@tangle-network/agent-runtime 0.223.0 → 0.225.0

package/dist/{supervisor-CuBPrwGp.js → supervisor-DBzsb6Qt.js}

@@ -764,7 +764,8 @@ function cloneSpend(spend) {
 		...spend.usdKnown === false ? { usdKnown: false } : {},
 		...spend.usdEstimated !== void 0 ? { usdEstimated: spend.usdEstimated } : {},
 		ms: spend.ms,
-		...boxMinutesOf(spend)
+		...boxMinutesOf(spend),
+		...spend.tokensProvenance === void 0 ? {} : { tokensProvenance: spend.tokensProvenance }
 	};
 }
 /**
@@ -15505,6 +15506,7 @@ async function replaySpawnTree(journal, blobs, root) {
 				kind: "down",
 				handle: handleFor(ev.id, "cancelled"),
 				reason: ev.reason,
+				...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
 				infra: ev.infra === true,
 				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
 				...budgetViolationOf(ev),
@@ -15524,6 +15526,7 @@ async function replaySpawnTree(journal, blobs, root) {
 				kind: "down",
 				handle: handleFor(ev.id, "failed"),
 				reason: ev.reason ?? ev.verdict?.notes ?? "child down",
+				...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
 				infra: ev.infra === true,
 				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
 				...budgetViolationOf(ev),
@@ -19932,6 +19935,7 @@ function defaultSleep$1(ms, signal) {
 const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
 const retainedReleasers = /* @__PURE__ */ new WeakMap();
+const admissionSeals = /* @__PURE__ */ new WeakMap();
 /** Per-child bound on a retained release: one remote destroy, answered or abandoned. */
 const RETAINED_RELEASE_TIMEOUT_MS = 3e4;
 /** @internal Admit original children before the parent acts; do not wait for their results. */
@@ -19958,6 +19962,29 @@ async function releaseRetainedEnvironments(scope) {
 	if (release) await release();
 }
 /**
+* @internal Close this scope to NEW children. Idempotent, synchronous, and irreversible.
+*
+* The supervisor calls it the instant the root `act` has settled, before the join barrier drains.
+* A driver's `act` returning does not stop everything that holds its scope: a supervisor tool
+* whose handler outran its response fence keeps running detached (`single-flight-tools`
+* `background()`) with the coordination verbs still bound, and a verb call reaches `spawn`
+* in-process — closing the MCP listener does not reach it. Measured 2026-09-14: such a handler
+* spawned `distill:all` 309 ms after the barrier had drained and released. The child was
+* admitted, took a conserved reservation, built a sandbox, ran 12.4 s of provider work, and
+* journaled its settlement 19 s after the run had already written its failure — while the live
+* reservation it legitimately held was read back at the barrier as a conserved-pool leak and
+* threw away 63 settled children.
+*
+* Nothing admitted here could reach the result anyway: the driver has already selected over the
+* settled ledger. Sealing is total because `spawn` never suspends between this gate and the
+* point the child is registered and its ticket marked `executing`, so no spawn can straddle it.
+*
+* Not a `Scope` method: an Agent must not be able to close its own siblings out of the run.
+*/
+function closeScopeAdmission(scope) {
+	admissionSeals.get(scope)?.();
+}
+/**
 * The recursion seam key. A `Scope` seeds a value of this on each child's
 * `ExecutorContext.seams` so a child whose executor is a DRIVER can mount a NESTED `Scope`
 * over the driver's reserved child allocation at `depth+1`. A leaf executor never reads it. Single-sourced
@@ -20015,6 +20042,7 @@ function makeNestedScopeSeam(args, liveWorkerCapacity, childNodeId, childBudget,
 function createScope(args) {
 	const children = /* @__PURE__ */ new Map();
 	const settlementWrites = /* @__PURE__ */ new Set();
+	let admissionClosed = false;
 	const interactiveBindingDir = args.interactiveBindingDir;
 	const liveWorkerCapacity = args.liveWorkerCapacity ?? {
 		max: normalizeLiveWorkerLimit(args.maxLiveWorkers),
@@ -20077,6 +20105,10 @@ function createScope(args) {
 			ok: false,
 			reason: "scope-aborted"
 		};
+		if (admissionClosed) return {
+			ok: false,
+			reason: "scope-settled"
