@tangle-network/agent-runtime 0.299.0 → 0.299.1

package/dist/{supervisor-CJPvBIMu.js → supervisor-DPXXMNZK.js}

@@ -105,6 +105,14 @@ function promptPartFromInputPart(part) {
 //#region src/runtime/supervise/deadline.ts
 const MAX_TIMER_DELAY_MS = 2147483647;
 const DEFAULT_SUCCESSFUL_SHUTDOWN_MS = 5e3;
+/** The abort reason a child's own deadline carries. */
+const CHILD_DEADLINE_REASON = "child deadline exceeded";
+/** The abort reason the root's budget deadline cascades to every node. */
+const ROOT_DEADLINE_REASON = "root budget deadline exceeded";
+/** Whether an abort reason is a deadline: the child's own or the root budget's. */
+function isDeadlineAbortReason(reason) {
+	return reason === "child deadline exceeded" || reason === "root budget deadline exceeded";
+}
 const TEARDOWN_ACKNOWLEDGEMENT_MS = 250;
 /** Arm a finite wall-clock deadline in safe chunks. Resource deadlines unref by default;
 * a standalone wait opts into keeping the process alive until it settles or is cancelled. */
@@ -11523,6 +11531,17 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		return stopping;
 	};
 	/**
+	* A turn that its deadline or an explicit cancellation ended stops its harness, and waits within
+	* the stop's bound for the provider to report it stopped, before the turn's final native copy.
+	* Nothing else stops a retained execution before teardown, so that copy read a session the
+	* harness was still writing and was stored partial (2026-10-04 trace proof:
+	* `native_snapshot_live`, `events_not_settled`), and the harness spent past its deadline.
+	*/
+	const stopEndedHarness = async (signal) => {
+		if (!isDeadlineAbortReason(signal.reason) && !cancelledExplicitly()) return;
+		await stopNativeExecution();
+	};
+	/**
 	* A release that keeps an environment keeps its files, never its running harness. The root has
 	* settled and no process will reconcile this execution, so its native process stops before the
 	* release records what it kept.
@@ -11673,6 +11692,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					},
 					captureWorkspace,
 					startNativeMirror,
+					stopEndedHarness,
 					finishNativeMirror,
 					workspaceControlRef: () => workspaceControlRef,
 					workspaceProvenance: () => workspaceProvenance,
@@ -11906,6 +11926,12 @@ async function* streamProviderExecutor(args) {
 	let failure;
 	let failed = false;
 	let unavailable;
+	let harnessStop;
+	const stopEndedHarness = () => {
+		if (settled !== void 0 || !linked.aborted) return Promise.resolve();
+		harnessStop ??= args.stopEndedHarness(linked);
+		return harnessStop;
+	};
 	try {
 		const toolParts = createSandboxToolPartState();
 		for await (const event of source.events) {
@@ -12031,6 +12057,7 @@ async function* streamProviderExecutor(args) {
 			error: error instanceof Error ? error.message : String(error),
 			...linked.aborted ? { errorCode: "cancelled" } : {}
 		};
+		await stopEndedHarness();
 		try {
 			const retainedWorkspace = await args.captureWorkspace(environment, failureOutcome);
 			if (retainedWorkspace !== void 0 && args.retention?.onEvidence !== void 0) await args.retention.onEvidence({
@@ -12045,6 +12072,7 @@ async function* streamProviderExecutor(args) {
 		}
 		if (args.options.workspaceRetention === void 0) args.onHarnessTranscript(await captureHarnessTranscript(environment, args.profile.harness, linked));
