@tangle-network/agent-runtime 0.208.0 → 0.209.0

package/dist/{redact-BMwd8IBm.js → redact-va_1mmv8.js}

@@ -4113,6 +4113,69 @@ function publicCreateOptions(create) {
 	};
 }
 //#endregion
+//#region src/runtime/supervise/resources.ts
+/** Validate caller-owned names and units without assigning domain meaning to them. */
+function assertResources(resources, kind, label) {
+	if (resources === void 0) return;
+	if (resources === null || typeof resources !== "object" || Array.isArray(resources)) throw new Error(`${label} must be a resource map`);
+	for (const [name, resource] of Object.entries(resources)) {
+		if (!name.trim() || !resource || typeof resource !== "object" || typeof resource.unit !== "string" || !resource.unit.trim()) throw new Error(`${label}: resource names and units must be non-empty strings`);
+		const value = kind === "limit" ? "limit" in resource ? resource.limit : void 0 : "amount" in resource ? resource.amount : void 0;
+		if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new Error(`${label}.${name}.${kind} must be a non-negative safe integer`);
+		if (kind === "amount" && (!("known" in resource) || typeof resource.known !== "boolean")) throw new Error(`${label}.${name}.known must be a boolean`);
+	}
+}
+/** Missing contributors are not usage claims; enforced omissions are marked before aggregation.
+* Overflow retains a safe lower bound and marks it unknown, preserving readable component receipts. */
+function addResourceSpend(...maps) {
+	const totals = /* @__PURE__ */ new Map();
+	for (const resources of maps) {
+		assertResources(resources, "amount", "resource spend");
+		for (const [name, resource] of Object.entries(resources ?? {})) {
+			const prior = totals.get(name);
+			if (prior && prior.unit !== resource.unit) throw new Error(`resource ${name}: unit mismatch`);
+			const amount = (prior?.amount ?? 0) + resource.amount;
+			totals.set(name, {
+				unit: resource.unit,
+				amount: Math.min(amount, Number.MAX_SAFE_INTEGER),
+				known: (prior?.known ?? true) && resource.known && Number.isSafeInteger(amount)
+			});
+		}
+	}
+	return totals.size ? { resources: Object.fromEntries(totals) } : {};
+}
+/** A terminal omission under an enforced ceiling is unknown, never measured zero. */
+function withBudgetResources(spend, budget, notStarted = false) {
+	const resources = new Map(Object.entries(addResourceSpend(spend.resources).resources ?? {}));
+	for (const [name, limit] of Object.entries(budget.resources ?? {})) {
+		const observed = resources.get(name);
+		if (observed && observed.unit !== limit.unit) throw new Error(`resource ${name}: unit mismatch`);
+		if (!observed) resources.set(name, {
+			unit: limit.unit,
+			amount: 0,
+			known: notStarted
+		});
+	}
+	return resources.size ? {
+		...spend,
+		resources: Object.fromEntries(resources)
+	} : spend;
+}
+/** Stream increments and a terminal total describe the same work; never sum them twice. */
+function resourceTelemetry(streamed, terminal) {
+	const resources = new Map(Object.entries(addResourceSpend(terminal.resources).resources ?? {}));
+	for (const [name, value] of Object.entries(streamed.resources ?? {})) {
+		const other = resources.get(name);
+		if (other && other.unit !== value.unit) throw new Error(`resource ${name}: unit mismatch`);
+		resources.set(name, {
+			...value,
+			amount: Math.max(value.amount, other?.amount ?? 0),
+			known: value.known && (other?.known ?? true) && (other === void 0 || other.amount === value.amount)
+		});
+	}
+	return addResourceSpend(Object.fromEntries(resources));
+}
+//#endregion
 //#region src/sanitize.ts
 /** Strip PII and large blobs from a `KnowledgeReadinessReport` for safe telemetry emission. @stable */
 function sanitizeKnowledgeReadinessReport(report, options = {}) {
@@ -6150,30 +6213,23 @@ function retainedTurnMaterial(input, contextTransfer) {
 }
 //#endregion
 //#region src/runtime/retained-run-start.ts
-const MAX_RETAINED_IDENTITY_BYTES = 128;
 /**
 * Mint deterministic dispatch coordinates from the two caller-supplied keys.
 * The same `(idempotencyKey, turnId)` pair yields the same coordinates in
 * every process, so a pre-dispatch admission record always names the exact
-* session and execution the dispatch will request. Short inputs keep a
-* readable URL-encoded identity. Long inputs use a full SHA-256 digest so
-* provider storage layers never receive an overlong composite identifier.
+* session and execution the dispatch will request. A full SHA-256 digest
+* keeps provider session identifiers bounded and safe for workspace paths.
 */
 function mintRetainedIdentity(idempotencyKey, turnId) {
-	const base = `${encodeURIComponent(idempotencyKey)}:${encodeURIComponent(turnId)}`;
 	const digest = canonicalCandidateDigest({
 		kind: "retained-identity.v1",
-		base
+		base: `${encodeURIComponent(idempotencyKey)}:${encodeURIComponent(turnId)}`
 	}).slice(7);
 	return {
-		sessionId: boundedRetainedIdentity("retained-session", base, digest),
-		executionId: boundedRetainedIdentity("retained-execution", base, digest)
+		sessionId: `retained-session-${digest}`,
+		executionId: `retained-execution-${digest}`
 	};
 }
-function boundedRetainedIdentity(prefix, base, digest) {
-	const readable = `${prefix}:${base}`;
-	return readable.length <= MAX_RETAINED_IDENTITY_BYTES ? readable : `${prefix}:${digest}`;
-}
 /**
 * Dispatch one detached, replayable run and return only after exact durable
 * coordinates are confirmed by the provider and persisted by the caller.
