@tangle-network/agent-runtime 0.174.1 → 0.177.0

package/dist/{runtime-CojgP-hr.js → runtime-CJNlF5wM.js}

@@ -1,23 +1,24 @@
-import { A as assertEventBinding, B as exactContinuedControlRef, D as abortError, E as RetainedRunProviderContractError, F as assertWaitDuration, G as freezeControlRef, H as exactSession, I as awaitAbortable, J as sameControlCoordinates, K as hasDurableCancel, L as cancellationRequest, M as assertResultBinding, N as assertSequence, O as assertBoundaryBinding, P as assertStableText, R as copyControlRef, U as exactSessionCancel, V as exactControlRef, W as exactSessionResult, Y as freshTurnInput, j as assertInteractionBinding, k as assertCanonicalEventBinding, q as isTerminalSessionStatus, z as delay } from "./materialization-Ct3I4wu3.js";
-import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, l as RetainedInteractiveBindingError, m as ValidationError, n as AnalystError, s as PlannerError, u as RetainedRunAdmissionError } from "./errors-CDZ8XsVj.js";
-import "./stream-agent-turn-CKIpCbSq.js";
-import { n as detachedSnapshot } from "./snapshot-CTAf4uuA.js";
-import { i as InMemorySpawnJournal, r as InMemoryResultBlobStore, s as insideCursorNamespace, v as isTraceAnalysisStore, x as contentAddress } from "./spawn-journal-Tgvp5VS5.js";
+import { m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-CDZ8XsVj.js";
+import "./stream-agent-turn-CPj9SqVm.js";
+import { i as InMemorySpawnJournal, r as InMemoryResultBlobStore, s as insideCursorNamespace, v as isTraceAnalysisStore, x as contentAddress } from "./spawn-journal--N8Ten1q.js";
 import { c as isAbortError, d as randomSuffix, i as cloneSpend, m as stringifySafe, p as sleep, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, y as zeroSpend } from "./util-D6ZEuBMi.js";
 import { i as writeAllBytes, n as parseCommittedJsonLines, r as prepareJsonlAppend, t as isNoEntError } from "./jsonl-file-CDfsCI5s.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction--F3v1oo8.js";
-import { c as notifySandboxEventObserver, m as parseCanonicalTransportEvent, p as extractTransportEventIdentity } from "./sandbox-events-BVjstFgb.js";
+import { c as notifySandboxEventObserver } from "./sandbox-events-BVjstFgb.js";
 import { n as executableAgentSpecSnapshot, t as executableAgentProfileSnapshot } from "./executable-spec-CkGvdPds.js";
 import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, t as assertExecutableAgentProfile } from "./model-policy-Sw4ywhtL.js";
-import { Ct as createSandboxLineage, Dt as runBrainLoop, Et as routerBrain, K as createWorktreeCliExecutor, Ot as canonicalObservedModel, St as runAgentRounds, U as createExecutor, W as createExecutorRegistry, bt as defaultSelectWinner, et as createPushTraceSource, f as withDriverExecutor, k as rollingDispatch, n as createSupervisor, wt as probeSandboxCapabilities, y as settledToIteration } from "./supervisor-Bt1XLCVq.js";
-import "./environment-provider-Bn3652YU.js";
+import { Bt as probeSandboxCapabilities, Ht as routerBrain, It as defaultSelectWinner, Rt as runAgentRounds, Ut as runBrainLoop, W as rollingDispatch, Wt as canonicalObservedModel, at as createExecutorRegistry, f as withDriverExecutor, ht as createPushTraceSource, it as createExecutor, n as createSupervisor, st as createWorktreeCliExecutor, y as settledToIteration, zt as createSandboxLineage } from "./supervisor-ChLgoYhG.js";
+import "./environment-provider-DKyMWQJd.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { C as observe, O as strategyAuthorMethod, T as profileChatClient, b as sample, v as refine, x as sampleThenRefine, y as runAgentic } from "./structural-rollout-BUYA61iV.js";
-import { At as gateOnDeliverable, jt as mapExecutorResult, n as supervise } from "./supervise-Ci0RfWQF.js";
+import { C as observe, O as strategyAuthorMethod, T as profileChatClient, b as sample, v as refine, x as sampleThenRefine, y as runAgentic } from "./structural-rollout-BeAUK7Ta.js";
+import "./coordination-driver-xO1tkxy-.js";
+import { mt as mapExecutorResult, n as supervise, pt as gateOnDeliverable } from "./supervise-HsRKOlKY.js";
+import "./run-layout-Cd_l2XWV.js";
+import "./provision-supervisor-zA__ayUX.js";
 import { t as assertAuthoredCode } from "./authored-code-DzYtiflw.js";
-import "./authoring-DsLNInAz.js";
-import "./graph-BbeHgLXH.js";
-import { AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentTurnResultSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, nativeContextContinuationTurnDigest, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
+import "./authoring-bXmPNfCI.js";
+import "./graph-DwJXa1Ph.js";
+import { agentProfileSchema, canonicalAgentProfileDigest, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { heldoutSignificance, runProfileMatrix } from "@tangle-network/agent-eval/campaign";
 import { createHash, randomUUID } from "node:crypto";
@@ -3473,1086 +3474,6 @@ function promotionGate(opts) {
 	};
 }
 //#endregion
-//#region src/runtime/retained-interactive-handle.ts
-function createRetainedInteractiveRunHandle(environment, inputRef, capabilities, requestedStart) {
-	const ref = freezeInteractiveRef(inputRef);
-	const source = environment.interactive(ref);
-	if (!sameInteractiveRef(source.ref, ref)) throw new Error("provider reconstructed a different interactive process");
-	if (!source.sendPrompt) throw new Error("provider declared interactive prompt support but exposed no prompt method");
-	return Object.freeze({
-		ref,
-		capabilities,
-		claimControl: async (request, options) => exactClaim(ref, request, await awaitAbortable(Promise.resolve().then(() => source.claimControl(request, options)), options?.signal)),
-		status: async (options) => exactStatus(ref, await awaitAbortable(Promise.resolve().then(() => source.status(options)), options?.signal), requestedStart),
-		attach: async (request, options) => exactTerminal(ref, request, await awaitAbortable(Promise.resolve().then(() => source.attach(request, options)), options?.signal)),
-		sendPrompt: async (command, options) => exactPrompt(ref, await awaitAbortable(Promise.resolve().then(() => source.sendPrompt(command, options)), options?.signal), command),
-		stop: async (command, options) => exactStop(ref, await awaitAbortable(Promise.resolve().then(() => source.stop(command, options)), options?.signal), command)
-	});
-}
-function freezeInteractiveRef(value) {
-	return detachedSnapshot(AgentInteractiveSessionRefSchema.parse(value), "interactive session ref");
-}
-function exactClaim(ref, request, value) {
-	const acknowledgement = parseProviderAcknowledgement(AgentInteractiveSessionControlClaimAcknowledgementSchema, value, "control claim");
-	if (!agentInteractiveSessionControlClaimAcknowledgementMatchesRequest(request, acknowledgement)) throw new RetainedRunProviderContractError("provider returned a control claim acknowledgement for another request");
-	if (acknowledgement.control && !agentInteractiveSessionControlClaimMatchesRef(ref, acknowledgement.control)) throw new RetainedRunProviderContractError("provider returned a control claim for another interactive process");
-	return acknowledgement;
-}
-function exactPrompt(ref, value, command) {
-	const acknowledgement = parseProviderAcknowledgement(AgentInteractiveSessionPromptAcknowledgementSchema, value, "prompt");
-	if (!agentInteractiveSessionPromptAcknowledgementMatchesCommand(command, acknowledgement)) throw new RetainedRunProviderContractError("provider returned a prompt acknowledgement for another request");
-	if (!agentInteractiveSessionControlClaimMatchesRef(ref, acknowledgement.control)) throw new RetainedRunProviderContractError("provider returned a prompt acknowledgement for another interactive process");
-	return acknowledgement;
-}
-function exactStop(ref, value, command) {
-	const acknowledgement = parseProviderAcknowledgement(AgentInteractiveSessionStopAcknowledgementSchema, value, "stop");
-	if (!agentInteractiveSessionStopAcknowledgementMatchesCommand(command, acknowledgement)) throw new RetainedRunProviderContractError("provider returned a stop acknowledgement for another request");
-	if (!agentInteractiveSessionControlClaimMatchesRef(ref, acknowledgement.control)) throw new RetainedRunProviderContractError("provider returned a stop acknowledgement for another interactive process");
-	return acknowledgement;
-}
-function parseProviderAcknowledgement(schema, value, operation) {
-	try {
-		return schema.parse(value);
-	} catch {
-		throw new RetainedRunProviderContractError(`provider returned an invalid interactive ${operation} acknowledgement`);
-	}
-}
-function exactStatus(ref, value, requestedStart) {
-	let status;
-	try {
-		status = AgentInteractiveSessionStatusSchema.parse(value);
