@tangle-network/agent-runtime 0.320.1 → 0.322.1

package/dist/{supervisor-CCtmmmOz.js → supervisor-BMMdI4T-.js}

@@ -17,9 +17,10 @@ import { homedir, hostname, tmpdir } from "node:os";
 import { stripVTControlCharacters } from "node:util";
 import { ATTR, deriveHexId, isW3CSpanId, isW3CTraceId } from "@tangle-network/agent-trace-contract";
 import { REDACTION_VERSION as REDACTION_VERSION$1, redact } from "@tangle-network/agent-eval/traces";
-import { clearImmediate, setImmediate } from "node:timers";
+import { clearImmediate, setImmediate as setImmediate$1 } from "node:timers";
 import { z } from "zod";
 import { Readable } from "node:stream";
+import { LedgerCanonicalizationError, canonicalString, jsonDocument, merkleLeafHash, merkleRoot, merkleSalt } from "@tangle-network/agent-eval/ledger-core";
 import { SDKError, generateIdempotencyKey, withRetry } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
 import { request } from "node:http";
@@ -740,13 +741,17 @@ function sandboxTerminalUsageField(type) {
 * so a sentinel `NaN` from a misbehaving backend cannot poison the ledger.
 */
 function extractLlmCallEvent(event, agentRunName) {
+	const data = canonicalUsageData(event);
+	return data === void 0 ? void 0 : buildLlmCall(data, agentRunName);
+}
+function canonicalUsageData(event) {
 	if (!event || typeof event !== "object") return void 0;
 	const type = String(event.type ?? "");
 	const data = event.data && typeof event.data === "object" ? event.data : {};
-	if (type === "llm_call" || type === "cost.usage" || type === "usage") return buildLlmCall(usageReceiptData(data, plainRecord$1(data.usage)), agentRunName);
+	if (type === "llm_call" || type === "cost.usage" || type === "usage") return usageReceiptData(data, plainRecord$1(data.usage));
 	if (type === "error" || isSandboxTerminalEvent(type)) {
 		const field = type === "error" ? "tokenUsage" : sandboxTerminalUsageField(type);
-		return buildLlmCall(usageReceiptData(data, plainRecord$1(data[field]) ?? plainRecord$1(data[field === "usage" ? "tokenUsage" : "usage"])), agentRunName);
+		return usageReceiptData(data, plainRecord$1(data[field]) ?? plainRecord$1(data[field === "usage" ? "tokenUsage" : "usage"]));
 	}
 }
 /** A {@link SandboxUsageLedger} for one worker. Pass the worker's harness to decode with that
@@ -758,7 +763,10 @@ function createSandboxUsageLedger(harness) {
 	const receipts = /* @__PURE__ */ new Map();
 	const settledTokens = zeroTokenUsage();
 	let turnTokens = zeroTokenUsage();
+	let turnUsageUnknown = false;
+	let settledUsage;
 	return {
+		settledUsage: () => settledUsage === void 0 ? void 0 : { ...settledUsage },
 		tokenUsage() {
 			const total = cloneTokenUsage(settledTokens);
 			addTokenUsage(total, turnTokens);
@@ -771,13 +779,17 @@ function createSandboxUsageLedger(harness) {
 				const receipt = creditCanonicalUsage(event, call, credited, receipts, (receipt, mode) => {
 					refineCanonicalTokens(turnTokens, call, receipt, mode);
 				});
-				if (receipt?.tokensKnown === false) turnTokens.tokensKnown = false;
+				if (receipt?.tokensKnown === false) {
+					turnTokens.tokensKnown = false;
+					turnUsageUnknown = true;
+				}
 				return receipt;
 			}
 			let usage;
 			try {
 				usage = decodeHarnessUsage(event, harness);
 			} catch (err) {
+				turnUsageUnknown = true;
 				return {
 					type: "llm_call",
 					model: agentRunName,
@@ -793,16 +805,25 @@ function createSandboxUsageLedger(harness) {
 			const canonical = sawCanonical;
 			held = [];
 			sawCanonical = false;
+			const receipt = !canonical && reports.length > 0 ? harnessUsageLlmCall(reports, agentRunName) : void 0;
+			if (receipt) creditCanonicalUsage({
+				type: "llm_call",
+				data: {}
+			}, receipt, credited, receipts, (credit, mode) => refineCanonicalTokens(turnTokens, receipt, credit, mode));
+			settledUsage = !turnUsageUnknown && credited.tokensIn !== void 0 && credited.tokensOut !== void 0 ? {
+				inputTokens: credited.tokensIn,
+				outputTokens: credited.tokensOut,
+				...credited.totalTokens === void 0 ? {} : { totalTokens: credited.totalTokens },
+				...credited.reasoningTokens === void 0 ? {} : { reasoningTokens: credited.reasoningTokens },
+				...credited["promptCache.readTokens"] === void 0 ? {} : { cacheReadInputTokens: credited["promptCache.readTokens"] },
+				...credited["promptCache.writeTokens"] === void 0 ? {} : { cacheCreationInputTokens: credited["promptCache.writeTokens"] },
+				...credited.costUsd === void 0 ? {} : { cost: credited.costUsd }
+			} : void 0;
 			for (const key of Object.keys(credited)) delete credited[key];
 			receipts.clear();
-			const receipt = !canonical && reports.length > 0 ? harnessUsageLlmCall(reports, agentRunName) : void 0;
-			if (receipt) addTokenUsage(turnTokens, {
-				input: receipt.tokensIn ?? 0,
-				output: receipt.tokensOut ?? 0,
-				...promptCacheTokenClasses(receipt.tokensIn, receipt.promptCache)
-			});
 			addTokenUsage(settledTokens, turnTokens);
 			turnTokens = zeroTokenUsage();
+			turnUsageUnknown = false;
 			return receipt;
 		}
 	};
@@ -817,6 +838,11 @@ function creditCanonicalUsage(event, call, credited, receipts, onCredit) {
 	const mode = canonicalSandboxUsageMode(event);
 	const result = { ...call };
 	const data = plainRecord$1(event.data) ?? {};
+	const usageData = canonicalUsageData(event) ?? {};
+	const supplemental = Object.fromEntries(["totalTokens", "reasoningTokens"].flatMap((key) => {
+		const value = usageData[key];
+		return value === void 0 ? [] : [[key, typeof value === "number" && Number.isFinite(value) ? value : null]];
+	}));
 	const explicitTokensUnknown = [
 		data,
 		plainRecord$1(data.usage),
@@ -827,7 +853,8 @@ function creditCanonicalUsage(event, call, credited, receipts, onCredit) {
 	if (event.id) {
 		const signature = JSON.stringify({
 			mode,
-			call
+			call,
+			supplemental
 		});
 		const previous = receipts.get(event.id);
 		if (previous === signature) return void 0;
@@ -860,6 +887,8 @@ function creditCanonicalUsage(event, call, credited, receipts, onCredit) {
 		"costUsd",
 		"estimatedCostUsd"
 	]) if (call[key] !== void 0) result[key] = credit(key, call[key]);
+	for (const [key, value] of Object.entries(supplemental)) if (typeof value !== "number") reason = `usage receipt has an invalid ${key}`;
+	else credit(key, value);
 	if (call.promptCache) result.promptCache = Object.fromEntries(Object.entries(call.promptCache).map(([key, value]) => [key, typeof value === "number" ? credit(`promptCache.${key}`, value) : value]));
 	if (reason !== void 0) {
 		result.usdKnown = false;
@@ -1234,6 +1263,10 @@ const TERMINAL_FAILURE = /^(error|errored|failed|failure|cancelled|canceled|time
 *     surfaced in-band, never dropped).
 *   - bare `tool*` event types (`tool.call`, `tool_result`, …) — stateless:
 *     `*result*` types project to `tool_result`, the rest to `tool_call`.
+*   - codex `raw` events whose inner `item.started` / `item.updated` /
+*     `item.completed` carries a command, MCP, collaboration, web search or
+*     file change item — stateful on the item id, like a tool part. Other raw
+*     events, including opencode's raw `tool_use` echoes, project nothing.
 *
 * Returns `[]` for every non-tool event.
 *
@@ -1248,6 +1281,7 @@ function mapSandboxToolEvent(event, state) {
 		if (String(part.type ?? "") !== "tool") return [];
 		return projectToolPart(part, state, typeof event.id === "string" ? event.id : void 0);
 	}
+	if (type === "raw") return projectCodexItem(data, state);
 	if (CANONICAL_STREAM_EVENT_TYPES.has(type)) return [];
 	if (type.includes("tool")) {
 		const callId = pickString(data, [
@@ -1322,6 +1356,63 @@ function projectToolPart(part, state, eventId) {
 	}
 	return out;
 }
+/** Codex item types that are tool calls. Reasoning, messages and todo lists are not. */
+const CODEX_TOOL_ITEMS = /* @__PURE__ */ new Set([
+	"command_execution",
+	"mcp_tool_call",
+	"collab_tool_call",
+	"web_search",
+	"file_change"
+]);
+/** Item fields that describe the call's progress or outcome rather than what it was asked to do. */
+const CODEX_ITEM_OUTCOME_FIELDS = /* @__PURE__ */ new Set([
+	"id",
+	"type",
+	"status",
+	"result",
+	"error",
+	"aggregated_output",
+	"exit_code"
+]);
+/**
+* Project a codex `item.started` / `item.updated` / `item.completed` tool item through the same
+* per-call state as a tool part, keyed on the item id: one `tool_call` on its first frame and one
+* `tool_result` when it completes. Tool names follow Eval's codex intake: `server/tool` for MCP.
