@tangle-network/agent-runtime 0.277.0 → 0.280.0

package/dist/{supervisor-CjNbOcLO.js → supervisor-BXXjVCbW.js}

@@ -3,7 +3,7 @@ import { a as concreteProfileModel, c as profileModelExecutionSettings, d as age
 import { i as verifyAgentCandidateWorkspaceArchive, x as verifyWorkspaceSnapshotArtifacts } from "./workspace-archive-C9lgf77y.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
-import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
+import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, WorkspaceRequestSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessSystemPromptIntents, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceCwdPathForBase } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced, isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -5839,71 +5839,48 @@ function generateSpanId() {
 	else for (let i = 0; i < 8; i++) bytes[i] = Math.floor(Math.random() * 256);
 	return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
-/** Wire version the eval-runs ingest enforces (X-Tangle-Wire-Version + body). */
-const INTELLIGENCE_WIRE_VERSION = "2026-05-26.v1";
-const DEFAULT_INTELLIGENCE_BASE = "https://intelligence.tangle.tools";
+//#endregion
+//#region src/redact.ts
 /**
-* Ship self-improvement eval-run events to Tangle Intelligence. Unlike the
-* best-effort span exporter, this RESOLVES with the ingest verdict (accepted /
-* rejected per event) so a consumer's loop can assert its provenance landed.
-* Success requires a complete, valid acknowledgement accepting every event.
-* Throws on a missing key, network failure, or unreadable/inconsistent acknowledgement.
+* Redaction for values that may leave the Runtime process. The built-in
+* redactor is agent-eval's redaction core (`@tangle-network/agent-eval/traces`,
+* default profile): credentials found by field name or value shape are
+* replaced whole, email, card, SSN and phone values in place, and token counts
+* such as `inputTokens` or `max_tokens` are kept. A customer with
+* domain-specific PII supplies their own `redact` hook.
+*
+* This is narrower than `src/sanitize.ts`, which drops fields of the runtime's
+* *event envelope* unless the caller opts in: here the value is opaque customer
+* payload, so the scrub is value-shaped, not schema-shaped.
+*
+* @experimental
 */
-async function exportEvalRuns(events, config) {
-	if (events.length === 0) return {
-		ok: true,
-		status: 0,
-		accepted: 0,
-		rejected: []
-	};
-	const apiKey = config?.apiKey ?? (typeof process !== "undefined" ? process.env.TANGLE_API_KEY : void 0);
-	if (!apiKey?.trim()) throw new Error("exportEvalRuns: apiKey required (pass config.apiKey or set TANGLE_API_KEY)");
-	const url = `${(config?.base ?? (typeof process !== "undefined" ? process.env.TANGLE_INTELLIGENCE_URL : void 0) ?? DEFAULT_INTELLIGENCE_BASE).replace(/\/+$/, "")}/v1/ingest/eval-runs`;
-	const count = events.length;
-	const res = await fetch(url, {
-		method: "POST",
-		headers: {
-			"content-type": "application/json",
-			authorization: `Bearer ${apiKey}`,
-			"X-Tangle-Wire-Version": INTELLIGENCE_WIRE_VERSION,
-			...config?.idempotencyKey ? { "Idempotency-Key": config.idempotencyKey } : {}
-		},
-		body: JSON.stringify({
-			wireVersion: INTELLIGENCE_WIRE_VERSION,
-			events
-		})
-	});
-	const invalid = (reason) => {
-		throw new Error(`exportEvalRuns: ${reason} (HTTP ${res.status})`);
-	};
-	let parsed;
-	try {
-		parsed = await res.json();
-	} catch {
-		return invalid("Unreadable eval-runs acknowledgement");
-	}
-	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return invalid("Invalid eval-runs acknowledgement");
-	const { accepted, rejected } = parsed;
-	if (!Number.isSafeInteger(accepted) || accepted < 0 || accepted > count || !Array.isArray(rejected)) return invalid("Invalid eval-runs acknowledgement counts");
-	const indices = /* @__PURE__ */ new Set();
-	const validated = [];
-	for (const item of rejected) {
-		if (item === null || typeof item !== "object" || Array.isArray(item) || !Number.isSafeInteger(item.index) || item.index < 0 || item.index >= count || indices.has(item.index) || typeof item.reason !== "string" || !item.reason.trim()) return invalid("Invalid eval-runs acknowledgement rejection");
-		indices.add(item.index);
-		validated.push({
-			index: item.index,
-			reason: item.reason
-		});
-	}
-	if (accepted + validated.length !== count) return invalid("Incomplete eval-runs acknowledgement");
-	if (!res.ok && accepted !== 0) return invalid("Failed HTTP response claimed accepted eval-runs");
+/**
+* The built-in redactor. Cycle-safe, depth-bounded and total: it never throws
+* on customer input and never mutates it.
+*/
+function defaultRedactor(value) {
+	return redact(value).value;
+}
+/** Stable identity input for saved work that depends on built-in redaction behavior. */
+function defaultRedactorIdentityMaterial() {
 	return {
-		ok: res.ok && accepted === count && validated.length === 0,
-		status: res.status,
-		accepted,
-		rejected: validated
+		core: "@tangle-network/agent-eval/traces redact",
+		profile: "default",
+		version: REDACTION_VERSION$1
 	};
 }
+/**
+* Resolve the redactor a client uses. A caller-supplied hook handles
+* domain-specific values first, then the built-in scrubber still removes
+* credentials and personal data. Returning `false` is the explicit opt-out for
+* already-reviewed public values.
+*/
+function resolveRedactor(redact) {
+	if (redact === false) return (value) => value;
+	if (!redact) return defaultRedactor;
+	return (value) => defaultRedactor(redact(value));
+}
 //#endregion
 //#region src/mcp/trace-propagation.ts
 /**
@@ -5970,6 +5947,7 @@ function readTraceContextFromEnv(env = process.env) {
 */
 function createPropagatingTraceEmitter(ctx) {
 	const exporter = createOtelExporter();
+	const redactor = resolveRedactor(void 0);
 	const buffers = /* @__PURE__ */ new Map();
 	return {
 		emitter: { emit(event) {
@@ -5980,7 +5958,7 @@ function createPropagatingTraceEmitter(ctx) {
 			if (event.kind === "loop.ended") {
 				const events = buffers.get(event.runId) ?? [event];
 				buffers.delete(event.runId);
-				for (const span of buildLoopOtelSpans(events, ctx.traceId, ctx.parentSpanId)) exporter.exportSpan(ctx.unpropagated === true ? {
+				for (const span of buildLoopOtelSpans(events, ctx.traceId, ctx.parentSpanId, redactor)) exporter.exportSpan(ctx.unpropagated === true ? {
 					...span,
 					attributes: [...span.attributes ?? [], {
 						key: "tangle.trace.unpropagated",
@@ -6621,48 +6599,6 @@ function publicCreateOptions(create) {
 	};
 }
 //#endregion
-//#region src/redact.ts
-/**
-* Redaction for values that may leave the Runtime process. The built-in
-* redactor is agent-eval's redaction core (`@tangle-network/agent-eval/traces`,
-* default profile): credentials found by field name or value shape are
-* replaced whole, email, card, SSN and phone values in place, and token counts
-* such as `inputTokens` or `max_tokens` are kept. A customer with
-* domain-specific PII supplies their own `redact` hook.