-	} catch (error) {
-		if (requestedStart === void 0) throw error;
-		throw new RetainedInteractiveBindingError(detachedSnapshot(requestedStart, "interactive status binding request"), {}, { cause: error });
-	}
-	if (!agentInteractiveSessionStatusMatchesRef(ref, status)) {
-		if (requestedStart !== void 0) throw new RetainedInteractiveBindingError(detachedSnapshot(requestedStart, "interactive status binding request"), detachedSnapshot({ status: detachedSnapshot(status, "interactive provider status") }, "interactive provider status result"), { cause: /* @__PURE__ */ new Error("provider returned status for another interactive process") });
-		throw new Error("provider returned status for another interactive process");
-	}
-	return status;
-}
-function exactTerminal(ref, request, terminal) {
-	const terminalRef = TerminalSessionRefSchema.parse(terminal.ref);
-	TerminalReplayWindowSchema.parse(terminal.cursors);
-	if (terminalRef.parentExecutionId !== ref.run.executionId) throw new Error("provider attached a terminal from another interactive run");
-	AgentInteractiveSessionControlClaimSchema.parse(terminal.control);
-	if (!agentInteractiveSessionControlClaimMatchesRef(ref, terminal.control)) throw new Error("provider attached a terminal with a claim for another interactive process");
-	if (canonicalCandidateDigest(terminal.control) !== canonicalCandidateDigest(request.control)) throw new Error("provider attached a terminal with a different interactive control claim");
-	return terminal;
-}
-function sameInteractiveRef(left, right) {
-	return canonicalCandidateDigest(left) === canonicalCandidateDigest(right);
-}
-//#endregion
-//#region src/runtime/retained-interactive-lifecycle.ts
-const INTERACTIVE_CLEANUP_TIMEOUT_MS = 3e4;
-/** Create one environment while retaining ownership if cancellation wins the race. */
-async function createInteractiveEnvironment(create, signal) {
-	if (signal?.aborted) throw abortError(signal.reason);
-	const creation = Promise.resolve().then(create);
-	if (signal === void 0) return creation;
-	return new Promise((resolve, reject) => {
-		let owner = "pending";
-		const removeAbortListener = () => signal.removeEventListener("abort", onAbort);
-		const onAbort = () => {
-			if (owner !== "pending") return;
-			owner = "runtime";
-			removeAbortListener();
-			disposeInteractiveEnvironment(creation, signal.reason);
-			reject(abortError(signal.reason));
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-		creation.then((environment) => {
-			if (owner !== "pending") return;
-			owner = "caller";
-			removeAbortListener();
-			resolve(environment);
-		}, (error) => {
-			if (owner !== "pending") return;
-			owner = "runtime";
-			removeAbortListener();
-			reject(error);
-		});
-	});
-}
-/** Start one process while destroying its unreturned environment on cancellation. */
-async function startInteractiveProcess(environment, start, signal) {
-	if (signal?.aborted) {
-		disposeInteractiveEnvironment(Promise.resolve(environment), signal.reason);
-		throw abortError(signal.reason);
-	}
-	const pending = Promise.resolve().then(start);
-	if (signal === void 0) return pending;
-	return new Promise((resolve, reject) => {
-		let owner = "pending";
-		const removeAbortListener = () => signal.removeEventListener("abort", onAbort);
-		const onAbort = () => {
-			if (owner !== "pending") return;
-			owner = "runtime";
-			removeAbortListener();
-			disposeInteractiveEnvironment(Promise.resolve(environment), signal.reason);
-			reject(abortError(signal.reason));
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-		pending.then((result) => {
-			if (owner !== "pending") return;
-			owner = "caller";
-			removeAbortListener();
-			resolve(result);
-		}, (error) => {
-			if (owner !== "pending") return;
-			owner = "runtime";
-			removeAbortListener();
-			reject(error);
-		});
-	});
-}
-/** Destroy an environment with fresh, bounded cleanup authority. */
-async function destroyInteractiveEnvironment(environment) {
-	if (!environment.destroy) throw new Error(`provider environment "${environment.id}" does not expose destroy()`);
-	const controller = new AbortController();
-	const timeout = /* @__PURE__ */ new Error("interactive environment cleanup timed out");
-	let timer;
-	const destruction = Promise.resolve().then(() => environment.destroy?.({ signal: controller.signal }));
-	destruction.catch(() => void 0);
-	try {
-		await Promise.race([destruction, new Promise((_resolve, reject) => {
-			timer = setTimeout(() => {
-				controller.abort(timeout);
-				reject(timeout);
-			}, INTERACTIVE_CLEANUP_TIMEOUT_MS);
-		})]);
-	} finally {
-		if (timer !== void 0) clearTimeout(timer);
-	}
-}
-function disposeInteractiveEnvironment(environment, abortReason) {
-	environment.then(destroyInteractiveEnvironment, () => void 0).catch((cleanupError) => {
-		const reason = abortReason instanceof Error ? abortReason : new Error(String(abortReason));
-		const failure = new AggregateError([reason, cleanupError], "cancelled interactive environment cleanup failed");
-		process.emitWarning(failure, { code: "AGENT_RUNTIME_INTERACTIVE_CLEANUP_FAILED" });
-	});
-}
-//#endregion
-//#region src/runtime/retained-run-intent.ts
-/**
-* Project environment creation input into public digest material.
-*
-* Opaque values never enter the material or its digest. Public scalar fields
-* remain bound directly, while opaque records retain only their key names.
-* Secret names remain public binding data, so changing requested credentials
-* still conflicts before provider effects begin.
-*/
-function retainedCreateMaterial(environment) {
-	return {
-		...environment.backend === void 0 ? {} : { backend: environment.backend },
-		...environment.workspace === void 0 ? {} : { workspaceDigest: canonicalCandidateDigest(publicWorkspaceMaterial(environment.workspace)) },
-		...environment.resources === void 0 ? {} : { resourcesDigest: canonicalCandidateDigest(publicResourceMaterial(environment.resources)) },
-		...environment.name === void 0 ? {} : { name: environment.name },
-		...environment.env === void 0 ? {} : { environmentVariableNames: retainedObjectNames(environment.env) },
-		...environment.secrets === void 0 ? {} : { secretNames: retainedSecretNames(environment.secrets) },
-		...environment.metadata === void 0 ? {} : { metadataKeys: retainedObjectNames(environment.metadata) },
-		...environment.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(environment.providerOptions) }
-	};
-}
-/** Add the retained ownership marker without attaching turn identity. */
-function retainedEnvironmentMetadata(metadata, idempotencyKey) {
-	return {
-		...metadata,
-		retainedIdempotencyKey: idempotencyKey
-	};
-}
-function publicWorkspaceMaterial(workspace) {
-	return {
-		...workspace.environment === void 0 ? {} : { environment: workspace.environment },
-		...workspace.image === void 0 ? {} : { image: workspace.image },
-		...workspace.repoUrl === void 0 ? {} : { repoUrl: workspace.repoUrl },
-		...workspace.gitRef === void 0 ? {} : { gitRef: workspace.gitRef },
-		...workspace.cwd === void 0 ? {} : { cwd: workspace.cwd },
-		...workspace.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(workspace.providerOptions) }
-	};
-}
-function publicResourceMaterial(resources) {
-	return {
-		...resources.cpu === void 0 ? {} : { cpu: resources.cpu },
-		...resources.memoryMb === void 0 ? {} : { memoryMb: resources.memoryMb },
-		...resources.diskMb === void 0 ? {} : { diskMb: resources.diskMb },
-		...resources.gpu === void 0 ? {} : { gpu: resources.gpu },
-		...resources.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(resources.providerOptions) }
-	};
-}
-function retainedObjectNames(value) {
-	return Object.keys(value).sort();
-}
-function retainedSecretNames(secrets) {
-	return Array.isArray(secrets) ? [...secrets].sort() : Object.keys(secrets).sort();
-}
-/** Project one headless turn into the material that `freshTurnInput` forwards. */
-function retainedTurnMaterial(input) {
-	return {
-		...input.prompt === void 0 ? {} : { prompt: input.prompt },
-		...input.parts === void 0 ? {} : { parts: input.parts },
-		...input.model === void 0 ? {} : { model: input.model },
-		...input.timeoutMs === void 0 ? {} : { timeoutMs: input.timeoutMs },
-		...input.context === void 0 ? {} : { context: input.context },
-		...input.interactions === void 0 ? {} : { interactions: input.interactions },
-		...input.providerOptions === void 0 ? {} : { providerOptions: input.providerOptions }
-	};
-}
-//#endregion
-//#region src/runtime/interaction-capabilities.ts
-/**
-* Check one turn's interaction request before the provider can dispatch it.