+*/
+function projectCodexItem(data, state) {
+	if (data.backend !== "codex" || !data.event || typeof data.event !== "object") return [];
+	const inner = data.event;
+	const phase = inner.type;
+	if (phase !== "item.started" && phase !== "item.updated" && phase !== "item.completed") return [];
+	if (!inner.item || typeof inner.item !== "object") return [];
+	const item = inner.item;
+	const itemType = pickString(item, ["type"]);
+	if (itemType === void 0 || !CODEX_TOOL_ITEMS.has(itemType)) return [];
+	const error = item.error && typeof item.error === "object" ? pickString(item.error, ["message"]) ?? `${itemType} failed` : void 0;
+	const failed = item.status === "failed" || error !== void 0 || itemType === "command_execution" && typeof item.exit_code === "number" && item.exit_code !== 0;
+	const status = phase !== "item.completed" ? "running" : failed ? "failed" : "completed";
+	const input = Object.fromEntries(Object.entries(item).filter(([key]) => !CODEX_ITEM_OUTCOME_FIELDS.has(key)));
+	const output = item.result ?? item.aggregated_output ?? item.changes;
+	return projectToolPart({
+		...typeof item.id === "string" ? { callID: item.id } : {},
+		tool: codexToolName(itemType, item),
+		state: {
+			status,
+			input,
+			...output === void 0 || output === null ? {} : { output },
+			...status === "failed" ? { error: error ?? `${itemType} failed` } : {}
+		}
+	}, state, void 0);
+}
+function codexToolName(itemType, item) {
+	if (itemType === "mcp_tool_call") {
+		const name = [pickString(item, ["server"]), pickString(item, ["tool"])].filter((part) => part !== void 0).join("/");
+		return name === "" ? "mcp" : name;
+	}
+	if (itemType === "collab_tool_call") return pickString(item, ["tool"]) ?? "subagent";
+	if (itemType === "web_search" || itemType === "file_change") return itemType;
+	return pickString(item, ["name"]) ?? itemType;
+}
 function pickString(data, keys) {
 	for (const key of keys) {
 		const value = data[key];
@@ -10605,6 +10696,17 @@ function servedIdentityParts(model) {
 		snapshot
 	};
 }
+/**
+* A trace root is valid only beside the output it commits to, with a well-formed root, artifact
+* reference and leaf count (at least the summary leaf). Records written before trace roots carry
+* none and stay valid.
+*/
+function assertTraceRoot(event, root) {
+	if (!("traceRoot" in event) || event.traceRoot === void 0) return;
+	const receipt = event.traceRoot;
+	const fields = receipt !== null && typeof receipt === "object" ? receipt : {};
+	if (typeof event.outRef !== "string" || typeof fields.root !== "string" || !/^sha256:[0-9a-f]{64}$/.test(fields.root) || typeof fields.ref !== "string" || !/^sha256:[0-9a-f]{64}$/.test(fields.ref) || typeof fields.leafCount !== "number" || !Number.isSafeInteger(fields.leafCount) || fields.leafCount < 1) throw new Error(`spawn journal corrupted: ${event.kind} for node '${event.id}' carries a malformed trace root in tree '${root}'`);
+}
 /** One validation implementation for memory, durable append, and cold replay. */
 /** @internal shared with the SQL-backed store. */
 var SpawnEventIndex = class {
@@ -10617,6 +10719,7 @@ var SpawnEventIndex = class {
 	assert(event) {
 		const node = this.nodes.get(event.id);
 		this.assertRetained(node, event);
+		assertTraceRoot(event, this.root);
 		if (event.kind === "execution-evidence") {
 			if (!node?.spawned || !/^sha256:[0-9a-f]{64}$/.test(event.outRef)) throw new Error("spawn journal corrupted: executor evidence has no spawned node or valid content reference");
 		}
@@ -11103,6 +11206,218 @@ function traceEvidenceFor(event) {
 	};
 }
 //#endregion
+//#region src/runtime/supervise/credential-refusal.ts
+/**
+* The account owner refused an unsupported credential route before dispatch. This is the
+* provider SDK's machine contract, not an HTTP status, class-name guess, or prose match.
+*/
+function isCredentialRefusal(error) {
+	if (!(error instanceof Error)) return false;
+	try {
+		return Object.getOwnPropertyDescriptor(error, "code")?.value === "model_credential_refused";
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/runtime/supervise/trace-root.ts
+/**
+* Trace roots: one Merkle root over the events a turn archived, so a single event can be proven
+* against the hash its journal record carries without reading the rest of the archive.
+*
+* The leaves are the archived events in stored order, each hashed with its own random salt, then
+* one summary leaf that counts the events and the tool calls among them. The artifact keeps every
+* leaf and salt and is stored under its content address in the run's result blob store, beside
+* the archive it commits to. A verifier recomputes leaf `i` from `events[i]` of the `outRef` blob
+* and `salts[i]`, checks it against `leaves[i]`, and checks `merkleRoot(leaves)` against the root
+* the journal recorded. Leaf identity is `(outRef, index)`: an event's own `id` is a session
+* buffer offset and is absent on terminal events.
+*
+* One event array has one root per node. A result always gets its own. Evidence whose events the
+* node already rooted gets none: a retained owner's deferred workspace capture stores the turn it
+* just committed again, with the workspace fields added, under another `outRef`. A second root
+* over the same events would give one turn two count candidates and two run-root leaves.
+*
+* Salts are random, so a trace root can never be recomputed from the archive alone. Recovery and
+* replay copy the recorded receipt; they never derive a new one.
+*/
+/** Schema identifier of a stored {@link TraceRootArtifact}. */
+const TRACE_ROOT_SCHEMA = "agent-runtime.trace-root.v1";
+/** Schema identifier of the {@link TraceSummary} carried by a trace root's last leaf. */
+const TRACE_SUMMARY_SCHEMA = "agent-runtime.trace-summary.v1";
+/** @internal */
+function traceRootWriter(blobs, nodeId) {
+	const roots = /* @__PURE__ */ new Map();
+	/** Digests of the event arrays this node holds a stored root for. */
+	const rooted = /* @__PURE__ */ new Set();
+	const persist = async (outRef, out, evidence) => {
+		const events = archivedEvents(out);
+		if (events === void 0) return void 0;
+		if (evidence) {
+			await Promise.allSettled([...roots.values()]);
+			if (rooted.has(await eventsDigest(events))) return void 0;
+		}
+		const stored = await persistTraceRoot(blobs, nodeId, outRef, events);
+		if (stored === void 0) return void 0;
+		rooted.add(stored.digest);
+		return stored.receipt;
+	};
+	const memoized = (outRef, out, evidence) => {
+		const known = roots.get(outRef);
+		if (known !== void 0) return known;
+		const pending = persist(outRef, out, evidence);
+		roots.set(outRef, pending);
+		pending.catch(() => roots.delete(outRef));
+		return pending;
+	};
+	return {
+		write: (outRef, out) => memoized(outRef, out, false),
+		writeEvidence: (outRef, out) => memoized(outRef, out, true),
+		async recorded(outRef) {
+			if (outRef === void 0) return void 0;
+			return roots.get(outRef)?.catch(() => void 0);
+		}
+	};
+}
+async function persistTraceRoot(blobs, nodeId, outRef, events) {
+	let built;
+	try {
+		built = await traceRootArtifact(nodeId, outRef, events);
+	} catch (error) {
+		if (error instanceof LedgerCanonicalizationError) return void 0;
+		throw error;
+	}
+	const { artifact, digest } = built;
+	await nextTurn();
+	const ref = contentAddress(artifact);
+	await nextTurn();
+	await blobs.put(ref, artifact);
+	return {
+		receipt: {
+			root: artifact.root,
+			ref,
+			leafCount: artifact.leafCount
+		},
+		digest
+	};
+}
+function archivedEvents(out) {
+	if (out === null || typeof out !== "object" || Array.isArray(out)) return void 0;
+	const events = out.events;
+	return Array.isArray(events) ? events : void 0;
+}
+/** The longest stretch of hashing between yields to the event loop. Hashing runs about 40 µs per
+*  event, and the largest archived turn holds 65,276 events: unbroken, that blocked the process
+*  for 2.7 s while sibling turns, coordination calls and heartbeats waited. A slice is measured
+*  in time, not events, because one event can be megabytes. */
+const SLICE_MS = 10;
+/** Yields to the event loop once a slice has run `SLICE_MS`; `undefined` while it has not. */
+function slicer() {
+	let started = performance.now();
+	return () => {
+		if (performance.now() - started < SLICE_MS) return void 0;
+		return nextTurn().then(() => {
+			started = performance.now();
+		});
+	};
+}
+function nextTurn() {
+	return new Promise((resolve) => setImmediate(resolve));
+}
+/** The identity of an event array as stored: the digest of each event's stored JSON, in order.
+*  Two arrays with one digest have the same leaves' content. */
+async function eventsDigest(events) {
+	const hash = createHash("sha256");
+	const slice = slicer();
+	for (const event of events) {
+		const yielded = slice();
+		if (yielded !== void 0) await yielded;
+		hash.update(storedText(event)).update("\n");
+	}
+	return hash.digest("hex");
+}
+async function traceRootArtifact(nodeId, outRef, archived) {
+	const salts = [];
+	const leaves = [];
+	const tree = merkleTree();
+	const identity = createHash("sha256");
+	const tools = createSandboxToolPartState();
+	const toolCalls = /* @__PURE__ */ new Map();
+	const slice = slicer();
+	for (const event of archived) {
+		const yielded = slice();
+		if (yielded !== void 0) await yielded;
+		const text = storedText(event);
+		identity.update(text).update("\n");
+		const stored = JSON.parse(text);
+		const salt = merkleSalt();
+		const leaf = merkleLeafHash(canonicalString(jsonDocument(stored)), salt);
+		salts.push(salt);
+		leaves.push(leaf);
+		tree.push(leaf);
+		for (const projected of mapSandboxToolEvent(stored, tools)) {
+			if (projected.type !== "tool_call") continue;
+			toolCalls.set(projected.toolName, (toolCalls.get(projected.toolName) ?? 0) + 1);
+		}
+	}
+	const summary = {
+		schema: TRACE_SUMMARY_SCHEMA,
+		events: archived.length,
+		toolCalls: Object.fromEntries(toolCalls)
+	};
+	const salt = merkleSalt();
+	const leaf = merkleLeafHash(canonicalString(summary), salt);
+	salts.push(salt);
+	leaves.push(leaf);
+	tree.push(leaf);
+	return {
+		artifact: {
+			schema: TRACE_ROOT_SCHEMA,
+			nodeId,
+			outRef,
+			root: tree.root(),
+			leafCount: leaves.length,
+			salts,
+			leaves,
+			summary
+		},
+		digest: identity.digest("hex")
+	};
+}
+/**
+* `merkleRoot(leaves)` built as the leaves arrive, so its interior hashes run inside the sliced
+* leaf loop instead of in one block after it (0.4 s for 65,277 leaves). It keeps the perfect
+* subtrees of RFC 9162, largest first, and joins two with ledger-core's own interior hash,
+* `merkleRoot([left, right])`; the root folds them from the right, as RFC 9162 splits at the
+* largest power of two.
