@tangle-network/agent-runtime 0.249.1 → 0.252.1

package/dist/{supervisor-BIBWUFUr.js → supervisor-BlDW3u0y.js}

@@ -1,8 +1,9 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-BbSCSak0.js";
+import { b as verifyWorkspaceSnapshotArtifacts, i as verifyAgentCandidateWorkspaceArchive } from "./workspace-archive-DQGFwvM6.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
-import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
+import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced, isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -6289,6 +6290,184 @@ function resolveRedactor(redact) {
 	return (value) => defaultRedactor(redact(value));
 }
 //#endregion
+//#region src/runtime/supervise/abortable.ts
+/** Provenance of an explicit cancellation, preserved through every abort link. */
+var RunCancellationReason = class extends Error {
+	source;
+	operationId;
+	constructor(source, reason, operationId) {
+		super(reason);
+		this.source = source;
+		this.operationId = operationId;
+		this.name = "RunCancellationReason";
+	}
+	toString() {
+		return this.message;
+	}
+};
+/**
+* One abort race, and one abort cascade, for the supervision tree.
+*
+* Every layer that can be cancelled needs the same three things: the reason a signal
+* carries, an `AbortError` built from it, and a settle-once race between the work and
+* the signal. Written per layer, each drifts — a listener stops being removed on one
+* path, a late resolution overwrites a cancellation that already won, or a cascade
+* forwards no reason and renames every downstream death to the layer's own fallback.
+*
+* The fallback message is the only thing a layer supplies, so the error still names
+* which layer cancelled.
+*/
+/**
+* The reason a signal carries, or `fallback` when it states none.
+*
+* A cascade that drops the upstream reason turns every downstream death into its own generic
+* message: the worker's `down` record then says nothing about WHY, which makes a whole class of
+* child mortality undiagnosable from the journal alone.
+*/
+function abortReason(signal, fallback) {
+	const reason = signal.reason;
+	if (reason instanceof RunCancellationReason) return reason;
+	if (typeof reason === "string" && reason.length > 0) return reason;
+	if (reason instanceof Error && reason.name !== "AbortError" && reason.message.length > 0) return reason.message;
+	return fallback;
+}
+/** An `AbortError` carrying the signal's own string reason, or `fallback` when it states none. */
+function abortError(signal, fallback) {
+	const reason = abortReason(signal, fallback);
+	const error = new Error(reason instanceof Error ? reason.message : typeof reason === "string" && reason.length > 0 ? reason : fallback);
+	error.name = "AbortError";
+	return error;
+}
+/**
+* Cascade N abort signals into one downstream abort that fires when ANY of them does, carrying
+* that signal's own reason ({@link abortReason}). Node-portable: `AbortSignal.any` needs >=20.3
+* and the package floor is >=20, and it would drop the reason anyway.
+*
+* The one cascade every executor uses, so a reason forwarded here reaches every layer below.
+*/
+function linkAbort(...sources) {
+	const controller = new AbortController();
+	const listeners = [];
+	const release = () => {
+		for (const { source, onAbort } of listeners) source.removeEventListener("abort", onAbort);
+		listeners.length = 0;
+	};
+	const abort = (reason) => {
+		release();
+		controller.abort(reason);
+	};
+	const alreadyAborted = sources.find((source) => source.aborted);
+	if (alreadyAborted !== void 0) {
+		controller.abort(abortReason(alreadyAborted, "aborted by parent scope"));
+		return {
+			signal: controller.signal,
+			abort,
+			release
+		};
+	}
+	for (const source of sources) {
+		const onAbort = () => abort(abortReason(source, "aborted by parent scope"));
+		listeners.push({
+			source,
+			onAbort
+		});
+		source.addEventListener("abort", onAbort, { once: true });
+	}
+	return {
+		signal: controller.signal,
+		abort,
+		release
+	};
+}
+/**
+* Settle `act()` against `signal`. The first outcome wins and the listener is always
+* removed, so neither a late resolution nor a late abort can settle the promise twice.
+* The losing promise stays observed, so a late rejection cannot surface as an unhandled
+* process error.
+*
+* The abort rejection is deferred one microtask so a result the action had ALREADY
+* produced still wins. It does not hand the race to a listener the action registers
+* from inside `act()`: this function subscribes before it calls `act()`, so its own
+* abort handler runs first and settles the promise. A caller that must let the action
+* observe the abort itself has to hold a live promise and await that instead.
+*
+* A synchronous throw from `act()` propagates as the rejection, not as an abort.
+*/
+async function runAbortable(act, signal, fallback) {
+	if (signal.aborted) throw abortError(signal, fallback);
+	return await new Promise((resolve, reject) => {
+		let settled = false;
+		const cleanup = () => signal.removeEventListener("abort", onAbort);
+		const onAbort = () => {
+			queueMicrotask(() => {
+				if (settled) return;
+				settled = true;
+				cleanup();
+				reject(abortError(signal, fallback));
+			});
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		let work;
+		try {
+			work = Promise.resolve(act());
+		} catch (error) {
+			cleanup();
+			reject(error);
+			return;
+		}
+		work.then((value) => {
+			if (settled) return;
+			settled = true;
+			cleanup();
+			resolve(value);
+		}, (error) => {
+			if (settled) return;
+			settled = true;
+			cleanup();
+			reject(error);
+		});
+	});
+}
+//#endregion
+//#region src/runtime/provider-workspace-retention.ts
+/** Validate the executable retention port at the create boundary. */
+function assertProviderWorkspaceRetentionPort(port, context) {
+	if (!Number.isSafeInteger(port.timeoutMs) || port.timeoutMs <= 0) throw new ValidationError$1(`${context}: workspaceRetention.timeoutMs must be a positive safe integer`);
+	if (port.artifacts === null || typeof port.artifacts?.read !== "function") throw new ValidationError$1(`${context}: workspaceRetention.artifacts.read is required`);
+	if (typeof port.capture !== "function") throw new ValidationError$1(`${context}: workspaceRetention.capture is required`);
+}
+/** Capture, require durable refs, and verify every returned manifest/archive byte. */
+async function captureProviderWorkspaceSnapshot(port, context) {
+	assertProviderWorkspaceRetentionPort(port, "provider workspace retention");
+	const controller = new AbortController();
+	const clearDeadline = armDeadlineTimer(port.timeoutMs, () => controller.abort(/* @__PURE__ */ new Error(`provider workspace retention timed out after ${port.timeoutMs}ms`)), true);
+	try {
+		return await runAbortable(async () => {
+			const result = detachedSnapshot(await port.capture({
+				...context,
+				signal: controller.signal
+			}), "provider workspace retention snapshot");
+			requireDurableWorkspaceArtifacts(result);
+			const { archive } = await verifyWorkspaceSnapshotArtifacts(result, port.artifacts);
+			await verifyAgentCandidateWorkspaceArchive({
+				role: "candidate",
+				snapshot: result,
+				archive
+			});
+			return result;
+		}, controller.signal, `provider workspace retention timed out after ${port.timeoutMs}ms`);
+	} finally {
+		clearDeadline();
+	}
+}
+/** Native checkpoints, embedded bytes, and digest-only values cannot outlive their source. */
+function requireDurableWorkspaceArtifacts(snapshot) {
+	if (!isDurableArtifact(snapshot.manifest) || !isDurableArtifact(snapshot.archive)) throw new Error("provider workspace retention requires durable manifest and archive artifact references");
+}
+function isDurableArtifact(artifact) {
+	return "locator" in artifact;
+}
+//#endregion
 //#region src/runtime/interaction-capabilities.ts
 /**
 * Check one turn's interaction request before the provider can dispatch it.
