@tangle-network/agent-runtime 0.225.0 → 0.225.3

package/dist/mcp/index.js

@@ -1,14 +1,14 @@
-import { Di as deleteBoxSafe, Fi as throwIfAborted, Gn as readTraceContextFromEnv, Kn as traceContextToEnv, Mi as sleep, Pi as throwAbort, Un as createPropagatingTraceEmitter, Wn as mergeTraceEnv, _r as LOCAL_HARNESSES, br as parseCodexTokenUsage, fr as runWorktreeHarness, gr as DEFAULT_LOCAL_HARNESS, hr as removeWorktree, mn as assertBoxlessPromptOptions, mr as createWorktree, pr as captureWorktreeDiff, sn as createSandboxForSpec, un as runAgentRounds, vr as harnessSupportsReasoningEffort, xr as CodexExecutionDiagnosticError, yr as localHarnessExecutable } from "../supervisor-DBzsb6Qt.js";
+import { Ai as sleep, Hn as mergeTraceEnv, Mi as throwAbort, Ni as throwIfAborted, Ti as deleteBoxSafe, Un as readTraceContextFromEnv, Vn as createPropagatingTraceEmitter, Wn as traceContextToEnv, _r as localHarnessExecutable, an as createSandboxForSpec, cn as runAgentRounds, dr as captureWorktreeDiff, fn as assertBoxlessPromptOptions, fr as createWorktree, gr as harnessSupportsReasoningEffort, hr as LOCAL_HARNESSES, mr as DEFAULT_LOCAL_HARNESS, pr as removeWorktree, ur as runWorktreeHarness, vr as parseCodexTokenUsage, yr as CodexExecutionDiagnosticError } from "../supervisor-0ksHf44Z.js";
 import { i as ConfigError, m as ValidationError } from "../errors-DodWX-cb.js";
-import { t as assertExecutableAgentProfile } from "../model-policy-DKDyr-fc.js";
-import { E as runCoderChecks, ot as selectValidWinner } from "../runtime-CL6nVSEt.js";
+import { t as assertExecutableAgentProfile } from "../model-policy-BbSCSak0.js";
+import { E as runCoderChecks, ot as selectValidWinner } from "../runtime-BVV9PbmE.js";
 import { t as createStdioToolServer } from "../tool-server-BJbCPhoW.js";
-import { C as ANALYST_DEFINITION_BOUNDS, M as questionEscalationTargets, O as createCoordinationTools, T as analystToolGroupNames, j as parseAuthoredAnalystDefinition, k as downMessageRefusalReasons, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS } from "../coordination-driver-GFI-HzJX.js";
+import { C as ANALYST_DEFINITION_BOUNDS, M as questionEscalationTargets, O as createCoordinationTools, T as analystToolGroupNames, j as parseAuthoredAnalystDefinition, k as downMessageRefusalReasons, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS } from "../coordination-driver-DcwOMS5C.js";
 import { t as createKbGate } from "../kb-gate-DpaSwXVx.js";
 import { _ as InMemoryFeedbackStore, a as validateDelegationStatusArgs, c as DELEGATION_HISTORY_TOOL_NAME, d as delegationProfiles, f as DELEGATE_FEEDBACK_DESCRIPTION, g as validateDelegateFeedbackArgs, h as createDelegateFeedbackHandler, i as createDelegationStatusHandler, l as createDelegationHistoryHandler, m as DELEGATE_FEEDBACK_TOOL_NAME, n as DELEGATION_STATUS_INPUT_SCHEMA, o as DELEGATION_HISTORY_DESCRIPTION, p as DELEGATE_FEEDBACK_INPUT_SCHEMA, r as DELEGATION_STATUS_TOOL_NAME, s as DELEGATION_HISTORY_INPUT_SCHEMA, t as DELEGATION_STATUS_DESCRIPTION, u as validateDelegationHistoryArgs, v as eventToSnapshot } from "../delegation-status-CF4D0NZ_.js";
 import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "../openai-tools-DoQ32vpe.js";
 import { t as coderTaskToPrompt } from "../coder-yhVWbdWc.js";
-import { C as composeLoopTraceEmitters, S as capDelegationTrace, _ as FileDelegationStore, a as DELEGATE_UI_AUDIT_TOOL_NAME, b as DELEGATION_TRACE_MAX_SPANS, c as DELEGATE_DESCRIPTION, d as createDelegateHandler, f as validateDelegateArgs, g as DelegationStateCorruptError, h as DelegationPersistenceError, i as DELEGATE_UI_AUDIT_INPUT_SCHEMA, l as DELEGATE_INPUT_SCHEMA, m as hashIdempotencyInput, n as createMcpServer, o as createDelegateUiAuditHandler, p as DelegationTaskQueue, r as DELEGATE_UI_AUDIT_DESCRIPTION, s as validateDelegateUiAuditArgs, t as createInProcessTransport, u as DELEGATE_TOOL_NAME, v as InMemoryDelegationStore, w as createDelegationTraceCollector, x as buildDelegationTraceSpans, y as DELEGATION_TRACE_MAX_BYTES } from "../server-BWDo2UNM.js";
+import { C as composeLoopTraceEmitters, S as capDelegationTrace, _ as FileDelegationStore, a as DELEGATE_UI_AUDIT_TOOL_NAME, b as DELEGATION_TRACE_MAX_SPANS, c as DELEGATE_DESCRIPTION, d as createDelegateHandler, f as validateDelegateArgs, g as DelegationStateCorruptError, h as DelegationPersistenceError, i as DELEGATE_UI_AUDIT_INPUT_SCHEMA, l as DELEGATE_INPUT_SCHEMA, m as hashIdempotencyInput, n as createMcpServer, o as createDelegateUiAuditHandler, p as DelegationTaskQueue, r as DELEGATE_UI_AUDIT_DESCRIPTION, s as validateDelegateUiAuditArgs, t as createInProcessTransport, u as DELEGATE_TOOL_NAME, v as InMemoryDelegationStore, w as createDelegationTraceCollector, x as buildDelegationTraceSpans, y as DELEGATION_TRACE_MAX_BYTES } from "../server-Cf0_J9nZ.js";
 import { a as createMemoryToolServer, c as resolveMemoryFromEnv, i as MEMORY_NAME_ENV, n as MEMORY_ITEMS_ENV, o as parseMemoryItems, r as MEMORY_LOG_ENV, s as readMemoryItemsFile, t as MEMORY_FILE_ENV } from "../memory-server-BR310Weg.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";

package/dist/{model-policy-DKDyr-fc.js → model-policy-BbSCSak0.js}

@@ -53,7 +53,7 @@ function resolveRouterRetryPolicy(input, context) {
 	const maxAttempts = positiveInteger$1(policy.maxAttempts, 5, `${context}.maxAttempts`);
 	const initialBackoffMs = timerInteger(policy.initialBackoffMs, 1e3, `${context}.initialBackoffMs`);
 	const maxBackoffMs = timerInteger(policy.maxBackoffMs, 3e4, `${context}.maxBackoffMs`);
-	const requestTimeoutMs = timerInteger(policy.requestTimeoutMs, 0, `${context}.requestTimeoutMs`);
+	const requestTimeoutMs = timerInteger(policy.requestTimeoutMs, 0, `${context}.requestTimeoutMs`, Number.MAX_SAFE_INTEGER - Date.now());
 	const jitter = policy.jitter ?? .25;
 	if (typeof jitter !== "number" || !Number.isFinite(jitter) || jitter < 0 || jitter > 1) throw new ValidationError(`${context}.jitter must be a finite number from 0 through 1`);
 	const retryStatuses = parseRetryStatuses(policy.retryStatuses, context);
@@ -84,9 +84,9 @@ function positiveInteger$1(value, fallback, context) {
 	if (typeof parsed !== "number" || !Number.isSafeInteger(parsed) || parsed < 1) throw new ValidationError(`${context} must be a positive safe integer`);
 	return parsed;
 }
-function timerInteger(value, fallback, context) {
+function timerInteger(value, fallback, context, maximum = maximumTimerMs) {
 	const parsed = value ?? fallback;
-	if (typeof parsed !== "number" || !Number.isSafeInteger(parsed) || parsed < 0 || parsed > maximumTimerMs) throw new ValidationError(`${context} must be a nonnegative safe integer no greater than ${maximumTimerMs}`);
+	if (typeof parsed !== "number" || !Number.isSafeInteger(parsed) || parsed < 0 || parsed > maximum) throw new ValidationError(`${context} must be a nonnegative safe integer no greater than ${maximum}`);
 	return parsed;
 }
 //#endregion
@@ -300,4 +300,4 @@ function assertProfileModelsAllowed(profile, allowed) {
 //#endregion
 export { concreteProfileModel as a, profileModelExecutionSettings as c, agentHarness as d, harnessRunsAgent as f, concreteModelId as i, profileProviderModel as l, assertModelAllowed as n, enforceTokenLimits as o, assertProfileModelsAllowed as r, profileBridgeWireModel as s, assertExecutableAgentProfile as t, resolveRouterRetryPolicy as u };
 
-//# sourceMappingURL=model-policy-DKDyr-fc.js.map
+//# sourceMappingURL=model-policy-BbSCSak0.js.map

