@tangle-network/agent-runtime 0.189.0 → 0.190.0

package/dist/{supervisor-BSNkaM2a.js → supervisor-CqJW4qap.js}

@@ -1,21 +1,21 @@
 import { A as assertEventBinding, B as exactContinuedControlRef, C as runtimeOwnedScopeOwnerRuntime, D as abortError, E as RetainedRunProviderContractError, F as assertWaitDuration, G as freezeControlRef, H as exactSession, I as awaitAbortable$1, J as sameControlCoordinates, K as hasDurableCancel, L as cancellationRequest, M as assertResultBinding, N as assertSequence, O as assertBoundaryBinding, P as assertStableText, R as copyControlRef, S as runtimeOwnedPendingExecutorMaterialization, T as unknownMaterializationReceipt, U as exactSessionCancel, V as exactControlRef, W as exactSessionResult, Y as freshTurnInput, _ as runtimeOwnedDeferredExecutorRuntime, a as authoredProfileDigest, b as runtimeOwnedExecutorMaterialization, c as knownExecutionBindingReceipt, g as recordRuntimeOwnedProviderModel, h as recordRuntimeOwnedProviderIdentityConflict, j as assertInteractionBinding, k as assertCanonicalEventBinding, l as knownMaterializationReceipt, m as recordRuntimeOwnedProviderDispatchNotStarted, n as attestRuntimeOwnedExecutor, o as finalizeRuntimeOwnedPendingExecutor, p as recordRuntimeOwnedProviderAttemptStart, q as isTerminalSessionStatus, r as attestRuntimeOwnedPendingExecutor, s as inheritRuntimeOwnedExecutorAttestation, t as attestRuntimeOwnedDeferredExecutor, u as newExecutionAttemptId, w as unknownExecutionBindingReceipt, x as runtimeOwnedExecutorProviderEvidence, y as runtimeOwnedExecutorExecutionBinding, z as delay } from "./materialization-CekWK6OO.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-CDZ8XsVj.js";
 import { n as detachedSnapshot } from "./snapshot-CTAf4uuA.js";
-import { _ as captureWorkerTraceEvidence, a as aggregateProviderModelEvidence, c as loadSpawnForest, d as replaySpawnTree, f as attestNestedDriverTreeOwner, h as runtimeOwnedNestedDriverTreeRoot, l as materializeTreeView, m as nestedDriverTreeRoot, n as FileSpawnJournal, o as closesCursorSlot, p as driverRuntime, u as pendingWaits, x as contentAddress } from "./spawn-journal-CxRa-NJ2.js";
-import { _ as throwIfAborted, a as cloneTokenUsage, b as zeroSpend, d as randomSuffix, f as randomUuid, g as throwAbort, h as stringifySafe, l as mapWithConcurrency, m as sleep, n as addTokenUsage, o as deleteBoxSafe, p as roundBoxMinutes, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, u as promptCacheTokenClasses, v as unmeteredSpend, x as zeroTokenUsage, y as withTimeout } from "./util-BfoW6RU7.js";
+import { _ as captureWorkerTraceEvidence, a as aggregateProviderModelEvidence, c as loadSpawnForest, d as replaySpawnTree, f as attestNestedDriverTreeOwner, h as runtimeOwnedNestedDriverTreeRoot, l as materializeTreeView, m as nestedDriverTreeRoot, n as FileSpawnJournal, o as closesCursorSlot, p as driverRuntime, u as pendingWaits, x as contentAddress } from "./spawn-journal-B9eTmVAn.js";
+import { _ as throwIfAborted, a as cloneTokenUsage, b as zeroSpend, d as randomSuffix, f as randomUuid, g as throwAbort, h as stringifySafe, l as mapWithConcurrency, m as sleep, n as addTokenUsage, o as deleteBoxSafe, p as roundBoxMinutes, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, u as promptCacheTokenClasses, v as unmeteredSpend, x as zeroTokenUsage, y as withTimeout } from "./util-mCNUeboW.js";
 import { _ as parseCodexUsageRecord, c as mapSandboxToolEvent, d as sandboxProgressEvents, h as parseCanonicalTransportEvent, i as createSandboxUsageLedger, l as notifySandboxEventObserver, m as extractTransportEventIdentity, r as createSandboxToolPartState, t as assertSandboxServedModel, u as sandboxEventServedBackend } from "./sandbox-events-DWeQRWxg.js";
 import { n as executableAgentSpecSnapshot, r as projectSandboxOutcome, t as executableAgentProfileSnapshot } from "./executable-spec-DxuiDFAU.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-Wf2MxXJ9.js";
-import { c as linkAbort, i as resolveAgentEnvironmentProvider, l as runAbortable, n as providerAsExecutor, r as providerAsSandboxClient, s as abortError$1 } from "./environment-provider-DZxuH3E4.js";
+import { c as linkAbort, i as resolveAgentEnvironmentProvider, l as runAbortable, n as providerAsExecutor, r as providerAsSandboxClient, s as abortError$1 } from "./environment-provider-DcelIawX.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-g3YdfEh4.js";
+import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-D24y9zg7.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced } from "@tangle-network/agent-eval";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
-import { basename, delimiter, dirname, isAbsolute, join, resolve, sep, win32 } from "node:path";
-import { applyWorkspacePlan, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
-import { access, chmod, copyFile, mkdir, mkdtemp, open, readFile, realpath, rm, rmdir, stat, symlink, writeFile } from "node:fs/promises";
 import { appendFileSync, constants, createReadStream, existsSync, mkdirSync, readFileSync } from "node:fs";
+import { access, chmod, copyFile, mkdir, mkdtemp, open, readFile, readdir, realpath, rm, rmdir, stat, symlink, writeFile } from "node:fs/promises";
+import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
+import { applyWorkspacePlan, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
 import { spawn } from "node:child_process";
 import { homedir, tmpdir } from "node:os";
 import { stripVTControlCharacters } from "node:util";
@@ -3322,6 +3322,405 @@ function generateTraceId() {
 	return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 //#endregion
+//#region src/runtime/codex-rollout-store.ts
+const zeroCounters = {
+	input: 0,
+	output: 0,
+	cachedInput: 0,
+	cacheWriteInput: 0,
+	reasoningOutput: 0
+};
+const ROLLOUT_SUFFIX = ".jsonl";
+/** Rows this reader needs. Every other line is skipped without being parsed. */
+const INTERESTING = [
+	"\"session_meta\"",
+	"\"token_count\"",
+	"\"task_started\""
+];
+/**
+* Read one rollout's rows into a session record.
