@tangle-network/agent-runtime 0.318.0 → 0.319.5

package/dist/{supervisor-BXEL_Fxe.js → supervisor--nmU6w86.js}

@@ -1,10 +1,10 @@
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as randomSuffix, A as verifiedArtifactChunks, B as addSpend, Ct as isDeadlineAbortReason, Et as teardownSurfaces, G as deleteBoxSafe, H as chargedTokens, J as hasCompleteCacheBreakdown, K as errorMessage, O as verifyWorkspaceSnapshotArtifacts, P as deepFreezeCandidate, Q as promptCacheTokenClasses, St as checkInIdleMs, Tt as teardownExecutor, U as cloneSpend, V as addTokenUsage, W as cloneTokenUsage, X as isAsyncIterable$1, Z as mapWithConcurrency, a as verifyAgentCandidateWorkspaceArtifacts, at as throwIfAborted, bt as armDeadlineTimer, ct as zeroSpend, dt as assertResources, et as randomUuid, ft as resourceTelemetry, ht as CHILD_DEADLINE_REASON, i as readAgentCandidateWorkspaceArtifactFiles, it as throwAbort, lt as zeroTokenUsage, mt as ACCEPTED_RESULT_GRACE_MS, nt as sleep, o as verifyAgentCandidateWorkspaceTree, ot as unmeteredSpend, pt as withBudgetResources, q as fnv1a32Hex, rt as stringifySafe, st as withTimeout, tt as roundBoxMinutes, u as verifyAgentCandidateWorkspaceArchive, ut as addResourceSpend, wt as singleFlightTeardown, xt as boundedChildDeadlineAt, yt as ROOT_DEADLINE_REASON } from "./workspace-streams-DkijayqX.js";
+import { $ as promptCacheTokenClasses, Ct as checkInIdleMs, Dt as teardownSurfaces, Et as teardownExecutor, F as deepFreezeCandidate, G as cloneTokenUsage, H as addTokenUsage, J as fnv1a32Hex, K as deleteBoxSafe, Q as mapWithConcurrency, St as boundedChildDeadlineAt, Tt as singleFlightTeardown, U as chargedTokens, V as addSpend, W as cloneSpend, Y as hasCompleteCacheBreakdown, Z as isAsyncIterable$1, a as verifyAgentCandidateWorkspaceArtifacts, at as throwAbort, bt as ROOT_DEADLINE_REASON, ct as withTimeout, dt as addResourceSpend, et as randomSuffix, ft as assertResources, gt as CHILD_DEADLINE_REASON, ht as ACCEPTED_RESULT_GRACE_MS, i as readAgentCandidateWorkspaceArtifactFiles, it as stringifySafe, j as verifiedArtifactChunks, k as verifyWorkspaceSnapshotArtifacts, lt as zeroSpend, mt as withBudgetResources, nt as roundBoxMinutes, o as verifyAgentCandidateWorkspaceTree, ot as throwIfAborted, pt as resourceTelemetry, q as errorMessage, rt as sleep, st as unmeteredSpend, tt as randomUuid, u as verifyAgentCandidateWorkspaceArchive, ut as zeroTokenUsage, wt as isDeadlineAbortReason, xt as armDeadlineTimer } from "./workspace-streams-DFAhW7hF.js";
 import { runTaskQueue } from "./task-queue.js";
-import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-B-rOb8Nj.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CNe257pB.js";
 import { n as assertNoSymlinkDescendant, r as publishExclusiveDurableFile } from "./durable-file-DWQA4ooo.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
+import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferReceiptSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, agentWorkspaceSnapshotRefDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, contextTransferReceiptMatches, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
 import { isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -7809,6 +7809,43 @@ function assertRequestedInteractionCapabilities(providerName, requested, capabil
 	if (interactions.replay !== true || interactions.responseIdempotency !== true) throw new Error(`provider "${providerName}" cannot safely dispatch requested interactions without replay and response idempotency`);
 }
 //#endregion
+//#region src/runtime/retained-context-transfer.ts
+/** Validate attachment authority before admission or any provider operation. */
+function retainedContextTransferReceipt(options, provider, request) {
+	if (request === void 0) {
+		if (options.contextTransferReceipt !== void 0) throw new Error("context transfer receipt requires its exact request");
+		return;
+	}
+	if (options.contextTransferReceipt === void 0) throw new Error("retained context transfer requires an accepted receipt; it cannot create another environment");
+	const receipt = detachedSnapshot(ContextTransferReceiptSchema.parse(options.contextTransferReceipt), "retained context transfer receipt");
+	if (!contextTransferReceiptMatches(request, receipt) || receipt.provider !== provider) throw new Error("retained context transfer receipt does not match its exact request or provider");
+	const { environment, turn } = options;
+	const destination = request.plan.destination;
+	if (request.profile === void 0 || typeof environment.profile === "string" || canonicalAgentProfileDigest(environment.profile) !== destination.profileDigest || turn.profile !== void 0 && canonicalAgentProfileDigest(turn.profile) !== destination.profileDigest) throw new Error("retained context transfer requires the accepted exact profile");
+	if (environment.backend !== void 0 && environment.backend !== destination.runner) throw new Error("retained context transfer runner conflicts with the accepted destination");
+	if (canonicalCandidateDigest(environment.workspace ?? null) !== canonicalCandidateDigest(request.workspace ?? null) || canonicalCandidateDigest(environment.resources ?? null) !== canonicalCandidateDigest(request.resources ?? null)) throw new Error("retained context transfer workspace or resources conflict with acceptance");
+	if (environment.requestedId !== void 0 && environment.requestedId !== receipt.environmentId || options.existingEnvironmentId !== void 0 && options.existingEnvironmentId !== receipt.environmentId) throw new Error("retained context transfer targets another environment");
+	if (environment.runtimeAttachments !== void 0 || environment.egress !== void 0 || environment.billingOwner !== void 0 || Object.keys(environment.env ?? {}).length > 0 || Object.keys(environment.secrets ?? {}).length > 0 || Object.keys(environment.providerOptions ?? {}).length > 0) throw new Error("retained context transfer attachment cannot apply unaccepted create-time options");
+	return receipt;
+}
+function assertRetainedContextTransferIdentity(receipt, identity) {
+	if (receipt !== void 0 && (identity.sessionId !== receipt.sessionId || identity.executionId !== receipt.executionId)) throw new Error("retained context transfer identity conflicts with the accepted receipt");
+}
+function assertRetainedContextTransferCapability(capabilities) {
+	if (capabilities.contextTransfer?.attach !== true) throw new Error("provider cannot attach the accepted context transfer destination");
+}
+/** The provider get contract performs the authoritative operation lookup once. */
+function assertRetainedContextTransferEnvironment(environment, request, receipt) {
+	const actual = ContextTransferReceiptSchema.safeParse(environment.contextTransferReceipt);
+	if (!actual.success || !contextTransferReceiptMatches(request, actual.data) || environment.id !== receipt.environmentId || environment.provider !== receipt.provider || canonicalCandidateDigest({
+		...actual.data,
+		status: "accepted"
+	}) !== canonicalCandidateDigest({
+		...receipt,
+		status: "accepted"
+	})) throw new Error("provider did not reconstruct the authoritative accepted context transfer receipt");
+}
+//#endregion
 //#region src/runtime/retained-run-events.ts
 /** The runtime's own contract checks inside the stream loop, so the catch can tell a broken
 *  answer (a verdict) from a read the provider's iterator failed (a wrapper). */
@@ -8209,10 +8246,31 @@ function createRetainedRunHandle(environment, session, initialControlRef, capabi
 * Secret names remain public binding data, so changing requested credentials
 * still conflicts before provider effects begin.
