@tangle-network/agent-runtime 0.291.0 → 0.292.0

package/dist/{supervisor-DpUCJtKC.js → supervisor-B-LtKizU.js}

@@ -5309,7 +5309,7 @@ function createOtelExporter(config) {
 				body: JSON.stringify(body),
 				signal: AbortSignal.timeout(timeoutMs)
 			});
-			const text = await response.text().catch(() => "");
+			const text = await response.text();
 			if (!response.ok) {
 				const detail = text ? `: ${text.slice(0, 200)}` : "";
 				drop(batch.length, `HTTP ${response.status} from ${url}${detail}`);
@@ -5324,6 +5324,7 @@ function createOtelExporter(config) {
 	}
 	/** The single sender: it drains the queue batch by batch until the queue is empty. */
 	function drain() {
+		if (sending === void 0 && queue.length === 0) return Promise.resolve();
 		sending ??= (async () => {
 			try {
 				while (queue.length > 0) {
@@ -8097,15 +8098,18 @@ function spendFromUsageEvents(events) {
 	for (const ev of events) meterUsageEvent(totals, ev);
 	return spendFromUsageTotals(totals);
 }
-/** Fresh zeroed {@link UsageTotals}. */
-function newUsageTotals() {
+/** Fresh accounting totals, optionally restored from verified committed spend. */
+function newUsageTotals(priorSpent) {
+	if (priorSpent !== void 0) assertValidSpend(priorSpent, "prior committed usage");
 	return {
-		tokens: zeroTokenUsage(),
-		tokensKnown: true,
-		usd: 0,
-		usdEstimated: 0,
-		usdKnown: true,
-		iterations: 0
+		...addResourceSpend(priorSpent?.resources),
+		tokens: priorSpent === void 0 ? zeroTokenUsage() : cloneTokenUsage(priorSpent.tokens),
+		tokensKnown: priorSpent?.tokensKnown !== false,
+		...priorSpent?.tokensProvenance === void 0 ? {} : { tokensProvenance: priorSpent.tokensProvenance },
+		usd: priorSpent?.usd ?? 0,
+		usdEstimated: priorSpent?.usdEstimated ?? 0,
+		usdKnown: priorSpent?.usdKnown !== false,
+		iterations: priorSpent?.iterations ?? 0
 	};
 }
 /**
@@ -10555,9 +10559,11 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	const createProfile = options.profileForCreate?.(profile) ?? profile;
 	if (placement && canonicalAgentProfileDigest(createProfile) !== canonicalAgentProfileDigest(profile)) throw new ValidationError("provider placement: profileForCreate cannot change the selected profile");
 	const executionId = retention?.executionId ?? node?.nodeId ?? `provider-run-${randomUUID()}`;
-	const resetWorkspaceState = (next) => {
-		if (workspaceEnvironmentId === next.id) return;
+	let workspaceExecutionId = executionId;
+	const resetWorkspaceState = (next, invocationId = workspaceExecutionId) => {
+		if (workspaceEnvironmentId === next.id && workspaceExecutionId === invocationId) return;
 		workspaceEnvironmentId = next.id;
+		workspaceExecutionId = invocationId;
 		workspaceSnapshot = void 0;
 		workspaceProvenance = void 0;
 		workspaceCoverageComplete = false;
@@ -10607,7 +10613,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			workspaceOutcome = outcome;
 			workspaceCapturePromise = captureProviderWorkspaceSnapshot(workspaceRetention, {
 				environment: next,
-				executionId,
+				executionId: workspaceExecutionId,
 				...workspaceControlRef === void 0 ? {} : { controlRef: workspaceControlRef },
 				...node === void 0 ? {} : { node },
 				providerSessionId,
@@ -10740,17 +10746,23 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		beginWorkspaceExecution();
 		const linked = linkAbort(ctx.signal, signal, controller.signal);
 		try {
-			const executionStartedAt = Date.now();
+			const executionStartedAt = Date.now() - (retention?.priorSpent?.ms ?? 0);
 			let invocation = {
 				task,
 				retention,
 				executionId,
 				recovering
 			};
-			let carried;
+			let carried = retention?.priorSpent;
 			let refusalsInARow = 0;
 			for (let attempt = 1;; attempt += 1) {
-				const continued = carried !== void 0;
+				const continued = attempt > 1;
+				if (continued && environment !== void 0) {
+					resetWorkspaceState(environment, invocation.executionId);
+					workspaceControlRef = void 0;
+					providerSessionId = null;
+					workspacePreservationRequired = options.workspaceRetention !== void 0;
+				}
 				const ended = yield* streamProviderExecutor({
 					provider,
 					profile,
@@ -10765,7 +10777,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					recovering: invocation.recovering,
 					...carried === void 0 ? {} : { carried },
 					executionStartedAt,
-					mayContinue: options.unavailablePause !== false && options.workspaceRetention === void 0 && invocation.retention?.continueInvocation !== void 0,
+					mayContinue: options.unavailablePause !== false && invocation.retention?.continueInvocation !== void 0,
 					onRetained: (handle) => {
 						retained = handle;
 						workspaceControlRef = freezeControlRef(handle.controlRef);
@@ -10805,6 +10817,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					},
