@tangle-network/agent-runtime 0.295.3 → 0.296.0

package/dist/{supervisor-DnoT3-_F.js → supervisor-Rov7xW0j.js}

@@ -1,10 +1,10 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { runTaskQueue } from "./task-queue.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-DydyWTQg.js";
-import { T as verifyWorkspaceSnapshotArtifacts, r as verifyAgentCandidateWorkspaceArtifacts, s as verifyAgentCandidateWorkspaceArchive } from "./workspace-streams-D4TMTrJV.js";
+import { D as verifiedArtifactChunks, E as verifyWorkspaceSnapshotArtifacts, c as verifyAgentCandidateWorkspaceArchive, i as verifyAgentCandidateWorkspaceArtifacts, j as deepFreezeCandidate, r as readAgentCandidateWorkspaceArtifactFiles } from "./workspace-streams-D5gHJdTb.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest } from "@tangle-network/agent-interface";
+import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest } from "@tangle-network/agent-interface";
 import { estimateCost, isModelPriced, isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -17,8 +17,8 @@ import { homedir, hostname, tmpdir } from "node:os";
 import { stripVTControlCharacters } from "node:util";
 import { ATTR, deriveHexId, isW3CSpanId, isW3CTraceId } from "@tangle-network/agent-trace-contract";
 import { REDACTION_VERSION as REDACTION_VERSION$1, redact } from "@tangle-network/agent-eval/traces";
-import { Readable } from "node:stream";
 import { z } from "zod";
+import { Readable } from "node:stream";
 import { SDKError, generateIdempotencyKey, withRetry } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
 import { request } from "node:http";
@@ -2011,18 +2011,82 @@ function readSandboxOutcome(value) {
 //#endregion
 //#region src/runtime/supervise/snapshot.ts
 /** Deeply detach and freeze untrusted data at a runtime decision boundary. The clone prevents the
-* caller from mutating it later; the freeze prevents downstream code from mutating the snapshot. */
+* caller from mutating it later; the freeze prevents downstream code from mutating the snapshot.
+* Strings are immutable, so the snapshot shares the caller's strings instead of copying them. */
 function detachedSnapshot(value, context) {
+	let clone;
 	try {
-		return deepFreeze(structuredClone(value));
+		clone = structuredClone(value);
 	} catch (error) {
 		throw new ValidationError$1(`${context}: input must be structured-cloneable`, { cause: error });
 	}
+	return deepFreeze(shareSourceStrings(value, clone));
 }
 /** Detach a value from its caller and freeze it, without the `ValidationError` framing
 *  {@link detachedSnapshot} adds. For a boundary that has already validated its input. */
 function detachedFrozen(value) {
-	return deepFreeze(structuredClone(value));
+	return deepFreeze(shareSourceStrings(value, structuredClone(value)));
+}
+/**
+* Point each string in a fresh structured clone at the equal string in its source.
+*
+* `structuredClone` copies every string, and a copied string buys no isolation: only objects and
+* arrays can change through a shared reference. A spawned profile passes several boundaries, and
+* each one kept its own copy: in a reproduction of Discovery's hosted coordinator, a child profile
+* that mounts a 5.3 MB file packet was held four times per spawned child. A scope keeps every
+* child it spawned, so the heap grew about 22 MB per spawn, and hosted coordinators died with V8
+* heap OOM after 37 spawns.
+*
+* The walk pairs only own data properties of plain objects and arrays. Accessors, Maps, Sets and
+* other cloned types keep the clone's values. A string is replaced only by a string equal to it,
+* so the snapshot holds exactly the clone's value. The snapshot keeps the source's strings alive.
+*/
+function shareSourceStrings(source, clone) {
+	const visited = /* @__PURE__ */ new Set();
+	const visit = (from, to) => {
+		if (from === null || to === null || typeof from !== "object" || typeof to !== "object") return;
+		const array = Array.isArray(to);
+		if (array !== Array.isArray(from)) return;
+		if (!array && Object.getPrototypeOf(to) !== Object.prototype) return;
+		if (visited.has(to)) return;
+		visited.add(to);
+		const target = to;
+		for (const key of Object.keys(target)) {
+			const own = Object.getOwnPropertyDescriptor(from, key);
+			if (own === void 0 || !("value" in own)) continue;
+			const cloned = target[key];
+			if (typeof cloned === "string") {
+				if (own.value === cloned) target[key] = own.value;
+			} else visit(own.value, cloned);
+		}
+	};
+	visit(source, clone);
+	return clone;
+}
+/**
+* Replace each string in a freshly parsed JSON value with an equal string already in `pool`, and
+* add the new ones. One recovery pass parses every interrupted child's profile from its own blob,
+* so children that carry the same file packet would otherwise hold one copy each. The value is
+* updated in place, so it must belong to the caller; frozen objects are left as they are.