 */
+/**
+* The pre-interface5 create-material projection: `requestedId`, `egress`,
+* `billingOwner`, and the workspace `snapshot` digest omitted — the shape
+* records persisted by the previous version digested. Accepted only when
+* validating replayed records (an upgrade must not strand an in-flight run
+* whose provider creation already completed); every new admission digests the
+* current projection.
+*/
+function legacyRetainedCreateMaterial(environment) {
+	const { requestedId: _requestedId, egress: _egress, billingOwner: _billingOwner, workspace, ...preInterface5 } = environment;
+	return retainedCreateMaterial(workspace === void 0 ? preInterface5 : {
+		...preInterface5,
+		workspace: (() => {
+			const { snapshot: _snapshot, ...legacyWorkspace } = workspace;
+			return legacyWorkspace;
+		})()
+	});
+}
 function retainedCreateMaterial(environment) {
 	return {
 		...environment.metadata?.runtimeProviderPlacement === void 0 ? {} : { placement: environment.metadata.runtimeProviderPlacement },
 		...environment.backend === void 0 ? {} : { backend: environment.backend },
+		...environment.requestedId === void 0 ? {} : { requestedId: environment.requestedId },
+		...environment.egress === void 0 ? {} : { egress: environment.egress },
+		...environment.billingOwner === void 0 ? {} : { billingOwner: environment.billingOwner },
 		...environment.workspace === void 0 ? {} : { workspaceDigest: canonicalCandidateDigest(publicWorkspaceMaterial(environment.workspace)) },
 		...environment.resources === void 0 ? {} : { resourcesDigest: canonicalCandidateDigest(publicResourceMaterial(environment.resources)) },
 		...environment.runtimeAttachments === void 0 ? {} : { runtimeAttachmentsDigest: canonicalCandidateDigest(environment.runtimeAttachments) },
@@ -8237,6 +8295,8 @@ function publicWorkspaceMaterial(workspace) {
 		...workspace.repoUrl === void 0 ? {} : { repoUrl: workspace.repoUrl },
 		...workspace.gitRef === void 0 ? {} : { gitRef: workspace.gitRef },
 		...workspace.cwd === void 0 ? {} : { cwd: workspace.cwd },
+		...workspace.checkpoint === void 0 ? {} : { checkpoint: workspace.checkpoint },
+		...workspace.snapshot === void 0 ? {} : { snapshotDigest: agentWorkspaceSnapshotRefDigest(workspace.snapshot) },
 		...workspace.providerOptions === void 0 ? {} : { providerOptionNames: retainedObjectNames(workspace.providerOptions) }
 	};
 }
@@ -8293,7 +8353,7 @@ function mintRetainedIdentity(idempotencyKey, turnId) {
 * coordinates are confirmed by the provider and persisted by the caller.
 *
 * The required `onAdmission` hook first records a digest-only intent before
-* creation, then records recovery coordinates and the verified exact control
+* creation or receipt-authorized attachment, then records recovery coordinates and the verified exact control
 * reference. The returned promise resolves only after the dispatched admission
 * is durable, so a crash cannot lose a successful start's exact reference.
