@tangle-network/agent-runtime 0.239.0 → 0.246.0

package/dist/{supervisor-De0lytFU.js → supervisor-tGq-TPIv.js}

@@ -1,7 +1,7 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-BbSCSak0.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-D24y9zg7.js";
+import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced, isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -2797,6 +2797,57 @@ function isAxisSupported(axis, supported) {
 	return supported.has(axis);
 }
 //#endregion
+//#region src/runtime/process-tree.ts
+const processKillGraceMs = 250;
+const processGroupExitConfirmMs = 1e3;
+const processGroupExitPollMs = 10;
+function signalProcessTree(child, signal) {
+	if (process.platform !== "win32" && typeof child.pid === "number") try {
+		process.kill(-child.pid, signal);
+		return;
+	} catch (err) {
+		if (err.code === "ESRCH") return;
+	}
+	try {
+		child.kill(signal);
+	} catch {}
+}
+/** Terminate one owned process group and confirm its disappearance; detached sessions are outside it. */
+async function terminateProcessTreeAndConfirm(child, leaderClosed, context = "runLocalHarness") {
+	signalProcessTree(child, "SIGTERM");
+	if (process.platform === "win32" || typeof child.pid !== "number") {
+		const graceDeadline = Date.now() + processKillGraceMs;
+		while (!leaderClosed() && Date.now() < graceDeadline) await delayUntilNextProcessCheck(graceDeadline);
+		if (!leaderClosed()) signalProcessTree(child, "SIGKILL");
+		return;
+	}
+	const processGroupId = child.pid;
+	if (await waitForProcessGroupExit(processGroupId, Date.now() + processKillGraceMs)) return;
+	signalProcessTree(child, "SIGKILL");
+	if (await waitForProcessGroupExit(processGroupId, Date.now() + processGroupExitConfirmMs)) return;
+	throw new Error(`${context}: process group ${processGroupId} survived SIGKILL`);
+}
+async function waitForProcessGroupExit(processGroupId, deadline) {
+	while (processGroupExists(processGroupId)) {
+		if (Date.now() >= deadline) return false;
+		await delayUntilNextProcessCheck(deadline);
+	}
+	return true;
+}
+async function delayUntilNextProcessCheck(deadline) {
+	const delayMs = Math.min(processGroupExitPollMs, Math.max(0, deadline - Date.now()));
+	if (delayMs > 0) await new Promise((resolve) => setTimeout(resolve, delayMs));
+}
+function processGroupExists(processGroupId) {
+	try {
+		process.kill(-processGroupId, 0);
+		return true;
+	} catch (err) {
+		if (err.code === "ESRCH") return false;
+		return true;
+	}
+}
+//#endregion
 //#region src/mcp/codex-diagnostics.ts
 /** Thrown when reproducible Codex exits without one valid terminal usage event. */
 var CodexExecutionDiagnosticError = class extends Error {
@@ -3127,9 +3178,6 @@ function harnessProfileModel(harness, profile) {
 	return model;
 }
 const DEFAULT_MAX_OUTPUT_BYTES = 64 * 1024 * 1024;
-const processKillGraceMs = 250;
-const processGroupExitConfirmMs = 1e3;
-const processGroupExitPollMs = 10;
 var RollingByteCapture = class {
 	maxBytes;
 	chunks = [];
@@ -3979,51 +4027,6 @@ function sha256File(path) {
 		stream.on("end", () => resolveDigest(hash.digest("hex")));
 	});
 }
-function signalProcessTree(child, signal) {
-	if (process.platform !== "win32" && typeof child.pid === "number") try {
-		process.kill(-child.pid, signal);
-		return;
-	} catch (err) {
-		if (err.code === "ESRCH") return;
-	}
-	try {
-		child.kill(signal);
-	} catch {}
-}
-async function terminateProcessTreeAndConfirm(child, leaderClosed, context = "runLocalHarness") {
-	signalProcessTree(child, "SIGTERM");
-	if (process.platform === "win32" || typeof child.pid !== "number") {
-		const graceDeadline = Date.now() + processKillGraceMs;
-		while (!leaderClosed() && Date.now() < graceDeadline) await delayUntilNextProcessCheck(graceDeadline);
-		if (!leaderClosed()) signalProcessTree(child, "SIGKILL");
-		return;
-	}
-	const processGroupId = child.pid;
-	if (await waitForProcessGroupExit(processGroupId, Date.now() + processKillGraceMs)) return;
-	signalProcessTree(child, "SIGKILL");
-	if (await waitForProcessGroupExit(processGroupId, Date.now() + processGroupExitConfirmMs)) return;
-	throw new Error(`${context}: process group ${processGroupId} survived SIGKILL`);
-}
-async function waitForProcessGroupExit(processGroupId, deadline) {
-	while (processGroupExists(processGroupId)) {
-		if (Date.now() >= deadline) return false;
-		await delayUntilNextProcessCheck(deadline);
-	}
-	return true;
-}
-async function delayUntilNextProcessCheck(deadline) {
-	const delayMs = Math.min(processGroupExitPollMs, Math.max(0, deadline - Date.now()));
-	if (delayMs > 0) await new Promise((resolve) => setTimeout(resolve, delayMs));
-}
-function processGroupExists(processGroupId) {
-	try {
-		process.kill(-processGroupId, 0);
-		return true;
-	} catch (err) {
-		if (err.code === "ESRCH") return false;
-		return true;
-	}
-}
 /**
 * Parse and validate the one terminal usage event emitted by `codex exec --json`.