+*/
+function shareParsedStrings(value, pool) {
+	const visit = (node) => {
+		if (node === null || typeof node !== "object" || Object.isFrozen(node)) return;
+		if (!Array.isArray(node) && Object.getPrototypeOf(node) !== Object.prototype) return;
+		const target = node;
+		for (const key of Object.keys(target)) {
+			const item = target[key];
+			if (typeof item !== "string") {
+				visit(item);
+				continue;
+			}
+			const shared = pool.get(item);
+			if (shared === void 0) pool.set(item, item);
+			else target[key] = shared;
+		}
+	};
+	visit(value);
+	return value;
 }
 function deepFreeze(value, seen = /* @__PURE__ */ new Set()) {
 	if (value === null || typeof value !== "object" || ArrayBuffer.isView(value) || seen.has(value)) return value;
@@ -6027,39 +6091,277 @@ function stableStringify(value) {
 	return `{${Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
 }
 //#endregion
+//#region src/runtime/retained-harness-transcript.ts
+const digest = z.custom((value) => typeof value === "string" && /^sha256:[0-9a-f]{64}$/.test(value));
+const count = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const text = z.string().min(1);
+const node = z.custom((value) => {
+	if (value === null || typeof value !== "object") return false;
+	return [
+		"rootId",
+		"parentId",
+		"nodeId",
+		"attemptId"
+	].every((key) => typeof Reflect.get(value, key) === "string");
+});
+const sourceSchema = z.object({
+	executionId: text,
+	controlRef: AgentExactRunControlRefSchema.optional(),
+	node: node.optional(),
+	environmentId: text,
+	profileDigest: digest,
+	providerSessionId: text.nullable(),
+	nativeSessionId: text.nullable(),
+	coverageComplete: z.boolean(),
+	incompleteReason: z.string().optional()
+});
+const attributionSchema = z.object({
+	providerSessionId: text,
+	sourceId: text.optional(),
+	rootScope: z.enum(["session-home", "workspace-session"]),
+	nativePath: text
+});
+const fileSchema = z.object({
+	path: text,
+	bytes: count,
+	sha256: digest,
+	attribution: attributionSchema
+});
+const skippedSchema = z.object({
+	path: text,
+	reason: text
+});
+const retainedSchema = z.object({
+	kind: z.literal("retained-harness-transcript"),
+	schemaVersion: z.literal(1),
+	harness: text,
+	source: sourceSchema,
+	provider: z.string().optional(),
+	capturedAt: z.string().optional(),
+	snapshot: z.object({
+		kind: z.literal("agent-candidate-workspace-snapshot"),
+		digest,
+		manifest: agentCandidateArtifactRefSchema,
+		archive: agentCandidateArtifactRefSchema
+	}),
+	files: z.array(fileSchema),
+	skipped: z.array(skippedSchema),
+	missing: z.array(z.string())
+});
+const defaults = {
+	maxFileBytes: 2 * 1024 * 1024,
+	maxTotalBytes: 16 * 1024 * 1024,
+	maxFiles: 1e3,
+	maxManifestBytes: 16 * 1024 * 1024
+};
+/** Validate persisted descriptors before trusting their identity, locators, or inventory. */
+function parseRetainedHarnessTranscript(value) {
+	const parsed = retainedSchema.safeParse(value);
+	if (!parsed.success) throw new ValidationError$1(`Invalid retained harness transcript: ${parsed.error.message}`);
+	const paths = /* @__PURE__ */ new Set();
+	for (const file of parsed.data.files) {
+		if (paths.has(file.path)) throw new ValidationError$1(`Retained transcript repeats native identity: ${file.path}`);
+		paths.add(file.path);
+		if (file.path !== nativeIdentity(file.attribution)) throw new ValidationError$1(`Retained transcript native identity does not match its attribution: ${file.path}`);
+	}
+	return deepFreezeCandidate(parsed.data);
+}
+function nativeIdentity(attribution) {
+	return [
+		attribution.providerSessionId,
+		attribution.sourceId ?? "",
+		attribution.rootScope
+	].map(encodeURIComponent).join("/") + "/" + attribution.nativePath;
+}
+/** Describe already-verified retention, without reading the environment or copying archive bytes. */
+function retainHarnessTranscript(receipt, harness) {
+	try {
+		return retainedCapture(receipt, harness);
+	} catch (error) {
+		if (error instanceof ValidationError$1) throw error;
+		throw new ValidationError$1(`Invalid retained transcript receipt: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+function retainedCapture(receipt, harness) {
+	const { snapshot, provenance, ...source } = receipt;
+	const files = [];
+	const skipped = [];
+	const missing = [...provenance.missing];
+	for (const session of provenance.sessions ?? []) {
+		if (session.executionId !== receipt.executionId || session.backendType !== harness) throw new ValidationError$1("Retained transcript session has a different execution or harness");
+		if (!session.nativeStore) {
+			missing.push(`Session ${session.id} native inventory unavailable`);
+			continue;
+		}
+		if (!session.nativeStore.complete) missing.push(`Session ${session.id} native inventory incomplete`);
+		for (const entry of session.nativeStore.entries) {
+			if (entry.kind !== "file") continue;
+			const attribution = {
+				providerSessionId: session.id,
+				...entry.sourceId === void 0 ? {} : { sourceId: entry.sourceId },
+				rootScope: entry.rootScope,
+				nativePath: entry.path
+			};
+			const parsed = fileSchema.safeParse({
+				path: nativeIdentity(attribution),
+				bytes: entry.sizeBytes,
+				sha256: entry.sha256,
+				attribution
+			});
+			if (parsed.success) files.push(parsed.data);
+			else {
+				const reason = `Native inventory cannot identify verified bytes: ${parsed.error.message}`;
+				skipped.push({
+					path: nativeIdentity(attribution),
+					reason
+				});
+				missing.push(`${nativeIdentity(attribution)}: ${reason}`);
+			}
+		}
+		for (const entry of session.nativeStore.excludedPaths) skipped.push({
+			path: nativeIdentity({
+				providerSessionId: session.id,
+				...entry.sourceId === void 0 ? {} : { sourceId: entry.sourceId },
+				rootScope: entry.rootScope,
+				nativePath: entry.path
+			}),
+			reason: entry.reason
+		});
+	}
+	if (files.length === 0) missing.push("No native files declared by provider capture");
+	const descriptor = parseRetainedHarnessTranscript({
+		kind: "retained-harness-transcript",
+		schemaVersion: 1,
+		harness,
+		source,
+		...provenance.provider === void 0 ? {} : { provider: provenance.provider },
+		...provenance.capturedAt === void 0 ? {} : { capturedAt: provenance.capturedAt },
+		snapshot: {
+			kind: snapshot.kind,
+			digest: snapshot.digest,
+			manifest: snapshot.manifest,
+			archive: snapshot.archive
+		},
+		files,
+		skipped,
+		missing
+	});
+	if (files.length === 0) return deepFreezeCandidate({
+		status: "unavailable",
+		reason: source.coverageComplete && skipped.length === 0 ? "no-transcript" : "nothing-carried",
