@tangle-network/agent-runtime 0.216.0 → 0.217.2

package/dist/{redact-DyckXHLF.js → supervisor-CvF_KeLc.js}

@@ -5211,6 +5211,89 @@ function publicCreateOptions(create) {
 	};
 }
 //#endregion
+//#region src/redact.ts
+const redactedMarker = "[redacted]";
+/** Secret-bearing key names: when an object key matches, its value is fully
+*  replaced regardless of the value's own content. Lowercased compare. */
+const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
+/** AgentProfile's numeric model limits describe compute, not credentials. */
+const tokenLimitKeyPattern = /^max(?:VisibleOutput|Reasoning|TotalOutput)Tokens$/;
+/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
+const valuePatterns = [
+	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
+	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
+	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+	/\bAKIA[0-9A-Z]{16}\b/g,
+	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
+];
+/** Secret assignments embedded inside an otherwise opaque string, including
+* serialized JSON and log-style `key=value` text. */
+const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
+/** Scrub a single string of in-value secret/PII patterns. */
+function scrubString(input) {
+	let out = input;
+	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
+	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
+}
+/**
+* The built-in redactor. Walks objects and arrays; replaces values under
+* secret-bearing keys wholesale; scrubs in-value patterns from every string.
+* Cycle-safe (a seen-set short-circuits self-referential payloads to
+* `'[circular]'`), depth-bounded, and total — never throws on customer input.
+*/
+function defaultRedactor(value) {
+	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+const maxDepth = 32;
+function walk(value, seen, depth) {
+	if (depth > maxDepth) return "[truncated]";
+	if (typeof value === "string") return scrubString(value);
+	if (value === null || typeof value !== "object") return value;
+	if (seen.has(value)) return "[circular]";
+	seen.add(value);
+	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
+	const out = {};
+	for (const [key, v] of Object.entries(value)) {
+		const tokenLimit = tokenLimitKeyPattern.test(key) && typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
+		if (secretKeyPattern.test(key) && !tokenLimit) {
+			out[key] = redactedMarker;
+			continue;
+		}
+		out[key] = walk(v, seen, depth + 1);
+	}
+	return out;
+}
+/** Stable identity input for saved work that depends on built-in redaction behavior. */
+function defaultRedactorIdentityMaterial() {
+	const patternIdentity = (pattern) => ({
+		source: pattern.source,
+		flags: pattern.flags
+	});
+	return {
+		marker: redactedMarker,
+		secretKeyPattern: patternIdentity(secretKeyPattern),
+		tokenLimitKeyPattern: patternIdentity(tokenLimitKeyPattern),
+		valuePatterns: valuePatterns.map(patternIdentity),
+		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
+		maxDepth,
+		scrubString: Function.prototype.toString.call(scrubString),
+		walk: Function.prototype.toString.call(walk),
+		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
+	};
+}
+/**
+* Resolve the redactor a client uses. A caller-supplied hook handles
+* domain-specific values first, then the built-in scrubber still removes
+* common credentials and email addresses. Returning `false` is the explicit
+* opt-out for already-reviewed public values.
+*/
+function resolveRedactor(redact) {
+	if (redact === false) return (value) => value;
+	if (!redact) return defaultRedactor;
+	return (value) => defaultRedactor(redact(value));
+}
+//#endregion
 //#region src/runtime/interaction-capabilities.ts
 /**
 * Check one turn's interaction request before the provider can dispatch it.
@@ -7498,21 +7581,53 @@ async function providerExecutionSource(args, turn, signal) {
 		if (!environment) throw new Error("retained provider environment is unavailable");
 		const session = exactSession(environment, handle.controlRef).session;
 		async function* events() {
-			for await (const event of session.events({
-				executionId: handle.controlRef.executionId,
-				signal
-			})) {
-				assertEventBinding(event, handle.controlRef);
-				yield event;
+			let iterator;
+			let observationFailure;
+			try {
+				iterator = session.events({
+					executionId: handle.controlRef.executionId,
+					signal
+				})[Symbol.asyncIterator]();
+			} catch (error) {
+				if (signal.aborted) throw error;
+				observationFailure = { error };
+			}
+			try {
+				while (iterator !== void 0) {
+					let next;
+					try {
+						next = await awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal);
+					} catch (error) {
+						if (signal.aborted) throw error;
+						observationFailure = { error };
+						break;
+					}
+					if (next.done) break;
+					assertEventBinding(next.value, handle.controlRef);
+					yield next.value;
+				}
+			} finally {
+				if (signal.aborted || observationFailure !== void 0) Promise.resolve().then(() => iterator?.return?.()).catch(() => void 0);
+				else await iterator?.return?.();
