@tangle-network/agent-runtime 0.220.0 → 0.220.1

package/dist/{supervise-DRDPNM81.js → supervise-CSYu0BeH.js}

@@ -1,9 +1,9 @@
-import { $ as createExecutor, $r as attestRuntimeOwnedScopeOwner, A as scopeRetainedOwnerPriorSpend, An as unmeteredSpend, Bn as retainedExecutorSeamKey, Ct as spendFromUsageEvents, D as consumeScopeRetainedOwnerResult, Fn as withBudgetResources, Fr as defineProfileMaterializationContract, Gr as unsupportedProfileDimensions, Gt as bridgeModelRouteRefusal, Ir as fullProfileMaterialization, J as teardownExecutor, Lr as profileMaterializationAxes$1, Mn as zeroSpend, Nn as addResourceSpend, Nr as assertProfileMaterialization, Nt as createInbox, O as prepareScopeRetainedOwnerTask, Pn as resourceTelemetry, Pr as controlProfileMaterialization, Rr as promptControlProfileMaterialization, Ur as renderUnsupported, Vn as RunCancellationReason, Wn as runAbortable, Wt as bridgeAdmissionRefusal, X as captureReusableExecutorConfig, Xt as bridgeRuntimeAttachmentsKey, Y as bindReusableExecutorExecutionId, Zt as bridgeStopSignalKey, _ as recordScopeOwnerMaterialization, bt as contentAddress, c as driverChild, ci as runtimeOwnedDriveHarnessProviderEvidence, cn as routerBrain, cr as createOtelExporter, di as runtimeOwnedExecutorProviderEvidence, dr as generateSpanId, f as beginScopeOwnerAttempt, fi as runtimeOwnedPendingExecutorMaterialization, g as meterRuntimeOwnedProviderAttempt, gn as resolveAgentEnvironmentProvider, h as meterRuntimeOwnedAccounting, hr as toOtelAttributes, j as scopeRetainedOwnerResult, jn as withTimeout, k as scopeRetainedOwnerContext, l as driverExecutorFactory, li as runtimeOwnedExecutorExecutionBinding, m as deriveNodeExecutionIdentity, n as createSupervisor, ni as inheritRuntimeOwnedExecutorAttestation, o as runFinalizer, oi as providerAttemptEvidence, pi as runtimeOwnedScopeOwnerRuntime, q as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, qr as worktreeCliProfileMaterialization, r as bestDelivered, s as runTree, si as recordRuntimeOwnedDriveHarnessProviderEvidence, t as createRootHandle, tt as snapshotExecutorConfig, u as isDriverSpec, ui as runtimeOwnedExecutorMaterialization, v as restoreScopeOwnerAcceptedExecution, vn as addSpend, wt as WORKER_TRACE_PROPAGATION, xt as assertValidBudget, y as scopeOwnerExecutorNodeContext, yi as detachedSnapshot, zn as registerRetainedExecutorPreparation, zr as promptModelProfileMaterialization } from "./supervisor-WRrw0nlk.js";
-import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError, r as BackendTransportError, t as AgentEvalError } from "./errors-DodWX-cb.js";
+import { $ as bindReusableExecutorExecutionId, Br as fullProfileMaterialization, C as scopeOwnerExecutorNodeContext, Ci as detachedSnapshot, Dt as spendFromUsageEvents, F as scopeRetainedOwnerResult, Fn as withTimeout, Gn as RunCancellationReason, Hr as promptControlProfileMaterialization, In as zeroSpend, Jn as runAbortable, Jt as bridgeAdmissionRefusal, Ln as addResourceSpend, Lr as assertProfileMaterialization, Lt as createInbox, M as prepareScopeRetainedOwnerTask, N as scopeRetainedOwnerContext, Ot as WORKER_TRACE_PROPAGATION, P as scopeRetainedOwnerPriorSpend, Pn as unmeteredSpend, Q as teardownExecutor, Rn as resourceTelemetry, Rr as controlProfileMaterialization, S as restoreScopeOwnerAcceptedExecution, Sn as addSpend, Tt as assertValidBudget, Un as registerRetainedExecutorPreparation, Ur as promptModelProfileMaterialization, Vr as profileMaterializationAxes$1, Wn as retainedExecutorSeamKey, Yr as unsupportedProfileDimensions, Yt as bridgeModelRouteRefusal, Z as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Zr as worktreeCliProfileMaterialization, _i as runtimeOwnedScopeOwnerRuntime, at as snapshotExecutorConfig, b as meterRuntimeOwnedProviderAttempt, bn as resolveAgentEnvironmentProvider, d as runDriverWithRetry, di as recordRuntimeOwnedDriveHarnessProviderEvidence, en as bridgeRuntimeAttachmentsKey, et as captureReusableExecutorConfig, f as driverChild, fi as runtimeOwnedDriveHarnessProviderEvidence, fn as routerBrain, fr as createOtelExporter, g as beginScopeOwnerAttempt, gi as runtimeOwnedPendingExecutorMaterialization, hi as runtimeOwnedExecutorProviderEvidence, hr as generateSpanId, j as