@tangle-network/agent-runtime 0.229.0 → 0.232.0

package/dist/{substrate-sWW5cDIe.d.ts → substrate-ijm9h_79.d.ts}

@@ -1,4 +1,4 @@
-import { k as Validator, r as Driver, t as AgentRunSpec, w as OutputAdapter } from "./types-Ba5mJkyd.js";
+import { Ir as AgentRunSpec, Rr as Driver, ai as OutputAdapter, ui as Validator } from "./types-C8Fj6hNL.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 //#region src/profiles/coder.d.ts
 /**
@@ -281,4 +281,4 @@ interface UiFinding {
 }
 //#endregion
 export { CoderTask as _, UiFindingSeverity as a, KnowledgeUpdate as c, ResearchSource as d, ResearchTask as f, researcherProfile as g, multiHarnessResearcherFanout as h, UiFindingScreenshot as i, MultiHarnessResearcherFanoutOptions as l, createResearcherValidator as m, UI_LENSES as n, UiLens as o, ResearcherProfileOptions as p, UiFinding as r, KnowledgeItem as s, UI_FINDING_SEVERITIES as t, ResearchOutput as u, coderTaskToPrompt as v };
-//# sourceMappingURL=substrate-sWW5cDIe.d.ts.map
+//# sourceMappingURL=substrate-ijm9h_79.d.ts.map

package/dist/{supervise-DbNMYx7z.js → supervise-CLkM45VY.js}

@@ -1,10 +1,10 @@
-import { $n as generateSpanId, $r as runtimeOwnedExecutorProviderEvidence, Ai as sleep, At as WORKER_TRACE_PROPAGATION, C as scopeOwnerExecutorNodeContext, Cr as defineProfileMaterializationContract, Dn as registerRetainedExecutorPreparation, Dr as promptModelProfileMaterialization, Dt as newUsageTotals, Er as promptControlProfileMaterialization, Et as meterUsageEvent, F as scopeRetainedOwnerResult, Fi as withTimeout, Fr as worktreeCliProfileMaterialization, Gi as teardownExecutor, Ii as zeroSpend, Ir as isNoEntError, Jr as providerAttemptEvidence, Li as addResourceSpend, Lr as parseCommittedJsonLines, M as prepareScopeRetainedOwnerTask, Mn as runAbortable, N as scopeRetainedOwnerContext, Nr as unsupportedProfileDimensions, On as retainedExecutorSeamKey, P as scopeRetainedOwnerPriorSpend, Pi as unmeteredSpend, Q as captureReusableExecutorConfig, Qr as runtimeOwnedExecutorMaterialization, Ri as resourceTelemetry, Rr as prepareJsonlAppend, S as restoreScopeOwnerAcceptedExecution, Si as addSpend, Sn as resolveAgentEnvironmentProvider, Sr as controlProfileMaterialization, St as contentAddress, Tr as profileMaterializationAxes$1, Ui as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Vr as attestRuntimeOwnedScopeOwner, Wr as inheritRuntimeOwnedExecutorAttestation, Xn as createOtelExporter, Xr as runtimeOwnedDriveHarnessProviderEvidence, Xt as bridgeAdmissionRefusal, Yr as recordRuntimeOwnedDriveHarnessProviderEvidence, Z as bindReusableExecutorExecutionId, Zr as runtimeOwnedExecutorExecutionBinding, Zt as bridgeModelRouteRefusal, b as meterRuntimeOwnedProviderAttempt, d as runDriverWithRetry, ei as runtimeOwnedPendingExecutorMaterialization, f as driverChild, g as beginScopeOwnerAttempt, j as consumeScopeRetainedOwnerResult, jr as renderUnsupported, kn as RunCancellationReason, kt as spendFromUsageTotals, m as isDriverSpec, mn as routerBrain, n as createSupervisor, nn as bridgeRuntimeAttachmentsKey, o as runFinalizer, p as driverExecutorFactory, r as bestDelivered, rn as bridgeStopSignalKey, rr as toOtelAttributes, rt as snapshotExecutorConfig, s as runTree, si as detachedSnapshot, t as createRootHandle, ti as runtimeOwnedScopeOwnerRuntime, tt as createExecutor, u as defaultUnmetContractSteer, v as deriveNodeExecutionIdentity, wr as fullProfileMaterialization, wt as assertValidBudget, x as recordScopeOwnerMaterialization, xr as assertProfileMaterialization, y as meterRuntimeOwnedAccounting, zi as withBudgetResources, zt as createInbox } from "./supervisor-DAHG98Rs.js";
-import { i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