+			}
+			let result;
+			try {
+				result = await awaitAbortable$1(handle.result(), signal);
+			} catch (error) {
+				if (observationFailure === void 0 || signal.aborted) throw error;
+				throw new AggregateError([observationFailure.error, error], "retained event observation failed and its exact result could not be reconciled", { cause: error });
 			}
-			const result = await awaitAbortable$1(handle.result(), signal);
 			yield {
 				type: "result",
 				data: {
 					finalText: result.text,
 					success: result.success,
 					...result.error ? { error: result.error } : {},
-					usageMode: "cumulative"
+					usageMode: "cumulative",
+					...observationFailure === void 0 ? {} : {
+						eventStreamComplete: false,
+						eventStreamError: String(defaultRedactor(observationFailure.error instanceof Error ? observationFailure.error.message : String(observationFailure.error))).slice(0, 2048)
+					}
 				},
 				...result.usage ? { usage: result.usage } : {}
 			};
@@ -15011,6 +15126,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"execution-admitted",
 	"execution-result",
 	"progress",
+	"reconciled",
 	"edge",
 	"teardown-unconfirmed",
 	"trace-unpropagated",
@@ -15075,6 +15191,7 @@ async function replaySpawnTree(journal, blobs, root) {
 		if (ev.kind === "waiting") continue;
 		if (ev.kind === "metered") continue;
 		if (ev.kind === "progress") continue;
+		if (ev.kind === "reconciled") continue;
 		if (ev.kind === "materialized") continue;
 		if (ev.kind === "execution-bound") continue;
 		if (ev.kind === "execution-input" || ev.kind === "execution-admitted" || ev.kind === "execution-result") continue;
@@ -15278,6 +15395,10 @@ function materializeTreeView(events) {
 		node.executionBindings ??= [];
 		node.executionBindings.push(ev.binding);
 	}
+	for (const ev of [...events].filter((event) => event.kind === "reconciled").sort((a, b) => a.seq - b.seq)) {
+		const node = requireNode(nodes, ev.id);
+		if (node.status === "pending") node.spent = cloneSpend(ev.spent);
+	}
 	for (const ev of events) {
 		if (ev.kind !== "metered") continue;
 		const node = requireNode(nodes, ev.id);
@@ -16989,7 +17110,11 @@ async function* streamCliLeaf(args) {
 		args.signal.addEventListener("abort", onAbort, { once: true });
 		args.controller.signal.addEventListener("abort", onAbort, { once: true });
 	}
+	let deliveryError;
 	if (proc.stdin) {
+		proc.stdin.on("error", (error) => {
+			if (error.code !== "EPIPE") deliveryError ??= error;
+		});
 		proc.stdin.write(prompt);
 		proc.stdin.end();
 	}
@@ -17008,6 +17133,7 @@ async function* streamCliLeaf(args) {
 	args.controller.signal.removeEventListener("abort", onAbort);
 	if (exit.error) throw new ValidationError$1(`cliExecutor: spawn failed: ${exit.error.message}`, { cause: exit.error });
 	if (exit.code !== 0) throw new ValidationError$1(`cliExecutor: ${args.seam.bin} exited ${exit.code}: ${errChunks.join("").slice(0, 200)}`);
+	if (deliveryError) throw new ValidationError$1(`cliExecutor: could not deliver the task to ${args.seam.bin}: ${deliveryError.message}`, { cause: deliveryError });
 	const out = { content: chunks.join("") };
 	args.onArtifact({
 		outRef: contentRef("cli", out),
@@ -19004,10 +19130,15 @@ function keyedAssignments(events, settled) {
 	}
 	return keys;
 }
-/** Child reservations whose spawn was durable but whose terminal record never landed. */
+/** Child reservations whose spawn was durable, whose terminal record never landed, and whose
+*  reservation was never reconciled: the process died with them in flight, so nothing observed
+*  their spend and the ceiling is the only sound charge. An open node with a `reconciled` record is
+*  not uncertain in that sense — its floor is measured evidence and is charged by
+*  {@link sumMeasuredSpendFromEvents}, never here, so the two readers cannot charge one node twice. */
 function uncertainSpawnBudgets(events, recovered = /* @__PURE__ */ new Set()) {
 	const terminal = new Set(events.filter(closesCursorSlot).map((event) => event.id));
-	return events.filter((event) => event.kind === "spawned" && event.parent !== void 0 && !terminal.has(event.id) && !recovered.has(event.id) && event.runtime !== "inline").map((event) => event.budget);
+	const reconciled = new Set(events.flatMap((event) => event.kind === "reconciled" ? [event.id] : []));
+	return events.filter((event) => event.kind === "spawned" && event.parent !== void 0 && !terminal.has(event.id) && !reconciled.has(event.id) && !recovered.has(event.id) && event.runtime !== "inline").map((event) => event.budget);
 }
 /** Highest `seq` among events matching `pred`, or `-1` when none match (so a resumed scope's
 *  first new ordinal/seq is 0 — the same start a fresh scope uses). */
@@ -19016,9 +19147,12 @@ function maxSeqOf(events, pred) {
 	for (const ev of events) if (pred(ev) && ev.seq > max) max = ev.seq;
 	return max;
 }
-/** Per-channel sum over a journaled event list: `settled` = spawned-child work (reconciled);
-*  `metered` = driver inference (re-homed up the tree, so a single root-tree pass already
