@tangle-network/agent-runtime 0.240.0 → 0.247.0

package/dist/{supervisor-CFSPj8rx.js → supervisor-BIBWUFUr.js}

@@ -1,7 +1,7 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-BbSCSak0.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-D24y9zg7.js";
+import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced, isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -2797,6 +2797,57 @@ function isAxisSupported(axis, supported) {
 	return supported.has(axis);
 }
 //#endregion
+//#region src/runtime/process-tree.ts
+const processKillGraceMs = 250;
+const processGroupExitConfirmMs = 1e3;
+const processGroupExitPollMs = 10;
+function signalProcessTree(child, signal) {
+	if (process.platform !== "win32" && typeof child.pid === "number") try {
+		process.kill(-child.pid, signal);
+		return;
+	} catch (err) {
+		if (err.code === "ESRCH") return;
+	}
+	try {
+		child.kill(signal);
+	} catch {}
+}
+/** Terminate one owned process group and confirm its disappearance; detached sessions are outside it. */
+async function terminateProcessTreeAndConfirm(child, leaderClosed, context = "runLocalHarness") {
+	signalProcessTree(child, "SIGTERM");
+	if (process.platform === "win32" || typeof child.pid !== "number") {
+		const graceDeadline = Date.now() + processKillGraceMs;
+		while (!leaderClosed() && Date.now() < graceDeadline) await delayUntilNextProcessCheck(graceDeadline);
+		if (!leaderClosed()) signalProcessTree(child, "SIGKILL");
+		return;
+	}
+	const processGroupId = child.pid;
+	if (await waitForProcessGroupExit(processGroupId, Date.now() + processKillGraceMs)) return;
+	signalProcessTree(child, "SIGKILL");
+	if (await waitForProcessGroupExit(processGroupId, Date.now() + processGroupExitConfirmMs)) return;
+	throw new Error(`${context}: process group ${processGroupId} survived SIGKILL`);
+}
+async function waitForProcessGroupExit(processGroupId, deadline) {
+	while (processGroupExists(processGroupId)) {
+		if (Date.now() >= deadline) return false;
+		await delayUntilNextProcessCheck(deadline);
+	}
+	return true;
+}
+async function delayUntilNextProcessCheck(deadline) {
+	const delayMs = Math.min(processGroupExitPollMs, Math.max(0, deadline - Date.now()));
+	if (delayMs > 0) await new Promise((resolve) => setTimeout(resolve, delayMs));
+}
+function processGroupExists(processGroupId) {
+	try {
+		process.kill(-processGroupId, 0);
+		return true;
+	} catch (err) {
+		if (err.code === "ESRCH") return false;
+		return true;
+	}
+}
+//#endregion
 //#region src/mcp/codex-diagnostics.ts
 /** Thrown when reproducible Codex exits without one valid terminal usage event. */
 var CodexExecutionDiagnosticError = class extends Error {
@@ -3127,9 +3178,6 @@ function harnessProfileModel(harness, profile) {
 	return model;
 }
 const DEFAULT_MAX_OUTPUT_BYTES = 64 * 1024 * 1024;
-const processKillGraceMs = 250;
-const processGroupExitConfirmMs = 1e3;
-const processGroupExitPollMs = 10;
 var RollingByteCapture = class {
 	maxBytes;
 	chunks = [];
@@ -3979,51 +4027,6 @@ function sha256File(path) {
 		stream.on("end", () => resolveDigest(hash.digest("hex")));
 	});
 }
-function signalProcessTree(child, signal) {
-	if (process.platform !== "win32" && typeof child.pid === "number") try {
-		process.kill(-child.pid, signal);
-		return;
-	} catch (err) {
-		if (err.code === "ESRCH") return;
-	}
-	try {
-		child.kill(signal);
-	} catch {}
-}
-async function terminateProcessTreeAndConfirm(child, leaderClosed, context = "runLocalHarness") {
-	signalProcessTree(child, "SIGTERM");
-	if (process.platform === "win32" || typeof child.pid !== "number") {
-		const graceDeadline = Date.now() + processKillGraceMs;
-		while (!leaderClosed() && Date.now() < graceDeadline) await delayUntilNextProcessCheck(graceDeadline);
-		if (!leaderClosed()) signalProcessTree(child, "SIGKILL");
-		return;
-	}
-	const processGroupId = child.pid;
-	if (await waitForProcessGroupExit(processGroupId, Date.now() + processKillGraceMs)) return;
-	signalProcessTree(child, "SIGKILL");
-	if (await waitForProcessGroupExit(processGroupId, Date.now() + processGroupExitConfirmMs)) return;
-	throw new Error(`${context}: process group ${processGroupId} survived SIGKILL`);
-}
-async function waitForProcessGroupExit(processGroupId, deadline) {
-	while (processGroupExists(processGroupId)) {
-		if (Date.now() >= deadline) return false;
-		await delayUntilNextProcessCheck(deadline);
-	}
-	return true;
-}
-async function delayUntilNextProcessCheck(deadline) {
-	const delayMs = Math.min(processGroupExitPollMs, Math.max(0, deadline - Date.now()));
-	if (delayMs > 0) await new Promise((resolve) => setTimeout(resolve, delayMs));
-}
-function processGroupExists(processGroupId) {
-	try {
-		process.kill(-processGroupId, 0);
-		return true;
-	} catch (err) {
-		if (err.code === "ESRCH") return false;
-		return true;
-	}
-}
 /**
 * Parse and validate the one terminal usage event emitted by `codex exec --json`.
 *
@@ -5622,7 +5625,8 @@ const DEFAULT_INTELLIGENCE_BASE = "https://intelligence.tangle.tools";
 * Ship self-improvement eval-run events to Tangle Intelligence. Unlike the
 * best-effort span exporter, this RESOLVES with the ingest verdict (accepted /
 * rejected per event) so a consumer's loop can assert its provenance landed.
-* Throws only on a missing key or network failure.
+* Success requires a complete, valid acknowledgement accepting every event.
+* Throws on a missing key, network failure, or unreadable/inconsistent acknowledgement.