@@ -6188,12 +6244,14 @@ function boundedRetainedIdentity(prefix, base, digest) {
 async function startRetainedRun(options) {
 	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(options.turn.turnId, "turn idempotency key");
-	if (options.identity !== void 0) {
-		assertStableText(options.identity.sessionId, "retained session id");
-		assertStableText(options.identity.executionId, "retained execution id");
-	}
 	if (typeof options.onAdmission !== "function") throw new Error("startRetainedRun requires an awaited onAdmission durability hook");
-	const identity = options.identity ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
+	const { sessionId, executionId } = options.identity ?? options.intent ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
+	const identity = {
+		sessionId,
+		executionId
+	};
+	assertStableText(identity.sessionId, "retained session id");
+	assertStableText(identity.executionId, "retained execution id");
 	const contextTransfer = retainedContextTransfer(options.turn.contextTransfer);
 	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
 	const intent = retainedRunIntent(options, identity, contextTransfer);
@@ -6422,7 +6480,9 @@ async function recoverRetainedRun(options) {
 }
 /** Check public replay material before reconnecting an already-dispatched execution. */
 function assertRetainedRunReplayMaterial(provider, replay, admission) {
-	const identity = replay.identity ?? mintRetainedIdentity(replay.environment.idempotencyKey, replay.turn.turnId);
+	const identity = replay.identity ?? admission;
+	assertStableText(identity.sessionId, "retained session id");
+	assertStableText(identity.executionId, "retained execution id");
 	assertExactRetainedRunIntent(admission, retainedRunIntent({
 		...replay,
 		provider
@@ -6849,6 +6909,7 @@ function unmeteredSpend(ms) {
 /** Copy a conserved spend without dropping a completeness marker or the catalog-priced part. */
 function cloneSpend(spend) {
 	return {
+		...addResourceSpend(spend.resources),
 		iterations: spend.iterations,
 		tokens: cloneTokenUsage(spend.tokens),
 		...spend.tokensKnown === false ? { tokensKnown: false } : {},
@@ -6868,6 +6929,7 @@ function addSpend(a, b) {
 	const tokens = cloneTokenUsage(a.tokens);
 	addTokenUsage(tokens, b.tokens);
 	return {
+		...addResourceSpend(a.resources, b.resources),
 		iterations: a.iterations + b.iterations,
 		tokens,
 		...a.tokensKnown === false || b.tokensKnown === false ? { tokensKnown: false } : {},
@@ -9009,7 +9071,7 @@ async function routerChatWithUsage(cfg, messages, opts) {
 }
 function parseChatResult(json, model, transportAttempts) {
 	const data = json;
-	const { usage, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, model);
+	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, model, transportAttempts);
 	const msg = data.choices?.[0]?.message;
 	if (!msg) throw new ValidationError$1("router completion: no choices[0].message");
 	const { content, reasoning } = splitReasoning(msg?.content ?? "", msg?.reasoning ?? msg?.reasoning_content);
@@ -9019,6 +9081,7 @@ function parseChatResult(json, model, transportAttempts) {
 		...reportedModel(data.model) ? { model: reportedModel(data.model) } : {},
 		...reasoning ? { reasoning } : {},
 		...usage ? { usage } : {},
+		...resources ? { resources } : {},
 		...costUsd !== void 0 ? { costUsd } : {},
 		...costProvenance ? { costProvenance } : {},
 		...billedCostUsd !== void 0 ? { billedCostUsd } : {},
@@ -9085,13 +9148,14 @@ async function routerChatWithTools(cfg, messages, tools, opts) {
 		name: tc.function?.name ?? "",
 		arguments: tc.function?.arguments ?? "{}"
 	}));
-	const { usage, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, cfg.model);
+	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, cfg.model, transportAttempts);
 	return {
 		content: msg?.content ?? null,
 		toolCalls,
 		transportAttempts,
 		...reportedModel(data.model) ? { model: reportedModel(data.model) } : {},
 		...usage ? { usage } : {},
+		...resources ? { resources } : {},
 		...costUsd !== void 0 ? { costUsd } : {},
 		...costProvenance ? { costProvenance } : {},
 		...billedCostUsd !== void 0 ? { billedCostUsd } : {},
@@ -9141,7 +9205,12 @@ function providerRequestExtras(extraBody, reservedFields) {
 * fabricated 0: a phantom 0 reads as a free call to the conserved budget pool, which would then
 * over-spend. Shared by the buffered and streamed transports so both meter identically.
 */
-function meterTurn(raw, model) {
+function meterTurn(raw, model, transportAttempts) {
+	let resources = addResourceSpend(raw?.resources).resources;
+	if (transportAttempts > 1 && resources !== void 0) resources = Object.fromEntries(Object.entries(resources).map(([name, value]) => [name, {
+		...value,
+		known: false
+	}]));
 	const reasoning = providerReasoningTokens(raw);
 	const usage = raw && typeof raw.prompt_tokens === "number" && typeof raw.completion_tokens === "number" ? {
 		input: raw.prompt_tokens,
@@ -9151,6 +9220,7 @@ function meterTurn(raw, model) {
 	const cache = readPromptCache(raw);
 	const billedCostUsd = providerBilledCost(raw);
 	if (!usage) return {
+		...resources ? { resources } : {},
 		...billedCostUsd !== void 0 ? { billedCostUsd } : {},
 		...cache ? { cache } : {}
 	};
@@ -9158,6 +9228,7 @@ function meterTurn(raw, model) {
 	const costUsd = localEstimate !== void 0 && cache?.readSavingsUsd !== void 0 ? Math.max(0, localEstimate - cache.readSavingsUsd) : localEstimate;
 	return {
 		usage,
+		...resources ? { resources } : {},
 		...costUsd !== void 0 ? {
 			costUsd,
 			costProvenance: "catalog-estimate"
@@ -9273,7 +9344,7 @@ async function streamRouterChatWithTools(cfg, messages, tools, opts) {
 		name: call.name ?? "",
 		arguments: call.arguments || "{}"
 	}));
-	const { usage, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(rawUsage, cfg.model);
+	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(rawUsage, cfg.model, transportAttempts);
 	return {
 		content: sawContent ? split.content : null,
 		toolCalls,
@@ -9282,6 +9353,7 @@ async function streamRouterChatWithTools(cfg, messages, tools, opts) {
 		...split.reasoning ? { reasoning: split.reasoning } : {},
 		...finishReason !== void 0 ? { finishReason } : {},
 		...usage ? { usage } : {},
+		...resources ? { resources } : {},
 		...costUsd !== void 0 ? { costUsd } : {},
 		...costProvenance ? { costProvenance } : {},
 		...billedCostUsd !== void 0 ? { billedCostUsd } : {},
@@ -9527,6 +9599,7 @@ function routerBrain(cfg, opts = {}) {
 			content: result.content,
 			toolCalls: result.toolCalls,
 			...result.usage !== void 0 ? { usage: result.usage } : {},
+			...addResourceSpend(result.resources),
 			...result.usageUnknown === true ? { usageUnknown: true } : {},
 			...result.model !== void 0 ? { model: result.model } : {},
 			...result.cache !== void 0 ? { promptCache: Object.freeze({ ...result.cache }) } : {},
@@ -10967,8 +11040,8 @@ function priceUnreceiptedWork(work) {
 /**
 *
 * The conserved budget reservation pool — the invariant the whole instrument
-* rests on (critique M5/B3). One root `Budget` becomes a conserved pool of three
-* quantities (tokens, usd, iterations) plus an absolute deadline. Children reserve
+* rests on (critique M5/B3). One root `Budget` becomes a conserved pool of standard
+* quantities (tokens, usd, iterations) and caller-named resources plus an absolute deadline. Children reserve
 * atomically at spawn and reconcile at settle:
 *
 *   total ≡ free + reserved + committed          (for every known quantity)
@@ -10992,16 +11065,11 @@ function priceUnreceiptedWork(work) {
 * it trusts a reported `input`: the token channel is an accounting unit, not a trust boundary
 * against a provider that misreports its own usage.
 *
-* THE POOL RESERVES AGAINST THREE QUANTITIES AND NO MORE. `Spend.boxMinutes` — platform box wall
-* time — is reported and summed, and it is never reserved, never committed, and never refunded.
-* The reason is the conservation law above: a reservation is only meaningful against a ceiling a
-* caller declared and a measurement the pool can trust, and box minutes have neither. `Budget`
-* declares no box ceiling, and the number the sandbox executor reports is DERIVED from the box
-* lifetime it watched (`boxMinutesProvenance: 'estimated'`), not a platform receipt. Reserving
-* against an estimate would let a derived number refuse real work, which is the same defect as a
-* gate that cannot fire, inverted. When the platform reports minutes itself
-* (`boxMinutesProvenance: 'observed'`) and a `Budget` gains a box ceiling, the channel becomes a
-* conserved quantity; until both hold, it is evidence only.
+* Named resources require explicit units, ceilings, and complete executor measurements.
+* Missing or unknown enforced measurements close admission for that resource.
+* The pool trusts those receipts; it does not independently meter external systems.
