@tangle-network/agent-runtime 0.197.1 → 0.198.1

package/dist/materialization-Cy0oM8tb.js

@@ -1,672 +0,0 @@
-import { m as ValidationError } from "./errors-DodWX-cb.js";
-import { AgentExactRunControlRefSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
-import { randomUUID } from "node:crypto";
-//#region src/runtime/turn-input.ts
-/**
-* Copy only fields that describe a new provider turn.
-*
-* Session, replay, continuation, and transfer coordinates are runtime-owned
-* and are injected by the caller that owns that lifecycle. Keeping this copy
-* explicit also makes JavaScript callers subject to the same boundary.
-*/
-function freshTurnInput(input, runtime) {
-	return {
-		...input.prompt === void 0 ? {} : { prompt: input.prompt },
-		...input.parts === void 0 ? {} : { parts: input.parts },
-		...input.model === void 0 ? {} : { model: input.model },
-		...input.timeoutMs === void 0 ? {} : { timeoutMs: input.timeoutMs },
-		...input.context === void 0 ? {} : { context: input.context },
-		...input.interactions === void 0 ? {} : { interactions: input.interactions },
-		...input.providerOptions === void 0 ? {} : { providerOptions: input.providerOptions },
-		...input.signal === void 0 ? {} : { signal: input.signal },
-		turnId: runtime.turnId,
-		detach: runtime.detach,
-		...runtime.sessionId === void 0 ? {} : { sessionId: runtime.sessionId },
-		...runtime.executionId === void 0 ? {} : { executionId: runtime.executionId },
-		...runtime.contextTransfer === void 0 ? {} : { contextTransfer: runtime.contextTransfer }
-	};
-}
-/** Project canonical turn parts onto the Sandbox prompt vocabulary once. */
-function promptFromAgentTurnInput(input) {
-	if (input.parts !== void 0) return input.parts.map(promptPartFromInputPart);
-	return input.prompt ?? providerMessageText(input.providerOptions) ?? "";
-}
-/** Project canonical turn controls onto the Sandbox prompt options once. */
-function promptOptionsFromAgentTurnInput(input) {
-	const backend = {
-		...(input.providerOptions?.backend && typeof input.providerOptions.backend === "object" && !Array.isArray(input.providerOptions.backend) ? input.providerOptions.backend : void 0) ?? {},
-		...input.interactions === void 0 ? {} : { interactions: input.interactions }
-	};
-	const runControlRef = input.controlRef === void 0 ? void 0 : AgentExactRunControlRefSchema.parse(input.controlRef);
-	return {
-		...input.sessionId === void 0 ? {} : { sessionId: input.sessionId },
-		...input.model === void 0 ? {} : { model: input.model },
-		...input.timeoutMs === void 0 ? {} : { timeoutMs: input.timeoutMs },
-		...input.context === void 0 ? {} : { context: input.context },
-		...input.signal === void 0 ? {} : { signal: input.signal },
-		...input.executionId === void 0 ? {} : { executionId: input.executionId },
-		...input.lastEventId === void 0 ? {} : { lastEventId: input.lastEventId },
-		...input.turnId === void 0 ? {} : { turnId: input.turnId },
-		...input.detach === void 0 ? {} : { detach: input.detach },
-		...runControlRef === void 0 ? {} : { runControlRef },
-		...Object.keys(backend).length === 0 ? {} : { backend }
-	};
-}
-/** Read a text fallback from provider-specific conversation options. */
-function providerMessageText(providerOptions) {
-	const messages = providerOptions?.messages;
-	if (!Array.isArray(messages)) return void 0;
-	for (let index = messages.length - 1; index >= 0; index -= 1) {
-		const message = messages[index];
-		if (!message || typeof message !== "object" || Array.isArray(message)) continue;
-		if (!("role" in message) || message.role !== "user") continue;
-		if (!("content" in message)) continue;
-		if (typeof message.content === "string") return message.content;
-	}
-}
-function promptPartFromInputPart(part) {
-	if (part.type === "text" || part.type === "image") return part;
-	if (part.content !== void 0 || part.path !== void 0) throw new Error("Sandbox file prompt parts require a URL; inline content and local paths are not representable");
-	if (!part.filename || !part.url) throw new Error("Sandbox file prompt parts require both filename and URL");
-	return {
-		type: "file",
-		filename: part.filename,
-		...part.mediaType === void 0 ? {} : { mediaType: part.mediaType },
-		url: part.url
-	};
-}
-//#endregion
-//#region src/runtime/retained-run-binding.ts
-function exactSession(environment, controlRef) {
-	if (environment.id !== controlRef.environmentId || environment.provider !== controlRef.provider) throw new Error("provider reconstructed a different retained environment");
-	if (!environment.session || !controlRef.sessionId) throw new Error("retained run control requires a provider session id");
