@tangle-network/agent-runtime 0.283.1 → 0.284.0

package/dist/{stream-agent-turn-Bk79CnTw.d.ts → stream-agent-turn-IIqBKeLB.d.ts}

@@ -1,5 +1,5 @@
-import { $a as RuntimeStreamEvent, C as ExecutorToolCall, Ca as Validator, Ha as AgentTaskStatus, Pn as ExecutorProgress, Qi as ExecCtx, Tn as TraceSource, Ua as BackendErrorDetail, X as Scope, Y as Runtime, b as ExecutorRegistry, ba as SandboxClient, f as ExecutorCancellation, fa as LoopTokenUsage, g as ExecutorFactory, gt as UsageEvent, p as ExecutorCancellationRequest, rt as Spend, s as DefaultVerdict, vr as UnavailablePausePolicy, y as ExecutorProgressEvent } from "./types-D56jQad-.js";
-import { t as AgentCandidateArtifactPort } from "./types-CuXu5zuS.js";
+import { $a as RuntimeStreamEvent, C as ExecutorToolCall, Ca as Validator, Ha as AgentTaskStatus, Pn as ExecutorProgress, Qi as ExecCtx, Tn as TraceSource, Ua as BackendErrorDetail, X as Scope, Y as Runtime, b as ExecutorRegistry, ba as SandboxClient, f as ExecutorCancellation, fa as LoopTokenUsage, g as ExecutorFactory, gt as UsageEvent, p as ExecutorCancellationRequest, rt as Spend, s as DefaultVerdict, v as ExecutorNodeContext, vr as UnavailablePausePolicy, y as ExecutorProgressEvent } from "./types-D56jQad-.js";
+import { c as AgentCandidateArtifactPort, t as AgentCandidateWorkspaceArchiveLimits } from "./workspace-archive-DpyZV2Cj.js";
 import { AgentCandidateWorkspaceSnapshotEvidence, AgentProfile, AgentProfileMcpServer, AgentProfileValidationResult, HarnessType, ReasoningEffort, StreamEvent } from "@tangle-network/agent-interface";
 import { AgentRunOutcome } from "@tangle-network/sandbox/runtime";
 import { ChildProcess } from "node:child_process";
@@ -825,15 +825,126 @@ interface ProviderPlacement {
 interface ProviderWorkspaceRetentionPort {
   /** Maximum wall-clock time Runtime gives capture and verification. */
   readonly timeoutMs: number;
+  /** Same explicit archive bounds used by the capture callback. */
+  readonly limits?: Partial<AgentCandidateWorkspaceArchiveLimits>;
+  /** Refuse cleanup while any native session or workspace coverage remains missing. */
+  readonly requireCompleteProvenance?: boolean;
   /** Reads the durable manifest and archive after capture returns. */
   readonly artifacts: AgentCandidateArtifactPort;
   /** Capture the live environment into the standard candidate workspace evidence shape. */
-  capture(context: ProviderWorkspaceRetentionContext): Promise<AgentCandidateWorkspaceSnapshotEvidence>;
+  capture(context: ProviderWorkspaceRetentionContext): Promise<AgentCandidateWorkspaceSnapshotEvidence | ProviderWorkspaceCaptureResult>;
+}
+/** Source inventory metadata for a workspace entry. */
+interface ProviderWorkspaceEntryMetadata {
+  readonly path: string;
+  readonly type: 'file' | 'directory' | 'symlink';
+  readonly sizeBytes: number;
+  readonly mode: number;
+  readonly owner?: string | null;
+  readonly group?: string | null;
+  readonly modifiedAt?: string | null;
+  readonly accessedAt?: string | null;
+  readonly symlinkTarget?: string | null;
+}
+/** Source-reported coverage retained with the verified archive reference. */
+interface ProviderWorkspaceCaptureProvenance {
+  readonly status: 'reported' | 'unavailable';
+  readonly provider?: string;
+  readonly environmentId?: string;
+  readonly executionId?: string;
+  readonly workspaceScope?: 'environment';
+  readonly workspaceRoot?: string;
+  readonly capturedAt?: string;
+  readonly entries?: ReadonlyArray<ProviderWorkspaceEntryMetadata>;
+  readonly excludedPaths?: ReadonlyArray<ProviderWorkspaceEntryMetadata & {
+    readonly reason: string;
+  }>;
+  readonly workspace?: {
+    readonly scannedFiles: number;
+    readonly scannedDirectories: number;
+    readonly reportedFiles: number;
+    readonly reportedDirectories: number;
+    readonly complete: boolean;
+  };
+  readonly sessions?: ReadonlyArray<{
+    readonly id: string;
+    readonly executionId: string;
+    readonly transportEvents: string;
+    readonly eventCount: number;
+    readonly messageCount: number;
+    readonly messageScope?: string;
+    readonly backendType?: string;
+    readonly executionIds?: ReadonlyArray<string>;
+    readonly eventCountsByExecutionId?: Readonly<Record<string, number>>;
+    readonly nativeSessionId?: string | null;
+    readonly nativeReason?: string | null;
+    readonly sidecarImageDigest?: string | null;
+    readonly sidecarBundleRevision?: string | null;
+    readonly nativeStore?: {
+      readonly scope: 'session';
+      readonly roots: ReadonlyArray<{
