@tangle-network/agent-runtime 0.284.2 → 0.286.0

package/dist/{supervisor-D4NnNHZd.js → supervisor-Ds1NgT-A.js}

@@ -6770,6 +6770,7 @@ async function captureProviderWorkspaceSnapshot(port, context) {
 				if (!/^sha256:[0-9a-f]{64}$/.test(session.sidecarImageDigest ?? "")) coverageGaps.push(`Session ${session.id} sidecar image digest missing`);
 				if (!/^[0-9a-f]{40}$/.test(session.sidecarBundleRevision ?? "")) coverageGaps.push(`Session ${session.id} sidecar bundle revision missing`);
 			}
+			coverageGaps.push(...attemptCoverageGaps(provenance, port.requireCompleteProvenance === true));
 			const coverageComplete = coverageGaps.length === 0;
 			requireDurableWorkspaceArtifacts(snapshot);
 			const { archive } = await verifyWorkspaceSnapshotArtifacts(snapshot, port.artifacts);
@@ -6790,6 +6791,78 @@ async function captureProviderWorkspaceSnapshot(port, context) {
 		clearDeadline();
 	}
 }
+/** Reconcile Sidecar attempts to the exact captured session executions. */
+function attemptCoverageGaps(provenance, strict) {
+	const attempts = provenance.attempts;
+	if (attempts === void 0) return strict ? ["Attempt inventory missing"] : [];
+	if (!Array.isArray(attempts)) return ["Attempt inventory malformed"];
+	const gaps = [];
+	if (strict && attempts.length === 0) gaps.push("Attempt inventory empty");
+	const owners = /* @__PURE__ */ new Map();
+	for (const session of provenance.sessions ?? []) {
+		if (!Array.isArray(session.executionIds) || session.executionIds.length === 0) {
+			gaps.push(`Session ${session.id} has no Sidecar execution inventory`);
+			continue;
+		}
+		for (const id of session.executionIds) {
+			if (typeof id !== "string" || id.trim() === "") {
+				gaps.push(`Session ${session.id} has an invalid Sidecar execution ID`);
+				continue;
+			}
+			if (owners.has(id)) gaps.push(`Sidecar execution ${id} has multiple session owners`);
+			else owners.set(id, session.id);
+			const count = session.eventCountsByExecutionId?.[id];
+			if (!Number.isSafeInteger(count) || (count ?? 0) <= 0) gaps.push(`Sidecar execution ${id} has no retained event count`);
+		}
+	}
+	const ordinals = /* @__PURE__ */ new Map();
+	for (const [index, attempt] of attempts.entries()) {
+		if (attempt === null || typeof attempt !== "object") {
+			gaps.push(`Attempt ${index} is malformed`);
+			continue;
+		}
+		const id = attempt.executionId;
+		if (typeof id !== "string" || id.trim() === "" || !owners.has(id)) {
+			gaps.push(`Attempt ${index} has no exact Sidecar execution owner`);
+			continue;
+		}
+		if (typeof attempt.providerSessionId !== "string" || attempt.providerSessionId.trim() === "") gaps.push(`Attempt ${id} has no provider session ID`);
+		if (!Number.isSafeInteger(attempt.ordinal) || attempt.ordinal <= 0) gaps.push(`Attempt ${id} has an invalid ordinal`);
+		else {
+			const seen = ordinals.get(id) ?? /* @__PURE__ */ new Set();
+			if (seen.has(attempt.ordinal)) gaps.push(`Attempt ${id} repeats ordinal ${attempt.ordinal}`);
+			seen.add(attempt.ordinal);
+			ordinals.set(id, seen);
+		}
+		if (!Array.isArray(attempt.nativeSessionIds) || attempt.nativeSessionIds.length === 0 || attempt.nativeSessionIds.some((nativeId) => typeof nativeId !== "string" || nativeId.trim() === "") || new Set(attempt.nativeSessionIds).size !== attempt.nativeSessionIds.length) gaps.push(`Attempt ${id}/${attempt.ordinal} has incomplete native session identity`);
+		if (!Array.isArray(attempt.processIds) || attempt.processIds.some((processId) => typeof processId !== "string" || processId.trim() === "") || new Set(attempt.processIds).size !== attempt.processIds.length) gaps.push(`Attempt ${id}/${attempt.ordinal} has invalid process identity`);
+		if (![
+			"succeeded",
+			"failed",
+			"cancelled",
+			"unknown"
+		].includes(attempt.outcome)) gaps.push(`Attempt ${id}/${attempt.ordinal} has invalid outcome`);
