@tangle-network/agent-runtime 0.306.1 → 0.307.2

package/dist/{supervise-DllOHM4M.js → supervise-D1qqMFAu.js}

@@ -1,10 +1,10 @@
-import { $ as scopeRetainedOwnerPriorSpend, $n as bridgeStopSignalKey, A as isDriverSpec, Ai as runtimeOwnedExecutorExecutionBinding, B as recordScopeOwnerMaterialization, Bi as detachedSnapshot, Ci as inheritRuntimeOwnedExecutorAttestation, Ct as snapshotExecutorConfig, Di as providerAttemptEvidence, Dt as createRouterTranscript, Fn as prepareJsonlAppend, G as beginScopeRetainedOwnerDrive, H as restoreScopeOwnerAcceptedExecution, I as deriveNodeExecutionIdentity, In as readCommittedJsonLines, It as createActivityLog, J as consumeScopeRetainedOwnerResult, Jn as meterUsageEvent, K as bindScopeRetainedOwnerEnvironmentId, Kn as assertValidBudget, L as meterRuntimeOwnedAccounting, Mi as runtimeOwnedExecutorProviderEvidence, Mr as createOtelExporter, N as assertRecursiveReservationPolicy, Ni as runtimeOwnedPendingExecutorMaterialization, O as driverChild, Oi as recordRuntimeOwnedDriveHarnessProviderEvidence, P as beginScopeOwnerAttempt, Pi as runtimeOwnedScopeOwnerRuntime, Pn as isNoEntError, Pr as generateSpanId, Q as scopeRetainedOwnerContext, Qn as bridgeRuntimeAttachmentsKey, R as meterRuntimeOwnedProviderAttempt, Rr as toOtelAttributes, Rt as createInbox, S as createContinuationKeeper, Tn as retainedExecutorSeamKey, U as scopeOwnerExecutorNodeContext, Un as executorFailure, V as recordScopeOwnerPause, Vn as parseWorkerToolTraceArtifact, X as prepareScopeRetainedOwnerTask, Xt as bridgeModelRouteRefusal, Y as noteScopeRetainedOwnerCoordination, Yn as newUsageTotals, Yt as bridgeAdmissionRefusal, Z as reconcileScopeRetainedOwnerEnvironment, Zn as spendFromUsageTotals, _ as CheckUnavailableError, _r as readHarnessTranscript, _t as bindReusableExecutorExecutionId, ai as controlProfileMaterialization, b as bestComposite, bi as attestRuntimeOwnedScopeOwner, br as contentAddress, c as runTree, ci as profileMaterializationAxes$1, er as errMessage, et as scopeRetainedOwnerResourceReader, f as runDriverWithRetry, fn as routerBrain, fr as linkAbort, gi as unsupportedProfileDimensions, gr as persistHarnessTranscript, h as CONTINUATIONS_DIR, i as bestDelivered, ii as assertProfileMaterialization, ji as runtimeOwnedExecutorMaterialization, k as driverExecutorFactory, ki as runtimeOwnedDriveHarnessProviderEvidence, kt as WORKER_TRACE_PROPAGATION, li as promptControlProfileMaterialization, mi as renderUnsupported, n as createRootHandle, nt as scopeRetainedOwnerResult, oi as defineProfileMaterializationContract, p as summarizeDriverAttempts, pr as runAbortable, q as bindScopeRetainedOwnerProvider, qt as isLiveNodeStatus, r as createSupervisor, rt as scopeRetainedOwnerTurnEnded, s as runFinalizer, si as fullProfileMaterialization, tt as scopeRetainedOwnerRestorePoint, u as HarnessTurnFailedError, ui as promptModelProfileMaterialization, ur as RunCancellationReason, v as admitContinuationPolicy, vi as worktreeCliProfileMaterialization, vn as resolveAgentEnvironmentProvider, vt as captureReusableExecutorConfig, wn as registerRetainedExecutorPreparation, x as checkVerdictOf, xt as createExecutor, z as recordScopeOwnerDriverAttempt } from "./supervisor-gCfG6K1-.js";
+import { A as scopeOwnerExecutorNodeContext, B as noteScopeRetainedOwnerCoordination, Bi as runtimeOwnedDriveHarnessProviderEvidence, Bt as WORKER_TRACE_PROPAGATION, C as deriveNodeExecutionIdentity, Cn as routerBrain, Cr as linkAbort, D as recordScopeOwnerMaterialization, Di as unsupportedProfileDimensions, Dr as persistHarnessTranscript, E as recordScopeOwnerDriverAttempt, F as seatExecutionProfile, Fn as registerRetainedExecutorPreparation, G as scopeRetainedOwnerJournalRoot, Gi as runtimeOwnedScopeOwnerRuntime, Gn as isNoEntError, Gr as generateSpanId, H as prepareScopeRetainedOwnerTask, Hi as runtimeOwnedExecutorMaterialization, I as beginScopeRetainedOwnerDrive, In as retainedExecutorSeamKey, J as scopeRetainedOwnerRestorePoint, K as scopeRetainedOwnerPriorSpend, Kn as prepareJsonlAppend, L as bindScopeRetainedOwnerEnvironmentId, M as SeatChain, Mt as createExecutor, N as SeatChainExhaustedError, O as recordScopeOwnerPause, Or as readHarnessTranscript, Ot as bindReusableExecutorExecutionId, P as authoredSeatStages, Pi as inheritRuntimeOwnedExecutorAttestation, Pt as snapshotExecutorConfig, Qn as parseWorkerToolTraceArtifact, R as bindScopeRetainedOwnerProvider, Ri as providerAttemptEvidence, Rt as createRouterTranscript, St as createContinuationKeeper, T as meterRuntimeOwnedProviderAttempt, Ti as renderUnsupported, U as reconcileScopeRetainedOwnerEnvironment, Ui as runtimeOwnedExecutorProviderEvidence, Ur as createOtelExporter, V as prepareScopeRetainedOwnerSeatSwitch, Vi