+* `Spend.boxMinutes` remains evidence only and has no implicit resource ceiling.
+* Callers must not present estimated box lifetime as a measured resource receipt.
 *
 * Pure and deterministic: the run's start instant is supplied, there is no I/O, and no
 * wall-clock or RNG read. A `reserve`/`reconcile` ticket is single-use (fail-loud on double or
@@ -11033,12 +11101,14 @@ function assertValidBudget(budget, label = "budget") {
 	const finiteNonNegative = (value, field) => {
 		if (!Number.isFinite(value) || value < 0) throw new Error(`${label}.${field} must be a non-negative finite number`);
 	};
+	assertResources(budget.resources, "limit", `${label}.resources`);
 	safeInteger(budget.maxIterations, "maxIterations");
 	safeInteger(budget.maxTokens, "maxTokens");
 	if (budget.maxUsd !== void 0) finiteNonNegative(budget.maxUsd, "maxUsd");
 	if (budget.deadlineMs !== void 0) finiteNonNegative(budget.deadlineMs, "deadlineMs");
 }
 function assertValidSpend(spend, label) {
+	assertResources(spend.resources, "amount", `${label}.resources`);
 	if (!Number.isSafeInteger(spend.iterations) || spend.iterations < 0) throw new Error(`${label}.iterations must be a non-negative safe integer`);
 	for (const [field, value] of [
 		["input", spend.tokens.input],
@@ -11090,6 +11160,14 @@ function newUsageTotals() {
 * `iteration` advances the iteration count.
 */
 function meterUsageEvent(totals, ev) {
+	if (ev.kind === "resource") {
+		totals.resources = addResourceSpend(totals.resources, Object.fromEntries([[ev.name, {
+			unit: ev.unit,
+			amount: ev.amount,
+			known: ev.known
+		}]])).resources;
+		return;
+	}
 	if (ev.kind === "tokens") {
 		addTokenUsage(totals.tokens, ev);
 		if (ev.tokensKnown === false) totals.tokensKnown = false;
@@ -11111,6 +11189,7 @@ function meterUsageEvent(totals, ev) {
 *  read wall-clock. */
 function spendFromUsageTotals(totals) {
 	return {
+		...addResourceSpend(totals.resources),
 		iterations: totals.iterations,
 		tokens: totals.tokens,
 		...totals.tokensKnown ? {} : { tokensKnown: false },
@@ -11153,10 +11232,56 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	let reservedIterations = 0;
 	let committedIterations = 0;
 	const absoluteDeadlineMs = root.deadlineMs === void 0 ? 0 : runStartedAtMs + root.deadlineMs;
+	const resources = new Map(Object.entries(root.resources ?? {}).map(([name, value]) => [name, {
+		...value,
+		remaining: value.limit,
+		reserved: 0,
+		committed: 0,
+		known: true
+	}]));
+	function validateResourceUnits(spend) {
+		for (const [name, value] of Object.entries(spend.resources ?? {})) {
+			const limit = resources.get(name);
+			if (limit && limit.unit !== value.unit) throw new Error(`resource ${name}: unit mismatch`);
+		}
+	}
+	function commitResources(spend, reserved = {}, requireAll = true) {
+		let violation;
+		for (const [name, state] of resources) {
+			const value = spend.resources?.[name];
+			if (!requireAll && value === void 0) continue;
+			const allocation = reserved?.[name]?.limit ?? 0;
+			const amount = value?.amount ?? 0;
+			state.reserved -= allocation;
+			const committed = state.committed + amount;
+			const overflow = !Number.isSafeInteger(committed);
+			state.committed = Math.min(committed, Number.MAX_SAFE_INTEGER);
+			state.remaining = state.limit - state.reserved - state.committed;
+			if (value?.known !== true || overflow) {
+				state.known = false;
+				const retained = Math.max(0, state.remaining);
+				state.committed += retained;
+				state.remaining -= retained;
+				violation ??= overflow ? `resource ${name}: amount overflow under an enforced limit` : `resource ${name}: unknown usage under an enforced limit`;
+			} else if (reserved?.[name] && amount > allocation) violation ??= `resource ${name}: spent ${amount} > reserved ${allocation}`;
+			else if (state.remaining < 0) violation ??= `resource ${name}: exceeded root limit ${state.limit}`;
+		}
+		return violation;
+	}
 	let nextTicketId = 0;
 	const open = /* @__PURE__ */ new Set();
 	function reserve(b) {
 		assertValidBudget(b, "reservation budget");
+		for (const [name, state] of resources) {
+			const wanted = b.resources?.[name];
+			if (!wanted) throw new ValidationError$1(`resource ${name}: child must declare its limit`);
+			if (wanted.unit !== state.unit) throw new ValidationError$1(`resource ${name}: unit mismatch`);
+			if (!state.known || wanted.limit > state.remaining) return {
+				ok: false,
+				reason: "budget-exhausted"
+			};
+		}
+		for (const name of Object.keys(b.resources ?? {})) if (!resources.has(name)) throw new ValidationError$1(`resource ${name}: root must declare its limit`);
 		const wantTokens = b.maxTokens;
 		const wantUsd = b.maxUsd ?? 0;
 		const wantIterations = b.maxIterations;
@@ -11180,6 +11305,11 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			ok: false,
 			reason: "budget-exhausted"
 		};
+		for (const [name, state] of resources) {
+			const amount = b.resources[name].limit;
+			state.remaining -= amount;
+			state.reserved += amount;
+		}
 		freeTokens -= wantTokens;
 		reservedTokens += wantTokens;
 		freeIterations -= wantIterations;
@@ -11195,6 +11325,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			ticket: {
 				id,
 				reserved: {
+					...b.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(b.resources).map(([name, value]) => [name, { ...value }])) },
 					tokens: wantTokens,
 					usd: wantUsd,
 					iterations: wantIterations,
@@ -11206,6 +11337,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	function reconcile(ticket, spent) {
 		if (!open.has(ticket.id)) throw new Error(`budget pool: reconcile of unknown or already-settled ticket ${ticket.id}`);
 		assertValidSpend(spent, `budget pool ticket ${ticket.id} spend`);
+		validateResourceUnits(spent);
 		const { tokens: rTokens, usd: rUsd, iterations: rIterations } = ticket.reserved;
 		const unknownUnderCap = usdCapped && spent.usdKnown === false;
 		const spentTokens = chargedTokens(spent.tokens);
@@ -11233,10 +11365,13 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 				freeUsd = 0;
 			} else freeUsd += rUsd - spent.usd;
 		} else committedUsd += spent.usd;
+		const resourceViolation = commitResources(spent, ticket.reserved.resources);
+		violation ??= resourceViolation;
 		if (violation !== void 0) throw new Error(`budget pool: ${violation}`);
 	}
-	function observe(spend) {
+	function observe(spend, options = {}) {
 		assertValidSpend(spend, "observed spend");
+		validateResourceUnits(spend);
 		if (usdCapped && spend.usdKnown === false) throw new ValidationError$1("budget pool: cannot observe unknown dollar cost under a dollar-capped budget");