+import { $ as bindReusableExecutorExecutionId, $r as providerAttemptEvidence, An as RunCancellationReason, Ar as profileMaterializationAxes$1, At as spendFromUsageTotals, Bi as withTimeout, Br as worktreeCliProfileMaterialization, Bt as createInbox, C as scopeOwnerExecutorNodeContext, Cn as resolveAgentEnvironmentProvider, Di as addSpend, Dr as controlProfileMaterialization, Dt as meterUsageEvent, Er as assertProfileMaterialization, F as scopeRetainedOwnerPriorSpend, Fi as sleep, Gn as contentAddress, Hi as addResourceSpend, Hr as parseCommittedJsonLines, I as scopeRetainedOwnerResult, Ir as renderUnsupported, J as errMessage, Ji as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Kr as attestRuntimeOwnedScopeOwner, M as consumeScopeRetainedOwnerResult, Mn as linkAbort, Mr as promptModelProfileMaterialization, N as prepareScopeRetainedOwnerTask, Nn as runAbortable, On as registerRetainedExecutorPreparation, Or as defineProfileMaterializationContract, Ot as newUsageTotals, P as scopeRetainedOwnerContext, Qt as bridgeModelRouteRefusal, Rr as unsupportedProfileDimensions, S as restoreScopeOwnerAcceptedExecution, Tt as assertValidBudget, Ui as resourceTelemetry, Ur as prepareJsonlAppend, Vi as zeroSpend, Vr as isNoEntError, Wi as withBudgetResources, Xi as teardownExecutor, Yr as inheritRuntimeOwnedExecutorAttestation, Zt as bridgeAdmissionRefusal, ai as runtimeOwnedPendingExecutorMaterialization, at as snapshotExecutorConfig, b as meterRuntimeOwnedProviderAttempt, cr as toOtelAttributes, d as runDriverWithRetry, ei as recordRuntimeOwnedDriveHarnessProviderEvidence, et as captureReusableExecutorConfig, f as driverChild, fi as detachedSnapshot, g as beginScopeOwnerAttempt, hn as routerBrain, ii as runtimeOwnedExecutorProviderEvidence, in as bridgeStopSignalKey, ir as generateSpanId, j as bindScopeRetainedOwnerProvider, jr as promptControlProfileMaterialization, jt as WORKER_TRACE_PROPAGATION, kn as retainedExecutorSeamKey, kr as fullProfileMaterialization, m as isDriverSpec, n as createSupervisor, ni as runtimeOwnedExecutorExecutionBinding, o as runFinalizer, oi as runtimeOwnedScopeOwnerRuntime, p as driverExecutorFactory, r as bestDelivered, ri as runtimeOwnedExecutorMaterialization, rn as bridgeRuntimeAttachmentsKey, rt as createExecutor, s as runTree, t as createRootHandle, ti as runtimeOwnedDriveHarnessProviderEvidence, tr as createOtelExporter, u as defaultUnmetContractSteer, v as deriveNodeExecutionIdentity, x as recordScopeOwnerMaterialization, y as meterRuntimeOwnedAccounting, zi as unmeteredSpend } from "./supervisor-BVAM5glY.js";
+import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-D24y9zg7.js";
-import { t as createStdioToolServer } from "./tool-server-BJbCPhoW.js";
-import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-C6rde-Rv.js";
+import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-x9NEhvHZ.js";
+import { D as coordinationVerbNames, O as createCoordinationTools, S as watchRunCancellation, c as createProgressTracker, d as progressStop, r as driverAgent, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-hXWuo-1n.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-hZREkcfu.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -78,6 +78,7 @@ function gateOnDeliverable(inner, deliverable) {
 		...inner.progress ? { progress: () => inner.progress?.() } : {},
 		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
 		...inner.metered ? { metered: () => inner.metered?.() } : {},
+		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
 		execute(task, signal) {
 			const r = inner.execute(task, signal);
 			if (isAsyncIterable$2(r)) return (async function* () {
@@ -138,6 +139,7 @@ function mapExecutorResult(inner, map) {
 		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
 		...inner.accounting ? { accounting: () => inner.accounting?.() } : {},
 		...inner.metered ? { metered: () => inner.metered?.() } : {},
+		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
 		execute(task, signal) {
 			const execution = inner.execute(task, signal);
 			if (isAsyncIterable$2(execution)) return (async function* () {