consumeScopeRetainedOwnerResult, m as isDriverSpec, mi as runtimeOwnedExecutorMaterialization, n as createSupervisor, o as runFinalizer, oi as inheritRuntimeOwnedExecutorAttestation, p as driverExecutorFactory, pi as runtimeOwnedExecutorExecutionBinding, qr as renderUnsupported, r as bestDelivered, ri as attestRuntimeOwnedScopeOwner, rt as createExecutor, s as runTree, t as createRootHandle, tn as bridgeStopSignalKey, u as defaultUnmetContractSteer, ui as providerAttemptEvidence, v as deriveNodeExecutionIdentity, wt as contentAddress, x as recordScopeOwnerMaterialization, y as meterRuntimeOwnedAccounting, yr as toOtelAttributes, zn as withBudgetResources, zr as defineProfileMaterializationContract } from "./supervisor-n8DDNGli.js";
+import { i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-DKDyr-fc.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { t as createStdioToolServer } from "./tool-server-BJbCPhoW.js";
-import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-DwgDZ6nf.js";
+import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-BxGh-Tnj.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-hZREkcfu.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1079,310 +1079,6 @@ function truncate(value) {
 	return value.length > MAX_DETAIL_CHARS ? `${value.slice(0, MAX_DETAIL_CHARS)}…` : value;
 }
 //#endregion
-//#region src/runtime/supervise/driver-retry.ts
-/**
-* Root-driver retry — the root gets the same second chance a worker's transport already has.
-*
-* A spawned child that dies is typed into a `down` settlement and the driver may re-spawn it. The
-* ROOT had no such path: one dropped connection, one SIGKILLed harness process, one upstream 5xx
-* ended a run of arbitrary length with `reason: 'driver-failed'`, and every live child was torn
-* down with it (#741). The driver's budget and deadline were usually almost untouched.
-*
-* This module supplies the missing arm: run the driver again, on the SAME scope, the SAME
-* coordination server and the SAME live children, until the budget or the deadline says stop.
-* Nothing here restarts children or replays work — it re-enters the driver, and the bridge backend
-* reattaches the harness session because the execution id is bound durably per node.
-*
-* Two classifications decide everything, and both are conservative:
-*
-*  - TERMINAL failures are Runtime's own refusals: a `ValidationError`/`ConfigError` guard, an
-*    exhausted budget, an abort, a client-side transport status (401/404/422). Runtime meant them,
-*    so retrying re-runs a decision rather than recovering from an accident. They fail immediately.
-*  - TRANSIENT failures are everything foreign: a harness process that exited without a reason, a
-*    stream that cut mid-turn, a 5xx, a socket reset. Those are accidents, and they are exactly
-*    what a retry exists for.
-*
-* The one loop the budget alone cannot bound is a driver that dies INSTANTLY and repeatedly — a
-* dead-on-arrival credential, a harness that refuses to start. Spending nothing, it would retry
-* until the deadline hours later. So progress is measured between attempts, and a run of attempts
-* that changes nothing stops at `maxConsecutiveFailures`. A failure that made progress resets that
-* counter: a long run may be rescued many times, a hopeless one gives up in seconds.
-*
-* WHAT COUNTS AS PROGRESS is the part this module got wrong first, and the correction is measured.
-* The original mark read metered spend, settled children, and an accepted submission — the
-* filesystem and the meter, never the goal. Across 1,422 settled discovery-lab runs (2026-09-01)
-* that reading retried the runs that had produced NOTHING 629 of 827 times (76.1%) while retrying
-* the runs that HAD left an artifact 21 of 399 times (5.3%): the loop spent its second chances on
-* the hopeless runs and measured persistence by burn rate. So when the caller declares a completion
-* check, spend and settlements alone are NOT progress while that check is unmet; only a delivery —
-* an accepted submission, a child that passed the check, or the contract turning met — resets the
-* barren counter. A caller that declares no check reports `contract: 'none'` and keeps the exact
-* historical reading.
