@tangle-network/agent-runtime 0.316.0 → 0.318.0

package/dist/{supervisor-CbFyf48U.js → supervisor-BXEL_Fxe.js}

@@ -1,7 +1,7 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { $ as randomSuffix, A as verifiedArtifactChunks, B as addSpend, Ct as isDeadlineAbortReason, Et as teardownSurfaces, G as deleteBoxSafe, H as chargedTokens, J as hasCompleteCacheBreakdown, K as errorMessage, O as verifyWorkspaceSnapshotArtifacts, P as deepFreezeCandidate, Q as promptCacheTokenClasses, St as checkInIdleMs, Tt as teardownExecutor, U as cloneSpend, V as addTokenUsage, W as cloneTokenUsage, X as isAsyncIterable$1, Z as mapWithConcurrency, a as verifyAgentCandidateWorkspaceArtifacts, at as throwIfAborted, bt as armDeadlineTimer, ct as zeroSpend, dt as assertResources, et as randomUuid, ft as resourceTelemetry, ht as CHILD_DEADLINE_REASON, i as readAgentCandidateWorkspaceArtifactFiles, it as throwAbort, lt as zeroTokenUsage, mt as ACCEPTED_RESULT_GRACE_MS, nt as sleep, o as verifyAgentCandidateWorkspaceTree, ot as unmeteredSpend, pt as withBudgetResources, q as fnv1a32Hex, rt as stringifySafe, st as withTimeout, tt as roundBoxMinutes, u as verifyAgentCandidateWorkspaceArchive, ut as addResourceSpend, wt as singleFlightTeardown, xt as boundedChildDeadlineAt, yt as ROOT_DEADLINE_REASON } from "./workspace-streams-DkijayqX.js";
 import { runTaskQueue } from "./task-queue.js";
-import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-DhvyZ8-O.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-B-rOb8Nj.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
@@ -4650,10 +4650,10 @@ function createOtelExporter(config) {
 	if (!resolvedEndpoint) return void 0;
 	const url = `${resolvedEndpoint.replace(/\/+$/, "")}/v1/traces`;
 	const headers = config?.headers ?? parseHeadersFromEnv();
-	const batchSize = positiveInteger(config?.batchSize, 64);
+	const batchSize = positiveInteger$1(config?.batchSize, 64);
 	const flushIntervalMs = config?.flushIntervalMs ?? 5e3;
-	const maxQueueSize = Math.max(positiveInteger(config?.maxQueueSize, 2048), batchSize);
-	const timeoutMs = positiveInteger(config?.timeoutMs, 1e4);
+	const maxQueueSize = Math.max(positiveInteger$1(config?.maxQueueSize, 2048), batchSize);
+	const timeoutMs = positiveInteger$1(config?.timeoutMs, 1e4);
 	const resource = { attributes: toOtelAttributes({
 		"service.name": config?.serviceName ?? "agent-runtime",
 		...config?.resourceAttributes ?? {}
@@ -4802,7 +4802,7 @@ function describeFetchError(error) {
 	const code = cause && typeof cause === "object" && "code" in cause && typeof cause.code === "string" ? cause.code : void 0;
 	return code ? `${error.message} (${code})` : error.message;
 }
-function positiveInteger(value, fallback) {
+function positiveInteger$1(value, fallback) {
 	return value !== void 0 && Number.isSafeInteger(value) && value > 0 ? value : fallback;
 }
 /**
@@ -5866,6 +5866,270 @@ function priceTokens(work) {
 	return Math.max(0, work.inputTokens - cacheRead - cacheWrite) * price.input + cacheRead * (price.cachedInput ?? price.input) + cacheWrite * (price.cacheWrite ?? price.input) + work.outputTokens * price.output;
 }
 //#endregion
+//#region src/runtime/code-mode.ts
+function positiveInteger(value, fallback, name) {
+	const result = value ?? fallback;
+	if (!Number.isSafeInteger(result) || result < 1) throw new RangeError(`code mode: ${name} must be a positive safe integer`);
+	return result;
+}
+/** Render the same tool descriptors that are executed, including their result schemas. */
+async function describeCodeModeTools(tools, query) {
+	const needle = query?.trim().toLowerCase();
+	const selected = tools.filter((tool) => !needle || tool.name.toLowerCase().includes(needle) || tool.description?.toLowerCase().includes(needle));
+	const { renderDeclarations } = await import("@earendil-works/pi-codemode");
+	return renderDeclarations({ tools: selected.map((tool) => ({
+		name: tool.name,
+		description: tool.description,
+		inputSchema: tool.inputSchema,
+		outputSchema: tool.outputSchema,
+		execute: () => {
+			throw new Error("Declaration-only tool");
+		}
+	})) });
+}
+/**
+* Execute a JS async-function body against Runtime capabilities. The upstream
+* QuickJS/WASM worker is the boundary; there is no node:vm or unsafe fallback.
+* Every invocation has a fresh VM. Only successful storeWrites may be committed
+* by the caller. External tool effects are neither transactional nor retried.