+		else if (strict && attempt.outcome === "unknown") gaps.push(`Attempt ${id}/${attempt.ordinal} has unknown outcome`);
+		if (!Array.isArray(attempt.missingReasons) || attempt.missingReasons.some((reason) => typeof reason !== "string" || reason.trim() === "")) gaps.push(`Attempt ${id}/${attempt.ordinal} has malformed missing reasons`);
+		else if (attempt.missingReasons.length > 0) gaps.push(`Attempt ${id}/${attempt.ordinal}: ${attempt.missingReasons.join("; ")}`);
+	}
+	for (const session of provenance.sessions ?? []) {
+		const ownedAttempts = attempts.filter((attempt) => attempt != null && typeof attempt === "object" && session.executionIds?.includes(attempt.executionId));
+		if (session.nativeSessionId != null) {
+			if (!new Set(ownedAttempts.flatMap((attempt) => Array.isArray(attempt.nativeSessionIds) ? attempt.nativeSessionIds : [])).has(session.nativeSessionId)) gaps.push(`Session ${session.id} native identity conflicts with attempt inventory`);
+		}
+		if ((session.processStreams?.streamCount ?? 0) > 0 && !ownedAttempts.some((attempt) => Array.isArray(attempt.processIds) && attempt.processIds.length > 0)) gaps.push(`Session ${session.id} process streams lack attempt process identity`);
+	}
+	for (const id of owners.keys()) {
+		const seen = ordinals.get(id);
+		if (!seen || seen.size === 0) {
+			gaps.push(`Sidecar execution ${id} has no attempt record`);
+			continue;
+		}
+		for (let ordinal = 1; ordinal <= seen.size; ordinal++) if (!seen.has(ordinal)) gaps.push(`Sidecar execution ${id} is missing attempt ordinal ${ordinal}`);
+	}
+	return gaps;
+}
 /** Native checkpoints, embedded bytes, and digest-only values cannot outlive their source. */
 function requireDurableWorkspaceArtifacts(snapshot) {
 	if (!isDurableArtifact(snapshot.manifest) || !isDurableArtifact(snapshot.archive)) throw new Error("provider workspace retention requires durable manifest and archive artifact references");
@@ -8491,6 +8564,26 @@ function sandboxClientAsProvider(client, options = {}) {
 		} } : {}
 	};
 }
+/** Only a verified, single-session capture may supply a scalar session identity. */
+function capturedSessionIdentity(provenance, coverageComplete, executionId, providerSessionId) {
+	const unknown = {
+		providerSessionId,
+		nativeSessionId: null
+	};
+	if (!coverageComplete || provenance?.status !== "reported" || provenance.executionId !== executionId || provenance.sessions?.length !== 1) return unknown;
+	const session = provenance.sessions[0];
+	if (session.executionId !== executionId || providerSessionId !== null && session.id !== providerSessionId) return unknown;
+	const ids = new Set((provenance.attempts ?? []).filter((attempt) => session.executionIds?.includes(attempt.executionId)).flatMap((attempt) => attempt.nativeSessionIds));
+	const nativeSessionId = ids.size === 1 ? [...ids][0] : null;
+	if (session.nativeSessionId != null && nativeSessionId !== session.nativeSessionId) return {
+		providerSessionId,
+		nativeSessionId: null
+	};
+	return {
+		providerSessionId,
+		nativeSessionId
+	};
+}
 /**
 * Lower the seam's prompt options onto turn fields, through the one mapper this module already
 * uses to raise a sandbox prompt into a provider turn. Reusing it is what keeps the two directions
@@ -9116,6 +9209,7 @@ async function* streamProviderExecutor(args) {
 		});
 		const retainedWorkspace = await args.captureWorkspace(environment, outcome);
 		args.onPublishedSnapshot(retainedWorkspace);
+		const captureIdentity = capturedSessionIdentity(args.workspaceProvenance(), args.workspaceCoverage().complete, args.executionId, turn.sessionId ?? null);
 		const settledResult = {
 			...result,
 			...retainedWorkspace === void 0 ? {} : {
@@ -9125,8 +9219,7 @@ async function* streamProviderExecutor(args) {
 					...args.node === void 0 ? {} : { node: args.node },
 					environmentId: environment.id,
 					profileDigest: canonicalAgentProfileDigest(args.profile),
-					providerSessionId: turn.sessionId ?? null,
