@tangle-network/agent-runtime 0.180.0 → 0.182.0

package/dist/{supervisor-wgifgrsR.js → supervisor-Df9kT_z3.js}

@@ -3,10 +3,10 @@ import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBinding
 import { n as detachedSnapshot } from "./snapshot-CTAf4uuA.js";
 import { _ as captureWorkerTraceEvidence, a as aggregateProviderModelEvidence, c as loadSpawnForest, d as replaySpawnTree, f as attestNestedDriverTreeOwner, h as runtimeOwnedNestedDriverTreeRoot, l as materializeTreeView, m as nestedDriverTreeRoot, n as FileSpawnJournal, o as closesCursorSlot, p as driverRuntime, u as pendingWaits, x as contentAddress } from "./spawn-journal--N8Ten1q.js";
 import { _ as unmeteredSpend, a as cloneTokenUsage, b as zeroTokenUsage, d as randomSuffix, f as randomUuid, g as throwIfAborted, h as throwAbort, l as mapWithConcurrency, m as stringifySafe, n as addTokenUsage, o as deleteBoxSafe, p as sleep, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, u as promptCacheTokenClasses, v as withTimeout, y as zeroSpend } from "./util-D6ZEuBMi.js";
-import { c as notifySandboxEventObserver, i as extractLlmCallEvent, l as sandboxEventServedBackend, m as parseCanonicalTransportEvent, p as extractTransportEventIdentity, r as createSandboxToolPartState, s as mapSandboxToolEvent, t as assertSandboxServedModel, u as sandboxProgressEvents } from "./sandbox-events-BVjstFgb.js";
+import { _ as parseCodexUsageRecord, c as mapSandboxToolEvent, d as sandboxProgressEvents, h as parseCanonicalTransportEvent, i as createSandboxUsageLedger, l as notifySandboxEventObserver, m as extractTransportEventIdentity, r as createSandboxToolPartState, t as assertSandboxServedModel, u as sandboxEventServedBackend } from "./sandbox-events-DGXLxiuX.js";
 import { n as executableAgentSpecSnapshot, r as projectSandboxOutcome, t as executableAgentProfileSnapshot } from "./executable-spec-CkGvdPds.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-Sw4ywhtL.js";
-import { c as linkAbort, i as resolveAgentEnvironmentProvider, l as runAbortable, n as providerAsExecutor, r as providerAsSandboxClient, s as abortError$1 } from "./environment-provider-DKyMWQJd.js";
+import { c as linkAbort, i as resolveAgentEnvironmentProvider, l as runAbortable, n as providerAsExecutor, r as providerAsSandboxClient, s as abortError$1 } from "./environment-provider-C4elwcpo.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-g3YdfEh4.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema } from "@tangle-network/agent-interface";
@@ -1548,7 +1548,13 @@ function processGroupExists(processGroupId) {
 		return true;
 	}
 }
-/** Parse and validate the one terminal usage event emitted by `codex exec --json`. */
+/**
+* Parse and validate the one terminal usage event emitted by `codex exec --json`.
+*
+* The JSONL framing is this surface's own; the usage RECORD is read by `parseCodexUsageRecord`,
+* the one codex usage reader the sandbox decoder also calls, so both surfaces hold the same field
+* policy and the same two cross-field invariants.