-*
-* A requested interaction is durable only when the provider can replay its
-* event and safely replay the response command. An unsupported request fails
-* before environment creation or dispatch begins.
-*/
-function assertRequestedInteractionCapabilities(providerName, requested, capabilities) {
-	const requestedKinds = Object.entries(requested ?? {}).filter(([, enabled]) => enabled === true).map(([kind]) => kind);
-	if (requestedKinds.length === 0) return;
-	const interactions = capabilities.interactions;
-	if (!interactions) throw new Error(`provider "${providerName}" does not support requested interactions: ${requestedKinds.join(", ")}`);
-	const unsupportedKinds = requestedKinds.filter((kind) => !interactions.kinds.includes(kind));
-	if (unsupportedKinds.length > 0) throw new Error(`provider "${providerName}" does not support requested interaction kinds: ${unsupportedKinds.join(", ")}`);
-	if (interactions.replay !== true || interactions.responseIdempotency !== true) throw new Error(`provider "${providerName}" cannot safely dispatch requested interactions without replay and response idempotency`);
-}
-//#endregion
-//#region src/runtime/retained-run-events.ts
-async function* retainedRunEvents(session, controlRef, options, now) {
-	const after = options?.after;
-	if (after) {
-		assertStableText(after.cursor, "replay cursor");
-		assertSequence(after.sequence, "replay sequence");
-	}
-	let nextSequence = after === void 0 ? 1 : after.sequence + 1;
-	let lastSequence = after?.sequence ?? -1;
-	const seen = /* @__PURE__ */ new Set();
-	let firstAfterEvent = after !== void 0;
-	const iterator = session.events({
-		...after === void 0 ? {} : { since: after.cursor },
-		...controlRef.executionId === void 0 ? {} : { executionId: controlRef.executionId },
-		...options?.signal === void 0 ? {} : { signal: options.signal }
-	})[Symbol.asyncIterator]();
-	try {
-		for (;;) {
-			const next = await awaitAbortable(Promise.resolve().then(() => iterator.next()), options?.signal);
-			if (next.done) break;
-			const source = next.value;
-			const identity = extractTransportEventIdentity(source);
-			const sourceCursor = identity.cursor ?? identity.eventId;
-			assertEventBinding(source, controlRef);
-			if (sourceCursor === after?.cursor) continue;
-			const event = canonicalEvent(source);
-			if (!event) continue;
-			assertCanonicalEventBinding(controlRef, event);
-			if (firstAfterEvent && after !== void 0) {
-				if (identity.sequence !== void 0 && identity.sequence <= after.sequence) throw new Error("provider replay did not prove that the first event follows the requested cursor");
-				firstAfterEvent = false;
-			}
-			const eventId = identity.eventId ?? identity.cursor;
-			if (!eventId) throw new Error("replayable canonical event has no stable provider event id or cursor");
-			assertStableText(eventId, "provider event id");
-			if (seen.has(eventId)) throw new Error(`provider replay repeated event id "${eventId}"`);
-			seen.add(eventId);
-			const sequence = identity.sequence ?? nextSequence;
-			if (sequence <= lastSequence) throw new Error(`provider event sequence is not monotonic: ${sequence} follows ${lastSequence}`);
-			const occurredAt = identity.occurredAt;
-			yield RuntimeEventEnvelopeSchema.parse({
-				runId: controlRef.runId,
-				eventId,
-				sequence,
-				cursor: identity.cursor ?? eventId,
-				...occurredAt === void 0 ? {} : { occurredAt },
-				receivedAt: new Date(now()).toISOString(),
-				event
-			});
-			lastSequence = sequence;
-			nextSequence = sequence + 1;
-		}
-	} catch (error) {
-		if (options?.signal?.aborted) {
-			try {
-				Promise.resolve(iterator.return?.()).catch(() => void 0);
-			} catch {}
-			throw abortError(options.signal.reason);
-		}
-		throw error;
-	} finally {
-		if (!options?.signal?.aborted) await iterator.return?.();
-	}
-}
-function canonicalEvent(source) {
-	return parseCanonicalTransportEvent(source.type, source.data, source.normalized ?? source.data.normalized, "provider");
-}
-//#endregion
-//#region src/runtime/retained-run-handle.ts
-function createRetainedRunHandle(environment, session, initialControlRef, capabilities, now) {
-	const clock = now ?? Date.now;
-	const measuredCapabilities = structuredClone(capabilities);
-	let activeControlRef = freezeControlRef(initialControlRef);
-	const snapshot = async (reason, signal) => {
-		if (signal?.aborted) throw abortError(signal.reason);
-		let status;
-		try {
-			status = await awaitAbortable(Promise.resolve().then(() => session.status({ signal })), signal);
-		} catch {
-			if (signal?.aborted) throw abortError(signal.reason);
-			status = "unknown";
-		}
-		const effect = status === "cancelled" ? "cancelled" : status === "completed" || status === "failed" || status === "expired" ? "not_live" : "unknown";
-		return {
-			runId: activeControlRef.runId,
-			controlRef: copyControlRef(activeControlRef),
-			status,
-			effect,
-			observedAt: new Date(clock()).toISOString(),
-			...reason === void 0 ? {} : { reason },
-			...signal?.aborted ? { signal: String(signal.reason ?? "aborted") } : {}
-		};
-	};
-	return {
-		get controlRef() {
-			return copyControlRef(activeControlRef);
-		},
-		get capabilities() {
-			return structuredClone(measuredCapabilities);
-		},
-		status: async (options) => {
-			const waitMs = options?.waitMs ?? 0;
-			assertWaitDuration(waitMs, "retained status wait");
-			const initial = await snapshot(void 0, options?.signal);
-			if (waitMs === 0 || isTerminalSessionStatus(initial.status)) return initial;
-			const deadline = Date.now() + waitMs;
-			let current = initial;
-			while (Date.now() < deadline) {
-				await delay(Math.min(25, Math.max(1, deadline - Date.now())), options?.signal);
-				current = await snapshot(void 0, options?.signal);
-				if (current.status !== initial.status || isTerminalSessionStatus(current.status)) return current;
-			}
-			return current;
-		},
-		events: (options) => retainedRunEvents(session, copyControlRef(activeControlRef), options, clock),
-		result: async () => {
-			const result = AgentTurnResultSchema.parse(await exactSessionResult(session));
-			assertResultBinding(activeControlRef, result);
-			return structuredClone(result);
-		},
-		async respondToInteraction(command, options) {
-			const exactCommand = InteractionResponseCommandSchema.parse(command);
-			assertInteractionBinding(activeControlRef, exactCommand);
-			if (measuredCapabilities.interactions?.replay !== true || measuredCapabilities.interactions.responseIdempotency !== true) throw new Error(`provider "${activeControlRef.provider}" does not promise retry-safe interaction responses`);
-			const respond = session.respondToInteraction ?? environment.respondToInteraction;
-			if (!respond) throw new Error(`provider "${activeControlRef.provider}" does not support interaction responses`);
-			const acknowledgement = InteractionAcknowledgementSchema.parse(await awaitAbortable(Promise.resolve().then(() => respond.call(session.respondToInteraction ? session : environment, exactCommand, options)), options?.signal));
-			if (acknowledgement.operationId !== exactCommand.operationId || acknowledgement.commandDigest !== exactCommand.commandDigest || canonicalCandidateDigest(acknowledgement.binding) !== canonicalCandidateDigest(exactCommand.binding)) throw new Error("provider returned an interaction acknowledgement for another command");
-			return structuredClone(acknowledgement);
-		},
-		async contextBoundary(options) {
-			if (!session.contextBoundary) return null;
-			const proof = await awaitAbortable(Promise.resolve().then(() => session.contextBoundary(options)), options?.signal);
-			if (proof === null) return null;
-			const exactProof = NativeContextBoundaryProofSchema.parse(proof);
-			assertBoundaryBinding(activeControlRef, exactProof);
-			return structuredClone(exactProof);
-		},