+*/
+function merkleTree() {
+	const peaks = [];
+	return {
+		push(leaf) {
+			let hash = leaf;
+			let size = 1;
+			while (peaks.at(-1)?.size === size) {
+				hash = merkleRoot([peaks.pop().hash, hash]);
+				size *= 2;
+			}
+			peaks.push({
+				hash,
+				size
+			});
+		},
+		root() {
+			let root = peaks.at(-1).hash;
+			for (let index = peaks.length - 2; index >= 0; index -= 1) root = merkleRoot([peaks[index].hash, root]);
+			return root;
+		}
+	};
+}
+/** One array item as `JSON.stringify` writes it: `JSON.parse` of it is what `events[i]` holds. */
+function storedText(event) {
+	return JSON.stringify(event) ?? "null";
+}
+//#endregion
 //#region src/runtime/supervise/upstream-unavailable.ts
 /**
 * An upstream that cannot serve NOW: how Runtime recognizes one, and how long an agent waits for it.
@@ -11189,14 +11504,17 @@ function jitteredMs(ms, random) {
 const retainedExecutorSeamKey = "runtime.retainedExecutor";
 /** @internal A capture may finish after cancellation; its durable citation remains appendable. */
 function executorEvidenceWriter(args) {
+	const traceRoots = args.traceRoots ?? traceRootWriter(args.blobs, args.nodeId);
 	return async (out) => {
 		const snapshot = detachedSnapshot(out, "executor evidence");
 		const outRef = contentAddress(snapshot);
 		await args.blobs.put(outRef, snapshot);
+		const traceRoot = await traceRoots.writeEvidence(outRef, snapshot);
 		await args.journal.appendEvent(args.rootId, {
 			kind: "execution-evidence",
 			id: args.nodeId,
 			outRef,
+			...traceRoot === void 0 ? {} : { traceRoot },
 			seq: args.nextSequence(),
 			at: new Date(args.now()).toISOString()
 		});
@@ -11255,14 +11573,8 @@ function readString(value, key) {
 	const read = Reflect.get(value, key);
 	return typeof read === "string" ? read : void 0;
 }
-/**
-* Walk the cause chain (bounded, cycle-safe) and name the first cause whose structure decides.
-*
-* `phase` says whether a 4xx or a client deadline can mean "refused before it ran": only at
-* admission. After admission the same status means the provider cannot resolve what it
-* admitted, and the honest name is the refusal.
-*/
-function classifyRetainedPendingCause(cause, phase = "execution") {
+const credentialAdmissionRefusals = /* @__PURE__ */ new WeakSet();
+function classifyPendingCause(cause, phase, onCredentialRefusal) {
 	const seen = /* @__PURE__ */ new Set();
 	const queue = [{
 		value: cause,
@@ -11274,7 +11586,13 @@ function classifyRetainedPendingCause(cause, phase = "execution") {
 		const { value, phase: at } = queue.shift();
 		if (typeof value !== "object" || value === null || seen.has(value)) continue;
 		seen.add(value);
-		if (value instanceof RetainedExecutionPendingError) return value.pendingCause;
+		if (value instanceof RetainedExecutionPendingError) {
+			if (credentialAdmissionRefusals.has(value)) {
+				if (at === "execution") return "unobservable";
+				onCredentialRefusal?.();
+			}
+			return value.pendingCause;
+		}
 		const name = readString(value, "name");
 		const code = readString(value, "code");
 		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
@@ -11288,6 +11606,11 @@ function classifyRetainedPendingCause(cause, phase = "execution") {
 		}
 		if (name === "ZodError" || Array.isArray(Reflect.get(value, "issues")) || code === "JSON_BOUND_VIOLATION") return at === "admission" ? "request-rejected" : "provider-contract";
 		if (code === "DISPATCH_NOT_ADMITTED") return at === "admission" ? "request-rejected" : "provider-contract";
+		if (isCredentialRefusal(value)) {
+			if (at === "execution") return "unobservable";
+			onCredentialRefusal?.();
+			return "request-rejected";
+		}
 		if (code !== void 0 && transportCodes.has(code)) return "transport";
 		if (name === "NetworkError" || name === "ServerError") return "transport";
 		if (status === void 0 && at === "admission" && code !== void 0 && UNAVAILABLE_CODES.has(code.toLowerCase())) return "request-rejected";
@@ -11326,11 +11649,15 @@ var RetainedExecutionPendingError = class extends Error {
 	pendingCause;
 	phase;
 	constructor(cause, pendingCause = "execution") {
-		const resolved = pendingCause === "admission" || pendingCause === "execution" ? classifyRetainedPendingCause(cause, pendingCause) : pendingCause;
+		let credentialRefused = false;
+		const resolved = pendingCause === "admission" || pendingCause === "execution" ? classifyPendingCause(cause, pendingCause, () => {
+			credentialRefused = true;
+		}) : pendingCause;
 		super(causeMessages[resolved], { cause });
 		this.name = "RetainedExecutionPendingError";
 		this.pendingCause = resolved;
 		this.phase = pendingCause === "admission" ? "admission" : "execution";
+		if (credentialRefused) credentialAdmissionRefusals.add(this);
 	}
 };
 /** The execution id of a leaf's later invocation, derived from its `execution-input` sequence so
@@ -11677,7 +12004,7 @@ function providerAsSandboxClient(provider, options = {}) {
 	}
 	return { async create(createOptions) {
 		const defaults = options.defaults ?? {};
-		const sandboxInput = createInputFromSandboxOptions(createOptions);
+		const sandboxInput = createInputFromSandboxOptions(createOptions, options.mapCreateOptions !== void 0);
 		const customInput = options.mapCreateOptions?.(createOptions) ?? {};
 		const mapped = {
 			...defaults,
@@ -11696,16 +12023,17 @@ function providerAsSandboxClient(provider, options = {}) {
 		};
 		if (mapped.backend === void 0) delete mapped.backend;
 		if (mapped.profile === void 0) throw new ValidationError(`providerAsSandboxClient(${provider.name}): profile required in defaults or CreateSandboxOptions.backend.profile`);
-		if (options.requireSession) {
-			const capabilities = await provider.capabilities();
-			if (!capabilities.streaming.live || !capabilities.sessions.continue) throw new ValidationError(`providerAsSandboxClient(${provider.name}): live session continuation is required`);
-		}
+		const needsMcp = hasRuntimeMcpAttachments(mapped);
+		const capabilities = options.requireSession || needsMcp ? await provider.capabilities() : void 0;
+		assertRuntimeMcpAttachments(provider.name, mapped, capabilities);
+		if (options.requireSession && (!capabilities?.streaming.live || !capabilities.sessions.continue)) throw new ValidationError(`providerAsSandboxClient(${provider.name}): live session continuation is required`);
 		const environment = await provider.create(mapped);
 		if (options.requireSession && !environment.session) {
 			if (options.workspaceRetention === void 0) await environment.destroy?.();
 			throw new ValidationError(`providerAsSandboxClient(${provider.name}): session() is required`);
 		}
 		return environmentAsSandboxInstance(environment, {
+			...typeof mapped.profile === "string" ? {} : { profile: mapped.profile },
 			requireTerminalEvent: options.requireTerminalEvent ?? true,
 			...options.workspaceRetention === void 0 ? {} : { workspaceRetention: options.workspaceRetention },
 			...options.retentionIdentity === void 0 ? {} : { retentionIdentity: options.retentionIdentity },
@@ -11945,6 +12273,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				return snapshot;
 			}).catch((error) => {
 				workspaceCaptureFailure = error;
+				noteCaptureFailure(error);
 				throw error;
 			});
 		}
@@ -11995,6 +12324,18 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		schedule();
 	};
 	let nativeHoldsTranscript = false;
+	const noteCaptureFailure = (error) => {
+		if (nativeHoldsTranscript || harnessTranscript.status !== "unavailable") return;
+		if (harnessTranscript.reason !== "capture-did-not-run" && harnessTranscript.reason !== "enumeration-failed") return;
+		harnessTranscript = {
+			status: "unavailable",
+			reason: "enumeration-failed",
+			skipped: [{
+				path: workspaceExecutionId,
+				reason: errorText(error instanceof Error ? error.message : error)
+			}]
+		};
+	};
 	const stopNativeMirror = async () => {
 		if (nativeTimer !== void 0) clearTimeout(nativeTimer);
 		nativeTimer = void 0;
@@ -12040,7 +12381,9 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				if (nativeHoldsTranscript && !(copy.status === "retained" && copy.fileCount > 0)) return;
 				harnessTranscript = copy;
 				nativeHoldsTranscript = true;
-			} catch {}
+			} catch (error) {
+				noteCaptureFailure(error);
+			}
 		}).finally(() => {
 			if (nativeInFlight === tracked) nativeInFlight = void 0;
 		});
@@ -12677,7 +13020,10 @@ async function* streamProviderExecutor(args) {
 		const verdict = await args.options.validator?.validate(result, {
 			iteration: 0,
 			...args.node === void 0 ? {} : { node: args.node },
-			box: environmentAsSandboxInstance(environment, { requireTerminalEvent: args.options.requireTerminalEvent ?? true }),
+			box: environmentAsSandboxInstance(environment, {
+				profile: args.profile,
+				requireTerminalEvent: args.options.requireTerminalEvent ?? true
+			}),
 			signal: linked
 		});
 		const deferCapture = ownerTakesCapture();
@@ -12875,7 +13221,7 @@ async function* streamProviderExecutor(args) {
 		} else if (input > 0 || output > 0 || receipt.tokensKnown === false) pendingUnpricedWork = true;
 	}
 }
-/** Subscription selection needs the same complete profile on creation and every new turn. */
+/** Subscription selection needs its complete profile and one identity for each fresh turn. */
 function subscriptionTurnProfile(turn, profile) {
 	if (profile.model?.metadata?.credentialSource !== "subscription") return turn;
 	const backend = promptOptionsFromAgentTurnInput(turn).backend ?? {};