 *
@@ -5622,7 +5625,8 @@ const DEFAULT_INTELLIGENCE_BASE = "https://intelligence.tangle.tools";
 * Ship self-improvement eval-run events to Tangle Intelligence. Unlike the
 * best-effort span exporter, this RESOLVES with the ingest verdict (accepted /
 * rejected per event) so a consumer's loop can assert its provenance landed.
-* Throws only on a missing key or network failure.
+* Success requires a complete, valid acknowledgement accepting every event.
+* Throws on a missing key, network failure, or unreadable/inconsistent acknowledgement.
 */
 async function exportEvalRuns(events, config) {
 	if (events.length === 0) return {
@@ -5632,8 +5636,9 @@ async function exportEvalRuns(events, config) {
 		rejected: []
 	};
 	const apiKey = config?.apiKey ?? (typeof process !== "undefined" ? process.env.TANGLE_API_KEY : void 0);
-	if (!apiKey) throw new Error("exportEvalRuns: apiKey required (pass config.apiKey or set TANGLE_API_KEY)");
+	if (!apiKey?.trim()) throw new Error("exportEvalRuns: apiKey required (pass config.apiKey or set TANGLE_API_KEY)");
 	const url = `${(config?.base ?? (typeof process !== "undefined" ? process.env.TANGLE_INTELLIGENCE_URL : void 0) ?? DEFAULT_INTELLIGENCE_BASE).replace(/\/+$/, "")}/v1/ingest/eval-runs`;
+	const count = events.length;
 	const res = await fetch(url, {
 		method: "POST",
 		headers: {
@@ -5647,15 +5652,35 @@ async function exportEvalRuns(events, config) {
 			events
 		})
 	});
-	let parsed = {};
+	const invalid = (reason) => {
+		throw new Error(`exportEvalRuns: ${reason} (HTTP ${res.status})`);
+	};
+	let parsed;
 	try {
 		parsed = await res.json();
-	} catch {}
+	} catch {
+		return invalid("Unreadable eval-runs acknowledgement");
+	}
+	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return invalid("Invalid eval-runs acknowledgement");
+	const { accepted, rejected } = parsed;
+	if (!Number.isSafeInteger(accepted) || accepted < 0 || accepted > count || !Array.isArray(rejected)) return invalid("Invalid eval-runs acknowledgement counts");
+	const indices = /* @__PURE__ */ new Set();
+	const validated = [];
+	for (const item of rejected) {
+		if (item === null || typeof item !== "object" || Array.isArray(item) || !Number.isSafeInteger(item.index) || item.index < 0 || item.index >= count || indices.has(item.index) || typeof item.reason !== "string" || !item.reason.trim()) return invalid("Invalid eval-runs acknowledgement rejection");
+		indices.add(item.index);
+		validated.push({
+			index: item.index,
+			reason: item.reason
+		});
+	}
+	if (accepted + validated.length !== count) return invalid("Incomplete eval-runs acknowledgement");
+	if (!res.ok && accepted !== 0) return invalid("Failed HTTP response claimed accepted eval-runs");
 	return {
-		ok: res.ok,
+		ok: res.ok && accepted === count && validated.length === 0,
 		status: res.status,
-		accepted: parsed.accepted ?? (res.ok ? events.length : 0),
-		rejected: parsed.rejected ?? []
+		accepted,
+		rejected: validated
 	};
 }
 //#endregion
@@ -7264,6 +7289,46 @@ async function runAbortable(act, signal, fallback) {
 	});
 }
 //#endregion
+//#region src/runtime/supervise/cost-estimate.ts
+/**
+* Pricing for work that arrived without a provider receipt.
+*
+* A turn whose provider reported no billed dollars used to reach the dollar channel as a
+* known `$0`, so a run that certainly spent money reported a dollar total of zero. A catalog
+* price is not a receipt, so what this module produces is always marked, never promoted.
+*/
+/**
+* Price one unit of work that no provider receipt covered.