@@ -7150,145 +7329,6 @@ function assertRetainedCapabilityRequirements(providerName, capabilities) {
 	if (retained?.exactRunIdentity !== true || retained.resultIdentity !== true || retained.eventIdentity !== true || retained.cancellationIdempotency !== true || !capabilities.streaming.detach || !capabilities.streaming.replay || !capabilities.streaming.turnIdempotency) throw new Error(`provider "${providerName}" cannot control a retry-safe retained run`);
 }
 //#endregion
-//#region src/runtime/supervise/abortable.ts
-/** Provenance of an explicit cancellation, preserved through every abort link. */
-var RunCancellationReason = class extends Error {
-	source;
-	operationId;
-	constructor(source, reason, operationId) {
-		super(reason);
-		this.source = source;
-		this.operationId = operationId;
-		this.name = "RunCancellationReason";
-	}
-	toString() {
-		return this.message;
-	}
-};
-/**
-* One abort race, and one abort cascade, for the supervision tree.
-*
-* Every layer that can be cancelled needs the same three things: the reason a signal
-* carries, an `AbortError` built from it, and a settle-once race between the work and
-* the signal. Written per layer, each drifts — a listener stops being removed on one
-* path, a late resolution overwrites a cancellation that already won, or a cascade
-* forwards no reason and renames every downstream death to the layer's own fallback.
-*
-* The fallback message is the only thing a layer supplies, so the error still names
-* which layer cancelled.
-*/
-/**
-* The reason a signal carries, or `fallback` when it states none.
-*
-* A cascade that drops the upstream reason turns every downstream death into its own generic
-* message: the worker's `down` record then says nothing about WHY, which makes a whole class of
-* child mortality undiagnosable from the journal alone.
-*/
-function abortReason(signal, fallback) {
-	const reason = signal.reason;
-	if (reason instanceof RunCancellationReason) return reason;
-	if (typeof reason === "string" && reason.length > 0) return reason;
-	if (reason instanceof Error && reason.name !== "AbortError" && reason.message.length > 0) return reason.message;
-	return fallback;
-}
-/** An `AbortError` carrying the signal's own string reason, or `fallback` when it states none. */
-function abortError(signal, fallback) {
-	const reason = abortReason(signal, fallback);
-	const error = new Error(reason instanceof Error ? reason.message : typeof reason === "string" && reason.length > 0 ? reason : fallback);
-	error.name = "AbortError";
-	return error;
-}
-/**
-* Cascade N abort signals into one downstream abort that fires when ANY of them does, carrying
-* that signal's own reason ({@link abortReason}). Node-portable: `AbortSignal.any` needs >=20.3
-* and the package floor is >=20, and it would drop the reason anyway.
-*
-* The one cascade every executor uses, so a reason forwarded here reaches every layer below.
-*/
-function linkAbort(...sources) {
-	const controller = new AbortController();
-	const listeners = [];
-	const release = () => {
-		for (const { source, onAbort } of listeners) source.removeEventListener("abort", onAbort);
-		listeners.length = 0;
-	};
-	const abort = (reason) => {
-		release();
-		controller.abort(reason);
-	};
-	const alreadyAborted = sources.find((source) => source.aborted);
-	if (alreadyAborted !== void 0) {
-		controller.abort(abortReason(alreadyAborted, "aborted by parent scope"));
-		return {
-			signal: controller.signal,
-			abort,
-			release
-		};
-	}
-	for (const source of sources) {
-		const onAbort = () => abort(abortReason(source, "aborted by parent scope"));
-		listeners.push({
-			source,
-			onAbort
-		});
-		source.addEventListener("abort", onAbort, { once: true });
-	}
-	return {
-		signal: controller.signal,
-		abort,
-		release
-	};
-}
-/**
-* Settle `act()` against `signal`. The first outcome wins and the listener is always
-* removed, so neither a late resolution nor a late abort can settle the promise twice.
-* The losing promise stays observed, so a late rejection cannot surface as an unhandled
-* process error.
-*
-* The abort rejection is deferred one microtask so a result the action had ALREADY
-* produced still wins. It does not hand the race to a listener the action registers
-* from inside `act()`: this function subscribes before it calls `act()`, so its own
-* abort handler runs first and settles the promise. A caller that must let the action
-* observe the abort itself has to hold a live promise and await that instead.
-*
-* A synchronous throw from `act()` propagates as the rejection, not as an abort.
-*/
-async function runAbortable(act, signal, fallback) {
-	if (signal.aborted) throw abortError(signal, fallback);
-	return await new Promise((resolve, reject) => {
-		let settled = false;
-		const cleanup = () => signal.removeEventListener("abort", onAbort);
-		const onAbort = () => {
-			queueMicrotask(() => {
-				if (settled) return;
-				settled = true;
-				cleanup();
-				reject(abortError(signal, fallback));
-			});
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-		let work;
-		try {
-			work = Promise.resolve(act());
-		} catch (error) {
-			cleanup();
-			reject(error);
-			return;
-		}
-		work.then((value) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			resolve(value);
-		}, (error) => {
-			if (settled) return;
-			settled = true;
-			cleanup();
-			reject(error);
-		});
-	});
-}
-//#endregion
 //#region src/runtime/supervise/cost-estimate.ts
 /**
 * Pricing for work that arrived without a provider receipt.
