@tangle-network/agent-runtime 0.290.1 → 0.292.0

package/dist/{supervisor-CQFcQhlo.js → supervisor-B-LtKizU.js}

@@ -1,5 +1,5 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, l as profileProviderModel, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CA5d1YUP.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-DydyWTQg.js";
 import { S as verifyWorkspaceSnapshotArtifacts, i as verifyAgentCandidateWorkspaceArchive } from "./workspace-archive-MhowMCmp.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
@@ -5309,7 +5309,7 @@ function createOtelExporter(config) {
 				body: JSON.stringify(body),
 				signal: AbortSignal.timeout(timeoutMs)
 			});
-			const text = await response.text().catch(() => "");
+			const text = await response.text();
 			if (!response.ok) {
 				const detail = text ? `: ${text.slice(0, 200)}` : "";
 				drop(batch.length, `HTTP ${response.status} from ${url}${detail}`);
@@ -5324,6 +5324,7 @@ function createOtelExporter(config) {
 	}
 	/** The single sender: it drains the queue batch by batch until the queue is empty. */
 	function drain() {
+		if (sending === void 0 && queue.length === 0) return Promise.resolve();
 		sending ??= (async () => {
 			try {
 				while (queue.length > 0) {
@@ -8097,15 +8098,18 @@ function spendFromUsageEvents(events) {
 	for (const ev of events) meterUsageEvent(totals, ev);
 	return spendFromUsageTotals(totals);
 }
-/** Fresh zeroed {@link UsageTotals}. */
-function newUsageTotals() {
+/** Fresh accounting totals, optionally restored from verified committed spend. */
+function newUsageTotals(priorSpent) {
+	if (priorSpent !== void 0) assertValidSpend(priorSpent, "prior committed usage");
 	return {
-		tokens: zeroTokenUsage(),
-		tokensKnown: true,
-		usd: 0,
-		usdEstimated: 0,
-		usdKnown: true,
-		iterations: 0
+		...addResourceSpend(priorSpent?.resources),
+		tokens: priorSpent === void 0 ? zeroTokenUsage() : cloneTokenUsage(priorSpent.tokens),
+		tokensKnown: priorSpent?.tokensKnown !== false,
+		...priorSpent?.tokensProvenance === void 0 ? {} : { tokensProvenance: priorSpent.tokensProvenance },
+		usd: priorSpent?.usd ?? 0,
+		usdEstimated: priorSpent?.usdEstimated ?? 0,
+		usdKnown: priorSpent?.usdKnown !== false,
+		iterations: priorSpent?.iterations ?? 0
 	};
 }
 /**
@@ -10555,9 +10559,11 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
 	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
 	const executionId = retention?.executionId ?? node?.nodeId ?? `provider-run-${randomUUID()}`;
-	const resetWorkspaceState = (next) => {
-		if (workspaceEnvironmentId === next.id) return;
+	let workspaceExecutionId = executionId;
+	const resetWorkspaceState = (next, invocationId = workspaceExecutionId) => {
+		if (workspaceEnvironmentId === next.id && workspaceExecutionId === invocationId) return;
 		workspaceEnvironmentId = next.id;
+		workspaceExecutionId = invocationId;
 		workspaceSnapshot = void 0;
 		workspaceProvenance = void 0;
 		workspaceCoverageComplete = false;
@@ -10607,7 +10613,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			workspaceOutcome = outcome;
 			workspaceCapturePromise = captureProviderWorkspaceSnapshot(workspaceRetention, {
 				environment: next,
-				executionId,
+				executionId: workspaceExecutionId,
 				...workspaceControlRef === void 0 ? {} : { controlRef: workspaceControlRef },
 				...node === void 0 ? {} : { node },
 				providerSessionId,
@@ -10740,17 +10746,23 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		beginWorkspaceExecution();
 		const linked = linkAbort(ctx.signal, signal, controller.signal);
 		try {
-			const executionStartedAt = Date.now();
+			const executionStartedAt = Date.now() - (retention?.priorSpent?.ms ?? 0);
 			let invocation = {
 				task,
 				retention,
 				executionId,
 				recovering
 			};
-			let carried;
+			let carried = retention?.priorSpent;
 			let refusalsInARow = 0;
 			for (let attempt = 1;; attempt += 1) {
-				const continued = carried !== void 0;
+				const continued = attempt > 1;
+				if (continued && environment !== void 0) {
+					resetWorkspaceState(environment, invocation.executionId);
+					workspaceControlRef = void 0;
+					providerSessionId = null;
+					workspacePreservationRequired = options.workspaceRetention !== void 0;
+				}
 				const ended = yield* streamProviderExecutor({
 					provider,
 					profile,
@@ -10765,7 +10777,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					recovering: invocation.recovering,
 					...carried === void 0 ? {} : { carried },
 					executionStartedAt,
-					mayContinue: options.unavailablePause !== false && options.workspaceRetention === void 0 && invocation.retention?.continueInvocation !== void 0,
+					mayContinue: options.unavailablePause !== false && invocation.retention?.continueInvocation !== void 0,
 					onRetained: (handle) => {
 						retained = handle;
 						workspaceControlRef = freezeControlRef(handle.controlRef);
@@ -10805,6 +10817,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					},
 					onPublishedSnapshot: (snapshot) => {
 						workspacePublishedSnapshot = snapshot;
+						if (continued && snapshot !== void 0 && (!options.workspaceRetention?.requireCompleteProvenance || workspaceCoverageComplete)) workspacePreservationRequired = false;
 					},
 					captureWorkspace,
 					workspaceControlRef: () => workspaceControlRef,
@@ -10817,7 +10830,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				});
