@tangle-network/agent-runtime 0.228.0 → 0.229.0

package/dist/{supervisor-DBnQuTyJ.js → supervisor-DAHG98Rs.js}

@@ -5754,6 +5754,165 @@ function generateTraceId() {
 	return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 //#endregion
+//#region src/runtime/native-session-evidence.ts
+/**
+* Read a sandbox child's own harness transcript out of its environment before the
+* environment is destroyed, and persist it beside the tool-span `trace` receipt.
+*
+* Why this exists: Runtime destroys a child's environment at teardown and nothing read
+* those files first, so a child's Claude Code / Codex / OpenCode session never reached a
+* run record. The settled `trace` receipt covers the supervisor's own tool spans only —
+* `toolName`, `args`, `status`, `callId`, with `startedAt === endedAt` — so it carries no
+* assistant text, no reasoning, and no tool results, and `status: 'available'` never meant
+* the transcript survived. See tangle-network/agent-runtime#1214.
+*
+* The port already has what this needs: `AgentEnvironment.read?(path, { signal })`
+* returns a file's content as a string. Two constraints shape the design:
+*
+*   - `read` is OPTIONAL and, on the Tangle provider, gated behind
+*     `capabilities.workspace.read && box.read`. An environment without it is reported as
+*     `unsupported` rather than silently producing an empty artifact — the whole point of
+*     #1214 is that a receipt must not claim coverage it does not have.
+*   - `read` takes one path and gives no directory listing, so enumeration goes through
+*     `exec`. An environment with `read` but no `exec` cannot be enumerated and is also
+*     reported, not guessed at.
+*
+* Storage is NOT this module's business. The executor returns the artifact inside the result
+* it already settles with, and supervise puts that under the child's `outRef` in its own
+* `ResultBlobStore`. No destroy site learns about storage, and replay rehydrates it for free.
+*
+* Credentials are excluded by construction: enumeration lists only the transcript globs
+* for the harness, and any path matching DENY is dropped even if a producer moved a
+* credential file inside a session directory. The helper never reads `auth.json`,
+* `.credentials.json`, `credentials`, or a dotenv file.
+*/
+/** Where each harness keeps the session files that hold the conversation. */
+const HARNESS_ROOTS = Object.freeze({
+	"claude-code": Object.freeze([
+		".claude/projects",
+		".claude/history.jsonl",
+		".claude/todos"
+	]),
+	codex: Object.freeze([".codex/sessions", ".codex/history.jsonl"]),
+	opencode: Object.freeze([".local/share/opencode/storage", ".local/share/opencode/log"]),
+	pi: Object.freeze([".pi/agent/sessions"])
+});
+/**
+* Never read, whatever a producer put inside a session tree.
+*
+* Case-insensitive and broader than the obvious names: `.netrc`, `*.key`, `*.p12`/`*.pfx`
+* and an uppercase `ID_RSA` all slipped an earlier lowercase-only pattern.
+*/
+const DENY = /(^|\/)(auth\.json|\.credentials\.json|credentials|\.netrc|\.env(\..*)?|secrets?(\.|$)|.*\.(pem|key|p12|pfx)|id_[a-z0-9_]+)$/iu;
+/**
+* Bounds per file and in total. These are deliberately modest: the artifact rides inside the
+* settled result that supervise blobs under one `outRef`, so an unbounded transcript would
+* bloat every replay of that child, not just the capture.
+*/
+const MAX_FILE_BYTES = 2 * 1024 * 1024;
+const MAX_TOTAL_BYTES = 16 * 1024 * 1024;
+const MAX_FILES = 1e3;
+function unavailable$2(reason) {
+	return Object.freeze({
+		status: "unavailable",
+		reason
+	});
+}
+/**
+* Enumerate candidate transcript paths inside the environment.
+*
+* `find` is given the roots and prints one path per line. A missing root is not an error:
+* a child that never used a harness has no directory for it.
+*/
+async function enumerate(environment, roots, signal) {
+	if (!environment.exec) return void 0;
+	const command = `find ${roots.map((r) => `"$HOME/${r}"`).join(" ")} -type f -size -${Math.floor(MAX_FILE_BYTES / 1024)}k 2>/dev/null | head -${MAX_FILES}`;
+	try {
+		return ((await environment.exec(command, signal ? { signal } : void 0)).stdout ?? "").split("\n").map((l) => l.trim()).filter((l) => l.length > 0);
+	} catch {
+		return;
+	}
+}
+/**
+* Read the harness transcript out of one LIVE environment.