package/dist/model-policy-BbSCSak0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-policy-BbSCSak0.js","names":["positiveInteger"],"sources":["../src/runtime/harness-role.ts","../src/runtime/router-retry-policy.ts","../src/runtime/supervise/model-policy.ts"],"sourcesContent":["/**\n * Which `HarnessType` values name a real coding-agent runtime, and which name a MODE that has no\n * agent behind it.\n *\n * `cli-base` is the router-backed mode — a plain multi-turn router call with no coding-agent\n * harness (`@tangle-network/agent-interface`'s `HarnessType` doc, and the same table's\n * `harnessReasoningCeiling['cli-base'] = 'none'` commented \"cli-base has no agent\"). The\n * distinction is REAL; what was accidental is that three call sites each spelled the test\n * themselves, so a second no-agent mode would have to be remembered in three places.\n *\n * SHOULD UPSTREAM: this belongs next to `harnessHonorsEffort` in agent-interface's\n * `harness-capabilities.ts`, which already encodes the fact but exports no predicate for it.\n * Until it does, this is the one local copy — extend the set here, never re-test the name.\n */\n\nimport type { HarnessType } from '@tangle-network/agent-interface'\n\n/**\n * Harness ids that select a router/no-agent mode rather than a coding-agent runtime.\n *\n * `nanoclaw` is deliberately ABSENT: the shared capability table clamps its reasoning ceiling the\n * same way it clamps `cli-base`, but nanoclaw does run an agent (a socket-bridge runner to the\n * NanoClaw daemon) and every caller here treats it as a full harness. Add a row only with the\n * behavior change stated, never to make the two clamps look symmetric.\n */\nconst NO_AGENT_HARNESSES: ReadonlySet<string> = new Set<string>(['cli-base' satisfies HarnessType])\n\n/** Whether this profile harness selects a real coding-agent runtime (vs. the router/no-agent mode\n *  or no preference at all). Accepts the looser `string` some local profile shapes declare, and\n *  preserves the caller's own harness type when it is narrower. */\nexport function harnessRunsAgent<T extends string>(harness: T | null | undefined): harness is T {\n  return harness != null && !NO_AGENT_HARNESSES.has(harness)\n}\n\n/** The coding-agent harness this profile selects, or `undefined` when it selects none — the shape\n *  callers want when a no-agent mode must fall through to the router arm. */\nexport function agentHarness<T extends string>(harness: T | null | undefined): T | undefined {\n  return harnessRunsAgent(harness) ? harness : undefined\n}\n","import { ValidationError } from '../errors'\n\n/** Exact retry controls accepted at `AgentProfile.model.metadata.retry`. */\nexport interface RouterRetryPolicy {\n  /** Total attempts, including the first request. */\n  readonly maxAttempts?: number\n  /** Delay before the second attempt. Later delays grow exponentially. */\n  readonly initialBackoffMs?: number\n  /** Maximum delay between attempts. */\n  readonly maxBackoffMs?: number\n  /** Symmetric random variation around each delay, from 0 through 1. */\n  readonly jitter?: number\n  /** HTTP statuses that may be retried. */\n  readonly retryStatuses?: ReadonlyArray<number>\n  /** Deadline for receiving one attempt's response headers. Zero disables it. */\n  readonly requestTimeoutMs?: number\n}\n\nexport interface ResolvedRouterRetryPolicy {\n  readonly maxAttempts: number\n  readonly initialBackoffMs: number\n  readonly maxBackoffMs: number\n  readonly jitter: number\n  readonly retryStatuses: ReadonlyArray<number>\n  readonly requestTimeoutMs: number\n}\n\nconst maximumTimerMs = 2_147_483_647\nconst defaultRetryStatuses = Object.freeze([408, 425, 429, 500, 502, 503, 504, 520, 522, 524])\nconst retryPolicyKeys = new Set([\n  'initialBackoffMs',\n  'jitter',\n  'maxAttempts',\n  'maxBackoffMs',\n  'requestTimeoutMs',\n  'retryStatuses',\n])\n\n/** Parse untrusted profile/config data once and return an immutable complete policy. */\nexport function resolveRouterRetryPolicy(\n  input: unknown,\n  context: string,\n): ResolvedRouterRetryPolicy {\n  if (\n    input !== undefined &&\n    (typeof input !== 'object' || input === null || Array.isArray(input))\n  ) {\n    throw new ValidationError(`${context} must be an object`)\n  }\n  const policy = input === undefined ? {} : Object.fromEntries(Object.entries(input))\n  const unknown = Object.keys(policy).filter((key) => !retryPolicyKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(`${context} has unsupported fields: ${unknown.join(', ')}`)\n  }\n  const maxAttempts = positiveInteger(policy.maxAttempts, 5, `${context}.maxAttempts`)\n  const initialBackoffMs = timerInteger(\n    policy.initialBackoffMs,\n    1_000,\n    `${context}.initialBackoffMs`,\n  )\n  const maxBackoffMs = timerInteger(policy.maxBackoffMs, 30_000, `${context}.maxBackoffMs`)\n  const requestTimeoutMs = timerInteger(\n    policy.requestTimeoutMs,\n    0,\n    `${context}.requestTimeoutMs`,\n    Number.MAX_SAFE_INTEGER - Date.now(),\n  )\n  const jitter = policy.jitter ?? 0.25\n  if (typeof jitter !== 'number' || !Number.isFinite(jitter) || jitter < 0 || jitter > 1) {\n    throw new ValidationError(`${context}.jitter must be a finite number from 0 through 1`)\n  }\n  const retryStatuses = parseRetryStatuses(policy.retryStatuses, context)\n  return Object.freeze({\n    maxAttempts,\n    initialBackoffMs,\n    maxBackoffMs,\n    jitter,\n    retryStatuses,\n    requestTimeoutMs,\n  })\n}\n\nfunction parseRetryStatuses(value: unknown, context: string): ReadonlyArray<number> {\n  if (value === undefined) return defaultRetryStatuses\n  if (!Array.isArray(value)) {\n    throw new ValidationError(`${context}.retryStatuses must be an array of HTTP statuses`)\n  }\n  const statuses: number[] = []\n  const seen = new Set<number>()\n  for (const status of value) {\n    if (!Number.isSafeInteger(status) || status < 100 || status > 599) {\n      throw new ValidationError(\n        `${context}.retryStatuses must contain integer HTTP statuses from 100 through 599`,\n      )\n    }\n    if (seen.has(status)) {\n      throw new ValidationError(`${context}.retryStatuses must not contain duplicates`)\n    }\n    seen.add(status)\n    statuses.push(status)\n  }\n  return Object.freeze(statuses)\n}\n\nfunction positiveInteger(value: unknown, fallback: number, context: string): number {\n  const parsed = value ?? fallback\n  if (typeof parsed !== 'number' || !Number.isSafeInteger(parsed) || parsed < 1) {\n    throw new ValidationError(`${context} must be a positive safe integer`)\n  }\n  return parsed\n}\n\nfunction timerInteger(\n  value: unknown,\n  fallback: number,\n  context: string,\n  maximum = maximumTimerMs,\n): number {\n  const parsed = value ?? fallback\n  if (\n    typeof parsed !== 'number' ||\n    !Number.isSafeInteger(parsed) ||\n    parsed < 0 ||\n    parsed > maximum\n  ) {\n    throw new ValidationError(\n      `${context} must be a nonnegative safe integer no greater than ${maximum}`,\n    )\n  }\n  return parsed\n}\n","/**\n * `assertModelAllowed` — a fail-loud guard that restricts a run to a chosen subset of\n * models. The two front doors (`supervise()` / `improve()`) call it once per configured\n * model at resolve time, so a run that names a model outside the allowed set throws before\n * any compute is spent — never silently swapped or silently allowed.\n */\nimport { HARNESS_NATIVE_MODEL } from '@tangle-network/agent-eval'\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { ConfigError } from '../../errors'\nimport { agentHarness } from '../harness-role'\nimport { type ResolvedRouterRetryPolicy, resolveRouterRetryPolicy } from '../router-retry-policy'\n\n/**\n * Return the model id an executor may send to a provider.\n *\n * Eval stamps {@link HARNESS_NATIVE_MODEL} into a profile when model selection is deliberately\n * delegated to the configured runtime. That marker belongs in experiment identity and cost\n * admission; it is not a provider model id.\n */\nexport function concreteModelId(model: string | undefined): string | undefined {\n  if (model === undefined) return undefined\n  const id = model.trim()\n  return id.length > 0 && !isHarnessNativeModel(id) ? id : undefined\n}\n\n/** Whether a model value delegates selection to the chosen execution system. */\nexport function isHarnessNativeModel(model: string | undefined): boolean {\n  return model?.trim() === HARNESS_NATIVE_MODEL\n}\n\n/** Return a profile's explicitly selected provider model, if it has one. */\nexport function concreteProfileModel(profile: Pick<AgentProfile, 'model'>): string | undefined {\n  return concreteModelId(profile.model?.default)\n}\n\n/**\n * Return the model id for a direct provider request.\n *\n * A portable profile can qualify its model with the selected provider. The direct endpoint already\n * selects that provider, so remove only the exact matching prefix. Preserve every other prefix\n * because it can identify a provider-owned nested route, such as `anthropic/claude-sonnet`.\n */\nexport function profileProviderModel(profile: Pick<AgentProfile, 'model'>): string | undefined {\n  const model = concreteProfileModel(profile)\n  const provider = profile.model?.provider?.trim()\n  if (!model || !provider || !model.startsWith(`${provider}/`)) return model\n  return concreteModelId(model.slice(provider.length + 1))\n}\n\n/** The full cli-bridge wire id declared by a profile: harness/provider/model. */\nexport function profileBridgeWireModel(\n  profile: Pick<AgentProfile, 'harness' | 'model'>,\n): string | undefined {\n  const model = concreteProfileModel(profile)\n  const provider = profile.model?.provider\n  const harness = agentHarness(profile.harness)\n  const modelWithoutHarness =\n    model && harness && model.startsWith(`${harness}/`) ? model.slice(harness.length + 1) : model\n  const providerModel = modelWithoutHarness\n    ? provider && !modelWithoutHarness.startsWith(`${provider}/`)\n      ? `${provider}/${modelWithoutHarness}`\n      : modelWithoutHarness\n    : undefined\n  if (!harness) return providerModel\n  if (!providerModel) return harness\n  return providerModel.startsWith(`${harness}/`) ? providerModel : `${harness}/${providerModel}`\n}\n\n/**\n * Refuse an incomplete execution identity before any backend may fill it from ambient config.\n * `AgentProfile` is the sole behavioral authority: harness, provider, and concrete model all\n * participate in its digest. Eval's runtime-selected marker is a matrix-planning value, never an\n * executable model.\n */\nexport function assertExecutableAgentProfile(profile: AgentProfile, context: string): void {\n  if (profile.harness === undefined) {\n    throw new ConfigError(`${context}: AgentProfile.harness must be explicit before execution`)\n  }\n  const declared = profile.model?.default\n  const model = concreteModelId(declared)\n  if (!model) {\n    const reason = isHarnessNativeModel(declared) ? 'runtime-selected' : 'missing'\n    throw new ConfigError(\n      `${context}: AgentProfile.model.default is ${reason}; execution requires a concrete model`,\n    )\n  }\n  if (!profile.model?.provider?.trim()) {\n    throw new ConfigError(\n      `${context}: AgentProfile.model.provider must be explicit before execution`,\n    )\n  }\n}\n\n/**\n * Separate completion ceilings an exact profile may request.\n *\n * They are distinct because providers do not share one meaning for a single number: measured\n * through the Tangle Router on 2026-08-10, `glm-5.2` accepted `max_tokens: 8` and still billed 135\n * completion tokens — 132 reasoning, 3 visible — while `max_completion_tokens: 256` bounded the\n * total. A path that cannot enforce a requested ceiling refuses the run instead of sending a\n * number that means something else there.\n */\nexport interface ProfileTokenLimits {\n  /** Visible answer tokens, from `AgentProfile.model.maxVisibleOutputTokens`. */\n  readonly visible?: number\n  /** Hidden reasoning tokens, from `AgentProfile.model.maxReasoningTokens`. */\n  readonly reasoning?: number\n  /** Visible and reasoning tokens together, from `AgentProfile.model.maxTotalOutputTokens`. */\n  readonly total?: number\n}\n\n/** The ceilings one execution path actually sends, in the request fields it sends them as. */\nexport interface AppliedTokenLimits {\n  /** Sent as `max_tokens`. */\n  readonly maxTokens?: number\n  /** Sent as `max_completion_tokens`. */\n  readonly maxCompletionTokens?: number\n}\n\n/** What a path was asked to enforce and what it sent, for the execution receipt. */\nexport interface TokenLimitDecision {\n  readonly requested: ProfileTokenLimits\n  readonly applied: AppliedTokenLimits\n}\n\n/** The execution paths that lower a profile into a provider request. */\nexport type ModelExecutionPath = 'router' | 'bridge' | 'sandbox' | 'provider'\n\n/** Generation and loop controls that may affect one model execution. */\nexport interface ProfileModelExecutionSettings {\n  readonly temperature?: number\n  /** Completion ceilings the profile requested. Empty when it requested none. */\n  readonly tokenLimits: ProfileTokenLimits\n  readonly retry?: ResolvedRouterRetryPolicy\n  readonly seed?: number\n  readonly toolChoice?: 'auto' | 'required' | 'none'\n  readonly extraBody?: Readonly<Record<string, unknown>>\n  /** Zero means no turn-count cap; conserved budgets and deadlines still apply. */\n  readonly maxTurns?: number\n  readonly stream?: boolean\n}\n\nconst PROFILE_MODEL_METADATA_KEYS = new Set([\n  'extraBody',\n  'maxTurns',\n  'retry',\n  'seed',\n  'stream',\n  'temperature',\n  'toolChoice',\n])\n\n/**\n * Read every Router-affecting control from the exact profile and reject unknown controls.\n * Backends receive endpoint/auth and executable ports only; they cannot silently alter behavior.\n */\nexport function profileModelExecutionSettings(\n  profile: Pick<AgentProfile, 'model'>,\n  context: string,\n): ProfileModelExecutionSettings {\n  const metadata = profile.model?.metadata ?? {}\n  if (metadata.maxTokens !== undefined) {\n    throw new ConfigError(\n      `${context}: AgentProfile.model.metadata.maxTokens is ambiguous across providers; declare AgentProfile.model.maxVisibleOutputTokens, maxReasoningTokens, or maxTotalOutputTokens instead`,\n    )\n  }\n  const unknown = Object.keys(metadata).filter((key) => !PROFILE_MODEL_METADATA_KEYS.has(key))\n  if (unknown.length > 0) {\n    throw new ConfigError(\n      `${context}: unsupported AgentProfile.model.metadata fields: ${unknown.join(', ')}`,\n    )\n  }\n  const temperature = finiteNumber(metadata.temperature, `${context}: temperature`)\n  const tokenLimits = profileTokenLimits(profile, context)\n  const retryInput = metadata.retry\n  const retry =\n    retryInput === undefined\n      ? undefined\n      : resolveRouterRetryPolicy(retryInput, `${context}: AgentProfile.model.metadata.retry`)\n  const seed = safeInteger(metadata.seed, `${context}: seed`)\n  const maxTurns = nonnegativeInteger(metadata.maxTurns, `${context}: maxTurns`)\n  const stream = optionalBoolean(metadata.stream, `${context}: stream`)\n  const toolChoice = metadata.toolChoice\n  if (\n    toolChoice !== undefined &&\n    toolChoice !== 'auto' &&\n    toolChoice !== 'required' &&\n    toolChoice !== 'none'\n  ) {\n    throw new ConfigError(`${context}: toolChoice must be auto, required, or none`)\n  }\n  const extraBody = metadata.extraBody\n  if (\n    extraBody !== undefined &&\n    (typeof extraBody !== 'object' || extraBody === null || Array.isArray(extraBody))\n  ) {\n    throw new ConfigError(`${context}: extraBody must be an object`)\n  }\n  return {\n    ...(temperature !== undefined ? { temperature } : {}),\n    tokenLimits,\n    ...(retry !== undefined ? { retry } : {}),\n    ...(seed !== undefined ? { seed } : {}),\n    ...(toolChoice !== undefined ? { toolChoice } : {}),\n    ...(extraBody !== undefined\n      ? { extraBody: Object.freeze({ ...(extraBody as Record<string, unknown>) }) }\n      : {}),\n    ...(maxTurns !== undefined ? { maxTurns } : {}),\n    ...(stream !== undefined ? { stream } : {}),\n  }\n}\n\n/**\n * Read the completion ceilings an exact profile declares. The Interface schema already refines\n * these fields, but a profile can reach an executor without a parse, so the same rules are\n * enforced here: positive integers, and no single ceiling above the total.\n */\nexport function profileTokenLimits(\n  profile: Pick<AgentProfile, 'model'>,\n  context: string,\n): ProfileTokenLimits {\n  const model = profile.model\n  const visible = positiveInteger(\n    model?.maxVisibleOutputTokens,\n    `${context}: maxVisibleOutputTokens`,\n  )\n  const reasoning = positiveInteger(model?.maxReasoningTokens, `${context}: maxReasoningTokens`)\n  const total = positiveInteger(model?.maxTotalOutputTokens, `${context}: maxTotalOutputTokens`)\n  if (total !== undefined) {\n    for (const [name, value] of [\n      ['maxVisibleOutputTokens', visible],\n      ['maxReasoningTokens', reasoning],\n    ] as const) {\n      if (value !== undefined && value > total) {\n        throw new ConfigError(\n          `${context}: AgentProfile.model.${name} (${value}) exceeds maxTotalOutputTokens (${total})`,\n        )\n      }\n    }\n  }\n  return {\n    ...(visible !== undefined ? { visible } : {}),\n    ...(reasoning !== undefined ? { reasoning } : {}),\n    ...(total !== undefined ? { total } : {}),\n  }\n}\n\n/**\n * Lower the requested ceilings onto one execution path, or refuse the run before any paid\n * transport.\n *\n * - Router and OpenAI-compatible routes send the visible ceiling as `max_tokens` and the total as\n *   `max_completion_tokens`.\n * - The CLI Bridge lowers ONE completion cap into the run's model catalog, so it carries the total\n *   as `max_tokens` and cannot bound the visible half on its own.\n * - The Sandbox and environment-provider paths expose no completion cap at all.\n * - No route publishes a reasoning-token budget, so a reasoning ceiling is refused everywhere.\n *   `AgentProfile.model.reasoningEffort` is an intensity dial, not a token bound.\n */\nexport function enforceTokenLimits(\n  limits: ProfileTokenLimits,\n  path: ModelExecutionPath,\n  context: string,\n): TokenLimitDecision {\n  const refuse = (field: string, reason: string): never => {\n    throw new ConfigError(\n      `${context}: AgentProfile.model.${field} cannot be enforced on the ${path} path (${reason}); remove the ceiling or select a path that enforces it`,\n    )\n  }\n  if (limits.reasoning !== undefined) {\n    refuse('maxReasoningTokens', 'no route exposes a reasoning-token budget')\n  }\n  if (path === 'router') {\n    return {\n      requested: limits,\n      applied: {\n        ...(limits.visible !== undefined ? { maxTokens: limits.visible } : {}),\n        ...(limits.total !== undefined ? { maxCompletionTokens: limits.total } : {}),\n      },\n    }\n  }\n  if (path === 'bridge') {\n    if (limits.visible !== undefined) {\n      refuse('maxVisibleOutputTokens', 'the bridge lowers one completion cap covering both halves')\n    }\n    return {\n      requested: limits,\n      applied: {\n        ...(limits.total !== undefined ? { maxTokens: limits.total } : {}),\n      },\n    }\n  }\n  if (limits.visible !== undefined) refuse('maxVisibleOutputTokens', 'the backend accepts no cap')\n  if (limits.total !== undefined) refuse('maxTotalOutputTokens', 'the backend accepts no cap')\n  return { requested: limits, applied: {} }\n}\n\n/** The receipt form of one path's ceilings: what was asked for, and what was sent. */\nexport function tokenLimitReceipt(decision: TokenLimitDecision): {\n  readonly requested: ProfileTokenLimits\n  readonly applied: AppliedTokenLimits\n} {\n  return { requested: decision.requested, applied: decision.applied }\n}\n\nfunction finiteNumber(value: unknown, context: string): number | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    throw new ConfigError(`${context} must be a finite number`)\n  }\n  return value\n}\n\nfunction safeInteger(value: unknown, context: string): number | undefined {\n  if (value === undefined) return undefined\n  if (!Number.isSafeInteger(value)) throw new ConfigError(`${context} must be a safe integer`)\n  return value as number\n}\n\nfunction positiveInteger(value: unknown, context: string): number | undefined {\n  const parsed = safeInteger(value, context)\n  if (parsed !== undefined && parsed < 1) {\n    throw new ConfigError(`${context} must be positive`)\n  }\n  return parsed\n}\n\nfunction nonnegativeInteger(value: unknown, context: string): number | undefined {\n  const parsed = safeInteger(value, context)\n  if (parsed !== undefined && parsed < 0) {\n    throw new ConfigError(`${context} must be nonnegative`)\n  }\n  return parsed\n}\n\nfunction optionalBoolean(value: unknown, context: string): boolean | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'boolean') throw new ConfigError(`${context} must be boolean`)\n  return value\n}\n\n/**\n * Throw a `ConfigError` when `allowed` is set, `model` is defined, and `model` is not a\n * member of `allowed`. No-op when `allowed` is unset (the unrestricted default) or when\n * `model` is undefined (nothing was configured to check).\n */\nexport function assertModelAllowed(\n  model: string | undefined,\n  allowed: readonly string[] | undefined,\n): void {\n  if (!allowed || model === undefined) return\n  if (!allowed.includes(model)) {\n    throw new ConfigError(\n      `model ${JSON.stringify(model)} is not in the allowed set ${JSON.stringify([...allowed])}`,\n    )\n  }\n}\n\n/** Check every canonical model-bearing field in a complete profile, including the models a\n * backend may select for cheap work, named subagents, or modes.\n *\n * Every compared value is a bare model id. The composed `harness/provider/model` wire id\n * (`profileBridgeWireModel`) is neither built nor compared here, so this admits any route that\n * declares an allowed id, and a qualified entry in `allowed` matches nothing. Route pinning\n * belongs to `SuperviseOptions.authorizeSpawn`. */\nexport function assertProfileModelsAllowed(\n  profile: AgentProfile,\n  allowed: readonly string[] | undefined,\n): void {\n  assertModelAllowed(profile.model?.default, allowed)\n  assertModelAllowed(profile.model?.small, allowed)\n  for (const subagent of Object.values(profile.subagents ?? {})) {\n    assertModelAllowed(subagent.model, allowed)\n  }\n  for (const mode of Object.values(profile.modes ?? {})) {\n    assertModelAllowed(mode.model, allowed)\n  }\n}\n"],"mappings":";;;;;;;;;;;AAyBA,MAAM,qCAA0C,IAAI,IAAY,CAAC,UAAgC,CAAC;;;;AAKlG,SAAgB,iBAAmC,SAA6C;CAC9F,OAAO,WAAW,QAAQ,CAAC,mBAAmB,IAAI,OAAO;AAC3D;;;AAIA,SAAgB,aAA+B,SAA8C;CAC3F,OAAO,iBAAiB,OAAO,IAAI,UAAU,KAAA;AAC/C;;;ACXA,MAAM,iBAAiB;AACvB,MAAM,uBAAuB,OAAO,OAAO;CAAC;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC7F,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,SAAgB,yBACd,OACA,SAC2B;CAC3B,IACE,UAAU,KAAA,MACT,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,IAEnE,MAAM,IAAI,gBAAgB,GAAG,QAAQ,mBAAmB;CAE1D,MAAM,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC;CAClF,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC7E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,2BAA2B,QAAQ,KAAK,IAAI,GAAG;CAEtF,MAAM,cAAcA,kBAAgB,OAAO,aAAa,GAAG,GAAG,QAAQ,aAAa;CACnF,MAAM,mBAAmB,aACvB,OAAO,kBACP,KACA,GAAG,QAAQ,kBACb;CACA,MAAM,eAAe,aAAa,OAAO,cAAc,KAAQ,GAAG,QAAQ,cAAc;CACxF,MAAM,mBAAmB,aACvB,OAAO,kBACP,GACA,GAAG,QAAQ,oBACX,OAAO,mBAAmB,KAAK,IAAI,CACrC;CACA,MAAM,SAAS,OAAO,UAAU;CAChC,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,KAAK,SAAS,GACnF,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iDAAiD;CAExF,MAAM,gBAAgB,mBAAmB,OAAO,eAAe,OAAO;CACtE,OAAO,OAAO,OAAO;EACnB;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAgB,SAAwC;CAClF,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iDAAiD;CAExF,MAAM,WAAqB,CAAC;CAC5B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,UAAU,OAAO;EAC1B,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,OAAO,SAAS,KAC5D,MAAM,IAAI,gBACR,GAAG,QAAQ,uEACb;EAEF,IAAI,KAAK,IAAI,MAAM,GACjB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,2CAA2C;EAElF,KAAK,IAAI,MAAM;EACf,SAAS,KAAK,MAAM;CACtB;CACA,OAAO,OAAO,OAAO,QAAQ;AAC/B;AAEA,SAASA,kBAAgB,OAAgB,UAAkB,SAAyB;CAClF,MAAM,SAAS,SAAS;CACxB,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAC1E,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iCAAiC;CAExE,OAAO;AACT;AAEA,SAAS,aACP,OACA,UACA,SACA,UAAU,gBACF;CACR,MAAM,SAAS,SAAS;CACxB,IACE,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAS,SAET,MAAM,IAAI,gBACR,GAAG,QAAQ,sDAAsD,SACnE;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;AC/GA,SAAgB,gBAAgB,OAA+C;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,KAAK,MAAM,KAAK;CACtB,OAAO,GAAG,SAAS,KAAK,CAAC,qBAAqB,EAAE,IAAI,KAAK,KAAA;AAC3D;;AAGA,SAAgB,qBAAqB,OAAoC;CACvE,OAAO,OAAO,KAAK,MAAM;AAC3B;;AAGA,SAAgB,qBAAqB,SAA0D;CAC7F,OAAO,gBAAgB,QAAQ,OAAO,OAAO;AAC/C;;;;;;;;AASA,SAAgB,qBAAqB,SAA0D;CAC7F,MAAM,QAAQ,qBAAqB,OAAO;CAC1C,MAAM,WAAW,QAAQ,OAAO,UAAU,KAAK;CAC/C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,WAAW,GAAG,SAAS,EAAE,GAAG,OAAO;CACrE,OAAO,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC,CAAC;AACzD;;AAGA,SAAgB,uBACd,SACoB;CACpB,MAAM,QAAQ,qBAAqB,OAAO;CAC1C,MAAM,WAAW,QAAQ,OAAO;CAChC,MAAM,UAAU,aAAa,QAAQ,OAAO;CAC5C,MAAM,sBACJ,SAAS,WAAW,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,MAAM,MAAM,QAAQ,SAAS,CAAC,IAAI;CAC1F,MAAM,gBAAgB,sBAClB,YAAY,CAAC,oBAAoB,WAAW,GAAG,SAAS,EAAE,IACxD,GAAG,SAAS,GAAG,wBACf,sBACF,KAAA;CACJ,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,CAAC,eAAe,OAAO;CAC3B,OAAO,cAAc,WAAW,GAAG,QAAQ,EAAE,IAAI,gBAAgB,GAAG,QAAQ,GAAG;AACjF;;;;;;;AAQA,SAAgB,6BAA6B,SAAuB,SAAuB;CACzF,IAAI,QAAQ,YAAY,KAAA,GACtB,MAAM,IAAI,YAAY,GAAG,QAAQ,yDAAyD;CAE5F,MAAM,WAAW,QAAQ,OAAO;CAEhC,IAAI,CADU,gBAAgB,QACrB,GAEP,MAAM,IAAI,YACR,GAAG,QAAQ,kCAFE,qBAAqB,QAAQ,IAAI,qBAAqB,UAEf,sCACtD;CAEF,IAAI,CAAC,QAAQ,OAAO,UAAU,KAAK,GACjC,MAAM,IAAI,YACR,GAAG,QAAQ,gEACb;AAEJ;AAmDA,MAAM,8CAA8B,IAAI,IAAI;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;AAMD,SAAgB,8BACd,SACA,SAC+B;CAC/B,MAAM,WAAW,QAAQ,OAAO,YAAY,CAAC;CAC7C,IAAI,SAAS,cAAc,KAAA,GACzB,MAAM,IAAI,YACR,GAAG,QAAQ,8KACb;CAEF,MAAM,UAAU,OAAO,KAAK,QAAQ,CAAC,CAAC,QAAQ,QAAQ,CAAC,4BAA4B,IAAI,GAAG,CAAC;CAC3F,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,YACR,GAAG,QAAQ,oDAAoD,QAAQ,KAAK,IAAI,GAClF;CAEF,MAAM,cAAc,aAAa,SAAS,aAAa,GAAG,QAAQ,cAAc;CAChF,MAAM,cAAc,mBAAmB,SAAS,OAAO;CACvD,MAAM,aAAa,SAAS;CAC5B,MAAM,QACJ,eAAe,KAAA,IACX,KAAA,IACA,yBAAyB,YAAY,GAAG,QAAQ,oCAAoC;CAC1F,MAAM,OAAO,YAAY,SAAS,MAAM,GAAG,QAAQ,OAAO;CAC1D,MAAM,WAAW,mBAAmB,SAAS,UAAU,GAAG,QAAQ,WAAW;CAC7E,MAAM,SAAS,gBAAgB,SAAS,QAAQ,GAAG,QAAQ,SAAS;CACpE,MAAM,aAAa,SAAS;CAC5B,IACE,eAAe,KAAA,KACf,eAAe,UACf,eAAe,cACf,eAAe,QAEf,MAAM,IAAI,YAAY,GAAG,QAAQ,6CAA6C;CAEhF,MAAM,YAAY,SAAS;CAC3B,IACE,cAAc,KAAA,MACb,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,IAE/E,MAAM,IAAI,YAAY,GAAG,QAAQ,8BAA8B;CAEjE,OAAO;EACL,GAAI,gBAAgB,KAAA,IAAY,EAAE,YAAY,IAAI,CAAC;EACnD;EACA,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;EACvC,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACrC,GAAI,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC;EACjD,GAAI,cAAc,KAAA,IACd,EAAE,WAAW,OAAO,OAAO,EAAE,GAAI,UAAsC,CAAC,EAAE,IAC1E,CAAC;EACL,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;EAC7C,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;CAC3C;AACF;;;;;;AAOA,SAAgB,mBACd,SACA,SACoB;CACpB,MAAM,QAAQ,QAAQ;CACtB,MAAM,UAAU,gBACd,OAAO,wBACP,GAAG,QAAQ,yBACb;CACA,MAAM,YAAY,gBAAgB,OAAO,oBAAoB,GAAG,QAAQ,qBAAqB;CAC7F,MAAM,QAAQ,gBAAgB,OAAO,sBAAsB,GAAG,QAAQ,uBAAuB;CAC7F,IAAI,UAAU,KAAA,GACP;OAAA,MAAM,CAAC,MAAM,UAAU,CAC1B,CAAC,0BAA0B,OAAO,GAClC,CAAC,sBAAsB,SAAS,CAClC,GACE,IAAI,UAAU,KAAA,KAAa,QAAQ,OACjC,MAAM,IAAI,YACR,GAAG,QAAQ,uBAAuB,KAAK,IAAI,MAAM,kCAAkC,MAAM,EAC3F;CAAA;CAIN,OAAO;EACL,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;EAC3C,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;EAC/C,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;CACzC;AACF;;;;;;;;;;;;;AAcA,SAAgB,mBACd,QACA,MACA,SACoB;CACpB,MAAM,UAAU,OAAe,WAA0B;EACvD,MAAM,IAAI,YACR,GAAG,QAAQ,uBAAuB,MAAM,6BAA6B,KAAK,SAAS,OAAO,wDAC5F;CACF;CACA,IAAI,OAAO,cAAc,KAAA,GACvB,OAAO,sBAAsB,2CAA2C;CAE1E,IAAI,SAAS,UACX,OAAO;EACL,WAAW;EACX,SAAS;GACP,GAAI,OAAO,YAAY,KAAA,IAAY,EAAE,WAAW,OAAO,QAAQ,IAAI,CAAC;GACpE,GAAI,OAAO,UAAU,KAAA,IAAY,EAAE,qBAAqB,OAAO,MAAM,IAAI,CAAC;EAC5E;CACF;CAEF,IAAI,SAAS,UAAU;EACrB,IAAI,OAAO,YAAY,KAAA,GACrB,OAAO,0BAA0B,2DAA2D;EAE9F,OAAO;GACL,WAAW;GACX,SAAS,EACP,GAAI,OAAO,UAAU,KAAA,IAAY,EAAE,WAAW,OAAO,MAAM,IAAI,CAAC,EAClE;EACF;CACF;CACA,IAAI,OAAO,YAAY,KAAA,GAAW,OAAO,0BAA0B,4BAA4B;CAC/F,IAAI,OAAO,UAAU,KAAA,GAAW,OAAO,wBAAwB,4BAA4B;CAC3F,OAAO;EAAE,WAAW;EAAQ,SAAS,CAAC;CAAE;AAC1C;AAUA,SAAS,aAAa,OAAgB,SAAqC;CACzE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,YAAY,GAAG,QAAQ,yBAAyB;CAE5D,OAAO;AACT;AAEA,SAAS,YAAY,OAAgB,SAAqC;CACxE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,OAAO,cAAc,KAAK,GAAG,MAAM,IAAI,YAAY,GAAG,QAAQ,wBAAwB;CAC3F,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAgB,SAAqC;CAC5E,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,IAAI,WAAW,KAAA,KAAa,SAAS,GACnC,MAAM,IAAI,YAAY,GAAG,QAAQ,kBAAkB;CAErD,OAAO;AACT;AAEA,SAAS,mBAAmB,OAAgB,SAAqC;CAC/E,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,IAAI,WAAW,KAAA,KAAa,SAAS,GACnC,MAAM,IAAI,YAAY,GAAG,QAAQ,qBAAqB;CAExD,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAgB,SAAsC;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,WAAW,MAAM,IAAI,YAAY,GAAG,QAAQ,iBAAiB;CAClF,OAAO;AACT;;;;;;AAOA,SAAgB,mBACd,OACA,SACM;CACN,IAAI,CAAC,WAAW,UAAU,KAAA,GAAW;CACrC,IAAI,CAAC,QAAQ,SAAS,KAAK,GACzB,MAAM,IAAI,YACR,SAAS,KAAK,UAAU,KAAK,EAAE,6BAA6B,KAAK,UAAU,CAAC,GAAG,OAAO,CAAC,GACzF;AAEJ;;;;;;;;AASA,SAAgB,2BACd,SACA,SACM;CACN,mBAAmB,QAAQ,OAAO,SAAS,OAAO;CAClD,mBAAmB,QAAQ,OAAO,OAAO,OAAO;CAChD,KAAK,MAAM,YAAY,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,GAC1D,mBAAmB,SAAS,OAAO,OAAO;CAE5C,KAAK,MAAM,QAAQ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,GAClD,mBAAmB,KAAK,OAAO,OAAO;AAE1C"}