 				const refusal = ended.unavailable;
 				const continueInvocation = invocation.retention?.continueInvocation;
-				if (refusal === void 0 || continueInvocation === void 0) return;
+				if (refusal === void 0 || continueInvocation === void 0 || workspacePreservationRequired || workspaceCaptureFailure !== void 0) return;
 				refusalsInARow = ended.madeProgress ? 1 : refusalsInARow + 1;
 				const pauseMs = unavailablePauseMs(refusalsInARow, options.unavailablePause || {});
 				await invocation.retention?.onPause?.({
@@ -12187,143 +12200,6 @@ function contentRef(prefix, value) {
 	return `${prefix}:${(hash >>> 0).toString(16).padStart(8, "0")}`;
 }
 //#endregion
-//#region src/runtime/model-identity.ts
-const SNAPSHOT_TOKEN = /^[A-Za-z0-9._-]+$/u;
-const datedIsoSuffix = /^(.*)-(\d{4})-(\d{2})-(\d{2})$/u;
-const datedCompactSuffix = /^(.*)-(\d{4})(\d{2})(\d{2})$/u;
-const datedMonthSuffix = /^(.*)-(\d{4})-(\d{2})$/u;
-/** Match equivalent bare and provider-qualified spellings without discarding observed identity. */
-function observedModelMatchesDeclared(observed, declared) {
-	const observedIdentity = modelIdentityParts(observed);
-	const declaredIdentity = modelIdentityParts(declared);
-	if (!observedIdentity || !declaredIdentity) return false;
-	if (declaredIdentity.snapshot !== void 0 && (observedIdentity.snapshot !== declaredIdentity.snapshot || observedIdentity.snapshotKind !== declaredIdentity.snapshotKind)) return false;
-	return equivalentModelBase(observedIdentity.base, declaredIdentity.base);
-}
-/** Merge two observations of one served model while retaining a snapshot-bearing raw identity. */
-function mergeObservedModelIdentity(current, next) {
-	const currentIdentity = modelIdentityParts(current);
-	const nextIdentity = modelIdentityParts(next);
-	if (!currentIdentity || !nextIdentity) return void 0;
-	if (!equivalentModelBase(currentIdentity.base, nextIdentity.base)) return void 0;
-	if (currentIdentity.snapshot !== void 0 && nextIdentity.snapshot !== void 0 && (currentIdentity.snapshot !== nextIdentity.snapshot || currentIdentity.snapshotKind !== nextIdentity.snapshotKind)) return;
-	return currentIdentity.snapshot === void 0 && nextIdentity.snapshot !== void 0 ? next : current;
-}
-/** Return the canonical model and its validated snapshot kind for runtime evidence reduction. */
-function canonicalObservedModelParts(model) {
-	const identity = modelIdentityParts(model);
-	if (!identity) return void 0;
-	const base = identity.base.slice(identity.base.lastIndexOf("/") + 1);
-	const canonical = identity.snapshot === void 0 ? base : identity.snapshotKind === "date" ? `${base}-${identity.snapshot}` : `${base}@${identity.snapshot}`;
-	return {
-		base,
-		...identity.snapshot !== void 0 ? { snapshot: identity.snapshot } : {},
-		...identity.snapshotKind !== void 0 ? { snapshotKind: identity.snapshotKind } : {},
-		canonical
-	};
-}
-/** Return whether an observed identity includes a provider snapshot. */
-function observedModelHasSnapshot(model) {
-	return modelIdentityParts(model)?.snapshot !== void 0;
-}
-function modelIdentityParts(model) {
-	if (model.length === 0) return null;
-	const at = model.lastIndexOf("@");
-	if (at < 0) {
-		const dated = datedModelIdentity(model);
-		if (dated !== void 0) return dated;
-		return modelLeaf(model).length === 0 ? null : { base: model };
-	}
-	const base = model.slice(0, at);
-	const snapshot = model.slice(at + 1);
-	if (base.length === 0 || modelLeaf(base).length === 0 || !SNAPSHOT_TOKEN.test(snapshot)) return null;
-	return {
-		base,
-		snapshot,
-		snapshotKind: "opaque"
-	};
-}
-function equivalentModelBase(observed, declared) {
-	const observedPath = modelBaseParts(observed);
-	const declaredPath = modelBaseParts(declared);
-	if (!samePath(observedPath.path, declaredPath.path)) return false;
-	if (observedPath.provider === void 0 || declaredPath.provider === void 0 || observedPath.provider === declaredPath.provider) return true;
-	if (observedPath.provider === "tangle-router" || declaredPath.provider === "tangle-router") {
-		const router = observedPath.provider === "tangle-router" ? observedPath : declaredPath;
-		const upstream = observedPath.provider === "tangle-router" ? declaredPath : observedPath;
-		if (upstream.provider === void 0) return false;
-		return samePath(router.path, upstream.path) || router.path[0] === upstream.provider && samePath(router.path.slice(1), upstream.path);
-	}
-	return false;
-}
-function modelBaseParts(model) {
-	const segments = model.split("/");
-	const normalized = segments.length > 1 && isHarnessPrefix(segments[0]) ? segments.slice(1) : segments;
-	if (normalized.length === 1) return {
-		provider: void 0,
-		path: normalized
-	};
-	return {
-		provider: normalized[0],
-		path: normalized.slice(1)
-	};
-}
-function isHarnessPrefix(segment) {
-	return segment !== void 0 && harnessTypeSchema.safeParse(segment).success;
-}
-function samePath(left, right) {
-	return left.length === right.length && left.every((segment, index) => segment === right[index]);
-}
-function modelLeaf(model) {
-	return model.slice(model.lastIndexOf("/") + 1);
-}
-/**
-* Parse the provider's documented dated snapshot forms.
-*
-* `undefined` means that the model has no dated shape and must be treated as a normal base.
-* `null` means that it has a dated shape but the date is invalid, so identity matching fails.