-*  includes every nested driver's inference). */
+/** Per-channel sum over a journaled event list: `settled` = spawned-child work (reconciled), plus
+*  the reconciled floor of every node still open, plus the declared ceiling of every open node
+*  nothing reconciled; `metered` = driver inference (re-homed up the tree, so a single root-tree
+*  pass already includes every nested driver's inference). The pool commits exactly these amounts
+*  — a floor where a reconcile ran, a ceiling where the process died first — so this sum is the
+*  same ledger the pool holds, read from the journal. */
 function sumSpendFromEvents(events) {
 	const totals = sumMeasuredSpendFromEvents(events);
 	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
@@ -19041,12 +19175,19 @@ function sumMeasuredSpendFromEvents(events) {
 	let childWork = zeroSpend();
 	let driverInference = zeroSpend();
 	const owners = /* @__PURE__ */ new Map();
+	const terminal = new Set(events.filter(closesCursorSlot).map((event) => event.id));
+	const floors = /* @__PURE__ */ new Map();
 	for (const ev of events) if (ev.kind === "settled" || ev.kind === "cancelled") childWork = addSpend(childWork, withBudgetResources(ev.spent ?? {
 		...zeroSpend(),
 		tokensKnown: false,
 		usdKnown: false
 	}, budgets.get(ev.id) ?? {}));
 	else if (ev.kind === "metered") owners.set(ev.id, addSpend(owners.get(ev.id) ?? zeroSpend(), ev.spend));
+	else if (ev.kind === "reconciled" && !terminal.has(ev.id)) {
+		const prior = floors.get(ev.id);
+		if (prior === void 0 || ev.seq > prior.seq) floors.set(ev.id, ev);
+	}
+	for (const [id, floor] of floors) childWork = addSpend(childWork, withBudgetResources(floor.spent, budgets.get(id) ?? {}));
 	for (const [id, spend] of owners) driverInference = addSpend(driverInference, withBudgetResources(spend, budgets.get(id) ?? {}));
 	return {
 		childWork,
@@ -19058,9 +19199,9 @@ async function prepareScopeResume(opts, events, signal, now, parentId = opts.run
 	const prepared = await prepareInterruptedExecutors(opts, events, signal, now, parentId);
 	const prior = prepared.events;
 	const recovering = new Set(prepared.recoveries.map((item) => item.spawned.id));
-	const measuredEvents = prior.filter((event) => event.kind !== "metered" || !recovering.has(event.id));
+	const measuredEvents = prior.filter((event) => event.kind !== "metered" && event.kind !== "reconciled" || !recovering.has(event.id));
 	const measured = sumMeasuredSpendFromEvents(measuredEvents);
-	const hasCommittedEvidence = measuredEvents.some((event) => event.kind === "metered" || event.kind === "settled" || event.kind === "cancelled");
+	const hasCommittedEvidence = measuredEvents.some((event) => event.kind === "metered" || event.kind === "reconciled" || event.kind === "settled" || event.kind === "cancelled");
 	const settled = await replaySpawnTree(opts.journal, opts.blobs, opts.runId);
 	signal.throwIfAborted();
 	return {
@@ -20677,17 +20818,34 @@ async function raceFirstSettled(pending) {
 }
 /** Rehomed inference has its own per-child sequence, independent of terminal cursors. */
 async function appendSettlementMetering(journal, root, id, spend, at) {
-	const event = {
+	await appendAcknowledged(journal, root, {
 		kind: "metered",
 		id,
 		spend,
-		seq: (await journal.loadTree(root) ?? []).reduce((max, event) => event.kind === "metered" && event.id === id ? Math.max(max, event.seq) : max, -1) + 1,
+		seq: await nextPerNodeSeq(journal, root, "metered", id),
 		at
-	};
+	});
+}
+/** An open node's reconciled floor has the same per-child sequence discipline as its metering:
+*  outside the cursor namespace, monotonic per node, so a node reconciled once per process (a
+*  retained failure, a recovery, a second retained failure) keeps its records ordered. */
+async function appendReconciledFloor(journal, root, id, spent, at) {
+	await appendAcknowledged(journal, root, {
+		kind: "reconciled",
+		id,
+		spent,
+		seq: await nextPerNodeSeq(journal, root, "reconciled", id),
+		at
+	});
+}
+async function nextPerNodeSeq(journal, root, kind, id) {
+	return (await journal.loadTree(root) ?? []).reduce((max, event) => event.kind === kind && event.id === id ? Math.max(max, event.seq) : max, -1) + 1;
+}
+async function appendAcknowledged(journal, root, event) {
 	try {
 		await journal.appendEvent(root, event);
 	} catch (error) {
-		if (!(await journal.loadTree(root))?.some((record) => record.kind === "metered" && contentAddress(record) === contentAddress(event))) throw error;
+		if (!(await journal.loadTree(root))?.some((record) => record.kind === event.kind && contentAddress(record) === contentAddress(event))) throw error;
 	}
 }
 /** Stamp the cursor `seq`, write the `settled` journal record, and project the
@@ -20722,6 +20880,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 			seq,
 			at
 		});
+		else if (settlement.reconciled !== void 0) await appendReconciledFloor(args.journal, args.root, child.id, settlement.reconciled, at);
 		notifyRuntimeHookEvent(args.hooks, {
 			id: `${child.id}:settled`,
 			runId: args.root,
