@tangle-network/agent-runtime 0.217.1 → 0.218.1

package/dist/{redact-BaQMqbqi.js → supervisor-DELeLQRJ.js}

@@ -5211,6 +5211,89 @@ function publicCreateOptions(create) {
 	};
 }
 //#endregion
+//#region src/redact.ts
+const redactedMarker = "[redacted]";
+/** Secret-bearing key names: when an object key matches, its value is fully
+*  replaced regardless of the value's own content. Lowercased compare. */
+const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
+/** AgentProfile's numeric model limits describe compute, not credentials. */
+const tokenLimitKeyPattern = /^max(?:VisibleOutput|Reasoning|TotalOutput)Tokens$/;
+/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
+const valuePatterns = [
+	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
+	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
+	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+	/\bAKIA[0-9A-Z]{16}\b/g,
+	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
+];
+/** Secret assignments embedded inside an otherwise opaque string, including
+* serialized JSON and log-style `key=value` text. */
+const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
+/** Scrub a single string of in-value secret/PII patterns. */
+function scrubString(input) {
+	let out = input;
+	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
+	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
+}
+/**
+* The built-in redactor. Walks objects and arrays; replaces values under
+* secret-bearing keys wholesale; scrubs in-value patterns from every string.
+* Cycle-safe (a seen-set short-circuits self-referential payloads to
+* `'[circular]'`), depth-bounded, and total — never throws on customer input.
+*/
+function defaultRedactor(value) {
+	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+const maxDepth = 32;
+function walk(value, seen, depth) {
+	if (depth > maxDepth) return "[truncated]";
+	if (typeof value === "string") return scrubString(value);
+	if (value === null || typeof value !== "object") return value;
+	if (seen.has(value)) return "[circular]";
+	seen.add(value);
+	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
+	const out = {};
+	for (const [key, v] of Object.entries(value)) {
+		const tokenLimit = tokenLimitKeyPattern.test(key) && typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
+		if (secretKeyPattern.test(key) && !tokenLimit) {
+			out[key] = redactedMarker;
+			continue;
+		}
+		out[key] = walk(v, seen, depth + 1);
+	}
+	return out;
+}
+/** Stable identity input for saved work that depends on built-in redaction behavior. */
+function defaultRedactorIdentityMaterial() {
+	const patternIdentity = (pattern) => ({
+		source: pattern.source,
+		flags: pattern.flags
+	});
+	return {
+		marker: redactedMarker,
+		secretKeyPattern: patternIdentity(secretKeyPattern),
+		tokenLimitKeyPattern: patternIdentity(tokenLimitKeyPattern),
+		valuePatterns: valuePatterns.map(patternIdentity),
+		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
+		maxDepth,
+		scrubString: Function.prototype.toString.call(scrubString),
+		walk: Function.prototype.toString.call(walk),
+		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
+	};
+}
+/**
+* Resolve the redactor a client uses. A caller-supplied hook handles
+* domain-specific values first, then the built-in scrubber still removes
+* common credentials and email addresses. Returning `false` is the explicit
+* opt-out for already-reviewed public values.
+*/
+function resolveRedactor(redact) {
+	if (redact === false) return (value) => value;
+	if (!redact) return defaultRedactor;
+	return (value) => defaultRedactor(redact(value));
+}
+//#endregion
 //#region src/runtime/interaction-capabilities.ts
 /**
 * Check one turn's interaction request before the provider can dispatch it.
