@tangle-network/agent-runtime 0.317.0 → 0.319.3

package/dist/{supervisor-CbFyf48U.js → supervisor-Cqhu3xH-.js}

@@ -1,10 +1,10 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as randomSuffix, A as verifiedArtifactChunks, B as addSpend, Ct as isDeadlineAbortReason, Et as teardownSurfaces, G as deleteBoxSafe, H as chargedTokens, J as hasCompleteCacheBreakdown, K as errorMessage, O as verifyWorkspaceSnapshotArtifacts, P as deepFreezeCandidate, Q as promptCacheTokenClasses, St as checkInIdleMs, Tt as teardownExecutor, U as cloneSpend, V as addTokenUsage, W as cloneTokenUsage, X as isAsyncIterable$1, Z as mapWithConcurrency, a as verifyAgentCandidateWorkspaceArtifacts, at as throwIfAborted, bt as armDeadlineTimer, ct as zeroSpend, dt as assertResources, et as randomUuid, ft as resourceTelemetry, ht as CHILD_DEADLINE_REASON, i as readAgentCandidateWorkspaceArtifactFiles, it as throwAbort, lt as zeroTokenUsage, mt as ACCEPTED_RESULT_GRACE_MS, nt as sleep, o as verifyAgentCandidateWorkspaceTree, ot as unmeteredSpend, pt as withBudgetResources, q as fnv1a32Hex, rt as stringifySafe, st as withTimeout, tt as roundBoxMinutes, u as verifyAgentCandidateWorkspaceArchive, ut as addResourceSpend, wt as singleFlightTeardown, xt as boundedChildDeadlineAt, yt as ROOT_DEADLINE_REASON } from "./workspace-streams-DkijayqX.js";
+import { $ as promptCacheTokenClasses, Ct as checkInIdleMs, Dt as teardownSurfaces, Et as teardownExecutor, F as deepFreezeCandidate, G as cloneTokenUsage, H as addTokenUsage, J as fnv1a32Hex, K as deleteBoxSafe, Q as mapWithConcurrency, St as boundedChildDeadlineAt, Tt as singleFlightTeardown, U as chargedTokens, V as addSpend, W as cloneSpend, Y as hasCompleteCacheBreakdown, Z as isAsyncIterable$1, a as verifyAgentCandidateWorkspaceArtifacts, at as throwAbort, bt as ROOT_DEADLINE_REASON, ct as withTimeout, dt as addResourceSpend, et as randomSuffix, ft as assertResources, gt as CHILD_DEADLINE_REASON, ht as ACCEPTED_RESULT_GRACE_MS, i as readAgentCandidateWorkspaceArtifactFiles, it as stringifySafe, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, lt as zeroSpend, mt as withBudgetResources, nt as roundBoxMinutes, o as verifyAgentCandidateWorkspaceTree, ot as throwIfAborted, pt as resourceTelemetry, q as errorMessage, rt as sleep, st as unmeteredSpend, tt as randomUuid, u as verifyAgentCandidateWorkspaceArchive, ut as zeroTokenUsage, wt as isDeadlineAbortReason, xt as armDeadlineTimer } from "./workspace-streams-DFAhW7hF.js";
 import { runTaskQueue } from "./task-queue.js";
-import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-DhvyZ8-O.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CNe257pB.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
+import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferReceiptSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, agentWorkspaceSnapshotRefDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, contextTransferReceiptMatches, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
 import { isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -4650,10 +4650,10 @@ function createOtelExporter(config) {
 	if (!resolvedEndpoint) return void 0;
 	const url = `${resolvedEndpoint.replace(/\/+$/, "")}/v1/traces`;
 	const headers = config?.headers ?? parseHeadersFromEnv();
-	const batchSize = positiveInteger(config?.batchSize, 64);
+	const batchSize = positiveInteger$1(config?.batchSize, 64);
 	const flushIntervalMs = config?.flushIntervalMs ?? 5e3;
-	const maxQueueSize = Math.max(positiveInteger(config?.maxQueueSize, 2048), batchSize);
-	const timeoutMs = positiveInteger(config?.timeoutMs, 1e4);
+	const maxQueueSize = Math.max(positiveInteger$1(config?.maxQueueSize, 2048), batchSize);
+	const timeoutMs = positiveInteger$1(config?.timeoutMs, 1e4);
 	const resource = { attributes: toOtelAttributes({
 		"service.name": config?.serviceName ?? "agent-runtime",
 		...config?.resourceAttributes ?? {}
@@ -4802,7 +4802,7 @@ function describeFetchError(error) {
 	const code = cause && typeof cause === "object" && "code" in cause && typeof cause.code === "string" ? cause.code : void 0;
 	return code ? `${error.message} (${code})` : error.message;
 }
-function positiveInteger(value, fallback) {
+function positiveInteger$1(value, fallback) {
 	return value !== void 0 && Number.isSafeInteger(value) && value > 0 ? value : fallback;
 }
 /**
@@ -5866,6 +5866,270 @@ function priceTokens(work) {
 	return Math.max(0, work.inputTokens - cacheRead - cacheWrite) * price.input + cacheRead * (price.cachedInput ?? price.input) + cacheWrite * (price.cacheWrite ?? price.input) + work.outputTokens * price.output;
 }
 //#endregion
+//#region src/runtime/code-mode.ts
+function positiveInteger(value, fallback, name) {
+	const result = value ?? fallback;
+	if (!Number.isSafeInteger(result) || result < 1) throw new RangeError(`code mode: ${name} must be a positive safe integer`);
+	return result;
+}
+/** Render the same tool descriptors that are executed, including their result schemas. */
+async function describeCodeModeTools(tools, query) {
+	const needle = query?.trim().toLowerCase();
+	const selected = tools.filter((tool) => !needle || tool.name.toLowerCase().includes(needle) || tool.description?.toLowerCase().includes(needle));
+	const { renderDeclarations } = await import("@earendil-works/pi-codemode");
+	return renderDeclarations({ tools: selected.map((tool) => ({
+		name: tool.name,
+		description: tool.description,
+		inputSchema: tool.inputSchema,
+		outputSchema: tool.outputSchema,
+		execute: () => {
+			throw new Error("Declaration-only tool");
+		}
+	})) });
+}
+/**
+* Execute a JS async-function body against Runtime capabilities. The upstream
+* QuickJS/WASM worker is the boundary; there is no node:vm or unsafe fallback.
+* Every invocation has a fresh VM. Only successful storeWrites may be committed
+* by the caller. External tool effects are neither transactional nor retried.
+*/
+async function runCodeMode(code, options) {
+	if (typeof code !== "string" || !code.trim()) throw new TypeError("code mode: source is required");
+	options.signal?.throwIfAborted();
+	if (!options.callId.trim()) throw new TypeError("code mode: callId is required");
+	const concurrency = positiveInteger(options.concurrency, 4, "concurrency");
+	const maxCalls = positiveInteger(options.maxCalls, 1024, "maxCalls");
+	const memoryLimitBytes = positiveInteger(options.memoryLimitBytes, 64 * 1024 * 1024, "memoryLimitBytes");
+	const timeoutMs = options.timeoutMs === Infinity ? Infinity : positiveInteger(options.timeoutMs, 3e5, "timeoutMs");
+	if (timeoutMs !== Infinity && timeoutMs > 2147483647) throw new RangeError("code mode: timeoutMs must be at most 2147483647 or Infinity");
+	const { CodemodeSandbox, toCodemodeIdentifier } = await import("@earendil-works/pi-codemode");
+	const names = /* @__PURE__ */ new Set();
+	const identifiers = /* @__PURE__ */ new Set();
+	for (const tool of options.tools) {
+		if (!tool.name || names.has(tool.name)) throw new TypeError(`code mode: duplicate or empty tool ${tool.name}`);
+		names.add(tool.name);
+		const identifier = toCodemodeIdentifier(tool.name);
+		if (identifiers.has(identifier)) throw new TypeError(`code mode: ambiguous tool name ${tool.name} normalizes to ${identifier}`);
+		identifiers.add(identifier);
+	}
+	const callLimit = new AbortController();
+	const executionSignal = options.signal ? AbortSignal.any([options.signal, callLimit.signal]) : callLimit.signal;
+	const queue = new CallQueue(concurrency);
+	let ordinal = 0;
+	const sandbox = new CodemodeSandbox({
+		tools: options.tools.map((tool) => ({
+			name: tool.name,
+			description: tool.description,
+			inputSchema: tool.inputSchema,
+			outputSchema: tool.outputSchema,
+			execute: async (args, { signal }) => {
+				signal.throwIfAborted();
+				const index = ++ordinal;
+				if (index > maxCalls) {
+					const error = /* @__PURE__ */ new Error(`code mode: call limit ${maxCalls} exceeded`);
+					callLimit.abort(error);
+					throw error;
+				}
+				const release = await queue.acquire(signal);
+				try {
+					signal.throwIfAborted();
+					const value = await tool.execute(args, Object.freeze({
+						signal,
+						parentCallId: options.callId,
+						callId: `${options.callId}/tool/${index}`
+					}));
+					signal.throwIfAborted();
+					return value;
+				} finally {
+					release();
+				}
+			}
+		})),
+		timeoutMs,
+		memoryLimitBytes,
+		...options.wasm === void 0 ? {} : { wasm: options.wasm },
+		...options.workerUrl === void 0 ? {} : { workerUrl: options.workerUrl }
+	});
+	try {
+		return await sandbox.execute(code, {
+			signal: executionSignal,
+			store: options.store
+		});
+	} finally {
+		await sandbox.close();
+	}
+}
+/** A per-invocation FIFO, not another scheduler. Aborted waiters never dispatch. */
+var CallQueue = class {
+	active = 0;
+	waiting = [];
+	concurrency;
+	constructor(concurrency) {
+		this.concurrency = concurrency;
+	}
+	acquire(signal) {
+		signal.throwIfAborted();
+		if (this.active < this.concurrency) {
+			this.active++;
+			return Promise.resolve(this.release());
+		}
+		return new Promise((resolve, reject) => {
+			const waiter = {
+				signal,
+				resolve,
+				reject,
+				abort: () => {}
+			};
+			waiter.abort = () => {
+				const index = this.waiting.indexOf(waiter);
+				if (index !== -1) this.waiting.splice(index, 1);
+				reject(signal.reason);
+			};
+			signal.addEventListener("abort", waiter.abort, { once: true });
+			this.waiting.push(waiter);
+			if (signal.aborted) waiter.abort();
+		});
+	}
+	release() {
+		let released = false;
+		return () => {
+			if (released) return;
+			released = true;
+			this.active--;
+			for (;;) {
+				const next = this.waiting.shift();
+				if (!next) return;
+				next.signal.removeEventListener("abort", next.abort);
+				if (next.signal.aborted) {
+					next.reject(next.signal.reason);
+					continue;
+				}
+				this.active++;
+				next.resolve(this.release());
+				return;
+			}
+		};
+	}
+};
+/**
+* Present an existing authorized tool set as code mode. This is used by Runtime's
+* existing loops; it does not execute a model, create an agent, or grant authority.