-		async continueNative(request, turn) {
-			const exactRequest = NativeContextContinuationRequestSchema.parse(request);
-			if (!sameControlCoordinates(exactRequest.run, activeControlRef)) throw new Error("native continuation request targets another retained run");
-			const { timeoutMs, signal, ...semanticTurn } = turn;
-			if (nativeContextContinuationTurnDigest(semanticTurn) !== exactRequest.turnDigest) throw new Error("native continuation request targets another user turn");
-			if (measuredCapabilities.nativeContinuation?.atomicBoundary !== true || measuredCapabilities.nativeContinuation.requestIdempotency !== true || !session.continueNative) throw new Error(`provider "${activeControlRef.provider}" does not support retry-safe native continuation`);
-			const outcome = AgentNativeContextContinuationResultSchema.parse(await awaitAbortable(Promise.resolve().then(() => session.continueNative(exactRequest, {
-				turn: semanticTurn,
-				...timeoutMs === void 0 ? {} : { timeoutMs },
-				...signal === void 0 ? {} : { signal }
-			})), signal));
-			if (outcome.acknowledgement.operationId !== exactRequest.operationId || outcome.acknowledgement.requestDigest !== exactRequest.requestDigest) throw new Error("provider returned a native continuation result for another request");
-			if (outcome.acknowledgement.actualBoundary !== void 0) {
-				const actualBoundary = NativeContextBoundaryProofSchema.parse(outcome.acknowledgement.actualBoundary);
-				assertBoundaryBinding(exactRequest.run, actualBoundary);
-			}
-			if (outcome.acknowledgement.status !== "accepted" && outcome.acknowledgement.status !== "replayed") return structuredClone(outcome);
-			if (!("result" in outcome) || !("controlRef" in outcome)) throw new Error("provider omitted the successful native continuation result");
-			if (!agentNativeContextContinuationResultMatchesRequest(exactRequest, outcome)) throw new Error("provider returned a native continuation result for another request");
-			const nextControlRef = exactContinuedControlRef(outcome.controlRef, activeControlRef);
-			assertResultBinding(nextControlRef, outcome.result);
-			activeControlRef = freezeControlRef(nextControlRef);
-			return structuredClone({
-				...outcome,
-				controlRef: copyControlRef(activeControlRef)
-			});
-		},
-		async cancel(options) {
-			assertStableText(options.operationId, "retained cancellation operation id");
-			if (options.reason !== void 0) assertStableText(options.reason, "retained cancellation reason");
-			if (options.signal?.aborted) throw abortError(options.signal.reason);
-			if (!hasDurableCancel(session)) throw new Error(`provider "${activeControlRef.provider}" does not expose durable cancellation operations`);
-			const request = cancellationRequest(activeControlRef, options.operationId, options.reason);
-			let effect = "unknown";
-			let providerStatus;
-			try {
-				const acknowledgement = await exactSessionCancel(session, request, { signal: options.signal });
-				effect = acknowledgement.effect;
-				providerStatus = acknowledgement.status;
-			} catch (error) {
-				if (error instanceof RetainedRunProviderContractError) throw error;
-				if (error instanceof Error && error.name === "AbortError") throw error;
-				effect = "unknown";
-			}
-			const current = await snapshot(options.reason, options.signal);
-			const observedEffect = effect === "unknown" && providerStatus === void 0 && current.status === "cancelled" ? "cancelled" : effect;
-			const acknowledgement = {
-				operationId: options.operationId,
-				requestDigest: request.requestDigest,
-				status: providerStatus ?? (observedEffect === "unknown" ? "unknown" : "accepted"),
-				effect: observedEffect,
-				snapshot: {
-					...current,
-					effect: observedEffect
-				},
-				...options.reason === void 0 ? {} : { reason: options.reason },
-				...options.signal?.aborted ? { signal: String(options.signal.reason ?? "aborted") } : {}
-			};
-			return structuredClone(acknowledgement);
-		}
-	};
-}
-//#endregion
-//#region src/runtime/retained-run-start.ts
-/**
-* Mint deterministic dispatch coordinates from the two caller-supplied keys.
-* The same `(idempotencyKey, turnId)` pair yields the same coordinates in
-* every process, so a pre-dispatch admission record always names the exact
-* session and execution the dispatch will request. Format is readable, not
-* hashed, following `deriveExecutionId`: components are URL-encoded so
-* delimiters inside caller keys cannot collapse distinct pairs, and the
-* result stays inside the 256-byte identifier bound.
-*/
-function mintRetainedIdentity(idempotencyKey, turnId) {
-	const base = `${encodeURIComponent(idempotencyKey)}:${encodeURIComponent(turnId)}`;
-	const sessionId = `retained-session:${base}`;
-	const executionId = `retained-execution:${base}`;
-	if (executionId.length > 256) throw new RangeError("minted retained identity must not exceed 256 bytes");
-	return {
-		sessionId,
-		executionId
-	};
-}
-/**
-* Dispatch one detached, replayable run and return only after exact durable
-* coordinates are confirmed by the provider and persisted by the caller.
-*
-* The required `onAdmission` hook first records a digest-only intent before
-* creation, then records recovery coordinates and the verified exact control
-* reference. The returned promise resolves only after the dispatched admission
-* is durable, so a crash cannot lose a successful start's exact reference.
-*
-* @stable
-*/
-async function startRetainedRun(options) {
-	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
-	assertStableText(options.turn.turnId, "turn idempotency key");
-	if (options.identity !== void 0) {
-		assertStableText(options.identity.sessionId, "retained session id");
-		assertStableText(options.identity.executionId, "retained execution id");
-	}
-	if (typeof options.onAdmission !== "function") throw new Error("startRetainedRun requires an awaited onAdmission durability hook");
-	const identity = options.identity ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
-	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const intent = retainedRunIntent(options, identity);
-	if (options.intent === void 0) await admitDurably(options.onAdmission, intent);
-	else assertExactRetainedRunIntent(options.intent, intent);
-	const providerCapabilities = await assertRetainedCapabilities(options.provider);
-	assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, providerCapabilities);
-	const environment = await options.provider.create({
-		...options.environment,
-		metadata: retainedEnvironmentMetadata(options.environment.metadata, options.environment.idempotencyKey)
-	});
-	let capabilities;
-	try {
-		capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
-		assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, capabilities);
-	} catch (error) {
-		try {
-			await environment.destroy?.();
-		} catch (cleanupError) {
-			throw new AggregateError([error, cleanupError], "retained run environment published invalid capabilities and could not be destroyed");
-		}
-		throw error;
-	}
-	if (!environment.dispatch || !environment.session) {
-		try {
-			await environment.destroy?.();
-		} catch (cleanupError) {
-			throw new AggregateError([/* @__PURE__ */ new Error(`provider "${options.provider.name}" does not expose detached session control`), cleanupError], "retained run could not start and its unused environment could not be destroyed");
-		}
-		throw new Error(`provider "${options.provider.name}" does not expose detached session control`);
-	}
-	return dispatchRetainedRun({
-		provider: options.provider,
-		environment,
-		environmentIdempotencyKey: options.environment.idempotencyKey,
-		turn: options.turn,
-		identity,
-		onAdmission: options.onAdmission,
-		capabilities,
-		now: options.now
-	});
-}
-/**
-* Dispatch a fresh retained session inside an existing provider environment.