-*
-* This is narrower than `src/sanitize.ts`, which drops fields of the runtime's
-* *event envelope* unless the caller opts in: here the value is opaque customer
-* payload, so the scrub is value-shaped, not schema-shaped.
-*
-* @experimental
-*/
-/**
-* The built-in redactor. Cycle-safe, depth-bounded and total: it never throws
-* on customer input and never mutates it.
-*/
-function defaultRedactor(value) {
-	return redact(value).value;
-}
-/** Stable identity input for saved work that depends on built-in redaction behavior. */
-function defaultRedactorIdentityMaterial() {
-	return {
-		core: "@tangle-network/agent-eval/traces redact",
-		profile: "default",
-		version: REDACTION_VERSION$1
-	};
-}
-/**
-* Resolve the redactor a client uses. A caller-supplied hook handles
-* domain-specific values first, then the built-in scrubber still removes
-* credentials and personal data. Returning `false` is the explicit opt-out for
-* already-reviewed public values.
-*/
-function resolveRedactor(redact) {
-	if (redact === false) return (value) => value;
-	if (!redact) return defaultRedactor;
-	return (value) => defaultRedactor(redact(value));
-}
-//#endregion
 //#region src/runtime/supervise/abortable.ts
 /** Provenance of an explicit cancellation, preserved through every abort link. */
 var RunCancellationReason = class extends Error {
@@ -8331,6 +8267,44 @@ function unavailablePauseMs(consecutive, policy = {}) {
 	return Math.min(ceiling, first * 2 ** Math.max(0, consecutive - 1));
 }
 //#endregion
+//#region src/runtime/supervise/workspace-checkpoint.ts
+/** Workspace-relative path of the marker Runtime writes before every checkpoint. */
+const WORKSPACE_CHECKPOINT_MARKER_PATH = ".agent-runtime-checkpoint";
+/** Bound on one checkpoint: environment lookup, marker write, and the provider operation. */
+const WORKSPACE_CHECKPOINT_TIMEOUT_MS = 12e4;
+/** Write the marker. False when the environment cannot take it, so no restore can be verified. */
+async function writeWorkspaceMarker(environment, marker, signal) {
+	if (typeof environment.write !== "function") return false;
+	try {
+		await environment.write(marker.path, marker.content, { signal });
+		return true;
+	} catch {
+		return false;
+	}
+}
+/** Read the marker back from a restored environment and compare it byte for byte. */
+async function verifyWorkspaceMarker(environment, marker, signal) {
+	if (marker === void 0) return {
+		verified: false,
+		detail: "the checkpoint has no marker: the source could not take one"
+	};
+	if (typeof environment.read !== "function") return {
+		verified: false,
+		detail: "the restored environment does not expose read"
+	};
+	try {
+		return await environment.read(marker.path, { signal }) === marker.content ? { verified: true } : {
+			verified: false,
+			detail: "the marker in the restored environment differs from the checkpoint"
+		};
+	} catch (error) {
+		return {
+			verified: false,
+			detail: `the marker could not be read: ${error instanceof Error ? error.message : String(error)}`.slice(0, 500)
+		};
+	}
+}
+//#endregion
 //#region src/runtime/environment-provider.ts
 var ValidationError = class extends Error {
 	constructor(message, options) {
@@ -9263,9 +9237,14 @@ async function providerExecutionSource(args, turn, signal) {
 	const priorSession = retention.priorSession;
 	const environmentKey = priorSession?.idempotencyKey ?? `runtime:${args.executionId}`;
 	const turnId = `${args.executionId}:turn:0`;
+	const restore = priorSession === void 0 ? retention.restoreWorkspace : void 0;
 	const material = {
 		environment: {
 			...args.options.defaults,
+			...restore === void 0 ? {} : { workspace: {
+				...args.options.defaults?.workspace,
+				checkpoint: restore.checkpoint
+			} },
 			profile: args.createProfile,
 			idempotencyKey: environmentKey,
 			signal
@@ -9346,6 +9325,14 @@ async function providerExecutionSource(args, turn, signal) {
 		args.onPending(true);
 		const environment = await args.provider.get?.(handle.controlRef.environmentId);
 		if (!environment) throw new Error("retained provider environment is unavailable");
+		if (restore !== void 0 && !args.recovering) {
+			const found = await verifyWorkspaceMarker(environment, restore.marker, signal);
+			await retention.onWorkspaceRestored?.({
+				environmentId: environment.id,
+				checkpoint: restore.checkpoint,
+				...found
+			});
+		}
 		const session = exactSession(environment, handle.controlRef).session;
 		async function* events() {
 			let observationFailure;
@@ -17549,6 +17536,10 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"teardown-pending",
 	"teardown-confirmed",
 	"environment-teardown",
+	"workspace-checkpoint-requested",
+	"workspace-checkpoint",
+	"workspace-checkpoint-cleanup",
+	"workspace-restored",
 	"trace-unpropagated",
 	"paused",
 	"node-inputs-resolved",
@@ -17620,6 +17611,10 @@ async function replaySpawnTree(journal, blobs, root) {
 		if (ev.kind === "teardown-unconfirmed") continue;
 		if (ev.kind === "teardown-pending" || ev.kind === "teardown-confirmed") continue;
 		if (ev.kind === "environment-teardown") continue;
+		if (ev.kind === "workspace-checkpoint-requested") continue;
+		if (ev.kind === "workspace-checkpoint") continue;
+		if (ev.kind === "workspace-checkpoint-cleanup") continue;
+		if (ev.kind === "workspace-restored") continue;
 		if (ev.kind === "trace-unpropagated") continue;
 		if (ev.kind === "paused") continue;
 		if (ev.kind === "node-inputs-resolved") continue;
@@ -22201,6 +22196,23 @@ function registerScopeRetainedOwner(scope, args) {
 			},
 			preserveEnvironment: true,
 			admissions,
+			get restoreWorkspace() {
+				return state.restore;
+			},
+			onWorkspaceRestored: async (receipt) => {
+				await args.journal.appendEvent(args.rootId, {
+					kind: "workspace-restored",
+					id: args.nodeId,
+					provider: receipt.checkpoint.provider,
+					environmentId: receipt.environmentId,
+					checkpointId: receipt.checkpoint.checkpointId,
+					sourceEnvironmentId: receipt.checkpoint.source.environmentId,
+					verified: receipt.verified,
+					...receipt.detail === void 0 ? {} : { detail: receipt.detail },
+					seq: state.nextSequence(),
+					at: new Date(args.now()).toISOString()
+				});
+			},
 			onAdmission: async (admission) => {
 				scope.signal.throwIfAborted();
 				const prior = admissions.find((record) => record.phase === admission.phase);
@@ -22335,6 +22347,222 @@ function scopeRetainedOwnerResourceReader(scope) {
 		}
 	};
 }
+/**
+* Note that the owner's manager made a coordination call, and checkpoint its workspace when the
+* last checkpoint is older than {@link WORKSPACE_CHECKPOINT_MIN_INTERVAL_MS}.