package/dist/profiles.js

@@ -1,5 +1,5 @@
 import { i as ConfigError } from "./errors-DodWX-cb.js";
-import { t as assertExecutableAgentProfile } from "./model-policy-DKDyr-fc.js";
+import { t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { n as UI_LENSES, t as UI_FINDING_SEVERITIES } from "./substrate-B0TYNrXn.js";
 import { t as coderTaskToPrompt } from "./coder-yhVWbdWc.js";
 import { agentProfileSchema } from "@tangle-network/agent-interface";

package/dist/{provision-supervisor-DD9Xc1as.js → provision-supervisor-ChEnL5xX.js}

@@ -1,7 +1,7 @@
-import { B as readWorkerInteractiveBinding, G as startRetainedInteractiveRun, Gr as finalizeRuntimeOwnedPendingExecutor, Hr as attestRuntimeOwnedPendingExecutor, I as interactiveAdmissionSeamKey, K as destroyInteractiveEnvironment, Lt as taskToPrompt, Mn as abortError$1, Nn as linkAbort, Tn as sandboxClientAsProvider, Ui as abortError, Vt as createInbox, Yr as newExecutionAttemptId, li as detachedSnapshot, n as createSupervisor, oi as executableAgentProfileSnapshot, t as createRootHandle, wt as contentAddress, zn as retainedCreateMaterial } from "./supervisor-DBzsb6Qt.js";
-import { a as concreteProfileModel } from "./model-policy-DKDyr-fc.js";
+import { Ai as sleep, An as abortError$1, B as readWorkerInteractiveBinding, Br as attestRuntimeOwnedPendingExecutor, Cn as sandboxClientAsProvider, Ft as taskToPrompt, G as startRetainedInteractiveRun, I as interactiveAdmissionSeamKey, K as destroyInteractiveEnvironment, Ln as retainedCreateMaterial, St as contentAddress, Ur as finalizeRuntimeOwnedPendingExecutor, Vi as abortError, Wi as armDeadlineTimer, ii as executableAgentProfileSnapshot, jn as linkAbort, n as createSupervisor, qr as newExecutionAttemptId, si as detachedSnapshot, t as createRootHandle, zt as createInbox } from "./supervisor-0ksHf44Z.js";
+import { a as concreteProfileModel } from "./model-policy-BbSCSak0.js";
 import { i as writeAtomicDurableFile } from "./durable-file-D24y9zg7.js";
-import { O as createCoordinationTools, n as createSteerAcknowledger, t as createCancelAcknowledger, v as createFileRunContext } from "./coordination-driver-GFI-HzJX.js";
+import { O as createCoordinationTools, n as createSteerAcknowledger, t as createCancelAcknowledger, v as createFileRunContext } from "./coordination-driver-DcwOMS5C.js";
 import { h as supervisorRunDir } from "./run-layout-hZREkcfu.js";
 import { agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopRequestDigest, agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
@@ -562,29 +562,6 @@ async function safeStatus(handle) {
 		if (timer !== void 0) clearTimeout(timer);
 	}
 }
-async function sleep(ms, signal) {
-	await new Promise((resolve) => {
-		if (signal?.aborted) {
-			resolve();
-			return;
-		}
-		let settled = false;
-		const onAbort = () => {
-			if (settled) return;
-			settled = true;
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", onAbort);
-			resolve();
-		};
-		const timer = setTimeout(() => {
-			if (settled) return;
-			settled = true;
-			signal?.removeEventListener("abort", onAbort);
-			resolve();
-		}, Math.max(0, ms));
-		signal?.addEventListener("abort", onAbort, { once: true });
-	});
-}
 //#endregion
 //#region src/runtime/supervise/provision-supervisor.ts
 /**
@@ -956,22 +933,18 @@ async function pollUntil(read, run, pollMs) {
 }
 async function withTimeout(promise, timeoutMs, label) {
 	if (timeoutMs === void 0) return await promise;
-	let timer;
+	let clearTimer;
 	const timeout = new Promise((_resolve, reject) => {
-		timer = setTimeout(() => reject(unavailable(`Runtime supervisor timed out waiting for ${label}`)), timeoutMs);
-		if (typeof timer.unref === "function") timer.unref();
+		clearTimer = armDeadlineTimer(timeoutMs, () => reject(unavailable(`Runtime supervisor timed out waiting for ${label}`)));
 	});
 	try {
 		return await Promise.race([promise, timeout]);
 	} finally {
-		if (timer !== void 0) clearTimeout(timer);
+		clearTimer?.();
 	}
 }
 function delay(ms, keepAlive = false) {
-	return new Promise((resolveDelay) => {
-		const timer = setTimeout(resolveDelay, ms);
-		if (!keepAlive && typeof timer.unref === "function") timer.unref();
-	});
+	return sleep(ms, void 0, keepAlive);
 }
 function updateStateFromResult(state, result) {
 	state.status = result.kind === "winner" ? "done" : result.reason === "cancelled" ? "cancelled" : "down";
@@ -1035,4 +1008,4 @@ function writeState(path, state) {
 //#endregion
 export { workerFromInteractiveProvider as n, claimRetainedInteractiveControl as r, provisionSupervisor as t };
 
-//# sourceMappingURL=provision-supervisor-DD9Xc1as.js.map
+//# sourceMappingURL=provision-supervisor-ChEnL5xX.js.map