-	const session = environment.session(controlRef.sessionId, { controlRef });
-	if (session.id !== controlRef.sessionId) throw new Error("provider reconstructed a different session");
-	if (session.controlRef === void 0) throw new Error("provider session did not return its provider-owned run control reference");
-	const currentControlRef = AgentExactRunControlRefSchema.parse(session.controlRef);
-	if (!sameControlCoordinates(currentControlRef, controlRef)) throw new Error("provider session reconstructed a different retained session");
-	if (canonicalCandidateDigest(currentControlRef) !== canonicalCandidateDigest(controlRef)) throw new Error("provider session did not retain the exact run control reference");
-	return {
-		session,
-		controlRef: currentControlRef
-	};
-}
-function sameControlCoordinates(left, right) {
-	return canonicalCandidateDigest(left) === canonicalCandidateDigest(right);
-}
-function freezeControlRef(controlRef) {
-	return Object.freeze({ ...AgentExactRunControlRefSchema.parse(controlRef) });
-}
-function copyControlRef(controlRef) {
-	return { ...controlRef };
-}
-function exactControlRef(candidate, expected) {
-	if (!candidate) throw new Error("provider dispatch returned no durable run control reference");
-	const controlRef = AgentExactRunControlRefSchema.parse(candidate);
-	if (controlRef.provider !== expected.provider || controlRef.environmentId !== expected.environmentId || controlRef.sessionId !== expected.sessionId) throw new Error("provider dispatch returned control coordinates for another run");
-	return controlRef;
-}
-function exactContinuedControlRef(candidate, initial) {
-	const controlRef = AgentExactRunControlRefSchema.parse(candidate);
-	if (controlRef.provider !== initial.provider || controlRef.environmentId !== initial.environmentId || controlRef.sessionId !== initial.sessionId) throw new Error("provider continuation advanced to another retained session");
-	if (controlRef.runId === initial.runId && controlRef.executionId === initial.executionId) throw new Error("provider continuation did not return a new exact run execution");
-	return controlRef;
-}
-function assertInteractionBinding(controlRef, command) {
-	if (command.binding.runId !== controlRef.runId || command.binding.provider !== controlRef.provider || command.binding.environmentId !== controlRef.environmentId || command.binding.sessionId !== controlRef.sessionId || command.binding.executionId !== controlRef.executionId) throw new Error("interaction response command does not target this retained run");
-}
-function assertBoundaryBinding(controlRef, proof) {
-	if (proof.runId !== controlRef.runId || proof.provider !== controlRef.provider || proof.environmentId !== controlRef.environmentId || proof.sessionId !== controlRef.sessionId || proof.executionId !== controlRef.executionId || proof.requestDigest !== controlRef.requestDigest) throw new Error("native context proof does not identify this retained run");
-}
-function assertSequence(value, label) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative safe integer`);
-}
-function assertResultBinding(controlRef, result) {
-	if (result.sessionId !== controlRef.sessionId) throw new Error("provider returned a result for another retained session");
-	const metadata = result.metadata;
-	if (controlRef.executionId !== void 0 && metadata?.executionId !== controlRef.executionId) throw new Error("provider returned a result for another retained execution");
-	if (metadata?.runId !== controlRef.runId) throw new Error("provider returned a result for another retained run");
-	if (metadata?.requestDigest !== controlRef.requestDigest) throw new Error("provider returned a result for another retained request");
-}
-var RetainedRunProviderContractError = class extends Error {
-	code;
-	constructor(message, options = {}) {
-		super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
-		this.name = "RetainedRunProviderContractError";
-		this.code = options.code ?? "RETAINED_RUN_PROVIDER_CONTRACT_ERROR";
-	}
-};
-function cancellationRequest(controlRef, operationId, reason) {
-	const material = {
-		operationId,
-		run: AgentExactRunControlRefSchema.parse(controlRef),
-		...reason === void 0 ? {} : { reason }
-	};
-	return AgentRunCancellationRequestSchema.parse({
-		...material,
-		requestDigest: agentRunCancellationRequestDigest(material)
-	});
-}
-async function exactSessionCancel(session, request, options) {
-	if (!session.cancelRun) throw new Error("provider session does not expose durable cancellation operations");
-	let acknowledgement;
-	try {
-		acknowledgement = await awaitAbortable(Promise.resolve().then(() => session.cancelRun(request, options)), options.signal);