+*
+* A coordination call is where a manager commits work: it spawns, waits for, reads, or submits.
+* The checkpoint runs in the background and never delays the call. A failed checkpoint leaves the
+* previous one as the restore point; a provider or environment that cannot checkpoint stops the
+* attempts for this owner.
+*/
+function noteScopeRetainedOwnerCoordination(scope) {
+	const state = owners.get(scope);
+	if (state?.provider === void 0 || state.checkpointsUnavailable !== void 0) return;
+	if (state.checkpointing !== void 0 || scope.signal.aborted) return;
+	const now = state.args.now();
+	if (state.lastCheckpointAt !== void 0 && now - state.lastCheckpointAt < 6e4) return;
+	state.lastCheckpointAt = now;
+	state.checkpointing = checkpointOwnerWorkspace(scope, state).catch(() => void 0).finally(() => {
+		delete state.checkpointing;
+	});
+}
+async function checkpointOwnerWorkspace(scope, state) {
+	const { provider, args } = state;
+	if (provider === void 0) return;
+	if (!provider.get) {
+		state.checkpointsUnavailable = `provider ${provider.name} cannot reconstruct an environment`;
+		return;
+	}
+	if ((await provider.capabilities()).create?.workspaceCheckpoint !== true) {
+		state.checkpointsUnavailable = `provider ${provider.name} cannot create an environment from a checkpoint`;
+		return;
+	}
+	const dispatched = [...state.admissions].reverse().find((admission) => admission.phase === "dispatched");
+	if (dispatched?.phase !== "dispatched") return;
+	const source = dispatched.controlRef;
+	const signal = AbortSignal.any([scope.signal, AbortSignal.timeout(WORKSPACE_CHECKPOINT_TIMEOUT_MS)]);
+	const get = provider.get.bind(provider);
+	const environment = await runAbortable(() => get(source.environmentId), signal, "retained owner checkpoint timed out");
+	if (environment === null || environment.id !== source.environmentId || environment.provider !== provider.name) return;
+	const branching = environment.workspaceBranching;
+	if (branching === void 0) {
+		state.checkpointsUnavailable = `environment ${environment.id} offers no durable checkpoint`;
+		return;
+	}
+	const seq = state.nextSequence();
+	const at = new Date(args.now()).toISOString();
+	const name = `owner-checkpoint-${seq}`;
+	const marker = {
+		path: WORKSPACE_CHECKPOINT_MARKER_PATH,
+		content: `${JSON.stringify({
+			node: args.nodeId,
+			checkpoint: name,
+			at
+		})}\n`
+	};
+	const marked = await writeWorkspaceMarker(environment, marker, signal);
+	const material = {
+		source,
+		name
+	};
+	const request = {
+		...material,
+		idempotencyKey: `${args.nodeId}:workspace-checkpoint:${seq}`,
+		requestDigest: workspaceCheckpointRequestDigest(material)
+	};
+	state.checkpointHandles ??= /* @__PURE__ */ new Map();
+	state.checkpointHandles.set(environment.id, branching);
+	await args.journal.appendEvent(args.rootId, {
+		kind: "workspace-checkpoint-requested",
+		id: args.nodeId,
+		provider: provider.name,
+		environmentId: environment.id,
+		request,
+		...marked ? { marker } : {},
+		seq,
+		at
+	});
+	const result = await runAbortable(() => branching.checkpoint(request, { signal }), signal, "retained owner checkpoint timed out");
+	if (result.status !== "created" && result.status !== "replayed") return;
+	if (!workspaceCheckpointResultMatchesRequest(request, result)) return;
+	scope.signal.throwIfAborted();
+	await args.journal.appendEvent(args.rootId, {
+		kind: "workspace-checkpoint",
+		id: args.nodeId,
+		provider: provider.name,
+		environmentId: environment.id,
+		checkpoint: result.checkpoint,
+		...marked ? { marker } : {},
+		seq: state.nextSequence(),
+		at
+	});
+	await deleteCheckpoints(state, branching, pendingCheckpoints(await args.journal.loadTree(args.rootId) ?? [], state).filter((event) => event.environmentId === environment.id).slice(0, -2), signal);
+}
+/** Reconstruct authority for this source only; a replacement cannot own its snapshots. */
+async function checkpointHandle(state, sourceEnvironmentId, signal) {
+	const cached = state.checkpointHandles?.get(sourceEnvironmentId);
+	if (cached !== void 0) return cached;
+	const provider = state.provider;
+	if (provider === void 0) return void 0;
+	try {
+		const branching = await runAbortable(async () => {
+			if (provider.workspaceBranching) return await provider.workspaceBranching.forEnvironment(sourceEnvironmentId, { signal }) ?? void 0;
+			const source = await provider.get?.(sourceEnvironmentId);
+			return source?.id === sourceEnvironmentId && source.provider === provider.name ? source.workspaceBranching : void 0;
+		}, signal, "retained owner checkpoint handle lookup timed out");
+		if (branching !== void 0) {
+			state.checkpointHandles ??= /* @__PURE__ */ new Map();
+			state.checkpointHandles.set(sourceEnvironmentId, branching);
+		}
+		return branching;
+	} catch {
+		return;
+	}
+}
+/** An aborted observation cannot prove that the provider never created a snapshot. */
+async function reconcileCheckpointRequests(state, events) {
+	const operationKey = (operation) => JSON.stringify([operation.idempotencyKey, operation.requestDigest]);
+	const resolved = new Set(events.flatMap((event) => event.kind === "workspace-checkpoint" && event.id === state.args.nodeId && event.provider === state.provider?.name ? [operationKey(event.checkpoint)] : []));
+	const pending = events.filter((event) => event.kind === "workspace-checkpoint-requested" && event.id === state.args.nodeId && event.provider === state.provider?.name && !resolved.has(operationKey(event.request)));
+	const unconfirmed = [];
+	for (const event of pending) {
+		const signal = AbortSignal.timeout(3e4);
+		try {