+		};
 		const task = detachedSnapshot(rawTask, "scope.spawn task");
 		const opts = detachedSnapshot(rawOpts, "scope.spawn options");
 		let prior;
@@ -20535,7 +20567,7 @@ function createScope(args) {
 				try {
 					await interactiveBindingCommitted;
 				} catch {
-					resolution = downRecord("interactive worker binding persistence failed", true, s.trace, s.metered, s.providerModel);
+					resolution = downRecord("interactive worker binding persistence failed", true, s.trace, s.metered, s.providerModel, s.outRef);
 				}
 				live.resolved = resolution;
 				return resolution;
@@ -20891,6 +20923,9 @@ function createScope(args) {
 			};
 		}
 	};
+	admissionSeals.set(scope, () => {
+		admissionClosed = true;
+	});
 	runtimeOwnedProviderMeters.set(scope, async (spend, providerModel, detail, accountingOnly) => meterInternal(spend, detail, providerModel, accountingOnly));
 	if (args.ownerMaterialization !== void 0) {
 		const authoredProfile = args.ownerMaterialization.authoredProfile === void 0 ? void 0 : detachedSnapshot(args.ownerMaterialization.authoredProfile, "scope owner authored profile");
@@ -21268,6 +21303,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 	if (settlement.kind === "down") {
 		const cancellation = child.cancellationReason;
 		child.status = cancellation === void 0 ? "failed" : "cancelled";
+		child.outRef = settlement.outRef;
 		child.trace = settlement.trace;
 		child.providerModel = settlement.providerModel;
 		if (!child.recoveryPending) await args.journal.appendEvent(args.root, {
@@ -21301,6 +21337,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 			payload: {
 				childId: child.id,
 				status: "down",
+				...settlement.outRef === void 0 ? {} : { outRef: settlement.outRef },
 				reason: settlement.reason,
 				infra: settlement.infra,
 				spent: child.spent,
@@ -21312,6 +21349,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 			handle,
 			reason: settlement.reason,
 			infra: settlement.infra,
+			...settlement.outRef === void 0 ? {} : { outRef: settlement.outRef },
 			...settlement.providerModel ? { providerModel: settlement.providerModel } : {},
 			...child.budgetViolation ? { budgetViolation: child.budgetViolation } : {},
 			trace: settlement.trace,
@@ -21471,6 +21509,28 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 	let terminalTelemetryCaptured = false;
 	let teardownStarted = false;
 	let traceEvidence;
+	let retainedOutputRef;
+	const retainOutput = async (result, measured = result.spent) => {
+		let usageError;
+		try {
+			assertReportedSpend(result.spent, `scope.spawn ${live.id}`);
+			live.spent = executor.accounting?.()?.reported ?? measured;
+			terminalTelemetryCaptured = true;
+			live.executorDone = true;
+		} catch (error) {
+			usageError = error;
+		}
+		const out = detachedSnapshot(result.out, "scope child output");
+		const outRef = contentAddress(out);
+		await blobs.put(outRef, out);
+		retainedOutputRef = outRef;
+		if (usageError !== void 0) throw usageError;
+		return {
+			...result,
+			out,
+			outRef
+		};
+	};
 	const captureTraceOnce = async () => {
 		traceEvidence ??= await captureWorkerTraceEvidence(live.readTraceSource, blobs, started);
 		return traceEvidence;
@@ -21537,9 +21597,9 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 				});
 			}, childAbort.signal);
 			live.spent = spend;
+			const reported = executor.resultArtifact();
+			artifact = await retainOutput(reported, preserveUnknownTelemetry(spend, reported.spent));
 			await executionEvidence.complete();
-			artifact = executor.resultArtifact();
-			assertReportedSpend(artifact.spent, `scope.spawn ${live.id}`);
 			const accounting = executor.accounting?.();
 			const terminalSpend = preserveUnknownTelemetry(spend, artifact.spent);
 			live.spent = accounting?.reported ?? terminalSpend;
@@ -21548,8 +21608,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 			const reconcileError = reconcileOnce(accounting?.reservation ?? terminalSpend);
 			if (reconcileError !== void 0) throw reconcileError;
 		} else {
-			const terminal = await awaitAbortable(Promise.resolve(ran), childAbort.signal);