-*
-* This operation reuses only the environment. It does not append to a prior
-* harness chat and does not claim native conversation continuity. The caller
-* must use `RetainedRunHandle.continueNative` for a verified same-chat turn.
-*
-* @stable
-*/
-async function startRetainedRunInEnvironment(options) {
-	assertStableText(options.environment.id, "retained environment id");
-	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
-	assertStableText(options.turn.turnId, "turn idempotency key");
-	if (options.identity !== void 0) {
-		assertStableText(options.identity.sessionId, "retained session id");
-		assertStableText(options.identity.executionId, "retained execution id");
-	}
-	if (typeof options.onAdmission !== "function") throw new Error("startRetainedRunInEnvironment requires an awaited onAdmission durability hook");
-	const identity = options.identity ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
-	const providerCapabilities = await assertRetainedCapabilities(options.provider);
-	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const environment = await options.provider.get(options.environment.id);
-	if (!environment) throw new Error(`provider "${options.provider.name}" no longer holds environment "${options.environment.id}"`);
-	if (environment.id !== options.environment.id || environment.provider !== options.provider.name) throw new Error("provider reconstructed a different retained environment");
-	const capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
-	assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, capabilities);
-	if (!environment.dispatch || !environment.session) throw new Error(`provider "${options.provider.name}" does not expose detached session control`);
-	await assertRetainedEnvironmentOwnership(options.provider, environment.id, options.environment.idempotencyKey);
-	return dispatchRetainedRun({
-		provider: options.provider,
-		environment,
-		environmentIdempotencyKey: options.environment.idempotencyKey,
-		turn: options.turn,
-		identity,
-		onAdmission: options.onAdmission,
-		capabilities,
-		now: options.now
-	});
-}
-async function assertRetainedEnvironmentOwnership(provider, environmentId, idempotencyKey) {
-	if (!provider.list) throw new Error(`provider "${provider.name}" cannot prove retained environment ownership by metadata`);
-	const matches = (await provider.list({ metadata: { retainedIdempotencyKey: idempotencyKey } })).filter((summary) => summary.id === environmentId && summary.provider === provider.name);
-	if (matches.length !== 1 || matches[0]?.metadata?.retainedIdempotencyKey !== idempotencyKey) throw new Error(`provider "${provider.name}" could not bind environment "${environmentId}" to its retained idempotency key`);
-}
-async function dispatchRetainedRun(options) {
-	const { environment, identity } = options;
-	assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, options.capabilities);
-	await admitDurably(options.onAdmission, {
-		phase: "environment",
-		provider: options.provider.name,
-		environmentId: environment.id,
-		idempotencyKey: options.environmentIdempotencyKey,
-		turnId: options.turn.turnId,
-		sessionId: identity.sessionId,
-		executionId: identity.executionId
-	});
-	const destroyIfCreated = async (cause) => {
-		if (environment.creation !== "created") throw cause;
-		try {
-			await environment.destroy?.();
-		} catch (cleanupError) {
-			throw new AggregateError([cause, cleanupError], "retained run dispatch failed and the environment it created could not be destroyed");
-		}
-		throw cause;
-	};
-	let reference;
-	try {
-		reference = await environment.dispatch(freshTurnInput(options.turn, {
-			turnId: options.turn.turnId,
-			detach: true,
-			...identity
-		}));
-	} catch (error) {
-		await destroyIfCreated(error);
-		throw error;
-	}
-	let exact;
-	try {
-		if (reference.provider !== void 0 && reference.provider !== options.provider.name) throw new Error("provider dispatch returned a session reference for another provider");
-		if (reference.id !== identity.sessionId) throw new Error("provider dispatched into another session than the requested identity");
-		const controlRef = exactControlRef(reference.controlRef, {
-			provider: options.provider.name,
-			environmentId: environment.id,
-			sessionId: identity.sessionId
-		});
-		if (controlRef.executionId !== identity.executionId) throw new Error("provider bound another execution than the requested identity");
-		exact = exactSession(environment, controlRef);
-	} catch (error) {
-		const bindingError = new RetainedRunDispatchBindingError({
-			provider: options.provider.name,
-			environmentId: environment.id,
-			sessionId: identity.sessionId,
-			executionId: identity.executionId
-		}, {
-			...reference.id === void 0 ? {} : { id: reference.id },
-			...reference.provider === void 0 ? {} : { provider: reference.provider },
-			...reference.controlRef === void 0 ? {} : { controlRef: reference.controlRef }
-		}, { cause: error });
-		await destroyIfCreated(bindingError);
-		throw bindingError;
-	}
-	await admitDurably(options.onAdmission, {
-		phase: "dispatched",
-		controlRef: freezeControlRef(exact.controlRef),
-		idempotencyKey: options.environmentIdempotencyKey,
-		turnId: options.turn.turnId
-	});
-	return createRetainedRunHandle(environment, exact.session, exact.controlRef, options.capabilities, options.now);
-}
-/**
-* Await one admission record through the caller's durability hook. A rejection
-* keeps the environment alive — the provider state plus any partial admission
-* record is the recovery path — and surfaces as `RetainedRunAdmissionError` so
-* callers can distinguish a persistence failure from a provider failure.
-*/
-async function admitDurably(onAdmission, admission) {
-	const stableAdmission = detachedSnapshot(admission, "retained run admission");
-	try {
-		await onAdmission(stableAdmission);
-	} catch (error) {
-		if (isInteractiveAdmission(stableAdmission)) throw new RetainedInteractiveAdmissionError(stableAdmission, { cause: error });
-		throw new RetainedRunAdmissionError(stableAdmission, { cause: error });
-	}
-}
-function isInteractiveAdmission(admission) {
-	return admission.phase === "interactive_intent" || admission.phase === "interactive_environment" || admission.phase === "interactive_started";
-}
-async function recoverRetainedRun(options) {
-	if ("admission" in options) {
-		if (options.admission.provider !== options.provider.name) throw new Error("retained run intent belongs to another provider");
-		return {
-			outcome: "recovered",
-			handle: await startRetainedRun({
-				provider: options.provider,
-				...options.replay,
-				intent: options.admission,
-				onAdmission: options.onAdmission,
-				now: options.now
-			})
-		};
-	}
-	assertStableText(options.environmentId, "retained environment id");
-	assertStableText(options.sessionId, "retained session id");
-	assertStableText(options.executionId, "retained execution id");
-	const providerCapabilities = await assertRetainedCapabilities(options.provider);
-	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const environment = await options.provider.get(options.environmentId);
-	if (!environment) return { outcome: "not_found" };
-	const capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
-	if (!environment.session) return {
-		outcome: "unverifiable",
-		environment
-	};
-	let session;
-	try {
-		session = environment.session(options.sessionId);
-	} catch {
-		return {
-			outcome: "unverifiable",
-			environment
-		};
-	}
-	const parsed = AgentExactRunControlRefSchema.safeParse(session.controlRef);
-	if (!parsed.success) return {
-		outcome: "unverifiable",
-		environment
-	};
-	const controlRef = parsed.data;
-	if (controlRef.provider !== options.provider.name || controlRef.environmentId !== options.environmentId || controlRef.sessionId !== options.sessionId || controlRef.executionId !== options.executionId) throw new Error("provider session is bound to other retained run coordinates");
-	const exact = exactSession(environment, controlRef);
-	return {
-		outcome: "recovered",
-		handle: createRetainedRunHandle(environment, exact.session, exact.controlRef, capabilities, options.now)
-	};
-}
-function retainedRunIntent(options, identity) {
-	const requestedProfileDigest = canonicalCandidateDigest(options.environment.profile);
-	const requestDigest = canonicalCandidateDigest({
-		kind: "retained-run-intent.v1",
-		provider: options.provider.name,
-		idempotencyKey: options.environment.idempotencyKey,
-		turnId: options.turn.turnId,
-		sessionId: identity.sessionId,
-		executionId: identity.executionId,
-		requestedProfileDigest,
-		create: retainedCreateMaterial(options.environment),
