@tangle-network/agent-runtime 0.189.0 → 0.191.0

package/dist/{supervisor-BSNkaM2a.js → redact-BP8Xn2A3.js}

@@ -1,21 +1,21 @@
 import { A as assertEventBinding, B as exactContinuedControlRef, C as runtimeOwnedScopeOwnerRuntime, D as abortError, E as RetainedRunProviderContractError, F as assertWaitDuration, G as freezeControlRef, H as exactSession, I as awaitAbortable$1, J as sameControlCoordinates, K as hasDurableCancel, L as cancellationRequest, M as assertResultBinding, N as assertSequence, O as assertBoundaryBinding, P as assertStableText, R as copyControlRef, S as runtimeOwnedPendingExecutorMaterialization, T as unknownMaterializationReceipt, U as exactSessionCancel, V as exactControlRef, W as exactSessionResult, Y as freshTurnInput, _ as runtimeOwnedDeferredExecutorRuntime, a as authoredProfileDigest, b as runtimeOwnedExecutorMaterialization, c as knownExecutionBindingReceipt, g as recordRuntimeOwnedProviderModel, h as recordRuntimeOwnedProviderIdentityConflict, j as assertInteractionBinding, k as assertCanonicalEventBinding, l as knownMaterializationReceipt, m as recordRuntimeOwnedProviderDispatchNotStarted, n as attestRuntimeOwnedExecutor, o as finalizeRuntimeOwnedPendingExecutor, p as recordRuntimeOwnedProviderAttemptStart, q as isTerminalSessionStatus, r as attestRuntimeOwnedPendingExecutor, s as inheritRuntimeOwnedExecutorAttestation, t as attestRuntimeOwnedDeferredExecutor, u as newExecutionAttemptId, w as unknownExecutionBindingReceipt, x as runtimeOwnedExecutorProviderEvidence, y as runtimeOwnedExecutorExecutionBinding, z as delay } from "./materialization-CekWK6OO.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, l as RetainedInteractiveBindingError, m as ValidationError, r as BackendTransportError, u as RetainedRunAdmissionError } from "./errors-CDZ8XsVj.js";
 import { n as detachedSnapshot } from "./snapshot-CTAf4uuA.js";
-import { _ as captureWorkerTraceEvidence, a as aggregateProviderModelEvidence, c as loadSpawnForest, d as replaySpawnTree, f as attestNestedDriverTreeOwner, h as runtimeOwnedNestedDriverTreeRoot, l as materializeTreeView, m as nestedDriverTreeRoot, n as FileSpawnJournal, o as closesCursorSlot, p as driverRuntime, u as pendingWaits, x as contentAddress } from "./spawn-journal-CxRa-NJ2.js";
-import { _ as throwIfAborted, a as cloneTokenUsage, b as zeroSpend, d as randomSuffix, f as randomUuid, g as throwAbort, h as stringifySafe, l as mapWithConcurrency, m as sleep, n as addTokenUsage, o as deleteBoxSafe, p as roundBoxMinutes, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, u as promptCacheTokenClasses, v as unmeteredSpend, x as zeroTokenUsage, y as withTimeout } from "./util-BfoW6RU7.js";
+import { _ as captureWorkerTraceEvidence, a as aggregateProviderModelEvidence, c as loadSpawnForest, d as replaySpawnTree, f as attestNestedDriverTreeOwner, h as runtimeOwnedNestedDriverTreeRoot, l as materializeTreeView, m as nestedDriverTreeRoot, n as FileSpawnJournal, o as closesCursorSlot, p as driverRuntime, u as pendingWaits, x as contentAddress } from "./spawn-journal-B9eTmVAn.js";
+import { _ as throwIfAborted, a as cloneTokenUsage, b as zeroSpend, d as randomSuffix, f as randomUuid, g as throwAbort, h as stringifySafe, l as mapWithConcurrency, m as sleep, n as addTokenUsage, o as deleteBoxSafe, p as roundBoxMinutes, r as chargedTokens, s as hasCompleteCacheBreakdown, t as addSpend, u as promptCacheTokenClasses, v as unmeteredSpend, x as zeroTokenUsage, y as withTimeout } from "./util-mCNUeboW.js";
 import { _ as parseCodexUsageRecord, c as mapSandboxToolEvent, d as sandboxProgressEvents, h as parseCanonicalTransportEvent, i as createSandboxUsageLedger, l as notifySandboxEventObserver, m as extractTransportEventIdentity, r as createSandboxToolPartState, t as assertSandboxServedModel, u as sandboxEventServedBackend } from "./sandbox-events-DWeQRWxg.js";
 import { n as executableAgentSpecSnapshot, r as projectSandboxOutcome, t as executableAgentProfileSnapshot } from "./executable-spec-DxuiDFAU.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-Wf2MxXJ9.js";
-import { c as linkAbort, i as resolveAgentEnvironmentProvider, l as runAbortable, n as providerAsExecutor, r as providerAsSandboxClient, s as abortError$1 } from "./environment-provider-DZxuH3E4.js";
+import { c as linkAbort, i as resolveAgentEnvironmentProvider, l as runAbortable, n as providerAsExecutor, r as providerAsSandboxClient, s as abortError$1 } from "./environment-provider-DEwsolvi.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-g3YdfEh4.js";
+import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-D24y9zg7.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced } from "@tangle-network/agent-eval";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
-import { basename, delimiter, dirname, isAbsolute, join, resolve, sep, win32 } from "node:path";
-import { applyWorkspacePlan, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
-import { access, chmod, copyFile, mkdir, mkdtemp, open, readFile, realpath, rm, rmdir, stat, symlink, writeFile } from "node:fs/promises";
 import { appendFileSync, constants, createReadStream, existsSync, mkdirSync, readFileSync } from "node:fs";
+import { access, chmod, copyFile, mkdir, mkdtemp, open, readFile, readdir, realpath, rm, rmdir, stat, symlink, writeFile } from "node:fs/promises";
+import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
+import { applyWorkspacePlan, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
 import { spawn } from "node:child_process";
 import { homedir, tmpdir } from "node:os";
 import { stripVTControlCharacters } from "node:util";
@@ -3322,6 +3322,405 @@ function generateTraceId() {
 	return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 //#endregion
+//#region src/runtime/codex-rollout-store.ts
+const zeroCounters = {
+	input: 0,
+	output: 0,
+	cachedInput: 0,
+	cacheWriteInput: 0,
+	reasoningOutput: 0
+};
+const ROLLOUT_SUFFIX = ".jsonl";
+/** Rows this reader needs. Every other line is skipped without being parsed. */
+const INTERESTING = [
+	"\"session_meta\"",
+	"\"token_count\"",
+	"\"task_started\""
+];
+/**
+* Read one rollout's rows into a session record.