 */
 async function exportEvalRuns(events, config) {
 	if (events.length === 0) return {
@@ -5632,8 +5636,9 @@ async function exportEvalRuns(events, config) {
 		rejected: []
 	};
 	const apiKey = config?.apiKey ?? (typeof process !== "undefined" ? process.env.TANGLE_API_KEY : void 0);
-	if (!apiKey) throw new Error("exportEvalRuns: apiKey required (pass config.apiKey or set TANGLE_API_KEY)");
+	if (!apiKey?.trim()) throw new Error("exportEvalRuns: apiKey required (pass config.apiKey or set TANGLE_API_KEY)");
 	const url = `${(config?.base ?? (typeof process !== "undefined" ? process.env.TANGLE_INTELLIGENCE_URL : void 0) ?? DEFAULT_INTELLIGENCE_BASE).replace(/\/+$/, "")}/v1/ingest/eval-runs`;
+	const count = events.length;
 	const res = await fetch(url, {
 		method: "POST",
 		headers: {
@@ -5647,15 +5652,35 @@ async function exportEvalRuns(events, config) {
 			events
 		})
 	});
-	let parsed = {};
+	const invalid = (reason) => {
+		throw new Error(`exportEvalRuns: ${reason} (HTTP ${res.status})`);
+	};
+	let parsed;
 	try {
 		parsed = await res.json();
-	} catch {}
+	} catch {
+		return invalid("Unreadable eval-runs acknowledgement");
+	}
+	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return invalid("Invalid eval-runs acknowledgement");
+	const { accepted, rejected } = parsed;
+	if (!Number.isSafeInteger(accepted) || accepted < 0 || accepted > count || !Array.isArray(rejected)) return invalid("Invalid eval-runs acknowledgement counts");
+	const indices = /* @__PURE__ */ new Set();
+	const validated = [];
+	for (const item of rejected) {
+		if (item === null || typeof item !== "object" || Array.isArray(item) || !Number.isSafeInteger(item.index) || item.index < 0 || item.index >= count || indices.has(item.index) || typeof item.reason !== "string" || !item.reason.trim()) return invalid("Invalid eval-runs acknowledgement rejection");
+		indices.add(item.index);
+		validated.push({
+			index: item.index,
+			reason: item.reason
+		});
+	}
+	if (accepted + validated.length !== count) return invalid("Incomplete eval-runs acknowledgement");
+	if (!res.ok && accepted !== 0) return invalid("Failed HTTP response claimed accepted eval-runs");
 	return {
-		ok: res.ok,
+		ok: res.ok && accepted === count && validated.length === 0,
 		status: res.status,
-		accepted: parsed.accepted ?? (res.ok ? events.length : 0),
-		rejected: parsed.rejected ?? []
+		accepted,
+		rejected: validated
 	};
 }
 //#endregion
@@ -7264,6 +7289,46 @@ async function runAbortable(act, signal, fallback) {
 	});
 }
 //#endregion
+//#region src/runtime/supervise/cost-estimate.ts
+/**
+* Pricing for work that arrived without a provider receipt.
+*
+* A turn whose provider reported no billed dollars used to reach the dollar channel as a
+* known `$0`, so a run that certainly spent money reported a dollar total of zero. A catalog
+* price is not a receipt, so what this module produces is always marked, never promoted.
+*/
+/**
+* Price one unit of work that no provider receipt covered.
+*
+* The event always carries `usdKnown: false`: a catalog price approximates what a provider
+* WOULD bill, never measures what it did. The priced amount is repeated in `usdEstimated` so
+* a consumer can subtract it from `usd` and recover the dollars a provider actually billed.
+*
+* A model with no catalog entry yields `usd: 0` with `usdKnown: false` and no `usdEstimated`.
+* The turn then reads as unknown dollars, which is true, rather than as a free turn.
+*/
+function priceUnreceiptedWork(work) {
+	const unknown = {
+		kind: "cost",
+		usd: 0,
+		usdKnown: false,
+		provenance: "uncaptured"
+	};
+	const { inputTokens, outputTokens, model } = work;
+	if (model === void 0 || !isModelPriced(model)) return unknown;
+	if (!Number.isFinite(inputTokens) || !Number.isFinite(outputTokens)) return unknown;
+	if (inputTokens < 0 || outputTokens < 0) return unknown;
+	const usd = estimateCost(inputTokens, outputTokens, model);
+	if (!Number.isFinite(usd) || usd <= 0) return unknown;
+	return {
+		kind: "cost",
+		usd,
+		usdKnown: false,
+		usdEstimated: usd,
+		provenance: "catalog-estimate"
+	};
+}
+//#endregion
 //#region src/runtime/supervise/retained-executor.ts
 /** Scope owns the durable writer; provider executors only publish sanitized admissions. */
 const retainedExecutorSeamKey = "runtime.retainedExecutor";
@@ -8045,17 +8110,19 @@ async function* streamProviderExecutor(args) {
 	let sawCostEstimate = false;
 	let pendingUnpricedWork = false;
 	let pendingEstimate;
+	/** The model id a usage receipt reported, when it reported one. Only a catalog can price a run
+	*  the provider never billed, and only a model id can address a catalog. */
+	let observedModel;
 	let usdEstimated = 0;
 	let usd = 0;
 	let text = "";
 	let terminal = false;
-	let explicitFailure = false;
 	let settled;
 	let failure;
 	let failed = false;
 	try {
 		const toolParts = createSandboxToolPartState();
-		const outcomeTracker = createAgentRunOutcomeTracker();
+		const failures = createProviderFailureLedger();
 		for await (const event of source.events) {
 			archive.append(event);
 			text += textFromEnvironmentEvent(event);
@@ -8069,11 +8136,7 @@ async function* streamProviderExecutor(args) {
 					args.trace.record(step);
 				}
 			}
-			const failureEvent = providerFailureEvent(event, sandboxEvent);
-			if (failureEvent) {
-				explicitFailure = true;
-				outcomeTracker.observe(failureEvent);
-			}
+			failures.observe(event, sandboxEvent);
 			for (const progress of sandboxProgressEvents(sandboxEvent, toolParts)) yield {
 				kind: "progress",
 				progress
@@ -8085,10 +8148,11 @@ async function* streamProviderExecutor(args) {
 		}
 		yield* creditUsage(usageLedger.settleTurn(args.profile.name ?? "agent"));
 		if (pendingUnpricedWork) {
-			const estimate = pendingEstimate ?? 0;
+			const estimated = pendingEstimate ?? (usd === 0 ? catalogPrice() : void 0);
+			const estimate = estimated ?? 0;
 			sawUnknownCostReceipt = true;
 			usd += estimate;
-			if (pendingEstimate !== void 0) {
+			if (estimated !== void 0) {
 				sawCostEstimate = true;
 				usdEstimated += estimate;
 			}
@@ -8096,18 +8160,19 @@ async function* streamProviderExecutor(args) {
 				kind: "cost",
 				usd: estimate,
 				usdKnown: false,
-				...pendingEstimate === void 0 ? {} : { usdEstimated: estimate },
-				provenance: pendingEstimate === void 0 ? "uncaptured" : "catalog-estimate"
+				...estimated === void 0 ? {} : { usdEstimated: estimate },
+				provenance: estimated === void 0 ? "uncaptured" : "catalog-estimate"
 			};
 		}
 		if ((args.options.requireTerminalEvent ?? true) && !terminal) throw new ValidationError(`providerAsExecutor(${args.provider.name}): stream ended without a terminal result/done/status event`);
 		yield { kind: "iteration" };
 		const harnessTranscript = await captureHarnessTranscript(environment, args.profile.harness, linked);
 		args.onHarnessTranscript(harnessTranscript);
+		const outcome = failures.finish();
 		const result = {
 			...resultFromEvents(archive.events(), text),
 			...archive.superseded > 0 ? { supersededPartUpdates: archive.superseded } : {},
-			...explicitFailure ? { outcome: outcomeTracker.finish() } : {}
+			...outcome ? { outcome } : {}
 		};
 		const spent = {
 			iterations: 1,
@@ -8162,8 +8227,33 @@ async function* streamProviderExecutor(args) {
 		}
 	}
 	if (failed) throw failure;
+	/**
+	* The catalog price of this execution's whole token total, under the first model id the catalog
+	* knows. Undefined when none prices, so an unpriced model settles with no estimate at all rather
+	* than a zero one — absence says "nothing could be priced", a zero would say "priced at nothing".