+*/
 function parseCodexTokenUsage(stdout) {
 	const completed = [];
 	for (const [index, line] of stdout.split(/\r?\n/).entries()) {
@@ -1557,34 +1563,25 @@ function parseCodexTokenUsage(stdout) {
 		try {
 			event = JSON.parse(line);
 		} catch {
-			throw new Error(`runLocalHarness: Codex JSONL line ${index + 1} is not valid JSON`);
+			throw new ValidationError(`runLocalHarness: Codex JSONL line ${index + 1} is not valid JSON`);
 		}
 		if (isRecord(event) && event.type === "turn.completed") completed.push(event);
 	}
-	if (completed.length !== 1) throw new Error(`runLocalHarness: expected exactly one Codex turn.completed usage event, received ${completed.length}`);
+	if (completed.length !== 1) throw new ValidationError(`runLocalHarness: expected exactly one Codex turn.completed usage event, received ${completed.length}`);
 	const event = completed[0];
-	if (!isRecord(event) || !isRecord(event.usage)) throw new Error("runLocalHarness: Codex turn.completed event is missing usage");
-	const usage = event.usage;
-	const inputTokens = naturalNumber(usage.input_tokens, "input_tokens");
-	const cachedInputTokens = naturalNumber(usage.cached_input_tokens, "cached_input_tokens");
-	const outputTokens = naturalNumber(usage.output_tokens, "output_tokens");
-	const reasoningOutputTokens = naturalNumber(usage.reasoning_output_tokens, "reasoning_output_tokens");
-	if (cachedInputTokens > inputTokens) throw new Error("runLocalHarness: Codex cached_input_tokens exceeds input_tokens");
-	if (reasoningOutputTokens > outputTokens) throw new Error("runLocalHarness: Codex reasoning_output_tokens exceeds output_tokens");
+	if (!isRecord(event) || !isRecord(event.usage)) throw new ValidationError("runLocalHarness: Codex turn.completed event is missing usage");
+	const record = parseCodexUsageRecord(event.usage, "runLocalHarness: Codex");
 	return {
-		inputTokens,
-		cachedInputTokens,
-		outputTokens,
-		reasoningOutputTokens
+		inputTokens: record.inputTokens,
+		cachedInputTokens: record.cachedInputTokens,
+		outputTokens: record.outputTokens,
+		reasoningOutputTokens: record.reasoningOutputTokens,
+		...record.cacheWriteInputTokens === void 0 ? {} : { cacheWriteInputTokens: record.cacheWriteInputTokens }
 	};
 }
 function isRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function naturalNumber(value, field) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new Error(`runLocalHarness: Codex usage.${field} must be a non-negative safe integer`);
-	return value;
-}
 //#endregion
 //#region src/mcp/worktree.ts
 /**
@@ -4113,6 +4110,58 @@ function routerBrain(cfg, opts = {}) {
 	};
 }
 //#endregion
+//#region src/runtime/prompt-options.ts
+/** Keys the kernel owns on every prompt it sends; a caller value never carries them past here. */
+const kernelOwnedPromptKeys = /* @__PURE__ */ new Set(["sessionId", "signal"]);
+/**
+* Validate and normalize a caller's `promptOptions`.
+*
+* @param value the raw value from the execution context.
+* @param where the field path to name in the error, e.g. `'runAgentRounds: ctx.promptOptions'`.
+* @returns the options minus the kernel-owned keys, or `undefined` when the caller supplied none.
+* @throws ValidationError when the value is present but is not a plain object.
+*/
+function readPromptOptions(value, where) {
+	if (value === void 0) return void 0;
+	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new ValidationError(`${where} must be an object of SDK PromptOptions`);
+	const owned = {};
+	for (const [key, entry] of Object.entries(value)) {
+		if (kernelOwnedPromptKeys.has(key)) continue;
+		owned[key] = entry;
+	}
+	return owned;
+}
+const instrumentPromptKeys = ["backend", "model"];
+/**
+* Refuse a per-prompt option a boxless `SandboxClient` seam cannot honor.
+*
+* These seams present an in-process executor as a box: there is no sandbox to reconfigure, so an
+* instrument key — `backend` (the harness to run and the credential to run it on) or `model` (the
+* id to serve the turn) — states an intent the seam can only drop. Dropping it would run the turn
+* on a different instrument than the caller asked for and report nothing, so it fails here
+* instead, before the prompt runs.
+*
+* Every other key stays accepted and ignored: `timeoutMs` and `context` shape how a box executes
+* a turn, not which instrument serves it, and an in-process executor answers on its own terms.
+*
+* What counts as a valid value is {@link readPromptOptions}, so a boxless seam holds a caller to
+* the same contract as the kernels: absent is fine, an object is read, anything else throws.
+*
+* @param options the per-prompt options the seam received.
+* @param seam the seam to name in the error, e.g. `'inlineSandboxClient'`.
+* @param keys the instrument keys this seam cannot honor. A seam that hands its per-prompt
+*   options to a caller-supplied callback passes only the keys the callback cannot act on.
+* @throws ValidationError when the options are not an object, or carry one of `keys`.