 *
@@ -8303,14 +8363,19 @@ async function startRetainedRun(options) {
 	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(options.turn.turnId, "turn idempotency key");
 	if (typeof options.onAdmission !== "function") throw new Error("startRetainedRun requires an awaited onAdmission durability hook");
-	const { sessionId, executionId } = options.identity ?? options.intent ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
+	const contextTransfer = retainedContextTransfer(options.turn.contextTransfer);
+	const transferReceipt = retainedContextTransferReceipt(options, options.provider.name, contextTransfer);
+	const { sessionId, executionId } = options.identity ?? options.intent ?? (transferReceipt === void 0 ? void 0 : {
+		sessionId: transferReceipt.sessionId,
+		executionId: transferReceipt.executionId
+	}) ?? mintRetainedIdentity(options.environment.idempotencyKey, options.turn.turnId);
 	const identity = {
 		sessionId,
 		executionId
 	};
 	assertStableText(identity.sessionId, "retained session id");
 	assertStableText(identity.executionId, "retained execution id");
-	const contextTransfer = retainedContextTransfer(options.turn.contextTransfer);
+	assertRetainedContextTransferIdentity(transferReceipt, identity);
 	AgentTurnInputSchema.parse(freshTurnInput(options.turn, {
 		turnId: options.turn.turnId,
 		detach: true,
@@ -8322,11 +8387,22 @@ async function startRetainedRun(options) {
 	if (options.intent === void 0) await admitDurably(options.onAdmission, intent);
 	else assertExactRetainedRunIntent(options.intent, intent);
 	const providerCapabilities = await assertRetainedCapabilities(options.provider);
+	if (transferReceipt !== void 0) assertRetainedContextTransferCapability(providerCapabilities);
 	assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, providerCapabilities);
 	options.environment.signal?.throwIfAborted();
 	options.turn.signal?.throwIfAborted();
+	const attachmentSignal = options.environment.signal === void 0 ? options.turn.signal : options.turn.signal === void 0 ? options.environment.signal : AbortSignal.any([options.environment.signal, options.turn.signal]);
 	let environment;
-	if (options.existingEnvironmentId !== void 0) {
+	if (transferReceipt !== void 0 && contextTransfer !== void 0) {
+		const existing = await options.provider.get(transferReceipt.environmentId, {
+			contextTransfer,
+			...attachmentSignal === void 0 ? {} : { signal: attachmentSignal }
+		});
+		attachmentSignal?.throwIfAborted();
+		if (!existing) throw new Error("accepted context transfer environment is unavailable; it cannot be replaced");
+		assertRetainedContextTransferEnvironment(existing, contextTransfer, transferReceipt);
+		environment = existing;
+	} else if (options.existingEnvironmentId !== void 0) {
 		assertStableText(options.existingEnvironmentId, "retained environment id");
 		const existing = await options.provider.get(options.existingEnvironmentId);
 		if (!existing || existing.id !== options.existingEnvironmentId || existing.provider !== options.provider.name) throw new Error("retained provider environment is unavailable or has another identity");
@@ -8339,9 +8415,10 @@ async function startRetainedRun(options) {
 	let capabilities;
 	try {
 		capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
+		if (transferReceipt !== void 0) assertRetainedContextTransferCapability(capabilities);
 		assertRequestedInteractionCapabilities(options.provider.name, options.turn.interactions, capabilities);
 	} catch (error) {
-		if (options.existingEnvironmentId !== void 0) throw error;
+		if (transferReceipt !== void 0 || options.existingEnvironmentId !== void 0) throw error;
 		try {
 			await environment.destroy?.();
 		} catch (cleanupError) {
@@ -8350,7 +8427,7 @@ async function startRetainedRun(options) {
 		throw error;
 	}
 	if (!environment.dispatch || !environment.session) {
-		if (options.existingEnvironmentId !== void 0) throw new Error(`provider "${options.provider.name}" does not expose detached session control`);
+		if (transferReceipt !== void 0 || options.existingEnvironmentId !== void 0) throw new Error(`provider "${options.provider.name}" does not expose detached session control`);
 		try {
 			await environment.destroy?.();
 		} catch (cleanupError) {
@@ -8361,15 +8438,16 @@ async function startRetainedRun(options) {
 	return dispatchRetainedRun({
 		provider: options.provider,
 		environment,
-		signal: options.environment.signal,
+		signal: attachmentSignal,
 		environmentIdempotencyKey: options.environment.idempotencyKey,
 		turn: options.turn,
 		contextTransfer,
+		expectedRunId: transferReceipt?.runId,
 		identity,
 		onAdmission: options.onAdmission,
 		capabilities,
 		now: options.now,
-		preserveEnvironment: options.existingEnvironmentId !== void 0
+		preserveEnvironment: transferReceipt !== void 0 || options.existingEnvironmentId !== void 0
 	});
 }
 /**
@@ -8382,6 +8460,7 @@ async function startRetainedRun(options) {
 * @stable
 */
 async function startRetainedRunInEnvironment(options) {
+	if (options.turn.contextTransfer !== void 0) throw new Error("accepted context transfer requires startRetainedRun with its exact profile and receipt");
 	assertStableText(options.environment.id, "retained environment id");
 	assertStableText(options.environment.idempotencyKey, "environment idempotency key");
 	assertStableText(options.turn.turnId, "turn idempotency key");
@@ -8486,6 +8565,7 @@ async function dispatchRetainedRun(options) {
 			sessionId: identity.sessionId
 		});
 		if (controlRef.executionId !== identity.executionId) throw new Error("provider bound another execution than the requested identity");
+		if (options.expectedRunId !== void 0 && controlRef.runId !== options.expectedRunId) throw new Error("provider bound another run than the accepted context transfer receipt");
 		exact = exactSession(environment, controlRef);
 	} catch (error) {
 		const bindingError = new RetainedRunDispatchBindingError({
