@tangle-network/agent-runtime 0.266.0 → 0.271.0

package/dist/{supervisor-B8UMAXya.js → supervisor-Cvd5mf7x.js}

@@ -14,7 +14,7 @@ import { access, chmod, copyFile, mkdir, mkdtemp, open, readFile, readdir, realp
 import { applyWorkspacePlan, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
 import { homedir, hostname, tmpdir } from "node:os";
 import { stripVTControlCharacters } from "node:util";
-import { deriveHexId, isW3CSpanId, isW3CTraceId } from "@tangle-network/agent-trace-contract";
+import { ATTR, deriveHexId, isW3CSpanId, isW3CTraceId } from "@tangle-network/agent-trace-contract";
 import { SDKError, generateIdempotencyKey, withRetry } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
 import { request } from "node:http";
@@ -5171,25 +5171,30 @@ const GEN_AI = {
 * useless for the runs you most want to look at.
 */
 function createOpenInferenceFileExporter(filePath) {
-	const lines = [];
+	let written = 0;
+	let dropped = 0;
 	let failed;
-	const append = (line) => {
-		try {
-			appendFileSync(filePath, `${line}\n`, "utf8");
-		} catch (error) {
-			failed ??= error instanceof Error ? error : new Error(String(error));
-		}
-	};
 	return {
 		exportSpan(span) {
-			append(JSON.stringify(toOpenInferenceLine(span)));
-			lines.push("");
+			try {
+				appendFileSync(filePath, `${JSON.stringify(toOpenInferenceLine(span))}\n`, "utf8");
+				written += 1;
+			} catch (error) {
+				dropped += 1;
+				failed ??= error instanceof Error ? error : new Error(String(error));
+			}
 		},
 		async flush() {
-			if (failed) throw new Error(`OpenInference file exporter failed writing ${filePath}: ${failed.message}`);
+			if (failed) throw new Error(`OpenInference file exporter failed writing ${filePath} (${dropped} spans dropped): ${failed.message}`);
 		},
-		async shutdown() {
-			lines.length = 0;
+		async shutdown() {},
+		stats() {
+			return {
+				written,
+				dropped,
+				pending: 0,
+				...failed ? { lastError: failed.message } : {}
+			};
 		}
 	};
 }
@@ -5240,68 +5245,172 @@ function toOpenInferenceLine(span) {
 	};
 }
 /**
-* Create an OTEL exporter. Returns undefined when no endpoint is configured.
+* Create an OTLP/HTTP exporter. Returns undefined when no endpoint is configured.
+*
+* One batch is in flight at a time; spans that arrive meanwhile wait in a queue bounded by
+* `maxQueueSize`. Every span ends in exactly one of `written` or `dropped`: a non-2xx response, a
+* network error, a timeout, an OTLP `partialSuccess.rejectedSpans` count and a full queue each count
+* as drops and set `lastError`. Nothing here throws into the caller's run; `flush()` reports the
+* loss, the same rule {@link createOpenInferenceFileExporter} follows.
 */
 function createOtelExporter(config) {
 	const resolvedEndpoint = config?.endpoint ?? (typeof process !== "undefined" ? process.env.OTEL_EXPORTER_OTLP_ENDPOINT : void 0);
 	if (!resolvedEndpoint) return void 0;
-	const endpoint = resolvedEndpoint;
+	const url = `${resolvedEndpoint.replace(/\/+$/, "")}/v1/traces`;
 	const headers = config?.headers ?? parseHeadersFromEnv();
-	const batchSize = config?.batchSize ?? 64;
+	const batchSize = positiveInteger(config?.batchSize, 64);
 	const flushIntervalMs = config?.flushIntervalMs ?? 5e3;
-	const serviceName = config?.serviceName ?? "agent-runtime";
-	const resourceAttrs = config?.resourceAttributes ?? {};
-	const pending = [];
-	let timer;
+	const maxQueueSize = Math.max(positiveInteger(config?.maxQueueSize, 2048), batchSize);
+	const timeoutMs = positiveInteger(config?.timeoutMs, 1e4);
+	const resource = { attributes: toOtelAttributes({
+		"service.name": config?.serviceName ?? "agent-runtime",
+		...config?.resourceAttributes ?? {}
+	}) };
+	const queue = [];
+	let inFlight = 0;
+	let written = 0;
+	let dropped = 0;
+	let droppedAtLastFlush = 0;
+	let lastError;
+	let sending;
 	let stopped = false;
-	const exporter = {
-		exportSpan(span) {
-			if (stopped) return;
-			pending.push(span);
-			if (pending.length >= batchSize) doFlush();
-		},
-		async flush() {
-			await doFlush();
-		},
-		async shutdown() {
-			stopped = true;
-			if (timer !== void 0) {
-				clearInterval(timer);
-				timer = void 0;
-			}
-			await doFlush();
-		}
+	const drop = (count, reason) => {
+		dropped += count;
+		lastError = reason;
 	};
-	timer = setInterval(() => {
-		if (pending.length > 0) doFlush();
-	}, flushIntervalMs);
-	if (typeof timer === "object" && "unref" in timer) timer.unref();
-	async function doFlush() {
-		if (pending.length === 0) return;
-		const batch = pending.splice(0);
+	async function send(batch) {
 		const body = { resourceSpans: [{
-			resource: { attributes: toOtelAttributes({
-				"service.name": serviceName,
-				...resourceAttrs
-			}) },
+			resource,
 			scopeSpans: [{
 				scope: SCOPE,
 				spans: batch
 			}]
 		}] };
-		const url = `${endpoint.replace(/\/+$/, "")}/v1/traces`;
 		try {
-			await fetch(url, {
+			const response = await fetch(url, {
 				method: "POST",
 				headers: {
 					"content-type": "application/json",
 					...headers
 				},
-				body: JSON.stringify(body)
+				body: JSON.stringify(body),
+				signal: AbortSignal.timeout(timeoutMs)
 			});
-		} catch {}
+			const text = await response.text().catch(() => "");
+			if (!response.ok) {