-*/
-function datedModelIdentity(model) {
-	const iso = datedIsoSuffix.exec(model);
-	if (iso) {
-		const [, base, yearText, monthText, dayText] = iso;
-		return buildDatedIdentity(base, `${yearText}-${monthText}-${dayText}`, isValidCalendarDate(yearText, monthText, dayText));
-	}
-	const compact = datedCompactSuffix.exec(model);
-	if (compact) {
-		const [, base, yearText, monthText, dayText] = compact;
-		return buildDatedIdentity(base, `${yearText}-${monthText}-${dayText}`, isValidCalendarDate(yearText, monthText, dayText));
-	}
-	const month = datedMonthSuffix.exec(model);
-	if (month) {
-		const [, base, yearText, monthText] = month;
-		return buildDatedIdentity(base, `${yearText}-${monthText}`, isValidCalendarMonth(yearText, monthText));
-	}
-}
-function buildDatedIdentity(base, snapshot, valid) {
-	if (base === void 0 || base.length === 0 || base.endsWith("/")) return void 0;
-	return valid ? {
-		base,
-		snapshot,
-		snapshotKind: "date"
-	} : null;
-}
-function isValidCalendarDate(yearText, monthText, dayText) {
-	if (yearText === void 0 || monthText === void 0 || dayText === void 0) return false;
-	const year = Number(yearText);
-	const month = Number(monthText);
-	const day = Number(dayText);
-	if (year < 2e3 || year > 2099 || month < 1 || month > 12 || day < 1 || day > 31) return false;
-	const date = new Date(Date.UTC(year, month - 1, day));
-	return date.getUTCFullYear() === year && date.getUTCMonth() === month - 1 && date.getUTCDate() === day;
-}
-function isValidCalendarMonth(yearText, monthText) {
-	if (yearText === void 0 || monthText === void 0) return false;
-	const year = Number(yearText);
-	const month = Number(monthText);
-	return year >= 2e3 && year <= 2099 && month >= 1 && month <= 12;
-}
-//#endregion
 //#region src/runtime/tool-loop.ts
 /**
 * THE canonical agentic tool-loop. One inference turn → run any requested tools → fold the
@@ -12588,7 +12464,7 @@ async function routerChatWithTools(cfg, messages, tools, opts) {
 	let transportAttempts = 1;
 	const headers = routerRequestHeaders(cfg, opts);
 	const complete = cfg.complete;
-	const data = complete ? await (async () => {
+	const raw = complete ? await (async () => {
 		const result = await retryRouterOperation(retry, opts?.signal, (signal) => complete(structuredClone(body), {
 			headers,
 			signal
@@ -12600,10 +12476,11 @@ async function routerChatWithTools(cfg, messages, tools, opts) {
 			method: "POST",
 			headers,
 			body: JSON.stringify(body)
-		}, opts?.signal, retry);
+		}, opts?.signal, retry, opts?.onResponse);
 		transportAttempts = result.attempts;
 		return routerResponseJson(result.response, result.attempts);
 	})();
+	const data = raw;
 	const msg = data.choices?.[0]?.message;
 	if (!msg) throw new ValidationError$1("router completion: no choices[0].message");
 	const toolCalls = (msg?.tool_calls ?? []).map((tc, i) => ({
@@ -12613,6 +12490,7 @@ async function routerChatWithTools(cfg, messages, tools, opts) {
 	}));
 	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, cfg.model, transportAttempts);
 	return {
+		response: raw,
 		content: msg?.content ?? null,
 		toolCalls,
 		transportAttempts,
@@ -12839,12 +12717,64 @@ function routerRequestHeaders(cfg, opts) {
 function reportedModel(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
-async function fetchRouterResponse(url, init, callerSignal, retry) {
+async function fetchRouterResponse(url, init, callerSignal, retry, onResponse) {
+	let attempt = 0;
 	const result = await retryRouterOperation(retry, callerSignal, async (signal) => {
-		const candidate = await fetch(url, {
-			...init,
-			signal
-		});
+		attempt += 1;
+		const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+		let candidate;
+		try {
+			candidate = await fetch(url, {
+				...init,
+				signal
+			});
+		} catch (error) {
+			await observeRouterResponse(onResponse, {
+				endpoint: url,
+				callId: new Headers(init.headers).get("idempotency-key") ?? "",
+				attempt,
+				startedAt,
+				endedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				status: null,
+				headers: {},
+				body: null,
+				error: {
+					name: error instanceof Error ? error.name : "Error",
+					message: error instanceof Error ? error.message : String(error)
+				}
+			}, signal);
+			throw error;
+		}
+		if (onResponse) {
+			const headers = Object.fromEntries([...candidate.headers].filter(([name]) => ![
+				"authorization",
+				"proxy-authorization",
+				"set-cookie",
+				"cookie"
+			].includes(name.toLowerCase())));
+			let body = null;
+			let bodyError;
+			try {
+				body = await candidate.clone().text();
+			} catch (error) {
+				bodyError = error;
+			}
+			await observeRouterResponse(onResponse, {
+				endpoint: url,
+				callId: new Headers(init.headers).get("idempotency-key") ?? "",
+				attempt,
+				startedAt,
+				endedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				status: candidate.status,
+				headers,
+				body,
+				...bodyError === void 0 ? {} : { error: {
+					name: bodyError instanceof Error ? bodyError.name : "Error",
+					message: bodyError instanceof Error ? bodyError.message : String(bodyError)
+				} }
+			}, signal);
+			if (bodyError !== void 0) throw bodyError;
+		}
 		if (candidate.ok) return candidate;
 		const text = await candidate.text().catch(() => "<failed to read response body>");
 		throw new SDKError(`router ${candidate.status}: ${text.slice(0, 200)}`, {
@@ -12859,6 +12789,28 @@ async function fetchRouterResponse(url, init, callerSignal, retry) {
 		attempts: result.attempts
 	};
 }
+/** Evidence failure cannot authorize a second inference, even after the request deadline. */
+async function observeRouterResponse(observer, receipt, signal) {
+	if (!observer) return;
+	let onAbort;
+	try {
+		const aborted = new Promise((_resolve, reject) => {
+			onAbort = () => reject(signal.reason ?? /* @__PURE__ */ new Error("Response observation aborted"));
+			if (signal.aborted) onAbort();
+			else signal.addEventListener("abort", onAbort, { once: true });
+		});
+		await Promise.race([Promise.resolve().then(() => observer(receipt)), aborted]);
+	} catch (error) {
+		throw new SDKError("Router response observation failed", {
+			code: "UNKNOWN",
+			retryable: false,
+			cause: error instanceof Error ? error : new Error(String(error)),
+			context: { phase: "response_observation" }
+		});
+	} finally {
+		if (onAbort) signal.removeEventListener("abort", onAbort);
+	}
+}
 async function retryRouterOperation(retry, callerSignal, operation) {
 	let attempts = 0;
 	try {
@@ -12869,6 +12821,7 @@ async function retryRouterOperation(retry, callerSignal, operation) {
 				try {
 					return await operation(attemptSignal.signal);
 				} catch (error) {
+					if (error instanceof SDKError && error.context?.phase === "response_observation") throw error;
 					if (callerSignal?.aborted) throw callerSignal.reason ?? error;
 					if (attemptSignal.signal.aborted) throw new SDKError(`router request timeout after ${retry.requestTimeoutMs}ms`, {
 						code: "TIMEOUT",
@@ -18113,6 +18066,7 @@ const ROUTER_TRANSCRIPT_HARNESS = "router";
 const TURN_CONTENT_BYTES = 256 * 1024;
 function createRouterTranscript() {
 	const kept = [];
+	const records = [];
 	const seen = /* @__PURE__ */ new WeakSet();
 	let turnStart = 0;
 	let replyEchoPending = false;
@@ -18127,10 +18081,17 @@ function createRouterTranscript() {
 				if (message.role === "assistant") continue;
 			}
 			kept.push(message);
+			records.push(message);
 		}
 	};
 	return {
 		observe,
+		response(receipt) {
+			records.push({
+				type: "provider.response",
+				...receipt
+			});
+		},
 		reply(reply) {
 			const message = {
 				role: "assistant",
@@ -18145,6 +18106,7 @@ function createRouterTranscript() {