+*
+* `rows` is the file's JSON values in file order. Pass the whole file to read a completed session;
+* the store reader passes appended slices and carries the identity forward itself.
+*/
+function readCodexRolloutSession(rows) {
+	const state = createSessionState();
+	for (const row of rows) consumeRow(state, row);
+	return finishSession(state)?.session;
+}
+/**
+* Open an incremental reader over a codex store.
+*
+* Nothing is read until `read()` is called, and every read is bounded by the bytes appended since
+* the previous one, so a 695MB rollout is scanned once rather than once per turn.
+*/
+function createCodexRolloutStoreReader(ref) {
+	if (!isAbsolute(ref.root)) throw new ValidationError(`createCodexRolloutStoreReader: root must be an absolute path, received ${JSON.stringify(ref.root)}`);
+	const root = resolve(ref.root);
+	const workspaceRoot = ref.workspaceRoot === void 0 ? void 0 : resolve(ref.workspaceRoot);
+	const files = /* @__PURE__ */ new Map();
+	return { async read() {
+		const sessions = [];
+		for (const path of await listRollouts(root)) {
+			const cursor = files.get(path) ?? newCursor();
+			files.set(path, cursor);
+			const size = await fileSize(path);
+			if (size === void 0) continue;
+			if (size < cursor.offset) {
+				const fresh = newCursor();
+				files.set(path, fresh);
+				cursor.offset = fresh.offset;
+				cursor.state = fresh.state;
+				cursor.pending = fresh.pending;
+			}
+			if (size === cursor.offset) continue;
+			await consumeAppendedBytes(path, cursor, size);
+			const read = finishSession(cursor.state);
+			if (read === void 0 || !includesWorkspace(read.session, workspaceRoot)) continue;
+			const from = read.ownFrom === void 0 ? void 0 : laterCounters(read.ownFrom, cursor.credited);
+			const incremental = from === void 0 ? void 0 : counterDelta(from, cursor.state.cumulative);
+			cursor.credited = cursor.state.cumulative;
+			sessions.push({
+				session: read.session,
+				...incremental === void 0 ? {} : { incremental }
+			});
+		}
+		return reduceDelta(sessions);
+	} };
+}
+/** Sum two usage reports on every counter both of them state. */
+function addHarnessUsage(left, right) {
+	return {
+		harness: left.harness,
+		input: left.input + right.input,
+		output: left.output + right.output,
+		...sumOptional("cachedInput", left, right),
+		...sumOptional("cacheWriteInput", left, right),
+		...sumOptional("reasoningOutput", left, right)
+	};
+}
+/** True when a report states any spend at all. */
+function harnessUsageIsEmpty(usage) {
+	return usage.input === 0 && usage.output === 0;
+}
+function createSessionState() {
+	return {
+		cumulative: zeroCounters,
+		marks: [],
+		markEnds: [],
+		beforeFirstMark: zeroCounters,
+		sawAnyCount: false
+	};
+}
+function consumeRow(state, row) {
+	const record = plainRecord(row);
+	if (record === void 0) return;
+	if (record.type === "session_meta") {
+		readIdentity(state, record);
+		return;
+	}
+	if (record.type !== "event_msg") return;
+	const payload = plainRecord(record.payload);
+	if (payload === void 0) return;
+	if (payload.type === "task_started") {
+		const at = state.cumulative;
+		state.marks.push({
+			...typeof payload.turn_id === "string" ? { turnId: payload.turn_id } : {},
+			...typeof payload.started_at === "number" ? { startedAtSeconds: payload.started_at } : {},
+			at,
+			...typeof record.ordinal === "number" ? { ordinal: record.ordinal } : {}
+		});
+		state.markEnds.push(at);
+		return;
+	}
+	if (payload.type !== "token_count") return;
+	const total = readCumulative(plainRecord(payload.info)?.total_token_usage);
+	if (total === void 0) return;
+	if (sameCounters(total, state.cumulative)) return;
+	state.cumulative = total;
+	state.sawAnyCount = true;
+	if (state.marks.length === 0) state.beforeFirstMark = total;
+	else state.markEnds[state.marks.length - 1] = total;
+}
+function readIdentity(state, record) {
+	const payload = plainRecord(record.payload);
+	if (payload === void 0) return;
+	const sessionId = typeof payload.id === "string" ? payload.id : void 0;
+	if (sessionId === void 0) return;
+	const spawn = plainRecord(plainRecord(plainRecord(payload.source)?.subagent)?.thread_spawn);
+	const startedAtMs = Date.parse(typeof payload.timestamp === "string" ? payload.timestamp : String(record.timestamp ?? ""));
+	state.identity = {
+		sessionId,
+		...typeof payload.parent_thread_id === "string" ? { parentThreadId: payload.parent_thread_id } : {},
+		...typeof payload.forked_from_id === "string" ? { forkedFromId: payload.forked_from_id } : {},
+		nativeChild: payload.thread_source === "subagent",
+		...typeof payload.agent_path === "string" ? { agentPath: payload.agent_path } : {},
+		...typeof payload.agent_nickname === "string" ? { agentNickname: payload.agent_nickname } : {},
+		...typeof spawn?.depth === "number" ? { depth: spawn.depth } : {},
+		...typeof payload.cwd === "string" ? { cwd: payload.cwd } : {},
+		...typeof payload.cli_version === "string" ? { cliVersion: payload.cli_version } : {},
+		...Number.isFinite(startedAtMs) ? { startedAtMs } : {}
+	};
+	if (typeof payload.subagent_history_start_ordinal === "number") state.historyStartOrdinal = payload.subagent_history_start_ordinal;
+}
+function finishSession(state) {
+	const identity = state.identity;
+	if (identity === void 0) return void 0;
+	const boundary = resolveBoundary(state, identity);
+	const base = {
+		identity,
+		boundary,
+		fileCumulativeInput: state.cumulative.input,
+		fileCumulativeOutput: state.cumulative.output
+	};
+	if (boundary.kind === "unresolved") return { session: {
+		...base,
+		turns: []
+	} };
+	const firstOwn = boundary.kind === "whole-file" ? 0 : boundary.inheritedTurns;
+	const turns = [];
+	for (let index = firstOwn; index < state.marks.length; index += 1) {
+		const mark = state.marks[index];
+		const end = state.markEnds[index];
+		if (mark === void 0 || end === void 0) continue;
+		const usage = counterDelta(mark.at, end);
+		if (usage === void 0) continue;
+		turns.push({
+			...mark.turnId === void 0 ? {} : { turnId: mark.turnId },
+			...mark.startedAtSeconds === void 0 ? {} : { startedAtMs: mark.startedAtSeconds * 1e3 },
+			usage
+		});
+	}
+	const from = firstOwn === 0 ? state.marks.length === 0 ? zeroCounters : state.beforeFirstMark : state.marks[firstOwn]?.at ?? state.cumulative;
+	const own = counterDelta(from, state.cumulative) ?? emptyUsage();
+	return {
+		session: {
+			...base,
+			own,
+			turns
+		},
+		ownFrom: from
+	};
+}
+/**
+* Find the row where this session's OWN history begins.
+*
+* Four rules, most authoritative first. A build that states the boundary is believed over one that
+* must be inferred, and inference is refused rather than guessed when nothing distinguishes the
+* child's turns from the parent's.
