@tangle-network/agent-runtime 0.259.1 → 0.262.0

package/dist/{supervisor-CJyzUjc7.js → supervisor-BGGvnXvV.js}

@@ -1,6 +1,6 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-BbSCSak0.js";
-import { b as verifyWorkspaceSnapshotArtifacts, i as verifyAgentCandidateWorkspaceArchive } from "./workspace-archive-DQGFwvM6.js";
+import { i as verifyAgentCandidateWorkspaceArchive, x as verifyWorkspaceSnapshotArtifacts } from "./workspace-archive-C9lgf77y.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
@@ -2409,6 +2409,16 @@ function providerAttemptEvidence(model) {
 }
 //#endregion
 //#region src/durable/jsonl-file.ts
+/** Parse in-memory evidence with the same commit boundary as streamed journal reads. */
+function parseCommittedJsonLines(text, source) {
+	const lines = text.split("\n");
+	const records = [];
+	for (const [index, line] of lines.entries()) {
+		const record = parseRecord(line, source, index + 1, index < lines.length - 1);
+		if (record !== void 0) records.push(record.value);
+	}
+	return records;
+}
 /** Read a fixed file prefix one record at a time, never allocating the whole journal as a string.
 * A reader cannot chase concurrent appends forever. Missing files are empty only when requested;
 * corruption, short reads, and other I/O errors remain failures. Closing the iterator closes the fd. */
@@ -16763,7 +16773,7 @@ var SpawnEventIndex = class {
 	/** Called only after validation and, for the file writer, a successful durable append. */
 	add(event) {
 		if (!outsideCursorNamespace(event)) this.cursors.add(event.seq);
-		if (event.kind !== "spawned" && event.kind !== "materialized" && event.kind !== "execution-bound" && event.kind !== "execution-input" && event.kind !== "execution-admitted" && event.kind !== "execution-result" && !closesCursorSlot(event)) return;
+		if (event.kind !== "spawned" && event.kind !== "materialized" && event.kind !== "execution-bound" && event.kind !== "execution-input" && event.kind !== "execution-admitted" && event.kind !== "execution-result" && event.kind !== "environment-teardown" && !closesCursorSlot(event)) return;
 		let node = this.nodes.get(event.id);
 		if (!node) {
 			node = {
@@ -16774,10 +16784,16 @@ var SpawnEventIndex = class {
 				inputs: /* @__PURE__ */ new Set(),
 				input: false,
 				result: false,
-				admissions: /* @__PURE__ */ new Map()
+				admissions: /* @__PURE__ */ new Map(),
+				destroyedEnvironments: /* @__PURE__ */ new Set()
 			};
 			this.nodes.set(event.id, node);
 		}
+		if (event.kind === "environment-teardown") {
+			if (event.destroyed) node.destroyedEnvironments.add(event.environmentId);
+			return;
+		}
+		if (event.kind === "execution-admitted" && event.admission.phase === "environment") node.lastEnvironmentId = event.admission.environmentId;
 		if (event.kind === "spawned") node.spawned = true;
 		else if (event.kind === "materialized") node.materialized = true;
 		else if (event.kind === "execution-bound") node.bindings.add(event.binding.attemptId);
@@ -16800,7 +16816,10 @@ var SpawnEventIndex = class {
 		if (event.kind === "execution-input") {
 			if (!/^sha256:[0-9a-f]{64}$/.test(event.taskRef)) fail("has an invalid task reference");
 			if (node.inputs.has(event.seq)) fail("has duplicate input sequence");
-			if (node.input && !node.result) fail("input replaces an unfinished invocation");
+			const environment = node.admissions.get("environment");
+			const ranIn = environment?.phase === "environment" ? environment.environmentId : node.lastEnvironmentId;
+			const abandoned = ranIn !== void 0 && node.destroyedEnvironments.has(ranIn);
+			if (node.input && !node.result && !abandoned) fail("input replaces an unfinished invocation");
 			return;
 		}
 		if (event.kind === "execution-result") {
@@ -21722,6 +21741,86 @@ function hasDurableWorkspaceSnapshot(value) {
 	const parsed = agentCandidateWorkspaceSnapshotEvidenceSchema.safeParse(value);
 	return parsed.success && "locator" in parsed.data.manifest && "locator" in parsed.data.archive;
 }
+/** Environment ids this owner's provider confirmed gone, from their teardown receipts. */
+function destroyedEnvironmentIds(owned) {
+	return new Set(owned.flatMap((event) => event.kind === "environment-teardown" && event.destroyed ? [event.environmentId] : []));
+}
+/** The environment the owner's next invocation would continue in, when there is one: the latest
+*  environment admission of this owner, which is either the current invocation's own (recovered
+*  in place) or the one a deliberate later invocation reuses after an accepted result. `inFlight`
+*  says whether the latest invocation has no result yet. */
+function continuedEnvironment(owned) {
+	const latestInput = [...owned].reverse().find((event) => event.kind === "execution-input");
+	if (latestInput === void 0) return void 0;
+	const attempt = owned.slice(owned.indexOf(latestInput));
+	const admission = [...owned].reverse().flatMap((event) => event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
+	if (admission === void 0) return void 0;
+	return {
+		admission,
+		inFlight: !attempt.some((event) => event.kind === "execution-result")
+	};
+}
+/**
+* Confirm, before a new drive, that the environment the owner would continue in still exists.
+*
+* A retained invocation whose environment is gone can never be recovered: the retained path asked
+* the provider to reconnect, the provider answered `Sandbox not found`, and every later attempt
+* repeated that refusal until the barren streak ended the run. Measured on the real opencode path
+* (autopsy-a-before-20260924a, agent-runtime 5c22fbb2): the root sandbox was deleted 17 s after it
+* dispatched a child, four attempts in 64 s each refused "retained provider execution requires
+* reconciliation before replacement", and the run settled `driver-failed` while the child it had
+* commissioned settled `done` two minutes later, unread.
+*
+* The reconciliation refusal protects against paying twice for an execution that may still run.
+* An environment the provider no longer holds runs nothing, so there is nothing to reconcile: the
+* loss is journaled as a destroyed teardown receipt, and the next prepare starts a new invocation.