-		turn: retainedTurnMaterial(options.turn)
-	});
-	return {
-		phase: "intent",
-		provider: options.provider.name,
-		idempotencyKey: options.environment.idempotencyKey,
-		turnId: options.turn.turnId,
-		sessionId: identity.sessionId,
-		executionId: identity.executionId,
-		runId: `retained-intent-run:${requestDigest.slice(7)}`,
-		requestedProfileDigest,
-		requestDigest
-	};
-}
-function assertExactRetainedRunIntent(received, expected) {
-	if (canonicalCandidateDigest(parseRetainedRunIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("retained run intent conflicts with replay material");
-}
-function parseRetainedRunIntent(value) {
-	const stable = detachedSnapshot(value, "retained run intent");
-	if (stable === null || typeof stable !== "object" || Array.isArray(stable)) throw new Error("retained run intent is malformed");
-	const record = stable;
-	const allowed = /* @__PURE__ */ new Set([
-		"phase",
-		"provider",
-		"idempotencyKey",
-		"turnId",
-		"sessionId",
-		"executionId",
-		"runId",
-		"requestedProfileDigest",
-		"requestDigest"
-	]);
-	if (Object.keys(record).some((key) => !allowed.has(key))) throw new Error("retained run intent contains unsupported material");
-	if (record.phase !== "intent") throw new Error("retained run intent has an invalid phase");
-	for (const [key, value] of Object.entries(record)) {
-		if (key === "phase") continue;
-		if (typeof value !== "string" || value.length === 0) throw new Error(`retained run intent field "${key}" is invalid`);
-	}
-	assertDigest$1(record.requestedProfileDigest, "retained run intent profile digest");
-	assertDigest$1(record.requestDigest, "retained run intent request digest");
-	return stable;
-}
-function assertDigest$1(value, label) {
-	if (typeof value !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(value)) throw new Error(`${label} is invalid`);
-}
-/** Rebuild a retained-run client without retaining any object from the starter. @stable */
-async function reconnectRetainedRun(options) {
-	const controlRef = AgentExactRunControlRefSchema.parse(options.controlRef);
-	if (controlRef.provider !== options.provider.name) throw new Error(`run provider "${controlRef.provider}" does not match "${options.provider.name}"`);
-	const providerCapabilities = await assertRetainedCapabilities(options.provider);
-	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const environment = await options.provider.get(controlRef.environmentId);
-	if (!environment) return null;
-	const capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
-	const exact = exactSession(environment, controlRef);
-	return createRetainedRunHandle(environment, exact.session, exact.controlRef, capabilities, options.now);
-}
-async function assertRetainedCapabilities(provider) {
-	const capabilities = AgentEnvironmentCapabilitiesSchema.parse(await provider.capabilities());
-	assertRetainedCapabilityRequirements(provider.name, capabilities);
-	return capabilities;
-}
-/**
-* Select the capability document for one concrete environment.
-*
-* A measured environment document is authoritative. An absent document uses
-* the provider document because that provider claims the same guarantee for
-* every environment it creates.
-*/
-function retainedCapabilitiesForEnvironment(providerName, providerCapabilities, environment) {
-	if (environment.capabilities === void 0) return providerCapabilities;
-	const measured = AgentEnvironmentCapabilitiesSchema.parse(environment.capabilities);
-	assertRetainedCapabilityRequirements(providerName, measured);
-	return measured;
-}
-function assertRetainedCapabilityRequirements(providerName, capabilities) {
-	const retained = capabilities.retainedControl;
-	if (retained?.exactRunIdentity !== true || retained.resultIdentity !== true || retained.eventIdentity !== true || retained.cancellationIdempotency !== true || !capabilities.streaming.detach || !capabilities.streaming.replay || !capabilities.streaming.turnIdempotency) throw new Error(`provider "${providerName}" cannot control a retry-safe retained run`);
-}
-//#endregion
-//#region src/runtime/retained-interactive.ts
-/**
-* Start one retry-safe native coding-agent TUI without dispatching a headless turn.
-* The intent admission is durable before provider.create; the environment and
-* process admissions follow only after their exact provider coordinates exist.
-* @stable
-*/
-async function startRetainedInteractiveRun(options) {
-	options.signal?.throwIfAborted();
-	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
-	assertStableText(options.interactiveIdempotencyKey, "interactive idempotency key");
-	if (typeof options.onAdmission !== "function") throw new Error("startRetainedInteractiveRun requires an awaited onAdmission durability hook");
-	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const profile = agentProfileSchema.parse(options.environment.profile);
-	if (profile.harness === void 0) throw new Error("retained interactive runs require AgentProfile.harness");
-	const requestedProfileDigest = canonicalAgentProfileDigest(profile);
-	const identity = mintRetainedIdentity(options.environment.idempotencyKey, options.interactiveIdempotencyKey);
-	const intent = interactiveIntent(options, profile, identity);
-	if (options.intent === void 0) await admitDurably(options.onAdmission, intent);
-	else assertExactInteractiveIntent(options.intent, intent);
-	const providerCapabilities = AgentEnvironmentCapabilitiesSchema.parse(await awaitAbortable(Promise.resolve().then(() => options.provider.capabilities()), options.signal));
-	assertInteractiveCapabilities(options.provider.name, providerCapabilities);
-	const environment = await createInteractiveEnvironment(() => options.provider.create({
-		...options.environment,
-		profile,
-		signal: options.signal,
-		metadata: retainedEnvironmentMetadata(options.environment.metadata, options.environment.idempotencyKey)
-	}), options.signal);
-	let capabilities;
-	try {
-		assertExactEnvironment(options.provider.name, environment);
-		options.signal?.throwIfAborted();
-		capabilities = interactiveCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
-		assertInteractiveMethods(options.provider.name, environment);
-	} catch (error) {
-		await destroyUnusedEnvironment(environment, error);
-		throw error;
-	}
-	const request = interactiveRequest(options, environment, profile, requestedProfileDigest, identity);
-	await admitDurably(options.onAdmission, {
-		phase: "interactive_environment",
-		provider: options.provider.name,
-		environmentId: environment.id,
-		idempotencyKey: options.environment.idempotencyKey,
-		interactiveIdempotencyKey: options.interactiveIdempotencyKey,
-		request
-	});
-	const ref = exactStartedRef(request, await startInteractiveProcess(environment, () => environment.startInteractive(request, { signal: options.signal }), options.signal));
-	await admitDurably(options.onAdmission, {
-		phase: "interactive_started",
-		idempotencyKey: options.environment.idempotencyKey,
-		interactiveIdempotencyKey: options.interactiveIdempotencyKey,
-		ref
-	});
-	return createRetainedInteractiveRunHandle(environment, ref, capabilities, request);
-}
-/** Retry one exact start after its provider response may have been lost. @stable */
-async function recoverRetainedInteractiveRun(options) {
-	options.signal?.throwIfAborted();
-	if (typeof options.onAdmission !== "function") throw new Error("recoverRetainedInteractiveRun requires an awaited onAdmission durability hook");
-	const admission = options.admission;
-	if (admission.provider !== options.provider.name) throw new Error("interactive admission belongs to another provider");
-	if (admission.phase === "interactive_intent") {
-		if (options.replay === void 0) throw new Error("recoverRetainedInteractiveRun requires the original start material for an interactive intent");
-		return startRetainedInteractiveRun({
-			provider: options.provider,
-			...options.replay,
-			intent: admission,
-			onAdmission: options.onAdmission,
-			signal: options.signal
-		});
-	}
-	const request = exactRecoveryRequest(admission);
-	const { environment, capabilities } = await reconstructEnvironment(options.provider, admission.environmentId, options.signal);
-	if (!environment || !capabilities) return null;
-	const ref = exactStartedRef(request, await awaitAbortable(Promise.resolve().then(() => environment.startInteractive(request, { signal: options.signal })), options.signal));
-	await admitDurably(options.onAdmission, {
-		phase: "interactive_started",
-		idempotencyKey: admission.idempotencyKey,
-		interactiveIdempotencyKey: admission.interactiveIdempotencyKey,
-		ref
-	});