+*
+* `rows` is the file's JSON values in file order. Pass the whole file to read a completed session;
+* the store reader passes appended slices and carries the identity forward itself.
+*/
+function readCodexRolloutSession(rows) {
+	const state = createSessionState();
+	for (const row of rows) consumeRow(state, row);
+	return finishSession(state)?.session;
+}
+/**
+* Open an incremental reader over a codex store.
+*
+* Nothing is read until `read()` is called, and every read is bounded by the bytes appended since
+* the previous one, so a 695MB rollout is scanned once rather than once per turn.
+*/
+function createCodexRolloutStoreReader(ref) {
+	if (!isAbsolute(ref.root)) throw new ValidationError(`createCodexRolloutStoreReader: root must be an absolute path, received ${JSON.stringify(ref.root)}`);
+	const root = resolve(ref.root);
+	const workspaceRoot = ref.workspaceRoot === void 0 ? void 0 : resolve(ref.workspaceRoot);
+	const files = /* @__PURE__ */ new Map();
+	return { async read() {
+		const sessions = [];
+		for (const path of await listRollouts(root)) {
+			const cursor = files.get(path) ?? newCursor();
+			files.set(path, cursor);
+			const size = await fileSize(path);
+			if (size === void 0) continue;
+			if (size < cursor.offset) {
+				const fresh = newCursor();
+				files.set(path, fresh);
+				cursor.offset = fresh.offset;
+				cursor.state = fresh.state;
+				cursor.pending = fresh.pending;
+			}
+			if (size === cursor.offset) continue;
+			await consumeAppendedBytes(path, cursor, size);
+			const read = finishSession(cursor.state);
+			if (read === void 0 || !includesWorkspace(read.session, workspaceRoot)) continue;
+			const from = read.ownFrom === void 0 ? void 0 : laterCounters(read.ownFrom, cursor.credited);
+			const incremental = from === void 0 ? void 0 : counterDelta(from, cursor.state.cumulative);
+			cursor.credited = cursor.state.cumulative;
+			sessions.push({
+				session: read.session,
+				...incremental === void 0 ? {} : { incremental }
+			});
+		}
+		return reduceDelta(sessions);
+	} };
+}
+/** Sum two usage reports on every counter both of them state. */
+function addHarnessUsage(left, right) {
+	return {
+		harness: left.harness,
+		input: left.input + right.input,
+		output: left.output + right.output,
+		...sumOptional("cachedInput", left, right),
+		...sumOptional("cacheWriteInput", left, right),
+		...sumOptional("reasoningOutput", left, right)
+	};
+}
+/** True when a report states any spend at all. */
+function harnessUsageIsEmpty(usage) {
+	return usage.input === 0 && usage.output === 0;
+}
+function createSessionState() {
+	return {
+		cumulative: zeroCounters,
+		marks: [],
+		markEnds: [],
+		beforeFirstMark: zeroCounters,
+		sawAnyCount: false
+	};
+}
+function consumeRow(state, row) {
+	const record = plainRecord(row);
+	if (record === void 0) return;
+	if (record.type === "session_meta") {
+		readIdentity(state, record);
+		return;
+	}
+	if (record.type !== "event_msg") return;
+	const payload = plainRecord(record.payload);
+	if (payload === void 0) return;
+	if (payload.type === "task_started") {
+		const at = state.cumulative;
+		state.marks.push({
+			...typeof payload.turn_id === "string" ? { turnId: payload.turn_id } : {},
+			...typeof payload.started_at === "number" ? { startedAtSeconds: payload.started_at } : {},
+			at,
+			...typeof record.ordinal === "number" ? { ordinal: record.ordinal } : {}
+		});
+		state.markEnds.push(at);
+		return;
+	}
+	if (payload.type !== "token_count") return;
+	const total = readCumulative(plainRecord(payload.info)?.total_token_usage);
+	if (total === void 0) return;
+	if (sameCounters(total, state.cumulative)) return;
+	state.cumulative = total;
+	state.sawAnyCount = true;
+	if (state.marks.length === 0) state.beforeFirstMark = total;
+	else state.markEnds[state.marks.length - 1] = total;
+}
+function readIdentity(state, record) {
+	const payload = plainRecord(record.payload);
+	if (payload === void 0) return;
+	const sessionId = typeof payload.id === "string" ? payload.id : void 0;
+	if (sessionId === void 0) return;
+	const spawn = plainRecord(plainRecord(plainRecord(payload.source)?.subagent)?.thread_spawn);
+	const startedAtMs = Date.parse(typeof payload.timestamp === "string" ? payload.timestamp : String(record.timestamp ?? ""));
+	state.identity = {
+		sessionId,
+		...typeof payload.parent_thread_id === "string" ? { parentThreadId: payload.parent_thread_id } : {},
+		...typeof payload.forked_from_id === "string" ? { forkedFromId: payload.forked_from_id } : {},
+		nativeChild: payload.thread_source === "subagent",
+		...typeof payload.agent_path === "string" ? { agentPath: payload.agent_path } : {},
+		...typeof payload.agent_nickname === "string" ? { agentNickname: payload.agent_nickname } : {},
