@tangle-network/agent-runtime 0.217.1 → 0.217.2

package/dist/{redact-BaQMqbqi.js → supervisor-CvF_KeLc.js}

@@ -5211,6 +5211,89 @@ function publicCreateOptions(create) {
 	};
 }
 //#endregion
+//#region src/redact.ts
+const redactedMarker = "[redacted]";
+/** Secret-bearing key names: when an object key matches, its value is fully
+*  replaced regardless of the value's own content. Lowercased compare. */
+const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
+/** AgentProfile's numeric model limits describe compute, not credentials. */
+const tokenLimitKeyPattern = /^max(?:VisibleOutput|Reasoning|TotalOutput)Tokens$/;
+/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
+const valuePatterns = [
+	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
+	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
+	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+	/\bAKIA[0-9A-Z]{16}\b/g,
+	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
+];
+/** Secret assignments embedded inside an otherwise opaque string, including
+* serialized JSON and log-style `key=value` text. */
+const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
+/** Scrub a single string of in-value secret/PII patterns. */
+function scrubString(input) {
+	let out = input;
+	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
+	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
+}
+/**
+* The built-in redactor. Walks objects and arrays; replaces values under
+* secret-bearing keys wholesale; scrubs in-value patterns from every string.
+* Cycle-safe (a seen-set short-circuits self-referential payloads to
+* `'[circular]'`), depth-bounded, and total — never throws on customer input.
+*/
+function defaultRedactor(value) {
+	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+const maxDepth = 32;
+function walk(value, seen, depth) {
+	if (depth > maxDepth) return "[truncated]";
+	if (typeof value === "string") return scrubString(value);
+	if (value === null || typeof value !== "object") return value;
+	if (seen.has(value)) return "[circular]";
+	seen.add(value);
+	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
+	const out = {};
+	for (const [key, v] of Object.entries(value)) {
+		const tokenLimit = tokenLimitKeyPattern.test(key) && typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
+		if (secretKeyPattern.test(key) && !tokenLimit) {
+			out[key] = redactedMarker;
+			continue;
+		}
+		out[key] = walk(v, seen, depth + 1);
+	}
+	return out;
+}
+/** Stable identity input for saved work that depends on built-in redaction behavior. */
+function defaultRedactorIdentityMaterial() {
+	const patternIdentity = (pattern) => ({
+		source: pattern.source,
+		flags: pattern.flags
+	});
+	return {
+		marker: redactedMarker,
+		secretKeyPattern: patternIdentity(secretKeyPattern),
+		tokenLimitKeyPattern: patternIdentity(tokenLimitKeyPattern),
+		valuePatterns: valuePatterns.map(patternIdentity),
+		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
+		maxDepth,
+		scrubString: Function.prototype.toString.call(scrubString),
+		walk: Function.prototype.toString.call(walk),
+		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
+	};
+}
+/**
+* Resolve the redactor a client uses. A caller-supplied hook handles
+* domain-specific values first, then the built-in scrubber still removes
+* common credentials and email addresses. Returning `false` is the explicit
+* opt-out for already-reviewed public values.
+*/
+function resolveRedactor(redact) {
+	if (redact === false) return (value) => value;
+	if (!redact) return defaultRedactor;
+	return (value) => defaultRedactor(redact(value));
+}
+//#endregion
 //#region src/runtime/interaction-capabilities.ts
 /**
 * Check one turn's interaction request before the provider can dispatch it.