 	} finally {
+		await stopEndedHarness();
 		await args.finishNativeMirror(environment, failed ? "failed" : settled !== void 0 ? "settled" : "interrupted");
 		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && !(unavailable !== void 0 && !failed) && (args.options.destroyOnSettle ?? true)) {
 			const cleanup = await args.destroyEnvironment();
@@ -24545,7 +24573,7 @@ function createScope(args) {
 			cascadeAbort = () => controller.abort(args.signal.reason);
 			if (args.signal.aborted) controller.abort(args.signal.reason);
 			else args.signal.addEventListener("abort", cascadeAbort, { once: true });
-			if (childDeadlineAtMs !== void 0) clearChildDeadline = armDeadlineTimer(Math.max(0, childDeadlineAtMs - now()), () => controller.abort("child deadline exceeded"));
+			if (childDeadlineAtMs !== void 0) clearChildDeadline = armDeadlineTimer(Math.max(0, childDeadlineAtMs - now()), () => controller.abort(CHILD_DEADLINE_REASON));
 			const deferredOwner = {};
 			const workerTrace = args.workerTrace?.(args.parentId);
 			let markRecoveryReady;
@@ -25549,12 +25577,26 @@ function meterRuntimeOwnedAccounting(scope, spend, detail) {
 }
 const ownerMaterializationStates = /* @__PURE__ */ new WeakMap();
 /**
+* One owner materialization write at a time. A cancelled run settles without waiting for its root
+* driver, so the driver's late receipt and the settlement's finalization could each read no
+* receipt before the other's journal append returned, and both appended one: the journal then
+* refused the run as corrupted (duplicate materialization receipt).
+*/
+function serializedOwnerWrite(state, write) {
+	const next = (state.writes ?? Promise.resolve()).then(write, write);
+	state.writes = next.catch(() => void 0);
+	return next;
+}
+/**
 * @internal Publish exact root-manager materialization from a runtime-owned adapter after dynamic
 * attachments exist and before its executor starts. This is deliberately a module function backed
 * by a private WeakMap, not a Scope method an Agent can call.
 */
 async function recordScopeOwnerMaterialization(scope, runtime, declaration, bindingInput) {
 	const state = ownerMaterializationState(scope);
+	await serializedOwnerWrite(state, () => publishOwnerMaterialization(state, runtime, declaration, bindingInput));
+}
+async function publishOwnerMaterialization(state, runtime, declaration, bindingInput) {
 	if (runtime !== state.runtime) {
 		await rejectOwnerMaterialization(state);
 		throw new ValidationError$1(`scope owner materialization runtime ${JSON.stringify(runtime)} does not match ${JSON.stringify(state.runtime)}`);
@@ -25667,7 +25709,11 @@ async function restoreScopeOwnerAcceptedExecution(scope) {
 /** @internal Ensure a deferred root that never published evidence remains visibly unknown. */
 async function finalizeScopeOwnerMaterialization(scope) {
 	const state = ownerMaterializationStates.get(scope);
-	if (state === void 0 || state.publishedThisProcess || state.bindingPublished) return;
+	if (state === void 0) return;
+	await serializedOwnerWrite(state, () => finalizeOwnerMaterialization(state));
+}
+async function finalizeOwnerMaterialization(state) {
+	if (state.publishedThisProcess || state.bindingPublished) return;
 	if (state.prior !== void 0) {
 		await appendUnknownOwnerBinding(state, state.prior, "root-agent-did-not-report");