+*/
+function resolveBoundary(state, identity) {
+	if (!(identity.forkedFromId !== void 0 || identity.nativeChild)) return { kind: "whole-file" };
+	if (state.historyStartOrdinal !== void 0) {
+		const at = state.marks.findIndex((mark) => mark.ordinal !== void 0 && mark.ordinal >= (state.historyStartOrdinal ?? 0));
+		if (at >= 0) return {
+			kind: "resolved",
+			rule: "history-start-ordinal",
+			...state.marks[at]?.turnId === void 0 ? {} : { turnId: state.marks[at]?.turnId },
+			inheritedTurns: at
+		};
+	}
+	const exact = state.marks.findIndex((mark) => mark.turnId === identity.sessionId);
+	if (exact >= 0) return {
+		kind: "resolved",
+		rule: "turn-is-session",
+		turnId: identity.sessionId,
+		inheritedTurns: exact
+	};
+	const sessionMintedAtMs = uuidV7TimestampMs(identity.sessionId);
+	if (sessionMintedAtMs !== void 0) {
+		const at = state.marks.findIndex((mark) => {
+			const minted = uuidV7TimestampMs(mark.turnId);
+			return minted !== void 0 && minted >= sessionMintedAtMs;
+		});
+		if (at >= 0) return {
+			kind: "resolved",
+			rule: "turn-uuid-v7",
+			...state.marks[at]?.turnId === void 0 ? {} : { turnId: state.marks[at]?.turnId },
+			inheritedTurns: at
+		};
+	}
+	if (identity.startedAtMs !== void 0) {
+		const startedAtSeconds = Math.floor(identity.startedAtMs / 1e3);
+		const matches = state.marks.map((mark, index) => ({
+			mark,
+			index
+		})).filter(({ mark }) => mark.startedAtSeconds !== void 0 && Math.abs(mark.startedAtSeconds - startedAtSeconds) <= 2);
+		if (matches.length === 1) {
+			const only = matches[0];
+			if (only !== void 0) return {
+				kind: "resolved",
+				rule: "turn-start-time",
+				...only.mark.turnId === void 0 ? {} : { turnId: only.mark.turnId },
+				inheritedTurns: only.index
+			};
+		}
+		if (matches.length > 1) return {
+			kind: "unresolved",
+			reason: `${matches.length} task_started rows start within 2s of the child session; its own turn cannot be isolated`
+		};
+	}
+	return {
+		kind: "unresolved",
+		reason: "forked rollout carries no history-start ordinal, no turn matching the session id, no UUIDv7 turn at or after it, and no task_started at the session start time"
+	};
+}
+function newCursor() {
+	return {
+		offset: 0,
+		pending: "",
+		state: createSessionState(),
+		credited: zeroCounters
+	};
+}
+async function listRollouts(root) {
+	const found = [];
+	const walk = async (dir) => {
+		let entries;
+		try {
+			entries = await readdir(dir, { withFileTypes: true });
+		} catch {
+			return;
+		}
+		for (const entry of entries) {
+			const path = join(dir, entry.name);
+			if (entry.isDirectory()) await walk(path);
+			else if (entry.isFile() && entry.name.endsWith(ROLLOUT_SUFFIX)) found.push(path);
+		}
+	};
+	await walk(join(root, "sessions"));
+	return found.sort();
+}
+async function fileSize(path) {
+	try {
+		return (await stat(path)).size;
+	} catch {
+		return;
+	}
+}
+/** Read `[cursor.offset, size)` and fold every complete line into the cursor's session state. */
+async function consumeAppendedBytes(path, cursor, size) {
+	const stream = createReadStream(path, {
+		encoding: "utf8",
+		start: cursor.offset,
+		end: size - 1
+	});
+	try {
+		for await (const chunk of stream) {
+			cursor.pending += chunk;
+			let start = 0;
+			for (let at = cursor.pending.indexOf("\n"); at !== -1; at = cursor.pending.indexOf("\n", start)) {
+				consumeLine(cursor.state, cursor.pending.slice(start, at));
+				start = at + 1;
+			}
+			cursor.pending = cursor.pending.slice(start);
+		}
+	} finally {
+		stream.destroy();
+	}
+	cursor.offset = size;
+}
+function consumeLine(state, line) {
+	if (!INTERESTING.some((marker) => line.includes(marker))) return;
+	try {
+		consumeRow(state, JSON.parse(line));
