@tangle-network/agent-runtime 0.210.0 → 0.212.0

package/dist/{redact-CE6Hfkrp.js → redact-m6KGpTVH.js}

@@ -7330,6 +7330,7 @@ async function* streamProviderExecutor(args) {
 			...sawCompleteTokenReceipt && !sawIncompleteTokenReceipt ? {} : { tokensKnown: false },
 			usd,
 			usdKnown: false,
+			...usd > 0 ? { usdEstimated: usd } : {},
 			ms: Date.now() - started
 		};
 		const verdict = await args.options.validator?.validate(result, {
@@ -7395,6 +7396,7 @@ async function* streamProviderExecutor(args) {
 				kind: "cost",
 				usdKnown: false,
 				usd: receipt.costUsd,
+				usdEstimated: receipt.costUsd,
 				provenance: "uncaptured"
 			};
 		}
@@ -11794,6 +11796,21 @@ const bridgeUsageCostSchema = "cli-bridge.usage-cost.v1";
 /** Ceiling on one run-state read. A bridge that hangs must not pin `refreshing` forever and
 *  silently stop every later refresh. */
 const BRIDGE_RUN_STATE_TIMEOUT_MS = 2e3;
+/** Ceiling on one model-route probe. This is deliberately not the run-state budget: a slow
+*  run-state read costs one skipped refresh, while a slow route probe refuses a spawn or a driver
+*  turn, and three refusals in a row end the run at zero tokens. On a host at load average 261
+*  `GET /v1/capabilities` measured 12-15 s while `POST /v1/chat/completions` on the same bridge
+*  and model returned 200, so a 2 s budget reported a live bridge as one that routes nothing.
+*  Half the bridge's own admission acquire deadline (60 s): a hung bridge still refuses. */
+const BRIDGE_ROUTE_PROBE_TIMEOUT_MS = 3e4;
+/** Wire models a probe has seen each bridge route, keyed by bridge URL and then by model. Whether a
+*  bridge routes a model is a fact about its catalog, not about this turn, and `bridgeExecutor`
+*  rebuilds its seam per turn, so the key is the pair and not the seam object. Only a positive
+*  answer is kept: a cached refusal would be the mirror of the silent admission the preflight
+*  exists to remove, refusing a bridge that has since gained the backend until the process
+*  restarted. A positive that goes stale fails at dispatch with the bridge's own retained error,
+*  which is what a child saw before the preflight existed. */
+const routedModels = /* @__PURE__ */ new Map();
 /** One bridge GET over the `node:http(s)` core client — the same transport every other bridge
 *  read uses, so a computed provider endpoint never reaches global `fetch`. Resolves the status
 *  and the body text; a transport failure rejects. */
@@ -11840,9 +11857,10 @@ function bridgeGet(seam, path, timeoutMs, signal) {
 */
 async function bridgeModelRouteRefusal(seam, wireModel, signal) {
 	const base = seam.bridgeUrl.replace(/\/$/, "");
+	if (routedModels.get(base)?.has(wireModel)) return void 0;
 	let answer;
 	try {
-		answer = await bridgeGet(seam, `/v1/capabilities?model=${encodeURIComponent(wireModel)}`, BRIDGE_RUN_STATE_TIMEOUT_MS, signal);
+		answer = await bridgeGet(seam, `/v1/capabilities?model=${encodeURIComponent(wireModel)}`, BRIDGE_ROUTE_PROBE_TIMEOUT_MS, signal);
 	} catch (error) {
 		if (signal?.aborted) throw error;
 		return {
@@ -11850,7 +11868,15 @@ async function bridgeModelRouteRefusal(seam, wireModel, signal) {
 			retryable: true
 		};
 	}
-	if (answer.status === 200) return void 0;
+	if (answer.status === 200) {
+		let routed = routedModels.get(base);
+		if (routed === void 0) {
+			routed = /* @__PURE__ */ new Set();
+			routedModels.set(base, routed);
+		}
+		routed.add(wireModel);
+		return;
+	}
 	if (answer.status === 404) return {
 		detail: `bridge ${base} routes no backend for model ${JSON.stringify(wireModel)}`,
 		retryable: false,