 		throw new ValidationError$1("resumed scope owner did not re-attest its prior materialization before execution");
@@ -28578,9 +28624,9 @@ function createSupervisor() {
 			});
 			let deadlineExceeded = false;
 			const rootDeadlineAtMs = pool.readout().deadlineMs;
-			if (rootDeadlineAtMs > 0 && now() >= rootDeadlineAtMs) deadlineExceeded = cascadeAbort("root budget deadline exceeded");
+			if (rootDeadlineAtMs > 0 && now() >= rootDeadlineAtMs) deadlineExceeded = cascadeAbort(ROOT_DEADLINE_REASON);
 			const clearRootDeadline = opts.budget.deadlineMs === void 0 ? void 0 : armDeadlineTimer(Math.max(0, rootDeadlineAtMs - now()), () => {
-				deadlineExceeded = cascadeAbort("root budget deadline exceeded");
+				deadlineExceeded = cascadeAbort(ROOT_DEADLINE_REASON);
 			});
 			let actOutcome = {
 				ok: false,
@@ -29184,4 +29230,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { bindScopeRetainedOwnerProvider as $, detachedFrozen as $i, parseWorkerToolTraceArtifact as $n, sanitizeRuntimeStreamEvent as $r, isPeerMailEnvelope as $t, driverExecutorFactory as A, addResourceSpend as Aa, prepareJsonlAppend as Ai, resolveAgentEnvironmentProvider as An, contentAddress as Ar, createExecutor as At, recordScopeOwnerDriverAttempt as B, promptFromAgentTurnInput as Ba, newExecutionAttemptId as Bi, InMemoryResultBlobStore as Bn, buildRuntimeEventOtelSpans as Br, workerTraceEnv as Bt, createContinuationKeeper as C, sleep as Ca, renderProfileMaterializationIssues as Ci, readPromptOptions as Cn, runAbortable as Cr, freeSlots as Ct, passedItems as D, unmeteredSpend as Da, validateProfileMaterialization as Di, createAgentEnvironmentProviderRegistry as Dn, readHarnessTranscript as Dr, captureReusableExecutorConfig as Dt, failedItems as E, throwIfAborted as Ea, unsupportedProfileDimensions as Ei, LEAF_CONTINUATION_TASK as En, persistHarnessTranscript as Er, bindReusableExecutorExecutionId as Et, beginScopeOwnerAttempt as F, awaitAbortable$1 as Fa, authoredProfileDigest as Fi, sandboxSessionTraceSource as Fn, defaultRedactor as Fr, createSteerableSandboxSession as Ft, settledToIteration as G, runtimeOwnedExecutorMaterialization as Gi, insideCursorNamespace as Gn, loopEventToOtelSpan as Gr, createActivityLog as Gt, recordScopeOwnerPause as H, providerMessageText as Ha, recordRuntimeOwnedDriveHarnessProviderEvidence as Hi, SpawnEventIndex as Hn, createOtelExporter as Hr, workerTraceSeamKey as Ht, createScope as I, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as Ia, finalizeRuntimeOwnedPendingExecutor as Ii, registerRetainedExecutorPreparation as In, defaultRedactorIdentityMaterial as Ir, createRouterTranscript as It, pollFor as J, runtimeOwnedScopeOwnerRuntime as Ji, pendingWaits as Jn, toOtelAttributes as Jr, AUTHORITY_MARKERS as Jt, createWaitProbes as K, runtimeOwnedExecutorProviderEvidence as Ki, loadSpawnForest as Kn, padSpanId as Kr, readWorkerProgress as Kt, deriveNodeExecutionIdentity as L, armDeadlineTimer as La, inheritRuntimeOwnedExecutorAttestation as Li, retainedExecutorSeamKey as Ln, resolveRedactor as Lr, createInPlaceCliExecutor as Lt, withDriverExecutor as M, withBudgetResources as Ma, writeAllBytes as Mi, unavailableSignalOfFailure as Mn, mergeTraceEnv as Mr, snapshotExecutorConfig as Mt, SUBTREE_RESULT_LIMIT as N, decodeHarnessUsage as Na, attestRuntimeOwnedPendingExecutor as Ni, createPushTraceSource as Nn, readTraceContextFromEnv