@tangle-network/agent-runtime 0.262.0 → 0.264.0

package/dist/{supervisor-BGGvnXvV.js → supervisor-C26k7X5-.js}

@@ -241,7 +241,7 @@ function exactContinuedControlRef(candidate, initial) {
 	return controlRef;
 }
 function assertInteractionBinding(controlRef, command) {
-	if (command.binding.runId !== controlRef.runId || command.binding.provider !== controlRef.provider || command.binding.environmentId !== controlRef.environmentId || command.binding.sessionId !== controlRef.sessionId || command.binding.executionId !== controlRef.executionId) throw new Error("interaction response command does not target this retained run");
+	if (command.binding.runId !== controlRef.runId || command.binding.environmentId !== controlRef.environmentId || command.binding.sessionId !== controlRef.sessionId || command.binding.executionId !== controlRef.executionId) throw new Error("interaction response command does not target this retained run");
 }
 function assertBoundaryBinding(controlRef, proof) {
 	if (proof.runId !== controlRef.runId || proof.provider !== controlRef.provider || proof.environmentId !== controlRef.environmentId || proof.sessionId !== controlRef.sessionId || proof.executionId !== controlRef.executionId || proof.requestDigest !== controlRef.requestDigest) throw new Error("native context proof does not identify this retained run");
@@ -355,11 +355,11 @@ function assertEventBinding(source, controlRef) {
 		if (checkSessionId && value.sessionId !== void 0 && value.sessionId !== controlRef.sessionId) throw new Error("provider returned an event for another retained session");
 	}
 }
-/** Validate the nested coordinates carried by a canonical interaction request. */
+/** Validate the retained coordinates. The nested provider names the inner adapter. */
 function assertCanonicalEventBinding(controlRef, event) {
 	if (event.type !== "interaction") return;
 	const binding = event.request.binding;
-	if (binding.runId !== controlRef.runId || binding.provider !== controlRef.provider || binding.environmentId !== controlRef.environmentId || binding.sessionId !== controlRef.sessionId || binding.executionId !== controlRef.executionId || binding.interactionId !== event.request.id) throw new Error("provider returned an interaction for another retained execution");
+	if (binding.runId !== controlRef.runId || binding.environmentId !== controlRef.environmentId || binding.sessionId !== controlRef.sessionId || binding.executionId !== controlRef.executionId || binding.interactionId !== event.request.id) throw new Error("provider returned an interaction for another retained execution");
 }
 function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -9539,7 +9539,7 @@ function assertSandboxStatusBinding(status, controlRef) {
 }
 function assertInteractionCommandScope(command, controlRef) {
 	if (controlRef === void 0) return;
-	if (command.binding.runId !== controlRef.runId || command.binding.provider !== controlRef.provider || command.binding.environmentId !== controlRef.environmentId || command.binding.sessionId !== controlRef.sessionId || command.binding.executionId !== controlRef.executionId) throw new ValidationError("interaction response targeted a different execution");
+	if (command.binding.runId !== controlRef.runId || command.binding.environmentId !== controlRef.environmentId || command.binding.sessionId !== controlRef.sessionId || command.binding.executionId !== controlRef.executionId) throw new ValidationError("interaction response targeted a different execution");
 }
 function assertCancellationScope(request, controlRef) {
 	if (controlRef === void 0) throw new ValidationError("durable cancellation requires an exact wrapper run control reference");
@@ -13870,6 +13870,7 @@ function executorFailureReason(result) {
 const PLATFORM_FAILURE_CODES = new Set([
 	"QUOTA_EXCEEDED",
 	"provider_quota_exceeded",
+	"provider_quota_exhausted",
 	"buffer.overflow",
 	"TIMEOUT",
 	"ECONNRESET",
@@ -13893,7 +13894,7 @@ const PLATFORM_FAILURE_MESSAGES = [
 	/exceeds its JSON bound/u,
 	/No provider served model/u,
 	/Invalid API key/u,
-	/provider_quota_exceeded|QUOTA_EXCEEDED|rate limit/iu,
+	/provider_quota_exceeded|provider_quota_exhausted|QUOTA_EXCEEDED|rate limit/iu,
 	/is at its box cap/u,
 	/could not materialize the seat credential/u,
 	/OpenCode exited while a model step was still in progress/u,
@@ -16882,6 +16883,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"teardown-confirmed",
 	"environment-teardown",
 	"trace-unpropagated",
+	"paused",
 	"node-inputs-resolved",
 	"edge-verdict",
 	"join-state"
@@ -16952,6 +16954,7 @@ async function replaySpawnTree(journal, blobs, root) {
 		if (ev.kind === "teardown-pending" || ev.kind === "teardown-confirmed") continue;
 		if (ev.kind === "environment-teardown") continue;
 		if (ev.kind === "trace-unpropagated") continue;
+		if (ev.kind === "paused") continue;
 		if (ev.kind === "node-inputs-resolved") continue;
 		if (ev.kind === "edge-verdict") continue;
 		if (ev.kind === "join-state") continue;
@@ -22114,6 +22117,7 @@ function defaultSleep$1(ms, signal) {
 */
 /** Runtime-owned provider evidence is written through this private scope capability. */
 const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
+const pauseRecorders = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
 const retainedReleasers = /* @__PURE__ */ new WeakMap();
 const teardownRetriers = /* @__PURE__ */ new WeakMap();
@@ -23249,6 +23253,16 @@ function createScope(args) {
 		admissionClosed = true;
 	});
 	runtimeOwnedProviderMeters.set(scope, async (spend, providerModel, detail, accountingOnly) => meterInternal(spend, detail, providerModel, accountingOnly));
+	let pauseSeq = 0;
+	pauseRecorders.set(scope, async (pause) => {
+		await args.journal.appendEvent(args.root, {
+			kind: "paused",
+			id: args.parentId,
+			...pause,
+			seq: pauseSeq++,
+			at: new Date(now()).toISOString()
+		});
+	});
 	if (args.ownerMaterialization !== void 0) {
 		const authoredProfile = args.ownerMaterialization.authoredProfile === void 0 ? void 0 : detachedSnapshot(args.ownerMaterialization.authoredProfile, "scope owner authored profile");
 		ownerMaterializationStates.set(scope, {
@@ -23406,6 +23420,15 @@ function meterRuntimeOwnedProviderAttempt(scope, spend, providerModel, detail) {
 	if (meter === void 0) throw new ValidationError$1("scope: Runtime-owned provider meter is not bound to this scope");
 	return meter(spend, providerModel, detail);
 }
+/**
+* @internal Journal that this scope's owner paused on an unavailable upstream. The pause is the
+* owner's, so it is recorded against the owner node, beside its `metered` turns.