+	} catch {}
+}
+function includesWorkspace(session, workspaceRoot) {
+	if (workspaceRoot === void 0) return true;
+	const cwd = session.identity.cwd;
+	if (cwd === void 0) return false;
+	const rel = relative(workspaceRoot, resolve(cwd));
+	return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel);
+}
+function reduceDelta(read) {
+	let seat = emptyUsage();
+	let native = emptyUsage();
+	const unresolved = [];
+	for (const { session, incremental } of read) {
+		if (session.boundary.kind === "unresolved") {
+			unresolved.push({
+				sessionId: session.identity.sessionId,
+				reason: session.boundary.reason
+			});
+			continue;
+		}
+		if (incremental === void 0) continue;
+		if (session.identity.nativeChild) native = addHarnessUsage(native, incremental);
+		else seat = addHarnessUsage(seat, incremental);
+	}
+	return {
+		seat,
+		native,
+		unresolved,
+		sessions: read.map((entry) => entry.session)
+	};
+}
+/** The later of two cumulative marks. Every counter is monotonic within one session. */
+function laterCounters(left, right) {
+	return left.input + left.output >= right.input + right.output ? left : right;
+}
+function emptyUsage() {
+	return {
+		harness: "codex",
+		input: 0,
+		output: 0
+	};
+}
+function counterDelta(from, to) {
+	const input = to.input - from.input;
+	const output = to.output - from.output;
+	if (input < 0 || output < 0) return void 0;
+	const cachedInput = Math.max(0, to.cachedInput - from.cachedInput);
+	const cacheWriteInput = Math.max(0, to.cacheWriteInput - from.cacheWriteInput);
+	const reasoningOutput = Math.max(0, to.reasoningOutput - from.reasoningOutput);
+	if (input === 0 && output === 0) return void 0;
+	return {
+		harness: "codex",
+		input,
+		output,
+		cachedInput: Math.min(cachedInput, input),
+		cacheWriteInput: Math.min(cacheWriteInput, Math.max(0, input - Math.min(cachedInput, input))),
+		reasoningOutput: Math.min(reasoningOutput, output)
+	};
+}
+function readCumulative(value) {
+	const record = plainRecord(value);
+	if (record === void 0) return void 0;
+	const input = naturalNumber(record.input_tokens);
+	const output = naturalNumber(record.output_tokens);
+	if (input === void 0 || output === void 0) return void 0;
+	return {
+		input,
+		output,
+		cachedInput: naturalNumber(record.cached_input_tokens) ?? 0,
+		cacheWriteInput: naturalNumber(record.cache_write_input_tokens) ?? 0,
+		reasoningOutput: naturalNumber(record.reasoning_output_tokens) ?? 0
+	};
+}
+function sameCounters(left, right) {
+	return left.input === right.input && left.output === right.output && left.cachedInput === right.cachedInput && left.cacheWriteInput === right.cacheWriteInput && left.reasoningOutput === right.reasoningOutput;
+}
+function sumOptional(field, left, right) {
+	const a = left[field];
+	const b = right[field];
+	if (a === void 0 && b === void 0) return {};
+	return { [field]: (a ?? 0) + (b ?? 0) };
+}
+const UUID_V7 = /^([0-9a-f]{8})-([0-9a-f]{4})-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function uuidV7TimestampMs(value) {
+	const match = value?.match(UUID_V7);
+	if (!match) return void 0;
+	const ms = Number.parseInt(`${match[1]}${match[2]}`, 16);
+	return Number.isSafeInteger(ms) ? ms : void 0;
+}
+function plainRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function naturalNumber(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
+}
+//#endregion
 //#region src/runtime/model-identity.ts
 const SNAPSHOT_TOKEN = /^[A-Za-z0-9._-]+$/u;
 /** Match equivalent bare and provider-qualified spellings without discarding observed identity. */
@@ -8651,6 +9050,12 @@ async function* streamBridgeSession(args) {
 	let observedSystemFingerprint;
 	const toolCalls = [];
 	const promptCache = {};