+		...typeof spawn?.depth === "number" ? { depth: spawn.depth } : {},
+		...typeof payload.cwd === "string" ? { cwd: payload.cwd } : {},
+		...typeof payload.cli_version === "string" ? { cliVersion: payload.cli_version } : {},
+		...Number.isFinite(startedAtMs) ? { startedAtMs } : {}
+	};
+	if (typeof payload.subagent_history_start_ordinal === "number") state.historyStartOrdinal = payload.subagent_history_start_ordinal;
+}
+function finishSession(state) {
+	const identity = state.identity;
+	if (identity === void 0) return void 0;
+	const boundary = resolveBoundary(state, identity);
+	const base = {
+		identity,
+		boundary,
+		fileCumulativeInput: state.cumulative.input,
+		fileCumulativeOutput: state.cumulative.output
+	};
+	if (boundary.kind === "unresolved") return { session: {
+		...base,
+		turns: []
+	} };
+	const firstOwn = boundary.kind === "whole-file" ? 0 : boundary.inheritedTurns;
+	const turns = [];
+	for (let index = firstOwn; index < state.marks.length; index += 1) {
+		const mark = state.marks[index];
+		const end = state.markEnds[index];
+		if (mark === void 0 || end === void 0) continue;
+		const usage = counterDelta(mark.at, end);
+		if (usage === void 0) continue;
+		turns.push({
+			...mark.turnId === void 0 ? {} : { turnId: mark.turnId },
+			...mark.startedAtSeconds === void 0 ? {} : { startedAtMs: mark.startedAtSeconds * 1e3 },
+			usage
+		});
+	}
+	const from = firstOwn === 0 ? state.marks.length === 0 ? zeroCounters : state.beforeFirstMark : state.marks[firstOwn]?.at ?? state.cumulative;
+	const own = counterDelta(from, state.cumulative) ?? emptyUsage();
+	return {
+		session: {
+			...base,
+			own,
+			turns
+		},
+		ownFrom: from
+	};
+}
+/**
+* Find the row where this session's OWN history begins.
+*
+* Four rules, most authoritative first. A build that states the boundary is believed over one that
+* must be inferred, and inference is refused rather than guessed when nothing distinguishes the
+* child's turns from the parent's.
+*/
+function resolveBoundary(state, identity) {
+	if (!(identity.forkedFromId !== void 0 || identity.nativeChild)) return { kind: "whole-file" };
+	if (state.historyStartOrdinal !== void 0) {
+		const at = state.marks.findIndex((mark) => mark.ordinal !== void 0 && mark.ordinal >= (state.historyStartOrdinal ?? 0));
+		if (at >= 0) return {
+			kind: "resolved",
+			rule: "history-start-ordinal",
+			...state.marks[at]?.turnId === void 0 ? {} : { turnId: state.marks[at]?.turnId },
+			inheritedTurns: at
+		};
+	}
+	const exact = state.marks.findIndex((mark) => mark.turnId === identity.sessionId);
+	if (exact >= 0) return {
+		kind: "resolved",
+		rule: "turn-is-session",
+		turnId: identity.sessionId,
+		inheritedTurns: exact
+	};
+	const sessionMintedAtMs = uuidV7TimestampMs(identity.sessionId);
+	if (sessionMintedAtMs !== void 0) {
+		const at = state.marks.findIndex((mark) => {
+			const minted = uuidV7TimestampMs(mark.turnId);
+			return minted !== void 0 && minted >= sessionMintedAtMs;
+		});
+		if (at >= 0) return {
+			kind: "resolved",
+			rule: "turn-uuid-v7",
+			...state.marks[at]?.turnId === void 0 ? {} : { turnId: state.marks[at]?.turnId },
+			inheritedTurns: at
+		};
+	}
+	if (identity.startedAtMs !== void 0) {
+		const startedAtSeconds = Math.floor(identity.startedAtMs / 1e3);
+		const matches = state.marks.map((mark, index) => ({
+			mark,
+			index
+		})).filter(({ mark }) => mark.startedAtSeconds !== void 0 && Math.abs(mark.startedAtSeconds - startedAtSeconds) <= 2);
+		if (matches.length === 1) {
+			const only = matches[0];
+			if (only !== void 0) return {
+				kind: "resolved",
+				rule: "turn-start-time",
+				...only.mark.turnId === void 0 ? {} : { turnId: only.mark.turnId },
+				inheritedTurns: only.index
+			};
+		}
+		if (matches.length > 1) return {
+			kind: "unresolved",
+			reason: `${matches.length} task_started rows start within 2s of the child session; its own turn cannot be isolated`
+		};
+	}
+	return {
+		kind: "unresolved",
+		reason: "forked rollout carries no history-start ordinal, no turn matching the session id, no UUIDv7 turn at or after it, and no task_started at the session start time"
+	};
+}
+function newCursor() {
+	return {
+		offset: 0,
+		pending: "",
+		state: createSessionState(),
+		credited: zeroCounters
+	};
+}
+async function listRollouts(root) {
+	const found = [];
+	const walk = async (dir) => {
+		let entries;
+		try {
+			entries = await readdir(dir, { withFileTypes: true });
+		} catch {
+			return;
+		}
+		for (const entry of entries) {
+			const path = join(dir, entry.name);
+			if (entry.isDirectory()) await walk(path);
+			else if (entry.isFile() && entry.name.endsWith(ROLLOUT_SUFFIX)) found.push(path);