@@ -12883,14 +13229,26 @@ function subscriptionTurnProfile(turn, profile) {
 	if (turn.profile !== void 0 && canonicalAgentProfileDigest(turn.profile) !== digest || backend.profile !== void 0 && canonicalAgentProfileDigest(backend.profile) !== digest) throw new ValidationError("provider subscription turn cannot replace its exact AgentProfile");
 	return {
 		...turn,
-		profile
+		profile,
+		...turn.turnId === void 0 && turn.lastEventId === void 0 && turn.controlRef === void 0 ? { turnId: randomUUID() } : {}
 	};
 }
+function hasRuntimeMcpAttachments(input) {
+	const mcp = input?.runtimeAttachments?.mcp;
+	return mcp !== void 0 && Object.keys(mcp).length > 0;
+}
+function assertRuntimeMcpAttachments(provider, input, capabilities) {
+	if (!hasRuntimeMcpAttachments(input)) return;
+	const create = capabilities?.create;
+	if (!create || !("runtimeAttachments" in create) || create.runtimeAttachments?.mcp !== true) throw new ValidationError(`provider ${provider} does not advertise create.runtimeAttachments.mcp; no environment was created`);
+}
 /** One retained dispatch owns creation, replay, result identity, and cancellation. */
 async function providerExecutionSource(args, turn, signal) {
 	const selectedTurn = subscriptionTurnProfile(turn, args.profile);
 	AgentTurnInputSchema.parse(selectedTurn);
-	const capabilities = args.retention ? await args.provider.capabilities() : void 0;
+	const needsMcp = hasRuntimeMcpAttachments(args.options.defaults);
+	const capabilities = args.retention || needsMcp ? await args.provider.capabilities() : void 0;
+	assertRuntimeMcpAttachments(args.provider.name, args.options.defaults, capabilities);
 	if (!(args.retention !== void 0 && capabilities?.retainedControl !== void 0)) {
 		if (args.recovering) throw new Error(`provider ${args.provider.name} cannot recover retained executions`);
 		const environment = await args.provider.create({
@@ -12937,7 +13295,7 @@ async function providerExecutionSource(args, turn, signal) {
 		...priorSession === void 0 ? {} : {
 			existingEnvironmentId: priorSession.environmentId,
 			identity: {
-				sessionId: priorSession.sessionId,
+				sessionId: retention.newSession ? mintRetainedIdentity(environmentKey, turnId).sessionId : priorSession.sessionId,
 				executionId: mintRetainedIdentity(environmentKey, turnId).executionId
 			}
 		}
@@ -13067,14 +13425,14 @@ async function providerExecutionSource(args, turn, signal) {
 							observationBudgetExceeded = true;
 							break;
 						}
-						if (observedFrames > 0 && observedFrames % RETAINED_OBSERVATION_BATCH_EVENTS === 0) await awaitAbortable$1(new Promise((resolve) => setImmediate(resolve)), signal);
+						if (observedFrames > 0 && observedFrames % RETAINED_OBSERVATION_BATCH_EVENTS === 0) await awaitAbortable$1(new Promise((resolve) => setImmediate$1(resolve)), signal);
 						let next;
 						let wake;
 						try {
 							const remaining = observationIdleMs - (Date.now() - lastObservedAt);
 							if (remaining <= 0) throw new RetainedReadTimeoutError("event stream", observationIdleMs);
 							const exactWake = new Promise((resolve) => {
-								wake = setImmediate(() => {
+								wake = setImmediate$1(() => {
 									readExactResult().then(() => resolve({ kind: "exact-result" }), () => resolve({ kind: "exact-result" }));
 								});
 							});
@@ -13187,7 +13545,44 @@ async function providerExecutionSource(args, turn, signal) {
 		throw error;
 	}
 }
-function createInputFromSandboxOptions(options) {
+function createInputFromSandboxOptions(options, customMapping) {
+	if (!customMapping) {
+		const mapped = /* @__PURE__ */ new Set([
+			"backend",
+			"environment",
+			"git",
+			"cwd",
+			"resources",
+			"env",
+			"secrets",
+			"metadata",
+			"name",
+			"idempotencyKey"
+		]);
+		const unsupported = Object.entries(options ?? {}).filter(([key, value]) => value !== void 0 && !mapped.has(key)).map(([key]) => key);
+		for (const [prefix, value, keys] of [[
+			"backend",
+			options?.backend,
+			[
+				"type",
+				"profile",
+				"model"
+			]
+		], [
+			"git",
+			options?.git,
+			["url", "ref"]
+		]]) for (const [key, field] of Object.entries(value ?? {})) if (field !== void 0 && !keys.includes(key)) unsupported.push(`${prefix}.${key}`);
+		const model = options?.backend?.model;
+		if (model !== void 0) {
+			for (const [key, value] of Object.entries(model)) if (value !== void 0 && !["provider", "model"].includes(key)) unsupported.push(`backend.model.${key}`);
+			const profile = options?.backend?.profile;
+			if (model.provider !== void 0 && model.provider !== profile?.model?.provider?.trim()) unsupported.push("backend.model.provider");
+			if (model.model !== void 0 && model.model !== concreteProfileModel(profile ?? {})) unsupported.push("backend.model.model");
+		}
+		if (options?.secrets === "all") unsupported.push("secrets=all");
+		if (unsupported.length > 0) throw new ValidationError(`providerAsSandboxClient: Sandbox create controls require mapCreateOptions: ${unsupported.join(", ")}`);
+	}
 	const profile = options?.backend?.profile;
 	const backend = options?.backend?.type;
 	const cwd = options?.cwd === void 0 ? void 0 : canonicalWorkspaceCwd({
@@ -13209,8 +13604,7 @@ function createInputFromSandboxOptions(options) {
 		...Array.isArray(options?.secrets) ? { secrets: options.secrets } : {},
 		...options?.metadata ? { metadata: options.metadata } : {},
 		...options?.name ? { name: options.name } : {},
-		...options?.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {},
-		providerOptions: { sandboxCreateOptions: options ?? {} }
+		...options?.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {}
 	};
 }
 function environmentAsSandboxInstance(environment, options) {
@@ -13235,7 +13629,7 @@ function environmentAsSandboxInstance(environment, options) {
 		},
 		async *streamPrompt(message, promptOptions) {
 			let terminal = false;
-			const input = turnInputFromPrompt(message, promptOptions);
+			const input = turnInputFromPrompt(message, promptOptions, options.profile);
 			providerSessionId = input.sessionId ?? null;
 			noteControlRef(input.controlRef);
 			let cancellation;
@@ -13292,25 +13686,30 @@ function environmentAsSandboxInstance(environment, options) {
 			if (options.requireTerminalEvent && !terminal) throw new ValidationError(`providerAsSandboxClient(${environment.provider}): stream ended without a terminal result/done/status event`);
 		},
 		async prompt(message, promptOptions) {
-			const events = [];
+			let lastResultText;
 			let text = "";
-			let usage;
+			const usageLedger = createSandboxUsageLedger();
 			let terminal = false;
 			const failures = createProviderFailureLedger();
-			const input = turnInputFromPrompt(message, promptOptions);
+			const input = turnInputFromPrompt(message, promptOptions, options.profile);
 			providerSessionId = input.sessionId ?? null;
 			noteControlRef(input.controlRef);
 			for await (const event of environment.stream(input)) {
-				events.push(event);
+				lastResultText = resultTextFromData(event.data) ?? lastResultText;
 				if (isTerminalEnvironmentEvent(event)) terminal = true;
-				failures.observe(event, sandboxEventFromEnvironmentEvent(event));
+				const sandboxEvent = sandboxEventFromEnvironmentEvent(event);
+				failures.observe(event, sandboxEvent);
+				const usageEvent = usageSandboxEvent(event);
+				if (usageEvent) usageLedger.observe(usageEvent, environment.id);
+				usageLedger.observe(sandboxEvent, environment.id);
 				text += textFromEnvironmentEvent(event);
-				usage = mergeTokenUsage(usage, event.usage);
 			}
 			if (options.requireTerminalEvent && !terminal) throw new ValidationError(`providerAsSandboxClient(${environment.provider}): prompt ended without a terminal result/done/status event`);
+			usageLedger.settleTurn(environment.id);
+			const usage = usageLedger.settledUsage();
 			const outcome = failures.finish();
 			return {
-				response: resultFromEvents(events, text).content,
+				response: lastResultText ?? text,
 				success: outcome?.success ?? true,
 				status: outcome?.status ?? "success",
 				durationMs: 0,
@@ -13319,14 +13718,14 @@ function environmentAsSandboxInstance(environment, options) {
 			};
 		},
 		...environment.dispatch && environment.session ? { async dispatchPrompt(message, promptOptions) {
-			const session = await environment.dispatch?.(turnInputFromPrompt(message, promptOptions));
+			const session = await environment.dispatch?.(turnInputFromPrompt(message, promptOptions, options.profile));
 			if (!session) throw new ValidationError("providerAsSandboxClient: dispatch returned no session");
 			noteControlRef(session.controlRef);
 			return sandboxDispatchResultFromSessionRef(session);
 		} } : {},
 		...environment.session ? { session(id, sessionOptions) {
 			noteControlRef(sessionOptions?.controlRef);
-			return sandboxSessionFromAgentSession(environment.session?.(id, sessionOptions), sessionOptions?.controlRef);
+			return sandboxSessionFromAgentSession(environment.session?.(id, sessionOptions), sessionOptions?.controlRef, options.profile);
 		} } : {},
 		...environment.read ? { read: environment.read.bind(environment) } : {},
 		...environment.write ? { write: environment.write.bind(environment) } : {},
@@ -13380,7 +13779,7 @@ function environmentAsSandboxInstance(environment, options) {
 		}
 	};
 }
-function sandboxSessionFromAgentSession(session, expectedControlRef) {
+function sandboxSessionFromAgentSession(session, expectedControlRef, profile) {
 	if (!session) throw new ValidationError("providerAsSandboxClient: session is unavailable");
