@tangle-network/agent-runtime 0.217.2 → 0.218.2

package/dist/{supervisor-CvF_KeLc.js → supervisor-CUlzJ5IO.js}

@@ -708,27 +708,10 @@ function extractLlmCallEvent(event, agentRunName) {
 	if (!event || typeof event !== "object") return void 0;
 	const type = String(event.type ?? "");
 	const data = event.data && typeof event.data === "object" ? event.data : {};
-	if (type === "llm_call" || type === "cost.usage" || type === "usage") return buildLlmCall({
-		...plainRecord$1(data.usage),
-		...data
-	}, agentRunName);
-	if (isSandboxTerminalEvent(type) && sandboxTerminalUsageField(type) === "usage") {
-		const usage = data.usage;
-		if (!usage || typeof usage !== "object") return void 0;
-		return buildLlmCall({
-			...usage,
-			model: data.model ?? usage.model,
-			...usage.costUsd === void 0 && data.costUsd !== void 0 ? { costUsd: data.costUsd } : {}
-		}, agentRunName);
-	}
-	if (type === "done") {
-		const usage = plainRecord$1(data.tokenUsage) ?? plainRecord$1(data.usage) ?? {};
-		return buildLlmCall({
-			...usage,
-			...data.totalCostUsd === void 0 ? {} : { totalCostUsd: data.totalCostUsd },
-			...data.costUsd === void 0 ? {} : { costUsd: data.costUsd },
-			model: data.model ?? usage.model
-		}, agentRunName);
+	if (type === "llm_call" || type === "cost.usage" || type === "usage") return buildLlmCall(usageReceiptData(data, plainRecord$1(data.usage)), agentRunName);
+	if (type === "error" || isSandboxTerminalEvent(type)) {
+		const field = type === "error" ? "tokenUsage" : sandboxTerminalUsageField(type);
+		return buildLlmCall(usageReceiptData(data, plainRecord$1(data[field]) ?? plainRecord$1(data[field === "usage" ? "tokenUsage" : "usage"])), agentRunName);
 	}
 }
 /** A {@link SandboxUsageLedger} for one worker. Pass the worker's harness to decode with that
@@ -774,9 +757,15 @@ function createSandboxUsageLedger(harness) {
 /** Terminal totals replace already credited usage; only per-call receipts add to it. */
 function creditCanonicalUsage(event, call, credited, receipts) {
 	const declaredMode = plainRecord$1(event.data)?.usageMode;
-	const mode = declaredMode === "delta" || declaredMode === "cumulative" ? declaredMode : declaredMode === void 0 && event.type === "llm_call" ? "delta" : declaredMode === void 0 && isSandboxTerminalEvent(String(event.type)) ? "cumulative" : void 0;
+	const mode = declaredMode === "delta" || declaredMode === "cumulative" ? declaredMode : declaredMode === void 0 && event.type === "llm_call" ? "delta" : declaredMode === void 0 && (event.type === "error" || isSandboxTerminalEvent(String(event.type))) ? "cumulative" : void 0;
 	const result = { ...call };
-	if (call.tokensIn === void 0 && call.tokensOut === void 0 && !call.tokensUnknownReason) delete result.tokensKnown;
+	const data = plainRecord$1(event.data) ?? {};
+	const explicitTokensUnknown = [
+		data,
+		plainRecord$1(data.usage),
+		plainRecord$1(data.tokenUsage)
+	].some((receipt) => ["tokensKnown", "tokens_known"].some((key) => receipt?.[key] !== void 0 && receipt[key] !== true));
+	if (call.tokensIn === void 0 && call.tokensOut === void 0 && !call.tokensUnknownReason && !explicitTokensUnknown) delete result.tokensKnown;
 	let reason = mode === void 0 ? "usage receipt has no declared delta or cumulative semantics" : void 0;
 	if (event.id) {
 		const signature = JSON.stringify({
@@ -837,8 +826,7 @@ function creditCanonicalUsage(event, call, credited, receipts) {
 *     `output_tokens` — a turn reporting `output_tokens 1523` with `reasoning_output_tokens 1516`
 *     answered with about seven tokens of text — and `parseCodexUsageRecord` holds that as an
 *     invariant. The canonical `llm_call` carries no reasoning class, so the count is not
-*     forwarded to {@link buildLlmCall}, whose `reasoningTokens` input is for the sandbox
-*     `tokenUsage` record that reports reasoning BESIDE its output count.
+*     forwarded to {@link buildLlmCall}. Canonical output totals already include reasoning.
 *
 * A counter no report carried stays absent, because a zero would claim the provider measured none.