@@ -8545,10 +8625,12 @@ async function recoverRetainedRun(options) {
 	assertStableText(options.environmentId, "retained environment id");
 	assertStableText(options.sessionId, "retained session id");
 	assertStableText(options.executionId, "retained execution id");
+	const contextTransfer = retainedContextTransfer(options.contextTransfer);
 	const providerCapabilities = await assertRetainedCapabilities(options.provider);
 	if (!options.provider.get) throw new Error(`provider "${options.provider.name}" cannot reconstruct an environment by id`);
-	const environment = await options.provider.get(options.environmentId);
+	const environment = contextTransfer === void 0 || options.transferReceipt === void 0 ? await options.provider.get(options.environmentId) : await options.provider.get(options.environmentId, { contextTransfer });
 	if (!environment) return { outcome: "not_found" };
+	if (contextTransfer !== void 0 && options.transferReceipt !== void 0) assertRetainedContextTransferEnvironment(environment, contextTransfer, options.transferReceipt);
 	const capabilities = retainedCapabilitiesForEnvironment(options.provider.name, providerCapabilities, environment);
 	if (!environment.session) return {
 		outcome: "unverifiable",
@@ -8588,6 +8670,8 @@ function assertRetainedRunReplayMaterial(provider, replay, admission) {
 	}, identity, retainedContextTransfer(replay.turn.contextTransfer)));
 }
 function retainedRunIntent(options, identity, contextTransfer) {
+	const receipt = retainedContextTransferReceipt(options, options.provider.name, contextTransfer);
+	assertRetainedContextTransferIdentity(receipt, identity);
 	const { profile } = options.environment;
 	const requestedProfileDigest = typeof profile === "string" ? canonicalCandidateDigest(profile) : canonicalAgentProfileDigest(profile);
 	const requestDigest = canonicalCandidateDigest({
@@ -8599,6 +8683,10 @@ function retainedRunIntent(options, identity, contextTransfer) {
 		sessionId: identity.sessionId,
 		executionId: identity.executionId,
 		requestedProfileDigest,
+		...receipt === void 0 ? {} : { contextTransferReceiptDigest: canonicalCandidateDigest({
+			...receipt,
+			status: "accepted"
+		}) },
 		create: retainedCreateMaterial(options.environment),
 		turn: retainedTurnMaterial(options.turn, contextTransfer)
 	});
@@ -8616,7 +8704,9 @@ function retainedRunIntent(options, identity, contextTransfer) {
 }
 function retainedContextTransfer(value) {
 	if (value === void 0) return void 0;
-	return detachedSnapshot(ContextTransferRequestSchema.parse(value), "retained context transfer request");
+	const parsed = ContextTransferRequestSchema.safeParse(value);
+	if (!parsed.success) throw new Error("retained context transfer request is invalid or uses an incompatible wire contract; preserve the original record and explicitly reconstruct and review an Interface 5 transfer request before retrying", { cause: parsed.error });
+	return detachedSnapshot(parsed.data, "retained context transfer request");
 }
 function assertExactRetainedRunIntent(received, expected) {
 	if (canonicalCandidateDigest(parseRetainedRunIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("retained run intent conflicts with replay material");
@@ -11091,6 +11181,7 @@ function retainedExecutorContext(ctx) {
 }
 const causeMessages = {
 	unobservable: "retained provider execution requires reconciliation before replacement",
+	"terminal-event-lost": "retained provider stream ended or stalled without a terminal event; exact result requires reconciliation",
 	"provider-contract": "retained provider response violated its contract; original execution remains unresolved",
 	"request-rejected": "retained provider execution was refused before it ran; nothing to reconcile",
 	transport: "retained provider execution lost its transport; status in doubt",
@@ -12368,6 +12459,33 @@ const NATIVE_STOP_TIMEOUT_MS = 3e4;
 /** How long the final copy of a stopped harness waits for the provider to record how it ended. */
 const NATIVE_SETTLE_WINDOW_MS = 15e3;
 const NATIVE_SETTLE_POLL_MS = 1e3;
+/** The two waits together leave a minute for Runtime to record a pending result before ten minutes. */
+const RETAINED_OBSERVATION_IDLE_MS = 8 * 6e4;
+const RETAINED_RESULT_WAIT_MS = 6e4;
+var RetainedReadTimeoutError = class extends Error {
+	constructor(label, ms) {
+		super(`retained provider ${label} did not settle within ${ms} ms`);
+		this.name = "RetainedReadTimeoutError";
+	}
+};
+function retainedWaitBound(value, maximum, name) {
+	if (value === void 0) return maximum;
+	if (!Number.isSafeInteger(value) || value <= 0 || value > maximum) throw new ValidationError(`${name} must be a positive integer at most ${maximum} ms`);
+	return value;
+}
+/** Bound a provider read without confusing a lost observer with a cancelled execution. */
+function awaitRetainedRead(read, ms, label) {
+	return new Promise((resolve, reject) => {
+		const clear = armDeadlineTimer(ms, () => reject(new RetainedReadTimeoutError(label, ms)), true);
+		read.then((value) => {
+			clear();
+			resolve(value);
+		}, (error) => {
+			clear();
+			reject(error);
+		});
+	});
+}
 /** The environment id the latest durable admission names, when creation got that far. */
 function admittedEnvironmentId(retention) {
 	for (const admission of [...retention?.admissions ?? []].reverse()) {
@@ -12757,6 +12875,9 @@ async function providerExecutionSource(args, turn, signal) {
 		};
 	}
 	const retention = args.retention;
+	const observationIdleMs = retainedWaitBound(args.options.retainedObservationIdleMs, RETAINED_OBSERVATION_IDLE_MS, "retainedObservationIdleMs");
+	const resultWaitMs = retainedWaitBound(args.options.retainedResultWaitMs, RETAINED_RESULT_WAIT_MS, "retainedResultWaitMs");
+	const resultDrainGraceMs = Math.min(15e3, Math.max(50, Math.floor(observationIdleMs / 10)));
 	let admitted = args.recovering;
 	let executionAdmitted = args.recovering && retention.admissions.some((admission) => admission.phase === "dispatched");