 	const controlRef = resolveSessionControlRef(session.controlRef, expectedControlRef);
 	return {
@@ -13407,7 +13806,7 @@ function sandboxSessionFromAgentSession(session, expectedControlRef) {
 			return promptResultFromAgentTurnResult(await session.result());
 		},
 		async prompt(message, options) {
-			return promptResultFromAgentTurnResult(await session.prompt(turnInputFromPrompt(message, options)));
+			return promptResultFromAgentTurnResult(await session.prompt(turnInputFromPrompt(message, options, profile)));
 		},
 		...session.respondToInteraction ? { async respondToInteraction(command, options) {
 			assertInteractionCommandScope(command, controlRef);
@@ -13654,8 +14053,8 @@ function tokenUsageData(usage) {
 		...usage.cost !== void 0 ? { totalCostUsd: usage.cost } : {}
 	};
 }
-function turnInputFromPrompt(message, options) {
-	return {
+function turnInputFromPrompt(message, options, profile) {
+	const input = {
 		...typeof message === "string" ? { prompt: message } : { parts: message },
 		...options?.sessionId ? { sessionId: options.sessionId } : {},
 		...options?.model ? { model: options.model } : {},
@@ -13670,6 +14069,7 @@ function turnInputFromPrompt(message, options) {
 		...options?.signal ? { signal: options.signal } : {},
 		...options?.backend ? { providerOptions: { backend: options.backend } } : {}
 	};
+	return profile === void 0 ? input : subscriptionTurnProfile(input, profile);
 }
 function resolveSessionControlRef(actual, expected, options = {}) {
 	if (expected === void 0) {
@@ -13823,19 +14223,6 @@ function isUsageType(type) {
 function isNestedUsageType(type) {
 	return isSandboxTerminalEvent(type) && sandboxTerminalUsageField(type) === "usage";
 }
-function mergeTokenUsage(left, right) {
-	if (!left) return right;
-	if (!right) return left;
-	return {
-		inputTokens: left.inputTokens + right.inputTokens,
-		outputTokens: left.outputTokens + right.outputTokens,
-		...left.totalTokens !== void 0 || right.totalTokens !== void 0 ? { totalTokens: (left.totalTokens ?? 0) + (right.totalTokens ?? 0) } : {},
-		...left.cacheReadInputTokens !== void 0 || right.cacheReadInputTokens !== void 0 ? { cacheReadInputTokens: (left.cacheReadInputTokens ?? 0) + (right.cacheReadInputTokens ?? 0) } : {},
-		...left.cacheCreationInputTokens !== void 0 || right.cacheCreationInputTokens !== void 0 ? { cacheCreationInputTokens: (left.cacheCreationInputTokens ?? 0) + (right.cacheCreationInputTokens ?? 0) } : {},
-		...left.reasoningTokens !== void 0 || right.reasoningTokens !== void 0 ? { reasoningTokens: (left.reasoningTokens ?? 0) + (right.reasoningTokens ?? 0) } : {},
-		...left.cost !== void 0 || right.cost !== void 0 ? { cost: (left.cost ?? 0) + (right.cost ?? 0) } : {}
-	};
-}
 function stringValue(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
@@ -21039,14 +21426,15 @@ function routerTurnRequestIdentity(identity, turnIndex) {
 * the recorded usage events are yielded; the terminal artifact is read from
 * `resultArtifact()` after the stream drains.
 */
-const sandboxExecutor = (spec, ctx) => {
+const sandboxExecutor = (spec, ctx) => sandboxExecutorForPath(spec, ctx, "sandbox");
+function sandboxExecutorForPath(spec, ctx, modelPath) {
 	if (spec.harness === null) throw new ValidationError$1("sandboxExecutor: harness is null (router/inline) — wrong executor");
 	const harness = spec.harness;
 	const seam = readSeam(ctx, sandboxSeamKey, "sandbox");
 	if (!seam.sandboxClient || typeof seam.sandboxClient.create !== "function") throw new ValidationError$1("sandboxExecutor: SandboxSeam.sandboxClient.create required");
 	const maxIterations = seam.maxIterations ?? 1;
 	if (!Number.isFinite(maxIterations) || maxIterations <= 0) throw new ValidationError$1("sandboxExecutor: maxIterations must be > 0");
-	const sandboxTokenLimits = enforceTokenLimits(profileModelExecutionSettings(spec.profile, "sandboxExecutor").tokenLimits, "sandbox", "sandboxExecutor");
+	const sandboxTokenLimits = enforceTokenLimits(profileModelExecutionSettings(spec.profile, "sandboxExecutor", modelPath).tokenLimits, "sandbox", "sandboxExecutor");
 	const traceEnv = {
 		...workerLineage({
 			harness,
@@ -21175,7 +21563,7 @@ const sandboxExecutor = (spec, ctx) => {
 			return artifact;
 		}
 	}, sandboxMaterialization, sandboxBinding);
-};
+}
 async function* streamSandboxLeaf(args) {
 	const linked = linkAbort(args.signal, args.controller.signal);
 	const agentRun = {
@@ -21974,6 +22362,7 @@ function createExecutor(config) {
 					const sandboxClient = providerAsSandboxClient(provider, {
 						defaults: {
 							...providerSeam.defaults ?? {},
+							idempotencyKey: providerSeam.defaults?.idempotencyKey ?? seamed.node?.attemptId ?? randomUUID(),
 							signal: seamed.signal
 						},
 						requireTerminalEvent: providerSeam.requireTerminalEvent,
@@ -22010,10 +22399,10 @@ function createExecutor(config) {
 							}
 						}
 					};
-					const executor = sandboxExecutor({
+					const executor = sandboxExecutorForPath({
 						...spec,
 						harness
-					}, providerCtx);
+					}, providerCtx, "provider");
 					const wrapper = inheritRuntimeOwnedExecutorAttestation(executor, {
 						...executor,
 						runtime: providerSeam.runtime ?? provider.name
@@ -22363,6 +22752,7 @@ function admitContinuationPolicy(policy, context) {
 		if (usd === void 0 || !finite(usd.perContinuation) || !finite(usd.perRun) || usd.perContinuation <= 0 || usd.perRun < usd.perContinuation) throw new ValidationError$1(`${context}: continuation.panel 'on' needs panelUsd with 0 < perContinuation <= perRun`);
 	}
 	if (policy.append !== void 0 && typeof policy.append !== "function") throw new ValidationError$1(`${context}: continuation.append must be a function`);
+	if (policy.session !== void 0 && policy.session !== "native" && policy.session !== "fresh") throw new ValidationError$1(`${context}: continuation.session must be 'native' or 'fresh'`);
 	admitContinuationProfile(policy.profile, context);
 	return deadlineMs;
 }
@@ -23847,6 +24237,7 @@ function settlementFields(subject, settlement) {
 		reason: settlement.reason,
 		...settlement.retainedPendingCause === void 0 ? {} : { retainedPendingCause: settlement.retainedPendingCause },
 		...settlement.outRef ? { outRef: settlement.outRef } : {},
+		...settlement.outRef && settlement.traceRoot ? { traceRoot: settlement.traceRoot } : {},
 		...settlement.providerModel ? { providerModel: settlement.providerModel } : {},
 		...subject.budgetViolation ? { budgetViolation: subject.budgetViolation } : {},
 		trace: settlement.trace,
@@ -23982,6 +24373,7 @@ async function healReleasedSlots(opts, signal, now) {
 				...floor.infra === void 0 ? {} : { infra: floor.infra },
 				trace: floor.trace,
 				...floor.outRef ? { outRef: floor.outRef } : {},
+				...floor.traceRoot ? { traceRoot: floor.traceRoot } : {},
 				...floor.providerModel ? { providerModel: floor.providerModel } : {},
 				...floor.harnessTranscript ? { harnessTranscript: floor.harnessTranscript } : {},
 				...floor.retainedPendingCause ? { retainedPendingCause: floor.retainedPendingCause } : {}
@@ -24099,6 +24491,7 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 			id: result.id,
 			status: reason === void 0 ? "done" : "down",
 			outRef: result.outRef,
+			...result.traceRoot === void 0 ? {} : { traceRoot: result.traceRoot },
 			...reason === void 0 ? {} : { reason },
 			...infra === void 0 ? {} : { infra },
 			spent: result.spent,
@@ -24612,6 +25005,7 @@ function registerScopeRetainedOwner(scope, args) {
 	const acceptedRef = [...attempt].reverse().find((event) => event.kind === "execution-result");
 	const priorSession = taskEvent === void 0 ? void 0 : committedSession(events, start);
 	let sequence = Math.max(0, ...events.map((event) => "seq" in event ? event.seq : 0));
+	const traceRoots = traceRootWriter(args.blobs, args.nodeId);
 	const state = {
 		args,
 		admissions,
@@ -24631,6 +25025,9 @@ function registerScopeRetainedOwner(scope, args) {
 			get priorSession() {
 				return state.priorSession;
 			},
+			get newSession() {
+				return state.freshSessions === true && state.priorSession !== void 0;
+			},
 			preserveEnvironment: true,
 			admissions,
 			get restoreWorkspace() {
@@ -24673,7 +25070,8 @@ function registerScopeRetainedOwner(scope, args) {
 				rootId: args.rootId,
 				nodeId: args.nodeId,
 				nextSequence: () => state.nextSequence(),
-				now: args.now
+				now: args.now,
+				traceRoots
 			}),
 			onWorkspaceCapture: workspaceCaptureWriter({
 				journal: args.journal,
@@ -24694,10 +25092,12 @@ function registerScopeRetainedOwner(scope, args) {
 				const outRef = contentAddress(result.out);
 				await args.blobs.put(outRef, result.out);
 				scope.signal.throwIfAborted();
+				const traceRoot = await traceRoots.write(outRef, result.out);
 				const event = {
 					kind: "execution-result",
 					id: args.nodeId,
 					outRef,
+					...traceRoot === void 0 ? {} : { traceRoot },
 					spent: detachedSnapshot(result.spent, "retained owner spend"),
 					...result.verdict ? { verdict: result.verdict } : {},
 					...result.outcome ? { outcome: result.outcome } : {},
@@ -25924,11 +26324,14 @@ async function reconcileScopeRetainedOwnerEnvironment(scope) {
 		environmentId
 	};
 }
-/** Resume the original backend prompt; rebuilt coordination observations cannot replace it. */
-async function prepareScopeRetainedOwnerTask(scope, task) {
+/** Resume the original backend prompt; rebuilt coordination observations cannot replace it.