+*/
+function assertBoxlessPromptOptions(options, seam, keys = instrumentPromptKeys) {
+	const supplied = readPromptOptions(options, `${seam}: promptOptions`);
+	if (supplied === void 0) return;
+	for (const key of keys) {
+		if (supplied[key] === void 0) continue;
+		throw new ValidationError(`${seam}: promptOptions.${key} cannot apply without a box`);
+	}
+}
+//#endregion
 //#region src/runtime/sandbox-acquire.ts
 /**
 * HTTP statuses where create should be retried — gateway timeouts
@@ -4417,7 +4466,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 			await assertSessionLive(handle.box, handle.sessionId);
 			return promptEvents(streaming, handle.box, prompt, handle.sessionId, signal, promptOptions);
 		},
-		async fork(parent, prompts, specs, signal) {
+		async fork(parent, prompts, specs, signal, promptOptions) {
 			if (prompts.length === 0) throw new ValidationError("SandboxLineage.fork: prompts must be non-empty");
 			if (signal.aborted) throwAbort();
 			const branched = await branchParent(parent.box, prompts.length, forkConcurrency, signal);
@@ -4438,7 +4487,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 							box,
 							sessionId
 						},
-						events: promptEvents(streaming, box, prompts[i], sessionId, signal)
+						events: promptEvents(streaming, box, prompts[i], sessionId, signal, promptOptions)
 					};
 				});
 			}
@@ -4460,7 +4509,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 							box,
 							sessionId
 						},
-						events: promptEvents(streaming, box, prompt, sessionId, signal)
+						events: promptEvents(streaming, box, prompt, sessionId, signal, promptOptions)
 					};
 				}
 				const box = await acquireFresh(spec, signal);
@@ -4470,7 +4519,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 						box,
 						sessionId
 					},
-					events: promptEvents(streaming, box, prompt, sessionId, signal)
+					events: promptEvents(streaming, box, prompt, sessionId, signal, promptOptions)
 				};
 			});
 		},
@@ -4583,6 +4632,7 @@ async function runAgentRounds(options) {
 	if (!Number.isFinite(maxConcurrency) || maxConcurrency <= 0) throw new ValidationError("runAgentRounds: maxConcurrency must be > 0");
 	const sandboxStreaming = options.lineage?.streaming ?? "sse";
 	if (!options.ctx?.sandboxClient || typeof options.ctx.sandboxClient.create !== "function") throw new ValidationError("runAgentRounds: ctx.sandboxClient.create is required");
+	const promptOptions = readPromptOptions(options.ctx.promptOptions, "runAgentRounds: ctx.promptOptions");
 	const now = options.now ?? Date.now;
 	const runId = options.runId ?? `loop-${randomSuffix()}`;
 	const loopStart = now();
@@ -4598,7 +4648,7 @@ async function runAgentRounds(options) {
 		ownedBoxes.push(box);
 		options.onWorkerBox?.(box);
 	} : void 0;
-	const lineageState = await setUpLineage(options, maxConcurrency, recordMount);
+	const lineageState = await setUpLineage(options, maxConcurrency, recordMount, promptOptions);
 	emitRunLoopHook(options, {
 		target: "agent.run",
 		phase: "before",
@@ -4711,7 +4761,8 @@ async function runAgentRounds(options) {
 				collectBox,
 				lineagePlan,
 				lineageState,
-				recordMount
+				recordMount,
+				...promptOptions === void 0 ? {} : { promptOptions }
 			});
 			if (controller.signal.aborted) throwAbort();
 			emitRunLoopHook(options, {
@@ -4760,7 +4811,7 @@ async function runAgentRounds(options) {
 * Rejects the lineage + `onWorkerBox` combination: both claim the same
 * box-ownership channel, and silently honoring one would leak or double-free.