+			const branching = await checkpointHandle(state, event.environmentId, signal);
+			if (branching === void 0) throw new Error("source-scoped checkpoint handle unavailable");
+			const result = await runAbortable(() => branching.lookupCheckpoint({
+				idempotencyKey: event.request.idempotencyKey,
+				requestDigest: event.request.requestDigest
+			}, { signal }), signal, "retained owner checkpoint lookup timed out");
+			if (result.status !== "found" || !workspaceCheckpointResultMatchesRequest(event.request, result)) throw new Error("checkpoint operation outcome is unresolved");
+			const recovered = {
+				kind: "workspace-checkpoint",
+				id: event.id,
+				provider: event.provider,
+				environmentId: event.environmentId,
+				checkpoint: result.checkpoint,
+				...event.marker === void 0 ? {} : { marker: event.marker },
+				seq: state.nextSequence(),
+				at: event.at
+			};
+			await state.args.journal.appendEvent(state.args.rootId, recovered);
+			events.push(recovered);
+		} catch {
+			unconfirmed.push(event);
+		}
+	}
+	return unconfirmed;
+}
+function pendingCheckpoints(events, state) {
+	const confirmed = new Set(events.flatMap((event) => event.kind === "workspace-checkpoint-cleanup" && event.id === state.args.nodeId && event.provider === state.provider?.name && event.confirmed ? [JSON.stringify([event.environmentId, event.checkpointId])] : []));
+	return events.filter((event) => event.kind === "workspace-checkpoint" && event.id === state.args.nodeId && event.provider === state.provider?.name && !confirmed.has(JSON.stringify([event.environmentId, event.checkpoint.checkpointId])));
+}
+/** Only the source-scoped handle can attest deletion, including after its source is lost. */
+async function deleteCheckpoints(state, branching, checkpoints, signal) {
+	const unconfirmed = [];
+	for (const event of checkpoints) {
+		const material = {
+			kind: "checkpoint",
+			targetId: event.checkpoint.checkpointId,
+			provider: event.checkpoint.provider
+		};
+		const request = {
+			...material,
+			operationId: `${event.checkpoint.idempotencyKey}:delete`,
+			requestDigest: workspaceCleanupRequestDigest(material)
+		};
+		let confirmed = false;
+		try {
+			if (branching === void 0) throw new Error("source-scoped checkpoint handle unavailable");
+			const acknowledgement = await runAbortable(() => branching.deleteCheckpoint(request, { signal }), signal, "retained owner checkpoint cleanup timed out");
+			confirmed = workspaceCleanupAcknowledgementMatches(request, acknowledgement) && (acknowledgement.status === "deleted" || acknowledgement.status === "already_absent");
+		} catch {}
+		if (!confirmed) unconfirmed.push(event);
+		await state.args.journal.appendEvent(state.args.rootId, {
+			kind: "workspace-checkpoint-cleanup",
+			id: state.args.nodeId,
+			provider: event.provider,
+			environmentId: event.environmentId,
+			checkpointId: event.checkpoint.checkpointId,
+			confirmed,
+			seq: state.nextSequence(),
+			at: new Date(state.args.now()).toISOString()
+		});
+	}
+	return unconfirmed;
+}
+/**
+* The checkpoint a new environment of this owner starts from: the latest one journaled before
+* the invocation's input, taken from an environment the provider has since lost. Only such an
+* environment needs one; a live environment is continued, never copied.
+*/
+function restoreBefore(owned, inputIndex) {
+	const destroyed = destroyedEnvironmentIds(owned);
+	return owned.slice(0, inputIndex < 0 ? owned.length : inputIndex).filter((event) => event.kind === "workspace-checkpoint" && destroyed.has(event.environmentId)).at(-1);
+}
+async function restoreCapable(provider) {
+	if (provider === void 0) return false;
+	try {
+		return (await provider.capabilities()).create?.workspaceCheckpoint === true;
+	} catch {
+		return false;
+	}
+}
+/**
+* What the owner's next new environment will hold of the lost one, read before the drive so the
+* re-entered director is told: the checkpoint's time, or undefined when there is nothing to
+* restore.
+*/
+async function scopeRetainedOwnerRestorePoint(scope) {
+	const state = owners.get(scope);
+	if (state === void 0 || !await restoreCapable(state.provider)) return void 0;
+	const latest = restoreBefore((await state.args.journal.loadTree(state.args.rootId) ?? []).filter((event) => event.id === state.args.nodeId), -1);
+	return latest === void 0 ? void 0 : {
+		checkpointId: latest.checkpoint.checkpointId,
+		takenAt: latest.at
+	};
+}
 /** @internal Whether another owner release could still destroy what the last one left. */
 function retainedOwnerReleaseRetriable(scope) {
 	return owners.get(scope)?.releaseRetriable ?? false;
@@ -22344,7 +22572,11 @@ async function releaseScopeRetainedOwnerEnvironment(scope) {
 	const state = owners.get(scope);
 	if (!state?.provider) return [];
 	const { provider, args } = state;
-	const events = await args.journal.loadTree(args.rootId) ?? [];
+	state.checkpointsUnavailable ??= "released";
+	await state.checkpointing?.catch(() => void 0);
+	const events = [...await args.journal.loadTree(args.rootId) ?? []];
+	const requestFailures = await reconcileCheckpointRequests(state, events);
+	const pendingSources = new Set(requestFailures.map((event) => event.environmentId));
 	const released = new Set(events.flatMap((event) => event.kind === "environment-teardown" && event.id === args.nodeId && event.provider === provider.name && event.destroyed ? [event.environmentId] : []));
 	const environments = new Set(events.flatMap((event) => event.id === args.nodeId && event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission.environmentId] : []));