+*
+* The event always carries `usdKnown: false`: a catalog price approximates what a provider
+* WOULD bill, never measures what it did. The priced amount is repeated in `usdEstimated` so
+* a consumer can subtract it from `usd` and recover the dollars a provider actually billed.
+*
+* A model with no catalog entry yields `usd: 0` with `usdKnown: false` and no `usdEstimated`.
+* The turn then reads as unknown dollars, which is true, rather than as a free turn.
+*/
+function priceUnreceiptedWork(work) {
+	const unknown = {
+		kind: "cost",
+		usd: 0,
+		usdKnown: false,
+		provenance: "uncaptured"
+	};
+	const { inputTokens, outputTokens, model } = work;
+	if (model === void 0 || !isModelPriced(model)) return unknown;
+	if (!Number.isFinite(inputTokens) || !Number.isFinite(outputTokens)) return unknown;
+	if (inputTokens < 0 || outputTokens < 0) return unknown;
+	const usd = estimateCost(inputTokens, outputTokens, model);
+	if (!Number.isFinite(usd) || usd <= 0) return unknown;
+	return {
+		kind: "cost",
+		usd,
+		usdKnown: false,
+		usdEstimated: usd,
+		provenance: "catalog-estimate"
+	};
+}
+//#endregion
 //#region src/runtime/supervise/retained-executor.ts
 /** Scope owns the durable writer; provider executors only publish sanitized admissions. */
 const retainedExecutorSeamKey = "runtime.retainedExecutor";
@@ -8045,6 +8110,9 @@ async function* streamProviderExecutor(args) {
 	let sawCostEstimate = false;
 	let pendingUnpricedWork = false;
 	let pendingEstimate;
+	/** The model id a usage receipt reported, when it reported one. Only a catalog can price a run
+	*  the provider never billed, and only a model id can address a catalog. */
+	let observedModel;
 	let usdEstimated = 0;
 	let usd = 0;
 	let text = "";
@@ -8085,10 +8153,11 @@ async function* streamProviderExecutor(args) {
 		}
 		yield* creditUsage(usageLedger.settleTurn(args.profile.name ?? "agent"));
 		if (pendingUnpricedWork) {
-			const estimate = pendingEstimate ?? 0;
+			const estimated = pendingEstimate ?? (usd === 0 ? catalogPrice() : void 0);
+			const estimate = estimated ?? 0;
 			sawUnknownCostReceipt = true;
 			usd += estimate;
-			if (pendingEstimate !== void 0) {
+			if (estimated !== void 0) {
 				sawCostEstimate = true;
 				usdEstimated += estimate;
 			}
@@ -8096,8 +8165,8 @@ async function* streamProviderExecutor(args) {
 				kind: "cost",
 				usd: estimate,
 				usdKnown: false,
-				...pendingEstimate === void 0 ? {} : { usdEstimated: estimate },
-				provenance: pendingEstimate === void 0 ? "uncaptured" : "catalog-estimate"
+				...estimated === void 0 ? {} : { usdEstimated: estimate },
+				provenance: estimated === void 0 ? "uncaptured" : "catalog-estimate"
 			};
 		}
 		if ((args.options.requireTerminalEvent ?? true) && !terminal) throw new ValidationError(`providerAsExecutor(${args.provider.name}): stream ended without a terminal result/done/status event`);
@@ -8162,8 +8231,33 @@ async function* streamProviderExecutor(args) {
 		}
 	}
 	if (failed) throw failure;
+	/**
+	* The catalog price of this execution's whole token total, under the first model id the catalog
+	* knows. Undefined when none prices, so an unpriced model settles with no estimate at all rather
+	* than a zero one — absence says "nothing could be priced", a zero would say "priced at nothing".
+	*
+	* Candidates run most specific first: the id a usage receipt reported, then the turn's own
+	* model, then the profile's. A provider that selected its own default declares no profile model,
+	* so a reported id is then the only one a catalog can match.