 */
-async function setUpLineage(options, maxConcurrency, recordMount) {
+async function setUpLineage(options, maxConcurrency, recordMount, promptOptions) {
 	const lineageOpts = options.lineage;
 	if (!lineageOpts || !lineageOpts.sessionContinuity && !lineageOpts.forkFanout) return void 0;
 	if (options.onWorkerBox) throw new ValidationError("runAgentRounds: `lineage` and `onWorkerBox` both own worker boxes — pass only one");
@@ -4772,6 +4823,7 @@ async function setUpLineage(options, maxConcurrency, recordMount) {
 			recordMount
 		}),
 		options: lineageOpts,
+		...promptOptions === void 0 ? {} : { promptOptions },
 		handles: /* @__PURE__ */ new Map(),
 		canPrune: typeof options.driver.describePlan !== "function"
 	};
@@ -4804,7 +4856,7 @@ function planLineageRound(state, specs, slice, parentIndex, signal) {
 	};
 	if (slice.length === 1 && parent && state.options.sessionContinuity) return [{ async acquire() {
 		return {
-			events: await lineage.continue(parent, promptFor(0), signal),
+			events: await lineage.continue(parent, promptFor(0), signal, state.promptOptions),
 			handle: parent
 		};
 	} }];
@@ -4813,7 +4865,7 @@ function planLineageRound(state, specs, slice, parentIndex, signal) {
 		const childSpecs = slice.map((_, offset) => specAt(offset));
 		let forked;
 		const ensureForked = () => {
-			forked ??= lineage.fork(parent, prompts, childSpecs, signal);
+			forked ??= lineage.fork(parent, prompts, childSpecs, signal, state.promptOptions);
 			return forked;
 		};
 		return slice.map((_, offset) => ({ async acquire() {
@@ -4823,7 +4875,7 @@ function planLineageRound(state, specs, slice, parentIndex, signal) {
 		} }));
 	}
 	return slice.map((_, offset) => ({ async acquire() {
-		return lineage.start(specAt(offset), promptFor(offset), signal);
+		return lineage.start(specAt(offset), promptFor(offset), signal, state.promptOptions);
 	} }));
 }
 /**
@@ -4905,6 +4957,25 @@ async function executeIteration(args) {
 	});
 	let box;
 	let lineageOwned = false;
+	let sawLlmCall = false;
+	const usageLedger = createSandboxUsageLedger(spec.profile.harness);
+	const creditLlmCall = (llmCall) => {
+		sawLlmCall = true;
+		slot.costUsd += llmCall.costUsd ?? 0;
+		if (llmCall.usdKnown === false) slot.costUsdKnown = false;
+		if (llmCall.estimatedCostUsd !== void 0) slot.estimatedCostUsd = (slot.estimatedCostUsd ?? 0) + llmCall.estimatedCostUsd;
+		if (llmCall.promptCache) {
+			slot.promptCache ??= {};
+			mergeUsageMetadata(slot.promptCache, llmCall.promptCache);
+		}
+		addTokenUsage(slot.tokenUsage, {
+			input: llmCall.tokensIn,
+			output: llmCall.tokensOut,
+			...llmCall.tokensKnown === false ? { tokensKnown: false } : {},
+			...promptCacheTokenClasses(llmCall.tokensIn, llmCall.promptCache)
+		});
+		args.ctx.runHandle?.observe(llmCall);
+	};
 	try {
 		let stream;
 		const source = args.lineagePlan?.[args.item.index - args.baseIndex];
@@ -4917,7 +4988,11 @@ async function executeIteration(args) {
 		} else {
 			box = await createSandboxForSpec(args.ctx.sandboxClient, spec, args.signal, args.recordMount);
 			const prompt = spec.taskToPrompt(args.item.task);
-			stream = args.streaming === "poll" ? promptEvents("poll", box, prompt, `${args.runId}-i${args.item.index}`, args.signal) : box.streamPrompt(prompt, { signal: args.signal });
+			const promptOptions = args.promptOptions;
+			stream = args.streaming === "poll" ? promptEvents("poll", box, prompt, `${args.runId}-i${args.item.index}`, args.signal, promptOptions) : box.streamPrompt(prompt, {
+				...promptOptions ?? {},
+				signal: args.signal
+			});
 		}
 		const placement = describeSandboxPlacement(args.ctx.sandboxClient, box);
 		await emitTrace(args.ctx.traceEmitter, {
@@ -4942,7 +5017,6 @@ async function executeIteration(args) {
 			...spec.profile.model?.provider !== void 0 ? { provider: spec.profile.model.provider } : {},
 			...requestedModel !== void 0 ? { model: requestedModel } : {}
 		};