+*/
+async function runCodeMode(code, options) {
+	if (typeof code !== "string" || !code.trim()) throw new TypeError("code mode: source is required");
+	options.signal?.throwIfAborted();
+	if (!options.callId.trim()) throw new TypeError("code mode: callId is required");
+	const concurrency = positiveInteger(options.concurrency, 4, "concurrency");
+	const maxCalls = positiveInteger(options.maxCalls, 1024, "maxCalls");
+	const memoryLimitBytes = positiveInteger(options.memoryLimitBytes, 64 * 1024 * 1024, "memoryLimitBytes");
+	const timeoutMs = options.timeoutMs === Infinity ? Infinity : positiveInteger(options.timeoutMs, 3e5, "timeoutMs");
+	if (timeoutMs !== Infinity && timeoutMs > 2147483647) throw new RangeError("code mode: timeoutMs must be at most 2147483647 or Infinity");
+	const { CodemodeSandbox, toCodemodeIdentifier } = await import("@earendil-works/pi-codemode");
+	const names = /* @__PURE__ */ new Set();
+	const identifiers = /* @__PURE__ */ new Set();
+	for (const tool of options.tools) {
+		if (!tool.name || names.has(tool.name)) throw new TypeError(`code mode: duplicate or empty tool ${tool.name}`);
+		names.add(tool.name);
+		const identifier = toCodemodeIdentifier(tool.name);
+		if (identifiers.has(identifier)) throw new TypeError(`code mode: ambiguous tool name ${tool.name} normalizes to ${identifier}`);
+		identifiers.add(identifier);
+	}
+	const callLimit = new AbortController();
+	const executionSignal = options.signal ? AbortSignal.any([options.signal, callLimit.signal]) : callLimit.signal;
+	const queue = new CallQueue(concurrency);
+	let ordinal = 0;
+	const sandbox = new CodemodeSandbox({
+		tools: options.tools.map((tool) => ({
+			name: tool.name,
+			description: tool.description,
+			inputSchema: tool.inputSchema,
+			outputSchema: tool.outputSchema,
+			execute: async (args, { signal }) => {
+				signal.throwIfAborted();
+				const index = ++ordinal;
+				if (index > maxCalls) {
+					const error = /* @__PURE__ */ new Error(`code mode: call limit ${maxCalls} exceeded`);
+					callLimit.abort(error);
+					throw error;
+				}
+				const release = await queue.acquire(signal);
+				try {
+					signal.throwIfAborted();
+					const value = await tool.execute(args, Object.freeze({
+						signal,
+						parentCallId: options.callId,
+						callId: `${options.callId}/tool/${index}`
+					}));
+					signal.throwIfAborted();
+					return value;
+				} finally {
+					release();
+				}
+			}
+		})),
+		timeoutMs,
+		memoryLimitBytes,
+		...options.wasm === void 0 ? {} : { wasm: options.wasm },
+		...options.workerUrl === void 0 ? {} : { workerUrl: options.workerUrl }
+	});
+	try {
+		return await sandbox.execute(code, {
+			signal: executionSignal,
+			store: options.store
+		});
+	} finally {
+		await sandbox.close();
+	}
+}
+/** A per-invocation FIFO, not another scheduler. Aborted waiters never dispatch. */
+var CallQueue = class {
+	active = 0;
+	waiting = [];
+	concurrency;
+	constructor(concurrency) {
+		this.concurrency = concurrency;
+	}
+	acquire(signal) {
+		signal.throwIfAborted();
+		if (this.active < this.concurrency) {
+			this.active++;
+			return Promise.resolve(this.release());
+		}
+		return new Promise((resolve, reject) => {
+			const waiter = {
+				signal,
+				resolve,
+				reject,
+				abort: () => {}
+			};
+			waiter.abort = () => {
+				const index = this.waiting.indexOf(waiter);
+				if (index !== -1) this.waiting.splice(index, 1);
+				reject(signal.reason);
+			};
+			signal.addEventListener("abort", waiter.abort, { once: true });
+			this.waiting.push(waiter);
+			if (signal.aborted) waiter.abort();
+		});
+	}
+	release() {
+		let released = false;
+		return () => {
+			if (released) return;
+			released = true;
+			this.active--;
+			for (;;) {
+				const next = this.waiting.shift();
+				if (!next) return;
+				next.signal.removeEventListener("abort", next.abort);
+				if (next.signal.aborted) {
+					next.reject(next.signal.reason);
+					continue;
+				}
+				this.active++;
+				next.resolve(this.release());
+				return;
+			}
+		};
+	}
+};
+/**
+* Present an existing authorized tool set as code mode. This is used by Runtime's
+* existing loops; it does not execute a model, create an agent, or grant authority.
+* One toolset belongs to one conversation. Concurrent programs are refused to
+* avoid silently losing store writes; concurrency within a program is queued.