+*
+* Call this before the environment is destroyed — on the settled path that means before the
+* result is built, since the `finally` that destroys runs after. It never throws: a teardown
+* must not fail because evidence could not be collected, and every failure mode is a named
+* `reason` the settled receipt carries instead of an empty artifact that reads as coverage.
+*/
+async function captureNativeSessionEvidence(environment, harness, signal) {
+	if (!environment?.read) return unavailable$2("unsupported-environment");
+	if (harness === void 0) return unavailable$2("unknown-harness");
+	const roots = HARNESS_ROOTS[harness];
+	if (!roots) return unavailable$2("unknown-harness");
+	const paths = await enumerate(environment, roots, signal);
+	if (paths === void 0) return unavailable$2("enumeration-failed");
+	if (paths.length === 0) return unavailable$2("no-transcript");
+	const files = [];
+	const skipped = [];
+	let total = 0;
+	for (const path of paths) {
+		if (signal?.aborted) {
+			skipped.push({
+				path,
+				reason: "aborted"
+			});
+			continue;
+		}
+		if (DENY.test(path)) {
+			skipped.push({
+				path,
+				reason: "denied-credential-shaped-path"
+			});
+			continue;
+		}
+		if (total >= MAX_TOTAL_BYTES) {
+			skipped.push({
+				path,
+				reason: "total-byte-budget-exhausted"
+			});
+			continue;
+		}
+		try {
+			const content = await environment.read(path, signal ? { signal } : void 0);
+			const bytes = Buffer.byteLength(content, "utf8");
+			if (bytes > MAX_FILE_BYTES) {
+				skipped.push({
+					path,
+					reason: "file-exceeds-byte-bound"
+				});
+				continue;
+			}
+			files.push(Object.freeze({
+				path,
+				bytes,
+				content
+			}));
+			total += bytes;
+		} catch {
+			skipped.push({
+				path,
+				reason: "read-failed"
+			});
+		}
+	}
+	if (files.length === 0) return unavailable$2("no-transcript");
+	const artifact = Object.freeze({
+		schemaVersion: 1,
+		harness,
+		files: Object.freeze(files),
+		skipped: Object.freeze(skipped)
+	});
+	return Object.freeze({
+		status: "available",
+		artifact,
+		fileCount: files.length,
+		totalBytes: total,
+		skippedCount: skipped.length
+	});
+}
+//#endregion
 //#region src/runtime/provider-placement.ts
 const placementMetadataKey = "runtimeProviderPlacement";
 /** Select exactly one declaration before any provider effects. Shared defaults carry infrastructure only. */
@@ -7655,8 +7814,10 @@ async function* streamProviderExecutor(args) {
 		}
 		if ((args.options.requireTerminalEvent ?? true) && !terminal) throw new ValidationError(`providerAsExecutor(${args.provider.name}): stream ended without a terminal result/done/status event`);
 		yield { kind: "iteration" };
+		const nativeSession = await captureNativeSessionEvidence(environment, args.profile.harness, linked);
 		const result = {
 			...resultFromEvents(archive.events(), text),
+			nativeSession,
 			...archive.superseded > 0 ? { supersededPartUpdates: archive.superseded } : {},
 			...explicitFailure ? { outcome: outcomeTracker.finish() } : {}
 		};
@@ -23691,4 +23852,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { cliInPlaceExecutor as $, generateSpanId as $n, runtimeOwnedExecutorProviderEvidence as $r, createCodexRolloutStoreReader as $t, waitUntil as A, sleep as Ai, abortError as An, renderProfileMaterializationIssues as Ar, WORKER_TRACE_PROPAGATION as At, readWorkerInteractiveBinding as B, decodeHarnessUsage as Bi, resolveRedactor as Bn, attestRuntimeOwnedPendingExecutor as Br, AUTHORITY_MARKERS as Bt, scopeOwnerExecutorNodeContext as C, chargedTokens as Ci, sandboxClientAsProvider as Cn, defineProfileMaterializationContract as Cr, BudgetReconcileFault