-		let sawLlmCall = false;
 		const outcomeTracker = createAgentRunOutcomeTracker();
 		for await (const event of stream) {
 			events.push(event);
@@ -4951,26 +5025,12 @@ async function executeIteration(args) {
 				iterationIndex: args.item.index,
 				agentRunName: slot.agentRunName
 			});
-			const llmCall = extractLlmCallEvent(event, slot.agentRunName);
-			if (llmCall) {
-				sawLlmCall = true;
-				slot.costUsd += llmCall.costUsd ?? 0;
-				if (llmCall.usdKnown === false) slot.costUsdKnown = false;
-				if (llmCall.estimatedCostUsd !== void 0) slot.estimatedCostUsd = (slot.estimatedCostUsd ?? 0) + llmCall.estimatedCostUsd;
-				if (llmCall.promptCache) {
-					slot.promptCache ??= {};
-					mergeUsageMetadata(slot.promptCache, llmCall.promptCache);
-				}
-				addTokenUsage(slot.tokenUsage, {
-					input: llmCall.tokensIn,
-					output: llmCall.tokensOut,
-					...llmCall.tokensKnown === false ? { tokensKnown: false } : {},
-					...promptCacheTokenClasses(llmCall.tokensIn, llmCall.promptCache)
-				});
-				args.ctx.runHandle?.observe(llmCall);
-			}
+			const llmCall = usageLedger.observe(event, slot.agentRunName);
+			if (llmCall) creditLlmCall(llmCall);
 			assertSandboxServedModel(event, requested);
 		}
+		const harnessCall = usageLedger.settleTurn(slot.agentRunName);
+		if (harnessCall) creditLlmCall(harnessCall);
 		const outcome = outcomeTracker.finish();
 		slot.sandboxOutcome = outcome;
 		if (!sawLlmCall) {
@@ -4989,6 +5049,8 @@ async function executeIteration(args) {
 		else if (projection.status !== "completed") slot.verdict = projection.verdict;
 	} catch (err) {
 		slot.error = err instanceof Error ? err : new Error(String(err));
+		const abortedCall = usageLedger.settleTurn(slot.agentRunName);
+		if (abortedCall) creditLlmCall(abortedCall);
 	} finally {
 		slot.endedAt = args.now();
 		await emitTrace(args.ctx.traceEmitter, {
@@ -6464,7 +6526,7 @@ function createSteerableSandboxSession(args) {
 				...args.traceEnv && Object.keys(args.traceEnv).length > 0 ? { env: args.traceEnv } : {}
 			}
 		};
-		const promptOptions = readPromptOptions(args.loopCtx);
+		const promptOptions = readPromptOptions(args.loopCtx?.promptOptions, "steerable sandbox worker: loopCtx.promptOptions");
 		const requestedModel = concreteProfileModel(args.profile);
 		const requested = {
 			...args.profile.model?.provider !== void 0 ? { provider: args.profile.model.provider } : {},
@@ -6477,6 +6539,50 @@ function createSteerableSandboxSession(args) {
 		let handle;
 		state.session = () => handle;
 		let nextPrompt = args.taskToPrompt(task);
+		const usageLedger = createSandboxUsageLedger(args.harness);
+		let usageFailure;
+		const readUsage = (read) => {
+			try {
+				return read();
+			} catch (err) {
+				tokensKnown = false;
+				const message = err instanceof Error ? err.message : String(err);
+				usageFailure ??= message;
+				activity.push({
+					at: now(),
+					kind: "note",
+					label: "usage-unreadable",
+					detail: message
+				});
+				return;
+			}
+		};
+		function* creditCall(call) {
+			const callTokensKnown = call.tokensKnown !== false && typeof call.tokensIn === "number" && typeof call.tokensOut === "number";
+			if (!callTokensKnown) tokensKnown = false;
+			const input = call.tokensIn ?? 0;
+			const output = call.tokensOut ?? 0;
+			if (input || output || !callTokensKnown) {
+				const usage = {
+					kind: "tokens",
+					input,
+					output,
+					...callTokensKnown ? {} : { tokensKnown: false },
+					...promptCacheTokenClasses(call.tokensIn, call.promptCache)
+				};
+				addTokenUsage(tokens, usage);
+				yield usage;
+			}
+			if (typeof call.costUsd === "number" && call.costUsd > 0) {
+				usd += call.costUsd;
+				yield {
+					kind: "cost",
+					usd: call.costUsd,
+					usdKnown: false,
+					provenance: "uncaptured"
+				};
+			}
+		}
 		try {
 			for (let turn = 0; maxTurns === 0 || turn < maxTurns; turn += 1) {
 				const pending = args.inbox.drain();