+	const harnessStore = openBridgeHarnessStore(seam.harnessStore);
+	let tokensProvenance;
+	const creditProvenance = (source) => {
+		tokensProvenance = tokensProvenance === void 0 || tokensProvenance === source ? source : "mixed";
+	};
+	if (harnessStore) await readHarnessStoreDelta(harnessStore, observation);
 	let nextPrompt = taskToPrompt(args.task);
 	for (let t = 0; args.maxTurns === 0 || t < args.maxTurns; t += 1) {
 		if (args.stopSignal?.aborted) {
@@ -8802,6 +9207,7 @@ async function* streamBridgeSession(args) {
 				}
 				if (chunk.usage) {
 					sawTurnTokenUsage = true;
+					creditProvenance("stream-receipt");
 					if (!chunk.usage.known) turnTokensKnown = false;
 					turnInputTokens += chunk.usage.input;
 					turnOutputTokens += chunk.usage.output;
@@ -8877,6 +9283,7 @@ async function* streamBridgeSession(args) {
 			const receipt = readBridgeReceiptTokens(activeRun.profileMaterialization?.inference?.observation?.usage);
 			if ("event" in receipt) {
 				sawTurnTokenUsage = true;
+				creditProvenance("stream-receipt");
 				turnInputTokens += receipt.event.input;
 				turnOutputTokens += receipt.event.output;
 				addTokenUsage(tokens, receipt.event);
@@ -8886,6 +9293,37 @@ async function* streamBridgeSession(args) {
 				if (receipt.event.cacheWrite !== void 0) promptCache.writeTokens = (promptCache.writeTokens ?? 0) + receipt.event.cacheWrite;
 			} else tokensUnknownReason ??= receipt.reason;
 		}
+		if (harnessStore) {
+			const delta = await readHarnessStoreDelta(harnessStore, observation);
+			if (delta) {
+				const charged = sawTurnTokenUsage ? delta.native : addHarnessUsage(delta.seat, delta.native);
+				if (!harnessUsageIsEmpty(charged)) {
+					const event = {
+						kind: "tokens",
+						input: charged.input,
+						output: charged.output,
+						...promptCacheTokenClasses(charged.input, {
+							...charged.cachedInput === void 0 ? {} : { readTokens: charged.cachedInput },
+							...charged.cacheWriteInput === void 0 ? {} : { writeTokens: charged.cacheWriteInput }
+						}),
+						provenance: "harness-store"
+					};
+					sawTurnTokenUsage = true;
+					creditProvenance("harness-store");
+					turnInputTokens += event.input;
+					turnOutputTokens += event.output;
+					addTokenUsage(tokens, event);
+					if (event.freshInput !== void 0) promptCache.freshInput = (promptCache.freshInput ?? 0) + event.freshInput;
+					if (event.cacheRead !== void 0) promptCache.readTokens = (promptCache.readTokens ?? 0) + event.cacheRead;
+					if (event.cacheWrite !== void 0) promptCache.writeTokens = (promptCache.writeTokens ?? 0) + event.cacheWrite;
+					yield event;
+				}
+				if (delta.unresolved.length > 0) {
+					turnTokensKnown = false;
+					tokensUnknownReason ??= `harness-store: ${delta.unresolved.length} forked rollout(s) could not be attributed to a turn; ${delta.unresolved[0]?.reason ?? "no reason recorded"}`;
+				}
+			}
+		}
 		if (!sawTurnTokenUsage || !turnTokensKnown) tokensKnown = false;
 		if (!sawTurnCostStatus || !turnUsdKnown) usdKnown = false;
 		if (!sawTurnCostStatus || !turnUsdKnown) {
@@ -8923,7 +9361,8 @@ async function* streamBridgeSession(args) {
 		usd,
 		...usdKnown ? {} : { usdKnown: false },
 		...estimatedUsdCharged > 0 ? { usdEstimated: estimatedUsdCharged } : {},
-		ms: Date.now() - started
+		ms: Date.now() - started,
+		...tokensProvenance === void 0 || tokensProvenance === "stream-receipt" ? {} : { tokensProvenance }
 	};
 	const out = {
 		content: lastText,
@@ -8965,6 +9404,40 @@ async function* streamBridgeSession(args) {
 * receipt carries no reasoning counter at all, so the codex hazard of adding a reasoning count to
 * an output total that already contains it cannot arise on this path.