+				const detail = text ? `: ${text.slice(0, 200)}` : "";
+				drop(batch.length, `HTTP ${response.status} from ${url}${detail}`);
+				return;
+			}
+			const rejected = rejectedSpans(text, batch.length);
+			if (rejected.count > 0) drop(rejected.count, `collector rejected ${rejected.count} spans: ${rejected.message}`);
+			written += batch.length - rejected.count;
+		} catch (error) {
+			drop(batch.length, `POST ${url} failed: ${describeFetchError(error)}`);
+		}
+	}
+	/** The single sender: it drains the queue batch by batch until the queue is empty. */
+	function drain() {
+		sending ??= (async () => {
+			try {
+				while (queue.length > 0) {
+					const batch = queue.splice(0, batchSize);
+					inFlight = batch.length;
+					await send(batch);
+					inFlight = 0;
+				}
+			} finally {
+				sending = void 0;
+			}
+		})();
+		return sending;
+	}
+	const timer = setInterval(() => {
+		if (queue.length > 0) drain();
+	}, flushIntervalMs);
+	if (typeof timer === "object" && "unref" in timer) timer.unref();
+	return {
+		exportSpan(span) {
+			if (stopped) {
+				drop(1, "span exported after the exporter stopped");
+				return;
+			}
+			if (queue.length + inFlight >= maxQueueSize) {
+				drop(1, `queue full: ${maxQueueSize} spans already waiting on ${url}`);
+				return;
+			}
+			queue.push(span);
+			if (queue.length >= batchSize) drain();
+		},
+		async flush() {
+			await drain();
+			const lost = dropped - droppedAtLastFlush;
+			droppedAtLastFlush = dropped;
+			if (lost > 0) throw new Error(`OTLP exporter dropped ${lost} spans since the last flush: ${lastError}`);
+		},
+		async shutdown() {
+			stopped = true;
+			clearInterval(timer);
+			await drain();
+		},
+		stats() {
+			return {
+				written,
+				dropped,
+				pending: queue.length + inFlight,
+				...lastError !== void 0 ? { lastError } : {}
+			};
+		}
+	};
+}
+/**
+* Spans a 2xx OTLP/HTTP response still refused. The spec lets a collector accept a request and
+* reject part of it through `partialSuccess.rejectedSpans`; reading only the status would count
+* those spans as delivered. An empty or non-JSON body is a full success.
+*/
+function rejectedSpans(text, batchLength) {
+	if (!text.trim()) return {
+		count: 0,
+		message: ""
+	};
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch {
+		return {
+			count: 0,
+			message: ""
+		};
 	}
-	return exporter;
+	if (parsed === null || typeof parsed !== "object") return {
+		count: 0,
+		message: ""
+	};
+	const partial = parsed.partialSuccess;
+	if (partial === null || typeof partial !== "object") return {
+		count: 0,
+		message: ""
+	};
+	const { rejectedSpans: raw, errorMessage } = partial;
+	const count = typeof raw === "string" ? Number(raw) : typeof raw === "number" ? raw : 0;
+	if (!Number.isSafeInteger(count) || count <= 0) return {
+		count: 0,
+		message: ""
+	};
+	return {
+		count: Math.min(count, batchLength),
+		message: typeof errorMessage === "string" && errorMessage ? errorMessage : "no message"
+	};
+}
+/** Node's fetch reports every socket failure as "fetch failed"; the cause names which one. */
+function describeFetchError(error) {
+	if (!(error instanceof Error)) return String(error);
+	const cause = error.cause;
+	const code = cause && typeof cause === "object" && "code" in cause && typeof cause.code === "string" ? cause.code : void 0;
+	return code ? `${error.message} (${code})` : error.message;
+}
+function positiveInteger(value, fallback) {
+	return value !== void 0 && Number.isSafeInteger(value) && value > 0 ? value : fallback;
 }
 /**
 * Convert a LoopTraceEvent into an OtelSpan for export.
@@ -5384,6 +5493,7 @@ function buildRuntimeEventOtelSpans(events, traceId, parentSpanId, options = {})
 		let name = `tangle.runtime.${event.type}`;
 		if (event.type === "tool_call" || event.type === "tool_result") {
 			name = `agent.${event.type}`;
+			attrs[ATTR.spanKind] = "TOOL";
 			attrs["tool.name"] = event.toolName;
 			if (event.toolCallId) attrs["tool.call_id"] = event.toolCallId;
 			const mcp = mcpIdentity(event.toolName);
@@ -5393,6 +5503,7 @@ function buildRuntimeEventOtelSpans(events, traceId, parentSpanId, options = {})
 			if (payload !== void 0) attrs[event.type === "tool_call" ? "tool.input" : "tool.output"] = serialized(payload);
 		} else if (event.type === "llm_call") {
 			name = "gen_ai.client.inference";
+			attrs[ATTR.spanKind] = "LLM";
 			attrs["gen_ai.request.model"] = event.model;
 			if (event.tokensIn !== void 0) attrs["gen_ai.usage.input_tokens"] = event.tokensIn;
 			if (event.tokensOut !== void 0) attrs["gen_ai.usage.output_tokens"] = event.tokensOut;
@@ -5446,11 +5557,24 @@ function buildLoopOtelSpans(events, traceId, rootParentSpanId) {
 		kind: 1,
 		startTimeUnixNano: msToNs(node.startMs),
 		endTimeUnixNano: msToNs(node.endMs),
-		attributes: toOtelAttributes(node.attrs),
+		attributes: toOtelAttributes({
+			...node.attrs,
+			[ATTR.spanKind]: LOOP_SPAN_KIND[node.kind]
+		}),
 		status: { code: node.error ? 2 : 1 }
 	}));
 }
 /**
+* The declared kind of each loop level. An iteration span carries its own token total, and an
+* undeclared span with tokens reads as an LLM call, so declaring AGENT keeps those tokens from
+* being counted a second time beside the model-call spans beneath it.