+	*
+	* Candidates run most specific first: the id a usage receipt reported, then the turn's own
+	* model, then the profile's. A provider that selected its own default declares no profile model,
+	* so a reported id is then the only one a catalog can match.
+	*/
+	function catalogPrice() {
+		for (const model of [
+			observedModel,
+			turn.model,
+			concreteProfileModel(args.createProfile)
+		]) {
+			if (model === void 0) continue;
+			const priced = priceUnreceiptedWork({
+				inputTokens: tokens.input,
+				outputTokens: tokens.output,
+				model
+			});
+			if (priced.usdKnown === false && priced.usdEstimated !== void 0) return priced.usdEstimated;
+		}
+	}
 	function* creditUsage(receipt, event) {
 		if (receipt === void 0) return;
+		if (receipt.model !== (args.profile.name ?? "agent")) observedModel = receipt.model;
 		const hasTokens = receipt.tokensIn !== void 0 || receipt.tokensOut !== void 0;
 		if (hasTokens && receipt.tokensIn !== void 0 && receipt.tokensOut !== void 0 && receipt.tokensKnown !== false) sawCompleteTokenReceipt = true;
 		else if (hasTokens || receipt.tokensKnown === false || receipt.tokensUnknownReason) sawIncompleteTokenReceipt = true;
@@ -8550,21 +8640,16 @@ function environmentAsSandboxInstance(environment, options) {
 			let text = "";
 			let usage;
 			let terminal = false;
-			const outcomeTracker = createAgentRunOutcomeTracker();
-			let explicitFailure = false;
+			const failures = createProviderFailureLedger();
 			for await (const event of environment.stream(turnInputFromPrompt(message, promptOptions))) {
 				events.push(event);
 				if (isTerminalEnvironmentEvent(event)) terminal = true;
-				const failureEvent = providerFailureEvent(event, sandboxEventFromEnvironmentEvent(event));
-				if (failureEvent) {
-					explicitFailure = true;
-					outcomeTracker.observe(failureEvent);
-				}
+				failures.observe(event, sandboxEventFromEnvironmentEvent(event));
 				text += textFromEnvironmentEvent(event);
 				usage = mergeTokenUsage(usage, event.usage);
 			}
 			if (options.requireTerminalEvent && !terminal) throw new ValidationError(`providerAsSandboxClient(${environment.provider}): prompt ended without a terminal result/done/status event`);
-			const outcome = explicitFailure ? outcomeTracker.finish() : void 0;
+			const outcome = failures.finish();
 			return {
 				response: resultFromEvents(events, text).content,
 				success: outcome?.success ?? true,
@@ -8900,6 +8985,79 @@ function providerFailureEvent(event, sandboxEvent) {
 		}
 	};
 }
+/** The statuses the sandbox outcome tracker itself reads as success, so a frame that would settle
+*  `success: true` there is the same frame that supersedes a transient error here. */
+const TERMINAL_SUCCESS_STATUSES = /* @__PURE__ */ new Set([
+	"completed",
+	"done",
+	"ok",
+	"success"
+]);
+/**
+* Whether a frame says, explicitly, that the run succeeded: a raw or normalized
+* `status: completed` (the same form `isTerminalEnvironmentEvent` reads as terminal), or a
+* terminal `done`/`result` with `success: true` or a success status on the frame, its outcome,
+* or its nested result. An empty `done` says nothing and supersedes nothing — the stream that
+* ends `status: failed` then `done: {}` stays failed.
+*/
+function providerTerminalSuccess(event, sandboxEvent) {
+	if (event.type === "status" && event.data.status === "completed") return true;
+	if (event.normalized?.type === "status" && event.normalized.status === "completed") return true;
+	if (sandboxEvent.type !== "done" && sandboxEvent.type !== "result") return false;
+	const data = sandboxEvent.data;
+	if (data.success === true) return true;
+	if (data.success === false) return false;
+	const outcome = recordValue(data.outcome);
+	const result = recordValue(data.result);
+	return [
+		data.status,
+		outcome?.type,
+		outcome?.status,
+		result?.status
+	].some((status) => typeof status === "string" && TERMINAL_SUCCESS_STATUSES.has(status));
+}
+/**
+* Holds a stream's failure frames until it ends, so the terminal frame decides the outcome.
+*
+* The sandbox outcome tracker latches the first `error` frame as the run's error and settles
+* `failed` on it whatever the terminal frame says; and until this ledger existed the runtime
+* only ever showed the tracker its failure frames, so a terminal `success: true` was never in
+* evidence at all. A transport error that the harness recovered from — a stream break the
+* sidecar re-attached, a tool backend that failed once — therefore settled the whole child
+* `down` with the transient error as its reason, and the artifact the child had banked was
+* discarded. On the 2026-09-20 fleet corpus, 25 children that finished their work settled that
+* way.
+*
+* The rule: `error` frames are forgiven when the stream reports success and carries no verdict;
+* a failed status or a failed terminal frame is the provider's own verdict on the run, and once
+* one exists every failure frame is evidence again, in order, so the tracker names the first
+* `error` as it always did. The existing contracts hold unchanged: `status: failed` then
+* `done: {}` is failed, and the retained Claude tail `completed → failed → error → done` is
+* failed with the error frame's message. The forgiven frames stay in the event archive the trace
+* reads; only the outcome stops claiming them.
+*/
+function createProviderFailureLedger() {
+	const failures = [];
+	let verdicts = 0;
+	let succeeded = false;
+	return {
+		observe(event, sandboxEvent) {
+			const failureEvent = providerFailureEvent(event, sandboxEvent);
+			if (failureEvent) {
+				failures.push(failureEvent);
+				if (failureEvent.type !== "error") verdicts += 1;
+				return;
+			}
+			if (providerTerminalSuccess(event, sandboxEvent)) succeeded = true;
+		},
+		finish() {
+			if (failures.length === 0 || verdicts === 0 && succeeded) return void 0;
+			const tracker = createAgentRunOutcomeTracker();
+			for (const frame of failures) tracker.observe(frame);
+			return tracker.finish();
+		}
+	};
+}
 function recordValue(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
@@ -9654,7 +9812,11 @@ async function runBrainLoop(opts) {
 	for (let turn = 1; maxTurns === 0 || turn <= maxTurns; turn += 1) {
 		if (opts.hooks?.stopBefore?.(turn)) break;
 		await opts.hooks?.beforeTurn?.(turn, messages);
-		if (opts.compaction) await maybeCompact(messages, opts.compaction, turn);
+		if (opts.hooks?.stopBefore?.(turn)) break;
+		if (opts.compaction) {
+			await maybeCompact(messages, opts.compaction, turn);
+			if (opts.hooks?.stopBefore?.(turn)) break;
+		}
 		const r = await opts.chat(messages, opts.tools);
 		completedTurns = turn;
 		if (r.usage) {
@@ -13293,46 +13455,6 @@ function providerDispatchFromErrorBody(body) {
 	return error.provider_dispatch === "not_started" ? "not_started" : void 0;
 }
 //#endregion
-//#region src/runtime/supervise/cost-estimate.ts
-/**
-* Pricing for work that arrived without a provider receipt.