+	*/
+	function catalogPrice() {
+		for (const model of [
+			observedModel,
+			turn.model,
+			concreteProfileModel(args.createProfile)
+		]) {
+			if (model === void 0) continue;
+			const priced = priceUnreceiptedWork({
+				inputTokens: tokens.input,
+				outputTokens: tokens.output,
+				model
+			});
+			if (priced.usdKnown === false && priced.usdEstimated !== void 0) return priced.usdEstimated;
+		}
+	}
 	function* creditUsage(receipt, event) {
 		if (receipt === void 0) return;
+		if (receipt.model !== (args.profile.name ?? "agent")) observedModel = receipt.model;
 		const hasTokens = receipt.tokensIn !== void 0 || receipt.tokensOut !== void 0;
 		if (hasTokens && receipt.tokensIn !== void 0 && receipt.tokensOut !== void 0 && receipt.tokensKnown !== false) sawCompleteTokenReceipt = true;
 		else if (hasTokens || receipt.tokensKnown === false || receipt.tokensUnknownReason) sawIncompleteTokenReceipt = true;
@@ -9654,7 +9748,11 @@ async function runBrainLoop(opts) {
 	for (let turn = 1; maxTurns === 0 || turn <= maxTurns; turn += 1) {
 		if (opts.hooks?.stopBefore?.(turn)) break;
 		await opts.hooks?.beforeTurn?.(turn, messages);
-		if (opts.compaction) await maybeCompact(messages, opts.compaction, turn);
+		if (opts.hooks?.stopBefore?.(turn)) break;
+		if (opts.compaction) {
+			await maybeCompact(messages, opts.compaction, turn);
+			if (opts.hooks?.stopBefore?.(turn)) break;
+		}
 		const r = await opts.chat(messages, opts.tools);
 		completedTurns = turn;
 		if (r.usage) {
@@ -13293,46 +13391,6 @@ function providerDispatchFromErrorBody(body) {
 	return error.provider_dispatch === "not_started" ? "not_started" : void 0;
 }
 //#endregion
-//#region src/runtime/supervise/cost-estimate.ts
-/**
-* Pricing for work that arrived without a provider receipt.
-*
-* A turn whose provider reported no billed dollars used to reach the dollar channel as a
-* known `$0`, so a run that certainly spent money reported a dollar total of zero. A catalog
-* price is not a receipt, so what this module produces is always marked, never promoted.
-*/
-/**
-* Price one unit of work that no provider receipt covered.
-*
-* The event always carries `usdKnown: false`: a catalog price approximates what a provider
-* WOULD bill, never measures what it did. The priced amount is repeated in `usdEstimated` so
-* a consumer can subtract it from `usd` and recover the dollars a provider actually billed.
-*
-* A model with no catalog entry yields `usd: 0` with `usdKnown: false` and no `usdEstimated`.
-* The turn then reads as unknown dollars, which is true, rather than as a free turn.
-*/
-function priceUnreceiptedWork(work) {
-	const unknown = {
-		kind: "cost",
-		usd: 0,
-		usdKnown: false,
-		provenance: "uncaptured"
-	};
-	const { inputTokens, outputTokens, model } = work;
-	if (model === void 0 || !isModelPriced(model)) return unknown;
-	if (!Number.isFinite(inputTokens) || !Number.isFinite(outputTokens)) return unknown;
-	if (inputTokens < 0 || outputTokens < 0) return unknown;
-	const usd = estimateCost(inputTokens, outputTokens, model);
-	if (!Number.isFinite(usd) || usd <= 0) return unknown;
-	return {
-		kind: "cost",
-		usd,
-		usdKnown: false,
-		usdEstimated: usd,
-		provenance: "catalog-estimate"
-	};
-}
-//#endregion
 //#region src/runtime/supervise/executor-outcome.ts
 const outcomeSchema = AgentTurnResultSchema.pick({
 	success: true,
@@ -23148,6 +23206,7 @@ function makeTreeView(root, children) {
 		...c.materialization ? { materialization: c.materialization } : {},
 		...c.executionBindings.length > 0 ? { executionBindings: Object.freeze([...c.executionBindings]) } : {},
 		spent: c.spent,
+		...c.resolved !== void 0 && !c.delivered ? { settlementPending: { kind: c.resolved.kind } } : {},
 		...c.settledAt === void 0 ? {} : { settledAt: c.settledAt },
 		...c.outRef ? { outRef: c.outRef } : {},
 		...c.trace ? { trace: c.trace } : {},
