@tangle-network/agent-runtime 0.263.0 → 0.266.0

package/dist/{substrate-Ce302oia.d.ts → substrate-CLt9S9ym.d.ts}

@@ -1,4 +1,4 @@
-import { Ci as AgentRunSpec, Ki as OutputAdapter, Ti as Driver, Zi as Validator } from "./types-C-nszovv.js";
+import { Fi as Driver, Ni as AgentRunSpec, na as OutputAdapter, sa as Validator } from "./types-CrnwLVYQ.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 //#region src/profiles/coder.d.ts
 /**
@@ -281,4 +281,4 @@ interface UiFinding {
 }
 //#endregion
 export { CoderTask as _, UiFindingSeverity as a, KnowledgeUpdate as c, ResearchSource as d, ResearchTask as f, researcherProfile as g, multiHarnessResearcherFanout as h, UiFindingScreenshot as i, MultiHarnessResearcherFanoutOptions as l, createResearcherValidator as m, UI_LENSES as n, UiLens as o, ResearcherProfileOptions as p, UiFinding as r, KnowledgeItem as s, UI_FINDING_SEVERITIES as t, ResearchOutput as u, coderTaskToPrompt as v };
-//# sourceMappingURL=substrate-Ce302oia.d.ts.map
+//# sourceMappingURL=substrate-CLt9S9ym.d.ts.map

package/dist/{supervise-RF3_8PuR.js → supervise--njTtSL3.js}

@@ -1,10 +1,10 @@
-import { $n as runAbortable, B as prepareScopeRetainedOwnerTask, Bt as newUsageTotals, C as deriveNodeExecutionIdentity, Ci as runtimeOwnedScopeOwnerRuntime, Cr as toOtelAttributes, D as recordScopeOwnerPause, E as recordScopeOwnerMaterialization, G as scopeRetainedOwnerResult, Gr as fullProfileMaterialization, H as scopeRetainedOwnerContext, Hn as retainedExecutorSeamKey, Hr as assertProfileMaterialization, Ht as spendFromUsageTotals, In as resolveAgentEnvironmentProvider, Jr as promptModelProfileMaterialization, Kr as profileMaterializationAxes$1, L as bindScopeRetainedOwnerEnvironmentId, Lt as assertValidBudget, O as restoreScopeOwnerAcceptedExecution, On as routerBrain, Qi as sleep, Qn as linkAbort, Qr as renderUnsupported, Qt as createInbox, R as bindScopeRetainedOwnerProvider, Si as runtimeOwnedPendingExecutorMaterialization, T as meterRuntimeOwnedProviderAttempt, U as scopeRetainedOwnerPriorSpend, Ur as controlProfileMaterialization, Ut as WORKER_TRACE_PROPAGATION, V as reconcileScopeRetainedOwnerEnvironment, Vn as registerRetainedExecutorPreparation, W as scopeRetainedOwnerResourceReader, Wi as addSpend, Wr as defineProfileMaterializationContract, Xn as RunCancellationReason, _ as driverExecutorFactory, _i as recordRuntimeOwnedDriveHarnessProviderEvidence, _n as bridgeStopSignalKey, _t as snapshotExecutorConfig, aa as addResourceSpend, ai as prepareJsonlAppend, b as assertRecursiveReservationPolicy, bi as runtimeOwnedExecutorMaterialization, da as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, dn as bridgeModelRouteRefusal, dt as bindReusableExecutorExecutionId, ei as unsupportedProfileDimensions, f as defaultUnmetContractSteer, fi as inheritRuntimeOwnedExecutorAttestation, ft as captureReusableExecutorConfig, g as driverChild, gi as providerAttemptEvidence, gn as bridgeRuntimeAttachmentsKey, gr as createOtelExporter, ht as createExecutor, ia as zeroSpend, k as scopeOwnerExecutorNodeContext, ki as detachedSnapshot, li as attestRuntimeOwnedScopeOwner, ln as executorFailure, m as summarizeDriverAttempts, ma as teardownSurfaces, n as createSupervisor, na as unmeteredSpend, ni as worktreeCliProfileMaterialization, o as runFinalizer, oa as resourceTelemetry, oi as