@tangle-network/agent-runtime 0.192.4 → 0.193.1

package/dist/provision-supervisor-CddfH9mg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-supervisor-CddfH9mg.js","names":["abortError"],"sources":["../src/runtime/retained-interactive-control.ts","../src/runtime/supervise/interactive-worker.ts","../src/runtime/supervise/provision-supervisor.ts"],"sourcesContent":["import type { AgentInteractiveSessionControlClaim } from '@tangle-network/agent-interface'\nimport {\n  agentInteractiveSessionControlClaimRequestDigest,\n  canonicalCandidateDigest,\n} from '@tangle-network/agent-interface'\nimport type { RetainedInteractiveRunHandle } from './retained-interactive-types'\nimport { abortError } from './retained-run-binding'\n\nconst MAX_GENERATION_CONFLICTS = 8\n\n/** Input for acquiring write authority over one exact interactive process. @stable */\nexport interface ClaimRetainedInteractiveControlOptions {\n  readonly handle: RetainedInteractiveRunHandle\n  readonly holderId: string\n  /** Last known provider generation. Zero discovers the current generation safely. */\n  readonly expectedGeneration?: number\n  readonly signal?: AbortSignal\n}\n\n/**\n * Acquire provider-issued write authority without reading authority from status.\n *\n * A new coordinator starts at generation zero. If another claim already exists,\n * the provider returns its public generation and this helper retries one new\n * compare-and-swap operation. Every generation has a deterministic operation\n * identifier, so retrying after an ambiguous response cannot create two claims.\n * @stable\n */\nexport async function claimRetainedInteractiveControl(\n  options: ClaimRetainedInteractiveControlOptions,\n): Promise<AgentInteractiveSessionControlClaim> {\n  const expected = options.expectedGeneration ?? 0\n  if (!Number.isSafeInteger(expected) || expected < 0) {\n    throw new Error('interactive control expectedGeneration must be a non-negative integer')\n  }\n\n  let generation = expected\n  for (let conflict = 0; conflict <= MAX_GENERATION_CONFLICTS; conflict += 1) {\n    if (options.signal?.aborted) throw abortError(options.signal.reason)\n    const material = {\n      operationId: controlClaimOperationId(options.handle, options.holderId, generation),\n      ref: options.handle.ref,\n      holderId: options.holderId,\n      expectedGeneration: generation,\n    }\n    const acknowledgement = await options.handle.claimControl(\n      {\n        ...material,\n        requestDigest: agentInteractiveSessionControlClaimRequestDigest(material),\n      },\n      options.signal === undefined ? undefined : { signal: options.signal },\n    )\n    if (acknowledgement.status === 'accepted' || acknowledgement.status === 'replayed') {\n      const control = acknowledgement.control\n      if (control === undefined) {\n        throw new Error('provider accepted interactive control without returning its claim')\n      }\n      if (Date.parse(control.expiresAt) <= Date.now()) {\n        throw new Error('provider returned an expired interactive control claim')\n      }\n      return control\n    }\n    if (\n      acknowledgement.status !== 'conflict' ||\n      acknowledgement.conflictReason !== 'generation_mismatch'\n    ) {\n      throw new Error(\n        acknowledgement.status === 'unknown'\n          ? 'interactive control claim outcome is unknown; retry the same acquisition'\n          : 'interactive control claim operation conflicts with different request material',\n      )\n    }\n    const current = acknowledgement.currentGeneration\n    if (current === undefined || current <= generation) {\n      throw new Error('provider returned a non-advancing interactive control generation')\n    }\n    generation = current\n  }\n  throw new Error('interactive control changed too often to acquire safely')\n}\n\nfunction controlClaimOperationId(\n  handle: RetainedInteractiveRunHandle,\n  holderId: string,\n  expectedGeneration: number,\n): string {\n  const digest = canonicalCandidateDigest({\n    kind: 'retained-interactive-control-claim.v1',\n    ref: handle.ref,\n    holderId,\n    expectedGeneration,\n  })\n  return `interactive-claim-${digest.slice('sha256:'.length, 'sha256:'.length + 40)}`\n}\n","/**\n * Runtime-owned worker seam for a provider's native interactive coding-agent process.\n *\n * This adapter composes the retained-interactive lifecycle. It does not create a second stream,\n * replay buffer, session id, or cancellation protocol. The provider owns process state; Scope owns\n * the supervised worker, journal, budget, and local control inbox.\n */\n\nimport { randomUUID } from 'node:crypto'\nimport {\n  type AgentInteractiveSessionPromptCommand,\n  type AgentInteractiveSessionRef,\n  type AgentInteractiveSessionStatus,\n  type AgentInteractiveSessionStopAcknowledgement,\n  type AgentInteractiveSessionStopCommand,\n  type AgentProfile,\n  agentInteractiveSessionPromptRequestDigest,\n  agentInteractiveSessionStopRequestDigest,\n  canonicalCandidateDigest,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironment,\n  AgentEnvironmentProvider,\n  CreateAgentEnvironmentInput,\n} from '@tangle-network/agent-interface/environment-provider'\nimport { contentAddress } from '../../durable/spawn-journal'\nimport type { MakeWorkerAgent, WorkerSpawnContext } from '../../mcp/tools/coordination'\nimport { destroyInteractiveEnvironment } from '../retained-interactive-lifecycle'\nimport type { RetainedInteractiveRunHandle } from '../retained-interactive-types'\nimport { claimRetainedInteractiveControl, startRetainedInteractiveRun } from '../retained-run'\nimport { retainedCreateMaterial } from '../retained-run-intent'\nimport type { RetainedInteractiveAdmission } from '../retained-run-types'\nimport { abortError, linkAbort } from './abortable'\nimport { executableAgentProfileSnapshot } from './executable-spec'\nimport { createInbox } from './inbox'\nimport {\n  type InteractiveAdmissionWriter,\n  interactiveAdmissionSeamKey,\n} from './interactive-admission'\nimport {\n  attestRuntimeOwnedPendingExecutor,\n  finalizeRuntimeOwnedPendingExecutor,\n  newExecutionAttemptId,\n} from './materialization'\nimport { concreteProfileModel } from './model-policy'\nimport { detachedSnapshot } from './snapshot'\nimport { taskToPrompt } from './task-prompt'\nimport type {\n  Agent,\n  AgentSpec,\n  Executor,\n  ExecutorCancellation,\n  ExecutorContext,\n  ExecutorResult,\n  Runtime,\n  Spend,\n  UsageEvent,\n  WorkerInteractiveSession,\n} from './types'\n\n/** Environment fields supplied to every interactive worker after Runtime adds the exact profile. */\nexport type InteractiveWorkerEnvironment = Omit<\n  CreateAgentEnvironmentInput,\n  'profile' | 'idempotencyKey' | 'signal'\n>\n\n/** Native interactive worker output. Provider usage is intentionally not fabricated. */\nexport interface InteractiveWorkerResult {\n  readonly provider: string\n  readonly environmentId: string\n  readonly sessionId: string\n  readonly executionId: string\n  readonly state: 'exited' | 'unknown'\n  readonly ref: AgentInteractiveSessionRef\n  readonly reason?: string\n  readonly exitCode?: number\n  readonly exitSignal?: string\n}\n\n/** Configuration shared by every worker produced by `workerFromInteractiveProvider`. */\nexport interface InteractiveWorkerOptions {\n  /** Provider create fields. Runtime supplies `profile`, the two idempotency keys, and `signal`. */\n  readonly environment?: InteractiveWorkerEnvironment\n  /** Stable environment identity override. Defaults to a digest of the exact worker assignment. */\n  readonly environmentIdempotencyKey?: (input: InteractiveWorkerKeyInput) => string\n  /** Stable interactive-session identity override. Defaults to a digest of assignment and task. */\n  readonly interactiveIdempotencyKey?: (input: InteractiveWorkerKeyInput) => string\n  /** Provider holder id used only while the worker sends a steer or stop command. */\n  readonly holderId?: string | ((input: InteractiveWorkerKeyInput) => string)\n  /** Initial prompt override. The exact worker task is the default prompt. */\n  readonly initialPrompt?: string | ((task: unknown, input: InteractiveWorkerKeyInput) => string)\n  readonly cwd?: string\n  readonly cols?: number\n  readonly rows?: number\n  /** Runtime tag written into tree snapshots. Defaults to the provider name. */\n  readonly runtime?: Runtime\n  /** Poll delay used while waiting for the provider's native process to exit. */\n  readonly pollIntervalMs?: number\n  /** Destroy the provider environment after the process is terminal. Defaults to true. */\n  readonly destroyEnvironmentOnTeardown?: boolean\n}\n\nconst INTERACTIVE_TEARDOWN_TIMEOUT_MS = 30_000\n\n/** Stable input available to key and holder functions. */\nexport interface InteractiveWorkerKeyInput {\n  readonly provider: string\n  readonly profile: AgentProfile\n  readonly context?: WorkerSpawnContext\n  readonly task?: unknown\n  readonly nodeId?: string\n}\n\n/**\n * Build a `MakeWorkerAgent` that starts one exact provider-owned native TUI per worker.\n *\n * A Scope supplies the durable admission hook and kernel-minted node attempt. The returned worker\n * exposes `interactiveReady`, so Scope writes the exact provider reference before the worker can be\n * attached by a different process. `attachWorker` then reconnects that same reference through the\n * provider's public `get`/interactive contract.\n */\nexport function workerFromInteractiveProvider(\n  provider: AgentEnvironmentProvider,\n  options: InteractiveWorkerOptions = {},\n): MakeWorkerAgent {\n  if (!provider.name.trim())\n    throw new Error('workerFromInteractiveProvider: provider.name required')\n  if (!provider.get) {\n    throw new Error(\n      `workerFromInteractiveProvider(${provider.name}): provider.get is required for reconnect`,\n    )\n  }\n  const capturedEnvironment = options.environment\n    ? (structuredClone(options.environment) as InteractiveWorkerEnvironment)\n    : undefined\n  const unscopedNamespace = randomUUID()\n  let unscopedOrdinal = 0\n  const runtime = options.runtime ?? (provider.name as Runtime)\n\n  return (rawProfile, spawnContext) => {\n    const profile = executableAgentProfileSnapshot(\n      rawProfile,\n      `workerFromInteractiveProvider(${provider.name})`,\n    )\n    const input: InteractiveWorkerKeyInput = {\n      provider: provider.name,\n      profile,\n      ...(spawnContext === undefined ? {} : { context: spawnContext }),\n    }\n    const assignmentId =\n      spawnContext?.assignmentId ?? `unscoped:${unscopedNamespace}:${unscopedOrdinal++}`\n    const baseInput = { ...input, nodeId: spawnContext?.parentNodeId }\n    const environmentKey = stableKey(\n      options.environmentIdempotencyKey?.({ ...baseInput }) ??\n        derivedKey('supervised-interactive-environment', {\n          provider: provider.name,\n          assignmentId,\n          parentNodeId: spawnContext?.parentNodeId,\n          profile,\n        }),\n      'environment idempotency key',\n    )\n    const name = profile.name ?? 'interactive-worker'\n\n    const executorFactory = (\n      spec: AgentSpec,\n      ctx: ExecutorContext,\n    ): Executor<InteractiveWorkerResult> =>\n      interactiveExecutor({\n        provider,\n        profile: spec.profile,\n        context: spawnContext,\n        environment: capturedEnvironment,\n        environmentKey,\n        interactiveKey: (task: unknown) =>\n          stableKey(\n            options.interactiveIdempotencyKey?.({\n              ...baseInput,\n              task,\n            }) ??\n              derivedKey('supervised-interactive-session', {\n                provider: provider.name,\n                assignmentId,\n                parentNodeId: spawnContext?.parentNodeId,\n                profile: spec.profile,\n                task,\n              }),\n            'interactive idempotency key',\n          ),\n        holderId: (task: unknown) => {\n          const selected =\n            typeof options.holderId === 'function'\n              ? options.holderId({ ...baseInput, task })\n              : options.holderId\n          return stableKey(\n            selected ??\n              `runtime-interactive-worker:${canonicalCandidateDigest({\n                provider: provider.name,\n                assignmentId,\n              })}`,\n            'interactive holder id',\n          )\n        },\n        initialPrompt: options.initialPrompt,\n        cwd: options.cwd,\n        cols: options.cols,\n        rows: options.rows,\n        runtime,\n        pollIntervalMs: options.pollIntervalMs,\n        destroyEnvironmentOnTeardown: options.destroyEnvironmentOnTeardown,\n        executionAttemptId: ctx.node?.attemptId,\n        nodeId: ctx.node?.nodeId,\n        admission: admissionWriter(ctx, provider.name, ctx.node?.nodeId),\n      })\n\n    const spec: AgentSpec = {\n      profile,\n      harness: null,\n      executorFactory,\n      ...