@@ -6525,39 +6631,23 @@ function createSteerableSandboxSession(args) {
 							kind: "progress",
 							progress
 						};
-						const call = extractLlmCallEvent(event, spec.name ?? String(args.harness));
+						const call = readUsage(() => usageLedger.observe(event, spec.name ?? String(args.harness)));
 						if (call) {
 							sawLlmCall = true;
-							const callTokensKnown = call.tokensKnown !== false && typeof call.tokensIn === "number" && typeof call.tokensOut === "number";
-							if (!callTokensKnown) tokensKnown = false;
-							const input = call.tokensIn ?? 0;
-							const output = call.tokensOut ?? 0;
-							if (input || output || !callTokensKnown) {
-								const usage = {
-									kind: "tokens",
-									input,
-									output,
-									...callTokensKnown ? {} : { tokensKnown: false },
-									...promptCacheTokenClasses(call.tokensIn, call.promptCache)
-								};
-								addTokenUsage(tokens, usage);
-								yield usage;
-							}
-							if (typeof call.costUsd === "number" && call.costUsd > 0) {
-								usd += call.costUsd;
-								yield {
-									kind: "cost",
-									usd: call.costUsd,
-									usdKnown: false,
-									provenance: "uncaptured"
-								};
-							}
+							yield* creditCall(call);
 						}
 						assertSandboxServedModel(event, requested);
 					}
+					const harnessCall = readUsage(() => usageLedger.settleTurn(spec.name ?? String(args.harness)));
+					if (harnessCall) {
+						sawLlmCall = true;
+						yield* creditCall(harnessCall);
+					}
 					state.latestOutcome = outcomeTracker.finish();
 				} catch (e) {
 					cleanup();
+					const abortedCall = readUsage(() => usageLedger.settleTurn(spec.name ?? String(args.harness)));
+					if (abortedCall) yield* creditCall(abortedCall);
 					if (isInterruptAbort(e, interruptSig, signal, args.controller.signal)) {
 						activity.push({
 							at: now(),
@@ -6613,7 +6703,8 @@ function createSteerableSandboxSession(args) {
 			...state.servedBackend === void 0 ? {} : { servedBackend: state.servedBackend },
 			turns: state.turns,
 			toolCalls: state.toolCalls,
-			...state.latestOutcome ? { outcome: state.latestOutcome } : {}
+			...state.latestOutcome ? { outcome: state.latestOutcome } : {},
+			...usageFailure === void 0 ? {} : { tokensUnknownReason: usageFailure }
 		};
 		const verdict = state.latestOutcome ? projectSandboxOutcome(state.latestOutcome).verdict : void 0;
 		state.artifact = {
@@ -6710,13 +6801,6 @@ function readFinalText(event) {
 	const alt = data.text;
 	return typeof alt === "string" ? alt : void 0;
 }
-/** Prompt options the composed loop context already carries (agent profile / cwd), forwarded so
-*  a steerable worker runs with the same box configuration as the single-shot path. */
-function readPromptOptions(loopCtx) {
-	const opts = loopCtx?.promptOptions;
-	if (!opts || typeof opts !== "object") return void 0;
-	return opts;
-}
 //#endregion
 //#region src/runtime/supervise/worker-trace.ts
 /**
@@ -15452,6 +15536,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false;
 }
 //#endregion
-export { bridgeModelRouteRefusal as $, buildLoopSpanNodes as $t, readWorkerInteractiveBinding as A, fullProfileMaterialization as An, peerMailVerbNames as At, retainedCreateMaterial as B, validateProfileMaterialization as Bn, createSandboxLineage as Bt, timerAt as C, localHarnessExecutable as Cn, AUTHORITY_MARKERS as Ct, readWorkerInteractiveAdmissions as D, assertProfileMaterialization as Dn, createPeerMailbox as Dt, interactiveAdmissionSeamKey as E, AGENT_PROFILE_MATERIALIZATION_AXES as En, claimsAuthority as Et, startRetainedInteractiveRun as F, promptResourceProfileMaterialization as Fn, TERMINAL_DECISIONS as Ft, rollingDispatch as G, canonicalObservedModel as Gt, effectiveConcurrency as H, acquireSandbox as Ht, reconnectRetainedRun as I, renderProfileMaterializationIssues as In, createSandboxForSpec as It, assertValidBudget as