+*/
+const LOOP_SPAN_KIND = {
+	loop: "CHAIN",
+	round: "CHAIN",
+	branch: "AGENT"
+};
+/**
 * Sink-neutral core behind {@link buildLoopOtelSpans}: reconstruct the
 * loop → round → branch span tree from one run's ordered `LoopTraceEvent`
 * stream. Consumed by the OTEL mapper above and by the MCP delegation
@@ -7404,7 +7528,8 @@ function assertRetainedRunReplayMaterial(provider, replay, admission) {
 	}, identity, retainedContextTransfer(replay.turn.contextTransfer)));
 }
 function retainedRunIntent(options, identity, contextTransfer) {
-	const requestedProfileDigest = canonicalCandidateDigest(options.environment.profile);
+	const { profile } = options.environment;
+	const requestedProfileDigest = typeof profile === "string" ? canonicalCandidateDigest(profile) : canonicalAgentProfileDigest(profile);
 	const requestDigest = canonicalCandidateDigest({
 		kind: "retained-run-intent.v1",
 		provider: options.provider.name,
@@ -8263,6 +8388,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	let workspaceCapturePromise;
 	let workspaceCleanupPromise;
 	let retainedReleasePromise;
+	let releaseReadTried = false;
 	let workspaceOutcome;
 	let workspacePreservationRequired = false;
 	let workspaceRunActive = false;
@@ -8615,6 +8741,11 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						environment = target;
 						resetWorkspaceState(target);
 					}
+					if (harnessTranscript.status !== "captured" && !releaseReadTried) {
+						releaseReadTried = true;
+						const capture = await captureHarnessTranscript(target, profile.harness, signal);
+						if (capture.status === "captured") harnessTranscript = capture;
+					}
 					const result = await destroyEnvironment(signal);
 					if (!result.destroyed) return [receipt(false, result.detail, result.permanent)];
 					pending = false;
@@ -16636,6 +16767,7 @@ var FileResultBlobStore = class {
 		return `${this.dir}/${outRef.replace(/:/g, "-")}.json`;
 	}
 };
+/** @internal shared with the SQL-backed store. */
 function encodeResultBlob(outRef, artifact) {
 	const detached = detachedSnapshot(artifact, "result blob");
 	assertContentAddress(outRef, detached);
@@ -16648,6 +16780,7 @@ function encodeResultBlob(outRef, artifact) {
 		text
 	};
 }
+/** @internal shared with the SQL-backed store. */
 function assertContentAddress(outRef, artifact) {
 	const expected = contentAddress(artifact);
 	if (outRef !== expected) throw new Error(`blob outRef '${outRef}' does not match the artifact content hash '${expected}'; a content-addressed store refuses a mismatched ref (breaks the replay invariant)`);
@@ -17085,6 +17218,7 @@ function servedIdentityParts(model) {
 	};
 }
 /** One validation implementation for memory, durable append, and cold replay. */
+/** @internal shared with the SQL-backed store. */
 var SpawnEventIndex = class {
 	root;
 	nodes = /* @__PURE__ */ new Map();
@@ -21025,14 +21159,15 @@ function settledNodeEvidence(subject, settlement, settledAt) {
 		trace: detachedSnapshot(settlement.trace, "worker trace evidence")
 	};
 }
-/** The `agent.child` payload of the release: the settlement restated as released, `settledAt`
-*  kept at the settlement instant and `metered` omitted so the driver's inference is not summed
-*  twice. The sweep and the resume heal emit it from the same builder. */
-function releasedChildPayload(subject, settlement, settledAt, releasedAt) {
+/** The `agent.child` payload of a closed retained slot: the settlement restated with the state
+*  the slot closed in, `settledAt` kept at the settlement instant and `metered` omitted so the
+*  driver's inference is not summed twice. The sweep, the final close and the resume heal emit
+*  it from the same builder. */
+function releasedChildPayload(subject, settlement, settledAt, releasedAt, retainedExecution = "released") {
 	return {
 		childId: subject.id,
 		status: "down",
-		retainedExecution: "released",
+		retainedExecution,
 		...settlement.retainedPendingCause === void 0 ? {} : { retainedPendingCause: settlement.retainedPendingCause },
 		releasedAt,
 		...settlement.outRef === void 0 ? {} : { outRef: settlement.outRef },
@@ -21273,7 +21408,11 @@ async function assertRecordedResult(node, result, events, opts) {
 * The keyed assignments a prior journal proves: every `spawned` event carrying a `key`, resolved
 * against the replayed settlements. A key spawned more than once (a retry chain) resolves to its
 * LATEST attempt — iterate in ordinal order so later spawns overwrite earlier ones. A spawned
-* event with no matching settlement is `in-doubt`: the process died with it in flight.
+* event with no matching settlement is `in-doubt`: the process died with it in flight — UNLESS
+* the spawn's own runtime proves the execution cannot have outlived the process (`inline`, the
+* same predicate the budget layer charges no uncertain reservation for), in which case the resume
+* itself is the terminal evidence and the key resolves `down` with a derived reason, so a re-spawn
+* under the same key retries instead of wedging in-doubt.
 */
 function keyedAssignments(events, settled) {
 	const byId = new Map(settled.map((s) => [s.handle.id, s]));
@@ -21283,7 +21422,13 @@ function keyedAssignments(events, settled) {
 		if (ev.key === void 0) continue;
 		if (ev.identity === void 0) throw new RuntimeRunStateError(`supervisor: keyed node '${ev.id}' has no durable execution identity`);
 		const s = byId.get(ev.id);
-		keys.set(ev.key, s === void 0 ? {
+		keys.set(ev.key, s === void 0 ? ev.runtime === "inline" ? {
+			id: ev.id,
+			label: ev.label,
+			identity: ev.identity,
+			state: "down",
+			reason: `interrupted: the process died with '${ev.label}' in flight and its '${ev.runtime}' runtime cannot outlive that process, so the resume proves the attempt dead`
+		} : {
 			id: ev.id,
 			label: ev.label,
 			identity: ev.identity,
@@ -22620,6 +22765,7 @@ const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
 const pauseRecorders = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
 const retainedReleasers = /* @__PURE__ */ new WeakMap();
+const retainedSlotClosers = /* @__PURE__ */ new WeakMap();
 const teardownRetriers = /* @__PURE__ */ new WeakMap();
 const teardownRetriable = /* @__PURE__ */ new WeakMap();
 /** The retained owner environments a scope's last release could not confirm destroyed. */
@@ -22707,6 +22853,25 @@ async function releaseRetainedEnvironments(scope) {
 	return unconfirmedTeardowns(scope);
 }
 /**
+* @internal Close the cursor slot of every retained child this scope and its nested scopes still
+* hold open, once the settlement is final and the release and its retries are done.