+*/
+async function reconcileScopeRetainedOwnerEnvironment(scope) {
+	const state = owners.get(scope);
+	if (!state?.provider) return { state: "none" };
+	const { provider, args } = state;
+	const owned = (await args.journal.loadTree(args.rootId) ?? []).filter((event) => event.id === args.nodeId);
+	const continued = continuedEnvironment(owned);
+	if (continued === void 0) return { state: "none" };
+	const environmentId = continued.admission.environmentId;
+	if (destroyedEnvironmentIds(owned).has(environmentId)) return {
+		state: "lost",
+		environmentId
+	};
+	if (!provider.get) return {
+		state: "unknown",
+		environmentId
+	};
+	let environment;
+	try {
+		environment = await runAbortable(() => provider.get(environmentId), AbortSignal.any([scope.signal, AbortSignal.timeout(3e4)]), "retained owner environment check timed out");
+	} catch {
+		return {
+			state: "unknown",
+			environmentId
+		};
+	}
+	if (environment !== null) return {
+		state: "live",
+		environmentId,
+		inFlight: continued.inFlight
+	};
+	scope.signal.throwIfAborted();
+	await args.journal.appendEvent(args.rootId, {
+		kind: "environment-teardown",
+		id: args.nodeId,
+		provider: provider.name,
+		environmentId,
+		destroyed: true,
+		detail: "lost: the provider no longer holds this environment, so the next invocation starts in a new one",
+		seq: state.nextSequence(),
+		at: new Date(args.now()).toISOString()
+	});
+	return {
+		state: "lost",
+		environmentId
+	};
+}
 /** Resume the original backend prompt; rebuilt coordination observations cannot replace it. */
 async function prepareScopeRetainedOwnerTask(scope, task) {
 	const state = owners.get(scope);
@@ -21738,6 +21837,14 @@ async function prepareScopeRetainedOwnerTask(scope, task) {
 		const accepted = [...attempt].reverse().find((event) => event.kind === "execution-result");
 		if (accepted?.kind === "execution-result") state.acceptedRef = accepted;
 	}
+	const destroyed = destroyedEnvironmentIds(owned);
+	const inFlight = continuedEnvironment(owned);
+	if (inFlight?.inFlight && destroyed.has(inFlight.admission.environmentId)) {
+		delete state.inputSequence;
+		delete state.taskRef;
+		state.admissions.length = 0;
+		delete state.priorSession;
+	}
 	if (state.prepared && state.acceptedRef && state.acceptedConsumed) {
 		const currentEnvironment = [...state.admissions].reverse().find((admission) => admission.phase === "environment");
 		if (currentEnvironment?.phase === "environment") state.priorSession = currentEnvironment;
@@ -21748,6 +21855,7 @@ async function prepareScopeRetainedOwnerTask(scope, task) {
 		state.admissions.length = 0;
 		delete state.acceptedConsumed;
 	}
+	if (state.priorSession !== void 0 && destroyed.has(state.priorSession.environmentId)) delete state.priorSession;
 	state.prepared = true;
 	if (state.taskRef !== void 0) {
 		const original = await args.blobs.get(state.taskRef);
@@ -22145,6 +22253,14 @@ function hasRetriableTeardowns(scope, release) {
 function closeScopeAdmission(scope) {
 	admissionSeals.get(scope)?.();
 }
+/** Fail before execution when an opted-in run cannot leave a live slot at every depth. */
+function assertRecursiveReservationPolicy(policy, maxDepth, maxLiveWorkers) {
+	if (policy === void 0) return;
+	if (typeof policy !== "object" || policy === null || Object.keys(policy).some((key) => key !== "ownerShare")) throw new ValidationError$1("reservationPolicy accepts only ownerShare");
+	if (!Number.isFinite(policy.ownerShare) || policy.ownerShare <= 0 || policy.ownerShare >= 1) throw new ValidationError$1("reservationPolicy.ownerShare must be greater than 0 and less than 1");
+	if (!Number.isSafeInteger(maxDepth) || maxDepth === void 0 || maxDepth < 2) throw new ValidationError$1("reservationPolicy requires maxDepth >= 2");
+	if (!Number.isSafeInteger(maxLiveWorkers) || maxLiveWorkers === void 0 || maxLiveWorkers < maxDepth) throw new ValidationError$1("reservationPolicy requires maxLiveWorkers >= maxDepth to preserve a descendant path");
+}
 /**
 * The recursion seam key. A `Scope` seeds a value of this on each child's
 * `ExecutorContext.seams` so a child whose executor is a DRIVER can mount a NESTED `Scope`
@@ -22157,13 +22273,14 @@ function makeNestedScopeSeam(args, liveWorkerCapacity, childNodeId, childBudget,
 	const mountScope = (nestedRoot, signal, restored) => {
 		const mountedAtMs = now();
 		const deadlineMs = childDeadlineAtMs === void 0 ? void 0 : Math.max(0, childDeadlineAtMs - mountedAtMs);
+		const nestedBudget = {
+			...childBudget,
+			...deadlineMs !== void 0 ? { deadlineMs } : {}
+		};
 		return createScope({
 			parentId: childNodeId,
 			root: nestedRoot,
-			pool: createBudgetPool({
-				...childBudget,
-				...deadlineMs !== void 0 ? { deadlineMs } : {}
-			}, mountedAtMs, restored?.poolRestore),
+			pool: createBudgetPool(nestedBudget, mountedAtMs, restored?.poolRestore),
 			journal: args.journal,
 			blobs: args.blobs,
 			executors: args.executors,
@@ -22171,6 +22288,10 @@ function makeNestedScopeSeam(args, liveWorkerCapacity, childNodeId, childBudget,
 			depth: args.depth + 1,
 			...args.maxDepth !== void 0 ? { maxDepth: args.maxDepth } : {},
 			liveWorkerCapacity,
+			...args.reservationPolicy ? {
+				reservationPolicy: args.reservationPolicy,
+				ownerBudget: nestedBudget
+			} : {},
 			signal,
 			...restored ? { resumeFrom: restored.resumeFrom } : {},