@@ -21049,19 +21208,22 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 			live.executorDone = true;
 			const trace = await captureTraceOnce();
 			await teardownOnce(opts.shutdown ?? "brutalKill").catch(() => void 0);
-			const metered = executor.metered?.();
-			reconcileOnce({
-				iterations: metered?.iterations ?? opts.budget.maxIterations,
-				tokens: metered?.tokens ?? {
-					input: opts.budget.maxTokens,
-					output: 0
-				},
-				tokensKnown: false,
-				usd: metered?.usd ?? opts.budget.maxUsd ?? 0,
-				usdKnown: false,
-				ms: Math.max(0, now() - live.startedAt)
-			});
-			return downRecord(errMessage(err), true, trace, metered);
+			if (!reconciled) {
+				const accounting = executor.accounting?.();
+				const ms = Math.max(0, now() - live.startedAt);
+				live.spent = {
+					...unknownFloor(accounting?.reported ?? live.spent),
+					ms
+				};
+				reconcileOnce({
+					...unknownFloor(accounting?.reservation ?? live.spent),
+					ms
+				});
+			}
+			return {
+				...downRecord(errMessage(err), true, trace, executor.metered?.()),
+				reconciled: live.spent
+			};
 		}
 		live.executorDone = true;
 		let evidenceError;
@@ -21081,15 +21243,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		if (accounting) live.spent = accounting.reported;
 		const providerModel = runtimeOwnedExecutorProviderEvidence(executor);
 		const aborted = childAbort.signal.aborted || isAbortError(err);
-		if (started && !terminalTelemetryCaptured && accounting === void 0) live.spent = {
-			...live.spent,
-			tokensKnown: false,
-			usdKnown: false,
-			...live.spent.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(live.spent.resources).map(([name, value]) => [name, {
-				...value,
-				known: false
-			}])) }
-		};
+		if (started && !terminalTelemetryCaptured && accounting === void 0) live.spent = unknownFloor(live.spent);
 		const reconcileError = reconcileOnce(accounting?.reservation ?? live.spent);
 		return downRecord(errMessage(err), evidenceError !== void 0 || teardownError !== void 0 || reconcileError !== void 0 || aborted || isInfraError(err), trace, executor.metered?.(), providerModel);
 	} finally {
@@ -21315,6 +21469,19 @@ async function awaitAbortable(work, signal) {
 		});
 	});
 }
+/** Observed partial counts as a lower bound on every channel: the work happened, its remainder went
+*  unreported, and no reader may take the counts for a measurement. */
+function unknownFloor(spend) {
+	return {
+		...spend,
+		tokensKnown: false,
+		usdKnown: false,
+		...spend.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(spend.resources).map(([name, value]) => [name, {
+			...value,
+			known: false
+		}])) }
+	};
+}
 function downRecord(reason, infra, trace, metered, providerModel) {
 	return {
 		kind: "down",
@@ -22124,7 +22291,10 @@ function createSupervisor() {
 				controller.abort(reason);
 				return true;
 			};
-			const onCallerAbort = () => cascadeAbort(opts.signal?.reason instanceof RunCancellationReason ? opts.signal.reason : new RunCancellationReason("signal", typeof opts.signal?.reason === "string" ? opts.signal.reason : "caller signal aborted"));
+			const onCallerAbort = () => {
+				const reason = opts.signal ? abortReason(opts.signal, "caller signal aborted") : "caller signal aborted";
+				cascadeAbort(reason instanceof RunCancellationReason ? reason : new RunCancellationReason("signal", typeof reason === "string" ? reason : "caller signal aborted"));
+			};
 			if (opts.signal) if (opts.signal.aborted) onCallerAbort();
 			else opts.signal.addEventListener("abort", onCallerAbort, { once: true });
 			const breaker = createIntensityBreaker(opts, () => cascadeAbort("intensity breaker tripped"));
@@ -22592,89 +22762,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-//#region src/redact.ts
-const redactedMarker = "[redacted]";
-/** Secret-bearing key names: when an object key matches, its value is fully
-*  replaced regardless of the value's own content. Lowercased compare. */
-const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
-/** AgentProfile's numeric model limits describe compute, not credentials. */
-const tokenLimitKeyPattern = /^max(?:VisibleOutput|Reasoning|TotalOutput)Tokens$/;
-/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
-const valuePatterns = [
-	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
-	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
-	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
-	/\bAKIA[0-9A-Z]{16}\b/g,
-	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
-];
-/** Secret assignments embedded inside an otherwise opaque string, including
-* serialized JSON and log-style `key=value` text. */
-const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
-/** Scrub a single string of in-value secret/PII patterns. */
-function scrubString(input) {
-	let out = input;
-	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
-	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
-}
-/**
-* The built-in redactor. Walks objects and arrays; replaces values under
-* secret-bearing keys wholesale; scrubs in-value patterns from every string.
