@tangle-network/agent-runtime 0.283.0 → 0.284.0

package/dist/{supervisor-YAc4U8HQ.js → supervisor-D4NnNHZd.js}

@@ -6746,14 +6746,45 @@ async function captureProviderWorkspaceSnapshot(port, context) {
 				...context,
 				signal: controller.signal
 			}), "provider workspace retention snapshot");
-			requireDurableWorkspaceArtifacts(result);
-			const { archive } = await verifyWorkspaceSnapshotArtifacts(result, port.artifacts);
+			const snapshot = "snapshot" in result ? result.snapshot : result;
+			const provenance = "snapshot" in result ? detachedSnapshot(result.provenance, "provider workspace retention provenance") : {
+				status: "unavailable",
+				missing: ["Capture callback returned no coverage metadata"]
+			};
+			if (!Array.isArray(provenance.missing) || !["reported", "unavailable"].includes(provenance.status)) throw new Error("provider workspace retention provenance is malformed");
+			if (provenance.status === "reported" && provenance.environmentId !== context.environment.id) throw new Error("provider workspace retention provenance names another environment");
+			if (provenance.executionId !== void 0 && provenance.executionId !== context.executionId) throw new Error("provider workspace retention provenance names another execution");
+			const coverageGaps = [...provenance.missing];
+			if (provenance.status !== "reported") coverageGaps.push("Coverage metadata unavailable");
+			if (provenance.executionId !== context.executionId) coverageGaps.push("Exact execution identity missing");
+			if (provenance.workspace?.complete !== true) coverageGaps.push("Workspace inventory incomplete");
+			if (provenance.sessions === void 0) coverageGaps.push("Session inventory missing");
+			if (context.providerSessionId != null && !provenance.sessions?.some((session) => session.id === context.providerSessionId && session.executionId === context.executionId)) coverageGaps.push(`Provider session ${context.providerSessionId} missing from capture`);
+			for (const session of provenance.sessions ?? []) {
+				if (session.executionId !== context.executionId) coverageGaps.push(`Session ${session.id} names another execution`);
+				if (session.transportEvents !== "complete") coverageGaps.push(`Session ${session.id} transport events unavailable`);
+				if (session.backendType !== context.profile.harness) coverageGaps.push(`Session ${session.id} harness identity mismatch`);
+				if (session.nativeStore?.complete !== true || session.nativeStore.inventory?.skippedEntries !== 0) coverageGaps.push(`Session ${session.id} native store incomplete`);
+				if (session.processStreams?.complete !== true) coverageGaps.push(`Session ${session.id} process streams incomplete`);
+				if (session.nativeEvents?.complete !== true) coverageGaps.push(`Session ${session.id} native events incomplete`);
+				if (!/^sha256:[0-9a-f]{64}$/.test(session.sidecarImageDigest ?? "")) coverageGaps.push(`Session ${session.id} sidecar image digest missing`);
+				if (!/^[0-9a-f]{40}$/.test(session.sidecarBundleRevision ?? "")) coverageGaps.push(`Session ${session.id} sidecar bundle revision missing`);
+			}
+			const coverageComplete = coverageGaps.length === 0;
+			requireDurableWorkspaceArtifacts(snapshot);
+			const { archive } = await verifyWorkspaceSnapshotArtifacts(snapshot, port.artifacts);
 			await verifyAgentCandidateWorkspaceArchive({
 				role: "candidate",
-				snapshot: result,
-				archive
+				snapshot,
+				archive,
+				...port.limits === void 0 ? {} : { limits: port.limits }
 			});
-			return result;
+			return {
+				snapshot,
+				provenance,
+				coverageComplete,
+				...coverageComplete ? {} : { incompleteReason: `provider workspace retention coverage incomplete: ${coverageGaps.join("; ")}` }
+			};
 		}, controller.signal, `provider workspace retention timed out after ${port.timeoutMs}ms`);
 	} finally {
 		clearDeadline();
@@ -8349,6 +8380,10 @@ function resolveAgentEnvironmentProvider(provider, registry) {
 /** Adapt a neutral environment provider to the `SandboxClient` interface used by existing loop paths.
 * @experimental */
 function providerAsSandboxClient(provider, options = {}) {
+	if (options.workspaceRetention !== void 0) {
+		assertProviderWorkspaceRetentionPort(options.workspaceRetention, `providerAsSandboxClient(${provider.name})`);
+		if (options.retentionIdentity === void 0) throw new ValidationError("providerAsSandboxClient: retentionIdentity is required with workspaceRetention");
+	}
 	return { async create(createOptions) {
 		const defaults = options.defaults ?? {};
 		const sandboxInput = createInputFromSandboxOptions(createOptions);
@@ -8376,10 +8411,15 @@ function providerAsSandboxClient(provider, options = {}) {
 		}
 		const environment = await provider.create(mapped);
 		if (options.requireSession && !environment.session) {
-			await environment.destroy?.();
+			if (options.workspaceRetention === void 0) await environment.destroy?.();
 			throw new ValidationError(`providerAsSandboxClient(${provider.name}): session() is required`);
 		}
-		return environmentAsSandboxInstance(environment, { requireTerminalEvent: options.requireTerminalEvent ?? true });
+		return environmentAsSandboxInstance(environment, {
+			requireTerminalEvent: options.requireTerminalEvent ?? true,
+			...options.workspaceRetention === void 0 ? {} : { workspaceRetention: options.workspaceRetention },
+			...options.retentionIdentity === void 0 ? {} : { retentionIdentity: options.retentionIdentity },
+			...options.onWorkspaceCaptured === void 0 ? {} : { onWorkspaceCaptured: options.onWorkspaceCaptured }
+		});
 	} };
 }
 /**
@@ -8537,6 +8577,9 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	let destroyed = false;
 	let workspaceEnvironmentId;
 	let workspaceSnapshot;
+	let workspaceProvenance;
+	let workspaceCoverageComplete = false;
+	let workspaceIncompleteReason;
 	let workspacePublishedSnapshot;
 	let workspaceCaptureFailure;
 	let workspaceCapturePromise;
@@ -8546,6 +8589,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	let workspaceOutcome;
 	let workspacePreservationRequired = false;
 	let workspaceRunActive = false;
+	let providerSessionId = null;
 	const runtime = options.runtime ?? provider.name;
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
 	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
@@ -8554,6 +8598,9 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		if (workspaceEnvironmentId === next.id) return;
 		workspaceEnvironmentId = next.id;
 		workspaceSnapshot = void 0;
+		workspaceProvenance = void 0;
+		workspaceCoverageComplete = false;
+		workspaceIncompleteReason = void 0;
 		workspacePublishedSnapshot = void 0;
 		workspaceCaptureFailure = void 0;
 		workspaceCapturePromise = void 0;
@@ -8576,6 +8623,9 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		}
 		workspaceRunActive = true;
 		workspaceSnapshot = void 0;
+		workspaceProvenance = void 0;
+		workspaceCoverageComplete = false;
+		workspaceIncompleteReason = void 0;
 		workspacePublishedSnapshot = void 0;
 		workspaceCaptureFailure = void 0;
 		workspaceCapturePromise = void 0;
@@ -8595,10 +8645,17 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			workspaceCapturePromise = captureProviderWorkspaceSnapshot(workspaceRetention, {
 				environment: next,
 				executionId,
+				...node === void 0 ? {} : { node },
+				providerSessionId,
+				nativeSessionId: null,
 				profile: createProfile,
 				...outcome === void 0 ? {} : { outcome }
-			}).then((snapshot) => {
+			}).then(({ snapshot, provenance, coverageComplete, incompleteReason }) => {
 				workspaceSnapshot = snapshot;
+				workspaceProvenance = provenance;
+				workspaceCoverageComplete = coverageComplete ?? false;
+				workspaceIncompleteReason = incompleteReason;
+				if (workspaceRetention.requireCompleteProvenance && !coverageComplete) workspacePreservationRequired = true;
 				return snapshot;
 			}).catch((error) => {
 				workspaceCaptureFailure = error;
@@ -8618,7 +8675,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			if (target === void 0) return { destroyed: true };
 			if (workspacePreservationRequired) return {
 				destroyed: false,
-				detail: "provider workspace retention: source preserved because execution failed before a retrievable settled workspace receipt existed",
+				detail: workspaceIncompleteReason ?? "provider workspace retention: source preserved because execution failed before a retrievable settled workspace receipt existed",
 				permanent: true
 			};
 			if (options.workspaceRetention !== void 0) try {