+        readonly scope: 'session-home' | 'workspace-session';
+        readonly path: string;
+      }>;
+      readonly inventory: {
+        readonly scannedFiles: number;
+        readonly reportedFiles: number;
+        readonly scannedDirectories: number;
+        readonly reportedDirectories: number;
+        readonly scannedSymlinks: number;
+        readonly reportedSymlinks: number;
+        readonly skippedEntries: number;
+      } | null;
+      readonly complete: boolean;
+      readonly entries: ReadonlyArray<{
+        readonly rootScope: 'session-home' | 'workspace-session';
+        readonly path: string;
+        readonly kind: 'file' | 'directory' | 'symlink';
+        readonly mode: number;
+        readonly sizeBytes: number;
+        readonly sha256: string | null;
+        readonly linkTarget: string | null;
+      }>;
+      readonly excludedPaths: ReadonlyArray<{
+        readonly rootScope: 'session-home' | 'workspace-session';
+        readonly path: string;
+        readonly kind: 'file' | 'directory' | 'symlink';
+        readonly mode: number;
+        readonly sizeBytes: number;
+        readonly reason: 'credential';
+      }>;
+    };
+    readonly processStreams?: {
+      readonly complete: boolean;
+      readonly streamCount: number;
+      readonly stdinBytes: number;
+      readonly stdoutBytes: number;
+      readonly stderrBytes: number;
+      readonly protocolBytes: number;
+    };
+    readonly nativeEvents?: {
+      readonly complete: boolean;
+      readonly count: number;
+    };
+  }>;
+  readonly missing: ReadonlyArray<string>;
+}
+interface ProviderWorkspaceCaptureResult {
+  readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence;
+  readonly provenance: ProviderWorkspaceCaptureProvenance;
+  readonly coverageComplete?: boolean;
+  readonly incompleteReason?: string;
 }
 /** The exact live execution facts supplied to a retention callback. */
 interface ProviderWorkspaceRetentionContext {
   readonly environment: AgentEnvironment;
   readonly executionId: string;
+  /** Exact supervised tree identity, when a supervisor created this execution. */
+  readonly node?: ExecutorNodeContext;
+  /** Sandbox/provider session used for this turn; null means no session id was observed. */
+  readonly providerSessionId?: string | null;
+  /** The harness's own session identity is unknown until a provider reports it. */
+  readonly nativeSessionId?: string | null;
   /** The exact profile used to create the provider environment. */
   readonly profile: AgentProfile;
   /** The provider-derived outcome, when one was available before cleanup. */
@@ -841,6 +952,20 @@ interface ProviderWorkspaceRetentionContext {
   /** A fresh signal bounded by {@link ProviderWorkspaceRetentionPort.timeoutMs}. */
   readonly signal: AbortSignal;
 }
+/** Durable join from one provider box to the verified bytes retained before cleanup. */
+interface ProviderWorkspaceCaptureReceipt {
+  readonly executionId: string;
+  readonly node?: ExecutorNodeContext;
+  readonly environmentId: string;
+  /** Immutable authored AgentProfile identity; run records retain its content. */
+  readonly profileDigest: string;
+  readonly providerSessionId: string | null;
+  readonly nativeSessionId: string | null;
+  readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence;
+  readonly provenance: ProviderWorkspaceCaptureProvenance;
+  readonly coverageComplete: boolean;
+  readonly incompleteReason?: string;
+}
 //#endregion
 //#region src/runtime/tangle-sandbox-exact-process-provider.d.ts
 type SandboxControlClient = Pick<Sandbox, 'create' | 'get' | 'list'>;
@@ -885,6 +1010,16 @@ interface ProviderAsSandboxClientOptions {
   requireTerminalEvent?: boolean;
   /** Require declared live continuation plus concrete session controls. */
   requireSession?: boolean;
+  /** Verified workspace capture before every environment delete, including steerable sessions. */
+  workspaceRetention?: ProviderWorkspaceRetentionPort;
+  /** Supervised identity assigned before the environment is created. */
+  retentionIdentity?: {
+    executionId: string;
+    profile: AgentProfile;
+    node?: ExecutorNodeContext;
+  };
+  /** Called after verification and before deletion so the run result can retain the exact join. */
+  onWorkspaceCaptured?: (receipt: ProviderWorkspaceCaptureReceipt) => void;
   mapCreateOptions?: (options: CreateSandboxOptions | undefined) => Partial<CreateAgentEnvironmentInput>;
 }
 /** Adapt a neutral environment provider to the `SandboxClient` interface used by existing loop paths.
