@tangle-network/agent-runtime 0.259.1 → 0.262.0

package/dist/{substrate-BToFBpfh.d.ts → substrate-BeQiXkpa.d.ts}

@@ -1,4 +1,4 @@
-import { Hr as AgentRunSpec, Wr as Driver, di as OutputAdapter, gi as Validator } from "./types-ChewVlpE.js";
+import { Ci as Driver, Wi as OutputAdapter, Yi as Validator, xi as AgentRunSpec } from "./types-CP3iQ8Ji.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 //#region src/profiles/coder.d.ts
 /**
@@ -281,4 +281,4 @@ interface UiFinding {
 }
 //#endregion
 export { CoderTask as _, UiFindingSeverity as a, KnowledgeUpdate as c, ResearchSource as d, ResearchTask as f, researcherProfile as g, multiHarnessResearcherFanout as h, UiFindingScreenshot as i, MultiHarnessResearcherFanoutOptions as l, createResearcherValidator as m, UI_LENSES as n, UiLens as o, ResearcherProfileOptions as p, UiFinding as r, KnowledgeItem as s, UI_FINDING_SEVERITIES as t, ResearchOutput as u, coderTaskToPrompt as v };
-//# sourceMappingURL=substrate-BToFBpfh.d.ts.map
+//# sourceMappingURL=substrate-BeQiXkpa.d.ts.map

package/dist/{supervise-DsQjhLN-.js → supervise-BeAI8-On.js}

@@ -1,10 +1,10 @@
-import { $i as resourceTelemetry, $r as readCommittedJsonLines, An as resolveAgentEnvironmentProvider, Br as profileMaterializationAxes$1, C as restoreScopeOwnerAcceptedExecution, F as prepareScopeRetainedOwnerTask, Fn as registerRetainedExecutorPreparation, Gi as sleep, Hr as promptModelProfileMaterialization, I as scopeRetainedOwnerContext, In as retainedExecutorSeamKey, Ir as assertProfileMaterialization, It as spendFromUsageTotals, Jr as unsupportedProfileDimensions, Kn as linkAbort, Kr as renderUnsupported, Kt as createInbox, L as scopeRetainedOwnerPriorSpend, Li as addSpend, Lr as controlProfileMaterialization, Lt as WORKER_TRACE_PROPAGATION, M as bindScopeRetainedOwnerEnvironmentId, N as bindScopeRetainedOwnerProvider, Nt as meterUsageEvent, P as consumeScopeRetainedOwnerResult, Pt as newUsageTotals, Qi as addResourceSpend, Qr as prepareJsonlAppend, R as scopeRetainedOwnerResourceReader, Rr as defineProfileMaterializationContract, S as recordScopeOwnerMaterialization, Si as detachedSnapshot, Sn as routerBrain, Vr as promptControlProfileMaterialization, Wn as RunCancellationReason, Xi as withTimeout, Xr as worktreeCliProfileMaterialization, Yi as unmeteredSpend, Zi as zeroSpend, Zr as isNoEntError, _ as beginScopeOwnerAttempt, _r as toOtelAttributes, ai as inheritRuntimeOwnedExecutorAttestation, an as bridgeModelRouteRefusal, at as bindReusableExecutorExecutionId, b as meterRuntimeOwnedAccounting, d as defaultUnmetContractSteer, di as runtimeOwnedDriveHarnessProviderEvidence, dn as bridgeStopSignalKey, dt as snapshotExecutorConfig, ea as withBudgetResources, er as contentAddress, et as errMessage, f as runDriverWithRetry, fi as runtimeOwnedExecutorExecutionBinding, gi as runtimeOwnedScopeOwnerRuntime, h as isDriverSpec, hi as runtimeOwnedPendingExecutorMaterialization, ia as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, in as bridgeAdmissionRefusal, jt as assertValidBudget, l as HarnessTurnFailedError, li as providerAttemptEvidence, lt as createExecutor, m as driverExecutorFactory, mi as runtimeOwnedExecutorProviderEvidence, n as createSupervisor, ni as attestRuntimeOwnedScopeOwner, o as runFinalizer, oa as teardownExecutor, ot as captureReusableExecutorConfig, p as driverChild, pi as runtimeOwnedExecutorMaterialization, pr as generateSpanId, qn as runAbortable, r as bestDelivered, rn as executorFailure, s as runTree, sa as teardownSurfaces, t as createRootHandle, ui as recordRuntimeOwnedDriveHarnessProviderEvidence, un as bridgeRuntimeAttachmentsKey, ur as createOtelExporter, w as scopeOwnerExecutorNodeContext, x as meterRuntimeOwnedProviderAttempt, y as deriveNodeExecutionIdentity, z as scopeRetainedOwnerResult, zr as fullProfileMaterialization } from "./supervisor-CJyzUjc7.js";
+import { B as scopeRetainedOwnerContext, Bn as retainedExecutorSeamKey, Br as assertProfileMaterialization, Bt as spendFromUsageTotals, C as meterRuntimeOwnedAccounting, D as scopeOwnerExecutorNodeContext, Di as detachedSnapshot, E as restoreScopeOwnerAcceptedExecution, En as routerBrain, F as bindScopeRetainedOwnerEnvironmentId, Ft as assertValidBudget, Gr as promptControlProfileMaterialization, H as scopeRetainedOwnerResourceReader, Hi as addSpend, Hr as defineProfileMaterializationContract, I as bindScopeRetainedOwnerProvider, Jn as RunCancellationReason, Kr as promptModelProfileMaterialization, L as consumeScopeRetainedOwnerResult, Lt as meterUsageEvent, Pn as resolveAgentEnvironmentProvider, Qr as unsupportedProfileDimensions, R as prepareScopeRetainedOwnerTask, Rt as newUsageTotals, S as deriveNodeExecutionIdentity, T as recordScopeOwnerMaterialization, U