+*/
+function recordScopeOwnerPause(scope, pause) {
+	const record = pauseRecorders.get(scope);
+	if (record === void 0) throw new ValidationError$1("scope: pause recorder is not bound to this scope");
+	return record(pause);
+}
 /** @internal Meter Runtime-owned accounting that does not represent provider execution. */
 function meterRuntimeOwnedAccounting(scope, spend, detail) {
 	const meter = runtimeOwnedProviderMeters.get(scope);
@@ -24489,6 +24512,7 @@ function driverChild(profile, driver, journal, execution, acceptedSubmission, re
 	const name = profile.name ?? driver.name;
 	const traceSource = driver.traceSource;
 	const progress = driver.progress;
+	const harnessTranscript = driver.harnessTranscript?.bind(driver);
 	const spec = executableAgentSpecSnapshot({
 		profile,
 		harness: null,
@@ -24499,7 +24523,8 @@ function driverChild(profile, driver, journal, execution, acceptedSubmission, re
 		...acceptedSubmission ? { acceptedSubmission } : {},
 		...recoverExecutor ? { recoverExecutor } : {},
 		...traceSource ? { traceSource } : {},
-		...progress ? { progress } : {}
+		...progress ? { progress } : {},
+		...harnessTranscript ? { harnessTranscript } : {}
 	}, "driverChild");
 	const deliver = driver.deliver?.bind(driver);
 	return {
@@ -24564,6 +24589,7 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 		runtime: driverRuntime,
 		...spec.traceSource ? { traceSource: spec.traceSource } : {},
 		...spec.progress ? { progress: spec.progress } : {},
+		...spec.harnessTranscript ? { harnessTranscript: spec.harnessTranscript } : {},
 		...deliver ? { deliver(message) {
 			return deliver(message) !== false;
 		} } : {},
@@ -24844,7 +24870,8 @@ function unreportedSpend(total, prior) {
 * Nothing here restarts children or replays work — it re-enters the driver, and the bridge backend
 * reattaches the harness session because the execution id is bound durably per node.
 *
-* Two classifications decide everything, and both are conservative:
+* Two classifications decide everything a failure means, and both are conservative (a third, for
+* an upstream out of capacity, is described below):
 *
 *  - TERMINAL failures are Runtime's own refusals: a `ValidationError`/`ConfigError` guard, an
 *    exhausted budget, an abort, a client-side transport status (401/404/422). Runtime meant them,
@@ -24892,6 +24919,16 @@ function unreportedSpend(total, prior) {
 * read only the count cap, budget, and deadline, so a director with `repromptOnUnmet: 100` or
 * `'until-complete'` that delivered nothing was re-prompted until the budget or deadline ended it;
 * the old prompt-owned loop logged 896 of 1,011 rounds with no progress.
+*
+* A THIRD CLASS sits between the two: the upstream said "not now". A model provider's exhausted
+* quota, a rate limit, or an overloaded service (HTTP 429, 503, 529, or the router's own codes for
+* them) is not an accident in the driver and not a decision by Runtime; the same request succeeds
+* when capacity returns. Such a failure PAUSES the driver and re-enters it. A pause consumes neither
+* `maxAttempts` nor the barren streak, so only the deadline, the budget, and cancellation bound it.
+* Measured 2026-09-24 on play anomaly-referee-v3d: during the router's flash quota outage four of
+* five lead lanes ended `driver-failed` between minutes 101 and 118, after 12 to 13 attempts, while
+* the router answered some turns in between (one lead spent 1.7M and 3.3M input tokens on two of
+* them) and each run's budget and 8-hour deadline were almost untouched.
 */
 /**
 * The instruction a completed-but-undelivered drive is re-entered with when the caller supplies no
@@ -24917,6 +24954,8 @@ const DEFAULT_MAX_ATTEMPTS = 8;
 const DEFAULT_MAX_BARREN_REPROMPTS = 2;
 const DEFAULT_INITIAL_BACKOFF_MS = 2e3;
 const DEFAULT_MAX_BACKOFF_MS = 3e4;
+const DEFAULT_UNAVAILABLE_PAUSE_MS = 15e3;
+const DEFAULT_MAX_UNAVAILABLE_PAUSE_MS = 3e5;
 /**
 * Bridge error classes the bridge itself never retries: a request that fails identically on
 * every attempt, mapped below 5xx on its HTTP path (`parse_error` 400, the other two 501). On the
@@ -24952,25 +24991,93 @@ var HarnessTurnFailedError = class extends Error {
 	}
 };
 /**
-* Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal;
-* anything foreign is an accident and is retryable. A `BackendTransportError` is split by status
-* because the taxonomy already promises consumers may branch on it: a 5xx/429/408 is the upstream
-* having a bad moment, while a 401/404/422 is a request that will fail identically forever. The
+* Machine codes that say the upstream cannot serve now rather than that the request is wrong.