@@ -952,6 +1087,8 @@ interface ProviderLeafOut {
   events: AgentEnvironmentEvent[];
   /** Portable executable workspace evidence accepted before the source environment was deleted. */
   workspaceSnapshot?: AgentCandidateWorkspaceSnapshotEvidence;
+  /** Exact provider and supervisor identities bound to the retained bytes. */
+  workspaceCapture?: ProviderWorkspaceCaptureReceipt;
   /** How many streamed part updates the archive left out because a later frame superseded them. */
   supersededPartUpdates?: number;
 }
@@ -1843,6 +1980,9 @@ interface SteerableSandboxArgs {
   readonly profile: AgentProfile;
   readonly harness: BackendType;
   readonly sandboxClient: SandboxClient;
+  /** Require capture failures at box cleanup to fail the supervised worker. */
+  readonly failOnDestroyError?: boolean;
+  readonly workspaceCaptures?: () => ReadonlyArray<ProviderWorkspaceCaptureReceipt>;
   readonly inbox: Inbox;
   readonly taskToPrompt: (task: unknown) => string;
   readonly options?: SandboxSteeringOptions;
@@ -1880,6 +2020,10 @@ interface RouterSeam {
  */
 interface SandboxSeam {
   sandboxClient: SandboxClient;
+  /** Surface evidence capture failures from session cleanup. */
+  failOnDestroyError?: boolean;
+  /** Verified provider captures collected before session teardown. */
+  workspaceCaptures?: () => ReadonlyArray<ProviderWorkspaceCaptureReceipt>;
   /** Forwarded into the composed `runAgentRounds`'s `ctx` (trace emitter, run handle, etc.). */
   loopCtx?: Partial<Omit<ExecCtx, 'sandboxClient' | 'signal'>>;
   /** PR #150 `RunAgentRoundsOptions.lineage` passthrough — opaque; forwarded, not parsed. */
@@ -2268,5 +2412,5 @@ declare function streamAgentTurn(backend: AgentTurnBackend, input: AgentTurnInpu
  */
 declare function collectAgentTurn(stream: AsyncIterable<RuntimeStreamEvent>): Promise<CollectedAgentTurn>;
 //#endregion
-export { decodeHarnessUsage as $, PeerMailLimits as $n, ResourceRequest as $t, createInbox as A, DEFAULT_LOCAL_HARNESS as An, AgentEnvironmentProvider$1 as At, secretEnvOfMcpServer as B, ToolSpec as Bn, AgentTurnResult$2 as Bt, SteerableSandboxArgs as C, WorktreeHandle as Cn, mapSandboxToolEvent as Ct, Inbox as D, CodexExecutionEvidence as Dn, AgentEnvironment$1 as Dt, AuthorityInboxMessage as E, removeWorktree as En, sumSandboxUsage as Et, ResolvedMcpServerLaunch as F, harnessSupportsReasoningEffort as Fn, AgentEnvironmentSummary as Ft, CodexRolloutStoreRef as G, ToolLoopMessageRecord as Gn, ExecRequest as Gt, CodexRolloutIdentity as H, ToolLoopChat as Hn, CheckpointRequest as Ht, envKeyProvider as I, localHarnessExecutable as In, AgentProfileRef$1 as It, addHarnessUsage as J, DEFAULT_PEER_MAIL_LIMITS as Jn, PlacementInfo as Jt, CodexRolloutTurn as K, ToolLoopToolCall as Kn, ExecResult as Kt, mcpSecretEnvMetadataKey as L, parseCodexTokenUsage as Ln, AgentSession as Lt, BridgeModelCredential as M, LocalHarness as Mn, AgentEnvironmentProviderRegistry as Mt, BridgeSeam as N, LocalHarnessResult as Nn, AgentEnvironmentQuery as Nt, InboxMessage as O, CodexExecutionPolicy as On, AgentEnvironmentCapabilities$1 as Ot, KeyProvider as P, RunLocalHarnessOptions as Pn, AgentEnvironmentStatus as Pt, HarnessUsage as Q, PeerMailKind as Qn, ProviderPromptOptions as Qt, resolveMcpServerLaunch as R, runLocalHarness as Rn, AgentSessionRef as Rt, SandboxSteeringOptions