+		}
+	};
+	await walk(join(root, "sessions"));
+	return found.sort();
+}
+async function fileSize(path) {
+	try {
+		return (await stat(path)).size;
+	} catch {
+		return;
+	}
+}
+/** Read `[cursor.offset, size)` and fold every complete line into the cursor's session state. */
+async function consumeAppendedBytes(path, cursor, size) {
+	const stream = createReadStream(path, {
+		encoding: "utf8",
+		start: cursor.offset,
+		end: size - 1
+	});
+	try {
+		for await (const chunk of stream) {
+			cursor.pending += chunk;
+			let start = 0;
+			for (let at = cursor.pending.indexOf("\n"); at !== -1; at = cursor.pending.indexOf("\n", start)) {
+				consumeLine(cursor.state, cursor.pending.slice(start, at));
+				start = at + 1;
+			}
+			cursor.pending = cursor.pending.slice(start);
+		}
+	} finally {
+		stream.destroy();
+	}
+	cursor.offset = size;
+}
+function consumeLine(state, line) {
+	if (!INTERESTING.some((marker) => line.includes(marker))) return;
+	try {
+		consumeRow(state, JSON.parse(line));
+	} catch {}
+}
+function includesWorkspace(session, workspaceRoot) {
+	if (workspaceRoot === void 0) return true;
+	const cwd = session.identity.cwd;
+	if (cwd === void 0) return false;
+	const rel = relative(workspaceRoot, resolve(cwd));
+	return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel);
+}
+function reduceDelta(read) {
+	let seat = emptyUsage();
+	let native = emptyUsage();
+	const unresolved = [];
+	for (const { session, incremental } of read) {
+		if (session.boundary.kind === "unresolved") {
+			unresolved.push({
+				sessionId: session.identity.sessionId,
+				reason: session.boundary.reason
+			});
+			continue;
+		}
+		if (incremental === void 0) continue;
+		if (session.identity.nativeChild) native = addHarnessUsage(native, incremental);
+		else seat = addHarnessUsage(seat, incremental);
+	}
+	return {
+		seat,
+		native,
+		unresolved,
+		sessions: read.map((entry) => entry.session)
+	};
+}
+/** The later of two cumulative marks. Every counter is monotonic within one session. */
+function laterCounters(left, right) {
+	return left.input + left.output >= right.input + right.output ? left : right;
+}
+function emptyUsage() {
+	return {
+		harness: "codex",
+		input: 0,
+		output: 0
+	};
+}
+function counterDelta(from, to) {
+	const input = to.input - from.input;
+	const output = to.output - from.output;
+	if (input < 0 || output < 0) return void 0;
+	const cachedInput = Math.max(0, to.cachedInput - from.cachedInput);
+	const cacheWriteInput = Math.max(0, to.cacheWriteInput - from.cacheWriteInput);
+	const reasoningOutput = Math.max(0, to.reasoningOutput - from.reasoningOutput);
+	if (input === 0 && output === 0) return void 0;
+	return {
+		harness: "codex",
+		input,
+		output,
+		cachedInput: Math.min(cachedInput, input),
+		cacheWriteInput: Math.min(cacheWriteInput, Math.max(0, input - Math.min(cachedInput, input))),
+		reasoningOutput: Math.min(reasoningOutput, output)
+	};
+}
+function readCumulative(value) {
+	const record = plainRecord(value);
+	if (record === void 0) return void 0;
+	const input = naturalNumber(record.input_tokens);
+	const output = naturalNumber(record.output_tokens);
+	if (input === void 0 || output === void 0) return void 0;
+	return {
+		input,
+		output,
+		cachedInput: naturalNumber(record.cached_input_tokens) ?? 0,
+		cacheWriteInput: naturalNumber(record.cache_write_input_tokens) ?? 0,
+		reasoningOutput: naturalNumber(record.reasoning_output_tokens) ?? 0
+	};
+}
+function sameCounters(left, right) {
+	return left.input === right.input && left.output === right.output && left.cachedInput === right.cachedInput && left.cacheWriteInput === right.cacheWriteInput && left.reasoningOutput === right.reasoningOutput;
+}
+function sumOptional(field, left, right) {
+	const a = left[field];
+	const b = right[field];
+	if (a === void 0 && b === void 0) return {};
+	return { [field]: (a ?? 0) + (b ?? 0) };
+}
+const UUID_V7 = /^([0-9a-f]{8})-([0-9a-f]{4})-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function uuidV7TimestampMs(value) {
+	const match = value?.match(UUID_V7);
+	if (!match) return void 0;
+	const ms = Number.parseInt(`${match[1]}${match[2]}`, 16);
+	return Number.isSafeInteger(ms) ? ms : void 0;
+}
+function plainRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function naturalNumber(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
+}
+//#endregion
 //#region src/runtime/model-identity.ts
 const SNAPSHOT_TOKEN = /^[A-Za-z0-9._-]+$/u;
 /** Match equivalent bare and provider-qualified spellings without discarding observed identity. */
@@ -8651,6 +9050,12 @@ async function* streamBridgeSession(args) {
 	let observedSystemFingerprint;
 	const toolCalls = [];