+* One toolset belongs to one conversation. Concurrent programs are refused to
+* avoid silently losing store writes; concurrency within a program is queued.
+*/
+function createCodeModeTools(granted, options = {}) {
+	const reserved = /* @__PURE__ */ new Set(["codemode", "tool_search"]);
+	const names = /* @__PURE__ */ new Set();
+	for (const tool of granted) {
+		if (reserved.has(tool.name)) throw new TypeError(`code mode: ${tool.name} is already present; use the existing code mode, do not nest it`);
+		if (!tool.name || names.has(tool.name)) throw new TypeError(`code mode: duplicate or empty tool ${tool.name}`);
+		names.add(tool.name);
+	}
+	const direct = new Set(options.directTools ?? []);
+	for (const name of direct) if (!names.has(name)) throw new TypeError(`code mode: direct tool ${name} is not granted`);
+	const copied = granted.map((tool) => Object.freeze({
+		...tool,
+		...tool.inputSchema === void 0 ? {} : { inputSchema: structuredClone(tool.inputSchema) },
+		...tool.outputSchema === void 0 ? {} : { outputSchema: structuredClone(tool.outputSchema) }
+	}));
+	const callable = Object.freeze(copied.filter((tool) => !direct.has(tool.name)));
+	let store = structuredClone(options.store ?? {});
+	let running = false;
+	const tools = [
+		{
+			name: "tool_search",
+			description: "Discover the tools available inside codemode. Returns generated TypeScript input and output declarations. Use an optional name/description substring query, or omit it for all tools.",
+			inputSchema: {
+				type: "object",
+				properties: { query: { type: "string" } },
+				additionalProperties: false
+			},
+			execute: async (raw) => {
+				const args = codeModeArguments(raw);
+				if (args.query !== void 0 && typeof args.query !== "string") throw new TypeError("query must be a string");
+				return describeCodeModeTools(callable, args.query);
+			}
+		},
+		{
+			name: "codemode",
+			description: "Run a JavaScript async-function body to compose the granted tools. Call tools.name(args) or tools[\"original-name\"](args); inspect ALL_TOOLS or tool_search to discover them. Await tool calls, use loops and Promise.all, keep intermediate data in variables, and return only the result needed for the next decision. text(value) prints, image({type:\"image\",data,mimeType}) emits an image. store(key,value) and load(key) retain JSON across successful calls in this conversation. No imports, process, filesystem, network, or timers. Side effects are not rolled back or automatically retried.",
+			inputSchema: {
+				type: "object",
+				properties: { code: { type: "string" } },
+				required: ["code"],
+				additionalProperties: false
+			},
+			execute: async (raw, context) => {
+				const args = codeModeArguments(raw);
+				if (typeof args.code !== "string") throw new TypeError("codemode requires {code: string}");
+				if (running) throw new Error("code mode: another program is still running in this conversation");
+				running = true;
+				try {
+					const result = await runCodeMode(args.code, {
+						...options,
+						tools: callable,
+						signal: context.signal,
+						callId: context.callId,
+						store
+					});
+					if (result.ok) {
+						const next = Object.assign(Object.create(null), store, result.storeWrites.set);
+						for (const key of result.storeWrites.delete) delete next[key];
+						store = structuredClone(next);
+					}
+					return result.ok ? {
+						ok: true,
+						value: result.value ?? null,
+						output: result.output
+					} : {
+						ok: false,
+						error: result.error,
+						output: result.output
+					};
+				} finally {
+					running = false;
+				}
+			}
+		},
+		...copied.filter((tool) => direct.has(tool.name))
+	];
+	return {
+		tools: Object.freeze(tools),
+		snapshotStore: () => structuredClone(store)
+	};
+}
+/** Model tools have object arguments. Validation against a tool's schema remains host-owned. */
+function codeModeArguments(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError("tool arguments must be a JSON object");
+	return value;
+}
+/** Preserve legacy text tool results; structured tool handlers keep their actual JSON values. */
+function toolResultText(value) {
+	return typeof value === "string" ? value : JSON.stringify(value) ?? "null";
+}
+/**
+* OpenAI-compatible output projection. All tool replies must precede the optional
+* user image message, so the loop appends returned images after the tool batch.
+* Image bytes never become a stringified pseudo-image in the tool's text.
+*/
+function codeModeModelOutput(value) {
+	const reply = value;
+	return {
+		text: JSON.stringify({
+			ok: reply.ok,
+			...reply.ok ? { value: reply.value } : { error: reply.error },
+			output: reply.output.map((item) => item.type === "text" ? item : {
+				type: "image",
+				mimeType: item.mimeType
+			})
+		}),
+		images: reply.output.flatMap((item) => item.type === "image" ? [{
+			type: "image_url",
+			image_url: { url: `data:${item.mimeType};base64,${item.data}` }
+		}] : [])
+	};
+}
+//#endregion
 //#region src/durable/content-address.ts
 /** Stable content address shared by result and trace artifacts. */
 function contentAddress(artifact) {
@@ -7136,26 +7400,28 @@ async function captureProviderCheckpointWorkspace(port, prepare, marker, parent)
 		clearDeadline();
 	}
 }
-/** Verify a running workspace copy before treating it as retained evidence. */
-async function captureProviderLiveWorkspace(port, context) {
+/** Verify a running workspace copy before treating it as retained evidence. `parent` stops the
+*  copy, in the queue or under way, when its turn ends. */
+async function captureProviderLiveWorkspace(port, context, parent) {
 	assertProviderWorkspaceRetentionPort(port, "provider workspace retention");
 	if (port.captureLive === void 0) throw new ValidationError$1("provider workspace retention: the port has no captureLive");
 	const timeoutMs = port.liveTimeoutMs ?? port.timeoutMs;
 	const controller = new AbortController();
 	const clearDeadline = armDeadlineTimer(timeoutMs, () => controller.abort(/* @__PURE__ */ new Error(`live workspace capture timed out after ${timeoutMs}ms`)), true);
+	const signal = parent === void 0 ? controller.signal : AbortSignal.any([controller.signal, parent]);
 	try {
-		return await runAbortable(() => withCaptureSlot(checkpointSlots(port), controller.signal, async () => {
+		return await runAbortable(() => withCaptureSlot(checkpointSlots(port), signal, async () => {
 			const tree = detachedSnapshot(await port.captureLive({
 				...context,
-				signal: controller.signal
+				signal
 			}), "live workspace capture tree");
 			if (tree?.kind !== "agent-candidate-workspace-tree") throw new Error("live workspace capture returned no workspace tree");
 			if ((await verifyAgentCandidateWorkspaceTree(tree, port.artifacts, {
 				...port.limits === void 0 ? {} : { limits: port.limits },
-				signal: controller.signal
+				signal
 			})).files.length !== tree.files) throw new Error("live workspace capture tree misstates its file count");
 			return tree;
-		}), controller.signal, `live workspace capture timed out after ${timeoutMs}ms`);
+		}), signal, `live workspace capture timed out after ${timeoutMs}ms`);
 	} finally {
 		clearDeadline();
 	}
@@ -7543,6 +7809,43 @@ function assertRequestedInteractionCapabilities(providerName, requested, capabil
 	if (interactions.replay !== true || interactions.responseIdempotency !== true) throw new Error(`provider "${providerName}" cannot safely dispatch requested interactions without replay and response idempotency`);
 }
 //#endregion
+//#region src/runtime/retained-context-transfer.ts
+/** Validate attachment authority before admission or any provider operation. */
+function retainedContextTransferReceipt(options, provider, request) {
+	if (request === void 0) {
+		if (options.contextTransferReceipt !== void 0) throw new Error("context transfer receipt requires its exact request");
+		return;
+	}
+	if (options.contextTransferReceipt === void 0) throw new Error("retained context transfer requires an accepted receipt; it cannot create another environment");
+	const receipt = detachedSnapshot(ContextTransferReceiptSchema.parse(options.contextTransferReceipt), "retained context transfer receipt");
+	if (!contextTransferReceiptMatches(request, receipt) || receipt.provider !== provider) throw new Error("retained context transfer receipt does not match its exact request or provider");
+	const { environment, turn } = options;
+	const destination = request.plan.destination;
+	if (request.profile === void 0 || typeof environment.profile === "string" || canonicalAgentProfileDigest(environment.profile) !== destination.profileDigest || turn.profile !== void 0 && canonicalAgentProfileDigest(turn.profile) !== destination.profileDigest) throw new Error("retained context transfer requires the accepted exact profile");
+	if (environment.backend !== void 0 && environment.backend !== destination.runner) throw new Error("retained context transfer runner conflicts with the accepted destination");
+	if (canonicalCandidateDigest(environment.workspace ?? null) !== canonicalCandidateDigest(request.workspace ?? null) || canonicalCandidateDigest(environment.resources ?? null) !== canonicalCandidateDigest(request.resources ?? null)) throw new Error("retained context transfer workspace or resources conflict with acceptance");
+	if (environment.requestedId !== void 0 && environment.requestedId !== receipt.environmentId || options.existingEnvironmentId !== void 0 && options.existingEnvironmentId !== receipt.environmentId) throw new Error("retained context transfer targets another environment");
+	if (environment.runtimeAttachments !== void 0 || environment.egress !== void 0 || environment.billingOwner !== void 0 || Object.keys(environment.env ?? {}).length > 0 || Object.keys(environment.secrets ?? {}).length > 0 || Object.keys(environment.providerOptions ?? {}).length > 0) throw new Error("retained context transfer attachment cannot apply unaccepted create-time options");
+	return receipt;
+}
+function assertRetainedContextTransferIdentity(receipt, identity) {
+	if (receipt !== void 0 && (identity.sessionId !== receipt.sessionId || identity.executionId !== receipt.executionId)) throw new Error("retained context transfer identity conflicts with the accepted receipt");
+}
+function assertRetainedContextTransferCapability(capabilities) {
+	if (capabilities.contextTransfer?.attach !== true) throw new Error("provider cannot attach the accepted context transfer destination");
+}
+/** The provider get contract performs the authoritative operation lookup once. */
+function assertRetainedContextTransferEnvironment(environment, request, receipt) {
+	const actual = ContextTransferReceiptSchema.safeParse(environment.contextTransferReceipt);
+	if (!actual.success || !contextTransferReceiptMatches(request, actual.data) || environment.id !== receipt.environmentId || environment.provider !== receipt.provider || canonicalCandidateDigest({
+		...actual.data,
+		status: "accepted"
+	}) !== canonicalCandidateDigest({
+		...receipt,
+		status: "accepted"
+	})) throw new Error("provider did not reconstruct the authoritative accepted context transfer receipt");
+}
+//#endregion
 //#region src/runtime/retained-run-events.ts
 /** The runtime's own contract checks inside the stream loop, so the catch can tell a broken
 *  answer (a verdict) from a read the provider's iterator failed (a wrapper). */
@@ -7943,10 +8246,31 @@ function createRetainedRunHandle(environment, session, initialControlRef, capabi
 * Secret names remain public binding data, so changing requested credentials
 * still conflicts before provider effects begin.