@@ -8771,6 +8828,9 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					onArtifact: (next) => {
 						artifact = next;
 					},
+					onProviderSessionId: (id) => {
+						providerSessionId = id;
+					},
 					onHarnessTranscript: (next) => {
 						harnessTranscript = next;
 					},
@@ -8781,6 +8841,11 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						workspacePublishedSnapshot = snapshot;
 					},
 					captureWorkspace,
+					workspaceProvenance: () => workspaceProvenance,
+					workspaceCoverage: () => ({
+						complete: workspaceCoverageComplete,
+						incompleteReason: workspaceIncompleteReason
+					}),
 					destroyEnvironment
 				});
 				const refusal = ended.unavailable;
@@ -8947,6 +9012,7 @@ async function* streamProviderExecutor(args) {
 			signal: linked
 		};
 	}
+	args.onProviderSessionId(turn.sessionId ?? null);
 	const source = await providerExecutionSource(args, turn, linked);
 	const environment = source.environment;
 	args.onEnvironment(environment);
@@ -9052,7 +9118,24 @@ async function* streamProviderExecutor(args) {
 		args.onPublishedSnapshot(retainedWorkspace);
 		const settledResult = {
 			...result,
-			...retainedWorkspace === void 0 ? {} : { workspaceSnapshot: retainedWorkspace }
+			...retainedWorkspace === void 0 ? {} : {
+				workspaceSnapshot: retainedWorkspace,
+				workspaceCapture: {
+					executionId: args.executionId,
+					...args.node === void 0 ? {} : { node: args.node },
+					environmentId: environment.id,
+					profileDigest: canonicalAgentProfileDigest(args.profile),
+					providerSessionId: turn.sessionId ?? null,
+					nativeSessionId: null,
+					snapshot: retainedWorkspace,
+					provenance: args.workspaceProvenance() ?? {
+						status: "unavailable",
+						missing: ["Capture coverage metadata was not retained"]
+					},
+					coverageComplete: args.workspaceCoverage().complete,
+					...args.workspaceCoverage().incompleteReason === void 0 ? {} : { incompleteReason: args.workspaceCoverage().incompleteReason }
+				}
+			}
 		};
 		settled = {
 			...result.outcome?.status === "failed" ? { outcome: {
@@ -9485,6 +9568,8 @@ async function sandboxProfileFromReference(profile, resolveProfile) {
 	return resolveProfile(profile);
 }
 function environmentAsSandboxInstance(environment, options) {
+	let providerSessionId = null;
+	let capture;
 	return {
 		id: environment.id,
 		name: environment.name,
@@ -9495,6 +9580,7 @@ function environmentAsSandboxInstance(environment, options) {
 		async *streamPrompt(message, promptOptions) {
 			let terminal = false;
 			const input = turnInputFromPrompt(message, promptOptions);
+			providerSessionId = input.sessionId ?? null;
 			let cancellation;
 			let cancellationStarted = false;
 			let cancellationFailed = false;
@@ -9596,6 +9682,32 @@ function environmentAsSandboxInstance(environment, options) {
 			return environmentAsSandboxInstance(forked, options);
 		} } : {},
 		async delete() {
+			if (options.workspaceRetention !== void 0) {
+				const identity = options.retentionIdentity;
+				if (identity === void 0) throw new ValidationError("providerAsSandboxClient: retention identity missing before delete");
+				capture ??= captureProviderWorkspaceSnapshot(options.workspaceRetention, {
+					environment,
+					executionId: identity.executionId,
+					...identity.node === void 0 ? {} : { node: identity.node },
+					providerSessionId,
+					nativeSessionId: null,
+					profile: identity.profile
+				});
+				const { snapshot, provenance, coverageComplete, incompleteReason } = await capture;
+				options.onWorkspaceCaptured?.({
+					executionId: identity.executionId,
+					...identity.node === void 0 ? {} : { node: identity.node },
+					environmentId: environment.id,
+					profileDigest: canonicalAgentProfileDigest(identity.profile),
+					providerSessionId,
+					nativeSessionId: null,
+					snapshot,
+					provenance,
+					coverageComplete: coverageComplete ?? false,
+					...incompleteReason === void 0 ? {} : { incompleteReason }
+				});
+				if (options.workspaceRetention.requireCompleteProvenance && !coverageComplete) throw new Error(incompleteReason ?? "provider workspace retention coverage incomplete");
+			}
 			await environment.destroy?.();
 		}
 	};
@@ -11455,6 +11567,126 @@ function assertBoxlessPromptOptions(options, seam, keys = instrumentPromptKeys)
 	}
 }
 //#endregion
+//#region src/runtime/sandbox-evidence-retention.ts
+/** A failed capture keeps the live source handle available for an explicit retry. */
+var SandboxEvidenceRetentionError = class extends Error {
+	box;
+	constructor(box, cause) {
+		super(`Sandbox evidence retention failed for box ${String(box.id)}: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+		this.name = "SandboxEvidenceRetentionError";
+		this.box = box;
+	}
+};
+/** Capture, verify, durably record, then destroy. A failure leaves the source intact. */
+async function captureBeforeDestroy(port, context, destroy) {
+	const environment = {
+		id: String(context.box.id),
+		provider: "sandbox"
+	};
+	const result = await captureProviderWorkspaceSnapshot({
+		timeoutMs: port.timeoutMs,
+		...port.limits === void 0 ? {} : { limits: port.limits },
+		artifacts: port.artifacts,
+		capture: ({ signal }) => port.capture({
+			...context,
+			signal
+		})
+	}, {
+		environment,
+		executionId: context.executionId,
+		providerSessionId: context.sandboxSessionIds[0] ?? null,
+		nativeSessionId: null,
+		profile: context.profile
+	});
+	const missing = context.sandboxSessionIds.filter((id) => !result.provenance.sessions?.some((session) => session.id === id && session.executionId === context.executionId));
+	for (const nativeId of context.nativeSessionIds ?? []) if (!result.provenance.sessions?.some((session) => session.nativeSessionId === nativeId)) missing.push(`native/${nativeId}`);
+	for (const sessionId of context.sandboxSessionIds) if ((context.sessionExecutionIds[sessionId]?.length ?? 0) === 0) missing.push(`${sessionId}/execution-id-unobserved`);
+	for (const [sessionId, executionIds] of Object.entries(context.sessionExecutionIds)) {
+		const session = result.provenance.sessions?.find((item) => item.id === sessionId);
+		for (const executionId of executionIds) if (!session?.executionIds?.includes(executionId) || !session.eventCountsByExecutionId?.[executionId]) missing.push(`${sessionId}/${executionId}`);
+	}
+	const coverageComplete = result.coverageComplete === true && missing.length === 0;
+	const incompleteReason = coverageComplete ? void 0 : [result.incompleteReason, ...missing.map((id) => `Sandbox session ${id} missing from capture`)].filter((reason) => reason !== void 0).join("; ");
+	const receipt = {
+		boxId: String(context.box.id),
+		executionId: context.executionId,
+		profileDigest: canonicalAgentProfileDigest(context.profile),
+		scope: "box",
+		sandboxSessionIds: [...context.sandboxSessionIds],
+		...context.nativeSessionIds === void 0 ? {} : { nativeSessionIds: [...context.nativeSessionIds] },
+		sessionExecutionIds: Object.fromEntries(Object.entries(context.sessionExecutionIds).map(([id, executions]) => [id, [...executions]])),
+		snapshot: result.snapshot,
+		provenance: result.provenance,
+		coverageComplete,
+		...incompleteReason === void 0 ? {} : { incompleteReason }
+	};
+	await port.record(receipt);
+	if (!coverageComplete) throw new Error(incompleteReason ?? "Sandbox evidence coverage incomplete");
+	await destroy();
+	return receipt;
+}
+/** Execution-scoped inventory of every Sandbox session and turn observed by a loop. */
+var SandboxEvidenceTracker = class {
+	port;
+	runId;
+	boxes = /* @__PURE__ */ new Map();
+	constructor(port, runId) {
+		this.port = port;
+		this.runId = runId;
+		if (!Number.isSafeInteger(port.timeoutMs) || port.timeoutMs <= 0) throw new ValidationError$1("Sandbox evidence retention.timeoutMs must be a positive safe integer");
+		if (typeof port.artifacts?.read !== "function") throw new ValidationError$1("Sandbox evidence retention.artifacts.read is required");
+		if (typeof port.capture !== "function") throw new ValidationError$1("Sandbox evidence retention.capture is required");
+		if (typeof port.record !== "function") throw new ValidationError$1("Sandbox evidence retention.record is required");
+	}
+	register(box, profile, sessionId) {
+		let state = this.boxes.get(box);
+		if (state === void 0) {
+			state = {
+				profile,
+				sessions: /* @__PURE__ */ new Map()
+			};
+			this.boxes.set(box, state);
+		}