 			...args.now ? { now: args.now } : {},
@@ -22209,6 +22330,16 @@ function createScope(args) {
 		max: normalizeLiveWorkerLimit(args.maxLiveWorkers),
 		live: 0
 	};
+	const reservationPolicy = args.reservationPolicy;
+	assertRecursiveReservationPolicy(reservationPolicy, args.maxDepth, liveWorkerCapacity.max);
+	if (reservationPolicy && !args.ownerBudget) throw new ValidationError$1("reservationPolicy requires the owning scope budget");
+	const ownerBudget = args.ownerBudget;
+	const ownerFloor = reservationPolicy && ownerBudget ? {
+		tokens: Math.ceil(ownerBudget.maxTokens * reservationPolicy.ownerShare),
+		iterations: Math.ceil(ownerBudget.maxIterations * reservationPolicy.ownerShare),
+		...ownerBudget.maxUsd === void 0 ? {} : { usd: ownerBudget.maxUsd * reservationPolicy.ownerShare }
+	} : void 0;
+	const admissionMax = reservationPolicy && liveWorkerCapacity.max !== void 0 && args.maxDepth !== void 0 ? liveWorkerCapacity.max - Math.max(0, args.maxDepth - (args.depth + 1)) : liveWorkerCapacity.max;
 	let spawnOrdinal = args.resumeFrom ? args.resumeFrom.maxSpawnOrdinal + 1 : 0;
 	let cursorSeq = args.resumeFrom ? args.resumeFrom.maxCursorSeq + 1 : 0;
 	let waitOrdinal = args.resumeFrom ? args.resumeFrom.maxWaitOrdinal + 1 : 0;
@@ -22329,6 +22460,29 @@ function createScope(args) {
 			reason: "depth-exceeded"
 		};
 		if (typeof agentOrFactory !== "function") prepared ??= prepare();
+		if (!recovery && admissionMax !== void 0 && liveWorkerCapacity.live >= admissionMax) return {
+			ok: false,
+			reason: "max-live-workers"
+		};
+		if (!recovery && ownerFloor) {
+			const available = args.pool.readout();
+			const shortfalls = [];
+			const short = (channel, requested, free) => {
+				if (requested > free) shortfalls.push({
+					channel,
+					requested,
+					free: Math.max(0, free)
+				});
+			};
+			short("tokens", opts.budget.maxTokens, available.tokensLeft - ownerFloor.tokens);
+			short("iterations", opts.budget.maxIterations, available.iterationsLeft - ownerFloor.iterations);
+			if (ownerFloor.usd !== void 0) short("usd", opts.budget.maxUsd ?? 0, available.usdLeft - ownerFloor.usd);
+			if (shortfalls.length > 0) return {
+				ok: false,
+				reason: "budget-exhausted",
+				shortfalls
+			};
+		}
 		const permit = acquireLiveWorker(liveWorkerCapacity);
 		if (!permit.ok) return {
 			ok: false,
@@ -22565,6 +22719,7 @@ function createScope(args) {
 				label: opts.label,
 				...opts.key !== void 0 ? { key: opts.key } : {},
 				...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
+				...opts.successorOf === void 0 ? {} : { successorOf: opts.successorOf },
 				budget: opts.budget,
 				runtime: executor.runtime,
 				...ownedTreeRoot === void 0 ? {} : { ownedTreeRoot },
@@ -22709,6 +22864,7 @@ function createScope(args) {
 					childId: id,
 					label: opts.label,
 					...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
+					...opts.successorOf === void 0 ? {} : { successorOf: opts.successorOf },
 					runtime: executor.runtime,
 					...identity ? { identity } : {},
 					budget: opts.budget,
@@ -23084,7 +23240,7 @@ function createScope(args) {
 		get workerCapacity() {
 			return {
 				live: liveWorkerCapacity.live,
-				freeSlots: freeSlots(liveWorkerCapacity.live, liveWorkerCapacity.max),
+				freeSlots: freeSlots(liveWorkerCapacity.live, admissionMax),
 				unconfirmed: Object.freeze([...children.values()].filter((child) => isTerminalNodeStatus(child.status) && !child.cleanupConfirmed).map((child) => unconfirmedTeardownOf(child, releasingScopes.has(scope))))
 			};
 		}
@@ -24720,9 +24876,22 @@ function unreportedSpend(total, prior) {
 * driver that RETURNED with the contract unmet ended the run silently — 376 of 376 winning lab runs
 * ended on this loop's own `stop: 'completed'`, with the completion gate left to label the result
 * rather than to change it. A completed drive whose contract is unmet is now a first-class moment:
-* `reprompt.maxReprompts` re-enters the SAME live session with the unmet items, and every re-entry
-* crosses the same budget, deadline, and abort bounds. Successful continuations do not consume
-* the failure retry allowance.
+* `reprompt.maxReprompts` re-enters the driver with the unmet items, and every re-entry crosses the
+* same budget, deadline, and abort bounds. Successful continuations do not consume the failure
+* retry allowance.
+*
+* This loop decides WHETHER to re-enter; it does not know WHERE the next drive runs. Whether the
+* re-entered driver continues the same harness session, the same environment, or a replacement is
+* the drive harness's fact, and the caller composes the re-entry task from it (see
+* `./reentry.ts`). A re-prompt re-enters the same session only on a backend that proves it.
+*
+* Progress bounds the re-prompts too. The same delivery reading that resets the barren failure
+* counter decides whether a re-prompted drive earned another: `reprompt.maxBarren` consecutive
+* re-entered drives that completed without a delivery end the loop with `repromptRefusedBy:
+* 'no-progress'`. Before this, a completed drive reset the barren counter and `decideReprompt`
+* read only the count cap, budget, and deadline, so a director with `repromptOnUnmet: 100` or
+* `'until-complete'` that delivered nothing was re-prompted until the budget or deadline ended it;
+* the old prompt-owned loop logged 896 of 1,011 rounds with no progress.