readCommittedJsonLines, or as contentAddress, ot as errMessage, p as runDriverWithRetry, pa as teardownExecutor, qr as promptControlProfileMaterialization, r as bestDelivered, ra as withTimeout, ri as isNoEntError, s as runTree, sa as withBudgetResources, t as createRootHandle, u as HarnessTurnFailedError, un as bridgeAdmissionRefusal, v as isDriverSpec, vi as runtimeOwnedDriveHarnessProviderEvidence, w as meterRuntimeOwnedAccounting, x as beginScopeOwnerAttempt, xi as runtimeOwnedExecutorProviderEvidence, yi as runtimeOwnedExecutorExecutionBinding, yr as generateSpanId, z as consumeScopeRetainedOwnerResult, zt as meterUsageEvent } from "./supervisor-BeW08Ncp.js";
+import { $r as profileMaterializationAxes$1, A as restoreScopeOwnerAcceptedExecution, Ai as runtimeOwnedScopeOwnerRuntime, An as routerBrain, B as bindScopeRetainedOwnerEnvironmentId, C as beginScopeOwnerAttempt, Ci as providerAttemptEvidence, D as meterRuntimeOwnedProviderAttempt, Di as runtimeOwnedExecutorMaterialization, E as meterRuntimeOwnedAccounting, Ei as runtimeOwnedExecutorExecutionBinding, G as scopeRetainedOwnerContext, Gt as WORKER_TRACE_PROPAGATION, H as consumeScopeRetainedOwnerResult, Ht as newUsageTotals, Ii as detachedSnapshot, J as scopeRetainedOwnerResult, Jn as errMessage, K as scopeRetainedOwnerPriorSpend, Kn as registerRetainedExecutorPreparation, O as recordScopeOwnerMaterialization, Oi as runtimeOwnedExecutorProviderEvidence, Qr as fullProfileMaterialization, S as assertRecursiveReservationPolicy, Sr as createOtelExporter, T as deriveNodeExecutionIdentity, Ti as runtimeOwnedDriveHarnessProviderEvidence, Tr as generateSpanId, U as prepareScopeRetainedOwnerTask, V as bindScopeRetainedOwnerProvider, Vt as meterUsageEvent, W as reconcileScopeRetainedOwnerEnvironment, Wt as spendFromUsageTotals, Xr as controlProfileMaterialization, Yr as assertProfileMaterialization, Zi as addSpend, Zr as defineProfileMaterializationContract, _ as driverChild, aa as sleep, ai as renderUnsupported, ar as runAbortable, ba as teardownExecutor, c as runTree, d as HarnessTurnFailedError, da as zeroSpend, dn as executorFailure, ei as promptControlProfileMaterialization, en as createInbox, fa as addResourceSpend, fi as prepareJsonlAppend, fn as bridgeAdmissionRefusal, fr as contentAddress, ft as bindReusableExecutorExecutionId, gi as attestRuntimeOwnedScopeOwner, gt as createExecutor, h as summarizeDriverAttempts, i as bestDelivered, ir as linkAbort, j as scopeOwnerExecutorNodeContext, k as recordScopeOwnerPause, ki as runtimeOwnedPendingExecutorMaterialization, kr as toOtelAttributes, la as unmeteredSpend, li as worktreeCliProfileMaterialization, m as runDriverWithRetry, ma as withBudgetResources, n as createRootHandle, nr as RunCancellationReason, p as defaultUnmetContractSteer, pa as resourceTelemetry, pi as readCommittedJsonLines, pn as bridgeModelRouteRefusal, pt as captureReusableExecutorConfig, q as scopeRetainedOwnerResourceReader, qn as retainedExecutorSeamKey, r as createSupervisor, s as runFinalizer, si as unsupportedProfileDimensions, ti as promptModelProfileMaterialization, ua as withTimeout, ui as isNoEntError, v as driverExecutorFactory, va as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, vn as bridgeRuntimeAttachmentsKey, vt as snapshotExecutorConfig, wi as recordRuntimeOwnedDriveHarnessProviderEvidence, xa as teardownSurfaces, y as isDriverSpec, yi as inheritRuntimeOwnedExecutorAttestation, yn as bridgeStopSignalKey, zn as resolveAgentEnvironmentProvider, zt as assertValidBudget } from "./supervisor-B8UMAXya.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