J, mergeTraceEnv as Jt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as K, observedModelMatchesDeclared as Kt, recoverRetainedRun as L, renderUnsupported as Ln, defaultSelectWinner as Lt, workerInteractiveBindingsDir as M, promptControlProfileMaterialization as Mn, isTerminalNodeStatus as Mt, reconnectRetainedInteractiveRun as N, promptModelProfileMaterialization as Nn, createInPlaceCliExecutor as Nt, workerInteractiveAdmissionFile as O, controlProfileMaterialization as On, isPeerMailEnvelope as Ot, recoverRetainedInteractiveRun as P, promptOnlyProfileMaterialization as Pn, taskToPrompt as Pt, bridgeAdmissionRead as Q, buildLoopOtelSpans as Qt, startRetainedRun as R, sandboxActProfileMaterialization as Rn, isTerminalDecision as Rt, pollFor as S, harnessSupportsReasoningEffort as Sn, createInbox as St, waitUntil as T, CodexExecutionDiagnosticError as Tn, PEER_MAIL_WIRE_KEY as Tt, freeSlots as U, routerBrain as Ut, destroyInteractiveEnvironment as V, worktreeCliProfileMaterialization as Vn, probeSandboxCapabilities as Vt, queueOf as W, runBrainLoop as Wt, spendFromUsageEvents as X, traceContextToEnv as Xt, createBudgetPool as Y, readTraceContextFromEnv as Yt, bindReusableExecutorExecutionId as Z, INTELLIGENCE_WIRE_VERSION as Zt, recordScopeOwnerMaterialization as _, captureWorktreeDiff as _n, decodeToolPart as _t, uncertainSpawnBudgets as a, generateSpanId as an, createExecutor as at, createWaitProbes as b, DEFAULT_LOCAL_HARNESS as bn, createActivityLog as bt, pickBestDelivered as c, padTraceId as cn, createWorktreeCliExecutor as ct, driverChild as d, createRuntimeStreamEventCollector as dn, workerTraceEnv as dt, buildRuntimeEventOtelSpans as en, bridgeRuntimeAttachmentsKey as et, withDriverExecutor as f, sanitizeAgentRuntimeEvent as fn, workerTraceHeaders as ft, meterRuntimeOwnedProviderAttempt as g, runWorktreeHarness as gn, createPushTraceSource as gt, meterRuntimeOwnedAccounting as h, runSettledCommand as hn, createSteerableSandboxSession as ht, sumMeasuredSpendFromEvents as i, flatOtelSpan as in, cliWorktreeExecutor as it, workerInteractiveBindingFile as j, profileMaterializationAxes$1 as jn, isLiveNodeStatus as jt, attachWorker as k, defineProfileMaterializationContract as kn, peerMailTools as kt, runFinalizer as l, toOtelAttributes as ln, WORKER_TRACE_PROPAGATION as lt, deriveNodeExecutionIdentity as m, sanitizeRuntimeStreamEvent as mn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, createOtelExporter as nn, captureReusableExecutorConfig as nt, bestDelivered as o, loopEventToOtelSpan as on, createExecutorRegistry as ot, createScope as p, sanitizeKnowledgeReadinessReport as pn, workerTraceSeamKey as pt, teardownExecutor as q, createPropagatingTraceEmitter as qt, maxSeqOf as r, exportEvalRuns as rn, cliInPlaceExecutor as rt, collectDelivered as s, padSpanId as sn, snapshotExecutorConfig as st, createRootHandle as t, createOpenInferenceFileExporter as tn, bridgeStopSignalKey as tt, runTree as u, createRuntimeEventCollector as un, readWorkerTraceContext as ut, scopeOwnerExecutorNodeContext as v, createWorktree as vn, sandboxSessionTraceSource as vt, validateWaitSpec as w, parseCodexTokenUsage as wn, DEFAULT_PEER_MAIL_LIMITS as wt, isWaitOutcome as x, LOCAL_HARNESSES as xn, readWorkerProgress as xt, settledToIteration as y, removeWorktree as yn, DEFAULT_STALL_AFTER_MS as yt, startRetainedRunInEnvironment as z, unsupportedProfileDimensions as zn, runAgentRounds as zt };