@@ -7498,21 +7581,53 @@ async function providerExecutionSource(args, turn, signal) {
 		if (!environment) throw new Error("retained provider environment is unavailable");
 		const session = exactSession(environment, handle.controlRef).session;
 		async function* events() {
-			for await (const event of session.events({
-				executionId: handle.controlRef.executionId,
-				signal
-			})) {
-				assertEventBinding(event, handle.controlRef);
-				yield event;
+			let iterator;
+			let observationFailure;
+			try {
+				iterator = session.events({
+					executionId: handle.controlRef.executionId,
+					signal
+				})[Symbol.asyncIterator]();
+			} catch (error) {
+				if (signal.aborted) throw error;
+				observationFailure = { error };
+			}
+			try {
+				while (iterator !== void 0) {
+					let next;
+					try {
+						next = await awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal);
+					} catch (error) {
+						if (signal.aborted) throw error;
+						observationFailure = { error };
+						break;
+					}
+					if (next.done) break;
+					assertEventBinding(next.value, handle.controlRef);
+					yield next.value;
+				}
+			} finally {
+				if (signal.aborted || observationFailure !== void 0) Promise.resolve().then(() => iterator?.return?.()).catch(() => void 0);
+				else await iterator?.return?.();
+			}
+			let result;
+			try {
+				result = await awaitAbortable$1(handle.result(), signal);
+			} catch (error) {
+				if (observationFailure === void 0 || signal.aborted) throw error;
+				throw new AggregateError([observationFailure.error, error], "retained event observation failed and its exact result could not be reconciled", { cause: error });
 			}
-			const result = await awaitAbortable$1(handle.result(), signal);
 			yield {
 				type: "result",
 				data: {
 					finalText: result.text,
 					success: result.success,
 					...result.error ? { error: result.error } : {},
-					usageMode: "cumulative"
+					usageMode: "cumulative",
+					...observationFailure === void 0 ? {} : {
+						eventStreamComplete: false,
+						eventStreamError: String(defaultRedactor(observationFailure.error instanceof Error ? observationFailure.error.message : String(observationFailure.error))).slice(0, 2048)
+					}
 				},
 				...result.usage ? { usage: result.usage } : {}
 			};
@@ -22647,89 +22762,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-//#region src/redact.ts
-const redactedMarker = "[redacted]";
-/** Secret-bearing key names: when an object key matches, its value is fully
-*  replaced regardless of the value's own content. Lowercased compare. */
-const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
-/** AgentProfile's numeric model limits describe compute, not credentials. */
-const tokenLimitKeyPattern = /^max(?:VisibleOutput|Reasoning|TotalOutput)Tokens$/;
-/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
-const valuePatterns = [
-	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
-	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
-	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
-	/\bAKIA[0-9A-Z]{16}\b/g,
-	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
-];
-/** Secret assignments embedded inside an otherwise opaque string, including
-* serialized JSON and log-style `key=value` text. */
-const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
-/** Scrub a single string of in-value secret/PII patterns. */
-function scrubString(input) {
-	let out = input;
-	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
-	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
-}
-/**
-* The built-in redactor. Walks objects and arrays; replaces values under
-* secret-bearing keys wholesale; scrubs in-value patterns from every string.
-* Cycle-safe (a seen-set short-circuits self-referential payloads to
-* `'[circular]'`), depth-bounded, and total — never throws on customer input.
-*/
-function defaultRedactor(value) {
-	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
-}
-const maxDepth = 32;
-function walk(value, seen, depth) {
-	if (depth > maxDepth) return "[truncated]";
-	if (typeof value === "string") return scrubString(value);
-	if (value === null || typeof value !== "object") return value;
-	if (seen.has(value)) return "[circular]";
-	seen.add(value);
-	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
-	const out = {};
-	for (const [key, v] of Object.entries(value)) {
-		const tokenLimit = tokenLimitKeyPattern.test(key) && typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
-		if (secretKeyPattern.test(key) && !tokenLimit) {
-			out[key] = redactedMarker;
-			continue;
-		}
-		out[key] = walk(v, seen, depth + 1);
-	}
-	return out;
-}
-/** Stable identity input for saved work that depends on built-in redaction behavior. */
-function defaultRedactorIdentityMaterial() {
-	const patternIdentity = (pattern) => ({
-		source: pattern.source,
-		flags: pattern.flags
-	});
-	return {
-		marker: redactedMarker,
-		secretKeyPattern: patternIdentity(secretKeyPattern),
-		tokenLimitKeyPattern: patternIdentity(tokenLimitKeyPattern),
-		valuePatterns: valuePatterns.map(patternIdentity),
-		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
-		maxDepth,
-		scrubString: Function.prototype.toString.call(scrubString),
-		walk: Function.prototype.toString.call(walk),
-		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
-	};
-}
-/**
-* Resolve the redactor a client uses. A caller-supplied hook handles
-* domain-specific values first, then the built-in scrubber still removes
-* common credentials and email addresses. Returning `false` is the explicit
-* opt-out for already-reviewed public values.