 */
@@ -927,6 +915,46 @@ function sumSandboxUsage(events, agentRunName = "agent") {
 		...unreadable === void 0 ? {} : { tokensUnknownReason: unreadable }
 	};
 }
+function usageReceiptData(envelope, usage = {}) {
+	const merged = {
+		...usage,
+		...envelope
+	};
+	for (const aliases of [
+		[
+			"tokensIn",
+			"inputTokens",
+			"prompt_tokens"
+		],
+		[
+			"tokensOut",
+			"outputTokens",
+			"completion_tokens"
+		],
+		[
+			"costUsd",
+			"totalCostUsd",
+			"cost_usd",
+			"cost"
+		],
+		["costProvenance", "cost_provenance"]
+	]) {
+		const key = aliases.find((alias) => envelope[alias] !== void 0);
+		if (key === void 0) continue;
+		for (const alias of aliases) delete merged[alias];
+		merged[key] = envelope[key];
+	}
+	for (const aliases of [["tokensKnown", "tokens_known"], [
+		"costKnown",
+		"cost_known",
+		"usdKnown",
+		"usd_known"
+	]]) {
+		const values = [usage, envelope].flatMap((receipt) => aliases.map((key) => receipt[key]).filter((value) => value !== void 0));
+		if (values.length > 0) merged[aliases[0]] = values.every((value) => value === true);
+	}
+	return merged;
+}
 function buildLlmCall(data, agentRunName) {
 	const tokensIn = pickFiniteNumber(data, [
 		"tokensIn",
@@ -939,7 +967,7 @@ function buildLlmCall(data, agentRunName) {
 		"completion_tokens"
 	]);
 	const reasoningTokens = pickFiniteNumber(data, ["reasoningTokens"]);
-	const tokensOut = outputTokens !== void 0 || reasoningTokens !== void 0 ? (outputTokens ?? 0) + (reasoningTokens ?? 0) : void 0;
+	const tokensOut = outputTokens ?? reasoningTokens;
 	const reportedCostUsd = pickFiniteNumber(data, [
 		"costUsd",
 		"totalCostUsd",
@@ -953,7 +981,7 @@ function buildLlmCall(data, agentRunName) {
 	const catalogEstimate = costProvenance === "catalog-estimate" ? explicitEstimate ?? reportedCostUsd : explicitEstimate;
 	const costUsd = costProvenance === "catalog-estimate" ? void 0 : reportedCostUsd;
 	const promptCache = readPromptCacheUsage(data);
-	const tokensKnown = explicitTokensKnown !== false && tokensIn !== void 0 && tokensOut !== void 0;
+	const tokensKnown = explicitTokensKnown !== false && tokensIn !== void 0 && outputTokens !== void 0;
 	const usdKnown = explicitCostKnown !== false && costUsd !== void 0 && (costProvenance === void 0 || costProvenance === "provider-receipt" || costProvenance === "billing-receipt");
 	if (tokensIn === void 0 && tokensOut === void 0 && costUsd === void 0 && catalogEstimate === void 0 && promptCache === void 0 && explicitTokensKnown !== false && explicitCostKnown !== false) return;
 	const event = {
@@ -7084,12 +7112,36 @@ function providerAsSandboxClient(provider, options = {}) {
 	} };
 }
 /**
+* The idle timeout this adapter sends when nothing else names one: 1,800 seconds.
+*
+* Sandbox substitutes no value of its own: an omitted field falls back to the platform's global
+* idle timeout, documented as 30 minutes unless an operator changed it, and Runtime sent none. Idle
+* means inactivity to Sandbox, which suspends the sandbox (the container stops; the workspace is
+* kept) rather than deleting it. The SDK does not define inactivity further. A request in flight
+* counts as activity: a Discovery Lab seat created with `idleTimeoutSeconds: 1800` ran one request
+* to 2,252 seconds, ended by a per-request cap, not by idling (fleet-launch-2026-08-22).
+*
+* The value restates the documented default, so it can tighten a longer operator setting but never
+* loosen the default. It is 3.8 times the longest gap between frames recorded across a healthy
+* fleet run (469 seconds, same report), and a supervised provider child is observed through an open
+* stream for its whole turn. It is a backstop for a process that dies holding an environment; the
+* settlement barrier releases retained environments itself (`Executor.releaseRetained`). It does
+* nothing on a driver with a create/delete-only lifecycle, which the SDK says skips suspension.
+*/
+const DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS = 1800;
+function sandboxIdleTimeoutSeconds(value) {
+	if (value === void 0) return DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS;
+	if (!Number.isSafeInteger(value) || value <= 0) throw new ValidationError(`sandboxClientAsProvider: idleTimeoutSeconds must be a positive whole number of seconds, got ${String(value)}`);
+	return value;
+}
+/**
 * Adapt a `SandboxClient` into the shared `AgentEnvironmentProvider` contract.
 * The provider declares the public SDK contract before it creates an environment.
 * Each environment exposes interactive methods only when its deployment declares every required capability.
 * @experimental */
 function sandboxClientAsProvider(client, options = {}) {
 	const providerName = options.name ?? "tangle-sandbox";
+	const idleTimeoutSeconds = sandboxIdleTimeoutSeconds(options.idleTimeoutSeconds);
 	const providerCapabilities = async () => {
 		const resolved = await (options.capabilities ? typeof options.capabilities === "function" ? options.capabilities() : options.capabilities : defaultTangleSandboxCapabilities({
 			namedProfiles: options.resolveProfile !== void 0,
@@ -7104,14 +7156,18 @@ function sandboxClientAsProvider(client, options = {}) {
 		capabilities: providerCapabilities,
 		...options.validateProfile ? { validateProfile: options.validateProfile } : {},
 		async create(input) {
-			const createOptions = options.mapCreateInput?.(input) ?? await sandboxOptionsFromCreateInput(input, options.defaultBackend ?? "opencode", options.resolveProfile, providerName);
