@tangle-network/agent-runtime 0.295.3 → 0.295.4

package/dist/{supervisor-DnoT3-_F.js → supervisor-B1jEhBXU.js}

@@ -2011,18 +2011,82 @@ function readSandboxOutcome(value) {
 //#endregion
 //#region src/runtime/supervise/snapshot.ts
 /** Deeply detach and freeze untrusted data at a runtime decision boundary. The clone prevents the
-* caller from mutating it later; the freeze prevents downstream code from mutating the snapshot. */
+* caller from mutating it later; the freeze prevents downstream code from mutating the snapshot.
+* Strings are immutable, so the snapshot shares the caller's strings instead of copying them. */
 function detachedSnapshot(value, context) {
+	let clone;
 	try {
-		return deepFreeze(structuredClone(value));
+		clone = structuredClone(value);
 	} catch (error) {
 		throw new ValidationError$1(`${context}: input must be structured-cloneable`, { cause: error });
 	}
+	return deepFreeze(shareSourceStrings(value, clone));
 }
 /** Detach a value from its caller and freeze it, without the `ValidationError` framing
 *  {@link detachedSnapshot} adds. For a boundary that has already validated its input. */
 function detachedFrozen(value) {
-	return deepFreeze(structuredClone(value));
+	return deepFreeze(shareSourceStrings(value, structuredClone(value)));
+}
+/**
+* Point each string in a fresh structured clone at the equal string in its source.
+*
+* `structuredClone` copies every string, and a copied string buys no isolation: only objects and
+* arrays can change through a shared reference. A spawned profile passes several boundaries, and
+* each one kept its own copy: in a reproduction of Discovery's hosted coordinator, a child profile
+* that mounts a 5.3 MB file packet was held four times per spawned child. A scope keeps every
+* child it spawned, so the heap grew about 22 MB per spawn, and hosted coordinators died with V8
+* heap OOM after 37 spawns.
+*
+* The walk pairs only own data properties of plain objects and arrays. Accessors, Maps, Sets and
+* other cloned types keep the clone's values. A string is replaced only by a string equal to it,
+* so the snapshot holds exactly the clone's value. The snapshot keeps the source's strings alive.
+*/
+function shareSourceStrings(source, clone) {
+	const visited = /* @__PURE__ */ new Set();
+	const visit = (from, to) => {
+		if (from === null || to === null || typeof from !== "object" || typeof to !== "object") return;
+		const array = Array.isArray(to);
+		if (array !== Array.isArray(from)) return;
+		if (!array && Object.getPrototypeOf(to) !== Object.prototype) return;
+		if (visited.has(to)) return;
+		visited.add(to);
+		const target = to;
+		for (const key of Object.keys(target)) {
+			const own = Object.getOwnPropertyDescriptor(from, key);
+			if (own === void 0 || !("value" in own)) continue;
+			const cloned = target[key];
+			if (typeof cloned === "string") {
+				if (own.value === cloned) target[key] = own.value;
+			} else visit(own.value, cloned);
+		}
+	};
+	visit(source, clone);
+	return clone;
+}
+/**
+* Replace each string in a freshly parsed JSON value with an equal string already in `pool`, and
+* add the new ones. One recovery pass parses every interrupted child's profile from its own blob,
+* so children that carry the same file packet would otherwise hold one copy each. The value is
+* updated in place, so it must belong to the caller; frozen objects are left as they are.