 	const onAdmission = async (admission) => {
@@ -12881,11 +13002,23 @@ async function providerExecutionSource(args, turn, signal) {
 		const session = exactSession(environment, handle.controlRef).session;
 		async function* events() {
 			let observationFailure;
+			let exactResult;
+			let exactWake;
+			const readExactResult = () => {
+				if (exactResult === void 0) {
+					exactResult = awaitAbortable$1(handle.result(), signal);
+					exactWake = exactResult.then(() => void 0, () => new Promise(() => {}));
+				}
+				return exactResult;
+			};
 			let lastReplayPosition;
 			let sawTerminal = false;
+			let lastObservedAt = Date.now();
+			const seenEvents = /* @__PURE__ */ new Map();
 			const drain = async function* (open) {
 				let iterator;
 				let failed = false;
+				let exactResultReady = false;
 				try {
 					iterator = open()[Symbol.asyncIterator]();
 				} catch (error) {
@@ -12897,7 +13030,21 @@ async function providerExecutionSource(args, turn, signal) {
 					while (true) {
 						let next;
 						try {
-							next = await awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal);
+							const remaining = observationIdleMs - (Date.now() - lastObservedAt);
+							if (remaining <= 0) throw new RetainedReadTimeoutError("event stream", observationIdleMs);
+							const eventRead = awaitAbortable$1(Promise.resolve().then(() => iterator.next()), signal).then((value) => ({
+								kind: "event",
+								value
+							}));
+							const observed = await awaitRetainedRead(exactWake !== void 0 && !sawTerminal ? Promise.race([eventRead, exactWake.then(() => ({ kind: "exact-result" }))]) : eventRead, remaining, "event stream");
+							if (observed.kind === "exact-result") try {
+								next = (await awaitRetainedRead(eventRead, resultDrainGraceMs, "buffered event stream")).value;
+							} catch (error) {
+								if (!(error instanceof RetainedReadTimeoutError)) throw error;
+								exactResultReady = true;
+								break;
+							}
+							else next = observed.value;
 						} catch (error) {
 							if (signal.aborted) throw error;
 							observationFailure = { error };
@@ -12913,12 +13060,31 @@ async function providerExecutionSource(args, turn, signal) {
 								cause: error
 							});
 						}
-						if (next.value.id !== void 0) lastReplayPosition = next.value.id;
+						const identity = extractTransportEventIdentity(next.value);
+						const eventId = identity.eventId ?? identity.cursor;
+						if (eventId !== void 0) {
+							const digest = canonicalCandidateDigest({
+								type: next.value.type,
+								data: next.value.data,
+								...next.value.usage === void 0 ? {} : { usage: next.value.usage },
+								...next.value.normalized === void 0 ? {} : { normalized: next.value.normalized }
+							});
+							const prior = seenEvents.get(eventId);
+							if (prior !== void 0) {
+								if (prior !== digest) throw new RetainedRunProviderContractError(`provider replay changed retained event ${eventId}`, { code: "RETAINED_EVENT_DUPLICATE_CHANGED" });
+								continue;
+							}
+							seenEvents.set(eventId, digest);
+						}
+						lastObservedAt = Date.now();
+						if (identity.cursor !== void 0) lastReplayPosition = identity.cursor;
+						else if (eventId !== void 0) lastReplayPosition = eventId;
 						if (isTerminalEnvironmentEvent(next.value)) sawTerminal = true;
+						else readExactResult();
 						yield next.value;
 					}
 				} finally {
-					if (signal.aborted || failed) Promise.resolve().then(() => iterator?.return?.()).catch(() => void 0);
+					if (signal.aborted || failed || exactResultReady || sawTerminal) Promise.resolve().then(() => iterator?.return?.()).catch(() => void 0);
 					else await iterator?.return?.();
 				}
 				return !failed;
@@ -12926,7 +13092,7 @@ async function providerExecutionSource(args, turn, signal) {
 			if (!(yield* drain(() => session.events({
 				executionId: handle.controlRef.executionId,
 				signal
-			}))) && !sawTerminal && lastReplayPosition !== void 0) {
+			}))) && !sawTerminal && lastReplayPosition !== void 0 && !(observationFailure?.error instanceof RetainedReadTimeoutError)) {
 				const firstFailure = observationFailure;
 				observationFailure = void 0;
 				if (!(yield* drain(() => session.events({
@@ -12935,11 +13101,14 @@ async function providerExecutionSource(args, turn, signal) {
 					signal
 				})))) observationFailure = firstFailure;
 			}
+			if (!sawTerminal && observationFailure === void 0) observationFailure = { error: /* @__PURE__ */ new Error("retained provider stream did not yield a terminal event") };
 			let result;
 			try {
-				result = await awaitAbortable$1(handle.result(), signal);
+				result = await awaitRetainedRead(readExactResult(), resultWaitMs, "exact result");
 			} catch (error) {
-				if (observationFailure === void 0 || signal.aborted) throw error;
+				if (signal.aborted) throw error;
+				if (!sawTerminal && error instanceof RetainedReadTimeoutError) throw new RetainedExecutionPendingError(new AggregateError([observationFailure?.error, error], "retained event stream had no terminal event and its exact result is unavailable", { cause: error }), "terminal-event-lost");
+				if (observationFailure === void 0) throw error;
 				throw new AggregateError([observationFailure.error, error], "retained event observation failed and its exact result could not be reconciled", { cause: error });
 			}
 			yield {
@@ -13833,6 +14002,7 @@ async function runBrainLoop(opts) {
 			role: "assistant",
 			content: r.content ?? "",
 			tool_calls: r.toolCalls.map((tc) => ({
+				...tc.providerFields,
 				id: tc.id,
 				type: "function",
 				function: {
@@ -14016,6 +14186,17 @@ function splitReasoning(rawContent, fieldReasoning) {
 		...fieldReasoning ? { reasoning: fieldReasoning } : {}
 	};
 }
+/** Keep provider extensions beside, never in place of, the canonical call identity and function.
