyzeTrace as w, inlineSandboxClient as wt, settledWorkerOut as x, defineLeaderboard as xt, closingWorkerNote as y, inProcessSandboxClient as yt, openSandboxRun as z, defaultAuditorInstruction as zt };
 
-//# sourceMappingURL=runtime-BnqjbOGX.js.map
+//# sourceMappingURL=runtime--Jsq8JCC.js.map