@@ -7886,6 +7926,7 @@ function providerAsExecutor(provider, options = {}) {
 	};
 }
 function createProviderExecutor(provider, profile, ctx, options, placement) {
+	if (options.workspaceRetention !== void 0) assertProviderWorkspaceRetentionPort(options.workspaceRetention, `providerAsExecutor(${provider.name})`);
 	const controller = new AbortController();
 	const node = ctx.node === void 0 ? void 0 : detachedSnapshot(ctx.node, "provider executor node");
 	let environment;
@@ -7895,10 +7936,131 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	let harnessTranscript = harnessTranscriptUnavailable("execution-never-started");
 	const retention = retainedExecutorContext(ctx);
 	let destroyed = false;
+	let workspaceEnvironmentId;
+	let workspaceSnapshot;
+	let workspacePublishedSnapshot;
+	let workspaceCaptureFailure;
+	let workspaceCapturePromise;
+	let workspaceCleanupPromise;
+	let retainedReleasePromise;
+	let workspaceOutcome;
+	let workspacePreservationRequired = false;
+	let workspaceRunActive = false;
 	const runtime = options.runtime ?? provider.name;
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
 	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
 	const executionId = retention?.executionId ?? node?.nodeId ?? `provider-run-${randomUUID()}`;
+	const resetWorkspaceState = (next) => {
+		if (workspaceEnvironmentId === next.id) return;
+		workspaceEnvironmentId = next.id;
+		workspaceSnapshot = void 0;
+		workspacePublishedSnapshot = void 0;
+		workspaceCaptureFailure = void 0;
+		workspaceCapturePromise = void 0;
+		workspaceCleanupPromise = void 0;
+		retainedReleasePromise = void 0;
+		workspaceOutcome = void 0;
+		workspacePreservationRequired = false;
+		destroyed = false;
+	};
+	const beginWorkspaceExecution = () => {
+		if (workspaceRunActive) throw new ValidationError(`providerAsExecutor(${provider.name}): executor is already running`);
+		if (options.workspaceRetention !== void 0) {
+			if (workspacePreservationRequired) throw new ValidationError(`providerAsExecutor(${provider.name}): a prior failed execution has no retrievable workspace receipt; source remains preserved and this executor cannot be reused`);
+			if (environment !== void 0 && !destroyed) throw new ValidationError(`providerAsExecutor(${provider.name}): the prior workspace environment is still live; teardown must release it before this executor can be reused`);
+		}
+		if (runtimeOwnedExecutorMaterialization(executor) !== void 0) throw new ValidationError(`providerAsExecutor(${provider.name}): this executor has already materialized; create a new executor for another run`);
+		if (environment !== void 0 && destroyed) {
+			environment = void 0;
+			workspaceEnvironmentId = void 0;
+		}
+		workspaceRunActive = true;
+		workspaceSnapshot = void 0;
+		workspacePublishedSnapshot = void 0;
+		workspaceCaptureFailure = void 0;
+		workspaceCapturePromise = void 0;
+		workspaceCleanupPromise = void 0;
+		retainedReleasePromise = void 0;
+		workspaceOutcome = void 0;
+		workspacePreservationRequired = false;
+		destroyed = false;
+	};
+	const captureWorkspace = async (next, outcome) => {
+		const workspaceRetention = options.workspaceRetention;
+		if (workspaceRetention === void 0) return void 0;
+		resetWorkspaceState(next);
+		if (workspaceSnapshot !== void 0) return workspaceSnapshot;
+		if (workspaceCapturePromise === void 0) {
+			workspaceOutcome = outcome;
+			workspaceCapturePromise = captureProviderWorkspaceSnapshot(workspaceRetention, {
+				environment: next,
+				executionId,
+				profile: createProfile,
+				...outcome === void 0 ? {} : { outcome }
+			}).then((snapshot) => {
+				workspaceSnapshot = snapshot;
+				return snapshot;
+			}).catch((error) => {
+				workspaceCaptureFailure = error;
+				throw error;
+			});
+		}
+		return await workspaceCapturePromise;
+	};
+	const workspaceFailureDetail = () => {
+		const reason = workspaceCaptureFailure instanceof Error ? workspaceCaptureFailure.message : String(workspaceCaptureFailure ?? "capture was not accepted");
+		return `providerAsExecutor(${provider.name}): workspace retention failed — ${reason}; source environment preserved`;
+	};
+	const destroyEnvironment = async (cleanupSignal) => {
+		if (workspaceCleanupPromise !== void 0) return await workspaceCleanupPromise;
+		const cleanupPromise = (async () => {
+			const target = environment;
+			if (target === void 0) return { destroyed: true };
+			if (workspacePreservationRequired) return {
+				destroyed: false,
+				detail: "provider workspace retention: source preserved because execution failed before a retrievable settled workspace receipt existed"
+			};
+			if (options.workspaceRetention !== void 0) try {
+				const currentSnapshot = await captureWorkspace(target, workspaceOutcome);
+				if (workspacePublishedSnapshot !== void 0 && currentSnapshot !== void 0 && currentSnapshot.digest !== workspacePublishedSnapshot.digest) {
+					workspacePreservationRequired = true;
+					return {
+						destroyed: false,
+						detail: "provider workspace retention: live workspace changed after the published receipt; source preserved"
+					};
+				}
+			} catch {
+				return {
+					destroyed: false,
+					detail: workspaceFailureDetail()
+				};
+			}
+			if (destroyed) return { destroyed: true };
+			try {
+				await awaitAbortable$1(Promise.resolve(target.destroy?.()), cleanupSignal);
+				destroyed = true;
+				return { destroyed: true };
+			} catch (error) {
+				return {
+					destroyed: false,
+					detail: `providerAsExecutor(${provider.name}): environment.destroy() failed — ${error instanceof Error ? error.message : String(error)}`
+				};
+			}
+		})();
+		let cleanupReference;
+		cleanupReference = cleanupPromise.then((result) => {
+			if (!result.destroyed && workspaceCleanupPromise === cleanupReference && !workspacePreservationRequired && workspaceCaptureFailure === void 0) {
+				if (options.workspaceRetention !== void 0) {
+					workspaceSnapshot = void 0;
+					workspaceCapturePromise = void 0;
+				}
+				workspaceCleanupPromise = void 0;
+			}
+			return result;
+		});
+		workspaceCleanupPromise = cleanupReference;
+		return await cleanupReference;
+	};
 	const attemptId = node?.attemptId ?? newExecutionAttemptId(executionId);
 	const trace = createPushTraceSource({ runId: executionId });
 	const providerModel = concreteProfileModel(createProfile);
@@ -7947,6 +8109,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	};
 	let executor;
 	const run = async function* (task, signal, recovering = false) {
+		beginWorkspaceExecution();
 		const linked = linkAbort(ctx.signal, signal, controller.signal);
 		try {
 			yield* streamProviderExecutor({
@@ -7969,6 +8132,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				},
 				onEnvironment: (env) => {
