@tangle-network/agent-runtime 0.206.1 → 0.208.0

package/dist/{redact-CLRRxkXF.js → redact-BMwd8IBm.js}

@@ -4000,6 +4000,119 @@ async function defaultRunCommand(opts) {
 	};
 }
 //#endregion
+//#region src/runtime/provider-placement.ts
+const placementMetadataKey = "runtimeProviderPlacement";
+/** Select exactly one declaration before any provider effects. Shared defaults carry infrastructure only. */
+function selectProviderPlacement(profile, options) {
+	if (options.placements === void 0) return { options };
+	if (options.defaults?.backend !== void 0 || options.defaults?.secrets !== void 0 || options.promptOptions !== void 0) throw new ValidationError$1("provider placements: backend, secrets and promptOptions belong in each placement");
+	for (const key of [
+		"profile",
+		"idempotencyKey",
+		"requestedId"
+	]) if (Object.hasOwn(options.defaults ?? {}, key)) throw new ValidationError$1(`provider placements: defaults.${key} is owned by Runtime`);
+	const placements = detachedSnapshot(options.placements, "provider placements");
+	const ids = /* @__PURE__ */ new Set();
+	for (const placement of placements) {
+		canonicalCandidateDigest(placement);
+		if (Object.keys(placement).some((key) => ![
+			"id",
+			"match",
+			"create",
+			"promptOptions"
+		].includes(key)) || Object.keys(placement.match).some((key) => ![
+			"harness",
+			"provider",
+			"model"
+		].includes(key))) throw new ValidationError$1("provider placements: unknown declaration or match field");
+		if ([placement.match.provider, placement.match.model].some((value) => value !== void 0 && (typeof value !== "string" || !value.trim()))) throw new ValidationError$1("provider placements: provider and model selectors must be nonempty strings");
+		if (!placement.id?.trim() || ids.has(placement.id)) throw new ValidationError$1("provider placements: ids must be nonempty and unique");
+		ids.add(placement.id);
+		if (!placement.match?.harness || placement.create?.backend !== placement.match.harness) throw new ValidationError$1("provider placements: create.backend must match the declared harness");
+		for (const key of [
+			"profile",
+			"signal",
+			"idempotencyKey",
+			"requestedId",
+			"runtimeAttachments"
+		]) if (Object.hasOwn(placement.create, key)) throw new ValidationError$1(`provider placements: create.${key} is owned by Runtime`);
+		const backend = placement.promptOptions?.backend;
+		if (backend?.type !== void 0 && backend.type !== placement.match.harness || backend?.model?.provider !== void 0 && backend.model.provider !== placement.match.provider || backend?.model?.model !== void 0 && backend.model.model !== placement.match.model) throw new ValidationError$1("provider placements: turn backend/model must match the declared profile selector");
+	}
+	const matches = placements.filter(({ match }) => profile.harness === match.harness && (match.provider === void 0 || profile.model?.provider === match.provider) && (match.model === void 0 || concreteProfileModel(profile) === match.model));
+	if (matches.length !== 1) throw new ValidationError$1(`provider placements: expected one matching declaration, found ${matches.length}`);
+	const placement = matches[0];
+	const common = options.defaults ?? {};
+	if (Object.hasOwn(common.metadata ?? {}, placementMetadataKey) || Object.hasOwn(placement.create.metadata ?? {}, placementMetadataKey)) throw new ValidationError$1("provider placements: reserved placement metadata key");
+	for (const key of Object.keys(placement.create.env ?? {})) if (Object.hasOwn(common.env ?? {}, key)) throw new ValidationError$1("provider placements: placement cannot replace a shared environment variable");
+	const effectiveCreate = {
+		...common,
+		...placement.create,
+		...common.env === void 0 && placement.create.env === void 0 ? {} : { env: {
+			...common.env,
+			...placement.create.env
+		} },
+		metadata: {
+			...common.metadata,
+			...placement.create.metadata
+		}
+	};
+	const identity = {
+		id: placement.id,
+		digest: canonicalCandidateDigest({
+			id: placement.id,
+			match: placement.match,
+			create: publicCreateOptions(effectiveCreate),
+			promptOptions: publicPromptOptions(placement.promptOptions)
+		})
+	};
+	return {
+		identity,
+		options: {
+			...options,
+			placements: void 0,
+			defaults: {
+				...effectiveCreate,
+				metadata: {
+					...effectiveCreate.metadata,
+					[placementMetadataKey]: identity
+				}
+			},
+			promptOptions: placement.promptOptions
+		}
+	};
+}
+function publicPromptOptions(options) {
+	if (options === void 0) return null;
+	const { backend, ...turn } = options;
+	if (backend === void 0) return turn;
+	const { model, ...backendOptions } = backend;
+	if (model === void 0) return {
+		...turn,
+		backend: backendOptions
+	};
+	const { apiKey, authFiles, ...modelOptions } = model;
+	return {
+		...turn,
+		backend: {
+			...backendOptions,