 	const promptCache = {};
+	const harnessStore = openBridgeHarnessStore(seam.harnessStore);
+	let tokensProvenance;
+	const creditProvenance = (source) => {
+		tokensProvenance = tokensProvenance === void 0 || tokensProvenance === source ? source : "mixed";
+	};
+	if (harnessStore) await readHarnessStoreDelta(harnessStore, observation);
 	let nextPrompt = taskToPrompt(args.task);
 	for (let t = 0; args.maxTurns === 0 || t < args.maxTurns; t += 1) {
 		if (args.stopSignal?.aborted) {
@@ -8802,6 +9207,7 @@ async function* streamBridgeSession(args) {
 				}
 				if (chunk.usage) {
 					sawTurnTokenUsage = true;
+					creditProvenance("stream-receipt");
 					if (!chunk.usage.known) turnTokensKnown = false;
 					turnInputTokens += chunk.usage.input;
 					turnOutputTokens += chunk.usage.output;
@@ -8877,6 +9283,7 @@ async function* streamBridgeSession(args) {
 			const receipt = readBridgeReceiptTokens(activeRun.profileMaterialization?.inference?.observation?.usage);
 			if ("event" in receipt) {
 				sawTurnTokenUsage = true;
+				creditProvenance("stream-receipt");
 				turnInputTokens += receipt.event.input;
 				turnOutputTokens += receipt.event.output;
 				addTokenUsage(tokens, receipt.event);
@@ -8886,6 +9293,37 @@ async function* streamBridgeSession(args) {
 				if (receipt.event.cacheWrite !== void 0) promptCache.writeTokens = (promptCache.writeTokens ?? 0) + receipt.event.cacheWrite;
 			} else tokensUnknownReason ??= receipt.reason;
 		}
+		if (harnessStore) {
+			const delta = await readHarnessStoreDelta(harnessStore, observation);
+			if (delta) {
+				const charged = sawTurnTokenUsage ? delta.native : addHarnessUsage(delta.seat, delta.native);
+				if (!harnessUsageIsEmpty(charged)) {
+					const event = {
+						kind: "tokens",
+						input: charged.input,
+						output: charged.output,
+						...promptCacheTokenClasses(charged.input, {
+							...charged.cachedInput === void 0 ? {} : { readTokens: charged.cachedInput },
+							...charged.cacheWriteInput === void 0 ? {} : { writeTokens: charged.cacheWriteInput }
+						}),
+						provenance: "harness-store"
+					};
+					sawTurnTokenUsage = true;
+					creditProvenance("harness-store");
+					turnInputTokens += event.input;
+					turnOutputTokens += event.output;
+					addTokenUsage(tokens, event);
+					if (event.freshInput !== void 0) promptCache.freshInput = (promptCache.freshInput ?? 0) + event.freshInput;
+					if (event.cacheRead !== void 0) promptCache.readTokens = (promptCache.readTokens ?? 0) + event.cacheRead;
+					if (event.cacheWrite !== void 0) promptCache.writeTokens = (promptCache.writeTokens ?? 0) + event.cacheWrite;
+					yield event;
+				}
+				if (delta.unresolved.length > 0) {
+					turnTokensKnown = false;
+					tokensUnknownReason ??= `harness-store: ${delta.unresolved.length} forked rollout(s) could not be attributed to a turn; ${delta.unresolved[0]?.reason ?? "no reason recorded"}`;
+				}
+			}
+		}
 		if (!sawTurnTokenUsage || !turnTokensKnown) tokensKnown = false;
 		if (!sawTurnCostStatus || !turnUsdKnown) usdKnown = false;
 		if (!sawTurnCostStatus || !turnUsdKnown) {
@@ -8923,7 +9361,8 @@ async function* streamBridgeSession(args) {
 		usd,
 		...usdKnown ? {} : { usdKnown: false },
 		...estimatedUsdCharged > 0 ? { usdEstimated: estimatedUsdCharged } : {},
-		ms: Date.now() - started
+		ms: Date.now() - started,
+		...tokensProvenance === void 0 || tokensProvenance === "stream-receipt" ? {} : { tokensProvenance }
 	};
 	const out = {
 		content: lastText,
@@ -8965,6 +9404,40 @@ async function* streamBridgeSession(args) {
 * receipt carries no reasoning counter at all, so the codex hazard of adding a reasoning count to
 * an output total that already contains it cannot arise on this path.
 */
+/**
+* Open the harness store named on the seam, or nothing when the caller named none.
+*
+* A harness with no reader is REFUSED loudly rather than read with codex's decoder. Silently
+* ignoring it would hand back the same `{0, 0}` the store was configured to fix, with no signal
+* that the configuration did nothing.
+*/
+function openBridgeHarnessStore(store) {
+	if (store === void 0) return void 0;
+	if (store.harness !== "codex") throw new ValidationError(`bridgeExecutor: harnessStore.harness ${JSON.stringify(store.harness)} has no store reader; only "codex" is readable today`);
+	return createCodexRolloutStoreReader({
+		root: store.root,
+		...store.workspaceRoot === void 0 ? {} : { workspaceRoot: store.workspaceRoot }
+	});
+}
+/**
+* Read one turn's worth of the harness store.
+*
+* A read that fails is noted on the live activity log and returns nothing: the store is additional
+* evidence, and a filesystem error on it must never end a turn whose work already happened.