+		skipped: [...skipped, ...missing.map((reason) => ({
+			path: receipt.executionId,
+			reason
+		}))]
+	});
+	return deepFreezeCandidate({
+		status: "retained",
+		descriptor,
+		fileCount: files.length,
+		totalBytes: files.reduce((sum, file) => sum + file.bytes, 0),
+		skippedCount: skipped.length
+	});
+}
+async function resolveHarnessTranscriptCapture(capture, options = {}) {
+	if (capture.status === "unavailable") return void 0;
+	if (capture.status === "captured") {
+		for (const file of capture.artifact.files) if (Buffer.byteLength(file.content, "utf8") !== file.bytes) throw new ValidationError$1(`Transcript file has an invalid byte count: ${file.path}`);
+		if (options.content !== false) return capture.artifact;
+		return {
+			...capture.artifact,
+			files: capture.artifact.files.map(({ path, bytes, content }) => ({
+				path,
+				bytes,
+				sha256: `sha256:${createHash("sha256").update(content).digest("hex")}`
+			}))
+		};
+	}
+	const descriptor = parseRetainedHarnessTranscript(capture.descriptor);
+	if (options.content === false) {
+		const { snapshot: _snapshot, kind: _kind, ...metadata } = descriptor;
+		return metadata;
+	}
+	if (!options.artifacts) throw new ValidationError$1("Retained transcript content requires an ArtifactPort");
+	const limits = {
+		...defaults,
+		...options.limits
+	};
+	for (const [name, value] of Object.entries(limits)) if (!Number.isSafeInteger(value) || value < 0) throw new ValidationError$1(`Invalid transcript read limit: ${name}`);
+	if (descriptor.snapshot.manifest.byteLength > limits.maxManifestBytes) throw new ValidationError$1("Retained transcript manifest exceeds maxManifestBytes");
+	const manifestChunks = [];
+	for await (const chunk of verifiedArtifactChunks(descriptor.snapshot.manifest, options.artifacts, options.signal)) manifestChunks.push(Uint8Array.from(chunk));
+	const material = agentCandidateWorkspaceManifestMaterialSchema.parse(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(manifestChunks))));
+	const snapshot = {
+		...descriptor.snapshot,
+		material
+	};
+	const byContent = /* @__PURE__ */ new Map();
+	for (const file of material.files) byContent.set(`${file.sha256}:${file.byteLength}`, file.path);
+	const selected = [];
+	const skipped = [...descriptor.skipped];
+	let total = 0;
+	for (const file of descriptor.files) {
+		const archivePath = byContent.get(`${file.sha256}:${file.bytes}`);
+		if (archivePath === void 0) throw new ValidationError$1(`Retained native file is missing from archive: ${file.path}`);
+		const reason = file.bytes > limits.maxFileBytes ? "read-limit:maxFileBytes" : selected.length >= limits.maxFiles ? "read-limit:maxFiles" : total + file.bytes > limits.maxTotalBytes ? "read-limit:maxTotalBytes" : void 0;
+		if (reason) skipped.push({
+			path: file.path,
+			reason
+		});
+		else {
+			selected.push({
+				file,
+				archivePath
+			});
+			total += file.bytes;
+		}
+	}
+	const contents = await readAgentCandidateWorkspaceArtifactFiles({
+		role: "candidate",
+		snapshot,
+		artifacts: options.artifacts,
+		paths: [...new Set(selected.map(({ archivePath }) => archivePath))],
+		maxReadBytes: limits.maxTotalBytes,
+		...options.workspaceLimits === void 0 ? {} : { limits: options.workspaceLimits },
+		...options.signal === void 0 ? {} : { signal: options.signal }
+	});
+	const files = [];
+	for (const { file, archivePath } of selected) {
+		const bytes = contents.get(archivePath);
+		if (bytes === void 0) throw new ValidationError$1(`Verified native file was not returned: ${file.path}`);
+		try {
+			const content = new TextDecoder("utf-8", {
+				fatal: true,
+				ignoreBOM: true
+			}).decode(bytes);
+			if (content.includes("\0")) throw new Error("NUL in native file");
+			files.push({
+				path: file.path,
+				bytes: file.bytes,
+				content
+			});
+		} catch {
+			skipped.push({
+				path: file.path,
+				reason: "binary-or-invalid-utf8; bytes remain retained in workspace archive"
+			});
+		}
+	}
+	return deepFreezeCandidate({
+		schemaVersion: 1,
+		harness: descriptor.harness,
+		files,
+		skipped
+	});
+}
+//#endregion
 //#region src/runtime/harness-transcript.ts
 /**
-* Read a sandbox child's own harness transcript out of its environment before the
-* environment is destroyed, and persist it beside the tool-span `trace` receipt.
-*
-* Why this exists: Runtime destroys a child's environment at teardown and nothing read
-* those files first, so a child's Claude Code / Codex / OpenCode session never reached a
-* run record. The settled `trace` receipt covers the supervisor's own tool spans only —
-* `toolName`, `args`, `status`, `callId`, with `startedAt === endedAt` — so it carries no
-* assistant text, no reasoning, and no tool results, and `status: 'available'` never meant
-* the transcript survived. See tangle-network/agent-runtime#1214.
-*
-* The port already has what this needs: `AgentEnvironment.read?(path, { signal })`
-* returns a file's content as a string. Two constraints shape the design:
-*
-*   - `read` is OPTIONAL and, on the Tangle provider, gated behind
-*     `capabilities.workspace.read && box.read`. An environment without it is reported as
-*     `unsupported` rather than silently producing an empty artifact — the whole point of
-*     #1214 is that a receipt must not claim coverage it does not have.
-*   - `read` takes one path and gives no directory listing, so enumeration goes through
-*     `exec`. An environment with `read` but no `exec` cannot be enumerated and is also
-*     reported, not guessed at.
-*
-* Storage is NOT the executor's business. The executor holds the in-memory capture and hands it
-* to the scope through `Executor.harnessTranscript()`; the scope persists it under its own
-* content ref with `persistHarnessTranscript` and settles the receipt. No provider or destroy
-* site learns about storage, the result blob never carries the files, and replay rehydrates a
-* pointer — the bytes are read only by `harnessTranscriptArtifact`, when someone opens them.
-*
-* Credentials are excluded by construction: enumeration lists only the transcript globs
-* for the harness, and any path matching DENY is dropped even if a producer moved a
-* credential file inside a session directory. The helper never reads `auth.json`,
-* `.credentials.json`, `credentials`, or a dotenv file.
+* Persist a harness transcript receipt beside the supervisor tool trace.
+* Provider workspace retention supplies an attributed descriptor whose bytes stay in the
+* original verified archive. Environments without retention use the bounded read/exec
+* fallback below. Neither path embeds transcript content in settlement events.