+			model: {
+				...modelOptions,
+				...apiKey === void 0 ? {} : { apiKeyPresent: true },
+				...authFiles === void 0 ? {} : { authFiles: authFiles.map(({ content: _content, ...file }) => file) }
+			}
+		}
+	};
+}
+function publicCreateOptions(create) {
+	const { env, secrets, signal: _signal, profile: _profile, idempotencyKey: _idempotencyKey, requestedId: _requestedId, runtimeAttachments: _runtimeAttachments, ...configuration } = create;
+	return {
+		...configuration,
+		...env === void 0 ? {} : { environmentVariableNames: Object.keys(env).sort() },
+		...secrets === void 0 ? {} : { secretNames: Array.isArray(secrets) ? [...secrets].sort() : Object.keys(secrets).sort() }
+	};
+}
+//#endregion
 //#region src/sanitize.ts
 /** Strip PII and large blobs from a `KnowledgeReadinessReport` for safe telemetry emission. @stable */
 function sanitizeKnowledgeReadinessReport(report, options = {}) {
@@ -5978,6 +6091,7 @@ function createRetainedRunHandle(environment, session, initialControlRef, capabi
 */
 function retainedCreateMaterial(environment) {
 	return {
+		...environment.metadata?.runtimeProviderPlacement === void 0 ? {} : { placement: environment.metadata.runtimeProviderPlacement },
 		...environment.backend === void 0 ? {} : { backend: environment.backend },
 		...environment.workspace === void 0 ? {} : { workspaceDigest: canonicalCandidateDigest(publicWorkspaceMaterial(environment.workspace)) },
 		...environment.resources === void 0 ? {} : { resourcesDigest: canonicalCandidateDigest(publicResourceMaterial(environment.resources)) },
@@ -6410,6 +6524,20 @@ function assertRetainedCapabilityRequirements(providerName, capabilities) {
 }
 //#endregion
 //#region src/runtime/supervise/abortable.ts
+/** Provenance of an explicit cancellation, preserved through every abort link. */
+var RunCancellationReason = class extends Error {
+	source;
+	operationId;
+	constructor(source, reason, operationId) {
+		super(reason);
+		this.source = source;
+		this.operationId = operationId;
+		this.name = "RunCancellationReason";
+	}
+	toString() {
+		return this.message;
+	}
+};
 /**
 * One abort race, and one abort cascade, for the supervision tree.
 *
@@ -6431,6 +6559,7 @@ function assertRetainedCapabilityRequirements(providerName, capabilities) {
 */
 function abortReason(signal, fallback) {
 	const reason = signal.reason;
+	if (reason instanceof RunCancellationReason) return reason;
 	if (typeof reason === "string" && reason.length > 0) return reason;
 	if (reason instanceof Error && reason.name !== "AbortError" && reason.message.length > 0) return reason.message;
 	return fallback;
@@ -6438,7 +6567,7 @@ function abortReason(signal, fallback) {
 /** An `AbortError` carrying the signal's own string reason, or `fallback` when it states none. */
 function abortError$1(signal, fallback) {
 	const reason = abortReason(signal, fallback);
-	const error = new Error(typeof reason === "string" && reason.length > 0 ? reason : fallback);
+	const error = new Error(reason instanceof Error ? reason.message : typeof reason === "string" && reason.length > 0 ? reason : fallback);
 	error.name = "AbortError";
 	return error;
 }
@@ -7034,6 +7163,11 @@ function providerAsSandboxClient(provider, options = {}) {
 			...defaults,
 			...sandboxInput,
 			...customInput,
+			...defaults.env === void 0 && sandboxInput.env === void 0 && customInput.env === void 0 ? {} : { env: {
+				...defaults.env,
+				...sandboxInput.env,
+				...customInput.env
+			} },
 			providerOptions: {
 				...defaults.providerOptions ?? {},
 				...sandboxInput.providerOptions ?? {},
@@ -7142,9 +7276,18 @@ function providerTurnWithDefaults(defaults, turn, signal) {
 *
 * @experimental */
 function providerAsExecutor(provider, options = {}) {
-	return (spec, ctx) => createProviderExecutor(provider, spec.profile, ctx, options);
+	const captured = options.placements === void 0 ? options : {
+		...options,
+		placements: detachedSnapshot(options.placements, "provider placements"),
+		defaults: detachedSnapshot(options.defaults, "provider placement defaults")
+	};
+	return (spec, ctx) => {
+		const profile = captured.placements === void 0 ? spec.profile : detachedSnapshot(spec.profile, "provider placement profile");
+		const selected = selectProviderPlacement(profile, captured);
+		return createProviderExecutor(provider, profile, ctx, selected.options, selected.identity);
+	};
 }
-function createProviderExecutor(provider, profile, ctx, options) {
+function createProviderExecutor(provider, profile, ctx, options, placement) {
 	const controller = linkAbort(ctx.signal);
 	let environment;
 	let artifact;
@@ -7154,6 +7297,7 @@ function createProviderExecutor(provider, profile, ctx, options) {
 	let destroyed = false;
 	const runtime = options.runtime ?? provider.name;
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
+	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