-	return createRetainedInteractiveRunHandle(environment, ref, capabilities, request);
-}
-function exactRecoveryRequest(admission) {
-	assertStableText(admission.environmentId, "interactive environment id");
-	assertStableText(admission.idempotencyKey, "environment idempotency key");
-	assertStableText(admission.interactiveIdempotencyKey, "interactive idempotency key");
-	const request = exactAgentInteractiveSessionStart(admission.request);
-	const identity = mintRetainedIdentity(admission.idempotencyKey, admission.interactiveIdempotencyKey);
-	if (request.run.provider !== admission.provider || request.run.environmentId !== admission.environmentId || request.run.sessionId !== identity.sessionId || request.run.executionId !== identity.executionId) throw new Error("interactive admission does not match its recovery coordinates");
-	return request;
-}
-/** Rebuild controls for one exact provider-owned coding-agent process. @stable */
-async function reconnectRetainedInteractiveRun(options) {
-	options.signal?.throwIfAborted();
-	const ref = AgentInteractiveSessionRefSchema.parse(options.ref);
-	if (ref.run.provider !== options.provider.name) throw new Error("interactive session reference belongs to another provider");
-	const { environment, capabilities } = await reconstructEnvironment(options.provider, ref.run.environmentId, options.signal);
-	if (!environment || !capabilities) return null;
-	const handle = createRetainedInteractiveRunHandle(environment, ref, capabilities);
-	await handle.status({ signal: options.signal });
-	return handle;
-}
-function interactiveRequest(options, environment, profile, requestedProfileDigest, identity) {
-	const start = {
-		profile,
-		requestedProfileDigest,
-		...options.initialPrompt === void 0 ? {} : { initialPrompt: options.initialPrompt },
-		...options.cwd === void 0 ? {} : { cwd: options.cwd },
-		...options.cols === void 0 ? {} : { cols: options.cols },
-		...options.rows === void 0 ? {} : { rows: options.rows }
-	};
-	return exactAgentInteractiveSessionStart({
-		run: agentInteractiveSessionRunRef({
-			provider: options.provider.name,
-			environmentId: environment.id,
-			...identity
-		}, start),
-		...start
-	});
-}
-function interactiveIntent(options, profile, identity) {
-	const requestedProfileDigest = canonicalAgentProfileDigest(profile);
-	const requestDigest = canonicalCandidateDigest({
-		kind: "retained-interactive-intent.v1",
-		provider: options.provider.name,
-		idempotencyKey: options.environment.idempotencyKey,
-		interactiveIdempotencyKey: options.interactiveIdempotencyKey,
-		sessionId: identity.sessionId,
-		executionId: identity.executionId,
-		requestedProfileDigest,
-		create: retainedCreateMaterial(options.environment),
-		start: sanitizedStartMaterial(options)
-	});
-	return {
-		phase: "interactive_intent",
-		provider: options.provider.name,
-		idempotencyKey: options.environment.idempotencyKey,
-		interactiveIdempotencyKey: options.interactiveIdempotencyKey,
-		sessionId: identity.sessionId,
-		executionId: identity.executionId,
-		runId: `interactive-intent-run:${requestDigest.slice(7)}`,
-		requestedProfileDigest,
-		requestDigest
-	};
-}
-function sanitizedStartMaterial(options) {
-	return {
-		...options.initialPrompt === void 0 ? {} : { initialPrompt: options.initialPrompt },
-		...options.cwd === void 0 ? {} : { cwd: options.cwd },
-		...options.cols === void 0 ? {} : { cols: options.cols },
-		...options.rows === void 0 ? {} : { rows: options.rows }
-	};
-}
-function assertExactInteractiveIntent(received, expected) {
-	if (canonicalCandidateDigest(parseInteractiveIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("interactive intent conflicts with replay material");
-}
-function parseInteractiveIntent(value) {
-	const stable = detachedSnapshot(value, "interactive intent");
-	if (stable === null || typeof stable !== "object" || Array.isArray(stable)) throw new Error("interactive intent is malformed");
-	const record = stable;
-	const allowed = /* @__PURE__ */ new Set([
-		"phase",
-		"provider",
-		"idempotencyKey",
-		"interactiveIdempotencyKey",
-		"sessionId",
-		"executionId",
-		"runId",
-		"requestedProfileDigest",
-		"requestDigest"
-	]);
-	if (Object.keys(record).some((key) => !allowed.has(key))) throw new Error("interactive intent contains unsupported material");
-	if (record.phase !== "interactive_intent") throw new Error("interactive intent has an invalid phase");
-	for (const [key, value] of Object.entries(record)) {
-		if (key === "phase") continue;
-		if (typeof value !== "string" || value.length === 0) throw new Error(`interactive intent field "${key}" is invalid`);
-	}
-	assertDigest(record.requestedProfileDigest, "interactive intent profile digest");
-	assertDigest(record.requestDigest, "interactive intent request digest");
-	return stable;
-}
-function assertDigest(value, label) {
-	if (typeof value !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(value)) throw new Error(`${label} is invalid`);
-}
-async function reconstructEnvironment(provider, environmentId, signal) {
-	if (!provider.get) throw new Error(`provider "${provider.name}" cannot reconstruct an environment by id`);
-	const providerCapabilities = AgentEnvironmentCapabilitiesSchema.parse(await awaitAbortable(Promise.resolve().then(() => provider.capabilities()), signal));
-	assertInteractiveCapabilities(provider.name, providerCapabilities);
-	const environment = await awaitAbortable(Promise.resolve().then(() => provider.get(environmentId, { signal })), signal);
-	if (!environment) return {
-		environment: null,
-		capabilities: null
-	};
-	assertExactEnvironment(provider.name, environment, environmentId);
-	const capabilities = interactiveCapabilitiesForEnvironment(provider.name, providerCapabilities, environment);
-	assertInteractiveMethods(provider.name, environment);
-	return {
-		environment,
-		capabilities
-	};
-}
-function exactStartedRef(request, value) {
-	const stableRequest = detachedSnapshot(request, "interactive start binding request");
-	let ref;
-	try {
-		ref = AgentInteractiveSessionRefSchema.parse(value);
-	} catch (error) {
-		throw new RetainedInteractiveBindingError(stableRequest, {}, { cause: error });
-	}
-	if (!agentInteractiveSessionRefMatchesStart(request, ref)) throw new RetainedInteractiveBindingError(stableRequest, detachedSnapshot({ ref: detachedSnapshot(ref, "interactive provider start reference") }, "interactive provider start result"), { cause: /* @__PURE__ */ new Error("provider started another interactive run than requested") });
-	return freezeInteractiveRef(ref);
-}
-function assertExactEnvironment(providerName, environment, environmentId) {
-	if (environment.provider !== providerName || environmentId && environment.id !== environmentId) throw new Error("provider returned another interactive environment");
-	assertStableText(environment.id, "interactive environment id");
-}
-function interactiveCapabilitiesForEnvironment(providerName, providerCapabilities, environment) {
-	const capabilities = environment.capabilities === void 0 ? providerCapabilities : AgentEnvironmentCapabilitiesSchema.parse(environment.capabilities);
-	assertInteractiveCapabilities(providerName, capabilities);
-	return capabilities;
-}
-function assertInteractiveCapabilities(providerName, capabilities) {
-	const interactive = capabilities.interactiveAgent;
-	if (!interactive?.start || !interactive.control || !interactive.status || !interactive.attach || !interactive.reattach || !interactive.sendPrompt || !interactive.input || !interactive.resize || !interactive.stop) throw new Error(`provider "${providerName}" cannot control an exact interactive agent`);
-}
-function assertInteractiveMethods(providerName, environment) {
-	if (!environment.startInteractive || !environment.interactive) throw new Error(`provider "${providerName}" exposes incomplete interactive agent controls`);
-}
-async function destroyUnusedEnvironment(environment, cause) {
-	try {
-		await destroyInteractiveEnvironment(environment);
-	} catch (cleanupError) {
-		throw new AggregateError([cause, cleanupError], "interactive environment was invalid and could not be destroyed");
-	}
-}
-//#endregion
-//#region src/runtime/retained-interactive-control.ts
-const MAX_GENERATION_CONFLICTS = 8;
-/**
-* Acquire provider-issued write authority without reading authority from status.
-*
-* A new coordinator starts at generation zero. If another claim already exists,
-* the provider returns its public generation and this helper retries one new
-* compare-and-swap operation. Every generation has a deterministic operation
-* identifier, so retrying after an ambiguous response cannot create two claims.