 */
+/**
+* Open the harness store named on the seam, or nothing when the caller named none.
+*
+* A harness with no reader is REFUSED loudly rather than read with codex's decoder. Silently
+* ignoring it would hand back the same `{0, 0}` the store was configured to fix, with no signal
+* that the configuration did nothing.
+*/
+function openBridgeHarnessStore(store) {
+	if (store === void 0) return void 0;
+	if (store.harness !== "codex") throw new ValidationError(`bridgeExecutor: harnessStore.harness ${JSON.stringify(store.harness)} has no store reader; only "codex" is readable today`);
+	return createCodexRolloutStoreReader({
+		root: store.root,
+		...store.workspaceRoot === void 0 ? {} : { workspaceRoot: store.workspaceRoot }
+	});
+}
+/**
+* Read one turn's worth of the harness store.
+*
+* A read that fails is noted on the live activity log and returns nothing: the store is additional
+* evidence, and a filesystem error on it must never end a turn whose work already happened.
+*/
+async function readHarnessStoreDelta(reader, observation) {
+	try {
+		return await reader.read();
+	} catch (err) {
+		observation.activity.push({
+			at: Date.now(),
+			kind: "note",
+			label: "harness-store-unreadable",
+			detail: err instanceof Error ? err.message : String(err)
+		});
+		return;
+	}
+}
 function readBridgeReceiptTokens(usage) {
 	if (usage === void 0) return { reason: "usage-unreadable: the turn receipt carried no bridge inference observation" };
 	const input = usage.inputTokens;
@@ -10589,6 +11062,8 @@ function meterUsageEvent(totals, ev) {
 	if (ev.kind === "tokens") {
 		addTokenUsage(totals.tokens, ev);
 		if (ev.tokensKnown === false) totals.tokensKnown = false;
+		const source = ev.provenance ?? "stream-receipt";
+		totals.tokensProvenance = totals.tokensProvenance === void 0 || totals.tokensProvenance === source ? source : "mixed";
 		return;
 	}
 	if (ev.kind === "cost") {
@@ -10611,6 +11086,7 @@ function spendFromUsageTotals(totals) {
 		usd: totals.usd,
 		...totals.usdKnown ? {} : { usdKnown: false },
 		...totals.usdEstimated > 0 ? { usdEstimated: totals.usdEstimated } : {},
+		...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
 		ms: 0
 	};
 }
@@ -14400,6 +14876,7 @@ async function foldStream(stream, onProgress, signal) {
 				...totals.tokensKnown ? {} : { tokensKnown: false },
 				usd: totals.usd,
 				...totals.usdKnown ? {} : { usdKnown: false },
+				...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
 				ms: 0
 			});
 		}
@@ -14427,7 +14904,8 @@ function preserveUnknownTelemetry(streamed, terminal) {
 		ms: terminal.ms,
 		...terminal.boxMinutes !== void 0 ? { boxMinutes: terminal.boxMinutes } : {},
 		...terminal.boxMinutesKnown !== void 0 ? { boxMinutesKnown: terminal.boxMinutesKnown } : {},
-		...terminal.boxMinutesProvenance !== void 0 ? { boxMinutesProvenance: terminal.boxMinutesProvenance } : {}
+		...terminal.boxMinutesProvenance !== void 0 ? { boxMinutesProvenance: terminal.boxMinutesProvenance } : {},
+		...(streamed.tokensProvenance ?? terminal.tokensProvenance) === void 0 ? {} : { tokensProvenance: streamed.tokensProvenance ?? terminal.tokensProvenance }
 	};
 }
 async function awaitAbortable(work, signal) {
@@ -15668,6 +16146,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false;
 }
 //#endregion
-export { bridgeModelRouteRefusal as $, INTELLIGENCE_WIRE_VERSION as $t, readWorkerInteractiveBinding as A, controlProfileMaterialization as An, peerMailVerbNames as At, retainedCreateMaterial as B, sandboxActProfileMaterialization as Bn, createSandboxLineage as Bt, timerAt as C, LOCAL_HARNESSES as Cn, AUTHORITY_MARKERS as Ct, readWorkerInteractiveAdmissions as D, CodexExecutionDiagnosticError as Dn, createPeerMailbox as Dt, interactiveAdmissionSeamKey as E, parseCodexTokenUsage as En, claimsAuthority as Et, startRetainedInteractiveRun as F, promptModelProfileMaterialization as Fn, TERMINAL_DECISIONS as Ft, rollingDispatch as G, routerBrain as Gt, effectiveConcurrency as H, validateProfileMaterialization as Hn, acquireSandbox as Ht, reconnectRetainedRun