+*/
+function createCodeModeTools(granted, options = {}) {
+	const reserved = /* @__PURE__ */ new Set(["codemode", "tool_search"]);
+	const names = /* @__PURE__ */ new Set();
+	for (const tool of granted) {
+		if (reserved.has(tool.name)) throw new TypeError(`code mode: ${tool.name} is already present; use the existing code mode, do not nest it`);
+		if (!tool.name || names.has(tool.name)) throw new TypeError(`code mode: duplicate or empty tool ${tool.name}`);
+		names.add(tool.name);
+	}
+	const direct = new Set(options.directTools ?? []);
+	for (const name of direct) if (!names.has(name)) throw new TypeError(`code mode: direct tool ${name} is not granted`);
+	const copied = granted.map((tool) => Object.freeze({
+		...tool,
+		...tool.inputSchema === void 0 ? {} : { inputSchema: structuredClone(tool.inputSchema) },
+		...tool.outputSchema === void 0 ? {} : { outputSchema: structuredClone(tool.outputSchema) }
+	}));
+	const callable = Object.freeze(copied.filter((tool) => !direct.has(tool.name)));
+	let store = structuredClone(options.store ?? {});
+	let running = false;
+	const tools = [
+		{
+			name: "tool_search",
+			description: "Discover the tools available inside codemode. Returns generated TypeScript input and output declarations. Use an optional name/description substring query, or omit it for all tools.",
+			inputSchema: {
+				type: "object",
+				properties: { query: { type: "string" } },
+				additionalProperties: false
+			},
+			execute: async (raw) => {
+				const args = codeModeArguments(raw);
+				if (args.query !== void 0 && typeof args.query !== "string") throw new TypeError("query must be a string");
+				return describeCodeModeTools(callable, args.query);
+			}
+		},
+		{
+			name: "codemode",
+			description: "Run a JavaScript async-function body to compose the granted tools. Call tools.name(args) or tools[\"original-name\"](args); inspect ALL_TOOLS or tool_search to discover them. Await tool calls, use loops and Promise.all, keep intermediate data in variables, and return only the result needed for the next decision. text(value) prints, image({type:\"image\",data,mimeType}) emits an image. store(key,value) and load(key) retain JSON across successful calls in this conversation. No imports, process, filesystem, network, or timers. Side effects are not rolled back or automatically retried.",
+			inputSchema: {
+				type: "object",
+				properties: { code: { type: "string" } },
+				required: ["code"],
+				additionalProperties: false
+			},
+			execute: async (raw, context) => {
+				const args = codeModeArguments(raw);
+				if (typeof args.code !== "string") throw new TypeError("codemode requires {code: string}");
+				if (running) throw new Error("code mode: another program is still running in this conversation");
+				running = true;
+				try {
+					const result = await runCodeMode(args.code, {
+						...options,
+						tools: callable,
+						signal: context.signal,
+						callId: context.callId,
+						store
+					});
+					if (result.ok) {
+						const next = Object.assign(Object.create(null), store, result.storeWrites.set);
+						for (const key of result.storeWrites.delete) delete next[key];
+						store = structuredClone(next);
+					}
+					return result.ok ? {
+						ok: true,
+						value: result.value ?? null,
+						output: result.output
+					} : {
+						ok: false,
+						error: result.error,
+						output: result.output
+					};
+				} finally {
+					running = false;
+				}
+			}
+		},
+		...copied.filter((tool) => direct.has(tool.name))
+	];
+	return {
+		tools: Object.freeze(tools),
+		snapshotStore: () => structuredClone(store)
+	};
+}
+/** Model tools have object arguments. Validation against a tool's schema remains host-owned. */
+function codeModeArguments(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError("tool arguments must be a JSON object");
+	return value;
+}
+/** Preserve legacy text tool results; structured tool handlers keep their actual JSON values. */
+function toolResultText(value) {
+	return typeof value === "string" ? value : JSON.stringify(value) ?? "null";
+}
+/**
+* OpenAI-compatible output projection. All tool replies must precede the optional
+* user image message, so the loop appends returned images after the tool batch.
+* Image bytes never become a stringified pseudo-image in the tool's text.
+*/
+function codeModeModelOutput(value) {
+	const reply = value;
+	return {
+		text: JSON.stringify({
+			ok: reply.ok,
+			...reply.ok ? { value: reply.value } : { error: reply.error },
+			output: reply.output.map((item) => item.type === "text" ? item : {
+				type: "image",
+				mimeType: item.mimeType
+			})
+		}),
+		images: reply.output.flatMap((item) => item.type === "image" ? [{
+			type: "image_url",
+			image_url: { url: `data:${item.mimeType};base64,${item.data}` }
+		}] : [])
+	};
+}
+//#endregion
 //#region src/durable/content-address.ts
 /** Stable content address shared by result and trace artifacts. */
 function contentAddress(artifact) {
@@ -7136,26 +7400,28 @@ async function captureProviderCheckpointWorkspace(port, prepare, marker, parent)
 		clearDeadline();
 	}
 }
-/** Verify a running workspace copy before treating it as retained evidence. */
-async function captureProviderLiveWorkspace(port, context) {
+/** Verify a running workspace copy before treating it as retained evidence. `parent` stops the
+*  copy, in the queue or under way, when its turn ends. */