 	const executionId = retention?.executionId ?? ctx.node?.nodeId ?? `provider-run-${randomUUID()}`;
 	const attemptId = ctx.node?.attemptId ?? newExecutionAttemptId(executionId);
 	const providerModel = concreteProfileModel(createProfile);
@@ -7179,7 +7323,8 @@ function createProviderExecutor(provider, profile, ctx, options) {
 			destroyOnSettle: options.destroyOnSettle ?? true,
 			requireTerminalEvent: options.requireTerminalEvent ?? true,
 			tokenLimits,
-			environmentId: null
+			environmentId: null,
+			...placement ? { placement } : {}
 		}
 	};
 	const plannedBinding = {
@@ -7187,12 +7332,17 @@ function createProviderExecutor(provider, profile, ctx, options) {
 		binding: {
 			provider: provider.name,
 			executionId,
-			model: providerModel ?? null
+			model: providerModel ?? null,
+			...placement ? { placement } : {}
 		},
 		descriptor: {
 			kind: "agent-environment",
 			transport: "provider",
-			backend: provider.name
+			backend: provider.name,
+			...placement ? {
+				placementId: placement.id,
+				placementDigest: placement.digest
+			} : {}
 		}
 	};
 	let executor;
@@ -7295,7 +7445,18 @@ async function* streamProviderExecutor(args) {
 	const started = Date.now();
 	const linked = linkAbort(args.signal, args.controller.signal).signal;
 	const defaultTurn = taskToTurnInput(args.task, linked);
-	const source = await providerExecutionSource(args, providerTurnWithDefaults(providerTurnDefaults(args.options.promptOptions, `providerAsExecutor(${args.provider.name})`), args.options.taskToTurn?.(args.task, args.profile, defaultTurn) ?? defaultTurn, linked), linked);
+	let turn = providerTurnWithDefaults(providerTurnDefaults(args.options.promptOptions, `providerAsExecutor(${args.provider.name})`), args.options.taskToTurn?.(args.task, args.profile, defaultTurn) ?? defaultTurn, linked);
+	if (args.options.defaults?.metadata?.runtimeProviderPlacement !== void 0) {
+		if (turn.model !== void 0 && turn.model !== concreteProfileModel(args.profile)) throw new ValidationError("provider placement: taskToTurn cannot replace the profile model");
+		const declared = providerTurnDefaults(args.options.promptOptions, "provider placement");
+		if (canonicalCandidateDigest(turn.providerOptions ?? {}) !== canonicalCandidateDigest(declared?.providerOptions ?? {})) throw new ValidationError("provider placement: taskToTurn cannot replace declared provider options");
+		const { signal: _signal, ...material } = turn;
+		turn = {
+			...detachedSnapshot(material, "provider placement turn"),
+			signal: linked
+		};
+	}
+	const source = await providerExecutionSource(args, turn, linked);
 	const environment = source.environment;
 	args.onEnvironment(environment);
 	const events = [];
@@ -11743,7 +11904,7 @@ function aggregateProviderModelEvidence(forest) {
 			return;
 		}
 		if (node.ownedTreeRoot !== void 0) return;
-		if (event.kind === "cancelled") {
+		if (event.kind === "cancelled" && event.providerModel === void 0) {
 			markMissing();
 			return;
 		}
@@ -12000,8 +12161,9 @@ async function replaySpawnTree(journal, blobs, root) {
 				kind: "down",
 				handle: handleFor(ev.id, "cancelled"),
 				reason: ev.reason,
-				infra: false,
-				trace: {
+				infra: ev.infra === true,
+				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
+				trace: ev.trace ?? {
 					status: "unavailable",
 					reason: "execution-did-not-start"
 				},
@@ -12133,10 +12295,13 @@ function materializeTreeView(events) {
 	} else {
 		const node = requireNode(nodes, ev.id);
 		node.status = "cancelled";
-		node.trace = {
+		node.trace = ev.trace ?? {
 			status: "unavailable",
 			reason: "execution-did-not-start"
 		};
+		if (ev.spent !== void 0) node.spent = cloneSpend(ev.spent);
+		node.providerModel = copyProviderModelEvidence(ev.providerModel);
+		node.outRef = ev.outRef;
 		const settledAt = Date.parse(ev.at);
 		if (Number.isFinite(settledAt)) node.settledAt = settledAt;
 	}
@@ -17057,7 +17222,9 @@ function createExecutor(config) {
 			case "cli-worktree": return cliWorktreeExecutor(spec, seamed);
 			case "cli-in-place": return cliInPlaceExecutor(spec, seamed);
 			case "provider": {
-				const providerSeam = readSeam(seamed, providerSeamKey, "provider");
+				const originalSeam = readSeam(seamed, providerSeamKey, "provider");
+				const selected = originalSeam.steering ? selectProviderPlacement(spec.profile, originalSeam) : void 0;
+				const providerSeam = selected?.options ?? originalSeam;
 				const provider = resolveAgentEnvironmentProvider(providerSeam.provider, providerSeam.registry);
 				if (providerSeam.steering) {
 					if (providerSeam.taskToTurn) throw new ValidationError$1("createExecutor(provider, steering): taskToTurn is not representable by the text-only steerable session");
@@ -17087,10 +17254,33 @@ function createExecutor(config) {
 						...spec,
 						harness
 					}, providerCtx);