-*/
-function resolveRedactor(redact) {
-	if (redact === false) return (value) => value;
-	if (!redact) return defaultRedactor;
-	return (value) => defaultRedactor(redact(value));
-}
-//#endregion
-export { captureReusableExecutorConfig as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, bridgeRuntimeAttachmentsKey as $t, consumeScopeRetainedOwnerResult as A, sumSandboxUsage as Ai, throwAbort as An, assertProfileMaterialization as Ar, workerTraceHeaders as At, workerInteractiveBindingFile as B, registerRetainedExecutorPreparation as Bn, renderUnsupported as Br, claimsAuthority as Bt, settledToIteration as C, extractLlmCallEvent as Ci, deleteBoxSafe as Cn, DEFAULT_LOCAL_HARNESS as Cr, contentAddress as Ct, timerAt as D, notifySandboxEventObserver as Di, randomSuffix as Dn, parseCodexTokenUsage as Dr, WORKER_TRACE_PROPAGATION as Dt, pollFor as E, mapSandboxToolEvent as Ei, promptCacheTokenClasses as En, localHarnessExecutable as Er, spendFromUsageEvents as Et, interactiveAdmissionSeamKey as F, promptOptionsFromAgentTurnInput as Fi, resourceTelemetry as Fn, promptControlProfileMaterialization as Fr, readWorkerProgress as Ft, destroyInteractiveEnvironment as G, reconnectRetainedRun as Gn, isNoEntError as Gr, isLiveNodeStatus as Gt, reconnectRetainedInteractiveRun as H, RunCancellationReason as Hn, unsupportedProfileDimensions as Hr, isPeerMailEnvelope as Ht, readWorkerInteractiveAdmissions as I, providerMessageText as Ii, withBudgetResources as In, promptModelProfileMaterialization as Ir, createInbox as It, queueOf as J, startRetainedRunInEnvironment as Jn, writeAllBytes as Jr, bridgeModelRouteRefusal as Jt, effectiveConcurrency as K, recoverRetainedRun as Kn, parseCommittedJsonLines as Kr, isTerminalNodeStatus as Kt, workerInteractiveAdmissionFile as L, createPushTraceSource as Ln, promptOnlyProfileMaterialization as Lr, AUTHORITY_MARKERS as Lt, scopeRetainedOwnerContext as M, abortError$2 as Mi, unmeteredSpend as Mn, defineProfileMaterializationContract as Mr, taskToPrompt as Mt, scopeRetainedOwnerPriorSpend as N, awaitAbortable$1 as Ni, zeroSpend as Nn, fullProfileMaterialization as Nr, DEFAULT_STALL_AFTER_MS as Nt, validateWaitSpec as O, sandboxEventServedBackend as Oi, sleep as On, CodexExecutionDiagnosticError as Or, readWorkerTraceContext as Ot, scopeRetainedOwnerResult as P, promptFromAgentTurnInput as Pi, addResourceSpend as Pn, profileMaterializationAxes$1 as Pr, createActivityLog as Pt, bindReusableExecutorExecutionId as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, readCodexRolloutSession as Qt, attachWorker as R, decodeToolPart as Rn, promptResourceProfileMaterialization as Rr, DEFAULT_PEER_MAIL_LIMITS as Rt, scopeOwnerExecutorNodeContext as S, createSandboxUsageLedger as Si, cloneSpend as Sn, removeWorktree as Sr, workerTraceAnalysisStore as St, isWaitOutcome as T, mapSandboxEvent as Ti, isAbortError$2 as Tn, harnessSupportsReasoningEffort as Tr, createBudgetPool as Tt, recoverRetainedInteractiveRun as U, abortError$1 as Un, validateProfileMaterialization as Ur, peerMailTools as Ut, workerInteractiveBindingsDir as V, retainedExecutorSeamKey as Vn, sandboxActProfileMaterialization as Vr, createPeerMailbox as Vt, startRetainedInteractiveRun as W, linkAbort as Wn, worktreeCliProfileMaterialization as Wr, peerMailVerbNames as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, createCodexRolloutStoreReader as Xt, rollingDispatch as Y, retainedCreateMaterial as Yn, attestRuntimeOwnedPendingExecutor as Yr, addHarnessUsage as Yt, teardownExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, harnessUsageIsEmpty as Zt, deriveNodeExecutionIdentity as _, projectSandboxOutcome as _i, providerAsSandboxClient as _n, sanitizeRuntimeStreamEvent as _r, replaySpawnTree