as runtimeOwnedExecutorExecutionBinding, W as scopeRetainedOwnerContext, Wi as runtimeOwnedPendingExecutorMaterialization, X as scopeRetainedOwnerTurnEnded, Y as scopeRetainedOwnerResult, Yr as toOtelAttributes, Yt as createInbox, Zi as detachedSnapshot, _ as isDriverSpec, _i as defineProfileMaterializationContract, _t as CheckUnavailableError, ar as meterUsageEvent, b as assertRecursiveReservationPolicy, bi as promptControlProfileMaterialization, bt as bestComposite, c as runTree, cr as spendFromUsageTotals, dr as errMessage, er as executorFailure, f as runDriverWithRetry, g as driverExecutorFactory, gi as controlProfileMaterialization, h as driverChild, hi as assertProfileMaterialization, ht as CONTINUATIONS_DIR, i as bestDelivered, in as isLiveNodeStatus, ji as attestRuntimeOwnedScopeOwner, jr as contentAddress, k as restoreScopeOwnerAcceptedExecution, ki as worktreeCliProfileMaterialization, kn as resolveAgentEnvironmentProvider, kt as captureReusableExecutorConfig, lr as bridgeRuntimeAttachmentsKey, n as createRootHandle, nt as coordinationProfileToolPrefix, on as bridgeAdmissionRefusal, or as newUsageTotals, p as summarizeDriverAttempts, pt as gateOnDeliverable, q as scopeRetainedOwnerResourceReader, qn as readCommittedJsonLines, qt as createActivityLog, r as createSupervisor, rr as assertValidBudget, rt as providerVisibleProfile, s as runFinalizer, sn as bridgeModelRouteRefusal, tt as coordinationMcpAlias, u as HarnessTurnFailedError, ur as bridgeStopSignalKey, vi as fullProfileMaterialization, vt as admitContinuationPolicy, w as meterRuntimeOwnedAccounting, wr as runAbortable, x as beginScopeOwnerAttempt, xi as promptModelProfileMaterialization, xr as RunCancellationReason, xt as checkVerdictOf, yi as profileMaterializationAxes$1, z as consumeScopeRetainedOwnerResult, zi as recordRuntimeOwnedDriveHarnessProviderEvidence } from "./supervisor-Dz4XXtK1.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { G as errorMessage, St as teardownSurfaces, Y as isAsyncIterable$1, at as unmeteredSpend, dt as resourceTelemetry, ft as withBudgetResources, ht as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, lt as addResourceSpend, ot as withTimeout, st as zeroSpend, tt as sleep, xt as teardownExecutor, z as addSpend } from "./workspace-streams-ILw0eWZ0.js";
+import { G as errorMessage, St as teardownSurfaces, Y as isAsyncIterable$1, at as unmeteredSpend, dt as resourceTelemetry, ft as withBudgetResources, ht as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, lt as addResourceSpend, ot as withTimeout, st as zeroSpend, tt as sleep, xt as teardownExecutor, z as addSpend } from "./workspace-streams-DaQceg2p.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-DydyWTQg.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { C as createInMemoryRunContext, D as applyRunCancellation, M as coordinationVerbNames, O as watchRunCancellation, P as createCoordinationToolsForManager, S as createFileRunContext, c as resolveWakePolicy, f as createProgressTracker, h as progressStop, m as plateau, n as createSteerAcknowledger, o as composeWakeInput, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as withRunContext } from "./coordination-driver-yj9HPXef.js";
+import { C as createInMemoryRunContext, D as applyRunCancellation, M as coordinationVerbNames, O as watchRunCancellation, P as createCoordinationToolsForManager, S as createFileRunContext, c as resolveWakePolicy, f as createProgressTracker, h as progressStop, m as plateau, n as createSteerAcknowledger, o as composeWakeInput, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as withRunContext } from "./coordination-driver-DCQUXZ54.js";
 import { r as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-Dqer2M4_.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-DSCWdbX2.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
@@ -24,153 +24,6 @@ import { withProfileKb } from "@tangle-network/agent-interface/profile-kb";
 *  that holds its response for its whole fence is never cut off at the 60 s harness default. */
 const COORDINATION_CLIENT_TOOL_TIMEOUT_MS = 3e5;
 //#endregion
-//#region src/runtime/supervise/completion-gate.ts
-/**
-*
-* The completion-oracle: **settled ⟺ DELIVERED.**
-*
-* Foreman's one hard lesson (0/18 self-improvement deliverables) — "done" must mean a check
-* PASSED, not the agent's say-so. `gateOnDeliverable` wraps an `Executor` so its settlement
-* is `valid` ONLY when the deliverable check passes. The child still RUNS and settles (its
-* spend is conserved into the pool either way), but a child that ran WITHOUT delivering
-* settles `valid:false` — so a keep-best driver never counts it as done, and a gate never
-* inflates with self-judged wins.