+async function captureProviderLiveWorkspace(port, context, parent) {
 	assertProviderWorkspaceRetentionPort(port, "provider workspace retention");
 	if (port.captureLive === void 0) throw new ValidationError$1("provider workspace retention: the port has no captureLive");
 	const timeoutMs = port.liveTimeoutMs ?? port.timeoutMs;
 	const controller = new AbortController();
 	const clearDeadline = armDeadlineTimer(timeoutMs, () => controller.abort(/* @__PURE__ */ new Error(`live workspace capture timed out after ${timeoutMs}ms`)), true);
+	const signal = parent === void 0 ? controller.signal : AbortSignal.any([controller.signal, parent]);
 	try {
-		return await runAbortable(() => withCaptureSlot(checkpointSlots(port), controller.signal, async () => {
+		return await runAbortable(() => withCaptureSlot(checkpointSlots(port), signal, async () => {
 			const tree = detachedSnapshot(await port.captureLive({
 				...context,
-				signal: controller.signal
+				signal
 			}), "live workspace capture tree");
 			if (tree?.kind !== "agent-candidate-workspace-tree") throw new Error("live workspace capture returned no workspace tree");
 			if ((await verifyAgentCandidateWorkspaceTree(tree, port.artifacts, {
 				...port.limits === void 0 ? {} : { limits: port.limits },
-				signal: controller.signal
+				signal
 			})).files.length !== tree.files) throw new Error("live workspace capture tree misstates its file count");
 			return tree;
-		}), controller.signal, `live workspace capture timed out after ${timeoutMs}ms`);
+		}), signal, `live workspace capture timed out after ${timeoutMs}ms`);
 	} finally {
 		clearDeadline();
 	}
@@ -11578,13 +11844,18 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	const livePort = options.workspaceRetention?.captureLive === void 0 ? void 0 : options.workspaceRetention;
 	let liveInFlight;
 	let liveTimer;
+	let liveStop;
 	const stopLiveMirror = () => {
 		if (liveTimer !== void 0) clearTimeout(liveTimer);
 		liveTimer = void 0;
+		liveStop?.abort(/* @__PURE__ */ new Error("live workspace capture stopped: its turn ended"));
+		liveStop = void 0;
 	};
 	const startLiveMirror = (next) => {
 		if (livePort?.liveIntervalMs === void 0) return;
 		stopLiveMirror();
+		const stop = new AbortController();
+		liveStop = stop;
 		const schedule = () => {
 			liveTimer = setTimeout(() => {
 				if (liveInFlight === void 0 && workspaceCapturePromise === void 0) {
@@ -11596,7 +11867,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						providerSessionId,
 						nativeSessionId: null,
 						profile: createProfile
-					}).then(() => void 0, () => void 0).finally(() => {
+					}, stop.signal).then(() => void 0, () => void 0).finally(() => {
 						if (liveInFlight === tracked) liveInFlight = void 0;
 					});
 					liveInFlight = tracked;
@@ -11675,6 +11946,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		schedule();
 	};
 	const finishNativeMirror = async (next, phase) => {
+		stopLiveMirror();
 		await stopNativeMirror();
 		if (workspaceSnapshot !== void 0 && !nativeHoldsTranscript) return;
 		await captureNative(next, phase, void 0, harnessStopped);
@@ -13475,15 +13747,57 @@ async function runBrainLoop(opts) {
 	let tokensKnown = true;
 	let completedTurns = 0;
 	const toolTrace = [];
+	const signal = opts.signal ?? new AbortController().signal;
+	const codeMode = opts.codeMode ? createCodeModeTools(opts.tools.map(({ function: tool }) => ({
+		name: tool.name,
+		description: tool.description,
+		inputSchema: tool.parameters,
+		outputSchema: tool.outputSchema,
+		execute: async (raw, context) => {
+			signal.throwIfAborted();
+			if (opts.hooks?.stopBefore?.(completedTurns + 1)) throw new Error("code mode: Runtime execution has stopped");
+			const args = codeModeArguments(raw);
+			let result;
+			try {
+				result = await opts.execute(tool.name, args, context);
+			} catch (error) {
+				if (context.callId !== context.parentCallId) toolTrace.push({
+					name: tool.name,
+					args: JSON.stringify(args),
+					result: `error: ${error instanceof Error ? error.message : String(error)}`
+				});
+				throw error;
+			}
+			if (context.callId !== context.parentCallId) toolTrace.push({
+				name: tool.name,
+				args: JSON.stringify(args),
+				result: toolResultText(result)
+			});
+			return result;
+		}
+	})), opts.codeMode === true ? {} : opts.codeMode) : void 0;
+	const modelTools = codeMode ? codeMode.tools.map((tool) => ({
+		type: "function",
+		function: {
+			name: tool.name,
+			description: tool.description,
+			parameters: tool.inputSchema
+		}
+	})) : opts.tools;
+	const codeByName = new Map(codeMode?.tools.map((tool) => [tool.name, tool]) ?? []);
+	const retainedCodeMode = () => codeMode ? {
+		codeModeStore: codeMode.snapshotStore(),
+		modelToolNames: modelTools.map((tool) => tool.function.name)
+	} : {};
 	for (let turn = 1; maxTurns === 0 || turn <= maxTurns; turn += 1) {
-		if (opts.hooks?.stopBefore?.(turn)) break;
+		if (signal.aborted || opts.hooks?.stopBefore?.(turn)) break;
 		await opts.hooks?.beforeTurn?.(turn, messages);
-		if (opts.hooks?.stopBefore?.(turn)) break;
+		if (signal.aborted || opts.hooks?.stopBefore?.(turn)) break;
 		if (opts.compaction) {
 			await maybeCompact(messages, opts.compaction, turn);
-			if (opts.hooks?.stopBefore?.(turn)) break;
+			if (signal.aborted || opts.hooks?.stopBefore?.(turn)) break;
 		}
-		const r = await opts.chat(messages, opts.tools);
+		const r = await opts.chat(messages, modelTools);
 		completedTurns = turn;