@@ -25046,6 +25105,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { startRetainedInteractiveRun as $, decodeHarnessUsage as $i, contentAddress as $n, attestRuntimeOwnedPendingExecutor as $r, isPeerMailEnvelope as $t, validateWaitSpec as A, mapSandboxToolEvent as Ai, providerAsSandboxClient as An, localHarnessExecutable as Ar, workerTraceAnalysisStore as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, isAbortError$2 as Bi, linkAbort as Bn, promptModelProfileMaterialization as Br, workerTraceEnv as Bt, restoreScopeOwnerAcceptedExecution as C, assertSandboxServedModel as Ci, routerBrain as Cn, runWorktreeHarness as Cr, materializeTreeView as Ct, isWaitOutcome as D, extractLlmCallEvent as Di, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Dn, DEFAULT_LOCAL_HARNESS as Dr, captureWorkerTraceEvidence as Dt, createWaitProbes as E, createSandboxUsageLedger as Ei, observedModelMatchesDeclared as En, removeWorktree as Er, WORKER_TOOL_TRACE_SCHEMA_VERSION as Et, prepareScopeRetainedOwnerTask as F, addSpend as Fi, sandboxSessionTraceSource as Fn, controlProfileMaterialization as Fr, newUsageTotals as Ft, readWorkerInteractiveAdmissions as G, throwAbort as Gi, startRetainedRunInEnvironment as Gn, sandboxActProfileMaterialization as Gr, createActivityLog as Gt, hostDirectoryReader as H, randomSuffix as Hi, reconnectRetainedRun as Hn, promptResourceProfileMaterialization as Hr, workerTraceSeamKey as Ht, scopeRetainedOwnerContext as I, chargedTokens as Ii, registerRetainedExecutorPreparation as In, defineProfileMaterializationContract as Ir, spendFromUsageEvents as It, readWorkerInteractiveBinding as J, withTimeout as Ji, defaultRedactorIdentityMaterial as Jn, worktreeCliProfileMaterialization as Jr, AUTHORITY_MARKERS as Jt, workerInteractiveAdmissionFile as K, throwIfAborted as Ki, retainedCreateMaterial as Kn, unsupportedProfileDimensions as Kr, readWorkerProgress as Kt, scopeRetainedOwnerPriorSpend as L, cloneSpend as Li, retainedExecutorSeamKey as Ln, fullProfileMaterialization as Lr, spendFromUsageTotals as Lt, bindScopeRetainedOwnerEnvironmentId as M, sandboxEventServedBackend as Mi, sandboxClientAsProvider as Mn, CodexExecutionDiagnosticError as Mr, assertValidBudget as Mt, bindScopeRetainedOwnerProvider as N, sandboxProgressEvents as Ni, createPushTraceSource as Nn, AGENT_PROFILE_MATERIALIZATION_AXES as Nr, createBudgetPool as Nt, pollFor as O, isSandboxTerminalEvent as Oi, createAgentEnvironmentProviderRegistry as On, LOCAL_HARNESSES as Or, isTraceAnalysisStore as Ot, consumeScopeRetainedOwnerResult as P, sumSandboxUsage as Pi, decodeToolPart as Pn, assertProfileMaterialization as Pr, meterUsageEvent as Pt, recoverRetainedInteractiveRun as Q, withBudgetResources as Qi, persistHarnessTranscript as Qn, writeAllBytes as Qr, createPeerMailbox as Qt, scopeRetainedOwnerResourceReader as R, deleteBoxSafe as Ri, RunCancellationReason as Rn, profileMaterializationAxes$1 as Rr, WORKER_TRACE_PROPAGATION as Rt, recordScopeOwnerMaterialization as S, readSandboxOutcome as Si, readPromptOptions as Sn, runSettledCommand as Sr, loadSpawnForest as St, settledToIteration as T, createSandboxToolPartState as Ti, canonicalObservedModelParts as Tn, createWorktree as Tr, replaySpawnTree as Tt, resolveSpawnResourcePaths as U, sleep as Ui, recoverRetainedRun as Un, renderProfileMaterializationIssues as Ur, taskToPrompt as Ut, environmentReader as V, promptCacheTokenClasses as Vi, runAbortable as Vn, promptOnlyProfileMaterialization as Vr, workerTraceHeaders as Vt, interactiveAdmissionSeamKey as W, stringifySafe as Wi, startRetainedRun as Wn, renderUnsupported as Wr, DEFAULT_STALL_AFTER_MS as Wt, workerInteractiveBindingsDir as X, addResourceSpend as Xi, captureHarnessTranscript as Xn, prepareJsonlAppend as Xr, PEER_MAIL_WIRE_KEY as Xt, workerInteractiveBindingFile as Y, zeroSpend as Yi, resolveRedactor as Yn, isNoEntError as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, reconnectRetainedInteractiveRun as Z, resourceTelemetry as Zi, harnessTranscriptArtifact as Zn, readCommittedJsonLines as Zr, claimsAuthority as Zt, beginScopeOwnerAttempt as _, executableAgentProfileSnapshot as _i, runAgentRounds as _n, createRuntimeEventCollector as _r, FileResultBlobStore as _t, pickBestDelivered as a, promptFromAgentTurnInput