as scopeRetainedOwnerResult, Ur as fullProfileMaterialization, V as scopeRetainedOwnerPriorSpend, Vr as controlProfileMaterialization, Vt as WORKER_TRACE_PROPAGATION, Wr as profileMaterializationAxes$1, Xi as sleep, Xn as linkAbort, Xr as renderUnsupported, Xt as createInbox, Zn as runAbortable, _ as isDriverSpec, _i as runtimeOwnedExecutorExecutionBinding, _r as generateSpanId, aa as withBudgetResources, b as beginScopeOwnerAttempt, bi as runtimeOwnedPendingExecutorMaterialization, cn as bridgeAdmissionRefusal, da as teardownExecutor, ea as unmeteredSpend, ei as worktreeCliProfileMaterialization, f as defaultUnmetContractSteer, fa as teardownSurfaces, g as driverExecutorFactory, gi as runtimeOwnedDriveHarnessProviderEvidence, h as driverChild, hi as recordRuntimeOwnedDriveHarnessProviderEvidence, hn as bridgeStopSignalKey, ht as snapshotExecutorConfig, ia as resourceTelemetry, ii as readCommittedJsonLines, ir as contentAddress, it as errMessage, la as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, ln as bridgeModelRouteRefusal, lt as bindReusableExecutorExecutionId, m as summarizeDriverAttempts, mi as providerAttemptEvidence, mn as bridgeRuntimeAttachmentsKey, mr as createOtelExporter, n as createSupervisor, na as zeroSpend, o as runFinalizer, p as runDriverWithRetry, pt as createExecutor, r as bestDelivered, ra as addResourceSpend, ri as prepareJsonlAppend, s as runTree, si as attestRuntimeOwnedScopeOwner, sn as executorFailure, t as createRootHandle, ta as withTimeout, ti as isNoEntError, u as HarnessTurnFailedError, ui as inheritRuntimeOwnedExecutorAttestation, ut as captureReusableExecutorConfig, vi as runtimeOwnedExecutorMaterialization, w as meterRuntimeOwnedProviderAttempt, xi as runtimeOwnedScopeOwnerRuntime, xr as toOtelAttributes, y as assertRecursiveReservationPolicy, yi as runtimeOwnedExecutorProviderEvidence, z as reconcileScopeRetainedOwnerEnvironment, zn as registerRetainedExecutorPreparation } from "./supervisor-BGGvnXvV.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-x9NEhvHZ.js";
-import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-BmtrkNPu.js";
+import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-COGC8FK2.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-vwd4SwX_.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -680,7 +680,9 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 	const audiences = /* @__PURE__ */ new Set();
 	const paths = /* @__PURE__ */ new Set(["/mcp"]);
 	const ownerReader = opts.spawnResourceReader ?? (opts.spawnResourceRoot === void 0 ? scopeRetainedOwnerResourceReader(opts.scope) : void 0);
+	let probeableByName;
 	const coord = createCoordinationToolsForManager({
+		resolveProbeTool: (name) => probeableByName?.get(name),
 		scope: opts.scope,
 		blobs: opts.blobs,
 		makeWorkerAgent: opts.makeWorkerAgent,
@@ -706,6 +708,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		...opts.preflightSpawn ? { preflightSpawn: opts.preflightSpawn } : {},
 		...opts.resolveSpawnProfile ? { resolveSpawnProfile: opts.resolveSpawnProfile } : {},
 		...opts.composeSpawnProfile ? { composeSpawnProfile: opts.composeSpawnProfile } : {},
+		...opts.profiles ? { profiles: opts.profiles } : {},
 		...opts.spawnResourceRoot ? { spawnResourceRoot: opts.spawnResourceRoot } : {},
 		...ownerReader ? { spawnResourceReader: ownerReader } : {},
 		...opts.peerMail ? { peerMail: typeof opts.peerMail === "object" && opts.peerMail.limits ? { limits: opts.peerMail.limits } : {} } : {}
@@ -730,6 +733,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		if (tool === void 0) throw new ValidationError(`serveCoordinationMcp: requested tool ${JSON.stringify(name)} is unavailable`);
 		return tool;
 	});
+	probeableByName = new Map(servedTools.map((tool) => [tool.name, tool]));
 	const mcp = createStdioToolServer({
 		serverName: "coordination",
 		serverVersion: "1",
@@ -1226,6 +1230,90 @@ function truncate(value) {
 	return value.length > MAX_DETAIL_CHARS ? `${value.slice(0, MAX_DETAIL_CHARS)}…` : value;
 }
 //#endregion
+//#region src/runtime/supervise/reentry.ts
+/** Continuity when nothing is proven: compose the full state. */
+const UNPROVEN_CONTINUITY = Object.freeze({
+	session: "new",
+	environment: "unknown",
+	workspace: "unknown"
+});
+/** Compose the task for one re-entered drive. */
+function composeReentryTask(input) {
+	const { reentry, continuity, state } = input;
+	if (reentry.reason === "unmet-contract" && continuity.session === "continued") {
+		const changes = stateLines(state, false);
+		return [reentry.steer, ...changes.length > 0 ? ["", ...changes] : []].join("\n");
+	}
+	return [
+		`You are re-entering a run that is already in progress (driver attempt ${input.attempt}). This is the same run and the same objective, not a new one.`,