+* Each is a code an upstream publishes, not prose: the router's
+* (`lib/model-substitution.ts`, `lib/upstream-error-triage.ts`) and the OpenAI- and Anthropic-shaped
+* error types a relayed body carries.
+*/
+const UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
+	"provider_quota_exhausted",
+	"provider_quota_exceeded",
+	"provider_rate_limit",
+	"upstream_unavailable",
+	"provider_key_invalid",
+	"rate_limit_exceeded",
+	"rate_limit_error",
+	"overloaded_error"
+]);
+/** 429 Too Many Requests, 503 Service Unavailable, and 529, which Anthropic uses for overload. */
+const UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([
+	429,
+	503,
+	529
+]);
+/**
+* A harness that flattens the router's JSON body into its own failure text leaves the router's
+* code in that text: `opencode execution failed: No provider served model "..."
+* (provider_quota_exhausted)`. The code is matched as a whole token, and a status only in the
+* `status code <n>` framing a harness prints, so prose that merely mentions a quota does not match.
+*/
+function unavailableSignalInText(text) {
+	for (const token of text.toLowerCase().matchAll(/[a-z_]+/gu)) if (UNAVAILABLE_CODES.has(token[0])) return token[0];
+	const status = text.match(/\bstatus code (\d{3})\b/u)?.[1];
+	return status !== void 0 && UNAVAILABLE_STATUSES.has(Number(status)) ? `http-${status}` : void 0;
+}
+/**
+* The code or status that marks `error` as an upstream capacity refusal, or `undefined`.
+*
+* A structured field is read first: a turn outcome's `errorCode`, a transport error's
+* `upstreamCode` and `status`, a provider SDK error's `status`. The failure text is read only when
+* no structured field decided, because a harness CLI reports the router's refusal as text.
+*/
+function upstreamUnavailableSignal(error) {
+	if (!(error instanceof Error)) return void 0;
+	if (error instanceof HarnessTurnFailedError) {
+		const code = error.errorCode?.toLowerCase();
+		if (code !== void 0 && UNAVAILABLE_CODES.has(code)) return code;
+		return unavailableSignalInText(error.message);
+	}
+	if (error instanceof BackendTransportError) {
+		const code = error.upstreamCode?.toLowerCase();
+		if (code !== void 0 && UNAVAILABLE_CODES.has(code)) return code;
+		if (error.status !== void 0) return UNAVAILABLE_STATUSES.has(error.status) ? `http-${error.status}` : void 0;
+		return unavailableSignalInText(errorProperty(error, "message") ?? "");
+	}
+	if (error instanceof AgentEvalError$1) return void 0;
+	const status = errorHttpStatus(error);
+	if (status !== void 0) return UNAVAILABLE_STATUSES.has(status) ? `http-${status}` : void 0;
+	return unavailableSignalInText(errorProperty(error, "message") ?? "");
+}
+/** True when the upstream refused for capacity and the same request will succeed later. */
+function isUpstreamUnavailable(error) {
+	return upstreamUnavailableSignal(error) !== void 0;
+}
+/**
+* Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal; an
+* upstream capacity refusal is `unavailable`; anything else foreign is an accident and is
+* retryable. A `BackendTransportError` is split by status because the taxonomy already promises
+* consumers may branch on it: a 5xx/408 is the upstream having a bad moment, a 429/503/529 is the
+* upstream out of capacity, and a 401/404/422 is a request that will fail identically forever. The
 * bridge's own never-retry classes are terminal whether or not a status rides with them.
 */
 function classifyDriverFailure(error, signal) {
 	if (signal?.aborted) return "terminal";
 	if (error instanceof Error && errorProperty(error, "name") === "AbortError") return "terminal";
-	if (error instanceof HarnessTurnFailedError) return error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode) ? "terminal" : "transient";
+	if (error instanceof HarnessTurnFailedError) {
+		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
+		return isUpstreamUnavailable(error) ? "unavailable" : "transient";
+	}
 	if (error instanceof BackendTransportError) {
 		if (error.upstreamCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.upstreamCode)) return "terminal";
+		if (isUpstreamUnavailable(error)) return "unavailable";
 		const status = error.status;
 		if (status === void 0) return "transient";
-		if (status === 408 || status === 429 || status >= 500) return "transient";
+		if (status === 408 || status >= 500) return "transient";
 		return "terminal";
 	}
 	if (error instanceof ValidationError$1 || error instanceof ConfigError || error instanceof RuntimeRunStateError) return "terminal";
 	if (error instanceof AgentEvalError$1) return "terminal";
+	if (isUpstreamUnavailable(error)) return "unavailable";
 	return foreignHttpStatusVerdict(error) ?? "transient";
 }
 /**
@@ -24983,15 +25090,16 @@ function classifyDriverFailure(error, signal) {
 * times per node while the run showed a durable intent and no other event, so eleven of twelve
 * roots sat for 25 minutes with nothing to diagnose. The status was on the error the whole time.
 *
-* Reading it applies the same rule the transport branch already promises consumers: 408, 429 and
-* 5xx are the upstream having a bad moment, and any other 4xx is a request that will fail
-* identically forever. Anything without a plain numeric status keeps the historical default.