-					nativeSessionId: null,
+					...captureIdentity,
 					snapshot: retainedWorkspace,
 					provenance: args.workspaceProvenance() ?? {
 						status: "unavailable",
@@ -9694,13 +9787,13 @@ function environmentAsSandboxInstance(environment, options) {
 					profile: identity.profile
 				});
 				const { snapshot, provenance, coverageComplete, incompleteReason } = await capture;
+				const captureIdentity = capturedSessionIdentity(provenance, coverageComplete === true, identity.executionId, providerSessionId);
 				options.onWorkspaceCaptured?.({
 					executionId: identity.executionId,
 					...identity.node === void 0 ? {} : { node: identity.node },
 					environmentId: environment.id,
 					profileDigest: canonicalAgentProfileDigest(identity.profile),
-					providerSessionId,
-					nativeSessionId: null,
+					...captureIdentity,
 					snapshot,
 					provenance,
 					coverageComplete: coverageComplete ?? false,
@@ -26856,7 +26949,7 @@ function composeContinuationNote(input) {
 		continuation: String(input.continuation)
 	};
 	const fill = (text) => text.replace(placeholder, (_, name) => facts[name] ?? `{${name}}`);
-	const sections = [verdict === void 0 ? "No result has reached the check yet. The run ends only when a result passes it through submit_result." : verdict.pass ? "The check passes on the current state, but no result was submitted. Call submit_result to end the run." : fill(profile.opening).trim()];
+	const sections = [verdict === void 0 ? "No check verdict is available yet." + (input.canSubmitResult === true ? " Submit a result through submit_result to request the check." : "") : verdict.pass ? "The check passes on the current state, but no result has been accepted." + (input.canSubmitResult === true ? " Call submit_result to request acceptance." : "") : fill(profile.opening).trim()];
 	const section = (heading, body) => {
 		if (body.length === 0) return;
 		sections.push([...heading.trim() === "" ? [] : [`## ${fill(heading)}`], ...body].join("\n"));
@@ -27061,6 +27154,7 @@ function createContinuationKeeper(input) {
 				...input.owed === void 0 ? {} : { owed: input.owed },
 				progress: context.progress,
 				canReadMore: input.canReadMore,
+				canSubmitResult: input.canSubmitResult === true,
 				...input.sealed === true ? { sealed: true } : {}
 			});
 			notes.push({
@@ -28625,4 +28719,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { bindScopeRetainedOwnerEnvironmentId as $, executableAgentSpecSnapshot as $i, canonicalObservedModelParts as $n, sanitizeKnowledgeReadinessReport as $r, isTraceAnalysisStore as $t, driverExecutorFactory as A, zeroSpend as Aa, isNoEntError as Ai, executorFailure as An, readHarnessTranscript as Ar, cliWorktreeExecutor as At, recordScopeOwnerMaterialization as B, teardownSurfaces as Ba, knownMaterializationReceipt as Bi, createSandboxForSpec as Bn, buildLoopSpanNodes as Br, FileSpawnJournal as Bt, createContinuationKeeper as C, randomSuffix as Ca, promptResourceProfileMaterialization as Ci, claimsAuthority as Cn, RunCancellationReason as Cr, startRetainedInteractiveRun as Ct, passedItems as D, throwIfAborted as Da, unsupportedProfileDimensions as Di, peerMailVerbNames as Dn, captureHarnessTranscript as Dr, bindReusableExecutorExecutionId as Dt, failedItems as E, throwAbort as Ea, sandboxActProfileMaterialization as Ei, peerMailTools as En, runAbortable as Er, rollingDispatch as Et, beginScopeOwnerAttempt as F, abortError$2 as Fa, attestRuntimeOwnedScopeOwner as Fi, harnessUsageIsEmpty as Fn, traceContextToEnv as Fr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Ft, createWorkerSlots as G, runtimeOwnedExecutorExecutionBinding as Gi, probeSandboxCapabilities as Gn, generateSpanId as Gr, encodeResultBlob as Gt, restoreScopeOwnerAcceptedExecution as H, promptOptionsFromAgentTurnInput as Ha, providerAttemptEvidence as Hi, isTerminalDecision as Hn, createOpenInferenceFileExporter