 		if (r.usage) {
 			usage.input += r.usage.input;
@@ -13511,7 +13825,8 @@ async function runBrainLoop(opts) {
 				toolTrace,
 				usage,
 				...tokensKnown ? {} : { tokensKnown: false },
-				messages
+				messages,
+				...retainedCodeMode()
 			};
 		}
 		messages.push({
@@ -13526,6 +13841,7 @@ async function runBrainLoop(opts) {
 				}
 			}))
 		});
+		const images = [];
 		for (const tc of r.toolCalls) {
 			toolCalls += 1;
 			let args = {};
@@ -13539,7 +13855,32 @@ async function runBrainLoop(opts) {
 				});
 				continue;
 			}
-			const out = await opts.execute(tc.name, args);
+			signal.throwIfAborted();
+			let result;
+			let dispatchSucceeded = true;
+			if (codeMode) {
+				const tool = codeByName.get(tc.name);
+				if (!tool) {
+					dispatchSucceeded = false;
+					result = `error: code mode: ${tc.name} is not in the model-visible tool set`;
+				} else try {
+					result = await tool.execute(args, {
+						signal,
+						callId: tc.id,
+						parentCallId: tc.id
+					});
+				} catch (error) {
+					dispatchSucceeded = false;
+					result = `error: ${error instanceof Error ? error.message : String(error)}`;
+				}
+			} else result = await opts.execute(tc.name, args, {
+				signal,
+				callId: tc.id,
+				parentCallId: tc.id
+			});
+			const projected = dispatchSucceeded && codeMode && tc.name === "codemode" ? codeModeModelOutput(result) : void 0;
+			if (projected) images.push(...projected.images);
+			const out = projected?.text ?? toolResultText(result);
 			messages.push({
 				role: "tool",
 				tool_call_id: tc.id,
@@ -13551,6 +13892,13 @@ async function runBrainLoop(opts) {
 				result: out
 			});
 		}
+		if (images.length) messages.push({
+			role: "user",
+			content: [{
+				type: "text",
+				text: "Images emitted by codemode:"
+			}, ...images]
+		});
 	}
 	return {
 		final: lastText,
@@ -13559,7 +13907,8 @@ async function runBrainLoop(opts) {
 		toolTrace,
 		usage,
 		...tokensKnown ? {} : { tokensKnown: false },
-		messages
+		messages,
+		...retainedCodeMode()
 	};
 }
 //#endregion
@@ -13740,7 +14089,10 @@ function toolCompletionBody(cfg, messages, tools, opts) {
 		model: cfg.model,
 		messages,
 		...tools.length > 0 ? {
-			tools,
+			tools: tools.map(({ function: { outputSchema: _outputSchema, ...fn }, ...tool }) => ({
+				...tool,
+				function: fn
+			})),
 			tool_choice: opts?.toolChoice ?? "auto"
 		} : {},
 		...opts?.temperature !== void 0 ? { temperature: opts.temperature } : {},
@@ -20063,6 +20415,55 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 				});
 			};
 			const external = linkAbort(signal, controller.signal).signal;
+			const executeGranted = async (name, raw, context) => {
+				external.throwIfAborted();
+				context.signal.throwIfAborted();
+				if (!enabledToolNames.has(name)) throw new ValidationError$1(`tool ${name} is not granted`);
+				const args = codeModeArguments(raw);
+				if (context.callId !== context.parentCallId) executedToolCalls.push({
+					id: context.callId,
+					name,
+					arguments: JSON.stringify(args)
+				});
+				const startedAt = Date.now();
+				let status = "ok";
+				try {
+					return await seam.executeToolCall(name, args, task, context);
+				} catch (error) {
+					status = "error";
+					throw error;
+				} finally {
+					const endedAt = Date.now();
+					try {
+						seam.onToolStep?.({
+							toolName: name,
+							args,
+							status,
+							startedAt,
+							endedAt,
+							durationMs: endedAt - startedAt
+						});
+					} catch {}
+				}
+			};
+			const codeModeConfig = profileExecution.codeMode ?? seam.codeMode;
+			const codeMode = codeModeConfig ? createCodeModeTools(seam.tools.map(({ function: tool }) => ({
+				name: tool.name,
+				description: tool.description,
+				inputSchema: tool.parameters,
+				outputSchema: tool.outputSchema,
+				execute: (args, context) => executeGranted(tool.name, args, context)
+			})), codeModeConfig === true ? {} : codeModeConfig) : void 0;
+			const presentedTools = codeMode ? codeMode.tools.map((tool) => ({
+				type: "function",
+				function: {
+					name: tool.name,
+					description: tool.description,
+					parameters: tool.inputSchema
+				}
+			})) : seam.tools;
+			const modelToolNames = new Set(presentedTools.map((tool) => tool.function.name));
+			const codeByName = new Map(codeMode?.tools.map((tool) => [tool.name, tool]) ?? []);
 			try {
 				for (let t = 0; maxTurns === 0 || t < maxTurns; t += 1) {
 					flush();
@@ -20083,7 +20484,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							model,
 							...profileExecution.retry !== void 0 ? { retry: profileExecution.retry } : {},
 							...seam.complete ? { complete: seam.complete } : {}
-						}, messages, seam.tools, {
+						}, messages, presentedTools, {
 							...profileExecution.temperature !== void 0 ? { temperature: profileExecution.temperature } : {},
 							signal: turnController.signal,
 							onResponse: async (receipt) => {
@@ -20173,6 +20574,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							}
 						}))
 					});
+					const images = [];
 					for (let i = 0; i < toolCalls.length; i += 1) {
 						const tc = toolCalls[i];
 						const id = tc?.id ?? `call_${i}`;
@@ -20182,7 +20584,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							name: toolName,
 							arguments: tc?.arguments ?? ""
 						});
-						if (!enabledToolNames.has(toolName)) {
+						if (!modelToolNames.has(toolName)) {
 							messages.push({