+*/
+async function readHarnessStoreDelta(reader, observation) {
+	try {
+		return await reader.read();
+	} catch (err) {
+		observation.activity.push({
+			at: Date.now(),
+			kind: "note",
+			label: "harness-store-unreadable",
+			detail: err instanceof Error ? err.message : String(err)
+		});
+		return;
+	}
+}
 function readBridgeReceiptTokens(usage) {
 	if (usage === void 0) return { reason: "usage-unreadable: the turn receipt carried no bridge inference observation" };
 	const input = usage.inputTokens;
@@ -10589,6 +11062,8 @@ function meterUsageEvent(totals, ev) {
 	if (ev.kind === "tokens") {
 		addTokenUsage(totals.tokens, ev);
 		if (ev.tokensKnown === false) totals.tokensKnown = false;
+		const source = ev.provenance ?? "stream-receipt";
+		totals.tokensProvenance = totals.tokensProvenance === void 0 || totals.tokensProvenance === source ? source : "mixed";
 		return;
 	}
 	if (ev.kind === "cost") {
@@ -10611,6 +11086,7 @@ function spendFromUsageTotals(totals) {
 		usd: totals.usd,
 		...totals.usdKnown ? {} : { usdKnown: false },
 		...totals.usdEstimated > 0 ? { usdEstimated: totals.usdEstimated } : {},
+		...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
 		ms: 0
 	};
 }
@@ -10867,7 +11343,7 @@ async function teardownExecutor(executor, grace, deadlineAtMs, now) {
 			if (timer !== void 0) clearTimeout(timer);
 		}
 	}
-	if (!receipt.destroyed) throw new ValidationError("executor teardown reported destroyed=false");
+	if (!receipt.destroyed) throw new ValidationError(`executor teardown reported destroyed=false${receipt.detail ? `: ${receipt.detail}` : ""}`);
 }
 //#endregion
 //#region src/runtime/supervise/dispatch.ts
@@ -14400,6 +14876,7 @@ async function foldStream(stream, onProgress, signal) {
 				...totals.tokensKnown ? {} : { tokensKnown: false },
 				usd: totals.usd,
 				...totals.usdKnown ? {} : { usdKnown: false },
+				...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
 				ms: 0
 			});
 		}
@@ -14427,7 +14904,8 @@ function preserveUnknownTelemetry(streamed, terminal) {
 		ms: terminal.ms,
 		...terminal.boxMinutes !== void 0 ? { boxMinutes: terminal.boxMinutes } : {},
 		...terminal.boxMinutesKnown !== void 0 ? { boxMinutesKnown: terminal.boxMinutesKnown } : {},
-		...terminal.boxMinutesProvenance !== void 0 ? { boxMinutesProvenance: terminal.boxMinutesProvenance } : {}
+		...terminal.boxMinutesProvenance !== void 0 ? { boxMinutesProvenance: terminal.boxMinutesProvenance } : {},
+		...(streamed.tokensProvenance ?? terminal.tokensProvenance) === void 0 ? {} : { tokensProvenance: streamed.tokensProvenance ?? terminal.tokensProvenance }
 	};
 }
 async function awaitAbortable(work, signal) {
@@ -15668,6 +16146,85 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false;
 }
 //#endregion
-export { bridgeModelRouteRefusal as $, INTELLIGENCE_WIRE_VERSION as $t, readWorkerInteractiveBinding as A, controlProfileMaterialization as An, peerMailVerbNames as At, retainedCreateMaterial as B, sandboxActProfileMaterialization as Bn, createSandboxLineage as Bt, timerAt as C, LOCAL_HARNESSES as Cn, AUTHORITY_MARKERS as Ct, readWorkerInteractiveAdmissions as D, CodexExecutionDiagnosticError as Dn, createPeerMailbox as Dt, interactiveAdmissionSeamKey as E, parseCodexTokenUsage as En, claimsAuthority as Et, startRetainedInteractiveRun as F, promptModelProfileMaterialization as Fn, TERMINAL_DECISIONS as Ft, rollingDispatch as G, routerBrain as Gt, effectiveConcurrency as H, validateProfileMaterialization as Hn, acquireSandbox as Ht, reconnectRetainedRun as I, promptOnlyProfileMaterialization as In, createSandboxForSpec as It, assertValidBudget as J, observedModelMatchesDeclared as Jt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as K, runBrainLoop as Kt, recoverRetainedRun as L, promptResourceProfileMaterialization as Ln, defaultSelectWinner as Lt, workerInteractiveBindingsDir as M, fullProfileMaterialization as Mn, isTerminalNodeStatus as Mt, reconnectRetainedInteractiveRun as N, profileMaterializationAxes$1 as Nn, createInPlaceCliExecutor as Nt, workerInteractiveAdmissionFile as O, AGENT_PROFILE_MATERIALIZATION_AXES as On, isPeerMailEnvelope as Ot, recoverRetainedInteractiveRun as P, promptControlProfileMaterialization as Pn, taskToPrompt as Pt, bridgeAdmissionRead as Q, traceContextToEnv as Qt, startRetainedRun as R, renderProfileMaterializationIssues as Rn, isTerminalDecision as Rt, pollFor as S, DEFAULT_LOCAL_HARNESS as Sn, createInbox as St, waitUntil as T, localHarnessExecutable as Tn, PEER_MAIL_WIRE_KEY as Tt, freeSlots as U, worktreeCliProfileMaterialization as Un, assertBoxlessPromptOptions as Ut, destroyInteractiveEnvironment as V, unsupportedProfileDimensions as Vn, probeSandboxCapabilities as Vt, queueOf as W, readPromptOptions as Wt, spendFromUsageEvents as X, mergeTraceEnv as Xt, createBudgetPool as Y, createPropagatingTraceEmitter as Yt, bindReusableExecutorExecutionId as Z, readTraceContextFromEnv as Zt, recordScopeOwnerMaterialization as _, runSettledCommand as _n, decodeToolPart