+* Stream indices identify assembly slots and are not replay fields. */
+function toolCallProviderFields(call) {
+	const fields = Object.fromEntries(Object.entries(call).filter(([key]) => ![
+		"id",
+		"type",
+		"function",
+		"index"
+	].includes(key)));
+	return Object.keys(fields).length === 0 ? void 0 : fields;
+}
 /**
 * A router completion WITH tool-calling — the operator driver's LLM seam. Passes OpenAI-shape
 * `messages` (system/user/assistant-with-tool_calls/tool roles) + function `tools`, and returns the
@@ -14047,11 +14228,15 @@ async function routerChatWithTools(cfg, messages, tools, opts) {
 	const data = raw;
 	const msg = data.choices?.[0]?.message;
 	if (!msg) throw new ValidationError$1("router completion: no choices[0].message");
-	const toolCalls = (msg?.tool_calls ?? []).map((tc, i) => ({
-		id: tc.id ?? `call_${i}`,
-		name: tc.function?.name ?? "",
-		arguments: tc.function?.arguments ?? "{}"
-	}));
+	const toolCalls = (msg?.tool_calls ?? []).map((tc, i) => {
+		const providerFields = toolCallProviderFields(tc);
+		return {
+			id: tc.id ?? `call_${i}`,
+			name: tc.function?.name ?? "",
+			arguments: tc.function?.arguments ?? "{}",
+			...providerFields ? { providerFields } : {}
+		};
+	});
 	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(data.usage, cfg.model, transportAttempts);
 	return {
 		response: raw,
@@ -14201,7 +14386,8 @@ async function streamRouterChatWithTools(cfg, messages, tools, opts) {
 	const toolCalls = [...streamed.calls.entries()].sort((a, b) => a[0] - b[0]).map(([index, call]) => ({
 		id: call.id ?? `call_${index}`,
 		name: call.name ?? "",
-		arguments: call.arguments || "{}"
+		arguments: call.arguments || "{}",
+		...call.providerFields ? { providerFields: call.providerFields } : {}
 	}));
 	const { usage, resources, costUsd, costProvenance, billedCostUsd, cache } = meterTurn(streamed.rawUsage, cfg.model, streamed.transportAttempts);
 	return {
@@ -14315,6 +14501,11 @@ async function streamChatCompletion(context, cfg, requestBody, opts) {
 			if (tc.id) acc.id = tc.id;
 			if (tc.function?.name) acc.name = tc.function.name;
 			if (tc.function?.arguments) acc.arguments += tc.function.arguments;
+			const providerFields = toolCallProviderFields(tc);
+			if (providerFields) acc.providerFields = {
+				...acc.providerFields,
+				...providerFields
+			};
 			calls.set(index, acc);
 		}
 	}
@@ -20333,6 +20524,33 @@ const routerInlineExecutor = (spec, ctx) => {
 	});
 	return executor;
 };
+/** Compose node behavior with host state and ceilings; neither grants new tools. */
+function routerCodeModeSettings(profile, host) {
+	if (profile === false || profile === void 0 && host === void 0) return void 0;
+	const environment = typeof host === "object" ? host : {};
+	const node = typeof profile === "object" ? profile : {};
+	const limits = {};
+	for (const key of [
+		"timeoutMs",
+		"memoryLimitBytes",
+		"concurrency",
+		"maxCalls"
+	]) {
+		const ceiling = environment[key];
+		const requested = node[key];
+		for (const value of [ceiling, requested]) {
+			if (value === void 0 || key === "timeoutMs" && value === Infinity) continue;
+			if (!Number.isSafeInteger(value) || value < 1 || key === "timeoutMs" && value > 2147483647) throw new ValidationError$1(`router-tools: invalid codeMode.${key}`);
+		}
+		const value = ceiling === void 0 ? requested : requested === void 0 ? ceiling : Math.min(ceiling, requested);
+		if (value !== void 0) limits[key] = value;
+	}
+	return {
+		...environment,
+		...limits,
+		...environment.directTools || node.directTools ? { directTools: [.../* @__PURE__ */ new Set([...environment.directTools ?? [], ...node.directTools ?? []])] } : {}
+	};
+}
 const routerToolsSeamKey = "router-tools";
 function mergePromptCache(target, cache) {
 	if (!cache) return;
@@ -20373,6 +20591,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 		tools: seam.tools
 	}, { multiTurn: true });
 	if (model === "tangle/auto") assertRouterAutoDeclaration(profileExecution.extraBody?.auto, profileExecution.stream);
+	const codeModeConfig = routerCodeModeSettings(profileExecution.codeMode, seam.codeMode);
 	const enabledToolNames = new Set(seam.tools.map((tool) => tool.function.name));
 	const maxTurns = profileExecution.maxTurns ?? 0;
 	const requestIdentity = routerRequestIdentity(ctx);
@@ -20446,14 +20665,13 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 					} catch {}
 				}
 			};
-			const codeModeConfig = profileExecution.codeMode ?? seam.codeMode;
 			const codeMode = codeModeConfig ? createCodeModeTools(seam.tools.map(({ function: tool }) => ({
 				name: tool.name,
 				description: tool.description,
 				inputSchema: tool.parameters,
 				outputSchema: tool.outputSchema,
 				execute: (args, context) => executeGranted(tool.name, args, context)
-			})), codeModeConfig === true ? {} : codeModeConfig) : void 0;
+			})), codeModeConfig) : void 0;
 			const presentedTools = codeMode ? codeMode.tools.map((tool) => ({
 				type: "function",
 				function: {
@@ -20566,6 +20784,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 						role: "assistant",
 						content: res.content ?? "",
 						tool_calls: toolCalls.map((tc) => ({
+							...tc.providerFields,
 							id: tc.id,
 							type: "function",
 							function: {
@@ -22863,7 +23082,7 @@ async function startRetainedInteractiveRun(options) {
 	assertStableText(identity.executionId, "retained execution id");
 	const intent = interactiveIntent(startOptions, profile, identity);
 	if (startOptions.intent === void 0) await admitDurably(startOptions.onAdmission, intent);
-	else assertExactInteractiveIntent(startOptions.intent, intent);
+	else assertExactInteractiveIntent(startOptions.intent, intent, () => interactiveIntent(startOptions, profile, identity, legacyRetainedCreateMaterial));
 	const providerCapabilities = AgentEnvironmentCapabilitiesSchema.parse(await awaitAbortable$1(Promise.resolve().then(() => startOptions.provider.capabilities()), startOptions.signal));
 	assertInteractiveCapabilities(startOptions.provider.name, providerCapabilities);
 	const environment = await createInteractiveEnvironment(() => startOptions.provider.create({
@@ -22984,7 +23203,7 @@ function interactiveRequest(options, environment, profile, requestedProfileDiges
 		...start
 	});
 }
-function interactiveIntent(options, profile, identity) {
+function interactiveIntent(options, profile, identity, createMaterial = retainedCreateMaterial) {
 	const requestedProfileDigest = canonicalAgentProfileDigest(profile);
 	const requestDigest = canonicalCandidateDigest({
 		kind: "retained-interactive-intent.v1",
@@ -22994,7 +23213,7 @@ function interactiveIntent(options, profile, identity) {
 		sessionId: identity.sessionId,
 		executionId: identity.executionId,
 		requestedProfileDigest,
-		create: retainedCreateMaterial(options.environment),
+		create: createMaterial(options.environment),
 		start: sanitizedStartMaterial(options)
 	});
 	return {
@@ -23017,8 +23236,11 @@ function sanitizedStartMaterial(options) {
 		...options.rows === void 0 ? {} : { rows: options.rows }
 	};
 }
-function assertExactInteractiveIntent(received, expected) {
-	if (canonicalCandidateDigest(parseInteractiveIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("interactive intent conflicts with replay material");
+function assertExactInteractiveIntent(received, expected, legacyExpected) {
+	const stableReceived = parseInteractiveIntent(received);
