@tangle-network/agent-runtime 0.321.0 → 0.322.1

package/dist/{supervisor-bkq2b8k-.js → supervisor-BMMdI4T-.js}

@@ -11206,6 +11206,20 @@ function traceEvidenceFor(event) {
 	};
 }
 //#endregion
+//#region src/runtime/supervise/credential-refusal.ts
+/**
+* The account owner refused an unsupported credential route before dispatch. This is the
+* provider SDK's machine contract, not an HTTP status, class-name guess, or prose match.
+*/
+function isCredentialRefusal(error) {
+	if (!(error instanceof Error)) return false;
+	try {
+		return Object.getOwnPropertyDescriptor(error, "code")?.value === "model_credential_refused";
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/runtime/supervise/trace-root.ts
 /**
 * Trace roots: one Merkle root over the events a turn archived, so a single event can be proven
@@ -11559,14 +11573,8 @@ function readString(value, key) {
 	const read = Reflect.get(value, key);
 	return typeof read === "string" ? read : void 0;
 }
-/**
-* Walk the cause chain (bounded, cycle-safe) and name the first cause whose structure decides.
-*
-* `phase` says whether a 4xx or a client deadline can mean "refused before it ran": only at
-* admission. After admission the same status means the provider cannot resolve what it
-* admitted, and the honest name is the refusal.
-*/
-function classifyRetainedPendingCause(cause, phase = "execution") {
+const credentialAdmissionRefusals = /* @__PURE__ */ new WeakSet();
+function classifyPendingCause(cause, phase, onCredentialRefusal) {
 	const seen = /* @__PURE__ */ new Set();
 	const queue = [{
 		value: cause,
@@ -11578,7 +11586,13 @@ function classifyRetainedPendingCause(cause, phase = "execution") {
 		const { value, phase: at } = queue.shift();
 		if (typeof value !== "object" || value === null || seen.has(value)) continue;
 		seen.add(value);
-		if (value instanceof RetainedExecutionPendingError) return value.pendingCause;
+		if (value instanceof RetainedExecutionPendingError) {
+			if (credentialAdmissionRefusals.has(value)) {
+				if (at === "execution") return "unobservable";
+				onCredentialRefusal?.();
+			}
+			return value.pendingCause;
+		}
 		const name = readString(value, "name");
 		const code = readString(value, "code");
 		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
@@ -11592,6 +11606,11 @@ function classifyRetainedPendingCause(cause, phase = "execution") {
 		}
 		if (name === "ZodError" || Array.isArray(Reflect.get(value, "issues")) || code === "JSON_BOUND_VIOLATION") return at === "admission" ? "request-rejected" : "provider-contract";
 		if (code === "DISPATCH_NOT_ADMITTED") return at === "admission" ? "request-rejected" : "provider-contract";
+		if (isCredentialRefusal(value)) {
+			if (at === "execution") return "unobservable";
+			onCredentialRefusal?.();
+			return "request-rejected";
+		}
 		if (code !== void 0 && transportCodes.has(code)) return "transport";
 		if (name === "NetworkError" || name === "ServerError") return "transport";
 		if (status === void 0 && at === "admission" && code !== void 0 && UNAVAILABLE_CODES.has(code.toLowerCase())) return "request-rejected";
@@ -11630,11 +11649,15 @@ var RetainedExecutionPendingError = class extends Error {
 	pendingCause;
 	phase;
 	constructor(cause, pendingCause = "execution") {
-		const resolved = pendingCause === "admission" || pendingCause === "execution" ? classifyRetainedPendingCause(cause, pendingCause) : pendingCause;
+		let credentialRefused = false;
+		const resolved = pendingCause === "admission" || pendingCause === "execution" ? classifyPendingCause(cause, pendingCause, () => {
+			credentialRefused = true;
+		}) : pendingCause;
 		super(causeMessages[resolved], { cause });
 		this.name = "RetainedExecutionPendingError";
 		this.pendingCause = resolved;
 		this.phase = pendingCause === "admission" ? "admission" : "execution";
+		if (credentialRefused) credentialAdmissionRefusals.add(this);
 	}
 };
 /** The execution id of a leaf's later invocation, derived from its `execution-input` sequence so
@@ -11981,7 +12004,7 @@ function providerAsSandboxClient(provider, options = {}) {
 	}
 	return { async create(createOptions) {
 		const defaults = options.defaults ?? {};
-		const sandboxInput = createInputFromSandboxOptions(createOptions);
+		const sandboxInput = createInputFromSandboxOptions(createOptions, options.mapCreateOptions !== void 0);
 		const customInput = options.mapCreateOptions?.(createOptions) ?? {};
 		const mapped = {
 			...defaults,
@@ -12000,16 +12023,17 @@ function providerAsSandboxClient(provider, options = {}) {
 		};