 					onPublishedSnapshot: (snapshot) => {
 						workspacePublishedSnapshot = snapshot;
+						if (continued && snapshot !== void 0 && (!options.workspaceRetention?.requireCompleteProvenance || workspaceCoverageComplete)) workspacePreservationRequired = false;
 					},
 					captureWorkspace,
 					workspaceControlRef: () => workspaceControlRef,
@@ -10817,7 +10830,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				});
 				const refusal = ended.unavailable;
 				const continueInvocation = invocation.retention?.continueInvocation;
-				if (refusal === void 0 || continueInvocation === void 0) return;
+				if (refusal === void 0 || continueInvocation === void 0 || workspacePreservationRequired || workspaceCaptureFailure !== void 0) return;
 				refusalsInARow = ended.madeProgress ? 1 : refusalsInARow + 1;
 				const pauseMs = unavailablePauseMs(refusalsInARow, options.unavailablePause || {});
 				await invocation.retention?.onPause?.({
@@ -21704,15 +21717,20 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 * derived from the input sequence exactly as the live scope derived it.
 */
 async function leafContinuation(node, owned, latestInput, opts) {
-	const priorSession = [...owned.slice(0, owned.indexOf(latestInput))].reverse().flatMap((event) => event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
+	const before = owned.slice(0, owned.indexOf(latestInput));
+	const priorSession = [...before].reverse().flatMap((event) => event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
 	if (priorSession === void 0) throw new RuntimeRunStateError(`cannot recover '${node.id}': its continuation names no environment it continued in`);
+	const priorResult = [...before].reverse().find((event) => event.kind === "execution-result");
+	if (priorResult === void 0) throw new RuntimeRunStateError(`cannot recover '${node.id}': its continuation has no committed predecessor result`);
+	await assertRecordedResult(node, priorResult, owned, opts);
 	const task = await opts.blobs.get(latestInput.taskRef);
 	if (task === void 0 || contentAddress(task) !== latestInput.taskRef) throw new RuntimeRunStateError(`continuation task for '${node.id}' is missing or corrupt`);
 	return {
 		task,
 		inputSeq: latestInput.seq,
 		executionId: leafContinuationExecutionId(node.id, latestInput.seq),
-		priorSession
+		priorSession,
+		priorSpent: priorResult.spent
 	};
 }
 async function assertRecordedResult(node, result, events, opts) {
@@ -23907,7 +23925,8 @@ function createScope(args) {
 			const retainedContext = (continuing) => ({
 				...continuing === void 0 ? {} : {
 					executionId: continuing.executionId,
-					priorSession: continuing.priorSession
+					priorSession: continuing.priorSession,
+					...continuing.priorSpent === void 0 ? {} : { priorSpent: continuing.priorSpent }
 				},
 				admissions,
 				...markRecoveryReady && continuing === void 0 ? { onReady: markRecoveryReady } : {},
@@ -23943,10 +23962,12 @@ function createScope(args) {
 					});
 					inputSeq = nextSeq;
 					admissions = [];
+					const priorSpent = live.acceptedResult.spent;
 					live.acceptedResult = void 0;
 					return retainedContext({
 						executionId: leafContinuationExecutionId(id, nextSeq),
-						priorSession: environment
+						priorSession: environment,
+						priorSpent
 					});
 				}
 			});
@@ -23964,7 +23985,8 @@ function createScope(args) {
 					...args.seams,
 					[retainedExecutorSeamKey]: retainedContext(recovery?.continuation === void 0 ? void 0 : {
 						executionId: recovery.continuation.executionId,
-						priorSession: recovery.continuation.priorSession
+						priorSession: recovery.continuation.priorSession,
+						priorSpent: recovery.continuation.priorSpent
 					}),
 					[nestedScopeSeamKey]: makeNestedScopeSeam(args, workerSlots, permit, id, opts.budget, childDeadlineAtMs, deferredOwner),
 					...workerTrace ? { [workerTraceSeamKey]: workerTrace } : {},
@@ -24214,7 +24236,7 @@ function createScope(args) {
 			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? task, opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
 				complete: async () => pendingEvidence?.complete(),
 				fail: async () => pendingEvidence?.fail()
-			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready);
+			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent);
 			args.pool.attribute(reservation.ticket, { stage: "executing" });
 			const interactiveBindingCommitted = spawnCommitted.then(async () => {
 				if (args.interactiveBindingDir === void 0) return;
@@ -25316,7 +25338,8 @@ async function finalizeWait(child, settlement, seq, args, now, handle) {
 * applied per child). The reservation is reconciled on EVERY path (success, abort, throw)
 * so the conserved pool can never leak a reservation.