 */
 /**
 * The instruction a completed-but-undelivered drive is re-entered with when the caller supplies no
@@ -24744,6 +24913,8 @@ function defaultUnmetContractSteer(context) {
 }
 const DEFAULT_MAX_CONSECUTIVE_FAILURES = 3;
 const DEFAULT_MAX_ATTEMPTS = 8;
+/** Two re-prompted drives in a row that deliver nothing end the re-prompts. */
+const DEFAULT_MAX_BARREN_REPROMPTS = 2;
 const DEFAULT_INITIAL_BACKOFF_MS = 2e3;
 const DEFAULT_MAX_BACKOFF_MS = 3e4;
 /**
@@ -24862,6 +25033,21 @@ var DriverAttemptsExhaustedError = class extends RuntimeRunStateError {
 		this.stop = stop;
 	}
 };
+/** Count a loop's attempt records into its {@link DriverLoopRecord}. */
+function summarizeDriverAttempts(records) {
+	let barren = 0;
+	for (const record of records) if (record.madeProgress) barren = 0;
+	else if (record.error === void 0 && record.reentry !== void 0 && record.contract === "unmet") barren += 1;
+	const last = records.at(-1);
+	return {
+		attempts: records.length,
+		reprompts: records.filter((record) => record.reprompted === true).length,
+		failureRetries: records.filter((record) => record.error !== void 0 && record.retryInMs !== void 0).length,
+		barrenReentries: barren,
+		ended: last?.stop ?? "unrecorded",
+		...last?.repromptRefusedBy === void 0 ? {} : { repromptRefusedBy: last.repromptRefusedBy }
+	};
+}
 async function defaultSleep(ms, signal) {
 	if (ms <= 0 || signal.aborted) return;
 	await sleep(ms, signal, false);
@@ -24888,14 +25074,21 @@ async function runDriverWithRetry(run) {
 		const deadline = run.budget().deadlineMs;
 		if (!Number.isFinite(deadline) || deadline <= 0) throw new ValidationError$1("runDriverWithRetry: until-complete requires a finite positive deadline");
 	}
+	const maxBarren = Math.max(1, run.reprompt?.maxBarren ?? 2);
 	const attempts = [];
 	let consecutiveBarren = 0;
+	let barrenReentries = 0;
 	let failures = 0;
 	let reprompts = 0;
 	let reentry;
 	const emit = async (record) => {
-		attempts.push(record);
-		await run.onAttempt?.(record);
+		const entered = reentry === void 0 ? {} : { reentry: reentry.reason };
+		const stamped = {
+			...record,
+			...entered
+		};
+		attempts.push(stamped);
+		await run.onAttempt?.(stamped);
 	};
 	/**
 	* Decide what a completed-but-undelivered drive does next. Every bound the FAILURE path applies
@@ -24904,6 +25097,7 @@ async function runDriverWithRetry(run) {
 	*/
 	const decideReprompt = async (attempt, after) => {
 		if (maxReprompts !== "until-complete" && reprompts >= maxReprompts) return { refusedBy: "reprompts-exhausted" };
+		if (barrenReentries >= maxBarren) return { refusedBy: "no-progress" };
 		if (run.signal.aborted) return { refusedBy: "aborted" };
 		const byBudget = budgetStop(run.budget(), now());
 		if (byBudget === "deadline" || byBudget === "budget-exhausted") return { refusedBy: byBudget };
@@ -24913,7 +25107,8 @@ async function runDriverWithRetry(run) {
 			maxReprompts,
 			progress: after,
 			budget: run.budget(),
-			...run.reprompt?.describe === void 0 ? {} : { describe: run.reprompt.describe }
+			...run.reprompt?.describe === void 0 ? {} : { describe: run.reprompt.describe },
+			barrenReentries
 		};
 		const decision = await run.reprompt?.onUnmetContract?.(context) ?? { steer: defaultUnmetContractSteer(context) };
 		if (decision === "stop") return { refusedBy: "caller-stop" };
@@ -24949,6 +25144,7 @@ async function runDriverWithRetry(run) {
 				if (progressed) return void 0;
 				return consecutiveBarren + 1 >= maxConsecutive ? "no-progress" : void 0;
 			})();
+			if (progressed) barrenReentries = 0;
 			if (stop !== void 0) {
 				await emit({
 					attempt,
@@ -24961,7 +25157,6 @@ async function runDriverWithRetry(run) {
 				throw new DriverAttemptsExhaustedError(error, attempts, stop);
 			}
 			consecutiveBarren = progressed ? 0 : consecutiveBarren + 1;
-			reentry = void 0;
 			const backoff = Math.min(maxBackoff, initialBackoff * 2 ** Math.max(0, consecutiveBarren - 1));
 			await emit({
 				attempt,
@@ -24971,6 +25166,11 @@ async function runDriverWithRetry(run) {
 				madeProgress: progressed,
 				retryInMs: backoff
 			});
+			reentry = {
+				reason: "driver-failure",
+				failure: errMessage(error),
+				retry: failures
+			};
 			await sleep(backoff, run.signal);
 			if (run.signal.aborted) throw new DriverAttemptsExhaustedError(error, attempts, "aborted");
 			const afterWait = budgetStop(run.budget(), now());
@@ -24983,15 +25183,12 @@ async function runDriverWithRetry(run) {
 		const progressed = madeProgress(before, after);
 		const contract = contractOf(after);
 		const contractField = contract === "none" ? {} : { contract };
+		if (progressed) barrenReentries = 0;
+		else if (reentry !== void 0 && contract === "unmet") barrenReentries += 1;
 		if (contract === "unmet" && (maxReprompts === "until-complete" || maxReprompts > 0)) {
 			const decision = await decideReprompt(attempt, after);
 			if ("steer" in decision) {
 				reprompts += 1;
-				reentry = {
-					reason: "unmet-contract",
-					steer: decision.steer,
-					reprompt: reprompts
-				};
 				await emit({
 					attempt,
 					durationMs,
@@ -25000,6 +25197,11 @@ async function runDriverWithRetry(run) {
 					reprompted: true,
 					retryInMs: 0
 				});
+				reentry = {
+					reason: "unmet-contract",
+					steer: decision.steer,