+		if (sessionId !== void 0 && !state.sessions.has(sessionId)) state.sessions.set(sessionId, /* @__PURE__ */ new Set());
+	}
+	recordDispatch(box, sessionId, executionId) {
+		const state = this.boxes.get(box);
+		if (state === void 0) throw new Error("Sandbox evidence dispatched before box registration");
+		const executions = state.sessions.get(sessionId) ?? /* @__PURE__ */ new Set();
+		executions.add(executionId);
+		state.sessions.set(sessionId, executions);
+	}
+	observe(box, event, sessionHint) {
+		const state = this.boxes.get(box);
+		if (state === void 0) throw new Error("Sandbox evidence observed before box registration");
+		const sessionId = typeof event.data.runtimeSessionId === "string" ? event.data.runtimeSessionId : sessionHint;
+		if (sessionId === void 0) return;
+		const executions = state.sessions.get(sessionId) ?? /* @__PURE__ */ new Set();
+		if (typeof event.data.executionId === "string") executions.add(event.data.executionId);
+		state.sessions.set(sessionId, executions);
+	}
+	async destroy(box) {
+		const state = this.boxes.get(box);
+		if (state === void 0) throw new Error(`Sandbox evidence has no registered source ${String(box.id)}`);
+		const sandboxSessionIds = [...state.sessions.keys()].sort();
+		const sessionExecutionIds = Object.fromEntries([...state.sessions.entries()].map(([id, executions]) => [id, [...executions].sort()]));
+		try {
+			await captureBeforeDestroy(this.port, {
+				box,
+				executionId: this.runId,
+				profile: state.profile,
+				sandboxSessionIds,
+				sessionExecutionIds
+			}, async () => {
+				await box.delete();
+			});
+			this.boxes.delete(box);
+		} catch (error) {
+			throw new SandboxEvidenceRetentionError(box, error);
+		}
+	}
+};
+//#endregion
 //#region src/runtime/sandbox-acquire.ts
 /**
 * HTTP statuses where create should be retried — gateway timeouts
@@ -11499,14 +11731,20 @@ async function acquireSandbox(client, options, acquire = {}) {
 	while (now() < deadline) {
 		throwIfAborted(acquire.signal);
 		try {
-			return await waitReadyOrDestroy(await client.create(createOpts, acquire.signal === void 0 ? void 0 : { signal: acquire.signal }), deadline, pollMs, acquire.signal, now, sleep$1);
+			const box = await client.create(createOpts, acquire.signal === void 0 ? void 0 : { signal: acquire.signal });
+			acquire.onAcquire?.(box);
+			return await waitReadyOrDestroy(box, deadline, pollMs, acquire.signal, now, sleep$1, acquire.beforeDelete);
 		} catch (err) {
+			if (err instanceof SandboxEvidenceRetentionError) throw err;
 			throwIfAborted(acquire.signal);
 			if (!isRetryable(err)) throw err;
 			lastErr = err;
 			if (typeof c.list === "function") for (let scan = 0; scan < appearScans && now() < deadline; scan += 1) {
 				const found = (await c.list().catch(() => []))?.find((b) => b.name === name);
-				if (found) return await waitReadyOrDestroy(found, deadline, pollMs, acquire.signal, now, sleep$1);
+				if (found) {
+					acquire.onAcquire?.(found);
+					return await waitReadyOrDestroy(found, deadline, pollMs, acquire.signal, now, sleep$1, acquire.beforeDelete);
+				}
 				if (scan < appearScans - 1) await sleep$1(pollMs);
 			}
 			attempt += 1;
@@ -11517,11 +11755,12 @@ async function acquireSandbox(client, options, acquire = {}) {
 }
 /** `waitUntilReady`, tearing the box down (best-effort) on any throw so a box
 *  that never reaches `running` (abort, terminal status, budget) does not leak. */
-async function waitReadyOrDestroy(box, deadline, pollMs, signal, now, sleep) {
+async function waitReadyOrDestroy(box, deadline, pollMs, signal, now, sleep, beforeDelete) {
 	try {
 		return await waitUntilReady(box, deadline, pollMs, signal, now, sleep);
 	} catch (err) {
-		await deleteBoxSafe(box);
+		if (beforeDelete === void 0) await deleteBoxSafe(box);
+		else await beforeDelete(box);
 		throw err;
 	}
 }
@@ -11731,14 +11970,31 @@ function createSandboxLineage(client, capabilities, options = {}) {
 	const recordMount = options.recordMount ?? (() => {});
 	const forkConcurrency = Math.max(1, Math.floor(options.maxConcurrency ?? DEFAULT_FORK_CONCURRENCY));
 	const owned = [];
+	const profiles = /* @__PURE__ */ new Map();
 	const acquireFresh = async (spec, signal) => {
 		if (signal.aborted) throwAbort();
-		const box = await acquireSandbox(client, buildBackendOptions(spec.profile, spec.sandboxOverrides), { signal });
-		await spec.prepareBox?.(box, {
+		const box = await acquireSandbox(client, buildBackendOptions(spec.profile, spec.sandboxOverrides), {
 			signal,
-			recordMount
+			...options.onAcquire === void 0 ? {} : { onAcquire: (source) => options.onAcquire?.(source, spec.profile) },
+			...options.beforeDelete === void 0 ? {} : { beforeDelete: options.beforeDelete }
 		});
 		owned.push(box);
+		profiles.set(box, spec.profile);
+		options.onAcquire?.(box, spec.profile);
+		try {
+			await spec.prepareBox?.(box, {
+				signal,
+				recordMount
+			});
+		} catch (error) {
+			try {
+				await destroyBounded(box, options.failOnDestroyError, options.beforeDelete);
+				owned.splice(owned.indexOf(box), 1);
+			} catch (captureError) {
+				throw new AggregateError([error, captureError], "Sandbox preparation and evidence cleanup failed");
+			}
+			throw error;
+		}
 		return box;
 	};
 	return {
@@ -11759,17 +12015,31 @@ function createSandboxLineage(client, capabilities, options = {}) {
 			await assertSessionLive(handle.box, handle.sessionId);
 			return promptEvents(streaming, handle.box, prompt, handle.sessionId, signal, promptOptions);
 		},
-		async fork(parent, prompts, specs, signal, promptOptions) {
+		async fork(parent, prompts, specs, signal, promptOptions, executionIds) {
+			if (executionIds !== void 0 && executionIds.length !== prompts.length) throw new ValidationError$1("SandboxLineage.fork: execution IDs must match prompts");
+			const optionsFor = (index) => executionIds === void 0 ? promptOptions : {
+				...promptOptions ?? {},
+				executionId: executionIds[index]
+			};
 			if (prompts.length === 0) throw new ValidationError$1("SandboxLineage.fork: prompts must be non-empty");
 			if (signal.aborted) throwAbort();
 			const branched = await branchParent(parent.box, prompts.length, forkConcurrency, signal);
 			if (branched !== void 0) {
 				owned.push(...branched);
+				const inheritedProfile = profiles.get(parent.box);
+				if (inheritedProfile !== void 0) for (const box of branched) {
+					profiles.set(box, inheritedProfile);
+					options.onAcquire?.(box, inheritedProfile);
+				}
 				if (branched.length !== prompts.length) throw new ValidationError$1(`SandboxLineage.fork: Sandbox returned ${branched.length} of ${prompts.length} requested children`);
 				return mapWithConcurrency(branched, forkConcurrency, async (box, i) => {
 					throwIfAborted(signal);
 					const spec = specs[i % specs.length];
 					if (!spec) throw new ValidationError$1("SandboxLineage.fork: no AgentRunSpec for branch");
+					if (inheritedProfile === void 0) {
+						profiles.set(box, spec.profile);
+						options.onAcquire?.(box, spec.profile);
+					}
 					await spec.prepareBox?.(box, {
 						signal,
 						recordMount
@@ -11780,7 +12050,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 							box,
 							sessionId
 						},
-						events: promptEvents(streaming, box, prompts[i], sessionId, signal, promptOptions)
+						events: promptEvents(streaming, box, prompts[i], sessionId, signal, optionsFor(i))
 					};
 				});
 			}
@@ -11792,6 +12062,9 @@ function createSandboxLineage(client, capabilities, options = {}) {
 				if (checkpointId !== void 0) {
 					const box = await forkFromCheckpoint(parent.box, checkpointId, signal);
 					owned.push(box);
+					const inheritedProfile = profiles.get(parent.box) ?? spec.profile;
+					profiles.set(box, inheritedProfile);
+					options.onAcquire?.(box, inheritedProfile);
 					await spec.prepareBox?.(box, {
 						signal,
 						recordMount
@@ -11802,7 +12075,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 							box,
 							sessionId
 						},
-						events: promptEvents(streaming, box, prompt, sessionId, signal, promptOptions)
+						events: promptEvents(streaming, box, prompt, sessionId, signal, optionsFor(i))
 					};
 				}
 				const box = await acquireFresh(spec, signal);
@@ -11812,7 +12085,7 @@ function createSandboxLineage(client, capabilities, options = {}) {
 						box,
 						sessionId
 					},
-					events: promptEvents(streaming, box, prompt, sessionId, signal, promptOptions)
+					events: promptEvents(streaming, box, prompt, sessionId, signal, optionsFor(i))