+import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-DdZ-nh_4.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-x9NEhvHZ.js";
-import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-L9zH0kBx.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-vwd4SwX_.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -690,7 +690,6 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		perWorker: opts.perWorker,
 		...opts.deliverable ? { deliverable: opts.deliverable } : {},
 		...opts.onStop ? { onStop: opts.onStop } : {},
-		...opts.maxLiveWorkers !== void 0 ? { maxLiveWorkers: opts.maxLiveWorkers } : {},
 		awaitTimeoutMs: opts.awaitTimeoutMs ?? responseFenceMs,
 		...opts.analysts ? { analysts: opts.analysts } : {},
 		...opts.analyzeOnSettle ? { analyzeOnSettle: opts.analyzeOnSettle } : {},
@@ -1572,7 +1571,7 @@ function observeWorkerControls(options) {
 const coordinationMcpAlias = "agent-runtime-coordination";
 /** A profile declares Runtime-owned tools with this provider-neutral prefix. */
 const coordinationProfileToolPrefix = `${coordinationMcpAlias.replaceAll("-", "_")}_`;
-const coordinationVerbNameSet = new Set(coordinationVerbNames);
+const coordinationVerbNameSet$1 = new Set(coordinationVerbNames);
 /** Bare Runtime tool names explicitly enabled by one exact profile. */
 function declaredRuntimeToolNames(profile) {
 	const names = Object.entries(profile.tools ?? {}).filter(([name, enabled]) => enabled === true && name.startsWith(coordinationProfileToolPrefix)).map(([name]) => name.slice(coordinationProfileToolPrefix.length));
@@ -1581,7 +1580,7 @@ function declaredRuntimeToolNames(profile) {
 /** Describe Runtime declarations that cannot resolve without a product tool provider. */
 function runtimeToolDeclarationError(profile, hasProductToolResolver, mountedStaticToolNames = []) {
 	const mountedStaticToolNameSet = new Set(mountedStaticToolNames);
-	const unresolved = declaredRuntimeToolNames(profile).filter((name) => !coordinationVerbNameSet.has(name) && !hasProductToolResolver && !mountedStaticToolNameSet.has(name));
+	const unresolved = declaredRuntimeToolNames(profile).filter((name) => !coordinationVerbNameSet$1.has(name) && !hasProductToolResolver && !mountedStaticToolNameSet.has(name));
 	if (unresolved.length === 0) return void 0;
 	return `the profile declares ${unresolved.map((name) => JSON.stringify(`${coordinationProfileToolPrefix}${name}`)).join(", ")}, but this run has no resolveSupervisorTools provider or router-mounted static tool for those tools`;
 }
@@ -1780,7 +1779,6 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 			...deps.onAcceptedSubmission ? { onAcceptedSubmission: deps.onAcceptedSubmission } : {},
 			toolNames: runtimeToolNames,
 			...nodeTools?.length ? { nodeTools } : {},
-			...deps.maxLiveWorkers !== void 0 ? { maxLiveWorkers: deps.maxLiveWorkers } : {},
 			...deps.extraTools ? { extraTools: deps.extraTools } : {},
 			...deps.executeExtraTool ? { executeExtraTool: deps.executeExtraTool } : {},
 			...deps.analysts ? { analysts: deps.analysts } : {},