+	if (canonicalCandidateDigest(stableReceived) !== canonicalCandidateDigest(expected)) {
+		if (legacyExpected === void 0 || canonicalCandidateDigest(stableReceived) !== canonicalCandidateDigest(legacyExpected())) throw new Error("interactive intent conflicts with replay material");
+	}
 }
 function parseInteractiveIntent(value) {
 	const stable = detachedSnapshot(value, "interactive intent");
@@ -29074,7 +29296,7 @@ function isUpstreamUnavailable(error) {
 */
 function classifyDriverFailure(error, signal) {
 	if (signal?.aborted) return "terminal";
-	if (error instanceof RetainedExecutionPendingError && error.pendingCause === "provider-contract") return "terminal";
+	if (error instanceof RetainedExecutionPendingError && (error.pendingCause === "provider-contract" || error.pendingCause === "terminal-event-lost")) return "terminal";
 	const admission = retainedAdmissionCause(error);
 	if (admission !== void 0 && isDispatchNotAdmitted(admission)) return "terminal";
 	if (admission !== void 0) return classifyDriverFailure(admission, signal);
@@ -29312,6 +29534,7 @@ async function runDriverWithRetry(run) {
 			const after = run.progress();
 			const progressed = madeProgress(before, after);
 			if (progressed) abandonments = 0;
+			const retainedFailure = error instanceof RetainedExecutionPendingError ? error : void 0;
 			const pending = abandonablePending(error);
 			samePending = pending === void 0 || classification !== "transient" ? void 0 : {
 				cause: pending.pendingCause,
@@ -29401,7 +29624,7 @@ async function runDriverWithRetry(run) {
 					classification,
 					madeProgress: progressed,
 					stop: retryStop,
-					...unresolved ? { pendingCause: pending.pendingCause } : {}
+					...retainedFailure === void 0 ? {} : { pendingCause: retainedFailure.pendingCause }
 				});
 				throw new DriverAttemptsExhaustedError(error, attempts, retryStop);
 			}
@@ -30650,6 +30873,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { environmentReader as $, unknownExecutionBindingReceipt as $i, parseWorkerToolTraceArtifact as $n, loopEventToOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptResourceProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, finalizeRuntimeOwnedPendingExecutor as Bi, InMemoryResultBlobStore as Bn, mergeTraceEnv as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, promptOptionsFromAgentTurnInput as Ca, controlProfileMaterialization as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, promptControlProfileMaterialization as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, profileMaterializationAxes$1 as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, validateProfileMaterialization as Fi, retainedExecutorSeamKey as Fn, runCodeMode as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, providerAttemptEvidence as Gi, replaySpawnTree as Gn, resolveRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, knownExecutionBindingReceipt as Hi, insideCursorNamespace as Hn, traceContextToEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, worktreeCliProfileMaterialization as Ii, unavailablePauseMs as In, priceTokens as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedExecutorExecutionBinding as Ji, readCommittedJsonLines as Jn, buildRuntimeEventOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, recordRuntimeOwnedDriveHarnessProviderEvidence as Ki, isNoEntError as Kn, buildLoopOtelSpans as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, attestRuntimeOwnedPendingExecutor as Li, unavailableSignalOfFailure as Ln, routerTokenPrice as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, renderUnsupported as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, sandboxActProfileMaterialization as Ni, sandboxSessionTraceSource as Nn, createCodeModeTools as Nr, createExecutor as Nt, recordScopeOwnerPause as O, promptModelProfileMaterialization as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, unsupportedProfileDimensions as Pi, registerRetainedExecutorPreparation as Pn, describeCodeModeTools as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedScopeOwnerRuntime as Qi, isTraceAnalysisStore as Qn, generateSpanId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, attestRuntimeOwnedScopeOwner as Ri, FileResultBlobStore as Rn, ROUTER_PRICE_SOURCE as Rr, createSteerableSandboxSession as Rt, createScope as S, promptFromAgentTurnInput as Sa, assertProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, fullProfileMaterialization as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, knownMaterializationReceipt as Ui, loadSpawnForest as Un, defaultRedactor as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, inheritRuntimeOwnedExecutorAttestation as Vi, InMemorySpawnJournal as Vn, readTraceContextFromEnv as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, newExecutionAttemptId as Wi, materializeTreeView as Wn, defaultRedactorIdentityMaterial as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedExecutorProviderEvidence as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createOtelExporter as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedExecutorMaterialization as Yi, writeAllBytes as Yn, createOpenInferenceFileExporter as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedPendingExecutorMaterialization as Zi, captureWorkerTraceEvidence as Zn, flatOtelSpan as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, sandboxProgressEvents as _a, localHarnessExecutable as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, projectSandboxOutcome as aa, sanitizeAgentRuntimeEvent as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, abortError$1 as ba, terminateProcessTreeAndConfirm as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, canonicalStreamEventFromSandboxEvent as ca, runSettledCommand as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, extractLlmCallEvent as da, createWorktree as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, unknownMaterializationReceipt as ea, padSpanId as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, isSandboxTerminalEvent as fa, removeWorktree as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, sandboxEventServedBackend as ga, harnessSupportsReasoningEffort as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, notifySandboxEventObserver as ha, harnessInvocation as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, detachedSnapshot as ia, createRuntimeStreamEventCollector as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, renderProfileMaterializationIssues as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, promptOnlyProfileMaterialization as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, createSandboxToolPartState as la, runWorktreeHarness as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, mapSandboxToolEvent as ma, LOCAL_HARNESSES as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, executableAgentSpecSnapshot as na, toOtelAttributes as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, readSandboxOutcome as oa, sanitizeKnowledgeReadinessReport as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, mapSandboxEvent as pa, DEFAULT_LOCAL_HARNESS as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, runtimeOwnedDriveHarnessProviderEvidence as qi, prepareJsonlAppend as qn, buildLoopSpanNodes as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, detachedFrozen as ra, createRuntimeEventCollector as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, assertSandboxServedModel as sa, sanitizeRuntimeStreamEvent as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, executableAgentProfileSnapshot as ta, padTraceId as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, createSandboxUsageLedger as ua, captureWorktreeDiff as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, sumSandboxUsage as va, parseCodexTokenUsage as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, providerMessageText as wa, defineProfileMaterializationContract as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, awaitAbortable$1 as xa, AGENT_PROFILE_MATERIALIZATION_AXES as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, decodeHarnessUsage as ya, CodexExecutionDiagnosticError as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, authoredProfileDigest as zi, FileSpawnJournal as zn, createPropagatingTraceEmitter as zr, createRouterTranscript as zt };