 */
+/**
+* The pre-interface5 create-material projection: `requestedId`, `egress`,
+* `billingOwner`, and the workspace `snapshot` digest omitted — the shape
+* records persisted by the previous version digested. Accepted only when
+* validating replayed records (an upgrade must not strand an in-flight run
+* whose provider creation already completed); every new admission digests the
+* current projection.
+*/
+function legacyRetainedCreateMaterial(environment) {
+	const { requestedId: _requestedId, egress: _egress, billingOwner: _billingOwner, workspace, ...preInterface5 } = environment;
+	return retainedCreateMaterial(workspace === void 0 ? preInterface5 : {
+		...preInterface5,
+		workspace: (() => {
+			const { snapshot: _snapshot, ...legacyWorkspace } = workspace;
+			return legacyWorkspace;
+		})()
+	});
+}
 function retainedCreateMaterial(environment) {
 	return {
 		...environment.metadata?.runtimeProviderPlacement === void 0 ? {} : { placement: environment.metadata.runtimeProviderPlacement },
 		...environment.backend === void 0 ? {} : { backend: environment.backend },
+		...environment.requestedId === void 0 ? {} : { requestedId: environment.requestedId },
+		...environment.egress === void 0 ? {} : { egress: environment.egress },
+		...environment.billingOwner === void 0 ? {} : { billingOwner: environment.billingOwner },
 		...environment.workspace === void 0 ? {} : { workspaceDigest: canonicalCandidateDigest(publicWorkspaceMaterial(environment.workspace)) },
 		...environment.resources === void 0 ? {} : { resourcesDigest: canonicalCandidateDigest(publicResourceMaterial(environment.resources)) },
 		...environment.runtimeAttachments === void 0 ? {} : { runtimeAttachmentsDigest: canonicalCandidateDigest(environment.runtimeAttachments) },
@@ -7971,6 +8295,8 @@ function publicWorkspaceMaterial(workspace) {
 		...workspace.repoUrl === void 0 ? {} : { repoUrl: workspace.repoUrl },
 		...workspace.gitRef === void 0 ? {} : { gitRef: workspace.gitRef },
 		...workspace.cwd === void 0 ? {} : { cwd: workspace.cwd },
+		...workspace.checkpoint === void 0 ? {} : { checkpoint: workspace.checkpoint },
+		...workspace.snapshot === void 0 ? {} : { snapshotDigest: agentWorkspaceSnapshotRefDigest(workspace.snapshot) },
 		...workspace.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(workspace.providerOptions) }
 	};
 }
@@ -8027,7 +8353,7 @@ function mintRetainedIdentity(idempotencyKey, turnId) {
 * coordinates are confirmed by the provider and persisted by the caller.
 *
 * The required `onAdmission` hook first records a digest-only intent before
-* creation, then records recovery coordinates and the verified exact control
+* creation or receipt-authorized attachment, then records recovery coordinates and the verified exact control
 * reference. The returned promise resolves only after the dispatched admission
 * is durable, so a crash cannot lose a successful start's exact reference.
 *
@@ -8037,14 +8363,19 @@ async function startRetainedRun(options) {
 	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(options.turn.turnId, "turn idempotency key");
 	if (typeof options.onAdmission !== "function") throw new Error("startRetainedRun requires an awaited onAdmission durability hook");
-	const { sessionId, executionId } = options.identity ?? options.intent ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
+	const contextTransfer = retainedContextTransfer(options.turn.contextTransfer);
+	const transferReceipt = retainedContextTransferReceipt(options, options.provider.name, contextTransfer);
+	const { sessionId, executionId } = options.identity ?? options.intent ?? (transferReceipt === void 0 ? void 0 : {
+		sessionId: transferReceipt.sessionId,
+		executionId: transferReceipt.executionId
+	}) ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
 	const identity = {
 		sessionId,
 		executionId
 	};
 	assertStableText(identity.sessionId, "retained session id");
 	assertStableText(identity.executionId, "retained execution id");
-	const contextTransfer = retainedContextTransfer(options.turn.contextTransfer);
+	assertRetainedContextTransferIdentity(transferReceipt, identity);
 	AgentTurnInputSchema.parse(freshTurnInput(options.turn, {
 		turnId: options.turn.turnId,
 		detach: true,
@@ -8056,11 +8387,22 @@ async function startRetainedRun(options) {
 	if (options.intent === void 0) await admitDurably(options.onAdmission, intent);
 	else assertExactRetainedRunIntent(options.intent, intent);
 	const providerCapabilities = await assertRetainedCapabilities(options.provider);
+	if (transferReceipt !== void 0) assertRetainedContextTransferCapability(providerCapabilities);
 	assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, providerCapabilities);
 	options.environment.signal?.throwIfAborted();
 	options.turn.signal?.throwIfAborted();
+	const attachmentSignal = options.environment.signal === void 0 ? options.turn.signal : options.turn.signal === void 0 ? options.environment.signal : AbortSignal.any([options.environment.signal, options.turn.signal]);
 	let environment;
-	if (options.existingEnvironmentId !== void 0) {
+	if (transferReceipt !== void 0 && contextTransfer !== void 0) {
+		const existing = await options.provider.get(transferReceipt.environmentId, {
+			contextTransfer,
+			...attachmentSignal === void 0 ? {} : { signal: attachmentSignal }
+		});
+		attachmentSignal?.throwIfAborted();
+		if (!existing) throw new Error("accepted context transfer environment is unavailable; it cannot be replaced");
+		assertRetainedContextTransferEnvironment(existing, contextTransfer, transferReceipt);
+		environment = existing;
+	} else if (options.existingEnvironmentId !== void 0) {
 		assertStableText(options.existingEnvironmentId, "retained environment id");
 		const existing = await options.provider.get(options.existingEnvironmentId);
 		if (!existing || existing.id !== options.existingEnvironmentId || existing.provider !== options.provider.name) throw new Error("retained provider environment is unavailable or has another identity");
@@ -8073,9 +8415,10 @@ async function startRetainedRun(options) {
 	let capabilities;
 	try {
 		capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
+		if (transferReceipt !== void 0) assertRetainedContextTransferCapability(capabilities);
 		assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, capabilities);
 	} catch (error) {
-		if (options.existingEnvironmentId !== void 0) throw error;
+		if (transferReceipt !== void 0 || options.existingEnvironmentId !== void 0) throw error;
 		try {
 			await environment.destroy?.();
 		} catch (cleanupError) {
@@ -8084,7 +8427,7 @@ async function startRetainedRun(options) {
 		throw error;
 	}
 	if (!environment.dispatch || !environment.session) {
-		if (options.existingEnvironmentId !== void 0) throw new Error(`provider "${options.provider.name}" does not expose detached session control`);
+		if (transferReceipt !== void 0 || options.existingEnvironmentId !== void 0) throw new Error(`provider "${options.provider.name}" does not expose detached session control`);
 		try {
 			await environment.destroy?.();
 		} catch (cleanupError) {
@@ -8095,15 +8438,16 @@ async function startRetainedRun(options) {
 	return dispatchRetainedRun({
 		provider: options.provider,
 		environment,
-		signal: options.environment.signal,
+		signal: attachmentSignal,
 		environmentIdempotencyKey: options.environment.idempotencyKey,
 		turn: options.turn,
 		contextTransfer,
+		expectedRunId: transferReceipt?.runId,
 		identity,
 		onAdmission: options.onAdmission,
 		capabilities,
 		now: options.now,
-		preserveEnvironment: options.existingEnvironmentId !== void 0
+		preserveEnvironment: transferReceipt !== void 0 || options.existingEnvironmentId !== void 0
 	});
 }
 /**
@@ -8116,6 +8460,7 @@ async function startRetainedRun(options) {
 * @stable
 */
 async function startRetainedRunInEnvironment(options) {
+	if (options.turn.contextTransfer !== void 0) throw new Error("accepted context transfer requires startRetainedRun with its exact profile and receipt");
 	assertStableText(options.environment.id, "retained environment id");
 	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(options.turn.turnId, "turn idempotency key");
@@ -8220,6 +8565,7 @@ async function dispatchRetainedRun(options) {