-*
-* Dual-purpose by construction:
-*  - product: the agent fleet only advances on real, checked deliverables.
-*  - proof: the gate's `valid` is the honest settle — equal-k comparisons can't be gamed by an
-*    arm that "ran" without producing the artifact.
-*
-* The check is a DEPLOYABLE oracle — a test command, a state verifier, the commit0 judge —
-* read off the child's output, never the model judging itself. A throwing check is
-* fail-closed (not delivered), never a crash.
-*
-* @experimental
-*/
-/**
-* Wrap an `Executor` so its settlement `valid` reflects the deliverable check, not the
-* inner verdict. Handles both `execute` shapes (one-shot `Promise<ExecutorResult>` and
-* streaming `AsyncIterable<UsageEvent>` + `resultArtifact()`); the check runs once the inner
-* executor has produced its output. The inner `score` is preserved; only `valid` is gated.
-*/
-function gateOnDeliverable(inner, deliverable) {
-	let gated;
-	const check = async (out, baseScore) => {
-		let delivered;
-		try {
-			delivered = checkVerdictOf(await deliverable.check(out)).pass;
-		} catch {
-			delivered = false;
-		}
-		return {
-			valid: delivered,
-			score: baseScore ?? (delivered ? 1 : 0)
-		};
-	};
-	/**
-	* Ask the delivery question once, from whatever the inner executor managed to produce.
-	*
-	* Fail-closed on the artifact being unavailable: an executor that never produced one delivered
-	* nothing, and leaving `gated` unset keeps the existing invalid-by-default reading.
-	*/
-	const settleVerdict = async () => {
-		let art;
-		try {
-			art = inner.resultArtifact();
-		} catch {
-			return;
-		}
-		gated = await check(art.out, art.verdict?.score);
-	};
-	return inheritRuntimeOwnedExecutorAttestation(inner, {
-		runtime: inner.runtime,
-		...inner.budgetExempt !== void 0 ? { budgetExempt: inner.budgetExempt } : {},
-		...inner.deliver ? { deliver: (m) => inner.deliver?.(m) } : {},
-		...inner.progress ? { progress: () => inner.progress?.() } : {},
-		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
-		...inner.metered ? { metered: () => inner.metered?.() } : {},
-		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
-		...inner.harnessTranscriptSettled ? { harnessTranscriptSettled: () => inner.harnessTranscriptSettled?.() ?? Promise.resolve() } : {},
-		execute(task, signal) {
-			const r = inner.execute(task, signal);
-			if (isAsyncIterable$1(r)) return (async function* () {
-				try {
-					for await (const ev of r) yield ev;
-				} finally {
-					await settleVerdict();
-				}
-			})();
-			return (async () => {
-				let res;
-				try {
-					res = await r;
-				} catch (error) {
-					await settleVerdict();
-					throw error;
-				}
-				gated = await check(res.out, res.verdict?.score);
-				return {
-					...res,
-					verdict: gated
-				};
-			})();
-		},
-		teardown: (grace) => inner.teardown(grace),
-		...teardownSurfaces(inner),
-		resultArtifact() {
-			const art = inner.resultArtifact();
-			return {
-				...art,
-				verdict: gated ?? art.verdict
-			};
-		}
-	});
-}
-/**
-* Transform a Runtime executor's terminal artifact without losing its private
-* profile-materialization attestation or altering its measured spend. This is
-* the composition point for deterministic post-processing and grading; callers
-* must not rebuild an Executor around a model transport merely to change `out`.
-*/
-function mapExecutorResult(inner, map) {
-	let mapped;
-	const settle = async (result, task) => {
-		const transformed = await map(result, task);
-		mapped = {
-			outRef: transformed.outRef,
-			out: transformed.out,
-			...transformed.verdict ? { verdict: transformed.verdict } : {},
-			spent: result.spent
-		};
-		return mapped;
-	};
-	return inheritRuntimeOwnedExecutorAttestation(inner, {
-		runtime: inner.runtime,
-		...inner.budgetExempt !== void 0 ? { budgetExempt: inner.budgetExempt } : {},
-		...inner.deliver ? { deliver: (message) => inner.deliver?.(message) } : {},
-		...inner.progress ? { progress: () => inner.progress?.() } : {},
-		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
-		...inner.accounting ? { accounting: () => inner.accounting?.() } : {},
-		...inner.metered ? { metered: () => inner.metered?.() } : {},
-		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
-		...inner.harnessTranscriptSettled ? { harnessTranscriptSettled: () => inner.harnessTranscriptSettled?.() ?? Promise.resolve() } : {},
-		execute(task, signal) {
-			const execution = inner.execute(task, signal);
-			if (isAsyncIterable$1(execution)) return (async function* () {
-				for await (const event of execution) yield event;
-				await settle(inner.resultArtifact(), task);
-			})();
-			return (async () => settle(await execution, task))();
-		},
-		teardown: (grace) => inner.teardown(grace),
-		...teardownSurfaces(inner),
-		resultArtifact() {
-			if (!mapped) throw new Error("mapExecutorResult: resultArtifact() read before execute()");
-			return mapped;
-		}
-	});
-}
-//#endregion
 //#region src/runtime/supervise/coordination-http.ts
 function coordinationHttpLimits(options) {
 	const positive = (name, value, fallback) => {
@@ -1779,10 +1632,6 @@ function observeWorkerControls(options) {
 * Both arms spawn children through the SAME `makeWorkerAgent` seam and apply the SAME independent
 * deliverable check to direct submissions. Raw driver prose is never quality-accepted.