+*  `session: 'fresh'` makes every invocation after the first start a new harness session in the
+*  environment it continues. */
+async function prepareScopeRetainedOwnerTask(scope, task, session = "native") {
 	const state = owners.get(scope);
 	if (!state) return task;
 	const { args } = state;
+	state.freshSessions = session === "fresh";
 	scope.signal.throwIfAborted();
 	const owned = (await args.journal.loadTree(args.rootId) ?? []).filter((event) => event.id === args.nodeId);
 	const latestInput = [...owned].reverse().find((event) => event.kind === "execution-input");
@@ -26267,6 +26670,77 @@ function checkedSeatSelection(stage, selected) {
 	return selected;
 }
 //#endregion
+//#region src/runtime/supervise/worker-events.ts
+const MAX_EVENTS = 256;
+const MAX_BYTES = 262144;
+/** One worker's already-redacted live output. Accounting stays on Scope's existing usage channel. */
+var WorkerEvents = class {
+	#epoch = randomUUID();
+	#entries = [];
+	#next = 0;
+	#capturing = false;
+	start() {
+		this.#capturing = true;
+	}
+	#bytes = 0;
+	append(event, at) {
+		let entry = {
+			sequence: this.#next++,
+			at,
+			event: defaultRedactor(event)
+		};
+		let bytes;
+		try {
+			bytes = Buffer.byteLength(JSON.stringify(entry));
+		} catch {
+			entry = {
+				sequence: entry.sequence,
+				at,
+				event: null,
+				omitted: "event-not-serializable"
+			};
+			bytes = Buffer.byteLength(JSON.stringify(entry));
+		}
+		if (bytes > MAX_BYTES) {
+			entry = {
+				sequence: entry.sequence,
+				at,
+				event: null,
+				omitted: "event-too-large"
+			};
+			bytes = Buffer.byteLength(JSON.stringify(entry));
+		}
+		this.#entries.push({
+			entry,
+			bytes
+		});
+		this.#bytes += bytes;
+		while (this.#entries.length > MAX_EVENTS || this.#bytes > MAX_BYTES) this.#bytes -= this.#entries.shift().bytes;
+	}
+	read(cursor) {
+		if (!this.#capturing) return {
+			status: "unavailable",
+			reason: "not-captured"
+		};
+		if (cursor && (!Number.isSafeInteger(cursor.next) || cursor.next < 0)) throw new Error("worker event cursor must name a non-negative safe integer");
+		const reset = cursor !== void 0 && cursor.epoch !== this.#epoch;
+		const first = this.#entries[0]?.entry.sequence ?? this.#next;
+		const start = reset ? first : cursor?.next ?? first;
+		if (!reset && start > this.#next) throw new Error("worker event cursor is ahead of this stream");
+		return {
+			status: "available",
+			entries: this.#entries.filter(({ entry }) => entry.sequence >= start).map(({ entry }) => structuredClone(entry)),
+			cursor: {
+				epoch: this.#epoch,
+				next: this.#next
+			},
+			reset,
+			historyExpired: start < first || cursor === void 0 && first > 0,
+			remaining: 0
+		};
+	}
+};
+//#endregion
 //#region src/runtime/supervise/scope.ts
 /**
 *
@@ -26805,6 +27279,7 @@ function createScope(args) {
 			const recoveryReady = recovery?.spawned.ownedTreeRoot === void 0 || budgetGranted !== void 0 ? void 0 : new Promise((resolve) => {
 				markRecoveryReady = resolve;
 			});
+			const traceRoots = traceRootWriter(args.blobs, id);
 			const retainedWrites = /* @__PURE__ */ new Set();
 			let retainedWritesClosed = false;
 			const retainedWrite = (write) => {
@@ -26849,10 +27324,12 @@ function createScope(args) {
 				const outRef = contentAddress(result.out);
 				await args.blobs.put(outRef, result.out);
 				controller.signal.throwIfAborted();
+				const traceRoot = await traceRoots.write(outRef, result.out);
 				await args.journal.appendEvent(args.root, {
 					kind: "execution-result",
 					id,
 					outRef,
+					...traceRoot === void 0 ? {} : { traceRoot },
 					spent: result.spent,
 					...result.verdict ? { verdict: result.verdict } : {},
 					...result.outcome ? { outcome: result.outcome } : {},
@@ -26898,7 +27375,8 @@ function createScope(args) {
 					rootId: args.root,
 					nodeId: id,
 					nextSequence: () => ordinal,
-					now
+					now,
+					traceRoots
 				}),
 				onPause,
 				onWorkspaceCapture,
@@ -26980,6 +27458,7 @@ function createScope(args) {
 				live.teardownAttempts += 1;
 			});
 			const live = {
+				events: new WorkerEvents(),
 				id,
 				status: permit.granted ? "acquiring" : "queued",
 				runtime: executor.runtime,
@@ -26990,6 +27469,7 @@ function createScope(args) {
 				...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
 				...opts.key !== void 0 ? { key: opts.key } : {},
 				spent: zeroSpend(),
+				traceRoots,
 				settled: void 0,
 				delivered: false,
 				executorDone: false,
@@ -27209,12 +27689,20 @@ function createScope(args) {
 				const ready = await readInteractiveReadyUntilWorkerEnds(live.readInteractiveReady, childRun, controller.signal);
 				if (ready !== void 0 && (ready.status === "available" || ready.reason !== "interactive-session-not-started")) writeWorkerInteractiveBinding(args.interactiveBindingDir, id, opts.label, args.root, ready, now);
 			});
-			const settled = childRun.then(async (s) => {
+			const settled = childRun.then(async (ran) => {
+				const traceRoot = await live.traceRoots.recorded(ran.outRef);
+				const s = traceRoot === void 0 ? ran : {
+					...ran,
+					traceRoot
+				};
 				let resolution = s;
 				try {
 					await interactiveBindingCommitted;
 				} catch {
-					resolution = downRecord("interactive worker binding persistence failed", true, s.trace, s.metered, s.providerModel, s.outRef, s.harnessTranscript);
+					resolution = {
+						...downRecord("interactive worker binding persistence failed", true, s.trace, s.metered, s.providerModel, s.outRef, s.harnessTranscript),
+						...s.traceRoot === void 0 ? {} : { traceRoot: s.traceRoot }
+					};
 				}
 				live.resolved = resolution;
 				return resolution;
@@ -27418,6 +27906,37 @@ function createScope(args) {
 		nextResolved,
 		send,
 		progress,
+		observeTree: () => {
+			const view = makeTreeView(args.parentId, children);
+			const nodes = new Map((args.resumeFrom?.view.nodes ?? []).map((node) => [node.id, node]));
+			for (const node of view.nodes) nodes.set(node.id, node);
+			for (const child of children.values()) {
+				const nested = child.readNestedScope?.();
+				if (nested) for (const node of (nested.observeTree?.() ?? nested.view).nodes) nodes.set(node.id, node);
+			}
+			const all = [...nodes.values()];
+			return {
+				root: view.root,
+				nodes: all,
+				inFlight: all.filter((node) => [
+					"queued",
+					"acquiring",
+					"running"
+				].includes(node.status)).length
+			};
+		},
+		observeEvents: (nodeId, cursor) => {
+			const child = children.get(nodeId);
+			if (child) return child.events.read(cursor);
+			for (const candidate of children.values()) {
+				const page = (candidate.readNestedScope?.())?.observeEvents?.(nodeId, cursor);
+				if (page && (page.status === "available" || page.reason !== "unknown-worker")) return page;
+			}
+			return {
+				status: "unavailable",
+				reason: args.resumeFrom?.view.nodes.some((node) => node.id === nodeId) ? "not-captured" : "unknown-worker"
+			};
+		},
 		traceSource,
 		interactive,
 		cancel,
@@ -27636,7 +28155,7 @@ function createScope(args) {
 			const nested = child.readNestedScope?.();
 			if (nested !== void 0) await closeRetainedSlots(nested);
 		}
-		const open = [...children.values()].filter((child) => child.recoveryPending === true && !child.cleanupConfirmed && isTerminalNodeStatus(child.status) && child.retainedExecution !== "released" && child.retainedExecution !== "release-unconfirmed");
+		const open = [...children.values()].filter((child) => child.recoveryPending === true && isTerminalNodeStatus(child.status) && child.retainedExecution !== "released" && child.retainedExecution !== "release-unconfirmed");
 		if (open.length === 0) return;
 		const prior = await args.journal.loadTree(args.root) ?? [];
 		for (const child of open) await closeRetainedSlot(child, "release-unconfirmed", prior);
@@ -28122,6 +28641,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 		id: child.id,
 		status: "done",
 		outRef: settlement.outRef,
+		...settlement.traceRoot === void 0 ? {} : { traceRoot: settlement.traceRoot },
 		...settlement.verdict ? { verdict: settlement.verdict } : {},
 		spent: settlement.spent,
 		...settlement.providerModel ? { providerModel: settlement.providerModel } : {},
@@ -28201,6 +28721,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		const out = detachedSnapshot(result.out, "scope child output");
 		const outRef = contentAddress(out);
 		await blobs.put(outRef, out);
+		await live.traceRoots.write(outRef, out);
 		retainedOutputRef = outRef;
 		if (usageError !== void 0) throw usageError;
 		return {
@@ -28271,6 +28792,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		const ran = recovering ? executor.recover(task, childAbort.signal) : executor.execute(task, childAbort.signal);
 		let artifact;
 		if (isAsyncIterable(ran)) {
+			live.events.start();
 			const spend = await foldStream(ran, async (running) => {
 				live.spent = running;
 				live.lastActivityAt = now();
@@ -28281,7 +28803,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 					seq: nextProgressSeq(),
 					at: new Date(now()).toISOString()
 				});
-			}, childAbort.signal, priorSpent);
+			}, childAbort.signal, priorSpent, (event) => live.events.append(event, now()));
 			live.spent = spend;
 			const reported = executor.resultArtifact();
 			artifact = await retainOutput(reported, preserveUnknownTelemetry(spend, reported.spent));
@@ -28645,7 +29167,7 @@ function freezeCorrelation(value) {
 * turns deep from one that had produced nothing. It also means a worker that THROWS mid-stream
 * now reconciles its real partial spend instead of refunding work the provider already billed.