-	} catch (error) {
-		if (error instanceof RetainedRunProviderContractError) throw error;
-		throw error;
-	}
-	let exactAcknowledgement;
-	try {
-		exactAcknowledgement = AgentRunCancellationAcknowledgementSchema.parse(acknowledgement);
-	} catch {
-		throw new RetainedRunProviderContractError("provider returned an invalid retained cancellation acknowledgement");
-	}
-	if (!agentRunCancellationAcknowledgementMatchesRequest(request, exactAcknowledgement)) throw new RetainedRunProviderContractError("provider returned a retained cancellation acknowledgement for another request");
-	return exactAcknowledgement;
-}
-function hasDurableCancel(session) {
-	return typeof session.cancelRun === "function";
-}
-async function awaitAbortable(work, signal) {
-	if (signal === void 0) return await work;
-	if (signal.aborted) {
-		Promise.resolve(work).catch(() => void 0);
-		throw abortError(signal.reason);
-	}
-	return await new Promise((resolve, reject) => {
-		let settled = false;
-		const cleanup = () => signal.removeEventListener("abort", onAbort);
-		const onAbort = () => {
-			queueMicrotask(() => {
-				if (settled) return;
-				settled = true;
-				cleanup();
-				reject(abortError(signal.reason));
-			});
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-		Promise.resolve(work).then((value) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			resolve(value);
-		}, (error) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			reject(error);
-		});
-	});
-}
-async function exactSessionResult(session) {
-	return session.result();
-}
-function assertEventBinding(source, controlRef) {
-	const transport = isRecord(source) ? source : void 0;
-	const payload = isRecord(source.data) ? source.data : void 0;
-	const providerEvent = isRecord(source.providerEvent) ? source.providerEvent : void 0;
-	const bindings = [
-		{
-			value: transport,
-			checkSessionId: true
-		},
-		{
-			value: payload,
-			checkSessionId: source.type !== "session.updated"
-		},
-		{
-			value: providerEvent,
-			checkSessionId: true
-		}
-	];
-	for (const { value, checkSessionId } of bindings) {
-		if (value === void 0) continue;
-		if (value.runId !== void 0 && value.runId !== controlRef.runId) throw new Error("provider returned an event for another retained run");
-		if (value.executionId !== void 0 && value.executionId !== controlRef.executionId) throw new Error("provider returned an event for another retained execution");
-		if (checkSessionId && value.sessionId !== void 0 && value.sessionId !== controlRef.sessionId) throw new Error("provider returned an event for another retained session");
-	}
-}
-/** Validate the nested coordinates carried by a canonical interaction request. */
-function assertCanonicalEventBinding(controlRef, event) {
-	if (event.type !== "interaction") return;
-	const binding = event.request.binding;
-	if (binding.runId !== controlRef.runId || binding.provider !== controlRef.provider || binding.environmentId !== controlRef.environmentId || binding.sessionId !== controlRef.sessionId || binding.executionId !== controlRef.executionId || binding.interactionId !== event.request.id) throw new Error("provider returned an interaction for another retained execution");
-}
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function assertStableText(value, label) {
-	if (value.length === 0 || value.trim() !== value) throw new Error(`${label} must be non-empty and have no outer whitespace`);
-}
-function abortError(reason) {
-	const error = new Error(reason instanceof Error ? reason.message : reason === void 0 ? "aborted" : String(reason));
-	error.name = "AbortError";
-	return error;
-}
-function assertWaitDuration(value, label) {
-	if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative safe integer`);
-}
-/**
-* Whether a session can still change state.
-*
-* Exhaustive over `AgentSessionStatus` by construction: the map below is `satisfies
-* Record<AgentSessionStatus, boolean>`, so a member added upstream fails to compile here instead of
-* being silently classified as non-terminal. Written as a boolean chain, `stopped` was missing —
-* and a `status({ waitMs })` call on an already-stopped session then polled every 25 ms for the
-* whole wait before returning the answer it already had at the first snapshot.
-*
-* `unknown` is deliberately NOT terminal: it says the provider could not tell us, which is the one
-* state where continuing to poll is the point. That differs from
-* `sandboxSessionStatusFromAgentSessionStatus`, which projects `unknown` to `failed` because a run
-* RESULT must never claim success without proof — a different question about the same word.