+		whyLine(reentry),
+		environmentLine(continuity),
+		"",
+		"## Objective",
+		"",
+		"This is the original task of the run, unchanged:",
+		"",
+		taskText(input.originalTask),
+		"",
+		"## Completion check",
+		"",
+		input.contract === void 0 || input.contract.trim().length === 0 ? "The run ends when submit_result passes the independent check." : `The run ends when submit_result passes the independent check. It expects: ${input.contract.trim()}`,
+		...reentry.reason === "unmet-contract" ? [
+			"",
+			"What is still unmet:",
+			"",
+			reentry.steer
+		] : [],
+		"",
+		"## Run state, from the coordinator",
+		"",
+		...stateLines(state, true),
+		"",
+		"## What to do now",
+		"",
+		"Continue the run from this state.",
+		"Receive the waiting events with await_event, and read the output of every settled worker before you spawn anything new.",
+		"Do not spawn a replacement for a worker that is running or has settled.",
+		"Your coordination tools are served by the same coordinator as before, and the state above comes from it."
+	].join("\n");
+}
+/**
+* Why the driver is back, in one clause. The failure's own text stays in the attempt records and
+* never reaches the driver: measured 2026-09-11, a continuation told the details of a provider
+* failure spent two of its first four children probing the infrastructure, while its peer, told
+* only what to continue, spent all forty-five on the research.
+*/
+function whyLine(reentry) {
+	return reentry.reason === "unmet-contract" ? `Your previous turn ended with the completion check unmet (re-prompt ${reentry.reprompt}).` : `Your previous turn ended before it finished (retry ${reentry.retry}); the run itself is intact.`;
+}
+function environmentLine(continuity) {
+	if (continuity.environment === "same") return `You run in the same environment as before${continuity.environmentId === void 0 ? "" : ` (${continuity.environmentId})`}, and your files are where you left them.`;
+	if (continuity.environment === "replaced") return `Your previous environment${continuity.previousEnvironmentId === void 0 ? "" : ` (${continuity.previousEnvironmentId})`} is gone, and you run in a new one. ` + (continuity.workspace === "kept" ? "Its files were carried over." : "Files you wrote there are not here. The coordinator and the knowledge store kept everything below.");
+	return "You may be in a new environment. Check for files before you rely on them; the coordinator kept everything below.";
+}
+function stateLines(state, full) {
+	const lines = [];
+	if (full || state.journalRows > state.journalReadTo) lines.push(`Journal: ${state.journalRows} rows. You last read up to row ${state.journalReadTo}; call read_journal with sinceRow ${state.journalReadTo} to read what happened since, or sinceRow 0 to read the whole run.`);
+	if (state.live.length > 0) lines.push(`Workers running: ${state.live.map((worker) => `${worker.id} (${worker.label}, ${worker.status})`).join("; ")}.`);
+	else if (full) lines.push("Workers running: none.");
+	const settled = full ? state.settled : state.settled.filter((worker) => !worker.delivered);
+	if (settled.length > 0) lines.push(`Workers settled${full ? "" : " that you have not received"}: ${settled.map((worker) => `${worker.id} (${worker.status}${worker.valid === void 0 ? "" : worker.valid ? ", passed its check" : ", did not pass its check"}${worker.delivered ? "" : ", not yet received"})`).join("; ")}. Read an output with observe_agent and the worker id.`);
+	else if (full) lines.push("Workers settled: none.");
+	if (state.waiting.length > 0) lines.push(`Events waiting for you in await_event: ${state.waiting.length} (${state.waiting.map((event) => event.worker === void 0 ? event.type : `${event.type} from ${event.worker}`).join("; ")}).`);
+	else if (full) lines.push("Events waiting for you in await_event: none.");
+	if (state.unacknowledged.length > 0) lines.push(`Events delivered to a turn that did not finish, so treat them as unread: ${state.unacknowledged.map((event) => `#${event.seq} ${event.type}${event.worker === void 0 ? "" : ` from ${event.worker}`}`).join("; ")}. Pass their numbers in await_event's acknowledge once you have processed them.`);
+	if (state.lastRejection !== void 0) lines.push(`Your last submit_result was refused: ${state.lastRejection.reason}`);
+	return lines;
+}
+function taskText(task) {
+	if (typeof task === "string") return task;
+	try {
+		return JSON.stringify(task, null, 2) ?? String(task);
+	} catch {
+		return String(task);
+	}
+}
+//#endregion
 //#region src/runtime/supervise/root-stream.ts
 /**
 * The root manager's own provider stream, retained where Runtime owns it.