 					environment = env;
+					resetWorkspaceState(env);
 					if (harnessTranscript.status === "unavailable" && harnessTranscript.reason === "execution-never-started") harnessTranscript = harnessTranscriptUnavailable("capture-did-not-run");
 					finalizeRuntimeOwnedPendingExecutor(executor, {
 						...plannedDeclaration,
@@ -7984,12 +8148,18 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				onHarnessTranscript: (next) => {
 					harnessTranscript = next;
 				},
-				onDestroyed: () => {
-					destroyed = true;
-				}
+				onUnsettledFailure: () => {
+					workspacePreservationRequired = true;
+				},
+				onPublishedSnapshot: (snapshot) => {
+					workspacePublishedSnapshot = snapshot;
+				},
+				captureWorkspace,
+				destroyEnvironment
 			});
 		} finally {
 			linked.release();
+			workspaceRunActive = false;
 		}
 	};
 	executor = {
@@ -8024,21 +8194,15 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		},
 		async teardown(_grace) {
 			controller.abort();
+			if (options.workspaceRetention !== void 0 && workspaceRunActive) return {
+				destroyed: false,
+				detail: "provider workspace retention: source preserved while the execution is still active"
+			};
 			if (pending) return {
 				destroyed: false,
 				detail: "retained execution requires reconciliation"
 			};
-			if (destroyed || environment === void 0) return { destroyed: true };
-			try {
-				await environment.destroy?.();
-				destroyed = true;
-				return { destroyed: true };
-			} catch (error) {
-				return {
-					destroyed: false,
-					detail: `providerAsExecutor(${provider.name}): environment.destroy() failed — ${error instanceof Error ? error.message : String(error)}`
-				};
-			}
+			return await destroyEnvironment();
 		},
 		async releaseRetained(signal) {
 			controller.abort();
@@ -8051,19 +8215,37 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				destroyed,
 				...detail === void 0 ? {} : { detail }
 			});
-			try {
-				const target = environment ?? (provider.get === void 0 ? void 0 : await awaitAbortable$1(provider.get(environmentId), signal));
-				if (target === void 0) return [receipt(false, `providerAsExecutor(${provider.name}): no environment handle and the provider exposes no get()`)];
-				if (target !== null) {
+			if (options.workspaceRetention !== void 0 && workspaceRunActive) return [receipt(false, "provider workspace retention: source preserved while execution is still active")];
+			if (retainedReleasePromise !== void 0) return await retainedReleasePromise;
+			const releasePromise = (async () => {
+				try {
+					const target = environment ?? (provider.get === void 0 ? void 0 : await awaitAbortable$1(provider.get(environmentId), signal));
+					if (target === void 0) return [receipt(false, `providerAsExecutor(${provider.name}): no environment handle and the provider exposes no get()`)];
+					if (target === null) {
+						pending = false;
+						destroyed = true;
+						return [receipt(true)];
+					}
 					if (target.destroy === void 0) return [receipt(false, `providerAsExecutor(${provider.name}): environment exposes no destroy()`)];
-					await awaitAbortable$1(target.destroy(), signal);
+					if (environment === void 0) {
+						environment = target;
+						resetWorkspaceState(target);
+					}
+					const result = await destroyEnvironment(signal);
+					if (!result.destroyed) return [receipt(false, result.detail)];
+					pending = false;
+					return [receipt(true)];
+				} catch (error) {
+					return [receipt(false, `providerAsExecutor(${provider.name}): environment.destroy() failed — ${error instanceof Error ? error.message : String(error)}`)];
 				}
-				pending = false;
-				destroyed = true;
-				return [receipt(true)];
-			} catch (error) {
-				return [receipt(false, `providerAsExecutor(${provider.name}): environment.destroy() failed — ${error instanceof Error ? error.message : String(error)}`)];
-			}
+			})();
+			let releaseReference;
+			releaseReference = releasePromise.then((receipts) => {
+				if (retainedReleasePromise === releaseReference && !receipts.every((receipt) => receipt.destroyed) && !workspacePreservationRequired && workspaceCaptureFailure === void 0) retainedReleasePromise = void 0;
+				return receipts;
+			});
+			retainedReleasePromise = releaseReference;
+			return await releaseReference;
 		},
 		resultArtifact() {
 			if (!artifact) throw new ValidationError(`providerAsExecutor(${provider.name}): resultArtifact() read before stream drained`);
@@ -8117,12 +8299,12 @@ async function* streamProviderExecutor(args) {
 	let usd = 0;
 	let text = "";
 	let terminal = false;
+	const failures = createProviderFailureLedger();
 	let settled;
 	let failure;
 	let failed = false;
 	try {
 		const toolParts = createSandboxToolPartState();
-		const failures = createProviderFailureLedger();
 		for await (const event of source.events) {
 			archive.append(event);
 			text += textFromEnvironmentEvent(event);
@@ -8189,14 +8371,20 @@ async function* streamProviderExecutor(args) {
 			box: environmentAsSandboxInstance(environment, { requireTerminalEvent: args.options.requireTerminalEvent ?? true }),
 			signal: linked
 		});
+		const retainedWorkspace = await args.captureWorkspace(environment, outcome);
+		args.onPublishedSnapshot(retainedWorkspace);
+		const settledResult = {
+			...result,
+			...retainedWorkspace === void 0 ? {} : { workspaceSnapshot: retainedWorkspace }
+		};
 		settled = {
 			...result.outcome?.status === "failed" ? { outcome: {
 				success: false,
 				...result.outcome.error ? { error: result.outcome.error } : {},
 				...result.outcome.errorCode ? { errorCode: result.outcome.errorCode } : {}
 			} } : {},
-			outRef: contentRef$1(`provider:${args.provider.name}`, result),
-			out: result,
+			outRef: contentRef$1(`provider:${args.provider.name}`, settledResult),
+			out: settledResult,
 			...verdict ? { verdict } : {},
 			spent
 		};
@@ -8206,24 +8394,37 @@ async function* streamProviderExecutor(args) {
 	} catch (error) {
 		failure = source.retained ? new RetainedExecutionPendingError(error) : error;
 		failed = true;
+		if (args.options.workspaceRetention !== void 0) args.onUnsettledFailure();
+		const failureOutcome = failures.finish() ?? {
+			success: false,
+			status: "failed",
+			error: error instanceof Error ? error.message : String(error),
+			...linked.aborted ? { errorCode: "cancelled" } : {}
+		};
+		try {
+			await args.captureWorkspace(environment, failureOutcome);
+		} catch (captureError) {
+			failure = captureError instanceof Error ? Object.assign(captureError, { cause: captureError.cause ?? failure }) : captureError;
+		}
 		args.onHarnessTranscript(await captureHarnessTranscript(environment, args.profile.harness, linked));
 	} finally {