@@ -1840,6 +1838,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 		} } : {},
 		traceSource: () => driveHarness.traceSource?.(),
 		progress: () => driveHarness.progress?.(),
+		...driveHarness.harnessTranscript ? { harnessTranscript: () => driveHarness.harnessTranscript?.() } : {},
 		async act(task, scope) {
 			const context = nodeContextSeed ? supervisorNodeContext(nodeContextSeed, stableProfile, task, scope) : void 0;
 			const priorCoordination = deps.loadPriorCoordination ? await deps.loadPriorCoordination() : deps.priorCoordination;
@@ -1878,7 +1877,6 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				onStop: (reason) => {
 					if (!stopController.signal.aborted) stopController.abort(reason ?? "coordination stop");
 				},
-				...deps.maxLiveWorkers !== void 0 ? { maxLiveWorkers: deps.maxLiveWorkers } : {},
 				...deps.analysts ? { analysts: deps.analysts } : {},
 				...deps.analyzeOnSettle ? { analyzeOnSettle: deps.analyzeOnSettle } : {},
 				...deps.escalateQuestion ? { escalateQuestion: deps.escalateQuestion } : {},
@@ -2574,6 +2572,34 @@ function assertProfileContract(profile, contract, context, runtimeConsumesCoordi
 * has asynchronously resolved its exact product-tool descriptors. Runtime-owned declarations are
 * not provider tools; unsupported declarations still fail when the coordination surface resolves.
 */
+/** The child with its manager's Runtime coordination grants, unless the child's author wrote any
+*  coordination entry: an explicit grant or refusal is the author's choice and stands. A refusal
+*  (`false`) grants nothing, so it is removed once it has decided the child stays a leaf; a
+*  harness-less leaf carries no tools axis at all. */
+function withInheritedSpawnRights(parent, child) {
+	const childTools = child.tools ?? {};
+	const authored = Object.entries(childTools).filter(([name]) => name.startsWith(coordinationProfileToolPrefix));
+	if (authored.length > 0) {
+		if (authored.every(([, enabled]) => enabled !== false)) return child;
+		const kept = Object.entries(childTools).filter(([name, enabled]) => !(name.startsWith(coordinationProfileToolPrefix) && enabled === false));
+		const { tools: _tools, ...rest } = child;
+		return agentProfileSchema.parse(kept.length === 0 ? rest : {
+			...rest,
+			tools: Object.fromEntries(kept)
+		});
+	}
+	const inherited = Object.entries(parent.tools ?? {}).filter(([name, enabled]) => enabled === true && name.startsWith(coordinationProfileToolPrefix) && coordinationVerbNameSet.has(name.slice(coordinationProfileToolPrefix.length)));
+	if (!inherited.some(([name]) => name === `${coordinationProfileToolPrefix}spawn_worker`)) return child;
+	return agentProfileSchema.parse({
+		...child,
+		tools: {
+			...childTools,
+			...Object.fromEntries(inherited),
+			[`${coordinationProfileToolPrefix}submit_result`]: true
+		}
+	});
+}
+const coordinationVerbNameSet = new Set(coordinationVerbNames);
 function profileWithoutDeclaredRuntimeCoordinationTools(profile) {
 	return providerVisibleProfile(profile);
 }
@@ -2751,6 +2777,15 @@ const DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY = Object.freeze({
 	allowedMcpHosts: defaultAllowedMcpHosts,
 	allowConnections: false
 });
+/**
+* A manager keeps a dedicated environment. It serves its coordination credential through
+* create-time environment, and every co-tenant of a shared box could read it.