 		if (spend.tokensKnown === false) tokensTainted = true;
 		if (!hasCompleteCacheBreakdown(spend.tokens)) cacheBreakdownTainted = true;
@@ -11248,9 +11383,12 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 		committedIterations += spend.iterations;
 		committedUsd += spend.usd;
 		if (usdCapped) freeUsd -= spend.usd;
+		const violation = commitResources(spend, {}, !options.partial);
+		if (violation) throw new ValidationError$1(`budget pool: ${violation}`);
 	}
 	function readout() {
 		return {
+			...resources.size ? { resources: Object.fromEntries([...resources].map(([name, value]) => [name, { ...value }])) } : {},
 			tokensLeft: freeTokens,
 			tokensKnown: !tokensTainted,
 			cacheBreakdownKnown: !cacheBreakdownTainted,
@@ -11267,6 +11405,8 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	}
 	if (restore.committed !== void 0) {
 		assertValidSpend(restore.committed, "budget restore committed");
+		validateResourceUnits(restore.committed);
+		commitResources(restore.committed);
 		const committed = restore.committed;
 		if (committed.tokensKnown === false) tokensTainted = true;
 		if (!hasCompleteCacheBreakdown(committed.tokens)) cacheBreakdownTainted = true;
@@ -11288,6 +11428,12 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	}
 	for (const [index, uncertain] of (restore.uncertainReservations ?? []).entries()) {
 		assertValidBudget(uncertain, `budget restore uncertainReservations[${index}]`);
+		commitResources(withBudgetResources({
+			iterations: 0,
+			tokens: zeroTokenUsage(),
+			usd: 0,
+			ms: 0
+		}, root));
 		tokensTainted = true;
 		usdMeasured = false;
 		freeTokens -= uncertain.maxTokens;
@@ -13103,6 +13249,7 @@ function readWorkerProgress(scope, executor, now, stallAfterMs = DEFAULT_STALL_A
 	const idleMs = Math.max(0, now - lastActivityAt);
 	const note = executor?.note;
 	return {
+		...addResourceSpend(scope.resources),
 		id: scope.id,
 		status: scope.status,
 		live,
@@ -14270,6 +14417,7 @@ const routerInlineExecutor = (spec, ctx) => {
 			}));
 			if (r.model !== void 0) recordRuntimeOwnedProviderModel(executor, r.model);
 			const spent = {
+				...addResourceSpend(r.resources),
 				iterations: 1,
 				tokens: r.usage ? cloneTokenUsage({
 					input: r.usage.input,
@@ -14420,6 +14568,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			let billedUsd = 0;
 			let usdKnown = true;
 			let turns = 0;
+			let resources;
 			let transportAttempts = 0;
 			let observedModel;
 			let reasoningTokens = 0;
@@ -14468,6 +14617,10 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 						cleanup();
 						if (e instanceof DOMException && e.name === "AbortError" && interruptSig.aborted && !signal.aborted && !controller.signal.aborted) {
 							turns += 1;
+							resources = addResourceSpend(Object.fromEntries(Object.entries(resources ?? {}).map(([name, value]) => [name, {
+								...value,
+								known: false
+							}]))).resources;
 							transportAttempts += routerTransportAttemptsFromError(e) ?? 1;
 							tokensKnown = false;
 							usdKnown = false;
@@ -14478,6 +14631,12 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 					}
 					cleanup();
 					turns += 1;
+					const priorResources = resources;
+					resources = addResourceSpend(resources, res.resources).resources;
+					resources = addResourceSpend(Object.fromEntries(Object.entries(resources ?? {}).map(([name, value]) => [name, {
+						...value,
+						known: value.known && res.resources?.[name] !== void 0 && (turns === 1 || priorResources?.[name] !== void 0)
+					}]))).resources;
 					transportAttempts += res.transportAttempts;
 					if (res.model !== void 0) recordRuntimeOwnedProviderModel(executor, res.model);
 					assertObservedRouterModel(res.model, model, "routerToolsInlineExecutor");
@@ -14587,6 +14746,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			}
 			const estimatedUsd = isModelPriced(model) ? estimateCost(tokens.input, tokens.output, model) : void 0;
 			const spent = {
+				...addResourceSpend(resources),
 				iterations: turns,
 				tokens,
 				...tokensKnown ? {} : { tokensKnown: false },
@@ -17913,7 +18073,12 @@ async function startRetainedInteractiveRun(options) {
 	const profile = agentProfileSchema.parse(startOptions.environment.profile);
 	if (profile.harness === void 0) throw new Error("retained interactive runs require AgentProfile.harness");
 	const requestedProfileDigest = canonicalAgentProfileDigest(profile);
-	const identity = mintRetainedIdentity(startOptions.environment.idempotencyKey, startOptions.interactiveIdempotencyKey);
+	const identity = startOptions.intent === void 0 ? mintRetainedIdentity(startOptions.environment.idempotencyKey, startOptions.interactiveIdempotencyKey) : {
+		sessionId: startOptions.intent.sessionId,
+		executionId: startOptions.intent.executionId
+	};
+	assertStableText(identity.sessionId, "retained session id");
+	assertStableText(identity.executionId, "retained execution id");
 	const intent = interactiveIntent(startOptions, profile, identity);
 	if (startOptions.intent === void 0) await admitDurably(startOptions.onAdmission, intent);
 	else assertExactInteractiveIntent(startOptions.intent, intent);
@@ -17987,9 +18152,21 @@ function exactRecoveryRequest(admission) {
 	assertStableText(admission.interactiveIdempotencyKey, "interactive idempotency key");
 	const request = exactAgentInteractiveSessionStart(admission.request);
 	const identity = mintRetainedIdentity(admission.idempotencyKey, admission.interactiveIdempotencyKey);
-	if (request.run.provider !== admission.provider || request.run.environmentId !== admission.environmentId || request.run.sessionId !== identity.sessionId || request.run.executionId !== identity.executionId) throw new Error("interactive admission does not match its recovery coordinates");
+	if (request.run.provider !== admission.provider || request.run.environmentId !== admission.environmentId || (request.run.sessionId !== identity.sessionId || request.run.executionId !== identity.executionId) && !matchesHistoricalInteractiveIdentity(admission, request)) throw new Error("interactive admission does not match its recovery coordinates");
 	return request;
 }
+function matchesHistoricalInteractiveIdentity(admission, request) {
+	const base = `${encodeURIComponent(admission.idempotencyKey)}:${encodeURIComponent(admission.interactiveIdempotencyKey)}`;
+	const digest = canonicalCandidateDigest({
+		kind: "retained-identity.v1",
+		base
+	}).slice(7);
+	const historicalId = (prefix) => {
+		const readable = `${prefix}:${base}`;
+		return readable.length <= 128 ? readable : `${prefix}:${digest}`;
+	};
