@tangle-network/agent-runtime 0.288.0 → 0.289.0

package/dist/{supervisor-D0-rYBEM.js → supervisor-Ch2KBPaX.js}

@@ -6738,12 +6738,15 @@ function assertProviderWorkspaceRetentionPort(port, context) {
 /** Capture, require durable refs, and verify every returned manifest/archive byte. */
 async function captureProviderWorkspaceSnapshot(port, context) {
 	assertProviderWorkspaceRetentionPort(port, "provider workspace retention");
+	const controlRef = context.controlRef === void 0 ? void 0 : AgentExactRunControlRefSchema.parse(context.controlRef);
+	if (controlRef !== void 0 && (controlRef.environmentId !== context.environment.id || controlRef.provider !== context.environment.provider || context.providerSessionId != null && controlRef.sessionId !== context.providerSessionId)) throw new Error("provider workspace retention control reference names another environment or session");
 	const controller = new AbortController();
 	const clearDeadline = armDeadlineTimer(port.timeoutMs, () => controller.abort(/* @__PURE__ */ new Error(`provider workspace retention timed out after ${port.timeoutMs}ms`)), true);
 	try {
 		return await runAbortable(async () => {
 			const result = detachedSnapshot(await port.capture({
 				...context,
+				...controlRef === void 0 ? {} : { controlRef: Object.freeze({ ...controlRef }) },
 				signal: controller.signal
 			}), "provider workspace retention snapshot");
 			const snapshot = "snapshot" in result ? result.snapshot : result;
@@ -6754,7 +6757,12 @@ async function captureProviderWorkspaceSnapshot(port, context) {
 			if (!Array.isArray(provenance.missing) || !["reported", "unavailable"].includes(provenance.status)) throw new Error("provider workspace retention provenance is malformed");
 			if (provenance.status === "reported" && provenance.environmentId !== context.environment.id) throw new Error("provider workspace retention provenance names another environment");
 			if (provenance.executionId !== void 0 && provenance.executionId !== context.executionId) throw new Error("provider workspace retention provenance names another execution");
+			if (provenance.controlRef !== void 0 && (controlRef === void 0 || !sameControlCoordinates(AgentExactRunControlRefSchema.parse(provenance.controlRef), controlRef))) throw new Error("provider workspace retention provenance names another admitted execution");
 			const coverageGaps = [...provenance.missing];
+			if (controlRef !== void 0) {
+				if (provenance.controlRef === void 0) coverageGaps.push("Exact admitted control reference missing");
+				if (!provenance.sessions?.some((session) => session.id === controlRef.sessionId && session.executionIds?.includes(controlRef.executionId))) coverageGaps.push("Exact admitted provider execution missing from capture");
+			}
 			if (provenance.status !== "reported") coverageGaps.push("Coverage metadata unavailable");
 			if (provenance.executionId !== context.executionId) coverageGaps.push("Exact execution identity missing");
 			if (provenance.workspace?.complete !== true) coverageGaps.push("Workspace inventory incomplete");
@@ -10603,6 +10611,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	let workspacePreservationRequired = false;
 	let workspaceRunActive = false;
 	let providerSessionId = null;
+	let workspaceControlRef;
 	const runtime = options.runtime ?? provider.name;
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
 	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
@@ -10635,6 +10644,8 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			workspaceEnvironmentId = void 0;
 		}
 		workspaceRunActive = true;
+		workspaceControlRef = void 0;
+		providerSessionId = null;
 		workspaceSnapshot = void 0;