-*
-* A turn whose provider reported no billed dollars used to reach the dollar channel as a
-* known `$0`, so a run that certainly spent money reported a dollar total of zero. A catalog
-* price is not a receipt, so what this module produces is always marked, never promoted.
-*/
-/**
-* Price one unit of work that no provider receipt covered.
-*
-* The event always carries `usdKnown: false`: a catalog price approximates what a provider
-* WOULD bill, never measures what it did. The priced amount is repeated in `usdEstimated` so
-* a consumer can subtract it from `usd` and recover the dollars a provider actually billed.
-*
-* A model with no catalog entry yields `usd: 0` with `usdKnown: false` and no `usdEstimated`.
-* The turn then reads as unknown dollars, which is true, rather than as a free turn.
-*/
-function priceUnreceiptedWork(work) {
-	const unknown = {
-		kind: "cost",
-		usd: 0,
-		usdKnown: false,
-		provenance: "uncaptured"
-	};
-	const { inputTokens, outputTokens, model } = work;
-	if (model === void 0 || !isModelPriced(model)) return unknown;
-	if (!Number.isFinite(inputTokens) || !Number.isFinite(outputTokens)) return unknown;
-	if (inputTokens < 0 || outputTokens < 0) return unknown;
-	const usd = estimateCost(inputTokens, outputTokens, model);
-	if (!Number.isFinite(usd) || usd <= 0) return unknown;
-	return {
-		kind: "cost",
-		usd,
-		usdKnown: false,
-		usdEstimated: usd,
-		provenance: "catalog-estimate"
-	};
-}
-//#endregion
 //#region src/runtime/supervise/executor-outcome.ts
 const outcomeSchema = AgentTurnResultSchema.pick({
 	success: true,
@@ -13352,6 +13474,62 @@ function executorFailure(result) {
 function executorFailureReason(result) {
 	return executorFailure(result)?.error;
 }
+/**
+* The platform's own failure vocabulary: machine codes and lifecycle messages that the sandbox
+* runtime, the router, or the egress path put in an executor envelope when the platform, not
+* the agent's work, ended the execution. Each entry names its evidence: the count is how many
+* down children carried it on the 2026-09-20 fleet corpus (277 down settlements across 691
+* runs), every one of them stamped `infra: false` by the hard-coded call site this table
+* replaced. The table is deliberately the platform's fixed strings, not the agent's prose.
+*/
+const PLATFORM_FAILURE_CODES = new Set([
+	"QUOTA_EXCEEDED",
+	"provider_quota_exceeded",
+	"buffer.overflow",
+	"TIMEOUT",
+	"ECONNRESET",
+	"ECONNREFUSED",
+	"ETIMEDOUT",
+	"EPIPE",
+	"EADDRINUSE"
+].map((code) => code.toLowerCase()));
+const PLATFORM_FAILURE_MESSAGES = [
+	/^terminated$/u,
+	/Execution exceeded its time limit/u,
+	/Execution interrupted: the agent runtime restarted/u,
+	/Platform key[- ]verification/u,
+	/Platform key delegation failed/u,
+	/Bad Gateway/iu,
+	/Cannot connect to API/u,
+	/Failed to connect to Sandbox API/u,
+	/fetch failed/u,
+	/A sandbox lifecycle operation is already in progress/u,
+	/exceeded its string bound/u,
+	/exceeds its JSON bound/u,
+	/No provider served model/u,
+	/Invalid API key/u,
+	/provider_quota_exceeded|QUOTA_EXCEEDED|rate limit/iu,
+	/is at its box cap/u,
+	/could not materialize the seat credential/u,
+	/OpenCode exited while a model step was still in progress/u,
+	/the agent runtime restarted/u
+];
+/**
+* Whether an executor envelope's failure was the platform's, as far as the envelope can say.
+*
+* `true` when the code or the message is in the platform's own vocabulary above. `undefined`
+* otherwise: the harness reported a failure and nothing in the envelope attributes it, so the
+* settlement carries no `infra` claim at all rather than a false one. This path never answers
+* `false`, because an executor envelope cannot prove the agent's work was at fault; the throw
+* path in `scope.ts` still answers `false` for an ordinary thrown result, where the runtime does
+* know. Until this function existed both envelope sites stamped `infra: false` unconditionally,
+* and the flag caught 1 of the 78 platform losses it was checked against on the fleet corpus.
+*/
+function executorFailureInfra(failure) {
+	const code = failure.errorCode?.toLowerCase();
+	if (code !== void 0 && PLATFORM_FAILURE_CODES.has(code)) return true;
+	return PLATFORM_FAILURE_MESSAGES.some((pattern) => pattern.test(failure.error)) ? true : void 0;
+}
 /** Preserve deterministic result pointers across built-in executors and replay.
 * FNV-1a is an identity convention here, not a cryptographic integrity check. */
 function contentRef(prefix, value) {
@@ -16236,7 +16414,7 @@ async function replaySpawnTree(journal, blobs, root) {
 				handle: handleFor(ev.id, "cancelled"),
 				reason: ev.reason,
 				...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
-				infra: ev.infra === true,
+				...ev.infra === void 0 ? {} : { infra: ev.infra },
 				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
 				...budgetViolationOf(ev),
 				trace: ev.trace ?? {
@@ -16259,7 +16437,7 @@ async function replaySpawnTree(journal, blobs, root) {
 				handle: handleFor(ev.id, "failed"),
 				reason: ev.reason ?? ev.verdict?.notes ?? "child down",
 				...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
-				infra: ev.infra === true,
+				...ev.infra === void 0 ? {} : { infra: ev.infra },
 				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
 				...budgetViolationOf(ev),
 				trace,
@@ -20031,7 +20209,7 @@ function stableText(value, label) {
 function settlementFields(subject, settlement) {
 	return {
 		spent: subject.spent,
-		infra: settlement.infra,
+		...settlement.infra === void 0 ? {} : { infra: settlement.infra },
 		reason: settlement.reason,
 		...settlement.retainedPendingCause === void 0 ? {} : { retainedPendingCause: settlement.retainedPendingCause },
 		...settlement.outRef ? { outRef: settlement.outRef } : {},
@@ -20093,7 +20271,7 @@ function releasedChildPayload(subject, settlement, settledAt, releasedAt) {
 		releasedAt,
 		...settlement.outRef === void 0 ? {} : { outRef: settlement.outRef },
 		reason: settlement.reason,
-		infra: settlement.infra,
+		...settlement.infra === void 0 ? {} : { infra: settlement.infra },
 		spent: subject.spent,
 		...settledNodeEvidence(subject, {
 			...settlement,
@@ -20121,8 +20299,9 @@ function journaledEnvironmentId(owned) {
 *
 * The gate is fail-closed, every clause required, because the heal cannot re-ask the executor
 * to confirm teardown the way the sweep does:
-*  - the latest `reconciled` record carries `settledSeq`, `reason`, `infra` and `trace` (a record
-*    written before those fields existed names no cursor position and is not healed);
+*  - the latest `reconciled` record carries `settledSeq`, `reason` and `trace` (a record written
+*    before those fields existed names no cursor position and is not healed; `infra` is carried
+*    when present and never required, since an unattributable envelope failure has none);
 *  - at least one receipt sits after that record and every such receipt reads `destroyed: true`
 *    (an empty set must not close the slot vacuously, and a receipt from an earlier process
 *    belongs to an earlier settlement);