+* Reading it applies the same rule the transport branch already promises consumers: 408 and 5xx
+* are the upstream having a bad moment, and any other 4xx is a request that will fail identically
+* forever. The capacity statuses were answered before this point. Anything without a plain numeric
+* status keeps the historical default.
 */
 function foreignHttpStatusVerdict(error) {
 	if (!(error instanceof Error)) return void 0;
 	const status = errorHttpStatus(error);
 	if (status === void 0 || status < 400) return void 0;
-	if (status === 408 || status === 429 || status >= 500) return "transient";
+	if (status === 408 || status >= 500) return "transient";
 	return "terminal";
 }
 /** The budget's own verdict on whether another attempt may run at all. */
@@ -25028,7 +25136,9 @@ var DriverAttemptsExhaustedError = class extends RuntimeRunStateError {
 		const last = attempts[attempts.length - 1];
 		const causeText = cause instanceof Error ? `${errorProperty(cause, "name")}: ${errMessage(cause)}` : errMessage(cause);
 		const firstFailure = attempts.find((attempt) => attempt.error !== void 0)?.error;
-		super(`supervisor driver failed after ${attempts.length} attempt(s) — stopped by ${stop}; ` + (firstFailure !== void 0 && firstFailure !== last?.error ? `first failure: ${errorText(firstFailure)}; ` : "") + `last cause: ${causeText}` + (last?.classification ? ` (classified ${last.classification})` : ""), { cause });
+		const pauses = attempts.filter((attempt) => attempt.classification === "unavailable");
+		const pausedMs = pauses.reduce((sum, attempt) => sum + (attempt.retryInMs ?? 0), 0);
+		super(`supervisor driver failed after ${attempts.length} attempt(s) — stopped by ${stop}; ` + (pauses.length === 0 ? "" : `${pauses.length} attempt(s) met an unavailable upstream and paused ${Math.round(pausedMs / 1e3)} s in total; `) + (firstFailure !== void 0 && firstFailure !== last?.error ? `first failure: ${errorText(firstFailure)}; ` : "") + `last cause: ${causeText}` + (last?.classification ? ` (classified ${last.classification})` : ""), { cause });
 		this.attempts = Object.freeze([...attempts]);
 		this.stop = stop;
 	}
@@ -25039,10 +25149,13 @@ function summarizeDriverAttempts(records) {
 	for (const record of records) if (record.madeProgress) barren = 0;
 	else if (record.error === void 0 && record.reentry !== void 0 && record.contract === "unmet") barren += 1;
 	const last = records.at(-1);
+	const refused = records.filter((record) => record.classification === "unavailable");
 	return {
 		attempts: records.length,
 		reprompts: records.filter((record) => record.reprompted === true).length,
-		failureRetries: records.filter((record) => record.error !== void 0 && record.retryInMs !== void 0).length,
+		failureRetries: records.filter((record) => record.error !== void 0 && record.retryInMs !== void 0 && record.classification !== "unavailable").length,
+		unavailablePauses: refused.filter((record) => record.retryInMs !== void 0).length,
+		unavailableMs: refused.reduce((sum, record) => sum + (record.madeProgress ? 0 : record.durationMs) + (record.retryInMs ?? 0), 0),
 		barrenReentries: barren,
 		ended: last?.stop ?? "unrecorded",
 		...last?.repromptRefusedBy === void 0 ? {} : { repromptRefusedBy: last.repromptRefusedBy }
@@ -25069,6 +25182,8 @@ async function runDriverWithRetry(run) {
 	const maxAttempts = Math.max(1, policy.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);
 	const initialBackoff = Math.max(0, policy.initialBackoffMs ?? DEFAULT_INITIAL_BACKOFF_MS);
 	const maxBackoff = Math.max(initialBackoff, policy.maxBackoffMs ?? DEFAULT_MAX_BACKOFF_MS);
+	const unavailablePause = Math.max(0, policy.unavailablePauseMs ?? DEFAULT_UNAVAILABLE_PAUSE_MS);
+	const maxUnavailablePause = Math.max(unavailablePause, policy.maxUnavailablePauseMs ?? DEFAULT_MAX_UNAVAILABLE_PAUSE_MS);
 	const maxReprompts = run.reprompt?.maxReprompts ?? 0;
 	if (maxReprompts === "until-complete") {
 		const deadline = run.budget().deadlineMs;
@@ -25079,6 +25194,8 @@ async function runDriverWithRetry(run) {
 	let consecutiveBarren = 0;
 	let barrenReentries = 0;
 	let failures = 0;
+	let consecutivePauses = 0;
+	let pauses = 0;
 	let reprompts = 0;
 	let reentry;
 	const emit = async (record) => {
@@ -25130,10 +25247,54 @@ async function runDriverWithRetry(run) {
 		try {
 			await run.drive(attempt, reentry);
 		} catch (error) {
-			failures += 1;
 			const durationMs = now() - startedAt;
 			const classification = classifyDriverFailure(error, run.signal);
 			const progressed = madeProgress(before, run.progress());
+			if (classification === "unavailable") {
+				if (progressed) barrenReentries = 0;
+				const stop = (() => {
+					if (!retryEnabled) return "retry-disabled";