 		if (mapped.backend === void 0) delete mapped.backend;
 		if (mapped.profile === void 0) throw new ValidationError(`providerAsSandboxClient(${provider.name}): profile required in defaults or CreateSandboxOptions.backend.profile`);
-		if (options.requireSession) {
-			const capabilities = await provider.capabilities();
-			if (!capabilities.streaming.live || !capabilities.sessions.continue) throw new ValidationError(`providerAsSandboxClient(${provider.name}): live session continuation is required`);
-		}
+		const needsMcp = hasRuntimeMcpAttachments(mapped);
+		const capabilities = options.requireSession || needsMcp ? await provider.capabilities() : void 0;
+		assertRuntimeMcpAttachments(provider.name, mapped, capabilities);
+		if (options.requireSession && (!capabilities?.streaming.live || !capabilities.sessions.continue)) throw new ValidationError(`providerAsSandboxClient(${provider.name}): live session continuation is required`);
 		const environment = await provider.create(mapped);
 		if (options.requireSession && !environment.session) {
 			if (options.workspaceRetention === void 0) await environment.destroy?.();
 			throw new ValidationError(`providerAsSandboxClient(${provider.name}): session() is required`);
 		}
 		return environmentAsSandboxInstance(environment, {
+			...typeof mapped.profile === "string" ? {} : { profile: mapped.profile },
 			requireTerminalEvent: options.requireTerminalEvent ?? true,
 			...options.workspaceRetention === void 0 ? {} : { workspaceRetention: options.workspaceRetention },
 			...options.retentionIdentity === void 0 ? {} : { retentionIdentity: options.retentionIdentity },
@@ -12996,7 +13020,10 @@ async function* streamProviderExecutor(args) {
 		const verdict = await args.options.validator?.validate(result, {
 			iteration: 0,
 			...args.node === void 0 ? {} : { node: args.node },
-			box: environmentAsSandboxInstance(environment, { requireTerminalEvent: args.options.requireTerminalEvent ?? true }),
+			box: environmentAsSandboxInstance(environment, {
+				profile: args.profile,
+				requireTerminalEvent: args.options.requireTerminalEvent ?? true
+			}),
 			signal: linked
 		});
 		const deferCapture = ownerTakesCapture();
@@ -13194,7 +13221,7 @@ async function* streamProviderExecutor(args) {
 		} else if (input > 0 || output > 0 || receipt.tokensKnown === false) pendingUnpricedWork = true;
 	}
 }
-/** Subscription selection needs the same complete profile on creation and every new turn. */
+/** Subscription selection needs its complete profile and one identity for each fresh turn. */
 function subscriptionTurnProfile(turn, profile) {
 	if (profile.model?.metadata?.credentialSource !== "subscription") return turn;
 	const backend = promptOptionsFromAgentTurnInput(turn).backend ?? {};
@@ -13202,14 +13229,26 @@ function subscriptionTurnProfile(turn, profile) {
 	if (turn.profile !== void 0 && canonicalAgentProfileDigest(turn.profile) !== digest || backend.profile !== void 0 && canonicalAgentProfileDigest(backend.profile) !== digest) throw new ValidationError("provider subscription turn cannot replace its exact AgentProfile");
 	return {
 		...turn,
-		profile
+		profile,
+		...turn.turnId === void 0 && turn.lastEventId === void 0 && turn.controlRef === void 0 ? { turnId: randomUUID() } : {}
 	};
 }
+function hasRuntimeMcpAttachments(input) {
+	const mcp = input?.runtimeAttachments?.mcp;
+	return mcp !== void 0 && Object.keys(mcp).length > 0;
+}
+function assertRuntimeMcpAttachments(provider, input, capabilities) {
+	if (!hasRuntimeMcpAttachments(input)) return;
+	const create = capabilities?.create;
+	if (!create || !("runtimeAttachments" in create) || create.runtimeAttachments?.mcp !== true) throw new ValidationError(`provider ${provider} does not advertise create.runtimeAttachments.mcp; no environment was created`);
+}
 /** One retained dispatch owns creation, replay, result identity, and cancellation. */
 async function providerExecutionSource(args, turn, signal) {
 	const selectedTurn = subscriptionTurnProfile(turn, args.profile);
 	AgentTurnInputSchema.parse(selectedTurn);
-	const capabilities = args.retention ? await args.provider.capabilities() : void 0;
+	const needsMcp = hasRuntimeMcpAttachments(args.options.defaults);
+	const capabilities = args.retention || needsMcp ? await args.provider.capabilities() : void 0;
+	assertRuntimeMcpAttachments(args.provider.name, args.options.defaults, capabilities);
 	if (!(args.retention !== void 0 && capabilities?.retainedControl !== void 0)) {
 		if (args.recovering) throw new Error(`provider ${args.provider.name} cannot recover retained executions`);