@@ -14016,8 +14042,8 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 		return violation;
 	}
 	let nextTicketId = 0;
-	const open = /* @__PURE__ */ new Set();
-	function reserve(b) {
+	const open = /* @__PURE__ */ new Map();
+	function reserve(b, holder = { stage: "admitted" }) {
 		assertValidBudget(b, "reservation budget");
 		for (const [name, state] of resources) {
 			const wanted = b.resources?.[name];
@@ -14066,7 +14092,7 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			reservedUsd += wantUsd;
 		}
 		const id = nextTicketId++;
-		open.add(id);
+		open.set(id, holder);
 		return {
 			ok: true,
 			ticket: {
@@ -14081,6 +14107,14 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			}
 		};
 	}
+	function attribute(ticket, holder) {
+		const current = open.get(ticket.id);
+		if (current === void 0) return;
+		open.set(ticket.id, {
+			...current,
+			...holder
+		});
+	}
 	function reconcile(ticket, spent) {
 		if (!open.has(ticket.id)) throw new Error(`budget pool: reconcile of unknown or already-settled ticket ${ticket.id}`);
 		assertValidSpend(spent, `budget pool ticket ${ticket.id} spend`);
@@ -14147,8 +14181,14 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 			reservedTokens
 		};
 	}
+	function openReservations() {
+		return [...open].map(([ticketId, holder]) => Object.freeze({
+			ticketId,
+			...holder
+		}));
+	}
 	function assertNoOpenTickets() {
-		if (open.size > 0) throw new Error(`budget pool: ${open.size} reservation(s) still open at join barrier (leaked ticket ids: ${[...open].join(", ")}) — conserved-pool invariant violated`);
+		if (open.size > 0) throw new Error(`budget pool: ${open.size} reservation(s) still open at join barrier (${openReservations().map(describeLeakedReservation).join("; ")}) — conserved-pool invariant violated`);
 	}
 	if (restore.committed !== void 0) {
 		assertValidSpend(restore.committed, "budget restore committed");
@@ -14198,13 +14238,25 @@ function createBudgetPool(root, runStartedAtMs, restore = {}) {
 	}
 	return {
 		reserve,
+		attribute,
 		reconcile,
 		spendFrom: foldUsage,
 		readout,
 		observe,
-		assertNoOpenTickets
+		assertNoOpenTickets,
+		openReservations
 	};
 }
+/** Name one leaked reservation by its holder, so the invariant message points at the work that
+*  holds the ticket rather than at a counter an operator cannot chase. */
+function describeLeakedReservation(leak) {
+	const parts = [`ticket ${leak.ticketId}`];
+	if (leak.childId !== void 0) parts.push(`child ${leak.childId}`);
+	if (leak.label !== void 0) parts.push(`label ${leak.label}`);
+	if (leak.assignment !== void 0) parts.push(`assignment ${leak.assignment}`);
+	parts.push(`stage ${leak.stage}`);
+	return parts.join(", ");
+}
 //#endregion
 //#region src/durable/content-address.ts
 /** Stable content address shared by result and trace artifacts. */
@@ -15554,6 +15606,7 @@ function createSteerableSandboxSession(args) {
 					kind: "cost",
 					usd: call.costUsd,
 					usdKnown: false,
+					usdEstimated: call.costUsd,
 					provenance: "uncaptured"
 				};
 			}
@@ -15670,6 +15723,7 @@ function createSteerableSandboxSession(args) {
 			...tokensKnown ? {} : { tokensKnown: false },
 			usd,
 			...state.turns > 0 ? { usdKnown: false } : {},
+			...state.turns > 0 && usd > 0 ? { usdEstimated: usd } : {},
 			ms: now() - started
 		};
 		const out = {
@@ -16693,6 +16747,7 @@ async function* streamSandboxLeaf(args) {
 		} : result.winner?.verdict ?? leafVerdict(result);
 		const tokensKnown = result.tokenUsage.tokensKnown !== false;
 		const usdKnown = result.costUsdKnown !== false;