-*/
-const sessionStatusIsTerminal = {
-	pending: false,
-	provisioning: false,
-	running: false,
-	unknown: false,
-	stopped: true,
-	completed: true,
-	cancelled: true,
-	failed: true,
-	expired: true
-};
-function isTerminalSessionStatus(status) {
-	return status !== null && sessionStatusIsTerminal[status];
-}
-function delay(ms, signal) {
-	if (signal?.aborted) return Promise.reject(abortError(signal.reason));
-	return new Promise((resolveDelay, rejectDelay) => {
-		const timer = setTimeout(finish, ms);
-		function finish() {
-			signal?.removeEventListener("abort", onAbort);
-			resolveDelay();
-		}
-		function onAbort() {
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", onAbort);
-			rejectDelay(abortError(signal?.reason));
-		}
-		signal?.addEventListener("abort", onAbort, { once: true });
-	});
-}
-//#endregion
-//#region src/runtime/supervise/snapshot.ts
-/** Deeply detach and freeze untrusted data at a runtime decision boundary. The clone prevents the
-* caller from mutating it later; the freeze prevents downstream code from mutating the snapshot. */
-function detachedSnapshot(value, context) {
-	try {
-		return deepFreeze(structuredClone(value));
-	} catch (error) {
-		throw new ValidationError(`${context}: input must be structured-cloneable`, { cause: error });
-	}
-}
-/** Detach a value from its caller and freeze it, without the `ValidationError` framing
-*  {@link detachedSnapshot} adds. For a boundary that has already validated its input. */
-function detachedFrozen(value) {
-	return deepFreeze(structuredClone(value));
-}
-function deepFreeze(value, seen = /* @__PURE__ */ new Set()) {
-	if (value === null || typeof value !== "object" || ArrayBuffer.isView(value) || seen.has(value)) return value;
-	seen.add(value);
-	for (const child of Object.values(value)) deepFreeze(child, seen);
-	return Object.freeze(value);
-}
-//#endregion
-//#region src/runtime/supervise/materialization.ts
-const runtimeOwnedExecutorMaterializations = /* @__PURE__ */ new WeakMap();
-const runtimeOwnedScopeOwners = /* @__PURE__ */ new WeakMap();
-const runtimeOwnedExecutorProviderEvidenceState = /* @__PURE__ */ new WeakMap();
-const runtimeOwnedDriveHarnessProviderEvidenceState = /* @__PURE__ */ new WeakMap();
-const declarationKeys = /* @__PURE__ */ new Set([
-	"effectiveProfile",
-	"authoredProfile",
-	"backend",
-	"model",
-	"execution",
-	"materializer",
-	"plan",
-	"platformAttachments"
-]);
-/**
-* Bind a declaration to a runtime-owned executor without putting an attestable method on the
-* public Executor interface. This module is not a package export: arbitrary caller executors stay
-* unknown even if they add a lookalike `materialization()` property.
-*/
-function attestRuntimeOwnedExecutor(executor, declaration, binding) {
-	runtimeOwnedExecutorMaterializations.set(executor, { current: Object.freeze({
-		kind: "known",
-		declaration: detachedSnapshot(declaration, "runtime-owned executor materialization"),
-		...binding === void 0 ? {} : { binding: detachedSnapshot(binding, "runtime-owned executor execution binding") }
-	}) });
-	ensureProviderEvidenceState(executor);
-	return executor;
-}
-/** Brand an external Runtime executor whose exact remote materialization is provable only after
-* its terminal protocol acknowledgement. The declaration is a planned authority check, never a
-* known receipt; callers must finalize this same object after validating the acknowledgement. */
-function attestRuntimeOwnedPendingExecutor(executor, runtime, declaration, binding) {
-	runtimeOwnedExecutorMaterializations.set(executor, { current: Object.freeze({
-		kind: "pending",
-		runtime,
-		declaration: detachedSnapshot(declaration, "pending executor materialization"),
-		binding: detachedSnapshot(binding, "pending executor execution binding")
-	}) });
-	return executor;
-}
-/** Replace a private pending brand with terminally acknowledged evidence. A caller-owned executor
-* cannot enter this path because only this module can create the pending WeakMap entry. */