+*/
+function managerExecutorConfig(config) {
+	if (config.backend !== "provider" || config.shared === void 0) return config;
+	const { shared: _shared, ...dedicated } = config;
+	return Object.freeze(dedicated);
+}
 function isExternalSupervisor(profile) {
 	return harnessRunsAgent(profile.harness);
 }
@@ -2769,10 +2804,11 @@ async function providerAcceptsCoordinationAttachments(backend) {
 function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns, rootStream) {
 	if (maxTurns !== void 0 && maxTurns < 0) throw new ValidationError("driveHarnessFromBackend: maxTurns must be >= 0 (0 lifts the turn cap; bounds become the conserved pool + deadline + abort)");
 	const turnCap = maxTurns ?? 0;
-	const boundBackend = bindReusableExecutorExecutionId(captureReusableExecutorConfig(backend, "driveHarnessFromBackend"), executionId);
+	const boundBackend = bindReusableExecutorExecutionId(managerExecutorConfig(captureReusableExecutorConfig(backend, "driveHarnessFromBackend")), executionId);
 	const baseFactory = createExecutor(boundBackend);
 	const ownerRuntime = boundBackend.backend === "provider" ? boundBackend.runtime ?? resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry).name : "cli";
 	let activeExecutor;
+	let managerTranscript;
 	const drive = async ({ profile, authoredProfile, task, scope, coordinationMcpUrl, coordinationMcpHeaders, stopSignal, coordinationTools, reentry }) => {
 		const retainedOwner = boundBackend.backend === "provider" ? scopeRetainedOwnerContext(scope) : void 0;
 		if (retainedOwner && boundBackend.backend === "provider") {
@@ -3136,6 +3172,8 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 					failure = error;
 				}
 			}
+			const capture = executor.harnessTranscript?.();
+			if (capture !== void 0 && (capture.status === "captured" || managerTranscript?.status !== "captured")) managerTranscript = capture;
 			if (activeExecutor === executor) activeExecutor = void 0;
 		}
 		if (failed) throw failure;
@@ -3149,6 +3187,7 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	drive.deliverReady = () => activeExecutor !== void 0;
 	drive.traceSource = () => activeExecutor?.traceSource?.();
 	drive.progress = () => activeExecutor?.progress?.();
+	if (boundBackend.backend === "provider") drive.harnessTranscript = () => managerTranscript ?? activeExecutor?.harnessTranscript?.();
 	return attestRuntimeOwnedScopeOwner(drive, ownerRuntime);
 }
 /**
@@ -3271,12 +3310,12 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"extraTools",
 	"finalizer",
 	"hooks",
+	"inheritSpawnRights",
 	"journal",
 	"makeLeafAgent",
 	"makeWorkerAgent",
 	"escalateQuestion",
 	"maxDepth",
-	"maxLiveWorkers",
 	"maxTurns",
 	"now",
 	"onCoordinationEvent",
@@ -3308,7 +3347,8 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"repromptOnUnmet",
 	"onUnmetContract",
 	"workerRetry",
-	"onWorkerRetry"
+	"onWorkerRetry",
+	"workerSlots"
 ]);
 /**
 * Refuse a top-level option key `supervise()` reads nowhere, naming it.
@@ -3385,7 +3425,7 @@ function rootSpawnResourceRoot(backend) {
 }
 function captureSuperviseOptions(opts) {
 	assertSuperviseOptionKeys(opts, "supervise");
-	const { backend, coordination, driverBackend, deliverable, resolveDeliverable, router, compaction, watchWorkers, analysts, makeWorkerAgent, makeLeafAgent, resolveSpawnProfile, blobs, journal, probes, registry, hooks, otel, authorizeSpawn, authorizeMessage, driveHarness, resolveDriveHarness, resolveSupervisorTools, escalateQuestion, onCoordinationEvent, executeExtraTool, stopRule, onProgressStop, onDriverAttempt, onUnmetContract, workerRetry, onWorkerRetry, finalizer, now, signal, rootHandle, ...decisionData } = opts;