 				};
 			});
 		},
@@ -11823,13 +12096,18 @@ function createSandboxLineage(client, capabilities, options = {}) {
 			const doomed = [];
 			for (const box of owned) (keepBoxes.has(box) ? survivors : doomed).push(box);
 			if (doomed.length === 0) return;
+			const results = await Promise.allSettled(doomed.map((box) => destroyBounded(box, options.failOnDestroyError, options.beforeDelete)));
+			const failed = results.flatMap((result, index) => result.status === "rejected" ? [doomed[index]] : []);
 			owned.length = 0;
-			owned.push(...survivors);
-			await Promise.allSettled(doomed.map((box) => destroyBounded(box)));
+			owned.push(...survivors, ...failed);
+			if (failed.length > 0) throw new AggregateError(results.filter((result) => result.status === "rejected").map((result) => result.reason), "Sandbox evidence capture failed before prune");
 		},
 		async teardown() {
 			const boxes = owned.splice(0, owned.length);
-			await Promise.allSettled(boxes.map((box) => destroyBounded(box)));
+			const results = await Promise.allSettled(boxes.map((box) => destroyBounded(box, options.failOnDestroyError, options.beforeDelete)));
+			const failed = results.flatMap((result, index) => result.status === "rejected" ? [boxes[index]] : []);
+			owned.push(...failed);
+			if (failed.length > 0) throw new AggregateError(results.filter((result) => result.status === "rejected").map((result) => result.reason), "Sandbox evidence capture failed before teardown");
 		}
 	};
 }
@@ -11846,14 +12124,19 @@ async function branchParent(box, count, concurrency, signal) {
 	const branch = box.branch;
 	if (typeof branch !== "function") return void 0;
 	const children = [];
-	for (let offset = 0; offset < count; offset += concurrency) {
-		throwIfAborted(signal);
-		const requested = Math.min(concurrency, count - offset);
-		const batch = await branch.call(box, requested);
-		children.push(...batch);
-		if (batch.length !== requested) return children;
+	try {
+		for (let offset = 0; offset < count; offset += concurrency) {
+			throwIfAborted(signal);
+			const requested = Math.min(concurrency, count - offset);
+			const batch = await branch.call(box, requested);
+			children.push(...batch);
+			if (batch.length !== requested) return children;
+		}
+		return children;
+	} catch (error) {
+		if (children.length) return children;
+		throw error;
 	}
-	return children;
 }
 /**
 * Checkpoint the parent leaving it running, returning the checkpoint id to fork
@@ -11896,7 +12179,15 @@ async function assertSessionLive(box, sessionId) {
 	if (typeof session !== "function") return;
 	if (await session.call(box, sessionId).status() === null) throw new ValidationError$1(`SandboxLineage.continue: session ${sessionId} is not known to the sandbox — the platform did not preserve the client-minted session id (or it was reaped). Continuing would run without prior context; refusing to silently lose conversation continuity.`);
 }
-async function destroyBounded(box) {
+async function destroyBounded(box, failOnError = false, beforeDelete) {
+	if (beforeDelete !== void 0) {
+		await beforeDelete(box);
+		return;
+	}
+	if (failOnError) {
+		await box.delete();
+		return;
+	}
 	await withTimeout(deleteBoxSafe(box), TEARDOWN_TIMEOUT_MS$1);
 }
 //#endregion
@@ -11928,6 +12219,8 @@ async function runAgentRounds(options) {
 	const promptOptions = readPromptOptions(options.ctx.promptOptions, "runAgentRounds: ctx.promptOptions");
 	const now = options.now ?? Date.now;
 	const runId = options.runId ?? `loop-${randomSuffix()}`;
+	if (options.evidenceRetention !== void 0 && options.onWorkerBox !== void 0) throw new ValidationError$1("runAgentRounds: evidenceRetention cannot cover sessions dispatched through onWorkerBox");
+	const evidenceTracker = options.evidenceRetention === void 0 ? void 0 : new SandboxEvidenceTracker(options.evidenceRetention, runId);
 	const loopStart = now();
 	const driverName = options.driver.name ?? "driver";
 	const iterations = [];
@@ -11941,7 +12234,7 @@ async function runAgentRounds(options) {
 		ownedBoxes.push(box);
 		options.onWorkerBox?.(box);
 	} : void 0;
-	const lineageState = await setUpLineage(options, maxConcurrency, recordMount, promptOptions);
+	const lineageState = await setUpLineage(options, maxConcurrency, recordMount, promptOptions, evidenceTracker);
 	emitRunLoopHook(options, {
 		target: "agent.run",
 		phase: "before",
@@ -12035,7 +12328,7 @@ async function runAgentRounds(options) {
 					tokenUsage: zeroTokenUsage()
 				});
 			}
-			const lineagePlan = lineageState ? planLineageRound(lineageState, specs, slice, parentIndex, controller.signal) : void 0;
+			const lineagePlan = lineageState ? planLineageRound(lineageState, specs, slice, parentIndex, controller.signal, evidenceTracker !== void 0) : void 0;
 			await runBatch({
 				slice,
 				baseIndex,
@@ -12054,6 +12347,7 @@ async function runAgentRounds(options) {
 				collectBox,
 				lineagePlan,
 				lineageState,
+				evidenceTracker,
 				recordMount,
 				...promptOptions === void 0 ? {} : { promptOptions }
 			});
@@ -12093,9 +12387,17 @@ async function runAgentRounds(options) {
 		return await decideAndFinalize(options, iterations, loopStart, now, runId, mounts);
 	} finally {
 		if (options.ctx.signal) options.ctx.signal.removeEventListener("abort", onOuterAbort);
-		await Promise.allSettled(ownedBoxes.map((b) => destroySandboxSafe(b, options.ctx.traceEmitter, runId, now)));
+		const cleanup = await Promise.allSettled(ownedBoxes.map((box) => evidenceTracker === void 0 ? destroySandboxSafe(box, options.ctx.traceEmitter, runId, now) : evidenceTracker.destroy(box)));
 		if (options.onWorkerBox) options.onWorkerBox(void 0);
-		if (lineageState) await lineageState.lineage.teardown();
+		let lineageFailure;
+		try {
+			if (lineageState) await lineageState.lineage.teardown();
+		} catch (error) {
+			lineageFailure = error;
+		}
+		const failures = cleanup.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+		if (lineageFailure !== void 0) failures.push(lineageFailure);
+		if (failures.length) throw new AggregateError(failures, "Sandbox evidence cleanup failed");
 	}
 }
 /**
@@ -12104,7 +12406,7 @@ async function runAgentRounds(options) {
 * Rejects the lineage + `onWorkerBox` combination: both claim the same
 * box-ownership channel, and silently honoring one would leak or double-free.
 */
-async function setUpLineage(options, maxConcurrency, recordMount, promptOptions) {
+async function setUpLineage(options, maxConcurrency, recordMount, promptOptions, evidenceTracker) {
 	const lineageOpts = options.lineage;
 	if (!lineageOpts || !lineageOpts.sessionContinuity && !lineageOpts.forkFanout) return void 0;
 	if (options.onWorkerBox) throw new ValidationError$1("runAgentRounds: `lineage` and `onWorkerBox` both own worker boxes — pass only one");
@@ -12113,7 +12415,12 @@ async function setUpLineage(options, maxConcurrency, recordMount, promptOptions)
 		lineage: createSandboxLineage(options.ctx.sandboxClient, capabilities, {
 			maxConcurrency,
 			streaming: lineageOpts.streaming,
-			recordMount
+			recordMount,
+			...evidenceTracker === void 0 ? {} : {
+				failOnDestroyError: true,
+				onAcquire: (box, profile) => evidenceTracker.register(box, profile),
+				beforeDelete: (box) => evidenceTracker.destroy(box)
+			}
 		}),
 		options: lineageOpts,
 		...promptOptions === void 0 ? {} : { promptOptions },
@@ -12134,7 +12441,12 @@ async function setUpLineage(options, maxConcurrency, recordMount, promptOptions)
 * Round 0 (parentIndex undefined) always starts fresh — the independence of the
 * first batch is preserved.
 */
-function planLineageRound(state, specs, slice, parentIndex, signal) {
+function planLineageRound(state, specs, slice, parentIndex, signal, retainEvidence) {
+	const executionIds = retainEvidence ? slice.map(() => randomUuid()) : [];
+	const promptForOffset = (offset) => retainEvidence ? {
+		...state.promptOptions ?? {},
+		executionId: executionIds[offset]
+	} : state.promptOptions;
 	const lineage = state.lineage;
 	const parent = parentIndex !== void 0 ? state.handles.get(parentIndex) : void 0;
 	const promptFor = (offset) => {
@@ -12149,8 +12461,9 @@ function planLineageRound(state, specs, slice, parentIndex, signal) {
 	};
 	if (slice.length === 1 && parent && state.options.sessionContinuity) return [{ async acquire() {
 		return {
-			events: await lineage.continue(parent, promptFor(0), signal, state.promptOptions),
-			handle: parent
+			events: await lineage.continue(parent, promptFor(0), signal, promptForOffset(0)),