-function finalizeRuntimeOwnedPendingExecutor(executor, declaration, binding) {
-	const ref = runtimeOwnedExecutorMaterializations.get(executor);
-	if (ref?.current.kind !== "pending" || ref.current.runtime !== executor.runtime) throw new ValidationError("executor materialization: terminal acknowledgement has no matching Runtime-owned pending executor");
-	ref.current = Object.freeze({
-		kind: "known",
-		declaration: detachedSnapshot(declaration, "runtime-owned executor materialization"),
-		binding: detachedSnapshot(binding, "runtime-owned executor execution binding")
-	});
-	return executor;
-}
-/** Mark a runtime-owned orchestration executor whose exact leaf declaration is published through
-* its private nested Scope before the first backend inference. Arbitrary executors cannot opt in. */
-function attestRuntimeOwnedDeferredExecutor(executor, runtime) {
-	runtimeOwnedExecutorMaterializations.set(executor, { current: Object.freeze({
-		kind: "deferred",
-		runtime
-	}) });
-	return executor;
-}
-/** Preserve the runtime-owned attestation when a trusted wrapper changes result semantics only. */
-function inheritRuntimeOwnedExecutorAttestation(source, wrapper) {
-	const ref = runtimeOwnedExecutorMaterializations.get(source);
-	if (ref !== void 0) runtimeOwnedExecutorMaterializations.set(wrapper, ref);
-	const providerState = ensureProviderEvidenceState(source);
-	runtimeOwnedExecutorProviderEvidenceState.set(wrapper, providerState);
-	return wrapper;
-}
-function ensureProviderEvidenceState(executor) {
-	const existing = runtimeOwnedExecutorProviderEvidenceState.get(executor);
-	if (existing !== void 0) return existing;
-	const state = { attempts: [] };
-	runtimeOwnedExecutorProviderEvidenceState.set(executor, state);
-	return state;
-}
-/** Read a declaration only when Runtime itself branded this exact executor object. */
-function runtimeOwnedExecutorMaterialization(executor) {
-	const attestation = runtimeOwnedExecutorMaterializations.get(executor)?.current;
-	return attestation?.kind === "known" ? attestation.declaration : void 0;
-}
-/** Read one attempt binding only from the private brand on this exact executor object. */
-function runtimeOwnedExecutorExecutionBinding(executor) {
-	const attestation = runtimeOwnedExecutorMaterializations.get(executor)?.current;
-	return attestation?.kind === "known" ? attestation.binding : void 0;
-}
-/** Read a planned external declaration only for Runtime's private pending brand. This is useful for
-* pre-execution authority checks, but must never be turned into a known durable receipt. */
-function runtimeOwnedPendingExecutorMaterialization(executor) {
-	const attestation = runtimeOwnedExecutorMaterializations.get(executor)?.current;
-	return attestation?.kind === "pending" ? {
-		runtime: attestation.runtime,
-		declaration: attestation.declaration,
-		binding: attestation.binding
-	} : void 0;
-}
-/** Read the expected leaf runtime only for a privately branded deferred orchestration executor. */
-function runtimeOwnedDeferredExecutorRuntime(executor) {
-	const attestation = runtimeOwnedExecutorMaterializations.get(executor)?.current;
-	return attestation?.kind === "deferred" ? attestation.runtime : void 0;
-}
-/** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */
-function attestRuntimeOwnedScopeOwner(owner, runtime) {
-	runtimeOwnedScopeOwners.set(owner, runtime);
-	return owner;
-}
-/** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents
-* deliberately have no entry even if they add lookalike fields. */
-function runtimeOwnedScopeOwnerRuntime(owner) {
-	return runtimeOwnedScopeOwners.get(owner);
-}
-/** Mark one provider inference attempt on a Runtime-owned executor. */
-function recordRuntimeOwnedProviderAttemptStart(executor) {
-	ensureProviderEvidenceState(executor).attempts.push({ observations: [] });
-}
-/** Mark the current attempt as rejected before provider dispatch.
-*
-* The caller may use this only after consuming the Router-owned
-* `provider_dispatch: "not_started"` fact. Any other error stays an empty,
-* unknown attempt and must not be upgraded here.