+* Readers request metadata without archive I/O, or explicitly resolve bounded text content.
 */
 /** Where each harness keeps the session files that hold the conversation. */
 const HARNESS_ROOTS = Object.freeze({
@@ -6138,6 +6440,7 @@ function readHarnessTranscript(executor) {
 	if (reported === void 0) return harnessTranscriptUnavailable("capture-did-not-run");
 	const capture = reported;
 	if (capture.status === "captured" && capture.artifact) return capture;
+	if (capture.status === "retained" && capture.descriptor) return capture;
 	if (capture.status === "unavailable" && capture.reason) return capture;
 	return harnessTranscriptUnavailable("executor-exposes-no-transcript");
 }
@@ -6446,32 +6749,58 @@ function harnessTranscriptFromLines(harness, name, lines) {
 * source that collected it. A capture that is already unavailable passes through untouched.
 */
 async function persistHarnessTranscript(capture, blobs) {
-	if (capture.status !== "captured") return capture;
-	const transcriptRef = contentAddress(capture.artifact);
+	if (capture.status === "unavailable") return capture;
+	const artifact = capture.status === "captured" ? capture.artifact : parseRetainedHarnessTranscript(capture.descriptor);
+	const transcriptRef = contentAddress(artifact);
 	try {
-		await blobs.put(transcriptRef, capture.artifact);
+		await blobs.put(transcriptRef, artifact);
 	} catch {
 		return unavailable$2("transcript-persistence-failed");
 	}
 	return Object.freeze({
 		status: "available",
 		transcriptRef,
-		harness: capture.artifact.harness,
+		harness: artifact.harness,
 		fileCount: capture.fileCount,
 		totalBytes: capture.totalBytes,
-		skippedCount: capture.skippedCount
+		skippedCount: capture.skippedCount,
+		...capture.status === "retained" ? {
+			coverageComplete: capture.descriptor.source.coverageComplete && capture.descriptor.missing.length === 0,
+			missing: capture.descriptor.missing
+		} : {}
 	});
 }
-/**
-* Rehydrate the exact persisted transcript a receipt points at, or `undefined` when the receipt
-* says there is none. Throws only when the receipt claims a blob the store does not hold — that
-* is corruption, not absence, and must not read as "no transcript".
-*/
-async function harnessTranscriptArtifact(evidence, blobs) {
+async function harnessTranscriptArtifact(evidence, blobs, options = {}) {
 	if (evidence.status !== "available") return void 0;
 	const raw = await blobs.get(evidence.transcriptRef);
-	if (!isHarnessTranscriptArtifact(raw)) throw new ValidationError$1(`harnessTranscriptArtifact: blob store has no transcript artifact for '${evidence.transcriptRef}'`);
-	return raw;
+	let capture;
+	if (isHarnessTranscriptArtifact(raw)) capture = {
+		status: "captured",
+		artifact: raw,
+		fileCount: raw.files.length,
+		totalBytes: raw.files.reduce((sum, file) => sum + file.bytes, 0),
+		skippedCount: raw.skipped.length
+	};
+	else {
+		if (raw === null || typeof raw !== "object" || Reflect.get(raw, "kind") !== "retained-harness-transcript") throw new ValidationError$1(`harnessTranscriptArtifact: blob store has no transcript artifact for '${evidence.transcriptRef}'`);
+		const descriptor = parseRetainedHarnessTranscript(raw);
+		if (contentAddress(descriptor) !== evidence.transcriptRef) throw new ValidationError$1("Retained transcript descriptor does not match its transcriptRef");
+		capture = {
+			status: "retained",
+			descriptor,
+			fileCount: descriptor.files.length,
+			totalBytes: descriptor.files.reduce((sum, file) => sum + file.bytes, 0),
+			skippedCount: descriptor.skipped.length
+		};
+	}
+	if (contentAddress(raw) !== evidence.transcriptRef) throw new ValidationError$1("Transcript artifact does not match its transcriptRef");
+	return options.content === false ? resolveHarnessTranscriptCapture(capture, {
+		...options,
+		content: false
+	}) : resolveHarnessTranscriptCapture(capture, {
+		...options,
+		content: true
+	});
 }
 /** Every entry, not just the arrays: a blob with `files: [null]` is corruption, not a transcript. */
 function isHarnessTranscriptArtifact(value) {
@@ -10891,6 +11220,28 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				workspaceProvenance = provenance;
 				workspaceCoverageComplete = coverageComplete ?? false;
 				workspaceIncompleteReason = incompleteReason;
+				try {
+					harnessTranscript = createProfile.harness === void 0 ? harnessTranscriptUnavailable("unknown-harness") : retainHarnessTranscript(providerWorkspaceCaptureReceipt({
+						executionId: workspaceExecutionId,
+						profile: createProfile,
+						...node === void 0 ? {} : { node },
+						workspaceControlRef: () => workspaceControlRef,
+						workspaceProvenance: () => provenance,
+						workspaceCoverage: () => ({
+							complete: coverageComplete ?? false,
+							incompleteReason
+						})
+					}, next, snapshot, providerSessionId), createProfile.harness);
+				} catch (error) {
+					harnessTranscript = {
+						status: "unavailable",
+						reason: "retained-projection-failed",
+						skipped: [{
+							path: workspaceExecutionId,
+							reason: error instanceof Error ? error.message : String(error)
+						}]
+					};
+				}
 				if (workspaceRetention.requireCompleteProvenance && !coverageComplete) workspacePreservationRequired = true;
 				return snapshot;
 			}).catch((error) => {
@@ -11206,7 +11557,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						environment = target;
 						resetWorkspaceState(target);
 					}