as _t, uncertainSpawnBudgets as a, exportEvalRuns as an, createExecutor as at, createWaitProbes as b, createWorktree as bn, createActivityLog as bt, pickBestDelivered as c, loopEventToOtelSpan as cn, createWorktreeCliExecutor as ct, driverChild as d, toOtelAttributes as dn, workerTraceEnv as dt, buildLoopOtelSpans as en, bridgeRuntimeAttachmentsKey as et, withDriverExecutor as f, createRuntimeEventCollector as fn, workerTraceHeaders as ft, meterRuntimeOwnedProviderAttempt as g, sanitizeRuntimeStreamEvent as gn, createPushTraceSource as gt, meterRuntimeOwnedAccounting as h, sanitizeKnowledgeReadinessReport as hn, createSteerableSandboxSession as ht, sumMeasuredSpendFromEvents as i, createOtelExporter as in, cliWorktreeExecutor as it, workerInteractiveBindingFile as j, defineProfileMaterializationContract as jn, isLiveNodeStatus as jt, attachWorker as k, assertProfileMaterialization as kn, peerMailTools as kt, runFinalizer as l, padSpanId as ln, WORKER_TRACE_PROPAGATION as lt, deriveNodeExecutionIdentity as m, sanitizeAgentRuntimeEvent as mn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, buildRuntimeEventOtelSpans as nn, captureReusableExecutorConfig as nt, bestDelivered as o, flatOtelSpan as on, createExecutorRegistry as ot, createScope as p, createRuntimeStreamEventCollector as pn, workerTraceSeamKey as pt, teardownExecutor as q, canonicalObservedModel as qt, maxSeqOf as r, createOpenInferenceFileExporter as rn, cliInPlaceExecutor as rt, collectDelivered as s, generateSpanId as sn, snapshotExecutorConfig as st, createRootHandle as t, buildLoopSpanNodes as tn, bridgeStopSignalKey as tt, runTree as u, padTraceId as un, readWorkerTraceContext as ut, scopeOwnerExecutorNodeContext as v, runWorktreeHarness as vn, sandboxSessionTraceSource as vt, validateWaitSpec as w, harnessSupportsReasoningEffort as wn, DEFAULT_PEER_MAIL_LIMITS as wt, isWaitOutcome as x, removeWorktree as xn, readWorkerProgress as xt, settledToIteration as y, captureWorktreeDiff as yn, DEFAULT_STALL_AFTER_MS as yt, startRetainedRunInEnvironment as z, renderUnsupported as zn, runAgentRounds as zt };
+//#region src/redact.ts
+const redactedMarker = "[redacted]";
+/** Secret-bearing key names: when an object key matches, its value is fully
+*  replaced regardless of the value's own content. Lowercased compare. */
+const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
+/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
+const valuePatterns = [
+	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
+	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
+	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+	/\bAKIA[0-9A-Z]{16}\b/g,
+	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
+];
+/** Secret assignments embedded inside an otherwise opaque string, including
+* serialized JSON and log-style `key=value` text. */
+const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
+/** Scrub a single string of in-value secret/PII patterns. */
+function scrubString(input) {
+	let out = input;
+	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
+	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
+}
+/**
+* The built-in redactor. Walks objects and arrays; replaces values under
+* secret-bearing keys wholesale; scrubs in-value patterns from every string.
+* Cycle-safe (a seen-set short-circuits self-referential payloads to
+* `'[circular]'`), depth-bounded, and total — never throws on customer input.
+*/
+function defaultRedactor(value) {
+	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+const maxDepth = 32;
+function walk(value, seen, depth) {
+	if (depth > maxDepth) return "[truncated]";
+	if (typeof value === "string") return scrubString(value);
+	if (value === null || typeof value !== "object") return value;
+	if (seen.has(value)) return "[circular]";
+	seen.add(value);
+	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
+	const out = {};
+	for (const [key, v] of Object.entries(value)) {
+		if (secretKeyPattern.test(key)) {
+			out[key] = redactedMarker;
+			continue;
+		}
+		out[key] = walk(v, seen, depth + 1);
+	}
+	return out;
+}
+/** Stable identity input for saved work that depends on built-in redaction behavior. */
+function defaultRedactorIdentityMaterial() {
+	const patternIdentity = (pattern) => ({
+		source: pattern.source,
+		flags: pattern.flags
+	});
+	return {
+		marker: redactedMarker,
+		secretKeyPattern: patternIdentity(secretKeyPattern),
+		valuePatterns: valuePatterns.map(patternIdentity),
+		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
+		maxDepth,
+		scrubString: Function.prototype.toString.call(scrubString),
+		walk: Function.prototype.toString.call(walk),
+		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
+	};
+}
+/**
+* Resolve the redactor a client uses. A caller-supplied hook handles
+* domain-specific values first, then the built-in scrubber still removes
+* common credentials and email addresses. Returning `false` is the explicit
+* opt-out for already-reviewed public values.