as Nr, createWorktreeCliExecutor as Nt, verdictFromJudgeScore as O, withTimeout as Oa, worktreeCliProfileMaterialization as Oi, providerAsExecutor as On, resolveHarnessTranscriptCapture as Or, cliInPlaceExecutor as Ot, assertRecursiveReservationPolicy as P, abortError$2 as Pa, attestRuntimeOwnedScopeOwner as Pi, decodeToolPart as Pn, traceContextToEnv as Pr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Pt, bindScopeRetainedOwnerEnvironmentId as Q, executableAgentSpecSnapshot as Qi, isTraceAnalysisStore as Qn, sanitizeKnowledgeReadinessReport as Qr, createPeerMailbox as Qt, meterRuntimeOwnedAccounting as R, teardownExecutor as Ra, knownExecutionBindingReceipt as Ri, FileResultBlobStore as Rn, buildLoopOtelSpans as Rr, WORKER_TRACE_PROPAGATION as Rt, composeContinuationNote as S, randomSuffix as Sa, promptResourceProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, linkAbort as Sr, startRetainedInteractiveRun as St, expandQuestions as T, throwAbort as Ta, sandboxActProfileMaterialization as Ti, runBrainLoop as Tn, harnessTranscriptArtifact as Tr, rollingDispatch as Tt, restoreScopeOwnerAcceptedExecution as U, runtimeOwnedDriveHarnessProviderEvidence as Ui, assertContentAddress as Un, flatOtelSpan as Ur, taskToPrompt as Ut, recordScopeOwnerMaterialization as V, promptOptionsFromAgentTurnInput as Va, providerAttemptEvidence as Vi, InMemorySpawnJournal as Vn, createOpenInferenceFileExporter as Vr, workerTraceHeaders as Vt, scopeOwnerExecutorNodeContext as W, runtimeOwnedExecutorExecutionBinding as Wi, encodeResultBlob as Wn, generateSpanId as Wr, DEFAULT_STALL_AFTER_MS as Wt, validateWaitSpec as X, unknownMaterializationReceipt as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createRuntimeStreamEventCollector as Xr, PEER_MAIL_WIRE_KEY as Xt, timerAt as Y, unknownExecutionBindingReceipt as Yi, replaySpawnTree as Yn, createRuntimeEventCollector as Yr, DEFAULT_PEER_MAIL_LIMITS as Yt, waitUntil as Z, executableAgentProfileSnapshot as Zi, captureWorkerTraceEvidence as Zn, sanitizeAgentRuntimeEvent as Zr, claimsAuthority as Zt, CheckUnavailableError as _, cloneSpend as _a, fullProfileMaterialization as _i, createSandboxLineage as _n, environmentGone as _r, readWorkerInteractiveBinding as _t, collectDelivered as a, createSandboxToolPartState as aa, DEFAULT_LOCAL_HARNESS as ai, bridgeModelRouteRefusal as an, createBudgetPool as ar, scopeRetainedOwnerPriorSpend as at, bestComposite as b, isAbortError$2 as ba, promptModelProfileMaterialization as bi, SandboxEvidenceRetentionError as bn, RunCancellationReason as br, reconnectRetainedInteractiveRun as bt, runTree as c, isSandboxTerminalEvent as ca, harnessSupportsReasoningEffort as ci, harnessUsageIsEmpty as cn, spendFromUsageEvents as cr, scopeRetainedOwnerResult as ct, classifyDriverFailure as d, notifySandboxEventObserver as da, CodexExecutionDiagnosticError as di, bridgeStopSignalKey as dn, reconnectRetainedRun as dr, hostDirectoryReader as dt, detachedSnapshot as ea, runSettledCommand as ei, peerMailTools as en, workerTraceAnalysisStore as er, consumeScopeRetainedOwnerResult as et, runDriverWithRetry as f, sandboxEventServedBackend as fa, terminateProcessTreeAndConfirm as fi, TERMINAL_DECISIONS as fn, recoverRetainedRun as fr, resolveSpawnResourcePaths as ft, CONTINUATION_FACTS as g, chargedTokens as ga, defineProfileMaterializationContract as