 								role: "tool",
 								tool_call_id: id,
@@ -20209,34 +20611,38 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							continue;
 						}
 						let result;
-						let status = "ok";
-						const toolStartedAt = Date.now();
+						let succeeded = true;
 						try {
-							result = await seam.executeToolCall(toolName, args, task);
+							const context = {
+								signal: AbortSignal.any([external, turnController.signal]),
+								callId: id,
+								parentCallId: id
+							};
+							result = codeMode ? await codeByName.get(toolName).execute(args, context) : await executeGranted(toolName, args, context);
 						} catch (e) {
-							status = "error";
+							succeeded = false;
 							result = `error: ${e instanceof Error ? e.message : String(e)}`;
 						}
-						const toolEndedAt = Date.now();
+						const projected = succeeded && codeMode && toolName === "codemode" ? codeModeModelOutput(result) : void 0;
+						if (projected) images.push(...projected.images);
 						messages.push({
 							role: "tool",
 							tool_call_id: id,
-							content: result
+							content: projected?.text ?? toolResultText(result)
 						});
-						try {
-							seam.onToolStep?.({
-								toolName,
-								args,
-								status,
-								startedAt: toolStartedAt,
-								endedAt: toolEndedAt,
-								durationMs: toolEndedAt - toolStartedAt
-							});
-						} catch {}
 					}
+					if (images.length) messages.push({
+						role: "user",
+						content: [{
+							type: "text",
+							text: "Images emitted by codemode:"
+						}, ...images]
+					});
 				}
 			} finally {
-				await seam.onMessages?.(structuredClone(messages));
+				const saved = structuredClone(messages);
+				if (codeMode) await seam.onMessages?.(saved, { codeModeStore: codeMode.snapshotStore() });
+				else await seam.onMessages?.(saved);
 			}
 			const estimatedUsd = priceTokens({
 				model,
@@ -20256,6 +20662,10 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			};
 			const out = {
 				content: lastText,
+				...codeMode ? {
+					codeModeStore: codeMode.snapshotStore(),
+					modelToolNames: [...modelToolNames]
+				} : {},
 				...observedModel !== void 0 ? { model: observedModel } : {},
 				messages,
 				turns,
@@ -20309,6 +20719,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			provider: spec.profile.model?.provider ?? null,
 			maxTurns,
 			tools: seam.tools,
+			...seam.codeMode ? { codeMode: seam.codeMode } : {},
 			temperature: profileExecution.temperature ?? null,
 			tokenLimits: profileExecution.tokenLimits,
 			retry: profileExecution.retry ?? null,
@@ -21474,6 +21885,7 @@ function routerProfileExecution(profile, seam, mode) {
 	const profileEffort = profile.model?.reasoningEffort;
 	const settings = profileModelExecutionSettings(profile, "routerInlineExecutor");
 	if (!mode.multiTurn && settings.maxTurns !== void 0) throw new ValidationError$1("routerInlineExecutor: AgentProfile.model.metadata.maxTurns requires the router-tools backend");
+	if (!mode.multiTurn && settings.codeMode !== void 0) throw new ValidationError$1("routerInlineExecutor: AgentProfile.model.metadata.codeMode requires the router-tools backend");
 	if (settings.stream === true && seam.complete !== void 0) throw new ValidationError$1("routerInlineExecutor: AgentProfile.model.metadata.stream requires the HTTP Router transport; RouterSeam.complete returns one buffered completion and cannot serve a stream");
 	const declaredTools = profile.tools ?? {};
 	const suppliedTools = seam.tools ?? [];
@@ -24526,6 +24938,7 @@ async function captureBeforeCleanup(state, branching, event, events, parent) {
 	const provider = state.provider;
 	if (provider?.get === void 0) return refuse("the provider cannot reconstruct a fork of the checkpoint", false);
 	const get = provider.get.bind(provider);
+	if (parent?.aborted) return refuse(`capture failed: ${errorText(abortError(parent, "capture stopped").message)}`, true);
 	if (branching === void 0) return refuse("source-scoped checkpoint handle unavailable", true);
 	const material = {
 		checkpoint: event.checkpoint,
@@ -24787,12 +25200,23 @@ async function scopeRetainedOwnerSettled(scope) {
 	await state.releasing?.catch(() => void 0);
 }
 /**
+* How long one release spends capturing the owner's pending checkpoints, all of them together. A
+* capture it cuts short keeps its checkpoint and the source, as a failed capture does, and the
+* release goes on to settle. Each capture is otherwise bounded only by its port, and one at a
+* time: on Discovery run terraform-dc-model-20261010h-c1 (Runtime 0.314.0) a director's release
+* waited 00:19:18Z to 01:19:38Z for one capture to reach the port's 60-minute bound, and the run
+* settled 98 minutes after its deadline. The release captures that finished there took 67 seconds
+* and 7 and 34 minutes, beside live captures of abandoned directors on the same slots.
+*/
+const RELEASE_CHECKPOINT_CAPTURES_MS = 15 * 6e4;
+/**
 * Release the owner's environment once no turn of it will run again: at the run's final
 * settlement for the root, and when a nested manager's own scope has finished. A second call while
 * one is in flight joins it. The release first waits for the end-of-turn capture of the owner's
-* last turn, so the capture always precedes the destroy.
+* last turn, so the capture always precedes the destroy. `capturesMs` bounds the checkpoint
+* captures it runs ({@link RELEASE_CHECKPOINT_CAPTURES_MS}).