+			const custom = options.mapCreateInput?.(input);
+			const createOptions = custom === void 0 ? await sandboxOptionsFromCreateInput(input, options.defaultBackend ?? "opencode", options.resolveProfile, providerName, idleTimeoutSeconds) : {
+				...custom,
+				idleTimeoutSeconds: custom.idleTimeoutSeconds ?? idleTimeoutSeconds
+			};
 			const capabilities = await providerCapabilities();
-			return sandboxInstanceAsEnvironment(await client.create(createOptions, input.signal === void 0 ? void 0 : { signal: input.signal }), providerName, client, capabilities);
+			return sandboxInstanceAsEnvironment(await client.create(createOptions, input.signal === void 0 ? void 0 : { signal: input.signal }), providerName, client, capabilities, idleTimeoutSeconds);
 		},
 		...hasGet(client) ? { async get(id) {
 			const capabilities = await providerCapabilities();
 			const box = await client.get(id);
-			return box ? sandboxInstanceAsEnvironment(box, providerName, client, capabilities) : null;
+			return box ? sandboxInstanceAsEnvironment(box, providerName, client, capabilities, idleTimeoutSeconds) : null;
 		} } : {},
 		...hasList(client) ? { async list(query) {
 			return (await client.list(query?.providerOptions)).map((box) => ({
@@ -7331,6 +7387,31 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				};
 			}
 		},
+		async releaseRetained(signal) {
+			controller.abort();
+			if (!pending) return [];
+			const environmentId = retained?.controlRef.environmentId ?? environment?.id ?? admittedEnvironmentId(retention);
+			if (environmentId === void 0) return [];
+			const receipt = (destroyed, detail) => ({
+				provider: provider.name,
+				environmentId,
+				destroyed,
+				...detail === void 0 ? {} : { detail }
+			});
+			try {
+				const target = environment ?? (provider.get === void 0 ? void 0 : await awaitAbortable$1(provider.get(environmentId), signal));
+				if (target === void 0) return [receipt(false, `providerAsExecutor(${provider.name}): no environment handle and the provider exposes no get()`)];
+				if (target !== null) {
+					if (target.destroy === void 0) return [receipt(false, `providerAsExecutor(${provider.name}): environment exposes no destroy()`)];
+					await awaitAbortable$1(target.destroy(), signal);
+				}
+				pending = false;
+				destroyed = true;
+				return [receipt(true)];
+			} catch (error) {
+				return [receipt(false, `providerAsExecutor(${provider.name}): environment.destroy() failed — ${error instanceof Error ? error.message : String(error)}`)];
+			}
+		},
 		resultArtifact() {
 			if (!artifact) throw new ValidationError(`providerAsExecutor(${provider.name}): resultArtifact() read before stream drained`);
 			return artifact;
@@ -7339,6 +7420,13 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	};
 	return attestRuntimeOwnedPendingExecutor(executor, runtime, plannedDeclaration, plannedBinding);
 }
+/** The environment id the latest durable admission names, when creation got that far. */
+function admittedEnvironmentId(retention) {
+	for (const admission of [...retention?.admissions ?? []].reverse()) {
+		if (admission.phase === "dispatched") return admission.controlRef.environmentId;
+		if (admission.phase === "environment") return admission.environmentId;
+	}
+}
 async function* streamProviderExecutor(args) {
 	const started = Date.now();
 	const linked = linkAbort(args.signal, args.controller.signal).signal;
@@ -7461,16 +7549,17 @@ async function* streamProviderExecutor(args) {
 		if (receipt === void 0) return;
 		const hasTokens = receipt.tokensIn !== void 0 || receipt.tokensOut !== void 0;
 		if (hasTokens && receipt.tokensIn !== void 0 && receipt.tokensOut !== void 0 && receipt.tokensKnown !== false) sawCompleteTokenReceipt = true;
-		else if (hasTokens || receipt.tokensUnknownReason) sawIncompleteTokenReceipt = true;
+		else if (hasTokens || receipt.tokensKnown === false || receipt.tokensUnknownReason) sawIncompleteTokenReceipt = true;
 		const input = receipt.tokensIn ?? 0;
 		const output = receipt.tokensOut ?? 0;
-		if (input || output) {
+		if (input || output || receipt.tokensKnown === false) {
 			tokens.input += input;
 			tokens.output += output;
 			yield {
 				kind: "tokens",
 				input,
-				output
+				output,
+				...receipt.tokensKnown === false ? { tokensKnown: false } : {}
 			};
 		}
 		if (receipt.costUsd) {
@@ -7668,7 +7757,7 @@ function createInputFromSandboxOptions(options) {
 		providerOptions: { sandboxCreateOptions: options ?? {} }
 	};
 }
-async function sandboxOptionsFromCreateInput(input, defaultBackend, resolveProfile, providerName = "tangle-sandbox") {
+async function sandboxOptionsFromCreateInput(input, defaultBackend, resolveProfile, providerName = "tangle-sandbox", idleTimeoutSeconds = DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS) {
 	if (input.runtimeAttachments !== void 0) throw new ValidationError("Tangle Sandbox runtimeAttachments require an explicit mapCreateInput mapper; the maintained Sandbox SDK create contract does not transport them");
 	const backendType = input.backend ?? defaultBackend;
 	const workspace = WorkspaceRequestSchema.parse(input.workspace ?? {});
@@ -7682,6 +7771,7 @@ async function sandboxOptionsFromCreateInput(input, defaultBackend, resolveProfi
 	const { profile: _baseProfile, ...baseBackend } = base.backend ?? {};
 	return {
 		...base,
+		idleTimeoutSeconds: base.idleTimeoutSeconds ?? idleTimeoutSeconds,
 		...environment ? { environment } : {},