 		workspaceProvenance = void 0;
 		workspaceCoverageComplete = false;
@@ -10658,6 +10669,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			workspaceCapturePromise = captureProviderWorkspaceSnapshot(workspaceRetention, {
 				environment: next,
 				executionId,
+				...workspaceControlRef === void 0 ? {} : { controlRef: workspaceControlRef },
 				...node === void 0 ? {} : { node },
 				providerSessionId,
 				nativeSessionId: null,
@@ -10817,6 +10829,8 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					mayContinue: options.unavailablePause !== false && options.workspaceRetention === void 0 && invocation.retention?.continueInvocation !== void 0,
 					onRetained: (handle) => {
 						retained = handle;
+						workspaceControlRef = freezeControlRef(handle.controlRef);
+						providerSessionId = workspaceControlRef.sessionId;
 					},
 					onPending: (value) => {
 						pending = value;
@@ -10854,6 +10868,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						workspacePublishedSnapshot = snapshot;
 					},
 					captureWorkspace,
+					workspaceControlRef: () => workspaceControlRef,
 					workspaceProvenance: () => workspaceProvenance,
 					workspaceCoverage: () => ({
 						complete: workspaceCoverageComplete,
@@ -11013,12 +11028,14 @@ function admittedEnvironmentId(retention) {
 function providerWorkspaceCaptureReceipt(args, environment, snapshot, fallbackSessionId) {
 	const provenance = args.workspaceProvenance();
 	const coverage = args.workspaceCoverage();
+	const controlRef = args.workspaceControlRef();
 	return {
 		executionId: args.executionId,
+		...controlRef === void 0 ? {} : { controlRef },
 		...args.node === void 0 ? {} : { node: args.node },
 		environmentId: environment.id,
 		profileDigest: canonicalAgentProfileDigest(args.profile),
-		...capturedSessionIdentity(provenance, coverage.complete, args.executionId, fallbackSessionId),
+		...capturedSessionIdentity(provenance, coverage.complete, args.executionId, controlRef?.sessionId ?? fallbackSessionId),
 		snapshot,
 		provenance: provenance ?? {
 			status: "unavailable",
@@ -11593,6 +11610,15 @@ async function sandboxProfileFromReference(profile, resolveProfile) {
 }
 function environmentAsSandboxInstance(environment, options) {
 	let providerSessionId = null;
+	let controlRef;
+	const noteControlRef = (candidate) => {
+		if (options.workspaceRetention === void 0) return;
+		const parsed = AgentExactRunControlRefSchema.safeParse(candidate);
+		if (!parsed.success) return;
+		if (parsed.data.environmentId !== environment.id || parsed.data.provider !== environment.provider) throw new ValidationError("providerAsSandboxClient: capture control reference names another environment");
+		controlRef = freezeControlRef(parsed.data);
+		providerSessionId = controlRef.sessionId;
+	};
 	let capture;
 	let publication;
 	return {
@@ -11606,6 +11632,7 @@ function environmentAsSandboxInstance(environment, options) {
 			let terminal = false;
 			const input = turnInputFromPrompt(message, promptOptions);
 			providerSessionId = input.sessionId ?? null;
+			noteControlRef(input.controlRef);
 			let cancellation;
 			let cancellationStarted = false;
 			let cancellationFailed = false;
@@ -11665,7 +11692,10 @@ function environmentAsSandboxInstance(environment, options) {
 			let usage;
 			let terminal = false;
 			const failures = createProviderFailureLedger();
-			for await (const event of environment.stream(turnInputFromPrompt(message, promptOptions))) {
+			const input = turnInputFromPrompt(message, promptOptions);
+			providerSessionId = input.sessionId ?? null;
+			noteControlRef(input.controlRef);
+			for await (const event of environment.stream(input)) {
 				events.push(event);