+					reprompt: reprompts
+				};
 				continue;
 			}
 			await emit({
@@ -25189,6 +25391,12 @@ function assertResumeContract(events, opts) {
 	if (roots.length !== 1 || roots[0]?.id !== opts.runId) throw new RuntimeRunStateError(`supervisor: resumed run '${opts.runId}' must contain exactly one root identity event; found ${roots.length}`);
 	const recorded = roots[0];
 	if (contentAddress(recorded.budget) !== contentAddress(opts.budget)) throw new RuntimeRunStateError(`supervisor: resume budget mismatch for run '${opts.runId}'; use a new runId to change limits`);
+	const expectedAdmission = opts.reservationPolicy ? {
+		policy: opts.reservationPolicy,
+		maxDepth: opts.maxDepth ?? defaultMaxDepth,
+		maxLiveWorkers: opts.maxLiveWorkers
+	} : void 0;
+	if (contentAddress(recorded.recursiveAdmission ?? null) !== contentAddress(expectedAdmission ?? null)) throw new RuntimeRunStateError(`supervisor: resume reservation policy or fleet limits mismatch for run '${opts.runId}'; use a new runId`);
 	if (!sameOptionalIdentity(recorded.identity, opts.rootIdentity)) throw new RuntimeRunStateError(`supervisor: resume identity mismatch for run '${opts.runId}'; ${describeIdentityMismatch(recorded.identity, opts.rootIdentity)}`);
 	const receipts = events.filter((event) => event.kind === "materialized" && event.id === opts.runId);
 	const expectedReceipt = rootMaterializationReceipt(opts);
@@ -25312,7 +25520,7 @@ function describeRejection(error) {
 function createSupervisor() {
 	let attached;
 	async function run(root, task, opts) {
-		const { budget, rootIdentity, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, probes, maxDepth, maxLiveWorkers, maxRestarts, withinMs, childSettleGraceMs, teardownConfirmMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
+		const { budget, rootIdentity, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, probes, maxDepth, maxLiveWorkers, reservationPolicy, maxRestarts, withinMs, childSettleGraceMs, teardownConfirmMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
 		const input = detachedSnapshot({
 			task,
 			options: {
@@ -25322,6 +25530,7 @@ function createSupervisor() {
 				...rootMaterialization === void 0 ? {} : { rootMaterialization },
 				...maxDepth === void 0 ? {} : { maxDepth },
 				...maxLiveWorkers === void 0 ? {} : { maxLiveWorkers },
+				...reservationPolicy === void 0 ? {} : { reservationPolicy },
 				...maxRestarts === void 0 ? {} : { maxRestarts },
 				...withinMs === void 0 ? {} : { withinMs },
 				...childSettleGraceMs === void 0 ? {} : { childSettleGraceMs },
@@ -25332,6 +25541,7 @@ function createSupervisor() {
 				...interactiveBindingDir === void 0 ? {} : { interactiveBindingDir }
 			}
 		}, "supervisor.run");
+		assertRecursiveReservationPolicy(reservationPolicy, maxDepth ?? defaultMaxDepth, maxLiveWorkers);
 		if (teardownConfirmMs !== void 0 && (typeof teardownConfirmMs !== "number" || !Number.isFinite(teardownConfirmMs) || teardownConfirmMs < 0)) throw new ValidationError$1(`supervisor: teardownConfirmMs must be a nonnegative finite number of milliseconds, got ${JSON.stringify(teardownConfirmMs)}`);
 		if (requestedRetainedAtSettlement !== void 0 && requestedRetainedAtSettlement !== "release" && requestedRetainedAtSettlement !== "keep") throw new ValidationError$1(`supervisor: retainedAtSettlement must be 'release' or 'keep', got ${JSON.stringify(requestedRetainedAtSettlement)}`);
 		opts = Object.freeze({
@@ -25394,6 +25604,11 @@ function createSupervisor() {
 					label: "root",
 					budget: opts.budget,
 					runtime: rootRuntime,
+					...opts.reservationPolicy ? { recursiveAdmission: {
+						policy: opts.reservationPolicy,
+						maxDepth: opts.maxDepth ?? defaultMaxDepth,
+						maxLiveWorkers: opts.maxLiveWorkers
+					} } : {},
 					...opts.rootIdentity ? { identity: opts.rootIdentity } : {},
 					seq: 0,
 					at: runStartedAt
@@ -25445,6 +25660,10 @@ function createSupervisor() {
 				depth: 0,
 				maxDepth: opts.maxDepth ?? defaultMaxDepth,
 				...opts.maxLiveWorkers !== void 0 ? { maxLiveWorkers: opts.maxLiveWorkers } : {},
+				...opts.reservationPolicy ? {
+					reservationPolicy: opts.reservationPolicy,
+					ownerBudget: opts.budget
+				} : {},
 				signal: controller.signal,
 				now,
 				hooks: opts.hooks,
@@ -26030,6 +26249,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { startRetainedInteractiveRun as $, resourceTelemetry as $i, persistHarnessTranscript as $n, readCommittedJsonLines as $r, peerMailTools as $t, validateWaitSpec as A, isSandboxTerminalEvent as Ai, resolveAgentEnvironmentProvider as An, harnessSupportsReasoningEffort as Ar, BudgetReconcileFault as At, SPAWN_RESOURCE_PATH_MAX_BYTES as B, deleteBoxSafe as Bi, startRetainedRunInEnvironment as Bn, profileMaterializationAxes$1 as Br, workerTraceHeaders as Bt, restoreScopeOwnerAcceptedExecution as C, projectSandboxOutcome as Ci, runBrainLoop as Cn, runSettledCommand as Cr, pendingWaits as Ct, isWaitOutcome as D, createSandboxToolPartState as Di, createAgentEnvironmentProviderRegistry as Dn, removeWorktree as Dr, isTraceAnalysisStore as Dt, createWaitProbes as E, canonicalStreamEventFromSandboxEvent as Ei, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as En, createWorktree as Er, captureWorkerTraceEvidence as Et, prepareScopeRetainedOwnerTask