-		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && (args.options.destroyOnSettle ?? true)) try {
-			await environment.destroy?.();
-			args.onDestroyed();
-		} catch (error) {
-			if (settled !== void 0) args.onArtifact({
-				...settled,
-				teardown: {
-					failed: true,
-					error: error instanceof Error ? error.message : String(error),
-					at: (/* @__PURE__ */ new Date()).toISOString()
-				}
-			});
-			else if (!failed) {
-				failure = error;
-				failed = true;
-			} else failure = failure instanceof Error ? Object.assign(failure, { cause: failure.cause ?? error }) : failure;
+		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && (args.options.destroyOnSettle ?? true)) {
+			const cleanup = await args.destroyEnvironment();
+			if (!cleanup.destroyed) {
+				const error = new Error(cleanup.detail ?? "provider environment teardown was not confirmed");
+				if (settled !== void 0) args.onArtifact({
+					...settled,
+					teardown: {
+						failed: true,
+						error: error.message,
+						at: (/* @__PURE__ */ new Date()).toISOString()
+					}
+				});
+				else if (!failed) {
+					failure = error;
+					failed = true;
+				} else failure = failure instanceof Error ? Object.assign(failure, { cause: failure.cause ?? error }) : failure;
+			}
 		}
 	}
 	if (failed) throw failure;
@@ -18690,7 +18891,7 @@ function snapshotExecutorConfig(config) {
 			});
 		}
 		case "provider": {
-			const { provider, registry, profileForCreate, taskToTurn, validator, ...decisionData } = config;
+			const { provider, registry, profileForCreate, taskToTurn, validator, workspaceRetention, ...decisionData } = config;
 			const snapshot = detachedSnapshot(decisionData, "createExecutor provider config");
 			const resolvedProvider = resolveAgentEnvironmentProvider(provider, registry);
 			return Object.freeze({
@@ -18698,7 +18899,8 @@ function snapshotExecutorConfig(config) {
 				provider: resolvedProvider,
 				...profileForCreate === void 0 ? {} : { profileForCreate },
 				...taskToTurn === void 0 ? {} : { taskToTurn },
-				...validator === void 0 ? {} : { validator }
+				...validator === void 0 ? {} : { validator },
+				...workspaceRetention === void 0 ? {} : { workspaceRetention }
 			});
 		}
 		case "sandbox": {
@@ -18831,6 +19033,7 @@ function createExecutor(config) {
 				const originalSeam = readSeam(seamed, providerSeamKey, "provider");
 				const selected = originalSeam.steering ? selectProviderPlacement(spec.profile, originalSeam) : void 0;
 				const providerSeam = selected?.options ?? originalSeam;
+				if (providerSeam.steering && providerSeam.workspaceRetention !== void 0) throw new ValidationError$1("createExecutor(provider, steering): workspaceRetention cannot be used with steering because the session-owned environment has no single-shot preservation barrier");
 				const provider = resolveAgentEnvironmentProvider(providerSeam.provider, providerSeam.registry);
 				if (providerSeam.steering) {
 					if (providerSeam.taskToTurn) throw new ValidationError$1("createExecutor(provider, steering): taskToTurn is not representable by the text-only steerable session");
@@ -20929,6 +21132,8 @@ async function resolveSpawnResourcePaths(profile, source) {
 //#endregion
 //#region src/runtime/supervise/retained-scope-owner.ts
 const owners = /* @__PURE__ */ new WeakMap();
+/** @internal Scope construction carries this private policy to every nested owner scope. */
+const retainedOwnerWorkspaceRetentionSeamKey = "runtime.retainedOwnerWorkspaceRetention";
 /** The scope owns these writers; provider adapters receive only the restricted context. */
 function registerScopeRetainedOwner(scope, args) {
 	const events = args.priorEvents.filter((event) => "id" in event && event.id === args.nodeId);
@@ -20946,6 +21151,7 @@ function registerScopeRetainedOwner(scope, args) {
 	const state = {
 		args,
 		admissions,
+		workspaceRetention: false,
 		nextSequence: () => ++sequence,
 		...taskEvent?.kind === "execution-input" ? {
 			taskRef: taskEvent.taskRef,
@@ -21014,6 +21220,11 @@ function bindScopeRetainedOwnerProvider(scope, provider) {
 	const state = owners.get(scope);
 	if (state) state.provider = provider;
 }
+/** Bind the owner cleanup policy selected by its provider executor. */
+function bindScopeRetainedOwnerWorkspaceRetention(scope, enabled) {
+	const state = owners.get(scope);
+	if (state) state.workspaceRetention = enabled;
+}
 /**
 * Bind where the owner's CURRENT environment id can be read from. The drive harness supplies a
 * resolver over its active executor's materialization receipt, which every provider path
@@ -21100,12 +21311,16 @@ async function releaseScopeRetainedOwnerEnvironment(scope) {
 	const events = await args.journal.loadTree(args.rootId) ?? [];
 	const released = new Set(events.flatMap((event) => event.kind === "environment-teardown" && event.id === args.nodeId && event.provider === provider.name && event.destroyed ? [event.environmentId] : []));
 	const environments = new Set(events.flatMap((event) => event.id === args.nodeId && event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission.environmentId] : []));
+	const retentionFailures = state.workspaceRetention || events.some((event) => event.kind === "execution-input" && event.id === args.nodeId && event.workspaceRetention === true) ? await ownerWorkspaceRetentionFailures(events, args.nodeId, args.blobs) : /* @__PURE__ */ new Set();
 	let unconfirmed = false;
 	for (const environmentId of environments) {
 		if (released.has(environmentId)) continue;
 		let destroyed = false;
 		let detail;
-		try {
+		if (retentionFailures.has(environmentId)) {
+			detail = "provider workspace retention: source preserved because the owner execution has no verified workspace receipt";
+			unconfirmed = true;
+		} else try {
 			await runAbortable(async () => {
 				if (!provider.get) throw new Error("provider cannot reconstruct the retained environment");
 				const environment = await provider.get(environmentId);
@@ -21137,6 +21352,57 @@ async function releaseScopeRetainedOwnerEnvironment(scope) {
 		status: "done"
 	}] : [];
 }
+/** Group owner admissions by input and require a verified workspace receipt before deletion. */
+async function ownerWorkspaceRetentionFailures(events, nodeId, blobs) {
+	const attempts = [];
+	let current;
+	const flush = () => {
+		if (current !== void 0) attempts.push(current);
+		current = void 0;
+	};
+	for (const event of events) {
+		if (!("id" in event) || event.id !== nodeId) continue;
+		if (event.kind === "execution-input") {
+			flush();
+			current = { environmentIds: /* @__PURE__ */ new Set() };
+		} else if (event.kind === "execution-admitted" && event.admission.phase === "environment") {
+			if (current?.result !== void 0) flush();
+			current ??= { environmentIds: /* @__PURE__ */ new Set() };