-					return inheritRuntimeOwnedExecutorAttestation(executor, {
+					const wrapper = inheritRuntimeOwnedExecutorAttestation(executor, {
 						...executor,
 						runtime: providerSeam.runtime ?? provider.name
 					});
+					if (selected?.identity) {
+						const declaration = runtimeOwnedExecutorMaterialization(executor);
+						const binding = runtimeOwnedExecutorExecutionBinding(executor);
+						attestRuntimeOwnedExecutor(wrapper, {
+							...declaration,
+							plan: {
+								...declaration.plan,
+								placement: selected.identity
+							}
+						}, {
+							...binding,
+							binding: {
+								...binding.binding,
+								placement: selected.identity
+							},
+							descriptor: {
+								...binding.descriptor,
+								placementId: selected.identity.id,
+								placementDigest: selected.identity.digest
+							}
+						});
+					}
+					return wrapper;
 				}
 				const profileForCreate = providerSeam.profileForCreate;
 				return providerAsExecutor(provider, {
@@ -18581,7 +18771,7 @@ function sumSpendFromEvents(events) {
 function sumMeasuredSpendFromEvents(events) {
 	let childWork = zeroSpend();
 	let driverInference = zeroSpend();
-	for (const ev of events) if (ev.kind === "settled") childWork = addSpend(childWork, ev.spent);
+	for (const ev of events) if (ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0) childWork = addSpend(childWork, ev.spent);
 	else if (ev.kind === "metered") driverInference = addSpend(driverInference, ev.spend);
 	return {
 		childWork,
@@ -19328,7 +19518,7 @@ function createScope(args) {
 					return bindings && bindings.length > 0 ? Object.freeze([...bindings]) : void 0;
 				},
 				abort(reason) {
-					controller.abort(reason);
+					controller.abort(new RunCancellationReason("worker-handle", reason ?? "worker cancelled"));
 				}
 			};
 			const live = {
@@ -19360,6 +19550,11 @@ function createScope(args) {
 				...executor.cancel ? { requestCancel: executor.cancel.bind(executor) } : {},
 				abortChild: (reason) => controller.abort(reason)
 			};
+			const recordCancellation = () => {
+				if (!live.executorDone && live.acceptedResult === void 0 && controller.signal.reason instanceof RunCancellationReason) live.cancellationReason = controller.signal.reason;
+			};
+			if (controller.signal.aborted) recordCancellation();
+			else controller.signal.addEventListener("abort", recordCancellation, { once: true });
 			children.set(id, live);
 			if (opts.key !== void 0) keyed.set(opts.key, {
 				state: "live",
@@ -19803,7 +19998,7 @@ function createScope(args) {
 		const child = children.get(nodeId);
 		if (!child) throw new ValidationError$1(`scope.cancel: unknown node ${JSON.stringify(nodeId)}`);
 		if (child.requestCancel) return await child.requestCancel(request);
-		child.abortChild("cancelled");
+		child.abortChild(new RunCancellationReason("scope", "cancelled"));
 		return {
 			status: "unknown",
 			effect: "cancel_requested",
@@ -20215,13 +20410,19 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 	const at = new Date(settledAt).toISOString();
 	if (settlement.metered) await appendSettlementMetering(args.journal, args.root, child.id, settlement.metered, at);
 	if (settlement.kind === "down") {
-		child.status = "failed";
+		const cancellation = child.cancellationReason;
+		child.status = cancellation === void 0 ? "failed" : "cancelled";
 		child.trace = settlement.trace;
 		child.providerModel = settlement.providerModel;
 		if (!child.recoveryPending) await args.journal.appendEvent(args.root, {
-			kind: "settled",
+			...cancellation === void 0 ? {
+				kind: "settled",
+				status: "down"
+			} : {
+				kind: "cancelled",
+				source: cancellation.source
+			},
 			id: child.id,
-			status: "down",
 			spent: child.spent,
 			infra: settlement.infra,
 			reason: settlement.reason,
@@ -21004,15 +21205,14 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 				await finalizeScopeOwnerMaterialization(nestedScope);
 				await closeActive("driver completed");
 				const events = await loadTreeEvents(journal, nestedRoot);
-				const settled = events.filter(isSettled);
-				const childWork = sumSpend(settled);
+				const childWork = sumSpend(events.filter(isSettled));
 				const totalMetered = sumMetered(events);
 				meteredSpend = nonZeroOrUndef(unreportedSpend(totalMetered, previouslyMetered));
 				accounting = {
 					reported: childWork,
 					reservation: addSpend(childWork, totalMetered)
 				};
-				const verdict = deriveDeliveryVerdict(settled, out, spec.acceptedSubmission?.() === true);
+				const verdict = deriveDeliveryVerdict(events.filter((event) => event.kind === "settled"), out, spec.acceptedSubmission?.() === true);
 				artifact = {
 					outRef: `${driverRuntime}:${nestedRoot}`,
 					out: out === void 0 ? null : out,