as F, sandboxProgressEvents as Fi, registerRetainedExecutorPreparation as Fn, AGENT_PROFILE_MATERIALIZATION_AXES as Fr, spendFromUsageEvents as Ft, readWorkerInteractiveAdmissions as G, sleep as Gi, abortError as Gn, renderProfileMaterializationIssues as Gr, readWorkerProgress as Gt, hostDirectoryReader as H, isAbortError$2 as Hi, destroyInteractiveEnvironment as Hn, promptModelProfileMaterialization as Hr, taskToPrompt as Ht, scopeRetainedOwnerContext as I, sumSandboxUsage as Ii, retainedExecutorSeamKey as In, assertProfileMaterialization as Ir, spendFromUsageTotals as It, readWorkerInteractiveBinding as J, throwIfAborted as Ji, defaultRedactor as Jn, unsupportedProfileDimensions as Jr, DEFAULT_PEER_MAIL_LIMITS as Jt, workerInteractiveAdmissionFile as K, stringifySafe as Ki, linkAbort as Kn, renderUnsupported as Kr, createInbox as Kt, scopeRetainedOwnerPriorSpend as L, addSpend as Li, reconnectRetainedRun as Ln, controlProfileMaterialization as Lr, WORKER_TRACE_PROPAGATION as Lt, bindScopeRetainedOwnerEnvironmentId as M, mapSandboxToolEvent as Mi, createPushTraceSource as Mn, parseCodexTokenUsage as Mr, createBudgetPool as Mt, bindScopeRetainedOwnerProvider as N, notifySandboxEventObserver as Ni, decodeToolPart as Nn, CodexExecutionDiagnosticError as Nr, meterUsageEvent as Nt, pollFor as O, createSandboxUsageLedger as Oi, providerAsExecutor as On, DEFAULT_LOCAL_HARNESS as Or, parseWorkerToolTraceArtifact as Ot, consumeScopeRetainedOwnerResult as P, sandboxEventServedBackend as Pi, sandboxSessionTraceSource as Pn, terminateProcessTreeAndConfirm as Pr, newUsageTotals as Pt, recoverRetainedInteractiveRun as Q, addResourceSpend as Qi, harnessTranscriptArtifact as Qn, prepareJsonlAppend as Qr, isPeerMailEnvelope as Qt, scopeRetainedOwnerResourceReader as R, chargedTokens as Ri, recoverRetainedRun as Rn, defineProfileMaterializationContract as Rr, readWorkerTraceContext as Rt, recordScopeOwnerMaterialization as S, detachedSnapshot as Si, routerBrain as Sn, sanitizeRuntimeStreamEvent as Sr, materializeTreeView as St, settledToIteration as T, assertSandboxServedModel as Ti, observedModelMatchesDeclared as Tn, captureWorktreeDiff as Tr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Tt, resolveSpawnResourcePaths as U, promptCacheTokenClasses as Ui, environmentGone as Un, promptOnlyProfileMaterialization as Ur, DEFAULT_STALL_AFTER_MS as Ut, environmentReader as V, hasCompleteCacheBreakdown as Vi, retainedCreateMaterial as Vn, promptControlProfileMaterialization as Vr, workerTraceSeamKey as Vt, interactiveAdmissionSeamKey as W, randomSuffix as Wi, RunCancellationReason as Wn, promptResourceProfileMaterialization as Wr, createActivityLog as Wt, workerInteractiveBindingsDir as X, withTimeout as Xi, resolveRedactor as Xn, worktreeCliProfileMaterialization as Xr, claimsAuthority as Xt, workerInteractiveBindingFile as Y, unmeteredSpend as Yi, defaultRedactorIdentityMaterial as Yn, validateProfileMaterialization as Yr, PEER_MAIL_WIRE_KEY as Yt, reconnectRetainedInteractiveRun as Z, zeroSpend as Zi, captureHarnessTranscript as Zn, isNoEntError as Zr, createPeerMailbox as Zt, beginScopeOwnerAttempt as _, unknownExecutionBindingReceipt as _i, createSandboxLineage as _n, toOtelAttributes as _r, FileSpawnJournal as _t, pickBestDelivered as a, armDeadlineTimer as aa, inheritRuntimeOwnedExecutorAttestation as ai, bridgeModelRouteRefusal as an, INTELLIGENCE_WIRE_VERSION as ar, bindReusableExecutorExecutionId as at, meterRuntimeOwnedAccounting as b, executableAgentSpecSnapshot as bi, assertBoxlessPromptOptions as bn, sanitizeAgentRuntimeEvent as br, insideCursorNamespace as bt, DriverAttemptsExhaustedError as c, promptFromAgentTurnInput as ca, newExecutionAttemptId as ci, harnessUsageIsEmpty as cn, buildRuntimeEventOtelSpans as cr, cliWorktreeExecutor as ct, defaultUnmetContractSteer as d, runtimeOwnedDriveHarnessProviderEvidence as di, bridgeStopSignalKey as dn, exportEvalRuns as dr, snapshotExecutorConfig as dt, withBudgetResources as ea, writeAllBytes as ei, peerMailVerbNames as en, contentAddress as er, errMessage as et, runDriverWithRetry as f, runtimeOwnedExecutorExecutionBinding as fi, TERMINAL_DECISIONS as fn, flatOtelSpan as fr, createWorktreeCliExecutor as ft, withDriverExecutor as g, runtimeOwnedScopeOwnerRuntime as gi, runAgentRounds as gn, padTraceId as gr, FileResultBlobStore as gt, isDriverSpec as h, runtimeOwnedPendingExecutorMaterialization as hi, isTerminalDecision as hn, padSpanId as hr, createInPlaceCliExecutor as ht, collectDelivered as i, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as ia, finalizeRuntimeOwnedPendingExecutor as ii, bridgeAdmissionRefusal as in, traceContextToEnv as ir, rollingDispatch as it, waitUntil as j, mapSandboxEvent as ji, sandboxClientAsProvider as jn, localHarnessExecutable as jr, assertValidBudget as jt, timerAt as k, extractLlmCallEvent as ki, providerAsSandboxClient as kn, LOCAL_HARNESSES as kr, workerTraceAnalysisStore as kt, HarnessTurnFailedError as l, promptOptionsFromAgentTurnInput as la, providerAttemptEvidence as li, readCodexRolloutSession as ln, createOpenInferenceFileExporter as lr, createExecutor as lt, driverExecutorFactory as m, runtimeOwnedExecutorProviderEvidence as mi, defaultSelectWinner as mn, loopEventToOtelSpan as mr, createSteerableSandboxSession