+					if (run.signal.aborted) return "aborted";
+					return budgetStop(run.budget(), now());
+				})();
+				const unavailableSignal = upstreamUnavailableSignal(error) ?? "unavailable";
+				if (stop !== void 0) {
+					await emit({
+						attempt,
+						durationMs,
+						error: errMessage(error),
+						classification,
+						madeProgress: progressed,
+						unavailableSignal,
+						stop
+					});
+					throw new DriverAttemptsExhaustedError(error, attempts, stop);
+				}
+				pauses += 1;
+				consecutivePauses = progressed ? 1 : consecutivePauses + 1;
+				const pause = Math.min(maxUnavailablePause, unavailablePause * 2 ** Math.max(0, consecutivePauses - 1));
+				await emit({
+					attempt,
+					durationMs,
+					error: errMessage(error),
+					classification,
+					madeProgress: progressed,
+					unavailableSignal,
+					retryInMs: pause
+				});
+				reentry = {
+					reason: "upstream-unavailable",
+					signal: unavailableSignal,
+					pause: pauses
+				};
+				await sleep(pause, run.signal);
+				if (run.signal.aborted) throw new DriverAttemptsExhaustedError(error, attempts, "aborted");
+				const afterPause = budgetStop(run.budget(), now());
+				if (afterPause) throw new DriverAttemptsExhaustedError(error, attempts, afterPause);
+				continue;
+			}
+			consecutivePauses = 0;
+			failures += 1;
 			const stop = (() => {
 				if (classification === "terminal") return "terminal-error";
 				if (!retryEnabled) return "retry-disabled";
@@ -25178,6 +25339,7 @@ async function runDriverWithRetry(run) {
 			continue;
 		}
 		consecutiveBarren = 0;
+		consecutivePauses = 0;
 		const durationMs = now() - startedAt;
 		const after = run.progress();
 		const progressed = madeProgress(before, after);
@@ -26249,6 +26411,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { workerInteractiveBindingFile as $, throwIfAborted as $i, defaultRedactorIdentityMaterial as $n, validateProfileMaterialization as $r, PEER_MAIL_WIRE_KEY as $t, isWaitOutcome as A, assertSandboxServedModel as Ai, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as An, createWorktree as Ar, captureWorkerTraceEvidence as At, scopeRetainedOwnerContext as B, sandboxProgressEvents as Bi, retainedExecutorSeamKey as Bn, assertProfileMaterialization as Br, spendFromUsageTotals as Bt, meterRuntimeOwnedAccounting as C, unknownMaterializationReceipt as Ci, acquireSandbox as Cn, createRuntimeStreamEventCollector as Cr, InMemorySpawnJournal as Ct, scopeOwnerExecutorNodeContext as D, detachedSnapshot as Di, runBrainLoop as Dn, runSettledCommand as Dr, pendingWaits as Dt, restoreScopeOwnerAcceptedExecution as E, detachedFrozen as Ei, routerBrain as En, sanitizeRuntimeStreamEvent as Er, materializeTreeView as Et, bindScopeRetainedOwnerEnvironmentId as F, isSandboxTerminalEvent as Fi, sandboxClientAsProvider as Fn, localHarnessExecutable as Fr, assertValidBudget as Ft, environmentReader as G, deleteBoxSafe as Gi, retainedCreateMaterial as Gn, promptControlProfileMaterialization as Gr, workerTraceSeamKey as Gt, scopeRetainedOwnerResourceReader as H, addSpend as Hi, recoverRetainedRun as Hn, defineProfileMaterializationContract as Hr, readWorkerTraceContext as Ht, bindScopeRetainedOwnerProvider as I, mapSandboxEvent as Ii, createPushTraceSource as In, parseCodexTokenUsage as Ir, createBudgetPool as It, interactiveAdmissionSeamKey as J, promptCacheTokenClasses as Ji, RunCancellationReason as Jn, promptResourceProfileMaterialization as Jr, createActivityLog as Jt, hostDirectoryReader as K, hasCompleteCacheBreakdown as Ki, destroyInteractiveEnvironment as Kn, promptModelProfileMaterialization as Kr, taskToPrompt as Kt, consumeScopeRetainedOwnerResult as L, mapSandboxToolEvent as Li, decodeToolPart as Ln, CodexExecutionDiagnosticError as Lr, meterUsageEvent as Lt, timerAt as M, createSandboxToolPartState as Mi, providerAsExecutor as Mn, DEFAULT_LOCAL_HARNESS as Mr, parseWorkerToolTraceArtifact as Mt, validateWaitSpec as N, createSandboxUsageLedger as Ni, providerAsSandboxClient as Nn, LOCAL_HARNESSES as Nr, workerTraceAnalysisStore as Nt, settledToIteration as O, projectSandboxOutcome as Oi, canonicalObservedModelParts as On, runWorktreeHarness as Or, replaySpawnTree as Ot, waitUntil as P, extractLlmCallEvent as Pi, resolveAgentEnvironmentProvider as Pn, harnessSupportsReasoningEffort as Pr, BudgetReconcileFault as Pt, readWorkerInteractiveBinding as Q, throwAbort as Qi, defaultRedactor as Qn, unsupportedProfileDimensions as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, prepareScopeRetainedOwnerTask as R, notifySandboxEventObserver as Ri, sandboxSessionTraceSource as Rn, terminateProcessTreeAndConfirm as Rr, newUsageTotals as Rt, deriveNodeExecutionIdentity as