+*/
+function shareParsedStrings(value, pool) {
+	const visit = (node) => {
+		if (node === null || typeof node !== "object" || Object.isFrozen(node)) return;
+		if (!Array.isArray(node) && Object.getPrototypeOf(node) !== Object.prototype) return;
+		const target = node;
+		for (const key of Object.keys(target)) {
+			const item = target[key];
+			if (typeof item !== "string") {
+				visit(item);
+				continue;
+			}
+			const shared = pool.get(item);
+			if (shared === void 0) pool.set(item, item);
+			else target[key] = shared;
+		}
+	};
+	visit(value);
+	return value;
 }
 function deepFreeze(value, seen = /* @__PURE__ */ new Set()) {
 	if (value === null || typeof value !== "object" || ArrayBuffer.isView(value) || seen.has(value)) return value;
@@ -21893,6 +21957,7 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 	const terminal = new Set(events.filter(closesCursorSlot).map((event) => event.id));
 	const interrupted = events.filter((event) => event.kind === "spawned" && event.parent === parentId && !terminal.has(event.id));
 	const recoveries = [];
+	const parsedStrings = /* @__PURE__ */ new Map();
 	const accepted = [];
 	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
 	for (const node of interrupted) {
@@ -21927,8 +21992,8 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 		if (!opts.recoverExecutor || admissions.length === 0 && !node.ownedTreeRoot && (opts.journal.appendEvents === void 0 || latestInput === void 0)) continue;
 		const taskRef = inputs[0]?.taskRef;
 		if (!node.profileRef || !taskRef || !node.identity?.profileDigest || !node.identity.taskDigest) throw new RuntimeRunStateError(`cannot recover '${node.id}' without exact profile and task bytes`);
-		const profile = agentProfileSchema.parse(await opts.blobs.get(node.profileRef));
-		const task = await opts.blobs.get(taskRef);
+		const profile = shareParsedStrings(agentProfileSchema.parse(await opts.blobs.get(node.profileRef)), parsedStrings);
+		const task = shareParsedStrings(await opts.blobs.get(taskRef), parsedStrings);
 		if (canonicalAgentProfileDigest(profile) !== node.identity.profileDigest || canonicalCandidateDigest(task) !== node.identity.taskDigest) throw new RuntimeRunStateError(`recovery inputs for '${node.id}' do not match its admitted identity`);
 		let prepared;
 		if (node.ownedTreeRoot !== void 0) {
@@ -28542,4 +28607,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { bindScopeRetainedOwnerProvider as $, projectSandboxOutcome as $i, parseWorkerToolTraceArtifact as $n, runWorktreeHarness as $r, isPeerMailEnvelope as $t, driverExecutorFactory as A, withBudgetResources as Aa, writeAllBytes as Ai, resolveAgentEnvironmentProvider as An, mergeTraceEnv as Ar, createExecutor as At, recordScopeOwnerDriverAttempt as B, providerMessageText as Ba, recordRuntimeOwnedDriveHarnessProviderEvidence as Bi, InMemoryResultBlobStore as Bn, createOtelExporter as Br, workerTraceEnv as Bt, createContinuationKeeper as C, throwAbort as Ca, sandboxActProfileMaterialization as Ci, readPromptOptions as Cn, runAbortable as Cr, freeSlots as Ct, passedItems as D, zeroSpend as Da, isNoEntError as Di, createAgentEnvironmentProviderRegistry as Dn, readHarnessTranscript as Dr, captureReusableExecutorConfig as Dt, failedItems as E, withTimeout as Ea, worktreeCliProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, persistHarnessTranscript as Er, bindReusableExecutorExecutionId as Et, beginScopeOwnerAttempt as F, armDeadlineTimer as Fa, inheritRuntimeOwnedExecutorAttestation as Fi, sandboxSessionTraceSource as Fn, resolveRedactor as Fr, createSteerableSandboxSession as Ft, settledToIteration as G, runtimeOwnedPendingExecutorMaterialization as Gi, insideCursorNamespace as Gn, padTraceId as Gr, createActivityLog as Gt, recordScopeOwnerPause as H, runtimeOwnedExecutorExecutionBinding as Hi, SpawnEventIndex as Hn, generateSpanId