 		...workspace.repoUrl ? { git: {
 			url: workspace.repoUrl,
@@ -7782,18 +7872,27 @@ function environmentAsSandboxInstance(environment, options) {
 			let text = "";
 			let usage;
 			let terminal = false;
+			const outcomeTracker = createAgentRunOutcomeTracker();
+			let explicitFailure = false;
 			for await (const event of environment.stream(turnInputFromPrompt(message, promptOptions))) {
 				events.push(event);
 				if (isTerminalEnvironmentEvent(event)) terminal = true;
+				const failureEvent = providerFailureEvent(event, sandboxEventFromEnvironmentEvent(event));
+				if (failureEvent) {
+					explicitFailure = true;
+					outcomeTracker.observe(failureEvent);
+				}
 				text += textFromEnvironmentEvent(event);
 				usage = mergeTokenUsage(usage, event.usage);
 			}
 			if (options.requireTerminalEvent && !terminal) throw new ValidationError(`providerAsSandboxClient(${environment.provider}): prompt ended without a terminal result/done/status event`);
+			const outcome = explicitFailure ? outcomeTracker.finish() : void 0;
 			return {
 				response: resultFromEvents(events, text).content,
-				success: true,
-				status: "success",
+				success: outcome?.success ?? true,
+				status: outcome?.status ?? "success",
 				durationMs: 0,
+				...outcome?.error ? { error: outcome.error } : {},
 				...usage ? { usage } : {}
 			};
 		},
@@ -7825,7 +7924,7 @@ function environmentAsSandboxInstance(environment, options) {
 		}
 	};
 }
-async function sandboxInstanceAsEnvironment(box, providerName, client, providerCapabilities) {
+async function sandboxInstanceAsEnvironment(box, providerName, client, providerCapabilities, idleTimeoutSeconds) {
 	const capabilities = await sandboxEnvironmentCapabilities(box, providerCapabilities);
 	const interactiveAgent = capabilities.interactiveAgent;
 	return {
@@ -7912,9 +8011,10 @@ async function sandboxInstanceAsEnvironment(box, providerName, client, providerC
 			return sandboxInstanceAsEnvironment(await client.create({
 				fromSnapshot: checkpoint.id,
 				fromSandboxId: String(box.id),
+				idleTimeoutSeconds,
 				...options?.name ? { name: options.name } : {},
 				...options?.metadata ? { metadata: options.metadata } : {}
-			}), providerName, client, providerCapabilities);
+			}), providerName, client, providerCapabilities, idleTimeoutSeconds);
 		},
 		async placement() {
 			return placementInfoFromLoopPlacement(client.describePlacement?.(box), box);
@@ -8140,6 +8240,7 @@ function usageSandboxEvent(event) {
 	return {
 		type: "usage",
 		data: {
+			...event.data,
 			...usage,
 			..."usageMode" in event ? { usageMode: event.usageMode } : event.data.usageMode === void 0 ? {} : { usageMode: event.data.usageMode }
 		},
@@ -8286,7 +8387,7 @@ function isTerminalEnvironmentEvent(event) {
 	return normalized?.type === "status" && (normalized.status === "completed" || normalized.status === "failed");
 }
 function isTerminalEventShape(type, data) {
-	if (isSandboxTerminalEvent(type)) return true;
+	if (type === "error" || isSandboxTerminalEvent(type)) return true;
 	if (type.endsWith(".completed") || type.endsWith(".failed")) return true;
 	if (type !== "status") return false;
 	return data.status === "completed" || data.status === "failed" || data.status === "cancelled";
@@ -15129,6 +15230,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"reconciled",
 	"edge",
 	"teardown-unconfirmed",
+	"environment-teardown",
 	"trace-unpropagated",
 	"node-inputs-resolved",
 	"edge-verdict",
@@ -15197,6 +15299,7 @@ async function replaySpawnTree(journal, blobs, root) {
 		if (ev.kind === "execution-input" || ev.kind === "execution-admitted" || ev.kind === "execution-result") continue;
 		if (ev.kind === "edge") continue;
 		if (ev.kind === "teardown-unconfirmed") continue;
+		if (ev.kind === "environment-teardown") continue;
 		if (ev.kind === "trace-unpropagated") continue;
 		if (ev.kind === "node-inputs-resolved") continue;
 		if (ev.kind === "edge-verdict") continue;
@@ -19588,6 +19691,9 @@ function defaultSleep(ms, signal) {
 /** Runtime-owned provider evidence is written through this private scope capability. */
 const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
+const retainedReleasers = /* @__PURE__ */ new WeakMap();
+/** Per-child bound on a retained release: one remote destroy, answered or abandoned. */
+const RETAINED_RELEASE_TIMEOUT_MS = 3e4;
 /** @internal Admit original children before the parent acts; do not wait for their results. */
 async function startScopeRecoveries(scope) {
 	const start = recoveryStarters.get(scope);
@@ -19596,6 +19702,22 @@ async function startScopeRecoveries(scope) {
 	await start();
 }
 /**
+* @internal Release what this scope's settled children still hold for a retained execution, and
+* confirm each one's teardown afterwards through the executor's own teardown verb.
+*
+* A retained-pending child settles `down` with its cursor slot open and its environment alive,
+* because a resumed process reconciles the paid execution inside it. The supervisor calls this
+* once the root has reached a terminal outcome that no later process resumes — never while the
+* root is live, and never on a resumable interruption, since the open slot and the live
+* environment are exactly what a resume recovers. One `environment-teardown` receipt is journaled
+* per environment, on this scope's own tree; a nested manager reaches its children through
+* `Executor.releaseRetained`, and its nested scope journals theirs.
+*/
+async function releaseRetainedEnvironments(scope) {