@@ -20148,7 +20327,7 @@ async function healReleasedSlots(opts, signal, now) {
 			if (closed.has(spawned.id) || recorded.has(spawned.id)) continue;
 			const owned = events.filter((event) => event.id === spawned.id);
 			const floor = owned.reduce((latest, event) => event.kind === "reconciled" && (latest === void 0 || event.seq > latest.seq) ? event : latest, void 0);
-			if (floor?.settledSeq === void 0 || floor.reason === void 0 || floor.infra === void 0 || floor.trace === void 0) continue;
+			if (floor?.settledSeq === void 0 || floor.reason === void 0 || floor.trace === void 0) continue;
 			const receipts = owned.slice(owned.indexOf(floor) + 1).filter((event) => event.kind === "environment-teardown");
 			if (receipts.length === 0 || !receipts.every((receipt) => receipt.destroyed)) continue;
 			const held = journaledEnvironmentId(owned);
@@ -20164,7 +20343,7 @@ async function healReleasedSlots(opts, signal, now) {
 			const settlement = {
 				kind: "down",
 				reason: floor.reason,
-				infra: floor.infra,
+				...floor.infra === void 0 ? {} : { infra: floor.infra },
 				trace: floor.trace,
 				...floor.outRef ? { outRef: floor.outRef } : {},
 				...floor.providerModel ? { providerModel: floor.providerModel } : {},
@@ -20271,17 +20450,16 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 	let seq = reservedCursorFloor(events) + 1;
 	for (const { result, fault, budgetViolation } of accepted) {
 		signal.throwIfAborted();
-		const failureReason = executorFailureReason(result);
-		const reason = fault ?? failureReason;
+		const failure = executorFailure(result);
+		const reason = fault ?? failure?.error;
+		const infra = fault !== void 0 ? true : failure === void 0 ? void 0 : executorFailureInfra(failure);
 		await opts.journal.appendEvent(opts.runId, {
 			kind: "settled",
 			id: result.id,
 			status: reason === void 0 ? "done" : "down",
 			outRef: result.outRef,
-			...reason === void 0 ? {} : {
-				infra: fault !== void 0,
-				reason
-			},
+			...reason === void 0 ? {} : { reason },
+			...infra === void 0 ? {} : { infra },
 			spent: result.spent,
 			...budgetViolation === void 0 ? {} : { budgetViolation },
 			...result.verdict ? { verdict: result.verdict } : {},
@@ -22709,7 +22887,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 				status: "down",
 				...settlement.outRef === void 0 ? {} : { outRef: settlement.outRef },
 				reason: settlement.reason,
-				infra: settlement.infra,
+				...settlement.infra === void 0 ? {} : { infra: settlement.infra },
 				...retainedExecution,
 				spent: child.spent,
 				...settledNodeEvidence(child, settlement, settledAt)
@@ -22719,7 +22897,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 			kind: "down",
 			handle,
 			reason: settlement.reason,
-			infra: settlement.infra,
+			...settlement.infra === void 0 ? {} : { infra: settlement.infra },
 			...retainedExecution,
 			...settlement.outRef === void 0 ? {} : { outRef: settlement.outRef },
 			...settlement.providerModel ? { providerModel: settlement.providerModel } : {},
@@ -22802,7 +22980,7 @@ async function finalizeWait(child, settlement, seq, args, now, handle) {
 			kind: "down",
 			handle,
 			reason: settlement.reason,
-			infra: settlement.infra,
+			...settlement.infra === void 0 ? {} : { infra: settlement.infra },
 			trace: settlement.trace,
 			settledAt,
 			seq
@@ -22986,11 +23164,11 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 			return downRecord("aborted before settle", true, trace, ownMetered, runtimeOwnedExecutorProviderEvidence(executor), retainedOutputRef, childHarnessTranscript);
 		}
 		const outRef = artifact.outRef;
-		const failureReason = executorFailureReason(artifact);
-		if (failureReason !== void 0) {
+		const failure = executorFailure(artifact);
+		if (failure !== void 0) {
 			await teardownOnce(opts.shutdown ?? 5e3).catch(() => void 0);
 			return {
-				...downRecord(failureReason, false, trace, ownMetered, runtimeOwnedExecutorProviderEvidence(executor), void 0, childHarnessTranscript),
+				...downRecord(failure.error, executorFailureInfra(failure), trace, ownMetered, runtimeOwnedExecutorProviderEvidence(executor), void 0, childHarnessTranscript),
 				outRef
 			};
 		}
@@ -23020,9 +23198,9 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 				const trace = await captureTraceOnce();
 				await teardownOnce(opts.shutdown ?? 5e3).catch(() => void 0);
 				const metered = executor.metered?.();
-				const failureReason = executorFailureReason(accepted);
-				if (failureReason !== void 0) return {
-					...downRecord(failureReason, false, trace, metered, runtimeOwnedExecutorProviderEvidence(executor), void 0, await persistTranscriptOnce()),
+				const failure = executorFailure(accepted);
+				if (failure !== void 0) return {
+					...downRecord(failure.error, executorFailureInfra(failure), trace, metered, runtimeOwnedExecutorProviderEvidence(executor), void 0, await persistTranscriptOnce()),
 					outRef: accepted.outRef
 				};
 				return {
@@ -23329,7 +23507,7 @@ function downRecord(reason, infra, trace, metered, providerModel, outRef, harnes
 	return {
 		kind: "down",
 		reason,
-		infra,
+		...infra === void 0 ? {} : { infra },
 		trace,
 		...harnessTranscript ? { harnessTranscript } : {},
 		...providerModel ? { providerModel } : {},
@@ -24583,7 +24761,6 @@ function createSupervisor() {
 			let teardownSeq = 0;
 			let executionAborted = controller.signal.aborted;
 			let allChildrenDownAtSettle = false;
-			let downCountAtSettle = 0;
 			try {
 				await startScopeRecoveries(openScope);
 				actOutcome = {
@@ -24599,7 +24776,6 @@ function createSupervisor() {
 				closeScopeAdmission(openScope);
 				executionAborted = controller.signal.aborted;
 				allChildrenDownAtSettle = allSpawnedChildrenDown(runTree(openScope));
-				downCountAtSettle = breaker.downCount();
 				if (!controller.signal.aborted && rootDeadlineAtMs > 0 && now() >= rootDeadlineAtMs) deadlineExceeded = true;
 				clearRootDeadline?.();
 				const settleGraceMs = !controller.signal.aborted ? boundedSettleGrace(opts.childSettleGraceMs, rootDeadlineAtMs, now) : 0;
@@ -24676,7 +24852,7 @@ function createSupervisor() {
 					...gaps.length > 0 ? { spendGaps: gaps } : {},
 					fleetYield
 				};
-				const lifecycle = classifyNoWinner(executionAborted, pool, opts, breaker, deadlineExceeded, allChildrenDownAtSettle, downCountAtSettle);
+				const lifecycle = classifyNoWinner(executionAborted, pool, opts, breaker, deadlineExceeded, allChildrenDownAtSettle);
 				if (controller.signal.reason instanceof RunCancellationReason) {
 					const cancellation = controller.signal.reason;
 					return {
@@ -24702,7 +24878,7 @@ function createSupervisor() {
 				};
 				return {
 					...common,
-					reason: "all-children-down"
+					reason: "no-result-selected"
 				};
 			}
 		} finally {
@@ -24892,17 +25068,16 @@ async function drainCursor(scope) {
 * the caller decide between the `driver-failed` arm (a rejection was captured) and the residual
 * bucket — and it is why `driver-failed` cannot be produced without an `error` to attach.