@@ -7498,21 +7581,53 @@ async function providerExecutionSource(args, turn, signal) {
 		if (!environment) throw new Error("retained provider environment is unavailable");
 		const session = exactSession(environment, handle.controlRef).session;
 		async function* events() {
-			for await (const event of session.events({
-				executionId: handle.controlRef.executionId,
-				signal
-			})) {
-				assertEventBinding(event, handle.controlRef);
-				yield event;
+			let iterator;
+			let observationFailure;
+			try {
+				iterator = session.events({
+					executionId: handle.controlRef.executionId,
+					signal
+				})[Symbol.asyncIterator]();
+			} catch (error) {
+				if (signal.aborted) throw error;
+				observationFailure = { error };
+			}
+			try {
+				while (iterator !== void 0) {
+					let next;
+					try {
+						next = await awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal);
+					} catch (error) {
+						if (signal.aborted) throw error;
+						observationFailure = { error };
+						break;
+					}
+					if (next.done) break;
+					assertEventBinding(next.value, handle.controlRef);
+					yield next.value;
+				}
+			} finally {
+				if (signal.aborted || observationFailure !== void 0) Promise.resolve().then(() => iterator?.return?.()).catch(() => void 0);
+				else await iterator?.return?.();
+			}
+			let result;
+			try {
+				result = await awaitAbortable$1(handle.result(), signal);
+			} catch (error) {
+				if (observationFailure === void 0 || signal.aborted) throw error;
+				throw new AggregateError([observationFailure.error, error], "retained event observation failed and its exact result could not be reconciled", { cause: error });
 			}
-			const result = await awaitAbortable$1(handle.result(), signal);
 			yield {
 				type: "result",
 				data: {
 					finalText: result.text,
 					success: result.success,
 					...result.error ? { error: result.error } : {},
-					usageMode: "cumulative"
+					usageMode: "cumulative",
+					...observationFailure === void 0 ? {} : {
+						eventStreamComplete: false,
+						eventStreamError: String(defaultRedactor(observationFailure.error instanceof Error ? observationFailure.error.message : String(observationFailure.error))).slice(0, 2048)
+					}
 				},
 				...result.usage ? { usage: result.usage } : {}
 			};
@@ -22647,89 +22762,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-//#region src/redact.ts
-const redactedMarker = "[redacted]";
-/** Secret-bearing key names: when an object key matches, its value is fully
-*  replaced regardless of the value's own content. Lowercased compare. */
-const secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
-/** AgentProfile's numeric model limits describe compute, not credentials. */
-const tokenLimitKeyPattern = /^max(?:VisibleOutput|Reasoning|TotalOutput)Tokens$/;
-/** In-value secret/PII patterns scrubbed from any string, regardless of key. */
-const valuePatterns = [
-	/\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
-	/\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
-	/\bgh[pousr]_[A-Za-z0-9]{20,}/g,
-	/\bAKIA[0-9A-Z]{16}\b/g,
-	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-	/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
-];
-/** Secret assignments embedded inside an otherwise opaque string, including
-* serialized JSON and log-style `key=value` text. */
-const secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
-/** Scrub a single string of in-value secret/PII patterns. */
-function scrubString(input) {
-	let out = input;
-	for (const pattern of valuePatterns) out = out.replace(pattern, redactedMarker);
-	return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
-}
-/**
-* The built-in redactor. Walks objects and arrays; replaces values under
-* secret-bearing keys wholesale; scrubs in-value patterns from every string.
-* Cycle-safe (a seen-set short-circuits self-referential payloads to
-* `'[circular]'`), depth-bounded, and total — never throws on customer input.