+			handle: parent,
+			...retainEvidence ? { executionId: executionIds[0] } : {}
 		};
 	} }];
 	if (slice.length > 1 && parent && state.options.forkFanout) {
@@ -12158,17 +12471,23 @@ function planLineageRound(state, specs, slice, parentIndex, signal) {
 		const childSpecs = slice.map((_, offset) => specAt(offset));
 		let forked;
 		const ensureForked = () => {
-			forked ??= lineage.fork(parent, prompts, childSpecs, signal, state.promptOptions);
+			forked ??= lineage.fork(parent, prompts, childSpecs, signal, state.promptOptions, retainEvidence ? executionIds : void 0);
 			return forked;
 		};
 		return slice.map((_, offset) => ({ async acquire() {
 			const branch = (await ensureForked())[offset];
 			if (!branch) throw new ValidationError$1("runAgentRounds: lineage fork produced no branch for offset");
-			return branch;
+			return {
+				...branch,
+				...retainEvidence ? { executionId: executionIds[offset] } : {}
+			};
 		} }));
 	}
 	return slice.map((_, offset) => ({ async acquire() {
-		return lineage.start(specAt(offset), promptFor(offset), signal, state.promptOptions);
+		return {
+			...await lineage.start(specAt(offset), promptFor(offset), signal, promptForOffset(offset)),
+			...retainEvidence ? { executionId: executionIds[offset] } : {}
+		};
 	} }));
 }
 /**
@@ -12275,6 +12594,8 @@ async function executeIteration(args) {
 	};
 	try {
 		let stream;
+		let sandboxSessionId;
+		let dispatchedExecutionId;
 		const source = args.lineagePlan?.[args.item.index - args.baseIndex];
 		if (source) {
 			const acquired = await source.acquire();
@@ -12282,17 +12603,28 @@ async function executeIteration(args) {
 			boxAcquiredAt = args.now();
 			lineageOwned = true;
 			args.lineageState?.handles.set(args.item.index, acquired.handle);
+			args.evidenceTracker?.register(box, spec.profile, acquired.handle.sessionId);
 			stream = acquired.events;
+			sandboxSessionId = acquired.handle.sessionId;
+			dispatchedExecutionId = acquired.executionId;
 		} else {
-			box = await createSandboxForSpec(args.ctx.sandboxClient, spec, args.signal, args.recordMount);
+			box = await createSandboxForSpec(args.ctx.sandboxClient, spec, args.signal, args.recordMount, args.evidenceTracker);
 			boxAcquiredAt = args.now();
 			const prompt = spec.taskToPrompt(args.item.task);
-			const promptOptions = args.promptOptions;
-			stream = args.streaming === "poll" ? promptEvents("poll", box, prompt, `${args.runId}-i${args.item.index}`, args.signal, promptOptions) : box.streamPrompt(prompt, {
+			const sandboxSessionIdForTurn = args.evidenceTracker === void 0 ? void 0 : randomUuid();
+			sandboxSessionId = sandboxSessionIdForTurn;
+			dispatchedExecutionId = args.evidenceTracker === void 0 ? void 0 : randomUuid();
+			const promptOptions = dispatchedExecutionId === void 0 ? args.promptOptions : {
+				...args.promptOptions ?? {},
+				executionId: dispatchedExecutionId
+			};
+			stream = args.streaming === "poll" ? promptEvents("poll", box, prompt, sandboxSessionIdForTurn ?? `${args.runId}-i${args.item.index}`, args.signal, promptOptions) : box.streamPrompt(prompt, {
 				...promptOptions ?? {},
+				...sandboxSessionIdForTurn === void 0 ? {} : { sessionId: sandboxSessionIdForTurn },
 				signal: args.signal
 			});
 		}
+		if (box !== void 0 && sandboxSessionId !== void 0 && dispatchedExecutionId !== void 0) args.evidenceTracker?.recordDispatch(box, sandboxSessionId, dispatchedExecutionId);
 		const placement = describeSandboxPlacement(args.ctx.sandboxClient, box);
 		await emitTrace(args.ctx.traceEmitter, {
 			kind: "loop.iteration.dispatch",
@@ -12319,6 +12651,7 @@ async function executeIteration(args) {
 		const outcomeTracker = createAgentRunOutcomeTracker();
 		for await (const event of stream) {
 			events.push(event);
+			if (box !== void 0) args.evidenceTracker?.observe(box, event, source ? args.lineageState?.handles.get(args.item.index)?.sessionId : void 0);
 			outcomeTracker.observe(event);
 			notifySandboxEventObserver(event, args.ctx.onSandboxEvent, {
 				iterationIndex: args.item.index,
@@ -12375,7 +12708,7 @@ async function executeIteration(args) {
 		});
 		if (lineageOwned) {} else if (args.collectBox && box) args.collectBox(box);
 		else {
-			const teardown = await destroySandboxSafe(box, args.ctx.traceEmitter, args.runId, args.now);
+			const teardown = args.evidenceTracker === void 0 || box === void 0 ? await destroySandboxSafe(box, args.ctx.traceEmitter, args.runId, args.now) : await args.evidenceTracker.destroy(box).then(() => "deleted");
 			if (boxAcquiredAt !== void 0 && teardown !== "no-delete-api") {
 				slot.boxLiveMs = Math.max(0, args.now() - boxAcquiredAt);
 				if (teardown !== "deleted") slot.boxLiveMsKnown = false;
@@ -12472,11 +12805,24 @@ function readSandboxId(box) {
 * loop kernel passes its per-run recorder; other callers (which have no
 * `LoopResult` to attach to) omit it and the prepareBox recorder is a no-op.
 */
-async function createSandboxForSpec(client, spec, signal, recordMount) {
+async function createSandboxForSpec(client, spec, signal, recordMount, evidenceTracker) {
 	const opts = buildBackendOptions(spec.profile, spec.sandboxOverrides);
 	if (signal.aborted) throwAbort();
-	const box = await acquireSandbox(client, opts, { signal });
-	await invokePrepareBox(spec, box, signal, recordMount);
+	const box = await acquireSandbox(client, opts, {
+		signal,
+		...evidenceTracker === void 0 ? {} : {
+			onAcquire: (source) => evidenceTracker.register(source, spec.profile),
+			beforeDelete: (source) => evidenceTracker.destroy(source)
+		}
+	});
+	evidenceTracker?.register(box, spec.profile);
+	try {
+		await invokePrepareBox(spec, box, signal, recordMount);
+	} catch (error) {
+		if (evidenceTracker === void 0) await deleteBoxSafe(box);
+		else await evidenceTracker.destroy(box);
+		throw error;
+	}
 	return box;
 }
 /**
@@ -18229,8 +18575,12 @@ function createSteerableSandboxSession(args) {
 		return progress;
 	};
 	async function* stream(task, signal) {
+		let preservationFailure;
 		const capabilities = await probeSandboxCapabilities(args.sandboxClient);
-		const lineage = createSandboxLineage(args.sandboxClient, capabilities, { maxConcurrency: 1 });
+		const lineage = createSandboxLineage(args.sandboxClient, capabilities, {
+			maxConcurrency: 1,
+			failOnDestroyError: args.failOnDestroyError
+		});
 		state.teardown = () => lineage.teardown();
 		const spec = {
 			profile: args.profile,
@@ -18390,7 +18740,12 @@ function createSteerableSandboxSession(args) {
 			}
 		} finally {
 			state.note = "settled";
-			await lineage.teardown().catch(() => {});
+			if (args.failOnDestroyError) try {
+				await lineage.teardown();
+			} catch (error) {
+				preservationFailure = error instanceof Error ? error.message : String(error);
+			}
+			else await lineage.teardown().catch(() => {});
 			state.teardown = void 0;
 		}
 		if (state.turns > 0) yield {
@@ -18415,9 +18770,15 @@ function createSteerableSandboxSession(args) {
 			turns: state.turns,
 			toolCalls: state.toolCalls,
 			...state.latestOutcome ? { outcome: state.latestOutcome } : {},
-			...usageFailure === void 0 ? {} : { tokensUnknownReason: usageFailure }
+			...usageFailure === void 0 ? {} : { tokensUnknownReason: usageFailure },
+			...args.workspaceCaptures === void 0 ? {} : { workspaceCaptures: args.workspaceCaptures() },
+			...preservationFailure === void 0 ? {} : { preservationFailure }
 		};
-		const verdict = state.latestOutcome ? projectSandboxOutcome(state.latestOutcome).verdict : void 0;
+		const verdict = preservationFailure !== void 0 ? {
+			valid: false,
+			score: 0,
+			notes: preservationFailure
+		} : state.latestOutcome ? projectSandboxOutcome(state.latestOutcome).verdict : void 0;
 		state.artifact = {
 			outRef: args.contentRef("sandbox-steerable", {
 				harness: args.harness,
@@ -18493,7 +18854,8 @@ function createSteerableSandboxSession(args) {
 		traceSource: () => trace.source,
 		artifact: () => state.artifact,
 		async teardown() {
-			await state.teardown?.().catch(() => {});
+			if (args.failOnDestroyError) await state.teardown?.();
+			else await state.teardown?.().catch(() => {});
 		}
 	};
 }
@@ -19340,6 +19702,8 @@ const sandboxExecutor = (spec, ctx) => {
 			profile: spec.profile,
 			harness,
 			sandboxClient: seam.sandboxClient,
+			failOnDestroyError: seam.failOnDestroyError,
+			workspaceCaptures: seam.workspaceCaptures,
 			inbox,
 			taskToPrompt: (t) => taskToPrompt(t),
 			options: seam.steering,