+			current.environmentIds.add(event.admission.environmentId);
+		} else if (event.kind === "execution-result") {
+			current ??= { environmentIds: /* @__PURE__ */ new Set() };
+			current.result = event;
+		}
+	}
+	flush();
+	const failures = /* @__PURE__ */ new Set();
+	for (const attempt of attempts) {
+		if (attempt.environmentIds.size === 0) continue;
+		if (attempt.environmentIds.size > 1) {
+			for (const environmentId of attempt.environmentIds) failures.add(environmentId);
+			continue;
+		}
+		const result = attempt.result;
+		if (result === void 0) {
+			for (const environmentId of attempt.environmentIds) failures.add(environmentId);
+			continue;
+		}
+		let output;
+		try {
+			output = await blobs.get(result.outRef);
+			if (output === void 0 || contentAddress(output) !== result.outRef) throw new Error();
+		} catch {
+			output = void 0;
+		}
+		if (!hasDurableWorkspaceSnapshot(output !== null && typeof output === "object" ? output.workspaceSnapshot : void 0)) for (const environmentId of attempt.environmentIds) failures.add(environmentId);
+	}
+	return failures;
+}
+/** A stored result is deletion authority only when it names the durable archive capture wrote. */
+function hasDurableWorkspaceSnapshot(value) {
+	const parsed = agentCandidateWorkspaceSnapshotEvidenceSchema.safeParse(value);
+	return parsed.success && "locator" in parsed.data.manifest && "locator" in parsed.data.archive;
+}
 /** Resume the original backend prompt; rebuilt coordination observations cannot replace it. */
 async function prepareScopeRetainedOwnerTask(scope, task) {
 	const state = owners.get(scope);
@@ -21178,6 +21444,7 @@ async function prepareScopeRetainedOwnerTask(scope, task) {
 		kind: "execution-input",
 		id: args.nodeId,
 		taskRef,
+		...state.workspaceRetention ? { workspaceRetention: true } : {},
 		seq: inputSequence,
 		at: new Date(args.now()).toISOString()
 	});
@@ -22529,6 +22796,7 @@ function createScope(args) {
 		priorEvents: args.resumeFrom?.events ?? [],
 		now
 	});
+	bindScopeRetainedOwnerWorkspaceRetention(scope, args.seams[retainedOwnerWorkspaceRetentionSeamKey] === true);
 	return scope;
 }
 /** @internal Meter one Runtime-owned provider attempt into the durable scope journal. */
@@ -24593,7 +24861,7 @@ function describeRejection(error) {
 function createSupervisor() {
 	let attached;
 	async function run(root, task, opts) {
-		const { budget, rootIdentity, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, probes, maxDepth, maxLiveWorkers, maxRestarts, withinMs, childSettleGraceMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
+		const { budget, rootIdentity, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, probes, maxDepth, maxLiveWorkers, maxRestarts, withinMs, childSettleGraceMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
 		const input = detachedSnapshot({
 			task,
 			options: {
@@ -24608,6 +24876,7 @@ function createSupervisor() {
 				...childSettleGraceMs === void 0 ? {} : { childSettleGraceMs },
 				...resume === void 0 ? {} : { resume },
 				...requestedRetainedAtSettlement === void 0 ? {} : { retainedAtSettlement: requestedRetainedAtSettlement },
+				...ownerWorkspaceRetention === void 0 ? {} : { ownerWorkspaceRetention },
 				...interactiveBindingDir === void 0 ? {} : { interactiveBindingDir }
 			}
 		}, "supervisor.run");
@@ -24719,7 +24988,7 @@ function createSupervisor() {
 				journal,
 				blobs: opts.blobs,
 				executors: opts.executors,
-				seams: {},
+				seams: { [retainedOwnerWorkspaceRetentionSeamKey]: ownerWorkspaceRetention === true },
 				depth: 0,
 				maxDepth: opts.maxDepth ?? defaultMaxDepth,
 				...opts.maxLiveWorkers !== void 0 ? { maxLiveWorkers: opts.maxLiveWorkers } : {},
@@ -25222,6 +25491,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { startRetainedInteractiveRun as $, withBudgetResources as $i, contentAddress as $n, writeAllBytes as $r, isPeerMailEnvelope as $t, validateWaitSpec as A, mapSandboxEvent as Ai, providerAsSandboxClient as An, localHarnessExecutable as Ar, workerTraceAnalysisStore as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, hasCompleteCacheBreakdown as Bi, linkAbort as Bn, promptControlProfileMaterialization as Br, workerTraceEnv as Bt, restoreScopeOwnerAcceptedExecution as C, readSandboxOutcome as Ci, routerBrain as Cn, runWorktreeHarness as Cr, materializeTreeView as Ct, isWaitOutcome as D, createSandboxUsageLedger as Di, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Dn, DEFAULT_LOCAL_HARNESS as Dr, captureWorkerTraceEvidence as Dt, createWaitProbes as E, createSandboxToolPartState as Ei, observedModelMatchesDeclared as En, removeWorktree as Er, WORKER_TOOL_TRACE_SCHEMA_VERSION as Et, prepareScopeRetainedOwnerTask as F, sumSandboxUsage as Fi, sandboxSessionTraceSource as Fn, assertProfileMaterialization as Fr, newUsageTotals as Ft, readWorkerInteractiveAdmissions as G, stringifySafe as Gi, startRetainedRunInEnvironment as Gn, renderUnsupported as Gr, createActivityLog as Gt, hostDirectoryReader as H, promptCacheTokenClasses as Hi, reconnectRetainedRun as Hn, promptOnlyProfileMaterialization as Hr, workerTraceSeamKey as Ht, scopeRetainedOwnerContext as I, addSpend as Ii, registerRetainedExecutorPreparation as In, controlProfileMaterialization as Ir, spendFromUsageEvents as It, readWorkerInteractiveBinding as J, unmeteredSpend as Ji, defaultRedactorIdentityMaterial as Jn, validateProfileMaterialization as Jr, AUTHORITY_MARKERS as Jt, workerInteractiveAdmissionFile as K, throwAbort as Ki, retainedCreateMaterial as Kn, sandboxActProfileMaterialization as Kr, readWorkerProgress as Kt, scopeRetainedOwnerPriorSpend as L, chargedTokens as Li, retainedExecutorSeamKey as Ln, defineProfileMaterializationContract as Lr, spendFromUsageTotals as Lt, bindScopeRetainedOwnerEnvironmentId as M, notifySandboxEventObserver as Mi, sandboxClientAsProvider as Mn, CodexExecutionDiagnosticError as Mr, assertValidBudget as Mt, bindScopeRetainedOwnerProvider as N, sandboxEventServedBackend as Ni, createPushTraceSource as Nn, terminateProcessTreeAndConfirm as Nr, createBudgetPool as Nt, pollFor as O, extractLlmCallEvent as Oi, createAgentEnvironmentProviderRegistry as On, LOCAL_HARNESSES as Or, isTraceAnalysisStore as Ot, consumeScopeRetainedOwnerResult as P, sandboxProgressEvents as Pi, decodeToolPart as Pn, AGENT_PROFILE_MATERIALIZATION_AXES as Pr, meterUsageEvent as Pt, recoverRetainedInteractiveRun as Q, resourceTelemetry as Qi, persistHarnessTranscript as Qn, readCommittedJsonLines as Qr, createPeerMailbox as Qt, scopeRetainedOwnerResourceReader as R, cloneSpend as Ri, RunCancellationReason as Rn, fullProfileMaterialization as Rr, WORKER_TRACE_PROPAGATION as Rt, recordScopeOwnerMaterialization as S, projectSandboxOutcome as Si, readPromptOptions as Sn, runSettledCommand