 				})) } : {}
 			};
 			kept.push(message);
+			records.push(message);
 			replyEchoPending = true;
 			const added = kept.slice(turnStart).map(forTurnEvent);
 			turnStart = kept.length;
@@ -18153,7 +18115,7 @@ function createRouterTranscript() {
 		capture() {
 			if (live !== void 0) observe(live);
 			if (kept.length === 0) return harnessTranscriptUnavailable("execution-never-started");
-			return harnessTranscriptFromLines(ROUTER_TRANSCRIPT_HARNESS, "conversation", kept.map((message) => JSON.stringify(message)));
+			return harnessTranscriptFromLines(ROUTER_TRANSCRIPT_HARNESS, "conversation", records.map((record) => JSON.stringify(record)));
 		}
 	};
 }
@@ -18991,6 +18953,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 		routerKey: seam.routerKey,
 		tools: seam.tools
 	}, { multiTurn: true });
+	if (model === "tangle/auto") assertRouterAutoDeclaration(profileExecution.extraBody?.auto, profileExecution.stream);
 	const enabledToolNames = new Set(seam.tools.map((tool) => tool.function.name));
 	const maxTurns = profileExecution.maxTurns ?? 0;
 	const requestIdentity = routerRequestIdentity(ctx);
@@ -19019,6 +18982,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			let resources;
 			let transportAttempts = 0;
 			let observedModel;
+			const providerResponses = [];
 			let reasoningTokens = 0;
 			let reasoningKnown = true;
 			const promptCache = {};
@@ -19055,6 +19019,11 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 						}, messages, seam.tools, {
 							...profileExecution.temperature !== void 0 ? { temperature: profileExecution.temperature } : {},
 							signal: turnController.signal,
+							onResponse: async (receipt) => {
+								providerResponses.push(receipt);
+								transcript.response(receipt);
+								await seam.onProviderResponse?.(structuredClone(receipt));
+							},
 							...profileExecution.toolChoice ? { toolChoice: profileExecution.toolChoice } : {},
 							...profileExecution.tokenLimits.applied,
 							...profileExecution.seed !== void 0 ? { seed: profileExecution.seed } : {},
@@ -19092,7 +19061,12 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 					}]))).resources;
 					transportAttempts += res.transportAttempts;
 					if (res.model !== void 0) recordRuntimeOwnedProviderModel(executor, res.model);
-					assertObservedRouterModel(res.model, model, "routerToolsInlineExecutor");
+					if (model === "tangle/auto") {
+						assertRouterAutoResponse(profileExecution.extraBody?.auto, res.response, res.model);
+						tokensKnown = false;
+						reasoningKnown = false;
+						usdKnown = false;
+					} else assertObservedRouterModel(res.model, model, "routerToolsInlineExecutor");
 					if (res.model !== void 0) observedModel = res.model;
 					mergePromptCache(promptCache, res.cache);
 					if (res.usage) {
@@ -19214,6 +19188,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 				turns,
 				toolCalls: executedToolCalls,
 				transportAttempts,
+				providerResponses,
 				...estimatedUsd !== void 0 ? { estimatedCostUsd: estimatedUsd } : {},
 				...Object.keys(promptCache).length > 0 ? { promptCache } : {},
 				...reasoningKnown && turns > 0 ? { reasoningTokens } : {}
@@ -20042,12 +20017,13 @@ const cliInPlaceExecutor = (spec, ctx) => {
 function snapshotExecutorConfig(config) {
 	switch (config.backend) {
 		case "router-tools": {
-			const { complete, executeToolCall, onMessages, onToolStep, ...decisionData } = config;
+			const { complete, executeToolCall, onMessages, onToolStep, onProviderResponse, ...decisionData } = config;
 			const snapshot = detachedSnapshot(decisionData, "createExecutor router-tools config");
 			return Object.freeze({
 				...snapshot,
 				...complete === void 0 ? {} : { complete },
 				executeToolCall,
+				...onProviderResponse === void 0 ? {} : { onProviderResponse },
 				...onMessages === void 0 ? {} : { onMessages },
 				...onToolStep === void 0 ? {} : { onToolStep }
 			});
@@ -21741,15 +21717,20 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 * derived from the input sequence exactly as the live scope derived it.
 */
 async function leafContinuation(node, owned, latestInput, opts) {
-	const priorSession = [...owned.slice(0, owned.indexOf(latestInput))].reverse().flatMap((event) => event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
+	const before = owned.slice(0, owned.indexOf(latestInput));
+	const priorSession = [...before].reverse().flatMap((event) => event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
 	if (priorSession === void 0) throw new RuntimeRunStateError(`cannot recover '${node.id}': its continuation names no environment it continued in`);
+	const priorResult = [...before].reverse().find((event) => event.kind === "execution-result");
+	if (priorResult === void 0) throw new RuntimeRunStateError(`cannot recover '${node.id}': its continuation has no committed predecessor result`);
+	await assertRecordedResult(node, priorResult, owned, opts);
 	const task = await opts.blobs.get(latestInput.taskRef);
 	if (task === void 0 || contentAddress(task) !== latestInput.taskRef) throw new RuntimeRunStateError(`continuation task for '${node.id}' is missing or corrupt`);
 	return {
 		task,
 		inputSeq: latestInput.seq,
 		executionId: leafContinuationExecutionId(node.id, latestInput.seq),
-		priorSession
+		priorSession,
+		priorSpent: priorResult.spent
 	};
 }
 async function assertRecordedResult(node, result, events, opts) {
@@ -23944,7 +23925,8 @@ function createScope(args) {
 			const retainedContext = (continuing) => ({
 				...continuing === void 0 ? {} : {
 					executionId: continuing.executionId,
-					priorSession: continuing.priorSession
+					priorSession: continuing.priorSession,
+					...continuing.priorSpent === void 0 ? {} : { priorSpent: continuing.priorSpent }
 				},
 				admissions,
 				...markRecoveryReady && continuing === void 0 ? { onReady: markRecoveryReady } : {},
@@ -23980,10 +23962,12 @@ function createScope(args) {
 					});
 					inputSeq = nextSeq;
 					admissions = [];
+					const priorSpent = live.acceptedResult.spent;
 					live.acceptedResult = void 0;
 					return retainedContext({
 						executionId: leafContinuationExecutionId(id, nextSeq),
-						priorSession: environment
+						priorSession: environment,
+						priorSpent
 					});
 				}
 			});
@@ -24001,7 +23985,8 @@ function createScope(args) {
 					...args.seams,
 					[retainedExecutorSeamKey]: retainedContext(recovery?.continuation === void 0 ? void 0 : {
 						executionId: recovery.continuation.executionId,
-						priorSession: recovery.continuation.priorSession
+						priorSession: recovery.continuation.priorSession,
+						priorSpent: recovery.continuation.priorSpent
 					}),
 					[nestedScopeSeamKey]: makeNestedScopeSeam(args, workerSlots, permit, id, opts.budget, childDeadlineAtMs, deferredOwner),
 					...workerTrace ? { [workerTraceSeamKey]: workerTrace } : {},
@@ -24251,7 +24236,7 @@ function createScope(args) {
 			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? task, opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
 				complete: async () => pendingEvidence?.complete(),
 				fail: async () => pendingEvidence?.fail()
-			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready);
+			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent);
 			args.pool.attribute(reservation.ticket, { stage: "executing" });
 			const interactiveBindingCommitted = spawnCommitted.then(async () => {
 				if (args.interactiveBindingDir === void 0) return;
@@ -25353,7 +25338,8 @@ async function finalizeWait(child, settlement, seq, args, now, handle) {
 * applied per child). The reservation is reconciled on EVERY path (success, abort, throw)
 * so the conserved pool can never leak a reservation.