 		const environment = await args.provider.create({
@@ -13506,7 +13545,44 @@ async function providerExecutionSource(args, turn, signal) {
 		throw error;
 	}
 }
-function createInputFromSandboxOptions(options) {
+function createInputFromSandboxOptions(options, customMapping) {
+	if (!customMapping) {
+		const mapped = /* @__PURE__ */ new Set([
+			"backend",
+			"environment",
+			"git",
+			"cwd",
+			"resources",
+			"env",
+			"secrets",
+			"metadata",
+			"name",
+			"idempotencyKey"
+		]);
+		const unsupported = Object.entries(options ?? {}).filter(([key, value]) => value !== void 0 && !mapped.has(key)).map(([key]) => key);
+		for (const [prefix, value, keys] of [[
+			"backend",
+			options?.backend,
+			[
+				"type",
+				"profile",
+				"model"
+			]
+		], [
+			"git",
+			options?.git,
+			["url", "ref"]
+		]]) for (const [key, field] of Object.entries(value ?? {})) if (field !== void 0 && !keys.includes(key)) unsupported.push(`${prefix}.${key}`);
+		const model = options?.backend?.model;
+		if (model !== void 0) {
+			for (const [key, value] of Object.entries(model)) if (value !== void 0 && !["provider", "model"].includes(key)) unsupported.push(`backend.model.${key}`);
+			const profile = options?.backend?.profile;
+			if (model.provider !== void 0 && model.provider !== profile?.model?.provider?.trim()) unsupported.push("backend.model.provider");
+			if (model.model !== void 0 && model.model !== concreteProfileModel(profile ?? {})) unsupported.push("backend.model.model");
+		}
+		if (options?.secrets === "all") unsupported.push("secrets=all");
+		if (unsupported.length > 0) throw new ValidationError(`providerAsSandboxClient: Sandbox create controls require mapCreateOptions: ${unsupported.join(", ")}`);
+	}
 	const profile = options?.backend?.profile;
 	const backend = options?.backend?.type;
 	const cwd = options?.cwd === void 0 ? void 0 : canonicalWorkspaceCwd({
@@ -13528,8 +13604,7 @@ function createInputFromSandboxOptions(options) {
 		...Array.isArray(options?.secrets) ? { secrets: options.secrets } : {},
 		...options?.metadata ? { metadata: options.metadata } : {},
 		...options?.name ? { name: options.name } : {},
-		...options?.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {},
-		providerOptions: { sandboxCreateOptions: options ?? {} }
+		...options?.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {}
 	};
 }
 function environmentAsSandboxInstance(environment, options) {
@@ -13554,7 +13629,7 @@ function environmentAsSandboxInstance(environment, options) {
 		},
 		async *streamPrompt(message, promptOptions) {
 			let terminal = false;
-			const input = turnInputFromPrompt(message, promptOptions);
+			const input = turnInputFromPrompt(message, promptOptions, options.profile);
 			providerSessionId = input.sessionId ?? null;
 			noteControlRef(input.controlRef);
 			let cancellation;
@@ -13616,7 +13691,7 @@ function environmentAsSandboxInstance(environment, options) {
 			const usageLedger = createSandboxUsageLedger();
 			let terminal = false;
 			const failures = createProviderFailureLedger();
-			const input = turnInputFromPrompt(message, promptOptions);
+			const input = turnInputFromPrompt(message, promptOptions, options.profile);
 			providerSessionId = input.sessionId ?? null;
 			noteControlRef(input.controlRef);
 			for await (const event of environment.stream(input)) {
@@ -13643,14 +13718,14 @@ function environmentAsSandboxInstance(environment, options) {
 			};
 		},
 		...environment.dispatch && environment.session ? { async dispatchPrompt(message, promptOptions) {
-			const session = await environment.dispatch?.(turnInputFromPrompt(message, promptOptions));
+			const session = await environment.dispatch?.(turnInputFromPrompt(message, promptOptions, options.profile));
 			if (!session) throw new ValidationError("providerAsSandboxClient: dispatch returned no session");
 			noteControlRef(session.controlRef);
 			return sandboxDispatchResultFromSessionRef(session);
 		} } : {},
 		...environment.session ? { session(id, sessionOptions) {
 			noteControlRef(sessionOptions?.controlRef);
-			return sandboxSessionFromAgentSession(environment.session?.(id, sessionOptions), sessionOptions?.controlRef);
+			return sandboxSessionFromAgentSession(environment.session?.(id, sessionOptions), sessionOptions?.controlRef, options.profile);
 		} } : {},
 		...environment.read ? { read: environment.read.bind(environment) } : {},
 		...environment.write ? { write: environment.write.bind(environment) } : {},