 				if (isTerminalEnvironmentEvent(event)) terminal = true;
 				failures.observe(event, sandboxEventFromEnvironmentEvent(event));
@@ -11686,9 +11716,11 @@ function environmentAsSandboxInstance(environment, options) {
 		...environment.dispatch && environment.session ? { async dispatchPrompt(message, promptOptions) {
 			const session = await environment.dispatch?.(turnInputFromPrompt(message, promptOptions));
 			if (!session) throw new ValidationError("providerAsSandboxClient: dispatch returned no session");
+			noteControlRef(session.controlRef);
 			return sandboxDispatchResultFromSessionRef(session);
 		} } : {},
 		...environment.session ? { session(id, sessionOptions) {
+			noteControlRef(sessionOptions?.controlRef);
 			return sandboxSessionFromAgentSession(environment.session?.(id, sessionOptions), sessionOptions?.controlRef);
 		} } : {},
 		...environment.read ? { read: environment.read.bind(environment) } : {},
@@ -11713,12 +11745,14 @@ function environmentAsSandboxInstance(environment, options) {
 				capture ??= captureProviderWorkspaceSnapshot(options.workspaceRetention, {
 					environment,
 					executionId: identity.executionId,
+					...controlRef === void 0 ? {} : { controlRef },
 					...identity.node === void 0 ? {} : { node: identity.node },
 					providerSessionId,
 					nativeSessionId: null,
 					profile: identity.profile
 				}).then(({ snapshot, provenance, coverageComplete, incompleteReason }) => ({
 					executionId: identity.executionId,
+					...controlRef === void 0 ? {} : { controlRef },
 					...identity.node === void 0 ? {} : { node: identity.node },
 					environmentId: environment.id,
 					profileDigest: canonicalAgentProfileDigest(identity.profile),
@@ -28847,4 +28881,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { waitUntil as $, executableAgentProfileSnapshot as $i, materializeTreeView as $n, sanitizeAgentRuntimeEvent as $r, claimsAuthority as $t, driverExecutorFactory as A, withTimeout as Aa, worktreeCliProfileMaterialization as Ai, DEFAULT_SANDBOX_IDLE_TIMEOUT_SECONDS as An, persistHarnessTranscript as Ar, cliInPlaceExecutor as At, recordScopeOwnerDriverAttempt as B, teardownExecutor as Ba, knownExecutionBindingReceipt as Bi, decodeToolPart as Bn, buildLoopOtelSpans as Br, WORKER_TRACE_PROPAGATION as Bt, createContinuationKeeper as C, promptCacheTokenClasses as Ca, promptOnlyProfileMaterialization as Ci, captureBeforeDestroy as Cn, environmentGone as Cr, recoverRetainedInteractiveRun as Ct, passedItems as D, throwAbort as Da, sandboxActProfileMaterialization as Di, runBrainLoop as Dn, runAbortable as Dr, rollingDispatch as Dt, failedItems as E, stringifySafe as Ea, renderUnsupported as Ei, routerBrain as En, linkAbort as Er, queueOf as Et, beginScopeOwnerAttempt as F, decodeHarnessUsage as Fa, attestRuntimeOwnedPendingExecutor as Fi, resolveAgentEnvironmentProvider as Fn, readTraceContextFromEnv as Fr, createWorktreeCliExecutor as Ft, settledToIteration as G, runtimeOwnedDriveHarnessProviderEvidence as Gi, FileSpawnJournal as Gn, flatOtelSpan as Gr, taskToPrompt as Gt, recordScopeOwnerPause as H, promptFromAgentTurnInput as Ha, newExecutionAttemptId as Hi, registerRetainedExecutorPreparation as Hn, buildRuntimeEventOtelSpans as Hr, workerTraceEnv as Ht, createScope as I, abortError$2 as Ia, attestRuntimeOwnedScopeOwner as Ii, sandboxClientAsProvider as In, traceContextToEnv as Ir, DEFAULT_SANDBOX_STEERING_MAX_TURNS as It, createWaitProbes as J, runtimeOwnedExecutorProviderEvidence as Ji, SpawnEventIndex as Jn, padSpanId as Jr, readWorkerProgress as Jt, createWorkerSlots as K, runtimeOwnedExecutorExecutionBinding as Ki, InMemoryResultBlobStore as Kn, generateSpanId as