 	const retentionFailures = state.workspaceRetention || events.some((event) => event.kind === "execution-input" && event.id === args.nodeId && event.workspaceRetention === true) ? await ownerWorkspaceRetentionFailures(events, args.nodeId, args.blobs) : /* @__PURE__ */ new Set();
@@ -22352,12 +22584,20 @@ async function releaseScopeRetainedOwnerEnvironment(scope) {
 	const preserved = [];
 	let lastDetail;
 	let retriable = false;
+	const checkpointFailures = [];
+	const pending = pendingCheckpoints(events, state).filter((event) => !retentionFailures.has(event.environmentId));
+	for (const sourceEnvironmentId of new Set(pending.map((event) => event.environmentId))) {
+		const signal = AbortSignal.timeout(3e4);
+		const branching = await checkpointHandle(state, sourceEnvironmentId, signal);
+		checkpointFailures.push(...await deleteCheckpoints(state, branching, pending.filter((event) => event.environmentId === sourceEnvironmentId), signal));
+	}
+	for (const event of checkpointFailures) pendingSources.add(event.environmentId);
 	for (const environmentId of environments) {
 		if (released.has(environmentId)) continue;
 		let destroyed = false;
 		let detail;
-		if (retentionFailures.has(environmentId)) {
-			detail = "provider workspace retention: source preserved because the owner execution has no verified workspace receipt";
+		if (retentionFailures.has(environmentId) || pendingSources.has(environmentId)) {
+			detail = pendingSources.has(environmentId) ? "checkpoint cleanup unresolved: source preserved for exact lookup and cleanup" : "provider workspace retention: source preserved because the owner execution has no verified workspace receipt";
 			preserved.push(environmentId);
 			lastDetail = detail;
 		} else {
@@ -22400,6 +22640,19 @@ async function releaseScopeRetainedOwnerEnvironment(scope) {
 		});
 	}
 	state.releaseRetriable = retriable;
+	const checkpointTeardowns = [...checkpointFailures.map((event) => ({
+		id: args.nodeId,
+		label: "scope owner workspace checkpoint",
+		runtime: provider.name,
+		status: "done",
+		detail: `checkpoint cleanup unconfirmed: ${event.checkpoint.checkpointId} from ${event.environmentId}`
+	})), ...requestFailures.map((event) => ({
+		id: args.nodeId,
+		label: "scope owner checkpoint request",
+		runtime: provider.name,
+		status: "done",
+		detail: `checkpoint request unresolved: ${event.request.idempotencyKey} from ${event.environmentId}`
+	}))];
 	return unconfirmed.length > 0 || preserved.length > 0 ? [{
 		id: args.nodeId,
 		label: "scope owner",
@@ -22415,7 +22668,7 @@ async function releaseScopeRetainedOwnerEnvironment(scope) {
 			keptFor: "evidence"
 		})) },
 		...lastDetail === void 0 ? {} : { detail: lastDetail }
-	}] : [];
+	}, ...checkpointTeardowns] : checkpointTeardowns;
 }
 /** Group owner admissions by input and require a verified workspace receipt before deletion. */
 async function ownerWorkspaceRetentionFailures(events, nodeId, blobs) {
@@ -22584,11 +22837,26 @@ async function prepareScopeRetainedOwnerTask(scope, task) {
 	}
 	if (state.priorSession !== void 0 && destroyed.has(state.priorSession.environmentId)) delete state.priorSession;
 	state.prepared = true;
+	const capable = await restoreCapable(state.provider);
+	const restoreFor = (inputIndex) => {
+		if (!capable || state.priorSession !== void 0) return void 0;
+		const point = restoreBefore(owned, inputIndex);
+		return point === void 0 ? void 0 : {
+			checkpoint: point.checkpoint,
+			...point.marker === void 0 ? {} : { marker: point.marker }
+		};
+	};
 	if (state.taskRef !== void 0) {
 		const original = await args.blobs.get(state.taskRef);
 		if (original === void 0 || contentAddress(original) !== state.taskRef) throw new ValidationError$1("retained owner task is missing or corrupt");
+		const restore = restoreFor(owned.findIndex((event) => event.kind === "execution-input" && event.seq === state.inputSequence));
+		if (restore === void 0) delete state.restore;
+		else state.restore = restore;
 		return original;
 	}
+	const restore = restoreFor(-1);
+	if (restore === void 0) delete state.restore;
+	else state.restore = restore;
 	const snapshot = detachedSnapshot(task, "retained owner task");
 	const taskRef = contentAddress(snapshot);
 	await args.blobs.put(taskRef, snapshot);
@@ -27965,6 +28233,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { bindScopeRetainedOwnerProvider as $, detachedSnapshot as $i, providerAsExecutor as $n, runWorktreeHarness as $r, BudgetReconcileFault as $t, driverExecutorFactory as A, resourceTelemetry as Aa, readCommittedJsonLines as Ai, addHarnessUsage as An, createPropagatingTraceEmitter as Ar, snapshotExecutorConfig as At, recordScopeOwnerMaterialization as B, promptOptionsFromAgentTurnInput as Ba, providerAttemptEvidence as Bi, runAgentRounds as Bn, exportEvalRuns as Br, SpawnEventIndex as Bt, createContinuationKeeper as C, stringifySafe as Ca, sandboxActProfileMaterialization as Ci, peerMailTools as Cn, defaultRedactorIdentityMaterial as Cr, rollingDispatch as Ct, passedItems as D, withTimeout as Da, isNoEntError as Di, executorFailure as Dn, persistHarnessTranscript as Dr, cliWorktreeExecutor as Dt, failedItems as E, unmeteredSpend as Ea, worktreeCliProfileMaterialization as Ei, isTerminalNodeStatus as En, harnessTranscriptArtifact as Er, cliInPlaceExecutor as Et, beginScopeOwnerAttempt as F, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Fa, finalizeRuntimeOwnedPendingExecutor as Fi, bridgeStopSignalKey as Fn, buildLoopOtelSpans as Fr, createInPlaceCliExecutor as Ft, createWorkerSlots as G, runtimeOwnedExecutorProviderEvidence as Gi, readPromptOptions as Gn, padTraceId as Gr, materializeTreeView as Gt, restoreScopeOwnerAcceptedExecution as H, runtimeOwnedDriveHarnessProviderEvidence