S, unknownExecutionBindingReceipt as Si, probeSandboxCapabilities as Sn, createRuntimeEventCollector as Sr, InMemoryResultBlobStore as St, recordScopeOwnerMaterialization as T, executableAgentSpecSnapshot as Ti, readPromptOptions as Tn, sanitizeKnowledgeReadinessReport as Tr, loadSpawnForest as Tt, scopeRetainedOwnerResult as U, chargedTokens as Ui, startRetainedRun as Un, fullProfileMaterialization as Ur, workerTraceEnv as Ut, scopeRetainedOwnerPriorSpend as V, sumSandboxUsage as Vi, reconnectRetainedRun as Vn, controlProfileMaterialization as Vr, WORKER_TRACE_PROPAGATION as Vt, SPAWN_RESOURCE_PATH_MAX_BYTES as W, cloneSpend as Wi, startRetainedRunInEnvironment as Wn, profileMaterializationAxes$1 as Wr, workerTraceHeaders as Wt, workerInteractiveAdmissionFile as X, sleep as Xi, linkAbort as Xn, renderUnsupported as Xr, createInbox as Xt, readWorkerInteractiveAdmissions as Y, randomSuffix as Yi, abortError as Yn, renderProfileMaterializationIssues as Yr, readWorkerProgress as Yt, attachWorker as Z, stringifySafe as Zi, runAbortable as Zn, sandboxActProfileMaterialization as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, runtimeOwnedExecutorExecutionBinding as _i, createSandboxForSpec as _n, generateSpanId as _r, DEFAULT_SANDBOX_STEERING_MAX_TURNS as _t, pickBestDelivered as a, withBudgetResources as aa, writeAllBytes as ai, isLiveNodeStatus as an, createPropagatingTraceEmitter as ar, effectiveConcurrency as at, beginScopeOwnerAttempt as b, runtimeOwnedPendingExecutorMaterialization as bi, runAgentRounds as bn, padTraceId as br, FileResultBlobStore as bt, DEFAULT_MAX_BARREN_REPROMPTS as c, awaitAbortable$1 as ca, authoredProfileDigest as ci, bridgeAdmissionRefusal as cn, traceContextToEnv as cr, rollingDispatch as ct, classifyDriverFailure as d, teardownExecutor as da, knownExecutionBindingReceipt as di, createCodexRolloutStoreReader as dn, buildLoopSpanNodes as dr, cliInPlaceExecutor as dt, unmeteredSpend as ea, worktreeCliProfileMaterialization as ei, claimsAuthority as en, resolveRedactor as er, workerInteractiveBindingsDir as et, defaultUnmetContractSteer as f, teardownSurfaces as fa, knownMaterializationReceipt as fi, harnessUsageIsEmpty as fn, buildRuntimeEventOtelSpans as fr, cliWorktreeExecutor as ft, driverExecutorFactory as g, runtimeOwnedDriveHarnessProviderEvidence as gi, TERMINAL_DECISIONS as gn, flatOtelSpan as gr, createWorktreeCliExecutor as gt, driverChild as h, providerMessageText as ha, recordRuntimeOwnedDriveHarnessProviderEvidence as hi, bridgeStopSignalKey as hn, exportEvalRuns as hr, snapshotExecutorConfig as ht, collectDelivered as i, resourceTelemetry as ia, readCommittedJsonLines as ii, peerMailVerbNames as in, contentAddress as ir, errMessage as it, pollFor as j, canonicalStreamEventFromSandboxEvent as ji, createAgentEnvironmentProviderRegistry as jn, removeWorktree as jr, isTraceAnalysisStore as jt, createWaitProbes as k, readSandboxOutcome as ki, observedModelMatchesDeclared as kn, captureWorktreeDiff as kr, WORKER_TOOL_TRACE_SCHEMA_VERSION as kt, DriverAttemptsExhaustedError as l, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as la, finalizeRuntimeOwnedPendingExecutor as li, bridgeModelRouteRefusal as ln, INTELLIGENCE_WIRE_VERSION as lr, bindReusableExecutorExecutionId as lt, summarizeDriverAttempts as m, promptOptionsFromAgentTurnInput as ma, providerAttemptEvidence as mi, bridgeRuntimeAttachmentsKey as mn, createOtelExporter as mr, createExecutorRegistry as mt, createSupervisor as n, zeroSpend as na, parseCommittedJsonLines as ni, isPeerMailEnvelope as nn, harnessTranscriptArtifact as nr, recoverRetainedInteractiveRun as nt, runFinalizer as o, decodeHarnessUsage as oa, attestRuntimeOwnedPendingExecutor as oi, isTerminalNodeStatus as on, mergeTraceEnv as or, freeSlots as ot, runDriverWithRetry as p, promptFromAgentTurnInput as pa, newExecutionAttemptId as pi, readCodexRolloutSession as pn, createOpenInferenceFileExporter as pr, createExecutor as pt, resolveSpawnResourcePaths as q, isAbortError$2 as qi, environmentGone as qn, promptOnlyProfileMaterialization as qr, DEFAULT_STALL_AFTER_MS as qt, bestDelivered as r, addResourceSpend as ra, prepareJsonlAppend as ri, peerMailTools as rn, persistHarnessTranscript as rr, startRetainedInteractiveRun as rt, runTree as s, abortError$2 as sa, attestRuntimeOwnedScopeOwner as si, executorFailure as sn, readTraceContextFromEnv as sr, queueOf as st, createRootHandle as t, withTimeout as ta, isNoEntError as ti, createPeerMailbox as tn, captureHarnessTranscript as tr, reconnectRetainedInteractiveRun as tt, HarnessTurnFailedError as u, armDeadlineTimer as ua, inheritRuntimeOwnedExecutorAttestation as ui, addHarnessUsage as un, buildLoopOtelSpans as ur, captureReusableExecutorConfig