as S, RemoveWorktreeOptions as Sn, mapSandboxEvent as St, createSteerableSandboxSession as T, createWorktree as Tn, sandboxProgressEvents as Tt, CodexRolloutSession as U, ToolLoopCompaction as Un, CreateAgentEnvironmentInput$1 as Ut, CodexForkBoundary as V, ToolLoopCallContext as Vn, CheckpointRef as Vt, CodexRolloutStoreReader as W, ToolLoopCompactionOptions as Wn, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Wt, harnessUsageIsEmpty as X, PeerMailEnvelope as Xn, ProviderExecutorOptions as Xt, createCodexRolloutStoreReader as Y, PEER_MAIL_WIRE_KEY as Yn, ProviderAsSandboxClientOptions as Yt, readCodexRolloutSession as Z, PeerMailEvent as Zn, ProviderLeafOut as Zt, cliInPlaceExecutor as _, WorktreeProfileMaterializationReceipt as _n, defaultRedactor as _r, SandboxUsageLedger as _t, StreamAgentTurnOptions as a, resolveAgentEnvironmentProvider as an, PeerMailboxOptions as ar, SharedBoxPlacement as at, createExecutorRegistry as b, DiffResult as bn, createSandboxUsageLedger as bt, CliInPlaceSeam as c, SandboxControlClient as cn, isPeerMailEnvelope as cr, SharedBoxStats as ct, CliWorktreeSeam as d, ProviderWorkspaceRetentionPort as dn, JsonRpcMessage as dr, sharedBoxRefusal as dt, SandboxClientProviderOptions as en, PeerMailOutcome as er, DEFAULT_SHARED_BOX_RESOURCES as et, ExecutorConfig as f, ProviderPlacement as fn, JsonRpcResponse as fr, sharedWorkerClientName as ft, SandboxSeam as g, WorktreeHarnessResult as gn, Redactor as gr, SandboxToolPartState as gt, RouterToolsSeam as h, WorktreeCommandResult as hn, McpTransport as hr, SandboxServedBackend as ht, CollectedAgentTurn as i, providerAsSandboxClient as in, PeerMailbox as ir, SharedBoxHandle as it, BridgeHarnessStore as j, LOCAL_HARNESSES as jn, AgentEnvironmentProviderRef as jt, PeerInboxMessage as k, CodexTokenUsage as kn, AgentEnvironmentEvent$1 as kt, CliSeam as l, createTangleSandboxExactProcessProvider as ln, peerMailTools as lr, SharedWorkerIdentity as lt, RouterSeam as m, WorktreeCheckRunner as mn, McpToolDescriptor as mr, SandboxOutputMarker as mt, AgentTurnInput$1 as n, createAgentEnvironmentProviderRegistry as nn, PeerMailRefusal as nr, ROUTER_CLIENT_HEADER as nt, collectAgentTurn as o, sandboxClientAsProvider as on, claimsAuthority as or, SharedBoxPlacementOptions as ot, ProviderSeam as p, InPlaceHarnessResult as pn, McpToolAnnotations as pr, SandboxLeafOut as pt, CodexStoreDelta as q, AUTHORITY_MARKERS as qn, ForkRequest as qt, AgentTurnUsage as r, providerAsExecutor as rn, PeerMailSendInput as rr, SharedBoxCloseReceipt as rt, streamAgentTurn as s, CreateTangleSandboxExactProcessProviderOptions as sn, createPeerMailbox as sr, SharedBoxProcess as st, AgentTurnBackend as t, WorkspaceRequest as tn, PeerMailReadout as tr, DEFAULT_SHARED_BOX_WORKERS as tt, CliWorktreeBridgeSeam as u, ProviderWorkspaceRetentionContext as un, peerMailVerbNames as ur, sharedBoxPlacement as ut, cliWorktreeExecutor as v, CreateWorktreeOptions as vn, resolveRedactor as vr, assertSandboxServedModel as vt, SteerableSandboxSession as w, captureWorktreeDiff as wn, sandboxEventServedBackend as wt, DEFAULT_SANDBOX_STEERING_MAX_TURNS as x, GitRunner as xn, extractLlmCallEvent as xt, createExecutor as y, DiffOptions as yn, createSandboxToolPartState as yt, resolveSecretEnv as z, RouterTransportConfig as zn, AgentSessionStatus$1 as zt };