@@ -13704,7 +13779,7 @@ function environmentAsSandboxInstance(environment, options) {
 		}
 	};
 }
-function sandboxSessionFromAgentSession(session, expectedControlRef) {
+function sandboxSessionFromAgentSession(session, expectedControlRef, profile) {
 	if (!session) throw new ValidationError("providerAsSandboxClient: session is unavailable");
 	const controlRef = resolveSessionControlRef(session.controlRef, expectedControlRef);
 	return {
@@ -13731,7 +13806,7 @@ function sandboxSessionFromAgentSession(session, expectedControlRef) {
 			return promptResultFromAgentTurnResult(await session.result());
 		},
 		async prompt(message, options) {
-			return promptResultFromAgentTurnResult(await session.prompt(turnInputFromPrompt(message, options)));
+			return promptResultFromAgentTurnResult(await session.prompt(turnInputFromPrompt(message, options, profile)));
 		},
 		...session.respondToInteraction ? { async respondToInteraction(command, options) {
 			assertInteractionCommandScope(command, controlRef);
@@ -13978,8 +14053,8 @@ function tokenUsageData(usage) {
 		...usage.cost !== void 0 ? { totalCostUsd: usage.cost } : {}
 	};
 }
-function turnInputFromPrompt(message, options) {
-	return {
+function turnInputFromPrompt(message, options, profile) {
+	const input = {
 		...typeof message === "string" ? { prompt: message } : { parts: message },
 		...options?.sessionId ? { sessionId: options.sessionId } : {},
 		...options?.model ? { model: options.model } : {},
@@ -13994,6 +14069,7 @@ function turnInputFromPrompt(message, options) {
 		...options?.signal ? { signal: options.signal } : {},
 		...options?.backend ? { providerOptions: { backend: options.backend } } : {}
 	};
+	return profile === void 0 ? input : subscriptionTurnProfile(input, profile);
 }
 function resolveSessionControlRef(actual, expected, options = {}) {
 	if (expected === void 0) {
@@ -21350,14 +21426,15 @@ function routerTurnRequestIdentity(identity, turnIndex) {
 * the recorded usage events are yielded; the terminal artifact is read from
 * `resultArtifact()` after the stream drains.
 */
-const sandboxExecutor = (spec, ctx) => {
+const sandboxExecutor = (spec, ctx) => sandboxExecutorForPath(spec, ctx, "sandbox");
+function sandboxExecutorForPath(spec, ctx, modelPath) {
 	if (spec.harness === null) throw new ValidationError$1("sandboxExecutor: harness is null (router/inline) — wrong executor");
 	const harness = spec.harness;
 	const seam = readSeam(ctx, sandboxSeamKey, "sandbox");
 	if (!seam.sandboxClient || typeof seam.sandboxClient.create !== "function") throw new ValidationError$1("sandboxExecutor: SandboxSeam.sandboxClient.create required");
 	const maxIterations = seam.maxIterations ?? 1;
 	if (!Number.isFinite(maxIterations) || maxIterations <= 0) throw new ValidationError$1("sandboxExecutor: maxIterations must be > 0");
-	const sandboxTokenLimits = enforceTokenLimits(profileModelExecutionSettings(spec.profile, "sandboxExecutor").tokenLimits, "sandbox", "sandboxExecutor");
+	const sandboxTokenLimits = enforceTokenLimits(profileModelExecutionSettings(spec.profile, "sandboxExecutor", modelPath).tokenLimits, "sandbox", "sandboxExecutor");
 	const traceEnv = {
 		...workerLineage({
 			harness,
@@ -21486,7 +21563,7 @@ const sandboxExecutor = (spec, ctx) => {
 			return artifact;
 		}
 	}, sandboxMaterialization, sandboxBinding);
-};
+}
 async function* streamSandboxLeaf(args) {
 	const linked = linkAbort(args.signal, args.controller.signal);
 	const agentRun = {
@@ -22285,6 +22362,7 @@ function createExecutor(config) {
 					const sandboxClient = providerAsSandboxClient(provider, {
 						defaults: {
 							...providerSeam.defaults ?? {},
+							idempotencyKey: providerSeam.defaults?.idempotencyKey ?? seamed.node?.attemptId ?? randomUUID(),
 							signal: seamed.signal
 						},
 						requireTerminalEvent: providerSeam.requireTerminalEvent,
@@ -22321,10 +22399,10 @@ function createExecutor(config) {
 							}
 						}
 					};
-					const executor = sandboxExecutor({
+					const executor = sandboxExecutorForPath({
 						...spec,
 						harness
-					}, providerCtx);
+					}, providerCtx, "provider");
 					const wrapper = inheritRuntimeOwnedExecutorAttestation(executor, {
 						...executor,
 						runtime: providerSeam.runtime ?? provider.name
@@ -26592,6 +26670,77 @@ function checkedSeatSelection(stage, selected) {
 	return selected;
 }
 //#endregion
+//#region src/runtime/supervise/worker-events.ts
+const MAX_EVENTS = 256;
+const MAX_BYTES = 262144;
+/** One worker's already-redacted live output. Accounting stays on Scope's existing usage channel. */