-*/
-function defaultRedactor(value) {
-	return walk(value, /* @__PURE__ */ new WeakSet(), 0);
-}
-const maxDepth = 32;
-function walk(value, seen, depth) {
-	if (depth > maxDepth) return "[truncated]";
-	if (typeof value === "string") return scrubString(value);
-	if (value === null || typeof value !== "object") return value;
-	if (seen.has(value)) return "[circular]";
-	seen.add(value);
-	if (Array.isArray(value)) return value.map((item) => walk(item, seen, depth + 1));
-	const out = {};
-	for (const [key, v] of Object.entries(value)) {
-		const tokenLimit = tokenLimitKeyPattern.test(key) && typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
-		if (secretKeyPattern.test(key) && !tokenLimit) {
-			out[key] = redactedMarker;
-			continue;
-		}
-		out[key] = walk(v, seen, depth + 1);
-	}
-	return out;
-}
-/** Stable identity input for saved work that depends on built-in redaction behavior. */
-function defaultRedactorIdentityMaterial() {
-	const patternIdentity = (pattern) => ({
-		source: pattern.source,
-		flags: pattern.flags
-	});
-	return {
-		marker: redactedMarker,
-		secretKeyPattern: patternIdentity(secretKeyPattern),
-		tokenLimitKeyPattern: patternIdentity(tokenLimitKeyPattern),
-		valuePatterns: valuePatterns.map(patternIdentity),
-		secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
-		maxDepth,
-		scrubString: Function.prototype.toString.call(scrubString),
-		walk: Function.prototype.toString.call(walk),
-		defaultRedactor: Function.prototype.toString.call(defaultRedactor)
-	};
-}
-/**
-* Resolve the redactor a client uses. A caller-supplied hook handles
-* domain-specific values first, then the built-in scrubber still removes
-* common credentials and email addresses. Returning `false` is the explicit
-* opt-out for already-reviewed public values.
-*/
-function resolveRedactor(redact) {
-	if (redact === false) return (value) => value;
-	if (!redact) return defaultRedactor;
-	return (value) => defaultRedactor(redact(value));
-}
-//#endregion
-export { captureReusableExecutorConfig as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, bridgeRuntimeAttachmentsKey as $t, consumeScopeRetainedOwnerResult as A, sumSandboxUsage as Ai, throwAbort as An, assertProfileMaterialization as Ar, workerTraceHeaders as At, workerInteractiveBindingFile as B, registerRetainedExecutorPreparation as Bn, renderUnsupported as Br, claimsAuthority as Bt, settledToIteration as C, extractLlmCallEvent as Ci, deleteBoxSafe as Cn, DEFAULT_LOCAL_HARNESS as Cr, contentAddress as Ct, timerAt as D, notifySandboxEventObserver as Di, randomSuffix as Dn, parseCodexTokenUsage as Dr, WORKER_TRACE_PROPAGATION as Dt, pollFor as E, mapSandboxToolEvent as Ei, promptCacheTokenClasses as En, localHarnessExecutable as Er, spendFromUsageEvents as Et, interactiveAdmissionSeamKey as F, promptOptionsFromAgentTurnInput as Fi, resourceTelemetry as Fn, promptControlProfileMaterialization as Fr, readWorkerProgress as Ft, destroyInteractiveEnvironment as G, reconnectRetainedRun as Gn, isNoEntError as Gr, isLiveNodeStatus as Gt, reconnectRetainedInteractiveRun as H, RunCancellationReason as Hn, unsupportedProfileDimensions as Hr, isPeerMailEnvelope as Ht, readWorkerInteractiveAdmissions as I, providerMessageText as Ii, withBudgetResources as In, promptModelProfileMaterialization as Ir, createInbox as It, queueOf as J, startRetainedRunInEnvironment