+	const release = retainedReleasers.get(scope);
+	if (release) await release();
+}
+/**
 * The recursion seam key. A `Scope` seeds a value of this on each child's
 * `ExecutorContext.seams` so a child whose executor is a DRIVER can mount a NESTED `Scope`
 * over the driver's reserved child allocation at `depth+1`. A leaf executor never reads it. Single-sourced
@@ -19975,6 +20097,10 @@ function createScope(args) {
 				...executor.interactive ? { readInteractive: executor.interactive.bind(executor) } : {},
 				...executor.interactiveReady ? { readInteractiveReady: executor.interactiveReady.bind(executor) } : {},
 				...executor.cancel ? { requestCancel: executor.cancel.bind(executor) } : {},
+				...executor.releaseRetained ? {
+					releaseRetained: executor.releaseRetained.bind(executor),
+					confirmTeardown: () => teardownExecutor(executor, "brutalKill", void 0, now)
+				} : {},
 				abortChild: (reason) => controller.abort(reason)
 			};
 			const recordCancellation = () => {
@@ -20581,6 +20707,33 @@ function createScope(args) {
 			throw error;
 		}
 	});
+	retainedReleasers.set(scope, async () => {
+		const held = [...children.values()].filter((child) => isTerminalNodeStatus(child.status) && !child.cleanupConfirmed && (child.recoveryPending === true || child.ownedTreeRoot !== void 0) && child.releaseRetained !== void 0 && child.confirmTeardown !== void 0);
+		const released = await Promise.all(held.map(async (child) => {
+			const bound = new AbortController();
+			const timer = setTimeout(() => bound.abort(new ValidationError$1(`retained release did not acknowledge within ${RETAINED_RELEASE_TIMEOUT_MS}ms`)), RETAINED_RELEASE_TIMEOUT_MS);
+			timer.unref?.();
+			try {
+				const receipts = await child.releaseRetained(bound.signal);
+				if (receipts.every((receipt) => receipt.destroyed)) try {
+					await child.confirmTeardown();
+					child.cleanupConfirmed = true;
+				} catch {}
+				return {
+					child,
+					receipts
+				};
+			} catch {
+				return {
+					child,
+					receipts: []
+				};
+			} finally {
+				clearTimeout(timer);
+			}
+		}));
+		for (const { child, receipts } of released) for (const receipt of receipts) await appendEnvironmentTeardown(args.journal, args.root, child.id, receipt, new Date(now()).toISOString());
+	});
 	registerScopeRetainedOwner(scope, {
 		rootId: args.root,
 		nodeId: args.parentId,
@@ -20838,6 +20991,21 @@ async function appendReconciledFloor(journal, root, id, spent, at) {
 		at
 	});
 }
+/** A release receipt has the same per-child sequence discipline: outside the cursor namespace and
+*  monotonic per node, so a run released in two processes keeps its receipts ordered. */
+async function appendEnvironmentTeardown(journal, root, id, receipt, at) {
+	const seq = await nextPerNodeSeq(journal, root, "environment-teardown", id);
+	await journal.appendEvent(root, {
+		kind: "environment-teardown",
+		id,
+		provider: receipt.provider,
+		environmentId: receipt.environmentId,
+		destroyed: receipt.destroyed,
+		...receipt.detail === void 0 ? {} : { detail: receipt.detail },
+		seq,
+		at
+	});
+}
 async function nextPerNodeSeq(journal, root, kind, id) {
 	return (await journal.loadTree(root) ?? []).reduce((max, event) => event.kind === kind && event.id === id ? Math.max(max, event.seq) : max, -1) + 1;
 }
@@ -21641,6 +21809,7 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 	let cleanupFailure;
 	let unconfirmedDescendants = [];
 	let active;
+	let nestedScopeHeld;
 	const closeActive = (reason) => {
 		if (active === void 0) return Promise.resolve();
 		if (!active.close) {
@@ -21695,6 +21864,7 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 				controller,
 				scope: nestedScope
 			};
+			nestedScopeHeld = nestedScope;
 			try {
 				if (recovering) {
 					await startScopeRecoveries(nestedScope);
@@ -21749,6 +21919,12 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 				detail: `Nested executor cleanup is unconfirmed: ${unconfirmedDescendants.join(", ")}`
 			} : { destroyed: true };
 		},
+		async releaseRetained() {
+			if (nestedScopeHeld === void 0) return [];
+			await releaseRetainedEnvironments(nestedScopeHeld);
+			unconfirmedDescendants = nestedScopeHeld.workerCapacity.unconfirmed.map((node) => node.id);
+			return [];
+		},
 		resultArtifact() {
 			if (!artifact) throw new ValidationError$1("driverExecutor: resultArtifact() read before execute()");
 			return artifact;
@@ -22183,7 +22359,7 @@ function describeRejection(error) {
 function createSupervisor() {
 	let attached;
 	async function run(root, task, opts) {
-		const { budget, rootIdentity, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, probes, maxDepth, maxLiveWorkers, maxRestarts, withinMs, childSettleGraceMs, resume, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
+		const { budget, rootIdentity, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, probes, maxDepth, maxLiveWorkers, maxRestarts, withinMs, childSettleGraceMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
 		const input = detachedSnapshot({
 			task,
 			options: {
@@ -22197,9 +22373,11 @@ function createSupervisor() {
 				...withinMs === void 0 ? {} : { withinMs },
 				...childSettleGraceMs === void 0 ? {} : { childSettleGraceMs },
 				...resume === void 0 ? {} : { resume },
+				...requestedRetainedAtSettlement === void 0 ? {} : { retainedAtSettlement: requestedRetainedAtSettlement },
 				...interactiveBindingDir === void 0 ? {} : { interactiveBindingDir }
 			}