 			sessionId: identity.sessionId
 		});
 		if (controlRef.executionId !== identity.executionId) throw new Error("provider bound another execution than the requested identity");
+		if (options.expectedRunId !== void 0 && controlRef.runId !== options.expectedRunId) throw new Error("provider bound another run than the accepted context transfer receipt");
 		exact = exactSession(environment, controlRef);
 	} catch (error) {
 		const bindingError = new RetainedRunDispatchBindingError({
@@ -8279,10 +8625,12 @@ async function recoverRetainedRun(options) {
 	assertStableText(options.environmentId, "retained environment id");
 	assertStableText(options.sessionId, "retained session id");
 	assertStableText(options.executionId, "retained execution id");
+	const contextTransfer = retainedContextTransfer(options.contextTransfer);
 	const providerCapabilities = await assertRetainedCapabilities(options.provider);
 	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const environment = await options.provider.get(options.environmentId);
+	const environment = contextTransfer === void 0 || options.transferReceipt === void 0 ? await options.provider.get(options.environmentId) : await options.provider.get(options.environmentId, { contextTransfer });
 	if (!environment) return { outcome: "not_found" };
+	if (contextTransfer !== void 0 && options.transferReceipt !== void 0) assertRetainedContextTransferEnvironment(environment, contextTransfer, options.transferReceipt);
 	const capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
 	if (!environment.session) return {
 		outcome: "unverifiable",
@@ -8322,6 +8670,8 @@ function assertRetainedRunReplayMaterial(provider, replay, admission) {
 	}, identity, retainedContextTransfer(replay.turn.contextTransfer)));
 }
 function retainedRunIntent(options, identity, contextTransfer) {
+	const receipt = retainedContextTransferReceipt(options, options.provider.name, contextTransfer);
+	assertRetainedContextTransferIdentity(receipt, identity);
 	const { profile } = options.environment;
 	const requestedProfileDigest = typeof profile === "string" ? canonicalCandidateDigest(profile) : canonicalAgentProfileDigest(profile);
 	const requestDigest = canonicalCandidateDigest({
@@ -8333,6 +8683,10 @@ function retainedRunIntent(options, identity, contextTransfer) {
 		sessionId: identity.sessionId,
 		executionId: identity.executionId,
 		requestedProfileDigest,
+		...receipt === void 0 ? {} : { contextTransferReceiptDigest: canonicalCandidateDigest({
+			...receipt,
+			status: "accepted"
+		}) },
 		create: retainedCreateMaterial(options.environment),
 		turn: retainedTurnMaterial(options.turn, contextTransfer)
 	});
@@ -8350,7 +8704,9 @@ function retainedRunIntent(options, identity, contextTransfer) {
 }
 function retainedContextTransfer(value) {
 	if (value === void 0) return void 0;
-	return detachedSnapshot(ContextTransferRequestSchema.parse(value), "retained context transfer request");
+	const parsed = ContextTransferRequestSchema.safeParse(value);
+	if (!parsed.success) throw new Error("retained context transfer request is invalid or uses an incompatible wire contract; preserve the original record and explicitly reconstruct and review an Interface 5 transfer request before retrying", { cause: parsed.error });
+	return detachedSnapshot(parsed.data, "retained context transfer request");
 }
 function assertExactRetainedRunIntent(received, expected) {
 	if (canonicalCandidateDigest(parseRetainedRunIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("retained run intent conflicts with replay material");
@@ -10825,6 +11181,7 @@ function retainedExecutorContext(ctx) {
 }
 const causeMessages = {
 	unobservable: "retained provider execution requires reconciliation before replacement",
+	"terminal-event-lost": "retained provider stream ended or stalled without a terminal event; exact result requires reconciliation",
 	"provider-contract": "retained provider response violated its contract; original execution remains unresolved",
 	"request-rejected": "retained provider execution was refused before it ran; nothing to reconcile",
 	transport: "retained provider execution lost its transport; status in doubt",
@@ -11578,13 +11935,18 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	const livePort = options.workspaceRetention?.captureLive === void 0 ? void 0 : options.workspaceRetention;
 	let liveInFlight;
 	let liveTimer;
+	let liveStop;
 	const stopLiveMirror = () => {
 		if (liveTimer !== void 0) clearTimeout(liveTimer);
 		liveTimer = void 0;
+		liveStop?.abort(/* @__PURE__ */ new Error("live workspace capture stopped: its turn ended"));
+		liveStop = void 0;
 	};
 	const startLiveMirror = (next) => {
 		if (livePort?.liveIntervalMs === void 0) return;
 		stopLiveMirror();
+		const stop = new AbortController();
+		liveStop = stop;
 		const schedule = () => {
 			liveTimer = setTimeout(() => {
 				if (liveInFlight === void 0 && workspaceCapturePromise === void 0) {
@@ -11596,7 +11958,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						providerSessionId,
 						nativeSessionId: null,
 						profile: createProfile
-					}).then(() => void 0, () => void 0).finally(() => {
+					}, stop.signal).then(() => void 0, () => void 0).finally(() => {
 						if (liveInFlight === tracked) liveInFlight = void 0;
 					});
 					liveInFlight = tracked;
@@ -11675,6 +12037,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		schedule();
 	};
 	const finishNativeMirror = async (next, phase) => {
+		stopLiveMirror();
 		await stopNativeMirror();
 		if (workspaceSnapshot !== void 0 && !nativeHoldsTranscript) return;
 		await captureNative(next, phase, void 0, harnessStopped);
@@ -12096,6 +12459,33 @@ const NATIVE_STOP_TIMEOUT_MS = 3e4;
 /** How long the final copy of a stopped harness waits for the provider to record how it ended. */
 const NATIVE_SETTLE_WINDOW_MS = 15e3;
 const NATIVE_SETTLE_POLL_MS = 1e3;
+/** The two waits together leave a minute for Runtime to record a pending result before ten minutes. */
+const RETAINED_OBSERVATION_IDLE_MS = 8 * 6e4;
+const RETAINED_RESULT_WAIT_MS = 6e4;
+var RetainedReadTimeoutError = class extends Error {
+	constructor(label, ms) {
+		super(`retained provider ${label} did not settle within ${ms} ms`);
+		this.name = "RetainedReadTimeoutError";
+	}
+};
+function retainedWaitBound(value, maximum, name) {
+	if (value === void 0) return maximum;
+	if (!Number.isSafeInteger(value) || value <= 0 || value > maximum) throw new ValidationError(`${name} must be a positive integer at most ${maximum} ms`);
+	return value;
+}
+/** Bound a provider read without confusing a lost observer with a cancelled execution. */
+function awaitRetainedRead(read, ms, label) {
+	return new Promise((resolve, reject) => {
+		const clear = armDeadlineTimer(ms, () => reject(new RetainedReadTimeoutError(label, ms)), true);
+		read.then((value) => {
+			clear();
+			resolve(value);
+		}, (error) => {
+			clear();
+			reject(error);
+		});
+	});
+}
 /** The environment id the latest durable admission names, when creation got that far. */
 function admittedEnvironmentId(retention) {
 	for (const admission of [...retention?.admissions ?? []].reverse()) {
@@ -12485,6 +12875,8 @@ async function providerExecutionSource(args, turn, signal) {
 		};
 	}
 	const retention = args.retention;
+	const observationIdleMs = retainedWaitBound(args.options.retainedObservationIdleMs, RETAINED_OBSERVATION_IDLE_MS, "retainedObservationIdleMs");
+	const resultWaitMs = retainedWaitBound(args.options.retainedResultWaitMs, RETAINED_RESULT_WAIT_MS, "retainedResultWaitMs");
 	let admitted = args.recovering;
 	let executionAdmitted = args.recovering && retention.admissions.some((admission) => admission.phase === "dispatched");
 	const onAdmission = async (admission) => {
@@ -12611,6 +13003,8 @@ async function providerExecutionSource(args, turn, signal) {
 			let observationFailure;
 			let lastReplayPosition;
 			let sawTerminal = false;
+			let lastObservedAt = Date.now();
+			const seenEvents = /* @__PURE__ */ new Map();
 			const drain = async function* (open) {
 				let iterator;
 				let failed = false;
@@ -12625,7 +13019,9 @@ async function providerExecutionSource(args, turn, signal) {
 					while (true) {
 						let next;
 						try {