 */
-async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve()) {
+async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent) {
+	if (priorSpent !== void 0) live.spent = detachedSnapshot(priorSpent, "prior committed usage");
 	let reconciled = false;
 	let reconciliationError;
 	let teardownFailure;
@@ -25418,7 +25441,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 					seq: nextProgressSeq(),
 					at: new Date(now()).toISOString()
 				});
-			}, childAbort.signal);
+			}, childAbort.signal, priorSpent);
 			live.spent = spend;
 			const reported = executor.resultArtifact();
 			artifact = await retainOutput(reported, preserveUnknownTelemetry(spend, reported.spent));
@@ -25786,8 +25809,8 @@ function freezeCorrelation(value) {
 * turns deep from one that had produced nothing. It also means a worker that THROWS mid-stream
 * now reconciles its real partial spend instead of refunding work the provider already billed.
 */
-async function foldStream(stream, onProgress, signal) {
-	const totals = newUsageTotals();
+async function foldStream(stream, onProgress, signal, priorSpent) {
+	const totals = newUsageTotals(priorSpent);
 	const iterator = stream[Symbol.asyncIterator]();
 	try {
 		for (;;) {
@@ -25801,6 +25824,7 @@ async function foldStream(stream, onProgress, signal) {
 				tokens: cloneTokenUsage(totals.tokens),
 				...totals.tokensKnown ? {} : { tokensKnown: false },
 				usd: totals.usd,
+				...totals.usdEstimated > 0 ? { usdEstimated: totals.usdEstimated } : {},
 				...totals.usdKnown ? {} : { usdKnown: false },
 				...totals.tokensProvenance === void 0 || totals.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: totals.tokensProvenance },
 				ms: 0
@@ -28389,4 +28413,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { waitUntil as $, projectSandboxOutcome as $i, captureWorkerTraceEvidence as $n, runWorktreeHarness as $r, claimsAuthority as $t, driverExecutorFactory as A, withBudgetResources as Aa, writeAllBytes as Ai, providerAsExecutor as An, mergeTraceEnv as Ar, cliInPlaceExecutor as At, recordScopeOwnerDriverAttempt as B, providerMessageText as Ba, recordRuntimeOwnedDriveHarnessProviderEvidence as Bi, FileResultBlobStore as Bn, createOtelExporter as Br, WORKER_TRACE_PROPAGATION as Bt, createContinuationKeeper as C, throwAbort as Ca, sandboxActProfileMaterialization as Ci, captureBeforeDestroy as Cn, runAbortable as Cr, recoverRetainedInteractiveRun as Ct, passedItems as D, zeroSpend as Da, isNoEntError as Di, runBrainLoop as Dn, readHarnessTranscript as Dr, rollingDispatch as Dt, failedItems as E, withTimeout as Ea, worktreeCliProfileMaterialization as Ei, routerBrain as En, persistHarnessTranscript as Er, queueOf as Et, beginScopeOwnerAttempt as F, armDeadlineTimer as Fa, inheritRuntimeOwnedExecutorAttestation as Fi, createPushTraceSource as Fn, resolveRedactor as Fr, createWorktreeCliExecutor as Ft, settledToIteration as G, runtimeOwnedPendingExecutorMaterialization as Gi, assertContentAddress as Gn, padTraceId as Gr, taskToPrompt as Gt, recordScopeOwnerPause as H, runtimeOwnedExecutorExecutionBinding as Hi, InMemoryResultBlobStore as Hn, generateSpanId as Hr, workerTraceEnv as Ht, createScope as I, teardownExecutor as Ia, knownExecutionBindingReceipt as Ii, decodeToolPart as In, buildLoopOtelSpans as Ir, DEFAULT_SANDBOX_STEERING_MAX_TURNS as It, createWaitProbes as J, unknownMaterializationReceipt as Ji, loadSpawnForest as Jn, createRuntimeStreamEventCollector as Jr, readWorkerProgress as Jt, createWorkerSlots as K, runtimeOwnedScopeOwnerRuntime as Ki, encodeResultBlob as Kn, toOtelAttributes as Kr, DEFAULT_STALL_AFTER_MS as Kt, deriveNodeExecutionIdentity