as _t, createSupervisor as a, runtimeOwnedDriveHarnessProviderEvidence as ai, runAgentRounds as an, createOtelExporter as ar, createWorktreeCliExecutor as at, recordScopeOwnerMaterialization as b, canonicalStreamEventFromSandboxEvent as bi, addSpend as bn, captureWorktreeDiff as br, isTraceAnalysisStore as bt, pickBestDelivered as c, runtimeOwnedExecutorProviderEvidence as ci, acquireSandbox as cn, generateSpanId as cr, createInPlaceCliExecutor as ct, driverChild as d, unknownExecutionBindingReceipt as di, routerBrain as dn, padTraceId as dr, InMemoryResultBlobStore as dt, knownExecutionBindingReceipt as ei, bridgeStopSignalKey as en, INTELLIGENCE_WIRE_VERSION as er, cliInPlaceExecutor as et, driverExecutorFactory as f, unknownMaterializationReceipt as fi, runBrainLoop as fn, toOtelAttributes as fr, InMemorySpawnJournal as ft, createScope as g, detachedSnapshot as gi, providerAsExecutor as gn, sanitizeKnowledgeReadinessReport as gr, pendingWaits as gt, beginScopeOwnerAttempt as h, detachedFrozen as hi, createAgentEnvironmentProviderRegistry as hn, sanitizeAgentRuntimeEvent as hr, materializeTreeView as ht, createRootHandle as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, isTerminalDecision as in, createOpenInferenceFileExporter as ir, snapshotExecutorConfig as it, prepareScopeRetainedOwnerTask as j, decodeHarnessUsage as ji, throwIfAborted as jn, controlProfileMaterialization as jr, workerTraceSeamKey as jt, waitUntil as k, sandboxProgressEvents as ki, stringifySafe as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, workerTraceEnv as kt, runFinalizer as l, runtimeOwnedPendingExecutorMaterialization as li, assertBoxlessPromptOptions as ln, loopEventToOtelSpan as lr, FileResultBlobStore as lt, withDriverExecutor as m, executableAgentSpecSnapshot as mi, observedModelMatchesDeclared as mn, createRuntimeStreamEventCollector as mr, loadSpawnForest as mt, defaultRedactorIdentityMaterial as n, newExecutionAttemptId as ni, createSandboxForSpec as nn, buildLoopSpanNodes as nr, createExecutor as nt, bestDelivered as o, runtimeOwnedExecutorExecutionBinding as oi, createSandboxLineage as on, exportEvalRuns as or, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ot, isDriverSpec as p, executableAgentProfileSnapshot as pi, canonicalObservedModelParts as pn, createRuntimeEventCollector as pr, insideCursorNamespace as pt, freeSlots as q, startRetainedRun as qn, prepareJsonlAppend as qr, bridgeAdmissionRefusal as qt, resolveRedactor as r, providerAttemptEvidence as ri, defaultSelectWinner as rn, buildRuntimeEventOtelSpans as rr, createExecutorRegistry as rt, collectDelivered as s, runtimeOwnedExecutorMaterialization as si, probeSandboxCapabilities as sn, flatOtelSpan as sr, createSteerableSandboxSession as st, defaultRedactor as t, knownMaterializationReceipt as ti, TERMINAL_DECISIONS as tn, buildLoopOtelSpans as tr, cliWorktreeExecutor as tt, runTree as u, runtimeOwnedScopeOwnerRuntime as ui, readPromptOptions as un, padSpanId as ur, FileSpawnJournal as ut, meterRuntimeOwnedAccounting as v, readSandboxOutcome as vi, resolveAgentEnvironmentProvider as vn, runSettledCommand as vr, WORKER_TOOL_TRACE_SCHEMA_VERSION as vt, createWaitProbes as w, isSandboxTerminalEvent as wi, hasCompleteCacheBreakdown as wn, LOCAL_HARNESSES as wr, assertValidBudget as wt, restoreScopeOwnerAcceptedExecution as x, createSandboxToolPartState as xi, chargedTokens as xn, createWorktree as xr, parseWorkerToolTraceArtifact as xt, meterRuntimeOwnedProviderAttempt as y, assertSandboxServedModel as yi, sandboxClientAsProvider as yn, runWorktreeHarness as yr, captureWorkerTraceEvidence as yt, readWorkerInteractiveBinding as z, sandboxSessionTraceSource as zn, renderProfileMaterializationIssues as zr, PEER_MAIL_WIRE_KEY as zt };