 */
-async function foldStream(stream, onProgress, signal, priorSpent) {
+async function foldStream(stream, onProgress, signal, priorSpent, onEvent) {
 	const totals = newUsageTotals(priorSpent);
 	const iterator = stream[Symbol.asyncIterator]();
 	try {
@@ -28653,6 +29175,7 @@ async function foldStream(stream, onProgress, signal, priorSpent) {
 			const next = signal ? await awaitAbortable(Promise.resolve(iterator.next()), signal) : await iterator.next();
 			if (next.done) break;
 			const ev = next.value;
+			if (ev.kind === "progress") onEvent?.(ev.progress);
 			meterUsageEvent(totals, ev);
 			await onProgress?.({
 				...addResourceSpend(totals.resources),
@@ -29372,6 +29895,7 @@ function upstreamUnavailableSignal(error) {
 	const admission = retainedAdmissionCause(error);
 	if (admission !== void 0) return upstreamUnavailableSignal(admission);
 	if (!(error instanceof Error)) return void 0;
+	if (isCredentialRefusal(error)) return void 0;
 	if (isProviderSchemaRejection(error)) return void 0;
 	if (error instanceof CheckUnavailableError) return "check-unavailable";
 	if (error instanceof HarnessTurnFailedError) {
@@ -29436,6 +29960,7 @@ function classifyDriverFailure(error, signal) {
 	if (admission !== void 0) return classifyDriverFailure(admission, signal);
 	if (error instanceof Error && errorProperty(error, "name") === "AbortError") return "terminal";
 	if (error instanceof Error && isProviderSchemaRejection(error)) return "terminal";
+	if (isCredentialRefusal(error)) return "terminal";
 	if (error instanceof HarnessTurnFailedError) {
 		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
 		if (isUpstreamUnavailable(error)) return "unavailable";
@@ -29477,7 +30002,7 @@ function retainedAdmissionCause(error) {
 			if (errorProperty(value, "name") === "RetainedRunProviderContractError") return void 0;
 			const status = errorHttpStatus(value);
 			if (status !== void 0 && status >= 400) return error.pendingCause === "request-rejected" || UNAVAILABLE_STATUSES.has(status) ? value : void 0;
-			if (error.pendingCause === "request-rejected" && (value instanceof AgentEvalError$1 || isProviderSchemaRejection(value) || isDispatchNotAdmitted(value) || capacityCode(value) !== void 0)) return value;
+			if (error.pendingCause === "request-rejected" && (value instanceof AgentEvalError$1 || isProviderSchemaRejection(value) || isDispatchNotAdmitted(value) || isCredentialRefusal(value) || capacityCode(value) !== void 0)) return value;
 			const members = Reflect.get(value, "errors");
 			if (Array.isArray(members)) queue.push(...members.slice(0, 12 - steps));
 			queue.push(value.cause);
@@ -31009,6 +31534,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { environmentReader as $, runtimeOwnedScopeOwnerRuntime as $i, parseWorkerToolTraceArtifact as $n, loopEventToOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptOnlyProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, resolveHarnessTranscriptCapture as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, authoredProfileDigest as Bi, InMemoryResultBlobStore as Bn, mergeTraceEnv as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, promptFromAgentTurnInput as Ca, assertProfileMaterializes as Ci, readPromptOptions as Cn, abortError as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, profileMaterializationAxes$1 as Di, createAgentEnvironmentProviderRegistry as Dn, harnessTranscriptArtifact as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, fullProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, captureHarnessTranscript as Er, failedItems as Et, seatExecutionProfile as F, unsupportedProfileDimensions as Fi, retainedExecutorSeamKey as Fn, runCodeMode as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, newExecutionAttemptId as Gi, replaySpawnTree as Gn, resolveRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, inheritRuntimeOwnedExecutorAttestation as Hi, insideCursorNamespace as Hn, traceContextToEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, validateProfileMaterialization as Ii, unavailablePauseMs as In, priceTokens as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, runtimeOwnedDriveHarnessProviderEvidence as Ji, readCommittedJsonLines as Jn, buildRuntimeEventOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, providerAttemptEvidence as Ki, isNoEntError as Kn, buildLoopOtelSpans as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, worktreeCliProfileMaterialization as Li, unavailableSignalOfFailure as Ln, routerTokenPrice as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, renderProfileMaterializationIssues as Mi, decodeToolPart as Mn, contentAddress as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, renderUnsupported as Ni, sandboxSessionTraceSource as Nn, createCodeModeTools as Nr, createExecutor as Nt, recordScopeOwnerPause as O, promptControlProfileMaterialization as Oi, providerAsExecutor as On, persistHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, sandboxActProfileMaterialization as Pi, registerRetainedExecutorPreparation as Pn, describeCodeModeTools as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedPendingExecutorMaterialization as Qi, isTraceAnalysisStore as Qn, generateSpanId as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, attestRuntimeOwnedPendingExecutor as Ri, FileResultBlobStore as Rn, ROUTER_PRICE_SOURCE as Rr, createSteerableSandboxSession as Rt, createScope as S, awaitAbortable$1 as Sa, assertProfileMaterialization as Si, assertBoxlessPromptOptions as Sn, RunCancellationReason as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, providerMessageText as Ta, defineProfileMaterializationContract as Ti, runBrainLoop as Tn, runAbortable as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, knownExecutionBindingReceipt as Ui, loadSpawnForest as Un, defaultRedactor as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, finalizeRuntimeOwnedPendingExecutor as Vi, InMemorySpawnJournal as Vn, readTraceContextFromEnv as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, knownMaterializationReceipt as Wi, materializeTreeView as Wn, defaultRedactorIdentityMaterial as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedExecutorMaterialization as Xi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Xn, createOtelExporter as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, runtimeOwnedExecutorExecutionBinding as Yi, writeAllBytes as Yn, createOpenInferenceFileExporter as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedExecutorProviderEvidence as Zi, captureWorkerTraceEvidence as Zn, flatOtelSpan as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, sandboxEventServedBackend as _a, localHarnessExecutable as _i, runAgentRounds as _n, retainedCreateMaterial as _r, CONTINUATION_FACTS as _t, collectDelivered as a, detachedSnapshot as aa, sanitizeAgentRuntimeEvent as ai, isLiveNodeStatus as an, createBudgetPool as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, decodeHarnessUsage as ba, terminateProcessTreeAndConfirm as bi, SandboxEvidenceRetentionError as bn, createWorkerSlots as br, admitFinding as bt, runTree as c, assertSandboxServedModel as ca, runSettledCommand as ci, bridgeModelRouteRefusal as cn, spendFromUsageEvents as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, createSandboxUsageLedger as da, createWorktree as di, harnessUsageIsEmpty as dn, bridgeStopSignalKey as dr, freeSlots as dt, unknownExecutionBindingReceipt as ea, padSpanId as ei, claimsAuthority as en, workerTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, extractLlmCallEvent as fa, removeWorktree as fi, readCodexRolloutSession as fn, errMessage as fr, queueOf as ft, driverExecutorFactory as g, notifySandboxEventObserver as ga, harnessSupportsReasoningEffort as gi, isTerminalDecision as gn, startRetainedRunInEnvironment as gr, CONTINUATIONS_DIR as gt, driverChild as h, mapSandboxToolEvent as ha, harnessInvocation as hi, defaultSelectWinner as hn, startRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, detachedFrozen as ia, createRuntimeStreamEventCollector as ii, peerMailVerbNames as in, assertValidBudget as ir, providerVisibleProfile as it, settledToIteration as j, promptResourceProfileMaterialization as ji, createPushTraceSource as jn, retainHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, promptModelProfileMaterialization as ki, providerAsSandboxClient as kn, readHarnessTranscript as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, canonicalStreamEventFromSandboxEvent as la, runWorktreeHarness as li, addHarnessUsage as ln, spendFromUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, mapSandboxEvent as ma, LOCAL_HARNESSES as mi, createSandboxForSpec as mn, recoverRetainedRun as mr, gateOnDeliverable as mt, createRootHandle as n, executableAgentProfileSnapshot as na, toOtelAttributes as ni, isPeerMailEnvelope as nn, BudgetReconcileFault as nr, coordinationMcpAlias as nt, pickBestDelivered as o, projectSandboxOutcome as oa, sanitizeKnowledgeReadinessReport as oi, isTerminalNodeStatus as on, meterUsageEvent as or, attachWorker as ot, summarizeDriverAttempts as p, isSandboxTerminalEvent as pa, DEFAULT_LOCAL_HARNESS as pi, TERMINAL_DECISIONS as pn, reconnectRetainedRun as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, recordRuntimeOwnedDriveHarnessProviderEvidence as qi, prepareJsonlAppend as qn, buildLoopSpanNodes as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, executableAgentSpecSnapshot as ra, createRuntimeEventCollector as ri, peerMailTools as rn, ReservationWaitRefused as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, readSandboxOutcome as sa, sanitizeRuntimeStreamEvent as si, bridgeAdmissionRefusal as sn, newUsageTotals as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, unknownMaterializationReceipt as ta, padTraceId as ti, createPeerMailbox as tn, executorFailure as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, createSandboxToolPartState as ua, captureWorktreeDiff as ui, createCodexRolloutStoreReader as un, bridgeRuntimeAttachmentsKey as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, sandboxProgressEvents as va, parseCodexTokenUsage as vi, createSandboxLineage as vn, destroyInteractiveEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, promptOptionsFromAgentTurnInput as wa, controlProfileMaterialization as wi, routerBrain as wn, linkAbort as wr, distillFindings as wt, beginScopeOwnerAttempt as x, abortError$1 as xa, AGENT_PROFILE_MATERIALIZATION_AXES as xi, captureBeforeDestroy as xn, openSlotGroup as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, sumSandboxUsage as ya, CodexExecutionDiagnosticError as yi, acquireSandbox as yn, environmentGone as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, attestRuntimeOwnedScopeOwner as zi, FileSpawnJournal as zn, createPropagatingTraceEmitter as zr, createRouterTranscript as zt };