-*
-* THE SECOND HALF of the same defect: `budgetStop` used to be consulted only after a failure, and a
-* driver that RETURNED with the contract unmet ended the run silently — 376 of 376 winning lab runs
-* ended on this loop's own `stop: 'completed'`, with the completion gate left to label the result
-* rather than to change it. A completed drive whose contract is unmet is now a first-class moment:
-* `reprompt.maxReprompts` re-enters the SAME live session with the unmet items, and every re-entry
-* crosses the same budget, deadline, abort, and attempt bounds a retry crosses.
-*/
-/**
-* The instruction a completed-but-undelivered drive is re-entered with when the caller supplies no
-* `onUnmetContract`. It states the verdict, names what is owed, reports the ledger, and gives the
-* three steps — the same shape `depthStrategy` re-prompts a resumed session with, said in the
-* driver's own terms.
-*/
-function defaultUnmetContractSteer(context) {
-	const owed = context.describe?.trim();
-	return [
-		"The completion check has not passed. This run has delivered nothing yet.",
-		owed === void 0 || owed.length === 0 ? "The deliverable this run owes is still missing." : `The deliverable this run owes: ${owed}`,
-		`Workers settled: ${context.progress.settledCount}. Workers that passed the check: ${context.progress.deliveredCount ?? 0}.`,
-		"Do the unfinished work with the tools.",
-		"Verify that the check passes.",
-		"Then submit the result.",
-		"Do not restate work you already did."
-	].join("\n");
-}
-const DEFAULT_MAX_CONSECUTIVE_FAILURES = 3;
-const DEFAULT_MAX_ATTEMPTS = 8;
-const DEFAULT_INITIAL_BACKOFF_MS$1 = 2e3;
-const DEFAULT_MAX_BACKOFF_MS$1 = 3e4;
-/**
-* Bridge error classes the bridge itself never retries: a request that fails identically on
-* every attempt, mapped below 5xx on its HTTP path (`parse_error` 400, the other two 501). On the
-* stream path the same failure arrives with no status at all — a profile that cannot materialize
-* is a `parse_error` — and the status split alone read it as a bad moment and re-drove it to the
-* attempt ceiling.
-*/
-const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
-	"parse_error",
-	"not_configured",
-	"capability_denied"
-]);
-/**
-* Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal;
-* anything foreign is an accident and is retryable. A `BackendTransportError` is split by status
-* because the taxonomy already promises consumers may branch on it: a 5xx/429/408 is the upstream
-* having a bad moment, while a 401/404/422 is a request that will fail identically forever. The
-* bridge's own never-retry classes are terminal whether or not a status rides with them.
-*/
-function classifyDriverFailure(error, signal) {
-	if (signal?.aborted) return "terminal";
-	if (error instanceof Error && error.name === "AbortError") return "terminal";
-	if (error instanceof BackendTransportError) {
-		if (error.upstreamCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.upstreamCode)) return "terminal";
-		const status = error.status;
-		if (status === void 0) return "transient";
-		if (status === 408 || status === 429 || status >= 500) return "transient";
-		return "terminal";
-	}
-	if (error instanceof ValidationError || error instanceof ConfigError || error instanceof RuntimeRunStateError) return "terminal";
-	if (error instanceof AgentEvalError) return "terminal";
-	return "transient";
-}
-/** The budget's own verdict on whether another attempt may run at all. */
-function budgetStop(budget, atMs) {
-	if (budget.deadlineMs > 0 && atMs >= budget.deadlineMs) return "deadline";
-	if (budget.tokensLeft <= 0 || budget.iterationsLeft <= 0) return "budget-exhausted";
-	if (budget.usdCapped && budget.usdLeft <= 0) return "budget-exhausted";
-	if (budget.usdCapped && budget.usdKnown === false) return "budget-exhausted";
-	if (Object.values(budget.resources ?? {}).some((resource) => !resource.known || resource.remaining <= 0)) return "budget-exhausted";
-}
-function contractOf(mark) {
-	return mark.contract ?? "none";
-}
-/**
-* Did this attempt move the run toward its DELIVERABLE?
-*
-* A delivery always counts: an accepted submission, one more child that passed the check, or the
-* contract turning met. Spend and settlements count only while no declared check is outstanding —
-* with a check unmet they are the burn-rate reading this module's header measures and rejects.