 */
-async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve()) {
+async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent) {
+	if (priorSpent !== void 0) live.spent = detachedSnapshot(priorSpent, "prior committed usage");
 	let reconciled = false;
 	let reconciliationError;
 	let teardownFailure;
@@ -25455,7 +25441,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 					seq: nextProgressSeq(),
 					at: new Date(now()).toISOString()
 				});
-			}, childAbort.signal);
+			}, childAbort.signal, priorSpent);
 			live.spent = spend;
 			const reported = executor.resultArtifact();
 			artifact = await retainOutput(reported, preserveUnknownTelemetry(spend, reported.spent));
@@ -25823,8 +25809,8 @@ function freezeCorrelation(value) {
 * turns deep from one that had produced nothing. It also means a worker that THROWS mid-stream
 * now reconciles its real partial spend instead of refunding work the provider already billed.
 */
-async function foldStream(stream, onProgress, signal) {
-	const totals = newUsageTotals();
+async function foldStream(stream, onProgress, signal, priorSpent) {
+	const totals = newUsageTotals(priorSpent);
 	const iterator = stream[Symbol.asyncIterator]();
 	try {
 		for (;;) {
@@ -25838,6 +25824,7 @@ async function foldStream(stream, onProgress, signal) {
 				tokens: cloneTokenUsage(totals.tokens),
 				...totals.tokensKnown ? {} : { tokensKnown: false },
 				usd: totals.usd,
+				...totals.usdEstimated > 0 ? { usdEstimated: totals.usdEstimated } : {},
 				...totals.usdKnown ? {} : { usdKnown: false },
 				...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
 				ms: 0
@@ -25998,7 +25985,7 @@ function isInfraError(err) {
 * journal so the executor can run its `act` inside a nested scope. `act` fails loud if
 * called directly — a driver child runs THROUGH its nested-scope executor, never as a root.
 */
-function driverChild(profile, driver, journal, execution, acceptedSubmission, recoverExecutor) {
+function driverChild(profile, driver, journal, execution, acceptedSubmission, recoverExecutor, unassessedOutput) {
 	const name = profile.name ?? driver.name;
 	const traceSource = driver.traceSource;
 	const progress = driver.progress;
@@ -26011,6 +25998,7 @@ function driverChild(profile, driver, journal, execution, acceptedSubmission, re
 		driver,
 		journal,
 		...acceptedSubmission ? { acceptedSubmission } : {},
+		...unassessedOutput ? { unassessedOutput } : {},
 		...recoverExecutor ? { recoverExecutor } : {},
 		...traceSource ? { traceSource } : {},
 		...progress ? { progress } : {},
@@ -26134,7 +26122,8 @@ const driverExecutorFactory = (rawSpec, ctx) => {
 					reported: childWork,
 					reservation: addSpend(childWork, totalMetered)
 				};
-				const verdict = deriveDeliveryVerdict(events.filter((event) => event.kind === "settled"), out, spec.acceptedSubmission?.() === true);
+				const acceptedSubmission = spec.acceptedSubmission?.() === true;
+				const verdict = !acceptedSubmission && spec.unassessedOutput?.() === true ? void 0 : deriveDeliveryVerdict(events.filter((event) => event.kind === "settled"), out, acceptedSubmission);
 				artifact = {
 					outRef: `${driverRuntime}:${nestedRoot}`,
 					out: out === void 0 ? null : out,
@@ -28422,6 +28411,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { waitUntil as $, detachedFrozen as $i, replaySpawnTree as $n, sanitizeRuntimeStreamEvent as $r, claimsAuthority as $t, driverExecutorFactory as A, addResourceSpend as Aa, prepareJsonlAppend as Ai, LEAF_CONTINUATION_TASK as An, contentAddress as Ar, cliInPlaceExecutor as At, recordScopeOwnerDriverAttempt as B, promptFromAgentTurnInput as Ba, newExecutionAttemptId as Bi, registerRetainedExecutorPreparation as Bn, buildRuntimeEventOtelSpans as Br, WORKER_TRACE_PROPAGATION as Bt, createContinuationKeeper as C, sleep as Ca, renderProfileMaterializationIssues as Ci, captureBeforeDestroy as Cn, abortError as Cr, recoverRetainedInteractiveRun as Ct, passedItems as D, unmeteredSpend as Da, validateProfileMaterialization as Di, runBrainLoop as Dn, harnessTranscriptArtifact as Dr, rollingDispatch as Dt, failedItems as E, throwIfAborted as Ea, unsupportedProfileDimensions as Ei, routerBrain as En, captureHarnessTranscript as Er, queueOf as Et, beginScopeOwnerAttempt as F, awaitAbortable$1 as Fa, authoredProfileDigest as Fi, unavailablePauseMs as Fn, defaultRedactor as Fr, createWorktreeCliExecutor as Ft, settledToIteration as G, runtimeOwnedExecutorMaterialization as Gi, InMemorySpawnJournal as Gn, loopEventToOtelSpan as Gr, taskToPrompt as Gt, recordScopeOwnerPause as H, providerMessageText as Ha, recordRuntimeOwnedDriveHarnessProviderEvidence as Hi, FileResultBlobStore as Hn, createOtelExporter as Hr, workerTraceEnv as Ht, createScope as I, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Ia, finalizeRuntimeOwnedPendingExecutor as Ii, unavailableSignalOfFailure as In, defaultRedactorIdentityMaterial as Ir, DEFAULT_SANDBOX_STEERING_MAX_TURNS as It, createWaitProbes as J, runtimeOwnedScopeOwnerRuntime as Ji, encodeResultBlob as Jn, toOtelAttributes as Jr, readWorkerProgress as Jt, createWorkerSlots as K, runtimeOwnedExecutorProviderEvidence as Ki, SpawnEventIndex as Kn, padSpanId as Kr, DEFAULT_STALL_AFTER_MS as Kt, deriveNodeExecutionIdentity as L, armDeadlineTimer as La, inheritRuntimeOwnedExecutorAttestation as Li, createPushTraceSource as Ln, resolveRedactor as