+*
+* The release sweep closes a slot only when it confirms the environment destroyed, and nothing
+* else ever closed the rest: a refused delete, a teardown probe that failed after a destroy, or an
+* admission that timed out before `create` named an environment. Measured on the Discovery fleet
+* of 2026-09-23/24 (Runtime 0.249.1 to 0.261.0): 338 of 1,620 agents never settled, so they had no
+* terminal record, no spend but the reservation ceiling, and no transcript receipt (#1301). A
+* settlement under `retainedAtSettlement: 'release'` is final, so no process will recover these
+* executions. Each slot closes with the settlement the driver already received, under the seq it
+* saw, marked `retainedExecution: 'release-unconfirmed'`. The environment it may still hold stays
+* named by its `teardown-unconfirmed` record for a sweeper. Never call this on a run a later
+* process may resume.
+*/
+async function closeRetainedSlots(scope) {
+	const close = retainedSlotClosers.get(scope);
+	if (close) await close();
+}
+/**
 * @internal Everything this scope cannot prove destroyed: its settled children whose teardown is
 * unconfirmed and, after a release, the retained owner environment that release could not
 * confirm. Read live, so a later retry that confirms a node removes it.
@@ -22877,6 +23042,14 @@ function createScope(args) {
 			identity: prior.identity,
 			reason: prior.settled.reason
 		});
+	} else if (prior.state === "down" && prior.settled === void 0) {
+		if (prior.identity === void 0) continue;
+		keyed.set(key, {
+			state: "down",
+			id: prior.id,
+			identity: prior.identity,
+			reason: prior.reason ?? "interrupted: resume proved the prior attempt dead"
+		});
 	} else if (prior.identity !== void 0) keyed.set(key, {
 		state: "in-doubt",
 		id: prior.id,
@@ -23225,6 +23398,7 @@ function createScope(args) {
 				askTeardown,
 				...executor.heldEnvironments ? { readHeldEnvironments: executor.heldEnvironments.bind(executor) } : {},
 				...nestedTeardownScopes.has(executor) ? { readNestedScope: nestedTeardownScopes.get(executor) } : {},
+				...executor.harnessTranscript ? { readTranscriptAtRelease: () => persistHarnessTranscript(readHarnessTranscript(executor), args.blobs) } : {},
 				teardownAttempts: 0,
 				abortChild: (reason) => controller.abort(reason)
 			};
@@ -23916,24 +24090,44 @@ function createScope(args) {
 		const prior = released.length > 0 ? await args.journal.loadTree(args.root) ?? [] : [];
 		for (const { child, receipts } of released) {
 			for (const receipt of receipts) await appendEnvironmentTeardown(args.journal, args.root, child.id, receipt, new Date(now()).toISOString());
-			if (child.cleanupConfirmed && child.recoveryPending === true && child.resolved?.kind === "down" && child.settledSeq !== void 0 && child.settledAt !== void 0 && !prior.some((event) => event.id === child.id && closesCursorSlot(event))) {
-				child.budgetViolation = child.retainedViolation;
-				const settledAt = child.settledAt;
-				await args.journal.appendEvent(args.root, terminalDownEvent(child, child.resolved, child.settledSeq, new Date(settledAt).toISOString(), "released"));
-				child.retainedExecution = "released";
-				const releasedAt = now();
-				notifyRuntimeHookEvent(args.hooks, {
-					id: `${child.id}:released`,
-					runId: args.root,
-					target: "agent.child",
-					phase: "after",
-					timestamp: releasedAt,
-					stepIndex: child.settledSeq,
-					parentId: args.parentId,
-					payload: releasedChildPayload(child, child.resolved, settledAt, releasedAt)
-				}, { signal: args.signal });
-			}
+			if (child.cleanupConfirmed) await closeRetainedSlot(child, "released", prior);
+		}
+	});
+	const closeRetainedSlot = async (child, state, prior) => {
+		if (child.recoveryPending !== true || child.resolved?.kind !== "down" || child.settledSeq === void 0 || child.settledAt === void 0 || child.retainedExecution === "released" || child.retainedExecution === "release-unconfirmed" || prior.some((event) => event.id === child.id && closesCursorSlot(event))) return;
+		child.budgetViolation = child.retainedViolation;
+		const settledAt = child.settledAt;
+		let settlement = child.resolved;
+		if (settlement.harnessTranscript?.status !== "available" && child.readTranscriptAtRelease) {
+			const atRelease = await child.readTranscriptAtRelease();
+			if (atRelease.status === "available") settlement = {
+				...settlement,
+				harnessTranscript: atRelease
+			};
+		}
+		await args.journal.appendEvent(args.root, terminalDownEvent(child, settlement, child.settledSeq, new Date(settledAt).toISOString(), state));
+		child.retainedExecution = state;
+		const closedAt = now();
+		notifyRuntimeHookEvent(args.hooks, {
+			id: `${child.id}:${state}`,
+			runId: args.root,
+			target: "agent.child",
+			phase: "after",
+			timestamp: closedAt,
+			stepIndex: child.settledSeq,
+			parentId: args.parentId,
+			payload: releasedChildPayload(child, settlement, settledAt, closedAt, state)
+		}, { signal: args.signal });
+	};
+	retainedSlotClosers.set(scope, async () => {
+		for (const child of children.values()) {
+			const nested = child.readNestedScope?.();