+	return request.run.sessionId === historicalId("retained-session") && request.run.executionId === historicalId("retained-execution");
+}
 /** Rebuild controls for one exact provider-owned coding-agent process. @stable */
 async function reconnectRetainedInteractiveRun(options) {
 	options.signal?.throwIfAborted();
@@ -18758,6 +18935,8 @@ function sumSpendFromEvents(events) {
 	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
 	let remainingRootUsd = Math.max(0, (rootBudget?.maxUsd ?? 0) - totals.childWork.usd - totals.driverInference.usd);
 	for (const budget of uncertainSpawnBudgets(events)) {
+		const unknown = withBudgetResources(zeroSpend(), budget);
+		Object.assign(totals.childWork, addResourceSpend(totals.childWork.resources, unknown.resources));
 		totals.childWork.iterations += budget.maxIterations;
 		totals.childWork.tokens.input += budget.maxTokens;
 		totals.childWork.tokensKnown = false;
@@ -18769,10 +18948,17 @@ function sumSpendFromEvents(events) {
 	return totals;
 }
 function sumMeasuredSpendFromEvents(events) {
+	const budgets = new Map(events.flatMap((event) => event.kind === "spawned" ? [[event.id, event.budget]] : []));
 	let childWork = zeroSpend();
 	let driverInference = zeroSpend();
-	for (const ev of events) if (ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0) childWork = addSpend(childWork, ev.spent);
-	else if (ev.kind === "metered") driverInference = addSpend(driverInference, ev.spend);
+	const owners = /* @__PURE__ */ new Map();
+	for (const ev of events) if (ev.kind === "settled" || ev.kind === "cancelled") childWork = addSpend(childWork, withBudgetResources(ev.spent ?? {
+		...zeroSpend(),
+		tokensKnown: false,
+		usdKnown: false
+	}, budgets.get(ev.id) ?? {}));
+	else if (ev.kind === "metered") owners.set(ev.id, addSpend(owners.get(ev.id) ?? zeroSpend(), ev.spend));
+	for (const [id, spend] of owners) driverInference = addSpend(driverInference, withBudgetResources(spend, budgets.get(id) ?? {}));
 	return {
 		childWork,
 		driverInference
@@ -18783,12 +18969,14 @@ async function prepareScopeResume(opts, events, signal, now, parentId = opts.run
 	const prepared = await prepareInterruptedExecutors(opts, events, signal, now, parentId);
 	const prior = prepared.events;
 	const recovering = new Set(prepared.recoveries.map((item) => item.spawned.id));
-	const measured = sumMeasuredSpendFromEvents(prior.filter((event) => event.kind !== "metered" || !recovering.has(event.id)));
+	const measuredEvents = prior.filter((event) => event.kind !== "metered" || !recovering.has(event.id));
+	const measured = sumMeasuredSpendFromEvents(measuredEvents);
+	const hasCommittedEvidence = measuredEvents.some((event) => event.kind === "metered" || event.kind === "settled" || event.kind === "cancelled");
 	const settled = await replaySpawnTree(opts.journal, opts.blobs, opts.runId);
 	signal.throwIfAborted();
 	return {
 		poolRestore: {
-			committed: addSpend(measured.childWork, measured.driverInference),
+			...hasCommittedEvidence ? { committed: addSpend(measured.childWork, measured.driverInference) } : {},
 			uncertainReservations: uncertainSpawnBudgets(prior, recovering)
 		},
 		resumeFrom: {
@@ -19383,7 +19571,7 @@ function createScope(args) {
 			spec = prepared.spec;
 			identity = prepared.identity;
 			if (opts.key !== void 0 && !isCompleteIdentity(identity)) {
-				args.pool.reconcile(reservation.ticket, zeroSpend());
+				args.pool.reconcile(reservation.ticket, withBudgetResources(zeroSpend(), opts.budget, true));
 				permit.release();
 				return {
 					ok: false,
@@ -19397,7 +19585,7 @@ function createScope(args) {
 			if (!outcome.succeeded) throw new ValidationError$1(`scope.spawn: ${outcome.error}`);
 			resolved = outcome;
 		} catch (error) {
-			args.pool.reconcile(reservation.ticket, zeroSpend());
+			args.pool.reconcile(reservation.ticket, withBudgetResources(zeroSpend(), opts.budget, true));
 			permit.release();
 			throw error;
 		}
@@ -19759,7 +19947,7 @@ function createScope(args) {
 			permit.release();
 			clearChildDeadline?.();
 			if (cascadeAbort) args.signal.removeEventListener("abort", cascadeAbort);
-			args.pool.reconcile(reservation.ticket, zeroSpend());
+			args.pool.reconcile(reservation.ticket, withBudgetResources(zeroSpend(), opts.budget, true));
 			throw err;
 		}
 	}
@@ -19987,6 +20175,7 @@ function createScope(args) {
 			steerable: child.deliver !== void 0 && !child.delivered,
 			startedAt: child.startedAt,
 			lastActivityAt: child.lastActivityAt,
+			...addResourceSpend(child.spent.resources),
 			turns: child.spent.iterations,
 			tokens: child.spent.tokens,
 			...child.spent.tokensKnown === false ? { tokensKnown: false } : {},
@@ -20025,10 +20214,12 @@ function createScope(args) {
 	}
 	async function meterInternal(spend, detail, providerModel, accountingOnly = false) {
 		if (args.signal.aborted) throw new ValidationError$1("scope.meter: cannot record new driver work after scope abort");
+		const partial = providerModel !== void 0 || accountingOnly;
+		if (!partial) spend = withBudgetResources(spend, args.pool.readout());
 		const seq = meterSeq++;
 		let observeError;
 		try {
-			args.pool.observe(spend);
+			args.pool.observe(spend, { partial });
 		} catch (error) {
 			observeError = error;
 		}
@@ -20628,6 +20819,23 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		if (reconciled) return reconciliationError;
 		reconciled = true;
 		try {
+			try {
+				spend = withBudgetResources(spend, opts.budget, !started);
+				live.spent = withBudgetResources(live.spent, opts.budget, !started || executor.accounting?.() !== void 0);
+			} catch (error) {
+				spend = withBudgetResources({
+					...spend,
+					resources: void 0
+				}, opts.budget);
+				live.spent = withBudgetResources({
+					...live.spent,
+					resources: void 0
+				}, opts.budget);
+				try {
+					pool.reconcile(ticket, spend);
+				} catch {}
+				throw error;
+			}
 			pool.reconcile(ticket, spend);
 			return;
 		} catch (error) {
@@ -20775,7 +20983,11 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		if (started && !terminalTelemetryCaptured && accounting === void 0) live.spent = {
 			...live.spent,
 			tokensKnown: false,
-			usdKnown: false
+			usdKnown: false,
+			...live.spent.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(live.spent.resources).map(([name, value]) => [name, {
+				...value,
+				known: false
+			}])) }
 		};
 		const reconcileError = reconcileOnce(accounting?.reservation ?? live.spent);
 		return downRecord(errMessage(err), evidenceError !== void 0 || teardownError !== void 0 || reconcileError !== void 0 || aborted || isInfraError(err), trace, executor.metered?.(), providerModel);