-			assertReportedSpend(terminal.spent, `scope.spawn ${live.id}`);
+			const terminal = await retainOutput(await awaitAbortable(Promise.resolve(ran), childAbort.signal));
 			await executionEvidence.complete();
 			const accounting = executor.accounting?.();
 			live.spent = accounting?.reported ?? terminal.spent;
@@ -21564,10 +21623,9 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		const trace = await captureTraceOnce();
 		if (childAbort.signal.aborted && live.acceptedResult === void 0) {
 			await teardownOnce(opts.shutdown ?? "brutalKill");
-			return downRecord("aborted before settle", true, trace, ownMetered, runtimeOwnedExecutorProviderEvidence(executor));
+			return downRecord("aborted before settle", true, trace, ownMetered, runtimeOwnedExecutorProviderEvidence(executor), retainedOutputRef);
 		}
-		const outRef = contentAddress(artifact.out);
-		await blobs.put(outRef, artifact.out);
+		const outRef = artifact.outRef;
 		const failureReason = executorFailureReason(artifact);
 		if (failureReason !== void 0) {
 			await teardownOnce(opts.shutdown ?? 5e3).catch(() => void 0);
@@ -21638,7 +21696,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 			}
 			live.budgetViolation = void 0;
 			return {
-				...downRecord(errMessage(err), true, trace, executor.metered?.()),
+				...downRecord(errMessage(err), true, trace, executor.metered?.(), void 0, retainedOutputRef),
 				reconciled: live.spent
 			};
 		}
@@ -21662,7 +21720,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		const aborted = childAbort.signal.aborted || isAbortError(err);
 		if (started && !terminalTelemetryCaptured && accounting === void 0) live.spent = unknownFloor(live.spent);
 		const reconcileError = reconcileOnce(accounting?.reservation ?? live.spent);
-		return downRecord(errMessage(err), evidenceError !== void 0 || teardownError !== void 0 || reconcileError !== void 0 || aborted || isInfraError(err), trace, executor.metered?.(), providerModel);
+		return downRecord(errMessage(err), evidenceError !== void 0 || teardownError !== void 0 || reconcileError !== void 0 || aborted || isInfraError(err), trace, executor.metered?.(), providerModel, retainedOutputRef);
 	} finally {
 		await closeRetainedWrites();
 	}
@@ -21900,14 +21958,15 @@ function unknownFloor(spend) {
 		}])) }
 	};
 }
-function downRecord(reason, infra, trace, metered, providerModel) {
+function downRecord(reason, infra, trace, metered, providerModel, outRef) {
 	return {
 		kind: "down",
 		reason,
 		infra,
 		trace,
 		...providerModel ? { providerModel } : {},
-		...metered ? { metered } : {}
+		...metered ? { metered } : {},
+		...outRef === void 0 ? {} : { outRef }
 	};
 }
 /** The one place an absent interactive process is spelled, so every refusal reads the same. */
@@ -22525,6 +22584,9 @@ async function runDriverWithRetry(run) {
 		};
 		const decision = await run.reprompt?.onUnmetContract?.(context) ?? { steer: defaultUnmetContractSteer(context) };
 		if (decision === "stop") return { refusedBy: "caller-stop" };
+		if (run.signal.aborted) return { refusedBy: "aborted" };
+		const afterHook = budgetStop(run.budget(), now());
+		if (afterHook === "deadline" || afterHook === "budget-exhausted") return { refusedBy: afterHook };
 		const steer = typeof decision.steer === "string" ? decision.steer.trim() : "";
 		if (steer.length === 0) throw new ValidationError$1("runDriverWithRetry: onUnmetContract returned an empty steer — return a non-empty instruction or 'stop'");
 		return { steer };
@@ -22532,6 +22594,11 @@ async function runDriverWithRetry(run) {
 	for (let attempt = 1;; attempt += 1) {
 		const before = run.progress();
 		const startedAt = now();
+		const admissionStop = run.signal.aborted ? "aborted" : budgetStop(run.budget(), now());
+		if (admissionStop !== void 0) {
+			if (reentry !== void 0) return;
+			throw new DriverAttemptsExhaustedError(run.signal.aborted ? run.signal.reason : new ValidationError$1(`driver admission: ${admissionStop}`), attempts, admissionStop);
+		}
 		try {
 			await run.drive(attempt, reentry);
 		} catch (error) {