+export { createExecutor as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, createSandboxForSpec as $t, scopeRetainedOwnerPriorSpend as A, sumSandboxUsage as Ai, zeroSpend as An, assertProfileMaterialization as Ar, DEFAULT_STALL_AFTER_MS as At, recoverRetainedInteractiveRun as B, abortError$1 as Bn, renderUnsupported as Br, peerMailTools as Bt, pollFor as C, extractLlmCallEvent as Ci, promptCacheTokenClasses as Cn, DEFAULT_LOCAL_HARNESS as Cr, spendFromUsageEvents as Ct, consumeScopeRetainedOwnerResult as D, notifySandboxEventObserver as Di, throwAbort as Dn, parseCodexTokenUsage as Dr, workerTraceHeaders as Dt, waitUntil as E, mapSandboxToolEvent as Ei, stringifySafe as En, localHarnessExecutable as Er, workerTraceEnv as Et, attachWorker as F, promptOptionsFromAgentTurnInput as Fi, decodeToolPart as Fn, promptControlProfileMaterialization as Fr, DEFAULT_PEER_MAIL_LIMITS as Ft, queueOf as G, startRetainedRunInEnvironment as Gn, isNoEntError as Gr, bridgeModelRouteRefusal as Gt, destroyInteractiveEnvironment as H, reconnectRetainedRun as Hn, unsupportedProfileDimensions as Hr, isLiveNodeStatus as Ht, readWorkerInteractiveBinding as I, providerMessageText as Ii, sandboxSessionTraceSource as In, promptModelProfileMaterialization as Ir, PEER_MAIL_WIRE_KEY as It, teardownExecutor as J, defaultRedactorIdentityMaterial as Jn, writeAllBytes as Jr, harnessUsageIsEmpty as Jt, rollingDispatch as K, retainedCreateMaterial as Kn, parseCommittedJsonLines as Kr, addHarnessUsage as Kt, workerInteractiveBindingFile as L, registerRetainedExecutorPreparation as Ln, promptOnlyProfileMaterialization as Lr, claimsAuthority as Lt, interactiveAdmissionSeamKey as M, abortError$2 as Mi, resourceTelemetry as Mn, defineProfileMaterializationContract as Mr, readWorkerProgress as Mt, readWorkerInteractiveAdmissions as N, awaitAbortable$1 as Ni, withBudgetResources as Nn, fullProfileMaterialization as Nr, createInbox as Nt, prepareScopeRetainedOwnerTask as O, sandboxEventServedBackend as Oi, throwIfAborted as On, CodexExecutionDiagnosticError as Or, workerTraceSeamKey as Ot, workerInteractiveAdmissionFile as P, promptFromAgentTurnInput as Pi, createPushTraceSource as Pn, profileMaterializationAxes$1 as Pr, AUTHORITY_MARKERS as Pt, cliWorktreeExecutor as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, TERMINAL_DECISIONS as Qt, workerInteractiveBindingsDir as R, retainedExecutorSeamKey as Rn, promptResourceProfileMaterialization as Rr, createPeerMailbox as Rt, isWaitOutcome as S, createSandboxUsageLedger as Si, isAbortError$2 as Sn, removeWorktree as Sr, createBudgetPool as St, validateWaitSpec as T, mapSandboxEvent as Ti, sleep as Tn, harnessSupportsReasoningEffort as Tr, readWorkerTraceContext as Tt, effectiveConcurrency as U, recoverRetainedRun as Un, validateProfileMaterialization as Ur, isTerminalNodeStatus as Ut, startRetainedInteractiveRun as V, linkAbort as Vn, sandboxActProfileMaterialization as Vr, peerMailVerbNames as Vt, freeSlots as W, startRetainedRun as Wn, worktreeCliProfileMaterialization as Wr, bridgeAdmissionRefusal as Wt, captureReusableExecutorConfig as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, bridgeRuntimeAttachmentsKey as Xt, bindReusableExecutorExecutionId as Y, resolveRedactor as Yn, attestRuntimeOwnedPendingExecutor as Yr, readCodexRolloutSession as Yt, cliInPlaceExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, bridgeStopSignalKey as Zt, recordScopeOwnerMaterialization as _, projectSandboxOutcome as _i, addSpend as _n, sanitizeRuntimeStreamEvent as _r, isTraceAnalysisStore as _t, pickBestDelivered as a, runtimeOwnedDriveHarnessProviderEvidence as ai, acquireSandbox as an, createOtelExporter as ar, createInPlaceCliExecutor as