@@ -345,6 +347,97 @@ function coordinationHttpHandler(input) {
 	};
 }
 //#endregion
+//#region src/runtime/supervise/coordination-preflight.ts
+const MAX_RESPONSE_BYTES = 1024 * 1024;
+var CoordinationPreflightError = class extends ConfigError {
+	constructor(reason) {
+		super(`coordination public endpoint preflight failed: ${reason}`);
+	}
+};
+function record$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Check the operator's route before it becomes a provider attachment. This does not prove cloud egress. */
+async function preflightPublicCoordination(input) {
+	const deadline = new AbortController();
+	const linked = linkAbort(input.signal, deadline.signal);
+	const timer = setTimeout(() => deadline.abort(), Math.min(input.requestTimeoutMs, 1e4));
+	timer.unref();
+	const rpc = async (method, params) => {
+		const response = await fetch(input.url, {
+			method: "POST",
+			headers: {
+				...input.headers,
+				"content-type": "application/json",
+				accept: "application/json"
+			},
+			body: JSON.stringify({
+				jsonrpc: "2.0",
+				id: method,
+				method,
+				...params ? { params } : {}
+			}),
+			redirect: "manual",
+			signal: linked.signal
+		});
+		if (response.status !== 200) {
+			response.body?.cancel().catch(() => void 0);
+			throw new CoordinationPreflightError(`HTTP ${response.status}`);
+		}
+		const reader = response.body?.getReader();
+		if (!reader) throw new CoordinationPreflightError("invalid MCP response");
+		let size = 0;
+		const chunks = [];
+		try {
+			for (;;) {
+				const part = await reader.read();
+				if (part.done) break;
+				size += part.value.byteLength;
+				if (size > MAX_RESPONSE_BYTES) {
+					reader.cancel().catch(() => void 0);
+					throw new CoordinationPreflightError("response too large");
+				}
+				chunks.push(part.value);
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		let body;
+		try {
+			body = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)));
+		} catch {
+			throw new CoordinationPreflightError("invalid MCP response");
+		}
+		if (!record$1(body) || body.jsonrpc !== "2.0" || body.id !== method || body.error || !record$1(body.result)) throw new CoordinationPreflightError("invalid MCP response");
+		return body.result;
+	};
+	try {
+		await runAbortable(async () => {
+			const initialized = await rpc("initialize", {
+				protocolVersion: PROTOCOL_VERSION,
+				capabilities: {},
+				clientInfo: {
+					name: "agent-runtime-coordination-preflight",
+					version: "1"
+				}
+			});
+			if (initialized.protocolVersion !== "2024-11-05" || !record$1(initialized.serverInfo) || initialized.serverInfo.name !== "coordination" || !record$1(initialized.capabilities) || !record$1(initialized.capabilities.tools)) throw new CoordinationPreflightError("invalid MCP initialization");
+			const listing = await rpc("tools/list");
+			if (!Array.isArray(listing.tools) || listing.tools.some((tool) => !record$1(tool) || typeof tool.name !== "string")) throw new CoordinationPreflightError("invalid MCP tool list");
+			const names = listing.tools.map((tool) => tool.name).sort();
+			if (JSON.stringify(names) !== JSON.stringify([...input.toolNames].sort())) throw new CoordinationPreflightError("coordination tool grants differ");
+		}, linked.signal, "coordination public endpoint preflight cancelled");
+	} catch (error) {
+		if (input.signal.aborted) throw new CoordinationPreflightError("cancelled");
+		if (deadline.signal.aborted) throw new CoordinationPreflightError("timed out");
+		if (error instanceof CoordinationPreflightError) throw error;
+		throw new CoordinationPreflightError("transport unavailable");
+	} finally {
+		clearTimeout(timer);
+		linked.release();
+	}
+}
+//#endregion
 //#region src/runtime/supervise/single-flight-tools.ts
 /**
 * Serve method-supplied supervisor tools on the coordination MCP as single-flight, fenced calls.