 */
-/** Runtime-owned coordination is mounted under this MCP alias. */
-const coordinationMcpAlias = "agent-runtime-coordination";
-/** A profile declares Runtime-owned tools with this provider-neutral prefix. */
-const coordinationProfileToolPrefix = `${coordinationMcpAlias.replaceAll("-", "_")}_`;
 const coordinationVerbNameSet$1 = new Set(coordinationVerbNames);
 /** Bare Runtime tool names explicitly enabled by one exact profile. */
 function declaredRuntimeToolNames(profile) {
@@ -1803,25 +1652,6 @@ function assertNoReservedCoordinationMcpAlias(profile, context) {
 	throw new ValidationError(`${context}: profile MCP alias ${JSON.stringify(coordinationMcpAlias)} is reserved for Runtime coordination`);
 }
 /**
-* Project one canonical profile to the profile a provider may receive.
-*
-* The reserved prefix is Runtime-owned in its entirety. A `true` declaration must resolve to a
-* mounted Runtime or product descriptor before execution; a `false` declaration grants nothing.
-* Neither is a provider-native tool. Stripping the whole namespace keeps a false or refused grant
-* from becoming an invented harness capability during strict materialization.
-*/
-function providerVisibleProfile(profile) {
-	if (profile.tools === void 0) return profile;
-	const providerTools = Object.fromEntries(Object.entries(profile.tools).filter(([name]) => !name.startsWith(coordinationProfileToolPrefix)));
-	if (Object.keys(providerTools).length === Object.keys(profile.tools).length) return profile;
-	if (Object.keys(providerTools).length > 0) return {
-		...profile,
-		tools: providerTools
-	};
-	const { tools: _runtimeTools, ...withoutTools } = profile;
-	return withoutTools;
-}
-/**
 * The instruction lines a canonical `resources.instructions` contributes. A plain string and an
 * `inline` resource are their own text; a `github` reference names bytes that live elsewhere and
 * cannot be fetched while building a supervisor synchronously — that fails loud rather than
@@ -2299,6 +2129,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 						continuations: keeper?.entries() ?? []
 					});
 				};
+				let driverFailed = true;
 				try {
 					await runDriverWithRetry({
 						drive: async (attempt, reentry) => {
@@ -2325,6 +2156,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 									...profilePrompt !== void 0 ? { systemPrompt: profilePrompt } : {},
 									task: compose === void 0 ? task : compose(UNPROVEN_CONTINUITY),
 									...compose === void 0 ? {} : { reentry: {
+										reason: reentry,
 										compose,
 										onContinuity: (continuity) => {
 											if (continuity.environment === "replaced") environmentReplacements += 1;
@@ -2405,7 +2237,9 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 							await deps.onDriverAttempt?.(record);
 						}
 					});
+					driverFailed = false;
 				} finally {
+					await driveHarness.closeSeatSegment?.(scope.signal.aborted ? "cancelled" : driverFailed ? "failed" : "completed");
 					settleLoop();
 				}
 				if (!contractDeclared) await mcp.drainResolved();
@@ -3205,12 +3039,12 @@ const CLAUDE_CODE_ONE_HOUR_CACHE = "ENABLE_PROMPT_CACHING_1H";
 /** Run a harness-brained manager through the same executor factory as its children. The manager's
 * full profile is preserved, the live coordination server is added under one reserved alias, and
 * every streamed turn is charged to the manager's scope before it may continue. */
-function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns, rootStream) {
+function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns, rootStream, seatSelection) {
 	if (maxTurns !== void 0 && maxTurns < 0) throw new ValidationError("driveHarnessFromBackend: maxTurns must be >= 0 (0 lifts the turn cap; bounds become the conserved pool + deadline + abort)");
 	const turnCap = maxTurns ?? 0;
-	const boundBackend = bindReusableExecutorExecutionId(managerExecutorConfig(captureReusableExecutorConfig(backend, "driveHarnessFromBackend")), executionId);
-	const baseFactory = createExecutor(boundBackend);
-	const ownerRuntime = boundBackend.backend === "provider" ? boundBackend.runtime ?? resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry).name : "cli";
+	let boundBackend = bindReusableExecutorExecutionId(managerExecutorConfig(captureReusableExecutorConfig(backend, "driveHarnessFromBackend")), executionId);
+	let baseFactory = createExecutor(boundBackend);
+	let ownerRuntime = boundBackend.backend === "provider" ? boundBackend.runtime ?? resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry).name : "cli";
 	let activeExecutor;
 	const driveActivity = createActivityLog();
 	let driveTurns = 0;
@@ -3238,8 +3072,79 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 	};
 	let managerTranscript;