+		const usdEstimated = usdKnown || result.costUsd <= 0 ? void 0 : result.costUsd;
 		const outWithUsage = {
 			...outWithOutcome,
 			...result.estimatedCostUsd !== void 0 ? { estimatedCostUsd: result.estimatedCostUsd } : {},
@@ -16705,6 +16760,7 @@ async function* streamSandboxLeaf(args) {
 			...tokensKnown ? {} : { tokensKnown: false },
 			usd: result.costUsd,
 			...usdKnown ? {} : { usdKnown: false },
+			...usdEstimated === void 0 ? {} : { usdEstimated },
 			ms: Date.now() - started,
 			...boxMinutes === void 0 ? {
 				boxMinutesKnown: false,
@@ -16744,6 +16800,7 @@ async function* streamSandboxLeaf(args) {
 			kind: "cost",
 			usdKnown: false,
 			usd: result.costUsd,
+			...usdEstimated === void 0 ? {} : { usdEstimated },
 			provenance: "uncaptured"
 		};
 	} finally {
@@ -19552,9 +19609,14 @@ function createScope(args) {
 			ok: false,
 			reason: "max-live-workers"
 		};
+		const assignment = opts.assignmentId ?? opts.key;
 		let reservation;
 		try {
-			reservation = args.pool.reserve(opts.budget);
+			reservation = args.pool.reserve(opts.budget, {
+				...assignment === void 0 ? {} : { assignment },
+				label: opts.label,
+				stage: "admitted"
+			});
 		} catch (error) {
 			permit.release();
 			throw error;
@@ -19597,6 +19659,10 @@ function createScope(args) {
 		try {
 			const ordinal = recovery?.spawned.seq ?? spawnOrdinal++;
 			const id = recovery?.spawned.id ?? `${args.parentId}:s${ordinal}`;
+			args.pool.attribute(reservation.ticket, {
+				childId: id,
+				stage: "admitted"
+			});
 			const attemptId = newExecutionAttemptId(id);
 			const startedAt = recovery ? Date.parse(recovery.spawned.at) : now();
 			if (!Number.isFinite(startedAt)) throw new ValidationError$1("scope recovery has an invalid original start time");
@@ -19917,6 +19983,7 @@ function createScope(args) {
 				complete: async () => pendingEvidence?.complete(),
 				fail: async () => pendingEvidence?.fail()
 			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites);
+			args.pool.attribute(reservation.ticket, { stage: "executing" });
 			const interactiveBindingCommitted = spawnCommitted.then(async () => {
 				if (args.interactiveBindingDir === void 0) return;
 				const immediate = readInteractiveSession(live);
@@ -22118,12 +22185,13 @@ function createSupervisor() {
 				rootLease?.release();
 			}
 			const tree = runTree(scope);
-			pool.assertNoOpenTickets();
+			const leakedReservations = pool.openReservations();
 			if (controller.signal.reason instanceof RunCancellationReason) return noWinner();
 			if (actOutcome.ok) {
 				if (executionAborted) return noWinner();
 				const out = actOutcome.out;
 				if (out !== void 0) {
+					pool.assertNoOpenTickets();
 					const outRef = contentAddress(out);
 					await opts.blobs.put(outRef, out);
 					const { spentTotal, childWork, driverInference, gaps, providerModel } = await terminalAccounting(journal, opts.runId, now() - runEpochMs);
@@ -22154,6 +22222,7 @@ function createSupervisor() {
 					spentTotal,
 					providerModel,
 					...teardownUnconfirmed.length > 0 ? { teardownUnconfirmed } : {},
+					...leakedReservations.length > 0 ? { leakedReservations } : {},
 					...gaps.length > 0 ? { spendGaps: gaps } : {}
 				};
 				const lifecycle = classifyNoWinner(executionAborted, pool, opts, breaker, deadlineExceeded, allChildrenDownAtSettle, downCountAtSettle);
@@ -22566,4 +22635,4 @@ function resolveRedactor(redact) {
 //#endregion