-* @stable
-*/
-async function claimRetainedInteractiveControl(options) {
-	const expected = options.expectedGeneration ?? 0;
-	if (!Number.isSafeInteger(expected) || expected < 0) throw new Error("interactive control expectedGeneration must be a non-negative integer");
-	let generation = expected;
-	for (let conflict = 0; conflict <= MAX_GENERATION_CONFLICTS; conflict += 1) {
-		if (options.signal?.aborted) throw abortError(options.signal.reason);
-		const material = {
-			operationId: controlClaimOperationId(options.handle, options.holderId, generation),
-			ref: options.handle.ref,
-			holderId: options.holderId,
-			expectedGeneration: generation
-		};
-		const acknowledgement = await options.handle.claimControl({
-			...material,
-			requestDigest: agentInteractiveSessionControlClaimRequestDigest(material)
-		}, options.signal === void 0 ? void 0 : { signal: options.signal });
-		if (acknowledgement.status === "accepted" || acknowledgement.status === "replayed") {
-			const control = acknowledgement.control;
-			if (control === void 0) throw new Error("provider accepted interactive control without returning its claim");
-			if (Date.parse(control.expiresAt) <= Date.now()) throw new Error("provider returned an expired interactive control claim");
-			return control;
-		}
-		if (acknowledgement.status !== "conflict" || acknowledgement.conflictReason !== "generation_mismatch") throw new Error(acknowledgement.status === "unknown" ? "interactive control claim outcome is unknown; retry the same acquisition" : "interactive control claim operation conflicts with different request material");
-		const current = acknowledgement.currentGeneration;
-		if (current === void 0 || current <= generation) throw new Error("provider returned a non-advancing interactive control generation");
-		generation = current;
-	}
-	throw new Error("interactive control changed too often to acquire safely");
-}
-function controlClaimOperationId(handle, holderId, expectedGeneration) {
-	return `interactive-claim-${canonicalCandidateDigest({
-		kind: "retained-interactive-control-claim.v1",
-		ref: handle.ref,
-		holderId,
-		expectedGeneration
-	}).slice(7, 47)}`;
-}
-//#endregion
 //#region src/runtime/run-benchmark.ts
 /**
 * runBenchmark — the packaged optimization suite. Define a domain by implementing an
@@ -7358,6 +6279,6 @@ function tail(s) {
 	return s.slice(-400);
 }
 //#endregion
-export { equalKOnCost as $, chatWorkerSeam as A, completionAuthorizes as At, SandboxRunAbortError as B, auditIntent as Bt, withUntrackedArtifacts as C, defineLeaderboard as Ct, codeModeSupervisorTools as D, loopCampaignDispatch as Dt, runCoderChecks as E, inlineSandboxClient as Et, selectChampion as F, pairwiseSignificance as Ft, reconnectRetainedInteractiveRun as G, createMcpEnvironment as Gt, printBenchmarkReport as H, McpSpawnFault as Ht, assertStrategyContract as I, renderLeaderboardHtml as It, reconnectRetainedRun as J, mcpSecretEnvMetadataKey as Jt, recoverRetainedInteractiveRun as K, sanitizeMcpToolSchema as Kt, authorStrategy as L, renderLeaderboardMarkdown as Lt, discriminatingMeans as M, sentinelCompletion as Mt, pickChampion as N, stopSentinel as Nt, unsafeInProcessRunner as O, loopDispatch as Ot, runStrategyEvolution as P, leaderboard as Pt, promotionGate as Q, strategyAuthorContract as R, renderLeaderboardSvg as Rt, copyUntrackedIntoClone as S, harvestCorpus as St, patchDelivered as T, localSandboxClient as Tt, runBenchmark as U, connectStdioMcp as Ut, openSandboxRun as V, defaultAuditorInstruction as Vt, claimRetainedInteractiveControl as W, materializeLocalMcp as Wt, startRetainedRun as X, resolveSecretEnv as Xt, recoverRetainedRun as Y, resolveMcpServerLaunch as Yt, startRetainedRunInEnvironment as Z, secretEnvOfMcpServer as Zt, NOTE_MAX_CHARS as _, assertTraceDerivedFindings as _t, localShell as a, registerShape as at, composeWorkerEvidence as b, registryScopeAnalyst as bt, createVerifierEnvironment as c, renderCorpusToInstructions as ct, harvestSurfaceDiffs as d, loopUntil as dt, trajectoryReport as et, analystsFromRegistry as f, panel as ft, EVIDENCE_MAX_CHARS as g, widen as gt, worktreeFanout as h, verify as ht, jjWorkspace as i, createShapeRegistry as it, createChatSessionStore as j, deterministicCompletion as jt, chatTransportExecutor as k, superviseDispatch as kt, boxSurfaceReader as l, fanout as lt, superviseSurface as m, selectValidWinner as mt, makeFinding$1 as n, runPersonified as nt, runInWorkspace as o, FileCorpus as ot, failuresAnalyst as p, pipeline as pt, startRetainedInteractiveRun as q, envKeyProvider as qt, gitWorkspace as r, builtinShapes as rt, createWaterfallCollector as s, InMemoryCorpus as st, computeFindingId$1 as t, definePersona as tt, fsSurfaceReader as u, flatWidenGate as ut, VERIFY_TAIL_CHARS as v, buildSteerContext as vt, analyzeTrace as w, resolveSandboxClient as wt, settledWorkerOut as x, inProcessSandboxClient as xt, closingWorkerNote as y, createScopeAnalyst as yt, strategyAuthorSystemPrompt as z, renderPairwiseMarkdown as zt };
+export { InMemoryCorpus as $, chatWorkerSeam as A, renderLeaderboardSvg as At, SandboxRunAbortError as B, mcpSecretEnvMetadataKey as Bt, withUntrackedArtifacts as C, deterministicCompletion as Ct, codeModeSupervisorTools as D, pairwiseSignificance as Dt, runCoderChecks as E, leaderboard as Et, selectChampion as F, connectStdioMcp as Ft, equalKOnCost as G, printBenchmarkReport as H, resolveSecretEnv as Ht, assertStrategyContract as I, materializeLocalMcp as It, runPersonified as J, trajectoryReport as K, authorStrategy as L, createMcpEnvironment as Lt, discriminatingMeans as M, auditIntent as Mt, pickChampion as N, defaultAuditorInstruction as Nt, unsafeInProcessRunner as O, renderLeaderboardHtml as Ot, runStrategyEvolution as P, McpSpawnFault as Pt, FileCorpus as Q, strategyAuthorContract as R, sanitizeMcpToolSchema as Rt, copyUntrackedIntoClone as S, completionAuthorizes as St, patchDelivered as T, stopSentinel as Tt, runBenchmark as U, secretEnvOfMcpServer as Ut, openSandboxRun as V, resolveMcpServerLaunch as Vt, promotionGate as W, createShapeRegistry as X, builtinShapes as Y, registerShape as Z, NOTE_MAX_CHARS as _, localSandboxClient as _t, localShell as a, pipeline as at, composeWorkerEvidence as b, loopDispatch as bt, createVerifierEnvironment as c, widen as ct, harvestSurfaceDiffs as d, createScopeAnalyst as dt, renderCorpusToInstructions as et, analystsFromRegistry as f, registryScopeAnalyst as ft, EVIDENCE_MAX_CHARS as g, resolveSandboxClient as gt, worktreeFanout as h, defineLeaderboard as ht, jjWorkspace as i, panel as it, createChatSessionStore as j, renderPairwiseMarkdown as jt, chatTransportExecutor as k, renderLeaderboardMarkdown as kt, boxSurfaceReader as l, assertTraceDerivedFindings as lt, superviseSurface as m, harvestCorpus as mt, makeFinding$1 as n, flatWidenGate as nt, runInWorkspace as o, selectValidWinner as ot, failuresAnalyst as p, inProcessSandboxClient as pt, definePersona as q, gitWorkspace as r, loopUntil as rt, createWaterfallCollector as s, verify as st, computeFindingId$1 as t, fanout as tt, fsSurfaceReader as u, buildSteerContext as ut, VERIFY_TAIL_CHARS as v, inlineSandboxClient as vt, analyzeTrace as w, sentinelCompletion as wt, settledWorkerOut as x, superviseDispatch as xt, closingWorkerNote as y, loopCampaignDispatch as yt, strategyAuthorSystemPrompt as z, envKeyProvider as zt };
 
-//# sourceMappingURL=runtime-CojgP-hr.js.map
+//# sourceMappingURL=runtime-CJNlF5wM.js.map