+			if (nested !== void 0) await closeRetainedSlots(nested);
 		}
+		const open = [...children.values()].filter((child) => child.recoveryPending === true && !child.cleanupConfirmed && isTerminalNodeStatus(child.status) && child.retainedExecution !== "released" && child.retainedExecution !== "release-unconfirmed");
+		if (open.length === 0) return;
+		const prior = await args.journal.loadTree(args.root) ?? [];
+		for (const child of open) await closeRetainedSlot(child, "release-unconfirmed", prior);
 	});
 	registerScopeRetainedOwner(scope, {
 		rootId: args.root,
@@ -26501,6 +26695,7 @@ function createSupervisor() {
 						seq: teardownSeq++,
 						at: new Date(now()).toISOString()
 					});
+					if (releasing) await closeRetainedSlots(openScope);
 				} catch (error) {
 					if (actOutcome?.ok !== false) actOutcome = {
 						ok: false,
@@ -26917,13 +27112,16 @@ function fleetYieldFromForest(forest) {
 	const spawned = /* @__PURE__ */ new Set();
 	const terminal = /* @__PURE__ */ new Map();
 	const released = /* @__PURE__ */ new Set();
+	const unconfirmed = /* @__PURE__ */ new Set();
 	for (const { event } of forest.events) if (event.kind === "spawned") {
 		if (event.parent !== void 0) spawned.add(event.id);
 	} else if (event.kind === "settled" || event.kind === "cancelled") {
 		const bucket = event.kind === "cancelled" ? "cancelled" : event.status;
 		terminal.set(event.id, bucket);
-		if (event.retainedExecution === "released" && bucket !== "done") released.add(event.id);
-		else released.delete(event.id);
+		released.delete(event.id);
+		unconfirmed.delete(event.id);
+		if (bucket !== "done" && event.retainedExecution === "released") released.add(event.id);
+		if (bucket !== "done" && event.retainedExecution === "release-unconfirmed") unconfirmed.add(event.id);
 	}
 	const count = (bucket) => [...terminal.values()].filter((value) => value === bucket).length;
 	const fleetYield = {
@@ -26932,10 +27130,11 @@ function fleetYieldFromForest(forest) {
 		down: count("down"),
 		cancelled: count("cancelled"),
 		neverSettled: forest.inDoubt.length,
-		releasedUnrecovered: released.size
+		releasedUnrecovered: released.size,
+		releaseUnconfirmed: unconfirmed.size
 	};
 	if (fleetYield.done + fleetYield.down + fleetYield.cancelled + fleetYield.neverSettled !== fleetYield.spawned) throw new RuntimeRunStateError(`supervisor: fleet yield does not partition the spawned children of '${forest.root}' (${JSON.stringify(fleetYield)})`);
-	if (fleetYield.releasedUnrecovered > fleetYield.down + fleetYield.cancelled) throw new RuntimeRunStateError(`supervisor: released children exceed down + cancelled for '${forest.root}' (${JSON.stringify(fleetYield)})`);
+	if (fleetYield.releasedUnrecovered + fleetYield.releaseUnconfirmed > fleetYield.down + fleetYield.cancelled) throw new RuntimeRunStateError(`supervisor: released children exceed down + cancelled for '${forest.root}' (${JSON.stringify(fleetYield)})`);
 	return fleetYield;
 }
 /** The journaled nodes whose usage accounting is incomplete — one `SpendGap` per node+kind,
@@ -27000,6 +27199,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { interactiveAdmissionSeamKey as $, cloneSpend as $i, retainedCreateMaterial as $n, profileMaterializationAxes$1 as $r, readWorkerProgress as $t, restoreScopeOwnerAcceptedExecution as A, runtimeOwnedScopeOwnerRuntime as Ai, routerBrain as An, createRuntimeEventCollector as Ar, pendingWaits as At, bindScopeRetainedOwnerEnvironmentId as B, canonicalStreamEventFromSandboxEvent as Bi, sandboxClientAsProvider as Bn, DEFAULT_LOCAL_HARNESS as Br, createBudgetPool as Bt, beginScopeOwnerAttempt as C, promptOptionsFromAgentTurnInput as Ca, providerAttemptEvidence as Ci, isTerminalDecision as Cn, exportEvalRuns as Cr, FileResultBlobStore as Ct, meterRuntimeOwnedProviderAttempt as D, runtimeOwnedExecutorMaterialization as Di, acquireSandbox as Dn, padSpanId as Dr, insideCursorNamespace as Dt, meterRuntimeOwnedAccounting as E, runtimeOwnedExecutorExecutionBinding as Ei, probeSandboxCapabilities as En, loopEventToOtelSpan as Er, InMemorySpawnJournal as Et, isWaitOutcome as F, detachedFrozen as Fi, LEAF_CONTINUATION_TASK as Fn, runSettledCommand as Fr, parseWorkerToolTraceArtifact as Ft, scopeRetainedOwnerContext as G, mapSandboxEvent as Gi, sandboxSessionTraceSource as Gn, parseCodexTokenUsage as Gr, WORKER_TRACE_PROPAGATION as Gt, consumeScopeRetainedOwnerResult as H, createSandboxUsageLedger as Hi, unavailableSignalOfFailure as Hn, harnessInvocation as Hr, newUsageTotals as Ht, pollFor as I, detachedSnapshot as Ii, createAgentEnvironmentProviderRegistry as In, runWorktreeHarness as Ir, workerTraceAnalysisStore as It, scopeRetainedOwnerResult as J, sandboxEventServedBackend as Ji, errMessage as Jn, AGENT_PROFILE_MATERIALIZATION_AXES as Jr, workerTraceHeaders as Jt, scopeRetainedOwnerPriorSpend as K, mapSandboxToolEvent as Ki, registerRetainedExecutorPreparation as Kn, CodexExecutionDiagnosticError as Kr, readWorkerTraceContext as Kt, timerAt as L, projectSandboxOutcome as Li, providerAsExecutor as Ln, captureWorktreeDiff as Lr, BudgetReconcileFault as Lt, settledToIteration as M, unknownMaterializationReceipt as Mi, canonicalObservedModelParts