-					if (harnessTranscript.status !== "captured" && !releaseReadTried) {
+					if (options.workspaceRetention === void 0 && harnessTranscript.status !== "captured" && !releaseReadTried) {
 						releaseReadTried = true;
 						const capture = await captureHarnessTranscript(target, profile.harness, signal);
 						if (capture.status === "captured") harnessTranscript = capture;
@@ -11350,8 +11701,7 @@ async function* streamProviderExecutor(args) {
 		}
 		if ((args.options.requireTerminalEvent ?? true) && !terminal) throw new ValidationError(`providerAsExecutor(${args.provider.name}): stream ended without a terminal result/done/status event`);
 		if (args.carried === void 0) yield { kind: "iteration" };
-		const harnessTranscript = await captureHarnessTranscript(environment, args.profile.harness, linked);
-		args.onHarnessTranscript(harnessTranscript);
+		if (args.options.workspaceRetention === void 0) args.onHarnessTranscript(await captureHarnessTranscript(environment, args.profile.harness, linked));
 		const outcome = failures.finish();
 		const result = {
 			...resultFromEvents(archive.events(), text),
@@ -11436,7 +11786,7 @@ async function* streamProviderExecutor(args) {
 			if (captureError instanceof Error && captureError !== error) failure = captureError.cause === void 0 ? Object.assign(captureError, { cause: failure }) : new AggregateError([captureError, failure], captureError.message, { cause: captureError });
 			else failure = captureError;
 		}
-		args.onHarnessTranscript(await captureHarnessTranscript(environment, args.profile.harness, linked));
+		if (args.options.workspaceRetention === void 0) args.onHarnessTranscript(await captureHarnessTranscript(environment, args.profile.harness, linked));
 	} finally {
 		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && !(unavailable !== void 0 && !failed) && (args.options.destroyOnSettle ?? true)) {
 			const cleanup = await args.destroyEnvironment();
@@ -21893,6 +22243,7 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 	const terminal = new Set(events.filter(closesCursorSlot).map((event) => event.id));
 	const interrupted = events.filter((event) => event.kind === "spawned" && event.parent === parentId && !terminal.has(event.id));
 	const recoveries = [];
+	const parsedStrings = /* @__PURE__ */ new Map();
 	const accepted = [];
 	const rootBudget = events.find((event) => event.kind === "spawned" && event.parent === void 0)?.budget;
 	for (const node of interrupted) {
@@ -21927,8 +22278,8 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 		if (!opts.recoverExecutor || admissions.length === 0 && !node.ownedTreeRoot && (opts.journal.appendEvents === void 0 || latestInput === void 0)) continue;
 		const taskRef = inputs[0]?.taskRef;
 		if (!node.profileRef || !taskRef || !node.identity?.profileDigest || !node.identity.taskDigest) throw new RuntimeRunStateError(`cannot recover '${node.id}' without exact profile and task bytes`);
-		const profile = agentProfileSchema.parse(await opts.blobs.get(node.profileRef));
-		const task = await opts.blobs.get(taskRef);
+		const profile = shareParsedStrings(agentProfileSchema.parse(await opts.blobs.get(node.profileRef)), parsedStrings);
+		const task = shareParsedStrings(await opts.blobs.get(taskRef), parsedStrings);
 		if (canonicalAgentProfileDigest(profile) !== node.identity.profileDigest || canonicalCandidateDigest(task) !== node.identity.taskDigest) throw new RuntimeRunStateError(`recovery inputs for '${node.id}' do not match its admitted identity`);
 		let prepared;
 		if (node.ownedTreeRoot !== void 0) {
@@ -28540,6 +28891,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { bindScopeRetainedOwnerProvider as $, projectSandboxOutcome as $i, parseWorkerToolTraceArtifact as $n, runWorktreeHarness as $r, isPeerMailEnvelope as $t, driverExecutorFactory as A, withBudgetResources as Aa, writeAllBytes as Ai, resolveAgentEnvironmentProvider as An, mergeTraceEnv as Ar, createExecutor as At, recordScopeOwnerDriverAttempt as B, providerMessageText as Ba, recordRuntimeOwnedDriveHarnessProviderEvidence as Bi, InMemoryResultBlobStore as Bn, createOtelExporter as Br, workerTraceEnv as Bt, createContinuationKeeper as C, throwAbort as Ca, sandboxActProfileMaterialization as Ci, readPromptOptions as Cn, runAbortable as Cr, freeSlots as Ct, passedItems as D, zeroSpend as Da, isNoEntError as Di, createAgentEnvironmentProviderRegistry as Dn, readHarnessTranscript as Dr, captureReusableExecutorConfig as Dt, failedItems as E, withTimeout as Ea, worktreeCliProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, persistHarnessTranscript as Er, bindReusableExecutorExecutionId as Et, beginScopeOwnerAttempt as F, armDeadlineTimer as Fa, inheritRuntimeOwnedExecutorAttestation as Fi, sandboxSessionTraceSource as Fn, resolveRedactor as Fr, createSteerableSandboxSession as Ft, settledToIteration as G, runtimeOwnedPendingExecutorMaterialization as Gi, insideCursorNamespace as Gn, padTraceId as Gr, createActivityLog as Gt, recordScopeOwnerPause as H, runtimeOwnedExecutorExecutionBinding as Hi, SpawnEventIndex as Hn, generateSpanId as Hr, workerTraceSeamKey as Ht, createScope as I, teardownExecutor as Ia, knownExecutionBindingReceipt as Ii, registerRetainedExecutorPreparation as In, buildLoopOtelSpans as Ir, createRouterTranscript as It, pollFor as J, unknownMaterializationReceipt as Ji, pendingWaits as Jn, createRuntimeStreamEventCollector as Jr, AUTHORITY_MARKERS as Jt, createWaitProbes as K, runtimeOwnedScopeOwnerRuntime as