-//# sourceMappingURL=stream-agent-turn-Bk79CnTw.d.ts.map
+export { decodeHarnessUsage as $, PEER_MAIL_WIRE_KEY as $n, ResourceRequest as $t, createInbox as A, removeWorktree as An, AgentEnvironmentProvider$1 as At, secretEnvOfMcpServer as B, localHarnessExecutable as Bn, AgentTurnResult$2 as Bt, SteerableSandboxArgs as C, DiffOptions as Cn, mapSandboxToolEvent as Ct, Inbox as D, WorktreeHandle as Dn, AgentEnvironment$1 as Dt, AuthorityInboxMessage as E, RemoveWorktreeOptions as En, sumSandboxUsage as Et, ResolvedMcpServerLaunch as F, LOCAL_HARNESSES as Fn, AgentEnvironmentSummary as Ft, CodexRolloutStoreRef as G, ToolLoopCallContext as Gn, ExecRequest as Gt, CodexRolloutIdentity as H, runLocalHarness as Hn, CheckpointRequest as Ht, envKeyProvider as I, LocalHarness as In, AgentProfileRef$1 as It, addHarnessUsage as J, ToolLoopCompactionOptions as Jn, PlacementInfo as Jt, CodexRolloutTurn as K, ToolLoopChat as Kn, ExecResult as Kt, mcpSecretEnvMetadataKey as L, LocalHarnessResult as Ln, AgentSession as Lt, BridgeModelCredential as M, CodexExecutionPolicy as Mn, AgentEnvironmentProviderRegistry as Mt, BridgeSeam as N, CodexTokenUsage as Nn, AgentEnvironmentQuery as Nt, InboxMessage as O, captureWorktreeDiff as On, AgentEnvironmentCapabilities$1 as Ot, KeyProvider as P, DEFAULT_LOCAL_HARNESS as Pn, AgentEnvironmentStatus as Pt, HarnessUsage as Q, DEFAULT_PEER_MAIL_LIMITS as Qn, ProviderPromptOptions as Qt, resolveMcpServerLaunch as R, RunLocalHarnessOptions as Rn, AgentSessionRef as Rt, SandboxSteeringOptions as S, CreateWorktreeOptions as Sn, resolveRedactor as Sr, mapSandboxEvent as St, createSteerableSandboxSession as T, GitRunner as Tn, sandboxProgressEvents as Tt, CodexRolloutSession as U, RouterTransportConfig as Un, CreateAgentEnvironmentInput$1 as Ut, CodexForkBoundary as V, parseCodexTokenUsage as Vn, CheckpointRef as Vt, CodexRolloutStoreReader as W, ToolSpec as Wn, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as Wt, harnessUsageIsEmpty as X, ToolLoopToolCall as Xn, ProviderExecutorOptions as Xt, createCodexRolloutStoreReader as Y, ToolLoopMessageRecord as Yn, ProviderAsSandboxClientOptions as Yt, readCodexRolloutSession as Z, AUTHORITY_MARKERS as Zn, ProviderLeafOut as Zt, cliInPlaceExecutor as _, InPlaceHarnessResult as _n, McpToolAnnotations as _r, SandboxUsageLedger as _t, StreamAgentTurnOptions as a, resolveAgentEnvironmentProvider as an, PeerMailReadout as ar, SharedBoxPlacement as at, createExecutorRegistry as b, WorktreeHarnessResult as bn, Redactor as br, createSandboxUsageLedger as bt, CliInPlaceSeam as c, SandboxControlClient as cn, PeerMailbox as cr, SharedBoxStats as ct, CliWorktreeSeam as d, ProviderWorkspaceCaptureReceipt as dn, createPeerMailbox as dr, sharedBoxRefusal as dt, SandboxClientProviderOptions as en, PeerMailEnvelope as er, DEFAULT_SHARED_BOX_RESOURCES as et, ExecutorConfig as f, ProviderWorkspaceCaptureResult as fn, isPeerMailEnvelope as fr, sharedWorkerClientName as ft, SandboxSeam as g, ProviderPlacement as gn, JsonRpcResponse as gr, SandboxToolPartState as gt, RouterToolsSeam as h, ProviderWorkspaceRetentionPort as hn, JsonRpcMessage as hr, SandboxServedBackend as ht, CollectedAgentTurn as i, providerAsSandboxClient as in, PeerMailOutcome as ir, SharedBoxHandle as it, BridgeHarnessStore as j, CodexExecutionEvidence as