(spawnContext?.execution ? { execution: spawnContext.execution } : {}),\n    }\n    return {\n      name,\n      act: async () => {\n        throw new Error(\n          'workerFromInteractiveProvider: interactive workers execute through executorSpec',\n        )\n      },\n      executorSpec: spec,\n    } as Agent<unknown, InteractiveWorkerResult> & { executorSpec: AgentSpec }\n  }\n}\n\ninterface InteractiveExecutorInput {\n  readonly provider: AgentEnvironmentProvider\n  readonly profile: AgentProfile\n  readonly context?: WorkerSpawnContext\n  readonly environment?: InteractiveWorkerEnvironment\n  readonly environmentKey: string\n  readonly interactiveKey: (task: unknown) => string\n  readonly holderId: (task: unknown) => string\n  readonly initialPrompt?: InteractiveWorkerOptions['initialPrompt']\n  readonly cwd?: string\n  readonly cols?: number\n  readonly rows?: number\n  readonly runtime: Runtime\n  readonly pollIntervalMs?: number\n  readonly destroyEnvironmentOnTeardown?: boolean\n  readonly executionAttemptId?: string\n  readonly nodeId?: string\n  readonly admission: InteractiveAdmissionWriter\n}\n\nfunction interactiveExecutor(input: InteractiveExecutorInput): Executor<InteractiveWorkerResult> {\n  const attemptId =\n    input.executionAttemptId ?? newExecutionAttemptId(input.nodeId ?? input.environmentKey)\n  const localController = new AbortController()\n  const inbox = createInbox()\n  let handle: RetainedInteractiveRunHandle | undefined\n  let createdEnvironment: AgentEnvironment | undefined\n  let environmentId: string | undefined\n  let artifact: ExecutorResult<InteractiveWorkerResult> | undefined\n  let activeLink: ReturnType<typeof linkAbort> | undefined\n  let startPromise: Promise<RetainedInteractiveRunHandle> | undefined\n  let executeStarted = false\n  let readyResolve!: (session: WorkerInteractiveSession) => void\n  const ready = new Promise<WorkerInteractiveSession>((resolve) => {\n    readyResolve = resolve\n  })\n  const stopOperations = new Map<string, Promise<ExecutorCancellation>>()\n  const memoryAdmissions = new Map<string, RetainedInteractiveAdmission>()\n  let teardownComplete = false\n  let teardownPromise: Promise<{ destroyed: boolean }> | undefined\n  let flushChain: Promise<void> = Promise.resolve()\n  let controlError: unknown\n\n  const executor: Executor<InteractiveWorkerResult> = {\n    runtime: input.runtime,\n    teardownTimeoutMs: INTERACTIVE_TEARDOWN_TIMEOUT_MS,\n    execute(task, signal): AsyncIterable<UsageEvent> {\n      if (executeStarted || teardownComplete || teardownPromise !== undefined) {\n        throw new Error('workerFromInteractiveProvider: execute() may only be called once')\n      }\n      executeStarted = true\n      startPromise = startInteractive(task, signal)\n      return runInteractive(signal)\n    },\n    deliver(message: unknown): boolean {\n      if (teardownComplete || teardownPromise !== undefined) return false\n      const accepted = inbox.deliver(message)\n      if (accepted) void flushInbox()\n      return accepted\n    },\n    interactive(): WorkerInteractiveSession {\n      return handle\n        ? { status: 'available', handle }\n        : { status: 'unavailable', reason: 'interactive-session-not-started' }\n    },\n    interactiveReady(): Promise<WorkerInteractiveSession> {\n      return ready\n    },\n    async cancel(request): Promise<ExecutorCancellation> {\n      const existing = stopOperations.get(request.operationId)\n      if (existing) return existing\n      const operation = stopInteractive(request.operationId, request.reason, request.signal)\n      const tracked = operation.then((result) => {\n        if (result.status === 'unknown' && stopOperations.get(request.operationId) === tracked) {\n          stopOperations.delete(request.operationId)\n        }\n        return result\n      })\n      stopOperations.set(request.operationId, tracked)\n      return tracked\n    },\n    teardown(grace): Promise<{ destroyed: boolean }> {\n      void grace\n      if (teardownComplete) return Promise.resolve({ destroyed: true })\n      if (teardownPromise !== undefined) return teardownPromise\n      const pending = teardownInteractive()\n      teardownPromise = pending.then(\n        (result) => {\n          teardownComplete = true\n          return result\n        },\n        (error) => {\n          teardownPromise = undefined\n          throw error\n        },\n      )\n      return teardownPromise\n    },\n    resultArtifact(): ExecutorResult<InteractiveWorkerResult> {\n      if (!artifact) {\n        throw new Error(\n          'workerFromInteractiveProvider: resultArtifact() read before execution settled',\n        )\n      }\n      return artifact\n    },\n  }\n\n  const declaredEnvironment = input.environment\n    ? retainedCreateMaterial({\n        ...input.environment,\n        profile: input.profile,\n        idempotencyKey: input.environmentKey,\n      })\n    : null\n  const profileModel = concreteProfileModel(input.profile)\n  const plannedDeclaration = {\n    effectiveProfile: input.profile,\n    backend: input.provider.name,\n    model: profileModel\n      ? { status: 'known' as const, id: profileModel }\n      : { status: 'unknown' as const, reason: 'provider selected the model' },\n    execution: { kind: 'interactive-session', id: input.nodeId ?? input.environmentKey },\n    materializer: 'retained-interactive-provider',\n    plan: {\n      kind: 'retained-interactive-provider',\n      provider: input.provider.name,\n      environment: declaredEnvironment,\n      environmentIdempotencyKey: input.environmentKey,\n      destroyEnvironmentOnTeardown: input.destroyEnvironmentOnTeardown !== false,\n    },\n  }\n  attestRuntimeOwnedPendingExecutor(executor, input.runtime, plannedDeclaration, {\n    attemptId,\n    binding: {\n      provider: input.provider.name,\n      environmentIdempotencyKey: input.environmentKey,\n      nodeId: input.nodeId ?? null,\n    },\n    descriptor: {\n      kind: 'interactive-session',\n      provider: input.provider.name,\n      transport: 'agent-environment',\n    },\n  })\n\n  async function startInteractive(\n    task: unknown,\n    signal: AbortSignal,\n  ): Promise<RetainedInteractiveRunHandle> {\n    try {\n      activeLink = linkAbort(signal, localController.signal)\n      const initialPrompt =\n        typeof input.initialPrompt === 'function'\n          ? input.initialPrompt(task, {\n              provider: input.provider.name,\n              profile: input.profile,\n              ...(input.context === undefined ? {} : { context: input.context }),\n              task,\n              ...(input.nodeId === undefined ? {} : { nodeId: input.nodeId }),\n            })\n          : (input.initialPrompt ?? taskToPrompt(task))\n      if (typeof initialPrompt !== 'string') {\n        throw new Error('workerFromInteractiveProvider: initialPrompt must return a string')\n      }\n      const interactiveIdempotencyKey = input.interactiveKey(task)\n      const started = await startRetainedInteractiveRun({\n        provider: {\n          ...input.provider,\n          async create(environmentInput): Promise<AgentEnvironment> {\n            const environment = await input.provider.create!(environmentInput)\n            createdEnvironment = environment\n            return environment\n          },\n        },\n        environment: {\n          ...(input.environment ?? {}),\n          profile: input.profile,\n          idempotencyKey: input.environmentKey,\n        },\n        interactiveIdempotencyKey,\n        ...(initialPrompt.length === 0 ? {} : { initialPrompt }),\n        ...(input.cwd === undefined ? {} : { cwd: input.cwd }),\n        ...(input.cols === undefined ? {} : { cols: input.cols }),\n        ...(input.rows === undefined ? {} : { rows: input.rows }),\n        onAdmission: async (admission) => {\n          environmentId =\n            admission.phase === 'interactive_environment' ? admission.environmentId : environmentId\n          const existing = memoryAdmissions.get(admission.phase)\n          if (existing !== undefined) {\n            if (canonicalCandidateDigest(existing) !== canonicalCandidateDigest(admission)) {\n              throw new Error(\n                `interactive admission phase '${admission.phase}' changed across retry`,\n              )\n            }\n          } else {\n            memoryAdmissions.set(\n              admission.phase,\n              detachedSnapshot(admission, 'interactive admission'),\n            )\n          }\n          await input.admission(admission)\n        },\n        signal: activeLink.signal,\n      })\n      finalizeRuntimeOwnedPendingExecutor(\n        executor,\n        {\n          ...plannedDeclaration,\n          execution: { kind: 'interactive-session', id: started.ref.run.executionId },\n          plan: {\n            ...plannedDeclaration.plan,\n            environmentId: started.ref.run.environmentId,\n            interactiveIdempotencyKey,\n          },\n        },\n        {\n          attemptId,\n          binding: {\n            provider: input.provider.name,\n            ref: started.ref,\n            environmentId: started.ref.run.environmentId,\n          },\n          descriptor: {\n            kind: 'interactive-session',\n            provider: input.provider.name,\n            transport: 'agent-environment',\n          },\n        },\n      )\n      handle = started\n      readyResolve({ status: 'available', handle: started })\n      void flushInbox()\n      return started\n    } catch (error) {\n      readyResolve({ status: 'unavailable', reason: unavailableReason(error) })\n      activeLink?.release()\n      throw error\n    }\n  }\n\n  async function* runInteractive(signal: AbortSignal): AsyncIterable<UsageEvent> {\n    const startedAt = Date.now()\n    try {\n      const current = await startPromise\n      if (current === undefined) {\n        throw new Error('workerFromInteractiveProvider: interactive start did not begin')\n      }\n      yield { kind: 'iteration' }\n      // Native TUI sessions do not expose a complete turn receipt. These zero counters are an\n      // observed floor and the explicit false markers keep the run's accounting honest.\n      yield { kind: 'tokens', input: 0, output: 0, tokensKnown: false }\n      yield { kind: 'cost', usd: 0, usdKnown: false, provenance: 'uncaptured' }\n      let status: AgentInteractiveSessionStatus | undefined\n      for (;;) {\n        if (signal.aborted || localController.signal.aborted) {\n          throw abortError(\n            signal.aborted ? signal : localController.signal,\n            'interactive execution aborted',\n          )\n        }\n        status = await current.status({ signal: activeLink?.signal })\n        await flushChain\n        if (controlError !== undefined) throw controlErrorValue(controlError)\n        if (status.state !== 'running') break\n        await sleep(input.pollIntervalMs ?? 100, activeLink?.signal)\n      }\n      const finished = status\n      const output: InteractiveWorkerResult = {\n        provider: input.provider.name,\n        environmentId: current.ref.run.environmentId,\n        sessionId: current.ref.run.sessionId,\n        executionId: current.ref.run.executionId,\n        state: finished?.state === 'exited' ? 'exited' : 'unknown',\n        ref: current.ref,\n        ...(finished?.state === 'exited' && finished.reason ? { reason: finished.reason } : {}),\n        ...(finished?.state === 'exited' && finished.exitCode !== undefined\n          ? { exitCode: finished.exitCode }\n          : {}),\n        ...(finished?.state === 'exited' && finished.exitSignal !== undefined\n          ? { exitSignal: finished.exitSignal }\n          : {}),\n      }\n      const spent: Spend = {\n        iterations: 1,\n        tokens: { input: 0, output: 0 },\n        tokensKnown: false,\n        usd: 0,\n        usdKnown: false,\n        ms: Date.now() - startedAt,\n      }\n      artifact = {\n        outRef: contentAddress(output),\n        out: output,\n        spent,\n      }\n    } finally {\n      activeLink?.release()\n    }\n  }\n\n  async function flushInbox(): Promise<void> {\n    flushChain = flushChain.then(async () => {\n      try {\n        if (!handle) return\n        const messages = inbox.drain()\n        if (messages.length === 0) return\n        const prompt = inbox.fold(messages)\n        const operationId = `interactive-prompt-${canonicalCandidateDigest({\n          ref: handle.ref,\n          prompt,\n        }).slice('sha256:'.length)}`\n        const control = await claimRetainedInteractiveControl({\n          handle,\n          holderId: input.holderId(undefined),\n        })\n        const material = {\n          operationId,\n          ref: handle.ref,\n          control,\n          prompt,\n        }\n        const command: AgentInteractiveSessionPromptCommand = {\n          ...material,\n          requestDigest: agentInteractiveSessionPromptRequestDigest(material),\n        }\n        await handle.sendPrompt(command)\n      } catch (error) {\n        controlError ??= error\n      }\n    })\n    await flushChain\n  }\n\n  async function stopInteractive(\n    operationId: string,\n    reason?: string,\n    signal?: AbortSignal,\n  ): Promise<ExecutorCancellation> {\n    const observedAt = new Date().toISOString()\n    if (!handle) {\n      localController.abort(reason ?? 'interactive cancellation requested')\n      return {\n        status: 'unknown',\n        effect: 'cancel_requested',\n        observedAt,\n        detail: 'interactive process has not published a provider reference',\n      }\n    }\n    try {\n      const control = await claimRetainedInteractiveControl({\n        handle,\n        holderId: input.holderId(undefined),\n        signal,\n      })\n      const material = { operationId, ref: handle.ref, control }\n      const command: AgentInteractiveSessionStopCommand = {\n        ...material,\n        requestDigest: agentInteractiveSessionStopRequestDigest(material),\n      }\n      const acknowledgement = await handle.stop(\n        command,\n        signal === undefined ? undefined : { signal },\n      )\n      localController.abort(reason ?? 'interactive cancellation requested')\n      return cancellationFromAcknowledgement(acknowledgement, observedAt)\n    } catch (error) {\n      localController.abort(reason ?? 