@@ -20933,6 +21145,7 @@ async function foldStream(stream, onProgress, signal) {
 			const ev = next.value;
 			meterUsageEvent(totals, ev);
 			await onProgress?.({
+				...addResourceSpend(totals.resources),
 				iterations: totals.iterations,
 				tokens: cloneTokenUsage(totals.tokens),
 				...totals.tokensKnown ? {} : { tokensKnown: false },
@@ -20954,6 +21167,7 @@ function preserveUnknownTelemetry(streamed, terminal) {
 	const terminalTokens = cloneTokenUsage(terminal.tokens);
 	return {
 		...streamed,
+		...resourceTelemetry(streamed, terminal),
 		tokens: {
 			...streamed.tokens,
 			...streamed.tokens.freshInput === void 0 && terminalTokens.freshInput !== void 0 ? { freshInput: terminalTokens.freshInput } : {},
@@ -21315,7 +21529,7 @@ function sumMetered(events) {
 *  went unmeasured did real work, and dropping its `metered` event here would re-hide upstream the
 *  very turn the driver refused to skip. */
 function isNonZeroSpend(s) {
-	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false;
+	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.keys(s.resources ?? {}).length > 0;
 }
 /** A spend, or `undefined` when it is all-zero — so `metered()` returns undefined for a driver
 *  whose sub-tree did no inference (and the parent journals no empty `metered` event). */
@@ -21396,6 +21610,15 @@ function unreportedSpend(total, prior) {
 	}
 	return {
 		...total,
+		...addResourceSpend(total.resources === void 0 ? void 0 : Object.fromEntries(Object.entries(total.resources).map(([name, value]) => {
+			const previous = prior.resources?.[name];
+			if (previous && previous.unit !== value.unit) throw new ValidationError$1(`resource ${name}: unit mismatch`);
+			return [name, {
+				...value,
+				amount: Math.max(0, value.amount - (previous?.amount ?? 0)),
+				known: value.known && (previous?.known ?? true)
+			}];
+		}))),
 		iterations: Math.max(0, total.iterations - prior.iterations),
 		tokens,
 		usd: Math.max(0, total.usd - prior.usd),
@@ -22194,9 +22417,12 @@ async function terminalAccounting(journal, root, elapsedMs) {
 *  result this list rides on. */
 function spendGapsFromEvents(events) {
 	const labels = /* @__PURE__ */ new Map();
+	const budgets = /* @__PURE__ */ new Map();
 	const terminal = /* @__PURE__ */ new Set();
-	for (const ev of events) if (ev.kind === "spawned") labels.set(ev.id, ev.label);
-	else if (closesCursorSlot(ev)) terminal.add(ev.id);
+	for (const ev of events) if (ev.kind === "spawned") {
+		labels.set(ev.id, ev.label);
+		budgets.set(ev.id, ev.budget);
+	} else if (closesCursorSlot(ev)) terminal.add(ev.id);
 	const gaps = /* @__PURE__ */ new Map();
 	const record = (id, kind, channels) => {
 		if (channels.length === 0) return;
@@ -22209,9 +22435,17 @@ function spendGapsFromEvents(events) {
 			channels: new Set(channels)
 		});
 	};
-	for (const ev of events) if (ev.kind === "spawned" && ev.parent !== void 0 && !terminal.has(ev.id)) record(ev.id, "never-settled", ["tokens", "usd"]);
-	else if (ev.kind === "cancelled" && ev.spent === void 0) record(ev.id, "unreported", ["tokens", "usd"]);
-	else if (ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0) record(ev.id, "unreported", unknownChannels(ev.spent));
+	for (const ev of events) if (ev.kind === "spawned" && ev.parent !== void 0 && !terminal.has(ev.id)) record(ev.id, "never-settled", [
+		"tokens",
+		"usd",
+		...Object.keys(ev.budget.resources ?? {}).map((name) => `resource:${name}`)
+	]);
+	else if (ev.kind === "cancelled" && ev.spent === void 0) record(ev.id, "unreported", [
+		"tokens",
+		"usd",
+		...Object.keys(budgets.get(ev.id)?.resources ?? {}).map((name) => `resource:${name}`)
+	]);
+	else if (ev.kind === "settled" || ev.kind === "cancelled" && ev.spent !== void 0) record(ev.id, "unreported", unknownChannels(withBudgetResources(ev.spent, budgets.get(ev.id) ?? {})));
 	else if (ev.kind === "metered") record(ev.id, "unreported", unknownChannels(ev.spend));
 	return [...gaps.values()].map((gap) => {
 		const label = labels.get(gap.id);
@@ -22228,13 +22462,14 @@ function unknownChannels(spend) {
 	const channels = [];
 	if (spend.tokensKnown === false) channels.push("tokens");
 	if (spend.usdKnown === false) channels.push("usd");
+	for (const [name, resource] of Object.entries(spend.resources ?? {})) if (!resource.known) channels.push(`resource:${name}`);
 	return channels;
 }
 /** True when any driver metered inference this run (so the winner carries a `spentBreakdown`).
 *  Checks every channel `addSpend` sums — including `ms` — so the gate stays consistent with the
 *  total even though the coordination driver currently stamps `ms: 0`. */
 function isNonEmptySpend(s) {
-	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false;
+	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
 //#region src/redact.ts
@@ -22320,6 +22555,6 @@ function resolveRedactor(redact) {
 	return (value) => defaultRedactor(redact(value));
 }
 //#endregion
-export { bridgeAdmissionRefusal as $, buildLoopSpanNodes as $n, newExecutionAttemptId as $r, spendFromUsageEvents as $t, consumeScopeRetainedOwnerResult as A, awaitAbortable$1 as Ai, throwIfAborted as An, fullProfileMaterialization as Ar, peerMailTools as At, workerInteractiveBindingFile as B, startRetainedRun as Bn, validateProfileMaterialization as Br, insideCursorNamespace as Bt, settledToIteration as C, mapSandboxToolEvent as Ci, hasCompleteCacheBreakdown as Cn, localHarnessExecutable as Cr, createInbox as Ct, timerAt as D, sumSandboxUsage as Di, sleep as Dn, assertProfileMaterialization as Dr, claimsAuthority as Dt, pollFor as E, sandboxProgressEvents as Ei, randomSuffix as En, AGENT_PROFILE_MATERIALIZATION_AXES as Er, PEER_MAIL_WIRE_KEY as Et, interactiveAdmissionSeamKey as F, RunCancellationReason as Fn, promptResourceProfileMaterialization as Fr, taskToPrompt as Ft, destroyInteractiveEnvironment as G, harnessUsageIsEmpty as Gn, writeAllBytes as Gr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Gt, reconnectRetainedInteractiveRun as H, retainedCreateMaterial as Hn, isNoEntError as Hr, materializeTreeView as Ht, readWorkerInteractiveAdmissions as I, abortError$1 as In, renderProfileMaterializationIssues as Ir, FileResultBlobStore as It, queueOf as J, mergeTraceEnv as Jn, authoredProfileDigest as Jr, parseWorkerToolTraceArtifact as Jt, effectiveConcurrency as K, readCodexRolloutSession as Kn, attestRuntimeOwnedPendingExecutor as Kr, captureWorkerTraceEvidence as Kt, workerInteractiveAdmissionFile as L, linkAbort as Ln, renderUnsupported as Lr, FileSpawnJournal as Lt, scopeRetainedOwnerContext as