@@ -23069,6 +23136,7 @@ function createSupervisor() {
 					error
 				};
 			} finally {
+				closeScopeAdmission(openScope);
 				executionAborted = controller.signal.aborted;
 				allChildrenDownAtSettle = allSpawnedChildrenDown(runTree(openScope));
 				downCountAtSettle = breaker.downCount();
@@ -23476,4 +23544,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { bindReusableExecutorExecutionId as $, exportEvalRuns as $n, runtimeOwnedExecutorExecutionBinding as $r, bridgeModelRouteRefusal as $t, waitUntil as A, promptCacheTokenClasses as Ai, retainedExecutorSeamKey as An, promptOnlyProfileMaterialization as Ar, spendFromUsageEvents as At, readWorkerInteractiveBinding as B, resourceTelemetry as Bi, defaultRedactor as Bn, prepareJsonlAppend as Br, readWorkerProgress as Bt, scopeOwnerExecutorNodeContext as C, sumSandboxUsage as Ci, providerAsSandboxClient as Cn, assertProfileMaterialization as Cr, workerTraceAnalysisStore as Ct, pollFor as D, deleteBoxSafe as Di, decodeToolPart as Dn, profileMaterializationAxes$1 as Dr, createBudgetPool as Dt, isWaitOutcome as E, cloneSpend as Ei, createPushTraceSource as En, fullProfileMaterialization as Er, assertValidBudget as Et, scopeRetainedOwnerResult as F, throwIfAborted as Fi, reconnectRetainedRun as Fn, unsupportedProfileDimensions as Fr, workerTraceHeaders as Ft, startRetainedInteractiveRun as G, promptFromAgentTurnInput as Gi, readTraceContextFromEnv as Gn, finalizeRuntimeOwnedPendingExecutor as Gr, claimsAuthority as Gt, workerInteractiveBindingsDir as H, decodeHarnessUsage as Hi, resolveRedactor as Hn, attestRuntimeOwnedPendingExecutor as Hr, AUTHORITY_MARKERS as Ht, interactiveAdmissionSeamKey as I, unmeteredSpend as Ii, recoverRetainedRun as In, validateProfileMaterialization as Ir, workerTraceSeamKey as It, freeSlots as J, buildLoopOtelSpans as Jn, knownMaterializationReceipt as Jr, peerMailTools as Jt, destroyInteractiveEnvironment as K, promptOptionsFromAgentTurnInput as Ki, traceContextToEnv as Kn, inheritRuntimeOwnedExecutorAttestation as Kr, createPeerMailbox as Kt, readWorkerInteractiveAdmissions as L, withTimeout as Li, startRetainedRun as Ln, worktreeCliProfileMaterialization as Lr, taskToPrompt as Lt, prepareScopeRetainedOwnerTask as M, sleep as Mi, abortError as Mn, renderProfileMaterializationIssues as Mr, WORKER_TRACE_PROPAGATION as Mt, scopeRetainedOwnerContext as N, stringifySafe as Ni, linkAbort as Nn, renderUnsupported as Nr, readWorkerTraceContext as Nt, timerAt as O, hasCompleteCacheBreakdown as Oi, sandboxSessionTraceSource as On, promptControlProfileMaterialization as Or, meterUsageEvent as Ot, scopeRetainedOwnerPriorSpend as P, throwAbort as Pi, runAbortable as Pn, sandboxActProfileMaterialization as Pr, workerTraceEnv as Pt, teardownExecutor as Q, createOtelExporter as Qn, runtimeOwnedDriveHarnessProviderEvidence as Qr, bridgeAdmissionRefusal as Qt, workerInteractiveAdmissionFile as R, zeroSpend as Ri, startRetainedRunInEnvironment as Rn, isNoEntError as Rr, DEFAULT_STALL_AFTER_MS as Rt, restoreScopeOwnerAcceptedExecution as S, sandboxProgressEvents as Si, providerAsExecutor as Sn, AGENT_PROFILE_MATERIALIZATION_AXES as Sr, parseWorkerToolTraceArtifact as St, createWaitProbes as T, chargedTokens as Ti, sandboxClientAsProvider as Tn, defineProfileMaterializationContract as Tr, BudgetReconcileFault as Tt, reconnectRetainedInteractiveRun as U, abortError$2 as Ui, createPropagatingTraceEmitter as Un, attestRuntimeOwnedScopeOwner as Ur, DEFAULT_PEER_MAIL_LIMITS as Ut, workerInteractiveBindingFile as V, withBudgetResources as Vi, defaultRedactorIdentityMaterial as Vn, writeAllBytes as Vr, createInbox as Vt, recoverRetainedInteractiveRun as W, awaitAbortable$1 as Wi, mergeTraceEnv as Wn, authoredProfileDigest as Wr, PEER_MAIL_WIRE_KEY as Wt, rollingDispatch as X, buildRuntimeEventOtelSpans as Xn, providerAttemptEvidence as Xr, isLiveNodeStatus as Xt, queueOf as Y, buildLoopSpanNodes as Yn, newExecutionAttemptId as Yr, peerMailVerbNames as Yt, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Z, createOpenInferenceFileExporter as Zn, recordRuntimeOwnedDriveHarnessProviderEvidence