@@ -529,10 +622,11 @@ async function serveCoordinationMcp(opts) {
 	const rotateCredential = () => {
 		if (!opts.authentication) throw new ConfigError("coordination authentication is not configured");
 		if (closed) throw new ConfigError("coordination server is closed");
-		const expiresAt = Date.now() + (auth?.ttlMs ?? 9e5);
-		if (!Number.isSafeInteger(expiresAt)) throw new ConfigError("coordination credential expiry must remain a safe integer");
+		const deadline = opts.scope.budget.deadlineMs;
+		const expiresAt = auth?.ttlMs === void 0 ? deadline > 0 ? deadline : void 0 : Date.now() + auth.ttlMs;
+		if (expiresAt !== void 0 && !Number.isSafeInteger(expiresAt)) throw new ConfigError("coordination credential expiry must remain a safe integer");
 		for (const [credential, expiry] of revoked) if (expiry <= Date.now()) revoked.delete(credential);
-		if (token) revoked.set(token.toString(), credentialExpiresAt);
+		if (token) revoked.set(token.toString(), credentialExpiresAt ?? Number.POSITIVE_INFINITY);
 		credentialExpiresAt = expiresAt;
 		const nonce = randomBytes(32).toString("base64url");
 		let text = nonce;
@@ -543,7 +637,7 @@ async function serveCoordinationMcp(opts) {
 				actor: identity.actorId,
 				audience: credentialAudience,
 				grants: grantDigest,
-				expires: credentialExpiresAt,
+				expires: credentialExpiresAt ?? null,
 				nonce
 			})).toString("base64url");
 			text = `${payload}.${createHmac("sha256", signingKeys.keys[signingKeys.activeKeyId]).update(payload).digest("base64url")}`;
@@ -552,8 +646,9 @@ async function serveCoordinationMcp(opts) {
 		headers = Object.freeze({ Authorization: `Bearer ${text}` });
 	};
 	const validCredential = (supplied) => {
-		if (closed || revoked.has(supplied.toString())) return false;
-		if (!signingKeys) return token !== void 0 && Date.now() < credentialExpiresAt && supplied.length === token.length && timingSafeEqual(supplied, token);
+		const deadline = opts.scope.budget.deadlineMs;
+		if (closed || opts.scope.signal.aborted || deadline > 0 && Date.now() >= deadline || revoked.has(supplied.toString())) return false;
+		if (!signingKeys) return token !== void 0 && (credentialExpiresAt === void 0 || Date.now() < credentialExpiresAt) && supplied.length === token.length && timingSafeEqual(supplied, token);
 		if (supplied.length > 8192) return false;
 		try {
 			const parts = supplied.toString().split(".");
@@ -563,7 +658,7 @@ async function serveCoordinationMcp(opts) {
 			if (!claims || typeof claims.key !== "string" || !Object.hasOwn(signingKeys.keys, claims.key)) return false;
 			const expected = createHmac("sha256", signingKeys.keys[claims.key]).update(payload).digest();
 			const signature = Buffer.from(parts[1], "base64url");
-			return signature.length === expected.length && timingSafeEqual(signature, expected) && claims.run === identity.runId && claims.actor === identity.actorId && claims.audience === credentialAudience && claims.grants === grantDigest && Number.isSafeInteger(claims.expires) && claims.expires > Date.now();
+			return signature.toString("base64url") === parts[1] && signature.length === expected.length && timingSafeEqual(signature, expected) && claims.run === identity.runId && claims.actor === identity.actorId && claims.audience === credentialAudience && claims.grants === grantDigest && (claims.expires === null && auth?.ttlMs === void 0 || Number.isSafeInteger(claims.expires) && claims.expires > Date.now());
 		} catch {
 			return false;
 		}
@@ -669,8 +764,19 @@ async function serveCoordinationMcp(opts) {
 		audiences.add(publicAddress.host);
 		if (host === "0.0.0.0" || host === "::") audiences.add(`127.0.0.1:${port}`);
 		paths.add(publicAddress.pathname);
+		if (configured !== void 0) await preflightPublicCoordination({
+			url,
+			headers,
+			signal: opts.scope.signal,
+			requestTimeoutMs,
+			toolNames: selectedNames
+		});
 	} catch (error) {
-		await new Promise((resolve) => server.close(() => resolve()));
+		closed = true;
+		await new Promise((resolve) => {
+			server.close(() => resolve());
+			server.closeAllConnections();