'interactive cancellation requested')\n      return {\n        status: 'unknown',\n        effect: 'cancel_requested',\n        observedAt,\n        detail: error instanceof Error ? error.message : String(error),\n        evidence: { operationId },\n      }\n    }\n  }\n\n  async function teardownInteractive(): Promise<{ destroyed: boolean }> {\n    localController.abort('interactive worker teardown')\n    activeLink?.release()\n    await startPromise?.catch(() => undefined)\n    if (handle) {\n      const status = await safeStatus(handle)\n      if (status?.state === 'running') {\n        const operationId = `interactive-teardown-${canonicalCandidateDigest(handle.ref).slice(\n          'sha256:'.length,\n        )}`\n        const cancellation = await stopInteractive(operationId, 'interactive worker teardown')\n        if (cancellation.status === 'rejected' || cancellation.status === 'unknown') {\n          throw new Error(cancellation.detail ?? 'interactive teardown was not acknowledged')\n        }\n      }\n    }\n    await destroyEnvironment()\n    return { destroyed: true }\n  }\n\n  async function destroyEnvironment(): Promise<void> {\n    if (input.destroyEnvironmentOnTeardown === false) return\n    if (createdEnvironment !== undefined) {\n      await destroyInteractiveEnvironment(createdEnvironment)\n      return\n    }\n    if (!input.provider.get) return\n    // The exact provider reference is durable and remains available even when the admission\n    // callback was interrupted after the environment was created. Use it as the cleanup identity\n    // so an aborted provider signal cannot turn a real environment into an unconfirmed leak.\n    const cleanupEnvironmentId = environmentId ?? handle?.ref.run.environmentId\n    if (!cleanupEnvironmentId) return\n    const environment = await input.provider.get(cleanupEnvironmentId)\n    if (environment !== undefined && environment !== null) {\n      await destroyInteractiveEnvironment(environment)\n    }\n  }\n\n  return executor\n}\n\nfunction admissionWriter(\n  ctx: ExecutorContext,\n  provider: string,\n  workerId: string | undefined,\n): InteractiveAdmissionWriter {\n  const candidate = ctx.seams[interactiveAdmissionSeamKey]\n  if (typeof candidate === 'function') {\n    return async (admission) => {\n      await (candidate as (value: RetainedInteractiveAdmission) => Promise<void>)(admission)\n    }\n  }\n  // In-memory runs still need a real hook because retained-start refuses an omitted hook. The\n  // durable Scope path always supplies the Runtime-owned writer above; this fallback is explicit\n  // and process-local, never mistaken for restart evidence.\n  const records = new Map<string, RetainedInteractiveAdmission>()\n  return async (admission) => {\n    const prior = records.get(admission.phase)\n    if (prior && canonicalCandidateDigest(prior) !== canonicalCandidateDigest(admission)) {\n      throw new Error(\n        `worker ${workerId ?? '(unscoped)'} provider ${provider} admission changed in memory`,\n      )\n    }\n    records.set(admission.phase, detachedSnapshot(admission, 'interactive admission'))\n  }\n}\n\nfunction derivedKey(kind: string, value: unknown): string {\n  return `${kind}-${canonicalCandidateDigest(value).slice('sha256:'.length)}`\n}\n\nfunction stableKey(value: string, label: string): string {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    throw new Error(`${label} must be a non-empty string`)\n  }\n  const key = value.trim()\n  if (key.length > 256) throw new Error(`${label} must not exceed 256 bytes`)\n  return key\n}\n\nfunction unavailableReason(\n  error: unknown,\n): 'provider-has-no-interactive-contract' | 'interactive-binding-stale' {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes('interactive') || message.includes('Interactive')\n    ? 'provider-has-no-interactive-contract'\n    : 'interactive-binding-stale'\n}\n\nfunction cancellationFromAcknowledgement(\n  acknowledgement: AgentInteractiveSessionStopAcknowledgement,\n  observedAt: string,\n): ExecutorCancellation {\n  const status =\n    acknowledgement.status === 'accepted' || acknowledgement.status === 'replayed'\n      ? 'accepted'\n      : acknowledgement.status === 'conflict'\n        ? 'rejected'\n        : 'unknown'\n  const effect =\n    acknowledgement.effect === 'stopped'\n      ? 'cancelled'\n      : acknowledgement.effect === 'not_live'\n        ? 'not_live'\n        : acknowledgement.effect === 'stop_requested'\n          ? 'cancel_requested'\n          : 'unknown'\n  return {\n    status,\n    effect,\n    observedAt,\n    ...(acknowledgement.message === undefined ? {} : { detail: acknowledgement.message }),\n    evidence: {\n      operationId: acknowledgement.operationId,\n      requestDigest: acknowledgement.requestDigest,\n      providerStatus: acknowledgement.status,\n      providerEffect: acknowledgement.effect,\n    },\n  }\n}\n\nfunction controlErrorValue(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error))\n}\n\nasync function safeStatus(\n  handle: RetainedInteractiveRunHandle,\n): Promise<AgentInteractiveSessionStatus | undefined> {\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const timeout = new Promise<undefined>((resolve) => {\n    timer = setTimeout(() => resolve(undefined), 100)\n    timer.unref?.()\n  })\n  try {\n    // A provider environment created with the worker's abort signal may reject or hang all\n    // subsequent calls after the scope begins teardown. Keep status best-effort and let the fresh\n    // environment lookup below prove release without spending the teardown acknowledgement window\n    // on a stale connection.\n    return await Promise.race([handle.status(), timeout])\n  } catch {\n    return undefined\n  } finally {\n    if (timer !== undefined) clearTimeout(timer)\n  }\n}\n\nasync function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  await new Promise<void>((resolve) => {\n    if (signal?.aborted) {\n      resolve()\n      return\n    }\n    let settled = false\n    const onAbort = (): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      signal?.removeEventListener('abort', onAbort)\n      resolve()\n    }\n    const timer = setTimeout(\n      () => {\n        if (settled) return\n        settled = true\n        signal?.removeEventListener('abort', onAbort)\n        resolve()\n      },\n      Math.max(0, ms),\n    )\n    signal?.addEventListener('abort', onAbort, { once: true })\n  })\n}\n","/**\n * Public one-call composition for a durable Runtime supervisor proof run.\n *\n * This is intentionally a thin owner of existing Runtime primitives. The supervisor owns the\n * root abort channel and join barrier, Scope owns worker admission and lifecycle, and the provider\n * owns the environment and interactive process. External clients receive identifiers and opaque\n * handles; they do not receive a second supervisor protocol or a copy of provider state.\n *\n * @experimental\n */\n\nimport { randomUUID } from 'node:crypto'\nimport { mkdirSync } from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { dirname, join, resolve } from 'node:path'\nimport {\n  type AgentProfile,\n  agentProfileSchema,\n  canonicalAgentProfileDigest,\n  canonicalCandidateDigest,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentProvider,\n} from '@tangle-network/agent-interface/environment-provider'\nimport type { McpToolDescriptor } from '../../mcp/server'\nimport { createCoordinationTools } from '../../mcp/tools/coordination'\nimport { sandboxClientAsProvider } from '../environment-provider'\nimport type { SandboxClient } from '../types'\nimport { createCancelAcknowledger, createSteerAcknowledger } from './coordination-driver'\nimport { writeAtomicDurableFile } from './durable-file'\nimport {\n  type InteractiveWorkerEnvironment,\n  workerFromInteractiveProvider,\n} from './interactive-worker'\nimport { createFileRunContext } from './run-context'\nimport { supervisorRunDir } from './run-layout'\nimport { createRootHandle, createSupervisor } from './supervisor'\nimport type { Agent, Budget, Scope, SpawnEvent, SupervisedResult } from './types'\nimport { readWorkerInteractiveBinding } from './worker-interactive'\n\nconst DEFAULT_POLL_MS = 25\nconst ROOT_MAX_ITERATIONS = 100\nconst ROOT_MAX_TOKENS = 100_000\nconst WORKER_MAX_ITERATIONS = 25\nconst WORKER_MAX_TOKENS = 25_000\n\n/** Caller-supplied provider or Sandbox SDK connection for one supervisor run. */\nexport interface ProvisionSupervisorConnection {\n  /** A fully constructed provider. This is the preferred programmatic seam and is testable. */\n  readonly provider?: AgentEnvironmentProvider\n  /** A Sandbox SDK-compatible client. Runtime adapts it to the public provider contract. */\n  readonly client?: SandboxClient\n  /** Alias for `client`, accepted so callers can pass their existing connection object. */\n  readonly sandboxClient?: SandboxClient\n  /** Sandbox API endpoint used only when Runtime constructs the SDK client. */\n  readonly endpoint?: string\n  /** Transient Sandbox API key used only when Runtime constructs the SDK client. */\n  readonly apiKey?: string\n  /** Connection kind is descriptive only and does not select a hidden implementation. */\n  readonly kind?: string\n}\n\n/** Input to the public Runtime supervisor provisioner. */\nexport interface ProvisionSupervisorRequest {\n  readonly invocationId: string\n  /** Caller-owned task assigned to the first interactive worker. */\n  readonly task: string\n  /** Canonical profile assigned to the first interactive worker. */\n  readonly profile: AgentProfile\n  /** Generic provider create fields forwarded to the interactive worker. */\n  readonly workerEnvironment?: InteractiveWorkerEnvironment\n  /** Root directory for Runtime-owned `.agent/supervisor` state. */\n  readonly workspaceDir?: string\n  /** Maximum wall-clock time for the complete supervisor lifecycle, including cleanup. Omit for no lifecycle deadline. */\n  readonly timeoutMs?: number\n  /** Poll cadence for lifecycle/control readiness. */\n  readonly pollMs?: number\n  /** Explicit provider, client, or endpoint and API key for one provider connection. */\n  readonly connection: ProvisionSupervisorConnection\n}\n\n/** Exact owner-scoped cleanup receipt returned after Runtime releases the run resources. */\nexport interface SupervisorCleanupReceipt {\n  readonly status: 'completed'\n  readonly rootDir: string\n  readonly supervisorId: string\n  readonly workerId: string\n  readonly supervisorStatus: string\n  readonly workerStatus: 'running' | 'done' | 'down' | 'cancelled'\n  readonly resourcesReleased: true\n  readonly remainingResources: readonly []\n}\n\n/** Handles for one Runtime-owned supervisor and its first interactive worker. */\nexport interface ProvisionedSupervisor {\n  readonly rootDir: string\n  readonly supervisorId: string\n  readonly workerId: string\n  /** Provider source for `attachWorker`; omitted only when resolution did not produce one. */\n  readonly providers?: AgentEnvironmentProvider\n  /** Capability-derived terminal takeover requirement. */\n  readonly terminalTakeover: 'required' | 'unsupported' | 'unspecified'\n  cleanup(): Promise<SupervisorCleanupReceipt>\n}\n\nclass SupervisorProvisionUnavailableError extends Error {\n  readonly unavailable = true as const\n\n  constructor(message: string, cause?: unknown) {\n    super(message, cause === undefined ? undefined : { cause })\n    this.name = 'SupervisorProvisionUnavailableError'\n  }\n}\n\ninterface MutableState {\n  readonly id: string\n  status: string\n  readonly task: string\n  readonly workspaceDir: string\n  readonly budget: number\n  readonly workerModel?: string\n  readonly startedAt: string\n  completedAt?: string\n}\n\ninterface Deferred<T> {\n  readonly promise: Promise<T>\n  resolve(value: T): void\n  reject(error: unknown): void\n  readonly settled: () => boolean\n}\n\n/**\n * Provision one real provider-backed worker and keep its owning manager alive for controls.\n *\n * The root manager does not use a model. It runs the same coordination tools used by a driver in a\n * small deterministic loop, so durable steer and cancel requests are acknowledged by the owning\n * Runtime turn loop and never by a test-only shortcut. The caller owns profile, task, and provider\n * connection selection; Runtime does not infer them from process environment variables.\n */\nexport async function provisionSupervisor(\n  request: ProvisionSupervisorRequest,\n): Promise<ProvisionedSupervisor> {\n  const input = normalizeRequest(request)\n  const provider = await resolveProvider(input)\n  const capabilities = await readCapabilities(provider)\n  const terminalTakeover = terminalCapability(capabilities)\n  const profile = input.profile\n  const rootDir = resolve(input.workspaceDir ?? makeWorkspaceDir())\n  mkdirSync(rootDir, { recursive: true })\n  const supervisorId = supervisorIdFor(input.invocationId)\n  const eventDir = supervisorRunDir(rootDir, supervisorId)\n  const statePath = join(eventDir, 'state.json')\n  mkdirSync(dirname(eventDir), { recursive: true })\n  try {\n    // The run directory is the cross-process invocation lock. A non-recursive mkdir closes the\n    // duplicate-start race before any journal or provider resource is created.\n    mkdirSync(eventDir)\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'EEXIST') {\n      throw unavailable(\n        `Runtime supervisor '${supervisorId}' already exists at '${eventDir}'; use a new invocationId`,\n      )\n    }\n    throw error\n  }\n\n  const context = createFileRunContext(eventDir)\n  const startedAtMs = Date.now()\n  const state: MutableState = {\n    id: supervisorId,\n    status: 'running',\n    task: input.task,\n    workspaceDir: rootDir,\n    budget: ROOT_MAX_TOKENS,\n    ...