as Jn, writeAllBytes as Jr, bridgeModelRouteRefusal as Jt, effectiveConcurrency as K, recoverRetainedRun as Kn, parseCommittedJsonLines as Kr, isTerminalNodeStatus as Kt, workerInteractiveAdmissionFile as L, createPushTraceSource as Ln, promptOnlyProfileMaterialization as Lr, AUTHORITY_MARKERS as Lt, scopeRetainedOwnerContext as M, abortError$2 as Mi, unmeteredSpend as Mn, defineProfileMaterializationContract as Mr, taskToPrompt as Mt, scopeRetainedOwnerPriorSpend as N, awaitAbortable$1 as Ni, zeroSpend as Nn, fullProfileMaterialization as Nr, DEFAULT_STALL_AFTER_MS as Nt, validateWaitSpec as O, sandboxEventServedBackend as Oi, sleep as On, CodexExecutionDiagnosticError as Or, readWorkerTraceContext as Ot, scopeRetainedOwnerResult as P, promptFromAgentTurnInput as Pi, addResourceSpend as Pn, profileMaterializationAxes$1 as Pr, createActivityLog as Pt, bindReusableExecutorExecutionId as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, readCodexRolloutSession as Qt, attachWorker as R, decodeToolPart as Rn, promptResourceProfileMaterialization as Rr, DEFAULT_PEER_MAIL_LIMITS as Rt, scopeOwnerExecutorNodeContext as S, createSandboxUsageLedger as Si, cloneSpend as Sn, removeWorktree as Sr, workerTraceAnalysisStore as St, isWaitOutcome as T, mapSandboxEvent as Ti, isAbortError$2 as Tn, harnessSupportsReasoningEffort as Tr, createBudgetPool as Tt, recoverRetainedInteractiveRun as U, abortError$1 as Un, validateProfileMaterialization as Ur, peerMailTools as Ut, workerInteractiveBindingsDir as V, retainedExecutorSeamKey as Vn, sandboxActProfileMaterialization as Vr, createPeerMailbox as Vt, startRetainedInteractiveRun as W, linkAbort as Wn, worktreeCliProfileMaterialization as Wr, peerMailVerbNames as Wt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, createCodexRolloutStoreReader as Xt, rollingDispatch as Y, retainedCreateMaterial as Yn, attestRuntimeOwnedPendingExecutor as Yr, addHarnessUsage as Yt, teardownExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, harnessUsageIsEmpty as Zt, deriveNodeExecutionIdentity as _, projectSandboxOutcome as _i, providerAsSandboxClient as _n, sanitizeRuntimeStreamEvent as _r, replaySpawnTree as _t, createSupervisor as a, runtimeOwnedDriveHarnessProviderEvidence as ai, runAgentRounds as an, createOtelExporter as ar, createWorktreeCliExecutor as at, recordScopeOwnerMaterialization as b, canonicalStreamEventFromSandboxEvent as bi, addSpend as bn, captureWorktreeDiff as br, isTraceAnalysisStore as bt, pickBestDelivered as c, runtimeOwnedExecutorProviderEvidence as ci, acquireSandbox as cn, generateSpanId as cr, createInPlaceCliExecutor as ct, driverChild as d, unknownExecutionBindingReceipt as di, routerBrain as dn, padTraceId as dr, InMemoryResultBlobStore as dt, knownExecutionBindingReceipt as ei, bridgeStopSignalKey as en, INTELLIGENCE_WIRE_VERSION as er, cliInPlaceExecutor as et, driverExecutorFactory as f, unknownMaterializationReceipt as fi, runBrainLoop as fn, toOtelAttributes as fr, InMemorySpawnJournal as ft, createScope as g, detachedSnapshot as gi, providerAsExecutor as gn, sanitizeKnowledgeReadinessReport as gr, pendingWaits as gt, beginScopeOwnerAttempt as h, detachedFrozen as hi, createAgentEnvironmentProviderRegistry as hn, sanitizeAgentRuntimeEvent as hr, materializeTreeView as ht, createRootHandle as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, isTerminalDecision