as L, teardownSurfaces as La, knownMaterializationReceipt as Li, sandboxSessionTraceSource as Ln, buildLoopSpanNodes as Lr, createSteerableSandboxSession as Lt, withDriverExecutor as M, abortError$2 as Ma, attestRuntimeOwnedScopeOwner as Mi, resolveAgentEnvironmentProvider as Mn, traceContextToEnv as Mr, createExecutor as Mt, SUBTREE_RESULT_LIMIT as N, awaitAbortable$1 as Na, authoredProfileDigest as Ni, unavailablePauseMs as Nn, defaultRedactor as Nr, createExecutorRegistry as Nt, verdictFromJudgeScore as O, addResourceSpend as Oa, prepareJsonlAppend as Oi, LEAF_CONTINUATION_TASK as On, contentAddress as Or, bindReusableExecutorExecutionId as Ot, assertRecursiveReservationPolicy as P, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Pa, finalizeRuntimeOwnedPendingExecutor as Pi, unavailableSignalOfFailure as Pn, defaultRedactorIdentityMaterial as Pr, snapshotExecutorConfig as Pt, validateWaitSpec as Q, detachedSnapshot as Qi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Qn, runSettledCommand as Qr, PEER_MAIL_WIRE_KEY as Qt, meterRuntimeOwnedAccounting as R, promptFromAgentTurnInput as Ra, newExecutionAttemptId as Ri, registerRetainedExecutorPreparation as Rn, buildRuntimeEventOtelSpans as Rr, createRouterTranscript as Rt, composeContinuationNote as S, stringifySafe as Sa, renderUnsupported as Si, SandboxEvidenceRetentionError as Sn, linkAbort as Sr, reconnectRetainedInteractiveRun as St, expandQuestions as T, unmeteredSpend as Ta, validateProfileMaterialization as Ti, readPromptOptions as Tn, harnessTranscriptArtifact as Tr, freeSlots as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedExecutorMaterialization as Ui, InMemorySpawnJournal as Un, loopEventToOtelSpan as Ur, workerTraceHeaders as Ut, recordScopeOwnerMaterialization as V, runtimeOwnedDriveHarnessProviderEvidence as Vi, FileSpawnJournal as Vn, flatOtelSpan as Vr, readWorkerTraceContext as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorProviderEvidence as Wi, SpawnEventIndex as Wn, padSpanId as Wr, workerTraceSeamKey as Wt, pollFor as X, executableAgentSpecSnapshot as Xi, pendingWaits as Xn, sanitizeKnowledgeReadinessReport as Xr, AUTHORITY_MARKERS as Xt, isWaitOutcome as Y, executableAgentProfileSnapshot as Yi, materializeTreeView as Yn, sanitizeAgentRuntimeEvent as Yr, createInbox as Yt, timerAt as Z, detachedFrozen as Zi, replaySpawnTree as Zn, sanitizeRuntimeStreamEvent as Zr, DEFAULT_PEER_MAIL_LIMITS as Zt, CheckUnavailableError as _, hasCompleteCacheBreakdown as _a, promptControlProfileMaterialization as _i, isTerminalDecision as _n, retainedCreateMaterial as _r, workerInteractiveAdmissionFile as _t, collectDelivered as a, extractLlmCallEvent as aa, harnessInvocation as ai, isTerminalNodeStatus as an, ReservationWaitRefused as ar, reconcileScopeRetainedOwnerEnvironment as at, bestComposite as b, randomSuffix as ba, promptResourceProfileMaterialization as bi, probeSandboxCapabilities as bn, RunCancellationReason as br, workerInteractiveBindingFile as bt, runTree as c, mapSandboxToolEvent as ca, parseCodexTokenUsage as ci, addHarnessUsage as cn, meterUsageEvent as cr, scopeRetainedOwnerResourceReader as ct, classifyDriverFailure as d, sandboxProgressEvents as da, AGENT_PROFILE_MATERIALIZATION_AXES as di, readCodexRolloutSession as dn, spendFromUsageTotals as dr, SPAWN_RESOURCE_PATH_MAX_BYTES as dt, readSandboxOutcome as ea, captureWorktreeDiff as ei, createPeerMailbox as en, isTraceAnalysisStore as er, bindScopeRetainedOwnerEnvironmentId as et, runDriverWithRetry as f, sumSandboxUsage as fa, assertProfileMaterialization as fi, bridgeRuntimeAttachmentsKey as fn, errMessage as fr, environmentReader