as Sr, loadSpawnForest as St, settledToIteration as T, canonicalStreamEventFromSandboxEvent as Ti, canonicalObservedModelParts as Tn, createWorktree as Tr, replaySpawnTree as Tt, resolveSpawnResourcePaths as U, randomSuffix as Ui, recoverRetainedRun as Un, promptResourceProfileMaterialization as Ur, taskToPrompt as Ut, environmentReader as V, isAbortError$2 as Vi, runAbortable as Vn, promptModelProfileMaterialization as Vr, workerTraceHeaders as Vt, interactiveAdmissionSeamKey as W, sleep as Wi, startRetainedRun as Wn, renderProfileMaterializationIssues as Wr, DEFAULT_STALL_AFTER_MS as Wt, workerInteractiveBindingsDir as X, zeroSpend as Xi, captureHarnessTranscript as Xn, isNoEntError as Xr, PEER_MAIL_WIRE_KEY as Xt, workerInteractiveBindingFile as Y, withTimeout as Yi, resolveRedactor as Yn, worktreeCliProfileMaterialization as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, reconnectRetainedInteractiveRun as Z, addResourceSpend as Zi, harnessTranscriptArtifact as Zn, prepareJsonlAppend as Zr, claimsAuthority as Zt, beginScopeOwnerAttempt as _, unknownMaterializationReceipt as _i, runAgentRounds as _n, createRuntimeEventCollector as _r, FileResultBlobStore as _t, pickBestDelivered as a, teardownExecutor as aa, knownExecutionBindingReceipt as ai, bridgeAdmissionRefusal as an, buildLoopOtelSpans as ar, rollingDispatch as at, meterRuntimeOwnedAccounting as b, detachedFrozen as bi, acquireSandbox as bn, sanitizeKnowledgeReadinessReport as br, InMemorySpawnJournal as bt, DriverAttemptsExhaustedError as c, providerMessageText as ca, providerAttemptEvidence as ci, createCodexRolloutStoreReader as cn, createOpenInferenceFileExporter as cr, cliInPlaceExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedExecutorExecutionBinding as di, bridgeRuntimeAttachmentsKey as dn, flatOtelSpan as dr, createExecutorRegistry as dt, decodeHarnessUsage as ea, attestRuntimeOwnedPendingExecutor as ei, peerMailTools as en, createPropagatingTraceEmitter as er, destroyInteractiveEnvironment as et, runDriverWithRetry as f, runtimeOwnedExecutorMaterialization as fi, bridgeStopSignalKey as fn, generateSpanId as fr, snapshotExecutorConfig as ft, withDriverExecutor as g, unknownExecutionBindingReceipt as gi, isTerminalDecision as gn, toOtelAttributes as gr, createInPlaceCliExecutor as gt, isDriverSpec as h, runtimeOwnedScopeOwnerRuntime as hi, defaultSelectWinner as hn, padTraceId as hr, createSteerableSandboxSession as ht, collectDelivered as i, armDeadlineTimer as ia, inheritRuntimeOwnedExecutorAttestation as ii, executorFailure as in, INTELLIGENCE_WIRE_VERSION as ir, queueOf as it, waitUntil as j, mapSandboxToolEvent as ji, resolveAgentEnvironmentProvider as jn, parseCodexTokenUsage as jr, BudgetReconcileFault as jt, timerAt as k, isSandboxTerminalEvent as ki, providerAsExecutor as kn, harnessSupportsReasoningEffort as kr, parseWorkerToolTraceArtifact as kt, HarnessTurnFailedError as l, recordRuntimeOwnedDriveHarnessProviderEvidence as li, harnessUsageIsEmpty as ln, createOtelExporter as lr, cliWorktreeExecutor as lt, driverExecutorFactory as m, runtimeOwnedPendingExecutorMaterialization as mi, createSandboxForSpec as mn, padSpanId as mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, awaitAbortable$1 as na, authoredProfileDigest as ni, isLiveNodeStatus as nn, readTraceContextFromEnv as nr, effectiveConcurrency as nt, runFinalizer as o, promptFromAgentTurnInput as oa, knownMaterializationReceipt as oi, bridgeModelRouteRefusal as on, buildLoopSpanNodes as or, bindReusableExecutorExecutionId as ot, driverChild as p, runtimeOwnedExecutorProviderEvidence as pi, TERMINAL_DECISIONS as pn, loopEventToOtelSpan as pr, createWorktreeCliExecutor as pt, attachWorker as q, throwIfAborted as qi, defaultRedactor as qn, unsupportedProfileDimensions as qr, createInbox as qt, bestDelivered as r, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as ra, finalizeRuntimeOwnedPendingExecutor as ri, isTerminalNodeStatus as rn, traceContextToEnv as rr, freeSlots as rt, runTree as s, promptOptionsFromAgentTurnInput as sa, newExecutionAttemptId as si, addHarnessUsage as sn, buildRuntimeEventOtelSpans as sr, captureReusableExecutorConfig as st, createRootHandle as t, abortError$2 as ta, attestRuntimeOwnedScopeOwner as ti, peerMailVerbNames as tn, mergeTraceEnv as tr, errMessage as tt, classifyDriverFailure as u, runtimeOwnedDriveHarnessProviderEvidence as ui, readCodexRolloutSession as un, exportEvalRuns as ur, createExecutor as ut, createScope as v, executableAgentProfileSnapshot as vi, createSandboxLineage as vn, createRuntimeStreamEventCollector as vr, FileSpawnJournal as vt, scopeOwnerExecutorNodeContext as w, assertSandboxServedModel as wi, runBrainLoop as wn, captureWorktreeDiff as wr, pendingWaits as wt, meterRuntimeOwnedProviderAttempt as x, detachedSnapshot as xi, assertBoxlessPromptOptions as xn, sanitizeRuntimeStreamEvent as xr, insideCursorNamespace as xt, deriveNodeExecutionIdentity as y, executableAgentSpecSnapshot as yi, probeSandboxCapabilities as yn, sanitizeAgentRuntimeEvent as yr, InMemoryResultBlobStore as yt, scopeRetainedOwnerResult as z, deleteBoxSafe as zi, abortError as zn, profileMaterializationAxes$1 as zr, readWorkerTraceContext as zt };
+export { startRetainedInteractiveRun as $, withBudgetResources as $i, contentAddress as $n, writeAllBytes as $r, isPeerMailEnvelope as $t, validateWaitSpec as A, mapSandboxEvent as Ai, providerAsSandboxClient as An, localHarnessExecutable as Ar, workerTraceAnalysisStore as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, hasCompleteCacheBreakdown as Bi, startRetainedRun as Bn, promptControlProfileMaterialization as Br, workerTraceEnv as Bt, restoreScopeOwnerAcceptedExecution as C, readSandboxOutcome as Ci, routerBrain as Cn, runWorktreeHarness as Cr, materializeTreeView as Ct, isWaitOutcome as D, createSandboxUsageLedger as Di, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Dn, DEFAULT_LOCAL_HARNESS as Dr, captureWorkerTraceEvidence as Dt, createWaitProbes as E, createSandboxToolPartState as Ei, observedModelMatchesDeclared as En, removeWorktree as Er, WORKER_TOOL_TRACE_SCHEMA_VERSION as Et, prepareScopeRetainedOwnerTask as F, sumSandboxUsage as Fi, sandboxSessionTraceSource as Fn, assertProfileMaterialization as Fr, newUsageTotals as Ft, readWorkerInteractiveAdmissions as G, stringifySafe as Gi, linkAbort as Gn, renderUnsupported as Gr, createActivityLog as Gt, hostDirectoryReader as H, promptCacheTokenClasses as Hi, retainedCreateMaterial as Hn, promptOnlyProfileMaterialization as Hr, workerTraceSeamKey as Ht, scopeRetainedOwnerContext as I, addSpend as Ii, registerRetainedExecutorPreparation as In, controlProfileMaterialization as Ir, spendFromUsageEvents as It, readWorkerInteractiveBinding as J, unmeteredSpend as