@@ -21027,7 +21227,7 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 				meteredSpend = partial?.metered ? nonZeroOrUndef(unreportedSpend(partial.metered, previouslyMetered)) : void 0;
 				accounting = partial?.accounting;
 				const events = await journal.loadTree(nestedRoot).catch(() => void 0);
-				const settledIds = new Set(events?.filter((event) => event.kind === "settled").map((event) => event.id));
+				const settledIds = new Set(events?.filter((event) => event.kind === "settled" || event.kind === "cancelled").map((event) => event.id));
 				if (events?.some((event) => event.kind === "execution-admitted" && event.id === seam.nodeId || event.kind === "spawned" && event.parent !== void 0 && event.runtime !== "inline" && !settledIds.has(event.id))) throw new RetainedExecutionPendingError(err);
 				if (cleanupError !== void 0) throw cleanupError;
 				throw err;
@@ -21098,7 +21298,7 @@ async function loadTreeEvents(journal, nestedRoot) {
 	return events;
 }
 function isSettled(ev) {
-	return ev.kind === "settled";
+	return ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0;
 }
 /** Sum the conserved spend over the nested tree's settled events — the honest per-channel
 *  roll-up of the whole sub-tree's child WORK. */
@@ -21583,8 +21783,8 @@ function createSupervisor() {
 				controller.abort(reason);
 				return true;
 			};
-			const onCallerAbort = () => cascadeAbort("caller signal aborted");
-			if (opts.signal) if (opts.signal.aborted) cascadeAbort("caller signal aborted");
+			const onCallerAbort = () => cascadeAbort(opts.signal?.reason instanceof RunCancellationReason ? opts.signal.reason : new RunCancellationReason("signal", typeof opts.signal?.reason === "string" ? opts.signal.reason : "caller signal aborted"));
+			if (opts.signal) if (opts.signal.aborted) onCallerAbort();
 			else opts.signal.addEventListener("abort", onCallerAbort, { once: true });
 			const breaker = createIntensityBreaker(opts, () => cascadeAbort("intensity breaker tripped"));
 			const journal = wrapJournalForBreaker(opts.journal, breaker);
@@ -21619,7 +21819,7 @@ function createSupervisor() {
 			const openScope = scope;
 			if (rootLease) rootLease.bind({
 				scope: openScope,
-				cascadeAbort,
+				cascadeAbort: (reason) => cascadeAbort(new RunCancellationReason("root-handle", reason ?? "root handle aborted")),
 				signal: pushRootSignal(cascadeAbort),
 				deliver: rootDeliver ? (message) => rootDeliver(message) !== false : () => false
 			});
@@ -21687,6 +21887,7 @@ function createSupervisor() {
 			}
 			const tree = runTree(scope);
 			pool.assertNoOpenTickets();
+			if (controller.signal.reason instanceof RunCancellationReason) return noWinner();
 			if (actOutcome.ok) {
 				if (executionAborted) return noWinner();
 				const out = actOutcome.out;
@@ -21724,6 +21925,16 @@ function createSupervisor() {
 					...gaps.length > 0 ? { spendGaps: gaps } : {}
 				};
 				const lifecycle = classifyNoWinner(executionAborted, pool, opts, breaker, deadlineExceeded, allChildrenDownAtSettle, downCountAtSettle);
+				if (controller.signal.reason instanceof RunCancellationReason) {
+					const cancellation = controller.signal.reason;
+					return {
+						...common,
+						reason: "cancelled",
+						source: cancellation.source,
+						cancellationReason: cancellation.message,
+						...cancellation.operationId === void 0 ? {} : { operationId: cancellation.operationId }
+					};
+				}
 				if (lifecycle !== void 0) return {
 					...common,
 					reason: lifecycle
@@ -21811,7 +22022,7 @@ function createRootHandle() {
 *  pause semantics — building them now would be mechanism ahead of the gate). */
 function pushRootSignal(cascadeAbort) {
 	return (msg) => {
-		if (msg.kind === "cancel") cascadeAbort(msg.reason ?? "root signal: cancel");
+		if (msg.kind === "cancel") cascadeAbort(new RunCancellationReason("root-signal", msg.reason ?? "root signal: cancel"));
 	};
 }
 function createIntensityBreaker(opts, trip) {
@@ -21999,7 +22210,8 @@ function spendGapsFromEvents(events) {
 		});
 	};
 	for (const ev of events) if (ev.kind === "spawned" && ev.parent !== void 0 && !terminal.has(ev.id)) record(ev.id, "never-settled", ["tokens", "usd"]);
-	else if (ev.kind === "settled") record(ev.id, "unreported", unknownChannels(ev.spent));
+	else if (ev.kind === "cancelled" && ev.spent === void 0) record(ev.id, "unreported", ["tokens", "usd"]);
+	else if (ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0) record(ev.id, "unreported", unknownChannels(ev.spent));
 	else if (ev.kind === "metered") record(ev.id, "unreported", unknownChannels(ev.spend));
 	return [...gaps.values()].map((gap) => {
 		const label = labels.get(gap.id);
@@ -22108,6 +22320,6 @@ function resolveRedactor(redact) {
 	return (value) => defaultRedactor(redact(value));
 }
 //#endregion