as ft, CONTINUATION_FACTS as g, deleteBoxSafe as ga, profileMaterializationAxes$1 as gi, defaultSelectWinner as gn, startRetainedRunInEnvironment as gr, readWorkerInteractiveAdmissions as gt, CONTINUATIONS_DIR as h, cloneSpend as ha, fullProfileMaterialization as hi, createSandboxForSpec as hn, startRetainedRun as hr, interactiveAdmissionSeamKey as ht, bestDelivered as i, createSandboxUsageLedger as ia, LOCAL_HARNESSES as ii, isLiveNodeStatus as in, BudgetReconcileFault as ir, prepareScopeRetainedOwnerTask as it, isDriverSpec as j, decodeHarnessUsage as ja, attestRuntimeOwnedPendingExecutor as ji, providerAsSandboxClient as jn, readTraceContextFromEnv as jr, cliWorktreeExecutor as jt, driverChild as k, resourceTelemetry as ka, readCommittedJsonLines as ki, createAgentEnvironmentProviderRegistry as kn, createPropagatingTraceEmitter as kr, captureReusableExecutorConfig as kt, DriverAttemptsExhaustedError as l, notifySandboxEventObserver as la, CodexExecutionDiagnosticError as li, createCodexRolloutStoreReader as ln, newUsageTotals as lr, scopeRetainedOwnerRestorePoint as lt, upstreamUnavailableSignal as m, chargedTokens as ma, defineProfileMaterializationContract as mi, TERMINAL_DECISIONS as mn, recoverRetainedRun as mr, resolveSpawnResourcePaths as mt, createRootHandle as n, canonicalStreamEventFromSandboxEvent as na, removeWorktree as ni, peerMailTools as nn, workerTraceAnalysisStore as nr, consumeScopeRetainedOwnerResult as nt, pickBestDelivered as o, isSandboxTerminalEvent as oa, harnessSupportsReasoningEffort as oi, bridgeAdmissionRefusal as on, assertValidBudget as or, scopeRetainedOwnerContext as ot, summarizeDriverAttempts as p, addSpend as pa, controlProfileMaterialization as pi, bridgeStopSignalKey as pn, reconnectRetainedRun as pr, hostDirectoryReader as pt, openSlotGroup as q, unknownExecutionBindingReceipt as qi, insideCursorNamespace as qn, createRuntimeEventCollector as qr, createActivityLog as qt, createSupervisor as r, createSandboxToolPartState as ra, DEFAULT_LOCAL_HARNESS as ri, peerMailVerbNames as rn, executorFailure as rr, noteScopeRetainedOwnerCoordination as rt, runFinalizer as s, mapSandboxEvent as sa, localHarnessExecutable as si, bridgeModelRouteRefusal as sn, createBudgetPool as sr, scopeRetainedOwnerPriorSpend as st, DEFAULT_MAX_DEPTH as t, assertSandboxServedModel as ta, createWorktree as ti, isPeerMailEnvelope as tn, parseWorkerToolTraceArtifact as tr, bindScopeRetainedOwnerProvider as tt, HarnessTurnFailedError as u, sandboxEventServedBackend as ua, terminateProcessTreeAndConfirm as ui, harnessUsageIsEmpty as un, spendFromUsageEvents as ur, scopeRetainedOwnerResult as ut, admitContinuationPolicy as v, isAbortError$2 as va, promptModelProfileMaterialization as vi, runAgentRounds as vn, destroyInteractiveEnvironment as vr, attachWorker as vt, distillFindings as w, throwIfAborted as wa, unsupportedProfileDimensions as wi, assertBoxlessPromptOptions as wn, captureHarnessTranscript as wr, startRetainedInteractiveRun as wt, checkVerdictOf as x, sleep as xa, renderProfileMaterializationIssues as xi, acquireSandbox as xn, abortError as xr, workerInteractiveBindingsDir as xt, admitFinding as y, promptCacheTokenClasses as ya, promptOnlyProfileMaterialization as yi, createSandboxLineage as yn, environmentGone as yr, readWorkerInteractiveBinding as yt, meterRuntimeOwnedProviderAttempt as z, promptOptionsFromAgentTurnInput as za, providerAttemptEvidence as zi, retainedExecutorSeamKey as zn, createOpenInferenceFileExporter as zr, createInPlaceCliExecutor as zt };
 
-//# sourceMappingURL=supervisor-DpUCJtKC.js.map
+//# sourceMappingURL=supervisor-B-LtKizU.js.map