+	const { backend, coordination, driverBackend, deliverable, resolveDeliverable, router, compaction, watchWorkers, analysts, makeWorkerAgent, makeLeafAgent, resolveSpawnProfile, blobs, journal, probes, registry, hooks, otel, authorizeSpawn, authorizeMessage, driveHarness, resolveDriveHarness, resolveSupervisorTools, escalateQuestion, onCoordinationEvent, executeExtraTool, stopRule, onProgressStop, onDriverAttempt, onUnmetContract, workerRetry, onWorkerRetry, finalizer, now, signal, rootHandle, workerSlots, ...decisionData } = opts;
 	assertNoUncapturedExecutableOption(decisionData);
 	const capturedData = detachedSnapshot(decisionData, "supervise options");
 	const capturedCoordination = coordination === void 0 ? void 0 : (() => {
@@ -3449,6 +3489,7 @@ function captureSuperviseOptions(opts) {
 		...resolveSpawnProfile === void 0 ? {} : { resolveSpawnProfile },
 		...blobs === void 0 ? {} : { blobs },
 		...journal === void 0 ? {} : { journal },
+		...workerSlots === void 0 ? {} : { workerSlots },
 		...probes === void 0 ? {} : { probes },
 		...authorizeSpawn === void 0 ? {} : { authorizeSpawn },
 		...authorizeMessage === void 0 ? {} : { authorizeMessage },
@@ -3547,15 +3588,19 @@ function assertPerWorkerWithinPool(perWorker, pool) {
 	].filter((x) => x !== null);
 	if (problems.length > 0) throw new ValidationError(`${problems.join("; ")} — a per-child ceiling cannot exceed the pool it draws from, and accepting it silently leaves the caller believing a knob is in effect when the reservation still clamps the child.`);
 }
-function defaultPerWorker(budget) {
+/** The slice a child gets when its manager names none: a quarter of the part of the manager's
+*  budget its children may reserve, so four default children fill that part and the manager's
+*  own share stays free for its turns. Each nested manager divides its own slice the same way. */
+function defaultPerWorker(budget, ownerShare) {
+	const share = (1 - ownerShare) / 4;
 	return {
 		...budget.resources === void 0 ? {} : { resources: Object.fromEntries(Object.entries(budget.resources).map(([name, value]) => [name, {
 			unit: value.unit,
-			limit: Math.floor(value.limit / 4)
+			limit: Math.floor(value.limit * share)
 		}])) },
-		maxIterations: Math.max(1, Math.floor(budget.maxIterations / 4)),
-		maxTokens: Math.max(1, Math.floor(budget.maxTokens / 4)),
-		...budget.maxUsd !== void 0 ? { maxUsd: budget.maxUsd / 4 } : {}
+		maxIterations: Math.max(1, Math.floor(budget.maxIterations * share)),
+		maxTokens: Math.max(1, Math.floor(budget.maxTokens * share)),
+		...budget.maxUsd !== void 0 ? { maxUsd: budget.maxUsd * share } : {}
 	};
 }
 function freezeDetached(value) {
@@ -3716,10 +3761,11 @@ function superviseInternal(profile, task, opts, testBrain) {
 	assertCoordinationBinding(options.coordination);
 	const ctx = options.runDir !== void 0 ? createFileRunContext(options.runDir, { withDriver: true }) : createInMemoryRunContext({ withDriver: true });
 	const blobs = options.blobs ?? ctx.blobs;
-	const perWorker = options.perWorker ?? defaultPerWorker(options.budget);
+	assertRecursiveReservationPolicy(options.reservationPolicy);
+	const ownerShare = options.reservationPolicy?.ownerShare ?? 0;
+	const perWorker = options.perWorker ?? defaultPerWorker(options.budget, ownerShare);
 	assertValidBudget(perWorker, "supervise perWorker");
 	assertPerWorkerWithinPool(perWorker, options.budget);
-	assertRecursiveReservationPolicy(options.reservationPolicy, options.maxDepth ?? 8, options.maxLiveWorkers);
 	const journal = options.journal ?? ctx.journal;
 	const runId = options.runId ?? "supervise";
 	const runNamespace = supervisionRunNamespace(options.runDir, runId);
@@ -3737,6 +3783,16 @@ function superviseInternal(profile, task, opts, testBrain) {