as Mn, sanitizeAgentRuntimeEvent as Mr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Mt, createWorkerSlots as N, executableAgentProfileSnapshot as Ni, observedModelMatchesDeclared as Nn, sanitizeKnowledgeReadinessReport as Nr, captureWorkerTraceEvidence as Nt, recordScopeOwnerMaterialization as O, runtimeOwnedExecutorProviderEvidence as Oi, assertBoxlessPromptOptions as On, padTraceId as Or, loadSpawnForest as Ot, createWaitProbes as P, executableAgentSpecSnapshot as Pi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Pn, sanitizeRuntimeStreamEvent as Pr, isTraceAnalysisStore as Pt, resolveSpawnResourcePaths as Q, chargedTokens as Qi, startRetainedRunInEnvironment as Qn, fullProfileMaterialization as Qr, createActivityLog as Qt, validateWaitSpec as R, readSandboxOutcome as Ri, providerAsSandboxClient as Rn, createWorktree as Rr, ReservationWaitRefused as Rt, assertRecursiveReservationPolicy as S, promptFromAgentTurnInput as Sa, newExecutionAttemptId as Si, defaultSelectWinner as Sn, createOtelExporter as Sr, createInPlaceCliExecutor as St, deriveNodeExecutionIdentity as T, runtimeOwnedDriveHarnessProviderEvidence as Ti, createSandboxLineage as Tn, generateSpanId as Tr, InMemoryResultBlobStore as Tt, prepareScopeRetainedOwnerTask as U, extractLlmCallEvent as Ui, createPushTraceSource as Un, harnessSupportsReasoningEffort as Ur, spendFromUsageEvents as Ut, bindScopeRetainedOwnerProvider as V, createSandboxToolPartState as Vi, unavailablePauseMs as Vn, LOCAL_HARNESSES as Vr, meterUsageEvent as Vt, reconcileScopeRetainedOwnerEnvironment as W, isSandboxTerminalEvent as Wi, decodeToolPart as Wn, localHarnessExecutable as Wr, spendFromUsageTotals as Wt, environmentReader as X, sumSandboxUsage as Xi, recoverRetainedRun as Xn, controlProfileMaterialization as Xr, taskToPrompt as Xt, SPAWN_RESOURCE_PATH_MAX_BYTES as Y, sandboxProgressEvents as Yi, reconnectRetainedRun as Yn, assertProfileMaterialization as Yr, workerTraceSeamKey as Yt, hostDirectoryReader as Z, addSpend as Zi, startRetainedRun as Zn, defineProfileMaterializationContract as Zr, DEFAULT_STALL_AFTER_MS as Zt, driverChild as _, awaitAbortable$1 as _a, authoredProfileDigest as _i, readCodexRolloutSession as _n, INTELLIGENCE_WIRE_VERSION as _r, createExecutorRegistry as _t, collectDelivered as a, sleep as aa, renderUnsupported as ai, createPeerMailbox as an, runAbortable as ar, workerInteractiveBindingsDir as at, withDriverExecutor as b, teardownExecutor as ba, knownExecutionBindingReceipt as bi, TERMINAL_DECISIONS as bn, buildRuntimeEventOtelSpans as br, DEFAULT_SANDBOX_STEERING_MAX_TURNS as bt, runTree as c, throwIfAborted as ca, validateProfileMaterialization as ci, peerMailVerbNames as cn, resolveRedactor as cr, startRetainedInteractiveRun as ct, HarnessTurnFailedError as d, zeroSpend as da, parseCommittedJsonLines as di, executorFailure as dn, persistHarnessTranscript as dr, rollingDispatch as dt, deleteBoxSafe as ea, promptControlProfileMaterialization as ei, createInbox as en, destroyInteractiveEnvironment as er, readWorkerInteractiveAdmissions as et, classifyDriverFailure as f, addResourceSpend as fa, prepareJsonlAppend as fi, bridgeAdmissionRefusal as fn, contentAddress as fr, bindReusableExecutorExecutionId as ft, upstreamUnavailableSignal as g, abortError$2 as ga, attestRuntimeOwnedScopeOwner as gi, harnessUsageIsEmpty as gn, traceContextToEnv as gr, createExecutor as gt, summarizeDriverAttempts as h, decodeHarnessUsage as ha, attestRuntimeOwnedPendingExecutor as hi, createCodexRolloutStoreReader as hn, readTraceContextFromEnv as hr, cliWorktreeExecutor as ht, bestDelivered as i, randomSuffix as ia, renderProfileMaterializationIssues as ii, claimsAuthority as in, linkAbort as ir, workerInteractiveBindingFile as it, scopeOwnerExecutorNodeContext as j, unknownExecutionBindingReceipt as ji, runBrainLoop as jn, createRuntimeStreamEventCollector as jr, replaySpawnTree as jt, recordScopeOwnerPause as k, runtimeOwnedPendingExecutorMaterialization as ki, readPromptOptions as kn, toOtelAttributes as kr, materializeTreeView as kt, DEFAULT_MAX_BARREN_REPROMPTS as l, unmeteredSpend as la, worktreeCliProfileMaterialization as li, isLiveNodeStatus as ln, captureHarnessTranscript as lr, freeSlots as lt, runDriverWithRetry as m, withBudgetResources as ma, writeAllBytes as mi, addHarnessUsage as mn, mergeTraceEnv as mr, cliInPlaceExecutor as mt, createRootHandle as n, isAbortError$2 as na, promptOnlyProfileMaterialization as ni, DEFAULT_PEER_MAIL_LIMITS as nn, RunCancellationReason as nr, attachWorker as nt, pickBestDelivered as o, stringifySafe as oa, sandboxActProfileMaterialization as oi, isPeerMailEnvelope as on, defaultRedactor as or, reconnectRetainedInteractiveRun as ot, defaultUnmetContractSteer as p, resourceTelemetry as pa, readCommittedJsonLines as pi, bridgeModelRouteRefusal as pn, createPropagatingTraceEmitter as pr, captureReusableExecutorConfig as pt, scopeRetainedOwnerResourceReader as q, notifySandboxEventObserver as qi, retainedExecutorSeamKey as qn, terminateProcessTreeAndConfirm as qr, workerTraceEnv as qt, createSupervisor as r, promptCacheTokenClasses as ra, promptResourceProfileMaterialization as