 	let managerArtifact;
+	const committedTranscriptDigest = (artifact) => {
+		if (artifact === void 0) return "Prior committed transcript: no bounded turn content was captured.";
+		const out = artifact.out;
+		if (out === null || typeof out !== "object") return `Prior committed transcript ref: ${artifact.outRef}; no structured turn content was captured.`;
+		const record = out;
+		const events = Array.isArray(record.events) ? record.events : [];
+		const kinds = events.slice(-16).flatMap((event) => {
+			if (event === null || typeof event !== "object") return [];
+			const kind = event.type;
+			return typeof kind === "string" ? [kind.slice(0, 80)] : [];
+		});
+		const content = typeof record.content === "string" ? record.content.slice(-4e3) : "";
+		return [
+			`Prior committed transcript ref: ${artifact.outRef}; ${events.length} events captured.`,
+			...kinds.length > 0 ? [`Recent event kinds: ${kinds.join(", ")}.`] : [],
+			...content ? [`Last captured answer excerpt: ${content}`] : []
+		].join("\n");
+	};
+	let seatChain;
+	let activeSeat;
+	let switchedProviderCheckpointAt;
 	const drive = async ({ profile, authoredProfile, task, scope, coordinationMcpUrl, coordinationMcpHeaders, stopSignal, coordinationTools, reentry }) => {
+		const priorCommittedArtifact = managerArtifact;
 		managerArtifact = void 0;
+		switchedProviderCheckpointAt = void 0;
+		if (authoredSeatStages(authoredProfile) !== void 0) {
+			if (!seatSelection) throw new ValidationError("AgentProfile.seats requires SuperviseOptions.selectSeat");
+			if (activeSeat === void 0) {
+				const accepted = await scopeRetainedOwnerResult(scope);
+				const reported = accepted === void 0 ? void 0 : executorFailure(accepted);
+				if (reported !== void 0) {
+					await restoreScopeOwnerAcceptedExecution(scope);
+					consumeScopeRetainedOwnerResult(scope);
+					managerArtifact = accepted;
+					throw new HarnessTurnFailedError(ownerRuntime, reported);
+				}
+			}
+			const seatJournalRoot = scopeRetainedOwnerJournalRoot(scope) ?? seatSelection.rootId;
+			seatChain ??= new SeatChain(authoredProfile, scope.view.root, seatJournalRoot, seatSelection.journal, seatSelection.select, now, (segment, phase) => seatSelection.onSegment(scope.view.root, segment, phase), async (selection, previous) => {
+				if (previous && previous.seat !== selection.seat) {
+					const sameEnvironment = previous.provider === selection.stage.provider && previous.harness === selection.stage.harness;
+					const checkpoint = await prepareScopeRetainedOwnerSeatSwitch(scope, sameEnvironment ? "same-environment" : "replace-environment");
+					if (!sameEnvironment) switchedProviderCheckpointAt = checkpoint.checkpointAt;
+				}
+			});
+			const usageLimit = reentry?.reason.reason === "upstream-unavailable" && reentry.reason.signal === "subscription-usage-limit";
+			if (activeSeat === void 0 || usageLimit) {
+				let afterRecheck = false;
+				for (;;) try {
+					activeSeat = await seatChain.next(usageLimit && !afterRecheck, afterRecheck);
+					if (afterRecheck) await seatSelection.onPause(scope.view.root, "", "resumed");
+					break;
+				} catch (error) {
+					if (!(error instanceof SeatChainExhaustedError)) throw error;
+					await seatSelection.journal.appendEvent(seatJournalRoot, {
+						kind: "seat-paused",
+						id: scope.view.root,
+						resumeAt: error.resumeAt,
+						seq: Date.parse(error.resumeAt),
+						at: new Date(now()).toISOString()
+					});
+					await seatSelection.onPause(scope.view.root, error.resumeAt, "paused");
+					await sleep(Math.max(1e3, Date.parse(error.resumeAt) - now()), scope.signal, false);
+					afterRecheck = true;
+				}
+				boundBackend = bindReusableExecutorExecutionId(managerExecutorConfig(captureReusableExecutorConfig({
+					...activeSeat.backend,
+					unavailablePause: false
+				}, "selectSeat")), `${executionId}:segment:${activeSeat.segmentIndex}`);
+				baseFactory = createExecutor(boundBackend);
+				ownerRuntime = boundBackend.backend === "provider" ? boundBackend.runtime ?? resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry).name : "cli";
+			}
+		}
 		const retainedOwner = boundBackend.backend === "provider" ? scopeRetainedOwnerContext(scope) : void 0;
 		if (retainedOwner && boundBackend.backend === "provider") {
 			bindScopeRetainedOwnerProvider(scope, resolveAgentEnvironmentProvider(boundBackend.provider, boundBackend.registry), boundBackend.workspaceRetention === void 0 ? void 0 : {
@@ -3255,9 +3160,26 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 		}
 		let driveTask = task;
 		if (reentry !== void 0) {
-			const continuity = await reentryContinuity(boundBackend, scope, retainedOwner !== void 0);