(profile.model?.default === undefined ? {} : { workerModel: profile.model.default }),\n    startedAt: new Date(startedAtMs).toISOString(),\n  }\n  writeState(statePath, state)\n\n  const rootHandle = createRootHandle<unknown>()\n  const supervisor = createSupervisor<unknown, unknown>()\n  supervisor.attach(rootHandle)\n  const workerSpawned = deferred<string>()\n  const workerRunning = deferred<void>()\n  const workerProfile = profile\n  const workerEnvironment = {\n    ...(input.workerEnvironment ?? {}),\n    metadata: {\n      ...(input.workerEnvironment?.metadata ?? {}),\n      runtime: 'agent-runtime',\n      invocationId: input.invocationId,\n    },\n    name: input.workerEnvironment?.name ?? `runtime-${supervisorId}`,\n  }\n  const makeWorkerAgent = workerFromInteractiveProvider(provider, {\n    environment: workerEnvironment,\n    pollIntervalMs: input.pollMs,\n    destroyEnvironmentOnTeardown: true,\n  })\n\n  const rootAgent: Agent<unknown, unknown> = {\n    name: 'runtime-supervisor-root',\n    async act(_task: unknown, scope: Scope<unknown>): Promise<unknown> {\n      const coord = createCoordinationTools({\n        scope,\n        blobs: context.blobs,\n        makeWorkerAgent,\n        perWorker: workerBudget(),\n        // Keep each supervisor turn bounded so control requests are observed while the remote\n        // worker is running. The coordination tool keeps one settlement drain in flight, so a\n        // timeout only ends this turn; it cannot lose the eventual worker event.\n        awaitTimeoutMs: input.pollMs,\n      })\n      await coord.ready()\n      const spawn = findTool(coord.tools, 'spawn_worker')\n      const awaitEvent = findTool(coord.tools, 'await_event')\n      const result = await spawn.handler({\n        profile: workerProfile,\n        task: input.task,\n        label: 'interactive-worker',\n      })\n      const childId = workerIdFromSpawn(result)\n      workerSpawned.resolve(childId)\n\n      for (;;) {\n        const child = scope.view.nodes.find((node) => node.id === childId)\n        if (child?.status === 'running') break\n        if (\n          child === undefined ||\n          child.status === 'done' ||\n          child.status === 'failed' ||\n          child.status === 'cancelled'\n        ) {\n          throw new Error(`Runtime supervisor worker '${childId}' ended before becoming live`)\n        }\n        await delay(input.pollMs)\n      }\n      workerRunning.resolve()\n\n      const steerAcknowledger = createSteerAcknowledger({\n        dir: eventDir,\n        coord,\n        now: Date.now,\n        ownerId: scope.view.root,\n      })\n      const cancelAcknowledger = createCancelAcknowledger({\n        dir: eventDir,\n        coord,\n        scope,\n        now: Date.now,\n        ownerId: scope.view.root,\n        controlScope: 'run',\n      })\n      try {\n        while (true) {\n          await steerAcknowledger.pass('turn')\n          cancelAcknowledger.pass('turn')\n          // `await_event` owns the single scope cursor drain. Calling `scope.next()` directly here\n          // would bypass the coordination ledger and make a real cancellation look unknown.\n          const event = await awaitEvent.handler({ kinds: ['settled'] })\n          if (isSettledEvent(event)) {\n            await steerAcknowledger.pass('final')\n            cancelAcknowledger.pass('final')\n            return undefined\n          }\n          if (isIdleEvent(event)) {\n            throw new Error(`Runtime supervisor worker '${childId}' ended without a settlement`)\n          }\n          if (!isPendingEvent(event)) {\n            throw new Error(`Runtime supervisor returned an invalid settlement response`)\n          }\n        }\n      } finally {\n        // The final pass closes requests that landed after the last turn. It is idempotent with the\n        // normal path and prevents an admitted operation from remaining open after root teardown.\n        await steerAcknowledger.pass('final')\n        cancelAcknowledger.pass('final')\n        cancelAcknowledger.finish()\n      }\n    },\n  }\n  const runBudget = rootBudget(input.timeoutMs)\n  let runResult: SupervisedResult<unknown> | undefined\n  let runError: unknown\n  let runSettled = false\n  const runPromise = supervisor\n    .run(rootAgent, input.task, {\n      budget: runBudget,\n      rootIdentity: {\n        profileDigest: canonicalAgentProfileDigest(profile),\n        taskDigest: canonicalCandidateDigest(input.task),\n      },\n      runId: supervisorId,\n      ...context,\n      interactiveBindingDir: eventDir,\n      maxDepth: 1,\n      maxLiveWorkers: 1,\n    })\n    .then(\n      (result) => {\n        runResult = result\n        runSettled = true\n        updateStateFromResult(state, result)\n        writeState(statePath, state)\n        return result\n      },\n      (error) => {\n        runError = error\n        runSettled = true\n        state.status = 'down'\n        state.completedAt = new Date().toISOString()\n        writeState(statePath, state)\n        throw error\n      },\n    )\n  void runPromise.catch(() => undefined)\n\n  let workerId: string\n  try {\n    workerId = await waitForWorkerSpawn(workerSpawned.promise, runPromise, input.timeoutMs)\n    await waitForWorkerRunning(workerRunning.promise, runPromise, input.timeoutMs)\n    if (terminalTakeover === 'required') {\n      await waitForInteractiveBinding(eventDir, workerId, runPromise, input.timeoutMs, input.pollMs)\n    }\n  } catch (error) {\n    if (!runSettled) {\n      try {\n        rootHandle.abort('supervisor provisioning failed')\n      } catch {\n        // The supervisor may have released the handle between the state read and this abort.\n      }\n    }\n    await runPromise.catch(() => undefined)\n    throw error\n  }\n\n  let cleanupPromise: Promise<SupervisorCleanupReceipt> | undefined\n  const cleanup = async (): Promise<SupervisorCleanupReceipt> => {\n    cleanupPromise ??= (async () => {\n      if (!runSettled) {\n        try {\n          rootHandle.abort('supervisor cleanup')\n        } catch {\n          // A concurrent run completion already released the handle.\n        }\n      }\n      const result = await runPromise.catch((error) => {\n        runError = error\n        return undefined\n      })\n      if (result !== undefined) runResult = result\n      if (runError !== undefined) throw runError\n      const finalEvents = await waitForWorkerTerminal(\n        context.journal,\n        supervisorId,\n        workerId,\n        input.timeoutMs,\n        input.pollMs,\n      )\n      const workerStatus = workerStatusFromEvents(finalEvents, workerId)\n      if (workerStatus === 'running') {\n        throw new Error(`Runtime supervisor worker '${workerId}' did not reach a terminal state`)\n      }\n      if (runResult?.teardownUnconfirmed?.length) {\n        throw new Error(\n          `Runtime supervisor cleanup could not confirm ${runResult.teardownUnconfirmed.length} resource(s) released`,\n        )\n      }\n      const supervisorStatus = state.status\n      state.completedAt ??= new Date().toISOString()\n      writeState(statePath, state)\n      return Object.freeze({\n        status: 'completed' as const,\n        rootDir,\n        supervisorId,\n        workerId,\n        supervisorStatus,\n        workerStatus,\n        resourcesReleased: true as const,\n        remainingResources: Object.freeze([]) as readonly [],\n      })\n    })()\n    return cleanupPromise\n  }\n\n  return Object.freeze({\n    rootDir,\n    supervisorId,\n    workerId,\n    providers: provider,\n    terminalTakeover,\n    cleanup,\n  })\n}\n\nfunction normalizeRequest(request: ProvisionSupervisorRequest): ProvisionSupervisorRequest & {\n  readonly invocationId: string\n  readonly task: string\n  readonly timeoutMs: number | undefined\n  readonly pollMs: number\n  readonly profile: AgentProfile\n  readonly connection: ProvisionSupervisorConnection\n} {\n  const invocationId = request.invocationId.trim()\n  if (!invocationId) throw new SupervisorProvisionUnavailableError('invocationId is required')\n  const task = request.task.trim()\n  if (!task) throw new SupervisorProvisionUnavailableError('task is required')\n  const profile = resolveProfile(request.profile)\n  if (request.connection === undefined) {\n    throw new SupervisorProvisionUnavailableError('provider connection is required')\n  }\n  const timeoutMs =\n    request.timeoutMs === undefined ? undefined : positiveNumber(request.timeoutMs, 'timeoutMs')\n  const pollMs = positiveNumber(request.pollMs ?? DEFAULT_POLL_MS, 'pollMs')\n  return { ...request, invocationId, task, timeoutMs, pollMs, profile }\n}\n\nfunction positiveNumber(value: number, name: string): number {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new SupervisorProvisionUnavailableError(`${name} must be a positive safe integer`)\n  }\n  return value\n}\n\nfunction makeWorkspaceDir(): string {\n  return join(tmpdir(), `agent-runtime-supervisor-${randomUUID()}`)\n}\n\nfunction supervisorIdFor(invocationId: string): string {\n  const digest = canonicalCandidateDigest({ kind: 'runtime-supervisor', invocationId })\n  return `runtime-supervisor-${digest.slice('sha256:'.length)}`\n}\n\n/** A caller-supplied deadline covers the complete supervisor lifecycle from run start through cleanup. */\nfunction rootBudget(timeoutMs: number | undefined): Budget {\n  return {\n    maxIterations: ROOT_MAX_ITERATIONS,\n    maxTokens: ROOT_MAX_TOKENS,\n    ...(timeoutMs === undefined ? {} : { deadlineMs: timeoutMs }),\n  }\n}\n\nfunction workerBudget(): Budget {\n  return {\n    maxIterations: WORKER_MAX_ITERATIONS,\n    maxTokens: WORKER_MAX_TOKENS,\n  }\n}\n\nfunction resolveProfile(profile: AgentProfile): AgentProfile {\n  const parsed = agentProfileSchema.safeParse(profile)\n  if (!parsed.success) {\n    throw unavailable(\n      `Runtime supervisor profile is invalid: ${parsed.error.issues\n        .map((issue) => `${issue.path.join('.')}: ${issue.message}`)\n        .join('; ')}`,\n    )\n  }\n  return parsed.data\n}\n\nasync function resolveProvider(\n  request: ProvisionSupervisorRequest,\n): Promise<AgentEnvironmentProvider> {\n  const connection = request.connection\n  if (connection === undefined) {\n    throw unavailable('Runtime supervisor provider connection is required')\n  }\n  if (connection?.provider !== undefined) return requireReconnectProvider(connection.provider)\n  const client = connection?.client ?? connection?.sandboxClient\n  if (client !== undefined) {\n    return requireReconnectProvider(sandboxClientAsProvider(client))\n  }\n  const apiKey = connection.apiKey?.trim()\n  const endpoint = connection.endpoint?.trim()\n  if (!apiKey || !endpoint) {\n    throw unavailable(\n      'Runtime supervisor needs a provider/client or both connection.endpoint and connection.apiKey',\n    )\n  }\n  let module: typeof import('@tangle-network/sandbox')\n  try {\n    module = await import('@tangle-network/sandbox')\n  } catch (error) {\n    throw unavailable('Runtime supervisor could not load the Sandbox SDK peer dependency', error)\n  }\n  const SandboxCtor = (module as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (SandboxCtor === undefined) throw unavailable('Sandbox SDK does not export a Sandbox client')\n  const provider = sandboxClientAsProvider(new SandboxCtor({ apiKey, baseUrl: endpoint }))\n  return requireReconnectProvider(provider)\n}\n\nfunction requireReconnectProvider(provider: AgentEnvironmentProvider): AgentEnvironmentProvider {\n  if (!provider.name.trim()) throw unavailable('Runtime supervisor provider has no name')\n  if (typeof provider.get !== 'function') {\n    throw unavailable(\n      `Runtime supervisor provider '${provider.name}' cannot reconnect environments`,\n    )\n  }\n  return provider\n}\n\nasync function readCapabilities(\n  provider: AgentEnvironmentProvider,\n): Promise<AgentEnvironmentCapabilities> {\n  try {\n    return await provider.capabilities()\n  } catch (error) {\n    throw unavailable(`Runtime supervisor could not read '${provider.name}' capabilities`, error)\n  }\n}\n\nfunction terminalCapability(\n  capabilities: AgentEnvironmentCapabilities,\n): 'required' | 'unsupported' | 'unspecified' {\n  const interactive = capabilities.interactiveAgent\n  if (interactive === undefined) return 'unsupported'\n  const complete = [\n    interactive.start,\n    interactive.control,\n    interactive.status,\n    interactive.attach,\n    interactive.reattach,\n    interactive.sendPrompt,\n    interactive.input,\n    interactive.resize,\n    interactive.stop,\n  ].every((value) => value === true)\n  return complete ? 'required' : 'unsupported'\n}\n\nfunction findTool(tools: readonly McpToolDescriptor[], name: string): McpToolDescriptor {\n  const tool = tools.find((candidate) => candidate.name === name)\n  if (tool === undefined)\n    throw new Error(`Runtime supervisor coordination tool '${name}' is missing`)\n  return tool\n}\n\nfunction workerIdFromSpawn(value: unknown): string {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error('Runtime supervisor spawn did not return a worker id')\n  }\n  const workerId = (value as { workerId?: unknown }).workerId\n  if (typeof workerId !