 export { captureReusableExecutorConfig as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, bridgeRuntimeAttachmentsKey as $t, consumeScopeRetainedOwnerResult as A, sumSandboxUsage as Ai, throwAbort as An, assertProfileMaterialization as Ar, workerTraceHeaders as At, workerInteractiveBindingFile as B, registerRetainedExecutorPreparation as Bn, renderUnsupported as Br, claimsAuthority as Bt, settledToIteration as C, extractLlmCallEvent as Ci, deleteBoxSafe as Cn, DEFAULT_LOCAL_HARNESS as Cr, contentAddress as Ct, timerAt as D, notifySandboxEventObserver as Di, randomSuffix as Dn, parseCodexTokenUsage as Dr, WORKER_TRACE_PROPAGATION as Dt, pollFor as E, mapSandboxToolEvent as Ei, promptCacheTokenClasses as En, localHarnessExecutable as Er, spendFromUsageEvents as Et, interactiveAdmissionSeamKey as F, promptOptionsFromAgentTurnInput as Fi, resourceTelemetry as Fn, promptControlProfileMaterialization as Fr, readWorkerProgress as Ft, destroyInteractiveEnvironment as G, reconnectRetainedRun as Gn, isNoEntError as Gr, isLiveNodeStatus as Gt, reconnectRetainedInteractiveRun as H, RunCancellationReason as Hn, unsupportedProfileDimensions as Hr, isPeerMailEnvelope as Ht, readWorkerInteractiveAdmissions as I, providerMessageText as Ii, withBudgetResources as In, promptModelProfileMaterialization as Ir, createInbox as It, queueOf as J, startRetainedRunInEnvironment as Jn, writeAllBytes as Jr, bridgeModelRouteRefusal as Jt, effectiveConcurrency as K, recoverRetainedRun as Kn, parseCommittedJsonLines as Kr, isTerminalNodeStatus as Kt, workerInteractiveAdmissionFile as L, createPushTraceSource as Ln, promptOnlyProfileMaterialization as Lr, AUTHORITY_MARKERS as Lt, scopeRetainedOwnerContext as M, abortError$2 as Mi, unmeteredSpend as Mn, defineProfileMaterializationContract as Mr, taskToPrompt as Mt, scopeRetainedOwnerPriorSpend as N, awaitAbortable$1 as Ni, zeroSpend as Nn, fullProfileMaterialization as Nr, DEFAULT_STALL_AFTER_MS as Nt, validateWaitSpec as O, sandboxEventServedBackend as Oi, sleep as On, CodexExecutionDiagnosticError as Or, readWorkerTraceContext as Ot, scopeRetainedOwnerResult as P, promptFromAgentTurnInput as Pi, addResourceSpend as Pn, profileMaterializationAxes$1 as Pr, createActivityLog as Pt, bindReusableExecutorExecutionId as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, readCodexRolloutSession as Qt, attachWorker as R, decodeToolPart as Rn, promptResourceProfileMaterialization as Rr, DEFAULT_PEER_MAIL_LIMITS as Rt, scopeOwnerExecutorNodeContext as S, createSandboxUsageLedger as Si, cloneSpend as Sn, removeWorktree as Sr, workerTraceAnalysisStore as St, isWaitOutcome as T, mapSandboxEvent as Ti, isAbortError$2 as Tn, harnessSupportsReasoningEffort as Tr, createBudgetPool as Tt, recoverRetainedInteractiveRun as U, abortError$1 as Un, validateProfileMaterialization as Ur, peerMailTools as Ut, workerInteractiveBindingsDir as V, retainedExecutorSeamKey as Vn, sandboxActProfileMaterialization as Vr, createPeerMailbox as Vt, startRetainedInteractiveRun as W, linkAbort as Wn, worktreeCliProfileMaterialization as Wr, peerMailVerbNames as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, createCodexRolloutStoreReader as Xt, rollingDispatch as Y, retainedCreateMaterial as Yn, attestRuntimeOwnedPendingExecutor as Yr, addHarnessUsage as Yt, teardownExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, harnessUsageIsEmpty as Zt, deriveNodeExecutionIdentity as _, projectSandboxOutcome as _i, providerAsSandboxClient as _n, sanitizeRuntimeStreamEvent as _r, replaySpawnTree as _t, createSupervisor as a, runtimeOwnedDriveHarnessProviderEvidence as ai, runAgentRounds as an, createOtelExporter as ar, createWorktreeCliExecutor as at, recordScopeOwnerMaterialization as b, canonicalStreamEventFromSandboxEvent as