as Hi, probeSandboxCapabilities as Hn, generateSpanId as Hr, encodeResultBlob as Ht, createScope as I, armDeadlineTimer as Ia, inheritRuntimeOwnedExecutorAttestation as Ii, TERMINAL_DECISIONS as In, buildLoopSpanNodes as Ir, FileResultBlobStore as It, pollFor as J, unknownExecutionBindingReceipt as Ji, canonicalObservedModelParts as Jn, createRuntimeStreamEventCollector as Jr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Jt, createWaitProbes as K, runtimeOwnedPendingExecutorMaterialization as Ki, routerBrain as Kn, toOtelAttributes as Kr, pendingWaits as Kt, deriveNodeExecutionIdentity as L, teardownExecutor as La, knownExecutionBindingReceipt as Li, createSandboxForSpec as Ln, buildRuntimeEventOtelSpans as Lr, FileSpawnJournal as Lt, withDriverExecutor as M, decodeHarnessUsage as Ma, attestRuntimeOwnedPendingExecutor as Mi, harnessUsageIsEmpty as Mn, readTraceContextFromEnv as Mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Mt, SUBTREE_RESULT_LIMIT as N, abortError$2 as Na, attestRuntimeOwnedScopeOwner as Ni, readCodexRolloutSession as Nn, traceContextToEnv as Nr, createSteerableSandboxSession as Nt, verdictFromJudgeScore as O, zeroSpend as Oa, parseCommittedJsonLines as Oi, bridgeAdmissionRefusal as On, readHarnessTranscript as Or, createExecutor as Ot, assertRecursiveReservationPolicy as P, awaitAbortable$1 as Pa, authoredProfileDigest as Pi, bridgeRuntimeAttachmentsKey as Pn, INTELLIGENCE_WIRE_VERSION as Pr, createRouterTranscript as Pt, bindScopeRetainedOwnerEnvironmentId as Q, detachedFrozen as Qi, createAgentEnvironmentProviderRegistry as Qn, runSettledCommand as Qr, workerTraceAnalysisStore as Qt, meterRuntimeOwnedAccounting as R, teardownSurfaces as Ra, knownMaterializationReceipt as Ri, defaultSelectWinner as Rn, createOpenInferenceFileExporter as Rr, InMemoryResultBlobStore as Rt, composeContinuationNote as S, sleep as Sa, renderUnsupported as Si, isPeerMailEnvelope as Sn, defaultRedactor as Sr, queueOf as St, expandQuestions as T, throwIfAborted as Ta, validateProfileMaterialization as Ti, isLiveNodeStatus as Tn, captureHarnessTranscript as Tr, captureReusableExecutorConfig as Tt, scopeOwnerExecutorNodeContext as U, runtimeOwnedExecutorExecutionBinding as Ui, acquireSandbox as Un, loopEventToOtelSpan as Ur, insideCursorNamespace as Ut, recordScopeOwnerPause as V, providerMessageText as Va, recordRuntimeOwnedDriveHarnessProviderEvidence as Vi, createSandboxLineage as Vn, flatOtelSpan as Vr, assertContentAddress as Vt, settledToIteration as W, runtimeOwnedExecutorMaterialization as Wi, assertBoxlessPromptOptions as Wn, padSpanId as Wr, loadSpawnForest as Wt, validateWaitSpec as X, executableAgentProfileSnapshot as Xi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Xn, sanitizeKnowledgeReadinessReport as Xr, isTraceAnalysisStore as Xt, timerAt as Y, unknownMaterializationReceipt as Yi, observedModelMatchesDeclared as Yn, sanitizeAgentRuntimeEvent as Yr, captureWorkerTraceEvidence as Yt, waitUntil as Z, executableAgentSpecSnapshot as Zi, LEAF_CONTINUATION_TASK as Zn, sanitizeRuntimeStreamEvent as Zr, parseWorkerToolTraceArtifact as Zt, CheckUnavailableError as _, deleteBoxSafe as _a, promptControlProfileMaterialization as _i, AUTHORITY_MARKERS as _n, environmentGone as _r, workerInteractiveBindingsDir as _t, collectDelivered as a, createSandboxUsageLedger as aa, harnessInvocation as ai, spendFromUsageEvents as an, createPushTraceSource as ar, scopeRetainedOwnerResourceReader as at, bestComposite as b, promptCacheTokenClasses as ba, promptResourceProfileMaterialization as bi, claimsAuthority as bn, linkAbort as br, startRetainedInteractiveRun as bt, runTree as c, mapSandboxEvent as ca, parseCodexTokenUsage as ci, readWorkerTraceContext as cn, registerRetainedExecutorPreparation as cr, environmentReader as ct, classifyDriverFailure as d, sandboxEventServedBackend as da, AGENT_PROFILE_MATERIALIZATION_AXES as di, workerTraceSeamKey as dn, reconnectRetainedRun as dr, interactiveAdmissionSeamKey as dt, projectSandboxOutcome as ea, captureWorktreeDiff as ei, ReservationWaitRefused as en, providerAsSandboxClient as er, consumeScopeRetainedOwnerResult as et, runDriverWithRetry as f, sandboxProgressEvents as fa, assertProfileMaterialization as fi, taskToPrompt as fn, recoverRetainedRun as fr, readWorkerInteractiveAdmissions as ft, CONTINUATION_FACTS as g, cloneSpend as ga, profileMaterializationAxes$1 as gi, createInbox as gn, destroyInteractiveEnvironment as gr, workerInteractiveBindingFile as gt, CONTINUATIONS_DIR as h, chargedTokens as ha, fullProfileMaterialization as hi, readWorkerProgress as hn, retainedCreateMaterial as hr, readWorkerInteractiveBinding as ht, bestDelivered as i, createSandboxToolPartState as ia, LOCAL_HARNESSES as ii, newUsageTotals as in, unavailableSignalOfFailure as ir, scopeRetainedOwnerPriorSpend as it, isDriverSpec as j, withBudgetResources as ja, writeAllBytes as ji, createCodexRolloutStoreReader as jn, mergeTraceEnv as jr, createWorktreeCliExecutor as jt, driverChild as k, addResourceSpend as ka, prepareJsonlAppend as ki, bridgeModelRouteRefusal as kn, contentAddress as kr, createExecutorRegistry as kt, DriverAttemptsExhaustedError as l, mapSandboxToolEvent as la, CodexExecutionDiagnosticError as li, workerTraceEnv as ln, retainedExecutorSeamKey as lr, hostDirectoryReader as lt, upstreamUnavailableSignal as m, addSpend as ma, defineProfileMaterializationContract as mi, createActivityLog as mn, startRetainedRunInEnvironment as mr, attachWorker as mt, createRootHandle as n, assertSandboxServedModel as na, removeWorktree as ni, createBudgetPool as nn, sandboxClientAsProvider as