== 'string' || !workerId.trim()) {\n    throw new Error('Runtime supervisor spawn did not return a worker id')\n  }\n  return workerId\n}\n\nfunction isSettledEvent(value: unknown): boolean {\n  return isObject(value) && value.type === 'settled'\n}\n\nfunction isIdleEvent(value: unknown): boolean {\n  return isObject(value) && value.idle === true\n}\n\nfunction isPendingEvent(value: unknown): boolean {\n  return isObject(value) && value.pending === true\n}\n\nfunction isObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null\n}\n\nasync function waitForWorkerSpawn(\n  worker: Promise<string>,\n  run: Promise<SupervisedResult<unknown>>,\n  timeoutMs: number | undefined,\n): Promise<string> {\n  return await withTimeout(\n    Promise.race([\n      worker,\n      run.then(() => {\n        throw new Error('Runtime supervisor ended before it spawned a worker')\n      }),\n    ]),\n    timeoutMs,\n    'worker spawn',\n  )\n}\n\nasync function waitForWorkerRunning(\n  running: Promise<void>,\n  run: Promise<SupervisedResult<unknown>>,\n  timeoutMs: number | undefined,\n): Promise<void> {\n  await withTimeout(\n    Promise.race([\n      running,\n      run.then(() => {\n        throw new Error('Runtime supervisor ended before the worker became live')\n      }),\n    ]),\n    timeoutMs,\n    'worker readiness',\n  )\n}\n\nasync function waitForInteractiveBinding(\n  eventDir: string,\n  workerId: string,\n  run: Promise<SupervisedResult<unknown>>,\n  timeoutMs: number | undefined,\n  pollMs: number,\n): Promise<void> {\n  await withTimeout(\n    pollUntil(\n      async () => {\n        const binding = readWorkerInteractiveBinding(eventDir, workerId)\n        if (binding?.status === 'available') return true\n        if (binding?.status === 'unavailable') {\n          throw unavailable(`Runtime worker '${workerId}' could not publish an interactive binding`)\n        }\n        return false\n      },\n      run,\n      pollMs,\n    ),\n    timeoutMs,\n    'interactive terminal binding',\n  )\n}\n\nasync function pollUntil(\n  read: () => Promise<boolean> | boolean,\n  run: Promise<SupervisedResult<unknown>>,\n  pollMs: number,\n): Promise<void> {\n  for (;;) {\n    if (await read()) return\n    await Promise.race([\n      delay(pollMs),\n      run.then(() => {\n        throw new Error('Runtime supervisor ended before readiness was observed')\n      }),\n    ])\n  }\n}\n\nasync function withTimeout<T>(\n  promise: Promise<T>,\n  timeoutMs: number | undefined,\n  label: string,\n): Promise<T> {\n  if (timeoutMs === undefined) return await promise\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const timeout = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(\n      () => reject(unavailable(`Runtime supervisor timed out waiting for ${label}`)),\n      timeoutMs,\n    )\n    if (typeof timer.unref === 'function') timer.unref()\n  })\n  try {\n    return await Promise.race([promise, timeout])\n  } finally {\n    if (timer !== undefined) clearTimeout(timer)\n  }\n}\n\nfunction delay(ms: number, keepAlive = false): Promise<void> {\n  return new Promise((resolveDelay) => {\n    const timer = setTimeout(resolveDelay, ms)\n    if (!keepAlive && typeof timer.unref === 'function') timer.unref()\n  })\n}\n\nfunction updateStateFromResult(state: MutableState, result: SupervisedResult<unknown>): void {\n  state.status =\n    result.kind === 'winner' ? 'done' : result.reason === 'aborted' ? 'cancelled' : 'down'\n  state.completedAt = new Date().toISOString()\n}\n\nfunction workerStatusFromEvents(\n  events: readonly SpawnEvent[],\n  workerId: string,\n): SupervisorCleanupReceipt['workerStatus'] {\n  let status: SupervisorCleanupReceipt['workerStatus'] = 'running'\n  let terminal = false\n  for (const event of events) {\n    if (event.id !== workerId) continue\n    if (terminal) continue\n    if (event.kind === 'spawned' || event.kind === 'progress') status = 'running'\n    else if (event.kind === 'settled') {\n      status = event.status === 'done' ? 'done' : 'down'\n      terminal = true\n    } else if (event.kind === 'cancelled') {\n      status = 'cancelled'\n      terminal = true\n    }\n  }\n  return status\n}\n\nasync function waitForWorkerTerminal(\n  journal: import('./types').SpawnJournal,\n  root: string,\n  workerId: string,\n  timeoutMs: number | undefined,\n  pollMs: number,\n): Promise<SpawnEvent[]> {\n  const deadline = timeoutMs === undefined ? undefined : Date.now() + timeoutMs\n  for (;;) {\n    const events = await journal.loadTree(root)\n    if (events !== undefined && workerStatusFromEvents(events, workerId) !== 'running') {\n      return events\n    }\n    if (deadline !== undefined && Date.now() >= deadline) {\n      throw unavailable(`Runtime supervisor timed out waiting for worker '${workerId}' to settle`)\n    }\n    // Cleanup is an explicit lifecycle operation. Keep this bounded poll referenced so a caller\n    // awaiting cleanup cannot have Node exit while the provider is still committing the terminal\n    // worker event.\n    await delay(pollMs, true)\n  }\n}\n\nfunction deferred<T>(): Deferred<T> {\n  let done = false\n  let resolveValue!: (value: T) => void\n  let rejectValue!: (error: unknown) => void\n  const promise = new Promise<T>((resolvePromise, rejectPromise) => {\n    resolveValue = (value) => {\n      if (done) return\n      done = true\n      resolvePromise(value)\n    }\n    rejectValue = (error) => {\n      if (done) return\n      done = true\n      rejectPromise(error)\n    }\n  })\n  return {\n    promise,\n    resolve: resolveValue,\n    reject: rejectValue,\n    settled: () => done,\n  }\n}\n\nfunction unavailable(message: string, cause?: unknown): SupervisorProvisionUnavailableError {\n  return new SupervisorProvisionUnavailableError(message, cause)\n}\n\nfunction writeState(path: string, state: MutableState): void {\n  mkdirSync(dirname(path), { recursive: true })\n  writeAtomicDurableFile(path, `${JSON.stringify(state)}\\n`, { mode: 0o600 })\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAQA,MAAM,2BAA2B;;;;;;;;;;AAoBjC,eAAsB,gCACpB,SAC8C;CAC9C,MAAM,WAAW,QAAQ,sBAAsB;CAC/C,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,GAChD,MAAM,IAAI,MAAM,uEAAuE;CAGzF,IAAI,aAAa;CACjB,KAAK,IAAI,WAAW,GAAG,YAAY,0BAA0B,YAAY,GAAG;EAC1E,IAAI,QAAQ,QAAQ,SAAS,MAAM,WAAW,QAAQ,OAAO,MAAM;EACnE,MAAM,WAAW;GACf,aAAa,wBAAwB,QAAQ,QAAQ,QAAQ,UAAU,UAAU;GACjF,KAAK,QAAQ,OAAO;GACpB,UAAU,QAAQ;GAClB,oBAAoB;EACtB;EACA,MAAM,kBAAkB,MAAM,QAAQ,OAAO,aAC3C;GACE,GAAG;GACH,eAAe,iDAAiD,QAAQ;EAC1E,GACA,QAAQ,WAAW,KAAA,IAAY,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,CACtE;EACA,IAAI,gBAAgB,WAAW,cAAc,gBAAgB,WAAW,YAAY;GAClF,MAAM,UAAU,gBAAgB;GAChC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,mEAAmE;GAErF,IAAI,KAAK,MAAM,QAAQ,SAAS,KAAK,KAAK,IAAI,GAC5C,MAAM,IAAI,MAAM,wDAAwD;GAE1E,OAAO;EACT;EACA,IACE,gBAAgB,WAAW,cAC3B,gBAAgB,mBAAmB,uBAEnC,MAAM,IAAI,MACR,gBAAgB,WAAW,YACvB,6EACA,+EACN;EAEF,MAAM,UAAU,gBAAgB;EAChC,IAAI,YAAY,KAAA,KAAa,WAAW,YACtC,MAAM,IAAI,MAAM,kEAAkE;EAEpF,aAAa;CACf;CACA,MAAM,IAAI,MAAM,yDAAyD;AAC3E;AAEA,SAAS,wBACP,QACA,UACA,oBACQ;CAOR,OAAO,qBANQ,yBAAyB;EACtC,MAAM;EACN,KAAK,OAAO;EACZ;EACA;CACF,CACiC,CAAC,CAAC,MAAM,GAAkB,EAAqB;AAClF;;;;;;;;;;ACSA,MAAM,kCAAkC;;;;;;;;;AAmBxC,SAAgB,8BACd,UACA,UAAoC,CAAC,GACpB;CACjB,IAAI,CAAC,SAAS,KAAK,KAAK,GACtB,MAAM,IAAI,MAAM,uDAAuD;CACzE,IAAI,CAAC,SAAS,KACZ,MAAM,IAAI,MACR,iCAAiC,SAAS,KAAK,0CACjD;CAEF,MAAM,sBAAsB,QAAQ,cAC/B,gBAAgB,QAAQ,WAAW,IACpC,KAAA;CACJ,MAAM,oBAAoB,WAAW;CACrC,IAAI,kBAAkB;CACtB,MAAM,UAAU,QAAQ,WAAY,SAAS;CAE7C,QAAQ,YAAY,iBAAiB;EACnC,MAAM,UAAU,+BACd,YACA,iCAAiC,SAAS,KAAK,EACjD;EACA,MAAM,QAAmC;GACvC,UAAU,SAAS;GACnB;GACA,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,aAAa;EAChE;EACA,MAAM,eACJ,cAAc,gBAAgB,YAAY,kBAAkB,GAAG;EACjE,MAAM,YAAY;GAAE,GAAG;GAAO,QAAQ,cAAc;EAAa;EACjE,MAAM,iBAAiB,UACrB,QAAQ,4BAA4B,EAAE,GAAG,UAAU,CAAC,KAClD,WAAW,sCAAsC;GAC/C,UAAU,SAAS;GACnB;GACA,cAAc,cAAc;GAC5B;EACF,CAAC,GACH,6BACF;EACA,MAAM,OAAO,QAAQ,QAAQ;EAE7B,MAAM,mBACJ,MACA,QAEA,oBAAoB;GAClB;GACA,SAAS,KAAK;GACd,SAAS;GACT,aAAa;GACb;GACA,iBAAiB,SACf,UACE,QAAQ,4BAA4B;IAClC,GAAG;IACH;GACF,CAAC,KACC,WAAW,kCAAkC;IAC3C,UAAU,SAAS;IACnB;IACA,cAAc,cAAc;IAC5B,SAAS,KAAK;IACd;GACF,CAAC,GACH,6BACF;GACF,WAAW,SAAkB;IAK3B,OAAO,WAHL,OAAO,QAAQ,aAAa,aACxB,QAAQ,SAAS;KAAE,GAAG;KAAW;IAAK,CAAC,IACvC,QAAQ,aAGV,8BAA8B,yBAAyB;KACrD,UAAU,SAAS;KACnB;IACF,CAAC,KACH,uBACF;GACF;GACA,eAAe,QAAQ;GACvB,KAAK,QAAQ;GACb,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd;GACA,gBAAgB,QAAQ;GACxB,8BAA8B,QAAQ;GACtC,oBAAoB,IAAI,MAAM;GAC9B,QAAQ,IAAI,MAAM;GAClB,WAAW,gBAAgB,KAAK,SAAS,MAAM,IAAI,MAAM,MAAM;EACjE,CAAC;EAQH,OAAO;GACL;GACA,KAAK,YAAY;IACf,MAAM,IAAI,MACR,iFACF;GACF;GACA,cAAc;IAZd;IACA,SAAS;IACT;IACA,GAAI,cAAc,YAAY,EAAE,WAAW,aAAa,UAAU,IAAI,CAAC;GAStD;EACnB;CACF;AACF;AAsBA,SAAS,oBAAoB,OAAoE;CAC/F,MAAM,YACJ,MAAM,sBAAsB,sBAAsB,MAAM,UAAU,MAAM,cAAc;CACxF,MAAM,kBAAkB,IAAI,gBAAgB;CAC5C,MAAM,QAAQ,YAAY;CAC1B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,iBAAiB;CACrB,IAAI;CACJ,MAAM,QAAQ,IAAI,SAAmC,YAAY;EAC/D,eAAe;CACjB,CAAC;CACD,MAAM,iCAAiB,IAAI,IAA2C;CACtE,MAAM,mCAAmB,IAAI,IAA0C;CACvE,IAAI,mBAAmB;CACvB,IAAI;CACJ,IAAI,aAA4B,QAAQ,QAAQ;CAChD,IAAI;CAEJ,MAAM,WAA8C;EAClD,SAAS,MAAM;EACf,mBAAmB;EACnB,QAAQ,MAAM,QAAmC;GAC/C,IAAI,kBAAkB,oBAAoB,oBAAoB,KAAA,GAC5D,MAAM,IAAI,MAAM,kEAAkE;GAEpF,iBAAiB;GACjB,eAAe,iBAAiB,MAAM,MAAM;GAC5C,OAAO,eAAe,MAAM;EAC9B;EACA,QAAQ,SAA2B;GACjC,IAAI,oBAAoB,oBAAoB,KAAA,GAAW,OAAO;GAC9D,MAAM,WAAW,MAAM,QAAQ,OAAO;GACtC,IAAI,UAAU,WAAgB;GAC9B,OAAO;EACT;EACA,cAAwC;GACtC,OAAO,SACH;IAAE,QAAQ;IAAa;GAAO,IAC9B;IAAE,QAAQ;IAAe,QAAQ;GAAkC;EACzE;EACA,mBAAsD;GACpD,OAAO;EACT;EACA,MAAM,OAAO,SAAwC;GACnD,MAAM,WAAW,eAAe,IAAI,QAAQ,WAAW;GACvD,IAAI,UAAU,OAAO;GAErB,MAAM,UADY,gBAAgB,QAAQ,aAAa,QAAQ,QAAQ,QAAQ,MACvD,CAAC,CAAC,MAAM,WAAW;IACzC,IAAI,OAAO,WAAW,aAAa,eAAe,IAAI,QAAQ,WAAW,MAAM,SAC7E,eAAe,OAAO,QAAQ,WAAW;IAE3C,OAAO;GACT,CAAC;GACD,eAAe,IAAI,QAAQ,aAAa,OAAO;GAC/C,OAAO;EACT;EACA,SAAS,OAAwC;GAE/C,IAAI,kBAAkB,OAAO,QAAQ,QAAQ,EAAE,WAAW,KAAK,CAAC;GAChE,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAE1C,kBADgB,oBACQ,CAAC,CAAC,MACvB,WAAW;IACV,mBAAmB;IACnB,OAAO;GACT,IACC,UAAU;IACT,kBAAkB,KAAA;IAClB,MAAM;GACR,CACF;GACA,OAAO;EACT;EACA,iBAA0D;GACxD,IAAI,CAAC,UACH,MAAM,IAAI,MACR,+EACF;GAEF,OAAO;EACT;CACF;CAEA,MAAM,sBAAsB,MAAM,cAC9B,uBAAuB;EACrB,GAAG,MAAM;EACT,SAAS,MAAM;EACf,gBAAgB,MAAM;CACxB,CAAC,IACD;CACJ,MAAM,eAAe,qBAAqB,MAAM,OAAO;CACvD,MAAM,qBAAqB;EACzB,kBAAkB,MAAM;EACxB,SAAS,MAAM,SAAS;EACxB,OAAO,eACH;GAAE,QAAQ;GAAkB,IAAI;EAAa,IAC7C;GAAE,QAAQ;GAAoB,QAAQ;EAA8B;EACxE,WAAW;GAAE,MAAM;GAAuB,IAAI,MAAM,UAAU,MAAM;EAAe;EACnF,cAAc;EACd,MAAM;GACJ,MAAM;GACN,UAAU,MAAM,SAAS;GACzB,aAAa;GACb,2BAA2B,MAAM;GACjC,8BAA8B,MAAM,iCAAiC;EACvE;CACF;CACA,kCAAkC,UAAU,MAAM,SAAS,oBAAoB;EAC7E;EACA,SAAS;GACP,UAAU,MAAM,SAAS;GACzB,2BAA2B,MAAM;GACjC,QAAQ,MAAM,UAAU;EAC1B;EACA,YAAY;GACV,MAAM;GACN,UAAU,MAAM,SAAS;GACzB,WAAW;EACb;CACF,CAAC;CAED,eAAe,iBACb,MACA,QACuC;EACvC,IAAI;GACF,aAAa,UAAU,QAAQ,gBAAgB,MAAM;GACrD,MAAM,gBACJ,OAAO,MAAM,kBAAkB,aAC3B,MAAM,cAAc,MAAM;IACxB,UAAU,MAAM,SAAS;IACzB,SAAS,MAAM;IACf,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;IAChE;IACA,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;GAC/D,CAAC,IACA,MAAM,iBAAiB,aAAa,IAAI;GAC/C,IAAI,OAAO,kBAAkB,UAC3B,MAAM,IAAI,MAAM,mEAAmE;GAErF,MAAM,4BAA4B,MAAM,eAAe,IAAI;GAC3D,MAAM,UAAU,MAAM,4BAA4B;IAChD,UAAU;KACR,GAAG,MAAM;KACT,MAAM,OAAO,kBAA6C;MACxD,MAAM,cAAc,MAAM,MAAM,SAAS,OAAQ,gBAAgB;MACjE,qBAAqB;MACrB,OAAO;KACT;IACF;IACA,aAAa;KACX,GAAI,MAAM,eAAe,CAAC;KAC1B,SAAS,MAAM;KACf,gBAAgB,MAAM;IACxB;IACA;IACA,GAAI,cAAc,WAAW,IAAI,CAAC,IAAI,EAAE,cAAc;IACtD,GAAI,MAAM,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI;IACpD,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;IACvD,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;IACvD,aAAa,OAAO,cAAc;KAChC,gBACE,UAAU,UAAU,4BAA4B,UAAU,gBAAgB;KAC5E,MAAM,WAAW,iBAAiB,IAAI,UAAU,KAAK;KACrD,IAAI,aAAa,KAAA,GACX;UAAA,yBAAyB,QAAQ,MAAM,yBAAyB,SAAS,GAC3E,MAAM,IAAI,MACR,gCAAgC,UAAU,MAAM,uBAClD;KAAA,OAGF,iBAAiB,IACf,UAAU,OACV,iBAAiB,WAAW,uBAAuB,CACrD;KAEF,MAAM,MAAM,UAAU,SAAS;IACjC;IACA,QAAQ,WAAW;GACrB,CAAC;GACD,oCACE,UACA;IACE,GAAG;IACH,WAAW;KAAE,MAAM;KAAuB,IAAI,QAAQ,IAAI,IAAI;IAAY;IAC1E,MAAM;KACJ,GAAG,mBAAmB;KACtB,eAAe,QAAQ,IAAI,IAAI;KAC/B;IACF;GACF,GACA;IACE;IACA,SAAS;KACP,UAAU,MAAM,SAAS;KACzB,KAAK,QAAQ;KACb,eAAe,QAAQ,IAAI,IAAI;IACjC;IACA,YAAY;KACV,MAAM;KACN,UAAU,MAAM,SAAS;KACzB,WAAW;IACb;GACF,CACF;GACA,SAAS;GACT,aAAa;IAAE,QAAQ;IAAa,QAAQ;GAAQ,CAAC;GACrD,WAAgB;GAChB,OAAO;EACT,SAAS,OAAO;GACd,aAAa;IAAE,QAAQ;IAAe,QAAQ,kBAAkB,KAAK;GAAE,CAAC;GACxE,YAAY,QAAQ;GACpB,MAAM;EACR;CACF;CAEA,gBAAgB,eAAe,QAAgD;EAC7E,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI;GACF,MAAM,UAAU,MAAM;GACtB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,gEAAgE;GAElF,MAAM,EAAE,MAAM,YAAY;GAG1B,MAAM;IAAE,MAAM;IAAU,OAAO;IAAG,QAAQ;IAAG,aAAa;GAAM;GAChE,MAAM;IAAE,MAAM;IAAQ,KAAK;IAAG,UAAU;IAAO,YAAY;GAAa;GACxE,IAAI;GACJ,SAAS;IACP,IAAI,OAAO,WAAW,gBAAgB,OAAO,SAC3C,MAAMA,aACJ,OAAO,UAAU,SAAS,gBAAgB,QAC1C,+BACF;IAEF,SAAS,MAAM,QAAQ,OAAO,EAAE,QAAQ,YAAY,OAAO,CAAC;IAC5D,MAAM;IACN,IAAI,iBAAiB,KAAA,GAAW,MAAM,kBAAkB,YAAY;IACpE,IAAI,OAAO,UAAU,WAAW;IAChC,MAAM,MAAM,MAAM,kBAAkB,KAAK,YAAY,MAAM;GAC7D;GACA,MAAM,WAAW;GACjB,MAAM,SAAkC;IACtC,UAAU,MAAM,SAAS;IACzB,eAAe,QAAQ,IAAI,IAAI;IAC/B,WAAW,QAAQ,IAAI,IAAI;IAC3B,aAAa,QAAQ,IAAI,IAAI;IAC7B,OAAO,UAAU,UAAU,WAAW,WAAW;IACjD,KAAK,QAAQ;IACb,GAAI,UAAU,UAAU,YAAY,SAAS,SAAS,EAAE,QAAQ,SAAS,OAAO,IAAI,CAAC;IACrF,GAAI,UAAU,UAAU,YAAY,SAAS,aAAa,KAAA,IACtD,EAAE,UAAU,SAAS,SAAS,IAC9B,CAAC;IACL,GAAI,UAAU,UAAU,YAAY,SAAS,eAAe,KAAA,IACxD,EAAE,YAAY,SAAS,WAAW,IAClC,CAAC;GACP;GACA,MAAM,QAAe;IACnB,YAAY;IACZ,QAAQ;KAAE,OAAO;KAAG,QAAQ;IAAE;IAC9B,aAAa;IACb,KAAK;IACL,UAAU;IACV,IAAI,KAAK,IAAI,IAAI;GACnB;GACA,WAAW;IACT,QAAQ,eAAe,MAAM;IAC7B,KAAK;IACL;GACF;EACF,UAAU;GACR,YAAY,QAAQ;EACtB;CACF;CAEA,eAAe,aAA4B;EACzC,aAAa,WAAW,KAAK,YAAY;GACvC,IAAI;IACF,IAAI,CAAC,QAAQ;IACb,MAAM,WAAW,MAAM,MAAM;IAC7B,IAAI,SAAS,WAAW,GAAG;IAC3B,MAAM,SAAS,MAAM,KAAK,QAAQ;IAClC,MAAM,cAAc,sBAAsB,yBAAyB;KACjE,KAAK,OAAO;KACZ;IACF,CAAC,CAAC,CAAC,MAAM,CAAgB;IACzB,MAAM,UAAU,MAAM,gCAAgC;KACpD;KACA,UAAU,MAAM,SAAS,KAAA,CAAS;IACpC,CAAC;IACD,MAAM,WAAW;KACf;KACA,KAAK,OAAO;KACZ;KACA;IACF;IACA,MAAM,UAAgD;KACpD,GAAG;KACH,eAAe,2CAA2C,QAAQ;IACpE;IACA,MAAM,OAAO,WAAW,OAAO;GACjC,SAAS,OAAO;IACd,iBAAiB;GACnB;EACF,CAAC;EACD,MAAM;CACR;CAEA,eAAe,gBACb,aACA,QACA,QAC+