as in, createOpenInferenceFileExporter as ir, snapshotExecutorConfig as it, prepareScopeRetainedOwnerTask as j, decodeHarnessUsage as ji, throwIfAborted as jn, controlProfileMaterialization as jr, workerTraceSeamKey as jt, waitUntil as k, sandboxProgressEvents as ki, stringifySafe as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, workerTraceEnv as kt, runFinalizer as l, runtimeOwnedPendingExecutorMaterialization as li, assertBoxlessPromptOptions as ln, loopEventToOtelSpan as lr, FileResultBlobStore as lt, withDriverExecutor as m, executableAgentSpecSnapshot as mi, observedModelMatchesDeclared as mn, createRuntimeStreamEventCollector as mr, loadSpawnForest as mt, defaultRedactorIdentityMaterial as n, newExecutionAttemptId as ni, createSandboxForSpec as nn, buildLoopSpanNodes as nr, createExecutor as nt, bestDelivered as o, runtimeOwnedExecutorExecutionBinding as oi, createSandboxLineage as on, exportEvalRuns as or, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ot, isDriverSpec as p, executableAgentProfileSnapshot as pi, canonicalObservedModelParts as pn, createRuntimeEventCollector as pr, insideCursorNamespace as pt, freeSlots as q, startRetainedRun as qn, prepareJsonlAppend as qr, bridgeAdmissionRefusal as qt, resolveRedactor as r, providerAttemptEvidence as ri, defaultSelectWinner as rn, buildRuntimeEventOtelSpans as rr, createExecutorRegistry as rt, collectDelivered as s, runtimeOwnedExecutorMaterialization as si, probeSandboxCapabilities as sn, flatOtelSpan as sr, createSteerableSandboxSession as st, defaultRedactor as t, knownMaterializationReceipt as ti, TERMINAL_DECISIONS as tn, buildLoopOtelSpans as tr, cliWorktreeExecutor as tt, runTree as u, runtimeOwnedScopeOwnerRuntime as ui, readPromptOptions as un, padSpanId as ur, FileSpawnJournal as ut, meterRuntimeOwnedAccounting as v, readSandboxOutcome as vi, resolveAgentEnvironmentProvider as vn, runSettledCommand as vr, WORKER_TOOL_TRACE_SCHEMA_VERSION as vt, createWaitProbes as w, isSandboxTerminalEvent as wi, hasCompleteCacheBreakdown as wn, LOCAL_HARNESSES as wr, assertValidBudget as wt, restoreScopeOwnerAcceptedExecution as x, createSandboxToolPartState as xi, chargedTokens as xn, createWorktree as xr, parseWorkerToolTraceArtifact as xt, meterRuntimeOwnedProviderAttempt as y, assertSandboxServedModel as yi, sandboxClientAsProvider as yn, runWorktreeHarness as yr, captureWorkerTraceEvidence as yt, readWorkerInteractiveBinding as z, sandboxSessionTraceSource as zn, renderProfileMaterializationIssues as zr, PEER_MAIL_WIRE_KEY as zt };
+export { createExecutor as $, readTraceContextFromEnv as $n, finalizeRuntimeOwnedPendingExecutor as $r, createSandboxForSpec as $t, scopeRetainedOwnerPriorSpend as A, sandboxProgressEvents as Ai, withTimeout as An, AGENT_PROFILE_MATERIALIZATION_AXES as Ar, DEFAULT_STALL_AFTER_MS as At, recoverRetainedInteractiveRun as B, RunCancellationReason as Bn, renderProfileMaterializationIssues as Br, peerMailTools as Bt, pollFor as C, createSandboxUsageLedger as Ci, promptCacheTokenClasses as Cn, removeWorktree as Cr, spendFromUsageEvents as Ct, consumeScopeRetainedOwnerResult as D, mapSandboxToolEvent as Di, throwAbort as Dn, localHarnessExecutable as Dr, workerTraceHeaders as Dt, waitUntil as E, mapSandboxEvent as Ei, stringifySafe as En, harnessSupportsReasoningEffort as Er, workerTraceEnv as Et, attachWorker