as Hr, InMemorySpawnJournal as Ht, createScope as I, awaitAbortable$1 as Ia, authoredProfileDigest as Ii, readCodexRolloutSession as In, defaultRedactor as Ir, createSteerableSandboxSession as It, isWaitOutcome as J, runtimeOwnedPendingExecutorMaterialization as Ji, captureBeforeDestroy as Jn, padTraceId as Jr, materializeTreeView as Jt, openSlotGroup as K, runtimeOwnedExecutorMaterialization as Ki, acquireSandbox as Kn, loopEventToOtelSpan as Kr, insideCursorNamespace as Kt, deriveNodeExecutionIdentity as L, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as La, finalizeRuntimeOwnedPendingExecutor as Li, bridgeRuntimeAttachmentsKey as Ln, defaultRedactorIdentityMaterial as Lr, createRouterTranscript as Lt, withDriverExecutor as M, resourceTelemetry as Ma, readCommittedJsonLines as Mi, bridgeModelRouteRefusal as Mn, createPropagatingTraceEmitter as Mr, createExecutorRegistry as Mt, SUBTREE_RESULT_LIMIT as N, withBudgetResources as Na, writeAllBytes as Ni, addHarnessUsage as Nn, mergeTraceEnv as Nr, snapshotExecutorConfig as Nt, verdictFromJudgeScore as O, unmeteredSpend as Oa, validateProfileMaterialization as Oi, isLiveNodeStatus as On, harnessTranscriptArtifact as Or, captureReusableExecutorConfig as Ot, assertRecursiveReservationPolicy as P, decodeHarnessUsage as Pa, attestRuntimeOwnedPendingExecutor as Pi, createCodexRolloutStoreReader as Pn, readTraceContextFromEnv as Pr, createWorktreeCliExecutor as Pt, waitUntil as Q, executableAgentProfileSnapshot as Qi, runBrainLoop as Qn, sanitizeAgentRuntimeEvent as Qr, captureWorkerTraceEvidence as Qt, meterRuntimeOwnedAccounting as R, armDeadlineTimer as Ra, inheritRuntimeOwnedExecutorAttestation as Ri, bridgeStopSignalKey as Rn, resolveRedactor as Rr, createInPlaceCliExecutor as Rt, composeContinuationNote as S, promptCacheTokenClasses as Sa, promptOnlyProfileMaterialization as Si, PEER_MAIL_WIRE_KEY as Sn, environmentGone as Sr, recoverRetainedInteractiveRun as St, expandQuestions as T, stringifySafe as Ta, renderUnsupported as Ti, isPeerMailEnvelope as Tn, linkAbort as Tr, queueOf as Tt, scopeOwnerExecutorNodeContext as U, providerMessageText as Ua, recordRuntimeOwnedDriveHarnessProviderEvidence as Ui, runAgentRounds as Un, createOtelExporter as Ur, SpawnEventIndex as Ut, recordScopeOwnerPause as V, promptFromAgentTurnInput as Va, newExecutionAttemptId as Vi, defaultSelectWinner as Vn, buildRuntimeEventOtelSpans as Vr, InMemoryResultBlobStore as Vt, settledToIteration as W, runtimeOwnedDriveHarnessProviderEvidence as Wi, createSandboxLineage as Wn, flatOtelSpan as Wr, assertContentAddress as Wt, timerAt as X, unknownExecutionBindingReceipt as Xi, readPromptOptions as Xn, createRuntimeEventCollector as Xr, replaySpawnTree as Xt, pollFor as Y, runtimeOwnedScopeOwnerRuntime as Yi, assertBoxlessPromptOptions as Yn, toOtelAttributes as Yr, pendingWaits as Yt, validateWaitSpec as Z, unknownMaterializationReceipt as Zi, routerBrain as Zn, createRuntimeStreamEventCollector as Zr, WORKER_TOOL_TRACE_SCHEMA_VERSION as Zt, CheckUnavailableError as _, chargedTokens as _a, defineProfileMaterializationContract as _i, createActivityLog as _n, recoverRetainedRun as _r, attachWorker as _t, collectDelivered as a, canonicalStreamEventFromSandboxEvent as aa, removeWorktree as ai, createBudgetPool as an, providerAsSandboxClient as ar, scopeRetainedOwnerContext as at, bestComposite as b, hasCompleteCacheBreakdown as ba, promptControlProfileMaterialization as bi, AUTHORITY_MARKERS as bn, retainedCreateMaterial as br, workerInteractiveBindingsDir as bt, runTree as c, extractLlmCallEvent as ca, harnessInvocation as ci, spendFromUsageEvents as cn, unavailablePauseMs as cr, scopeRetainedOwnerRestorePoint as ct, classifyDriverFailure as d, mapSandboxToolEvent as da, parseCodexTokenUsage as di, readWorkerTraceContext as dn, decodeToolPart as dr, environmentReader as dt, detachedFrozen as