Lr, createSteerableSandboxSession as Lt, withDriverExecutor as M, withBudgetResources as Ma, writeAllBytes as Mi, providerAsExecutor as Mn, mergeTraceEnv as Mr, createExecutor as Mt, SUBTREE_RESULT_LIMIT as N, decodeHarnessUsage as Na, attestRuntimeOwnedPendingExecutor as Ni, providerAsSandboxClient as Nn, readTraceContextFromEnv as Nr, createExecutorRegistry as Nt, verdictFromJudgeScore as O, withTimeout as Oa, worktreeCliProfileMaterialization as Oi, canonicalObservedModelParts as On, persistHarnessTranscript as Or, bindReusableExecutorExecutionId as Ot, assertRecursiveReservationPolicy as P, abortError$2 as Pa, attestRuntimeOwnedScopeOwner as Pi, resolveAgentEnvironmentProvider as Pn, traceContextToEnv as Pr, snapshotExecutorConfig as Pt, validateWaitSpec as Q, executableAgentSpecSnapshot as Qi, pendingWaits as Qn, sanitizeKnowledgeReadinessReport as Qr, PEER_MAIL_WIRE_KEY as Qt, meterRuntimeOwnedAccounting as R, teardownExecutor as Ra, knownExecutionBindingReceipt as Ri, decodeToolPart as Rn, buildLoopOtelSpans as Rr, createRouterTranscript as Rt, composeContinuationNote as S, randomSuffix as Sa, promptResourceProfileMaterialization as Si, SandboxEvidenceRetentionError as Sn, RunCancellationReason as Sr, reconnectRetainedInteractiveRun as St, expandQuestions as T, throwAbort as Ta, sandboxActProfileMaterialization as Ti, readPromptOptions as Tn, runAbortable as Tr, freeSlots as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedDriveHarnessProviderEvidence as Ui, FileSpawnJournal as Un, flatOtelSpan as Ur, workerTraceHeaders as Ut, recordScopeOwnerMaterialization as V, promptOptionsFromAgentTurnInput as Va, providerAttemptEvidence as Vi, retainedExecutorSeamKey as Vn, createOpenInferenceFileExporter as Vr, readWorkerTraceContext as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorExecutionBinding as Wi, InMemoryResultBlobStore as Wn, generateSpanId as Wr, workerTraceSeamKey as Wt, pollFor as X, unknownMaterializationReceipt as Xi, loadSpawnForest as Xn, createRuntimeStreamEventCollector as Xr, AUTHORITY_MARKERS as Xt, isWaitOutcome as Y, unknownExecutionBindingReceipt as Yi, insideCursorNamespace as Yn, createRuntimeEventCollector as Yr, createInbox as Yt, timerAt as Z, executableAgentProfileSnapshot as Zi, materializeTreeView as Zn, sanitizeAgentRuntimeEvent as Zr, DEFAULT_PEER_MAIL_LIMITS as Zt, CheckUnavailableError as _, cloneSpend as _a, fullProfileMaterialization as _i, isTerminalDecision as _n, startRetainedRun as _r, workerInteractiveAdmissionFile as _t, collectDelivered as a, createSandboxToolPartState as aa, DEFAULT_LOCAL_HARNESS as ai, isTerminalNodeStatus as an, executorFailure as ar, reconcileScopeRetainedOwnerEnvironment as at, bestComposite as b, isAbortError$2 as ba, promptModelProfileMaterialization as bi, probeSandboxCapabilities as bn, destroyInteractiveEnvironment as br, workerInteractiveBindingFile as bt, runTree as c, isSandboxTerminalEvent as ca, harnessSupportsReasoningEffort as ci, addHarnessUsage as cn, assertValidBudget as cr, scopeRetainedOwnerResourceReader as ct, classifyDriverFailure as d, notifySandboxEventObserver as da, CodexExecutionDiagnosticError as di, readCodexRolloutSession as dn, newUsageTotals as dr, SPAWN_RESOURCE_PATH_MAX_BYTES as dt, detachedSnapshot as ea, runSettledCommand as ei, createPeerMailbox as en, WORKER_TOOL_TRACE_SCHEMA_VERSION as er, bindScopeRetainedOwnerEnvironmentId as et, runDriverWithRetry as f, sandboxEventServedBackend as fa, terminateProcessTreeAndConfirm as fi, bridgeRuntimeAttachmentsKey as fn, spendFromUsageEvents as fr, environmentReader as ft, CONTINUATION_FACTS as g, chargedTokens as ga, defineProfileMaterializationContract as gi, defaultSelectWinner as gn, recoverRetainedRun as gr, readWorkerInteractiveAdmissions as gt, CONTINUATIONS_DIR as h, addSpend as ha, controlProfileMaterialization as hi, createSandboxForSpec as hn, reconnectRetainedRun as hr, interactiveAdmissionSeamKey as ht, bestDelivered as i, canonicalStreamEventFromSandboxEvent as ia, removeWorktree as ii, isLiveNodeStatus as in, workerTraceAnalysisStore as ir, prepareScopeRetainedOwnerTask as it, isDriverSpec as j, resourceTelemetry as ja, readCommittedJsonLines as ji, createAgentEnvironmentProviderRegistry as jn, createPropagatingTraceEmitter as jr, cliWorktreeExecutor as jt, driverChild as k, zeroSpend as ka, isNoEntError as ki, observedModelMatchesDeclared as kn, readHarnessTranscript as kr, captureReusableExecutorConfig as kt, DriverAttemptsExhaustedError as l, mapSandboxEvent as la, localHarnessExecutable as li, createCodexRolloutStoreReader as ln, createBudgetPool as lr, scopeRetainedOwnerRestorePoint as lt, upstreamUnavailableSignal as m, sumSandboxUsage as ma, assertProfileMaterialization as mi, TERMINAL_DECISIONS as mn, errMessage as mr, resolveSpawnResourcePaths as mt, createRootHandle as n, readSandboxOutcome as na, captureWorktreeDiff as ni, peerMailTools as nn, isTraceAnalysisStore as nr, consumeScopeRetainedOwnerResult as nt, pickBestDelivered as o, createSandboxUsageLedger as oa, LOCAL_HARNESSES as oi, bridgeAdmissionRefusal as on, BudgetReconcileFault as or, scopeRetainedOwnerContext as ot, summarizeDriverAttempts as p, sandboxProgressEvents as pa, AGENT_PROFILE_MATERIALIZATION_AXES as pi, bridgeStopSignalKey as pn, spendFromUsageTotals as pr, hostDirectoryReader as pt, openSlotGroup as q, runtimeOwnedPendingExecutorMaterialization as