 	const spawnPreflight = composeSpawnPreflights(profileToolSpawnPreflight(options.makeWorkerAgent === void 0, options.resolveSupervisorTools !== void 0), coordinationChannelSpawnPreflight(options.makeWorkerAgent === void 0, hasCustomDriveHarness, managerBackend, options.coordination), options.backend?.backend === "bridge" ? bridgeSpawnPreflight(options.backend) : void 0);
 	const driverMaterialization = hasCustomDriveHarness ? options.driveHarnessMaterialization ?? fullProfileMaterialization : managerBackend && automaticDriverBackendSupported(managerBackend, options.coordination) ? backendProfileMaterialization(managerBackend) : void 0;
 	if (isExternalSupervisor(canonicalProfile) && !options.driveHarness && !options.resolveDriveHarness && (!managerBackend || !automaticDriverBackendSupported(managerBackend, options.coordination))) throw new ValidationError(`supervise: external supervisor profile.harness=${JSON.stringify(canonicalProfile.harness)} requires a local bridge, a provider with authenticated coordination.publicUrl and runtime MCP attachments, or an explicit driveHarness with reachable coordination transport`);
+	const externalManagersAvailable = hasCustomDriveHarness || managerBackend !== void 0 && automaticDriverBackendSupported(managerBackend, options.coordination);
+	const canLead = (child) => isExternalSupervisor(child) ? externalManagersAvailable : options.router !== void 0;
+	const childrenCanSubmit = deliverable !== void 0 || options.resolveDeliverable !== void 0;
+	const composeSpawnProfileFor = (parent) => {
+		if (options.inheritSpawnRights === false || options.makeWorkerAgent !== void 0 || !childrenCanSubmit) return composeSpawnProfile;
+		return (authored) => {
+			const composed = composeSpawnProfile ? composeSpawnProfile(authored) : authored;
+			return canLead(composed) ? withInheritedSpawnRights(parent, composed) : composed;
+		};
+	};
 	const harnessClaims = /* @__PURE__ */ new WeakMap();
 	const claimDriveHarness = (rawHarness, ownerId) => {
 		if (typeof rawHarness !== "function") throw new ValidationError("supervise: resolveDriveHarness must return a DriveHarness function");
@@ -3856,7 +3912,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 				assertProfileContract(authorized, isExternalSupervisor(authorized) ? driverMaterialization : promptModelProfileMaterialization, `supervise driver ${JSON.stringify(spawnContext.label)}`, true);
 				if (managerBackend) assertBridgeProfileMaterializes(profileWithoutDeclaredRuntimeCoordinationTools(authorized), managerBackend, `supervise driver ${JSON.stringify(spawnContext.label)}`);
 				const childFactory = makeRecursiveWorkerFor(authorized, childExecution.identity, depth + 1, ownerId);
-				const nestedPerWorker = defaultPerWorker(spawnContext.budget);
+				const nestedPerWorker = defaultPerWorker(spawnContext.budget, ownerShare);
 				const authorizeNestedMessage = authorizeDownFor(authorized, depth + 1);
 				let acceptedSubmission = false;
 				return driverChild(authorized, supervisorAgent(authorized, {
@@ -3864,7 +3920,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					makeWorkerAgent: childFactory,
 					...authorizeNestedMessage ? { authorizeDownMessage: authorizeNestedMessage } : {},
 					perWorker: nestedPerWorker,
-					...options.reservationPolicy ? { preserveOwnerTurns: true } : {},
+					...ownerShare > 0 ? { preserveOwnerTurns: true } : {},
 					...options.router ? { router: options.router } : {},
 					...nestedDriveHarness ? { driveHarness: nestedDriveHarness } : {},
 					...options.coordination && isExternalSupervisor(authorized) ? { coordination: options.coordination } : {},
@@ -3890,7 +3946,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					...options.continuityByProfile ? { continuityByProfile: options.continuityByProfile } : {},