+export { bridgeModelRouteRefusal as $, INTELLIGENCE_WIRE_VERSION as $t, readWorkerInteractiveBinding as A, controlProfileMaterialization as An, peerMailVerbNames as At, retainedCreateMaterial as B, sandboxActProfileMaterialization as Bn, createSandboxLineage as Bt, timerAt as C, LOCAL_HARNESSES as Cn, AUTHORITY_MARKERS as Ct, readWorkerInteractiveAdmissions as D, CodexExecutionDiagnosticError as Dn, createPeerMailbox as Dt, interactiveAdmissionSeamKey as E, parseCodexTokenUsage as En, claimsAuthority as Et, startRetainedInteractiveRun as F, promptModelProfileMaterialization as Fn, TERMINAL_DECISIONS as Ft, rollingDispatch as G, routerBrain as Gt, effectiveConcurrency as H, validateProfileMaterialization as Hn, acquireSandbox as Ht, reconnectRetainedRun as I, promptOnlyProfileMaterialization as In, createSandboxForSpec as It, assertValidBudget as J, observedModelMatchesDeclared as Jt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as K, runBrainLoop as Kt, recoverRetainedRun as L, promptResourceProfileMaterialization as Ln, defaultSelectWinner as Lt, workerInteractiveBindingsDir as M, fullProfileMaterialization as Mn, isTerminalNodeStatus as Mt, reconnectRetainedInteractiveRun as N, profileMaterializationAxes$1 as Nn, createInPlaceCliExecutor as Nt, workerInteractiveAdmissionFile as O, AGENT_PROFILE_MATERIALIZATION_AXES as On, isPeerMailEnvelope as Ot, recoverRetainedInteractiveRun as P, promptControlProfileMaterialization as Pn, taskToPrompt as Pt, bridgeAdmissionRead as Q, traceContextToEnv as Qt, startRetainedRun as R, renderProfileMaterializationIssues as Rn, isTerminalDecision as Rt, pollFor as S, DEFAULT_LOCAL_HARNESS as Sn, createInbox as St, waitUntil as T, localHarnessExecutable as Tn, PEER_MAIL_WIRE_KEY as Tt, freeSlots as U, worktreeCliProfileMaterialization as Un, assertBoxlessPromptOptions as Ut, destroyInteractiveEnvironment as V, unsupportedProfileDimensions as Vn, probeSandboxCapabilities as Vt, queueOf as W, readPromptOptions as Wt, spendFromUsageEvents as X, mergeTraceEnv as Xt, createBudgetPool as Y, createPropagatingTraceEmitter as Yt, bindReusableExecutorExecutionId as Z, readTraceContextFromEnv as Zt, recordScopeOwnerMaterialization as _, runSettledCommand as _n, decodeToolPart as _t, uncertainSpawnBudgets as a, exportEvalRuns as an, createExecutor as at, createWaitProbes as b, createWorktree as bn, createActivityLog as bt, pickBestDelivered as c, loopEventToOtelSpan as cn, createWorktreeCliExecutor as ct, driverChild as d, toOtelAttributes as dn, workerTraceEnv as dt, buildLoopOtelSpans as en, bridgeRuntimeAttachmentsKey as et, withDriverExecutor as f, createRuntimeEventCollector as fn, workerTraceHeaders as ft, meterRuntimeOwnedProviderAttempt as g, sanitizeRuntimeStreamEvent as gn, createPushTraceSource as gt, meterRuntimeOwnedAccounting as h, sanitizeKnowledgeReadinessReport as hn, createSteerableSandboxSession as ht, sumMeasuredSpendFromEvents as i, createOtelExporter as in, cliWorktreeExecutor as it, workerInteractiveBindingFile as j, defineProfileMaterializationContract as jn, isLiveNodeStatus as jt, attachWorker as k, assertProfileMaterialization as kn, peerMailTools as kt, runFinalizer as l, padSpanId as ln, WORKER_TRACE_PROPAGATION as lt, deriveNodeExecutionIdentity as m, sanitizeAgentRuntimeEvent as mn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, buildRuntimeEventOtelSpans as nn, captureReusableExecutorConfig as nt, bestDelivered as o, flatOtelSpan as on, createExecutorRegistry as ot, createScope as p, createRuntimeStreamEventCollector as pn, workerTraceSeamKey as pt, teardownExecutor as q, canonicalObservedModel as qt, maxSeqOf as r, createOpenInferenceFileExporter as rn, cliInPlaceExecutor as rt, collectDelivered as s, generateSpanId as sn, snapshotExecutorConfig as st, createRootHandle as t, buildLoopSpanNodes as tn, bridgeStopSignalKey as tt, runTree as u, padTraceId as un, readWorkerTraceContext as ut, scopeOwnerExecutorNodeContext as v, runWorktreeHarness as vn, sandboxSessionTraceSource as vt, validateWaitSpec as w, harnessSupportsReasoningEffort as wn, DEFAULT_PEER_MAIL_LIMITS as wt, isWaitOutcome as x, removeWorktree as xn, readWorkerProgress as xt, settledToIteration as y, captureWorktreeDiff as yn, DEFAULT_STALL_AFTER_MS as yt, startRetainedRunInEnvironment as z, renderUnsupported as zn, runAgentRounds as zt };
 
-//# sourceMappingURL=supervisor-wgifgrsR.js.map
+//# sourceMappingURL=supervisor-Df9kT_z3.js.map