jn, AgentEnvironmentProviderRef as jt, PeerInboxMessage as k, createWorktree as kn, AgentEnvironmentEvent$1 as kt, CliSeam as l, createTangleSandboxExactProcessProvider as ln, PeerMailboxOptions as lr, SharedWorkerIdentity as lt, RouterSeam as m, ProviderWorkspaceRetentionContext as mn, peerMailVerbNames as mr, SandboxOutputMarker as mt, AgentTurnInput$1 as n, createAgentEnvironmentProviderRegistry as nn, PeerMailKind as nr, ROUTER_CLIENT_HEADER as nt, collectAgentTurn as o, sandboxClientAsProvider as on, PeerMailRefusal as or, SharedBoxPlacementOptions as ot, ProviderSeam as p, ProviderWorkspaceEntryMetadata as pn, peerMailTools as pr, SandboxLeafOut as pt, CodexStoreDelta as q, ToolLoopCompaction as qn, ForkRequest as qt, AgentTurnUsage as r, providerAsExecutor as rn, PeerMailLimits as rr, SharedBoxCloseReceipt as rt, streamAgentTurn as s, CreateTangleSandboxExactProcessProviderOptions as sn, PeerMailSendInput as sr, SharedBoxProcess as st, AgentTurnBackend as t, WorkspaceRequest as tn, PeerMailEvent as tr, DEFAULT_SHARED_BOX_WORKERS as tt, CliWorktreeBridgeSeam as u, ProviderWorkspaceCaptureProvenance as un, claimsAuthority as ur, sharedBoxPlacement as ut, cliWorktreeExecutor as v, WorktreeCheckRunner as vn, McpToolDescriptor as vr, assertSandboxServedModel as vt, SteerableSandboxSession as w, DiffResult as wn, sandboxEventServedBackend as wt, DEFAULT_SANDBOX_STEERING_MAX_TURNS as x, WorktreeProfileMaterializationReceipt as xn, defaultRedactor as xr, extractLlmCallEvent as xt, createExecutor as y, WorktreeCommandResult as yn, McpTransport as yr, createSandboxToolPartState as yt, resolveSecretEnv as z, harnessSupportsReasoningEffort as zn, AgentSessionStatus$1 as zt };
+//# sourceMappingURL=stream-agent-turn-IIqBKeLB.d.ts.map

package/dist/{supervise-DL_Hj1uk.js → supervise-C71s4_OJ.js}

@@ -1,9 +1,9 @@
-import { $ as bindScopeRetainedOwnerEnvironmentId, $i as detachedSnapshot, A as driverExecutorFactory, Aa as resourceTelemetry, Ai as readCommittedJsonLines, An as executorFailure, B as recordScopeOwnerMaterialization, Bi as providerAttemptEvidence, C as createContinuationKeeper, Ci as renderUnsupported, Cr as linkAbort, Da as withTimeout, Di as worktreeCliProfileMaterialization, Dr as persistHarnessTranscript, Dt as bindReusableExecutorExecutionId, Ea as unmeteredSpend, F as beginScopeOwnerAttempt, Fa as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Gi as runtimeOwnedExecutorProviderEvidence, H as restoreScopeOwnerAcceptedExecution, Hi as runtimeOwnedDriveHarnessProviderEvidence, Ii as inheritRuntimeOwnedExecutorAttestation, Ki as runtimeOwnedPendingExecutorMaterialization, L as deriveNodeExecutionIdentity, La as teardownExecutor, Ln as bridgeRuntimeAttachmentsKey, Lt as createRouterTranscript, Mn as bridgeModelRouteRefusal, Ni as attestRuntimeOwnedScopeOwner, Nt as snapshotExecutorConfig, Oa as zeroSpend, Oi as isNoEntError, Or as readHarnessTranscript, Ot as captureReusableExecutorConfig, P as assertRecursiveReservationPolicy, R as meterRuntimeOwnedAccounting, Ra as teardownSurfaces, Rn as bridgeStopSignalKey, Sa as sleep, Ti as unsupportedProfileDimensions, U as scopeOwnerExecutorNodeContext, Ui as runtimeOwnedExecutorExecutionBinding, Ur as generateSpanId, V as recordScopeOwnerPause, Vi as recordRuntimeOwnedDriveHarnessProviderEvidence, Vr as createOtelExporter, Wi as