nr, reconcileScopeRetainedOwnerEnvironment as nt, pickBestDelivered as o, extractLlmCallEvent as oa, harnessSupportsReasoningEffort as oi, spendFromUsageTotals as on, decodeToolPart as or, scopeRetainedOwnerResult as ot, summarizeDriverAttempts as p, sumSandboxUsage as pa, controlProfileMaterialization as pi, DEFAULT_STALL_AFTER_MS as pn, startRetainedRun as pr, workerInteractiveAdmissionFile as pt, isWaitOutcome as q, runtimeOwnedScopeOwnerRuntime as qi, runBrainLoop as qn, createRuntimeEventCollector as qr, replaySpawnTree as qt, createSupervisor as r, canonicalStreamEventFromSandboxEvent as ra, DEFAULT_LOCAL_HARNESS as ri, meterUsageEvent as rn, unavailablePauseMs as rr, scopeRetainedOwnerContext as rt, runFinalizer as s, isSandboxTerminalEvent as sa, localHarnessExecutable as si, WORKER_TRACE_PROPAGATION as sn, sandboxSessionTraceSource as sr, SPAWN_RESOURCE_PATH_MAX_BYTES as st, DEFAULT_MAX_DEPTH as t, readSandboxOutcome as ta, createWorktree as ti, assertValidBudget as tn, resolveAgentEnvironmentProvider as tr, prepareScopeRetainedOwnerTask as tt, HarnessTurnFailedError as u, notifySandboxEventObserver as ua, terminateProcessTreeAndConfirm as ui, workerTraceHeaders as un, errMessage as ur, resolveSpawnResourcePaths as ut, admitContinuationPolicy as v, hasCompleteCacheBreakdown as va, promptModelProfileMaterialization as vi, DEFAULT_PEER_MAIL_LIMITS as vn, RunCancellationReason as vr, reconnectRetainedInteractiveRun as vt, distillFindings as w, throwAbort as wa, unsupportedProfileDimensions as wi, peerMailVerbNames as wn, resolveRedactor as wr, bindReusableExecutorExecutionId as wt, checkVerdictOf as x, randomSuffix as xa, renderProfileMaterializationIssues as xi, createPeerMailbox as xn, runAbortable as xr, freeSlots as xt, admitFinding as y, isAbortError$2 as ya, promptOnlyProfileMaterialization as yi, PEER_MAIL_WIRE_KEY as yn, abortError as yr, recoverRetainedInteractiveRun as yt, meterRuntimeOwnedProviderAttempt as z, promptFromAgentTurnInput as za, newExecutionAttemptId as zi, isTerminalDecision as zn, createOtelExporter as zr, InMemorySpawnJournal as zt };
+export { bindScopeRetainedOwnerProvider as $, detachedSnapshot as $i, LEAF_CONTINUATION_TASK as $n, runWorktreeHarness as $r, parseWorkerToolTraceArtifact as $t, driverExecutorFactory as A, resourceTelemetry as Aa, readCommittedJsonLines as Ai, bridgeAdmissionRefusal as An, mergeTraceEnv as Ar, createExecutor as At, recordScopeOwnerMaterialization as B, promptOptionsFromAgentTurnInput as Ba, providerAttemptEvidence as Bi, defaultSelectWinner as Bn, createOtelExporter as Br, InMemoryResultBlobStore as Bt, createContinuationKeeper as C, stringifySafe as Ca, sandboxActProfileMaterialization as Ci, createPeerMailbox as Cn, runAbortable as Cr, freeSlots as Ct, passedItems as D, withTimeout as Da, isNoEntError as Di, isLiveNodeStatus as Dn, readHarnessTranscript as Dr, captureReusableExecutorConfig as Dt, failedItems as E, unmeteredSpend as Ea, worktreeCliProfileMaterialization as Ei, peerMailVerbNames as En, persistHarnessTranscript as Er, bindReusableExecutorExecutionId as Et, beginScopeOwnerAttempt as F, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Fa, finalizeRuntimeOwnedPendingExecutor as Fi, readCodexRolloutSession as Fn, resolveRedactor as Fr, createSteerableSandboxSession as Ft, createWorkerSlots as G, runtimeOwnedExecutorProviderEvidence as Gi, acquireSandbox as Gn, padTraceId as Gr, insideCursorNamespace as Gt, restoreScopeOwnerAcceptedExecution as H, runtimeOwnedDriveHarnessProviderEvidence as Hi, runAgentRounds as Hn, generateSpanId as Hr, SpawnEventIndex as Ht, createScope as I, armDeadlineTimer as Ia, inheritRuntimeOwnedExecutorAttestation as Ii, bridgeRuntimeAttachmentsKey as In, buildLoopOtelSpans as Ir, createRouterTranscript as It, pollFor as J, unknownExecutionBindingReceipt as Ji, routerBrain as Jn, createRuntimeStreamEventCollector as Jr, pendingWaits as Jt, createWaitProbes as K, runtimeOwnedPendingExecutorMaterialization as Ki, assertBoxlessPromptOptions as Kn, toOtelAttributes as Kr, loadSpawnForest as Kt, deriveNodeExecutionIdentity as L, teardownExecutor as La, knownExecutionBindingReceipt as Li, bridgeStopSignalKey as Ln, buildLoopSpanNodes as Lr, createInPlaceCliExecutor as Lt, withDriverExecutor as M, decodeHarnessUsage as Ma, attestRuntimeOwnedPendingExecutor as Mi, addHarnessUsage as Mn, traceContextToEnv as Mr, snapshotExecutorConfig as Mt, SUBTREE_RESULT_LIMIT as N, abortError$2 as Na, attestRuntimeOwnedScopeOwner as Ni, createCodexRolloutStoreReader as Nn, defaultRedactor as Nr, createWorktreeCliExecutor as Nt, verdictFromJudgeScore as O, zeroSpend as Oa, parseCommittedJsonLines as Oi, isTerminalNodeStatus as On, contentAddress as Or, cliInPlaceExecutor as Ot, assertRecursiveReservationPolicy as P, awaitAbortable$1 as Pa, authoredProfileDigest as Pi, harnessUsageIsEmpty as Pn, defaultRedactorIdentityMaterial as Pr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Pt, bindScopeRetainedOwnerEnvironmentId as Q, detachedFrozen as Qi, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Qn, runSettledCommand as Qr, isTraceAnalysisStore as Qt, meterRuntimeOwnedAccounting as R, teardownSurfaces as Ra, knownMaterializationReceipt as Ri, TERMINAL_DECISIONS as Rn, buildRuntimeEventOtelSpans as Rr, FileResultBlobStore as Rt, composeContinuationNote as S, sleep as Sa, renderUnsupported as Si, claimsAuthority as Sn, linkAbort as Sr, startRetainedInteractiveRun as St, expandQuestions as T, throwIfAborted as Ta, validateProfileMaterialization as Ti, peerMailTools as Tn, harnessTranscriptArtifact as Tr, rollingDispatch as Tt, scopeOwnerExecutorNodeContext as U, runtimeOwnedExecutorExecutionBinding