B;EAC/B,MAAM,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EAC1C,IAAI,CAAC,QAAQ;GACX,gBAAgB,MAAM,UAAU,oCAAoC;GACpE,OAAO;IACL,QAAQ;IACR,QAAQ;IACR;IACA,QAAQ;GACV;EACF;EACA,IAAI;GACF,MAAM,UAAU,MAAM,gCAAgC;IACpD;IACA,UAAU,MAAM,SAAS,KAAA,CAAS;IAClC;GACF,CAAC;GACD,MAAM,WAAW;IAAE;IAAa,KAAK,OAAO;IAAK;GAAQ;GACzD,MAAM,UAA8C;IAClD,GAAG;IACH,eAAe,yCAAyC,QAAQ;GAClE;GACA,MAAM,kBAAkB,MAAM,OAAO,KACnC,SACA,WAAW,KAAA,IAAY,KAAA,IAAY,EAAE,OAAO,CAC9C;GACA,gBAAgB,MAAM,UAAU,oCAAoC;GACpE,OAAO,gCAAgC,iBAAiB,UAAU;EACpE,SAAS,OAAO;GACd,gBAAgB,MAAM,UAAU,oCAAoC;GACpE,OAAO;IACL,QAAQ;IACR,QAAQ;IACR;IACA,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAC7D,UAAU,EAAE,YAAY;GAC1B;EACF;CACF;CAEA,eAAe,sBAAuD;EACpE,gBAAgB,MAAM,6BAA6B;EACnD,YAAY,QAAQ;EACpB,MAAM,cAAc,YAAY,KAAA,CAAS;EACzC,IAAI,QAEE;QAAA,MADiB,WAAW,MAAM,EAAA,EAC1B,UAAU,WAAW;IAI/B,MAAM,eAAe,MAAM,gBAAgB,wBAHC,yBAAyB,OAAO,GAAG,CAAC,CAAC,MAC/E,CACF,KACwD,6BAA6B;IACrF,IAAI,aAAa,WAAW,cAAc,aAAa,WAAW,WAChE,MAAM,IAAI,MAAM,aAAa,UAAU,2CAA2C;GAEtF;;EAEF,MAAM,mBAAmB;EACzB,OAAO,EAAE,WAAW,KAAK;CAC3B;CAEA,eAAe,qBAAoC;EACjD,IAAI,MAAM,iCAAiC,OAAO;EAClD,IAAI,uBAAuB,KAAA,GAAW;GACpC,MAAM,8BAA8B,kBAAkB;GACtD;EACF;EACA,IAAI,CAAC,MAAM,SAAS,KAAK;EAIzB,MAAM,uBAAuB,iBAAiB,QAAQ,IAAI,IAAI;EAC9D,IAAI,CAAC,sBAAsB;EAC3B,MAAM,cAAc,MAAM,MAAM,SAAS,IAAI,oBAAoB;EACjE,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,MAC/C,MAAM,8BAA8B,WAAW;CAEnD;CAEA,OAAO;AACT;AAEA,SAAS,gBACP,KACA,UACA,UAC4B;CAC5B,MAAM,YAAY,IAAI,MAAM;CAC5B,IAAI,OAAO,cAAc,YACvB,OAAO,OAAO,cAAc;EAC1B,MAAO,UAAqE,SAAS;CACvF;CAKF,MAAM,0BAAU,IAAI,IAA0C;CAC9D,OAAO,OAAO,cAAc;EAC1B,MAAM,QAAQ,QAAQ,IAAI,UAAU,KAAK;EACzC,IAAI,SAAS,yBAAyB,KAAK,MAAM,yBAAyB,SAAS,GACjF,MAAM,IAAI,MACR,UAAU,YAAY,aAAa,YAAY,SAAS,6BAC1D;EAEF,QAAQ,IAAI,UAAU,OAAO,iBAAiB,WAAW,uBAAuB,CAAC;CACnF;AACF;AAEA,SAAS,WAAW,MAAc,OAAwB;CACxD,OAAO,GAAG,KAAK,GAAG,yBAAyB,KAAK,CAAC,CAAC,MAAM,CAAgB;AAC1E;AAEA,SAAS,UAAU,OAAe,OAAuB;CACvD,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,GACvD,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAEvD,MAAM,MAAM,MAAM,KAAK;CACvB,IAAI,IAAI,SAAS,KAAK,MAAM,IAAI,MAAM,GAAG,MAAM,2BAA2B;CAC1E,OAAO;AACT;AAEA,SAAS,kBACP,OACsE;CACtE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,QAAQ,SAAS,aAAa,KAAK,QAAQ,SAAS,aAAa,IACpE,yCACA;AACN;AAEA,SAAS,gCACP,iBACA,YACsB;CAetB,OAAO;EACL,QAdA,gBAAgB,WAAW,cAAc,gBAAgB,WAAW,aAChE,aACA,gBAAgB,WAAW,aACzB,aACA;EAWN,QATA,gBAAgB,WAAW,YACvB,cACA,gBAAgB,WAAW,aACzB,aACA,gBAAgB,WAAW,mBACzB,qBACA;EAIR;EACA,GAAI,gBAAgB,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,gBAAgB,QAAQ;EACnF,UAAU;GACR,aAAa,gBAAgB;GAC7B,eAAe,gBAAgB;GAC/B,gBAAgB,gBAAgB;GAChC,gBAAgB,gBAAgB;EAClC;CACF;AACF;AAEA,SAAS,kBAAkB,OAAuB;CAChD,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;AAEA,eAAe,WACb,QACoD;CACpD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAoB,YAAY;EAClD,QAAQ,iBAAiB,QAAQ,KAAA,CAAS,GAAG,GAAG;EAChD,MAAM,QAAQ;CAChB,CAAC;CACD,IAAI;EAKF,OAAO,MAAM,QAAQ,KAAK,CAAC,OAAO,OAAO,GAAG,OAAO,CAAC;CACtD,QAAQ;EACN;CACF,UAAU;EACR,IAAI,UAAU,KAAA,GAAW,aAAa,KAAK;CAC7C;AACF;AAEA,eAAe,MAAM,IAAY,QAAqC;CACpE,MAAM,IAAI,SAAe,YAAY;EACnC,IAAI,QAAQ,SAAS;GACnB,QAAQ;GACR;EACF;EACA,IAAI,UAAU;EACd,MAAM,gBAAsB;GAC1B,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,QAAQ;EACV;EACA,MAAM,QAAQ,iBACN;GACJ,IAAI,SAAS;GACb,UAAU;GACV,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,QAAQ;EACV,GACA,KAAK,IAAI,GAAG,EAAE,CAChB;EACA,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC3D,CAAC;AACH;;;;;;;;;;;;;ACruBA,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AA6D1B,IAAM,sCAAN,cAAkD,MAAM;CACtD,cAAuB;CAEvB,YAAY,SAAiB,OAAiB;EAC5C,MAAM,SAAS,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,CAAC;EAC1D,KAAK,OAAO;CACd;AACF;;;;;;;;;AA4BA,eAAsB,oBACpB,SACgC;CAChC,MAAM,QAAQ,iBAAiB,OAAO;CACtC,MAAM,WAAW,MAAM,gBAAgB,KAAK;CAE5C,MAAM,mBAAmB,mBAAmB,MADjB,iBAAiB,QAAQ,CACI;CACxD,MAAM,UAAU,MAAM;CACtB,MAAM,UAAU,QAAQ,MAAM,gBAAgB,iBAAiB,CAAC;CAChE,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;CACtC,MAAM,eAAe,gBAAgB,MAAM,YAAY;CACvD,MAAM,WAAW,iBAAiB,SAAS,YAAY;CACvD,MAAM,YAAY,KAAK,UAAU,YAAY;CAC7C,UAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,IAAI;EAGF,UAAU,QAAQ;CACpB,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,MAAM,YACJ,uBAAuB,aAAa,uBAAuB,SAAS,0BACtE;EAEF,MAAM;CACR;CAEA,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,MAAM,cAAc,KAAK,IAAI;CAC7B,MAAM,QAAsB;EAC1B,IAAI;EACJ,QAAQ;EACR,MAAM,MAAM;EACZ,cAAc;EACd,QAAQ;EACR,GAAI,QAAQ,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,QAAQ,MAAM,QAAQ;EACrF,WAAW,IAAI,KAAK,WAAW,CAAC,CAAC,YAAY;CAC/C;CACA,WAAW,WAAW,KAAK;CAE3B,MAAM,aAAa,iBAA0B;CAC7C,MAAM,aAAa,iBAAmC;CACtD,WAAW,OAAO,UAAU;CAC5B,MAAM,gBAAgB,SAAiB;CACvC,MAAM,gBAAgB,SAAe;CACrC,MAAM,gBAAgB;CAUtB,MAAM,kBAAkB,8BAA8B,UAAU;EAC9D,aAAa;GATb,GAAI,MAAM,qBAAqB,CAAC;GAChC,UAAU;IACR,GAAI,MAAM,mBAAmB,YAAY,CAAC;IAC1C,SAAS;IACT,cAAc,MAAM;GACtB;GACA,MAAM,MAAM,mBAAmB,QAAQ,WAAW;EAGrB;EAC7B,gBAAgB,MAAM;EACtB,8BAA8B;CAChC,CAAC;CAED,MAAM,YAAqC;EACzC,MAAM;EACN,MAAM,IAAI,OAAgB,OAAyC;GACjE,MAAM,QAAQ,wBAAwB;IACpC;IACA,OAAO,QAAQ;IACf;IACA,WAAW,aAAa;IAIxB,gBAAgB,MAAM;GACxB,CAAC;GACD,MAAM,MAAM,MAAM;GAClB,MAAM,QAAQ,SAAS,MAAM,OAAO,cAAc;GAClD,MAAM,aAAa,SAAS,MAAM,OAAO,aAAa;GAMtD,MAAM,UAAU,kBAAkB,MALb,MAAM,QAAQ;IACjC,SAAS;IACT,MAAM,MAAM;IACZ,OAAO;GACT,CAAC,CACuC;GACxC,cAAc,QAAQ,OAAO;GAE7B,SAAS;IACP,MAAM,QAAQ,MAAM,KAAK,MAAM,MAAM,SAAS,KAAK,OAAO,OAAO;IACjE,IAAI,OAAO,WAAW,WAAW;IACjC,IACE,UAAU,KAAA,KACV,MAAM,WAAW,UACjB,MAAM,WAAW,YACjB,MAAM,WAAW,aAEjB,MAAM,IAAI,MAAM,8BAA8B,QAAQ,6BAA6B;IAErF,MAAM,MAAM,MAAM,MAAM;GAC1B;GACA,cAAc,QAAQ;GAEtB,MAAM,oBAAoB,wBAAwB;IAChD,KAAK;IACL;IACA,KAAK,KAAK;IACV,SAAS,MAAM,KAAK;GACtB,CAAC;GACD,MAAM,qBAAqB,yBAAyB;IAClD,KAAK;IACL;IACA;IACA,KAAK,KAAK;IACV,SAAS,MAAM,KAAK;IACpB,cAAc;GAChB,CAAC;GACD,IAAI;IACF,OAAO,MAAM;KACX,MAAM,kBAAkB,KAAK,MAAM;KACnC,mBAAmB,KAAK,MAAM;KAG9B,MAAM,QAAQ,MAAM,WAAW,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;KAC7D,IAAI,eAAe,KAAK,GAAG;MACzB,MAAM,kBAAkB,KAAK,OAAO;MACpC,mBAAmB,KAAK,OAAO;MAC/B;KACF;KACA,IAAI,YAAY,KAAK,GACnB,MAAM,IAAI,MAAM,8BAA8B,QAAQ,6BAA6B;KAErF,IAAI,CAAC,eAAe,KAAK,GACvB,MAAM,IAAI,MAAM,4DAA4D;IAEhF;GACF,UAAU;IAGR,MAAM,kBAAkB,KAAK,OAAO;IACpC,mBAAmB,KAAK,OAAO;IAC/B,mBAAmB,OAAO;GAC5B;EACF;CACF;CACA,MAAM,YAAY,WAAW,MAAM,SAAS;CAC5C,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa;CACjB,MAAM,aAAa,WAChB,IAAI,WAAW,MAAM,MAAM;EAC1B,QAAQ;EACR,cAAc;GACZ,eAAe,4BAA4B,OAAO;GAClD,YAAY,yBAAyB,MAAM,IAAI;EACjD;EACA,OAAO;EACP,GAAG;EACH,uBAAuB;EACvB,UAAU;EACV,gBAAgB;CAClB,CAAC,CAAC,CACD,MACE,WAAW;EACV,YAAY;EACZ,aAAa;EACb,sBAAsB,OAAO,MAAM;EACnC,WAAW,WAAW,KAAK;EAC3B,OAAO;CACT,IACC,UAAU;EACT,WAAW;EACX,aAAa;EACb,MAAM,SAAS;EACf,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3C,WAAW,WAAW,KAAK;EAC3B,MAAM;CACR,CACF;CACF,WAAgB,YAAY,KAAA,CAAS;CAErC,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,mBAAmB,cAAc,SAAS,YAAY,MAAM,SAAS;EACtF,MAAM,qBAAqB,cAAc,SAAS,YAAY,MAAM,SAAS;EAC7E,IAAI,qBAAqB,YACvB,MAAM,0BAA0B,UAAU,UAAU,YAAY,MAAM,WAAW,MAAM,MAAM;CAEjG,SAAS,OAAO;EACd,IAAI,CAAC,YACH,IAAI;GACF,WAAW,MAAM,gCAAgC;EACnD,QAAQ,CAER;EAEF,MAAM,WAAW,YAAY,KAAA,CAAS;EACtC,MAAM;CACR;CAEA,IAAI;CACJ,MAAM,UAAU,YAA+C;EAC7D,oBAAoB,YAAY;GAC9B,IAAI,CAAC,YACH,IAAI;IACF,WAAW,MAAM,oBAAoB;GACvC,QAAQ,CAER;GAEF,MAAM,SAAS,MAAM,WAAW,OAAO,UAAU;IAC/C,WAAW;GAEb,CAAC;GACD,IAAI,WAAW,KAAA,GAAW,YAAY;GACtC,IAAI,aAAa,KAAA,GAAW,MAAM;GAQlC,MAAM,eAAe,uBAAuB,MAPlB,sBACxB,QAAQ,SACR,cACA,UACA,MAAM,WACN,MAAM,MACR,GACyD,QAAQ;GACjE,IAAI,iBAAiB,WACnB,MAAM,IAAI,MAAM,8BAA8B,SAAS,iCAAiC;GAE1F,IAAI,WAAW,qBAAqB,QAClC,MAAM,IAAI,MACR,gDAAgD,UAAU,oBAAoB,OAAO,sBACvF;GAEF,MAAM,mBAAmB,MAAM;GAC/B,MAAM,iCAAgB,IAAI,KAAK,EAAA,CAAE,YAAY;GAC7C,WAAW,WAAW,KAAK;GAC3B,OAAO,OAAO,OAAO;IACnB,QAAQ;IACR;IACA;IACA;IACA;IACA;IACA,mBAAmB;IACnB,oBAAoB,OAAO,OAAO,CAAC,CAAC;GACtC,CAAC;EACH,EAAA,CAAG;EACH,OAAO;CACT;CAEA,OAAO,OAAO,OAAO;EACnB;EACA;EACA;EACA,WAAW;EACX;EACA;CACF,CAAC;AACH;AAEA,SAAS,iBAAiB,SAOxB;CACA,MAAM,eAAe,QAAQ,aAAa,KAAK;CAC/C,IAAI,CAAC,cAAc,MAAM,IAAI,oCAAoC,0BAA0B;CAC3F,MAAM,OAAO,QAAQ,KAAK,KAAK;CAC/B,IAAI,CAAC,MAAM,MAAM,IAAI,oCAAoC,kBAAkB;CAC3E,MAAM,UAAU,eAAe,QAAQ,OAAO;CAC9C,IAAI,QAAQ,eAAe,KAAA,GACzB,MAAM,IAAI,oCAAoC,iCAAiC;CAEjF,MAAM,YACJ,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,eAAe,QAAQ,WAAW,WAAW;CAC7F,MAAM,SAAS,eAAe,QAAQ,UAAU,iBAAiB,QAAQ;CACzE,OAAO;EAAE,GAAG;EAAS;EAAc;EAAM;EAAW;EAAQ;CAAQ;AACtE;AAEA,SAAS,eAAe,OAAe,MAAsB;CAC3D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAC3C,MAAM,IAAI,oCAAoC,GAAG,KAAK,iCAAiC;CAEzF,OAAO;AACT;AAEA,SAAS,mBAA2B;CAClC,OAAO,KAAK,OAAO,GAAG,4BAA4B,WAAW,GAAG;AAClE;AAEA,SAAS,gBAAgB,cAA8B;CAErD,OAAO,sBADQ,yBAAyB;EAAE,MAAM;EAAsB;CAAa,CACjD,CAAC,CAAC,MAAM,CAAgB;AAC5D;;AAGA,SAAS,WAAW,WAAuC;CACzD,OAAO;EACL,eAAe;EACf,WAAW;EACX,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,UAAU;CAC7D;AACF;AAEA,SAAS,eAAuB;CAC9B,OAAO;EACL,eAAe;EACf,WAAW;CACb;AACF;AAEA,SAAS,eAAe,SAAqC;CAC3D,MAAM,SAAS,mBAAmB,UAAU,OAAO;CACnD,IAAI,CAAC,OAAO,SACV,MAAM,YACJ,0CAA0C,OAAO,MAAM,OACpD,KAAK,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAC3D,KAAK,IAAI,GACd;CAEF,OAAO,OAAO;AAChB;AAEA,eAAe,gBACb,SACmC;CACnC,MAAM,aAAa,QAAQ;CAC3B,IAAI,eAAe,KAAA,GACjB,MAAM,YAAY,oDAAoD;CAExE,IAAI,YAAY,aAAa,KAAA,GAAW,OAAO,yBAAyB,WAAW,QAAQ;CAC3F,MAAM,SAAS,YAAY,UAAU,YAAY;CACjD,IAAI,WAAW,KAAA,GACb,OAAO,yBAAyB,wBAAwB,MAAM,CAAC;CAEjE,MAAM,SAAS,WAAW,QAAQ,KAAK;CACvC,MAAM,WAAW,WAAW,UAAU,KAAK;CAC3C,IAAI,CAAC,UAAU,CAAC,UACd,MAAM,YACJ,8FACF;CAEF,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,OAAO;CACxB,SAAS,OAAO;EACd,MAAM,YAAY,qEAAqE,KAAK;CAC9F;CACA,MAAM,cAAe,OAAgE;CACrF,IAAI,gBAAgB,KAAA,GAAW,MAAM,YAAY,8CAA8C;CAE/F,OAAO,yBADU,wBAAwB,IAAI,YAAY;EAAE;EAAQ,SAAS;CAAS,CAAC,CAC/C,CAAC;AAC1C;AAEA,SAAS,yBAAyB,UAA8D;CAC9F,IAAI,CAAC,SAAS,KAAK,KAAK,GAAG,MAAM,YAAY,yCAAyC;CACtF,IAAI,OAAO,SAAS,QAAQ,YAC1B,MAAM,YACJ,gCAAgC,SAAS,KAAK,gCAChD;CAEF,OAAO;AACT;AAEA,eAAe,iBACb,UACuC;CACvC,IAAI;EACF,OAAO,MAAM,SAAS,aAAa;CACrC,SAAS,OAAO;EACd,MAAM,YAAY,sCAAsC,SAAS,KAAK,iBAAiB,KAAK;CAC9F;AACF;AAEA,SAAS,mBACP,cAC4C;CAC5C,MAAM,cAAc,aAAa;CACjC,IAAI,gBAAgB,KAAA,GAAW,OAAO;CAYtC,OAXiB;EACf,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;CACd,CAAC,CAAC,OAAO,UAAU,UAAU,IACf,IAAI,aAAa;AACjC;AAEA,SAAS,SAAS,OAAqC,MAAiC;CACtF,MAAM,OAAO,MAAM,MAAM,cAAc,UAAU,SAAS,IAAI;CAC9D,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,yCAAyC,KAAK,aAAa;CAC7E,OAAO;AACT;AAEA,SAAS,kBAAkB,OAAwB;CACjD,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,WAAY,MAAiC;CACnD,IAAI,OAAO,aAAa,YAAY,CAAC,SAAS,KAAK,GACjD,MAAM,IAAI,MAAM,qDAAqD;CAEvE,OAAO;AACT;AAEA,SAAS,eAAe,OAAyB;CAC/C,OAAO,SAAS,KAAK,KAAK,MAAM,SAAS;AAC3C;AAEA,SAAS,YAAY,OAAyB;CAC5C,OAAO,SAAS,KAAK,KAAK,MAAM,SAAS;AAC3C;AAEA,SAAS,eAAe,OAAyB;CAC/C,OAAO,SAAS,KAAK,KAAK,MAAM,YAAY;AAC9C;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,eAAe,mBACb,QACA,KACA,WACiB;CACjB,OAAO,MAAM,YACX,QAAQ,KAAK,CACX,QACA,IAAI,WAAW;EACb,MAAM,IAAI,MAAM,qDAAqD;CACvE,CAAC,CACH,CAAC,GACD,WACA,cACF;AACF;AAEA,eAAe,qBACb,SACA,KACA,WACe;CACf,MAAM,YACJ,QAAQ,KAAK,CACX,SACA,IAAI,WAAW;EACb,MAAM,IAAI,MAAM,wDAAwD;CAC1E,CAAC,CACH,CAAC,GACD,WACA,kBACF;AACF;AAEA,eAAe,0BACb,UACA,UACA,KACA,WACA,QACe;CACf,MAAM,YACJ,UACE,YAAY;EACV,MAAM,UAAU,6BAA6B,UAAU,QAAQ;EAC/D,IAAI,SAAS,WAAW,aAAa,OAAO;EAC5C,IAAI,SAAS,WAAW,eACtB,MAAM,YAAY,mBAAmB,SAAS,2CAA2C;EAE3F,OAAO;CACT,GACA,KACA,MACF,GACA,WACA,8BACF;AACF;AAEA,eAAe,UACb,MACA,KACA,QACe;CACf,SAAS;EACP,IAAI,MAAM,KAAK,GAAG;EAClB,MAAM,QAAQ,KAAK,CACjB,MAAM,MAAM,GACZ,IAAI,WAAW;GACb,MAAM,IAAI,MAAM,wDAAwD;EAC1E,CAAC,CACH,CAAC;CACH;AACF;AAEA,eAAe,YACb,SACA,WACA,OACY;CACZ,IAAI,cAAc,KAAA,GAAW,OAAO,MAAM;CAC1C,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,UAAU,WAAW;EACvD,QAAQ,iBACA,OAAO,YAAY,4CAA4C,OAAO,CAAC,GAC7E,SACF;EACA,IAAI,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM;CACrD,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,OAAO,CAAC;CAC9C,UAAU;EACR,IAAI,UAAU,KAAA,GAAW,aAAa,KAAK;CAC7C;AACF;AAEA,SAAS,MAAM,IAAY,YAAY,OAAsB;CAC3D,OAAO,IAAI,SAAS,iBAAiB;EACnC,MAAM,QAAQ,WAAW,cAAc,EAAE;EACzC,IAAI,CAAC,aAAa,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM;CACnE,CAAC;AACH;AAEA,SAAS,sBAAsB,OAAqB,QAAyC;CAC3F,MAAM,SACJ,OAAO,SAAS,WAAW,SAAS,OAAO,WAAW,YAAY,cAAc;CAClF,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;AAC7C;AAEA,SAAS,uBACP,QACA,UAC0C;CAC1C,IAAI,SAAmD;CACvD,IAAI,WAAW;CACf,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,MAAM,OAAO,UAAU;EAC3B,IAAI,UAAU;EACd,IAAI,MAAM,SAAS,aAAa,MAAM,SAAS,YAAY,SAAS;OAC/D,IAAI,MAAM,SAAS,WAAW;GACjC,SAAS,MAAM,WAAW,SAAS,SAAS;GAC5C,WAAW;EACb,OAAO,IAAI,MAAM,SAAS,aAAa;GACrC,SAAS;GACT,WAAW;EACb;CACF;CACA,OAAO;AACT;AAEA,eAAe,sBACb,SACA,MACA,UACA,WACA,QACuB;CACvB,MAAM,WAAW,cAAc,KAAA,IAAY,KAAA,IAAY,KAAK,IAAI,IAAI;CACpE,SAAS;EACP,MAAM,SAAS,MAAM,QAAQ,SAAS,IAAI;EAC1C,IAAI,WAAW,KAAA,KAAa,uBAAuB,QAAQ,QAAQ,MAAM,WACvE,OAAO;EAET,IAAI,aAAa,KAAA,KAAa,KAAK,IAAI,KAAK,UAC1C,MAAM,YAAY,oDAAoD,SAAS,YAAY;EAK7F,MAAM,MAAM,QAAQ,IAAI;CAC1B;AACF;AAEA,SAAS,WAA2B;CAClC,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;CAaJ,OAAO;EACL,SAAA,IAbkB,SAAY,gBAAgB,kBAAkB;GAChE,gBAAgB,UAAU;IACxB,IAAI,MAAM;IACV,OAAO;IACP,eAAe,KAAK;GACtB;GACA,eAAe,UAAU;IACvB,IAAI,MAAM;IACV,OAAO;IACP,cAAc,KAAK;GACrB;EACF,CAEQ;EACN,SAAS;EACT,QAAQ;EACR,eAAe;CACjB;AACF;AAEA,SAAS,YAAY,SAAiB,OAAsD;CAC1F,OAAO,IAAI,oCAAoC,SAAS,KAAK;AAC/D;AAEA,SAAS,WAAW,MAAc,OAA2B;CAC3D,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,uBAAuB,MAAM,GAAG,KAAK,UAAU,KAAK,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AAC5E"}

package/dist/{redact-Cn-WvchV.js → redact-D0OzQsyt.js}

@@ -6936,12 +6936,24 @@ function createPartsTraceSource(opts) {
 		}
 	};
 }
+/**
+* Decode one part a BOX published. A box publishes every harness's tool calls in the canonical
+* `ToolPart` shape (the sandbox normalizes them), so that decoder runs first for any harness; the
+* harness's own raw wire shape is the second reading, for a session that streams unnormalized
+* parts. Both the session source (`messages()`) and the live stream (`streamPrompt` events) read
+* box parts, so both decode through here.