as mt, createSupervisor as n, abortError$2 as na, attestRuntimeOwnedScopeOwner as ni, isTerminalNodeStatus as nn, mergeTraceEnv as nr, freeSlots as nt, runFinalizer as o, teardownExecutor as oa, knownExecutionBindingReceipt as oi, addHarnessUsage as on, buildLoopOtelSpans as or, captureReusableExecutorConfig as ot, driverChild as p, runtimeOwnedExecutorMaterialization as pi, createSandboxForSpec as pn, generateSpanId as pr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as pt, attachWorker as q, throwAbort as qi, runAbortable as qn, sandboxActProfileMaterialization as qr, AUTHORITY_MARKERS as qt, bestDelivered as r, awaitAbortable$1 as ra, authoredProfileDigest as ri, executorFailure as rn, readTraceContextFromEnv as rr, queueOf as rt, runTree as s, teardownSurfaces as sa, knownMaterializationReceipt as si, createCodexRolloutStoreReader as sn, buildLoopSpanNodes as sr, cliInPlaceExecutor as st, createRootHandle as t, decodeHarnessUsage as ta, attestRuntimeOwnedPendingExecutor as ti, isLiveNodeStatus as tn, createPropagatingTraceEmitter as tr, effectiveConcurrency as tt, classifyDriverFailure as u, providerMessageText as ua, recordRuntimeOwnedDriveHarnessProviderEvidence as ui, bridgeRuntimeAttachmentsKey as un, createOtelExporter as ur, createExecutorRegistry as ut, createScope as v, unknownMaterializationReceipt as vi, probeSandboxCapabilities as vn, createRuntimeEventCollector as vr, InMemoryResultBlobStore as vt, scopeOwnerExecutorNodeContext as w, readSandboxOutcome as wi, canonicalObservedModelParts as wn, runWorktreeHarness as wr, replaySpawnTree as wt, meterRuntimeOwnedProviderAttempt as x, detachedFrozen as xi, readPromptOptions as xn, sanitizeKnowledgeReadinessReport as xr, loadSpawnForest as xt, deriveNodeExecutionIdentity as y, executableAgentProfileSnapshot as yi, acquireSandbox as yn, createRuntimeStreamEventCollector as yr, InMemorySpawnJournal as yt, scopeRetainedOwnerResult as z, cloneSpend as zi, startRetainedRun as zn, fullProfileMaterialization as zr, workerTraceEnv as zt };
+export { workerInteractiveBindingFile as $, throwIfAborted as $i, defaultRedactorIdentityMaterial as $n, validateProfileMaterialization as $r, PEER_MAIL_WIRE_KEY as $t, isWaitOutcome as A, assertSandboxServedModel as Ai, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as An, createWorktree as Ar, captureWorkerTraceEvidence as At, scopeRetainedOwnerContext as B, sandboxProgressEvents as Bi, retainedExecutorSeamKey as Bn, assertProfileMaterialization as Br, spendFromUsageTotals as Bt, meterRuntimeOwnedAccounting as C, unknownMaterializationReceipt as Ci, acquireSandbox as Cn, createRuntimeStreamEventCollector as Cr, InMemorySpawnJournal as Ct, scopeOwnerExecutorNodeContext as D, detachedSnapshot as Di, runBrainLoop as Dn, runSettledCommand as Dr, pendingWaits as Dt, restoreScopeOwnerAcceptedExecution as E, detachedFrozen as Ei, routerBrain as En, sanitizeRuntimeStreamEvent as Er, materializeTreeView as Et, bindScopeRetainedOwnerEnvironmentId as F, isSandboxTerminalEvent as Fi, sandboxClientAsProvider as Fn, localHarnessExecutable as Fr, assertValidBudget as Ft, environmentReader as G, deleteBoxSafe as Gi, retainedCreateMaterial as Gn, promptControlProfileMaterialization as Gr, workerTraceSeamKey as Gt, scopeRetainedOwnerResourceReader as H, addSpend as Hi, recoverRetainedRun as Hn, defineProfileMaterializationContract as Hr, readWorkerTraceContext as Ht, bindScopeRetainedOwnerProvider as I, mapSandboxEvent as Ii, createPushTraceSource as In, parseCodexTokenUsage as Ir, createBudgetPool as It, interactiveAdmissionSeamKey as J, promptCacheTokenClasses as Ji, RunCancellationReason as Jn, promptResourceProfileMaterialization as Jr, createActivityLog as Jt, hostDirectoryReader as K, hasCompleteCacheBreakdown as Ki, destroyInteractiveEnvironment as Kn, promptModelProfileMaterialization as Kr, taskToPrompt as Kt, consumeScopeRetainedOwnerResult as L, mapSandboxToolEvent as Li, decodeToolPart as Ln, CodexExecutionDiagnosticError as Lr, meterUsageEvent as Lt, timerAt as M, createSandboxToolPartState as Mi, providerAsExecutor as Mn, DEFAULT_LOCAL_HARNESS as Mr, parseWorkerToolTraceArtifact as Mt, validateWaitSpec as N, createSandboxUsageLedger as Ni, providerAsSandboxClient as Nn, LOCAL_HARNESSES as Nr, workerTraceAnalysisStore as Nt, settledToIteration as O, projectSandboxOutcome as Oi, canonicalObservedModelParts as On, runWorktreeHarness as Or, replaySpawnTree as Ot, waitUntil as P, extractLlmCallEvent as Pi, resolveAgentEnvironmentProvider as Pn, harnessSupportsReasoningEffort as Pr, BudgetReconcileFault as Pt, readWorkerInteractiveBinding as Q, throwAbort as Qi, defaultRedactor as Qn, unsupportedProfileDimensions as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, prepareScopeRetainedOwnerTask as R, notifySandboxEventObserver as Ri, sandboxSessionTraceSource as Rn, terminateProcessTreeAndConfirm as Rr, newUsageTotals as Rt, deriveNodeExecutionIdentity as S, unknownExecutionBindingReceipt as Si, probeSandboxCapabilities as Sn, createRuntimeEventCollector as Sr, InMemoryResultBlobStore as St, recordScopeOwnerMaterialization as T, executableAgentSpecSnapshot as Ti, readPromptOptions as Tn, sanitizeKnowledgeReadinessReport as Tr, loadSpawnForest as Tt, scopeRetainedOwnerResult as U, chargedTokens as