as Ui, createSandboxLineage as Un, loopEventToOtelSpan as Ur, assertContentAddress as Ut, recordScopeOwnerPause as V, providerMessageText as Va, recordRuntimeOwnedDriveHarnessProviderEvidence as Vi, isTerminalDecision as Vn, flatOtelSpan as Vr, InMemorySpawnJournal as Vt, settledToIteration as W, runtimeOwnedExecutorMaterialization as Wi, probeSandboxCapabilities as Wn, padSpanId as Wr, encodeResultBlob as Wt, validateWaitSpec as X, executableAgentProfileSnapshot as Xi, canonicalObservedModelParts as Xn, sanitizeKnowledgeReadinessReport as Xr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xt, timerAt as Y, unknownMaterializationReceipt as Yi, runBrainLoop as Yn, sanitizeAgentRuntimeEvent as Yr, replaySpawnTree as Yt, waitUntil as Z, executableAgentSpecSnapshot as Zi, observedModelMatchesDeclared as Zn, sanitizeRuntimeStreamEvent as Zr, captureWorkerTraceEvidence as Zt, CheckUnavailableError as _, deleteBoxSafe as _a, promptControlProfileMaterialization as _i, readWorkerProgress as _n, retainedCreateMaterial as _r, readWorkerInteractiveBinding as _t, collectDelivered as a, createSandboxUsageLedger as aa, harnessInvocation as ai, meterUsageEvent as an, unavailablePauseMs as ar, scopeRetainedOwnerPriorSpend as at, bestComposite as b, promptCacheTokenClasses as ba, promptResourceProfileMaterialization as bi, DEFAULT_PEER_MAIL_LIMITS as bn, RunCancellationReason as br, reconnectRetainedInteractiveRun as bt, runTree as c, mapSandboxEvent as ca, parseCodexTokenUsage as ci, spendFromUsageTotals as cn, decodeToolPart as cr, scopeRetainedOwnerResult as ct, classifyDriverFailure as d, sandboxEventServedBackend as da, AGENT_PROFILE_MATERIALIZATION_AXES as di, workerTraceEnv as dn, retainedExecutorSeamKey as dr, hostDirectoryReader as dt, projectSandboxOutcome as ea, captureWorktreeDiff as ei, workerTraceAnalysisStore as en, createAgentEnvironmentProviderRegistry as er, consumeScopeRetainedOwnerResult as et, runDriverWithRetry as f, sandboxProgressEvents as fa, assertProfileMaterialization as fi, workerTraceHeaders as fn, errMessage as fr, resolveSpawnResourcePaths as ft, CONTINUATION_FACTS as g, cloneSpend as ga, profileMaterializationAxes$1 as gi, createActivityLog as gn, startRetainedRunInEnvironment as gr, attachWorker as gt, CONTINUATIONS_DIR as h, chargedTokens as ha, fullProfileMaterialization as hi, DEFAULT_STALL_AFTER_MS as hn, startRetainedRun as hr, workerInteractiveAdmissionFile as ht, bestDelivered as i, createSandboxToolPartState as ia, LOCAL_HARNESSES as ii, createBudgetPool as in, sandboxClientAsProvider as ir, scopeRetainedOwnerContext as it, isDriverSpec as j, withBudgetResources as ja, writeAllBytes as ji, bridgeModelRouteRefusal as jn, readTraceContextFromEnv as jr, createExecutorRegistry as jt, driverChild as k, addResourceSpend as ka, prepareJsonlAppend as ki, executorFailure as kn, createPropagatingTraceEmitter as kr, cliWorktreeExecutor as kt, DriverAttemptsExhaustedError as l, mapSandboxToolEvent as la, CodexExecutionDiagnosticError as li, WORKER_TRACE_PROPAGATION as ln, sandboxSessionTraceSource as lr, SPAWN_RESOURCE_PATH_MAX_BYTES as lt, upstreamUnavailableSignal as m, addSpend as ma, defineProfileMaterializationContract as mi, taskToPrompt as mn, recoverRetainedRun as mr, readWorkerInteractiveAdmissions as mt, createRootHandle as n, assertSandboxServedModel as na, removeWorktree as ni, ReservationWaitRefused as nn, providerAsSandboxClient as nr, prepareScopeRetainedOwnerTask as nt, pickBestDelivered as o, extractLlmCallEvent as oa, harnessSupportsReasoningEffort as oi, newUsageTotals as on, unavailableSignalOfFailure as or, scopeRetainedOwnerResourceReader as ot, summarizeDriverAttempts as p, sumSandboxUsage as pa, controlProfileMaterialization as pi, workerTraceSeamKey as pn, reconnectRetainedRun as pr, interactiveAdmissionSeamKey as pt, isWaitOutcome as q, runtimeOwnedScopeOwnerRuntime as qi, readPromptOptions as qn, createRuntimeEventCollector as qr, materializeTreeView as qt, createSupervisor as r, canonicalStreamEventFromSandboxEvent as ra, DEFAULT_LOCAL_HARNESS as ri, assertValidBudget as rn, resolveAgentEnvironmentProvider as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, isSandboxTerminalEvent as sa, localHarnessExecutable as si, spendFromUsageEvents as sn, createPushTraceSource as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, readSandboxOutcome as ta, createWorktree as ti, BudgetReconcileFault as tn, providerAsExecutor as tr, noteScopeRetainedOwnerCoordination as tt, HarnessTurnFailedError as u, notifySandboxEventObserver as ua, terminateProcessTreeAndConfirm as ui, readWorkerTraceContext as un, registerRetainedExecutorPreparation as ur, environmentReader as ut, admitContinuationPolicy as v, hasCompleteCacheBreakdown as va, promptModelProfileMaterialization as vi, createInbox as vn, destroyInteractiveEnvironment as vr, workerInteractiveBindingFile as vt, distillFindings as w, throwAbort as wa, unsupportedProfileDimensions as wi, isPeerMailEnvelope as wn, captureHarnessTranscript as wr, queueOf as wt, checkVerdictOf as x, randomSuffix as xa, renderProfileMaterializationIssues as xi, PEER_MAIL_WIRE_KEY as xn, abortError as xr, recoverRetainedInteractiveRun as xt, admitFinding as y, isAbortError$2 as ya, promptOnlyProfileMaterialization as yi, AUTHORITY_MARKERS as yn, environmentGone as yr, workerInteractiveBindingsDir as yt, meterRuntimeOwnedProviderAttempt as z, promptFromAgentTurnInput as za, newExecutionAttemptId as zi, createSandboxForSpec as zn, createOpenInferenceFileExporter as zr, FileSpawnJournal as zt };
 
-//# sourceMappingURL=supervisor-CjNbOcLO.js.map
+//# sourceMappingURL=supervisor-BXXjVCbW.js.map