+*/
+function decodeBoxPart(part, harness) {
+	const p = obj(part);
+	if (!p) return void 0;
+	return decodeOpencodePart(p) ?? decodeToolPart(part, harness);
+}
 /** The SANDBOX / fleet trace source: read a box session's message parts and decode the harness's tool
 *  calls into spans. `collect` (settle) is the solid path — `box.messages({sessionId})` → parts → spans;
 *  black-box harnesses aren't mid-step interruptible, so online steering is the owned-loop's job and a
 *  live `subscribe` is opt-in (pass `subscribeParts` from `streamPrompt` when the harness streams parts). */
 function sandboxSessionTraceSource(box, sessionId, opts = {}) {
-	const decode = (part) => decodeOpencodePart(obj(part) ?? {}) ?? decodeToolPart(part, opts.harness);
+	const decode = (part) => decodeBoxPart(part, opts.harness);
 	return createPartsTraceSource({
 		collectParts: async () => {
 			return (await box.messages({ sessionId })).flatMap((m) => m.parts ? [...m.parts] : []);
@@ -6990,7 +7002,7 @@ function createSteerableSandboxSession(args) {
 		const data = event.data;
 		const part = data && typeof data === "object" ? data.part : void 0;
 		if (part !== void 0) {
-			const step = decodeToolPart(part, args.harness);
+			const step = decodeBoxPart(part, args.harness);
 			if (step) {
 				const key = step.callId ?? `${step.toolName}:${activity.size()}`;
 				if (!state.seenToolCalls.has(key)) {
@@ -8998,10 +9010,14 @@ function scheduleBridgeRunStateRefresh(seam, activeRuns, observation) {
 /** One bridge GET over the `node:http(s)` core client — the same transport every other bridge
 *  read uses, so a computed provider endpoint never reaches global `fetch`. Resolves the status
 *  and the body text; a transport failure rejects. */
-function bridgeGet(seam, path, timeoutMs) {
+function bridgeGet(seam, path, timeoutMs, signal) {
 	const target = new URL(`${seam.bridgeUrl.replace(/\/$/, "")}${path}`);
 	const requestFn = target.protocol === "https:" ? request$1 : request;
 	return new Promise((resolve, reject) => {
+		if (signal?.aborted) {
+			reject(new DOMException(`bridge GET ${path} aborted before request`, "AbortError"));
+			return;
+		}
 		const req = requestFn(target, {
 			method: "GET",
 			headers: { authorization: `Bearer ${seam.bridgeBearer}` },
@@ -9016,8 +9032,14 @@ function bridgeGet(seam, path, timeoutMs) {
 				});
 			})().catch(reject);
 		});
+		const abort = () => req.destroy(new DOMException(`bridge GET ${path} aborted`, "AbortError"));
+		signal?.addEventListener("abort", abort, { once: true });
 		req.on("timeout", () => req.destroy(/* @__PURE__ */ new Error(`bridge GET ${path} timed out`)));
-		req.on("error", reject);
+		req.on("error", (error) => {
+			signal?.removeEventListener("abort", abort);
+			reject(error);
+		});
+		req.on("close", () => signal?.removeEventListener("abort", abort));
 		req.end();
 	});
 }
@@ -9026,30 +9048,44 @@ function bridgeGet(seam, path, timeoutMs) {
 *
 * The bridge answers exactly this question and 404s `no backend matches model "…"`, which is the
 * error a child would otherwise discover after it was spawned and metered. Returns `undefined`
-* when the route resolves; otherwise the operator-facing reason it did not. FAIL CLOSED: a
-* transport error and an unexpected status are both reasons, never a silent pass.
+* when the route resolves; otherwise it returns the reason and whether the failure can recover.
+* A transport error and an unexpected status never become a silent pass.
 */
-async function bridgeModelRouteRefusal(seam, wireModel) {
+async function bridgeModelRouteRefusal(seam, wireModel, signal) {
 	const base = seam.bridgeUrl.replace(/\/$/, "");
 	let answer;
 	try {
-		answer = await bridgeGet(seam, `/v1/capabilities?model=${encodeURIComponent(wireModel)}`, BRIDGE_RUN_STATE_TIMEOUT_MS);
+		answer = await bridgeGet(seam, `/v1/capabilities?model=${encodeURIComponent(wireModel)}`, BRIDGE_RUN_STATE_TIMEOUT_MS, signal);
 	} catch (error) {
-		return `bridge ${base} did not answer for model ${JSON.stringify(wireModel)}: ${error instanceof Error ? error.message : String(error)}`;
+		if (signal?.aborted) throw error;
+		return {
+			detail: `bridge ${base} did not answer for model ${JSON.stringify(wireModel)}: ${error instanceof Error ? error.message : String(error)}`,
+			retryable: true
+		};
 	}
 	if (answer.status === 200) return void 0;
-	return answer.status === 404 ? `bridge ${base} routes no backend for model ${JSON.stringify(wireModel)}` : `bridge ${base} answered ${answer.status} for model ${JSON.stringify(wireModel)}`;
+	if (answer.status === 404) return {
+		detail: `bridge ${base} routes no backend for model ${JSON.stringify(wireModel)}`,
+		retryable: false,
+		status: answer.status
+	};
+	return {
+		detail: `bridge ${base} answered ${answer.status} for model ${JSON.stringify(wireModel)}`,
+		retryable: answer.status === 408 || answer.status === 429 || answer.status >= 500,
+		status: answer.status
+	};
 }
 /**
-* `GET /health` → `admission.{active,maxActive}`, or `undefined` when the bridge does not report
-* them. ADVISORY by nature — admission fills and drains — so an unanswered or admission-less
-* `/health` is not evidence about capacity and must not be read as one.
+* Read the default bulk lane from `GET /health`. Runtime sends no reserved-client header, so
+* overall capacity can look free while the lane this request will use is already full. Older
+* bridges expose only the overall counters; those retain the prior fallback.
 */
-async function bridgeAdmissionRead(seam) {
+async function bridgeAdmissionRefusal(seam, signal) {
 	let answer;
 	try {
-		answer = await bridgeGet(seam, "/health", BRIDGE_RUN_STATE_TIMEOUT_MS);
-	} catch {
+		answer = await bridgeGet(seam, "/health", BRIDGE_RUN_STATE_TIMEOUT_MS, signal);
+	} catch (error) {
+		if (signal?.aborted) throw error;
 		return;
 	}
 	let parsed;
@@ -9061,11 +9097,15 @@ async function bridgeAdmissionRead(seam) {
 	const admission = parsed?.admission;
 	const active = admission?.active;
 	const maxActive = admission?.maxActive;
-	if (typeof active !== "number" || typeof maxActive !== "number" || maxActive <= 0) return;
-	return {
-		active,
-		maxActive
-	};
+	const bulkActive = admission?.activeByClass?.bulk;
+	const bulkMaxActive = admission?.bulkMaxActive;
+	if (typeof bulkActive === "number" && Number.isFinite(bulkActive) && bulkActive >= 0 && typeof bulkMaxActive === "number" && Number.isFinite(bulkMaxActive) && bulkMaxActive >= 0) {
+		if (bulkActive < bulkMaxActive) return void 0;
+		const total = typeof active === "number" && typeof maxActive === "number" ? ` (total active ${active} of maxActive ${maxActive})` : "";
+		return `bridge ${seam.bridgeUrl.replace(/\/$/, "")} bulk admission is full: active ${bulkActive} of bulkMaxActive ${bulkMaxActive}${total}`;
+	}
+	if (typeof active !== "number" || !Number.isFinite(active) || active < 0 || typeof maxActive !== "number" || !Number.isFinite(maxActive) || maxActive <= 0 || active < maxActive) return;
+	return `bridge ${seam.bridgeUrl.replace(/\/$/, "")} admission is full: active ${active} of maxActive ${maxActive}`;
 }
 /** `GET /v1/runs/:id` — the bridge's durable-run registry read. Resolves `undefined` for any
 *  non-200 or non-conforming body rather than throwing: this is only ever an observability read. */
@@ -9148,7 +9188,7 @@ async function* streamBridgeSession(args) {
 	};
 	if (harnessStore) await readHarnessStoreDelta(harnessStore, observation);
 	let nextPrompt = taskToPrompt(args.task);
-	for (let t = 0; args.maxTurns === 0 || t < args.maxTurns; t += 1) {
+	for (let t = 0; args.maxTurns === 0 || t < args.maxTurns;) {
 		if (args.stopSignal?.aborted) {
 			observation.note = "settled after completion request";
 			break;
@@ -9187,6 +9227,38 @@ async function* streamBridgeSession(args) {
 			external.removeEventListener("abort", abortTurn);
 			if (timer) clearTimeout(timer);
 		};
+		let initialModelCredential;
+		const preflightSignal = args.stopSignal === void 0 ? turnController.signal : AbortSignal.any([turnController.signal, args.stopSignal]);
+		try {
+			await assertBridgeExecutionCapabilities(seam, preflightSignal, args.runtimeAttachments !== void 0);
+			if (preflightSignal.aborted) throw new DOMException("bridgeExecutor: aborted before bridge dispatch", "AbortError");
+			initialModelCredential = await runAbortable(() => resolveBridgeModelCredential(seam.modelCredential, "bridgeExecutor"), preflightSignal, "bridgeExecutor: credential preflight aborted");
+			if (preflightSignal.aborted) throw new DOMException("bridgeExecutor: aborted before bridge dispatch", "AbortError");
+		} catch (error) {
+			if (args.stopSignal?.aborted) {
+				cleanup();
+				observation.note = "settled after completion request";
+				break;
+			}
+			const interruptedBeforeDispatch = interruptSig.aborted && !args.signal.aborted && !args.controller.signal.aborted;
+			try {
+				args.onProviderAttemptStart();
+				args.onProviderDispatchNotStarted();
+			} finally {
+				cleanup();
+			}
+			if (interruptedBeforeDispatch) {
+				observation.note = `turn ${turns + 1} interrupted before dispatch, resuming`;
+				continue;
+			}
+			throw error;
+		}
+		if (args.stopSignal?.aborted) {
+			observation.note = "settled after completion request";
+			cleanup();
+			break;
+		}
+		args.onProviderAttemptStart();
 		const activeRun = {
 			id: `bridge-run-${randomUUID()}`,
 			transportAttempts: 0,
@@ -9228,17 +9300,12 @@ async function* streamBridgeSession(args) {
 			}
 		};
 		try {
-			if (args.stopSignal?.aborted) {
-				observation.note = "settled after completion request";
-				break;
-			}
-			args.onProviderAttemptStart();
 			for await (const chunk of streamDurableBridgeRun({
 				seam,
+				initialModelCredential,
 				profile: args.profile,
 				sessionId: args.sessionId,
 				body: requestBody,
-				requiresRuntimeAttachments: args.runtimeAttachments !== void 0,
 				signal: turnController.signal,
 				run: activeRun,
 				maxReconnects: args.maxReconnects,
@@ -9364,6 +9431,7 @@ async function* streamBridgeSession(args) {
 		}
 		if (interruptSig.aborted && !args.signal.aborted && !args.controller.signal.aborted) interrupted = true;
 		turns += 1;
+		t += 1;
 		observation.turns = turns;
 		observation.activity.push({
 			at: Date.now(),
@@ -9562,16 +9630,16 @@ const BRIDGE_BRUTAL_KILL_WAIT_MS = 150;
 * cannot prove continuity fails instead of returning a plausible partial answer.