as Hr, workerTraceSeamKey as Ht, createScope as I, teardownExecutor as Ia, knownExecutionBindingReceipt as Ii, registerRetainedExecutorPreparation as In, buildLoopOtelSpans as Ir, createRouterTranscript as It, pollFor as J, unknownMaterializationReceipt as Ji, pendingWaits as Jn, createRuntimeStreamEventCollector as Jr, AUTHORITY_MARKERS as Jt, createWaitProbes as K, runtimeOwnedScopeOwnerRuntime as Ki, loadSpawnForest as Kn, toOtelAttributes as Kr, readWorkerProgress as Kt, deriveNodeExecutionIdentity as L, teardownSurfaces as La, knownMaterializationReceipt as Li, retainedExecutorSeamKey as Ln, buildLoopSpanNodes as Lr, createInPlaceCliExecutor as Lt, withDriverExecutor as M, abortError$2 as Ma, attestRuntimeOwnedScopeOwner as Mi, unavailableSignalOfFailure as Mn, traceContextToEnv as Mr, snapshotExecutorConfig as Mt, SUBTREE_RESULT_LIMIT as N, awaitAbortable$1 as Na, authoredProfileDigest as Ni, createPushTraceSource as Nn, defaultRedactor as Nr, createWorktreeCliExecutor as Nt, verdictFromJudgeScore as O, addResourceSpend as Oa, prepareJsonlAppend as Oi, providerAsExecutor as On, contentAddress as Or, cliInPlaceExecutor as Ot, assertRecursiveReservationPolicy as P, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Pa, finalizeRuntimeOwnedPendingExecutor as Pi, decodeToolPart as Pn, defaultRedactorIdentityMaterial as Pr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Pt, bindScopeRetainedOwnerEnvironmentId as Q, detachedSnapshot as Qi, isTraceAnalysisStore as Qn, runSettledCommand as Qr, createPeerMailbox as Qt, meterRuntimeOwnedAccounting as R, promptFromAgentTurnInput as Ra, newExecutionAttemptId as Ri, FileResultBlobStore as Rn, buildRuntimeEventOtelSpans as Rr, WORKER_TRACE_PROPAGATION as Rt, composeContinuationNote as S, stringifySafe as Sa, renderUnsupported as Si, assertBoxlessPromptOptions as Sn, linkAbort as Sr, startRetainedInteractiveRun as St, expandQuestions as T, unmeteredSpend as Ta, validateProfileMaterialization as Ti, runBrainLoop as Tn, harnessTranscriptArtifact as Tr, rollingDispatch as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedExecutorMaterialization as Ui, assertContentAddress as Un, loopEventToOtelSpan as Ur, taskToPrompt as Ut, recordScopeOwnerMaterialization as V, runtimeOwnedDriveHarnessProviderEvidence as Vi, InMemorySpawnJournal as Vn, flatOtelSpan as Vr, workerTraceHeaders as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorProviderEvidence as Wi, encodeResultBlob as Wn, padSpanId as Wr, DEFAULT_STALL_AFTER_MS as Wt, validateWaitSpec as X, executableAgentSpecSnapshot as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, sanitizeKnowledgeReadinessReport as Xr, PEER_MAIL_WIRE_KEY as Xt, timerAt as Y, executableAgentProfileSnapshot as Yi, replaySpawnTree as Yn, sanitizeAgentRuntimeEvent as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, waitUntil as Z, detachedFrozen as Zi, captureWorkerTraceEvidence as Zn, sanitizeRuntimeStreamEvent as Zr, claimsAuthority as Zt, CheckUnavailableError as _, hasCompleteCacheBreakdown as _a, promptControlProfileMaterialization as _i, createSandboxLineage as _n, environmentGone as _r, readWorkerInteractiveBinding as _t, collectDelivered as a, extractLlmCallEvent as aa, harnessInvocation as ai, bridgeModelRouteRefusal as an, createBudgetPool as ar, scopeRetainedOwnerPriorSpend as at, bestComposite as b, randomSuffix as ba, promptResourceProfileMaterialization as bi, SandboxEvidenceRetentionError as bn, RunCancellationReason as br, reconnectRetainedInteractiveRun as bt, runTree as c, mapSandboxToolEvent as ca, parseCodexTokenUsage as ci, harnessUsageIsEmpty as cn, spendFromUsageEvents as cr, scopeRetainedOwnerResult as ct, classifyDriverFailure as d, sandboxProgressEvents as da, AGENT_PROFILE_MATERIALIZATION_AXES as di, bridgeStopSignalKey as dn, reconnectRetainedRun as dr, hostDirectoryReader as