+var WorkerEvents = class {
+	#epoch = randomUUID();
+	#entries = [];
+	#next = 0;
+	#capturing = false;
+	start() {
+		this.#capturing = true;
+	}
+	#bytes = 0;
+	append(event, at) {
+		let entry = {
+			sequence: this.#next++,
+			at,
+			event: defaultRedactor(event)
+		};
+		let bytes;
+		try {
+			bytes = Buffer.byteLength(JSON.stringify(entry));
+		} catch {
+			entry = {
+				sequence: entry.sequence,
+				at,
+				event: null,
+				omitted: "event-not-serializable"
+			};
+			bytes = Buffer.byteLength(JSON.stringify(entry));
+		}
+		if (bytes > MAX_BYTES) {
+			entry = {
+				sequence: entry.sequence,
+				at,
+				event: null,
+				omitted: "event-too-large"
+			};
+			bytes = Buffer.byteLength(JSON.stringify(entry));
+		}
+		this.#entries.push({
+			entry,
+			bytes
+		});
+		this.#bytes += bytes;
+		while (this.#entries.length > MAX_EVENTS || this.#bytes > MAX_BYTES) this.#bytes -= this.#entries.shift().bytes;
+	}
+	read(cursor) {
+		if (!this.#capturing) return {
+			status: "unavailable",
+			reason: "not-captured"
+		};
+		if (cursor && (!Number.isSafeInteger(cursor.next) || cursor.next < 0)) throw new Error("worker event cursor must name a non-negative safe integer");
+		const reset = cursor !== void 0 && cursor.epoch !== this.#epoch;
+		const first = this.#entries[0]?.entry.sequence ?? this.#next;
+		const start = reset ? first : cursor?.next ?? first;
+		if (!reset && start > this.#next) throw new Error("worker event cursor is ahead of this stream");
+		return {
+			status: "available",
+			entries: this.#entries.filter(({ entry }) => entry.sequence >= start).map(({ entry }) => structuredClone(entry)),
+			cursor: {
+				epoch: this.#epoch,
+				next: this.#next
+			},
+			reset,
+			historyExpired: start < first || cursor === void 0 && first > 0,
+			remaining: 0
+		};
+	}
+};
+//#endregion
 //#region src/runtime/supervise/scope.ts
 /**
 *
@@ -27309,6 +27458,7 @@ function createScope(args) {
 				live.teardownAttempts += 1;
 			});
 			const live = {
+				events: new WorkerEvents(),
 				id,
 				status: permit.granted ? "acquiring" : "queued",
 				runtime: executor.runtime,
@@ -27756,6 +27906,37 @@ function createScope(args) {
 		nextResolved,
 		send,
 		progress,
+		observeTree: () => {
+			const view = makeTreeView(args.parentId, children);
+			const nodes = new Map((args.resumeFrom?.view.nodes ?? []).map((node) => [node.id, node]));
+			for (const node of view.nodes) nodes.set(node.id, node);
+			for (const child of children.values()) {
+				const nested = child.readNestedScope?.();
+				if (nested) for (const node of (nested.observeTree?.() ?? nested.view).nodes) nodes.set(node.id, node);
+			}
+			const all = [...nodes.values()];
+			return {
+				root: view.root,
+				nodes: all,
+				inFlight: all.filter((node) => [
+					"queued",
+					"acquiring",
+					"running"
+				].includes(node.status)).length
+			};
+		},
+		observeEvents: (nodeId, cursor) => {
+			const child = children.get(nodeId);
+			if (child) return child.events.read(cursor);
+			for (const candidate of children.values()) {
+				const page = (candidate.readNestedScope?.())?.observeEvents?.(nodeId, cursor);
+				if (page && (page.status === "available" || page.reason !== "unknown-worker")) return page;
+			}
+			return {
+				status: "unavailable",
+				reason: args.resumeFrom?.view.nodes.some((node) => node.id === nodeId) ? "not-captured" : "unknown-worker"
+			};
+		},
 		traceSource,
 		interactive,
 		cancel,
@@ -28611,6 +28792,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		const ran = recovering ? executor.recover(task, childAbort.signal) : executor.execute(task, childAbort.signal);
 		let artifact;
 		if (isAsyncIterable(ran)) {
+			live.events.start();
 			const spend = await foldStream(ran, async (running) => {
 				live.spent = running;
 				live.lastActivityAt = now();
@@ -28621,7 +28803,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 					seq: nextProgressSeq(),
 					at: new Date(now()).toISOString()
 				});
-			}, childAbort.signal, priorSpent);
+			}, childAbort.signal, priorSpent, (event) => live.events.append(event, now()));
 			live.spent = spend;
 			const reported = executor.resultArtifact();
 			artifact = await retainOutput(reported, preserveUnknownTelemetry(spend, reported.spent));
@@ -28985,7 +29167,7 @@ function freezeCorrelation(value) {
 * turns deep from one that had produced nothing. It also means a worker that THROWS mid-stream
 * now reconciles its real partial spend instead of refunding work the provider already billed.