Ki, loadSpawnForest as Kn, toOtelAttributes as Kr, readWorkerProgress as Kt, deriveNodeExecutionIdentity as L, teardownSurfaces as La, knownMaterializationReceipt as Li, retainedExecutorSeamKey as Ln, buildLoopSpanNodes as Lr, createInPlaceCliExecutor as Lt, withDriverExecutor as M, abortError$2 as Ma, attestRuntimeOwnedScopeOwner as Mi, unavailableSignalOfFailure as Mn, traceContextToEnv as Mr, snapshotExecutorConfig as Mt, SUBTREE_RESULT_LIMIT as N, awaitAbortable$1 as Na, authoredProfileDigest as Ni, createPushTraceSource as Nn, defaultRedactor as Nr, createWorktreeCliExecutor as Nt, verdictFromJudgeScore as O, addResourceSpend as Oa, prepareJsonlAppend as Oi, providerAsExecutor as On, contentAddress as Or, cliInPlaceExecutor as Ot, assertRecursiveReservationPolicy as P, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Pa, finalizeRuntimeOwnedPendingExecutor as Pi, decodeToolPart as Pn, defaultRedactorIdentityMaterial as Pr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Pt, bindScopeRetainedOwnerEnvironmentId as Q, detachedSnapshot as Qi, isTraceAnalysisStore as Qn, runSettledCommand as Qr, createPeerMailbox as Qt, meterRuntimeOwnedAccounting as R, promptFromAgentTurnInput as Ra, newExecutionAttemptId as Ri, FileResultBlobStore as Rn, buildRuntimeEventOtelSpans as Rr, WORKER_TRACE_PROPAGATION as Rt, composeContinuationNote as S, stringifySafe as Sa, renderUnsupported as Si, assertBoxlessPromptOptions as Sn, linkAbort as Sr, startRetainedInteractiveRun as St, expandQuestions as T, unmeteredSpend as Ta, validateProfileMaterialization as Ti, runBrainLoop as Tn, harnessTranscriptArtifact as Tr, rollingDispatch as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedExecutorMaterialization as Ui, assertContentAddress as Un, loopEventToOtelSpan as Ur, taskToPrompt as Ut, recordScopeOwnerMaterialization as V, runtimeOwnedDriveHarnessProviderEvidence as Vi, InMemorySpawnJournal as Vn, flatOtelSpan as Vr, workerTraceHeaders as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorProviderEvidence as Wi, encodeResultBlob as Wn, padSpanId as Wr, DEFAULT_STALL_AFTER_MS as Wt, validateWaitSpec as X, executableAgentSpecSnapshot as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, sanitizeKnowledgeReadinessReport as Xr, PEER_MAIL_WIRE_KEY as Xt, timerAt as Y, executableAgentProfileSnapshot as Yi, replaySpawnTree as Yn, sanitizeAgentRuntimeEvent as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, waitUntil as Z, detachedFrozen as Zi, captureWorkerTraceEvidence as Zn, sanitizeRuntimeStreamEvent as Zr, claimsAuthority as Zt, CheckUnavailableError as _, hasCompleteCacheBreakdown as _a, promptControlProfileMaterialization as _i, createSandboxLineage as _n, environmentGone as _r, readWorkerInteractiveBinding as _t, collectDelivered as a, extractLlmCallEvent as aa, harnessInvocation as ai, bridgeModelRouteRefusal as an, createBudgetPool as ar, scopeRetainedOwnerPriorSpend as at, bestComposite as b, randomSuffix as ba, promptResourceProfileMaterialization as bi, SandboxEvidenceRetentionError as bn, RunCancellationReason as br, reconnectRetainedInteractiveRun as bt, runTree as c, mapSandboxToolEvent as ca, parseCodexTokenUsage as ci, harnessUsageIsEmpty as cn, spendFromUsageEvents as cr, scopeRetainedOwnerResult as ct, classifyDriverFailure as d, sandboxProgressEvents as da, AGENT_PROFILE_MATERIALIZATION_AXES as di, bridgeStopSignalKey as dn, reconnectRetainedRun as dr, hostDirectoryReader as dt, readSandboxOutcome as ea, captureWorktreeDiff as ei, peerMailTools as en, workerTraceAnalysisStore as er, consumeScopeRetainedOwnerResult as et, runDriverWithRetry as f, sumSandboxUsage as fa, assertProfileMaterialization as fi, TERMINAL_DECISIONS as fn, recoverRetainedRun as fr, resolveSpawnResourcePaths as ft, CONTINUATION_FACTS as g, deleteBoxSafe as ga, profileMaterializationAxes$1 as gi, runAgentRounds as gn, destroyInteractiveEnvironment as gr, attachWorker as gt, CONTINUATIONS_DIR as h, cloneSpend as ha, fullProfileMaterialization as hi, isTerminalDecision as hn, retainedCreateMaterial as hr, workerInteractiveAdmissionFile as ht, bestDelivered as i, createSandboxUsageLedger as ia, LOCAL_HARNESSES as ii, bridgeAdmissionRefusal as in, assertValidBudget as ir, scopeRetainedOwnerContext as it, isDriverSpec as j, decodeHarnessUsage as ja, attestRuntimeOwnedPendingExecutor as ji, unavailablePauseMs as jn, readTraceContextFromEnv as jr, createExecutorRegistry as jt, driverChild as k, resourceTelemetry as ka, readCommittedJsonLines as ki, providerAsSandboxClient as kn, createPropagatingTraceEmitter as kr, cliWorktreeExecutor as kt, DriverAttemptsExhaustedError as l, notifySandboxEventObserver as la, CodexExecutionDiagnosticError as li, readCodexRolloutSession as ln, spendFromUsageTotals as lr, SPAWN_RESOURCE_PATH_MAX_BYTES as lt, upstreamUnavailableSignal as m, chargedTokens as ma, defineProfileMaterializationContract as mi, defaultSelectWinner as mn, startRetainedRunInEnvironment as mr, readWorkerInteractiveAdmissions as mt, createRootHandle as n, canonicalStreamEventFromSandboxEvent as na, removeWorktree as ni, isLiveNodeStatus as nn, BudgetReconcileFault as nr, prepareScopeRetainedOwnerTask as nt, pickBestDelivered as o, isSandboxTerminalEvent as oa, harnessSupportsReasoningEffort as oi, addHarnessUsage as on, meterUsageEvent as or, scopeRetainedOwnerResourceReader as ot, summarizeDriverAttempts as p, addSpend as pa, controlProfileMaterialization as pi, createSandboxForSpec as pn, startRetainedRun