dt, readSandboxOutcome as ea, captureWorktreeDiff as ei, peerMailTools as en, workerTraceAnalysisStore as er, consumeScopeRetainedOwnerResult as et, runDriverWithRetry as f, sumSandboxUsage as fa, assertProfileMaterialization as fi, TERMINAL_DECISIONS as fn, recoverRetainedRun as fr, resolveSpawnResourcePaths as ft, CONTINUATION_FACTS as g, deleteBoxSafe as ga, profileMaterializationAxes$1 as gi, runAgentRounds as gn, destroyInteractiveEnvironment as gr, attachWorker as gt, CONTINUATIONS_DIR as h, cloneSpend as ha, fullProfileMaterialization as hi, isTerminalDecision as hn, retainedCreateMaterial as hr, workerInteractiveAdmissionFile as ht, bestDelivered as i, createSandboxUsageLedger as ia, LOCAL_HARNESSES as ii, bridgeAdmissionRefusal as in, assertValidBudget as ir, scopeRetainedOwnerContext as it, isDriverSpec as j, decodeHarnessUsage as ja, attestRuntimeOwnedPendingExecutor as ji, unavailablePauseMs as jn, readTraceContextFromEnv as jr, createExecutorRegistry as jt, driverChild as k, resourceTelemetry as ka, readCommittedJsonLines as ki, providerAsSandboxClient as kn, createPropagatingTraceEmitter as kr, cliWorktreeExecutor as kt, DriverAttemptsExhaustedError as l, notifySandboxEventObserver as la, CodexExecutionDiagnosticError as li, readCodexRolloutSession as ln, spendFromUsageTotals as lr, SPAWN_RESOURCE_PATH_MAX_BYTES as lt, upstreamUnavailableSignal as m, chargedTokens as ma, defineProfileMaterializationContract as mi, defaultSelectWinner as mn, startRetainedRunInEnvironment as mr, readWorkerInteractiveAdmissions as mt, createRootHandle as n, canonicalStreamEventFromSandboxEvent as na, removeWorktree as ni, isLiveNodeStatus as nn, BudgetReconcileFault as nr, prepareScopeRetainedOwnerTask as nt, pickBestDelivered as o, isSandboxTerminalEvent as oa, harnessSupportsReasoningEffort as oi, addHarnessUsage as on, meterUsageEvent as or, scopeRetainedOwnerResourceReader as ot, summarizeDriverAttempts as p, addSpend as pa, controlProfileMaterialization as pi, createSandboxForSpec as pn, startRetainedRun as pr, interactiveAdmissionSeamKey as pt, isWaitOutcome as q, unknownExecutionBindingReceipt as qi, materializeTreeView as qn, createRuntimeEventCollector as qr, createInbox as qt, createSupervisor as r, createSandboxToolPartState as ra, DEFAULT_LOCAL_HARNESS as ri, isTerminalNodeStatus as rn, ReservationWaitRefused as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, mapSandboxEvent as sa, localHarnessExecutable as si, createCodexRolloutStoreReader as sn, newUsageTotals as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, assertSandboxServedModel as ta, createWorktree as ti, peerMailVerbNames as tn, executorFailure as tr, noteScopeRetainedOwnerCoordination as tt, HarnessTurnFailedError as u, sandboxEventServedBackend as ua, terminateProcessTreeAndConfirm as ui, bridgeRuntimeAttachmentsKey as un, errMessage as ur, environmentReader as ut, admitContinuationPolicy as v, isAbortError$2 as va, promptModelProfileMaterialization as vi, probeSandboxCapabilities as vn, createWorkerSlots as vr, workerInteractiveBindingFile as vt, distillFindings as w, throwIfAborted as wa, unsupportedProfileDimensions as wi, routerBrain as wn, captureHarnessTranscript as wr, queueOf as wt, checkVerdictOf as x, sleep as xa, renderProfileMaterializationIssues as xi, captureBeforeDestroy as xn, abortError as xr, recoverRetainedInteractiveRun as xt, admitFinding as y, promptCacheTokenClasses as ya, promptOnlyProfileMaterialization as yi, acquireSandbox as yn, openSlotGroup as yr, workerInteractiveBindingsDir as yt, meterRuntimeOwnedProviderAttempt as z, promptOptionsFromAgentTurnInput as za, providerAttemptEvidence as zi, FileSpawnJournal as zn, createOpenInferenceFileExporter as zr, readWorkerTraceContext as zt };
 
-//# sourceMappingURL=supervisor-DnoT3-_F.js.map
+//# sourceMappingURL=supervisor-B1jEhBXU.js.map