-* Cycle-safe (a seen-set short-circuits self-referential payloads to
-* `'[circular]'`), depth-bounded, and total — never throws on customer input.
-*/
-function defaultRedactor(value) {
-	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
-}
-const maxDepth = 32;
-function walk(value, seen, depth) {
-	if (depth > maxDepth) return "[truncated]";
-	if (typeof value === "string") return scrubString(value);
-	if (value === null || typeof value !== "object") return value;
-	if (seen.has(value)) return "[circular]";
-	seen.add(value);
-	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
-	const out = {};
-	for (const [key, v] of Object.entries(value)) {
-		const tokenLimit = tokenLimitKeyPattern.test(key) && typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
-		if (secretKeyPattern.test(key) && !tokenLimit) {
-			out[key] = redactedMarker;
-			continue;
-		}
-		out[key] = walk(v, seen, depth + 1);
-	}
-	return out;
-}
-/** Stable identity input for saved work that depends on built-in redaction behavior. */
-function defaultRedactorIdentityMaterial() {
-	const patternIdentity = (pattern) => ({
-		source: pattern.source,
-		flags: pattern.flags
-	});
-	return {
-		marker: redactedMarker,
-		secretKeyPattern: patternIdentity(secretKeyPattern),
-		tokenLimitKeyPattern: patternIdentity(tokenLimitKeyPattern),
-		valuePatterns: valuePatterns.map(patternIdentity),
-		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
-		maxDepth,
-		scrubString: Function.prototype.toString.call(scrubString),
-		walk: Function.prototype.toString.call(walk),
-		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
-	};
-}
-/**
-* Resolve the redactor a client uses. A caller-supplied hook handles
-* domain-specific values first, then the built-in scrubber still removes
-* common credentials and email addresses. Returning `false` is the explicit
-* opt-out for already-reviewed public values.
-*/
-function resolveRedactor(redact) {
-	if (redact === false) return (value) => value;
-	if (!redact) return defaultRedactor;
-	return (value) => defaultRedactor(redact(value));
-}
-//#endregion
-export { captureReusableExecutorConfig as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, bridgeRuntimeAttachmentsKey as $t, consumeScopeRetainedOwnerResult as A, sumSandboxUsage as Ai, throwAbort as An, assertProfileMaterialization as Ar, workerTraceHeaders as At, workerInteractiveBindingFile as B, registerRetainedExecutorPreparation as Bn, renderUnsupported as Br, claimsAuthority as Bt, settledToIteration as C, extractLlmCallEvent as Ci, deleteBoxSafe as Cn, DEFAULT_LOCAL_HARNESS as Cr, contentAddress as Ct, timerAt as D, notifySandboxEventObserver as Di, randomSuffix as Dn, parseCodexTokenUsage as Dr, WORKER_TRACE_PROPAGATION as Dt, pollFor as E, mapSandboxToolEvent as Ei, promptCacheTokenClasses as En, localHarnessExecutable as Er, spendFromUsageEvents as Et, interactiveAdmissionSeamKey as F, promptOptionsFromAgentTurnInput as Fi, resourceTelemetry as Fn, promptControlProfileMaterialization as Fr, readWorkerProgress as Ft, destroyInteractiveEnvironment as G, reconnectRetainedRun as Gn, isNoEntError as Gr, isLiveNodeStatus as Gt, reconnectRetainedInteractiveRun as H, RunCancellationReason as Hn, unsupportedProfileDimensions as Hr, isPeerMailEnvelope as Ht, readWorkerInteractiveAdmissions as I, providerMessageText as Ii, withBudgetResources as In, promptModelProfileMaterialization as Ir, createInbox as It, queueOf as J, startRetainedRunInEnvironment as Jn, writeAllBytes as Jr, bridgeModelRouteRefusal as Jt, effectiveConcurrency as K, recoverRetainedRun as Kn, parseCommittedJsonLines as Kr, isTerminalNodeStatus as Kt, workerInteractiveAdmissionFile as L, createPushTraceSource as Ln, promptOnlyProfileMaterialization as Lr, AUTHORITY_MARKERS as Lt, scopeRetainedOwnerContext as M, abortError$2 as Mi, unmeteredSpend as Mn, defineProfileMaterializationContract as Mr, taskToPrompt as Mt, scopeRetainedOwnerPriorSpend as N, awaitAbortable$1 as Ni, zeroSpend as Nn, fullProfileMaterialization as Nr, DEFAULT_STALL_AFTER_MS as Nt, validateWaitSpec as O, sandboxEventServedBackend as Oi, sleep as On, CodexExecutionDiagnosticError as Or, readWorkerTraceContext as Ot, scopeRetainedOwnerResult