+export { environmentReader as $, runtimeOwnedScopeOwnerRuntime as $i, parseWorkerToolTraceArtifact as $n, loopEventToOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptOnlyProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, authoredProfileDigest as Bi, InMemoryResultBlobStore as Bn, mergeTraceEnv as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, promptFromAgentTurnInput as Ca, assertProfileMaterializes as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, profileMaterializationAxes$1 as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, fullProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, unsupportedProfileDimensions as Fi, retainedExecutorSeamKey as Fn, runCodeMode as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, newExecutionAttemptId as Gi, replaySpawnTree as Gn, resolveRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, inheritRuntimeOwnedExecutorAttestation as Hi, insideCursorNamespace as Hn, traceContextToEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, validateProfileMaterialization as Ii, unavailablePauseMs as In, priceTokens as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedDriveHarnessProviderEvidence as Ji, readCommittedJsonLines as Jn, buildRuntimeEventOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, providerAttemptEvidence as Ki, isNoEntError as Kn, buildLoopOtelSpans as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, worktreeCliProfileMaterialization as Li, unavailableSignalOfFailure as Ln, routerTokenPrice as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, renderProfileMaterializationIssues as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, renderUnsupported as Ni, sandboxSessionTraceSource as Nn, createCodeModeTools as Nr, createExecutor as Nt, recordScopeOwnerPause as O, promptControlProfileMaterialization as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, sandboxActProfileMaterialization as Pi, registerRetainedExecutorPreparation as Pn, describeCodeModeTools as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedPendingExecutorMaterialization as Qi, isTraceAnalysisStore as Qn, generateSpanId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, attestRuntimeOwnedPendingExecutor as Ri, FileResultBlobStore as Rn, ROUTER_PRICE_SOURCE as Rr, createSteerableSandboxSession as Rt, createScope as S, awaitAbortable$1 as Sa, assertProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, providerMessageText as Ta, defineProfileMaterializationContract as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, knownExecutionBindingReceipt as Ui, loadSpawnForest as Un, defaultRedactor as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, finalizeRuntimeOwnedPendingExecutor as Vi, InMemorySpawnJournal as Vn, readTraceContextFromEnv as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, knownMaterializationReceipt as Wi, materializeTreeView as Wn, defaultRedactorIdentityMaterial as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedExecutorMaterialization as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createOtelExporter as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedExecutorExecutionBinding as Yi, writeAllBytes as Yn, createOpenInferenceFileExporter as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedExecutorProviderEvidence as Zi, captureWorkerTraceEvidence as Zn, flatOtelSpan as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, sandboxEventServedBackend as _a, localHarnessExecutable as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, detachedSnapshot as aa, sanitizeAgentRuntimeEvent as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, decodeHarnessUsage as ba, terminateProcessTreeAndConfirm as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, assertSandboxServedModel as ca, runSettledCommand as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, createSandboxUsageLedger as da, createWorktree as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, unknownExecutionBindingReceipt as ea, padSpanId as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, extractLlmCallEvent as fa, removeWorktree as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, notifySandboxEventObserver as ga, harnessSupportsReasoningEffort as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, mapSandboxToolEvent as ha, harnessInvocation as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, detachedFrozen as ia, createRuntimeStreamEventCollector as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, promptResourceProfileMaterialization as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, promptModelProfileMaterialization as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, canonicalStreamEventFromSandboxEvent as la, runWorktreeHarness as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, mapSandboxEvent as ma, LOCAL_HARNESSES as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, executableAgentProfileSnapshot as na, toOtelAttributes as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, projectSandboxOutcome as oa, sanitizeKnowledgeReadinessReport as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, isSandboxTerminalEvent as pa, DEFAULT_LOCAL_HARNESS as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, recordRuntimeOwnedDriveHarnessProviderEvidence as qi, prepareJsonlAppend as qn, buildLoopSpanNodes as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, executableAgentSpecSnapshot as ra, createRuntimeEventCollector as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, readSandboxOutcome as sa, sanitizeRuntimeStreamEvent as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, unknownMaterializationReceipt as ta, padTraceId as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, createSandboxToolPartState as ua, captureWorktreeDiff as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, sandboxProgressEvents as va, parseCodexTokenUsage as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, promptOptionsFromAgentTurnInput as wa, controlProfileMaterialization as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, abortError$1 as xa, AGENT_PROFILE_MATERIALIZATION_AXES as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, sumSandboxUsage as ya, CodexExecutionDiagnosticError as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, attestRuntimeOwnedScopeOwner as zi, FileSpawnJournal as zn, createPropagatingTraceEmitter as zr, createRouterTranscript as zt };
 
-//# sourceMappingURL=supervisor-BXEL_Fxe.js.map
+//# sourceMappingURL=supervisor--nmU6w86.js.map