 */
-function releaseScopeRetainedOwnerEnvironment(scope) {
+function releaseScopeRetainedOwnerEnvironment(scope, { capturesMs = RELEASE_CHECKPOINT_CAPTURES_MS } = {}) {
 	const state = owners.get(scope);
 	const provider = state?.provider;
 	if (state === void 0 || provider === void 0) return Promise.resolve([]);
@@ -24800,14 +25224,14 @@ function releaseScopeRetainedOwnerEnvironment(scope) {
 	const tracked = (async () => {
 		await ownerDriveEnded(state);
 		await scopeRetainedOwnerTurnEnded(scope);
-		return await releaseOwnerEnvironment(state, provider);
+		return await releaseOwnerEnvironment(state, provider, capturesMs);
 	})().finally(() => {
 		if (state.releasing === tracked) delete state.releasing;
 	});
 	state.releasing = tracked;
 	return tracked;
 }
-async function releaseOwnerEnvironment(state, provider) {
+async function releaseOwnerEnvironment(state, provider, capturesMs) {
 	const { args } = state;
 	state.checkpointsUnavailable ??= "released";
 	await state.checkpointing?.catch(() => void 0);
@@ -24825,11 +25249,17 @@ async function releaseOwnerEnvironment(state, provider) {
 	const checkpointsKept = [];
 	const uncapturedSources = /* @__PURE__ */ new Set();
 	const pending = pendingCheckpoints(events, state).filter((event) => !retentionFailures.has(event.environmentId));
-	for (const sourceEnvironmentId of new Set(pending.map((event) => event.environmentId))) {
-		const cleaned = await cleanCheckpoints(state, await checkpointHandle(state, sourceEnvironmentId, AbortSignal.timeout(3e4)), pending.filter((event) => event.environmentId === sourceEnvironmentId), events);
-		checkpointFailures.push(...cleaned.unconfirmed);
-		checkpointsKept.push(...cleaned.refused);
-		for (const refusal of cleaned.refused) if (refusal.needsSource) uncapturedSources.add(sourceEnvironmentId);
+	const captures = new AbortController();
+	const capturesTimer = setTimeout(() => captures.abort(/* @__PURE__ */ new Error(`the release's ${capturesMs} ms for checkpoint captures ran out; checkpoint and source kept`)), capturesMs);
+	try {
+		for (const sourceEnvironmentId of new Set(pending.map((event) => event.environmentId))) {
+			const cleaned = await cleanCheckpoints(state, await checkpointHandle(state, sourceEnvironmentId, AbortSignal.any([captures.signal, AbortSignal.timeout(3e4)])), pending.filter((event) => event.environmentId === sourceEnvironmentId), events, captures.signal);
+			checkpointFailures.push(...cleaned.unconfirmed);
+			checkpointsKept.push(...cleaned.refused);
+			for (const refusal of cleaned.refused) if (refusal.needsSource) uncapturedSources.add(sourceEnvironmentId);
+		}
+	} finally {
+		clearTimeout(capturesTimer);
 	}
 	const forksUnresolved = await settleCaptureForks(state);
 	for (const event of checkpointFailures) pendingSources.add(event.environmentId);
@@ -30220,6 +30650,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { environmentReader as $, executableAgentSpecSnapshot as $i, parseWorkerToolTraceArtifact as $n, toOtelAttributes as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, sandboxActProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, knownMaterializationReceipt as Bi, InMemoryResultBlobStore as Bn, defaultRedactor as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, profileMaterializationAxes$1 as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, promptResourceProfileMaterialization as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, promptOnlyProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, attestRuntimeOwnedScopeOwner as Fi, retainedExecutorSeamKey as Fn, ROUTER_PRICE_SOURCE as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, runtimeOwnedExecutorExecutionBinding as Gi, replaySpawnTree as Gn, buildRuntimeEventOtelSpans as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, providerAttemptEvidence as Hi, insideCursorNamespace as Hn, resolveRedactor as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, authoredProfileDigest as Ii, unavailablePauseMs as In, createPropagatingTraceEmitter as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedPendingExecutorMaterialization as Ji, readCommittedJsonLines as Jn, flatOtelSpan as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, runtimeOwnedExecutorMaterialization as Ki, isNoEntError as Kn, createOpenInferenceFileExporter as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, finalizeRuntimeOwnedPendingExecutor as Li, unavailableSignalOfFailure as Ln, mergeTraceEnv as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, validateProfileMaterialization as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, worktreeCliProfileMaterialization as Ni, sandboxSessionTraceSource as Nn, priceTokens as Nr, createExecutor as Nt, recordScopeOwnerPause as O, renderProfileMaterializationIssues as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, attestRuntimeOwnedPendingExecutor as Pi, registerRetainedExecutorPreparation as Pn, routerTokenPrice as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, executableAgentProfileSnapshot as Qi, isTraceAnalysisStore as Qn, padTraceId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, inheritRuntimeOwnedExecutorAttestation as Ri, FileResultBlobStore as Rn, readTraceContextFromEnv as Rr, createSteerableSandboxSession as Rt, createScope as S, fullProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, promptModelProfileMaterialization as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, recordRuntimeOwnedDriveHarnessProviderEvidence as Ui, loadSpawnForest as Un, buildLoopOtelSpans as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, newExecutionAttemptId as Vi, InMemorySpawnJournal as Vn, defaultRedactorIdentityMaterial as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, runtimeOwnedDriveHarnessProviderEvidence as Wi, materializeTreeView as Wn, buildLoopSpanNodes as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, unknownExecutionBindingReceipt as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, loopEventToOtelSpan as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedScopeOwnerRuntime as Yi, writeAllBytes as Yn, generateSpanId as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, unknownMaterializationReceipt as Zi, captureWorkerTraceEvidence as Zn, padSpanId as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, abortError$1 as _a, terminateProcessTreeAndConfirm as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, canonicalStreamEventFromSandboxEvent as aa, runSettledCommand as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, promptOptionsFromAgentTurnInput as ba, controlProfileMaterialization as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, extractLlmCallEvent as ca, createWorktree as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, mapSandboxToolEvent as da, LOCAL_HARNESSES as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, detachedFrozen as ea, createRuntimeEventCollector as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, notifySandboxEventObserver as fa, harnessInvocation as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, decodeHarnessUsage as ga, CodexExecutionDiagnosticError as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, sumSandboxUsage as ha, parseCodexTokenUsage as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, assertSandboxServedModel as ia, sanitizeRuntimeStreamEvent as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, unsupportedProfileDimensions as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, renderUnsupported as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, isSandboxTerminalEvent as la, removeWorktree as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, sandboxProgressEvents as ma, localHarnessExecutable as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, projectSandboxOutcome as na, sanitizeAgentRuntimeEvent as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, createSandboxToolPartState