as pr, interactiveAdmissionSeamKey as pt, isWaitOutcome as q, unknownExecutionBindingReceipt as qi, materializeTreeView as qn, createRuntimeEventCollector as qr, createInbox as qt, createSupervisor as r, createSandboxToolPartState as ra, DEFAULT_LOCAL_HARNESS as ri, isTerminalNodeStatus as rn, ReservationWaitRefused as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, mapSandboxEvent as sa, localHarnessExecutable as si, createCodexRolloutStoreReader as sn, newUsageTotals as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, assertSandboxServedModel as ta, createWorktree as ti, peerMailVerbNames as tn, executorFailure as tr, noteScopeRetainedOwnerCoordination as tt, HarnessTurnFailedError as u, sandboxEventServedBackend as ua, terminateProcessTreeAndConfirm as ui, bridgeRuntimeAttachmentsKey as un, errMessage as ur, environmentReader as ut, admitContinuationPolicy as v, isAbortError$2 as va, promptModelProfileMaterialization as vi, probeSandboxCapabilities as vn, createWorkerSlots as vr, workerInteractiveBindingFile as vt, distillFindings as w, throwIfAborted as wa, unsupportedProfileDimensions as wi, routerBrain as wn, captureHarnessTranscript as wr, queueOf as wt, checkVerdictOf as x, sleep as xa, renderProfileMaterializationIssues as xi, captureBeforeDestroy as xn, abortError as xr, recoverRetainedInteractiveRun as xt, admitFinding as y, promptCacheTokenClasses as ya, promptOnlyProfileMaterialization as yi, acquireSandbox as yn, openSlotGroup as yr, workerInteractiveBindingsDir as yt, meterRuntimeOwnedProviderAttempt as z, promptOptionsFromAgentTurnInput as za, providerAttemptEvidence as zi, FileSpawnJournal as zn, createOpenInferenceFileExporter as zr, readWorkerTraceContext as zt };
+export { bindScopeRetainedOwnerProvider as $, detachedFrozen as $i, parseWorkerToolTraceArtifact as $n, sanitizeRuntimeStreamEvent as $r, isPeerMailEnvelope as $t, driverExecutorFactory as A, addResourceSpend as Aa, prepareJsonlAppend as Ai, resolveAgentEnvironmentProvider as An, contentAddress as Ar, createExecutor as At, recordScopeOwnerDriverAttempt as B, promptFromAgentTurnInput as Ba, newExecutionAttemptId as Bi, InMemoryResultBlobStore as Bn, buildRuntimeEventOtelSpans as Br, workerTraceEnv as Bt, createContinuationKeeper as C, sleep as Ca, renderProfileMaterializationIssues as Ci, readPromptOptions as Cn, runAbortable as Cr, freeSlots as Ct, passedItems as D, unmeteredSpend as Da, validateProfileMaterialization as Di, createAgentEnvironmentProviderRegistry as Dn, readHarnessTranscript as Dr, captureReusableExecutorConfig as Dt, failedItems as E, throwIfAborted as Ea, unsupportedProfileDimensions as Ei, LEAF_CONTINUATION_TASK as En, persistHarnessTranscript as Er, bindReusableExecutorExecutionId as Et, beginScopeOwnerAttempt as F, awaitAbortable$1 as Fa, authoredProfileDigest as Fi, sandboxSessionTraceSource as Fn, defaultRedactor as Fr, createSteerableSandboxSession as Ft, settledToIteration as G, runtimeOwnedExecutorMaterialization as Gi, insideCursorNamespace as Gn, loopEventToOtelSpan as Gr, createActivityLog as Gt, recordScopeOwnerPause as H, providerMessageText as Ha, recordRuntimeOwnedDriveHarnessProviderEvidence as Hi, SpawnEventIndex as Hn, createOtelExporter as Hr, workerTraceSeamKey as Ht, createScope as I, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Ia, finalizeRuntimeOwnedPendingExecutor as Ii, registerRetainedExecutorPreparation as In, defaultRedactorIdentityMaterial as Ir, createRouterTranscript as It, pollFor as J, runtimeOwnedScopeOwnerRuntime as Ji, pendingWaits as Jn, toOtelAttributes as Jr, AUTHORITY_MARKERS as Jt, createWaitProbes as K, runtimeOwnedExecutorProviderEvidence as Ki, loadSpawnForest as Kn, padSpanId as Kr, readWorkerProgress as Kt, deriveNodeExecutionIdentity as L, armDeadlineTimer as La, inheritRuntimeOwnedExecutorAttestation as Li, retainedExecutorSeamKey as Ln, resolveRedactor as Lr, createInPlaceCliExecutor as Lt, withDriverExecutor as M, withBudgetResources as Ma, writeAllBytes as Mi, unavailableSignalOfFailure as Mn, mergeTraceEnv as Mr, snapshotExecutorConfig as Mt, SUBTREE_RESULT_LIMIT as N, decodeHarnessUsage as Na, attestRuntimeOwnedPendingExecutor as Ni, createPushTraceSource as Nn, readTraceContextFromEnv as Nr, createWorktreeCliExecutor as Nt, verdictFromJudgeScore as O, withTimeout as Oa, worktreeCliProfileMaterialization as Oi, providerAsExecutor as On, resolveHarnessTranscriptCapture as Or, cliInPlaceExecutor as Ot, assertRecursiveReservationPolicy as P, abortError$2 as Pa, attestRuntimeOwnedScopeOwner as Pi, decodeToolPart as Pn, traceContextToEnv as Pr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Pt, bindScopeRetainedOwnerEnvironmentId as Q, executableAgentSpecSnapshot as Qi, isTraceAnalysisStore as Qn, sanitizeKnowledgeReadinessReport as Qr, createPeerMailbox as Qt, meterRuntimeOwnedAccounting as R, teardownExecutor as Ra, knownExecutionBindingReceipt as Ri, FileResultBlobStore as Rn, buildLoopOtelSpans as Rr, WORKER_TRACE_PROPAGATION as Rt, composeContinuationNote as S, randomSuffix as Sa, promptResourceProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, linkAbort as Sr, startRetainedInteractiveRun as St, expandQuestions as T, throwAbort as Ta, sandboxActProfileMaterialization as Ti, runBrainLoop as Tn, harnessTranscriptArtifact as Tr, rollingDispatch as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedDriveHarnessProviderEvidence as Ui, assertContentAddress as Un, flatOtelSpan as Ur, taskToPrompt as