 		}, "supervisor.run");
+		if (requestedRetainedAtSettlement !== void 0 && requestedRetainedAtSettlement !== "release" && requestedRetainedAtSettlement !== "keep") throw new ValidationError$1(`supervisor: retainedAtSettlement must be 'release' or 'keep', got ${JSON.stringify(requestedRetainedAtSettlement)}`);
 		opts = Object.freeze({
 			...input.options,
 			journal: journalStore,
@@ -22345,6 +22523,7 @@ function createSupervisor() {
 				error: new RuntimeRunStateError("supervisor: root execution did not start")
 			};
 			let teardownUnconfirmed = [];
+			const retainedAtSettlement = opts.retainedAtSettlement ?? (opts.resume === true ? "keep" : "release");
 			let teardownSeq = 0;
 			let executionAborted = controller.signal.aborted;
 			let allChildrenDownAtSettle = false;
@@ -22369,6 +22548,10 @@ function createSupervisor() {
 				const settleGraceMs = !controller.signal.aborted ? boundedSettleGrace(opts.childSettleGraceMs, rootDeadlineAtMs, now) : 0;
 				try {
 					teardownUnconfirmed = await drainLiveChildren(openScope, controller, settleGraceMs);
+					if (retainedAtSettlement === "release") {
+						await releaseRetainedEnvironments(openScope);
+						teardownUnconfirmed = openScope.workerCapacity.unconfirmed;
+					}
 					for (const node of teardownUnconfirmed) await opts.journal.appendEvent(opts.runId, {
 						kind: "teardown-unconfirmed",
 						id: node.id,
@@ -22762,6 +22945,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { createExecutor as $, traceContextToEnv as $n, inheritRuntimeOwnedExecutorAttestation as $r, createSandboxForSpec as $t, scopeRetainedOwnerPriorSpend as A, sumSandboxUsage as Ai, zeroSpend as An, assertProfileMaterialization as Ar, DEFAULT_STALL_AFTER_MS as At, recoverRetainedInteractiveRun as B, abortError$1 as Bn, renderUnsupported as Br, peerMailTools as Bt, pollFor as C, extractLlmCallEvent as Ci, promptCacheTokenClasses as Cn, DEFAULT_LOCAL_HARNESS as Cr, spendFromUsageEvents as Ct, consumeScopeRetainedOwnerResult as D, notifySandboxEventObserver as Di, throwAbort as Dn, parseCodexTokenUsage as Dr, workerTraceHeaders as Dt, waitUntil as E, mapSandboxToolEvent as Ei, stringifySafe as En, localHarnessExecutable as Er, workerTraceEnv as Et, attachWorker as F, promptOptionsFromAgentTurnInput as Fi, decodeToolPart as Fn, promptControlProfileMaterialization as Fr, DEFAULT_PEER_MAIL_LIMITS as Ft, queueOf as G, startRetainedRunInEnvironment as Gn, isNoEntError as Gr, bridgeModelRouteRefusal as Gt, destroyInteractiveEnvironment as H, reconnectRetainedRun as Hn, unsupportedProfileDimensions as Hr, isLiveNodeStatus as Ht, readWorkerInteractiveBinding as I, providerMessageText as Ii, sandboxSessionTraceSource as In, promptModelProfileMaterialization as Ir, PEER_MAIL_WIRE_KEY as It, teardownExecutor as J, defaultRedactorIdentityMaterial as Jn, writeAllBytes as Jr, harnessUsageIsEmpty as Jt, rollingDispatch as K, retainedCreateMaterial as Kn, parseCommittedJsonLines as Kr, addHarnessUsage as Kt, workerInteractiveBindingFile as L, registerRetainedExecutorPreparation as Ln, promptOnlyProfileMaterialization as Lr, claimsAuthority as Lt, interactiveAdmissionSeamKey as M, abortError$2 as Mi, resourceTelemetry as Mn, defineProfileMaterializationContract as Mr, readWorkerProgress as Mt, readWorkerInteractiveAdmissions as N, awaitAbortable$1 as Ni, withBudgetResources as Nn, fullProfileMaterialization as Nr, createInbox as Nt, prepareScopeRetainedOwnerTask as O, sandboxEventServedBackend as Oi, throwIfAborted as On, CodexExecutionDiagnosticError as Or, workerTraceSeamKey as Ot, workerInteractiveAdmissionFile as P, promptFromAgentTurnInput as Pi, createPushTraceSource as Pn, profileMaterializationAxes$1 as Pr, AUTHORITY_MARKERS as Pt, cliWorktreeExecutor as Q, readTraceContextFromEnv as Qn, finalizeRuntimeOwnedPendingExecutor as Qr, TERMINAL_DECISIONS as Qt, workerInteractiveBindingsDir as R, retainedExecutorSeamKey as Rn, promptResourceProfileMaterialization as Rr, createPeerMailbox as Rt, isWaitOutcome as S, createSandboxUsageLedger as Si, isAbortError$2 as Sn, removeWorktree as Sr, createBudgetPool as St, validateWaitSpec as T, mapSandboxEvent as Ti, sleep as Tn, harnessSupportsReasoningEffort as Tr, readWorkerTraceContext as Tt, effectiveConcurrency as U, recoverRetainedRun as Un, validateProfileMaterialization as Ur, isTerminalNodeStatus as Ut, startRetainedInteractiveRun as V, linkAbort as Vn, sandboxActProfileMaterialization as Vr, peerMailVerbNames as Vt, freeSlots as W, startRetainedRun as Wn, worktreeCliProfileMaterialization as Wr, bridgeAdmissionRefusal as Wt, captureReusableExecutorConfig as X, createPropagatingTraceEmitter as Xn, attestRuntimeOwnedScopeOwner as Xr, bridgeRuntimeAttachmentsKey as Xt, bindReusableExecutorExecutionId as Y, resolveRedactor as Yn, attestRuntimeOwnedPendingExecutor as Yr, readCodexRolloutSession as Yt, cliInPlaceExecutor as Z, mergeTraceEnv as Zn, authoredProfileDigest as Zr, bridgeStopSignalKey as Zt, recordScopeOwnerMaterialization as _, projectSandboxOutcome as _i, addSpend as _n, sanitizeRuntimeStreamEvent as _r, isTraceAnalysisStore as _t, pickBestDelivered as a, runtimeOwnedDriveHarnessProviderEvidence as ai, acquireSandbox as an, createOtelExporter as ar, createInPlaceCliExecutor as at, settledToIteration as b, canonicalStreamEventFromSandboxEvent as bi, deleteBoxSafe as bn, captureWorktreeDiff as br, contentAddress as bt, driverChild as c, runtimeOwnedExecutorProviderEvidence as ci, routerBrain as cn, generateSpanId as