@@ -1685,6 +1773,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 			makeWorkerAgent: deps.makeWorkerAgent,
 			...deps.authorizeDownMessage ? { authorizeDownMessage: deps.authorizeDownMessage } : {},
 			perWorker: deps.perWorker,
+			...deps.preserveOwnerTurns ? { preserveOwnerTurns: true } : {},
 			systemPrompt: resolveSupervisorSystemPrompt(stableProfile) ?? "",
 			...deps.deliverable ? { deliverable: deps.deliverable } : {},
 			...deps.onAcceptedSubmission ? { onAcceptedSubmission: deps.onAcceptedSubmission } : {},
@@ -1703,6 +1792,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 			...deps.preflightSpawn ? { preflightSpawn: deps.preflightSpawn } : {},
 			...deps.resolveSpawnProfile ? { resolveSpawnProfile: deps.resolveSpawnProfile } : {},
 			...deps.composeSpawnProfile ? { composeSpawnProfile: deps.composeSpawnProfile } : {},
+			...deps.profiles ? { profiles: deps.profiles } : {},
 			...deps.spawnResourceRoot ? { spawnResourceRoot: deps.spawnResourceRoot } : {},
 			...deps.spawnResourceReader ? { spawnResourceReader: deps.spawnResourceReader } : {},
 			...deps.stopRule ? { stopRule: deps.stopRule } : {},
@@ -1803,6 +1893,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				...deps.preflightSpawn ? { preflightSpawn: deps.preflightSpawn } : {},
 				...deps.resolveSpawnProfile ? { resolveSpawnProfile: deps.resolveSpawnProfile } : {},
 				...deps.composeSpawnProfile ? { composeSpawnProfile: deps.composeSpawnProfile } : {},
+				...deps.profiles ? { profiles: deps.profiles } : {},
 				...deps.spawnResourceRoot ? { spawnResourceRoot: deps.spawnResourceRoot } : {},
 				...deps.spawnResourceReader ? { spawnResourceReader: deps.spawnResourceReader } : {},
 				...deps.peerMail ? { peerMail: deps.peerMail } : {},
@@ -1866,49 +1957,89 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 						contract: !contractDeclared ? "none" : submitted || candidate !== void 0 ? "met" : "unmet"
 					};
 				};
-				await runDriverWithRetry({
-					drive: async (attempt, reentry) => {
-						candidate = void 0;
-						if (deps.controlDir !== void 0 && deps.abortRun !== void 0) applyRunCancellation(deps.controlDir, deps.abortRun, () => (/* @__PURE__ */ new Date()).toISOString());
-						scope.signal.throwIfAborted();
-						beginScopeOwnerAttempt(scope, attempt);
-						harnessInvocationActive = true;
-						try {
-							await driveHarness({
-								profile: providerProfile,
-								authoredProfile: stableProfile,
-								...profilePrompt !== void 0 ? { systemPrompt: profilePrompt } : {},
-								task: reentry === void 0 ? task : reentry.steer,
-								scope,
-								coordinationMcpUrl: mcp.url,
-								coordinationMcpHeaders: mcp.headers,
-								stopSignal: stopController.signal,
-								coordinationTools
+				const loopRecords = [];
+				let environmentReplacements = 0;
+				const describe = deps.deliverable?.describe;
+				const settleLoop = () => {
+					const stopReason = controls.stopReason() ?? progressStopReason;
+					const closedBy = mcp.submittedResult() ? "result-accepted" : controls.blocked() !== void 0 ? "blocked" : mcp.isStopped() ? "stop" : progressStopReason !== void 0 ? "stop-rule" : void 0;
+					deps.onDriverLoopSettled?.({
+						...summarizeDriverAttempts(loopRecords),
+						environmentReplacements,
+						...closedBy === void 0 ? {} : { closedBy },
+						...stopReason === void 0 ? {} : { stopReason }
+					});
+				};
+				try {
+					await runDriverWithRetry({
+						drive: async (attempt, reentry) => {
+							candidate = void 0;
+							if (deps.controlDir !== void 0 && deps.abortRun !== void 0) applyRunCancellation(deps.controlDir, deps.abortRun, () => (/* @__PURE__ */ new Date()).toISOString());
+							scope.signal.throwIfAborted();
+							beginScopeOwnerAttempt(scope, attempt);
+							controls.beginDriverAttempt(attempt);
+							const compose = reentry === void 0 ? void 0 : (continuity) => composeReentryTask({
+								originalTask: task,
+								...describe === void 0 ? {} : { contract: describe },
+								reentry,
+								continuity,
+								state: controls.reentryState(),
+								attempt
 							});
-						} catch (error) {
-							if (!mcp.submittedResult() && !mcp.isStopped()) throw error;
-						} finally {
-							harnessInvocationActive = false;
-						}
-						if (contractDeclared && !mcp.submittedResult()) {
-							await mcp.drainResolved();
-							candidate = await finalize();
+							harnessInvocationActive = true;
+							let completed = false;
+							try {
+								await driveHarness({
+									profile: providerProfile,