Ui, startRetainedRun as Un, fullProfileMaterialization as Ur, workerTraceEnv as Ut, scopeRetainedOwnerPriorSpend as V, sumSandboxUsage as Vi, reconnectRetainedRun as Vn, controlProfileMaterialization as Vr, WORKER_TRACE_PROPAGATION as Vt, SPAWN_RESOURCE_PATH_MAX_BYTES as W, cloneSpend as Wi, startRetainedRunInEnvironment as Wn, profileMaterializationAxes$1 as Wr, workerTraceHeaders as Wt, workerInteractiveAdmissionFile as X, sleep as Xi, linkAbort as Xn, renderUnsupported as Xr, createInbox as Xt, readWorkerInteractiveAdmissions as Y, randomSuffix as Yi, abortError as Yn, renderProfileMaterializationIssues as Yr, readWorkerProgress as Yt, attachWorker as Z, stringifySafe as Zi, runAbortable as Zn, sandboxActProfileMaterialization as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, runtimeOwnedExecutorExecutionBinding as _i, createSandboxForSpec as _n, generateSpanId as _r, DEFAULT_SANDBOX_STEERING_MAX_TURNS as _t, pickBestDelivered as a, withBudgetResources as aa, writeAllBytes as ai, isLiveNodeStatus as an, createPropagatingTraceEmitter as ar, effectiveConcurrency as at, beginScopeOwnerAttempt as b, runtimeOwnedPendingExecutorMaterialization as bi, runAgentRounds as bn, padTraceId as br, FileResultBlobStore as bt, DEFAULT_MAX_BARREN_REPROMPTS as c, awaitAbortable$1 as ca, authoredProfileDigest as ci, bridgeAdmissionRefusal as cn, traceContextToEnv as cr, rollingDispatch as ct, classifyDriverFailure as d, teardownExecutor as da, knownExecutionBindingReceipt as di, createCodexRolloutStoreReader as dn, buildLoopSpanNodes as dr, cliInPlaceExecutor as dt, unmeteredSpend as ea, worktreeCliProfileMaterialization as ei, claimsAuthority as en, resolveRedactor as er, workerInteractiveBindingsDir as et, defaultUnmetContractSteer as f, teardownSurfaces as fa, knownMaterializationReceipt as fi, harnessUsageIsEmpty as fn, buildRuntimeEventOtelSpans as fr, cliWorktreeExecutor as ft, driverExecutorFactory as g, runtimeOwnedDriveHarnessProviderEvidence as gi, TERMINAL_DECISIONS as gn, flatOtelSpan as gr, createWorktreeCliExecutor as gt, driverChild as h, providerMessageText as ha, recordRuntimeOwnedDriveHarnessProviderEvidence as hi, bridgeStopSignalKey as hn, exportEvalRuns as hr, snapshotExecutorConfig as ht, collectDelivered as i, resourceTelemetry as ia, readCommittedJsonLines as ii, peerMailVerbNames as in, contentAddress as ir, errMessage as it, pollFor as j, canonicalStreamEventFromSandboxEvent as ji, createAgentEnvironmentProviderRegistry as jn, removeWorktree as jr, isTraceAnalysisStore as jt, createWaitProbes as k, readSandboxOutcome as ki, observedModelMatchesDeclared as kn, captureWorktreeDiff as kr, WORKER_TOOL_TRACE_SCHEMA_VERSION as kt, DriverAttemptsExhaustedError as l, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as la, finalizeRuntimeOwnedPendingExecutor as li, bridgeModelRouteRefusal as ln, INTELLIGENCE_WIRE_VERSION as lr, bindReusableExecutorExecutionId as lt, summarizeDriverAttempts as m, promptOptionsFromAgentTurnInput as ma, providerAttemptEvidence as mi, bridgeRuntimeAttachmentsKey as mn, createOtelExporter as mr, createExecutorRegistry as mt, createSupervisor as n, zeroSpend as na, parseCommittedJsonLines as ni, isPeerMailEnvelope as nn, harnessTranscriptArtifact as nr, recoverRetainedInteractiveRun as nt, runFinalizer as o, decodeHarnessUsage as oa, attestRuntimeOwnedPendingExecutor as oi, isTerminalNodeStatus as on, mergeTraceEnv as or, freeSlots as ot, runDriverWithRetry as p, promptFromAgentTurnInput as pa, newExecutionAttemptId as pi, readCodexRolloutSession as pn, createOpenInferenceFileExporter as pr, createExecutor as pt, resolveSpawnResourcePaths as q, isAbortError$2 as qi, environmentGone as qn, promptOnlyProfileMaterialization as qr, DEFAULT_STALL_AFTER_MS as qt, bestDelivered as r, addResourceSpend as ra, prepareJsonlAppend as ri, peerMailTools as rn, persistHarnessTranscript as rr, startRetainedInteractiveRun as rt, runTree as s, abortError$2 as sa, attestRuntimeOwnedScopeOwner as si, executorFailure as sn, readTraceContextFromEnv as sr, queueOf as st, createRootHandle as t, withTimeout as ta, isNoEntError as ti, createPeerMailbox as tn, captureHarnessTranscript as tr, reconnectRetainedInteractiveRun as tt, HarnessTurnFailedError as u, armDeadlineTimer as ua, inheritRuntimeOwnedExecutorAttestation as ui, addHarnessUsage as un, buildLoopOtelSpans as ur, captureReusableExecutorConfig as ut, withDriverExecutor as v, runtimeOwnedExecutorMaterialization as vi, defaultSelectWinner as vn, loopEventToOtelSpan as vr, createSteerableSandboxSession as vt, meterRuntimeOwnedProviderAttempt as w, executableAgentProfileSnapshot as wi, assertBoxlessPromptOptions as wn, sanitizeAgentRuntimeEvent as wr, insideCursorNamespace as wt, createScope as x, runtimeOwnedScopeOwnerRuntime as xi, createSandboxLineage as xn, toOtelAttributes as xr, FileSpawnJournal as xt, assertRecursiveReservationPolicy as y, runtimeOwnedExecutorProviderEvidence as yi, isTerminalDecision as yn, padSpanId as yr, createInPlaceCliExecutor as yt, reconcileScopeRetainedOwnerEnvironment as z, sandboxEventServedBackend as zi, registerRetainedExecutorPreparation as zn, AGENT_PROFILE_MATERIALIZATION_AXES as zr, spendFromUsageEvents as zt };
 
-//# sourceMappingURL=supervisor-CJyzUjc7.js.map
+//# sourceMappingURL=supervisor-BGGvnXvV.js.map