as Zr, isTerminalNodeStatus as Zt, createScope as _, isSandboxTerminalEvent as _i, runBrainLoop as _n, LOCAL_HARNESSES as _r, pendingWaits as _t, pickBestDelivered as a, unknownMaterializationReceipt as ai, bridgeStopSignalKey as an, toOtelAttributes as ar, snapshotExecutorConfig as at, meterRuntimeOwnedProviderAttempt as b, notifySandboxEventObserver as bi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as bn, parseCodexTokenUsage as br, captureWorkerTraceEvidence as bt, DriverAttemptsExhaustedError as c, detachedFrozen as ci, defaultSelectWinner as cn, sanitizeAgentRuntimeEvent as cr, createSteerableSandboxSession as ct, runDriverWithRetry as d, readSandboxOutcome as di, createSandboxLineage as dn, runSettledCommand as dr, FileSpawnJournal as dt, runtimeOwnedExecutorMaterialization as ei, addHarnessUsage as en, flatOtelSpan as er, captureReusableExecutorConfig as et, driverChild as f, assertSandboxServedModel as fi, probeSandboxCapabilities as fn, runWorktreeHarness as fr, InMemoryResultBlobStore as ft, beginScopeOwnerAttempt as g, extractLlmCallEvent as gi, routerBrain as gn, DEFAULT_LOCAL_HARNESS as gr, materializeTreeView as gt, withDriverExecutor as h, createSandboxUsageLedger as hi, readPromptOptions as hn, removeWorktree as hr, loadSpawnForest as ht, collectDelivered as i, unknownExecutionBindingReceipt as ii, bridgeRuntimeAttachmentsKey as in, padTraceId as ir, createExecutorRegistry as it, consumeScopeRetainedOwnerResult as j, randomSuffix as ji, RunCancellationReason as jn, promptResourceProfileMaterialization as jr, spendFromUsageTotals as jt, validateWaitSpec as k, isAbortError$2 as ki, registerRetainedExecutorPreparation as kn, promptModelProfileMaterialization as kr, newUsageTotals as kt, classifyDriverFailure as l, detachedSnapshot as li, isTerminalDecision as ln, sanitizeKnowledgeReadinessReport as lr, createInPlaceCliExecutor as lt, isDriverSpec as m, createSandboxToolPartState as mi, assertBoxlessPromptOptions as mn, createWorktree as mr, insideCursorNamespace as mt, createSupervisor as n, runtimeOwnedPendingExecutorMaterialization as ni, harnessUsageIsEmpty as nn, loopEventToOtelSpan as nr, cliWorktreeExecutor as nt, runFinalizer as o, executableAgentProfileSnapshot as oi, TERMINAL_DECISIONS as on, createRuntimeEventCollector as or, createWorktreeCliExecutor as ot, driverExecutorFactory as p, canonicalStreamEventFromSandboxEvent as pi, acquireSandbox as pn, captureWorktreeDiff as pr, InMemorySpawnJournal as pt, effectiveConcurrency as q, providerMessageText as qi, INTELLIGENCE_WIRE_VERSION as qn, knownExecutionBindingReceipt as qr, isPeerMailEnvelope as qt, bestDelivered as r, runtimeOwnedScopeOwnerRuntime as ri, readCodexRolloutSession as rn, padSpanId as rr, createExecutor as rt, runTree as s, executableAgentSpecSnapshot as si, createSandboxForSpec as sn, createRuntimeStreamEventCollector as sr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as st, createRootHandle as t, runtimeOwnedExecutorProviderEvidence as ti, createCodexRolloutStoreReader as tn, generateSpanId as tr, cliInPlaceExecutor as tt, defaultUnmetContractSteer as u, projectSandboxOutcome as ui, runAgentRounds as un, sanitizeRuntimeStreamEvent as ur, FileResultBlobStore as ut, deriveNodeExecutionIdentity as v, mapSandboxEvent as vi, canonicalObservedModelParts as vn, harnessSupportsReasoningEffort as vr, replaySpawnTree as vt, settledToIteration as w, addSpend as wi, resolveAgentEnvironmentProvider as wn, controlProfileMaterialization as wr, contentAddress as wt, recordScopeOwnerMaterialization as x, sandboxEventServedBackend as xi, createAgentEnvironmentProviderRegistry as xn, CodexExecutionDiagnosticError as xr, isTraceAnalysisStore as xt, meterRuntimeOwnedAccounting as y, mapSandboxToolEvent as yi, observedModelMatchesDeclared as yn, localHarnessExecutable as yr, WORKER_TOOL_TRACE_SCHEMA_VERSION as yt, attachWorker as z, addResourceSpend as zi, retainedCreateMaterial as zn, parseCommittedJsonLines as zr, createActivityLog as zt };
 
-//# sourceMappingURL=supervisor-CuBPrwGp.js.map
+//# sourceMappingURL=supervisor-DBzsb6Qt.js.map