 */
-function classifyNoWinner(abortedAtSettle, pool, opts, breaker, deadlineExceeded, allChildrenDownAtSettle, downCountAtSettle) {
+function classifyNoWinner(abortedAtSettle, pool, opts, breaker, deadlineExceeded, allChildrenDownAtSettle) {
 	if (breaker.tripped()) return "all-children-down";
 	if (deadlineExceeded) return "budget-exhausted";
 	if (abortedAtSettle) return "aborted";
 	if (allChildrenDownAtSettle) return "all-children-down";
 	if (poolExhausted(pool, opts)) return "budget-exhausted";
-	if (downCountAtSettle > 0) return "all-children-down";
 }
 function allSpawnedChildrenDown(tree) {
 	const children = tree.nodes.filter((node) => node.id !== tree.root);
-	return children.length > 0 && children.every((node) => node.status === "failed");
+	return children.length > 0 && children.every((node) => node.status === "failed" || node.settlementPending?.kind === "down");
 }
 function poolExhausted(pool, opts) {
 	const r = pool.readout();
@@ -25047,6 +25222,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { startRetainedInteractiveRun as $, decodeHarnessUsage as $i, contentAddress as $n, attestRuntimeOwnedPendingExecutor as $r, isPeerMailEnvelope as $t, validateWaitSpec as A, mapSandboxToolEvent as Ai, providerAsSandboxClient as An, localHarnessExecutable as Ar, workerTraceAnalysisStore as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, isAbortError$2 as Bi, linkAbort as Bn, promptModelProfileMaterialization as Br, workerTraceEnv as Bt, restoreScopeOwnerAcceptedExecution as C, assertSandboxServedModel as Ci, routerBrain as Cn, runWorktreeHarness as Cr, materializeTreeView as Ct, isWaitOutcome as D, extractLlmCallEvent as Di, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Dn, DEFAULT_LOCAL_HARNESS as Dr, captureWorkerTraceEvidence as Dt, createWaitProbes as E, createSandboxUsageLedger as Ei, observedModelMatchesDeclared as En, removeWorktree as Er, WORKER_TOOL_TRACE_SCHEMA_VERSION as Et, prepareScopeRetainedOwnerTask as F, addSpend as Fi, sandboxSessionTraceSource as Fn, controlProfileMaterialization as Fr, newUsageTotals as Ft, readWorkerInteractiveAdmissions as G, throwAbort as Gi, startRetainedRunInEnvironment as Gn, sandboxActProfileMaterialization as Gr, createActivityLog as Gt, hostDirectoryReader as H, randomSuffix as Hi, reconnectRetainedRun as Hn, promptResourceProfileMaterialization as Hr, workerTraceSeamKey as Ht, scopeRetainedOwnerContext as I, chargedTokens as Ii, registerRetainedExecutorPreparation as In, defineProfileMaterializationContract as Ir, spendFromUsageEvents as It, readWorkerInteractiveBinding as J, withTimeout as Ji, defaultRedactorIdentityMaterial as Jn, worktreeCliProfileMaterialization as Jr, AUTHORITY_MARKERS as Jt, workerInteractiveAdmissionFile as K, throwIfAborted as Ki, retainedCreateMaterial as Kn, unsupportedProfileDimensions as Kr, readWorkerProgress as Kt, scopeRetainedOwnerPriorSpend as L, cloneSpend as Li, retainedExecutorSeamKey as Ln, fullProfileMaterialization as Lr, spendFromUsageTotals as Lt, bindScopeRetainedOwnerEnvironmentId as M, sandboxEventServedBackend as Mi, sandboxClientAsProvider as Mn, CodexExecutionDiagnosticError as Mr, assertValidBudget as Mt, bindScopeRetainedOwnerProvider as N, sandboxProgressEvents as Ni, createPushTraceSource as Nn, AGENT_PROFILE_MATERIALIZATION_AXES as Nr, createBudgetPool as Nt, pollFor as O, isSandboxTerminalEvent as Oi, createAgentEnvironmentProviderRegistry as On, LOCAL_HARNESSES as Or, isTraceAnalysisStore as Ot, consumeScopeRetainedOwnerResult as P, sumSandboxUsage as Pi, decodeToolPart as Pn, assertProfileMaterialization as Pr, meterUsageEvent as Pt, recoverRetainedInteractiveRun as Q, withBudgetResources as Qi, persistHarnessTranscript as Qn, writeAllBytes as Qr, createPeerMailbox as Qt, scopeRetainedOwnerResourceReader as R, deleteBoxSafe as Ri, RunCancellationReason as Rn, profileMaterializationAxes$1 as Rr, WORKER_TRACE_PROPAGATION as Rt, recordScopeOwnerMaterialization as S, readSandboxOutcome as Si, readPromptOptions as Sn, runSettledCommand as Sr, loadSpawnForest as St, settledToIteration as T, createSandboxToolPartState as Ti, canonicalObservedModelParts as Tn, createWorktree as Tr, replaySpawnTree as Tt, resolveSpawnResourcePaths as U, sleep as Ui, recoverRetainedRun as Un, renderProfileMaterializationIssues as Ur, taskToPrompt as Ut, environmentReader as V, promptCacheTokenClasses as Vi, runAbortable as Vn, promptOnlyProfileMaterialization as Vr, workerTraceHeaders as Vt, interactiveAdmissionSeamKey as W, stringifySafe as Wi, startRetainedRun as Wn, renderUnsupported as Wr, DEFAULT_STALL_AFTER_MS as Wt, workerInteractiveBindingsDir as X, addResourceSpend as Xi, captureHarnessTranscript as Xn, prepareJsonlAppend as Xr, PEER_MAIL_WIRE_KEY as Xt, workerInteractiveBindingFile as Y, zeroSpend as Yi, resolveRedactor as Yn, isNoEntError as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, reconnectRetainedInteractiveRun as Z, resourceTelemetry as Zi, harnessTranscriptArtifact as Zn, readCommittedJsonLines as Zr, claimsAuthority as Zt, beginScopeOwnerAttempt as _, executableAgentProfileSnapshot as _i, runAgentRounds as _n, createRuntimeEventCollector as _r, FileResultBlobStore as _t, pickBestDelivered as a, promptFromAgentTurnInput as aa, knownMaterializationReceipt as ai, bridgeAdmissionRefusal as an, buildLoopOtelSpans as ar, rollingDispatch as at, meterRuntimeOwnedAccounting as b, detachedSnapshot as bi, acquireSandbox as bn, sanitizeKnowledgeReadinessReport as br, InMemorySpawnJournal as bt, DriverAttemptsExhaustedError as c, recordRuntimeOwnedDriveHarnessProviderEvidence as ci, createCodexRolloutStoreReader as cn, createOpenInferenceFileExporter as cr, cliInPlaceExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedExecutorMaterialization as di, bridgeRuntimeAttachmentsKey as dn, flatOtelSpan as