ri, PEER_MAIL_WIRE_KEY as rn, abortError as rr, readWorkerInteractiveBinding as rt, runFinalizer as s, throwAbort as sa, unsupportedProfileDimensions as si, peerMailTools as sn, defaultRedactorIdentityMaterial as sr, recoverRetainedInteractiveRun as st, DEFAULT_MAX_DEPTH as t, hasCompleteCacheBreakdown as ta, promptModelProfileMaterialization as ti, AUTHORITY_MARKERS as tn, environmentGone as tr, workerInteractiveAdmissionFile as tt, DriverAttemptsExhaustedError as u, withTimeout as ua, isNoEntError as ui, isTerminalNodeStatus as un, harnessTranscriptArtifact as ur, queueOf as ut, driverExecutorFactory as v, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as va, finalizeRuntimeOwnedPendingExecutor as vi, bridgeRuntimeAttachmentsKey as vn, buildLoopOtelSpans as vr, snapshotExecutorConfig as vt, createScope as w, providerMessageText as wa, recordRuntimeOwnedDriveHarnessProviderEvidence as wi, runAgentRounds as wn, flatOtelSpan as wr, FileSpawnJournal as wt, SUBTREE_RESULT_LIMIT as x, teardownSurfaces as xa, knownMaterializationReceipt as xi, createSandboxForSpec as xn, createOpenInferenceFileExporter as xr, createSteerableSandboxSession as xt, isDriverSpec as y, armDeadlineTimer as ya, inheritRuntimeOwnedExecutorAttestation as yi, bridgeStopSignalKey as yn, buildLoopSpanNodes as yr, createWorktreeCliExecutor as yt, waitUntil as z, assertSandboxServedModel as zi, resolveAgentEnvironmentProvider as zn, removeWorktree as zr, assertValidBudget as zt };
+export { interactiveAdmissionSeamKey as $, sumSandboxUsage as $i, recoverRetainedRun as $n, controlProfileMaterialization as $r, taskToPrompt as $t, restoreScopeOwnerAcceptedExecution as A, runtimeOwnedExecutorMaterialization as Ai, acquireSandbox as An, padSpanId as Ar, insideCursorNamespace as At, bindScopeRetainedOwnerEnvironmentId as B, projectSandboxOutcome as Bi, providerAsExecutor as Bn, captureWorktreeDiff as Br, BudgetReconcileFault as Bt, beginScopeOwnerAttempt as C, teardownExecutor as Ca, knownExecutionBindingReceipt as Ci, TERMINAL_DECISIONS as Cn, buildRuntimeEventOtelSpans as Cr, FileResultBlobStore as Ct, meterRuntimeOwnedProviderAttempt as D, providerMessageText as Da, recordRuntimeOwnedDriveHarnessProviderEvidence as Di, runAgentRounds as Dn, flatOtelSpan as Dr, SpawnEventIndex as Dt, meterRuntimeOwnedAccounting as E, promptOptionsFromAgentTurnInput as Ea, providerAttemptEvidence as Ei, isTerminalDecision as En, exportEvalRuns as Er, InMemorySpawnJournal as Et, isWaitOutcome as F, unknownMaterializationReceipt as Fi, canonicalObservedModelParts as Fn, sanitizeAgentRuntimeEvent as Fr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Ft, scopeRetainedOwnerContext as G, createSandboxUsageLedger as Gi, unavailableSignalOfFailure as Gn, harnessInvocation as Gr, newUsageTotals as Gt, consumeScopeRetainedOwnerResult as H, assertSandboxServedModel as Hi, resolveAgentEnvironmentProvider as Hn, removeWorktree as Hr, assertValidBudget as Ht, pollFor as I, executableAgentProfileSnapshot as Ii, observedModelMatchesDeclared as In, sanitizeKnowledgeReadinessReport as Ir, captureWorkerTraceEvidence as It, scopeRetainedOwnerResult as J, mapSandboxEvent as Ji, sandboxSessionTraceSource as Jn, parseCodexTokenUsage as Jr, WORKER_TRACE_PROPAGATION as Jt, scopeRetainedOwnerPriorSpend as K, extractLlmCallEvent as Ki, createPushTraceSource as Kn, harnessSupportsReasoningEffort as Kr, spendFromUsageEvents as Kt, timerAt as L, executableAgentSpecSnapshot as Li, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Ln, sanitizeRuntimeStreamEvent as Lr, isTraceAnalysisStore as Lt, settledToIteration as M, runtimeOwnedPendingExecutorMaterialization as Mi, readPromptOptions as Mn, toOtelAttributes as Mr, materializeTreeView as Mt, createWorkerSlots as N, runtimeOwnedScopeOwnerRuntime as Ni, routerBrain as Nn, createRuntimeEventCollector as Nr, pendingWaits as Nt, recordScopeOwnerMaterialization as O, runtimeOwnedDriveHarnessProviderEvidence as Oi, createSandboxLineage as On, generateSpanId as Or, assertContentAddress as Ot, createWaitProbes as P, unknownExecutionBindingReceipt as Pi, runBrainLoop as Pn, createRuntimeStreamEventCollector as Pr, replaySpawnTree as Pt, resolveSpawnResourcePaths as Q, sandboxProgressEvents as Qi, reconnectRetainedRun as Qn, assertProfileMaterialization as Qr, workerTraceSeamKey as Qt, validateWaitSpec as R, detachedFrozen as Ri, LEAF_CONTINUATION_TASK as Rn, runSettledCommand as Rr, parseWorkerToolTraceArtifact as Rt, assertRecursiveReservationPolicy as S, armDeadlineTimer as Sa, inheritRuntimeOwnedExecutorAttestation as Si, bridgeStopSignalKey as Sn, buildLoopSpanNodes as Sr, createInPlaceCliExecutor as St, deriveNodeExecutionIdentity as T, promptFromAgentTurnInput as Ta, newExecutionAttemptId as Ti, defaultSelectWinner as Tn, createOtelExporter as Tr, InMemoryResultBlobStore as Tt, prepareScopeRetainedOwnerTask as U, canonicalStreamEventFromSandboxEvent as Ui, sandboxClientAsProvider as Un, DEFAULT_LOCAL_HARNESS as Ur, createBudgetPool as Ut, bindScopeRetainedOwnerProvider as V, readSandboxOutcome as Vi, providerAsSandboxClient as Vn, createWorktree as Vr, ReservationWaitRefused as Vt, reconcileScopeRetainedOwnerEnvironment as