-*/
-function recordRuntimeOwnedProviderDispatchNotStarted(executor) {
-	const attempt = ensureProviderEvidenceState(executor).attempts.at(-1);
-	if (attempt === void 0) throw new ValidationError("provider dispatch rejection arrived before an attempt started");
-	if (attempt.observations.length > 0 || attempt.identityConflict === true) throw new ValidationError("provider dispatch rejection arrived after provider identity evidence was observed");
-	attempt.providerDispatch = "not_started";
-}
-/** Record a trusted served model on the current provider attempt. */
-function recordRuntimeOwnedProviderModel(executor, model) {
-	const attempt = runtimeOwnedExecutorProviderEvidenceState.get(executor)?.attempts.at(-1);
-	if (attempt === void 0) throw new ValidationError("provider model observation arrived before an attempt started");
-	if (attempt.observations.at(-1) !== model) attempt.observations.push(model);
-}
-/** Convert process-local provider observations into a frozen, replayable evidence value. */
-function runtimeOwnedExecutorProviderEvidence(executor) {
-	const state = runtimeOwnedExecutorProviderEvidenceState.get(executor);
-	if (state === void 0 || state.attempts.length === 0) return void 0;
-	const attempts = Object.freeze(state.attempts.map((attempt) => Object.freeze({
-		observations: Object.freeze([...attempt.observations]),
-		...attempt.identityConflict ? { identityConflict: true } : {},
-		...attempt.providerDispatch === "not_started" ? { providerDispatch: "not_started" } : {}
-	})));
-	const models = Object.freeze([...new Set(attempts.flatMap((attempt) => attempt.observations))]);
-	const missing = attempts.some((attempt) => attempt.observations.length === 0 && attempt.providerDispatch !== "not_started");
-	const conflict = attempts.some((attempt) => attempt.identityConflict === true);
-	const served = attempts.some((attempt) => attempt.observations.length > 0);
-	return Object.freeze(missing || conflict || !served ? {
-		status: "unknown",
-		attempts,
-		models,
-		reason: conflict ? "provider-model-conflict" : "provider-model-missing"
-	} : {
-		status: "known",
-		attempts,
-		models
-	});
-}
-/** Mark the current provider attempt unusable after conflicting served identity metadata. */
-function recordRuntimeOwnedProviderIdentityConflict(executor) {
-	const attempt = ensureProviderEvidenceState(executor).attempts.at(-1);
-	if (attempt === void 0) throw new ValidationError("provider identity conflict arrived before an attempt started");
-	attempt.identityConflict = true;
-}
-/** Attach one executor's provider evidence to a Runtime-owned root drive for final projection. */
-function recordRuntimeOwnedDriveHarnessProviderEvidence(owner, evidence) {
-	if (evidence === void 0) return;
-	const prior = runtimeOwnedDriveHarnessProviderEvidenceState.get(owner);
-	if (prior === void 0) {
-		runtimeOwnedDriveHarnessProviderEvidenceState.set(owner, evidence);
-		return;
-	}
-	const attempts = Object.freeze([...prior.attempts, ...evidence.attempts]);
-	const models = Object.freeze([.../* @__PURE__ */ new Set([...prior.models, ...evidence.models])]);
-	const missing = attempts.some((attempt) => attempt.observations.length === 0 && attempt.providerDispatch !== "not_started");
-	const conflict = attempts.some((attempt) => attempt.identityConflict === true);
-	const served = attempts.some((attempt) => attempt.observations.length > 0);
-	runtimeOwnedDriveHarnessProviderEvidenceState.set(owner, Object.freeze(missing || conflict || !served ? {
-		status: "unknown",
-		attempts,
-		models,
-		reason: conflict ? "provider-model-conflict" : "provider-model-missing"
-	} : {
-		status: "known",
-		attempts,
-		models
-	}));
-}
-/** Read provider evidence recorded by a Runtime-owned root drive. */
-function runtimeOwnedDriveHarnessProviderEvidence(owner) {
-	return runtimeOwnedDriveHarnessProviderEvidenceState.get(owner);
-}
-/** Build one kernel-owned known receipt from a data-only executor declaration. */
-function knownMaterializationReceipt(input) {
-	const declaration = detachedSnapshot(input.declaration, "executor materialization");
-	assertExactDeclaration(declaration);
-	const effectiveProfile = agentProfileSchema.safeParse(declaration.effectiveProfile);
-	if (!effectiveProfile.success) throw new ValidationError("executor materialization: effectiveProfile must be an AgentProfile");
-	const authoredProfile = declaration.authoredProfile === void 0 ? effectiveProfile : agentProfileSchema.safeParse(declaration.authoredProfile);
-	if (!authoredProfile.success) throw new ValidationError("executor materialization: authoredProfile must be an AgentProfile");