+									authoredProfile: stableProfile,
+									...profilePrompt !== void 0 ? { systemPrompt: profilePrompt } : {},
+									task: compose === void 0 ? task : compose(UNPROVEN_CONTINUITY),
+									...compose === void 0 ? {} : { reentry: {
+										compose,
+										onContinuity: (continuity) => {
+											if (continuity.environment === "replaced") environmentReplacements += 1;
+										}
+									} },
+									scope,
+									coordinationMcpUrl: mcp.url,
+									coordinationMcpHeaders: mcp.headers,
+									stopSignal: stopController.signal,
+									coordinationTools
+								});
+								completed = true;
+							} catch (error) {
+								if (!mcp.submittedResult() && !mcp.isStopped()) throw error;
+								completed = true;
+							} finally {
+								harnessInvocationActive = false;
+								if (completed) await controls.endDriverAttempt("completed");
+								else await controls.endDriverAttempt("failed").catch(() => void 0);
+							}
+							if (contractDeclared && !mcp.submittedResult()) {
+								await mcp.drainResolved();
+								candidate = await finalize();
+							}
+						},
+						progress: readProgress,
+						budget: () => scope.budget,
+						signal: scope.signal,
+						...deps.driverRetry ? { policy: deps.driverRetry } : {},
+						...repromptEnabled ? { reprompt: {
+							maxReprompts,
+							...deps.deliverable?.describe === void 0 ? {} : { describe: deps.deliverable.describe },
+							onUnmetContract: async (context) => {
+								if (mcp.isStopped() || progressStopReason !== void 0) return "stop";
+								return await deps.onUnmetContract?.(context) ?? { steer: defaultUnmetContractSteer(context) };
+							}
+						} } : {},
+						onAttempt: async (record) => {
+							loopRecords.push(record);
+							await deps.onDriverAttempt?.(record);
 						}
-					},
-					progress: readProgress,
-					budget: () => scope.budget,
-					signal: scope.signal,
-					...deps.driverRetry ? { policy: deps.driverRetry } : {},
-					...repromptEnabled ? { reprompt: {
-						maxReprompts,
-						...deps.deliverable?.describe === void 0 ? {} : { describe: deps.deliverable.describe },
-						onUnmetContract: async (context) => {
-							if (mcp.isStopped()) return "stop";
-							return await deps.onUnmetContract?.(context) ?? { steer: defaultUnmetContractSteer(context) };
-						}
-					} } : {},
-					...deps.onDriverAttempt ? { onAttempt: deps.onDriverAttempt } : {}
-				});
+					});
+				} finally {
+					settleLoop();
+				}
 				if (!contractDeclared) await mcp.drainResolved();
 				const submitted = mcp.submittedResult();
 				if (submitted) {
@@ -2633,7 +2764,7 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	const baseFactory = createExecutor(boundBackend);
 	const ownerRuntime = boundBackend.backend === "provider" ? boundBackend.runtime ?? resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry).name : "cli";
 	let activeExecutor;
-	const drive = async ({ profile, authoredProfile, task, scope, coordinationMcpUrl, coordinationMcpHeaders, stopSignal, coordinationTools }) => {
+	const drive = async ({ profile, authoredProfile, task, scope, coordinationMcpUrl, coordinationMcpHeaders, stopSignal, coordinationTools, reentry }) => {
 		const retainedOwner = boundBackend.backend === "provider" ? scopeRetainedOwnerContext(scope) : void 0;
 		if (retainedOwner && boundBackend.backend === "provider") {
 			bindScopeRetainedOwnerProvider(scope, resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry));
@@ -2643,7 +2774,13 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 				return execution?.kind === "environment" ? execution.id : void 0;
 			});
 		}
-		const originalTask = retainedOwner ? await prepareScopeRetainedOwnerTask(scope, task) : task;
+		let driveTask = task;
+		if (reentry !== void 0) {
+			const continuity = await reentryContinuity(boundBackend, scope, retainedOwner !== void 0);
+			reentry.onContinuity?.(continuity);
+			driveTask = reentry.compose(continuity);
+		}
+		const originalTask = retainedOwner ? await prepareScopeRetainedOwnerTask(scope, driveTask) : driveTask;
 		const acceptedOwner = retainedOwner ? await scopeRetainedOwnerResult(scope) : void 0;
 		if (acceptedOwner) {
 			await restoreScopeOwnerAcceptedExecution(scope);
@@ -3005,6 +3142,41 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	drive.progress = () => activeExecutor?.progress?.();
 	return attestRuntimeOwnedScopeOwner(drive, ownerRuntime);
 }
+/**
+* What the next drive of a harness-brained manager continues, as far as its backend proves it.