-							next = await awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal);
+							const remaining = observationIdleMs - (Date.now() - lastObservedAt);
+							if (remaining <= 0) throw new RetainedReadTimeoutError("event stream", observationIdleMs);
+							next = await awaitRetainedRead(awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal), remaining, "event stream");
 						} catch (error) {
 							if (signal.aborted) throw error;
 							observationFailure = { error };
@@ -12641,7 +13037,25 @@ async function providerExecutionSource(args, turn, signal) {
 								cause: error
 							});
 						}
-						if (next.value.id !== void 0) lastReplayPosition = next.value.id;
+						const identity = extractTransportEventIdentity(next.value);
+						const eventId = identity.eventId ?? identity.cursor;
+						if (eventId !== void 0) {
+							const digest = canonicalCandidateDigest({
+								type: next.value.type,
+								data: next.value.data,
+								...next.value.usage === void 0 ? {} : { usage: next.value.usage },
+								...next.value.normalized === void 0 ? {} : { normalized: next.value.normalized }
+							});
+							const prior = seenEvents.get(eventId);
+							if (prior !== void 0) {
+								if (prior !== digest) throw new RetainedRunProviderContractError(`provider replay changed retained event ${eventId}`, { code: "RETAINED_EVENT_DUPLICATE_CHANGED" });
+								continue;
+							}
+							seenEvents.set(eventId, digest);
+						}
+						lastObservedAt = Date.now();
+						if (identity.cursor !== void 0) lastReplayPosition = identity.cursor;
+						else if (eventId !== void 0) lastReplayPosition = eventId;
 						if (isTerminalEnvironmentEvent(next.value)) sawTerminal = true;
 						yield next.value;
 					}
@@ -12654,7 +13068,7 @@ async function providerExecutionSource(args, turn, signal) {
 			if (!(yield* drain(() => session.events({
 				executionId: handle.controlRef.executionId,
 				signal
-			}))) && !sawTerminal && lastReplayPosition !== void 0) {
+			}))) && !sawTerminal && lastReplayPosition !== void 0 && !(observationFailure?.error instanceof RetainedReadTimeoutError)) {
 				const firstFailure = observationFailure;
 				observationFailure = void 0;
 				if (!(yield* drain(() => session.events({
@@ -12663,11 +13077,14 @@ async function providerExecutionSource(args, turn, signal) {
 					signal
 				})))) observationFailure = firstFailure;
 			}
+			if (!sawTerminal && observationFailure === void 0) observationFailure = { error: /* @__PURE__ */ new Error("retained provider stream ended without a terminal event") };
 			let result;
 			try {
-				result = await awaitAbortable$1(handle.result(), signal);
+				result = await awaitRetainedRead(awaitAbortable$1(handle.result(), signal), resultWaitMs, "exact result");
 			} catch (error) {
-				if (observationFailure === void 0 || signal.aborted) throw error;
+				if (signal.aborted) throw error;
+				if (!sawTerminal && error instanceof RetainedReadTimeoutError) throw new RetainedExecutionPendingError(new AggregateError([observationFailure?.error, error], "retained event stream had no terminal event and its exact result is unavailable", { cause: error }), "terminal-event-lost");
+				if (observationFailure === void 0) throw error;
 				throw new AggregateError([observationFailure.error, error], "retained event observation failed and its exact result could not be reconciled", { cause: error });
 			}
 			yield {
@@ -13475,15 +13892,57 @@ async function runBrainLoop(opts) {
 	let tokensKnown = true;
 	let completedTurns = 0;
 	const toolTrace = [];
+	const signal = opts.signal ?? new AbortController().signal;
+	const codeMode = opts.codeMode ? createCodeModeTools(opts.tools.map(({ function: tool }) => ({
+		name: tool.name,
+		description: tool.description,
+		inputSchema: tool.parameters,
+		outputSchema: tool.outputSchema,
+		execute: async (raw, context) => {
+			signal.throwIfAborted();
+			if (opts.hooks?.stopBefore?.(completedTurns + 1)) throw new Error("code mode: Runtime execution has stopped");
+			const args = codeModeArguments(raw);
+			let result;
+			try {
+				result = await opts.execute(tool.name, args, context);
+			} catch (error) {
+				if (context.callId !== context.parentCallId) toolTrace.push({
+					name: tool.name,
+					args: JSON.stringify(args),
+					result: `error: ${error instanceof Error ? error.message : String(error)}`
+				});
+				throw error;
+			}
+			if (context.callId !== context.parentCallId) toolTrace.push({
+				name: tool.name,
+				args: JSON.stringify(args),
+				result: toolResultText(result)
+			});
+			return result;
+		}
+	})), opts.codeMode === true ? {} : opts.codeMode) : void 0;
+	const modelTools = codeMode ? codeMode.tools.map((tool) => ({
+		type: "function",
+		function: {
+			name: tool.name,
+			description: tool.description,
+			parameters: tool.inputSchema
+		}
+	})) : opts.tools;
+	const codeByName = new Map(codeMode?.tools.map((tool) => [tool.name, tool]) ?? []);
+	const retainedCodeMode = () => codeMode ? {
+		codeModeStore: codeMode.snapshotStore(),
+		modelToolNames: modelTools.map((tool) => tool.function.name)
+	} : {};
 	for (let turn = 1; maxTurns === 0 || turn <= maxTurns; turn += 1) {
-		if (opts.hooks?.stopBefore?.(turn)) break;
+		if (signal.aborted || opts.hooks?.stopBefore?.(turn)) break;
 		await opts.hooks?.beforeTurn?.(turn, messages);
-		if (opts.hooks?.stopBefore?.(turn)) break;
+		if (signal.aborted || opts.hooks?.stopBefore?.(turn)) break;
 		if (opts.compaction) {
 			await maybeCompact(messages, opts.compaction, turn);
-			if (opts.hooks?.stopBefore?.(turn)) break;
+			if (signal.aborted || opts.hooks?.stopBefore?.(turn)) break;
 		}
-		const r = await opts.chat(messages, opts.tools);
+		const r = await opts.chat(messages, modelTools);
 		completedTurns = turn;
 		if (r.usage) {
 			usage.input += r.usage.input;
@@ -13511,13 +13970,15 @@ async function runBrainLoop(opts) {
 				toolTrace,
 				usage,
 				...tokensKnown ? {} : { tokensKnown: false },
-				messages
+				messages,
+				...retainedCodeMode()
 			};
 		}
 		messages.push({
 			role: "assistant",
 			content: r.content ?? "",
 			tool_calls: r.toolCalls.map((tc) => ({
+				...tc.providerFields,
 				id: tc.id,
 				type: "function",
 				function: {
@@ -13526,6 +13987,7 @@ async function runBrainLoop(opts) {
 				}
 			}))
 		});
+		const images = [];
 		for (const tc of r.toolCalls) {
 			toolCalls += 1;
 			let args = {};
@@ -13539,7 +14001,32 @@ async function runBrainLoop(opts) {
 				});
 				continue;
 			}
-			const out = await opts.execute(tc.name, args);
+			signal.throwIfAborted();
+			let result;
+			let dispatchSucceeded = true;
+			if (codeMode) {
+				const tool = codeByName.get(tc.name);
+				if (!tool) {
+					dispatchSucceeded = false;
+					result = `error: code mode: ${tc.name} is not in the model-visible tool set`;
+				} else try {
+					result = await tool.execute(args, {
+						signal,
+						callId: tc.id,
+						parentCallId: tc.id
+					});
+				} catch (error) {
+					dispatchSucceeded = false;
+					result = `error: ${error instanceof Error ? error.message : String(error)}`;
+				}
+			} else result = await opts.execute(tc.name, args, {
+				signal,
+				callId: tc.id,
+				parentCallId: tc.id
+			});
+			const projected = dispatchSucceeded && codeMode && tc.name === "codemode" ? codeModeModelOutput(result) : void 0;
+			if (projected) images.push(...projected.images);
+			const out = projected?.text ?? toolResultText(result);
 			messages.push({
 				role: "tool",
 				tool_call_id: tc.id,
@@ -13551,6 +14038,13 @@ async function runBrainLoop(opts) {
 				result: out
 			});
 		}
+		if (images.length) messages.push({
+			role: "user",
+			content: [{
+				type: "text",
+				text: "Images emitted by codemode:"
+			}, ...images]
+		});
 	}
 	return {
 		final: lastText,
@@ -13559,7 +14053,8 @@ async function runBrainLoop(opts) {
 		toolTrace,
 		usage,
 		...tokensKnown ? {} : { tokensKnown: false },
-		messages
+		messages,
+		...retainedCodeMode()
 	};
 }
 //#endregion
@@ -13667,6 +14162,17 @@ function splitReasoning(rawContent, fieldReasoning) {
 		...fieldReasoning ? { reasoning: fieldReasoning } : {}
 	};
 }
+/** Keep provider extensions beside, never in place of, the canonical call identity and function.