@@ -20065,6 +20429,8 @@ function snapshotExecutorConfig(config) {
 		case "sandbox": {
 			assertExactConfigKeys(config, /* @__PURE__ */ new Set([
 				"backend",
+				"failOnDestroyError",
+				"workspaceCaptures",
 				"lineage",
 				"loopCtx",
 				"maxIterations",
@@ -20072,10 +20438,11 @@ function snapshotExecutorConfig(config) {
 				"steering",
 				"validator"
 			]), "createExecutor sandbox config");
-			const { sandboxClient, loopCtx, validator, ...decisionData } = config;
+			const { sandboxClient, loopCtx, validator, workspaceCaptures, ...decisionData } = config;
 			const port = {
 				sandboxClient,
-				...validator === void 0 ? {} : { validator }
+				...validator === void 0 ? {} : { validator },
+				...workspaceCaptures === void 0 ? {} : { workspaceCaptures }
 			};
 			if (loopCtx === void 0) {
 				const snapshot = detachedSnapshot(decisionData, "createExecutor sandbox config");
@@ -20192,20 +20559,31 @@ function createExecutor(config) {
 				const originalSeam = readSeam(seamed, providerSeamKey, "provider");
 				const selected = originalSeam.steering ? selectProviderPlacement(spec.profile, originalSeam) : void 0;
 				const providerSeam = selected?.options ?? originalSeam;
-				if (providerSeam.steering && providerSeam.workspaceRetention !== void 0) throw new ValidationError$1("createExecutor(provider, steering): workspaceRetention cannot be used with steering because the session-owned environment has no single-shot preservation barrier");
 				const provider = resolveAgentEnvironmentProvider(providerSeam.provider, providerSeam.registry);
 				if (providerSeam.steering) {
 					if (providerSeam.taskToTurn) throw new ValidationError$1("createExecutor(provider, steering): taskToTurn is not representable by the text-only steerable session");
 					if (providerSeam.destroyOnSettle === false) throw new ValidationError$1("createExecutor(provider, steering): destroyOnSettle=false conflicts with the session-owned environment lifecycle");
 					if (providerSeam.validator) throw new ValidationError$1("createExecutor(provider, steering): validator is not representable with steering — the steerable session is a multi-turn session on one environment, not a scored single-shot leaf, so the score would be silently dropped");
 					const harness = requiredProviderProfileHarness(spec, providerSeam);
+					const workspaceCaptures = [];
 					const sandboxClient = providerAsSandboxClient(provider, {
 						defaults: {
 							...providerSeam.defaults ?? {},
 							signal: seamed.signal
 						},
 						requireTerminalEvent: providerSeam.requireTerminalEvent,
-						requireSession: true
+						requireSession: true,
+						...providerSeam.workspaceRetention === void 0 ? {} : {
+							workspaceRetention: providerSeam.workspaceRetention,
+							retentionIdentity: {
+								executionId: seamed.node?.nodeId ?? `provider-run-${randomUUID()}`,
+								profile: spec.profile,
+								...seamed.node === void 0 ? {} : { node: seamed.node }
+							},
+							onWorkspaceCaptured: (receipt) => {
+								workspaceCaptures.push(receipt);
+							}
+						}
 					});
 					const providerCtx = {
 						...seamed,
@@ -20213,6 +20591,8 @@ function createExecutor(config) {
 							...seamed.seams,
 							[sandboxSeamKey]: {
 								sandboxClient,
+								failOnDestroyError: providerSeam.workspaceRetention !== void 0,
+								...providerSeam.workspaceRetention === void 0 ? {} : { workspaceCaptures: () => workspaceCaptures },
 								steering: providerSeam.steering,
 								...providerSeam.promptOptions === void 0 ? {} : { loopCtx: { promptOptions: providerSeam.promptOptions } }
 							}
@@ -22672,13 +23052,23 @@ async function ownerWorkspaceRetentionFailures(events, nodeId, blobs) {
 		if (!("id" in event) || event.id !== nodeId) continue;
 		if (event.kind === "execution-input") {
 			flush();
-			current = { environmentIds: /* @__PURE__ */ new Set() };
+			current = {
+				environmentIds: /* @__PURE__ */ new Set(),
+				executionByEnvironment: /* @__PURE__ */ new Map()
+			};
 		} else if (event.kind === "execution-admitted" && event.admission.phase === "environment") {
 			if (current?.result !== void 0) flush();
-			current ??= { environmentIds: /* @__PURE__ */ new Set() };
+			current ??= {
+				environmentIds: /* @__PURE__ */ new Set(),
+				executionByEnvironment: /* @__PURE__ */ new Map()
+			};
 			current.environmentIds.add(event.admission.environmentId);
+			current.executionByEnvironment.set(event.admission.environmentId, event.admission.executionId);
 		} else if (event.kind === "execution-result") {
-			current ??= { environmentIds: /* @__PURE__ */ new Set() };
+			current ??= {
+				environmentIds: /* @__PURE__ */ new Set(),
+				executionByEnvironment: /* @__PURE__ */ new Map()
+			};
 			current.result = event;
 		}
 	}
@@ -22702,14 +23092,24 @@ async function ownerWorkspaceRetentionFailures(events, nodeId, blobs) {
 		} catch {
 			output = void 0;
 		}
-		if (!hasDurableWorkspaceSnapshot(output !== null && typeof output === "object" ? output.workspaceSnapshot : void 0)) for (const environmentId of attempt.environmentIds) failures.add(environmentId);
+		const snapshot = output !== null && typeof output === "object" ? output.workspaceSnapshot : void 0;
+		const environmentId = [...attempt.environmentIds][0];
+		const executionId = attempt.executionByEnvironment.get(environmentId);
+		if (!hasDurableWorkspaceCapture(output, snapshot, environmentId, executionId)) failures.add(environmentId);
 	}
 	return failures;
 }
-/** A stored result is deletion authority only when it names the durable archive capture wrote. */
-function hasDurableWorkspaceSnapshot(value) {
-	const parsed = agentCandidateWorkspaceSnapshotEvidenceSchema.safeParse(value);
-	return parsed.success && "locator" in parsed.data.manifest && "locator" in parsed.data.archive;
+/** A stored result authorizes cleanup only for the exact source and complete capture. */
+function hasDurableWorkspaceCapture(output, snapshot, environmentId, executionId) {
+	const parsed = agentCandidateWorkspaceSnapshotEvidenceSchema.safeParse(snapshot);
+	if (!parsed.success || !("locator" in parsed.data.manifest) || !("locator" in parsed.data.archive)) return false;
+	if (output === null || typeof output !== "object") return false;
+	const capture = output.workspaceCapture;
+	if (capture === null || typeof capture !== "object") return false;
+	const receipt = capture;
+	if (receipt.environmentId !== environmentId || receipt.executionId !== executionId || receipt.coverageComplete !== true) return false;
+	const linked = agentCandidateWorkspaceSnapshotEvidenceSchema.safeParse(receipt.snapshot);
+	return linked.success && linked.data.digest === parsed.data.digest && JSON.stringify(linked.data.manifest) === JSON.stringify(parsed.data.manifest) && JSON.stringify(linked.data.archive) === JSON.stringify(parsed.data.archive);
 }
 /** Environment ids this owner's provider confirmed gone, from their teardown receipts. */
 function destroyedEnvironmentIds(owned) {
@@ -28223,6 +28623,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { bindScopeRetainedOwnerEnvironmentId as $, detachedSnapshot as $i, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as $n, runSettledCommand as $r, isTraceAnalysisStore as $t, driverExecutorFactory as A, resourceTelemetry as Aa, readCommittedJsonLines as Ai, executorFailure as An, createPropagatingTraceEmitter as Ar, cliWorktreeExecutor as At, recordScopeOwnerMaterialization as B, promptOptionsFromAgentTurnInput as Ba, providerAttemptEvidence as Bi, createSandboxForSpec as Bn, createOpenInferenceFileExporter as Br, FileSpawnJournal as Bt, createContinuationKeeper as C, stringifySafe as Ca, renderUnsupported as Ci, claimsAuthority as Cn, linkAbort as Cr, startRetainedInteractiveRun as Ct, passedItems as D, withTimeout as Da, worktreeCliProfileMaterialization as Di, peerMailVerbNames as Dn, persistHarnessTranscript as Dr, bindReusableExecutorExecutionId as Dt, failedItems as E, unmeteredSpend as Ea, validateProfileMaterialization as Ei, peerMailTools as En, harnessTranscriptArtifact as Er, rollingDispatch as Et, beginScopeOwnerAttempt as F, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Fa, finalizeRuntimeOwnedPendingExecutor as Fi, harnessUsageIsEmpty as Fn, defaultRedactorIdentityMaterial as Fr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Ft, createWorkerSlots as G, runtimeOwnedExecutorProviderEvidence as Gi, probeSandboxCapabilities as Gn, padSpanId as Gr, encodeResultBlob as