Ut, recordScopeOwnerMaterialization as V, promptOptionsFromAgentTurnInput as Va, providerAttemptEvidence as Vi, InMemorySpawnJournal as Vn, createOpenInferenceFileExporter as Vr, workerTraceHeaders as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorExecutionBinding as Wi, encodeResultBlob as Wn, generateSpanId as Wr, DEFAULT_STALL_AFTER_MS as Wt, validateWaitSpec as X, unknownMaterializationReceipt as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createRuntimeStreamEventCollector as Xr, PEER_MAIL_WIRE_KEY as Xt, timerAt as Y, unknownExecutionBindingReceipt as Yi, replaySpawnTree as Yn, createRuntimeEventCollector as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, waitUntil as Z, executableAgentProfileSnapshot as Zi, captureWorkerTraceEvidence as Zn, sanitizeAgentRuntimeEvent as Zr, claimsAuthority as Zt, CheckUnavailableError as _, cloneSpend as _a, fullProfileMaterialization as _i, createSandboxLineage as _n, environmentGone as _r, readWorkerInteractiveBinding as _t, collectDelivered as a, createSandboxToolPartState as aa, DEFAULT_LOCAL_HARNESS as ai, bridgeModelRouteRefusal as an, createBudgetPool as ar, scopeRetainedOwnerPriorSpend as at, bestComposite as b, isAbortError$2 as ba, promptModelProfileMaterialization as bi, SandboxEvidenceRetentionError as bn, RunCancellationReason as br, reconnectRetainedInteractiveRun as bt, runTree as c, isSandboxTerminalEvent as ca, harnessSupportsReasoningEffort as ci, harnessUsageIsEmpty as cn, spendFromUsageEvents as cr, scopeRetainedOwnerResult as ct, classifyDriverFailure as d, notifySandboxEventObserver as da, CodexExecutionDiagnosticError as di, bridgeStopSignalKey as dn, reconnectRetainedRun as dr, hostDirectoryReader as dt, detachedSnapshot as ea, runSettledCommand as ei, peerMailTools as en, workerTraceAnalysisStore as er, consumeScopeRetainedOwnerResult as et, runDriverWithRetry as f, sandboxEventServedBackend as fa, terminateProcessTreeAndConfirm as fi, TERMINAL_DECISIONS as fn, recoverRetainedRun as fr, resolveSpawnResourcePaths as ft, CONTINUATION_FACTS as g, chargedTokens as ga, defineProfileMaterializationContract as gi, runAgentRounds as gn, destroyInteractiveEnvironment as gr, attachWorker as gt, CONTINUATIONS_DIR as h, addSpend as ha, controlProfileMaterialization as hi, isTerminalDecision as hn, retainedCreateMaterial as hr, workerInteractiveAdmissionFile as ht, bestDelivered as i, canonicalStreamEventFromSandboxEvent as ia, removeWorktree as ii, bridgeAdmissionRefusal as in, assertValidBudget as ir, scopeRetainedOwnerContext as it, isDriverSpec as j, resourceTelemetry as ja, readCommittedJsonLines as ji, unavailablePauseMs as jn, createPropagatingTraceEmitter as jr, createExecutorRegistry as jt, driverChild as k, zeroSpend as ka, isNoEntError as ki, providerAsSandboxClient as kn, retainHarnessTranscript as kr, cliWorktreeExecutor as kt, DriverAttemptsExhaustedError as l, mapSandboxEvent as la, localHarnessExecutable as li, readCodexRolloutSession as ln, spendFromUsageTotals as lr, SPAWN_RESOURCE_PATH_MAX_BYTES as lt, upstreamUnavailableSignal as m, sumSandboxUsage as ma, assertProfileMaterialization as mi, defaultSelectWinner as mn, startRetainedRunInEnvironment as mr, readWorkerInteractiveAdmissions as mt, createRootHandle as n, readSandboxOutcome as na, captureWorktreeDiff as ni, isLiveNodeStatus as nn, BudgetReconcileFault as nr, prepareScopeRetainedOwnerTask as nt, pickBestDelivered as o, createSandboxUsageLedger as oa, LOCAL_HARNESSES as oi, addHarnessUsage as on, meterUsageEvent as or, scopeRetainedOwnerResourceReader as ot, summarizeDriverAttempts as p, sandboxProgressEvents as pa, AGENT_PROFILE_MATERIALIZATION_AXES as pi, createSandboxForSpec as pn, startRetainedRun as pr, interactiveAdmissionSeamKey as pt, isWaitOutcome as q, runtimeOwnedPendingExecutorMaterialization as qi, materializeTreeView as qn, padTraceId as qr, createInbox as qt, createSupervisor as r, assertSandboxServedModel as ra, createWorktree as ri, isTerminalNodeStatus as rn, ReservationWaitRefused as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, extractLlmCallEvent as sa, harnessInvocation as si, createCodexRolloutStoreReader as sn, newUsageTotals as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, projectSandboxOutcome as ta, runWorktreeHarness as ti, peerMailVerbNames as tn, executorFailure as tr, noteScopeRetainedOwnerCoordination as tt, HarnessTurnFailedError as u, mapSandboxToolEvent as ua, parseCodexTokenUsage as ui, bridgeRuntimeAttachmentsKey as un, errMessage as ur, environmentReader as ut, admitContinuationPolicy as v, deleteBoxSafe as va, profileMaterializationAxes$1 as vi, probeSandboxCapabilities as vn, createWorkerSlots as vr, workerInteractiveBindingFile as vt, distillFindings as w, stringifySafe as wa, renderUnsupported as wi, routerBrain as wn, captureHarnessTranscript as wr, queueOf as wt, checkVerdictOf as x, promptCacheTokenClasses as xa, promptOnlyProfileMaterialization as xi, captureBeforeDestroy as xn, abortError as xr, recoverRetainedInteractiveRun as xt, admitFinding as y, hasCompleteCacheBreakdown as ya, promptControlProfileMaterialization as yi, acquireSandbox as yn, openSlotGroup as yr, workerInteractiveBindingsDir as yt, meterRuntimeOwnedProviderAttempt as z, teardownSurfaces as za, knownMaterializationReceipt as zi, FileSpawnJournal as zn, buildLoopSpanNodes as zr, readWorkerTraceContext as zt };
 
-//# sourceMappingURL=supervisor-DnoT3-_F.js.map
+//# sourceMappingURL=supervisor-Rov7xW0j.js.map