qi, assertContentAddress as qn, padTraceId as qr, createActivityLog as qt, createSupervisor as r, assertSandboxServedModel as ra, createWorktree as ri, peerMailVerbNames as rn, parseWorkerToolTraceArtifact as rr, noteScopeRetainedOwnerCoordination as rt, runFinalizer as s, extractLlmCallEvent as sa, harnessInvocation as si, bridgeModelRouteRefusal as sn, ReservationWaitRefused as sr, scopeRetainedOwnerPriorSpend as st, DEFAULT_MAX_DEPTH as t, projectSandboxOutcome as ta, runWorktreeHarness as ti, isPeerMailEnvelope as tn, captureWorkerTraceEvidence as tr, bindScopeRetainedOwnerProvider as tt, HarnessTurnFailedError as u, mapSandboxToolEvent as ua, parseCodexTokenUsage as ui, harnessUsageIsEmpty as un, meterUsageEvent as ur, scopeRetainedOwnerResult as ut, admitContinuationPolicy as v, deleteBoxSafe as va, profileMaterializationAxes$1 as vi, runAgentRounds as vn, startRetainedRunInEnvironment as vr, attachWorker as vt, distillFindings as w, stringifySafe as wa, renderUnsupported as wi, assertBoxlessPromptOptions as wn, linkAbort as wr, startRetainedInteractiveRun as wt, checkVerdictOf as x, promptCacheTokenClasses as xa, promptOnlyProfileMaterialization as xi, acquireSandbox as xn, environmentGone as xr, workerInteractiveBindingsDir as xt, admitFinding as y, hasCompleteCacheBreakdown as ya, promptControlProfileMaterialization as yi, createSandboxLineage as yn, retainedCreateMaterial as yr, readWorkerInteractiveBinding as yt, meterRuntimeOwnedProviderAttempt as z, teardownSurfaces as za, knownMaterializationReceipt as zi, sandboxSessionTraceSource as zn, buildLoopSpanNodes as zr, createInPlaceCliExecutor as zt };
+export { waitUntil as $, projectSandboxOutcome as $i, captureWorkerTraceEvidence as $n, runWorktreeHarness as $r, claimsAuthority as $t, driverExecutorFactory as A, withBudgetResources as Aa, writeAllBytes as Ai, providerAsExecutor as An, mergeTraceEnv as Ar, cliInPlaceExecutor as At, recordScopeOwnerDriverAttempt as B, providerMessageText as Ba, recordRuntimeOwnedDriveHarnessProviderEvidence as Bi, FileResultBlobStore as Bn, createOtelExporter as Br, WORKER_TRACE_PROPAGATION as Bt, createContinuationKeeper as C, throwAbort as Ca, sandboxActProfileMaterialization as Ci, captureBeforeDestroy as Cn, runAbortable as Cr, recoverRetainedInteractiveRun as Ct, passedItems as D, zeroSpend as Da, isNoEntError as Di, runBrainLoop as Dn, readHarnessTranscript as Dr, rollingDispatch as Dt, failedItems as E, withTimeout as Ea, worktreeCliProfileMaterialization as Ei, routerBrain as En, persistHarnessTranscript as Er, queueOf as Et, beginScopeOwnerAttempt as F, armDeadlineTimer as Fa, inheritRuntimeOwnedExecutorAttestation as Fi, createPushTraceSource as Fn, resolveRedactor as Fr, createWorktreeCliExecutor as Ft, settledToIteration as G, runtimeOwnedPendingExecutorMaterialization as Gi, assertContentAddress as Gn, padTraceId as Gr, taskToPrompt as Gt, recordScopeOwnerPause as H, runtimeOwnedExecutorExecutionBinding as Hi, InMemoryResultBlobStore as Hn, generateSpanId as Hr, workerTraceEnv as Ht, createScope as I, teardownExecutor as Ia, knownExecutionBindingReceipt as Ii, decodeToolPart as In, buildLoopOtelSpans as Ir, DEFAULT_SANDBOX_STEERING_MAX_TURNS as It, createWaitProbes as J, unknownMaterializationReceipt as Ji, loadSpawnForest as Jn, createRuntimeStreamEventCollector as Jr, readWorkerProgress as Jt, createWorkerSlots as K, runtimeOwnedScopeOwnerRuntime as Ki, encodeResultBlob as Kn, toOtelAttributes as Kr, DEFAULT_STALL_AFTER_MS as Kt, deriveNodeExecutionIdentity as L, teardownSurfaces as La, knownMaterializationReceipt as Li, sandboxSessionTraceSource as Ln, buildLoopSpanNodes as Lr, createSteerableSandboxSession as Lt, withDriverExecutor as M, abortError$2 as Ma, attestRuntimeOwnedScopeOwner as Mi, resolveAgentEnvironmentProvider as Mn, traceContextToEnv as Mr, createExecutor as Mt, SUBTREE_RESULT_LIMIT as N, awaitAbortable$1 as Na, authoredProfileDigest as Ni, unavailablePauseMs as Nn, defaultRedactor as Nr, createExecutorRegistry as Nt, verdictFromJudgeScore as O, addResourceSpend as Oa, prepareJsonlAppend as Oi, LEAF_CONTINUATION_TASK as On, contentAddress as Or, bindReusableExecutorExecutionId as Ot, assertRecursiveReservationPolicy as P, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Pa, finalizeRuntimeOwnedPendingExecutor as Pi, unavailableSignalOfFailure as Pn, defaultRedactorIdentityMaterial as Pr, snapshotExecutorConfig as Pt, validateWaitSpec as Q, detachedSnapshot as Qi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Qn, runSettledCommand as Qr, PEER_MAIL_WIRE_KEY as Qt, meterRuntimeOwnedAccounting as R, promptFromAgentTurnInput as Ra, newExecutionAttemptId as Ri, registerRetainedExecutorPreparation as Rn, buildRuntimeEventOtelSpans as Rr, createRouterTranscript as Rt, composeContinuationNote as S, stringifySafe as Sa, renderUnsupported as Si, SandboxEvidenceRetentionError as Sn, linkAbort as Sr, reconnectRetainedInteractiveRun as St, expandQuestions as T, unmeteredSpend as Ta, validateProfileMaterialization as Ti, readPromptOptions as Tn, harnessTranscriptArtifact as Tr, freeSlots as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedExecutorMaterialization as Ui, InMemorySpawnJournal as Un, loopEventToOtelSpan as Ur, workerTraceHeaders as Ut, recordScopeOwnerMaterialization as V, runtimeOwnedDriveHarnessProviderEvidence as Vi, FileSpawnJournal as Vn, flatOtelSpan as Vr, readWorkerTraceContext