+*
+* A bridge reattaches the harness session by its durable execution id. A retained provider owner
+* continues in the environment it last used while the provider still holds it, and a deliberate
+* later invocation there continues the same harness session. A provider without retained control
+* creates a new environment for every drive and releases the old one. Anything else is unproven.
+*/
+async function reentryContinuity(backend, scope, retainedOwner) {
+	if (backend.backend === "bridge") return {
+		session: "continued",
+		environment: "same",
+		workspace: "kept"
+	};
+	if (backend.backend !== "provider" || !retainedOwner) return UNPROVEN_CONTINUITY;
+	if ((await resolveAgentEnvironmentProvider(backend.provider, backend.registry).capabilities()).retainedControl === void 0) return {
+		session: "new",
+		environment: "replaced",
+		workspace: "lost"
+	};
+	const environment = await reconcileScopeRetainedOwnerEnvironment(scope);
+	if (environment.state === "live") return {
+		session: "continued",
+		environment: "same",
+		environmentId: environment.environmentId,
+		workspace: "kept"
+	};
+	if (environment.state === "lost") return {
+		session: "new",
+		environment: "replaced",
+		previousEnvironmentId: environment.environmentId,
+		workspace: "lost"
+	};
+	return UNPROVEN_CONTINUITY;
+}
 function isAsyncIterable(value) {
 	return value !== null && typeof value === "object" && Symbol.asyncIterator in value && typeof value[Symbol.asyncIterator] === "function";
 }
@@ -3020,6 +3192,51 @@ function resolveNamed(option, table, value, registry) {
 	if (entry === void 0) throw new ConfigError(`supervise: opts.${option} = ${JSON.stringify(value)} is not in opts.registry.${table} — the table resolved no entry under that name`);
 	return entry;
 }
+/** Read the profiles table once, before anything is built or spent, and freeze what it returns.
+*  Every entry must parse as an AgentProfile (the schema refuses a credential written as a public
+*  value), be executable, use an allowed model, and carry its table name as `profile.name`.
+*  `assertMountable` applies the spawn path's own mount checks, so an entry that can never be
+*  mounted fails here instead of after a director spent a turn on it. A promoted entry's decision
+*  must promote, and a treatment arm of its sealed play must name the entry's canonical digest;
+*  the seal itself is verified by {@link verifyProfilePromotions}. An empty table is no table. */
+function snapshotProfileTable(table, allowedModels, assertMountable) {
+	if (table === void 0) return void 0;
+	if (typeof table.names !== "function" || typeof table.resolve !== "function") throw new ConfigError("supervise: opts.registry.profiles must implement resolve(name) and names(): a director can spawn only the names it is shown");
+	const entries = /* @__PURE__ */ new Map();
+	for (const name of table.names()) {
+		const at = `opts.registry.profiles ${JSON.stringify(name)}`;
+		if (typeof name !== "string" || name.trim().length === 0 || name !== name.trim()) throw new ConfigError(`supervise: ${at} is not a non-empty trimmed name`);
+		if (entries.has(name)) throw new ConfigError(`supervise: ${at} is listed twice`);
+		const entry = table.resolve(name);
+		if (entry === void 0) throw new ConfigError(`supervise: ${at} is listed, but the table resolved no entry under it`);
+		const parsed = agentProfileSchema.safeParse(entry.profile);
+		if (!parsed.success) throw new ValidationError(`supervise: ${at} is not a valid AgentProfile: ${parsed.error.message}`);
+		const profile = freezeDetached(parsed.data);
+		if (profile.name !== name) throw new ValidationError(`supervise: ${at} holds profile.name ${JSON.stringify(profile.name)}; a table entry is spawned and continued by its name, so the two must be equal`);
+		assertExecutableAgentProfile(profile, `supervise: ${at}`);
+		assertProfileModelsAllowed(profile, allowedModels);
+		assertMountable?.(profile, `supervise: ${at} would be refused at mount`);
+		const promotion = entry.promotion;
+		if (promotion !== void 0) {
+			if (promotion.decision?.promote !== true) throw new ValidationError(`supervise: ${at} cites a PairedPromotionDecision that did not promote; list it without promotion to run it as exploratory`);
+			const digest = canonicalAgentProfileDigest(profile);
+			if (!(promotion.experiment?.spec?.arms ?? []).some((arm) => arm.role === "treatment" && arm.profileDigest === digest)) throw new ValidationError(`supervise: ${at} cites sealed play ${JSON.stringify(promotion.experiment?.spec?.id)}, but no treatment arm of it names this profile's digest ${digest}`);
+		}
+		entries.set(name, Object.freeze({
+			profile,
+			...promotion === void 0 ? {} : { promotion: freezeDetached(promotion) }
+		}));
+	}
+	return entries.size === 0 ? void 0 : entries;
+}
+/** Verify the seal of every promoted profiles-table entry. Eval's seal check is asynchronous, so it
+*  runs at the start of the run, before the first model call; a broken seal refuses the run. */
+async function verifyProfilePromotions(table) {
+	const promoted = [...table ?? []].filter(([, entry]) => entry.promotion !== void 0);
+	if (promoted.length === 0) return;
+	const { verifySealedExperiment } = await import("@tangle-network/agent-eval/experiment");
+	for (const [name, entry] of promoted) if (!await verifySealedExperiment(entry.promotion.experiment)) throw new ValidationError(`supervise: opts.registry.profiles ${JSON.stringify(name)} cites a sealed play whose digest does not match its spec`);
+}
 const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"allowedModels",
 	"analysts",
@@ -3059,6 +3276,7 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"otel",
 	"peerMail",
 	"perWorker",
+	"reservationPolicy",
 	"probes",
 	"profileGuidance",
 	"profileSecurity",
@@ -3438,13 +3656,22 @@ function profileGuidanceComposer(guidance) {
 		return composed.data;
 	};
 }
+/**
+* The exact root profile `supervise` executes: `profile` parsed as an AgentProfile, with the
+* selected `profileGuidance` composed. The root's journaled `identity.profileDigest` is this
+* value's digest, so a reader that must match a recorded root derives it here, not by hand.