as F, promptFromAgentTurnInput as Fi, createPushTraceSource as Fn, profileMaterializationAxes$1 as Fr, DEFAULT_PEER_MAIL_LIMITS as Ft, queueOf as G, startRetainedRun as Gn, worktreeCliProfileMaterialization as Gr, bridgeModelRouteRefusal as Gt, destroyInteractiveEnvironment as H, linkAbort as Hn, sandboxActProfileMaterialization as Hr, isLiveNodeStatus as Ht, readWorkerInteractiveBinding as I, promptOptionsFromAgentTurnInput as Ii, decodeToolPart as In, promptControlProfileMaterialization as Ir, PEER_MAIL_WIRE_KEY as It, teardownExecutor as J, defaultRedactor as Jn, prepareJsonlAppend as Jr, harnessUsageIsEmpty as Jt, rollingDispatch as K, startRetainedRunInEnvironment as Kn, isNoEntError as Kr, addHarnessUsage as Kt, workerInteractiveBindingFile as L, providerMessageText as Li, sandboxSessionTraceSource as Ln, promptModelProfileMaterialization as Lr, claimsAuthority as Lt, interactiveAdmissionSeamKey as M, decodeHarnessUsage as Mi, addResourceSpend as Mn, controlProfileMaterialization as Mr, readWorkerProgress as Mt, readWorkerInteractiveAdmissions as N, abortError$2 as Ni, resourceTelemetry as Nn, defineProfileMaterializationContract as Nr, createInbox as Nt, prepareScopeRetainedOwnerTask as O, notifySandboxEventObserver as Oi, throwIfAborted as On, parseCodexTokenUsage as Or, workerTraceSeamKey as Ot, workerInteractiveAdmissionFile as P, awaitAbortable$1 as Pi, withBudgetResources as Pn, fullProfileMaterialization as Pr, AUTHORITY_MARKERS as Pt, cliWorktreeExecutor as Q, mergeTraceEnv as Qn, authoredProfileDigest as Qr, TERMINAL_DECISIONS as Qt, workerInteractiveBindingsDir as R, registerRetainedExecutorPreparation as Rn, promptOnlyProfileMaterialization as Rr, createPeerMailbox as Rt, isWaitOutcome as S, createSandboxToolPartState as Si, isAbortError$2 as Sn, createWorktree as Sr, createBudgetPool as St, validateWaitSpec as T, isSandboxTerminalEvent as Ti, sleep as Tn, LOCAL_HARNESSES as Tr, readWorkerTraceContext as Tt, effectiveConcurrency as U, reconnectRetainedRun as Un, unsupportedProfileDimensions as Ur, isTerminalNodeStatus as Ut, startRetainedInteractiveRun as V, abortError$1 as Vn, renderUnsupported as Vr, peerMailVerbNames as Vt, freeSlots as W, recoverRetainedRun as Wn, validateProfileMaterialization as Wr, bridgeAdmissionRefusal as Wt, captureReusableExecutorConfig as X, resolveRedactor as Xn, attestRuntimeOwnedPendingExecutor as Xr, bridgeRuntimeAttachmentsKey as Xt, bindReusableExecutorExecutionId as Y, defaultRedactorIdentityMaterial as Yn, writeAllBytes as Yr, readCodexRolloutSession as Yt, cliInPlaceExecutor as Z, createPropagatingTraceEmitter as Zn, attestRuntimeOwnedScopeOwner as Zr, bridgeStopSignalKey as Zt, recordScopeOwnerMaterialization as _, detachedSnapshot as _i, addSpend as _n, sanitizeKnowledgeReadinessReport as _r, isTraceAnalysisStore as _t, pickBestDelivered as a, recordRuntimeOwnedDriveHarnessProviderEvidence as ai, acquireSandbox as an, createOpenInferenceFileExporter as ar, createInPlaceCliExecutor as at, settledToIteration as b, assertSandboxServedModel as bi, deleteBoxSafe as bn, runWorktreeHarness as br, contentAddress as bt, driverChild as c, runtimeOwnedExecutorMaterialization as ci, routerBrain as cn, flatOtelSpan as cr, InMemoryResultBlobStore as ct, withDriverExecutor as d, runtimeOwnedScopeOwnerRuntime as di, observedModelMatchesDeclared as dn, padSpanId as