at, settledToIteration as b, canonicalStreamEventFromSandboxEvent as bi, deleteBoxSafe as bn, captureWorktreeDiff as br, contentAddress as bt, driverChild as c, runtimeOwnedExecutorProviderEvidence as ci, routerBrain as cn, generateSpanId as cr, InMemoryResultBlobStore as ct, withDriverExecutor as d, unknownExecutionBindingReceipt as di, observedModelMatchesDeclared as dn, padTraceId as dr, loadSpawnForest as dt, knownExecutionBindingReceipt as ei, defaultSelectWinner as en, INTELLIGENCE_WIRE_VERSION as er, createExecutorRegistry as et, beginScopeOwnerAttempt as f, unknownMaterializationReceipt as fi, createAgentEnvironmentProviderRegistry as fn, toOtelAttributes as fr, materializeTreeView as ft, meterRuntimeOwnedProviderAttempt as g, detachedSnapshot as gi, sandboxClientAsProvider as gn, sanitizeKnowledgeReadinessReport as gr, captureWorkerTraceEvidence as gt, meterRuntimeOwnedAccounting as h, detachedFrozen as hi, resolveAgentEnvironmentProvider as hn, sanitizeAgentRuntimeEvent as hr, WORKER_TOOL_TRACE_SCHEMA_VERSION as ht, collectDelivered as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, probeSandboxCapabilities as in, createOpenInferenceFileExporter as ir, createSteerableSandboxSession as it, scopeRetainedOwnerResult as j, decodeHarnessUsage as ji, addResourceSpend as jn, controlProfileMaterialization as jr, createActivityLog as jt, scopeRetainedOwnerContext as k, sandboxProgressEvents as ki, unmeteredSpend as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, taskToPrompt as kt, driverExecutorFactory as l, runtimeOwnedPendingExecutorMaterialization as li, runBrainLoop as ln, loopEventToOtelSpan as lr, InMemorySpawnJournal as lt, deriveNodeExecutionIdentity as m, executableAgentSpecSnapshot as mi, providerAsSandboxClient as mn, createRuntimeStreamEventCollector as mr, replaySpawnTree as mt, createSupervisor as n, newExecutionAttemptId as ni, runAgentRounds as nn, buildLoopSpanNodes as nr, createWorktreeCliExecutor as nt, runFinalizer as o, runtimeOwnedExecutorExecutionBinding as oi, assertBoxlessPromptOptions as on, exportEvalRuns as or, FileResultBlobStore as ot, createScope as p, executableAgentProfileSnapshot as pi, providerAsExecutor as pn, createRuntimeEventCollector as pr, pendingWaits as pt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as q, defaultRedactor as qn, prepareJsonlAppend as qr, createCodexRolloutStoreReader as qt, bestDelivered as r, providerAttemptEvidence as ri, createSandboxLineage as rn, buildRuntimeEventOtelSpans as rr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as rt, runTree as s, runtimeOwnedExecutorMaterialization as si, readPromptOptions as sn, flatOtelSpan as sr, FileSpawnJournal as st, createRootHandle as t, knownMaterializationReceipt as ti, isTerminalDecision as tn, buildLoopOtelSpans as tr, snapshotExecutorConfig as tt, isDriverSpec as u, runtimeOwnedScopeOwnerRuntime as ui, canonicalObservedModelParts as un, padSpanId as ur, insideCursorNamespace as ut, restoreScopeOwnerAcceptedExecution as v, readSandboxOutcome as vi, chargedTokens as vn, runSettledCommand as vr, parseWorkerToolTraceArtifact as vt, timerAt as w, isSandboxTerminalEvent as wi, randomSuffix as wn, LOCAL_HARNESSES as wr, WORKER_TRACE_PROPAGATION as wt, createWaitProbes as x, createSandboxToolPartState as xi, hasCompleteCacheBreakdown as xn, createWorktree as xr, assertValidBudget as xt, scopeOwnerExecutorNodeContext as y, assertSandboxServedModel as yi, cloneSpend as yn, runWorktreeHarness as yr, workerTraceAnalysisStore as yt, reconnectRetainedInteractiveRun as z, RunCancellationReason as zn, renderProfileMaterializationIssues as zr, isPeerMailEnvelope as zt };
 
-//# sourceMappingURL=redact-BaQMqbqi.js.map
+//# sourceMappingURL=supervisor-CvF_KeLc.js.map