+*/
+function superviseRootProfile(profile, profileGuidance) {
+	const parsedProfile = agentProfileSchema.safeParse(profile);
+	if (!parsedProfile.success) throw new ValidationError(`supervise: invalid AgentProfile: ${parsedProfile.error.message}`);
+	const compose = profileGuidanceComposer(profileGuidance);
+	return freezeDetachedProfile(compose ? compose(parsedProfile.data) : parsedProfile.data);
+}
 function superviseInternal(profile, task, opts, testBrain) {
 	const options = captureSuperviseOptions(opts);
 	assertValidBudget(options.budget, "supervise budget");
-	const parsedProfile = agentProfileSchema.safeParse(profile);
-	if (!parsedProfile.success) throw new ValidationError(`supervise: invalid AgentProfile: ${parsedProfile.error.message}`);
 	const composeSpawnProfile = profileGuidanceComposer(options.profileGuidance);
-	const canonicalProfile = freezeDetachedProfile(composeSpawnProfile ? composeSpawnProfile(parsedProfile.data) : parsedProfile.data);
+	const canonicalProfile = superviseRootProfile(profile, options.profileGuidance);
 	assertExecutableAgentProfile(canonicalProfile, "supervise root");
 	const canonicalTask = freezeDetached(task);
 	if (options.makeWorkerAgent && options.authorizeSpawn) throw new ValidationError("supervise: authorizeSpawn cannot be combined with caller-owned makeWorkerAgent; use makeLeafAgent to override leaf execution inside the authorized path, or use backend-derived workers");
@@ -3472,12 +3699,18 @@ function superviseInternal(profile, task, opts, testBrain) {
 	const finalizer = resolveNamed("finalizer", "finalizers", options.finalizer, options.registry?.finalizers);
 	const analysts = resolveNamed("analysts", "analysts", options.analysts, options.registry?.analysts);
 	const probes = resolveNamed("probes", "probes", options.probes, options.registry?.probes);
+	const profileTable = snapshotProfileTable(options.registry?.profiles, options.allowedModels, options.makeWorkerAgent === void 0 && options.authorizeSpawn === void 0 ? (entry, context) => {
+		const security = validateAgentProfileSecurity(entry, options.profileSecurity ?? DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY);
+		if (!security.ok) throw new ValidationError(`${context}: ${security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ")}`);
+		if (options.backend !== void 0 && options.makeLeafAgent === void 0 && declaredRuntimeToolNames(entry).length === 0) assertBackendProfileMaterialization(entry, options.backend, context);
+	} : void 0);
 	assertCoordinationBinding(options.coordination);
 	const ctx = options.runDir !== void 0 ? createFileRunContext(options.runDir, { withDriver: true }) : createInMemoryRunContext({ withDriver: true });
 	const blobs = options.blobs ?? ctx.blobs;
 	const perWorker = options.perWorker ?? defaultPerWorker(options.budget);
 	assertValidBudget(perWorker, "supervise perWorker");
 	assertPerWorkerWithinPool(perWorker, options.budget);
+	assertRecursiveReservationPolicy(options.reservationPolicy, options.maxDepth ?? 8, options.maxLiveWorkers);
 	const journal = options.journal ?? ctx.journal;
 	const runId = options.runId ?? "supervise";
 	const runNamespace = supervisionRunNamespace(options.runDir, runId);
@@ -3622,6 +3855,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					makeWorkerAgent: childFactory,
 					...authorizeNestedMessage ? { authorizeDownMessage: authorizeNestedMessage } : {},
 					perWorker: nestedPerWorker,
+					...options.reservationPolicy ? { preserveOwnerTurns: true } : {},
 					...options.router ? { router: options.router } : {},
 					...nestedDriveHarness ? { driveHarness: nestedDriveHarness } : {},
 					...options.coordination && isExternalSupervisor(authorized) ? { coordination: options.coordination } : {},
@@ -3648,6 +3882,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					...spawnPreflight ? { preflightSpawn: spawnPreflight } : {},
 					...options.resolveSpawnProfile ? { resolveSpawnProfile: options.resolveSpawnProfile } : {},
 					...composeSpawnProfile ? { composeSpawnProfile } : {},
+					...profileTable ? { profiles: profileTable } : {},
 					...options.peerMail ? { peerMail: options.peerMail } : {},
 					...options.stopRule ? { stopRule: options.stopRule } : {},
 					...options.onProgressStop ? { onProgressStop: options.onProgressStop } : {},
@@ -3708,7 +3943,9 @@ function superviseInternal(profile, task, opts, testBrain) {