dr, loadSpawnForest as dt, inheritRuntimeOwnedExecutorAttestation as ei, defaultSelectWinner as en, traceContextToEnv as er, createExecutorRegistry as et, beginScopeOwnerAttempt as f, unknownExecutionBindingReceipt as fi, createAgentEnvironmentProviderRegistry as fn, padTraceId as fr, materializeTreeView as ft, meterRuntimeOwnedProviderAttempt as g, detachedFrozen as gi, sandboxClientAsProvider as gn, sanitizeAgentRuntimeEvent as gr, captureWorkerTraceEvidence as gt, meterRuntimeOwnedAccounting as h, executableAgentSpecSnapshot as hi, resolveAgentEnvironmentProvider as hn, createRuntimeStreamEventCollector as hr, WORKER_TOOL_TRACE_SCHEMA_VERSION as ht, collectDelivered as i, providerAttemptEvidence as ii, probeSandboxCapabilities as in, buildRuntimeEventOtelSpans as ir, createSteerableSandboxSession as it, scopeRetainedOwnerResult as j, sumSandboxUsage as ji, zeroSpend as jn, assertProfileMaterialization as jr, createActivityLog as jt, scopeRetainedOwnerContext as k, sandboxEventServedBackend as ki, unmeteredSpend as kn, CodexExecutionDiagnosticError as kr, taskToPrompt as kt, driverExecutorFactory as l, runtimeOwnedExecutorProviderEvidence as li, runBrainLoop as ln, generateSpanId as lr, InMemorySpawnJournal as lt, deriveNodeExecutionIdentity as m, executableAgentProfileSnapshot as mi, providerAsSandboxClient as mn, createRuntimeEventCollector as mr, replaySpawnTree as mt, createSupervisor as n, knownMaterializationReceipt as ni, runAgentRounds as nn, buildLoopOtelSpans as nr, createWorktreeCliExecutor as nt, runFinalizer as o, runtimeOwnedDriveHarnessProviderEvidence as oi, assertBoxlessPromptOptions as on, createOtelExporter as or, FileResultBlobStore as ot, createScope as p, unknownMaterializationReceipt as pi, providerAsExecutor as pn, toOtelAttributes as pr, pendingWaits as pt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as q, retainedCreateMaterial as qn, parseCommittedJsonLines as qr, createCodexRolloutStoreReader as qt, bestDelivered as r, newExecutionAttemptId as ri, createSandboxLineage as rn, buildLoopSpanNodes as rr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as rt, runTree as s, runtimeOwnedExecutorExecutionBinding as si, readPromptOptions as sn, exportEvalRuns as sr, FileSpawnJournal as st, createRootHandle as t, knownExecutionBindingReceipt as ti, isTerminalDecision as tn, INTELLIGENCE_WIRE_VERSION as tr, snapshotExecutorConfig as tt, isDriverSpec as u, runtimeOwnedPendingExecutorMaterialization as ui, canonicalObservedModelParts as un, loopEventToOtelSpan as ur, insideCursorNamespace as ut, restoreScopeOwnerAcceptedExecution as v, projectSandboxOutcome as vi, chargedTokens as vn, sanitizeRuntimeStreamEvent as vr, parseWorkerToolTraceArtifact as vt, timerAt as w, extractLlmCallEvent as wi, randomSuffix as wn, DEFAULT_LOCAL_HARNESS as wr, WORKER_TRACE_PROPAGATION as wt, createWaitProbes as x, canonicalStreamEventFromSandboxEvent as xi, hasCompleteCacheBreakdown as xn, captureWorktreeDiff as xr, assertValidBudget as xt, scopeOwnerExecutorNodeContext as y, readSandboxOutcome as yi, cloneSpend as yn, runSettledCommand as yr, workerTraceAnalysisStore as yt, reconnectRetainedInteractiveRun as z, retainedExecutorSeamKey as zn, promptResourceProfileMaterialization as zr, isPeerMailEnvelope as zt };
 
-//# sourceMappingURL=redact-BaQMqbqi.js.map
+//# sourceMappingURL=supervisor-DELeLQRJ.js.map