as P, promptFromAgentTurnInput as Pi, addResourceSpend as Pn, profileMaterializationAxes$1 as Pr, createActivityLog as Pt, bindReusableExecutorExecutionId as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, readCodexRolloutSession as Qt, attachWorker as R, decodeToolPart as Rn, promptResourceProfileMaterialization as Rr, DEFAULT_PEER_MAIL_LIMITS as Rt, scopeOwnerExecutorNodeContext as S, createSandboxUsageLedger as Si, cloneSpend as Sn, removeWorktree as Sr, workerTraceAnalysisStore as St, isWaitOutcome as T, mapSandboxEvent as Ti, isAbortError$2 as Tn, harnessSupportsReasoningEffort as Tr, createBudgetPool as Tt, recoverRetainedInteractiveRun as U, abortError$1 as Un, validateProfileMaterialization as Ur, peerMailTools as Ut, workerInteractiveBindingsDir as V, retainedExecutorSeamKey as Vn, sandboxActProfileMaterialization as Vr, createPeerMailbox as Vt, startRetainedInteractiveRun as W, linkAbort as Wn, worktreeCliProfileMaterialization as Wr, peerMailVerbNames as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, createCodexRolloutStoreReader as Xt, rollingDispatch as Y, retainedCreateMaterial as Yn, attestRuntimeOwnedPendingExecutor as Yr, addHarnessUsage as Yt, teardownExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, harnessUsageIsEmpty as Zt, deriveNodeExecutionIdentity as _, projectSandboxOutcome as _i, providerAsSandboxClient as _n, sanitizeRuntimeStreamEvent as _r, replaySpawnTree as _t, createSupervisor as a, runtimeOwnedDriveHarnessProviderEvidence as ai, runAgentRounds as an, createOtelExporter as ar, createWorktreeCliExecutor as at, recordScopeOwnerMaterialization as b, canonicalStreamEventFromSandboxEvent as bi, addSpend as bn, captureWorktreeDiff as br, isTraceAnalysisStore as bt, pickBestDelivered as c, runtimeOwnedExecutorProviderEvidence as ci, acquireSandbox as cn, generateSpanId as cr, createInPlaceCliExecutor as ct, driverChild as d, unknownExecutionBindingReceipt as di, routerBrain as dn, padTraceId as dr, InMemoryResultBlobStore as dt, knownExecutionBindingReceipt as ei, bridgeStopSignalKey as en, INTELLIGENCE_WIRE_VERSION as er, cliInPlaceExecutor as et, driverExecutorFactory as f, unknownMaterializationReceipt as fi, runBrainLoop as fn, toOtelAttributes as fr, InMemorySpawnJournal as ft, createScope as g, detachedSnapshot as gi, providerAsExecutor as gn, sanitizeKnowledgeReadinessReport as gr, pendingWaits as gt, beginScopeOwnerAttempt as h, detachedFrozen as hi, createAgentEnvironmentProviderRegistry as hn, sanitizeAgentRuntimeEvent as hr, materializeTreeView as ht, createRootHandle as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, isTerminalDecision as in, createOpenInferenceFileExporter as ir, snapshotExecutorConfig as it, prepareScopeRetainedOwnerTask as j, decodeHarnessUsage as ji, throwIfAborted as jn, controlProfileMaterialization as jr, workerTraceSeamKey as jt, waitUntil as k, sandboxProgressEvents as ki, stringifySafe as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, workerTraceEnv as kt, runFinalizer as l, runtimeOwnedPendingExecutorMaterialization as li, assertBoxlessPromptOptions as ln, loopEventToOtelSpan as lr, FileResultBlobStore as lt, withDriverExecutor as m, executableAgentSpecSnapshot as mi, observedModelMatchesDeclared as mn, createRuntimeStreamEventCollector as mr, loadSpawnForest as mt, defaultRedactorIdentityMaterial as n, newExecutionAttemptId as ni, createSandboxForSpec as nn, buildLoopSpanNodes as nr, createExecutor as nt, bestDelivered as o, runtimeOwnedExecutorExecutionBinding as oi, createSandboxLineage as on, exportEvalRuns as or, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ot, isDriverSpec as p, executableAgentProfileSnapshot as pi, canonicalObservedModelParts as pn, createRuntimeEventCollector as pr, insideCursorNamespace as pt, freeSlots as q, startRetainedRun as qn, prepareJsonlAppend as qr, bridgeAdmissionRefusal as qt, resolveRedactor as r, providerAttemptEvidence as ri, defaultSelectWinner as rn, buildRuntimeEventOtelSpans as rr, createExecutorRegistry as rt, collectDelivered as s, runtimeOwnedExecutorMaterialization as si, probeSandboxCapabilities as sn, flatOtelSpan as sr, createSteerableSandboxSession as st, defaultRedactor as