-*/
-function madeProgress(before, after) {
-	if (after.submitted && !before.submitted) return true;
-	if ((after.deliveredCount ?? 0) > (before.deliveredCount ?? 0)) return true;
-	if (contractOf(before) !== "met" && contractOf(after) === "met") return true;
-	if (contractOf(after) === "unmet") return false;
-	return after.poolTokensSpent > before.poolTokensSpent || after.settledCount > before.settledCount;
-}
-/** The error a give-up throws: the original cause, re-described with the attempt history so
-*  `driver-failed` carries a diagnosable message instead of one backend's last words. */
-var DriverAttemptsExhaustedError = class extends RuntimeRunStateError {
-	attempts;
-	stop;
-	constructor(cause, attempts, stop) {
-		const last = attempts[attempts.length - 1];
-		const causeText = cause instanceof Error ? `${cause.name}: ${cause.message}` : describeUnknown(cause);
-		super(`supervisor driver failed after ${attempts.length} attempt(s) — stopped by ${stop}; last cause: ${causeText}` + (last?.classification ? ` (classified ${last.classification})` : ""), { cause });
-		this.attempts = Object.freeze([...attempts]);
-		this.stop = stop;
-	}
-};
-function describeUnknown(value) {
-	if (typeof value === "string") return value;
-	try {
-		return JSON.stringify(value) ?? String(value);
-	} catch {
-		return String(value);
-	}
-}
-async function defaultSleep$1(ms, signal) {
-	if (ms <= 0 || signal.aborted) return;
-	await new Promise((resolve) => {
-		const done = () => {
-			clearTimeout(timer);
-			signal.removeEventListener("abort", done);
-			resolve();
-		};
-		const timer = setTimeout(done, ms);
-		if (typeof timer === "object" && timer !== null && "unref" in timer) timer.unref();
-		signal.addEventListener("abort", done, { once: true });
-	});
-}
-/**
-* Run the driver until it completes WITH ITS CONTRACT MET, or until the budget, the deadline, an
-* abort, a terminal error, or a ceiling stops it. Transient failures are retried. A drive that
-* returns with its completion check unmet is re-entered on the same live session with the unmet
-* items, up to `reprompt.maxReprompts`. Throws `DriverAttemptsExhaustedError` (cause = the last
-* real failure) when a FAILURE ends the loop; a completed drive returns, met contract or not,
-* because deciding what an undelivered run is worth belongs to the finalizer, not to this loop.
-*/
-async function runDriverWithRetry(run) {
-	const now = run.now ?? Date.now;
-	const sleep = run.sleep ?? defaultSleep$1;
-	const policy = run.policy ?? {};
-	const retryEnabled = policy.enabled !== false;
-	const maxConsecutive = Math.max(0, policy.maxConsecutiveFailures ?? DEFAULT_MAX_CONSECUTIVE_FAILURES);
-	const maxAttempts = Math.max(1, policy.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);
-	const initialBackoff = Math.max(0, policy.initialBackoffMs ?? DEFAULT_INITIAL_BACKOFF_MS$1);
-	const maxBackoff = Math.max(initialBackoff, policy.maxBackoffMs ?? DEFAULT_MAX_BACKOFF_MS$1);
-	const maxReprompts = Math.max(0, run.reprompt?.maxReprompts ?? 0);
-	const attempts = [];
-	let consecutiveBarren = 0;
-	let reprompts = 0;
-	let reentry;
-	const emit = async (record) => {
-		attempts.push(record);
-		await run.onAttempt?.(record);
-	};
-	/**
-	* Decide what a completed-but-undelivered drive does next. Every bound the FAILURE path applies
-	* is applied here too — that is the fix for `budgetStop` having lived only in the catch arm — and
-	* the caller's hook is consulted last, so no hook can talk the loop past a deadline.