 					...spawnPreflight ? { preflightSpawn: spawnPreflight } : {},
 					...options.resolveSpawnProfile ? { resolveSpawnProfile: options.resolveSpawnProfile } : {},
-					...composeSpawnProfile ? { composeSpawnProfile } : {},
+					...composeSpawnProfileFor(authorized) ? { composeSpawnProfile: composeSpawnProfileFor(authorized) } : {},
 					...profileTable ? { profiles: profileTable } : {},
 					...options.peerMail ? { peerMail: options.peerMail } : {},
 					...options.stopRule ? { stopRule: options.stopRule } : {},
@@ -3962,7 +4018,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 			makeWorkerAgent: workerFactory,
 			...authorizeRootMessage ? { authorizeDownMessage: authorizeRootMessage } : {},
 			perWorker,
-			...options.reservationPolicy ? { preserveOwnerTurns: true } : {},
+			...ownerShare > 0 ? { preserveOwnerTurns: true } : {},
 			...log ? { onEvent: (_event, record) => log.append(runId, record, rootOwnerId) } : {},
 			...deliverable ? { deliverable } : {},
 			onProviderModel(model) {
@@ -3976,11 +4032,10 @@ function superviseInternal(profile, task, opts, testBrain) {
 			...options.coordination && isExternalSupervisor(canonicalProfile) ? { coordination: options.coordination } : {},
 			...spawnPreflight ? { preflightSpawn: spawnPreflight } : {},
 			...options.resolveSpawnProfile ? { resolveSpawnProfile: options.resolveSpawnProfile } : {},
-			...composeSpawnProfile ? { composeSpawnProfile } : {},
+			...composeSpawnProfileFor(canonicalProfile) ? { composeSpawnProfile: composeSpawnProfileFor(canonicalProfile) } : {},
 			...profileTable ? { profiles: profileTable } : {},
 			...spawnResourceRoot === void 0 ? {} : { spawnResourceRoot },
 			...options.peerMail ? { peerMail: options.peerMail } : {},
-			...options.maxLiveWorkers !== void 0 ? { maxLiveWorkers: options.maxLiveWorkers } : {},
 			...options.router ? { router: options.router } : {},
 			...rootDriveHarness ? { driveHarness: rootDriveHarness } : {},
 			nodeContext: {
@@ -4051,12 +4106,12 @@ function superviseInternal(profile, task, opts, testBrain) {
 				declaration: "deferred",
 				authoredProfile: canonicalProfile
 			} },
-			maxDepth: options.maxDepth ?? 8,
+			maxDepth: options.maxDepth ?? 16,
 			...options.childSettleGraceMs !== void 0 ? { childSettleGraceMs: options.childSettleGraceMs } : {},
 			...options.teardownConfirmMs !== void 0 ? { teardownConfirmMs: options.teardownConfirmMs } : {},
 			...options.retainedAtSettlement !== void 0 ? { retainedAtSettlement: options.retainedAtSettlement } : {},
 			ownerWorkspaceRetention: managerBackend?.backend === "provider" && managerBackend.workspaceRetention !== void 0,
-			...options.maxLiveWorkers !== void 0 ? { maxLiveWorkers: options.maxLiveWorkers } : {},
+			...options.workerSlots !== void 0 ? { workerSlots: options.workerSlots } : {},
 			...options.reservationPolicy ? { reservationPolicy: options.reservationPolicy } : {},
 			...probes ? { probes } : {},
 			...ctx.resume === true ? { resume: true } : {},
@@ -4135,4 +4190,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { gateOnDeliverable as C, serveCoordinationMcp as S, readRootStream as _, superviseWithTestBrain as a, composeReentryTask as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, coordinationProfileToolPrefix as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgent as m, profileGuidanceComposer as n, workerFromBackend as o, resolveSupervisorProfile as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, readRootStreamReceipt as v, mapExecutorResult as w, createSupervisorSpanRecorder as x, UNPROVEN_CONTINUITY as y };
 
-//# sourceMappingURL=supervise-RF3_8PuR.js.map
+//# sourceMappingURL=supervise--njTtSL3.js.map