as aa, knownMaterializationReceipt as ai, bridgeAdmissionRefusal as an, buildLoopOtelSpans as ar, rollingDispatch as at, meterRuntimeOwnedAccounting as b, detachedSnapshot as bi, acquireSandbox as bn, sanitizeKnowledgeReadinessReport as br, InMemorySpawnJournal as bt, DriverAttemptsExhaustedError as c, recordRuntimeOwnedDriveHarnessProviderEvidence as ci, createCodexRolloutStoreReader as cn, createOpenInferenceFileExporter as cr, cliInPlaceExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedExecutorMaterialization as di, bridgeRuntimeAttachmentsKey as dn, flatOtelSpan as dr, createExecutorRegistry as dt, abortError$2 as ea, attestRuntimeOwnedScopeOwner as ei, peerMailTools as en, createPropagatingTraceEmitter as er, destroyInteractiveEnvironment as et, runDriverWithRetry as f, runtimeOwnedExecutorProviderEvidence as fi, bridgeStopSignalKey as fn, generateSpanId as fr, snapshotExecutorConfig as ft, withDriverExecutor as g, unknownMaterializationReceipt as gi, isTerminalDecision as gn, toOtelAttributes as gr, createInPlaceCliExecutor as gt, isDriverSpec as h, unknownExecutionBindingReceipt as hi, defaultSelectWinner as hn, padTraceId as hr, createSteerableSandboxSession as ht, collectDelivered as i, teardownExecutor as ia, knownExecutionBindingReceipt as ii, executorFailure as in, INTELLIGENCE_WIRE_VERSION as ir, queueOf as it, waitUntil as j, notifySandboxEventObserver as ji, resolveAgentEnvironmentProvider as jn, parseCodexTokenUsage as jr, BudgetReconcileFault as jt, timerAt as k, mapSandboxEvent as ki, providerAsExecutor as kn, harnessSupportsReasoningEffort as kr, parseWorkerToolTraceArtifact as kt, HarnessTurnFailedError as l, runtimeOwnedDriveHarnessProviderEvidence as li, harnessUsageIsEmpty as ln, createOtelExporter as lr, cliWorktreeExecutor as lt, driverExecutorFactory as m, runtimeOwnedScopeOwnerRuntime as mi, createSandboxForSpec as mn, padSpanId as mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as na, finalizeRuntimeOwnedPendingExecutor as ni, isLiveNodeStatus as nn, readTraceContextFromEnv as nr, effectiveConcurrency as nt, runFinalizer as o, promptOptionsFromAgentTurnInput as oa, newExecutionAttemptId as oi, bridgeModelRouteRefusal as on, buildLoopSpanNodes as or, bindReusableExecutorExecutionId as ot, driverChild as p, runtimeOwnedPendingExecutorMaterialization as pi, TERMINAL_DECISIONS as pn, loopEventToOtelSpan as pr, createWorktreeCliExecutor as pt, attachWorker as q, unmeteredSpend as qi, defaultRedactor as qn, validateProfileMaterialization as qr, createInbox as qt, bestDelivered as r, armDeadlineTimer as ra, inheritRuntimeOwnedExecutorAttestation as ri, isTerminalNodeStatus as rn, traceContextToEnv as rr, freeSlots as rt, runTree as s, providerMessageText as sa, providerAttemptEvidence as si, addHarnessUsage as sn, buildRuntimeEventOtelSpans as sr, captureReusableExecutorConfig as st, createRootHandle as t, awaitAbortable$1 as ta, authoredProfileDigest as ti, peerMailVerbNames as tn, mergeTraceEnv as tr, errMessage as tt, classifyDriverFailure as u, runtimeOwnedExecutorExecutionBinding as ui, readCodexRolloutSession as un, exportEvalRuns as ur, createExecutor as ut, createScope as v, executableAgentSpecSnapshot as vi, createSandboxLineage as vn, createRuntimeStreamEventCollector as vr, FileSpawnJournal as vt, scopeOwnerExecutorNodeContext as w, canonicalStreamEventFromSandboxEvent as wi, runBrainLoop as wn, captureWorktreeDiff as wr, pendingWaits as wt, meterRuntimeOwnedProviderAttempt as x, projectSandboxOutcome as xi, assertBoxlessPromptOptions as xn, sanitizeRuntimeStreamEvent as xr, insideCursorNamespace as xt, deriveNodeExecutionIdentity as y, detachedFrozen as yi, probeSandboxCapabilities as yn, sanitizeAgentRuntimeEvent as yr, InMemoryResultBlobStore as yt, scopeRetainedOwnerResult as z, hasCompleteCacheBreakdown as zi, abortError as zn, promptControlProfileMaterialization as zr, readWorkerTraceContext as zt };