-	*/
-	const decideReprompt = async (attempt, after) => {
-		if (reprompts >= maxReprompts) return { refusedBy: "reprompts-exhausted" };
-		if (run.signal.aborted) return { refusedBy: "aborted" };
-		const byBudget = budgetStop(run.budget(), now());
-		if (byBudget === "deadline" || byBudget === "budget-exhausted") return { refusedBy: byBudget };
-		if (attempt >= maxAttempts) return { refusedBy: "max-attempts" };
-		const context = {
-			attempt,
-			reprompts,
-			maxReprompts,
-			progress: after,
-			budget: run.budget(),
-			...run.reprompt?.describe === void 0 ? {} : { describe: run.reprompt.describe }
-		};
-		const decision = await run.reprompt?.onUnmetContract?.(context) ?? { steer: defaultUnmetContractSteer(context) };
-		if (decision === "stop") return { refusedBy: "caller-stop" };
-		const steer = typeof decision.steer === "string" ? decision.steer.trim() : "";
-		if (steer.length === 0) throw new ValidationError("runDriverWithRetry: onUnmetContract returned an empty steer — return a non-empty instruction or 'stop'");
-		return { steer };
-	};
-	for (let attempt = 1;; attempt += 1) {
-		const before = run.progress();
-		const startedAt = now();
-		try {
-			await run.drive(attempt, reentry);
-		} catch (error) {
-			const durationMs = now() - startedAt;
-			const classification = classifyDriverFailure(error, run.signal);
-			const progressed = madeProgress(before, run.progress());
-			const stop = (() => {
-				if (classification === "terminal") return "terminal-error";
-				if (!retryEnabled) return "retry-disabled";
-				if (run.signal.aborted) return "aborted";
-				const byBudget = budgetStop(run.budget(), now());
-				if (byBudget) return byBudget;
-				if (attempt >= maxAttempts) return "max-attempts";
-				if (progressed) return void 0;
-				return consecutiveBarren + 1 >= maxConsecutive ? "no-progress" : void 0;
-			})();
-			if (stop !== void 0) {
-				await emit({
-					attempt,
-					durationMs,
-					error: error instanceof Error ? error.message : describeUnknown(error),
-					classification,
-					madeProgress: progressed,
-					stop
-				});
-				throw new DriverAttemptsExhaustedError(error, attempts, stop);
-			}
-			consecutiveBarren = progressed ? 0 : consecutiveBarren + 1;
-			reentry = void 0;
-			const backoff = Math.min(maxBackoff, initialBackoff * 2 ** Math.max(0, consecutiveBarren - 1));
-			await emit({
-				attempt,
-				durationMs,
-				error: error instanceof Error ? error.message : describeUnknown(error),
-				classification,
-				madeProgress: progressed,
-				retryInMs: backoff
-			});
-			await sleep(backoff, run.signal);
-			if (run.signal.aborted) throw new DriverAttemptsExhaustedError(error, attempts, "aborted");
-			const afterWait = budgetStop(run.budget(), now());
-			if (afterWait) throw new DriverAttemptsExhaustedError(error, attempts, afterWait);
-			continue;
-		}
-		const durationMs = now() - startedAt;
-		const after = run.progress();
-		const progressed = madeProgress(before, after);
-		const contract = contractOf(after);
-		const contractField = contract === "none" ? {} : { contract };
-		if (contract === "unmet" && maxReprompts > 0) {
-			const decision = await decideReprompt(attempt, after);
-			if ("steer" in decision) {
-				reprompts += 1;
-				reentry = {
-					reason: "unmet-contract",
-					steer: decision.steer,
-					reprompt: reprompts
-				};
-				await emit({
-					attempt,
-					durationMs,
-					madeProgress: progressed,
-					...contractField,
-					reprompted: true,
-					retryInMs: 0
-				});
-				continue;
-			}
-			await emit({
-				attempt,
-				durationMs,
-				madeProgress: progressed,
-				...contractField,
-				repromptRefusedBy: decision.refusedBy,
-				stop: "completed"
-			});
-			return;
-		}
-		await emit({
-			attempt,
-			durationMs,
-			madeProgress: progressed,
-			...contractField,
-			stop: "completed"
-		});
-		return;
-	}
-}
-//#endregion
 //#region src/runtime/supervise/supervisor-agent.ts
 /**
 * `supervisorAgent` — build a supervisor `Agent` FROM its profile. The brain is resolved from
@@ -3675,6 +3371,6 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 	return evidence ?? rootProviderModelEvidence([]);
 }
 //#endregion
-export { createSupervisorSpanRecorder as _, isPreSpawnExecutorFailure as a, mapExecutorResult as b, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, defaultUnmetContractSteer as g, classifyDriverFailure as h, workerFromBackend as i, assertCoordinationBinding as l, DriverAttemptsExhaustedError as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u, serveCoordinationMcp as v, gateOnDeliverable as y };
+export { mapExecutorResult as _, isPreSpawnExecutorFailure as a, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, gateOnDeliverable as g, serveCoordinationMcp as h, workerFromBackend as i, assertCoordinationBinding as l, createSupervisorSpanRecorder as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u };
 
-//# sourceMappingURL=supervise-DRDPNM81.js.map
+//# sourceMappingURL=supervise-CSYu0BeH.js.map