 */
-async function foldStream(stream, onProgress, signal, priorSpent) {
+async function foldStream(stream, onProgress, signal, priorSpent, onEvent) {
 	const totals = newUsageTotals(priorSpent);
 	const iterator = stream[Symbol.asyncIterator]();
 	try {
@@ -28993,6 +29175,7 @@ async function foldStream(stream, onProgress, signal, priorSpent) {
 			const next = signal ? await awaitAbortable(Promise.resolve(iterator.next()), signal) : await iterator.next();
 			if (next.done) break;
 			const ev = next.value;
+			if (ev.kind === "progress") onEvent?.(ev.progress);
 			meterUsageEvent(totals, ev);
 			await onProgress?.({
 				...addResourceSpend(totals.resources),
@@ -29712,6 +29895,7 @@ function upstreamUnavailableSignal(error) {
 	const admission = retainedAdmissionCause(error);
 	if (admission !== void 0) return upstreamUnavailableSignal(admission);
 	if (!(error instanceof Error)) return void 0;
+	if (isCredentialRefusal(error)) return void 0;
 	if (isProviderSchemaRejection(error)) return void 0;
 	if (error instanceof CheckUnavailableError) return "check-unavailable";
 	if (error instanceof HarnessTurnFailedError) {
@@ -29776,6 +29960,7 @@ function classifyDriverFailure(error, signal) {
 	if (admission !== void 0) return classifyDriverFailure(admission, signal);
 	if (error instanceof Error && errorProperty(error, "name") === "AbortError") return "terminal";
 	if (error instanceof Error && isProviderSchemaRejection(error)) return "terminal";
+	if (isCredentialRefusal(error)) return "terminal";
 	if (error instanceof HarnessTurnFailedError) {
 		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
 		if (isUpstreamUnavailable(error)) return "unavailable";
@@ -29817,7 +30002,7 @@ function retainedAdmissionCause(error) {
 			if (errorProperty(value, "name") === "RetainedRunProviderContractError") return void 0;
 			const status = errorHttpStatus(value);
 			if (status !== void 0 && status >= 400) return error.pendingCause === "request-rejected" || UNAVAILABLE_STATUSES.has(status) ? value : void 0;
-			if (error.pendingCause === "request-rejected" && (value instanceof AgentEvalError$1 || isProviderSchemaRejection(value) || isDispatchNotAdmitted(value) || capacityCode(value) !== void 0)) return value;
+			if (error.pendingCause === "request-rejected" && (value instanceof AgentEvalError$1 || isProviderSchemaRejection(value) || isDispatchNotAdmitted(value) || isCredentialRefusal(value) || capacityCode(value) !== void 0)) return value;
 			const members = Reflect.get(value, "errors");
 			if (Array.isArray(members)) queue.push(...members.slice(0, 12 - steps));
 			queue.push(value.cause);
@@ -31351,4 +31536,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { environmentReader as $, runtimeOwnedExecutorProviderEvidence as $i, captureWorkerTraceEvidence as $n, flatOtelSpan as $r, PEER_MAIL_WIRE_KEY as $t, scopeOwnerExecutorNodeContext as A, promptControlProfileMaterialization as Ai, resolveAgentEnvironmentProvider as An, persistHarnessTranscript as Ar, captureReusableExecutorConfig as At, consumeScopeRetainedOwnerResult as B, attestRuntimeOwnedPendingExecutor as Bi, FileResultBlobStore as Bn, ROUTER_PRICE_SOURCE as Br, createInPlaceCliExecutor as Bt, deriveNodeExecutionIdentity as C, abortError$1 as Ca, AGENT_PROFILE_MATERIALIZATION_AXES as Ci, readPromptOptions as Cn, openSlotGroup as Cr, createContinuationKeeper as Ct, recordScopeOwnerMaterialization as D, providerMessageText as Da, defineProfileMaterializationContract as Di, createAgentEnvironmentProviderRegistry as Dn, runAbortable as Dr, passedItems as Dt, recordScopeOwnerDriverAttempt as E, promptOptionsFromAgentTurnInput as Ea, controlProfileMaterialization as Ei, LEAF_CONTINUATION_TASK as En, linkAbort as Er, failedItems as Et, seatExecutionProfile as F, renderUnsupported as Fi, retainedExecutorSeamKey as Fn, createCodeModeTools as Fr, snapshotExecutorConfig as