as Ct, pollFor as D, isAbortError$2 as Di, registerRetainedExecutorPreparation as Dn, promptModelProfileMaterialization as Dr, newUsageTotals as Dt, isWaitOutcome as E, hasCompleteCacheBreakdown as Ei, sandboxSessionTraceSource as En, promptControlProfileMaterialization as Er, meterUsageEvent as Et, scopeRetainedOwnerResult as F, withTimeout as Fi, startRetainedRun as Fn, worktreeCliProfileMaterialization as Fr, taskToPrompt as Ft, startRetainedInteractiveRun as G, teardownExecutor as Gi, INTELLIGENCE_WIRE_VERSION as Gn, knownExecutionBindingReceipt as Gr, isPeerMailEnvelope as Gt, workerInteractiveBindingsDir as H, awaitAbortable$1 as Hi, mergeTraceEnv as Hn, authoredProfileDigest as Hr, PEER_MAIL_WIRE_KEY as Ht, interactiveAdmissionSeamKey as I, zeroSpend as Ii, startRetainedRunInEnvironment as In, isNoEntError as Ir, DEFAULT_STALL_AFTER_MS as It, freeSlots as J, providerMessageText as Ji, buildRuntimeEventOtelSpans as Jn, providerAttemptEvidence as Jr, isLiveNodeStatus as Jt, destroyInteractiveEnvironment as K, promptFromAgentTurnInput as Ki, buildLoopOtelSpans as Kn, knownMaterializationReceipt as Kr, peerMailTools as Kt, readWorkerInteractiveAdmissions as L, addResourceSpend as Li, retainedCreateMaterial as Ln, parseCommittedJsonLines as Lr, createActivityLog as Lt, prepareScopeRetainedOwnerTask as M, throwAbort as Mi, runAbortable as Mn, sandboxActProfileMaterialization as Mr, workerTraceEnv as Mt, scopeRetainedOwnerContext as N, throwIfAborted as Ni, reconnectRetainedRun as Nn, unsupportedProfileDimensions as Nr, workerTraceHeaders as Nt, timerAt as O, promptCacheTokenClasses as Oi, retainedExecutorSeamKey as On, promptOnlyProfileMaterialization as Or, spendFromUsageEvents as Ot, scopeRetainedOwnerPriorSpend as P, unmeteredSpend as Pi, recoverRetainedRun as Pn, validateProfileMaterialization as Pr, workerTraceSeamKey as Pt, captureReusableExecutorConfig as Q, flatOtelSpan as Qn, runtimeOwnedExecutorMaterialization as Qr, addHarnessUsage as Qt, workerInteractiveAdmissionFile as R, resourceTelemetry as Ri, defaultRedactor as Rn, prepareJsonlAppend as Rr, readWorkerProgress as Rt, restoreScopeOwnerAcceptedExecution as S, addSpend as Si, resolveAgentEnvironmentProvider as Sn, controlProfileMaterialization as Sr, contentAddress as St, createWaitProbes as T, deleteBoxSafe as Ti, decodeToolPart as Tn, profileMaterializationAxes$1 as Tr, createBudgetPool as Tt, reconnectRetainedInteractiveRun as U, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Ui, readTraceContextFromEnv as Un, finalizeRuntimeOwnedPendingExecutor as Ur, claimsAuthority as Ut, workerInteractiveBindingFile as V, abortError$2 as Vi, createPropagatingTraceEmitter as Vn, attestRuntimeOwnedScopeOwner as Vr, DEFAULT_PEER_MAIL_LIMITS as Vt, recoverRetainedInteractiveRun as W, armDeadlineTimer as Wi, traceContextToEnv as Wn, inheritRuntimeOwnedExecutorAttestation as Wr, createPeerMailbox as Wt, rollingDispatch as X, createOtelExporter as Xn, runtimeOwnedDriveHarnessProviderEvidence as Xr, bridgeAdmissionRefusal as Xt, queueOf as Y, createOpenInferenceFileExporter as Yn, recordRuntimeOwnedDriveHarnessProviderEvidence as Yr, isTerminalNodeStatus as Yt, bindReusableExecutorExecutionId as Z, exportEvalRuns as Zn, runtimeOwnedExecutorExecutionBinding as Zr, bridgeModelRouteRefusal as Zt, createScope as _, mapSandboxToolEvent as _i, observedModelMatchesDeclared as _n, localHarnessExecutable as _r, WORKER_TOOL_TRACE_SCHEMA_VERSION as _t, pickBestDelivered as a, executableAgentSpecSnapshot as ai, createSandboxForSpec as an, createRuntimeStreamEventCollector as ar, DEFAULT_SANDBOX_STEERING_MAX_TURNS as at, meterRuntimeOwnedProviderAttempt