runtimeOwnedExecutorMaterialization, Yn as routerBrain, _ as CheckUnavailableError, _i as profileMaterializationAxes$1, at as scopeRetainedOwnerContext, b as bestComposite, c as runTree, ct as scopeRetainedOwnerRestorePoint, dr as registerRetainedExecutorPreparation, en as parseWorkerToolTraceArtifact, et as bindScopeRetainedOwnerProvider, f as runDriverWithRetry, fr as retainedExecutorSeamKey, gi as fullProfileMaterialization, h as CONTINUATIONS_DIR, hi as defineProfileMaterializationContract, i as bestDelivered, in as assertValidBudget, ir as resolveAgentEnvironmentProvider, it as reconcileScopeRetainedOwnerEnvironment, j as isDriverSpec, ja as withBudgetResources, jn as bridgeAdmissionRefusal, jt as createExecutor, k as driverChild, ka as addResourceSpend, ki as prepareJsonlAppend, kr as contentAddress, ln as spendFromUsageTotals, lt as scopeRetainedOwnerResult, ma as addSpend, mi as controlProfileMaterialization, n as createRootHandle, nt as noteScopeRetainedOwnerCoordination, on as meterUsageEvent, ot as scopeRetainedOwnerPriorSpend, p as summarizeDriverAttempts, pi as assertProfileMaterialization, pr as errMessage, qi as runtimeOwnedScopeOwnerRuntime, qr as toOtelAttributes, r as createSupervisor, rt as prepareScopeRetainedOwnerTask, s as runFinalizer, sn as newUsageTotals, st as scopeRetainedOwnerResourceReader, tt as consumeScopeRetainedOwnerResult, u as HarnessTurnFailedError, un as WORKER_TRACE_PROPAGATION, v as admitContinuationPolicy, vi as promptControlProfileMaterialization, wr as runAbortable, x as checkVerdictOf, xr as RunCancellationReason, yi as promptModelProfileMaterialization, yn as createInbox, z as meterRuntimeOwnedProviderAttempt } from "./supervisor-YAc4U8HQ.js";
+import { $ as bindScopeRetainedOwnerEnvironmentId, A as driverExecutorFactory, Aa as zeroSpend, Ai as isNoEntError, An as executorFailure, Ar as readHarnessTranscript, B as recordScopeOwnerMaterialization, Ba as teardownSurfaces, C as createContinuationKeeper, Cr as RunCancellationReason, Di as unsupportedProfileDimensions, Dt as bindReusableExecutorExecutionId, Er as runAbortable, F as beginScopeOwnerAttempt, Fi as attestRuntimeOwnedScopeOwner, Gi as runtimeOwnedExecutorExecutionBinding, Gr as generateSpanId, H as restoreScopeOwnerAcceptedExecution, Hi as providerAttemptEvidence, Ji as runtimeOwnedPendingExecutorMaterialization, Ki as runtimeOwnedExecutorMaterialization, L as deriveNodeExecutionIdentity, La as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Ln as bridgeRuntimeAttachmentsKey, Lt as createRouterTranscript, Ma as resourceTelemetry, Mi as readCommittedJsonLines, Mn as bridgeModelRouteRefusal, Na as withBudgetResources, Nt as snapshotExecutorConfig, Oa as unmeteredSpend, Ot as captureReusableExecutorConfig, P as assertRecursiveReservationPolicy, R as meterRuntimeOwnedAccounting, Ri as inheritRuntimeOwnedExecutorAttestation, Rn as bridgeStopSignalKey, Ti as renderUnsupported, Tr as linkAbort, U as scopeOwnerExecutorNodeContext, Ui as recordRuntimeOwnedDriveHarnessProviderEvidence, Ur as createOtelExporter, V as recordScopeOwnerPause, Wi as runtimeOwnedDriveHarnessProviderEvidence, Yi as runtimeOwnedScopeOwnerRuntime, Yr as toOtelAttributes, Zn as routerBrain, _ as CheckUnavailableError, _i as defineProfileMaterializationContract, at as scopeRetainedOwnerContext, b as bestComposite, bi as