Ji, defaultRedactorIdentityMaterial as Jn, validateProfileMaterialization as Jr, AUTHORITY_MARKERS as Jt, workerInteractiveAdmissionFile as K, throwAbort as Ki, runAbortable as Kn, sandboxActProfileMaterialization as Kr, readWorkerProgress as Kt, scopeRetainedOwnerPriorSpend as L, chargedTokens as Li, retainedExecutorSeamKey as Ln, defineProfileMaterializationContract as Lr, spendFromUsageTotals as Lt, bindScopeRetainedOwnerEnvironmentId as M, notifySandboxEventObserver as Mi, sandboxClientAsProvider as Mn, CodexExecutionDiagnosticError as Mr, assertValidBudget as Mt, bindScopeRetainedOwnerProvider as N, sandboxEventServedBackend as Ni, createPushTraceSource as Nn, terminateProcessTreeAndConfirm as Nr, createBudgetPool as Nt, pollFor as O, extractLlmCallEvent as Oi, createAgentEnvironmentProviderRegistry as On, LOCAL_HARNESSES as Or, isTraceAnalysisStore as Ot, consumeScopeRetainedOwnerResult as P, sandboxProgressEvents as Pi, decodeToolPart as Pn, AGENT_PROFILE_MATERIALIZATION_AXES as Pr, meterUsageEvent as Pt, recoverRetainedInteractiveRun as Q, resourceTelemetry as Qi, persistHarnessTranscript as Qn, readCommittedJsonLines as Qr, createPeerMailbox as Qt, scopeRetainedOwnerResourceReader as R, cloneSpend as Ri, reconnectRetainedRun as Rn, fullProfileMaterialization as Rr, WORKER_TRACE_PROPAGATION as Rt, recordScopeOwnerMaterialization as S, projectSandboxOutcome as Si, readPromptOptions as Sn, runSettledCommand as Sr, loadSpawnForest as St, settledToIteration as T, canonicalStreamEventFromSandboxEvent as Ti, canonicalObservedModelParts as Tn, createWorktree as Tr, replaySpawnTree as Tt, resolveSpawnResourcePaths as U, randomSuffix as Ui, RunCancellationReason as Un, promptResourceProfileMaterialization as Ur, taskToPrompt as Ut, environmentReader as V, isAbortError$2 as Vi, startRetainedRunInEnvironment as Vn, promptModelProfileMaterialization as Vr, workerTraceHeaders as Vt, interactiveAdmissionSeamKey as W, sleep as Wi, abortError as Wn, renderProfileMaterializationIssues as Wr, DEFAULT_STALL_AFTER_MS as Wt, workerInteractiveBindingsDir as X, zeroSpend as Xi, captureHarnessTranscript as Xn, isNoEntError as Xr, PEER_MAIL_WIRE_KEY as Xt, workerInteractiveBindingFile as Y, withTimeout as Yi, resolveRedactor as Yn, worktreeCliProfileMaterialization as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, reconnectRetainedInteractiveRun as Z, addResourceSpend as Zi, harnessTranscriptArtifact as Zn, prepareJsonlAppend as Zr, claimsAuthority as Zt, beginScopeOwnerAttempt as _, unknownMaterializationReceipt as _i, runAgentRounds as _n, createRuntimeEventCollector as _r, FileResultBlobStore as _t, pickBestDelivered as a, teardownExecutor as aa, knownExecutionBindingReceipt as ai, bridgeAdmissionRefusal as an, buildLoopOtelSpans as ar, rollingDispatch as at, meterRuntimeOwnedAccounting as b, detachedFrozen as bi, acquireSandbox as bn, sanitizeKnowledgeReadinessReport as br, InMemorySpawnJournal as bt, DriverAttemptsExhaustedError as c, providerMessageText as ca, providerAttemptEvidence as ci, createCodexRolloutStoreReader as cn, createOpenInferenceFileExporter as cr, cliInPlaceExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedExecutorExecutionBinding as di, bridgeRuntimeAttachmentsKey as dn, flatOtelSpan as dr, createExecutorRegistry as dt, decodeHarnessUsage as ea, attestRuntimeOwnedPendingExecutor as ei, peerMailTools as en, createPropagatingTraceEmitter as er, destroyInteractiveEnvironment as et, runDriverWithRetry as f, runtimeOwnedExecutorMaterialization as fi, bridgeStopSignalKey as fn, generateSpanId as fr, snapshotExecutorConfig as ft, withDriverExecutor as g, unknownExecutionBindingReceipt as gi, isTerminalDecision as gn, toOtelAttributes as gr, createInPlaceCliExecutor as gt, isDriverSpec as h, runtimeOwnedScopeOwnerRuntime as hi, defaultSelectWinner as hn, padTraceId as hr, createSteerableSandboxSession as ht, collectDelivered as i, armDeadlineTimer as ia, inheritRuntimeOwnedExecutorAttestation as ii, executorFailure as in, INTELLIGENCE_WIRE_VERSION as ir, queueOf as it, waitUntil as j, mapSandboxToolEvent as ji, resolveAgentEnvironmentProvider as jn, parseCodexTokenUsage as jr, BudgetReconcileFault as jt, timerAt as k, isSandboxTerminalEvent as ki, providerAsExecutor as kn, harnessSupportsReasoningEffort as kr, parseWorkerToolTraceArtifact as kt, HarnessTurnFailedError as l, recordRuntimeOwnedDriveHarnessProviderEvidence as li, harnessUsageIsEmpty as ln, createOtelExporter as lr, cliWorktreeExecutor as lt, driverExecutorFactory as m, runtimeOwnedPendingExecutorMaterialization as mi, createSandboxForSpec as mn, padSpanId as mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as mt, createSupervisor as n, awaitAbortable$1 as na, authoredProfileDigest as ni, isLiveNodeStatus as nn, readTraceContextFromEnv as nr, effectiveConcurrency as nt, runFinalizer as o, promptFromAgentTurnInput as oa, knownMaterializationReceipt as oi, bridgeModelRouteRefusal as on, buildLoopSpanNodes as or, bindReusableExecutorExecutionId as ot, driverChild as p, runtimeOwnedExecutorProviderEvidence as pi, TERMINAL_DECISIONS as pn, loopEventToOtelSpan as pr, createWorktreeCliExecutor as pt, attachWorker as q, throwIfAborted as qi, defaultRedactor as qn, unsupportedProfileDimensions as qr, createInbox as qt, bestDelivered as r, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as ra, finalizeRuntimeOwnedPendingExecutor as ri, isTerminalNodeStatus as rn, traceContextToEnv as rr, freeSlots as rt, runTree as s, promptOptionsFromAgentTurnInput as sa, newExecutionAttemptId as si, addHarnessUsage as sn, buildRuntimeEventOtelSpans as sr, captureReusableExecutorConfig as st, createRootHandle as t, abortError$2 as ta, attestRuntimeOwnedScopeOwner as ti, peerMailVerbNames as tn, mergeTraceEnv as tr, errMessage as tt, classifyDriverFailure as u, runtimeOwnedDriveHarnessProviderEvidence as ui, readCodexRolloutSession as un, exportEvalRuns as ur, createExecutor as ut, createScope as v, executableAgentProfileSnapshot as vi, createSandboxLineage as vn, createRuntimeStreamEventCollector as vr, FileSpawnJournal as vt, scopeOwnerExecutorNodeContext as w, assertSandboxServedModel as wi, runBrainLoop as wn, captureWorktreeDiff as wr, pendingWaits as wt, meterRuntimeOwnedProviderAttempt as x, detachedSnapshot as xi, assertBoxlessPromptOptions as xn, sanitizeRuntimeStreamEvent as xr, insideCursorNamespace as xt, deriveNodeExecutionIdentity as y, executableAgentSpecSnapshot as yi, probeSandboxCapabilities as yn, sanitizeAgentRuntimeEvent as yr, InMemoryResultBlobStore as yt, scopeRetainedOwnerResult as z, deleteBoxSafe as zi, recoverRetainedRun as zn, profileMaterializationAxes$1 as zr, readWorkerTraceContext as zt };
 
-//# sourceMappingURL=supervisor-BIBWUFUr.js.map
+//# sourceMappingURL=supervisor-BlDW3u0y.js.map