bi, addSpend as bn, captureWorktreeDiff as br, isTraceAnalysisStore as bt, pickBestDelivered as c, runtimeOwnedExecutorProviderEvidence as ci, acquireSandbox as cn, generateSpanId as cr, createInPlaceCliExecutor as ct, driverChild as d, unknownExecutionBindingReceipt as di, routerBrain as dn, padTraceId as dr, InMemoryResultBlobStore as dt, knownExecutionBindingReceipt as ei, bridgeStopSignalKey as en, INTELLIGENCE_WIRE_VERSION as er, cliInPlaceExecutor as et, driverExecutorFactory as f, unknownMaterializationReceipt as fi, runBrainLoop as fn, toOtelAttributes as fr, InMemorySpawnJournal as ft, createScope as g, detachedSnapshot as gi, providerAsExecutor as gn, sanitizeKnowledgeReadinessReport as gr, pendingWaits as gt, beginScopeOwnerAttempt as h, detachedFrozen as hi, createAgentEnvironmentProviderRegistry as hn, sanitizeAgentRuntimeEvent as hr, materializeTreeView as ht, createRootHandle as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, isTerminalDecision as in, createOpenInferenceFileExporter as ir, snapshotExecutorConfig as it, prepareScopeRetainedOwnerTask as j, decodeHarnessUsage as ji, throwIfAborted as jn, controlProfileMaterialization as jr, workerTraceSeamKey as jt, waitUntil as k, sandboxProgressEvents as ki, stringifySafe as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, workerTraceEnv as kt, runFinalizer as l, runtimeOwnedPendingExecutorMaterialization as li, assertBoxlessPromptOptions as ln, loopEventToOtelSpan as lr, FileResultBlobStore as lt, withDriverExecutor as m, executableAgentSpecSnapshot as mi, observedModelMatchesDeclared as mn, createRuntimeStreamEventCollector as mr, loadSpawnForest as mt, defaultRedactorIdentityMaterial as n, newExecutionAttemptId as ni, createSandboxForSpec as nn, buildLoopSpanNodes as nr, createExecutor as nt, bestDelivered as o, runtimeOwnedExecutorExecutionBinding as oi, createSandboxLineage as on, exportEvalRuns as or, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ot, isDriverSpec as p, executableAgentProfileSnapshot as pi, canonicalObservedModelParts as pn, createRuntimeEventCollector as pr, insideCursorNamespace as pt, freeSlots as q, startRetainedRun as qn, prepareJsonlAppend as qr, bridgeAdmissionRefusal as qt, resolveRedactor as r, providerAttemptEvidence as ri, defaultSelectWinner as rn, buildRuntimeEventOtelSpans as rr, createExecutorRegistry as rt, collectDelivered as s, runtimeOwnedExecutorMaterialization as si, probeSandboxCapabilities as sn, flatOtelSpan as sr, createSteerableSandboxSession as st, defaultRedactor as t, knownMaterializationReceipt as ti, TERMINAL_DECISIONS as tn, buildLoopOtelSpans as tr, cliWorktreeExecutor as tt, runTree as u, runtimeOwnedScopeOwnerRuntime as ui, readPromptOptions as un, padSpanId as ur, FileSpawnJournal as ut, meterRuntimeOwnedAccounting as v, readSandboxOutcome as vi, resolveAgentEnvironmentProvider as vn, runSettledCommand as vr, WORKER_TOOL_TRACE_SCHEMA_VERSION as vt, createWaitProbes as w, isSandboxTerminalEvent as wi, hasCompleteCacheBreakdown as wn, LOCAL_HARNESSES as wr, assertValidBudget as wt, restoreScopeOwnerAcceptedExecution as x, createSandboxToolPartState as xi, chargedTokens as xn, createWorktree as xr, parseWorkerToolTraceArtifact as xt, meterRuntimeOwnedProviderAttempt as y, assertSandboxServedModel as yi, sandboxClientAsProvider as yn, runWorktreeHarness as yr, captureWorkerTraceEvidence as yt, readWorkerInteractiveBinding as z, sandboxSessionTraceSource as zn, renderProfileMaterializationIssues as zr, PEER_MAIL_WIRE_KEY as zt };
 
-//# sourceMappingURL=redact-CE6Hfkrp.js.map
+//# sourceMappingURL=redact-m6KGpTVH.js.map