dr, createExecutorRegistry as dt, abortError$2 as ea, attestRuntimeOwnedScopeOwner as ei, peerMailTools as en, createPropagatingTraceEmitter as er, destroyInteractiveEnvironment as et, runDriverWithRetry as f, runtimeOwnedExecutorProviderEvidence as fi, bridgeStopSignalKey as fn, generateSpanId as fr, snapshotExecutorConfig as ft, withDriverExecutor as g, unknownMaterializationReceipt as gi, isTerminalDecision as gn, toOtelAttributes as gr, createInPlaceCliExecutor as gt, isDriverSpec as h, unknownExecutionBindingReceipt as hi, defaultSelectWinner as hn, padTraceId as hr, createSteerableSandboxSession as ht, collectDelivered as i, teardownExecutor as ia, knownExecutionBindingReceipt as ii, executorFailure as in, INTELLIGENCE_WIRE_VERSION as ir, queueOf as it, waitUntil as j, notifySandboxEventObserver as ji, resolveAgentEnvironmentProvider as jn, parseCodexTokenUsage as jr, BudgetReconcileFault as jt, timerAt as k, mapSandboxEvent as ki, providerAsExecutor as kn, harnessSupportsReasoningEffort as kr, parseWorkerToolTraceArtifact as kt, HarnessTurnFailedError as l, runtimeOwnedDriveHarnessProviderEvidence as li, harnessUsageIsEmpty as ln, createOtelExporter as lr, cliWorktreeExecutor as lt, driverExecutorFactory as m, runtimeOwnedScopeOwnerRuntime as mi, createSandboxForSpec as mn, padSpanId as mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as na, finalizeRuntimeOwnedPendingExecutor as ni, isLiveNodeStatus as nn, readTraceContextFromEnv as nr, effectiveConcurrency as nt, runFinalizer as o, promptOptionsFromAgentTurnInput as oa, newExecutionAttemptId as oi, bridgeModelRouteRefusal as on, buildLoopSpanNodes as or, bindReusableExecutorExecutionId as ot, driverChild as p, runtimeOwnedPendingExecutorMaterialization as pi, TERMINAL_DECISIONS as pn, loopEventToOtelSpan as pr, createWorktreeCliExecutor as pt, attachWorker as q, unmeteredSpend as qi, defaultRedactor as qn, validateProfileMaterialization as qr, createInbox as qt, bestDelivered as r, armDeadlineTimer as ra, inheritRuntimeOwnedExecutorAttestation as ri, isTerminalNodeStatus as rn, traceContextToEnv as rr, freeSlots as rt, runTree as s, providerMessageText as sa, providerAttemptEvidence as si, addHarnessUsage as sn, buildRuntimeEventOtelSpans as sr, captureReusableExecutorConfig as st, createRootHandle as t, awaitAbortable$1 as ta, authoredProfileDigest as ti, peerMailVerbNames as tn, mergeTraceEnv as tr, errMessage as tt, classifyDriverFailure as u, runtimeOwnedExecutorExecutionBinding as ui, readCodexRolloutSession as un, exportEvalRuns as ur, createExecutor as ut, createScope as v, executableAgentSpecSnapshot as vi, createSandboxLineage as vn, createRuntimeStreamEventCollector as vr, FileSpawnJournal as vt, scopeOwnerExecutorNodeContext as w, canonicalStreamEventFromSandboxEvent as wi, runBrainLoop as wn, captureWorktreeDiff as wr, pendingWaits as wt, meterRuntimeOwnedProviderAttempt as x, projectSandboxOutcome as xi, assertBoxlessPromptOptions as xn, sanitizeRuntimeStreamEvent as xr, insideCursorNamespace as xt, deriveNodeExecutionIdentity as y, detachedFrozen as yi, probeSandboxCapabilities as yn, sanitizeAgentRuntimeEvent as yr, InMemoryResultBlobStore as yt, scopeRetainedOwnerResult as z, hasCompleteCacheBreakdown as zi, abortError as zn, promptControlProfileMaterialization as zr, readWorkerTraceContext as zt };
+export { startRetainedInteractiveRun as $, withBudgetResources as $i, contentAddress as $n, writeAllBytes as $r, isPeerMailEnvelope as $t, validateWaitSpec as A, mapSandboxEvent as Ai, providerAsSandboxClient as An, localHarnessExecutable as Ar, workerTraceAnalysisStore as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, hasCompleteCacheBreakdown as Bi, linkAbort as Bn, promptControlProfileMaterialization as Br, workerTraceEnv as Bt, restoreScopeOwnerAcceptedExecution as C, readSandboxOutcome as Ci, routerBrain as Cn, runWorktreeHarness as Cr, materializeTreeView as Ct, isWaitOutcome as D, createSandboxUsageLedger as Di, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Dn, DEFAULT_LOCAL_HARNESS as Dr, captureWorkerTraceEvidence as Dt, createWaitProbes as E, createSandboxToolPartState as Ei, observedModelMatchesDeclared as En, removeWorktree as Er, WORKER_TOOL_TRACE_SCHEMA_VERSION as Et, prepareScopeRetainedOwnerTask as F, sumSandboxUsage as Fi, sandboxSessionTraceSource as Fn, assertProfileMaterialization as Fr, newUsageTotals as Ft, readWorkerInteractiveAdmissions as G, stringifySafe as Gi, startRetainedRunInEnvironment as Gn, renderUnsupported as Gr, createActivityLog as Gt, hostDirectoryReader as H, promptCacheTokenClasses as Hi, reconnectRetainedRun as Hn, promptOnlyProfileMaterialization as Hr, workerTraceSeamKey as Ht, scopeRetainedOwnerContext as I, addSpend as Ii, registerRetainedExecutorPreparation as In, controlProfileMaterialization as Ir, spendFromUsageEvents as It, readWorkerInteractiveBinding as J, unmeteredSpend as Ji, defaultRedactorIdentityMaterial as Jn, validateProfileMaterialization as Jr, AUTHORITY_MARKERS as Jt, workerInteractiveAdmissionFile as K, throwAbort as Ki, retainedCreateMaterial as Kn, sandboxActProfileMaterialization as Kr, readWorkerProgress as Kt, scopeRetainedOwnerPriorSpend as L, chargedTokens as Li, retainedExecutorSeamKey as Ln, defineProfileMaterializationContract as Lr, spendFromUsageTotals as Lt, bindScopeRetainedOwnerEnvironmentId as M, notifySandboxEventObserver as Mi, sandboxClientAsProvider as Mn, CodexExecutionDiagnosticError as Mr, assertValidBudget as Mt, bindScopeRetainedOwnerProvider as N, sandboxEventServedBackend as Ni, createPushTraceSource as Nn, terminateProcessTreeAndConfirm as Nr, createBudgetPool as Nt, pollFor as O, extractLlmCallEvent as Oi, createAgentEnvironmentProviderRegistry as On, LOCAL_HARNESSES as Or, isTraceAnalysisStore as Ot, consumeScopeRetainedOwnerResult as P, sandboxProgressEvents