+			const continuity = switchedProviderCheckpointAt === void 0 ? await reentryContinuity(boundBackend, scope, retainedOwner !== void 0) : {
+				session: "new",
+				environment: "replaced",
+				workspace: "restored",
+				checkpointAt: switchedProviderCheckpointAt
+			};
+			if (activeSeat?.previous && activeSeat.previous.seat !== activeSeat.seat && activeSeat.previous.provider === activeSeat.stage.provider && activeSeat.previous.harness === activeSeat.stage.harness && (continuity.session !== "continued" || continuity.environment !== "same")) throw new ValidationError("same-provider seat continuation lost its native environment");
 			reentry.onContinuity?.(continuity);
 			driveTask = reentry.compose(continuity);
+			if (activeSeat?.previous && (activeSeat.previous.provider !== activeSeat.stage.provider || activeSeat.previous.harness !== activeSeat.stage.harness)) driveTask = [
+				String(driveTask),
+				"",
+				"## Harness handoff",
+				"",
+				"This is the same logical agent in a different harness or provider. Read the restored workspace,",
+				"especially its STATE, NEXT, and RESULT pages and knowledge pages, before acting.",
+				"A prior tool call may have executed. Check its committed output or workspace effect",
+				"before repeating it.",
+				committedTranscriptDigest(priorCommittedArtifact)
+			].join("\n");
 		}
 		const originalTask = retainedOwner ? await prepareScopeRetainedOwnerTask(scope, driveTask) : driveTask;
 		const acceptedOwner = retainedOwner ? await scopeRetainedOwnerResult(scope) : void 0;
@@ -3274,8 +3196,13 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 		const canonicalDriverProfile = agentProfileSchema.parse(authoredProfile);
 		assertNoReservedCoordinationMcpAlias(canonicalDriverProfile, "driveHarnessFromBackend");
 		const stableCoordinationTools = detachedSnapshot(coordinationTools, "driveHarnessFromBackend coordination tools");
-		const expectedProviderProfile = providerVisibleProfile(canonicalDriverProfile);
-		const providerDriverProfile = agentProfileSchema.parse(profile);
+		const expectedProviderProfile = providerVisibleProfile(activeSeat ? seatExecutionProfile(canonicalDriverProfile, activeSeat.stage) : canonicalDriverProfile);
+		if (activeSeat) {
+			assertExecutableAgentProfile(expectedProviderProfile, "selected seat");
+			assertBackendProfileMaterialization(expectedProviderProfile, boundBackend, "selected seat");
+			assertBridgeProfileMaterializes(expectedProviderProfile, boundBackend, "selected seat");
+		}
+		const providerDriverProfile = activeSeat ? expectedProviderProfile : agentProfileSchema.parse(profile);
 		if (canonicalAgentProfileDigest(providerDriverProfile) !== canonicalAgentProfileDigest(expectedProviderProfile)) throw new ValidationError("driveHarnessFromBackend: supervisor passed a provider profile that does not match its canonical profile and mounted coordination tools");
 		const spec = {
 			profile: providerDriverProfile,
@@ -3624,7 +3551,10 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 			endDrive();
 		}
 		if (failed) throw failure;
-		if (turnFailure !== void 0) throw turnFailure;
+		if (turnFailure !== void 0) {
+			managerArtifact = terminalArtifact;
+			throw turnFailure;
+		}
 		managerArtifact = terminalArtifact;
 	};
 	drive.resultArtifact = () => managerArtifact;
@@ -3649,6 +3579,9 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 		drive.harnessTranscript = () => managerTranscript ?? activeExecutor?.harnessTranscript?.();
 		drive.harnessTranscriptSettled = () => activeExecutor?.harnessTranscriptSettled?.() ?? Promise.resolve();
 	}
+	drive.closeSeatSegment = async (reason) => {
+		await seatChain?.close(reason);
+	};
 	return attestRuntimeOwnedScopeOwner(drive, ownerRuntime);
 }
 /**
@@ -3759,6 +3692,7 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"authorizeMessage",
 	"authorizeSpawn",
 	"backend",
+	"selectSeat",
 	"blobs",
 	"budget",
 	"childSettleGraceMs",
@@ -3864,6 +3798,7 @@ Object.freeze([...[
 	"resolveDeliverable",
 	"resolveDriveHarness",
 	"resolveSpawnProfile",
+	"selectSeat",
 	"resolveSupervisorTools",
 	"stopRule"
 ]]);
@@ -3898,7 +3833,7 @@ function rootSpawnResourceRoot(backend) {
 }
 function captureSuperviseOptions(opts) {
 	assertSuperviseOptionKeys(opts, "supervise");
-	const { backend, coordination, driverBackend, deliverable, resolveDeliverable, router, compaction, watchWorkers, analysts, makeWorkerAgent, makeLeafAgent, recoverExecutor, resume, resolveSpawnProfile, blobs, journal, runContext, registry, hooks, otel, authorizeSpawn, authorizeMessage, driveHarness, resolveDriveHarness, resolveSupervisorTools, escalateQuestion, onCoordinationEvent, executeExtraTool, stopRule, onProgressStop, onDriverAttempt, continuation, workerRetry, onWorkerRetry, finalizer, now, signal, rootHandle, workerSlots, ...decisionData } = opts;