t, knownMaterializationReceipt as ti, TERMINAL_DECISIONS as tn, buildLoopOtelSpans as tr, cliWorktreeExecutor as tt, runTree as u, runtimeOwnedScopeOwnerRuntime as ui, readPromptOptions as un, padSpanId as ur, FileSpawnJournal as ut, meterRuntimeOwnedAccounting as v, readSandboxOutcome as vi, resolveAgentEnvironmentProvider as vn, runSettledCommand as vr, WORKER_TOOL_TRACE_SCHEMA_VERSION as vt, createWaitProbes as w, isSandboxTerminalEvent as wi, hasCompleteCacheBreakdown as wn, LOCAL_HARNESSES as wr, assertValidBudget as wt, restoreScopeOwnerAcceptedExecution as x, createSandboxToolPartState as xi, chargedTokens as xn, createWorktree as xr, parseWorkerToolTraceArtifact as xt, meterRuntimeOwnedProviderAttempt as y, assertSandboxServedModel as yi, sandboxClientAsProvider as yn, runWorktreeHarness as yr, captureWorkerTraceEvidence as yt, readWorkerInteractiveBinding as z, sandboxSessionTraceSource as zn, renderProfileMaterializationIssues as zr, PEER_MAIL_WIRE_KEY as zt };
+export { createExecutor as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, createSandboxForSpec as $t, scopeRetainedOwnerPriorSpend as A, sumSandboxUsage as Ai, zeroSpend as An, assertProfileMaterialization as Ar, DEFAULT_STALL_AFTER_MS as At, recoverRetainedInteractiveRun as B, abortError$1 as Bn, renderUnsupported as Br, peerMailTools as Bt, pollFor as C, extractLlmCallEvent as Ci, promptCacheTokenClasses as Cn, DEFAULT_LOCAL_HARNESS as Cr, spendFromUsageEvents as Ct, consumeScopeRetainedOwnerResult as D, notifySandboxEventObserver as Di, throwAbort as Dn, parseCodexTokenUsage as Dr, workerTraceHeaders as Dt, waitUntil as E, mapSandboxToolEvent as Ei, stringifySafe as En, localHarnessExecutable as Er, workerTraceEnv as Et, attachWorker as F, promptOptionsFromAgentTurnInput as Fi, decodeToolPart as Fn, promptControlProfileMaterialization as Fr, DEFAULT_PEER_MAIL_LIMITS as Ft, queueOf as G, startRetainedRunInEnvironment as Gn, isNoEntError as Gr, bridgeModelRouteRefusal as Gt, destroyInteractiveEnvironment as H, reconnectRetainedRun as Hn, unsupportedProfileDimensions as Hr, isLiveNodeStatus as Ht, readWorkerInteractiveBinding as I, providerMessageText as Ii, sandboxSessionTraceSource as In, promptModelProfileMaterialization as Ir, PEER_MAIL_WIRE_KEY as It, teardownExecutor as J, defaultRedactorIdentityMaterial as Jn, writeAllBytes as Jr, harnessUsageIsEmpty as Jt, rollingDispatch as K, retainedCreateMaterial as Kn, parseCommittedJsonLines as Kr, addHarnessUsage as Kt, workerInteractiveBindingFile as L, registerRetainedExecutorPreparation as Ln, promptOnlyProfileMaterialization as Lr, claimsAuthority as Lt, interactiveAdmissionSeamKey as M, abortError$2 as Mi, resourceTelemetry as Mn, defineProfileMaterializationContract as Mr, readWorkerProgress as Mt, readWorkerInteractiveAdmissions as N, awaitAbortable$1 as Ni, withBudgetResources as Nn, fullProfileMaterialization as Nr, createInbox as Nt, prepareScopeRetainedOwnerTask as O, sandboxEventServedBackend as Oi, throwIfAborted as On, CodexExecutionDiagnosticError as Or, workerTraceSeamKey as Ot, workerInteractiveAdmissionFile as P, promptFromAgentTurnInput as Pi, createPushTraceSource as Pn, profileMaterializationAxes$1 as Pr, AUTHORITY_MARKERS as Pt, cliWorktreeExecutor as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, TERMINAL_DECISIONS as Qt, workerInteractiveBindingsDir as R, retainedExecutorSeamKey as Rn, promptResourceProfileMaterialization as Rr, createPeerMailbox as Rt, isWaitOutcome as S, createSandboxUsageLedger as Si, isAbortError$2 as Sn, removeWorktree as Sr, createBudgetPool as St, validateWaitSpec as T, mapSandboxEvent as Ti, sleep as Tn, harnessSupportsReasoningEffort as Tr, readWorkerTraceContext as Tt, effectiveConcurrency as U, recoverRetainedRun as Un, validateProfileMaterialization as Ur, isTerminalNodeStatus as Ut, startRetainedInteractiveRun as V, linkAbort as Vn, sandboxActProfileMaterialization as Vr, peerMailVerbNames as Vt, freeSlots as W, startRetainedRun as Wn, worktreeCliProfileMaterialization as Wr, bridgeAdmissionRefusal as Wt, captureReusableExecutorConfig as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, bridgeRuntimeAttachmentsKey as Xt, bindReusableExecutorExecutionId as Y, resolveRedactor