+export { startRetainedInteractiveRun as $, withBudgetResources as $i, contentAddress as $n, writeAllBytes as $r, isPeerMailEnvelope as $t, validateWaitSpec as A, mapSandboxEvent as Ai, providerAsSandboxClient as An, localHarnessExecutable as Ar, workerTraceAnalysisStore as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, hasCompleteCacheBreakdown as Bi, linkAbort as Bn, promptControlProfileMaterialization as Br, workerTraceEnv as Bt, restoreScopeOwnerAcceptedExecution as C, readSandboxOutcome as Ci, routerBrain as Cn, runWorktreeHarness as Cr, materializeTreeView as Ct, isWaitOutcome as D, createSandboxUsageLedger as Di, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Dn, DEFAULT_LOCAL_HARNESS as Dr, captureWorkerTraceEvidence as Dt, createWaitProbes as E, createSandboxToolPartState as Ei, observedModelMatchesDeclared as En, removeWorktree as Er, WORKER_TOOL_TRACE_SCHEMA_VERSION as Et, prepareScopeRetainedOwnerTask as F, sumSandboxUsage as Fi, sandboxSessionTraceSource as Fn, assertProfileMaterialization as Fr, newUsageTotals as Ft, readWorkerInteractiveAdmissions as G, stringifySafe as Gi, startRetainedRunInEnvironment as Gn, renderUnsupported as Gr, createActivityLog as Gt, hostDirectoryReader as H, promptCacheTokenClasses as Hi, reconnectRetainedRun as Hn, promptOnlyProfileMaterialization as Hr, workerTraceSeamKey as Ht, scopeRetainedOwnerContext as I, addSpend as Ii, registerRetainedExecutorPreparation as In, controlProfileMaterialization as Ir, spendFromUsageEvents as It, readWorkerInteractiveBinding as J, unmeteredSpend as Ji, defaultRedactorIdentityMaterial as Jn, validateProfileMaterialization as Jr, AUTHORITY_MARKERS as Jt, workerInteractiveAdmissionFile as K, throwAbort as Ki, retainedCreateMaterial as Kn, sandboxActProfileMaterialization as Kr, readWorkerProgress as Kt, scopeRetainedOwnerPriorSpend as L, chargedTokens as Li, retainedExecutorSeamKey as Ln, defineProfileMaterializationContract as Lr, spendFromUsageTotals as Lt, bindScopeRetainedOwnerEnvironmentId as M, notifySandboxEventObserver as Mi, sandboxClientAsProvider as Mn, CodexExecutionDiagnosticError as Mr, assertValidBudget as Mt, bindScopeRetainedOwnerProvider as N, sandboxEventServedBackend as Ni, createPushTraceSource as Nn, terminateProcessTreeAndConfirm as Nr, createBudgetPool as Nt, pollFor as O, extractLlmCallEvent as Oi, createAgentEnvironmentProviderRegistry as On, LOCAL_HARNESSES as Or, isTraceAnalysisStore as Ot, consumeScopeRetainedOwnerResult as P, sandboxProgressEvents as Pi, decodeToolPart as Pn, AGENT_PROFILE_MATERIALIZATION_AXES as Pr, meterUsageEvent as Pt, recoverRetainedInteractiveRun as Q, resourceTelemetry as Qi, persistHarnessTranscript as Qn, readCommittedJsonLines as Qr, createPeerMailbox as Qt, scopeRetainedOwnerResourceReader as R, cloneSpend as Ri, RunCancellationReason as Rn, fullProfileMaterialization as Rr, WORKER_TRACE_PROPAGATION as Rt, recordScopeOwnerMaterialization as S, projectSandboxOutcome as Si, readPromptOptions as Sn, runSettledCommand as Sr, loadSpawnForest as St, settledToIteration as T, canonicalStreamEventFromSandboxEvent as Ti, canonicalObservedModelParts as Tn, createWorktree as Tr, replaySpawnTree as Tt, resolveSpawnResourcePaths as U, randomSuffix as Ui, recoverRetainedRun as Un, promptResourceProfileMaterialization as Ur, taskToPrompt as Ut, environmentReader as V, isAbortError$2 as Vi, runAbortable as Vn, promptModelProfileMaterialization as Vr, workerTraceHeaders as Vt, interactiveAdmissionSeamKey as W, sleep as Wi, startRetainedRun as Wn, renderProfileMaterializationIssues as Wr, DEFAULT_STALL_AFTER_MS as Wt, workerInteractiveBindingsDir as X, zeroSpend as Xi, captureHarnessTranscript as Xn, isNoEntError as Xr, PEER_MAIL_WIRE_KEY as Xt, workerInteractiveBindingFile as Y, withTimeout as Yi, resolveRedactor as Yn, worktreeCliProfileMaterialization as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, reconnectRetainedInteractiveRun as Z, addResourceSpend as Zi, harnessTranscriptArtifact as Zn, prepareJsonlAppend as Zr, claimsAuthority as Zt, beginScopeOwnerAttempt as _, unknownMaterializationReceipt as _i, runAgentRounds as _n, createRuntimeEventCollector as _r, FileResultBlobStore as _t, pickBestDelivered as a, teardownExecutor as