package/dist/provision-supervisor-ChEnL5xX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-supervisor-ChEnL5xX.js","names":["abortError"],"sources":["../src/runtime/retained-interactive-control.ts","../src/runtime/supervise/interactive-worker.ts","../src/runtime/supervise/provision-supervisor.ts"],"sourcesContent":["import type { AgentInteractiveSessionControlClaim } from '@tangle-network/agent-interface'\nimport {\n  agentInteractiveSessionControlClaimRequestDigest,\n  canonicalCandidateDigest,\n} from '@tangle-network/agent-interface'\nimport type { RetainedInteractiveRunHandle } from './retained-interactive-types'\nimport { abortError } from './retained-run-binding'\n\nconst MAX_GENERATION_CONFLICTS = 8\n\n/** Input for acquiring write authority over one exact interactive process. @stable */\nexport interface ClaimRetainedInteractiveControlOptions {\n  readonly handle: RetainedInteractiveRunHandle\n  readonly holderId: string\n  /** Last known provider generation. Zero discovers the current generation safely. */\n  readonly expectedGeneration?: number\n  readonly signal?: AbortSignal\n}\n\n/**\n * Acquire provider-issued write authority without reading authority from status.\n *\n * A new coordinator starts at generation zero. If another claim already exists,\n * the provider returns its public generation and this helper retries one new\n * compare-and-swap operation. Every generation has a deterministic operation\n * identifier, so retrying after an ambiguous response cannot create two claims.\n * @stable\n */\nexport async function claimRetainedInteractiveControl(\n  options: ClaimRetainedInteractiveControlOptions,\n): Promise<AgentInteractiveSessionControlClaim> {\n  const expected = options.expectedGeneration ?? 0\n  if (!Number.isSafeInteger(expected) || expected < 0) {\n    throw new Error('interactive control expectedGeneration must be a non-negative integer')\n  }\n\n  let generation = expected\n  for (let conflict = 0; conflict <= MAX_GENERATION_CONFLICTS; conflict += 1) {\n    if (options.signal?.aborted) throw abortError(options.signal.reason)\n    const material = {\n      operationId: controlClaimOperationId(options.handle, options.holderId, generation),\n      ref: options.handle.ref,\n      holderId: options.holderId,\n      expectedGeneration: generation,\n    }\n    const acknowledgement = await options.handle.claimControl(\n      {\n        ...material,\n        requestDigest: agentInteractiveSessionControlClaimRequestDigest(material),\n      },\n      options.signal === undefined ? undefined : { signal: options.signal },\n    )\n    if (acknowledgement.status === 'accepted' || acknowledgement.status === 'replayed') {\n      const control = acknowledgement.control\n      if (control === undefined) {\n        throw new Error('provider accepted interactive control without returning its claim')\n      }\n      if (Date.parse(control.expiresAt) <= Date.now()) {\n        throw new Error('provider returned an expired interactive control claim')\n      }\n      return control\n    }\n    if (\n      acknowledgement.status !== 'conflict' ||\n      acknowledgement.conflictReason !== 'generation_mismatch'\n    ) {\n      throw new Error(\n        acknowledgement.status === 'unknown'\n          ? 'interactive control claim outcome is unknown; retry the same acquisition'\n          : 'interactive control claim operation conflicts with different request material',\n      )\n    }\n    const current = acknowledgement.currentGeneration\n    if (current === undefined || current <= generation) {\n      throw new Error('provider returned a non-advancing interactive control generation')\n    }\n    generation = current\n  }\n  throw new Error('interactive control changed too often to acquire safely')\n}\n\nfunction controlClaimOperationId(\n  handle: RetainedInteractiveRunHandle,\n  holderId: string,\n  expectedGeneration: number,\n): string {\n  const digest = canonicalCandidateDigest({\n    kind: 'retained-interactive-control-claim.v1',\n    ref: handle.ref,\n    holderId,\n    expectedGeneration,\n  })\n  return `interactive-claim-${digest.slice('sha256:'.length, 'sha256:'.length + 40)}`\n}\n","/**\n * Runtime-owned worker seam for a provider's native interactive coding-agent process.\n *\n * This adapter composes the retained-interactive lifecycle. It does not create a second stream,\n * replay buffer, session id, or cancellation protocol. The provider owns process state; Scope owns\n * the supervised worker, journal, budget, and local control inbox.\n */\n\nimport { randomUUID } from 'node:crypto'\nimport {\n  type AgentInteractiveSessionPromptCommand,\n  type AgentInteractiveSessionRef,\n  type AgentInteractiveSessionStatus,\n  type AgentInteractiveSessionStopAcknowledgement,\n  type AgentInteractiveSessionStopCommand,\n  type AgentProfile,\n  agentInteractiveSessionPromptRequestDigest,\n  agentInteractiveSessionStopRequestDigest,\n  canonicalCandidateDigest,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironment,\n  AgentEnvironmentProvider,\n  CreateAgentEnvironmentInput,\n} from '@tangle-network/agent-interface/environment-provider'\nimport { contentAddress } from '../../durable/spawn-journal'\nimport type { MakeWorkerAgent, WorkerSpawnContext } from '../../mcp/tools/coordination'\nimport { destroyInteractiveEnvironment } from '../retained-interactive-lifecycle'\nimport type { RetainedInteractiveRunHandle } from '../retained-interactive-types'\nimport { claimRetainedInteractiveControl, startRetainedInteractiveRun } from '../retained-run'\nimport { retainedCreateMaterial } from '../retained-run-intent'\nimport type { RetainedInteractiveAdmission } from '../retained-run-types'\nimport { sleep } from '../util'\nimport { abortError, linkAbort } from './abortable'\nimport { executableAgentProfileSnapshot } from './executable-spec'\nimport { createInbox } from './inbox'\nimport {\n  type InteractiveAdmissionWriter,\n  interactiveAdmissionSeamKey,\n} from './interactive-admission'\nimport {\n  attestRuntimeOwnedPendingExecutor,\n  finalizeRuntimeOwnedPendingExecutor,\n  newExecutionAttemptId,\n} from './materialization'\nimport { concreteProfileModel } from './model-policy'\nimport { detachedSnapshot } from './snapshot'\nimport { taskToPrompt } from './task-prompt'\nimport type {\n  Agent,\n  AgentSpec,\n  Executor,\n  ExecutorCancellation,\n  ExecutorContext,\n  ExecutorResult,\n  Runtime,\n  Spend,\n  UsageEvent,\n  WorkerInteractiveSession,\n} from './types'\n\n/** Environment fields supplied to every interactive worker after Runtime adds the exact profile. */\nexport type InteractiveWorkerEnvironment = Omit<\n  CreateAgentEnvironmentInput,\n  'profile' | 'idempotencyKey' | 'signal'\n>\n\n/** Native interactive worker output. Provider usage is intentionally not fabricated. */\nexport interface InteractiveWorkerResult {\n  readonly provider: string\n  readonly environmentId: string\n  readonly sessionId: string\n  readonly executionId: string\n  readonly state: 'exited' | 'unknown'\n  readonly ref: AgentInteractiveSessionRef\n  readonly reason?: string\n  readonly exitCode?: number\n  readonly exitSignal?: string\n}\n\n/** Configuration shared by every worker produced by `workerFromInteractiveProvider`. */\nexport interface InteractiveWorkerOptions {\n  /** Provider create fields. Runtime supplies `profile`, the two idempotency keys, and `signal`. */\n  readonly environment?: InteractiveWorkerEnvironment\n  /** Stable environment identity override. Defaults to a digest of the exact worker assignment. */\n  readonly environmentIdempotencyKey?: (input: InteractiveWorkerKeyInput) => string\n  /** Stable interactive-session identity override. Defaults to a digest of assignment and task. */\n  readonly interactiveIdempotencyKey?: (input: InteractiveWorkerKeyInput) => string\n  /** Provider holder id used only while the worker sends a steer or stop command. */\n  readonly holderId?: string | ((input: InteractiveWorkerKeyInput) => string)\n  /** Initial prompt override. The exact worker task is the default prompt. */\n  readonly initialPrompt?: string | ((task: unknown, input: InteractiveWorkerKeyInput) => string)\n  readonly cwd?: string\n  readonly cols?: number\n  readonly rows?: number\n  /** Runtime tag written into tree snapshots. Defaults to the provider name. */\n  readonly runtime?: Runtime\n  /** Poll delay used while waiting for the provider's native process to exit. */\n  readonly pollIntervalMs?: number\n  /** Destroy the provider environment after the process is terminal. Defaults to true. */\n  readonly destroyEnvironmentOnTeardown?: boolean\n}\n\nconst INTERACTIVE_TEARDOWN_TIMEOUT_MS = 30_000\n\n/** Stable input available to key and holder functions. */\nexport interface InteractiveWorkerKeyInput {\n  readonly provider: string\n  readonly profile: AgentProfile\n  readonly context?: WorkerSpawnContext\n  readonly task?: unknown\n  readonly nodeId?: string\n}\n\n/**\n * Build a `MakeWorkerAgent` that starts one exact provider-owned native TUI per worker.\n *\n * A Scope supplies the durable admission hook and kernel-minted node attempt. The returned worker\n * exposes `interactiveReady`, so Scope writes the exact provider reference before the worker can be\n * attached by a different process. `attachWorker` then reconnects that same reference through the\n * provider's public `get`/interactive contract.\n */\nexport function workerFromInteractiveProvider(\n  provider: AgentEnvironmentProvider,\n  options: InteractiveWorkerOptions = {},\n): MakeWorkerAgent {\n  if (!provider.name.trim())\n    throw new Error('workerFromInteractiveProvider: provider.name required')\n  if (!provider.get) {\n    throw new Error(\n      `workerFromInteractiveProvider(${provider.name}): provider.get is required for reconnect`,\n    )\n  }\n  const capturedEnvironment = options.environment\n    ? (structuredClone(options.environment) as InteractiveWorkerEnvironment)\n    : undefined\n  const unscopedNamespace = randomUUID()\n  let unscopedOrdinal = 0\n  const runtime = options.runtime ?? (provider.name as Runtime)\n\n  return (rawProfile, spawnContext) => {\n    const profile = executableAgentProfileSnapshot(\n      rawProfile,\n      `workerFromInteractiveProvider(${provider.name})`,\n    )\n    const input: InteractiveWorkerKeyInput = {\n      provider: provider.name,\n      profile,\n      ...(spawnContext === undefined ? {} : { context: spawnContext }),\n    }\n    const assignmentId =\n      spawnContext?.assignmentId ?? `unscoped:${unscopedNamespace}:${unscopedOrdinal++}`\n    const baseInput = { ...input, nodeId: spawnContext?.parentNodeId }\n    const environmentKey = stableKey(\n      options.environmentIdempotencyKey?.({ ...baseInput }) ??\n        derivedKey('supervised-interactive-environment', {\n          provider: provider.name,\n          assignmentId,\n          parentNodeId: spawnContext?.parentNodeId,\n          profile,\n        }),\n      'environment idempotency key',\n    )\n    const name = profile.name ?? 'interactive-worker'\n\n    const executorFactory = (\n      spec: AgentSpec,\n      ctx: ExecutorContext,\n    ): Executor<InteractiveWorkerResult> =>\n      interactiveExecutor({\n        provider,\n        profile: spec.profile,\n        context: spawnContext,\n        environment: capturedEnvironment,\n        environmentKey,\n        interactiveKey: (task: unknown) =>\n          stableKey(\n            options.interactiveIdempotencyKey?.({\n              ...baseInput,\n              task,\n            }) ??\n              derivedKey('supervised-interactive-session', {\n                provider: provider.name,\n                assignmentId,\n                parentNodeId: spawnContext?.parentNodeId,\n                profile: spec.profile,\n                task,\n              }),\n            'interactive idempotency key',\n          ),\n        holderId: (task: unknown) => {\n          const selected =\n            typeof options.holderId === 'function'\n              ? options.holderId({ ...baseInput, task })\n              : options.holderId\n          return stableKey(\n            selected ??\n              `runtime-interactive-worker:${canonicalCandidateDigest({\n                provider: provider.name,\n                assignmentId,\n              })}`,\n            'interactive holder id',\n          )\n        },\n        initialPrompt: options.initialPrompt,\n        cwd: options.cwd,\n        cols: options.cols,\n        rows: options.rows,\n        runtime,\n        pollIntervalMs: options.pollIntervalMs,\n        destroyEnvironmentOnTeardown: options.destroyEnvironmentOnTeardown,\n        executionAttemptId: ctx.node?.attemptId,\n        nodeId: ctx.node?.nodeId,\n        admission: admissionWriter(ctx, provider.name, ctx.node?.nodeId),\n      })\n\n    const spec: AgentSpec = {\n      profile,\n      harness: null,\n      executorFactory,\n      ...(spawnContext?.execution ? { execution: spawnContext.execution } : {}),\n    }\n    return {\n      name,\n      act: async () => {\n        throw new Error(\n          'workerFromInteractiveProvider: interactive workers execute through executorSpec',\n        )\n      },\n      executorSpec: spec,\n    } as Agent<unknown, InteractiveWorkerResult> & { executorSpec: AgentSpec }\n  }\n}\n\ninterface InteractiveExecutorInput {\n  readonly provider: AgentEnvironmentProvider\n  readonly profile: AgentProfile\n  readonly context?: WorkerSpawnContext\n  readonly environment?: InteractiveWorkerEnvironment\n  readonly environmentKey: string\n  readonly interactiveKey: (task: unknown) => string\n  readonly holderId: (task: unknown) => string\n  readonly initialPrompt?: InteractiveWorkerOptions['initialPrompt']\n  readonly cwd?: string\n  readonly cols?: number\n  readonly rows?: number\n  readonly runtime: Runtime\n  readonly pollIntervalMs?: number\n  readonly destroyEnvironmentOnTeardown?: boolean\n  readonly executionAttemptId?: string\n  readonly nodeId?: string\n  readonly admission: InteractiveAdmissionWriter\n}\n\nfunction interactiveExecutor(input: InteractiveExecutorInput): Executor<InteractiveWorkerResult> {\n  const attemptId =\n    input.executionAttemptId ?? newExecutionAttemptId(input.nodeId ?? input.environmentKey)\n  const localController = new AbortController()\n  const inbox = createInbox()\n  let handle: RetainedInteractiveRunHandle | undefined\n  let createdEnvironment: AgentEnvironment | undefined\n  let environmentId: string | undefined\n  let artifact: ExecutorResult<InteractiveWorkerResult> | undefined\n  let activeLink: ReturnType<typeof linkAbort> | undefined\n  let startPromise: Promise<RetainedInteractiveRunHandle> | undefined\n  let executeStarted = false\n  let readyResolve!: (session: WorkerInteractiveSession) => void\n  const ready = new Promise<WorkerInteractiveSession>((resolve) => {\n    readyResolve = resolve\n  })\n  const stopOperations = new Map<string, Promise<ExecutorCancellation>>()\n  const memoryAdmissions = new Map<string, RetainedInteractiveAdmission>()\n  let teardownComplete = false\n  let teardownPromise: Promise<{ destroyed: boolean }> | undefined\n  let flushChain: Promise<void> = Promise.resolve()\n  let controlError: unknown\n\n  const executor: Executor<InteractiveWorkerResult> = {\n    runtime: input.runtime,\n    teardownTimeoutMs: INTERACTIVE_TEARDOWN_TIMEOUT_MS,\n    execute(task, signal): AsyncIterable<UsageEvent> {\n      if (executeStarted || teardownComplete || teardownPromise !== undefined) {\n        throw new Error('workerFromInteractiveProvider: execute() may only be called once')\n      }\n      executeStarted = true\n      startPromise = startInteractive(task, signal)\n      return runInteractive(signal)\n    },\n    deliver(message: unknown): boolean {\n      if (teardownComplete || teardownPromise !== undefined) return false\n      const accepted = inbox.deliver(message)\n      if (accepted) void flushInbox()\n      return accepted\n    },\n    interactive(): WorkerInteractiveSession {\n      return handle\n        ? { status: 'available', handle }\n        : { status: 'unavailable', reason: 'interactive-session-not-started' }\n    },\n    interactiveReady(): Promise<WorkerInteractiveSession> {\n      return ready\n    },\n    async cancel(request): Promise<ExecutorCancellation> {\n      const existing = stopOperations.get(request.operationId)\n      if (existing) return existing\n      const operation = stopInteractive(request.operationId, request.reason, request.signal)\n      const tracked = operation.then((result) => {\n        if (result.status === 'unknown' && stopOperations.get(request.operationId) === tracked) {\n          stopOperations.delete(request.operationId)\n        }\n        return result\n      })\n      stopOperations.set(request.operationId, tracked)\n      return tracked\n    },\n    teardown(grace): Promise<{ destroyed: boolean }> {\n      void grace\n      if (teardownComplete) return Promise.resolve({ destroyed: true })\n      if (teardownPromise !== undefined) return teardownPromise\n      const pending = teardownInteractive()\n      teardownPromise = pending.then(\n        (result) => {\n          teardownComplete = true\n          return result\n        },\n        (error) => {\n          teardownPromise = undefined\n          throw error\n        },\n      )\n      return teardownPromise\n    },\n    resultArtifact(): ExecutorResult<InteractiveWorkerResult> {\n      if (!artifact) {\n        throw new Error(\n          'workerFromInteractiveProvider: resultArtifact() read before execution settled',\n        )\n      }\n      return artifact\n    },\n  }\n\n  const declaredEnvironment = input.environment\n    ? retainedCreateMaterial({\n        ...input.environment,\n        profile: input.profile,\n        idempotencyKey: input.environmentKey,\n      })\n    : null\n  const profileModel = concreteProfileModel(input.profile)\n  const plannedDeclaration = {\n    effectiveProfile: input.profile,\n    backend: input.provider.name,\n    model: profileModel\n      ? { status: 'known' as const, id: profileModel }\n      : { status: 'unknown' as const, reason: 'provider selected the model' },\n    execution: { kind: 'interactive-session', id: input.nodeId ?? input.environmentKey },\n    materializer: 'retained-interactive-provider',\n    plan: {\n      kind: 'retained-interactive-provider',\n      provider: input.provider.name,\n      environment: declaredEnvironment,\n      environmentIdempotencyKey: input.environmentKey,\n      destroyEnvironmentOnTeardown: input.destroyEnvironmentOnTeardown !== false,\n    },\n  }\n  attestRuntimeOwnedPendingExecutor(executor, input.runtime, plannedDeclaration, {\n    attemptId,\n    binding: {\n      provider: input.provider.name,\n      environmentIdempotencyKey: input.environmentKey,\n      nodeId: input.nodeId ?? null,\n    },\n    descriptor: {\n      kind: 'interactive-session',\n      provider: input.provider.name,\n      transport: 'agent-environment',\n    },\n  })\n\n  async function startInteractive(\n    task: unknown,\n    signal: AbortSignal,\n  ): Promise<RetainedInteractiveRunHandle> {\n    try {\n      activeLink = linkAbort(signal, localController.signal)\n      const initialPrompt =\n        typeof input.initialPrompt === 'function'\n          ? input.initialPrompt(task, {\n              provider: input.provider.name,\n              profile: input.profile,\n              ...(input.context === undefined ? {} : { context: input.context }),\n              task,\n              ...(input.nodeId === undefined ? {} : { nodeId: input.nodeId }),\n            })\n          : (input.initialPrompt ?? taskToPrompt(task))\n      if (typeof initialPrompt !== 'string') {\n        throw new Error('workerFromInteractiveProvider: initialPrompt must return a string')\n      }\n      const interactiveIdempotencyKey = input.interactiveKey(task)\n      const started = await startRetainedInteractiveRun({\n        provider: {\n          ...input.provider,\n          async create(environmentInput): Promise<AgentEnvironment> {\n            const environment = await input.provider.create!