Ft, scopeRetainedOwnerContext as G, knownExecutionBindingReceipt as Gi, loadSpawnForest as Gn, defaultRedactor as Gr, workerTraceSeamKey as Gt, prepareScopeRetainedOwnerSeatSwitch as H, authoredProfileDigest as Hi, InMemoryResultBlobStore as Hn, mergeTraceEnv as Hr, readWorkerTraceContext as Ht, abandonScopeRetainedOwnerInvocation as I, sandboxActProfileMaterialization as Ii, unavailablePauseMs as In, describeCodeModeTools as Ir, createWorktreeCliExecutor as It, scopeRetainedOwnerResourceReader as J, providerAttemptEvidence as Ji, isNoEntError as Jn, buildLoopOtelSpans as Jr, createActivityLog as Jt, scopeRetainedOwnerJournalRoot as K, knownMaterializationReceipt as Ki, materializeTreeView as Kn, defaultRedactorIdentityMaterial as Kr, taskToPrompt as Kt, beginScopeRetainedOwnerDrive as L, unsupportedProfileDimensions as Li, unavailableSignalOfFailure as Ln, runCodeMode as Lr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Lt, SeatChain as M, promptOnlyProfileMaterialization as Mi, decodeToolPart as Mn, resolveHarnessTranscriptCapture as Mr, cliWorktreeExecutor as Mt, SeatChainExhaustedError as N, promptResourceProfileMaterialization as Ni, sandboxSessionTraceSource as Nn, retainHarnessTranscript as Nr, createExecutor as Nt, recordScopeOwnerPause as O, fullProfileMaterialization as Oi, providerAsExecutor as On, captureHarnessTranscript as Or, verdictFromJudgeScore as Ot, authoredSeatStages as P, renderProfileMaterializationIssues as Pi, registerRetainedExecutorPreparation as Pn, contentAddress as Pr, createExecutorRegistry as Pt, SPAWN_RESOURCE_PATH_MAX_BYTES as Q, runtimeOwnedExecutorMaterialization as Qi, WORKER_TOOL_TRACE_SCHEMA_VERSION as Qn, createOtelExporter as Qr, DEFAULT_PEER_MAIL_LIMITS as Qt, bindScopeRetainedOwnerEnvironmentId as R, validateProfileMaterialization as Ri, TRACE_ROOT_SCHEMA as Rn, priceTokens as Rr, createSteerableSandboxSession as Rt, createScope as S, decodeHarnessUsage as Sa, terminateProcessTreeAndConfirm as Si, assertBoxlessPromptOptions as Sn, createWorkerSlots as Sr, checkVerdictOf as St, meterRuntimeOwnedProviderAttempt as T, promptFromAgentTurnInput as Ta, assertProfileMaterializes as Ti, runBrainLoop as Tn, abortError as Tr, expandQuestions as Tt, prepareScopeRetainedOwnerTask as U, finalizeRuntimeOwnedPendingExecutor as Ui, InMemorySpawnJournal as Un, readTraceContextFromEnv as Ur, workerTraceEnv as Ut, noteScopeRetainedOwnerCoordination as V, attestRuntimeOwnedScopeOwner as Vi, FileSpawnJournal as Vn, createPropagatingTraceEmitter as Vr, WORKER_TRACE_PROPAGATION as Vt, reconcileScopeRetainedOwnerEnvironment as W, inheritRuntimeOwnedExecutorAttestation as Wi, insideCursorNamespace as Wn, traceContextToEnv as Wr, workerTraceHeaders as Wt, scopeRetainedOwnerResult as X, runtimeOwnedDriveHarnessProviderEvidence as Xi, readCommittedJsonLines as Xn, buildRuntimeEventOtelSpans as Xr, createInbox as Xt, scopeRetainedOwnerRestorePoint as Y, recordRuntimeOwnedDriveHarnessProviderEvidence as Yi, prepareJsonlAppend as Yn, buildLoopSpanNodes as Yr, readWorkerProgress as Yt, scopeRetainedOwnerTurnEnded as Z, runtimeOwnedExecutorExecutionBinding as Zi, writeAllBytes as Zn, createOpenInferenceFileExporter as Zr, AUTHORITY_MARKERS as Zt, isDriverSpec as _, mapSandboxToolEvent as _a, harnessInvocation as _i, runAgentRounds as _n, startRetainedRun as _r, CONTINUATION_FACTS as _t, collectDelivered as a, executableAgentSpecSnapshot as aa, createRuntimeEventCollector as ai, isLiveNodeStatus as an, ReservationWaitRefused as ar, interactiveAdmissionSeamKey as at, assertRecursiveReservationPolicy as b, sandboxProgressEvents as ba, parseCodexTokenUsage as bi, SandboxEvidenceRetentionError as bn, destroyInteractiveEnvironment as br, admitFinding as bt, runTree as c, projectSandboxOutcome as ca, sanitizeKnowledgeReadinessReport as ci, bridgeModelRouteRefusal as cn, meterUsageEvent as cr, reconnectRetainedInteractiveRun