Kr, DEFAULT_STALL_AFTER_MS as Kt, deriveNodeExecutionIdentity as L, awaitAbortable$1 as La, authoredProfileDigest as Li, unavailablePauseMs as Ln, defaultRedactor as Lr, createSteerableSandboxSession as Lt, withDriverExecutor as M, addResourceSpend as Ma, prepareJsonlAppend as Mi, createAgentEnvironmentProviderRegistry as Mn, contentAddress as Mr, createExecutor as Mt, SUBTREE_RESULT_LIMIT as N, resourceTelemetry as Na, readCommittedJsonLines as Ni, providerAsExecutor as Nn, createPropagatingTraceEmitter as Nr, createExecutorRegistry as Nt, verdictFromJudgeScore as O, throwIfAborted as Oa, unsupportedProfileDimensions as Oi, canonicalObservedModelParts as On, captureHarnessTranscript as Or, bindReusableExecutorExecutionId as Ot, assertRecursiveReservationPolicy as P, withBudgetResources as Pa, writeAllBytes as Pi, providerAsSandboxClient as Pn, mergeTraceEnv as Pr, snapshotExecutorConfig as Pt, validateWaitSpec as Q, unknownMaterializationReceipt as Qi, loadSpawnForest as Qn, createRuntimeStreamEventCollector as Qr, PEER_MAIL_WIRE_KEY as Qt, meterRuntimeOwnedAccounting as R, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Ra, finalizeRuntimeOwnedPendingExecutor as Ri, unavailableSignalOfFailure as Rn, defaultRedactorIdentityMaterial as Rr, createRouterTranscript as Rt, composeContinuationNote as S, isAbortError$2 as Sa, promptModelProfileMaterialization as Si, SandboxEvidenceRetentionError as Sn, destroyInteractiveEnvironment as Sr, reconnectRetainedInteractiveRun as St, expandQuestions as T, sleep as Ta, renderProfileMaterializationIssues as Ti, readPromptOptions as Tn, abortError as Tr, freeSlots as Tt, restoreScopeOwnerAcceptedExecution as U, promptOptionsFromAgentTurnInput as Ua, providerAttemptEvidence as Ui, retainedExecutorSeamKey as Un, createOpenInferenceFileExporter as Ur, workerTraceHeaders as Ut, recordScopeOwnerMaterialization as V, teardownSurfaces as Va, knownMaterializationReceipt as Vi, sandboxSessionTraceSource as Vn, buildLoopSpanNodes as Vr, readWorkerTraceContext as Vt, scopeOwnerExecutorNodeContext as W, providerMessageText as Wa, recordRuntimeOwnedDriveHarnessProviderEvidence as Wi, FileResultBlobStore as Wn, createOtelExporter as Wr, workerTraceSeamKey as Wt, pollFor as X, runtimeOwnedScopeOwnerRuntime as Xi, encodeResultBlob as Xn, toOtelAttributes as Xr, AUTHORITY_MARKERS as Xt, isWaitOutcome as Y, runtimeOwnedPendingExecutorMaterialization as Yi, assertContentAddress as Yn, padTraceId as Yr, createInbox as Yt, timerAt as Z, unknownExecutionBindingReceipt as Zi, insideCursorNamespace as Zn, createRuntimeEventCollector as Zr, DEFAULT_PEER_MAIL_LIMITS as Zt, CheckUnavailableError as _, addSpend as _a, controlProfileMaterialization as _i, isTerminalDecision as _n, reconnectRetainedRun as _r, workerInteractiveAdmissionFile as _t, collectDelivered as a, assertSandboxServedModel as aa, createWorktree as ai, isTerminalNodeStatus as an, parseWorkerToolTraceArtifact as ar, reconcileScopeRetainedOwnerEnvironment as at, bestComposite as b, deleteBoxSafe as ba, profileMaterializationAxes$1 as bi, probeSandboxCapabilities as bn, startRetainedRunInEnvironment as br, workerInteractiveBindingFile as bt, runTree as c, createSandboxUsageLedger as ca, LOCAL_HARNESSES as ci, addHarnessUsage as cn, BudgetReconcileFault as cr, scopeRetainedOwnerResourceReader as ct, classifyDriverFailure as d, mapSandboxEvent as da, localHarnessExecutable as di, readCodexRolloutSession as dn, createBudgetPool as dr, SPAWN_RESOURCE_PATH_MAX_BYTES as dt, executableAgentSpecSnapshot as ea, sanitizeKnowledgeReadinessReport as ei, createPeerMailbox as en, pendingWaits as er, bindScopeRetainedOwnerEnvironmentId as et, runDriverWithRetry as f, mapSandboxToolEvent