promptControlProfileMaterialization, c as runTree, ct as scopeRetainedOwnerRestorePoint, en as parseWorkerToolTraceArtifact, et as bindScopeRetainedOwnerProvider, f as runDriverWithRetry, ga as addSpend, gi as controlProfileMaterialization, h as CONTINUATIONS_DIR, hi as assertProfileMaterialization, hr as errMessage, i as bestDelivered, in as assertValidBudget, it as reconcileScopeRetainedOwnerEnvironment, j as isDriverSpec, ja as addResourceSpend, ji as prepareJsonlAppend, jn as bridgeAdmissionRefusal, jr as contentAddress, jt as createExecutor, k as driverChild, ka as withTimeout, ki as worktreeCliProfileMaterialization, kr as persistHarnessTranscript, ln as spendFromUsageTotals, lt as scopeRetainedOwnerResult, mr as retainedExecutorSeamKey, n as createRootHandle, nt as noteScopeRetainedOwnerCoordination, on as meterUsageEvent, or as resolveAgentEnvironmentProvider, ot as scopeRetainedOwnerPriorSpend, p as summarizeDriverAttempts, pr as registerRetainedExecutorPreparation, qi as runtimeOwnedExecutorProviderEvidence, r as createSupervisor, rt as prepareScopeRetainedOwnerTask, s as runFinalizer, sn as newUsageTotals, st as scopeRetainedOwnerResourceReader, ta as detachedSnapshot, tt as consumeScopeRetainedOwnerResult, u as HarnessTurnFailedError, un as WORKER_TRACE_PROPAGATION, v as admitContinuationPolicy, vi as fullProfileMaterialization, wa as sleep, x as checkVerdictOf, xi as promptModelProfileMaterialization, yi as profileMaterializationAxes$1, yn as createInbox, z as meterRuntimeOwnedProviderAttempt, za as teardownExecutor } from "./supervisor-D4NnNHZd.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
-import { C as applyRunCancellation, E as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, b as withRunContext, c as createProgressTracker, d as progressStop, j as createCoordinationToolsForManager, k as coordinationVerbNames, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, u as plateau, v as createFileRunContext, w as watchRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-BmkANXc5.js";
+import { C as applyRunCancellation, E as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, b as withRunContext, c as createProgressTracker, d as progressStop, j as createCoordinationToolsForManager, k as coordinationVerbNames, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, u as plateau, v as createFileRunContext, w as watchRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-BJzVI1oV.js";
 import { r as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-Dqer2M4_.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-vwd4SwX_.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
@@ -4516,4 +4516,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { gateOnDeliverable as C, serveCoordinationMcp as S, readRootStream as _, superviseWithTestBrain as a, composeReentryTask as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, coordinationProfileToolPrefix as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgent as m, profileGuidanceComposer as n, workerFromBackend as o, resolveSupervisorProfile as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, readRootStreamReceipt as v, mapExecutorResult as w, createSupervisorSpanRecorder as x, UNPROVEN_CONTINUITY as y };
 
-//# sourceMappingURL=supervise-DL_Hj1uk.js.map
+//# sourceMappingURL=supervise-C71s4_OJ.js.map