cr, InMemoryResultBlobStore as ct, withDriverExecutor as d, unknownExecutionBindingReceipt as di, observedModelMatchesDeclared as dn, padTraceId as dr, loadSpawnForest as dt, knownExecutionBindingReceipt as ei, defaultSelectWinner as en, INTELLIGENCE_WIRE_VERSION as er, createExecutorRegistry as et, beginScopeOwnerAttempt as f, unknownMaterializationReceipt as fi, createAgentEnvironmentProviderRegistry as fn, toOtelAttributes as fr, materializeTreeView as ft, meterRuntimeOwnedProviderAttempt as g, detachedSnapshot as gi, sandboxClientAsProvider as gn, sanitizeKnowledgeReadinessReport as gr, captureWorkerTraceEvidence as gt, meterRuntimeOwnedAccounting as h, detachedFrozen as hi, resolveAgentEnvironmentProvider as hn, sanitizeAgentRuntimeEvent as hr, WORKER_TOOL_TRACE_SCHEMA_VERSION as ht, collectDelivered as i, recordRuntimeOwnedDriveHarnessProviderEvidence as ii, probeSandboxCapabilities as in, createOpenInferenceFileExporter as ir, createSteerableSandboxSession as it, scopeRetainedOwnerResult as j, decodeHarnessUsage as ji, addResourceSpend as jn, controlProfileMaterialization as jr, createActivityLog as jt, scopeRetainedOwnerContext as k, sandboxProgressEvents as ki, unmeteredSpend as kn, AGENT_PROFILE_MATERIALIZATION_AXES as kr, taskToPrompt as kt, driverExecutorFactory as l, runtimeOwnedPendingExecutorMaterialization as li, runBrainLoop as ln, loopEventToOtelSpan as lr, InMemorySpawnJournal as lt, deriveNodeExecutionIdentity as m, executableAgentSpecSnapshot as mi, providerAsSandboxClient as mn, createRuntimeStreamEventCollector as mr, replaySpawnTree as mt, createSupervisor as n, newExecutionAttemptId as ni, runAgentRounds as nn, buildLoopSpanNodes as nr, createWorktreeCliExecutor as nt, runFinalizer as o, runtimeOwnedExecutorExecutionBinding as oi, assertBoxlessPromptOptions as on, exportEvalRuns as or, FileResultBlobStore as ot, createScope as p, executableAgentProfileSnapshot as pi, providerAsExecutor as pn, createRuntimeEventCollector as pr, pendingWaits as pt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as q, defaultRedactor as qn, prepareJsonlAppend as qr, createCodexRolloutStoreReader as qt, bestDelivered as r, providerAttemptEvidence as ri, createSandboxLineage as rn, buildRuntimeEventOtelSpans as rr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as rt, runTree as s, runtimeOwnedExecutorMaterialization as si, readPromptOptions as sn, flatOtelSpan as sr, FileSpawnJournal as st, createRootHandle as t, knownMaterializationReceipt as ti, isTerminalDecision as tn, buildLoopOtelSpans as tr, snapshotExecutorConfig as tt, isDriverSpec as u, runtimeOwnedScopeOwnerRuntime as ui, canonicalObservedModelParts as un, padSpanId as ur, insideCursorNamespace as ut, restoreScopeOwnerAcceptedExecution as v, readSandboxOutcome as vi, chargedTokens as vn, runSettledCommand as vr, parseWorkerToolTraceArtifact as vt, timerAt as w, isSandboxTerminalEvent as wi, randomSuffix as wn, LOCAL_HARNESSES as wr, WORKER_TRACE_PROPAGATION as wt, createWaitProbes as x, createSandboxToolPartState as xi, hasCompleteCacheBreakdown as xn, createWorktree as xr, assertValidBudget as xt, scopeOwnerExecutorNodeContext as y, assertSandboxServedModel as yi, cloneSpend as yn, runWorktreeHarness as yr, workerTraceAnalysisStore as yt, reconnectRetainedInteractiveRun as z, RunCancellationReason as zn, renderProfileMaterializationIssues as zr, isPeerMailEnvelope as zt };
+export { createExecutor as $, mergeTraceEnv as $n, authoredProfileDigest as $r, createSandboxForSpec as $t, scopeRetainedOwnerPriorSpend as A, sandboxEventServedBackend as Ai, unmeteredSpend as An, CodexExecutionDiagnosticError as Ar, DEFAULT_STALL_AFTER_MS as At, recoverRetainedInteractiveRun as B, retainedExecutorSeamKey as Bn, promptResourceProfileMaterialization as Br, peerMailTools as Bt, pollFor as C, createSandboxToolPartState as Ci, isAbortError$2 as Cn, createWorktree as Cr, spendFromUsageEvents as Ct, consumeScopeRetainedOwnerResult as D, mapSandboxEvent as Di, stringifySafe as Dn, harnessSupportsReasoningEffort as Dr, workerTraceHeaders as Dt, waitUntil as E, isSandboxTerminalEvent as Ei, sleep as En, LOCAL_HARNESSES as Er, workerTraceEnv as Et, attachWorker as F, awaitAbortable$1 as Fi, withBudgetResources as Fn, fullProfileMaterialization as Fr, DEFAULT_PEER_MAIL_LIMITS as Ft, queueOf as G, recoverRetainedRun as Gn, validateProfileMaterialization as Gr, bridgeModelRouteRefusal as Gt, destroyInteractiveEnvironment as H, abortError$1 as Hn, renderUnsupported as Hr, isLiveNodeStatus as Ht, readWorkerInteractiveBinding as I, promptFromAgentTurnInput as Ii, createPushTraceSource as In, profileMaterializationAxes$1 as Ir, PEER_MAIL_WIRE_KEY as It, teardownExecutor as J, retainedCreateMaterial as Jn, parseCommittedJsonLines as Jr, harnessUsageIsEmpty as Jt, rollingDispatch as K, startRetainedRun as Kn, worktreeCliProfileMaterialization as Kr, addHarnessUsage as Kt, workerInteractiveBindingFile as L, promptOptionsFromAgentTurnInput as Li, decodeToolPart as Ln, promptControlProfileMaterialization as Lr, claimsAuthority as Lt, interactiveAdmissionSeamKey as M, sumSandboxUsage as Mi, zeroSpend as Mn, assertProfileMaterialization as Mr, readWorkerProgress as Mt, readWorkerInteractiveAdmissions as N, decodeHarnessUsage as Ni, addResourceSpend as Nn, controlProfileMaterialization as Nr, createInbox as Nt, prepareScopeRetainedOwnerTask as O, mapSandboxToolEvent as Oi, throwAbort as On, localHarnessExecutable as Or, workerTraceSeamKey as Ot, workerInteractiveAdmissionFile as