+* Stream indices identify assembly slots and are not replay fields. */
+function toolCallProviderFields(call) {
+	const fields = Object.fromEntries(Object.entries(call).filter(([key]) => ![
+		"id",
+		"type",
+		"function",
+		"index"
+	].includes(key)));
+	return Object.keys(fields).length === 0 ? void 0 : fields;
+}
 /**
 * A router completion WITH tool-calling — the operator driver's LLM seam. Passes OpenAI-shape
 * `messages` (system/user/assistant-with-tool_calls/tool roles) + function `tools`, and returns the
@@ -13698,11 +14204,15 @@ async function routerChatWithTools(cfg, messages, tools, opts) {
 	const data = raw;
 	const msg = data.choices?.[0]?.message;
 	if (!msg) throw new ValidationError$1("router completion: no choices[0].message");
-	const toolCalls = (msg?.tool_calls ?? []).map((tc, i) => ({
-		id: tc.id ?? `call_${i}`,
-		name: tc.function?.name ?? "",
-		arguments: tc.function?.arguments ?? "{}"
-	}));
+	const toolCalls = (msg?.tool_calls ?? []).map((tc, i) => {
+		const providerFields = toolCallProviderFields(tc);
+		return {
+			id: tc.id ?? `call_${i}`,
+			name: tc.function?.name ?? "",
+			arguments: tc.function?.arguments ?? "{}",
+			...providerFields ? { providerFields } : {}
+		};
+	});
 	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, cfg.model, transportAttempts);
 	return {
 		response: raw,
@@ -13740,7 +14250,10 @@ function toolCompletionBody(cfg, messages, tools, opts) {
 		model: cfg.model,
 		messages,
 		...tools.length > 0 ? {
-			tools,
+			tools: tools.map(({ function: { outputSchema: _outputSchema, ...fn }, ...tool }) => ({
+				...tool,
+				function: fn
+			})),
 			tool_choice: opts?.toolChoice ?? "auto"
 		} : {},
 		...opts?.temperature !== void 0 ? { temperature: opts.temperature } : {},
@@ -13849,7 +14362,8 @@ async function streamRouterChatWithTools(cfg, messages, tools, opts) {
 	const toolCalls = [...streamed.calls.entries()].sort((a, b) => a[0] - b[0]).map(([index, call]) => ({
 		id: call.id ?? `call_${index}`,
 		name: call.name ?? "",
-		arguments: call.arguments || "{}"
+		arguments: call.arguments || "{}",
+		...call.providerFields ? { providerFields: call.providerFields } : {}
 	}));
 	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(streamed.rawUsage, cfg.model, streamed.transportAttempts);
 	return {
@@ -13963,6 +14477,11 @@ async function streamChatCompletion(context, cfg, requestBody, opts) {
 			if (tc.id) acc.id = tc.id;
 			if (tc.function?.name) acc.name = tc.function.name;
 			if (tc.function?.arguments) acc.arguments += tc.function.arguments;
+			const providerFields = toolCallProviderFields(tc);
+			if (providerFields) acc.providerFields = {
+				...acc.providerFields,
+				...providerFields
+			};
 			calls.set(index, acc);
 		}
 	}
@@ -19981,6 +20500,33 @@ const routerInlineExecutor = (spec, ctx) => {
 	});
 	return executor;
 };
+/** Compose node behavior with host state and ceilings; neither grants new tools. */
+function routerCodeModeSettings(profile, host) {
+	if (profile === false || profile === void 0 && host === void 0) return void 0;
+	const environment = typeof host === "object" ? host : {};
+	const node = typeof profile === "object" ? profile : {};
+	const limits = {};
+	for (const key of [
+		"timeoutMs",
+		"memoryLimitBytes",
+		"concurrency",
+		"maxCalls"
+	]) {
+		const ceiling = environment[key];
+		const requested = node[key];
+		for (const value of [ceiling, requested]) {
+			if (value === void 0 || key === "timeoutMs" && value === Infinity) continue;
+			if (!Number.isSafeInteger(value) || value < 1 || key === "timeoutMs" && value > 2147483647) throw new ValidationError$1(`router-tools: invalid codeMode.${key}`);
+		}
+		const value = ceiling === void 0 ? requested : requested === void 0 ? ceiling : Math.min(ceiling, requested);
+		if (value !== void 0) limits[key] = value;
+	}
+	return {
+		...environment,
+		...limits,
+		...environment.directTools || node.directTools ? { directTools: [.../* @__PURE__ */ new Set([...environment.directTools ?? [], ...node.directTools ?? []])] } : {}
+	};
+}
 const routerToolsSeamKey = "router-tools";
 function mergePromptCache(target, cache) {
 	if (!cache) return;
@@ -20021,6 +20567,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 		tools: seam.tools
 	}, { multiTurn: true });
 	if (model === "tangle/auto") assertRouterAutoDeclaration(profileExecution.extraBody?.auto, profileExecution.stream);
+	const codeModeConfig = routerCodeModeSettings(profileExecution.codeMode, seam.codeMode);
 	const enabledToolNames = new Set(seam.tools.map((tool) => tool.function.name));
 	const maxTurns = profileExecution.maxTurns ?? 0;
 	const requestIdentity = routerRequestIdentity(ctx);
@@ -20063,6 +20610,54 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 				});
 			};
 			const external = linkAbort(signal, controller.signal).signal;
+			const executeGranted = async (name, raw, context) => {
+				external.throwIfAborted();
+				context.signal.throwIfAborted();
+				if (!enabledToolNames.has(name)) throw new ValidationError$1(`tool ${name} is not granted`);
+				const args = codeModeArguments(raw);
+				if (context.callId !== context.parentCallId) executedToolCalls.push({
+					id: context.callId,
+					name,
+					arguments: JSON.stringify(args)
+				});
+				const startedAt = Date.now();
+				let status = "ok";
+				try {
+					return await seam.executeToolCall(name, args, task, context);
+				} catch (error) {
+					status = "error";
+					throw error;
+				} finally {
+					const endedAt = Date.now();
+					try {
+						seam.onToolStep?.({
+							toolName: name,
+							args,
+							status,
+							startedAt,
+							endedAt,
+							durationMs: endedAt - startedAt
+						});
+					} catch {}
+				}
+			};
+			const codeMode = codeModeConfig ? createCodeModeTools(seam.tools.map(({ function: tool }) => ({
+				name: tool.name,
+				description: tool.description,
+				inputSchema: tool.parameters,
+				outputSchema: tool.outputSchema,
+				execute: (args, context) => executeGranted(tool.name, args, context)
+			})), codeModeConfig) : void 0;
+			const presentedTools = codeMode ? codeMode.tools.map((tool) => ({
+				type: "function",
+				function: {
+					name: tool.name,
+					description: tool.description,
+					parameters: tool.inputSchema
+				}
+			})) : seam.tools;
+			const modelToolNames = new Set(presentedTools.map((tool) => tool.function.name));
+			const codeByName = new Map(codeMode?.tools.map((tool) => [tool.name, tool]) ?? []);
 			try {
 				for (let t = 0; maxTurns === 0 || t < maxTurns; t += 1) {
 					flush();
@@ -20083,7 +20678,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							model,
 							...profileExecution.retry !== void 0 ? { retry: profileExecution.retry } : {},
 							...seam.complete ? { complete: seam.complete } : {}
-						}, messages, seam.tools, {
+						}, messages, presentedTools, {
 							...profileExecution.temperature !== void 0 ? { temperature: profileExecution.temperature } : {},
 							signal: turnController.signal,
 							onResponse: async (receipt) => {
@@ -20165,6 +20760,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 						role: "assistant",
 						content: res.content ?? "",
 						tool_calls: toolCalls.map((tc) => ({
+							...tc.providerFields,
 							id: tc.id,
 							type: "function",
 							function: {
@@ -20173,6 +20769,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							}
 						}))
 					});
+					const images = [];
 					for (let i = 0; i < toolCalls.length; i += 1) {
 						const tc = toolCalls[i];
 						const id = tc?.id ?? `call_${i}`;
@@ -20182,7 +20779,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							name: toolName,
 							arguments: tc?.arguments ?? ""
 						});
-						if (!enabledToolNames.has(toolName)) {
+						if (!modelToolNames.has(toolName)) {
 							messages.push({
 								role: "tool",
 								tool_call_id: id,
@@ -20209,34 +20806,38 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 							continue;
 						}
 						let result;
-						let status = "ok";
-						const toolStartedAt = Date.now();
+						let succeeded = true;
 						try {
-							result = await seam.executeToolCall(toolName, args, task);
+							const context = {
+								signal: AbortSignal.any([external, turnController.signal]),
+								callId: id,
+								parentCallId: id
+							};
+							result = codeMode ? await codeByName.get(toolName).execute(args, context) : await executeGranted(toolName, args, context);
 						} catch (e) {
-							status = "error";
+							succeeded = false;
 							result = `error: ${e instanceof Error ? e.message : String(e)}`;
 						}
-						const toolEndedAt = Date.now();
+						const projected = succeeded && codeMode && toolName === "codemode" ? codeModeModelOutput(result) : void 0;
+						if (projected) images.push(...projected.images);
 						messages.push({
 							role: "tool",
 							tool_call_id: id,
-							content: result
+							content: projected?.text ?? toolResultText(result)
 						});
-						try {
-							seam.onToolStep?.({
-								toolName,
-								args,
-								status,
-								startedAt: toolStartedAt,
-								endedAt: toolEndedAt,
-								durationMs: toolEndedAt - toolStartedAt
-							});
-						} catch {}
 					}
+					if (images.length) messages.push({
+						role: "user",
+						content: [{
+							type: "text",
+							text: "Images emitted by codemode:"
+						}, ...images]
+					});
 				}
 			} finally {
-				await seam.onMessages?.(structuredClone(messages));
+				const saved = structuredClone(messages);
+				if (codeMode) await seam.onMessages?.(saved, { codeModeStore: codeMode.snapshotStore() });
+				else await seam.onMessages?.(saved);
 			}
 			const estimatedUsd = priceTokens({
 				model,
@@ -20256,6 +20857,10 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			};
 			const out = {
 				content: lastText,
+				...codeMode ? {
+					codeModeStore: codeMode.snapshotStore(),
+					modelToolNames: [...modelToolNames]
+				} : {},
 				...observedModel !== void 0 ? { model: observedModel } : {},
 				messages,
 				turns,
@@ -20309,6 +20914,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 			provider: spec.profile.model?.provider ?? null,
 			maxTurns,
 			tools: seam.tools,
+			...seam.codeMode ? { codeMode: seam.codeMode } : {},
 			temperature: profileExecution.temperature ?? null,
 			tokenLimits: profileExecution.tokenLimits,
 			retry: profileExecution.retry ?? null,
@@ -21474,6 +22080,7 @@ function routerProfileExecution(profile, seam, mode) {
 	const profileEffort = profile.model?.reasoningEffort;
 	const settings = profileModelExecutionSettings(profile, "routerInlineExecutor");
 	if (!mode.multiTurn && settings.maxTurns !== void 0) throw new ValidationError$1("routerInlineExecutor: AgentProfile.model.metadata.maxTurns requires the router-tools backend");
+	if (!mode.multiTurn && settings.codeMode !== void 0) throw new ValidationError$1("routerInlineExecutor: AgentProfile.model.metadata.codeMode requires the router-tools backend");