ea, sanitizeRuntimeStreamEvent as ei, parseWorkerToolTraceArtifact as en, observedModelMatchesDeclared as er, bindScopeRetainedOwnerProvider as et, runDriverWithRetry as f, notifySandboxEventObserver as fa, CodexExecutionDiagnosticError as fi, workerTraceEnv as fn, sandboxSessionTraceSource as fr, hostDirectoryReader as ft, CONTINUATION_FACTS as g, addSpend as ga, controlProfileMaterialization as gi, DEFAULT_STALL_AFTER_MS as gn, reconnectRetainedRun as gr, workerInteractiveAdmissionFile as gt, CONTINUATIONS_DIR as h, sumSandboxUsage as ha, assertProfileMaterialization as hi, taskToPrompt as hn, errMessage as hr, readWorkerInteractiveAdmissions as ht, bestDelivered as i, assertSandboxServedModel as ia, createWorktree as ii, assertValidBudget as in, providerAsExecutor as ir, reconcileScopeRetainedOwnerEnvironment as it, isDriverSpec as j, addResourceSpend as ja, prepareJsonlAppend as ji, bridgeAdmissionRefusal as jn, contentAddress as jr, createExecutor as jt, driverChild as k, withTimeout as ka, worktreeCliProfileMaterialization as ki, isTerminalNodeStatus as kn, persistHarnessTranscript as kr, cliInPlaceExecutor as kt, DriverAttemptsExhaustedError as l, isSandboxTerminalEvent as la, harnessSupportsReasoningEffort as li, spendFromUsageTotals as ln, unavailableSignalOfFailure as lr, scopeRetainedOwnerResult as lt, upstreamUnavailableSignal as m, sandboxProgressEvents as ma, AGENT_PROFILE_MATERIALIZATION_AXES as mi, workerTraceSeamKey as mn, retainedExecutorSeamKey as mr, interactiveAdmissionSeamKey as mt, createRootHandle as n, projectSandboxOutcome as na, runWorktreeHarness as ni, BudgetReconcileFault as nn, LEAF_CONTINUATION_TASK as nr, noteScopeRetainedOwnerCoordination as nt, pickBestDelivered as o, createSandboxToolPartState as oa, DEFAULT_LOCAL_HARNESS as oi, meterUsageEvent as on, resolveAgentEnvironmentProvider as or, scopeRetainedOwnerPriorSpend as ot, summarizeDriverAttempts as p, sandboxEventServedBackend as pa, terminateProcessTreeAndConfirm as pi, workerTraceHeaders as pn, registerRetainedExecutorPreparation as pr, resolveSpawnResourcePaths as pt, createWaitProbes as q, runtimeOwnedExecutorProviderEvidence as qi, SandboxEvidenceRetentionError as qn, padSpanId as qr, loadSpawnForest as qt, createSupervisor as r, readSandboxOutcome as ra, captureWorktreeDiff as ri, ReservationWaitRefused as rn, createAgentEnvironmentProviderRegistry as rr, prepareScopeRetainedOwnerTask as rt, runFinalizer as s, createSandboxUsageLedger as sa, LOCAL_HARNESSES as si, newUsageTotals as sn, sandboxClientAsProvider as sr, scopeRetainedOwnerResourceReader as st, DEFAULT_MAX_DEPTH as t, detachedSnapshot as ta, runSettledCommand as ti, workerTraceAnalysisStore as tn, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as tr, consumeScopeRetainedOwnerResult as tt, HarnessTurnFailedError as u, mapSandboxEvent as ua, localHarnessExecutable as ui, WORKER_TRACE_PROPAGATION as un, createPushTraceSource as ur, SPAWN_RESOURCE_PATH_MAX_BYTES as ut, admitContinuationPolicy as v, cloneSpend as va, fullProfileMaterialization as vi, readWorkerProgress as vn, startRetainedRun as vr, readWorkerInteractiveBinding as vt, distillFindings as w, sleep as wa, renderProfileMaterializationIssues as wi, createPeerMailbox as wn, abortError as wr, freeSlots as wt, checkVerdictOf as x, isAbortError$2 as xa, promptModelProfileMaterialization as xi, DEFAULT_PEER_MAIL_LIMITS as xn, destroyInteractiveEnvironment as xr, reconnectRetainedInteractiveRun as xt, admitFinding as y, deleteBoxSafe as ya, profileMaterializationAxes$1 as yi, createInbox as yn, startRetainedRunInEnvironment as yr, workerInteractiveBindingFile as yt, meterRuntimeOwnedProviderAttempt as z, teardownExecutor as za, knownExecutionBindingReceipt as zi, TERMINAL_DECISIONS as zn, buildLoopOtelSpans as zr, FileResultBlobStore as zt };
 
-//# sourceMappingURL=supervisor-D4NnNHZd.js.map
+//# sourceMappingURL=supervisor-Ds1NgT-A.js.map