as ut, withDriverExecutor as v, runtimeOwnedExecutorMaterialization as vi, defaultSelectWinner as vn, loopEventToOtelSpan as vr, createSteerableSandboxSession as vt, meterRuntimeOwnedProviderAttempt as w, executableAgentProfileSnapshot as wi, assertBoxlessPromptOptions as wn, sanitizeAgentRuntimeEvent as wr, insideCursorNamespace as wt, createScope as x, runtimeOwnedScopeOwnerRuntime as xi, createSandboxLineage as xn, toOtelAttributes as xr, FileSpawnJournal as xt, assertRecursiveReservationPolicy as y, runtimeOwnedExecutorProviderEvidence as yi, isTerminalDecision as yn, padSpanId as yr, createInPlaceCliExecutor as yt, reconcileScopeRetainedOwnerEnvironment as z, sandboxEventServedBackend as zi, registerRetainedExecutorPreparation as zn, AGENT_PROFILE_MATERIALIZATION_AXES as zr, spendFromUsageEvents as zt };
+export { attachWorker as $, stringifySafe as $i, runAbortable as $n, sandboxActProfileMaterialization as $r, AUTHORITY_MARKERS as $t, settledToIteration as A, projectSandboxOutcome as Ai, canonicalObservedModelParts as An, runWorktreeHarness as Ar, replaySpawnTree as At, prepareScopeRetainedOwnerTask as B, notifySandboxEventObserver as Bi, sandboxSessionTraceSource as Bn, terminateProcessTreeAndConfirm as Br, newUsageTotals as Bt, deriveNodeExecutionIdentity as C, runtimeOwnedScopeOwnerRuntime as Ci, createSandboxLineage as Cn, toOtelAttributes as Cr, FileSpawnJournal as Ct, recordScopeOwnerPause as D, executableAgentSpecSnapshot as Di, readPromptOptions as Dn, sanitizeKnowledgeReadinessReport as Dr, loadSpawnForest as Dt, recordScopeOwnerMaterialization as E, executableAgentProfileSnapshot as Ei, assertBoxlessPromptOptions as En, sanitizeAgentRuntimeEvent as Er, insideCursorNamespace as Et, validateWaitSpec as F, createSandboxUsageLedger as Fi, providerAsSandboxClient as Fn, LOCAL_HARNESSES as Fr, workerTraceAnalysisStore as Ft, scopeRetainedOwnerResult as G, chargedTokens as Gi, startRetainedRun as Gn, fullProfileMaterialization as Gr, workerTraceEnv as Gt, scopeRetainedOwnerContext as H, sandboxProgressEvents as Hi, retainedExecutorSeamKey as Hn, assertProfileMaterialization as Hr, spendFromUsageTotals as Ht, waitUntil as I, extractLlmCallEvent as Ii, resolveAgentEnvironmentProvider as In, harnessSupportsReasoningEffort as Ir, BudgetReconcileFault as It, hostDirectoryReader as J, hasCompleteCacheBreakdown as Ji, destroyInteractiveEnvironment as Jn, promptModelProfileMaterialization as Jr, taskToPrompt as Jt, SPAWN_RESOURCE_PATH_MAX_BYTES as K, cloneSpend as Ki, startRetainedRunInEnvironment as Kn, profileMaterializationAxes$1 as Kr, workerTraceHeaders as Kt, bindScopeRetainedOwnerEnvironmentId as L, isSandboxTerminalEvent as Li, sandboxClientAsProvider as Ln, localHarnessExecutable as Lr, assertValidBudget as Lt, isWaitOutcome as M, assertSandboxServedModel as Mi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Mn, createWorktree as Mr, captureWorkerTraceEvidence as Mt, pollFor as N, canonicalStreamEventFromSandboxEvent as Ni, createAgentEnvironmentProviderRegistry as Nn, removeWorktree as Nr, isTraceAnalysisStore as Nt, restoreScopeOwnerAcceptedExecution as O, detachedFrozen as Oi, routerBrain as On, sanitizeRuntimeStreamEvent as Or, materializeTreeView as Ot, timerAt as P, createSandboxToolPartState as Pi, providerAsExecutor as Pn, DEFAULT_LOCAL_HARNESS as Pr, parseWorkerToolTraceArtifact as Pt, workerInteractiveAdmissionFile as Q, sleep as Qi, linkAbort as Qn, renderUnsupported as Qr, createInbox as Qt, bindScopeRetainedOwnerProvider as R, mapSandboxEvent as Ri, createPushTraceSource as Rn, parseCodexTokenUsage as Rr, createBudgetPool as Rt, createScope as S, runtimeOwnedPendingExecutorMaterialization as Si, runAgentRounds as Sn, padTraceId as Sr, FileResultBlobStore as St, meterRuntimeOwnedProviderAttempt as T, unknownMaterializationReceipt as Ti, acquireSandbox as Tn, createRuntimeStreamEventCollector as Tr, InMemorySpawnJournal as Tt, scopeRetainedOwnerPriorSpend as U, sumSandboxUsage as Ui, reconnectRetainedRun as Un, controlProfileMaterialization as Ur, WORKER_TRACE_PROPAGATION as Ut, reconcileScopeRetainedOwnerEnvironment as V, sandboxEventServedBackend as Vi, registerRetainedExecutorPreparation as Vn, AGENT_PROFILE_MATERIALIZATION_AXES as Vr, spendFromUsageEvents as Vt, scopeRetainedOwnerResourceReader as W, addSpend as Wi, recoverRetainedRun as Wn, defineProfileMaterializationContract as Wr, readWorkerTraceContext as Wt, interactiveAdmissionSeamKey as X, promptCacheTokenClasses as Xi, RunCancellationReason as Xn, promptResourceProfileMaterialization as Xr, createActivityLog as Xt, resolveSpawnResourcePaths as Y, isAbortError$2 as Yi, environmentGone as Yn, promptOnlyProfileMaterialization as Yr, DEFAULT_STALL_AFTER_MS