Gt, restoreScopeOwnerAcceptedExecution as H, runtimeOwnedDriveHarnessProviderEvidence as Hi, isTerminalDecision as Hn, flatOtelSpan as Hr, InMemorySpawnJournal as Ht, createScope as I, armDeadlineTimer as Ia, inheritRuntimeOwnedExecutorAttestation as Ii, readCodexRolloutSession as In, resolveRedactor as Ir, createSteerableSandboxSession as It, isWaitOutcome as J, unknownExecutionBindingReceipt as Ji, readPromptOptions as Jn, createRuntimeEventCollector as Jr, materializeTreeView as Jt, openSlotGroup as K, runtimeOwnedPendingExecutorMaterialization as Ki, acquireSandbox as Kn, padTraceId as Kr, insideCursorNamespace as Kt, deriveNodeExecutionIdentity as L, teardownExecutor as La, knownExecutionBindingReceipt as Li, bridgeRuntimeAttachmentsKey as Ln, buildLoopOtelSpans as Lr, createRouterTranscript as Lt, withDriverExecutor as M, decodeHarnessUsage as Ma, attestRuntimeOwnedPendingExecutor as Mi, bridgeModelRouteRefusal as Mn, readTraceContextFromEnv as Mr, createExecutorRegistry as Mt, SUBTREE_RESULT_LIMIT as N, abortError$2 as Na, attestRuntimeOwnedScopeOwner as Ni, addHarnessUsage as Nn, traceContextToEnv as Nr, snapshotExecutorConfig as Nt, verdictFromJudgeScore as O, zeroSpend as Oa, isNoEntError as Oi, isLiveNodeStatus as On, readHarnessTranscript as Or, captureReusableExecutorConfig as Ot, assertRecursiveReservationPolicy as P, awaitAbortable$1 as Pa, authoredProfileDigest as Pi, createCodexRolloutStoreReader as Pn, defaultRedactor as Pr, createWorktreeCliExecutor as Pt, waitUntil as Q, detachedFrozen as Qi, observedModelMatchesDeclared as Qn, sanitizeRuntimeStreamEvent as Qr, captureWorkerTraceEvidence as Qt, meterRuntimeOwnedAccounting as R, teardownSurfaces as Ra, knownMaterializationReceipt as Ri, bridgeStopSignalKey as Rn, buildLoopSpanNodes as Rr, createInPlaceCliExecutor as Rt, composeContinuationNote as S, sleep as Sa, renderProfileMaterializationIssues as Si, PEER_MAIL_WIRE_KEY as Sn, abortError as Sr, recoverRetainedInteractiveRun as St, expandQuestions as T, throwIfAborted as Ta, unsupportedProfileDimensions as Ti, isPeerMailEnvelope as Tn, captureHarnessTranscript as Tr, queueOf as Tt, scopeOwnerExecutorNodeContext as U, runtimeOwnedExecutorExecutionBinding as Ui, runAgentRounds as Un, generateSpanId as Ur, SpawnEventIndex as Ut, recordScopeOwnerPause as V, providerMessageText as Va, recordRuntimeOwnedDriveHarnessProviderEvidence as Vi, defaultSelectWinner as Vn, createOtelExporter as Vr, InMemoryResultBlobStore as Vt, settledToIteration as W, runtimeOwnedExecutorMaterialization as Wi, createSandboxLineage as Wn, loopEventToOtelSpan as Wr, assertContentAddress as Wt, timerAt as X, executableAgentProfileSnapshot as Xi, runBrainLoop as Xn, sanitizeAgentRuntimeEvent as Xr, replaySpawnTree as Xt, pollFor as Y, unknownMaterializationReceipt as Yi, routerBrain as Yn, createRuntimeStreamEventCollector as Yr, pendingWaits as Yt, validateWaitSpec as Z, executableAgentSpecSnapshot as Zi, canonicalObservedModelParts as Zn, sanitizeKnowledgeReadinessReport as Zr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Zt, CheckUnavailableError as _, deleteBoxSafe as _a, profileMaterializationAxes$1 as _i, createActivityLog as _n, startRetainedRunInEnvironment as _r, attachWorker as _t, collectDelivered as a, createSandboxUsageLedger as aa, LOCAL_HARNESSES as ai, createBudgetPool as an, sandboxClientAsProvider as ar, scopeRetainedOwnerContext as at, bestComposite as b, promptCacheTokenClasses as ba, promptOnlyProfileMaterialization as bi, AUTHORITY_MARKERS as bn, environmentGone as br, workerInteractiveBindingsDir as bt, runTree as c, mapSandboxEvent as ca, localHarnessExecutable as ci, spendFromUsageEvents as cn, createPushTraceSource as cr, scopeRetainedOwnerRestorePoint as ct, classifyDriverFailure as d, sandboxEventServedBackend as da, terminateProcessTreeAndConfirm as di, readWorkerTraceContext as dn, registerRetainedExecutorPreparation as dr, environmentReader as dt, projectSandboxOutcome as ea, runWorktreeHarness as ei, parseWorkerToolTraceArtifact as en, LEAF_CONTINUATION_TASK as er, bindScopeRetainedOwnerProvider as et, runDriverWithRetry as f, sandboxProgressEvents as fa, AGENT_PROFILE_MATERIALIZATION_AXES as fi, workerTraceEnv as fn, retainedExecutorSeamKey as fr, hostDirectoryReader as ft, CONTINUATION_FACTS as g, cloneSpend as ga, fullProfileMaterialization as gi, DEFAULT_STALL_AFTER_MS as gn, startRetainedRun as gr, workerInteractiveAdmissionFile as gt, CONTINUATIONS_DIR as h, chargedTokens as ha, defineProfileMaterializationContract as hi, taskToPrompt as hn, recoverRetainedRun as hr, readWorkerInteractiveAdmissions as ht, bestDelivered as i, createSandboxToolPartState as ia, DEFAULT_LOCAL_HARNESS as ii, assertValidBudget as in, resolveAgentEnvironmentProvider as ir, reconcileScopeRetainedOwnerEnvironment as it, isDriverSpec as j, withBudgetResources as ja, writeAllBytes as ji, bridgeAdmissionRefusal as jn, mergeTraceEnv as jr, createExecutor as jt, driverChild as k, addResourceSpend as ka, prepareJsonlAppend as ki, isTerminalNodeStatus as kn, contentAddress as kr, cliInPlaceExecutor as kt, DriverAttemptsExhaustedError as l, mapSandboxToolEvent as la, parseCodexTokenUsage as li, spendFromUsageTotals as ln, decodeToolPart as lr, scopeRetainedOwnerResult as lt, upstreamUnavailableSignal as m, addSpend as ma, controlProfileMaterialization as mi, workerTraceSeamKey as mn, reconnectRetainedRun as mr, interactiveAdmissionSeamKey as mt, createRootHandle as n, assertSandboxServedModel as na, createWorktree as ni, BudgetReconcileFault as nn, providerAsExecutor as nr, noteScopeRetainedOwnerCoordination as nt, pickBestDelivered as o, extractLlmCallEvent as oa, harnessInvocation as oi, meterUsageEvent as on, unavailablePauseMs as or, scopeRetainedOwnerPriorSpend as ot, summarizeDriverAttempts as p, sumSandboxUsage as pa, assertProfileMaterialization as pi, workerTraceHeaders as pn, errMessage as pr, resolveSpawnResourcePaths as pt, createWaitProbes as q, runtimeOwnedScopeOwnerRuntime as qi, assertBoxlessPromptOptions as qn, toOtelAttributes as qr, loadSpawnForest as qt, createSupervisor as r, canonicalStreamEventFromSandboxEvent as ra, removeWorktree as ri, ReservationWaitRefused as rn, providerAsSandboxClient as rr, prepareScopeRetainedOwnerTask as rt, runFinalizer as s, isSandboxTerminalEvent as sa, harnessSupportsReasoningEffort as si, newUsageTotals as sn, unavailableSignalOfFailure as sr, scopeRetainedOwnerResourceReader as st, DEFAULT_MAX_DEPTH as t, readSandboxOutcome as ta, captureWorktreeDiff as ti, workerTraceAnalysisStore as tn, createAgentEnvironmentProviderRegistry as tr, consumeScopeRetainedOwnerResult as tt, HarnessTurnFailedError as u, notifySandboxEventObserver as ua, CodexExecutionDiagnosticError as ui, WORKER_TRACE_PROPAGATION as un, sandboxSessionTraceSource as ur, SPAWN_RESOURCE_PATH_MAX_BYTES as ut, admitContinuationPolicy as v, hasCompleteCacheBreakdown as va, promptControlProfileMaterialization as vi, readWorkerProgress as vn, retainedCreateMaterial as vr, readWorkerInteractiveBinding as vt, distillFindings as w, throwAbort as wa, sandboxActProfileMaterialization as wi, createPeerMailbox as wn, runAbortable as wr, freeSlots as wt, checkVerdictOf as x, randomSuffix as xa, promptResourceProfileMaterialization as xi, DEFAULT_PEER_MAIL_LIMITS as xn, RunCancellationReason as xr, reconnectRetainedInteractiveRun as xt, admitFinding as y, isAbortError$2 as ya, promptModelProfileMaterialization as yi, createInbox as yn, destroyInteractiveEnvironment as yr, workerInteractiveBindingFile as yt, meterRuntimeOwnedProviderAttempt as z, promptFromAgentTurnInput as za, newExecutionAttemptId as zi, TERMINAL_DECISIONS as zn, buildRuntimeEventOtelSpans as zr, FileResultBlobStore as zt };