(environmentInput)\n            createdEnvironment = environment\n            return environment\n          },\n        },\n        environment: {\n          ...(input.environment ?? {}),\n          profile: input.profile,\n          idempotencyKey: input.environmentKey,\n        },\n        interactiveIdempotencyKey,\n        ...(initialPrompt.length === 0 ? {} : { initialPrompt }),\n        ...(input.cwd === undefined ? {} : { cwd: input.cwd }),\n        ...(input.cols === undefined ? {} : { cols: input.cols }),\n        ...(input.rows === undefined ? {} : { rows: input.rows }),\n        onAdmission: async (admission) => {\n          environmentId =\n            admission.phase === 'interactive_environment' ? admission.environmentId : environmentId\n          const existing = memoryAdmissions.get(admission.phase)\n          if (existing !== undefined) {\n            if (canonicalCandidateDigest(existing) !== canonicalCandidateDigest(admission)) {\n              throw new Error(\n                `interactive admission phase '${admission.phase}' changed across retry`,\n              )\n            }\n          } else {\n            memoryAdmissions.set(\n              admission.phase,\n              detachedSnapshot(admission, 'interactive admission'),\n            )\n          }\n          await input.admission(admission)\n        },\n        signal: activeLink.signal,\n      })\n      finalizeRuntimeOwnedPendingExecutor(\n        executor,\n        {\n          ...plannedDeclaration,\n          execution: { kind: 'interactive-session', id: started.ref.run.executionId },\n          plan: {\n            ...plannedDeclaration.plan,\n            environmentId: started.ref.run.environmentId,\n            interactiveIdempotencyKey,\n          },\n        },\n        {\n          attemptId,\n          binding: {\n            provider: input.provider.name,\n            ref: started.ref,\n            environmentId: started.ref.run.environmentId,\n          },\n          descriptor: {\n            kind: 'interactive-session',\n            provider: input.provider.name,\n            transport: 'agent-environment',\n          },\n        },\n      )\n      handle = started\n      readyResolve({ status: 'available', handle: started })\n      void flushInbox()\n      return started\n    } catch (error) {\n      readyResolve({ status: 'unavailable', reason: unavailableReason(error) })\n      activeLink?.release()\n      throw error\n    }\n  }\n\n  async function* runInteractive(signal: AbortSignal): AsyncIterable<UsageEvent> {\n    const startedAt = Date.now()\n    try {\n      const current = await startPromise\n      if (current === undefined) {\n        throw new Error('workerFromInteractiveProvider: interactive start did not begin')\n      }\n      yield { kind: 'iteration' }\n      // Native TUI sessions do not expose a complete turn receipt. These zero counters are an\n      // observed floor and the explicit false markers keep the run's accounting honest.\n      yield { kind: 'tokens', input: 0, output: 0, tokensKnown: false }\n      yield { kind: 'cost', usd: 0, usdKnown: false, provenance: 'uncaptured' }\n      let status: AgentInteractiveSessionStatus | undefined\n      for (;;) {\n        if (signal.aborted || localController.signal.aborted) {\n          throw abortError(\n            signal.aborted ? signal : localController.signal,\n            'interactive execution aborted',\n          )\n        }\n        status = await current.status({ signal: activeLink?.signal })\n        await flushChain\n        if (controlError !== undefined) throw controlErrorValue(controlError)\n        if (status.state !== 'running') break\n        await sleep(input.pollIntervalMs ?? 100, activeLink?.signal)\n      }\n      const finished = status\n      const output: InteractiveWorkerResult = {\n        provider: input.provider.name,\n        environmentId: current.ref.run.environmentId,\n        sessionId: current.ref.run.sessionId,\n        executionId: current.ref.run.executionId,\n        state: finished?.state === 'exited' ? 'exited' : 'unknown',\n        ref: current.ref,\n        ...(finished?.state === 'exited' && finished.reason ? { reason: finished.reason } : {}),\n        ...(finished?.state === 'exited' && finished.exitCode !== undefined\n          ? { exitCode: finished.exitCode }\n          : {}),\n        ...(finished?.state === 'exited' && finished.exitSignal !== undefined\n          ? { exitSignal: finished.exitSignal }\n          : {}),\n      }\n      const spent: Spend = {\n        iterations: 1,\n        tokens: { input: 0, output: 0 },\n        tokensKnown: false,\n        usd: 0,\n        usdKnown: false,\n        ms: Date.now() - startedAt,\n      }\n      artifact = {\n        outRef: contentAddress(output),\n        out: output,\n        spent,\n      }\n    } finally {\n      activeLink?.release()\n    }\n  }\n\n  async function flushInbox(): Promise<void> {\n    flushChain = flushChain.then(async () => {\n      try {\n        if (!handle) return\n        const messages = inbox.drain()\n        if (messages.length === 0) return\n        const prompt = inbox.fold(messages)\n        const operationId = `interactive-prompt-${canonicalCandidateDigest({\n          ref: handle.ref,\n          prompt,\n        }).slice('sha256:'.length)}`\n        const control = await claimRetainedInteractiveControl({\n          handle,\n          holderId: input.holderId(undefined),\n        })\n        const material = {\n          operationId,\n          ref: handle.ref,\n          control,\n          prompt,\n        }\n        const command: AgentInteractiveSessionPromptCommand = {\n          ...material,\n          requestDigest: agentInteractiveSessionPromptRequestDigest(material),\n        }\n        await handle.sendPrompt(command)\n      } catch (error) {\n        controlError ??= error\n      }\n    })\n    await flushChain\n  }\n\n  async function stopInteractive(\n    operationId: string,\n    reason?: string,\n    signal?: AbortSignal,\n  ): Promise<ExecutorCancellation> {\n    const observedAt = new Date().toISOString()\n    if (!handle) {\n      localController.abort(reason ?? 'interactive cancellation requested')\n      return {\n        status: 'unknown',\n        effect: 'cancel_requested',\n        observedAt,\n        detail: 'interactive process has not published a provider reference',\n      }\n    }\n    try {\n      const control = await claimRetainedInteractiveControl({\n        handle,\n        holderId: input.holderId(undefined),\n        signal,\n      })\n      const material = { operationId, ref: handle.ref, control }\n      const command: AgentInteractiveSessionStopCommand = {\n        ...material,\n        requestDigest: agentInteractiveSessionStopRequestDigest(material),\n      }\n      const acknowledgement = await handle.stop(\n        command,\n        signal === undefined ? undefined : { signal },\n      )\n      localController.abort(reason ?? 'interactive cancellation requested')\n      return cancellationFromAcknowledgement(acknowledgement, observedAt)\n    } catch (error) {\n      localController.abort(reason ?? 'interactive cancellation requested')\n      return {\n        status: 'unknown',\n        effect: 'cancel_requested',\n        observedAt,\n        detail: error instanceof Error ? error.message : String(error),\n        evidence: { operationId },\n      }\n    }\n  }\n\n  async function teardownInteractive(): Promise<{ destroyed: boolean }> {\n    localController.abort('interactive worker teardown')\n    activeLink?.release()\n    await startPromise?.catch(() => undefined)\n    if (handle) {\n      const status = await safeStatus(handle)\n      if (status?.state === 'running') {\n        const operationId = `interactive-teardown-${canonicalCandidateDigest(handle.ref).slice(\n          'sha256:'.length,\n        )}`\n        const cancellation = await stopInteractive(operationId, 'interactive worker teardown')\n        if (cancellation.status === 'rejected' || cancellation.status === 'unknown') {\n          throw new Error(cancellation.detail ?? 'interactive teardown was not acknowledged')\n        }\n      }\n    }\n    await destroyEnvironment()\n    return { destroyed: true }\n  }\n\n  async function destroyEnvironment(): Promise<void> {\n    if (input.destroyEnvironmentOnTeardown === false) return\n    if (createdEnvironment !== undefined) {\n      await destroyInteractiveEnvironment(createdEnvironment)\n      return\n    }\n    if (!input.provider.get) return\n    // The exact provider reference is durable and remains available even when the admission\n    // callback was interrupted after the environment was created. Use it as the cleanup identity\n    // so an aborted provider signal cannot turn a real environment into an unconfirmed leak.\n    const cleanupEnvironmentId = environmentId ?? handle?.ref.run.environmentId\n    if (!cleanupEnvironmentId) return\n    const environment = await input.provider.get(cleanupEnvironmentId)\n    if (environment !== undefined && environment !== null) {\n      await destroyInteractiveEnvironment(environment)\n    }\n  }\n\n  return executor\n}\n\nfunction admissionWriter(\n  ctx: ExecutorContext,\n  provider: string,\n  workerId: string | undefined,\n): InteractiveAdmissionWriter {\n  const candidate = ctx.seams[interactiveAdmissionSeamKey]\n  if (typeof candidate === 'function') {\n    return async (admission) => {\n      await (candidate as (value: RetainedInteractiveAdmission) => Promise<void>)(admission)\n    }\n  }\n  // In-memory runs still need a real hook because retained-start refuses an omitted hook. The\n  // durable Scope path always supplies the Runtime-owned writer above; this fallback is explicit\n  // and process-local, never mistaken for restart evidence.\n  const records = new Map<string, RetainedInteractiveAdmission>()\n  return async (admission) => {\n    const prior = records.get(admission.phase)\n    if (prior && canonicalCandidateDigest(prior) !== canonicalCandidateDigest(admission)) {\n      throw new Error(\n        `worker ${workerId ?? '(unscoped)'} provider ${provider} admission changed in memory`,\n      )\n    }\n    records.set(admission.phase, detachedSnapshot(admission, 'interactive admission'))\n  }\n}\n\nfunction derivedKey(kind: string, value: unknown): string {\n  return `${kind}-${canonicalCandidateDigest(value).slice('sha256:'.length)}`\n}\n\nfunction stableKey(value: string, label: string): string {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    throw new Error(`${label} must be a non-empty string`)\n  }\n  const key = value.trim()\n  if (key.length > 256) throw new Error(`${label} must not exceed 256 bytes`)\n  return key\n}\n\nfunction unavailableReason(\n  error: unknown,\n): 'provider-has-no-interactive-contract' | 'interactive-binding-stale' {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes('interactive') || message.includes('Interactive')\n    ? 'provider-has-no-interactive-contract'\n    : 'interactive-binding-stale'\n}\n\nfunction cancellationFromAcknowledgement(\n  acknowledgement: AgentInteractiveSessionStopAcknowledgement,\n  observedAt: string,\n): ExecutorCancellation {\n  const status =\n    acknowledgement.status === 'accepted' || acknowledgement.status === 'replayed'\n      ? 'accepted'\n      : acknowledgement.status === 'conflict'\n        ? 'rejected'\n        : 'unknown'\n  const effect =\n    acknowledgement.effect === 'stopped'\n      ? 'cancelled'\n      : acknowledgement.effect === 'not_live'\n        ? 'not_live'\n        : acknowledgement.effect === 'stop_requested'\n          ? 'cancel_requested'\n          : 'unknown'\n  return {\n    status,\n    effect,\n    observedAt,\n    ...(acknowledgement.message === undefined ? {} : { detail: acknowledgement.message }),\n    evidence: {\n      operationId: acknowledgement.operationId,\n      requestDigest: acknowledgement.requestDigest,\n      providerStatus: acknowledgement.status,\n      providerEffect: acknowledgement.effect,\n    },\n  }\n}\n\nfunction controlErrorValue(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error))\n}\n\nasync function safeStatus(\n  handle: RetainedInteractiveRunHandle,\n): Promise<AgentInteractiveSessionStatus | undefined> {\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const timeout = new Promise<undefined>((resolve) => {\n    timer = setTimeout(() => resolve(undefined), 100)\n    timer.unref?.()\n  })\n  try {\n    // A provider environment created with the worker's abort signal may reject or hang all\n    // subsequent calls after the scope begins teardown. Keep status best-effort and let the fresh\n    // environment lookup below prove release without spending the teardown acknowledgement window\n    // on a stale connection.\n    return await Promise.race([handle.status(), timeout])\n  } catch {\n    return undefined\n  } finally {\n    if (timer !== undefined) clearTimeout(timer)\n  }\n}\n","/**\n * Public one-call composition for a durable Runtime supervisor proof run.\n *\n * This is intentionally a thin owner of existing Runtime primitives. The supervisor owns the\n * root abort channel and join barrier, Scope owns worker admission and lifecycle, and the provider\n * owns the environment and interactive process. External clients receive identifiers and opaque\n * handles; they do not receive a second supervisor protocol or a copy of provider state.\n *\n * @experimental\n */\n\nimport { randomUUID } from 'node:crypto'\nimport { mkdirSync } from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { dirname, join, resolve } from 'node:path'\nimport {\n  type AgentProfile,\n  agentProfileSchema,\n  canonicalAgentProfileDigest,\n  canonicalCandidateDigest,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentProvider,\n} from '@tangle-network/agent-interface/environment-provider'\nimport type { McpToolDescriptor } from '../../mcp/server'\nimport { createCoordinationTools } from '../../mcp/tools/coordination'\nimport { sandboxClientAsProvider } from '../environment-provider'\nimport type { SandboxClient } from '../types'\nimport { sleep } from '../util'\nimport { createCancelAcknowledger, createSteerAcknowledger } from './coordination-driver'\nimport { armDeadlineTimer } from './deadline'\nimport { writeAtomicDurableFile } from './durable-file'\nimport {\n  type InteractiveWorkerEnvironment,\n  workerFromInteractiveProvider,\n} from './interactive-worker'\nimport { createFileRunContext } from './run-context'\nimport { supervisorRunDir } from './run-layout'\nimport { createRootHandle, createSupervisor } from './supervisor'\nimport type { Agent, Budget, Scope, SpawnEvent, SupervisedResult } from './types'\nimport { readWorkerInteractiveBinding } from './worker-interactive'\n\nconst DEFAULT_POLL_MS = 25\nconst ROOT_MAX_ITERATIONS = 100\nconst ROOT_MAX_TOKENS = 100_000\nconst WORKER_MAX_ITERATIONS = 25\nconst WORKER_MAX_TOKENS = 25_000\n\n/** Caller-supplied provider or Sandbox SDK connection for one supervisor run. */\nexport interface ProvisionSupervisorConnection {\n  /** A fully constructed provider. This is the preferred programmatic seam and is testable. */\n  readonly provider?: AgentEnvironmentProvider\n  /** A Sandbox SDK-compatible client. Runtime adapts it to the public provider contract. */\n  readonly client?: SandboxClient\n  /** Alias for `client`, accepted so callers can pass their existing connection object. */\n  readonly sandboxClient?: SandboxClient\n  /** Sandbox API endpoint used only when Runtime constructs the SDK client. */\n  readonly endpoint?: string\n  /** Transient Sandbox API key used only when Runtime constructs the SDK client. */\n  readonly apiKey?: string\n  /** Connection kind is descriptive only and does not select a hidden implementation. */\n  readonly kind?: string\n}\n\n/** Input to the public Runtime supervisor provisioner. */\nexport interface ProvisionSupervisorRequest {\n  readonly invocationId: string\n  /** Caller-owned task assigned to the first interactive worker. */\n  readonly task: string\n  /** Canonical profile assigned to the first interactive worker. */\n  readonly profile: AgentProfile\n  /** Generic provider create fields forwarded to the interactive worker. */\n  readonly workerEnvironment?: InteractiveWorkerEnvironment\n  /** Root directory for Runtime-owned `.agent/supervisor` state. */\n  readonly workspaceDir?: string\n  /** Maximum wall-clock time for the complete supervisor lifecycle, including cleanup. Omit for no lifecycle deadline. */\n  readonly timeoutMs?: number\n  /** Poll cadence for lifecycle/control readiness. */\n  readonly pollMs?: number\n  /** Explicit provider, client, or endpoint and API key for one provider connection. */\n  readonly connection: ProvisionSupervisorConnection\n}\n\n/** Exact owner-scoped cleanup receipt returned after Runtime releases the run resources. */\nexport interface SupervisorCleanupReceipt {\n  readonly status: 'completed'\n  readonly rootDir: string\n  readonly supervisorId: string\n  readonly workerId: string\n  readonly supervisorStatus: string\n  readonly workerStatus: 'running' | 'done' | 'down' | 'cancelled'\n  readonly resourcesReleased: true\n  readonly remainingResources: readonly []\n}\n\n/** Handles for one Runtime-owned supervisor and its first interactive worker. */\nexport interface ProvisionedSupervisor {\n  readonly rootDir: string\n  readonly supervisorId: string\n  readonly workerId: string\n  /** Provider source for `attachWorker`; omitted only when resolution did not produce one. */\n  readonly providers?: AgentEnvironmentProvider\n  /** Capability-derived terminal takeover requirement. */\n  readonly terminalTakeover: 'required' | 'unsupported' | 'unspecified'\n  cleanup(): Promise<SupervisorCleanupReceipt>\n}\n\nclass SupervisorProvisionUnavailableError extends Error {\n  readonly unavailable = true as const\n\n  constructor(message: string, cause?: unknown) {\n    super(message, cause === undefined ? undefined : { cause })\n    this.name = 'SupervisorProvisionUnavailableError'\n  }\n}\n\ninterface MutableState {\n  readonly id: string\n  status: string\n  readonly task: string\n  readonly workspaceDir: string\n  readonly budget: number\n  readonly workerModel?: string\n  readonly startedAt: string\n  completedAt?: string\n}\n\ninterface Deferred<T> {\n  readonly promise: Promise<T>\n  resolve(value: T): void\n  reject(error: unknown): void\n  readonly settled: () => boolean\n}\n\n/**\n * Provision one real provider-backed worker and keep its owning manager alive for controls.\n *\n * The root manager does not use a model. It runs the same coordination tools used by a driver in a\n * small deterministic loop, so durable steer and cancel requests are acknowledged by the owning\n * Runtime turn loop and never by a test-only shortcut. The caller owns profile, task, and provider\n * connection selection; Runtime does not infer them from process environment variables.\n */\nexport async function provisionSupervisor(\n  request: ProvisionSupervisorRequest,\n): Promise<ProvisionedSupervisor> {\n  const input = normalizeRequest(request)\n  const provider = await resolveProvider(input)\n  const capabilities = await readCapabilities(provider)\n  const terminalTakeover = terminalCapability(capabilities)\n  const profile = input.profile\n  const rootDir = resolve(input.workspaceDir ?? makeWorkspaceDir())\n  mkdirSync(rootDir, { recursive: true })\n  const supervisorId = supervisorIdFor(input.invocationId)\n  const eventDir = supervisorRunDir(rootDir, supervisorId)\n  const statePath = join(eventDir, 'state.json')\n  mkdirSync(dirname(eventDir), { recursive: true })\n  try {\n    // The run directory is the cross-process invocation lock. A non-recursive mkdir closes the\n    // duplicate-start race before any journal or provider resource is created.