as Yt, readWorkerInteractiveAdmissions as Z, randomSuffix as Zi, abortError as Zn, renderProfileMaterializationIssues as Zr, readWorkerProgress as Zt, driverExecutorFactory as _, providerMessageText as _a, recordRuntimeOwnedDriveHarnessProviderEvidence as _i, bridgeStopSignalKey as _n, exportEvalRuns as _r, snapshotExecutorConfig as _t, pickBestDelivered as a, addResourceSpend as aa, prepareJsonlAppend as ai, peerMailTools as an, persistHarnessTranscript as ar, startRetainedInteractiveRun as at, assertRecursiveReservationPolicy as b, runtimeOwnedExecutorMaterialization as bi, defaultSelectWinner as bn, loopEventToOtelSpan as br, createSteerableSandboxSession as bt, DEFAULT_MAX_BARREN_REPROMPTS as c, decodeHarnessUsage as ca, attestRuntimeOwnedPendingExecutor as ci, isTerminalNodeStatus as cn, mergeTraceEnv as cr, freeSlots as ct, classifyDriverFailure as d, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as da, finalizeRuntimeOwnedPendingExecutor as di, bridgeModelRouteRefusal as dn, INTELLIGENCE_WIRE_VERSION as dr, bindReusableExecutorExecutionId as dt, throwAbort as ea, unsupportedProfileDimensions as ei, DEFAULT_PEER_MAIL_LIMITS as en, defaultRedactor as er, readWorkerInteractiveBinding as et, defaultUnmetContractSteer as f, armDeadlineTimer as fa, inheritRuntimeOwnedExecutorAttestation as fi, addHarnessUsage as fn, buildLoopOtelSpans as fr, captureReusableExecutorConfig as ft, driverChild as g, promptOptionsFromAgentTurnInput as ga, providerAttemptEvidence as gi, bridgeRuntimeAttachmentsKey as gn, createOtelExporter as gr, createExecutorRegistry as gt, upstreamUnavailableSignal as h, promptFromAgentTurnInput as ha, newExecutionAttemptId as hi, readCodexRolloutSession as hn, createOpenInferenceFileExporter as hr, createExecutor as ht, collectDelivered as i, zeroSpend as ia, parseCommittedJsonLines as ii, isPeerMailEnvelope as in, harnessTranscriptArtifact as ir, recoverRetainedInteractiveRun as it, createWaitProbes as j, readSandboxOutcome as ji, observedModelMatchesDeclared as jn, captureWorktreeDiff as jr, WORKER_TOOL_TRACE_SCHEMA_VERSION as jt, scopeOwnerExecutorNodeContext as k, detachedSnapshot as ki, runBrainLoop as kn, runSettledCommand as kr, pendingWaits as kt, DriverAttemptsExhaustedError as l, abortError$2 as la, attestRuntimeOwnedScopeOwner as li, executorFailure as ln, readTraceContextFromEnv as lr, queueOf as lt, summarizeDriverAttempts as m, teardownSurfaces as ma, knownMaterializationReceipt as mi, harnessUsageIsEmpty as mn, buildRuntimeEventOtelSpans as mr, cliWorktreeExecutor as mt, createSupervisor as n, unmeteredSpend as na, worktreeCliProfileMaterialization as ni, claimsAuthority as nn, resolveRedactor as nr, workerInteractiveBindingsDir as nt, runFinalizer as o, resourceTelemetry as oa, readCommittedJsonLines as oi, peerMailVerbNames as on, contentAddress as or, errMessage as ot, runDriverWithRetry as p, teardownExecutor as pa, knownExecutionBindingReceipt as pi, createCodexRolloutStoreReader as pn, buildLoopSpanNodes as pr, cliInPlaceExecutor as pt, environmentReader as q, deleteBoxSafe as qi, retainedCreateMaterial as qn, promptControlProfileMaterialization as qr, workerTraceSeamKey as qt, bestDelivered as r, withTimeout as ra, isNoEntError as ri, createPeerMailbox as rn, captureHarnessTranscript as rr, reconnectRetainedInteractiveRun as rt, runTree as s, withBudgetResources as sa, writeAllBytes as si, isLiveNodeStatus as sn, createPropagatingTraceEmitter as sr, effectiveConcurrency as st, createRootHandle as t, throwIfAborted as ta, validateProfileMaterialization as ti, PEER_MAIL_WIRE_KEY as tn, defaultRedactorIdentityMaterial as tr, workerInteractiveBindingFile as tt, HarnessTurnFailedError as u, awaitAbortable$1 as ua, authoredProfileDigest as ui, bridgeAdmissionRefusal as un, traceContextToEnv as ur, rollingDispatch as ut, isDriverSpec as v, runtimeOwnedDriveHarnessProviderEvidence as vi, TERMINAL_DECISIONS as vn, flatOtelSpan as vr, createWorktreeCliExecutor as vt, meterRuntimeOwnedAccounting as w, unknownExecutionBindingReceipt as wi, probeSandboxCapabilities as wn, createRuntimeEventCollector as wr, InMemoryResultBlobStore as wt, beginScopeOwnerAttempt as x, runtimeOwnedExecutorProviderEvidence as xi, isTerminalDecision as xn, padSpanId as xr, createInPlaceCliExecutor as xt, withDriverExecutor as y, runtimeOwnedExecutorExecutionBinding as yi, createSandboxForSpec as yn, generateSpanId as yr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as yt, consumeScopeRetainedOwnerResult as z, mapSandboxToolEvent as zi, decodeToolPart as zn, CodexExecutionDiagnosticError as zr, meterUsageEvent as zt };
 
-//# sourceMappingURL=supervisor-BGGvnXvV.js.map
+//# sourceMappingURL=supervisor-C26k7X5-.js.map