+		});
 		throw error;
 	}
 	const mailbox = coord.peerMail;
@@ -1452,9 +1558,10 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 	if (harness === null && deps.peerMail) throw new ValidationError("supervisorAgent: peerMail is only served by a harness-brained supervisor (profile.harness set). A router-brained supervisor serves no coordination MCP listener, so there is no peer-mail post office to mint worker capabilities from.");
 	if (harness !== null && deps.compaction) throw new ValidationError("supervisorAgent: compaction is only supported for router-brained supervisors (profile.harness omitted or cli-base)");
 	if (harness === null && (deps.repromptOnUnmet !== void 0 || deps.onUnmetContract !== void 0)) throw new ValidationError("supervisorAgent: repromptOnUnmet/onUnmetContract apply to an EXTERNAL-harness supervisor only (profile.harness set). A router-brained supervisor runs its own turn loop in process, so this option would be silently ignored.");
-	if (deps.repromptOnUnmet !== void 0 && (!Number.isInteger(deps.repromptOnUnmet) || deps.repromptOnUnmet < 0)) throw new ValidationError("supervisorAgent: repromptOnUnmet must be a non-negative integer (0 = never re-prompt)");
-	if (deps.onUnmetContract !== void 0 && (deps.repromptOnUnmet ?? 0) <= 0) throw new ValidationError("supervisorAgent: onUnmetContract needs repromptOnUnmet >= 1 — without a cap the hook is never consulted");
-	if ((deps.repromptOnUnmet ?? 0) > 0 && deps.deliverable === void 0) throw new ValidationError("supervisorAgent: repromptOnUnmet needs a `deliverable` completion check — with no check there is no contract that can be unmet, and every run would re-prompt");
+	if (deps.repromptOnUnmet !== void 0 && deps.repromptOnUnmet !== "until-complete" && (!Number.isInteger(deps.repromptOnUnmet) || deps.repromptOnUnmet < 0)) throw new ValidationError("supervisorAgent: repromptOnUnmet must be a non-negative integer or 'until-complete' (0 = never re-prompt)");
+	const repromptEnabled = deps.repromptOnUnmet === "until-complete" || (deps.repromptOnUnmet ?? 0) > 0;
+	if (deps.onUnmetContract !== void 0 && !repromptEnabled) throw new ValidationError("supervisorAgent: onUnmetContract needs repromptOnUnmet >= 1 or 'until-complete'");
+	if (repromptEnabled && deps.deliverable === void 0) throw new ValidationError("supervisorAgent: repromptOnUnmet needs a `deliverable` completion check — with no check there is no contract that can be unmet, and every run would re-prompt");
 	if (harness === null) {
 		assertRouterArmResourcePolicy(stableProfile);
 		const brain = testBrain ?? routerBrainFromProfile(stableProfile, stableRouter);
@@ -1594,6 +1701,14 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				const baseTokensLeft = scope.budget.tokensLeft;
 				const contractDeclared = deps.deliverable !== void 0;
 				const maxReprompts = deps.repromptOnUnmet ?? 0;
+				let candidate;
+				const finalize = () => runFinalizer(deps.finalizer ?? bestDelivered, {
+					settled: mcp.settled(),
+					blobs: deps.blobs,
+					tree: runTree(scope),
+					budget: scope.budget,
+					...deps.deliverable ? { deliverable: deps.deliverable } : {}
+				});
 				const readProgress = () => {
 					const settled = mcp.settled();
 					const deliveredCount = settled.filter((w) => w.status === "done" && w.valid === true).length;
@@ -1603,11 +1718,12 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 						settledCount: settled.length,
 						submitted,
 						deliveredCount,
-						contract: !contractDeclared ? "none" : submitted || deliveredCount > 0 ? "met" : "unmet"
+						contract: !contractDeclared ? "none" : submitted || candidate !== void 0 ? "met" : "unmet"
 					};
 				};
 				await runDriverWithRetry({
 					drive: async (attempt, reentry) => {
+						candidate = void 0;
 						if (deps.controlDir !== void 0 && deps.abortRun !== void 0) applyRunCancellation(deps.controlDir, deps.abortRun, () => (/* @__PURE__ */ new Date()).toISOString());
 						scope.signal.throwIfAborted();
 						beginScopeOwnerAttempt(scope, attempt);