-export { bridgeAdmissionRefusal as $, buildRuntimeEventOtelSpans as $n, providerAttemptEvidence as $r, spendFromUsageEvents as $t, consumeScopeRetainedOwnerResult as A, promptFromAgentTurnInput as Ai, throwIfAborted as An, profileMaterializationAxes$1 as Ar, peerMailTools as At, workerInteractiveBindingFile as B, startRetainedRunInEnvironment as Bn, worktreeCliProfileMaterialization as Br, insideCursorNamespace as Bt, settledToIteration as C, notifySandboxEventObserver as Ci, hasCompleteCacheBreakdown as Cn, parseCodexTokenUsage as Cr, createInbox as Ct, timerAt as D, decodeHarnessUsage as Di, sleep as Dn, controlProfileMaterialization as Dr, claimsAuthority as Dt, pollFor as E, sumSandboxUsage as Ei, randomSuffix as En, assertProfileMaterialization as Er, PEER_MAIL_WIRE_KEY as Et, interactiveAdmissionSeamKey as F, abortError$1 as Fn, renderProfileMaterializationIssues as Fr, taskToPrompt as Ft, destroyInteractiveEnvironment as G, readCodexRolloutSession as Gn, attestRuntimeOwnedPendingExecutor as Gr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Gt, reconnectRetainedInteractiveRun as H, addHarnessUsage as Hn, parseCommittedJsonLines as Hr, materializeTreeView as Ht, readWorkerInteractiveAdmissions as I, linkAbort as In, renderUnsupported as Ir, FileResultBlobStore as It, queueOf as J, readTraceContextFromEnv as Jn, finalizeRuntimeOwnedPendingExecutor as Jr, parseWorkerToolTraceArtifact as Jt, effectiveConcurrency as K, createPropagatingTraceEmitter as Kn, attestRuntimeOwnedScopeOwner as Kr, captureWorkerTraceEvidence as Kt, workerInteractiveAdmissionFile as L, reconnectRetainedRun as Ln, sandboxActProfileMaterialization as Lr, FileSpawnJournal as Lt, scopeRetainedOwnerContext as M, providerMessageText as Mi, zeroSpend as Mn, promptModelProfileMaterialization as Mr, isLiveNodeStatus as Mt, scopeRetainedOwnerPriorSpend as N, registerRetainedExecutorPreparation as Nn, promptOnlyProfileMaterialization as Nr, isTerminalNodeStatus as Nt, validateWaitSpec as O, abortError$2 as Oi, stringifySafe as On, defineProfileMaterializationContract as Or, createPeerMailbox as Ot, scopeRetainedOwnerResult as P, retainedExecutorSeamKey as Pn, promptResourceProfileMaterialization as Pr, createInPlaceCliExecutor as Pt, bindReusableExecutorExecutionId as Q, buildLoopSpanNodes as Qn, newExecutionAttemptId as Qr, createBudgetPool as Qt, attachWorker as R, recoverRetainedRun as Rn, unsupportedProfileDimensions as Rr, InMemoryResultBlobStore as Rt, scopeOwnerExecutorNodeContext as S, mapSandboxToolEvent as Si, deleteBoxSafe as Sn, localHarnessExecutable as Sr, readWorkerProgress as St, isWaitOutcome as T, sandboxProgressEvents as Ti, promptCacheTokenClasses as Tn, AGENT_PROFILE_MATERIALIZATION_AXES as Tr, DEFAULT_PEER_MAIL_LIMITS as Tt, recoverRetainedInteractiveRun as U, createCodexRolloutStoreReader as Un, prepareJsonlAppend as Ur, pendingWaits as Ut, workerInteractiveBindingsDir as V, retainedCreateMaterial as Vn, isNoEntError as Vr, loadSpawnForest as Vt, startRetainedInteractiveRun as W, harnessUsageIsEmpty as Wn, writeAllBytes as Wr, replaySpawnTree as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, INTELLIGENCE_WIRE_VERSION as Xn, knownExecutionBindingReceipt as Xr, contentAddress as Xt, rollingDispatch as Y, traceContextToEnv as Yn, inheritRuntimeOwnedExecutorAttestation as Yr, workerTraceAnalysisStore as Yt, teardownExecutor as Z, buildLoopOtelSpans as Zn, knownMaterializationReceipt as Zr, assertValidBudget as Zt, deriveNodeExecutionIdentity as _, createSandboxToolPartState as _i, resolveAgentEnvironmentProvider as _n, createWorktree as _r, createPushTraceSource as _t, createSupervisor as a, runtimeOwnedPendingExecutorMaterialization as ai, createSandboxLineage as an, loopEventToOtelSpan as ar, cliWorktreeExecutor as at, recordScopeOwnerMaterialization as b, isSandboxTerminalEvent as bi, chargedTokens as bn, LOCAL_HARNESSES as br, DEFAULT_STALL_AFTER_MS as bt, pickBestDelivered as c, unknownMaterializationReceipt as ci, assertBoxlessPromptOptions as cn, toOtelAttributes as cr, snapshotExecutorConfig as ct, driverChild as d, detachedFrozen as di, runBrainLoop as dn, sanitizeAgentRuntimeEvent as dr, readWorkerTraceContext as dt, recordRuntimeOwnedDriveHarnessProviderEvidence as ei, TERMINAL_DECISIONS as en, createOpenInferenceFileExporter as er, bridgeModelRouteRefusal as et, driverExecutorFactory as f, detachedSnapshot as fi, canonicalObservedModelParts as fn, sanitizeKnowledgeReadinessReport as fr, workerTraceEnv as ft, createScope as g, canonicalStreamEventFromSandboxEvent as gi, providerAsSandboxClient as gn, captureWorktreeDiff as gr, createSteerableSandboxSession as gt, beginScopeOwnerAttempt as h, assertSandboxServedModel as hi, providerAsExecutor as hn, runWorktreeHarness as hr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ht, createRootHandle as i, runtimeOwnedExecutorProviderEvidence as ii, runAgentRounds as in, generateSpanId as ir, cliInPlaceExecutor as it, prepareScopeRetainedOwnerTask as j, promptOptionsFromAgentTurnInput as