\n    mkdirSync(eventDir)\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'EEXIST') {\n      throw unavailable(\n        `Runtime supervisor '${supervisorId}' already exists at '${eventDir}'; use a new invocationId`,\n      )\n    }\n    throw error\n  }\n\n  const context = createFileRunContext(eventDir)\n  const startedAtMs = Date.now()\n  const state: MutableState = {\n    id: supervisorId,\n    status: 'running',\n    task: input.task,\n    workspaceDir: rootDir,\n    budget: ROOT_MAX_TOKENS,\n    ...(profile.model?.default === undefined ? {} : { workerModel: profile.model.default }),\n    startedAt: new Date(startedAtMs).toISOString(),\n  }\n  writeState(statePath, state)\n\n  const rootHandle = createRootHandle<unknown>()\n  const supervisor = createSupervisor<unknown, unknown>()\n  supervisor.attach(rootHandle)\n  const workerSpawned = deferred<string>()\n  const workerRunning = deferred<void>()\n  const workerProfile = profile\n  const workerEnvironment = {\n    ...(input.workerEnvironment ?? {}),\n    metadata: {\n      ...(input.workerEnvironment?.metadata ?? {}),\n      runtime: 'agent-runtime',\n      invocationId: input.invocationId,\n    },\n    name: input.workerEnvironment?.name ?? `runtime-${supervisorId}`,\n  }\n  const makeWorkerAgent = workerFromInteractiveProvider(provider, {\n    environment: workerEnvironment,\n    pollIntervalMs: input.pollMs,\n    destroyEnvironmentOnTeardown: true,\n  })\n\n  const rootAgent: Agent<unknown, unknown> = {\n    name: 'runtime-supervisor-root',\n    async act(_task: unknown, scope: Scope<unknown>): Promise<unknown> {\n      const coord = createCoordinationTools({\n        scope,\n        blobs: context.blobs,\n        makeWorkerAgent,\n        perWorker: workerBudget(),\n        // Keep each supervisor turn bounded so control requests are observed while the remote\n        // worker is running. The coordination tool keeps one settlement drain in flight, so a\n        // timeout only ends this turn; it cannot lose the eventual worker event.\n        awaitTimeoutMs: input.pollMs,\n      })\n      await coord.ready()\n      const spawn = findTool(coord.tools, 'spawn_worker')\n      const awaitEvent = findTool(coord.tools, 'await_event')\n      const result = await spawn.handler({\n        profile: workerProfile,\n        task: input.task,\n        label: 'interactive-worker',\n      })\n      const childId = workerIdFromSpawn(result)\n      workerSpawned.resolve(childId)\n\n      for (;;) {\n        const child = scope.view.nodes.find((node) => node.id === childId)\n        if (child?.status === 'running') break\n        if (\n          child === undefined ||\n          child.status === 'done' ||\n          child.status === 'failed' ||\n          child.status === 'cancelled'\n        ) {\n          throw new Error(`Runtime supervisor worker '${childId}' ended before becoming live`)\n        }\n        await delay(input.pollMs)\n      }\n      workerRunning.resolve()\n\n      const steerAcknowledger = createSteerAcknowledger({\n        dir: eventDir,\n        coord,\n        now: Date.now,\n        ownerId: scope.view.root,\n      })\n      const cancelAcknowledger = createCancelAcknowledger({\n        dir: eventDir,\n        coord,\n        scope,\n        now: Date.now,\n        ownerId: scope.view.root,\n        controlScope: 'run',\n      })\n      try {\n        while (true) {\n          await steerAcknowledger.pass('turn')\n          cancelAcknowledger.pass('turn')\n          // `await_event` owns the single scope cursor drain. Calling `scope.next()` directly here\n          // would bypass the coordination ledger and make a real cancellation look unknown.\n          const event = await awaitEvent.handler({ kinds: ['settled'] })\n          if (isSettledEvent(event)) {\n            await steerAcknowledger.pass('final')\n            cancelAcknowledger.pass('final')\n            return undefined\n          }\n          if (isIdleEvent(event)) {\n            throw new Error(`Runtime supervisor worker '${childId}' ended without a settlement`)\n          }\n          if (!isPendingEvent(event)) {\n            throw new Error(`Runtime supervisor returned an invalid settlement response`)\n          }\n        }\n      } finally {\n        // The final pass closes requests that landed after the last turn. It is idempotent with the\n        // normal path and prevents an admitted operation from remaining open after root teardown.\n        await steerAcknowledger.pass('final')\n        cancelAcknowledger.pass('final')\n        cancelAcknowledger.finish()\n      }\n    },\n  }\n  const runBudget = rootBudget(input.timeoutMs)\n  let runResult: SupervisedResult<unknown> | undefined\n  let runError: unknown\n  let runSettled = false\n  const runPromise = supervisor\n    .run(rootAgent, input.task, {\n      budget: runBudget,\n      rootIdentity: {\n        profileDigest: canonicalAgentProfileDigest(profile),\n        taskDigest: canonicalCandidateDigest(input.task),\n      },\n      runId: supervisorId,\n      ...context,\n      interactiveBindingDir: eventDir,\n      maxDepth: 1,\n      maxLiveWorkers: 1,\n    })\n    .then(\n      (result) => {\n        runResult = result\n        runSettled = true\n        updateStateFromResult(state, result)\n        writeState(statePath, state)\n        return result\n      },\n      (error) => {\n        runError = error\n        runSettled = true\n        state.status = 'down'\n        state.completedAt = new Date().toISOString()\n        writeState(statePath, state)\n        throw error\n      },\n    )\n  void runPromise.catch(() => undefined)\n\n  let workerId: string\n  try {\n    workerId = await waitForWorkerSpawn(workerSpawned.promise, runPromise, input.timeoutMs)\n    await waitForWorkerRunning(workerRunning.promise, runPromise, input.timeoutMs)\n    if (terminalTakeover === 'required') {\n      await waitForInteractiveBinding(eventDir, workerId, runPromise, input.timeoutMs, input.pollMs)\n    }\n  } catch (error) {\n    if (!runSettled) {\n      try {\n        rootHandle.abort('supervisor provisioning failed')\n      } catch {\n        // The supervisor may have released the handle between the state read and this abort.\n      }\n    }\n    await runPromise.catch(() => undefined)\n    throw error\n  }\n\n  let cleanupPromise: Promise<SupervisorCleanupReceipt> | undefined\n  const cleanup = async (): Promise<SupervisorCleanupReceipt> => {\n    cleanupPromise ??= (async () => {\n      if (!runSettled) {\n        try {\n          rootHandle.abort('supervisor cleanup')\n        } catch {\n          // A concurrent run completion already released the handle.\n        }\n      }\n      const result = await runPromise.catch((error) => {\n        runError = error\n        return undefined\n      })\n      if (result !== undefined) runResult = result\n      if (runError !== undefined) throw runError\n      const finalEvents = await waitForWorkerTerminal(\n        context.journal,\n        supervisorId,\n        workerId,\n        input.timeoutMs,\n        input.pollMs,\n      )\n      const workerStatus = workerStatusFromEvents(finalEvents, workerId)\n      if (workerStatus === 'running') {\n        throw new Error(`Runtime supervisor worker '${workerId}' did not reach a terminal state`)\n      }\n      if (runResult?.teardownUnconfirmed?.length) {\n        throw new Error(\n          `Runtime supervisor cleanup could not confirm ${runResult.teardownUnconfirmed.length} resource(s) released`,\n        )\n      }\n      const supervisorStatus = state.status\n      state.completedAt ??= new Date().toISOString()\n      writeState(statePath, state)\n      return Object.freeze({\n        status: 'completed' as const,\n        rootDir,\n        supervisorId,\n        workerId,\n        supervisorStatus,\n        workerStatus,\n        resourcesReleased: true as const,\n        remainingResources: Object.freeze([]) as readonly [],\n      })\n    })()\n    return cleanupPromise\n  }\n\n  return Object.freeze({\n    rootDir,\n    supervisorId,\n    workerId,\n    providers: provider,\n    terminalTakeover,\n    cleanup,\n  })\n}\n\nfunction normalizeRequest(request: ProvisionSupervisorRequest): ProvisionSupervisorRequest & {\n  readonly invocationId: string\n  readonly task: string\n  readonly timeoutMs: number | undefined\n  readonly pollMs: number\n  readonly profile: AgentProfile\n  readonly connection: ProvisionSupervisorConnection\n} {\n  const invocationId = request.invocationId.trim()\n  if (!invocationId) throw new SupervisorProvisionUnavailableError('invocationId is required')\n  const task = request.task.trim()\n  if (!task) throw new SupervisorProvisionUnavailableError('task is required')\n  const profile = resolveProfile(request.profile)\n  if (request.connection === undefined) {\n    throw new SupervisorProvisionUnavailableError('provider connection is required')\n  }\n  const timeoutMs =\n    request.timeoutMs === undefined ? undefined : positiveNumber(request.timeoutMs, 'timeoutMs')\n  const pollMs = positiveNumber(request.pollMs ?? DEFAULT_POLL_MS, 'pollMs')\n  return { ...request, invocationId, task, timeoutMs, pollMs, profile }\n}\n\nfunction positiveNumber(value: number, name: string): number {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new SupervisorProvisionUnavailableError(`${name} must be a positive safe integer`)\n  }\n  return value\n}\n\nfunction makeWorkspaceDir(): string {\n  return join(tmpdir(), `agent-runtime-supervisor-${randomUUID()}`)\n}\n\nfunction supervisorIdFor(invocationId: string): string {\n  const digest = canonicalCandidateDigest({ kind: 'runtime-supervisor', invocationId })\n  return `runtime-supervisor-${digest.slice('sha256:'.length)}`\n}\n\n/** A caller-supplied deadline covers the complete supervisor lifecycle from run start through cleanup. */\nfunction rootBudget(timeoutMs: number | undefined): Budget {\n  return {\n    maxIterations: ROOT_MAX_ITERATIONS,\n    maxTokens: ROOT_MAX_TOKENS,\n    ...(timeoutMs === undefined ? {} : { deadlineMs: timeoutMs }),\n  }\n}\n\nfunction workerBudget(): Budget {\n  return {\n    maxIterations: WORKER_MAX_ITERATIONS,\n    maxTokens: WORKER_MAX_TOKENS,\n  }\n}\n\nfunction resolveProfile(profile: AgentProfile): AgentProfile {\n  const parsed = agentProfileSchema.safeParse(profile)\n  if (!parsed.success) {\n    throw unavailable(\n      `Runtime supervisor profile is invalid: ${parsed.error.issues\n        .map((issue) => `${issue.path.join('.')}: ${issue.message}`)\n        .join('; ')}`,\n    )\n  }\n  return parsed.data\n}\n\nasync function resolveProvider(\n  request: ProvisionSupervisorRequest,\n): Promise<AgentEnvironmentProvider> {\n  const connection = request.connection\n  if (connection === undefined) {\n    throw unavailable('Runtime supervisor provider connection is required')\n  }\n  if (connection?.provider !== undefined) return requireReconnectProvider(connection.provider)\n  const client = connection?.client ?? connection?.sandboxClient\n  if (client !== undefined) {\n    return requireReconnectProvider(sandboxClientAsProvider(client))\n  }\n  const apiKey = connection.apiKey?.trim()\n  const endpoint = connection.endpoint?.trim()\n  if (!apiKey || !endpoint) {\n    throw unavailable(\n      'Runtime supervisor needs a provider/client or both connection.endpoint and connection.apiKey',\n    )\n  }\n  let module: typeof import('@tangle-network/sandbox')\n  try {\n    module = await import('@tangle-network/sandbox')\n  } catch (error) {\n    throw unavailable('Runtime supervisor could not load the Sandbox SDK peer dependency', error)\n  }\n  const SandboxCtor = (module as { Sandbox?: new (config: unknown) => SandboxClient }).Sandbox\n  if (SandboxCtor === undefined) throw unavailable('Sandbox SDK does not export a Sandbox client')\n  const provider = sandboxClientAsProvider(new SandboxCtor({ apiKey, baseUrl: endpoint }))\n  return requireReconnectProvider(provider)\n}\n\nfunction requireReconnectProvider(provider: AgentEnvironmentProvider): AgentEnvironmentProvider {\n  if (!provider.name.trim()) throw unavailable('Runtime supervisor provider has no name')\n  if (typeof provider.get !== 'function') {\n    throw unavailable(\n      `Runtime supervisor provider '${provider.name}' cannot reconnect environments`,\n    )\n  }\n  return provider\n}\n\nasync function readCapabilities(\n  provider: AgentEnvironmentProvider,\n): Promise<AgentEnvironmentCapabilities> {\n  try {\n    return await provider.capabilities()\n  } catch (error) {\n    throw unavailable(`Runtime supervisor could not read '${provider.name}' capabilities`, error)\n  }\n}\n\nfunction terminalCapability(\n  capabilities: AgentEnvironmentCapabilities,\n): 'required' | 'unsupported' | 'unspecified' {\n  const interactive = capabilities.interactiveAgent\n  if (interactive === undefined) return 'unsupported'\n  const complete = [\n    interactive.start,\n    interactive.control,\n    interactive.status,\n    interactive.attach,\n    interactive.reattach,\n    interactive.sendPrompt,\n    interactive.input,\n    interactive.resize,\n    interactive.stop,\n  ].every((value) => value === true)\n  return complete ? 'required' : 'unsupported'\n}\n\nfunction findTool(tools: readonly McpToolDescriptor[], name: string): McpToolDescriptor {\n  const tool = tools.find((candidate) => candidate.name === name)\n  if (tool === undefined)\n    throw new Error(`Runtime supervisor coordination tool '${name}' is missing`)\n  return tool\n}\n\nfunction workerIdFromSpawn(value: unknown): string {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error('Runtime supervisor spawn did not return a worker id')\n  }\n  const workerId = (value as { workerId?: unknown }).workerId\n  if (typeof workerId !== 'string' || !workerId.trim()) {\n    throw new Error('Runtime supervisor spawn did not return a worker id')\n  }\n  return workerId\n}\n\nfunction isSettledEvent(value: unknown): boolean {\n  return isObject(value) && value.type === 'settled'\n}\n\nfunction isIdleEvent(value: unknown): boolean {\n  return isObject(value) && value.idle === true\n}\n\nfunction isPendingEvent(value: unknown): boolean {\n  return isObject(value) && value.pending === true\n}\n\nfunction isObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null\n}\n\nasync function waitForWorkerSpawn(\n  worker: Promise<string>,\n  run: Promise<SupervisedResult<unknown>>,\n  timeoutMs: number | undefined,\n): Promise<string> {\n  return await withTimeout(\n    Promise.race([\n      worker,\n      run.then(() => {\n        throw new Error('Runtime supervisor ended before it spawned a worker')\n      }),\n    ]),\n    timeoutMs,\n    'worker spawn',\n  )\n}\n\nasync function waitForWorkerRunning(\n  running: Promise<void>,\n  run: Promise<SupervisedResult<unknown>>,\n  timeoutMs: number | undefined,\n): Promise<void> {\n  await withTimeout(\n    Promise.race([\n      running,\n      run.then(() => {\n        throw new Error('Runtime supervisor ended before the worker became live')\n      }),\n    ]),\n    timeoutMs,\n    'worker readiness',\n  )\n}\n\nasync function waitForInteractiveBinding(\n  eventDir: string,\n  workerId: string,\n  run: Promise<SupervisedResult<unknown>>,\n  timeoutMs: number | undefined,\n  pollMs: number,\n): Promise<void> {\n  await withTimeout(\n    pollUntil(\n      async () => {\n        const binding = readWorkerInteractiveBinding(eventDir, workerId)\n        if (binding?.status === 'available') return true\n        if (binding?.status === 'unavailable') {\n          throw unavailable(`Runtime worker '${workerId}' could not publish an interactive binding`)\n        }\n        return false\n      },\n      run,\n      pollMs,\n    ),\n    timeoutMs,\n    'interactive terminal binding',\n  )\n}\n\nasync function pollUntil(\n  read: () => Promise<boolean> | boolean,\n  run: Promise<SupervisedResult<unknown>>,\n  pollMs: number,\n): Promise<void> {\n  for (;;) {\n    if (await read()) return\n    await Promise.race([\n      delay(pollMs),\n      run.then(() => {\n        throw new Error('Runtime supervisor ended before readiness was observed')\n      }),\n    ])\n  }\n}\n\nasync function withTimeout<T>(\n  promise: Promise<T>,\n  timeoutMs: number | undefined,\n  label: string,\n): Promise<T> {\n  if (timeoutMs === undefined) return await promise\n  let clearTimer: (() => void) | undefined\n  const timeout = new Promise<never>((_resolve, reject) => {\n    clearTimer = armDeadlineTimer(timeoutMs, () =>\n      reject(unavailable(`Runtime supervisor timed out waiting for ${label}`)),\n    )\n  })\n  try {\n    return await Promise.race([promise, timeout])\n  } finally {\n    clearTimer?.()\n  }\n}\n\nfunction delay(ms: number, keepAlive = false): Promise<void> {\n  return sleep(ms, undefined, keepAlive)\n}\n\nfunction updateStateFromResult(state: MutableState, result: SupervisedResult<unknown>): void {\n  state.status =\n    result.kind === 'winner' ? 'done' : result.reason === 'cancelled' ? 'cancelled' : 'down'\n  state.completedAt = new Date().toISOString()\n}\n\nfunction workerStatusFromEvents(\n  events: readonly SpawnEvent[],\n  workerId: string,\n): SupervisorCleanupReceipt['workerStatus'] {\n  let status: SupervisorCleanupReceipt['workerStatus'] = 'running'\n  let terminal = false\n  for (const event of events) {\n    if (event.id !== workerId) continue\n    if (terminal) continue\n    if (event.kind === 'spawned' || event.kind === 'progress') status = 'running'\n    else if (event.kind === 'settled') {\n      status = event.status === 'done' ? 'done' : 'down'\n      terminal = true\n    } else if (event.kind === 'cancelled') {\n      status = 'cancelled'\n      terminal = true\n    }\n  }\n  return status\n}\n\nasync function waitForWorkerTerminal(\n  journal: import('./types').SpawnJournal,\n  root: string,\n  workerId: string,\n  timeoutMs: number | undefined,\n  pollMs: number,\n): Promise<SpawnEvent[]> {\n  const deadline = timeoutMs === undefined ? undefined : Date.now() + timeoutMs\n  for (;;) {\n    const events = await journal.loadTree(root)\n    if (events !== undefined && workerStatusFromEvents(events, workerId) !== 'running') {\n      return events\n    }\n    if (deadline !== undefined && Date.now() >= deadline) {\n      throw unavailable(`Runtime supervisor timed out waiting for worker '${workerId}' to settle`)\n    }\n    // Cleanup is an explicit lifecycle operation. Keep this bounded poll referenced so a caller\n    // awaiting cleanup cannot have Node exit while the provider is still committing the terminal\n    // worker event.