 		durableCancellation.abort(request === void 0 ? new Error(reason) : new RunCancellationReason(request.source, reason, request.operationId));
 	};
 	const workerFactory = makeWorkerAgent;
+	let rootContinuation;
 	const start = async () => {
+		await verifyProfilePromotions(profileTable);
 		const priorCoordination = log ? await log.load(runId, rootOwnerId) : void 0;
 		const authorizeRootMessage = authorizeDownFor(canonicalProfile, 1);
 		const agentDeps = {
@@ -3716,17 +3953,22 @@ function superviseInternal(profile, task, opts, testBrain) {
 			makeWorkerAgent: workerFactory,
 			...authorizeRootMessage ? { authorizeDownMessage: authorizeRootMessage } : {},
 			perWorker,
+			...options.reservationPolicy ? { preserveOwnerTurns: true } : {},
 			...log ? { onEvent: (_event, record) => log.append(runId, record, rootOwnerId) } : {},
 			...deliverable ? { deliverable } : {},
 			onProviderModel(model) {
 				rootProviderModels.push(model);
 			},
+			onDriverLoopSettled(record) {
+				rootContinuation = record;
+			},
 			...priorCoordination && (priorCoordination.questions.length > 0 || priorCoordination.findings.length > 0 || priorCoordination.continuations.length > 0 || priorCoordination.deliveryEvidence.length > 0 || priorCoordination.records.some((record) => record.event.type === "submission")) ? { priorCoordination } : {},
 			...finalizer ? { finalizer } : {},
 			...options.coordination && isExternalSupervisor(canonicalProfile) ? { coordination: options.coordination } : {},
 			...spawnPreflight ? { preflightSpawn: spawnPreflight } : {},
 			...options.resolveSpawnProfile ? { resolveSpawnProfile: options.resolveSpawnProfile } : {},
 			...composeSpawnProfile ? { composeSpawnProfile } : {},
+			...profileTable ? { profiles: profileTable } : {},
 			...spawnResourceRoot === void 0 ? {} : { spawnResourceRoot },
 			...options.peerMail ? { peerMail: options.peerMail } : {},
 			...options.maxLiveWorkers !== void 0 ? { maxLiveWorkers: options.maxLiveWorkers } : {},
@@ -3806,6 +4048,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 			...options.retainedAtSettlement !== void 0 ? { retainedAtSettlement: options.retainedAtSettlement } : {},
 			ownerWorkspaceRetention: managerBackend?.backend === "provider" && managerBackend.workspaceRetention !== void 0,
 			...options.maxLiveWorkers !== void 0 ? { maxLiveWorkers: options.maxLiveWorkers } : {},
+			...options.reservationPolicy ? { reservationPolicy: options.reservationPolicy } : {},
 			...probes ? { probes } : {},
 			...ctx.resume === true ? { resume: true } : {},
 			...options.now ? { now: options.now } : {},
@@ -3833,7 +4076,8 @@ function superviseInternal(profile, task, opts, testBrain) {
 			return {
 				...result,
 				rootProviderModel,
-				...rootStream === void 0 ? {} : { rootStream }
+				...rootStream === void 0 ? {} : { rootStream },
+				...rootContinuation === void 0 ? {} : { continuation: rootContinuation }
 			};
 		};
 		if (!recorder) return settle();
@@ -3880,6 +4124,6 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 	return evidence ?? rootProviderModelEvidence([]);
 }
 //#endregion
-export { readRootStreamReceipt as _, workerFromBackend as a, gateOnDeliverable as b, retryPreSpawnRefusals as c, coordinationProfileToolPrefix as d, resolveSupervisorProfile as f, readRootStream as g, ROOT_STREAM_FILE as h, superviseWithTestBrain as i, withWorkerSpawnRetry as l, supervisorAgentWithTestBrain as m, profileGuidanceComposer as n, isPreSpawnExecutorFailure as o, supervisorAgent as p, supervise as r, resolveWorkerSpawnRetry as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, assertCoordinationBinding as u, createSupervisorSpanRecorder as v, mapExecutorResult as x, serveCoordinationMcp as y };
+export { gateOnDeliverable as C, serveCoordinationMcp as S, readRootStream as _, superviseWithTestBrain as a, composeReentryTask as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, coordinationProfileToolPrefix as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgent as m, profileGuidanceComposer as n, workerFromBackend as o, resolveSupervisorProfile as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, readRootStreamReceipt as v, mapExecutorResult as w, createSupervisorSpanRecorder as x, UNPROVEN_CONTINUITY as y };
 
-//# sourceMappingURL=supervise-DsQjhLN-.js.map
+//# sourceMappingURL=supervise-BeAI8-On.js.map