-	assertNonEmpty(declaration.backend, "backend");
-	assertNonEmpty(declaration.materializer, "materializer");
-	assertNonEmpty(declaration.execution?.kind, "execution.kind");
-	assertNonEmpty(declaration.execution?.id, "execution.id");
-	assertModel(declaration.model);
-	let effectiveProfileDigest;
-	let materializationPlanDigest;
-	let platformAttachmentsDigest;
-	try {
-		effectiveProfileDigest = canonicalAgentProfileDigest(effectiveProfile.data);
-		if (canonicalAgentProfileDigest(authoredProfile.data) !== input.authoredProfileDigest) throw new ValidationError("executor materialization: authoredProfile conflicts with the admitted AgentProfile");
-		materializationPlanDigest = canonicalCandidateDigest(jsonWireSnapshot(declaration.plan));
-		platformAttachmentsDigest = declaration.platformAttachments === void 0 ? void 0 : canonicalCandidateDigest(jsonWireSnapshot(declaration.platformAttachments));
-	} catch (error) {
-		throw new ValidationError("executor materialization: profile, plan, and attachments must be finite RFC 8785 JSON", { cause: error });
-	}
-	return Object.freeze({
-		status: "known",
-		authoredProfileDigest: input.authoredProfileDigest,
-		effectiveProfileDigest,
-		materializationPlanDigest,
-		...platformAttachmentsDigest === void 0 ? {} : { platformAttachmentsDigest },
-		runtime: input.runtime,
-		backend: declaration.backend,
-		model: declaration.model,
-		execution: declaration.execution,
-		materializer: declaration.materializer
-	});
-}
-/** Build an explicit unknown receipt without fabricating any executor-owned identity. */
-function unknownMaterializationReceipt(input) {
-	return Object.freeze({
-		status: "unknown",
-		...input.authoredProfileDigest === void 0 ? {} : { authoredProfileDigest: input.authoredProfileDigest },
-		runtime: input.runtime,
-		reason: input.reason
-	});
-}
-/** Mint a process-unique attempt id before executor construction. */
-function newExecutionAttemptId(nodeId) {
-	return `${nodeId}:attempt:${randomUUID()}`;
-}
-/** Build the immutable safe receipt for a full, transient execution binding. */
-function knownExecutionBindingReceipt(materialization, bindingInput) {
-	const binding = detachedSnapshot(bindingInput, "executor execution binding");
-	assertNonEmpty(binding.attemptId, "binding.attemptId");
-	assertSafeDescriptor(binding.descriptor);
-	let materializationReceiptDigest;
-	let bindingDigest;
-	try {
-		materializationReceiptDigest = canonicalCandidateDigest(materialization);
-		bindingDigest = canonicalCandidateDigest(jsonWireSnapshot(binding.binding));
-	} catch (error) {
-		throw new ValidationError("executor binding must be finite RFC 8785 JSON", { cause: error });
-	}
-	return Object.freeze({
-		status: "known",
-		attemptId: binding.attemptId,
-		materializationReceiptDigest,
-		bindingDigest,
-		descriptor: binding.descriptor
-	});
-}
-/** Preserve an attempt boundary even when its caller-owned transport cannot be attested. */
-function unknownExecutionBindingReceipt(materialization, attemptId, reason) {
-	assertNonEmpty(attemptId, "binding.attemptId");
-	return Object.freeze({
-		status: "unknown",
-		attemptId,
-		materializationReceiptDigest: canonicalCandidateDigest(materialization),
-		reason
-	});
-}
-/** Derive an authored-profile digest without turning non-canonical input into a fake identity. */
-function authoredProfileDigest(profile) {
-	try {
-		return canonicalAgentProfileDigest(agentProfileSchema.parse(profile));
-	} catch {
-		return;
-	}
-}
-function assertExactDeclaration(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new ValidationError("executor materialization: declaration must be an object");
-	const unknown = Object.keys(value).filter((key) => !declarationKeys.has(key));
-	if (unknown.length > 0) throw new ValidationError(`executor materialization: unknown declaration fields: ${unknown.sort().join(", ")}`);
-	if (!Object.hasOwn(value, "plan")) throw new ValidationError("executor materialization: plan is required");
-}
-function assertModel(model) {
-	if (typeof model !== "object" || model === null || Array.isArray(model)) throw new ValidationError("executor materialization: model must be a known/unknown identity");
-	const keys = Object.keys(model).sort();
-	if (model.status === "known") {
-		if (keys.join(",") !== "id,status") throw new ValidationError("executor materialization: known model accepts only status and id");
-		assertNonEmpty(model.id, "model.id");
-		return;
-	}
-	if (model.status === "unknown") {
-		if (keys.join(",") !== "reason,status") throw new ValidationError("executor materialization: unknown model accepts only status and reason");
-		assertNonEmpty(model.reason, "model.reason");