ji, unmeteredSpend as jn, promptControlProfileMaterialization as jr, peerMailVerbNames as jt, waitUntil as k, awaitAbortable$1 as ki, throwAbort as kn, fullProfileMaterialization as kr, isPeerMailEnvelope as kt, runFinalizer as l, executableAgentProfileSnapshot as li, readPromptOptions as ln, createRuntimeEventCollector as lr, createWorktreeCliExecutor as lt, withDriverExecutor as m, readSandboxOutcome as mi, createAgentEnvironmentProviderRegistry as mn, runSettledCommand as mr, workerTraceSeamKey as mt, defaultRedactorIdentityMaterial as n, runtimeOwnedExecutorExecutionBinding as ni, defaultSelectWinner as nn, exportEvalRuns as nr, bridgeStopSignalKey as nt, bestDelivered as o, runtimeOwnedScopeOwnerRuntime as oi, probeSandboxCapabilities as on, padSpanId as or, createExecutor as ot, isDriverSpec as p, projectSandboxOutcome as pi, observedModelMatchesDeclared as pn, sanitizeRuntimeStreamEvent as pr, workerTraceHeaders as pt, freeSlots as q, mergeTraceEnv as qn, authoredProfileDigest as qr, isTraceAnalysisStore as qt, resolveRedactor as r, runtimeOwnedExecutorMaterialization as ri, isTerminalDecision as rn, flatOtelSpan as rr, captureReusableExecutorConfig as rt, collectDelivered as s, unknownExecutionBindingReceipt as si, acquireSandbox as sn, padTraceId as sr, createExecutorRegistry as st, defaultRedactor as t, runtimeOwnedDriveHarnessProviderEvidence as ti, createSandboxForSpec as tn, createOtelExporter as tr, bridgeRuntimeAttachmentsKey as tt, runTree as u, executableAgentSpecSnapshot as ui, routerBrain as un, createRuntimeStreamEventCollector as ur, WORKER_TRACE_PROPAGATION as ut, meterRuntimeOwnedAccounting as v, createSandboxUsageLedger as vi, sandboxClientAsProvider as vn, removeWorktree as vr, decodeToolPart as vt, createWaitProbes as w, sandboxEventServedBackend as wi, isAbortError$2 as wn, CodexExecutionDiagnosticError as wr, AUTHORITY_MARKERS as wt, restoreScopeOwnerAcceptedExecution as x, mapSandboxEvent as xi, cloneSpend as xn, harnessSupportsReasoningEffort as xr, createActivityLog as xt, meterRuntimeOwnedProviderAttempt as y, extractLlmCallEvent as yi, addSpend as yn, DEFAULT_LOCAL_HARNESS as yr, sandboxSessionTraceSource as yt, readWorkerInteractiveBinding as z, startRetainedRun as zn, validateProfileMaterialization as zr, InMemorySpawnJournal as zt };
+export { bridgeAdmissionRefusal as $, buildLoopSpanNodes as $n, newExecutionAttemptId as $r, spendFromUsageEvents as $t, consumeScopeRetainedOwnerResult as A, awaitAbortable$1 as Ai, throwIfAborted as An, fullProfileMaterialization as Ar, peerMailTools as At, workerInteractiveBindingFile as B, startRetainedRun as Bn, validateProfileMaterialization as Br, insideCursorNamespace as Bt, settledToIteration as C, mapSandboxToolEvent as Ci, hasCompleteCacheBreakdown as Cn, localHarnessExecutable as Cr, createInbox as Ct, timerAt as D, sumSandboxUsage as Di, sleep as Dn, assertProfileMaterialization as Dr, claimsAuthority as Dt, pollFor as E, sandboxProgressEvents as Ei, randomSuffix as En, AGENT_PROFILE_MATERIALIZATION_AXES as Er, PEER_MAIL_WIRE_KEY as Et, interactiveAdmissionSeamKey as F, RunCancellationReason as Fn, promptResourceProfileMaterialization as Fr, taskToPrompt as Ft, destroyInteractiveEnvironment as G, harnessUsageIsEmpty as Gn, writeAllBytes as Gr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Gt, reconnectRetainedInteractiveRun as H, retainedCreateMaterial as Hn, isNoEntError as Hr, materializeTreeView as Ht, readWorkerInteractiveAdmissions as I, abortError$1 as In, renderProfileMaterializationIssues as Ir, FileResultBlobStore as It, queueOf as J, mergeTraceEnv as Jn, authoredProfileDigest as Jr, parseWorkerToolTraceArtifact as Jt, effectiveConcurrency as K, readCodexRolloutSession as Kn, attestRuntimeOwnedPendingExecutor as Kr, captureWorkerTraceEvidence as Kt, workerInteractiveAdmissionFile as L, linkAbort as Ln, renderUnsupported as Lr, FileSpawnJournal as Lt, scopeRetainedOwnerContext as M, promptOptionsFromAgentTurnInput as Mi, zeroSpend as Mn, promptControlProfileMaterialization as Mr, isLiveNodeStatus as Mt, scopeRetainedOwnerPriorSpend as N, providerMessageText as Ni, registerRetainedExecutorPreparation as Nn, promptModelProfileMaterialization as Nr, isTerminalNodeStatus as Nt, validateWaitSpec as O, decodeHarnessUsage as Oi, stringifySafe as On, controlProfileMaterialization as Or, createPeerMailbox as Ot, scopeRetainedOwnerResult as P, retainedExecutorSeamKey as Pn, promptOnlyProfileMaterialization as Pr, createInPlaceCliExecutor as Pt, bindReusableExecutorExecutionId as Q, buildLoopOtelSpans as Qn, knownMaterializationReceipt as Qr, createBudgetPool as Qt, attachWorker as R, reconnectRetainedRun as Rn, sandboxActProfileMaterialization as Rr, InMemoryResultBlobStore as Rt, scopeOwnerExecutorNodeContext as S, mapSandboxEvent as Si, deleteBoxSafe as Sn, harnessSupportsReasoningEffort as Sr, readWorkerProgress