M, promptOptionsFromAgentTurnInput as Mi, zeroSpend as Mn, promptControlProfileMaterialization as Mr, isLiveNodeStatus as Mt, scopeRetainedOwnerPriorSpend as N, providerMessageText as Ni, registerRetainedExecutorPreparation as Nn, promptModelProfileMaterialization as Nr, isTerminalNodeStatus as Nt, validateWaitSpec as O, decodeHarnessUsage as Oi, stringifySafe as On, controlProfileMaterialization as Or, createPeerMailbox as Ot, scopeRetainedOwnerResult as P, retainedExecutorSeamKey as Pn, promptOnlyProfileMaterialization as Pr, createInPlaceCliExecutor as Pt, bindReusableExecutorExecutionId as Q, buildLoopOtelSpans as Qn, knownMaterializationReceipt as Qr, createBudgetPool as Qt, attachWorker as R, reconnectRetainedRun as Rn, sandboxActProfileMaterialization as Rr, InMemoryResultBlobStore as Rt, scopeOwnerExecutorNodeContext as S, mapSandboxEvent as Si, deleteBoxSafe as Sn, harnessSupportsReasoningEffort as Sr, readWorkerProgress as St, isWaitOutcome as T, sandboxEventServedBackend as Ti, promptCacheTokenClasses as Tn, CodexExecutionDiagnosticError as Tr, DEFAULT_PEER_MAIL_LIMITS as Tt, recoverRetainedInteractiveRun as U, addHarnessUsage as Un, parseCommittedJsonLines as Ur, pendingWaits as Ut, workerInteractiveBindingsDir as V, startRetainedRunInEnvironment as Vn, worktreeCliProfileMaterialization as Vr, loadSpawnForest as Vt, startRetainedInteractiveRun as W, createCodexRolloutStoreReader as Wn, prepareJsonlAppend as Wr, replaySpawnTree as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, traceContextToEnv as Xn, inheritRuntimeOwnedExecutorAttestation as Xr, contentAddress as Xt, rollingDispatch as Y, readTraceContextFromEnv as Yn, finalizeRuntimeOwnedPendingExecutor as Yr, workerTraceAnalysisStore as Yt, teardownExecutor as Z, INTELLIGENCE_WIRE_VERSION as Zn, knownExecutionBindingReceipt as Zr, assertValidBudget as Zt, deriveNodeExecutionIdentity as _, canonicalStreamEventFromSandboxEvent as _i, resolveAgentEnvironmentProvider as _n, captureWorktreeDiff as _r, createPushTraceSource as _t, createSupervisor as a, runtimeOwnedExecutorProviderEvidence as ai, createSandboxLineage as an, generateSpanId as ar, cliWorktreeExecutor as at, recordScopeOwnerMaterialization as b, extractLlmCallEvent as bi, chargedTokens as bn, DEFAULT_LOCAL_HARNESS as br, DEFAULT_STALL_AFTER_MS as bt, pickBestDelivered as c, unknownExecutionBindingReceipt as ci, assertBoxlessPromptOptions as cn, padTraceId as cr, snapshotExecutorConfig as ct, driverChild as d, executableAgentSpecSnapshot as di, runBrainLoop as dn, createRuntimeStreamEventCollector as dr, readWorkerTraceContext as dt, providerAttemptEvidence as ei, TERMINAL_DECISIONS as en, buildRuntimeEventOtelSpans as er, bridgeModelRouteRefusal as et, driverExecutorFactory as f, detachedFrozen as fi, canonicalObservedModelParts as fn, sanitizeAgentRuntimeEvent as fr, workerTraceEnv as ft, createScope as g, assertSandboxServedModel as gi, providerAsSandboxClient as gn, runWorktreeHarness as gr, createSteerableSandboxSession as gt, beginScopeOwnerAttempt as h, readSandboxOutcome as hi, providerAsExecutor as hn, runSettledCommand as hr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ht, createRootHandle as i, runtimeOwnedExecutorMaterialization as ii, runAgentRounds as in, flatOtelSpan as ir, cliInPlaceExecutor as it, prepareScopeRetainedOwnerTask as j, promptFromAgentTurnInput as ji, unmeteredSpend as jn, profileMaterializationAxes$1 as jr, peerMailVerbNames as jt, waitUntil as k, abortError$2 as ki, throwAbort as kn, defineProfileMaterializationContract as kr, isPeerMailEnvelope as kt, runFinalizer as l, unknownMaterializationReceipt as li, readPromptOptions as ln, toOtelAttributes as lr, createWorktreeCliExecutor as lt, withDriverExecutor as m, projectSandboxOutcome as mi, createAgentEnvironmentProviderRegistry as mn, sanitizeRuntimeStreamEvent as mr, workerTraceSeamKey as mt, defaultRedactorIdentityMaterial as n, runtimeOwnedDriveHarnessProviderEvidence as ni, defaultSelectWinner as nn, createOtelExporter as nr, bridgeStopSignalKey as nt, bestDelivered as o, runtimeOwnedPendingExecutorMaterialization as oi, probeSandboxCapabilities as on, loopEventToOtelSpan as or, createExecutor as ot, isDriverSpec as p, detachedSnapshot as pi, observedModelMatchesDeclared as pn, sanitizeKnowledgeReadinessReport as pr, workerTraceHeaders as pt, freeSlots as q, createPropagatingTraceEmitter as qn, attestRuntimeOwnedScopeOwner as qr, isTraceAnalysisStore as qt, resolveRedactor as r, runtimeOwnedExecutorExecutionBinding as ri, isTerminalDecision as rn, exportEvalRuns as rr, captureReusableExecutorConfig as rt, collectDelivered as s, runtimeOwnedScopeOwnerRuntime as si, acquireSandbox as sn, padSpanId as sr, createExecutorRegistry as st, defaultRedactor as t, recordRuntimeOwnedDriveHarnessProviderEvidence as ti, createSandboxForSpec as tn, createOpenInferenceFileExporter as tr, bridgeRuntimeAttachmentsKey as tt, runTree as u, executableAgentProfileSnapshot as ui, routerBrain as un, createRuntimeEventCollector as ur, WORKER_TRACE_PROPAGATION as ut, meterRuntimeOwnedAccounting as v, createSandboxToolPartState as vi, sandboxClientAsProvider as vn, createWorktree as vr, decodeToolPart as vt, createWaitProbes as w, notifySandboxEventObserver as wi, isAbortError$2 as wn, parseCodexTokenUsage as wr, AUTHORITY_MARKERS as wt, restoreScopeOwnerAcceptedExecution as x, isSandboxTerminalEvent as xi, cloneSpend as xn, LOCAL_HARNESSES as xr, createActivityLog as xt, meterRuntimeOwnedProviderAttempt as y, createSandboxUsageLedger as yi, addSpend as yn, removeWorktree as yr, sandboxSessionTraceSource as yt, readWorkerInteractiveBinding as z, recoverRetainedRun as zn, unsupportedProfileDimensions as zr, InMemorySpawnJournal as zt };