+export { environmentReader as $, runtimeOwnedExecutorProviderEvidence as $i, captureWorkerTraceEvidence as $n, flatOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptControlProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, persistHarnessTranscript as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, attestRuntimeOwnedPendingExecutor as Bi, FileResultBlobStore as Bn, ROUTER_PRICE_SOURCE as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, abortError$1 as Ca, AGENT_PROFILE_MATERIALIZATION_AXES as Ci, readPromptOptions as Cn, openSlotGroup as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, providerMessageText as Da, defineProfileMaterializationContract as Di, createAgentEnvironmentProviderRegistry as Dn, runAbortable as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, promptOptionsFromAgentTurnInput as Ea, controlProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, linkAbort as Er, failedItems as Et, seatExecutionProfile as F, renderUnsupported as Fi, retainedExecutorSeamKey as Fn, createCodeModeTools as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, knownExecutionBindingReceipt as Gi, loadSpawnForest as Gn, defaultRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, authoredProfileDigest as Hi, InMemoryResultBlobStore as Hn, mergeTraceEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, sandboxActProfileMaterialization as Ii, unavailablePauseMs as In, describeCodeModeTools as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, providerAttemptEvidence as Ji, isNoEntError as Jn, buildLoopOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, knownMaterializationReceipt as Ki, materializeTreeView as Kn, defaultRedactorIdentityMaterial as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, unsupportedProfileDimensions as Li, unavailableSignalOfFailure as Ln, runCodeMode as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, promptOnlyProfileMaterialization as Mi, decodeToolPart as Mn, resolveHarnessTranscriptCapture as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, promptResourceProfileMaterialization as Ni, sandboxSessionTraceSource as Nn, retainHarnessTranscript as Nr, createExecutor as Nt, recordScopeOwnerPause as O, fullProfileMaterialization as Oi, providerAsExecutor as On, captureHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, renderProfileMaterializationIssues as Pi, registerRetainedExecutorPreparation as Pn, contentAddress as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedExecutorMaterialization as Qi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Qn, createOtelExporter as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, validateProfileMaterialization as Ri, TRACE_ROOT_SCHEMA as Rn, priceTokens as Rr, createSteerableSandboxSession as Rt, createScope as S, decodeHarnessUsage as Sa, terminateProcessTreeAndConfirm as Si, assertBoxlessPromptOptions as Sn, createWorkerSlots as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, promptFromAgentTurnInput as Ta, assertProfileMaterializes as Ti, runBrainLoop as Tn, abortError as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, finalizeRuntimeOwnedPendingExecutor as Ui, InMemorySpawnJournal as Un, readTraceContextFromEnv as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, attestRuntimeOwnedScopeOwner as Vi, FileSpawnJournal as Vn, createPropagatingTraceEmitter as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, inheritRuntimeOwnedExecutorAttestation as Wi, insideCursorNamespace as Wn, traceContextToEnv as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedDriveHarnessProviderEvidence as Xi, readCommittedJsonLines as Xn, buildRuntimeEventOtelSpans as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, recordRuntimeOwnedDriveHarnessProviderEvidence as Yi, prepareJsonlAppend as Yn, buildLoopSpanNodes as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedExecutorExecutionBinding as Zi, writeAllBytes as Zn, createOpenInferenceFileExporter as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, mapSandboxToolEvent as _a, harnessInvocation as _i, runAgentRounds as _n, startRetainedRun as _r, CONTINUATION_FACTS as _t, collectDelivered as a, executableAgentSpecSnapshot as aa, createRuntimeEventCollector as ai, isLiveNodeStatus as an, ReservationWaitRefused as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, sandboxProgressEvents as ba, parseCodexTokenUsage as bi, SandboxEvidenceRetentionError as bn, destroyInteractiveEnvironment as br, admitFinding as bt, runTree as c, projectSandboxOutcome as ca, sanitizeKnowledgeReadinessReport as ci, bridgeModelRouteRefusal as cn, meterUsageEvent as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, canonicalStreamEventFromSandboxEvent as da, runWorktreeHarness as di, harnessUsageIsEmpty as dn, spendFromUsageTotals as dr, freeSlots as dt, runtimeOwnedPendingExecutorMaterialization as ea, generateSpanId as ei, claimsAuthority as en, isTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, createSandboxToolPartState as fa, captureWorktreeDiff as fi, readCodexRolloutSession as fn, bridgeRuntimeAttachmentsKey as fr, queueOf as ft, driverExecutorFactory as g, mapSandboxEvent as ga, LOCAL_HARNESSES as gi, isTerminalDecision as gn, recoverRetainedRun as gr, CONTINUATIONS_DIR as gt, driverChild as h, isSandboxTerminalEvent as ha, DEFAULT_LOCAL_HARNESS as hi, defaultSelectWinner as hn, reconnectRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, executableAgentProfileSnapshot as ia, toOtelAttributes as ii, peerMailVerbNames as in, BudgetReconcileFault as ir, providerVisibleProfile as it, settledToIteration as j, promptModelProfileMaterialization as ji, createPushTraceSource as jn, readHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, profileMaterializationAxes$1 as ki, providerAsSandboxClient as kn, harnessTranscriptArtifact as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, readSandboxOutcome as la, sanitizeRuntimeStreamEvent as li, addHarnessUsage as ln, newUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, extractLlmCallEvent as ma, removeWorktree as mi, createSandboxForSpec as mn, errMessage as mr, gateOnDeliverable as mt, createRootHandle as n, unknownExecutionBindingReceipt as na, padSpanId as ni, isPeerMailEnvelope as nn, workerTraceAnalysisStore as nr, coordinationMcpAlias as nt, pickBestDelivered as o, detachedFrozen as oa, createRuntimeStreamEventCollector as oi, isTerminalNodeStatus as on, assertValidBudget as or, attachWorker as ot, summarizeDriverAttempts as p, createSandboxUsageLedger as pa, createWorktree as pi, TERMINAL_DECISIONS as pn, bridgeStopSignalKey as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, newExecutionAttemptId as qi, replaySpawnTree as qn, resolveRedactor as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, unknownMaterializationReceipt as ra, padTraceId as ri, peerMailTools as rn, executorFailure as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, detachedSnapshot as sa, sanitizeAgentRuntimeEvent as si, bridgeAdmissionRefusal as sn, createBudgetPool as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, runtimeOwnedScopeOwnerRuntime as ta, loopEventToOtelSpan as ti, createPeerMailbox as tn, parseWorkerToolTraceArtifact as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, assertSandboxServedModel as ua, runSettledCommand as ui, createCodexRolloutStoreReader as un, spendFromUsageEvents as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, notifySandboxEventObserver as va, harnessSupportsReasoningEffort as vi, createSandboxLineage as vn, startRetainedRunInEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, awaitAbortable$1 as wa, assertProfileMaterialization as wi, routerBrain as wn, RunCancellationReason as wr, distillFindings as wt, beginScopeOwnerAttempt as x, sumSandboxUsage as xa, CodexExecutionDiagnosticError as xi, captureBeforeDestroy as xn, environmentGone as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, sandboxEventServedBackend as ya, localHarnessExecutable as yi, acquireSandbox as yn, retainedCreateMaterial as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, worktreeCliProfileMaterialization as zi, TRACE_SUMMARY_SCHEMA as zn, routerTokenPrice as zr, createRouterTranscript as zt };
 
-//# sourceMappingURL=supervisor-CCtmmmOz.js.map
+//# sourceMappingURL=supervisor-BMMdI4T-.js.map