+export { bindScopeRetainedOwnerEnvironmentId as $, executableAgentSpecSnapshot as $i, canonicalObservedModelParts as $n, sanitizeKnowledgeReadinessReport as $r, isTraceAnalysisStore as $t, driverExecutorFactory as A, zeroSpend as Aa, isNoEntError as Ai, executorFailure as An, readHarnessTranscript as Ar, cliWorktreeExecutor as At, recordScopeOwnerMaterialization as B, teardownSurfaces as Ba, knownMaterializationReceipt as Bi, createSandboxForSpec as Bn, buildLoopSpanNodes as Br, FileSpawnJournal as Bt, createContinuationKeeper as C, randomSuffix as Ca, promptResourceProfileMaterialization as Ci, claimsAuthority as Cn, RunCancellationReason as Cr, startRetainedInteractiveRun as Ct, passedItems as D, throwIfAborted as Da, unsupportedProfileDimensions as Di, peerMailVerbNames as Dn, captureHarnessTranscript as Dr, bindReusableExecutorExecutionId as Dt, failedItems as E, throwAbort as Ea, sandboxActProfileMaterialization as Ei, peerMailTools as En, runAbortable as Er, rollingDispatch as Et, beginScopeOwnerAttempt as F, abortError$2 as Fa, attestRuntimeOwnedScopeOwner as Fi, harnessUsageIsEmpty as Fn, traceContextToEnv as Fr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Ft, createWorkerSlots as G, runtimeOwnedExecutorExecutionBinding as Gi, probeSandboxCapabilities as Gn, generateSpanId as Gr, encodeResultBlob as Gt, restoreScopeOwnerAcceptedExecution as H, promptOptionsFromAgentTurnInput as Ha, providerAttemptEvidence as Hi, isTerminalDecision as Hn, createOpenInferenceFileExporter as Hr, InMemorySpawnJournal as Ht, createScope as I, awaitAbortable$1 as Ia, authoredProfileDigest as Ii, readCodexRolloutSession as In, defaultRedactor as Ir, createSteerableSandboxSession as It, isWaitOutcome as J, runtimeOwnedPendingExecutorMaterialization as Ji, captureBeforeDestroy as Jn, padTraceId as Jr, materializeTreeView as Jt, openSlotGroup as K, runtimeOwnedExecutorMaterialization as Ki, acquireSandbox as Kn, loopEventToOtelSpan as Kr, insideCursorNamespace as Kt, deriveNodeExecutionIdentity as L, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as La, finalizeRuntimeOwnedPendingExecutor as Li, bridgeRuntimeAttachmentsKey as Ln, defaultRedactorIdentityMaterial as Lr, createRouterTranscript as Lt, withDriverExecutor as M, resourceTelemetry as Ma, readCommittedJsonLines as Mi, bridgeModelRouteRefusal as Mn, createPropagatingTraceEmitter as Mr, createExecutorRegistry as Mt, SUBTREE_RESULT_LIMIT as N, withBudgetResources as Na, writeAllBytes as Ni, addHarnessUsage as Nn, mergeTraceEnv as Nr, snapshotExecutorConfig as Nt, verdictFromJudgeScore as O, unmeteredSpend as Oa, validateProfileMaterialization as Oi, isLiveNodeStatus as On, harnessTranscriptArtifact as Or, captureReusableExecutorConfig as Ot, assertRecursiveReservationPolicy as P, decodeHarnessUsage as Pa, attestRuntimeOwnedPendingExecutor as Pi, createCodexRolloutStoreReader as Pn, readTraceContextFromEnv as Pr, createWorktreeCliExecutor as Pt, waitUntil as Q, executableAgentProfileSnapshot as Qi, runBrainLoop as Qn, sanitizeAgentRuntimeEvent as Qr, captureWorkerTraceEvidence as Qt, meterRuntimeOwnedAccounting as R, armDeadlineTimer as Ra, inheritRuntimeOwnedExecutorAttestation as Ri, bridgeStopSignalKey as Rn, resolveRedactor as Rr, createInPlaceCliExecutor as Rt, composeContinuationNote as S, promptCacheTokenClasses as Sa, promptOnlyProfileMaterialization as Si, PEER_MAIL_WIRE_KEY as Sn, environmentGone as Sr, recoverRetainedInteractiveRun as St, expandQuestions as T, stringifySafe as Ta, renderUnsupported as Ti, isPeerMailEnvelope as Tn, linkAbort as Tr, queueOf as Tt, scopeOwnerExecutorNodeContext as U, providerMessageText as Ua, recordRuntimeOwnedDriveHarnessProviderEvidence as Ui, runAgentRounds as Un, createOtelExporter as Ur, SpawnEventIndex as Ut, recordScopeOwnerPause as V, promptFromAgentTurnInput as Va, newExecutionAttemptId as Vi, defaultSelectWinner as Vn, buildRuntimeEventOtelSpans as Vr, InMemoryResultBlobStore as Vt, settledToIteration as W, runtimeOwnedDriveHarnessProviderEvidence as Wi, createSandboxLineage as Wn, flatOtelSpan as Wr, assertContentAddress as Wt, timerAt as X, unknownExecutionBindingReceipt as Xi, readPromptOptions as Xn, createRuntimeEventCollector as Xr, replaySpawnTree as Xt, pollFor as Y, runtimeOwnedScopeOwnerRuntime as Yi, assertBoxlessPromptOptions as Yn, toOtelAttributes as Yr, pendingWaits as Yt, validateWaitSpec as Z, unknownMaterializationReceipt as Zi, routerBrain as Zn, createRuntimeStreamEventCollector as Zr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Zt, CheckUnavailableError as _, chargedTokens as _a, defineProfileMaterializationContract as _i, createActivityLog as _n, recoverRetainedRun as _r, attachWorker as _t, collectDelivered as a, canonicalStreamEventFromSandboxEvent as aa, removeWorktree as ai, createBudgetPool as an, providerAsSandboxClient as ar, scopeRetainedOwnerContext as at, bestComposite as b, hasCompleteCacheBreakdown as ba, promptControlProfileMaterialization as bi, AUTHORITY_MARKERS as bn, retainedCreateMaterial as br, workerInteractiveBindingsDir as bt, runTree as c, extractLlmCallEvent as ca, harnessInvocation as ci, spendFromUsageEvents as cn, unavailablePauseMs as cr, scopeRetainedOwnerRestorePoint as ct, classifyDriverFailure as d, mapSandboxToolEvent as da, parseCodexTokenUsage as di, readWorkerTraceContext as dn, decodeToolPart as dr, environmentReader as dt, detachedFrozen as ea, sanitizeRuntimeStreamEvent as ei, parseWorkerToolTraceArtifact as en, observedModelMatchesDeclared as er, bindScopeRetainedOwnerProvider as et, runDriverWithRetry as f, notifySandboxEventObserver as fa, CodexExecutionDiagnosticError as fi, workerTraceEnv as fn, sandboxSessionTraceSource as fr, hostDirectoryReader as ft, CONTINUATION_FACTS as g, addSpend as ga, controlProfileMaterialization as gi, DEFAULT_STALL_AFTER_MS as gn, reconnectRetainedRun as gr, workerInteractiveAdmissionFile as gt, CONTINUATIONS_DIR as h, sumSandboxUsage as ha, assertProfileMaterialization as hi, taskToPrompt as hn, errMessage as hr, readWorkerInteractiveAdmissions as ht, bestDelivered as i, assertSandboxServedModel as ia, createWorktree as ii, assertValidBudget as in, providerAsExecutor as ir, reconcileScopeRetainedOwnerEnvironment as it, isDriverSpec as j, addResourceSpend as ja, prepareJsonlAppend as ji, bridgeAdmissionRefusal as jn, contentAddress as jr, createExecutor as jt, driverChild as k, withTimeout as ka, worktreeCliProfileMaterialization as ki, isTerminalNodeStatus as kn, persistHarnessTranscript as kr, cliInPlaceExecutor as kt, DriverAttemptsExhaustedError as l, isSandboxTerminalEvent as la, harnessSupportsReasoningEffort as li, spendFromUsageTotals as ln, unavailableSignalOfFailure as lr, scopeRetainedOwnerResult as lt, upstreamUnavailableSignal as m, sandboxProgressEvents as ma, AGENT_PROFILE_MATERIALIZATION_AXES as mi, workerTraceSeamKey as mn, retainedExecutorSeamKey as mr, interactiveAdmissionSeamKey as mt, createRootHandle as n, projectSandboxOutcome as na, runWorktreeHarness as ni, BudgetReconcileFault as nn, LEAF_CONTINUATION_TASK as nr, noteScopeRetainedOwnerCoordination as nt, pickBestDelivered as o, createSandboxToolPartState as oa, DEFAULT_LOCAL_HARNESS as oi, meterUsageEvent as on, resolveAgentEnvironmentProvider as or, scopeRetainedOwnerPriorSpend as ot, summarizeDriverAttempts as p, sandboxEventServedBackend as pa, terminateProcessTreeAndConfirm as pi, workerTraceHeaders as pn, registerRetainedExecutorPreparation as pr, resolveSpawnResourcePaths as pt, createWaitProbes as q, runtimeOwnedExecutorProviderEvidence as qi, SandboxEvidenceRetentionError as qn, padSpanId as qr, loadSpawnForest as qt, createSupervisor as r, readSandboxOutcome as ra, captureWorktreeDiff as ri, ReservationWaitRefused as rn, createAgentEnvironmentProviderRegistry as rr, prepareScopeRetainedOwnerTask as rt, runFinalizer as s, createSandboxUsageLedger as sa, LOCAL_HARNESSES as si, newUsageTotals as sn, sandboxClientAsProvider as sr, scopeRetainedOwnerResourceReader as st, DEFAULT_MAX_DEPTH as t, detachedSnapshot as ta, runSettledCommand as ti, workerTraceAnalysisStore as tn, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as tr, consumeScopeRetainedOwnerResult as tt, HarnessTurnFailedError as u, mapSandboxEvent as ua, localHarnessExecutable as ui, WORKER_TRACE_PROPAGATION as un, createPushTraceSource as ur, SPAWN_RESOURCE_PATH_MAX_BYTES as ut, admitContinuationPolicy as v, cloneSpend as va, fullProfileMaterialization as vi, readWorkerProgress as vn, startRetainedRun as vr, readWorkerInteractiveBinding as vt, distillFindings as w, sleep as wa, renderProfileMaterializationIssues as wi, createPeerMailbox as wn, abortError as wr, freeSlots as wt, checkVerdictOf as x, isAbortError$2 as xa, promptModelProfileMaterialization as xi, DEFAULT_PEER_MAIL_LIMITS as xn, destroyInteractiveEnvironment as xr, reconnectRetainedInteractiveRun as xt, admitFinding as y, deleteBoxSafe as ya, profileMaterializationAxes$1 as yi, createInbox as yn, startRetainedRunInEnvironment as yr, workerInteractiveBindingFile as yt, meterRuntimeOwnedProviderAttempt as z, teardownExecutor as za, knownExecutionBindingReceipt as zi, TERMINAL_DECISIONS as zn, buildLoopOtelSpans as zr, FileResultBlobStore as zt };
 
-//# sourceMappingURL=supervisor-YAc4U8HQ.js.map
+//# sourceMappingURL=supervisor-D4NnNHZd.js.map