+export { bridgeAdmissionRefusal as $, buildLoopSpanNodes as $n, inheritRuntimeOwnedExecutorAttestation as $r, spendFromUsageEvents as $t, consumeScopeRetainedOwnerResult as A, sumSandboxUsage as Ai, throwIfAborted as An, assertProfileMaterialization as Ar, peerMailTools as At, workerInteractiveBindingFile as B, startRetainedRun as Bn, renderUnsupported as Br, insideCursorNamespace as Bt, settledToIteration as C, extractLlmCallEvent as Ci, hasCompleteCacheBreakdown as Cn, DEFAULT_LOCAL_HARNESS as Cr, createInbox as Ct, timerAt as D, notifySandboxEventObserver as Di, sleep as Dn, parseCodexTokenUsage as Dr, claimsAuthority as Dt, pollFor as E, mapSandboxToolEvent as Ei, randomSuffix as En, localHarnessExecutable as Er, PEER_MAIL_WIRE_KEY as Et, interactiveAdmissionSeamKey as F, promptOptionsFromAgentTurnInput as Fi, RunCancellationReason as Fn, promptControlProfileMaterialization as Fr, taskToPrompt as Ft, destroyInteractiveEnvironment as G, harnessUsageIsEmpty as Gn, isNoEntError as Gr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Gt, reconnectRetainedInteractiveRun as H, retainedCreateMaterial as Hn, unsupportedProfileDimensions as Hr, materializeTreeView as Ht, readWorkerInteractiveAdmissions as I, providerMessageText as Ii, abortError$1 as In, promptModelProfileMaterialization as Ir, FileResultBlobStore as It, queueOf as J, mergeTraceEnv as Jn, writeAllBytes as Jr, parseWorkerToolTraceArtifact as Jt, effectiveConcurrency as K, readCodexRolloutSession as Kn, parseCommittedJsonLines as Kr, captureWorkerTraceEvidence as Kt, workerInteractiveAdmissionFile as L, linkAbort as Ln, promptOnlyProfileMaterialization as Lr, FileSpawnJournal as Lt, scopeRetainedOwnerContext as M, abortError$2 as Mi, zeroSpend as Mn, defineProfileMaterializationContract as Mr, isLiveNodeStatus as Mt, scopeRetainedOwnerPriorSpend as N, awaitAbortable$1 as Ni, registerRetainedExecutorPreparation as Nn, fullProfileMaterialization as Nr, isTerminalNodeStatus as Nt, validateWaitSpec as O, sandboxEventServedBackend as Oi, stringifySafe as On, CodexExecutionDiagnosticError as Or, createPeerMailbox as Ot, scopeRetainedOwnerResult as P, promptFromAgentTurnInput as Pi, retainedExecutorSeamKey as Pn, profileMaterializationAxes$1 as Pr, createInPlaceCliExecutor as Pt, bindReusableExecutorExecutionId as Q, buildLoopOtelSpans as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, createBudgetPool as Qt, attachWorker as R, reconnectRetainedRun as Rn, promptResourceProfileMaterialization as Rr, InMemoryResultBlobStore as Rt, scopeOwnerExecutorNodeContext as S, createSandboxUsageLedger as Si, deleteBoxSafe as Sn, removeWorktree as Sr, readWorkerProgress as St, isWaitOutcome as T, mapSandboxEvent as Ti, promptCacheTokenClasses as Tn, harnessSupportsReasoningEffort as Tr, DEFAULT_PEER_MAIL_LIMITS as Tt, recoverRetainedInteractiveRun as U, addHarnessUsage as Un, validateProfileMaterialization as Ur, pendingWaits as Ut, workerInteractiveBindingsDir as V, startRetainedRunInEnvironment as Vn, sandboxActProfileMaterialization as Vr, loadSpawnForest as Vt, startRetainedInteractiveRun as W, createCodexRolloutStoreReader as Wn, worktreeCliProfileMaterialization as Wr, replaySpawnTree as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, traceContextToEnv as Xn, attestRuntimeOwnedScopeOwner as Xr, contentAddress as Xt, rollingDispatch as Y, readTraceContextFromEnv as Yn, attestRuntimeOwnedPendingExecutor as Yr, workerTraceAnalysisStore as Yt, teardownExecutor as Z, INTELLIGENCE_WIRE_VERSION as Zn, authoredProfileDigest as Zr, assertValidBudget as Zt, deriveNodeExecutionIdentity as _, projectSandboxOutcome as _i, resolveAgentEnvironmentProvider as _n, withBudgetResources as _r, createPushTraceSource as _t, createSupervisor as a, runtimeOwnedDriveHarnessProviderEvidence as ai, createSandboxLineage as an, generateSpanId as ar, cliWorktreeExecutor as at, recordScopeOwnerMaterialization as b, canonicalStreamEventFromSandboxEvent as bi, chargedTokens as bn, captureWorktreeDiff as br, DEFAULT_STALL_AFTER_MS as bt, pickBestDelivered as c, runtimeOwnedExecutorProviderEvidence as ci, assertBoxlessPromptOptions as cn, padTraceId as cr, snapshotExecutorConfig as ct, driverChild as d, unknownExecutionBindingReceipt as di, runBrainLoop as dn, createRuntimeStreamEventCollector as dr, readWorkerTraceContext as dt, knownExecutionBindingReceipt as ei, TERMINAL_DECISIONS as en, buildRuntimeEventOtelSpans as er, bridgeModelRouteRefusal as et, driverExecutorFactory as f, unknownMaterializationReceipt as fi, canonicalObservedModelParts as fn, sanitizeAgentRuntimeEvent as fr, workerTraceEnv as ft, createScope as g, detachedSnapshot as gi, providerAsSandboxClient as gn, resourceTelemetry as gr, createSteerableSandboxSession as gt, beginScopeOwnerAttempt as h, detachedFrozen as hi, providerAsExecutor as hn, addResourceSpend as hr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ht, createRootHandle as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, runAgentRounds as in, flatOtelSpan as ir, cliInPlaceExecutor as it, prepareScopeRetainedOwnerTask as j, decodeHarnessUsage as ji, unmeteredSpend as jn, controlProfileMaterialization as jr, peerMailVerbNames as jt, waitUntil as k, sandboxProgressEvents as ki, throwAbort as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, isPeerMailEnvelope as kt, runFinalizer as l, runtimeOwnedPendingExecutorMaterialization as li, readPromptOptions as ln, toOtelAttributes as lr, createWorktreeCliExecutor as lt, withDriverExecutor as m, executableAgentSpecSnapshot as mi, createAgentEnvironmentProviderRegistry as mn, sanitizeRuntimeStreamEvent as mr, workerTraceSeamKey as mt, defaultRedactorIdentityMaterial as n, newExecutionAttemptId as ni, defaultSelectWinner as nn, createOtelExporter as nr, bridgeStopSignalKey as nt, bestDelivered as o, runtimeOwnedExecutorExecutionBinding as oi, probeSandboxCapabilities as on, loopEventToOtelSpan as or, createExecutor as ot, isDriverSpec as p, executableAgentProfileSnapshot as pi, observedModelMatchesDeclared as pn, sanitizeKnowledgeReadinessReport as pr, workerTraceHeaders as pt, freeSlots as q, createPropagatingTraceEmitter as qn, prepareJsonlAppend as qr, isTraceAnalysisStore as qt, resolveRedactor as r, providerAttemptEvidence as ri, isTerminalDecision as rn, exportEvalRuns as rr, captureReusableExecutorConfig as rt, collectDelivered as s, runtimeOwnedExecutorMaterialization as si, acquireSandbox as sn, padSpanId as sr, createExecutorRegistry as st, defaultRedactor as t, knownMaterializationReceipt as ti, createSandboxForSpec as tn, createOpenInferenceFileExporter as tr, bridgeRuntimeAttachmentsKey as tt, runTree as u, runtimeOwnedScopeOwnerRuntime as ui, routerBrain as un, createRuntimeEventCollector as ur, WORKER_TRACE_PROPAGATION as ut, meterRuntimeOwnedAccounting as v, readSandboxOutcome as vi, sandboxClientAsProvider as vn, runSettledCommand as vr, decodeToolPart as vt, createWaitProbes as w, isSandboxTerminalEvent as wi, isAbortError$2 as wn, LOCAL_HARNESSES as wr, AUTHORITY_MARKERS as wt, restoreScopeOwnerAcceptedExecution as x, createSandboxToolPartState as xi, cloneSpend as xn, createWorktree as xr, createActivityLog as xt, meterRuntimeOwnedProviderAttempt as y, assertSandboxServedModel as yi, addSpend as yn, runWorktreeHarness as yr, sandboxSessionTraceSource as yt, readWorkerInteractiveBinding as z, recoverRetainedRun as zn, renderProfileMaterializationIssues as zr, InMemorySpawnJournal as zt };
 
-//# sourceMappingURL=redact-BMwd8IBm.js.map
+//# sourceMappingURL=redact-va_1mmv8.js.map