as ct, classifyDriverFailure as d, canonicalStreamEventFromSandboxEvent as da, runWorktreeHarness as di, harnessUsageIsEmpty as dn, spendFromUsageTotals as dr, freeSlots as dt, runtimeOwnedPendingExecutorMaterialization as ea, generateSpanId as ei, claimsAuthority as en, isTraceAnalysisStore as er, hostDirectoryReader as et, runDriverWithRetry as f, createSandboxToolPartState as fa, captureWorktreeDiff as fi, readCodexRolloutSession as fn, bridgeRuntimeAttachmentsKey as fr, queueOf as ft, driverExecutorFactory as g, mapSandboxEvent as ga, LOCAL_HARNESSES as gi, isTerminalDecision as gn, recoverRetainedRun as gr, CONTINUATIONS_DIR as gt, driverChild as h, isSandboxTerminalEvent as ha, DEFAULT_LOCAL_HARNESS as hi, defaultSelectWinner as hn, reconnectRetainedRun as hr, mapExecutorResult as ht, bestDelivered as i, executableAgentProfileSnapshot as ia, toOtelAttributes as ii, peerMailVerbNames as in, BudgetReconcileFault as ir, providerVisibleProfile as it, settledToIteration as j, promptModelProfileMaterialization as ji, createPushTraceSource as jn, readHarnessTranscript as jr, cliInPlaceExecutor as jt, restoreScopeOwnerAcceptedExecution as k, profileMaterializationAxes$1 as ki, providerAsSandboxClient as kn, harnessTranscriptArtifact as kr, bindReusableExecutorExecutionId as kt, DriverAttemptsExhaustedError as l, readSandboxOutcome as la, sanitizeRuntimeStreamEvent as li, addHarnessUsage as ln, newUsageTotals as lr, recoverRetainedInteractiveRun as lt, upstreamUnavailableSignal as m, extractLlmCallEvent as ma, removeWorktree as mi, createSandboxForSpec as mn, errMessage as mr, gateOnDeliverable as mt, createRootHandle as n, unknownExecutionBindingReceipt as na, padSpanId as ni, isPeerMailEnvelope as nn, workerTraceAnalysisStore as nr, coordinationMcpAlias as nt, pickBestDelivered as o, detachedFrozen as oa, createRuntimeStreamEventCollector as oi, isTerminalNodeStatus as on, assertValidBudget as or, attachWorker as ot, summarizeDriverAttempts as p, createSandboxUsageLedger as pa, createWorktree as pi, TERMINAL_DECISIONS as pn, bridgeStopSignalKey as pr, rollingDispatch as pt, scopeRetainedOwnerPriorSpend as q, newExecutionAttemptId as qi, replaySpawnTree as qn, resolveRedactor as qr, DEFAULT_STALL_AFTER_MS as qt, createSupervisor as r, unknownMaterializationReceipt as ra, padTraceId as ri, peerMailTools as rn, executorFailure as rr, coordinationProfileToolPrefix as rt, runFinalizer as s, detachedSnapshot as sa, sanitizeAgentRuntimeEvent as si, bridgeAdmissionRefusal as sn, createBudgetPool as sr, readWorkerInteractiveBinding as st, DEFAULT_MAX_DEPTH as t, runtimeOwnedScopeOwnerRuntime as ta, loopEventToOtelSpan as ti, createPeerMailbox as tn, parseWorkerToolTraceArtifact as tr, resolveSpawnResourcePaths as tt, HarnessTurnFailedError as u, assertSandboxServedModel as ua, runSettledCommand as ui, createCodexRolloutStoreReader as un, spendFromUsageEvents as ur, startRetainedInteractiveRun as ut, withDriverExecutor as v, notifySandboxEventObserver as va, harnessSupportsReasoningEffort as vi, createSandboxLineage as vn, startRetainedRunInEnvironment as vr, CheckUnavailableError as vt, meterRuntimeOwnedAccounting as w, awaitAbortable$1 as wa, assertProfileMaterialization as wi, routerBrain as wn, RunCancellationReason as wr, distillFindings as wt, beginScopeOwnerAttempt as x, sumSandboxUsage as xa, CodexExecutionDiagnosticError as xi, captureBeforeDestroy as xn, environmentGone as xr, bestComposite as xt, SUBTREE_RESULT_LIMIT as y, sandboxEventServedBackend as ya, localHarnessExecutable as yi, acquireSandbox as yn, retainedCreateMaterial as yr, admitContinuationPolicy as yt, bindScopeRetainedOwnerProvider as z, worktreeCliProfileMaterialization as zi, TRACE_SUMMARY_SCHEMA as zn, routerTokenPrice as zr, createRouterTranscript as zt };
 
-//# sourceMappingURL=supervisor-bkq2b8k-.js.map
+//# sourceMappingURL=supervisor-BMMdI4T-.js.map