as I, promptOnlyProfileMaterialization as In, createSandboxForSpec as It, assertValidBudget as J, observedModelMatchesDeclared as Jt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as K, runBrainLoop as Kt, recoverRetainedRun as L, promptResourceProfileMaterialization as Ln, defaultSelectWinner as Lt, workerInteractiveBindingsDir as M, fullProfileMaterialization as Mn, isTerminalNodeStatus as Mt, reconnectRetainedInteractiveRun as N, profileMaterializationAxes$1 as Nn, createInPlaceCliExecutor as Nt, workerInteractiveAdmissionFile as O, AGENT_PROFILE_MATERIALIZATION_AXES as On, isPeerMailEnvelope as Ot, recoverRetainedInteractiveRun as P, promptControlProfileMaterialization as Pn, taskToPrompt as Pt, bridgeAdmissionRead as Q, traceContextToEnv as Qt, startRetainedRun as R, renderProfileMaterializationIssues as Rn, isTerminalDecision as Rt, pollFor as S, DEFAULT_LOCAL_HARNESS as Sn, createInbox as St, waitUntil as T, localHarnessExecutable as Tn, PEER_MAIL_WIRE_KEY as Tt, freeSlots as U, worktreeCliProfileMaterialization as Un, assertBoxlessPromptOptions as Ut, destroyInteractiveEnvironment as V, unsupportedProfileDimensions as Vn, probeSandboxCapabilities as Vt, queueOf as W, readPromptOptions as Wt, spendFromUsageEvents as X, mergeTraceEnv as Xt, createBudgetPool as Y, createPropagatingTraceEmitter as Yt, bindReusableExecutorExecutionId as Z, readTraceContextFromEnv as Zt, recordScopeOwnerMaterialization as _, runSettledCommand as _n, decodeToolPart as _t, uncertainSpawnBudgets as a, exportEvalRuns as an, createExecutor as at, createWaitProbes as b, createWorktree as bn, createActivityLog as bt, pickBestDelivered as c, loopEventToOtelSpan as cn, createWorktreeCliExecutor as ct, driverChild as d, toOtelAttributes as dn, workerTraceEnv as dt, buildLoopOtelSpans as en, bridgeRuntimeAttachmentsKey as et, withDriverExecutor as f, createRuntimeEventCollector as fn, workerTraceHeaders as ft, meterRuntimeOwnedProviderAttempt as g, sanitizeRuntimeStreamEvent as gn, createPushTraceSource as gt, meterRuntimeOwnedAccounting as h, sanitizeKnowledgeReadinessReport as hn, createSteerableSandboxSession as ht, sumMeasuredSpendFromEvents as i, createOtelExporter as in, cliWorktreeExecutor as it, workerInteractiveBindingFile as j, defineProfileMaterializationContract as jn, isLiveNodeStatus as jt, attachWorker as k, assertProfileMaterialization as kn, peerMailTools as kt, runFinalizer as l, padSpanId as ln, WORKER_TRACE_PROPAGATION as lt, deriveNodeExecutionIdentity as m, sanitizeAgentRuntimeEvent as mn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, buildRuntimeEventOtelSpans as nn, captureReusableExecutorConfig as nt, bestDelivered as o, flatOtelSpan as on, createExecutorRegistry as ot, createScope as p, createRuntimeStreamEventCollector as pn, workerTraceSeamKey as pt, teardownExecutor as q, canonicalObservedModel as qt, maxSeqOf as r, createOpenInferenceFileExporter as rn, cliInPlaceExecutor as rt, collectDelivered as s, generateSpanId as sn, snapshotExecutorConfig as st, createRootHandle as t, buildLoopSpanNodes as tn, bridgeStopSignalKey as tt, runTree as u, padTraceId as un, readWorkerTraceContext as ut, scopeOwnerExecutorNodeContext as v, runWorktreeHarness as vn, sandboxSessionTraceSource as vt, validateWaitSpec as w, harnessSupportsReasoningEffort as wn, DEFAULT_PEER_MAIL_LIMITS as wt, isWaitOutcome as x, removeWorktree as xn, readWorkerProgress as xt, settledToIteration as y, captureWorktreeDiff as yn, DEFAULT_STALL_AFTER_MS as yt, startRetainedRunInEnvironment as z, renderUnsupported as zn, runAgentRounds as zt };