 */
 async function* streamDurableBridgeRun(args) {
-	await assertBridgeExecutionCapabilities(args.seam, args.signal, args.requiresRuntimeAttachments);
 	let reconnects = 0;
 	let pendingUpstreamError;
 	for (;;) {
 		let res;
 		try {
+			const modelCredential = args.run.transportAttempts === 0 ? args.initialModelCredential : await runAbortable(() => resolveBridgeModelCredential(args.seam.modelCredential, "bridgeExecutor"), args.signal, "bridgeExecutor: reconnect credential lookup aborted");
 			args.run.transportAttempts += 1;
 			res = await bridgeStreamPost(args.seam.bridgeUrl, {
 				bearer: args.seam.bridgeBearer,
-				modelCredential: args.seam.modelCredential,
+				modelCredential,
 				sessionId: args.sessionId,
 				runId: args.run.id,
 				afterEventId: args.run.lastEventId,
@@ -9686,6 +9754,16 @@ async function assertBridgeExecutionCapabilities(seam, signal, requiresRuntimeAt
 		const attachments = body.capabilities?.runtimeAttachments;
 		if (attachments === null || typeof attachments !== "object" || attachments.mcp !== true) throw new ValidationError(`bridgeExecutor: bridge at ${seam.bridgeUrl} does not advertise capabilities.runtimeAttachments.mcp; upgrade cli-bridge to a version that carries Runtime MCP attachments outside the bound AgentProfile`);
 	}
+	const routeRefusal = await bridgeModelRouteRefusal(seam, seam.model, signal);
+	if (routeRefusal !== void 0) {
+		if (routeRefusal.retryable) throw new BackendTransportError("bridge", `bridgeExecutor: ${routeRefusal.detail}`, {
+			...routeRefusal.status === void 0 ? {} : { status: routeRefusal.status },
+			providerDispatch: "not_started"
+		});
+		throw new ValidationError(`bridgeExecutor: ${routeRefusal.detail}`);
+	}
+	const admissionRefusal = await bridgeAdmissionRefusal(seam, signal);
+	if (admissionRefusal !== void 0) throw new BackendTransportError("bridge", `bridgeExecutor: ${admissionRefusal}`, { providerDispatch: "not_started" });
 }
 /**
 * POST one streamed turn to the cli-bridge over the `node:http(s)` core client
@@ -9700,7 +9778,6 @@ async function assertBridgeExecutionCapabilities(seam, signal, requiresRuntimeAt
 * shared `parseSseChatStream` consumes it unchanged.
 */
 async function bridgeStreamPost(url, args) {
-	const modelCredential = await resolveBridgeModelCredential(args.modelCredential, "bridgeExecutor");
 	const target = new URL(`${url.replace(/\/$/, "")}/v1/chat/completions`);
 	const payload = JSON.stringify(args.body);
 	const requestFn = target.protocol === "https:" ? request$1 : request;
@@ -9715,9 +9792,9 @@ async function bridgeStreamPost(url, args) {
 				...args.traceHeaders,
 				"content-type": "application/json",
 				authorization: `Bearer ${args.bearer}`,
-				...modelCredential === void 0 ? {} : {
-					[bridgeModelCredentialHeader]: modelCredential.token,
-					[bridgeModelBaseUrlHeader]: modelCredential.baseUrl
+				...args.modelCredential === void 0 ? {} : {
+					[bridgeModelCredentialHeader]: args.modelCredential.token,
+					[bridgeModelBaseUrlHeader]: args.modelCredential.baseUrl
 				},
 				"x-session-id": args.sessionId,
 				"x-run-id": args.runId,
@@ -13621,6 +13698,10 @@ function createScope(args) {
 		};
 		if (opts.key !== void 0) {
 			const existing = keyed.get(opts.key);
+			if (existing?.state === "in-doubt") return {
+				ok: false,
+				reason: "in-doubt"
+			};
 			if (existing !== void 0) {
 				prepared = prepare();
 				if (!isCompleteIdentity(prepared.identity)) return {
@@ -13649,10 +13730,6 @@ function createScope(args) {
 				priorId: existing.id,
 				reason: existing.reason
 			};
-			else if (existing?.state === "in-doubt") prior = {
-				state: "lost",
-				priorId: existing.id
-			};
 		}
 		if (args.maxDepth !== void 0 && args.depth >= args.maxDepth) return {
 			ok: false,
@@ -16075,10 +16152,10 @@ async function drainLiveChildren(scope, controller, settleGraceMs = 0) {
 	const view = scope.view;
 	if (!(view.inFlight > 0 || view.waiting > 0)) return unconfirmedTeardowns(scope);
 	let graceTimer;
-	if (settleGraceMs > 0 && !controller.signal.aborted) {
+	if (settleGraceMs !== null && settleGraceMs > 0 && !controller.signal.aborted) {
 		graceTimer = setTimeout(() => controller.abort("root driver failed; child settle grace expired"), settleGraceMs);
 		graceTimer.unref?.();
-	} else if (!controller.signal.aborted) controller.abort("root driver failed; no child settle grace configured");
+	} else if (settleGraceMs !== null && !controller.signal.aborted) controller.abort("root driver failed; no child settle grace configured");
 	try {
 		await drainCursor(scope);
 	} finally {
@@ -16106,9 +16183,11 @@ function describeUnconfirmed(scope) {
 	const named = scope.workerCapacity.unconfirmed.map((node) => `${node.id} (${node.label}, ${node.runtime}, ${node.status})`).join(", ");
 	return `${scope.workerCapacity.live} executor resource(s) not confirmed destroyed${named.length > 0 ? `: ${named}` : ""}`;
 }
-/** The settle window a failed driver's children actually get: the caller's grace, never past the
-*  run's own deadline. `0` (the default) keeps the historical immediate cascade. */
+/** The settle window a driver's children actually get: the caller's grace, never past an explicit
+*  run deadline. `null` means no timer. `0` (the default) cascades immediately. */
 function boundedSettleGrace(graceMs, deadlineAtMs, now) {
+	if (graceMs === null && deadlineAtMs <= 0) return null;
+	if (graceMs === null) return Math.max(0, deadlineAtMs - now());
 	if (graceMs === void 0 || graceMs <= 0) return 0;
 	if (deadlineAtMs <= 0) return graceMs;
 	return Math.max(0, Math.min(graceMs, deadlineAtMs - now()));
@@ -16335,6 +16414,6 @@ function resolveRedactor(redact) {
 	return (value) => defaultRedactor(redact(value));
 }
 //#endregion
-export { createBudgetPool as $, addHarnessUsage as $t, interactiveAdmissionSeamKey as A, DEFAULT_LOCAL_HARNESS as An, claimsAuthority as At, reconnectRetainedRun as B, fullProfileMaterialization as Bn, createSandboxForSpec as Bt, settledToIteration as C, sanitizeKnowledgeReadinessReport as Cn, DEFAULT_STALL_AFTER_MS as Ct, timerAt as D, captureWorktreeDiff as Dn, AUTHORITY_MARKERS as Dt, pollFor as E, runWorktreeHarness as En, createInbox as Et, workerInteractiveBindingFile as F, CodexExecutionDiagnosticError as Fn, isLiveNodeStatus as Ft, destroyInteractiveEnvironment as G, promptResourceProfileMaterialization as Gn, probeSandboxCapabilities as Gt, startRetainedRun as H, promptControlProfileMaterialization as Hn, isTerminalDecision as Ht, workerInteractiveBindingsDir as I, AGENT_PROFILE_MATERIALIZATION_AXES as In, isTerminalNodeStatus as It, queueOf as J, sandboxActProfileMaterialization as Jn, readPromptOptions as Jt, effectiveConcurrency as K, renderProfileMaterializationIssues as Kn, acquireSandbox as Kt, reconnectRetainedInteractiveRun as L, assertProfileMaterialization as Ln, createInPlaceCliExecutor as Lt, workerInteractiveAdmissionFile as M, harnessSupportsReasoningEffort as Mn, isPeerMailEnvelope as Mt, attachWorker as N, localHarnessExecutable as Nn, peerMailTools as Nt, validateWaitSpec as O, createWorktree as On, DEFAULT_PEER_MAIL_LIMITS as Ot, readWorkerInteractiveBinding as P, parseCodexTokenUsage as Pn, peerMailVerbNames as Pt, assertValidBudget as Q, observedModelMatchesDeclared as Qt, recoverRetainedInteractiveRun as R, controlProfileMaterialization as Rn, taskToPrompt as Rt, scopeOwnerExecutorNodeContext as S, sanitizeAgentRuntimeEvent as Sn, sandboxSessionTraceSource as St, isWaitOutcome as T, runSettledCommand as Tn, readWorkerProgress as Tt, startRetainedRunInEnvironment as U, promptModelProfileMaterialization as Un, runAgentRounds as Ut, recoverRetainedRun as V, profileMaterializationAxes$1 as Vn, defaultSelectWinner as Vt, retainedCreateMaterial as W, promptOnlyProfileMaterialization as Wn, createSandboxLineage as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, validateProfileMaterialization as Xn, runBrainLoop as Xt, rollingDispatch as Y, unsupportedProfileDimensions as Yn, routerBrain as Yt, teardownExecutor as Z, worktreeCliProfileMaterialization as Zn, canonicalObservedModelParts as Zt, createScope as _, padSpanId as _n, workerTraceSeamKey as _t, createSupervisor as a, readTraceContextFromEnv as an, bridgeStopSignalKey as at, meterRuntimeOwnedProviderAttempt as b, createRuntimeEventCollector as bn, createPushTraceSource as bt, uncertainSpawnBudgets as c, buildLoopOtelSpans as cn, cliWorktreeExecutor as ct, pickBestDelivered as d, createOpenInferenceFileExporter as dn, snapshotExecutorConfig as dt, createCodexRolloutStoreReader as en, spendFromUsageEvents as et, runFinalizer as f, createOtelExporter as fn, createWorktreeCliExecutor as ft, beginScopeOwnerAttempt as g, loopEventToOtelSpan as gn, workerTraceHeaders as gt, withDriverExecutor as h, generateSpanId as hn, workerTraceEnv as ht, createRootHandle as i, mergeTraceEnv as in, bridgeRuntimeAttachmentsKey as it, readWorkerInteractiveAdmissions as j, LOCAL_HARNESSES as jn, createPeerMailbox as jt, waitUntil as k, removeWorktree as kn, PEER_MAIL_WIRE_KEY as kt, bestDelivered as l, buildLoopSpanNodes as ln, createExecutor as lt, driverChild as m, flatOtelSpan as mn, readWorkerTraceContext as mt, defaultRedactorIdentityMaterial as n, readCodexRolloutSession as nn, bridgeAdmissionRead as nt, maxSeqOf as o, traceContextToEnv as on, captureReusableExecutorConfig as ot, runTree as p, exportEvalRuns as pn, WORKER_TRACE_PROPAGATION as pt, freeSlots as q, renderUnsupported as qn, assertBoxlessPromptOptions as qt, resolveRedactor as r, createPropagatingTraceEmitter as rn, bridgeModelRouteRefusal as rt, sumMeasuredSpendFromEvents as s, INTELLIGENCE_WIRE_VERSION as sn, cliInPlaceExecutor as st, defaultRedactor as t, harnessUsageIsEmpty as tn, bindReusableExecutorExecutionId as tt, collectDelivered as u, buildRuntimeEventOtelSpans as un, createExecutorRegistry as ut, deriveNodeExecutionIdentity as v, padTraceId as vn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as vt, createWaitProbes as w, sanitizeRuntimeStreamEvent as wn, createActivityLog as wt, recordScopeOwnerMaterialization as x, createRuntimeStreamEventCollector as xn, decodeToolPart as xt, meterRuntimeOwnedAccounting as y, toOtelAttributes as yn, createSteerableSandboxSession as yt, startRetainedInteractiveRun as z, defineProfileMaterializationContract as zn, TERMINAL_DECISIONS as zt };
+export { createBudgetPool as $, addHarnessUsage as $t, interactiveAdmissionSeamKey as A, DEFAULT_LOCAL_HARNESS as An, claimsAuthority as At, reconnectRetainedRun as B, fullProfileMaterialization as Bn, createSandboxForSpec as Bt, settledToIteration as C, sanitizeKnowledgeReadinessReport as Cn, DEFAULT_STALL_AFTER_MS as Ct, timerAt as D, captureWorktreeDiff as Dn, AUTHORITY_MARKERS as Dt, pollFor as E, runWorktreeHarness as En, createInbox as Et, workerInteractiveBindingFile as F, CodexExecutionDiagnosticError as Fn, isLiveNodeStatus as Ft, destroyInteractiveEnvironment as G, promptResourceProfileMaterialization as Gn, probeSandboxCapabilities as Gt, startRetainedRun as H, promptControlProfileMaterialization as Hn, isTerminalDecision as Ht, workerInteractiveBindingsDir as I, AGENT_PROFILE_MATERIALIZATION_AXES as In, isTerminalNodeStatus as It, queueOf as J, sandboxActProfileMaterialization as Jn, readPromptOptions as Jt, effectiveConcurrency as K, renderProfileMaterializationIssues as Kn, acquireSandbox as Kt, reconnectRetainedInteractiveRun as L, assertProfileMaterialization as Ln, createInPlaceCliExecutor as Lt, workerInteractiveAdmissionFile as M, harnessSupportsReasoningEffort as Mn, isPeerMailEnvelope as Mt, attachWorker as N, localHarnessExecutable as Nn, peerMailTools as Nt, validateWaitSpec as O, createWorktree as On, DEFAULT_PEER_MAIL_LIMITS as Ot, readWorkerInteractiveBinding as P, parseCodexTokenUsage as Pn, peerMailVerbNames as Pt, assertValidBudget as Q, observedModelMatchesDeclared as Qt, recoverRetainedInteractiveRun as R, controlProfileMaterialization as Rn, taskToPrompt as Rt, scopeOwnerExecutorNodeContext as S, sanitizeAgentRuntimeEvent as Sn, sandboxSessionTraceSource as St, isWaitOutcome as T, runSettledCommand as Tn, readWorkerProgress as Tt, startRetainedRunInEnvironment as U, promptModelProfileMaterialization as Un, runAgentRounds as Ut, recoverRetainedRun as V, profileMaterializationAxes$1 as Vn, defaultSelectWinner as Vt, retainedCreateMaterial as W, promptOnlyProfileMaterialization as Wn, createSandboxLineage as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, validateProfileMaterialization as Xn, runBrainLoop as Xt, rollingDispatch as Y, unsupportedProfileDimensions as Yn, routerBrain as Yt, teardownExecutor as Z, worktreeCliProfileMaterialization as Zn, canonicalObservedModelParts as Zt, createScope as _, padSpanId as _n, workerTraceSeamKey as _t, createSupervisor as a, readTraceContextFromEnv as an, bridgeStopSignalKey as at, meterRuntimeOwnedProviderAttempt as b, createRuntimeEventCollector as bn, createPushTraceSource as bt, uncertainSpawnBudgets as c, buildLoopOtelSpans as cn, cliWorktreeExecutor as ct, pickBestDelivered as d, createOpenInferenceFileExporter as dn, snapshotExecutorConfig as dt, createCodexRolloutStoreReader as en, spendFromUsageEvents as et, runFinalizer as f, createOtelExporter as fn, createWorktreeCliExecutor as ft, beginScopeOwnerAttempt as g, loopEventToOtelSpan as gn, workerTraceHeaders as gt, withDriverExecutor as h, generateSpanId as hn, workerTraceEnv as ht, createRootHandle as i, mergeTraceEnv as in, bridgeRuntimeAttachmentsKey as it, readWorkerInteractiveAdmissions as j, LOCAL_HARNESSES as jn, createPeerMailbox as jt, waitUntil as k, removeWorktree as kn, PEER_MAIL_WIRE_KEY as kt, bestDelivered as l, buildLoopSpanNodes as ln, createExecutor as lt, driverChild as m, flatOtelSpan as mn, readWorkerTraceContext as mt, defaultRedactorIdentityMaterial as n, readCodexRolloutSession as nn, bridgeAdmissionRefusal as nt, maxSeqOf as o, traceContextToEnv as on, captureReusableExecutorConfig as ot, runTree as p, exportEvalRuns as pn, WORKER_TRACE_PROPAGATION as pt, freeSlots as q, renderUnsupported as qn, assertBoxlessPromptOptions as qt, resolveRedactor as r, createPropagatingTraceEmitter as rn, bridgeModelRouteRefusal as rt, sumMeasuredSpendFromEvents as s, INTELLIGENCE_WIRE_VERSION as sn, cliInPlaceExecutor as st, defaultRedactor as t, harnessUsageIsEmpty as tn, bindReusableExecutorExecutionId as tt, collectDelivered as u, buildRuntimeEventOtelSpans as un, createExecutorRegistry as ut, deriveNodeExecutionIdentity as v, padTraceId as vn, DEFAULT_SANDBOX_STEERING_MAX_TURNS as vt, createWaitProbes as w, sanitizeRuntimeStreamEvent as wn, createActivityLog as wt, recordScopeOwnerMaterialization as x, createRuntimeStreamEventCollector as xn, decodeToolPart as xt, meterRuntimeOwnedAccounting as y, toOtelAttributes as yn, createSteerableSandboxSession as yt, startRetainedInteractiveRun as z, defineProfileMaterializationContract as zn, TERMINAL_DECISIONS as zt };
 
-//# sourceMappingURL=redact-Cn-WvchV.js.map
+//# sourceMappingURL=redact-D0OzQsyt.js.map