+*/
+function resolveRedactor(redact) {
+	if (redact === false) return (value) => value;
+	if (!redact) return defaultRedactor;
+	return (value) => defaultRedactor(redact(value));
+}
+//#endregion
+export { spendFromUsageEvents as $, createCodexRolloutStoreReader as $t, readWorkerInteractiveAdmissions as A, LOCAL_HARNESSES as An, createPeerMailbox as At, recoverRetainedRun as B, profileMaterializationAxes$1 as Bn, defaultSelectWinner as Bt, createWaitProbes as C, sanitizeRuntimeStreamEvent as Cn, createActivityLog as Ct, validateWaitSpec as D, createWorktree as Dn, DEFAULT_PEER_MAIL_LIMITS as Dt, timerAt as E, captureWorktreeDiff as En, AUTHORITY_MARKERS as Et, workerInteractiveBindingsDir as F, AGENT_PROFILE_MATERIALIZATION_AXES as Fn, isTerminalNodeStatus as Ft, effectiveConcurrency as G, renderProfileMaterializationIssues as Gn, acquireSandbox as Gt, startRetainedRunInEnvironment as H, promptModelProfileMaterialization as Hn, runAgentRounds as Ht, reconnectRetainedInteractiveRun as I, assertProfileMaterialization as In, createInPlaceCliExecutor as It, rollingDispatch as J, unsupportedProfileDimensions as Jn, routerBrain as Jt, freeSlots as K, renderUnsupported as Kn, assertBoxlessPromptOptions as Kt, recoverRetainedInteractiveRun as L, controlProfileMaterialization as Ln, taskToPrompt as Lt, attachWorker as M, localHarnessExecutable as Mn, peerMailTools as Mt, readWorkerInteractiveBinding as N, parseCodexTokenUsage as Nn, peerMailVerbNames as Nt, waitUntil as O, removeWorktree as On, PEER_MAIL_WIRE_KEY as Ot, workerInteractiveBindingFile as P, CodexExecutionDiagnosticError as Pn, isLiveNodeStatus as Pt, createBudgetPool as Q, addHarnessUsage as Qt, startRetainedInteractiveRun as R, defineProfileMaterializationContract as Rn, TERMINAL_DECISIONS as Rt, settledToIteration as S, sanitizeKnowledgeReadinessReport as Sn, DEFAULT_STALL_AFTER_MS as St, pollFor as T, runWorktreeHarness as Tn, createInbox as Tt, retainedCreateMaterial as U, promptOnlyProfileMaterialization as Un, createSandboxLineage as Ut, startRetainedRun as V, promptControlProfileMaterialization as Vn, isTerminalDecision as Vt, destroyInteractiveEnvironment as W, promptResourceProfileMaterialization as Wn, probeSandboxCapabilities as Wt, teardownExecutor as X, worktreeCliProfileMaterialization as Xn, canonicalObservedModel as Xt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Y, validateProfileMaterialization as Yn, runBrainLoop as Yt, assertValidBudget as Z, observedModelMatchesDeclared as Zt, deriveNodeExecutionIdentity as _, padTraceId as _n, DEFAULT_SANDBOX_STEERING_MAX_TURNS as _t, createSupervisor as a, traceContextToEnv as an, captureReusableExecutorConfig as at, recordScopeOwnerMaterialization as b, createRuntimeStreamEventCollector as bn, decodeToolPart as bt, uncertainSpawnBudgets as c, buildLoopSpanNodes as cn, createExecutor as ct, pickBestDelivered as d, createOtelExporter as dn, createWorktreeCliExecutor as dt, harnessUsageIsEmpty as en, bindReusableExecutorExecutionId as et, runFinalizer as f, exportEvalRuns as fn, WORKER_TRACE_PROPAGATION as ft, createScope as g, padSpanId as gn, workerTraceSeamKey as gt, withDriverExecutor as h, loopEventToOtelSpan as hn, workerTraceHeaders as ht, createRootHandle as i, readTraceContextFromEnv as in, bridgeStopSignalKey as it, workerInteractiveAdmissionFile as j, harnessSupportsReasoningEffort as jn, isPeerMailEnvelope as jt, interactiveAdmissionSeamKey as k, DEFAULT_LOCAL_HARNESS as kn, claimsAuthority as kt, bestDelivered as l, buildRuntimeEventOtelSpans as ln, createExecutorRegistry as lt, driverChild as m, generateSpanId as mn, workerTraceEnv as mt, defaultRedactorIdentityMaterial as n, createPropagatingTraceEmitter as nn, bridgeModelRouteRefusal as nt, maxSeqOf as o, INTELLIGENCE_WIRE_VERSION as on, cliInPlaceExecutor as ot, runTree as p, flatOtelSpan as pn, readWorkerTraceContext as pt, queueOf as q, sandboxActProfileMaterialization as qn, readPromptOptions as qt, resolveRedactor as r, mergeTraceEnv as rn, bridgeRuntimeAttachmentsKey as rt, sumMeasuredSpendFromEvents as s, buildLoopOtelSpans as sn, cliWorktreeExecutor as st, defaultRedactor as t, readCodexRolloutSession as tn, bridgeAdmissionRead as tt, collectDelivered as u, createOpenInferenceFileExporter as un, snapshotExecutorConfig as ut, meterRuntimeOwnedAccounting as v, toOtelAttributes as vn, createSteerableSandboxSession as vt, isWaitOutcome as w, runSettledCommand as wn, readWorkerProgress as wt, scopeOwnerExecutorNodeContext as x, sanitizeAgentRuntimeEvent as xn, sandboxSessionTraceSource as xt, meterRuntimeOwnedProviderAttempt as y, createRuntimeEventCollector as yn, createPushTraceSource as yt, reconnectRetainedRun as z, fullProfileMaterialization as zn, createSandboxForSpec as zt };
 
-//# sourceMappingURL=supervisor-BSNkaM2a.js.map
+//# sourceMappingURL=redact-BP8Xn2A3.js.map