as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorProviderEvidence as Wi, SpawnEventIndex as Wn, padSpanId as Wr, workerTraceSeamKey as Wt, pollFor as X, executableAgentSpecSnapshot as Xi, pendingWaits as Xn, sanitizeKnowledgeReadinessReport as Xr, AUTHORITY_MARKERS as Xt, isWaitOutcome as Y, executableAgentProfileSnapshot as Yi, materializeTreeView as Yn, sanitizeAgentRuntimeEvent as Yr, createInbox as Yt, timerAt as Z, detachedFrozen as Zi, replaySpawnTree as Zn, sanitizeRuntimeStreamEvent as Zr, DEFAULT_PEER_MAIL_LIMITS as Zt, CheckUnavailableError as _, hasCompleteCacheBreakdown as _a, promptControlProfileMaterialization as _i, isTerminalDecision as _n, retainedCreateMaterial as _r, workerInteractiveAdmissionFile as _t, collectDelivered as a, extractLlmCallEvent as aa, harnessInvocation as ai, isTerminalNodeStatus as an, ReservationWaitRefused as ar, reconcileScopeRetainedOwnerEnvironment as at, bestComposite as b, randomSuffix as ba, promptResourceProfileMaterialization as bi, probeSandboxCapabilities as bn, RunCancellationReason as br, workerInteractiveBindingFile as bt, runTree as c, mapSandboxToolEvent as ca, parseCodexTokenUsage as ci, addHarnessUsage as cn, meterUsageEvent as cr, scopeRetainedOwnerResourceReader as ct, classifyDriverFailure as d, sandboxProgressEvents as da, AGENT_PROFILE_MATERIALIZATION_AXES as di, readCodexRolloutSession as dn, spendFromUsageTotals as dr, SPAWN_RESOURCE_PATH_MAX_BYTES as dt, readSandboxOutcome as ea, captureWorktreeDiff as ei, createPeerMailbox as en, isTraceAnalysisStore as er, bindScopeRetainedOwnerEnvironmentId as et, runDriverWithRetry as f, sumSandboxUsage as fa, assertProfileMaterialization as fi, bridgeRuntimeAttachmentsKey as fn, errMessage as fr, environmentReader as ft, CONTINUATION_FACTS as g, deleteBoxSafe as ga, profileMaterializationAxes$1 as gi, defaultSelectWinner as gn, startRetainedRunInEnvironment as gr, readWorkerInteractiveAdmissions as gt, CONTINUATIONS_DIR as h, cloneSpend as ha, fullProfileMaterialization as hi, createSandboxForSpec as hn, startRetainedRun as hr, interactiveAdmissionSeamKey as ht, bestDelivered as i, createSandboxUsageLedger as ia, LOCAL_HARNESSES as ii, isLiveNodeStatus as in, BudgetReconcileFault as ir, prepareScopeRetainedOwnerTask as it, isDriverSpec as j, decodeHarnessUsage as ja, attestRuntimeOwnedPendingExecutor as ji, providerAsSandboxClient as jn, readTraceContextFromEnv as jr, cliWorktreeExecutor as jt, driverChild as k, resourceTelemetry as ka, readCommittedJsonLines as ki, createAgentEnvironmentProviderRegistry as kn, createPropagatingTraceEmitter as kr, captureReusableExecutorConfig as kt, DriverAttemptsExhaustedError as l, notifySandboxEventObserver as la, CodexExecutionDiagnosticError as li, createCodexRolloutStoreReader as ln, newUsageTotals as lr, scopeRetainedOwnerRestorePoint as lt, upstreamUnavailableSignal as m, chargedTokens as ma, defineProfileMaterializationContract as mi, TERMINAL_DECISIONS as mn, recoverRetainedRun as mr, resolveSpawnResourcePaths as mt, createRootHandle as n, canonicalStreamEventFromSandboxEvent as na, removeWorktree as ni, peerMailTools as nn, workerTraceAnalysisStore as nr, consumeScopeRetainedOwnerResult as nt, pickBestDelivered as o, isSandboxTerminalEvent as oa, harnessSupportsReasoningEffort as oi, bridgeAdmissionRefusal as on, assertValidBudget as or, scopeRetainedOwnerContext as ot, summarizeDriverAttempts as p, addSpend as pa, controlProfileMaterialization as pi, bridgeStopSignalKey as pn, reconnectRetainedRun as pr, hostDirectoryReader as pt, openSlotGroup as q, unknownExecutionBindingReceipt as qi, insideCursorNamespace as qn, createRuntimeEventCollector as qr, createActivityLog as qt, createSupervisor as r, createSandboxToolPartState as ra, DEFAULT_LOCAL_HARNESS as ri, peerMailVerbNames as rn, executorFailure as rr, noteScopeRetainedOwnerCoordination as rt, runFinalizer as s, mapSandboxEvent as sa, localHarnessExecutable as si, bridgeModelRouteRefusal as sn, createBudgetPool as sr, scopeRetainedOwnerPriorSpend as st, DEFAULT_MAX_DEPTH as t, assertSandboxServedModel as ta, createWorktree as ti, isPeerMailEnvelope as tn, parseWorkerToolTraceArtifact as tr, bindScopeRetainedOwnerProvider as tt, HarnessTurnFailedError as u, sandboxEventServedBackend as ua, terminateProcessTreeAndConfirm as ui, harnessUsageIsEmpty as un, spendFromUsageEvents as ur, scopeRetainedOwnerResult as ut, admitContinuationPolicy as v, isAbortError$2 as va, promptModelProfileMaterialization as vi, runAgentRounds as vn, destroyInteractiveEnvironment as vr, attachWorker as vt, distillFindings as w, throwIfAborted as wa, unsupportedProfileDimensions as wi, assertBoxlessPromptOptions as wn, captureHarnessTranscript as wr, startRetainedInteractiveRun as wt, checkVerdictOf as x, sleep as xa, renderProfileMaterializationIssues as xi, acquireSandbox as xn, abortError as xr, workerInteractiveBindingsDir as xt, admitFinding as y, promptCacheTokenClasses as ya, promptOnlyProfileMaterialization as yi, createSandboxLineage as yn, environmentGone as yr, readWorkerInteractiveBinding as yt, meterRuntimeOwnedProviderAttempt as z, promptOptionsFromAgentTurnInput as za, providerAttemptEvidence as zi, retainedExecutorSeamKey as zn, createOpenInferenceFileExporter as zr, createInPlaceCliExecutor as zt };
 
-//# sourceMappingURL=supervisor-CQFcQhlo.js.map
+//# sourceMappingURL=supervisor-B-LtKizU.js.map