as fa, parseCodexTokenUsage as fi, bridgeRuntimeAttachmentsKey as fn, meterUsageEvent as fr, environmentReader as ft, CONTINUATION_FACTS as g, sumSandboxUsage as ga, assertProfileMaterialization as gi, defaultSelectWinner as gn, errMessage as gr, readWorkerInteractiveAdmissions as gt, CONTINUATIONS_DIR as h, sandboxProgressEvents as ha, AGENT_PROFILE_MATERIALIZATION_AXES as hi, createSandboxForSpec as hn, spendFromUsageTotals as hr, interactiveAdmissionSeamKey as ht, bestDelivered as i, readSandboxOutcome as ia, captureWorktreeDiff as ii, isLiveNodeStatus as in, isTraceAnalysisStore as ir, prepareScopeRetainedOwnerTask as it, isDriverSpec as j, zeroSpend as ja, isNoEntError as ji, LEAF_CONTINUATION_TASK as jn, readHarnessTranscript as jr, cliWorktreeExecutor as jt, driverChild as k, unmeteredSpend as ka, validateProfileMaterialization as ki, observedModelMatchesDeclared as kn, harnessTranscriptArtifact as kr, captureReusableExecutorConfig as kt, DriverAttemptsExhaustedError as l, extractLlmCallEvent as la, harnessInvocation as li, createCodexRolloutStoreReader as ln, ReservationWaitRefused as lr, scopeRetainedOwnerRestorePoint as lt, upstreamUnavailableSignal as m, sandboxEventServedBackend as ma, terminateProcessTreeAndConfirm as mi, TERMINAL_DECISIONS as mn, spendFromUsageEvents as mr, resolveSpawnResourcePaths as mt, createRootHandle as n, detachedSnapshot as na, runSettledCommand as ni, peerMailTools as nn, WORKER_TOOL_TRACE_SCHEMA_VERSION as nr, consumeScopeRetainedOwnerResult as nt, pickBestDelivered as o, canonicalStreamEventFromSandboxEvent as oa, removeWorktree as oi, bridgeAdmissionRefusal as on, workerTraceAnalysisStore as or, scopeRetainedOwnerContext as ot, summarizeDriverAttempts as p, notifySandboxEventObserver as pa, CodexExecutionDiagnosticError as pi, bridgeStopSignalKey as pn, newUsageTotals as pr, hostDirectoryReader as pt, openSlotGroup as q, runtimeOwnedExecutorMaterialization as qi, InMemorySpawnJournal as qn, loopEventToOtelSpan as qr, createActivityLog as qt, createSupervisor as r, projectSandboxOutcome as ra, runWorktreeHarness as ri, peerMailVerbNames as rn, captureWorkerTraceEvidence as rr, noteScopeRetainedOwnerCoordination as rt, runFinalizer as s, createSandboxToolPartState as sa, DEFAULT_LOCAL_HARNESS as si, bridgeModelRouteRefusal as sn, executorFailure as sr, scopeRetainedOwnerPriorSpend as st, DEFAULT_MAX_DEPTH as t, detachedFrozen as ta, sanitizeRuntimeStreamEvent as ti, isPeerMailEnvelope as tn, replaySpawnTree as tr, bindScopeRetainedOwnerProvider as tt, HarnessTurnFailedError as u, isSandboxTerminalEvent as ua, harnessSupportsReasoningEffort as ui, harnessUsageIsEmpty as un, assertValidBudget as ur, scopeRetainedOwnerResult as ut, admitContinuationPolicy as v, chargedTokens as va, defineProfileMaterializationContract as vi, runAgentRounds as vn, recoverRetainedRun as vr, attachWorker as vt, distillFindings as w, randomSuffix as wa, promptResourceProfileMaterialization as wi, assertBoxlessPromptOptions as wn, RunCancellationReason as wr, startRetainedInteractiveRun as wt, checkVerdictOf as x, hasCompleteCacheBreakdown as xa, promptControlProfileMaterialization as xi, acquireSandbox as xn, retainedCreateMaterial as xr, workerInteractiveBindingsDir as xt, admitFinding as y, cloneSpend as ya, fullProfileMaterialization as yi, createSandboxLineage as yn, startRetainedRun as yr, readWorkerInteractiveBinding as yt, meterRuntimeOwnedProviderAttempt as z, armDeadlineTimer as za, inheritRuntimeOwnedExecutorAttestation as zi, createPushTraceSource as zn, resolveRedactor as zr, createInPlaceCliExecutor as zt };
 
-//# sourceMappingURL=supervisor-D0-rYBEM.js.map
+//# sourceMappingURL=supervisor-Ch2KBPaX.js.map