+	const { backend, selectSeat, coordination, driverBackend, deliverable, resolveDeliverable, router, compaction, watchWorkers, analysts, makeWorkerAgent, makeLeafAgent, recoverExecutor, resume, resolveSpawnProfile, blobs, journal, runContext, registry, hooks, otel, authorizeSpawn, authorizeMessage, driveHarness, resolveDriveHarness, resolveSupervisorTools, escalateQuestion, onCoordinationEvent, executeExtraTool, stopRule, onProgressStop, onDriverAttempt, continuation, workerRetry, onWorkerRetry, finalizer, now, signal, rootHandle, workerSlots, ...decisionData } = opts;
 	assertNoUncapturedExecutableOption(decisionData);
 	const capturedData = detachedSnapshot(decisionData, "supervise options");
 	const capturedCoordination = coordination === void 0 ? void 0 : (() => {
@@ -3958,6 +3893,7 @@ function captureSuperviseOptions(opts) {
 		...capturedData,
 		...capturedCoordination === void 0 ? {} : { coordination: capturedCoordination },
 		...capturedBackend === void 0 ? {} : { backend: capturedBackend },
+		...selectSeat === void 0 ? {} : { selectSeat },
 		...capturedDriverBackend === void 0 ? {} : { driverBackend: capturedDriverBackend },
 		...capturedDeliverable === void 0 ? {} : { deliverable: capturedDeliverable },
 		...resolveDeliverable === void 0 ? {} : { resolveDeliverable },
@@ -4231,6 +4167,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 	const composeSpawnProfile = profileGuidanceComposer(options.profileGuidance);
 	const canonicalProfile = superviseRootProfile(profile, options.profileGuidance);
 	assertExecutableAgentProfile(canonicalProfile, "supervise root");
+	if (authoredSeatStages(canonicalProfile) !== void 0 && options.selectSeat === void 0) throw new ValidationError("supervise: AgentProfile.seats requires selectSeat before execution");
 	const canonicalTask = freezeDetached(task);
 	if (options.makeWorkerAgent && options.authorizeSpawn) throw new ValidationError("supervise: authorizeSpawn cannot be combined with caller-owned makeWorkerAgent; use makeLeafAgent to override leaf execution inside the authorized path, or use backend-derived workers");
 	if (options.makeWorkerAgent && options.makeLeafAgent) throw new ValidationError("supervise: makeWorkerAgent replaces the worker path and makeLeafAgent overrides a leaf inside it; pass one");
@@ -4251,6 +4188,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 	const backendModel = options.backend?.model;
 	const driverBackendModel = options.driverBackend?.model;
 	assertProfileModelsAllowed(canonicalProfile, options.allowedModels);
+	for (const stage of authoredSeatStages(canonicalProfile) ?? []) assertModelAllowed(stage.model, options.allowedModels);
 	assertModelAllowed(typeof backendModel === "string" ? backendModel : void 0, options.allowedModels);
 	assertModelAllowed(typeof driverBackendModel === "string" ? driverBackendModel : void 0, options.allowedModels);
 	const deliverable = resolveNamed("deliverable", "deliverables", options.deliverable, options.registry?.deliverables);
@@ -4293,7 +4231,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 		if (options.inheritSpawnRights === false || options.makeWorkerAgent !== void 0 || !childrenCanSubmit) return composeSpawnProfile;
 		return (authored) => {
 			const composed = composeSpawnProfile ? composeSpawnProfile(authored) : authored;
-			return canLead(composed) ? withInheritedSpawnRights(parent, composed) : composed;
+			return composed.seats || !canLead(composed) ? composed : withInheritedSpawnRights(parent, composed);
 		};
 	};
 	const harnessClaims = /* @__PURE__ */ new WeakMap();
@@ -4323,7 +4261,41 @@ function superviseInternal(profile, task, opts, testBrain) {
 		return managerBackend && automaticDriverBackendSupported(managerBackend, options.coordination) ? driveHarnessFromBackend(managerBackend, externalExecutionId("supervised-manager", {
 			runNamespace,
 			ownerId: context.ownerId
-		}), options.now ?? Date.now, options.maxTurns, context.depth === 0 ? rootStreamSink : void 0) : void 0;
+		}), options.now ?? Date.now, options.maxTurns, context.depth === 0 ? rootStreamSink : void 0, options.selectSeat === void 0 ? void 0 : {
+			select: options.selectSeat,
+			journal,
+			rootId: runId,
+			onSegment: async (nodeId, segment, phase) => {
+				await options.hooks?.onEvent?.({
+					id: `${nodeId}:seat:${segment.startedAt}:${phase}`,
+					runId,
+					target: "agent.seat",
+					phase: "event",
+					timestamp: options.now?.() ?? Date.now(),
+					parentId: nodeId,
+					payload: {
+						nodeId,
+						phase,
+						segment
+					}
+				}, {});
+			},
+			onPause: async (nodeId, resumeAt, phase) => {
+				await options.hooks?.onEvent?.({
+					id: `${nodeId}:seat:${phase}:${resumeAt || (options.now?.() ?? Date.now())}`,