P, abortError$2 as Pi, resourceTelemetry as Pn, defineProfileMaterializationContract as Pr, AUTHORITY_MARKERS as Pt, cliWorktreeExecutor as Q, createPropagatingTraceEmitter as Qn, attestRuntimeOwnedScopeOwner as Qr, TERMINAL_DECISIONS as Qt, workerInteractiveBindingsDir as R, providerMessageText as Ri, sandboxSessionTraceSource as Rn, promptModelProfileMaterialization as Rr, createPeerMailbox as Rt, isWaitOutcome as S, canonicalStreamEventFromSandboxEvent as Si, hasCompleteCacheBreakdown as Sn, captureWorktreeDiff as Sr, createBudgetPool as St, validateWaitSpec as T, extractLlmCallEvent as Ti, randomSuffix as Tn, DEFAULT_LOCAL_HARNESS as Tr, readWorkerTraceContext as Tt, effectiveConcurrency as U, linkAbort as Un, sandboxActProfileMaterialization as Ur, isTerminalNodeStatus as Ut, startRetainedInteractiveRun as V, RunCancellationReason as Vn, renderProfileMaterializationIssues as Vr, peerMailVerbNames as Vt, freeSlots as W, reconnectRetainedRun as Wn, unsupportedProfileDimensions as Wr, bridgeAdmissionRefusal as Wt, captureReusableExecutorConfig as X, defaultRedactorIdentityMaterial as Xn, writeAllBytes as Xr, bridgeRuntimeAttachmentsKey as Xt, bindReusableExecutorExecutionId as Y, defaultRedactor as Yn, prepareJsonlAppend as Yr, readCodexRolloutSession as Yt, cliInPlaceExecutor as Z, resolveRedactor as Zn, attestRuntimeOwnedPendingExecutor as Zr, bridgeStopSignalKey as Zt, recordScopeOwnerMaterialization as _, detachedFrozen as _i, sandboxClientAsProvider as _n, sanitizeAgentRuntimeEvent as _r, isTraceAnalysisStore as _t, pickBestDelivered as a, providerAttemptEvidence as ai, acquireSandbox as an, buildRuntimeEventOtelSpans as ar, createInPlaceCliExecutor as at, settledToIteration as b, readSandboxOutcome as bi, cloneSpend as bn, runSettledCommand as br, contentAddress as bt, driverChild as c, runtimeOwnedExecutorExecutionBinding as ci, routerBrain as cn, exportEvalRuns as cr, InMemoryResultBlobStore as ct, withDriverExecutor as d, runtimeOwnedPendingExecutorMaterialization as di, observedModelMatchesDeclared as dn, loopEventToOtelSpan as dr, loadSpawnForest as dt, finalizeRuntimeOwnedPendingExecutor as ei, defaultSelectWinner as en, readTraceContextFromEnv as er, createExecutorRegistry as et, beginScopeOwnerAttempt as f, runtimeOwnedScopeOwnerRuntime as fi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as fn, padSpanId as fr, materializeTreeView as ft, meterRuntimeOwnedProviderAttempt as g, executableAgentSpecSnapshot as gi, resolveAgentEnvironmentProvider as gn, createRuntimeStreamEventCollector as gr, captureWorkerTraceEvidence as gt, meterRuntimeOwnedAccounting as h, executableAgentProfileSnapshot as hi, providerAsSandboxClient as hn, createRuntimeEventCollector as hr, WORKER_TOOL_TRACE_SCHEMA_VERSION as ht, collectDelivered as i, newExecutionAttemptId as ii, probeSandboxCapabilities as in, buildLoopSpanNodes as ir, createSteerableSandboxSession as it, scopeRetainedOwnerResult as j, sandboxProgressEvents as ji, withTimeout as jn, AGENT_PROFILE_MATERIALIZATION_AXES as jr, createActivityLog as jt, scopeRetainedOwnerContext as k, notifySandboxEventObserver as ki, throwIfAborted as kn, parseCodexTokenUsage as kr, taskToPrompt as kt, driverExecutorFactory as l, runtimeOwnedExecutorMaterialization as li, runBrainLoop as ln, flatOtelSpan as lr, InMemorySpawnJournal as lt, deriveNodeExecutionIdentity as m, unknownMaterializationReceipt as mi, providerAsExecutor as mn, toOtelAttributes as mr, replaySpawnTree as mt, createSupervisor as n, knownExecutionBindingReceipt as ni, runAgentRounds as nn, INTELLIGENCE_WIRE_VERSION as nr, createWorktreeCliExecutor as nt, runFinalizer as o, recordRuntimeOwnedDriveHarnessProviderEvidence as oi, assertBoxlessPromptOptions as on, createOpenInferenceFileExporter as or, FileResultBlobStore as ot, createScope as p, unknownExecutionBindingReceipt as pi, createAgentEnvironmentProviderRegistry as pn, padTraceId as pr, pendingWaits as pt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as q, startRetainedRunInEnvironment as qn, isNoEntError as qr, createCodexRolloutStoreReader as qt, bestDelivered as r, knownMaterializationReceipt as ri, createSandboxLineage as rn, buildLoopOtelSpans as rr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as rt, runTree as s, runtimeOwnedDriveHarnessProviderEvidence as si, readPromptOptions as sn, createOtelExporter as sr, FileSpawnJournal as st, createRootHandle as t, inheritRuntimeOwnedExecutorAttestation as ti, isTerminalDecision as tn, traceContextToEnv as tr, snapshotExecutorConfig as tt, isDriverSpec as u, runtimeOwnedExecutorProviderEvidence as ui, canonicalObservedModelParts as un, generateSpanId as ur, insideCursorNamespace as ut, restoreScopeOwnerAcceptedExecution as v, detachedSnapshot as vi, addSpend as vn, sanitizeKnowledgeReadinessReport as vr, parseWorkerToolTraceArtifact as vt, timerAt as w, createSandboxUsageLedger as wi, promptCacheTokenClasses as wn, removeWorktree as wr, WORKER_TRACE_PROPAGATION as wt, createWaitProbes as x, assertSandboxServedModel as xi, deleteBoxSafe as xn, runWorktreeHarness as xr, assertValidBudget as xt, scopeOwnerExecutorNodeContext as y, projectSandboxOutcome as yi, chargedTokens as yn, sanitizeRuntimeStreamEvent as yr, workerTraceAnalysisStore as yt, reconnectRetainedInteractiveRun as z, registerRetainedExecutorPreparation as zn, promptOnlyProfileMaterialization as zr, isPeerMailEnvelope as zt };
 
-//# sourceMappingURL=supervisor-CvF_KeLc.js.map
+//# sourceMappingURL=supervisor-CUlzJ5IO.js.map