\n    await delay(pollMs, true)\n  }\n}\n\nfunction deferred<T>(): Deferred<T> {\n  let done = false\n  let resolveValue!: (value: T) => void\n  let rejectValue!: (error: unknown) => void\n  const promise = new Promise<T>((resolvePromise, rejectPromise) => {\n    resolveValue = (value) => {\n      if (done) return\n      done = true\n      resolvePromise(value)\n    }\n    rejectValue = (error) => {\n      if (done) return\n      done = true\n      rejectPromise(error)\n    }\n  })\n  return {\n    promise,\n    resolve: resolveValue,\n    reject: rejectValue,\n    settled: () => done,\n  }\n}\n\nfunction unavailable(message: string, cause?: unknown): SupervisorProvisionUnavailableError {\n  return new SupervisorProvisionUnavailableError(message, cause)\n}\n\nfunction writeState(path: string, state: MutableState): void {\n  mkdirSync(dirname(path), { recursive: true })\n  writeAtomicDurableFile(path, `${JSON.stringify(state)}\\n`, { mode: 0o600 })\n}\n"],"mappings":";;;;;;;;;;;AAQA,MAAM,2BAA2B;;;;;;;;;;AAoBjC,eAAsB,gCACpB,SAC8C;CAC9C,MAAM,WAAW,QAAQ,sBAAsB;CAC/C,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,GAChD,MAAM,IAAI,MAAM,uEAAuE;CAGzF,IAAI,aAAa;CACjB,KAAK,IAAI,WAAW,GAAG,YAAY,0BAA0B,YAAY,GAAG;EAC1E,IAAI,QAAQ,QAAQ,SAAS,MAAM,WAAW,QAAQ,OAAO,MAAM;EACnE,MAAM,WAAW;GACf,aAAa,wBAAwB,QAAQ,QAAQ,QAAQ,UAAU,UAAU;GACjF,KAAK,QAAQ,OAAO;GACpB,UAAU,QAAQ;GAClB,oBAAoB;EACtB;EACA,MAAM,kBAAkB,MAAM,QAAQ,OAAO,aAC3C;GACE,GAAG;GACH,eAAe,iDAAiD,QAAQ;EAC1E,GACA,QAAQ,WAAW,KAAA,IAAY,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,CACtE;EACA,IAAI,gBAAgB,WAAW,cAAc,gBAAgB,WAAW,YAAY;GAClF,MAAM,UAAU,gBAAgB;GAChC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,mEAAmE;GAErF,IAAI,KAAK,MAAM,QAAQ,SAAS,KAAK,KAAK,IAAI,GAC5C,MAAM,IAAI,MAAM,wDAAwD;GAE1E,OAAO;EACT;EACA,IACE,gBAAgB,WAAW,cAC3B,gBAAgB,mBAAmB,uBAEnC,MAAM,IAAI,MACR,gBAAgB,WAAW,YACvB,6EACA,+EACN;EAEF,MAAM,UAAU,gBAAgB;EAChC,IAAI,YAAY,KAAA,KAAa,WAAW,YACtC,MAAM,IAAI,MAAM,kEAAkE;EAEpF,aAAa;CACf;CACA,MAAM,IAAI,MAAM,yDAAyD;AAC3E;AAEA,SAAS,wBACP,QACA,UACA,oBACQ;CAOR,OAAO,qBANQ,yBAAyB;EACtC,MAAM;EACN,KAAK,OAAO;EACZ;EACA;CACF,CACiC,CAAC,CAAC,MAAM,GAAkB,EAAqB;AAClF;;;;;;;;;;ACUA,MAAM,kCAAkC;;;;;;;;;AAmBxC,SAAgB,8BACd,UACA,UAAoC,CAAC,GACpB;CACjB,IAAI,CAAC,SAAS,KAAK,KAAK,GACtB,MAAM,IAAI,MAAM,uDAAuD;CACzE,IAAI,CAAC,SAAS,KACZ,MAAM,IAAI,MACR,iCAAiC,SAAS,KAAK,0CACjD;CAEF,MAAM,sBAAsB,QAAQ,cAC/B,gBAAgB,QAAQ,WAAW,IACpC,KAAA;CACJ,MAAM,oBAAoB,WAAW;CACrC,IAAI,kBAAkB;CACtB,MAAM,UAAU,QAAQ,WAAY,SAAS;CAE7C,QAAQ,YAAY,iBAAiB;EACnC,MAAM,UAAU,+BACd,YACA,iCAAiC,SAAS,KAAK,EACjD;EACA,MAAM,QAAmC;GACvC,UAAU,SAAS;GACnB;GACA,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,aAAa;EAChE;EACA,MAAM,eACJ,cAAc,gBAAgB,YAAY,kBAAkB,GAAG;EACjE,MAAM,YAAY;GAAE,GAAG;GAAO,QAAQ,cAAc;EAAa;EACjE,MAAM,iBAAiB,UACrB,QAAQ,4BAA4B,EAAE,GAAG,UAAU,CAAC,KAClD,WAAW,sCAAsC;GAC/C,UAAU,SAAS;GACnB;GACA,cAAc,cAAc;GAC5B;EACF,CAAC,GACH,6BACF;EACA,MAAM,OAAO,QAAQ,QAAQ;EAE7B,MAAM,mBACJ,MACA,QAEA,oBAAoB;GAClB;GACA,SAAS,KAAK;GACd,SAAS;GACT,aAAa;GACb;GACA,iBAAiB,SACf,UACE,QAAQ,4BAA4B;IAClC,GAAG;IACH;GACF,CAAC,KACC,WAAW,kCAAkC;IAC3C,UAAU,SAAS;IACnB;IACA,cAAc,cAAc;IAC5B,SAAS,KAAK;IACd;GACF,CAAC,GACH,6BACF;GACF,WAAW,SAAkB;IAK3B,OAAO,WAHL,OAAO,QAAQ,aAAa,aACxB,QAAQ,SAAS;KAAE,GAAG;KAAW;IAAK,CAAC,IACvC,QAAQ,aAGV,8BAA8B,yBAAyB;KACrD,UAAU,SAAS;KACnB;IACF,CAAC,KACH,uBACF;GACF;GACA,eAAe,QAAQ;GACvB,KAAK,QAAQ;GACb,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd;GACA,gBAAgB,QAAQ;GACxB,8BAA8B,QAAQ;GACtC,oBAAoB,IAAI,MAAM;GAC9B,QAAQ,IAAI,MAAM;GAClB,WAAW,gBAAgB,KAAK,SAAS,MAAM,IAAI,MAAM,MAAM;EACjE,CAAC;EAQH,OAAO;GACL;GACA,KAAK,YAAY;IACf,MAAM,IAAI,MACR,iFACF;GACF;GACA,cAAc;IAZd;IACA,SAAS;IACT;IACA,GAAI,cAAc,YAAY,EAAE,WAAW,aAAa,UAAU,IAAI,CAAC;GAStD;EACnB;CACF;AACF;AAsBA,SAAS,oBAAoB,OAAoE;CAC/F,MAAM,YACJ,MAAM,sBAAsB,sBAAsB,MAAM,UAAU,MAAM,cAAc;CACxF,MAAM,kBAAkB,IAAI,gBAAgB;CAC5C,MAAM,QAAQ,YAAY;CAC1B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,iBAAiB;CACrB,IAAI;CACJ,MAAM,QAAQ,IAAI,SAAmC,YAAY;EAC/D,eAAe;CACjB,CAAC;CACD,MAAM,iCAAiB,IAAI,IAA2C;CACtE,MAAM,mCAAmB,IAAI,IAA0C;CACvE,IAAI,mBAAmB;CACvB,IAAI;CACJ,IAAI,aAA4B,QAAQ,QAAQ;CAChD,IAAI;CAEJ,MAAM,WAA8C;EAClD,SAAS,MAAM;EACf,mBAAmB;EACnB,QAAQ,MAAM,QAAmC;GAC/C,IAAI,kBAAkB,oBAAoB,oBAAoB,KAAA,GAC5D,MAAM,IAAI,MAAM,kEAAkE;GAEpF,iBAAiB;GACjB,eAAe,iBAAiB,MAAM,MAAM;GAC5C,OAAO,eAAe,MAAM;EAC9B;EACA,QAAQ,SAA2B;GACjC,IAAI,oBAAoB,oBAAoB,KAAA,GAAW,OAAO;GAC9D,MAAM,WAAW,MAAM,QAAQ,OAAO;GACtC,IAAI,UAAU,WAAgB;GAC9B,OAAO;EACT;EACA,cAAwC;GACtC,OAAO,SACH;IAAE,QAAQ;IAAa;GAAO,IAC9B;IAAE,QAAQ;IAAe,QAAQ;GAAkC;EACzE;EACA,mBAAsD;GACpD,OAAO;EACT;EACA,MAAM,OAAO,SAAwC;GACnD,MAAM,WAAW,eAAe,IAAI,QAAQ,WAAW;GACvD,IAAI,UAAU,OAAO;GAErB,MAAM,UADY,gBAAgB,QAAQ,aAAa,QAAQ,QAAQ,QAAQ,MACvD,CAAC,CAAC,MAAM,WAAW;IACzC,IAAI,OAAO,WAAW,aAAa,eAAe,IAAI,QAAQ,WAAW,MAAM,SAC7E,eAAe,OAAO,QAAQ,WAAW;IAE3C,OAAO;GACT,CAAC;GACD,eAAe,IAAI,QAAQ,aAAa,OAAO;GAC/C,OAAO;EACT;EACA,SAAS,OAAwC;GAE/C,IAAI,kBAAkB,OAAO,QAAQ,QAAQ,EAAE,WAAW,KAAK,CAAC;GAChE,IAAI,oBAAoB,KAAA,GAAW,OAAO;GAE1C,kBADgB,oBACQ,CAAC,CAAC,MACvB,WAAW;IACV,mBAAmB;IACnB,OAAO;GACT,IACC,UAAU;IACT,kBAAkB,KAAA;IAClB,MAAM;GACR,CACF;GACA,OAAO;EACT;EACA,iBAA0D;GACxD,IAAI,CAAC,UACH,MAAM,IAAI,MACR,+EACF;GAEF,OAAO;EACT;CACF;CAEA,MAAM,sBAAsB,MAAM,cAC9B,uBAAuB;EACrB,GAAG,MAAM;EACT,SAAS,MAAM;EACf,gBAAgB,MAAM;CACxB,CAAC,IACD;CACJ,MAAM,eAAe,qBAAqB,MAAM,OAAO;CACvD,MAAM,qBAAqB;EACzB,kBAAkB,MAAM;EACxB,SAAS,MAAM,SAAS;EACxB,OAAO,eACH;GAAE,QAAQ;GAAkB,IAAI;EAAa,IAC7C;GAAE,QAAQ;GAAoB,QAAQ;EAA8B;EACxE,WAAW;GAAE,MAAM;GAAuB,IAAI,MAAM,UAAU,MAAM;EAAe;EACnF,cAAc;EACd,MAAM;GACJ,MAAM;GACN,UAAU,MAAM,SAAS;GACzB,aAAa;GACb,2BAA2B,MAAM;GACjC,8BAA8B,MAAM,iCAAiC;EACvE;CACF;CACA,kCAAkC,UAAU,MAAM,SAAS,oBAAoB;EAC7E;EACA,SAAS;GACP,UAAU,MAAM,SAAS;GACzB,2BAA2B,MAAM;GACjC,QAAQ,MAAM,UAAU;EAC1B;EACA,YAAY;GACV,MAAM;GACN,UAAU,MAAM,SAAS;GACzB,WAAW;EACb;CACF,CAAC;CAED,eAAe,iBACb,MACA,QACuC;EACvC,IAAI;GACF,aAAa,UAAU,QAAQ,gBAAgB,MAAM;GACrD,MAAM,gBACJ,OAAO,MAAM,kBAAkB,aAC3B,MAAM,cAAc,MAAM;IACxB,UAAU,MAAM,SAAS;IACzB,SAAS,MAAM;IACf,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;IAChE;IACA,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;GAC/D,CAAC,IACA,MAAM,iBAAiB,aAAa,IAAI;GAC/C,IAAI,OAAO,kBAAkB,UAC3B,MAAM,IAAI,MAAM,mEAAmE;GAErF,MAAM,4BAA4B,MAAM,eAAe,IAAI;GAC3D,MAAM,UAAU,MAAM,4BAA4B;IAChD,UAAU;KACR,GAAG,MAAM;KACT,MAAM,OAAO,kBAA6C;MACxD,MAAM,cAAc,MAAM,MAAM,SAAS,OAAQ,gBAAgB;MACjE,qBAAqB;MACrB,OAAO;KACT;IACF;IACA,aAAa;KACX,GAAI,MAAM,eAAe,CAAC;KAC1B,SAAS,MAAM;KACf,gBAAgB,MAAM;IACxB;IACA;IACA,GAAI,cAAc,WAAW,IAAI,CAAC,IAAI,EAAE,cAAc;IACtD,GAAI,MAAM,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI;IACpD,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;IACvD,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;IACvD,aAAa,OAAO,cAAc;KAChC,gBACE,UAAU,UAAU,4BAA4B,UAAU,gBAAgB;KAC5E,MAAM,WAAW,iBAAiB,IAAI,UAAU,KAAK;KACrD,IAAI,aAAa,KAAA,GACX;UAAA,yBAAyB,QAAQ,MAAM,yBAAyB,SAAS,GAC3E,MAAM,IAAI,MACR,gCAAgC,UAAU,MAAM,uBAClD;KAAA,OAGF,iBAAiB,IACf,UAAU,OACV,iBAAiB,WAAW,uBAAuB,CACrD;KAEF,MAAM,MAAM,UAAU,SAAS;IACjC;IACA,QAAQ,WAAW;GACrB,CAAC;GACD,oCACE,UACA;IACE,GAAG;IACH,WAAW;KAAE,MAAM;KAAuB,IAAI,QAAQ,IAAI,IAAI;IAAY;IAC1E,MAAM;KACJ,GAAG,mBAAmB;KACtB,eAAe,QAAQ,IAAI,IAAI;KAC/B;IACF;GACF,GACA;IACE;IACA,SAAS;KACP,UAAU,MAAM,SAAS;KACzB,KAAK,QAAQ;KACb,eAAe,QAAQ,IAAI,IAAI;IACjC;IACA,YAAY;KACV,MAAM;KACN,UAAU,MAAM,SAAS;KACzB,WAAW;IACb;GACF,CACF;GACA,SAAS;GACT,aAAa;IAAE,QAAQ;IAAa,QAAQ;GAAQ,CAAC;GACrD,WAAgB;GAChB,OAAO;EACT,SAAS,OAAO;GACd,aAAa;IAAE,QAAQ;IAAe,QAAQ,kBAAkB,KAAK;GAAE,CAAC;GACxE,YAAY,QAAQ;GACpB,MAAM;EACR;CACF;CAEA,gBAAgB,eAAe,QAAgD;EAC7E,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI;GACF,MAAM,UAAU,MAAM;GACtB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,gEAAgE;GAElF,MAAM,EAAE,MAAM,YAAY;GAG1B,MAAM;IAAE,MAAM;IAAU,OAAO;IAAG,QAAQ;IAAG,aAAa;GAAM;GAChE,MAAM;IAAE,MAAM;IAAQ,KAAK;IAAG,UAAU;IAAO,YAAY;GAAa;GACxE,IAAI;GACJ,SAAS;IACP,IAAI,OAAO,WAAW,gBAAgB,OAAO,SAC3C,MAAMA,aACJ,OAAO,UAAU,SAAS,gBAAgB,QAC1C,+BACF;IAEF,SAAS,MAAM,QAAQ,OAAO,EAAE,QAAQ,YAAY,OAAO,CAAC;IAC5D,MAAM;IACN,IAAI,iBAAiB,KAAA,GAAW,MAAM,kBAAkB,YAAY;IACpE,IAAI,OAAO,UAAU,WAAW;IAChC,MAAM,MAAM,MAAM,kBAAkB,KAAK,YAAY,MAAM;GAC7D;GACA,MAAM,WAAW;GACjB,MAAM,SAAkC;IACtC,UAAU,MAAM,SAAS;IACzB,eAAe,QAAQ,IAAI,IAAI;IAC/B,WAAW,QAAQ,IAAI,IAAI;IAC3B,aAAa,QAAQ,IAAI,IAAI;IAC7B,OAAO,UAAU,UAAU,WAAW,WAAW;IACjD,KAAK,QAAQ;IACb,GAAI,UAAU,UAAU,YAAY,SAAS,SAAS,EAAE,QAAQ,SAAS,OAAO,IAAI,CAAC;IACrF,GAAI,UAAU,UAAU,YAAY,SAAS,aAAa,KAAA,IACtD,EAAE,UAAU,SAAS,SAAS,IAC9B,CAAC;IACL,GAAI,UAAU,UAAU,YAAY,SAAS,eAAe,KAAA,IACxD,EAAE,YAAY,SAAS,WAAW,IAClC,CAAC;GACP;GACA,MAAM,QAAe;IACnB,YAAY;IACZ,QAAQ;KAAE,OAAO;KAAG,QAAQ;IAAE;IAC9B,aAAa;IACb,KAAK;IACL,UAAU;IACV,IAAI,KAAK,IAAI,IAAI;GACnB;GACA,WAAW;IACT,QAAQ,eAAe,MAAM;IAC7B,KAAK;IACL;GACF;EACF,UAAU;GACR,YAAY,QAAQ;EACtB;CACF;CAEA,eAAe,aAA4B;EACzC,aAAa,WAAW,KAAK,YAAY;GACvC,IAAI;IACF,IAAI,CAAC,QAAQ;IACb,MAAM,WAAW,MAAM,MAAM;IAC7B,IAAI,SAAS,WAAW,GAAG;IAC3B,MAAM,SAAS,MAAM,KAAK,QAAQ;IAClC,MAAM,cAAc,sBAAsB,yBAAyB;KACjE,KAAK,OAAO;KACZ;IACF,CAAC,CAAC,CAAC,MAAM,CAAgB;IACzB,MAAM,UAAU,MAAM,gCAAgC;KACpD;KACA,UAAU,MAAM,SAAS,KAAA,CAAS;IACpC,CAAC;IACD,MAAM,WAAW;KACf;KACA,KAAK,OAAO;KACZ;KACA;IACF;IACA,MAAM,UAAgD;KACpD,GAAG;KACH,eAAe,2CAA2C,QAAQ;IACpE;IACA,MAAM,OAAO,WAAW,OAAO;GACjC,SAAS,OAAO;IACd,iBAAiB;GACnB;EACF,CAAC;EACD,MAAM;CACR;CAEA,eAAe,gBACb,aACA,QACA,QAC+B;EAC/B,MAAM,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EAC1C,IAAI,CAAC,QAAQ;GACX,gBAAgB,MAAM,UAAU,oCAAoC;GACpE,OAAO;IACL,QAAQ;IACR,QAAQ;IACR;IACA,QAAQ;GACV;EACF;EACA,IAAI;GACF,MAAM,UAAU,MAAM,gCAAgC;IACpD;IACA,UAAU,MAAM,SAAS,KAAA,CAAS;IAClC;GACF,CAAC;GACD,MAAM,WAAW;IAAE;IAAa,KAAK,OAAO;IAAK;GAAQ;GACzD,MAAM,UAA8C;IAClD,GAAG;IACH,eAAe,yCAAyC,QAAQ;GAClE;GACA,MAAM,kBAAkB,MAAM,OAAO,KACnC,SACA,WAAW,KAAA,IAAY,KAAA,IAAY,EAAE,OAAO,CAC9C;GACA,gBAAgB,MAAM,UAAU,oCAAoC;GACpE,OAAO,gCAAgC,iBAAiB,UAAU;EACpE,SAAS,OAAO;GACd,gBAAgB,MAAM,UAAU,oCAAoC;GACpE,OAAO;IACL,QAAQ;IACR,QAAQ;IACR;IACA,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAC7D,UAAU,EAAE,YAAY;GAC1B;EACF;CACF;CAEA,eAAe,sBAAuD;EACpE,gBAAgB,MAAM,6BAA6B;EACnD,YAAY,QAAQ;EACpB,MAAM,cAAc,YAAY,KAAA,CAAS;EACzC,IAAI,QAEE;QAAA,MADiB,WAAW,MAAM,EAAA,EAC1B,UAAU,WAAW;IAI/B,MAAM,eAAe,MAAM,gBAAgB,wBAHC,yBAAyB,OAAO,GAAG,CAAC,CAAC,MAC/E,CACF,KACwD,6BAA6B;IACrF,IAAI,aAAa,WAAW,cAAc,aAAa,WAAW,WAChE,MAAM,IAAI,MAAM,aAAa,UAAU,2CAA2C;GAEtF;;EAEF,MAAM,mBAAmB;EACzB,OAAO,EAAE,WAAW,KAAK;CAC3B;CAEA,eAAe,qBAAoC;EACjD,IAAI,MAAM,iCAAiC,OAAO;EAClD,IAAI,uBAAuB,KAAA,GAAW;GACpC,MAAM,8BAA8B,kBAAkB;GACtD;EACF;EACA,IAAI,CAAC,MAAM,SAAS,KAAK;EAIzB,MAAM,uBAAuB,iBAAiB,QAAQ,IAAI,IAAI;EAC9D,IAAI,CAAC,sBAAsB;EAC3B,MAAM,cAAc,MAAM,MAAM,SAAS,IAAI,oBAAoB;EACjE,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,MAC/C,MAAM,8BAA8B,WAAW;CAEnD;CAEA,OAAO;AACT;AAEA,SAAS,gBACP,KACA,UACA,UAC4B;CAC5B,MAAM,YAAY,IAAI,MAAM;CAC5B,IAAI,OAAO,cAAc,YACvB,OAAO,OAAO,cAAc;EAC1B,MAAO,UAAqE,SAAS;CACvF;CAKF,MAAM,0BAAU,IAAI,IAA0C;CAC9D,OAAO,OAAO,cAAc;EAC1B,MAAM,QAAQ,QAAQ,IAAI,UAAU,KAAK;EACzC,IAAI,SAAS,yBAAyB,KAAK,MAAM,yBAAyB,SAAS,GACjF,MAAM,IAAI,MACR,UAAU,YAAY,aAAa,YAAY,SAAS,6BAC1D;EAEF,QAAQ,IAAI,UAAU,OAAO,iBAAiB,WAAW,uBAAuB,CAAC;CACnF;AACF;AAEA,SAAS,WAAW,MAAc,OAAwB;CACxD,OAAO,GAAG,KAAK,GAAG,yBAAyB,KAAK,CAAC,CAAC,MAAM,CAAgB;AAC1E;AAEA,SAAS,UAAU,OAAe,OAAuB;CACvD,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,GACvD,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAEvD,MAAM,MAAM,MAAM,KAAK;CACvB,IAAI,IAAI,SAAS,KAAK,MAAM,IAAI,MAAM,GAAG,MAAM,2BAA2B;CAC1E,OAAO;AACT;AAEA,SAAS,kBACP,OACsE;CACtE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,QAAQ,SAAS,aAAa,KAAK,QAAQ,SAAS,aAAa,IACpE,yCACA;AACN;AAEA,SAAS,gCACP,iBACA,YACsB;CAetB,OAAO;EACL,QAdA,gBAAgB,WAAW,cAAc,gBAAgB,WAAW,aAChE,aACA,gBAAgB,WAAW,aACzB,aACA;EAWN,QATA,gBAAgB,WAAW,YACvB,cACA,gBAAgB,WAAW,aACzB,aACA,gBAAgB,WAAW,mBACzB,qBACA;EAIR;EACA,GAAI,gBAAgB,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,gBAAgB,QAAQ;EACnF,UAAU;GACR,aAAa,gBAAgB;GAC7B,eAAe,gBAAgB;GAC/B,gBAAgB,gBAAgB;GAChC,gBAAgB,gBAAgB;EAClC;CACF;AACF;AAEA,SAAS,kBAAkB,OAAuB;CAChD,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;AAEA,eAAe,WACb,QACoD;CACpD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAoB,YAAY;EAClD,QAAQ,iBAAiB,QAAQ,KAAA,CAAS,GAAG,GAAG;EAChD,MAAM,QAAQ;CAChB,CAAC;CACD,IAAI;EAKF,OAAO,MAAM,QAAQ,KAAK,CAAC,OAAO,OAAO,GAAG,OAAO,CAAC;CACtD,QAAQ;EACN;CACF,UAAU;EACR,IAAI,UAAU,KAAA,GAAW,aAAa,KAAK;CAC7C;AACF;;;;;;;;;;;;;ACzsBA,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AA6D1B,IAAM,sCAAN,cAAkD,MAAM;CACtD,cAAuB;CAEvB,YAAY,SAAiB,OAAiB;EAC5C,MAAM,SAAS,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,CAAC;EAC1D,KAAK,OAAO;CACd;AACF;;;;;;;;;AA4BA,eAAsB,oBACpB,SACgC;CAChC,MAAM,QAAQ,iBAAiB,OAAO;CACtC,MAAM,WAAW,MAAM,gBAAgB,KAAK;CAE5C,MAAM,mBAAmB,mBAAmB,MADjB,iBAAiB,QAAQ,CACI;CACxD,MAAM,UAAU,MAAM;CACtB,MAAM,UAAU,QAAQ,MAAM,gBAAgB,iBAAiB,CAAC;CAChE,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;CACtC,MAAM,eAAe,gBAAgB,MAAM,YAAY;CACvD,MAAM,WAAW,iBAAiB,SAAS,YAAY;CACvD,MAAM,YAAY,KAAK,UAAU,YAAY;CAC7C,UAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,IAAI;EAGF,UAAU,QAAQ;CACpB,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,MAAM,YACJ,uBAAuB,aAAa,uBAAuB,SAAS,0BACtE;EAEF,MAAM;CACR;CAEA,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,MAAM,cAAc,KAAK,IAAI;CAC7B,MAAM,QAAsB;EAC1B,IAAI;EACJ,QAAQ;EACR,MAAM,MAAM;EACZ,cAAc;EACd,QAAQ;EACR,GAAI,QAAQ,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,QAAQ,MAAM,QAAQ;EACrF,WAAW,IAAI,KAAK,WAAW,CAAC,CAAC,YAAY;CAC/C;CACA,WAAW,WAAW,KAAK;CAE3B,MAAM,aAAa,iBAA0B;CAC7C,MAAM,aAAa,iBAAmC;CACtD,WAAW,OAAO,UAAU;CAC5B,MAAM,gBAAgB,SAAiB;CACvC,MAAM,gBAAgB,SAAe;CACrC,MAAM,gBAAgB;CAUtB,MAAM,kBAAkB,8BAA8B,UAAU;EAC9D,aAAa;GATb,GAAI,MAAM,qBAAqB,CAAC;GAChC,UAAU;IACR,GAAI,MAAM,mBAAmB,YAAY,CAAC;IAC1C,SAAS;IACT,cAAc,MAAM;GACtB;GACA,MAAM,MAAM,mBAAmB,QAAQ,WAAW;EAGrB;EAC7B,gBAAgB,MAAM;EACtB,8BAA8B;CAChC,CAAC;CAED,MAAM,YAAqC;EACzC,MAAM;EACN,MAAM,IAAI,OAAgB,OAAyC;GACjE,MAAM,QAAQ,wBAAwB;IACpC;IACA,OAAO,QAAQ;IACf;IACA,WAAW,aAAa;IAIxB,gBAAgB,MAAM;GACxB,CAAC;GACD,MAAM,MAAM,MAAM;GAClB,MAAM,QAAQ,SAAS,MAAM,OAAO,cAAc;GAClD,MAAM,aAAa,SAAS,MAAM,OAAO,aAAa;GAMtD,MAAM,UAAU,kBAAkB,MALb,MAAM,QAAQ;IACjC,SAAS;IACT,MAAM,MAAM;IACZ,OAAO;GACT,CAAC,CACuC;GACxC,cAAc,QAAQ,OAAO;GAE7B,SAAS;IACP,MAAM,QAAQ,MAAM,KAAK,MAAM,MAAM,SAAS,KAAK,OAAO,OAAO;IACjE,IAAI,OAAO,WAAW,WAAW;IACjC,IACE,UAAU,KAAA,KACV,MAAM,WAAW,UACjB,MAAM,WAAW,YACjB,MAAM,WAAW,aAEjB,MAAM,IAAI,MAAM,8BAA8B,QAAQ,6BAA6B;IAErF,MAAM,MAAM,MAAM,MAAM;GAC1B;GACA,cAAc,QAAQ;GAEtB,MAAM,oBAAoB,wBAAwB;IAChD,KAAK;IACL;IACA,KAAK,KAAK;IACV,SAAS,MAAM,KAAK;GACtB,CAAC;GACD,MAAM,qBAAqB,yBAAyB;IAClD,KAAK;IACL;IACA;IACA,KAAK,KAAK;IACV,SAAS,MAAM,KAAK;IACpB,cAAc;GAChB,CAAC;GACD,IAAI;IACF,OAAO,MAAM;KACX,MAAM,kBAAkB,KAAK,MAAM;KACnC,mBAAmB,KAAK,MAAM;KAG9B,MAAM,QAAQ,MAAM,WAAW,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;KAC7D,IAAI,eAAe,KAAK,GAAG;MACzB,MAAM,kBAAkB,KAAK,OAAO;MACpC,mBAAmB,KAAK,OAAO;MAC/B;KACF;KACA,IAAI,YAAY,KAAK,GACnB,MAAM,IAAI,MAAM,8BAA8B,QAAQ,6BAA6B;KAErF,IAAI,CAAC,eAAe,KAAK,GACvB,MAAM,IAAI,MAAM,4DAA4D;IAEhF;GACF,UAAU;IAGR,MAAM,kBAAkB,KAAK,OAAO;IACpC,mBAAmB,KAAK,OAAO;IAC/B,mBAAmB,OAAO;GAC5B;EACF;CACF;CACA,MAAM,YAAY,WAAW,MAAM,SAAS;CAC5C,IAAI;CACJ,IAAI;CACJ,IAAI,aAAa;CACjB,MAAM,aAAa,WAChB,IAAI,WAAW,MAAM,MAAM;EAC1B,QAAQ;EACR,cAAc;GACZ,eAAe,4BAA4B,OAAO;GAClD,YAAY,yBAAyB,MAAM,IAAI;EACjD;EACA,OAAO;EACP,GAAG;EACH,uBAAuB;EACvB,UAAU;EACV,gBAAgB;CAClB,CAAC,CAAC,CACD,MACE,WAAW;EACV,YAAY;EACZ,aAAa;EACb,sBAAsB,OAAO,MAAM;EACnC,WAAW,WAAW,KAAK;EAC3B,OAAO;CACT,IACC,UAAU;EACT,WAAW;EACX,aAAa;EACb,MAAM,SAAS;EACf,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3C,WAAW,WAAW,KAAK;EAC3B,MAAM;CACR,CACF;CACF,WAAgB,YAAY,KAAA,CAAS;CAErC,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,mBAAmB,cAAc,SAAS,YAAY,MAAM,SAAS;EACtF,MAAM,qBAAqB,cAAc,SAAS,YAAY,MAAM,SAAS;EAC7E,IAAI,qBAAqB,YACvB,MAAM,0BAA0B,UAAU,UAAU,YAAY,MAAM,WAAW,MAAM,MAAM;CAEjG,SAAS,OAAO;EACd,IAAI,CAAC,YACH,IAAI;GACF,WAAW,MAAM,gCAAgC;EACnD,QAAQ,CAER;EAEF,MAAM,WAAW,YAAY,KAAA,CAAS;EACtC,MAAM;CACR;CAEA,IAAI;CACJ,MAAM,UAAU,YAA+C;EAC7D,oBAAoB,YAAY;GAC9B,IAAI,CAAC,YACH,IAAI;IACF,WAAW,MAAM,oBAAoB;GACvC,QAAQ,CAER;GAEF,MAAM,SAAS,MAAM,WAAW,OAAO,UAAU;IAC/C,WAAW;GAEb,CAAC;GACD,IAAI,WAAW,KAAA,GAAW,YAAY;GACtC,IAAI,aAAa,KAAA,GAAW,MAAM;GAQlC,MAAM,eAAe,uBAAuB,MAPlB,sBACxB,QAAQ,SACR,cACA,UACA,MAAM,WACN,MAAM,MACR,GACyD,QAAQ;GACjE,IAAI,iBAAiB,WACnB,MAAM,IAAI,MAAM,8BAA8B,SAAS,iCAAiC;GAE1F,IAAI,WAAW,qBAAqB,QAClC,MAAM,IAAI,MACR,gDAAgD,UAAU,oBAAoB,OAAO,sBACvF;GAEF,MAAM,mBAAmB,MAAM;GAC/B,MAAM,iCAAgB,IAAI,KAAK,EAAA,CAAE,YAAY;GAC7C,WAAW,WAAW,KAAK;GAC3B,OAAO,OAAO,OAAO;IACnB,QAAQ;IACR;IACA;IACA;IACA;IACA;IACA,mBAAmB;IACnB,oBAAoB,OAAO,OAAO,CAAC,CAAC;GACtC,CAAC;EACH,EAAA,CAAG;EACH,OAAO;CACT;CAEA,OAAO,OAAO,OAAO;EACnB;EACA;EACA;EACA,WAAW;EACX;EACA;CACF,CAAC;AACH;AAEA,SAAS,iBAAiB,SAOxB;CACA,MAAM,eAAe,QAAQ,aAAa,KAAK;CAC/C,IAAI,CAAC,cAAc,MAAM,IAAI,oCAAoC,0BAA0B;CAC3F,MAAM,OAAO,QAAQ,KAAK,KAAK;CAC/B,IAAI,CAAC,MAAM,MAAM,IAAI,oCAAoC,kBAAkB;CAC3E,MAAM,UAAU,eAAe,QAAQ,OAAO;CAC9C,IAAI,QAAQ,eAAe,KAAA,GACzB,MAAM,IAAI,oCAAoC,iCAAiC;CAEjF,MAAM,YACJ,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,eAAe,QAAQ,WAAW,WAAW;CAC7F,MAAM,SAAS,eAAe,QAAQ,UAAU,iBAAiB,QAAQ;CACzE,OAAO;EAAE,GAAG;EAAS;EAAc;EAAM;EAAW;EAAQ;CAAQ;AACtE;AAEA,SAAS,eAAe,OAAe,MAAsB;CAC3D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAC3C,MAAM,IAAI,oCAAoC,GAAG,KAAK,iCAAiC;CAEzF,OAAO;AACT;AAEA,SAAS,mBAA2B;CAClC,OAAO,KAAK,OAAO,GAAG,4BAA4B,WAAW,GAAG;AAClE;AAEA,SAAS,gBAAgB,cAA8B;CAErD,OAAO,sBADQ,yBAAyB;EAAE,MAAM;EAAsB;CAAa,CACjD,CAAC,CAAC,MAAM,CAAgB;AAC5D;;AAGA,SAAS,WAAW,WAAuC;CACzD,OAAO;EACL,eAAe;EACf,WAAW;EACX,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,UAAU;CAC7D;AACF;AAEA,SAAS,eAAuB;CAC9B,OAAO;EACL,eAAe;EACf,WAAW;CACb;AACF;AAEA,SAAS,eAAe,SAAqC;CAC3D,MAAM,SAAS,mBAAmB,UAAU,OAAO;CACnD,IAAI,CAAC,OAAO,SACV,MAAM,YACJ,0CAA0C,OAAO,MAAM,OACpD,KAAK,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAC3D,KAAK,IAAI,GACd;CAEF,OAAO,OAAO;AAChB;AAEA,eAAe,gBACb,SACmC;CACnC,MAAM,aAAa,QAAQ;CAC3B,IAAI,eAAe,KAAA,GACjB,MAAM,YAAY,oDAAoD;CAExE,IAAI,YAAY,aAAa,KAAA,GAAW,OAAO,yBAAyB,WAAW,QAAQ;CAC3F,MAAM,SAAS,YAAY,UAAU,YAAY;CACjD,IAAI,WAAW,KAAA,GACb,OAAO,yBAAyB,wBAAwB,MAAM,CAAC;CAEjE,MAAM,SAAS,WAAW,QAAQ,KAAK;CACvC,MAAM,WAAW,WAAW,UAAU,KAAK;CAC3C,IAAI,CAAC,UAAU,CAAC,UACd,MAAM,YACJ,8FACF;CAEF,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,OAAO;CACxB,SAAS,OAAO;EACd,MAAM,YAAY,qEAAqE,KAAK;CAC9F;CACA,MAAM,cAAe,OAAgE;CACrF,IAAI,gBAAgB,KAAA,GAAW,MAAM,YAAY,8CAA8C;CAE/F,OAAO,yBADU,wBAAwB,IAAI,YAAY;EAAE;EAAQ,SAAS;CAAS,CAAC,CAC/C,CAAC;AAC1C;AAEA,SAAS,yBAAyB,UAA8D;CAC9F,IAAI,CAAC,SAAS,KAAK,KAAK,GAAG,MAAM,YAAY,yCAAyC;CACtF,IAAI,OAAO,SAAS,QAAQ,YAC1B,MAAM,YACJ,gCAAgC,SAAS,KAAK,gCAChD;CAEF,OAAO;AACT;AAEA,eAAe,iBACb,UACuC;CACvC,IAAI;EACF,OAAO,MAAM,SAAS,aAAa;CACrC,SAAS,OAAO;EACd,MAAM,YAAY,sCAAsC,SAAS,KAAK,iBAAiB,KAAK;CAC9F;AACF;AAEA,SAAS,mBACP,cAC4C;CAC5C,MAAM,cAAc,aAAa;CACjC,IAAI,gBAAgB,KAAA,GAAW,OAAO;CAYtC,OAXiB;EACf,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;EACZ,YAAY;CACd,CAAC,CAAC,OAAO,UAAU,UAAU,IACf,IAAI,aAAa;AACjC;AAEA,SAAS,SAAS,OAAqC,MAAiC;CACtF,MAAM,OAAO,MAAM,MAAM,cAAc,UAAU,SAAS,IAAI;CAC9D,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,MAAM,yCAAyC,KAAK,aAAa;CAC7E,OAAO;AACT;AAEA,SAAS,kBAAkB,OAAwB;CACjD,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,WAAY,MAAiC;CACnD,IAAI,OAAO,aAAa,YAAY,CAAC,SAAS,KAAK,GACjD,MAAM,IAAI,MAAM,qDAAqD;CAEvE,OAAO;AACT;AAEA,SAAS,eAAe,OAAyB;CAC/C,OAAO,SAAS,KAAK,KAAK,MAAM,SAAS;AAC3C;AAEA,SAAS,YAAY,OAAyB;CAC5C,OAAO,SAAS,KAAK,KAAK,MAAM,SAAS;AAC3C;AAEA,SAAS,eAAe,OAAyB;CAC/C,OAAO,SAAS,KAAK,KAAK,MAAM,YAAY;AAC9C;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,eAAe,mBACb,QACA,KACA,WACiB;CACjB,OAAO,MAAM,YACX,QAAQ,KAAK,CACX,QACA,IAAI,WAAW;EACb,MAAM,IAAI,MAAM,qDAAqD;CACvE,CAAC,CACH,CAAC,GACD,WACA,cACF;AACF;AAEA,eAAe,qBACb,SACA,KACA,WACe;CACf,MAAM,YACJ,QAAQ,KAAK,CACX,SACA,IAAI,WAAW;EACb,MAAM,IAAI,MAAM,wDAAwD;CAC1E,CAAC,CACH,CAAC,GACD,WACA,kBACF;AACF;AAEA,eAAe,0BACb,UACA,UACA,KACA,WACA,QACe;CACf,MAAM,YACJ,UACE,YAAY;EACV,MAAM,UAAU,6BAA6B,UAAU,QAAQ;EAC/D,IAAI,SAAS,WAAW,aAAa,OAAO;EAC5C,IAAI,SAAS,WAAW,eACtB,MAAM,YAAY,mBAAmB,SAAS,2CAA2C;EAE3F,OAAO;CACT,GACA,KACA,MACF,GACA,WACA,8BACF;AACF;AAEA,eAAe,UACb,MACA,KACA,QACe;CACf,SAAS;EACP,IAAI,MAAM,KAAK,GAAG;EAClB,MAAM,QAAQ,KAAK,CACjB,MAAM,MAAM,GACZ,IAAI,WAAW;GACb,MAAM,IAAI,MAAM,wDAAwD;EAC1E,CAAC,CACH,CAAC;CACH;AACF;AAEA,eAAe,YACb,SACA,WACA,OACY;CACZ,IAAI,cAAc,KAAA,GAAW,OAAO,MAAM;CAC1C,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,UAAU,WAAW;EACvD,aAAa,iBAAiB,iBAC5B,OAAO,YAAY,4CAA4C,OAAO,CAAC,CACzE;CACF,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,OAAO,CAAC;CAC9C,UAAU;EACR,aAAa;CACf;AACF;AAEA,SAAS,MAAM,IAAY,YAAY,OAAsB;CAC3D,OAAO,MAAM,IAAI,KAAA,GAAW,SAAS;AACvC;AAEA,SAAS,sBAAsB,OAAqB,QAAyC;CAC3F,MAAM,SACJ,OAAO,SAAS,WAAW,SAAS,OAAO,WAAW,cAAc,cAAc;CACpF,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;AAC7C;AAEA,SAAS,uBACP,QACA,UAC0C;CAC1C,IAAI,SAAmD;CACvD,IAAI,WAAW;CACf,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,MAAM,OAAO,UAAU;EAC3B,IAAI,UAAU;EACd,IAAI,MAAM,SAAS,aAAa,MAAM,SAAS,YAAY,SAAS;OAC/D,IAAI,MAAM,SAAS,WAAW;GACjC,SAAS,MAAM,WAAW,SAAS,SAAS;GAC5C,WAAW;EACb,OAAO,IAAI,MAAM,SAAS,aAAa;GACrC,SAAS;GACT,WAAW;EACb;CACF;CACA,OAAO;AACT;AAEA,eAAe,sBACb,SACA,MACA,UACA,WACA,QACuB;CACvB,MAAM,WAAW,cAAc,KAAA,IAAY,KAAA,IAAY,KAAK,IAAI,IAAI;CACpE,SAAS;EACP,MAAM,SAAS,MAAM,QAAQ,SAAS,IAAI;EAC1C,IAAI,WAAW,KAAA,KAAa,uBAAuB,QAAQ,QAAQ,MAAM,WACvE,OAAO;EAET,IAAI,aAAa,KAAA,KAAa,KAAK,IAAI,KAAK,UAC1C,MAAM,YAAY,oDAAoD,SAAS,YAAY;EAK7F,MAAM,MAAM,QAAQ,IAAI;CAC1B;AACF;AAEA,SAAS,WAA2B;CAClC,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;CAaJ,OAAO;EACL,SAAA,IAbkB,SAAY,gBAAgB,kBAAkB;GAChE,gBAAgB,UAAU;IACxB,IAAI,MAAM;IACV,OAAO;IACP,eAAe,KAAK;GACtB;GACA,eAAe,UAAU;IACvB,IAAI,MAAM;IACV,OAAO;IACP,cAAc,KAAK;GACrB;EACF,CAEQ;EACN,SAAS;EACT,QAAQ;EACR,eAAe;CACjB;AACF;AAEA,SAAS,YAAY,SAAiB,OAAsD;CAC1F,OAAO,IAAI,oCAAoC,SAAS,KAAK;AAC/D;AAEA,SAAS,WAAW,MAAc,OAA2B;CAC3D,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,uBAAuB,MAAM,GAAG,KAAK,UAAU,KAAK,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AAC5E"}