+					runId,
+					target: "agent.seat",
+					phase: "event",
+					timestamp: options.now?.() ?? Date.now(),
+					parentId: nodeId,
+					payload: {
+						nodeId,
+						phase,
+						...resumeAt ? { resumeAt } : {}
+					}
+				}, {});
+			}
+		}) : void 0;
 	};
 	const rootDriveHarness = isExternalSupervisor(canonicalProfile) ? driveHarnessForOwner(freezeDetached({
 		runId,
@@ -4393,7 +4365,8 @@ function superviseInternal(profile, task, opts, testBrain) {
 				assertProfileModelsAllowed(authorized, options.allowedModels);
 				const selectedDeliverable = options.resolveDeliverable?.(postAuthorizationContext);
 				const childDeliverable = selectedDeliverable === void 0 ? deliverable : selectedDeliverable === null ? void 0 : captureDeliverable(selectedDeliverable, `supervise deliverable for ${JSON.stringify(spawnContext.label)}`);
-				if (!(declaredRuntimeToolNames(authorized).length > 0)) {
+				const seatManagedLeaf = authoredSeatStages(authorized) !== void 0 && declaredRuntimeToolNames(authorized).length === 0 && isExternalSupervisor(authorized);
+				if (!(declaredRuntimeToolNames(authorized).length > 0 || seatManagedLeaf)) {
 					if (childDeliverable !== deliverable && !options.backend) throw new ValidationError("supervise: resolveDeliverable selected a per-spawn deliverable but there is no backend to derive that leaf from; makeLeafAgent owns its own completion check");
 					return (childDeliverable === deliverable ? makeLeaf : withRetry(workerFromBackend(options.backend, childDeliverable)))(authorized, Object.freeze({
 						...authorizedContext,
@@ -4464,11 +4437,11 @@ function superviseInternal(profile, task, opts, testBrain) {
 					...options.compaction ? { compaction: options.compaction } : {},
 					...options.driverRetry ? { driverRetry: options.driverRetry } : {},
 					...options.onDriverAttempt ? { onDriverAttempt: options.onDriverAttempt } : {},
-					...childDeliverable ? { deliverable: childDeliverable } : {},
-					...childDeliverable ? { onAcceptedSubmission: () => {
+					...childDeliverable && !seatManagedLeaf ? { deliverable: childDeliverable } : {},
+					...childDeliverable && !seatManagedLeaf ? { onAcceptedSubmission: () => {
 						acceptedSubmission = true;
 					} } : {},
-					...childDeliverable && options.continuation && isExternalSupervisor(authorized) ? {
+					...childDeliverable && !seatManagedLeaf && options.continuation && isExternalSupervisor(authorized) ? {
 						continuation: options.continuation,
 						...options.runDir === void 0 ? {} : { continuationDir: resolve(options.runDir, CONTINUATIONS_DIR, "managers", encodeURIComponent(ownerId)) }
 					} : {},
@@ -4483,7 +4456,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					},
 					...options.steerDir === void 0 ? {} : { steerDir: resolve(options.steerDir) },
 					...options.runDir === void 0 && options.steerDir === void 0 ? {} : { controlScope: "subtree" }
-				}), journal, childExecution.ref, () => acceptedSubmission, recoveryFactories.get(childFactory), () => unassessedOutput);
+				}), journal, childExecution.ref, () => acceptedSubmission, recoveryFactories.get(childFactory), () => unassessedOutput, seatManagedLeaf ? childDeliverable : void 0);
 			};
 			if (options.makeLeafAgent === void 0 && options.backend?.backend === "provider" && !options.backend.steering) {
 				const factory = registerRetainedExecutorPreparation(createExecutor(options.backend), ({ spawned, profile, task }) => {
@@ -4712,6 +4685,6 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 	return evidence ?? rootProviderModelEvidence([]);
 }
 //#endregion
-export { gateOnDeliverable as C, serveCoordinationMcp as S, readRootStream as _, superviseWithTestBrain as a, composeReentryTask as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, coordinationProfileToolPrefix as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgent as m, profileGuidanceComposer as n, workerFromBackend as o, resolveSupervisorProfile as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, readRootStreamReceipt as v, mapExecutorResult as w, createSupervisorSpanRecorder as x, UNPROVEN_CONTINUITY as y };
+export { readRootStreamReceipt as _, superviseWithTestBrain as a, createSupervisorSpanRecorder as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, resolveSupervisorProfile as f, readRootStream as g, ROOT_STREAM_FILE as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgentWithTestBrain as m, profileGuidanceComposer as n, workerFromBackend as o, supervisorAgent as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, UNPROVEN_CONTINUITY as v, serveCoordinationMcp as x, composeReentryTask as y };
 
-//# sourceMappingURL=supervise-DllOHM4M.js.map
+//# sourceMappingURL=supervise-D1qqMFAu.js.map