 	if (settings.stream === true && seam.complete !== void 0) throw new ValidationError$1("routerInlineExecutor: AgentProfile.model.metadata.stream requires the HTTP Router transport; RouterSeam.complete returns one buffered completion and cannot serve a stream");
 	const declaredTools = profile.tools ?? {};
 	const suppliedTools = seam.tools ?? [];
@@ -22451,7 +23058,7 @@ async function startRetainedInteractiveRun(options) {
 	assertStableText(identity.executionId, "retained execution id");
 	const intent = interactiveIntent(startOptions, profile, identity);
 	if (startOptions.intent === void 0) await admitDurably(startOptions.onAdmission, intent);
-	else assertExactInteractiveIntent(startOptions.intent, intent);
+	else assertExactInteractiveIntent(startOptions.intent, intent, () => interactiveIntent(startOptions, profile, identity, legacyRetainedCreateMaterial));
 	const providerCapabilities = AgentEnvironmentCapabilitiesSchema.parse(await awaitAbortable$1(Promise.resolve().then(() => startOptions.provider.capabilities()), startOptions.signal));
 	assertInteractiveCapabilities(startOptions.provider.name, providerCapabilities);
 	const environment = await createInteractiveEnvironment(() => startOptions.provider.create({
@@ -22572,7 +23179,7 @@ function interactiveRequest(options, environment, profile, requestedProfileDiges
 		...start
 	});
 }
-function interactiveIntent(options, profile, identity) {
+function interactiveIntent(options, profile, identity, createMaterial = retainedCreateMaterial) {
 	const requestedProfileDigest = canonicalAgentProfileDigest(profile);
 	const requestDigest = canonicalCandidateDigest({
 		kind: "retained-interactive-intent.v1",
@@ -22582,7 +23189,7 @@ function interactiveIntent(options, profile, identity) {
 		sessionId: identity.sessionId,
 		executionId: identity.executionId,
 		requestedProfileDigest,
-		create: retainedCreateMaterial(options.environment),
+		create: createMaterial(options.environment),
 		start: sanitizedStartMaterial(options)
 	});
 	return {
@@ -22605,8 +23212,11 @@ function sanitizedStartMaterial(options) {
 		...options.rows === void 0 ? {} : { rows: options.rows }
 	};
 }
-function assertExactInteractiveIntent(received, expected) {
-	if (canonicalCandidateDigest(parseInteractiveIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("interactive intent conflicts with replay material");
+function assertExactInteractiveIntent(received, expected, legacyExpected) {
+	const stableReceived = parseInteractiveIntent(received);
+	if (canonicalCandidateDigest(stableReceived) !== canonicalCandidateDigest(expected)) {
+		if (legacyExpected === void 0 || canonicalCandidateDigest(stableReceived) !== canonicalCandidateDigest(legacyExpected())) throw new Error("interactive intent conflicts with replay material");
+	}
 }
 function parseInteractiveIntent(value) {
 	const stable = detachedSnapshot(value, "interactive intent");
@@ -24526,6 +25136,7 @@ async function captureBeforeCleanup(state, branching, event, events, parent) {
 	const provider = state.provider;
 	if (provider?.get === void 0) return refuse("the provider cannot reconstruct a fork of the checkpoint", false);
 	const get = provider.get.bind(provider);
+	if (parent?.aborted) return refuse(`capture failed: ${errorText(abortError(parent, "capture stopped").message)}`, true);
 	if (branching === void 0) return refuse("source-scoped checkpoint handle unavailable", true);
 	const material = {
 		checkpoint: event.checkpoint,
@@ -24787,12 +25398,23 @@ async function scopeRetainedOwnerSettled(scope) {
 	await state.releasing?.catch(() => void 0);
 }
 /**
+* How long one release spends capturing the owner's pending checkpoints, all of them together. A
+* capture it cuts short keeps its checkpoint and the source, as a failed capture does, and the
+* release goes on to settle. Each capture is otherwise bounded only by its port, and one at a
+* time: on Discovery run terraform-dc-model-20261010h-c1 (Runtime 0.314.0) a director's release
+* waited 00:19:18Z to 01:19:38Z for one capture to reach the port's 60-minute bound, and the run
+* settled 98 minutes after its deadline. The release captures that finished there took 67 seconds
+* and 7 and 34 minutes, beside live captures of abandoned directors on the same slots.
+*/
+const RELEASE_CHECKPOINT_CAPTURES_MS = 15 * 6e4;
+/**
 * Release the owner's environment once no turn of it will run again: at the run's final
 * settlement for the root, and when a nested manager's own scope has finished. A second call while
 * one is in flight joins it. The release first waits for the end-of-turn capture of the owner's
-* last turn, so the capture always precedes the destroy.
+* last turn, so the capture always precedes the destroy. `capturesMs` bounds the checkpoint
+* captures it runs ({@link RELEASE_CHECKPOINT_CAPTURES_MS}).
 */
-function releaseScopeRetainedOwnerEnvironment(scope) {
+function releaseScopeRetainedOwnerEnvironment(scope, { capturesMs = RELEASE_CHECKPOINT_CAPTURES_MS } = {}) {
 	const state = owners.get(scope);
 	const provider = state?.provider;
 	if (state === void 0 || provider === void 0) return Promise.resolve([]);
@@ -24800,14 +25422,14 @@ function releaseScopeRetainedOwnerEnvironment(scope) {
 	const tracked = (async () => {
 		await ownerDriveEnded(state);
 		await scopeRetainedOwnerTurnEnded(scope);
-		return await releaseOwnerEnvironment(state, provider);
+		return await releaseOwnerEnvironment(state, provider, capturesMs);
 	})().finally(() => {
 		if (state.releasing === tracked) delete state.releasing;
 	});
 	state.releasing = tracked;
 	return tracked;
 }
-async function releaseOwnerEnvironment(state, provider) {
+async function releaseOwnerEnvironment(state, provider, capturesMs) {
 	const { args } = state;
 	state.checkpointsUnavailable ??= "released";
 	await state.checkpointing?.catch(() => void 0);
@@ -24825,11 +25447,17 @@ async function releaseOwnerEnvironment(state, provider) {
 	const checkpointsKept = [];
 	const uncapturedSources = /* @__PURE__ */ new Set();
 	const pending = pendingCheckpoints(events, state).filter((event) => !retentionFailures.has(event.environmentId));
-	for (const sourceEnvironmentId of new Set(pending.map((event) => event.environmentId))) {
-		const cleaned = await cleanCheckpoints(state, await checkpointHandle(state, sourceEnvironmentId, AbortSignal.timeout(3e4)), pending.filter((event) => event.environmentId === sourceEnvironmentId), events);
-		checkpointFailures.push(...cleaned.unconfirmed);
-		checkpointsKept.push(...cleaned.refused);
-		for (const refusal of cleaned.refused) if (refusal.needsSource) uncapturedSources.add(sourceEnvironmentId);
+	const captures = new AbortController();
+	const capturesTimer = setTimeout(() => captures.abort(/* @__PURE__ */ new Error(`the release's ${capturesMs} ms for checkpoint captures ran out; checkpoint and source kept`)), capturesMs);
+	try {
+		for (const sourceEnvironmentId of new Set(pending.map((event) => event.environmentId))) {
+			const cleaned = await cleanCheckpoints(state, await checkpointHandle(state, sourceEnvironmentId, AbortSignal.any([captures.signal, AbortSignal.timeout(3e4)])), pending.filter((event) => event.environmentId === sourceEnvironmentId), events, captures.signal);
+			checkpointFailures.push(...cleaned.unconfirmed);
+			checkpointsKept.push(...cleaned.refused);
+			for (const refusal of cleaned.refused) if (refusal.needsSource) uncapturedSources.add(sourceEnvironmentId);
+		}
+	} finally {
+		clearTimeout(capturesTimer);
 	}
 	const forksUnresolved = await settleCaptureForks(state);
 	for (const event of checkpointFailures) pendingSources.add(event.environmentId);
@@ -28644,7 +29272,7 @@ function isUpstreamUnavailable(error) {
 */
 function classifyDriverFailure(error, signal) {
 	if (signal?.aborted) return "terminal";
-	if (error instanceof RetainedExecutionPendingError && error.pendingCause === "provider-contract") return "terminal";
+	if (error instanceof RetainedExecutionPendingError && (error.pendingCause === "provider-contract" || error.pendingCause === "terminal-event-lost")) return "terminal";
 	const admission = retainedAdmissionCause(error);
 	if (admission !== void 0 && isDispatchNotAdmitted(admission)) return "terminal";
 	if (admission !== void 0) return classifyDriverFailure(admission, signal);
@@ -28882,6 +29510,7 @@ async function runDriverWithRetry(run) {
 			const after = run.progress();
 			const progressed = madeProgress(before, after);
 			if (progressed) abandonments = 0;
+			const retainedFailure = error instanceof RetainedExecutionPendingError ? error : void 0;
 			const pending = abandonablePending(error);
 			samePending = pending === void 0 || classification !== "transient" ? void 0 : {
 				cause: pending.pendingCause,
@@ -28971,7 +29600,7 @@ async function runDriverWithRetry(run) {
 					classification,
 					madeProgress: progressed,
 					stop: retryStop,
-					...unresolved ? { pendingCause: pending.pendingCause } : {}
+					...retainedFailure === void 0 ? {} : { pendingCause: retainedFailure.pendingCause }
 				});
 				throw new DriverAttemptsExhaustedError(error, attempts, retryStop);
 			}
@@ -30220,6 +30849,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { environmentReader as $, executableAgentSpecSnapshot as $i, parseWorkerToolTraceArtifact as $n, toOtelAttributes as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, sandboxActProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, knownMaterializationReceipt as Bi, InMemoryResultBlobStore as Bn, defaultRedactor as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, profileMaterializationAxes$1 as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, promptResourceProfileMaterialization as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, promptOnlyProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, attestRuntimeOwnedScopeOwner as Fi, retainedExecutorSeamKey as Fn, ROUTER_PRICE_SOURCE as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, runtimeOwnedExecutorExecutionBinding as Gi, replaySpawnTree as Gn, buildRuntimeEventOtelSpans as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, providerAttemptEvidence as Hi, insideCursorNamespace as Hn, resolveRedactor as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, authoredProfileDigest as Ii, unavailablePauseMs as In, createPropagatingTraceEmitter as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedPendingExecutorMaterialization as Ji, readCommittedJsonLines as Jn, flatOtelSpan as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, runtimeOwnedExecutorMaterialization as Ki, isNoEntError as Kn, createOpenInferenceFileExporter as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, finalizeRuntimeOwnedPendingExecutor as Li, unavailableSignalOfFailure as Ln, mergeTraceEnv as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, validateProfileMaterialization as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, worktreeCliProfileMaterialization as Ni, sandboxSessionTraceSource as Nn, priceTokens as Nr, createExecutor as Nt, recordScopeOwnerPause