as b, sandboxProgressEvents as bi, providerAsExecutor as bn, AGENT_PROFILE_MATERIALIZATION_AXES as br, parseWorkerToolTraceArtifact as bt, DriverAttemptsExhaustedError as c, projectSandboxOutcome as ci, runAgentRounds as cn, sanitizeRuntimeStreamEvent as cr, FileResultBlobStore as ct, runDriverWithRetry as d, canonicalStreamEventFromSandboxEvent as di, acquireSandbox as dn, captureWorktreeDiff as dr, InMemorySpawnJournal as dt, runtimeOwnedPendingExecutorMaterialization as ei, harnessUsageIsEmpty as en, loopEventToOtelSpan as er, cliWorktreeExecutor as et, driverChild as f, createSandboxToolPartState as fi, assertBoxlessPromptOptions as fn, createWorktree as fr, insideCursorNamespace as ft, beginScopeOwnerAttempt as g, mapSandboxEvent as gi, canonicalObservedModelParts as gn, harnessSupportsReasoningEffort as gr, replaySpawnTree as gt, withDriverExecutor as h, isSandboxTerminalEvent as hi, runBrainLoop as hn, LOCAL_HARNESSES as hr, pendingWaits as ht, collectDelivered as i, executableAgentProfileSnapshot as ii, TERMINAL_DECISIONS as in, createRuntimeEventCollector as ir, createWorktreeCliExecutor as it, consumeScopeRetainedOwnerResult as j, stringifySafe as ji, linkAbort as jn, renderUnsupported as jr, readWorkerTraceContext as jt, validateWaitSpec as k, randomSuffix as ki, RunCancellationReason as kn, promptResourceProfileMaterialization as kr, spendFromUsageTotals as kt, classifyDriverFailure as l, readSandboxOutcome as li, createSandboxLineage as ln, runSettledCommand as lr, FileSpawnJournal as lt, isDriverSpec as m, extractLlmCallEvent as mi, routerBrain as mn, DEFAULT_LOCAL_HARNESS as mr, materializeTreeView as mt, createSupervisor as n, unknownExecutionBindingReceipt as ni, bridgeRuntimeAttachmentsKey as nn, padTraceId as nr, createExecutorRegistry as nt, runFinalizer as o, detachedFrozen as oi, defaultSelectWinner as on, sanitizeAgentRuntimeEvent as or, createSteerableSandboxSession as ot, driverExecutorFactory as p, createSandboxUsageLedger as pi, readPromptOptions as pn, removeWorktree as pr, loadSpawnForest as pt, effectiveConcurrency as q, promptOptionsFromAgentTurnInput as qi, buildLoopSpanNodes as qn, newExecutionAttemptId as qr, peerMailVerbNames as qt, bestDelivered as r, unknownMaterializationReceipt as ri, bridgeStopSignalKey as rn, toOtelAttributes as rr, snapshotExecutorConfig as rt, runTree as s, detachedSnapshot as si, isTerminalDecision as sn, sanitizeKnowledgeReadinessReport as sr, createInPlaceCliExecutor as st, createRootHandle as t, runtimeOwnedScopeOwnerRuntime as ti, readCodexRolloutSession as tn, padSpanId as tr, createExecutor as tt, defaultUnmetContractSteer as u, assertSandboxServedModel as ui, probeSandboxCapabilities as un, runWorktreeHarness as ur, InMemoryResultBlobStore as ut, deriveNodeExecutionIdentity as v, notifySandboxEventObserver as vi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as vn, parseCodexTokenUsage as vr, captureWorkerTraceEvidence as vt, settledToIteration as w, cloneSpend as wi, createPushTraceSource as wn, fullProfileMaterialization as wr, assertValidBudget as wt, recordScopeOwnerMaterialization as x, sumSandboxUsage as xi, providerAsSandboxClient as xn, assertProfileMaterialization as xr, workerTraceAnalysisStore as xt, meterRuntimeOwnedAccounting as y, sandboxEventServedBackend as yi, createAgentEnvironmentProviderRegistry as yn, CodexExecutionDiagnosticError as yr, isTraceAnalysisStore as yt, attachWorker as z, withBudgetResources as zi, defaultRedactorIdentityMaterial as zn, writeAllBytes as zr, createInbox as zt };
 
-//# sourceMappingURL=supervisor-DBnQuTyJ.js.map
+//# sourceMappingURL=supervisor-DAHG98Rs.js.map