W, createSandboxToolPartState as Wi, unavailablePauseMs as Wn, LOCAL_HARNESSES as Wr, meterUsageEvent as Wt, environmentReader as X, notifySandboxEventObserver as Xi, retainedExecutorSeamKey as Xn, terminateProcessTreeAndConfirm as Xr, workerTraceEnv as Xt, SPAWN_RESOURCE_PATH_MAX_BYTES as Y, mapSandboxToolEvent as Yi, registerRetainedExecutorPreparation as Yn, CodexExecutionDiagnosticError as Yr, readWorkerTraceContext as Yt, hostDirectoryReader as Z, sandboxEventServedBackend as Zi, errMessage as Zn, AGENT_PROFILE_MATERIALIZATION_AXES as Zr, workerTraceHeaders as Zt, driverChild as _, withBudgetResources as _a, writeAllBytes as _i, addHarnessUsage as _n, mergeTraceEnv as _r, createExecutorRegistry as _t, collectDelivered as a, isAbortError$2 as aa, promptOnlyProfileMaterialization as ai, DEFAULT_PEER_MAIL_LIMITS as an, RunCancellationReason as ar, workerInteractiveBindingsDir as at, withDriverExecutor as b, awaitAbortable$1 as ba, authoredProfileDigest as bi, readCodexRolloutSession as bn, INTELLIGENCE_WIRE_VERSION as br, DEFAULT_SANDBOX_STEERING_MAX_TURNS as bt, runTree as c, sleep as ca, renderUnsupported as ci, createPeerMailbox as cn, runAbortable as cr, startRetainedInteractiveRun as ct, HarnessTurnFailedError as d, throwIfAborted as da, validateProfileMaterialization as di, peerMailVerbNames as dn, resolveRedactor as dr, rollingDispatch as dt, addSpend as ea, defineProfileMaterializationContract as ei, DEFAULT_STALL_AFTER_MS as en, startRetainedRun as er, readWorkerInteractiveAdmissions as et, classifyDriverFailure as f, unmeteredSpend as fa, worktreeCliProfileMaterialization as fi, isLiveNodeStatus as fn, captureHarnessTranscript as fr, bindReusableExecutorExecutionId as ft, upstreamUnavailableSignal as g, resourceTelemetry as ga, readCommittedJsonLines as gi, bridgeModelRouteRefusal as gn, createPropagatingTraceEmitter as gr, createExecutor as gt, summarizeDriverAttempts as h, addResourceSpend as ha, prepareJsonlAppend as hi, bridgeAdmissionRefusal as hn, contentAddress as hr, cliWorktreeExecutor as ht, bestDelivered as i, hasCompleteCacheBreakdown as ia, promptModelProfileMaterialization as ii, AUTHORITY_MARKERS as in, environmentGone as ir, workerInteractiveBindingFile as it, scopeOwnerExecutorNodeContext as j, runtimeOwnedExecutorProviderEvidence as ji, assertBoxlessPromptOptions as jn, padTraceId as jr, loadSpawnForest as jt, recordScopeOwnerPause as k, runtimeOwnedExecutorExecutionBinding as ki, probeSandboxCapabilities as kn, loopEventToOtelSpan as kr, encodeResultBlob as kt, DEFAULT_MAX_BARREN_REPROMPTS as l, stringifySafe as la, sandboxActProfileMaterialization as li, isPeerMailEnvelope as ln, defaultRedactor as lr, freeSlots as lt, runDriverWithRetry as m, zeroSpend as ma, parseCommittedJsonLines as mi, executorFailure as mn, persistHarnessTranscript as mr, cliInPlaceExecutor as mt, createRootHandle as n, cloneSpend as na, profileMaterializationAxes$1 as ni, readWorkerProgress as nn, retainedCreateMaterial as nr, attachWorker as nt, pickBestDelivered as o, promptCacheTokenClasses as oa, promptResourceProfileMaterialization as oi, PEER_MAIL_WIRE_KEY as on, abortError as or, reconnectRetainedInteractiveRun as ot, defaultUnmetContractSteer as p, withTimeout as pa, isNoEntError as pi, isTerminalNodeStatus as pn, harnessTranscriptArtifact as pr, captureReusableExecutorConfig as pt, scopeRetainedOwnerResourceReader as q, isSandboxTerminalEvent as qi, decodeToolPart as qn, localHarnessExecutable as qr, spendFromUsageTotals as qt, createSupervisor as r, deleteBoxSafe as ra, promptControlProfileMaterialization as ri, createInbox as rn, destroyInteractiveEnvironment as rr, readWorkerInteractiveBinding as rt, runFinalizer as s, randomSuffix as sa, renderProfileMaterializationIssues as si, claimsAuthority as sn, linkAbort as sr, recoverRetainedInteractiveRun as st, DEFAULT_MAX_DEPTH as t, chargedTokens as ta, fullProfileMaterialization as ti, createActivityLog as tn, startRetainedRunInEnvironment as tr, workerInteractiveAdmissionFile as tt, DriverAttemptsExhaustedError as u, throwAbort as ua, unsupportedProfileDimensions as ui, peerMailTools as un, defaultRedactorIdentityMaterial as ur, queueOf as ut, driverExecutorFactory as v, decodeHarnessUsage as va, attestRuntimeOwnedPendingExecutor as vi, createCodexRolloutStoreReader as vn, readTraceContextFromEnv as vr, snapshotExecutorConfig as vt, createScope as w, teardownSurfaces as wa, knownMaterializationReceipt as wi, createSandboxForSpec as wn, createOpenInferenceFileExporter as wr, FileSpawnJournal as wt, SUBTREE_RESULT_LIMIT as x, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as xa, finalizeRuntimeOwnedPendingExecutor as xi, bridgeRuntimeAttachmentsKey as xn, buildLoopOtelSpans as xr, createSteerableSandboxSession as xt, isDriverSpec as y, abortError$2 as ya, attestRuntimeOwnedScopeOwner as yi, harnessUsageIsEmpty as yn, traceContextToEnv as yr, createWorktreeCliExecutor as yt, waitUntil as z, detachedSnapshot as zi, createAgentEnvironmentProviderRegistry as zn, runWorktreeHarness as zr, workerTraceAnalysisStore as zt };
 
-//# sourceMappingURL=supervisor-B8UMAXya.js.map
+//# sourceMappingURL=supervisor-Cvd5mf7x.js.map