as St, isWaitOutcome as T, sandboxEventServedBackend as Ti, promptCacheTokenClasses as Tn, CodexExecutionDiagnosticError as Tr, DEFAULT_PEER_MAIL_LIMITS as Tt, recoverRetainedInteractiveRun as U, addHarnessUsage as Un, parseCommittedJsonLines as Ur, pendingWaits as Ut, workerInteractiveBindingsDir as V, startRetainedRunInEnvironment as Vn, worktreeCliProfileMaterialization as Vr, loadSpawnForest as Vt, startRetainedInteractiveRun as W, createCodexRolloutStoreReader as Wn, prepareJsonlAppend as Wr, replaySpawnTree as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, traceContextToEnv as Xn, inheritRuntimeOwnedExecutorAttestation as Xr, contentAddress as Xt, rollingDispatch as Y, readTraceContextFromEnv as Yn, finalizeRuntimeOwnedPendingExecutor as Yr, workerTraceAnalysisStore as Yt, teardownExecutor as Z, INTELLIGENCE_WIRE_VERSION as Zn, knownExecutionBindingReceipt as Zr, assertValidBudget as Zt, deriveNodeExecutionIdentity as _, canonicalStreamEventFromSandboxEvent as _i, resolveAgentEnvironmentProvider as _n, captureWorktreeDiff as _r, createPushTraceSource as _t, createSupervisor as a, runtimeOwnedExecutorProviderEvidence as ai, createSandboxLineage as an, generateSpanId as ar, cliWorktreeExecutor as at, recordScopeOwnerMaterialization as b, extractLlmCallEvent as bi, chargedTokens as bn, DEFAULT_LOCAL_HARNESS as br, DEFAULT_STALL_AFTER_MS as bt, pickBestDelivered as c, unknownExecutionBindingReceipt as ci, assertBoxlessPromptOptions as cn, padTraceId as cr, snapshotExecutorConfig as ct, driverChild as d, executableAgentSpecSnapshot as di, runBrainLoop as dn, createRuntimeStreamEventCollector as dr, readWorkerTraceContext as dt, providerAttemptEvidence as ei, TERMINAL_DECISIONS as en, buildRuntimeEventOtelSpans as er, bridgeModelRouteRefusal as et, driverExecutorFactory as f, detachedFrozen as fi, canonicalObservedModelParts as fn, sanitizeAgentRuntimeEvent as fr, workerTraceEnv as ft, createScope as g, assertSandboxServedModel as gi, providerAsSandboxClient as gn, runWorktreeHarness as gr, createSteerableSandboxSession as gt, beginScopeOwnerAttempt as h, readSandboxOutcome as hi, providerAsExecutor as hn, runSettledCommand as hr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ht, createRootHandle as i, runtimeOwnedExecutorMaterialization as ii, runAgentRounds as in, flatOtelSpan as ir, cliInPlaceExecutor as it, prepareScopeRetainedOwnerTask as j, promptFromAgentTurnInput as ji, unmeteredSpend as jn, profileMaterializationAxes$1 as jr, peerMailVerbNames as jt, waitUntil as k, abortError$2 as ki, throwAbort as kn, defineProfileMaterializationContract as kr, isPeerMailEnvelope as kt, runFinalizer as l, unknownMaterializationReceipt as li, readPromptOptions as ln, toOtelAttributes as lr, createWorktreeCliExecutor as lt, withDriverExecutor as m, projectSandboxOutcome as mi, createAgentEnvironmentProviderRegistry as mn, sanitizeRuntimeStreamEvent as mr, workerTraceSeamKey as mt, defaultRedactorIdentityMaterial as n, runtimeOwnedDriveHarnessProviderEvidence as ni, defaultSelectWinner as nn, createOtelExporter as nr, bridgeStopSignalKey as nt, bestDelivered as o, runtimeOwnedPendingExecutorMaterialization as oi, probeSandboxCapabilities as on, loopEventToOtelSpan as or, createExecutor as ot, isDriverSpec as p, detachedSnapshot as pi, observedModelMatchesDeclared as pn, sanitizeKnowledgeReadinessReport as pr, workerTraceHeaders as pt, freeSlots as q, createPropagatingTraceEmitter as qn, attestRuntimeOwnedScopeOwner as qr, isTraceAnalysisStore as qt, resolveRedactor as r, runtimeOwnedExecutorExecutionBinding as ri, isTerminalDecision as rn, exportEvalRuns as rr, captureReusableExecutorConfig as rt, collectDelivered as s, runtimeOwnedScopeOwnerRuntime as si, acquireSandbox as sn, padSpanId as sr, createExecutorRegistry as st, defaultRedactor as t, recordRuntimeOwnedDriveHarnessProviderEvidence as ti, createSandboxForSpec as tn, createOpenInferenceFileExporter as tr, bridgeRuntimeAttachmentsKey as tt, runTree as u, executableAgentProfileSnapshot as ui, routerBrain as un, createRuntimeEventCollector as ur, WORKER_TRACE_PROPAGATION as ut, meterRuntimeOwnedAccounting as v, createSandboxToolPartState as vi, sandboxClientAsProvider as vn, createWorktree as vr, decodeToolPart as vt, createWaitProbes as w, notifySandboxEventObserver as wi, isAbortError$2 as wn, parseCodexTokenUsage as wr, AUTHORITY_MARKERS as wt, restoreScopeOwnerAcceptedExecution as x, isSandboxTerminalEvent as xi, cloneSpend as xn, LOCAL_HARNESSES as xr, createActivityLog as xt, meterRuntimeOwnedProviderAttempt as y, createSandboxUsageLedger as yi, addSpend as yn, removeWorktree as yr, sandboxSessionTraceSource as yt, readWorkerInteractiveBinding as z, recoverRetainedRun as zn, unsupportedProfileDimensions as zr, InMemorySpawnJournal as zt };
 
-//# sourceMappingURL=redact-CLRRxkXF.js.map
+//# sourceMappingURL=redact-BMwd8IBm.js.map