package/dist/{runtime-CL6nVSEt.js → runtime-BVV9PbmE.js}

@@ -1,15 +1,15 @@
-import { Br as prepareJsonlAppend, Ei as cloneSpend, En as createPushTraceSource, Mi as sleep, Ni as stringifySafe, Oi as hasCompleteCacheBreakdown, Ri as zeroSpend, Rr as isNoEntError, Ti as chargedTokens, Vr as writeAllBytes, X as rollingDispatch, _n as runBrainLoop, bi as notifySandboxEventObserver, ci as detachedFrozen, cn as defaultSelectWinner, dn as createSandboxLineage, fn as probeSandboxCapabilities, ft as InMemoryResultBlobStore, gn as routerBrain, h as withDriverExecutor, hn as readPromptOptions, it as createExecutorRegistry, ji as randomSuffix, ki as isAbortError, mn as assertBoxlessPromptOptions, mt as insideCursorNamespace, n as createSupervisor, oi as executableAgentProfileSnapshot, ot as createWorktreeCliExecutor, pt as InMemorySpawnJournal, rt as createExecutor, si as executableAgentSpecSnapshot, un as runAgentRounds, vn as canonicalObservedModelParts, w as settledToIteration, wi as addSpend, wt as contentAddress, xt as isTraceAnalysisStore, zr as parseCommittedJsonLines } from "./supervisor-DBzsb6Qt.js";
+import { Ai as sleep, Ci as chargedTokens, Di as isAbortError, Ei as hasCompleteCacheBreakdown, Ii as zeroSpend, Ir as isNoEntError, Lr as parseCommittedJsonLines, Rr as prepareJsonlAppend, Si as addSpend, St as contentAddress, Wi as armDeadlineTimer, X as rollingDispatch, ai as executableAgentSpecSnapshot, cn as runAgentRounds, dt as InMemorySpawnJournal, fn as assertBoxlessPromptOptions, ft as insideCursorNamespace, gn as canonicalObservedModelParts, h as withDriverExecutor, hn as runBrainLoop, ii as executableAgentProfileSnapshot, it as createWorktreeCliExecutor, ji as stringifySafe, ki as randomSuffix, ln as createSandboxLineage, mn as routerBrain, n as createSupervisor, nt as createExecutorRegistry, oi as detachedFrozen, on as defaultSelectWinner, pn as readPromptOptions, tt as createExecutor, un as probeSandboxCapabilities, ut as InMemoryResultBlobStore, vi as notifySandboxEventObserver, w as settledToIteration, wi as cloneSpend, wn as createPushTraceSource, yt as isTraceAnalysisStore, zr as writeAllBytes } from "./supervisor-0ksHf44Z.js";
 import { m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-DodWX-cb.js";
-import { E as profileChatClient, S as ObservationError, T as renderReport, b as sample, k as strategyAuthorMethod, v as refine, w as observe, x as sampleThenRefine, y as runAgentic } from "./structural-rollout-Bs6IfZ8d.js";
-import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, t as assertExecutableAgentProfile } from "./model-policy-DKDyr-fc.js";
+import { E as profileChatClient, S as ObservationError, T as renderReport, b as sample, k as strategyAuthorMethod, v as refine, w as observe, x as sampleThenRefine, y as runAgentic } from "./structural-rollout-C_tpSY6Y.js";
+import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
 import { f as sha256Bytes, i as redactProtectedValue, o as canonicalCandidateDigest$1, r as redactProtectedReason, u as immutableCandidateValue } from "./protected-redaction-wGo44k2K.js";
-import { _ as mapExecutorResult, g as gateOnDeliverable, n as supervise } from "./supervise-DYZVP44H.js";
-import "./coordination-driver-GFI-HzJX.js";
+import { _ as mapExecutorResult, g as gateOnDeliverable, n as supervise } from "./supervise-Ah7kMn2p.js";
+import "./coordination-driver-DcwOMS5C.js";
 import "./run-layout-hZREkcfu.js";
-import "./provision-supervisor-DD9Xc1as.js";
-import "./delegate-DiH4-45Z.js";
-import "./graph-CiGsa580.js";
+import "./provision-supervisor-ChEnL5xX.js";
+import "./delegate-C9B_prgp.js";
+import "./graph-B_6SZzlE.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -666,7 +666,7 @@ async function connectStdioMcp(spec) {
 	const pending = /* @__PURE__ */ new Map();
 	const failAllPending = (err) => {
 		for (const p of pending.values()) {
-			clearTimeout(p.timer);
+			p.clearTimer();
 			p.reject(err);
 		}
 		pending.clear();
@@ -693,7 +693,7 @@ async function connectStdioMcp(spec) {
 		const p = pending.get(msg.id);
 		if (!p) return;
 		pending.delete(msg.id);
-		clearTimeout(p.timer);
+		p.clearTimer();
 		p.resolve(msg);
 	});
 	const send = (msg) => {
@@ -703,14 +703,14 @@ async function connectStdioMcp(spec) {
 		if (spawnFault) return reject(spawnFault);
 		if (closed) return reject(/* @__PURE__ */ new Error("MCP connection closed"));
 		const id = nextId++;
-		const timer = setTimeout(() => {
+		const clearTimer = armDeadlineTimer(timeoutMs, () => {
 			pending.delete(id);
 			reject(new Error(redactReason(`${timeoutMessage}${stderrTail()}`)));
-		}, timeoutMs);
+		}, true);
 		pending.set(id, {
 			resolve,
 			reject,
-			timer
+			clearTimer
 		});
 		try {
 			send({
@@ -721,7 +721,7 @@ async function connectStdioMcp(spec) {
 			});
 		} catch (err) {
 			pending.delete(id);
-			clearTimeout(timer);
+			clearTimer();
 			reject(new Error(redactReason(`writing to MCP server stdin failed: ${err instanceof Error ? err.message : String(err)}${stderrTail()}`)));
 		}
 	});
@@ -2576,7 +2576,7 @@ function execute(args, timeoutMs, limit, signal) {
 				if (error.code !== "ESRCH") child.kill("SIGKILL");
 			}
 		};
-		const timer = setTimeout(() => stop("timeout"), timeoutMs);
+		const clearTimer = armDeadlineTimer(timeoutMs, () => stop("timeout"), true);
 		const cancel = () => stop("cancelled");
 		signal?.addEventListener("abort", cancel, { once: true });
 		if (signal?.aborted) cancel();
@@ -2600,7 +2600,7 @@ function execute(args, timeoutMs, limit, signal) {
 			spawnError = error;
 		});
 		child.on("close", (code) => {
-			clearTimeout(timer);
+			clearTimer();
 			signal?.removeEventListener("abort", cancel);
 			const out = Buffer.concat(stdout).toString();
 			const err = Buffer.concat(stderr).toString();
@@ -4271,21 +4271,21 @@ async function preflightModels(cfg) {
 	const failures = (await Promise.allSettled(models.map(async (model) => {
 		const controller = new AbortController();
 		let timeoutError;
-		let timer;
+		let clearTimer;
 		try {
 			await Promise.race([check(model, cfg.worker, controller.signal), new Promise((_, reject) => {
-				timer = setTimeout(() => {
+				clearTimer = armDeadlineTimer(timeoutMs, () => {
 					timeoutError = /* @__PURE__ */ new Error(`timed out after ${timeoutMs} ms`);
 					controller.abort(timeoutError);
 					reject(timeoutError);
-				}, timeoutMs);
+				}, true);
 			})]);
 		} catch (cause) {
 			const reported = timeoutError ?? cause;
 			const message = reported instanceof Error ? reported.message : String(reported);
 			throw new Error(`Benchmark model "${model}" preflight failed: ${message}`, { cause: reported });
 		} finally {
-			if (timer) clearTimeout(timer);
+			clearTimer?.();
 		}
 	}))).flatMap((result) => result.status === "rejected" ? [result.reason] : []);
 	if (failures.length === 1) throw failures[0];
@@ -5727,12 +5727,12 @@ function codeModeSupervisorTools(runner, options = {}) {
 			const execution = new AbortController();
 			let timedOut = false;
 			const onScopeAbort = () => execution.abort(abortReason(context.signal));
-			const timer = timeoutMs === null ? null : setTimeout(() => {
+			const clearTimer = timeoutMs === null ? void 0 : armDeadlineTimer(timeoutMs, () => {
 				if (!execution.signal.aborted) {
 					timedOut = true;
 					execution.abort(new ValidationError(`code mode: program timed out after ${timeoutMs}ms`));
 				}
-			}, timeoutMs);
+			}, true);
 			if (context.signal.aborted) execution.abort(abortReason(context.signal));
 			else context.signal.addEventListener("abort", onScopeAbort, { once: true });
 			const bindings = {};
@@ -5754,7 +5754,7 @@ function codeModeSupervisorTools(runner, options = {}) {
 					signal: execution.signal
 				});
 			} finally {
-				if (timer !== null) clearTimeout(timer);
+				clearTimer?.();
 				context.signal.removeEventListener("abort", onScopeAbort);
 			}
 		}
@@ -7171,4 +7171,4 @@ function tail(s) {
 //#endregion
 export { InMemoryCorpus as $, chatWorkerSeam as A, pairwiseSignificance as At, SandboxRunAbortError as B, createMcpEnvironment as Bt, withUntrackedArtifacts as C, loopDispatch as Ct, codeModeSupervisorTools as D, sentinelCompletion as Dt, runCoderChecks as E, deterministicCompletion as Et, selectChampion as F, auditIntent as Ft, equalKOnCost as G, resolveSecretEnv as Gt, printBenchmarkReport as H, envKeyProvider as Ht, assertStrategyContract as I, defaultAuditorInstruction as It, runPersonified as J, trajectoryReport as K, secretEnvOfMcpServer as Kt, authorStrategy as L, McpSpawnFault as Lt, discriminatingMeans as M, renderLeaderboardMarkdown as Mt, pickChampion as N, renderLeaderboardSvg as Nt, unsafeInProcessRunner as O, stopSentinel as Ot, runStrategyEvolution as P, renderPairwiseMarkdown as Pt, FileCorpus as Q, strategyAuthorContract as R, connectStdioMcp as Rt, copyUntrackedIntoClone as S, loopCampaignDispatch as St, patchDelivered as T, completionAuthorizes as Tt, runBenchmark as U, mcpSecretEnvMetadataKey as Ut, openSandboxRun as V, sanitizeMcpToolSchema as Vt, promotionGate as W, resolveMcpServerLaunch as Wt, createShapeRegistry as X, builtinShapes as Y, registerShape as Z, NOTE_MAX_CHARS as _, harvestCorpus as _t, localShell as a, pipeline as at, composeWorkerEvidence as b, localSandboxClient as bt, createVerifierEnvironment as c, widen as ct, harvestSurfaceDiffs as d, createScopeAnalyst as dt, renderCorpusToInstructions as et, analystsFromRegistry as f, registryScopeAnalyst as ft, EVIDENCE_MAX_CHARS as g, HarvestError as gt, worktreeFanout as h, inProcessSandboxClient as ht, jjWorkspace as i, panel as it, createChatSessionStore as j, renderLeaderboardHtml as jt, chatTransportExecutor as k, leaderboard as kt, boxSurfaceReader as l, assertTraceDerivedFindings as lt, superviseSurface as m, runIsolatedCheck as mt, makeFinding$1 as n, flatWidenGate as nt, runInWorkspace as o, selectValidWinner as ot, failuresAnalyst as p, observationFromRegistry as pt, definePersona as q, createTangleSandboxExactProcessProvider as qt, gitWorkspace as r, loopUntil as rt, createWaterfallCollector as s, verify as st, computeFindingId$1 as t, fanout as tt, fsSurfaceReader as u, buildSteerContext as ut, VERIFY_TAIL_CHARS as v, defineLeaderboard as vt, analyzeTrace as w, superviseDispatch as wt, settledWorkerOut as x, inlineSandboxClient as xt, closingWorkerNote as y, resolveSandboxClient as yt, strategyAuthorSystemPrompt as z, materializeLocalMcp as zt };
 
-//# sourceMappingURL=runtime-CL6nVSEt.js.map
+//# sourceMappingURL=runtime-BVV9PbmE.js.map