@@ -1626,12 +1742,16 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 						} catch (error) {
 							if (!mcp.submittedResult() && !mcp.isStopped()) throw error;
 						}
+						if (contractDeclared && !mcp.submittedResult()) {
+							await mcp.drainResolved();
+							candidate = await finalize();
+						}
 					},
 					progress: readProgress,
 					budget: () => scope.budget,
 					signal: scope.signal,
 					...deps.driverRetry ? { policy: deps.driverRetry } : {},
-					...maxReprompts > 0 ? { reprompt: {
+					...repromptEnabled ? { reprompt: {
 						maxReprompts,
 						...deps.deliverable?.describe === void 0 ? {} : { describe: deps.deliverable.describe },
 						onUnmetContract: async (context) => {
@@ -1641,18 +1761,13 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 					} } : {},
 					...deps.onDriverAttempt ? { onAttempt: deps.onDriverAttempt } : {}
 				});
-				await mcp.drainResolved();
+				if (!contractDeclared) await mcp.drainResolved();
 				const submitted = mcp.submittedResult();
 				if (submitted) {
 					deps.onAcceptedSubmission?.(submitted.result);
 					return submitted.result;
 				}
-				return await runFinalizer(deps.finalizer ?? bestDelivered, {
-					settled: mcp.settled(),
-					blobs: deps.blobs,
-					tree: runTree(scope),
-					budget: scope.budget
-				});
+				return contractDeclared ? candidate : await finalize();
 			} finally {
 				await mcp.close();
 			}
@@ -1890,6 +2005,7 @@ function retryPreSpawnRefusals(inner, policy, hooks = {}) {
 		...inner.progress ? { progress: () => inner.progress?.() } : {},
 		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
 		...inner.metered ? { metered: () => inner.metered?.() } : {},
+		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
 		...inner.interactive === void 0 ? {} : { interactive: () => interactiveOf(inner) },
 		execute(task, signal) {
 			const first = inner.execute(task, signal);
@@ -2364,6 +2480,7 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	let activeExecutor;
 	const drive = async ({ profile, authoredProfile, task, scope, coordinationMcpUrl, coordinationMcpHeaders, stopSignal, coordinationTools }) => {
 		const retainedOwner = boundBackend.backend === "provider" ? scopeRetainedOwnerContext(scope) : void 0;
+		if (retainedOwner && boundBackend.backend === "provider") bindScopeRetainedOwnerProvider(scope, resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry));
 		const originalTask = retainedOwner ? await prepareScopeRetainedOwnerTask(scope, task) : task;
 		if (retainedOwner ? await scopeRetainedOwnerResult(scope) : void 0) {
 			await restoreScopeOwnerAcceptedExecution(scope);
@@ -2692,11 +2809,10 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 					telemetry: "unknown-after-failure"
 				});
 			} catch (error) {
-				const budget = scope.budget;
-				if (budget.tokensKnown !== false || budget.usdCapped && budget.usdKnown !== false) failure = error;
+				failure = new RuntimeRunStateError(`${errMessage(failure)}; accounting failed: ${errMessage(error)}`, { cause: failure });
 			}
 			try {
-				await teardownOnce(completed ? DEFAULT_SUCCESSFUL_SHUTDOWN_MS : "brutalKill");
+				if (!retainedOwner?.preserveEnvironment || retainedOwner.admissions.length === 0) await teardownOnce(completed ? DEFAULT_SUCCESSFUL_SHUTDOWN_MS : "brutalKill");
 			} catch (error) {
 				if (!failed) {
 					failed = true;
@@ -3558,4 +3674,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { createSupervisorSpanRecorder as _, isPreSpawnExecutorFailure as a, mapExecutorResult as b, withWorkerSpawnRetry as c, resolveSupervisorProfile as d, supervisorAgent as f, readRootStreamReceipt as g, readRootStream as h, workerFromBackend as i, assertCoordinationBinding as l, ROOT_STREAM_FILE as m, supervise as n, resolveWorkerSpawnRetry as o, supervisorAgentWithTestBrain as p, superviseWithTestBrain as r, retryPreSpawnRefusals as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, coordinationProfileToolPrefix as u, serveCoordinationMcp as v, gateOnDeliverable as y };
 
-//# sourceMappingURL=supervise-DbNMYx7z.js.map
+//# sourceMappingURL=supervise-CLkM45VY.js.map