-		return;
-	}
-	throw new ValidationError("executor materialization: model.status must be known or unknown");
-}
-function assertNonEmpty(value, field) {
-	if (typeof value !== "string" || value.trim().length === 0) throw new ValidationError(`executor materialization: ${field} must be a non-empty string`);
-}
-function assertSafeDescriptor(descriptor) {
-	if (typeof descriptor !== "object" || descriptor === null || Array.isArray(descriptor)) throw new ValidationError("executor binding: descriptor must be an object");
-	for (const [key, value] of Object.entries(descriptor)) {
-		if (/(url|uri|token|key|secret|bearer|credential|authorization)/i.test(key)) throw new ValidationError(`executor binding: unsafe descriptor key ${JSON.stringify(key)}`);
-		if (value !== null && typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean") throw new ValidationError(`executor binding: descriptor ${JSON.stringify(key)} must be scalar`);
-		if (typeof value === "string" && (value.includes("://") || value.includes("@"))) throw new ValidationError(`executor binding: descriptor ${JSON.stringify(key)} contains transport or credential text`);
-	}
-}
-function jsonWireSnapshot(value, path = "$") {
-	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
-	if (typeof value === "number") {
-		if (!Number.isFinite(value)) throw new ValidationError(`executor binding: ${path} must be finite`);
-		return value;
-	}
-	if (Array.isArray(value)) return value.map((item, index) => {
-		if (item === void 0) throw new ValidationError(`executor binding: ${path}[${index}] cannot be undefined`);
-		return jsonWireSnapshot(item, `${path}[${index}]`);
-	});
-	if (typeof value !== "object" || value === null) throw new ValidationError(`executor binding: ${path} must be JSON data`);
-	const prototype = Object.getPrototypeOf(value);
-	if (prototype !== Object.prototype && prototype !== null) throw new ValidationError(`executor binding: ${path} must be a plain object`);
-	const out = {};
-	for (const [key, item] of Object.entries(value)) {
-		if (item === void 0) continue;
-		out[key] = jsonWireSnapshot(item, `${path}.${key}`);
-	}
-	return out;
-}
-/**
-* The provider-identity evidence for ONE attempt, from the served model alone. `unknown` with a
-* `provider-model-missing` reason when the attempt produced no model, because an attempt that
-* cannot name what served it is not evidence that nothing did.
-*/
-function providerAttemptEvidence(model) {
-	const attempts = Object.freeze([Object.freeze({ observations: Object.freeze(model === void 0 ? [] : [model]) })]);
-	const models = Object.freeze(model === void 0 ? [] : [model]);
-	return Object.freeze(model === void 0 ? {
-		status: "unknown",
-		attempts,
-		models,
-		reason: "provider-model-missing"
-	} : {
-		status: "known",
-		attempts,
-		models
-	});
-}
-//#endregion
-export { promptOptionsFromAgentTurnInput as $, assertBoundaryBinding as A, copyControlRef as B, runtimeOwnedScopeOwnerRuntime as C, detachedSnapshot as D, detachedFrozen as E, assertSequence as F, exactSessionCancel as G, exactContinuedControlRef as H, assertStableText as I, hasDurableCancel as J, exactSessionResult as K, assertWaitDuration as L, assertEventBinding as M, assertInteractionBinding as N, RetainedRunProviderContractError as O, assertResultBinding as P, promptFromAgentTurnInput as Q, awaitAbortable as R, runtimeOwnedPendingExecutorMaterialization as S, unknownMaterializationReceipt as T, exactControlRef as U, delay as V, exactSession as W, sameControlCoordinates as X, isTerminalSessionStatus as Y, freshTurnInput as Z, runtimeOwnedDeferredExecutorRuntime as _, authoredProfileDigest as a, runtimeOwnedExecutorMaterialization as b, knownExecutionBindingReceipt as c, providerAttemptEvidence as d, providerMessageText as et, recordRuntimeOwnedDriveHarnessProviderEvidence as f, recordRuntimeOwnedProviderModel as g, recordRuntimeOwnedProviderIdentityConflict as h, attestRuntimeOwnedScopeOwner as i, assertCanonicalEventBinding as j, abortError as k, knownMaterializationReceipt as l, recordRuntimeOwnedProviderDispatchNotStarted as m, attestRuntimeOwnedExecutor as n, finalizeRuntimeOwnedPendingExecutor as o, recordRuntimeOwnedProviderAttemptStart as p, freezeControlRef as q, attestRuntimeOwnedPendingExecutor as r, inheritRuntimeOwnedExecutorAttestation as s, attestRuntimeOwnedDeferredExecutor as t, newExecutionAttemptId as u, runtimeOwnedDriveHarnessProviderEvidence as v, unknownExecutionBindingReceipt as w, runtimeOwnedExecutorProviderEvidence as x, runtimeOwnedExecutorExecutionBinding as y, cancellationRequest as z };
-
-//# sourceMappingURL=materialization-Cy0oM8tb.js.map