as oa, runWorktreeHarness as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, sandboxEventServedBackend as pa, harnessSupportsReasoningEffort as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, runtimeOwnedExecutorProviderEvidence as qi, prepareJsonlAppend as qn, createOtelExporter as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, readSandboxOutcome as ra, sanitizeKnowledgeReadinessReport as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, createSandboxUsageLedger as sa, captureWorktreeDiff as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, detachedSnapshot as ta, createRuntimeStreamEventCollector as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, mapSandboxEvent as ua, DEFAULT_LOCAL_HARNESS as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, awaitAbortable$1 as va, AGENT_PROFILE_MATERIALIZATION_AXES as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, promptControlProfileMaterialization as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, providerMessageText as xa, defineProfileMaterializationContract as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, promptFromAgentTurnInput as ya, assertProfileMaterialization as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, knownExecutionBindingReceipt as zi, FileSpawnJournal as zn, traceContextToEnv as zr, createRouterTranscript as zt };
+export { environmentReader as $, unknownExecutionBindingReceipt as $i, parseWorkerToolTraceArtifact as $n, loopEventToOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptResourceProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, finalizeRuntimeOwnedPendingExecutor as Bi, InMemoryResultBlobStore as Bn, mergeTraceEnv as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, promptOptionsFromAgentTurnInput as Ca, controlProfileMaterialization as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, promptControlProfileMaterialization as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, profileMaterializationAxes$1 as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, validateProfileMaterialization as Fi, retainedExecutorSeamKey as Fn, runCodeMode as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, providerAttemptEvidence as Gi, replaySpawnTree as Gn, resolveRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, knownExecutionBindingReceipt as Hi, insideCursorNamespace as Hn, traceContextToEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, worktreeCliProfileMaterialization as Ii, unavailablePauseMs as In, priceTokens as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedExecutorExecutionBinding as Ji, readCommittedJsonLines as Jn, buildRuntimeEventOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, recordRuntimeOwnedDriveHarnessProviderEvidence as Ki, isNoEntError as Kn, buildLoopOtelSpans as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, attestRuntimeOwnedPendingExecutor as Li, unavailableSignalOfFailure as Ln, routerTokenPrice as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, renderUnsupported as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, sandboxActProfileMaterialization as Ni, sandboxSessionTraceSource as Nn, createCodeModeTools as Nr, createExecutor as Nt, recordScopeOwnerPause as O, promptModelProfileMaterialization as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, unsupportedProfileDimensions as Pi, registerRetainedExecutorPreparation as Pn, describeCodeModeTools as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedScopeOwnerRuntime as Qi, isTraceAnalysisStore as Qn, generateSpanId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, attestRuntimeOwnedScopeOwner as Ri, FileResultBlobStore as Rn, ROUTER_PRICE_SOURCE as Rr, createSteerableSandboxSession as Rt, createScope as S, promptFromAgentTurnInput as Sa, assertProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, fullProfileMaterialization as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, knownMaterializationReceipt as Ui, loadSpawnForest as Un, defaultRedactor as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, inheritRuntimeOwnedExecutorAttestation as Vi, InMemorySpawnJournal as Vn, readTraceContextFromEnv as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, newExecutionAttemptId as Wi, materializeTreeView as Wn, defaultRedactorIdentityMaterial as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedExecutorProviderEvidence as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createOtelExporter as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedExecutorMaterialization as Yi, writeAllBytes as Yn, createOpenInferenceFileExporter as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedPendingExecutorMaterialization as Zi, captureWorkerTraceEvidence as Zn, flatOtelSpan as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, sandboxProgressEvents as _a, localHarnessExecutable as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, projectSandboxOutcome as aa, sanitizeAgentRuntimeEvent as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, abortError$1 as ba, terminateProcessTreeAndConfirm as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, canonicalStreamEventFromSandboxEvent as ca, runSettledCommand as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, extractLlmCallEvent as da, createWorktree as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, unknownMaterializationReceipt as ea, padSpanId as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, isSandboxTerminalEvent as fa, removeWorktree as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, sandboxEventServedBackend as ga, harnessSupportsReasoningEffort as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, notifySandboxEventObserver as ha, harnessInvocation as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, detachedSnapshot as ia, createRuntimeStreamEventCollector as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, renderProfileMaterializationIssues as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, promptOnlyProfileMaterialization as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, createSandboxToolPartState as la, runWorktreeHarness as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, mapSandboxToolEvent as ma, LOCAL_HARNESSES as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, executableAgentSpecSnapshot as na, toOtelAttributes as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, readSandboxOutcome as oa, sanitizeKnowledgeReadinessReport as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, mapSandboxEvent as pa, DEFAULT_LOCAL_HARNESS as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, runtimeOwnedDriveHarnessProviderEvidence as qi, prepareJsonlAppend as qn, buildLoopSpanNodes as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, detachedFrozen as ra, createRuntimeEventCollector as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, assertSandboxServedModel as sa, sanitizeRuntimeStreamEvent as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, executableAgentProfileSnapshot as ta, padTraceId as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, createSandboxUsageLedger as ua, captureWorktreeDiff as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, sumSandboxUsage as va, parseCodexTokenUsage as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, providerMessageText as wa, defineProfileMaterializationContract as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, awaitAbortable$1 as xa, AGENT_PROFILE_MATERIALIZATION_AXES as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, decodeHarnessUsage as ya, CodexExecutionDiagnosticError as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, authoredProfileDigest as zi, FileSpawnJournal as zn, createPropagatingTraceEmitter as zr, createRouterTranscript as zt };
 
-//# sourceMappingURL=supervisor-CbFyf48U.js.map
+//# sourceMappingURL=supervisor-BXEL_Fxe.js.map