as O, renderProfileMaterializationIssues as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, attestRuntimeOwnedPendingExecutor as Pi, registerRetainedExecutorPreparation as Pn, routerTokenPrice as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, executableAgentProfileSnapshot as Qi, isTraceAnalysisStore as Qn, padTraceId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, inheritRuntimeOwnedExecutorAttestation as Ri, FileResultBlobStore as Rn, readTraceContextFromEnv as Rr, createSteerableSandboxSession as Rt, createScope as S, fullProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, promptModelProfileMaterialization as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, recordRuntimeOwnedDriveHarnessProviderEvidence as Ui, loadSpawnForest as Un, buildLoopOtelSpans as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, newExecutionAttemptId as Vi, InMemorySpawnJournal as Vn, defaultRedactorIdentityMaterial as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, runtimeOwnedDriveHarnessProviderEvidence as Wi, materializeTreeView as Wn, buildLoopSpanNodes as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, unknownExecutionBindingReceipt as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, loopEventToOtelSpan as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedScopeOwnerRuntime as Yi, writeAllBytes as Yn, generateSpanId as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, unknownMaterializationReceipt as Zi, captureWorkerTraceEvidence as Zn, padSpanId as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, abortError$1 as _a, terminateProcessTreeAndConfirm as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, canonicalStreamEventFromSandboxEvent as aa, runSettledCommand as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, promptOptionsFromAgentTurnInput as ba, controlProfileMaterialization as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, extractLlmCallEvent as ca, createWorktree as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, mapSandboxToolEvent as da, LOCAL_HARNESSES as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, detachedFrozen as ea, createRuntimeEventCollector as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, notifySandboxEventObserver as fa, harnessInvocation as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, decodeHarnessUsage as ga, CodexExecutionDiagnosticError as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, sumSandboxUsage as ha, parseCodexTokenUsage as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, assertSandboxServedModel as ia, sanitizeRuntimeStreamEvent as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, unsupportedProfileDimensions as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, renderUnsupported as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, isSandboxTerminalEvent as la, removeWorktree as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, sandboxProgressEvents as ma, localHarnessExecutable as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, projectSandboxOutcome as na, sanitizeAgentRuntimeEvent as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, createSandboxToolPartState as oa, runWorktreeHarness as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, sandboxEventServedBackend as pa, harnessSupportsReasoningEffort as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, runtimeOwnedExecutorProviderEvidence as qi, prepareJsonlAppend as qn, createOtelExporter as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, readSandboxOutcome as ra, sanitizeKnowledgeReadinessReport as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, createSandboxUsageLedger as sa, captureWorktreeDiff as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, detachedSnapshot as ta, createRuntimeStreamEventCollector as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, mapSandboxEvent as ua, DEFAULT_LOCAL_HARNESS as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, awaitAbortable$1 as va, AGENT_PROFILE_MATERIALIZATION_AXES as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, promptControlProfileMaterialization as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, providerMessageText as xa, defineProfileMaterializationContract as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, promptFromAgentTurnInput as ya, assertProfileMaterialization as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, knownExecutionBindingReceipt as zi, FileSpawnJournal as zn, traceContextToEnv as zr, createRouterTranscript as zt };
+export { environmentReader as $, runtimeOwnedScopeOwnerRuntime as $i, parseWorkerToolTraceArtifact as $n, loopEventToOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptOnlyProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, authoredProfileDigest as Bi, InMemoryResultBlobStore as Bn, mergeTraceEnv as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, promptFromAgentTurnInput as Ca, assertProfileMaterializes as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, profileMaterializationAxes$1 as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, fullProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, unsupportedProfileDimensions as Fi, retainedExecutorSeamKey as Fn, runCodeMode as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, newExecutionAttemptId as Gi, replaySpawnTree as Gn, resolveRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, inheritRuntimeOwnedExecutorAttestation as Hi, insideCursorNamespace as Hn, traceContextToEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, validateProfileMaterialization as Ii, unavailablePauseMs as In, priceTokens as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedDriveHarnessProviderEvidence as Ji, readCommittedJsonLines as Jn, buildRuntimeEventOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, providerAttemptEvidence as Ki, isNoEntError as Kn, buildLoopOtelSpans as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, worktreeCliProfileMaterialization as Li, unavailableSignalOfFailure as Ln, routerTokenPrice as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, renderProfileMaterializationIssues as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, renderUnsupported as Ni, sandboxSessionTraceSource as Nn, createCodeModeTools as Nr, createExecutor as Nt, recordScopeOwnerPause as O, promptControlProfileMaterialization as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, sandboxActProfileMaterialization as Pi, registerRetainedExecutorPreparation as Pn, describeCodeModeTools as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedPendingExecutorMaterialization as Qi, isTraceAnalysisStore as Qn, generateSpanId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, attestRuntimeOwnedPendingExecutor as Ri, FileResultBlobStore as Rn, ROUTER_PRICE_SOURCE as Rr, createSteerableSandboxSession as Rt, createScope as S, awaitAbortable$1 as Sa, assertProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, providerMessageText as Ta, defineProfileMaterializationContract as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, knownExecutionBindingReceipt as Ui, loadSpawnForest as Un, defaultRedactor as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, finalizeRuntimeOwnedPendingExecutor as Vi, InMemorySpawnJournal as Vn, readTraceContextFromEnv as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, knownMaterializationReceipt as Wi, materializeTreeView as Wn, defaultRedactorIdentityMaterial as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedExecutorMaterialization as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createOtelExporter as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedExecutorExecutionBinding as Yi, writeAllBytes as Yn, createOpenInferenceFileExporter as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedExecutorProviderEvidence as Zi, captureWorkerTraceEvidence as Zn, flatOtelSpan as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, sandboxEventServedBackend as _a, localHarnessExecutable as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, detachedSnapshot as aa, sanitizeAgentRuntimeEvent as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, decodeHarnessUsage as ba, terminateProcessTreeAndConfirm as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, assertSandboxServedModel as ca, runSettledCommand as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, createSandboxUsageLedger as da, createWorktree as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, unknownExecutionBindingReceipt as ea, padSpanId as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, extractLlmCallEvent as fa, removeWorktree as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, notifySandboxEventObserver as ga, harnessSupportsReasoningEffort as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, mapSandboxToolEvent as ha, harnessInvocation as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, detachedFrozen as ia, createRuntimeStreamEventCollector as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, promptResourceProfileMaterialization as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, promptModelProfileMaterialization as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, canonicalStreamEventFromSandboxEvent as la, runWorktreeHarness as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, mapSandboxEvent as ma, LOCAL_HARNESSES as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, executableAgentProfileSnapshot as na, toOtelAttributes as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, projectSandboxOutcome as oa, sanitizeKnowledgeReadinessReport as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, isSandboxTerminalEvent as pa, DEFAULT_LOCAL_HARNESS as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, recordRuntimeOwnedDriveHarnessProviderEvidence as qi, prepareJsonlAppend as qn, buildLoopSpanNodes as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, executableAgentSpecSnapshot as ra, createRuntimeEventCollector as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, readSandboxOutcome as sa, sanitizeRuntimeStreamEvent as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, unknownMaterializationReceipt as ta, padTraceId as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, createSandboxToolPartState as ua, captureWorktreeDiff as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, sandboxProgressEvents as va, parseCodexTokenUsage as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, promptOptionsFromAgentTurnInput as wa, controlProfileMaterialization as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, abortError$1 as xa, AGENT_PROFILE_MATERIALIZATION_AXES as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, sumSandboxUsage as ya, CodexExecutionDiagnosticError as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, attestRuntimeOwnedScopeOwner as zi, FileSpawnJournal as zn, createPropagatingTraceEmitter as zr, createRouterTranscript as zt };
 
-//# sourceMappingURL=supervisor-CbFyf48U.js.map
+//# sourceMappingURL=supervisor-Cqhu3xH-.js.map