gi, runAgentRounds as gn, destroyInteractiveEnvironment as gr, attachWorker as gt, CONTINUATIONS_DIR as h, addSpend as ha, controlProfileMaterialization as hi, isTerminalDecision as hn, retainedCreateMaterial as hr, workerInteractiveAdmissionFile as ht, bestDelivered as i, canonicalStreamEventFromSandboxEvent as ia, removeWorktree as ii, bridgeAdmissionRefusal as in, assertValidBudget as ir, scopeRetainedOwnerContext as it, isDriverSpec as j, resourceTelemetry as ja, readCommittedJsonLines as ji, unavailablePauseMs as jn, createPropagatingTraceEmitter as jr, createExecutorRegistry as jt, driverChild as k, zeroSpend as ka, isNoEntError as ki, providerAsSandboxClient as kn, retainHarnessTranscript as kr, cliWorktreeExecutor as kt, DriverAttemptsExhaustedError as l, mapSandboxEvent as la, localHarnessExecutable as li, readCodexRolloutSession as ln, spendFromUsageTotals as lr, SPAWN_RESOURCE_PATH_MAX_BYTES as lt, upstreamUnavailableSignal as m, sumSandboxUsage as ma, assertProfileMaterialization as mi, defaultSelectWinner as mn, startRetainedRunInEnvironment as mr, readWorkerInteractiveAdmissions as mt, createRootHandle as n, readSandboxOutcome as na, captureWorktreeDiff as ni, isLiveNodeStatus as nn, BudgetReconcileFault as nr, prepareScopeRetainedOwnerTask as nt, pickBestDelivered as o, createSandboxUsageLedger as oa, LOCAL_HARNESSES as oi, addHarnessUsage as on, meterUsageEvent as or, scopeRetainedOwnerResourceReader as ot, summarizeDriverAttempts as p, sandboxProgressEvents as pa, AGENT_PROFILE_MATERIALIZATION_AXES as pi, createSandboxForSpec as pn, startRetainedRun as pr, interactiveAdmissionSeamKey as pt, isWaitOutcome as q, runtimeOwnedPendingExecutorMaterialization as qi, materializeTreeView as qn, padTraceId as qr, createInbox as qt, createSupervisor as r, assertSandboxServedModel as ra, createWorktree as ri, isTerminalNodeStatus as rn, ReservationWaitRefused as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, extractLlmCallEvent as sa, harnessInvocation as si, createCodexRolloutStoreReader as sn, newUsageTotals as sr, scopeRetainedOwnerRestorePoint as st, DEFAULT_MAX_DEPTH as t, projectSandboxOutcome as ta, runWorktreeHarness as ti, peerMailVerbNames as tn, executorFailure as tr, noteScopeRetainedOwnerCoordination as tt, HarnessTurnFailedError as u, mapSandboxToolEvent as ua, parseCodexTokenUsage as ui, bridgeRuntimeAttachmentsKey as un, errMessage as ur, environmentReader as ut, admitContinuationPolicy as v, deleteBoxSafe as va, profileMaterializationAxes$1 as vi, probeSandboxCapabilities as vn, createWorkerSlots as vr, workerInteractiveBindingFile as vt, distillFindings as w, stringifySafe as wa, renderUnsupported as wi, routerBrain as wn, captureHarnessTranscript as wr, queueOf as wt, checkVerdictOf as x, promptCacheTokenClasses as xa, promptOnlyProfileMaterialization as xi, captureBeforeDestroy as xn, abortError as xr, recoverRetainedInteractiveRun as xt, admitFinding as y, hasCompleteCacheBreakdown as ya, promptControlProfileMaterialization as yi, acquireSandbox as yn, openSlotGroup as yr, workerInteractiveBindingsDir as yt, meterRuntimeOwnedProviderAttempt as z, teardownSurfaces as za, knownMaterializationReceipt as zi, FileSpawnJournal as zn, buildLoopSpanNodes as zr, readWorkerTraceContext as zt };
 
-//# sourceMappingURL=supervisor-CJPvBIMu.js.map
+//# sourceMappingURL=supervisor-DPXXMNZK.js.map