as Pi, decodeToolPart as Pn, AGENT_PROFILE_MATERIALIZATION_AXES as Pr, meterUsageEvent as Pt, recoverRetainedInteractiveRun as Q, resourceTelemetry as Qi, persistHarnessTranscript as Qn, readCommittedJsonLines as Qr, createPeerMailbox as Qt, scopeRetainedOwnerResourceReader as R, cloneSpend as Ri, RunCancellationReason as Rn, fullProfileMaterialization as Rr, WORKER_TRACE_PROPAGATION as Rt, recordScopeOwnerMaterialization as S, projectSandboxOutcome as Si, readPromptOptions as Sn, runSettledCommand as Sr, loadSpawnForest as St, settledToIteration as T, canonicalStreamEventFromSandboxEvent as Ti, canonicalObservedModelParts as Tn, createWorktree as Tr, replaySpawnTree as Tt, resolveSpawnResourcePaths as U, randomSuffix as Ui, recoverRetainedRun as Un, promptResourceProfileMaterialization as Ur, taskToPrompt as Ut, environmentReader as V, isAbortError$2 as Vi, runAbortable as Vn, promptModelProfileMaterialization as Vr, workerTraceHeaders as Vt, interactiveAdmissionSeamKey as W, sleep as Wi, startRetainedRun as Wn, renderProfileMaterializationIssues as Wr, DEFAULT_STALL_AFTER_MS as Wt, workerInteractiveBindingsDir as X, zeroSpend as Xi, captureHarnessTranscript as Xn, isNoEntError as Xr, PEER_MAIL_WIRE_KEY as Xt, workerInteractiveBindingFile as Y, withTimeout as Yi, resolveRedactor as Yn, worktreeCliProfileMaterialization as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, reconnectRetainedInteractiveRun as Z, addResourceSpend as Zi, harnessTranscriptArtifact as Zn, prepareJsonlAppend as Zr, claimsAuthority as Zt, beginScopeOwnerAttempt as _, unknownMaterializationReceipt as _i, runAgentRounds as _n, createRuntimeEventCollector as _r, FileResultBlobStore as _t, pickBestDelivered as a, teardownExecutor as aa, knownExecutionBindingReceipt as ai, bridgeAdmissionRefusal as an, buildLoopOtelSpans as ar, rollingDispatch as at, meterRuntimeOwnedAccounting as b, detachedFrozen as bi, acquireSandbox as bn, sanitizeKnowledgeReadinessReport as br, InMemorySpawnJournal as bt, DriverAttemptsExhaustedError as c, providerMessageText as ca, providerAttemptEvidence as ci, createCodexRolloutStoreReader as cn, createOpenInferenceFileExporter as cr, cliInPlaceExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedExecutorExecutionBinding as di, bridgeRuntimeAttachmentsKey as dn, flatOtelSpan as dr, createExecutorRegistry as dt, decodeHarnessUsage as ea, attestRuntimeOwnedPendingExecutor as ei, peerMailTools as en, createPropagatingTraceEmitter as er, destroyInteractiveEnvironment as et, runDriverWithRetry as f, runtimeOwnedExecutorMaterialization as fi, bridgeStopSignalKey as fn, generateSpanId as fr, snapshotExecutorConfig as ft, withDriverExecutor as g, unknownExecutionBindingReceipt as gi, isTerminalDecision as gn, toOtelAttributes as gr, createInPlaceCliExecutor as gt, isDriverSpec as h, runtimeOwnedScopeOwnerRuntime as hi, defaultSelectWinner as hn, padTraceId as hr, createSteerableSandboxSession as ht, collectDelivered as i, armDeadlineTimer as ia, inheritRuntimeOwnedExecutorAttestation as ii, executorFailure as in, INTELLIGENCE_WIRE_VERSION as ir, queueOf as it, waitUntil as j, mapSandboxToolEvent as ji, resolveAgentEnvironmentProvider as jn, parseCodexTokenUsage as jr, BudgetReconcileFault as jt, timerAt as k, isSandboxTerminalEvent as ki, providerAsExecutor as kn, harnessSupportsReasoningEffort as kr, parseWorkerToolTraceArtifact as kt, HarnessTurnFailedError as l, recordRuntimeOwnedDriveHarnessProviderEvidence as li, harnessUsageIsEmpty as ln, createOtelExporter as lr, cliWorktreeExecutor as lt, driverExecutorFactory as m, runtimeOwnedPendingExecutorMaterialization as mi, createSandboxForSpec as mn, padSpanId as mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, awaitAbortable$1 as na, authoredProfileDigest as ni, isLiveNodeStatus as nn, readTraceContextFromEnv as nr, effectiveConcurrency as nt, runFinalizer as o, promptFromAgentTurnInput as oa, knownMaterializationReceipt as oi, bridgeModelRouteRefusal as on, buildLoopSpanNodes as or, bindReusableExecutorExecutionId as ot, driverChild as p, runtimeOwnedExecutorProviderEvidence as pi, TERMINAL_DECISIONS as pn, loopEventToOtelSpan as pr, createWorktreeCliExecutor as pt, attachWorker as q, throwIfAborted as qi, defaultRedactor as qn, unsupportedProfileDimensions as qr, createInbox as qt, bestDelivered as r, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as ra, finalizeRuntimeOwnedPendingExecutor as ri, isTerminalNodeStatus as rn, traceContextToEnv as rr, freeSlots as rt, runTree as s, promptOptionsFromAgentTurnInput as sa, newExecutionAttemptId as si, addHarnessUsage as sn, buildRuntimeEventOtelSpans as sr, captureReusableExecutorConfig as st, createRootHandle as t, abortError$2 as ta, attestRuntimeOwnedScopeOwner as ti, peerMailVerbNames as tn, mergeTraceEnv as tr, errMessage as tt, classifyDriverFailure as u, runtimeOwnedDriveHarnessProviderEvidence as ui, readCodexRolloutSession as un, exportEvalRuns as ur, createExecutor as ut, createScope as v, executableAgentProfileSnapshot as vi, createSandboxLineage as vn, createRuntimeStreamEventCollector as vr, FileSpawnJournal as vt, scopeOwnerExecutorNodeContext as w, assertSandboxServedModel as wi, runBrainLoop as wn, captureWorktreeDiff as wr, pendingWaits as wt, meterRuntimeOwnedProviderAttempt as x, detachedSnapshot as xi, assertBoxlessPromptOptions as xn, sanitizeRuntimeStreamEvent as xr, insideCursorNamespace as xt, deriveNodeExecutionIdentity as y, executableAgentSpecSnapshot as yi, probeSandboxCapabilities as yn, sanitizeAgentRuntimeEvent as yr, InMemoryResultBlobStore as yt, scopeRetainedOwnerResult as z, deleteBoxSafe as zi, abortError as zn, profileMaterializationAxes$1 as zr, readWorkerTraceContext as zt };
 
-//# sourceMappingURL=supervisor-CFSPj8rx.js.map
+//# sourceMappingURL=supervisor-BIBWUFUr.js.map