aa, knownExecutionBindingReceipt as ai, bridgeAdmissionRefusal as an, buildLoopOtelSpans as ar, rollingDispatch as at, meterRuntimeOwnedAccounting as b, detachedFrozen as bi, acquireSandbox as bn, sanitizeKnowledgeReadinessReport as br, InMemorySpawnJournal as bt, DriverAttemptsExhaustedError as c, providerMessageText as ca, providerAttemptEvidence as ci, createCodexRolloutStoreReader as cn, createOpenInferenceFileExporter as cr, cliInPlaceExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedExecutorExecutionBinding as di, bridgeRuntimeAttachmentsKey as dn, flatOtelSpan as dr, createExecutorRegistry as dt, decodeHarnessUsage as ea, attestRuntimeOwnedPendingExecutor as ei, peerMailTools as en, createPropagatingTraceEmitter as er, destroyInteractiveEnvironment as et, runDriverWithRetry as f, runtimeOwnedExecutorMaterialization as fi, bridgeStopSignalKey as fn, generateSpanId as fr, snapshotExecutorConfig as ft, withDriverExecutor as g, unknownExecutionBindingReceipt as gi, isTerminalDecision as gn, toOtelAttributes as gr, createInPlaceCliExecutor as gt, isDriverSpec as h, runtimeOwnedScopeOwnerRuntime as hi, defaultSelectWinner as hn, padTraceId as hr, createSteerableSandboxSession as ht, collectDelivered as i, armDeadlineTimer as ia, inheritRuntimeOwnedExecutorAttestation as ii, executorFailure as in, INTELLIGENCE_WIRE_VERSION as ir, queueOf as it, waitUntil as j, mapSandboxToolEvent as ji, resolveAgentEnvironmentProvider as jn, parseCodexTokenUsage as jr, BudgetReconcileFault as jt, timerAt as k, isSandboxTerminalEvent as ki, providerAsExecutor as kn, harnessSupportsReasoningEffort as kr, parseWorkerToolTraceArtifact as kt, HarnessTurnFailedError as l, recordRuntimeOwnedDriveHarnessProviderEvidence as li, harnessUsageIsEmpty as ln, createOtelExporter as lr, cliWorktreeExecutor as lt, driverExecutorFactory as m, runtimeOwnedPendingExecutorMaterialization as mi, createSandboxForSpec as mn, padSpanId as mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, awaitAbortable$1 as na, authoredProfileDigest as ni, isLiveNodeStatus as nn, readTraceContextFromEnv as nr, effectiveConcurrency as nt, runFinalizer as o, promptFromAgentTurnInput as oa, knownMaterializationReceipt as oi, bridgeModelRouteRefusal as on, buildLoopSpanNodes as or, bindReusableExecutorExecutionId as ot, driverChild as p, runtimeOwnedExecutorProviderEvidence as pi, TERMINAL_DECISIONS as pn, loopEventToOtelSpan as pr, createWorktreeCliExecutor as pt, attachWorker as q, throwIfAborted as qi, defaultRedactor as qn, unsupportedProfileDimensions as qr, createInbox as qt, bestDelivered as r, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as ra, finalizeRuntimeOwnedPendingExecutor as ri, isTerminalNodeStatus as rn, traceContextToEnv as rr, freeSlots as rt, runTree as s, promptOptionsFromAgentTurnInput as sa, newExecutionAttemptId as si, addHarnessUsage as sn, buildRuntimeEventOtelSpans as sr, captureReusableExecutorConfig as st, createRootHandle as t, abortError$2 as ta, attestRuntimeOwnedScopeOwner as ti, peerMailVerbNames as tn, mergeTraceEnv as tr, errMessage as tt, classifyDriverFailure as u, runtimeOwnedDriveHarnessProviderEvidence as ui, readCodexRolloutSession as un, exportEvalRuns as ur, createExecutor as ut, createScope as v, executableAgentProfileSnapshot as vi, createSandboxLineage as vn, createRuntimeStreamEventCollector as vr, FileSpawnJournal as vt, scopeOwnerExecutorNodeContext as w, assertSandboxServedModel as wi, runBrainLoop as wn, captureWorktreeDiff as wr, pendingWaits as wt, meterRuntimeOwnedProviderAttempt as x, detachedSnapshot as xi, assertBoxlessPromptOptions as xn, sanitizeRuntimeStreamEvent as xr, insideCursorNamespace as xt, deriveNodeExecutionIdentity as y, executableAgentSpecSnapshot as yi, probeSandboxCapabilities as yn, sanitizeAgentRuntimeEvent as yr, InMemoryResultBlobStore as yt, scopeRetainedOwnerResult as z, deleteBoxSafe as zi, abortError as zn, profileMaterializationAxes$1 as zr, readWorkerTraceContext as zt };
 
-//# sourceMappingURL=supervisor-De0lytFU.js.map
+//# sourceMappingURL=supervisor-tGq-TPIv.js.map