+export { bridgeModelRouteRefusal as $, createPropagatingTraceEmitter as $t, readWorkerInteractiveBinding as A, parseCodexTokenUsage as An, peerMailVerbNames as At, retainedCreateMaterial as B, promptOnlyProfileMaterialization as Bn, createSandboxLineage as Bt, timerAt as C, captureWorktreeDiff as Cn, AUTHORITY_MARKERS as Ct, readWorkerInteractiveAdmissions as D, LOCAL_HARNESSES as Dn, createPeerMailbox as Dt, interactiveAdmissionSeamKey as E, DEFAULT_LOCAL_HARNESS as En, claimsAuthority as Et, startRetainedInteractiveRun as F, defineProfileMaterializationContract as Fn, TERMINAL_DECISIONS as Ft, rollingDispatch as G, unsupportedProfileDimensions as Gn, routerBrain as Gt, effectiveConcurrency as H, renderProfileMaterializationIssues as Hn, acquireSandbox as Ht, reconnectRetainedRun as I, fullProfileMaterialization as In, createSandboxForSpec as It, assertValidBudget as J, observedModelMatchesDeclared as Jt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as K, validateProfileMaterialization as Kn, runBrainLoop as Kt, recoverRetainedRun as L, profileMaterializationAxes$1 as Ln, defaultSelectWinner as Lt, workerInteractiveBindingsDir as M, AGENT_PROFILE_MATERIALIZATION_AXES as Mn, isTerminalNodeStatus as Mt, reconnectRetainedInteractiveRun as N, assertProfileMaterialization as Nn, createInPlaceCliExecutor as Nt, workerInteractiveAdmissionFile as O, harnessSupportsReasoningEffort as On, isPeerMailEnvelope as Ot, recoverRetainedInteractiveRun as P, controlProfileMaterialization as Pn, taskToPrompt as Pt, bridgeAdmissionRead as Q, readCodexRolloutSession as Qt, startRetainedRun as R, promptControlProfileMaterialization as Rn, isTerminalDecision as Rt, pollFor as S, runWorktreeHarness as Sn, createInbox as St, waitUntil as T, removeWorktree as Tn, PEER_MAIL_WIRE_KEY as Tt, freeSlots as U, renderUnsupported as Un, assertBoxlessPromptOptions as Ut, destroyInteractiveEnvironment as V, promptResourceProfileMaterialization as Vn, probeSandboxCapabilities as Vt, queueOf as W, sandboxActProfileMaterialization as Wn, readPromptOptions as Wt, spendFromUsageEvents as X, createCodexRolloutStoreReader as Xt, createBudgetPool as Y, addHarnessUsage as Yt, bindReusableExecutorExecutionId as Z, harnessUsageIsEmpty as Zt, recordScopeOwnerMaterialization as _, createRuntimeStreamEventCollector as _n, decodeToolPart as _t, uncertainSpawnBudgets as a, buildLoopSpanNodes as an, createExecutor as at, createWaitProbes as b, sanitizeRuntimeStreamEvent as bn, createActivityLog as bt, pickBestDelivered as c, createOtelExporter as cn, createWorktreeCliExecutor as ct, driverChild as d, generateSpanId as dn, workerTraceEnv as dt, mergeTraceEnv as en, bridgeRuntimeAttachmentsKey as et, withDriverExecutor as f, loopEventToOtelSpan as fn, workerTraceHeaders as ft, meterRuntimeOwnedProviderAttempt as g, createRuntimeEventCollector as gn, createPushTraceSource as gt, meterRuntimeOwnedAccounting as h, toOtelAttributes as hn, createSteerableSandboxSession as ht, sumMeasuredSpendFromEvents as i, buildLoopOtelSpans as in, cliWorktreeExecutor as it, workerInteractiveBindingFile as j, CodexExecutionDiagnosticError as jn, isLiveNodeStatus as jt, attachWorker as k, localHarnessExecutable as kn, peerMailTools as kt, runFinalizer as l, exportEvalRuns as ln, WORKER_TRACE_PROPAGATION as lt, deriveNodeExecutionIdentity as m, padTraceId as mn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, traceContextToEnv as nn, captureReusableExecutorConfig as nt, bestDelivered as o, buildRuntimeEventOtelSpans as on, createExecutorRegistry as ot, createScope as p, padSpanId as pn, workerTraceSeamKey as pt, teardownExecutor as q, worktreeCliProfileMaterialization as qn, canonicalObservedModel as qt, maxSeqOf as r, INTELLIGENCE_WIRE_VERSION as rn, cliInPlaceExecutor as rt, collectDelivered as s, createOpenInferenceFileExporter as sn, snapshotExecutorConfig as st, createRootHandle as t, readTraceContextFromEnv as tn, bridgeStopSignalKey as tt, runTree as u, flatOtelSpan as un, readWorkerTraceContext as ut, scopeOwnerExecutorNodeContext as v, sanitizeAgentRuntimeEvent as vn, sandboxSessionTraceSource as vt, validateWaitSpec as w, createWorktree as wn, DEFAULT_PEER_MAIL_LIMITS as wt, isWaitOutcome as x, runSettledCommand as xn, readWorkerProgress as xt, settledToIteration as y, sanitizeKnowledgeReadinessReport as yn, DEFAULT_STALL_AFTER_MS as yt, startRetainedRunInEnvironment as z, promptModelProfileMaterialization as zn, runAgentRounds as zt };
 
-//# sourceMappingURL=supervisor-BSNkaM2a.js.map
+//# sourceMappingURL=supervisor-CqJW4qap.js.map