as Yn, attestRuntimeOwnedPendingExecutor as Yr, readCodexRolloutSession as Yt, cliInPlaceExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, bridgeStopSignalKey as Zt, recordScopeOwnerMaterialization as _, projectSandboxOutcome as _i, addSpend as _n, sanitizeRuntimeStreamEvent as _r, isTraceAnalysisStore as _t, pickBestDelivered as a, runtimeOwnedDriveHarnessProviderEvidence as ai, acquireSandbox as an, createOtelExporter as ar, createInPlaceCliExecutor as at, settledToIteration as b, canonicalStreamEventFromSandboxEvent as bi, deleteBoxSafe as bn, captureWorktreeDiff as br, contentAddress as bt, driverChild as c, runtimeOwnedExecutorProviderEvidence as ci, routerBrain as cn, generateSpanId as cr, InMemoryResultBlobStore as ct, withDriverExecutor as d, unknownExecutionBindingReceipt as di, observedModelMatchesDeclared as dn, padTraceId as dr, loadSpawnForest as dt, knownExecutionBindingReceipt as ei, defaultSelectWinner as en, INTELLIGENCE_WIRE_VERSION as er, createExecutorRegistry as et, beginScopeOwnerAttempt as f, unknownMaterializationReceipt as fi, createAgentEnvironmentProviderRegistry as fn, toOtelAttributes as fr, materializeTreeView as ft, meterRuntimeOwnedProviderAttempt as g, detachedSnapshot as gi, sandboxClientAsProvider as gn, sanitizeKnowledgeReadinessReport as gr, captureWorkerTraceEvidence as gt, meterRuntimeOwnedAccounting as h, detachedFrozen as hi, resolveAgentEnvironmentProvider as hn, sanitizeAgentRuntimeEvent as hr, WORKER_TOOL_TRACE_SCHEMA_VERSION as ht, collectDelivered as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, probeSandboxCapabilities as in, createOpenInferenceFileExporter as ir, createSteerableSandboxSession as it, scopeRetainedOwnerResult as j, decodeHarnessUsage as ji, addResourceSpend as jn, controlProfileMaterialization as jr, createActivityLog as jt, scopeRetainedOwnerContext as k, sandboxProgressEvents as ki, unmeteredSpend as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, taskToPrompt as kt, driverExecutorFactory as l, runtimeOwnedPendingExecutorMaterialization as li, runBrainLoop as ln, loopEventToOtelSpan as lr, InMemorySpawnJournal as lt, deriveNodeExecutionIdentity as m, executableAgentSpecSnapshot as mi, providerAsSandboxClient as mn, createRuntimeStreamEventCollector as mr, replaySpawnTree as mt, createSupervisor as n, newExecutionAttemptId as ni, runAgentRounds as nn, buildLoopSpanNodes as nr, createWorktreeCliExecutor as nt, runFinalizer as o, runtimeOwnedExecutorExecutionBinding as oi, assertBoxlessPromptOptions as on, exportEvalRuns as or, FileResultBlobStore as ot, createScope as p, executableAgentProfileSnapshot as pi, providerAsExecutor as pn, createRuntimeEventCollector as pr, pendingWaits as pt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as q, defaultRedactor as qn, prepareJsonlAppend as qr, createCodexRolloutStoreReader as qt, bestDelivered as r, providerAttemptEvidence as ri, createSandboxLineage as rn, buildRuntimeEventOtelSpans as rr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as rt, runTree as s, runtimeOwnedExecutorMaterialization as si, readPromptOptions as sn, flatOtelSpan as sr, FileSpawnJournal as st, createRootHandle as t, knownMaterializationReceipt as ti, isTerminalDecision as tn, buildLoopOtelSpans as tr, snapshotExecutorConfig as tt, isDriverSpec as u, runtimeOwnedScopeOwnerRuntime as ui, canonicalObservedModelParts as un, padSpanId as ur, insideCursorNamespace as ut, restoreScopeOwnerAcceptedExecution as v, readSandboxOutcome as vi, chargedTokens as vn, runSettledCommand as vr, parseWorkerToolTraceArtifact as vt, timerAt as w, isSandboxTerminalEvent as wi, randomSuffix as wn, LOCAL_HARNESSES as wr, WORKER_TRACE_PROPAGATION as wt, createWaitProbes as x, createSandboxToolPartState as xi, hasCompleteCacheBreakdown as xn, createWorktree as xr, assertValidBudget as xt, scopeOwnerExecutorNodeContext as y, assertSandboxServedModel as yi, cloneSpend as yn, runWorktreeHarness as yr, workerTraceAnalysisStore as yt, reconnectRetainedInteractiveRun as z, RunCancellationReason as zn, renderProfileMaterializationIssues as zr, isPeerMailEnvelope as zt };
 
-//# sourceMappingURL=redact-DyckXHLF.js.map
+//# sourceMappingURL=supervisor-CvF_KeLc.js.map