@tangle-network/agent-runtime 0.325.2 → 0.325.5

package/dist/{supervise-Dt_bZSVY.js → supervise-ttbcgYgS.js}

@@ -1,11 +1,11 @@
 import { n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
-import { $n as readHarnessTranscript, $r as renderUnsupported, A as scopeOwnerExecutorNodeContext, At as bindReusableExecutorExecutionId, B as consumeScopeRetainedOwnerResult, Bt as createRouterTranscript, C as deriveNodeExecutionIdentity, Ct as checkVerdictOf, D as recordScopeOwnerMaterialization, E as recordScopeOwnerDriverAttempt, F as seatExecutionProfile, Fn as bridgeRuntimeAttachmentsKey, G as scopeRetainedOwnerContext, Gr as defineProfileMaterializationContract, H as prepareScopeRetainedOwnerSeatSwitch, Hr as assertProfileMaterialization, Ht as WORKER_TRACE_PROPAGATION, I as abandonScopeRetainedOwnerInvocation, In as bridgeStopSignalKey, It as snapshotExecutorConfig, J as scopeRetainedOwnerResourceReader, Jn as linkAbort, Jr as promptControlProfileMaterialization, K as scopeRetainedOwnerJournalRoot, Kn as RunCancellationReason, Kr as fullProfileMaterialization, L as beginScopeRetainedOwnerDrive, M as SeatChain, Mi as registerRetainedExecutorPreparation, N as SeatChainExhaustedError, Ni as retainedExecutorSeamKey, O as recordScopeOwnerPause, P as authoredSeatStages, Pt as createExecutor, Qn as persistHarnessTranscript, R as bindScopeRetainedOwnerEnvironmentId, Sa as spendFromUsageTotals, Sr as toOtelAttributes, St as bestComposite, T as meterRuntimeOwnedProviderAttempt, Tn as routerBrain, U as prepareScopeRetainedOwnerTask, V as noteScopeRetainedOwnerCoordination, W as reconcileScopeRetainedOwnerEnvironment, Wr as controlProfileMaterialization, X as scopeRetainedOwnerResult, Y as scopeRetainedOwnerRestorePoint, Yn as runAbortable, Yr as promptModelProfileMaterialization, Yt as createActivityLog, Z as scopeRetainedOwnerTurnEnded, Zt as createInbox, _ as isDriverSpec, _a as assertValidBudget, _i as runtimeOwnedExecutorExecutionBinding, _t as CONTINUATIONS_DIR, at as runtimeGraphMetadataKey, b as assertRecursiveReservationPolicy, ba as newUsageTotals, bi as runtimeOwnedPendingExecutorMaterialization, bt as admitContinuationPolicy, c as runTree, ca as parseWorkerToolTraceArtifact, cn as bridgeAdmissionRefusal, en as PEER_MAIL_WIRE_KEY, f as runDriverWithRetry, fa as detachedSnapshot, g as driverExecutorFactory, gi as runtimeOwnedDriveHarnessProviderEvidence, gr as createOtelExporter, h as driverChild, hi as recordRuntimeOwnedDriveHarnessProviderEvidence, ht as gateOnDeliverable, i as bestDelivered, ii as worktreeCliProfileMaterialization, it as providerVisibleProfile, jn as resolveAgentEnvironmentProvider, jt as captureReusableExecutorConfig, k as restoreScopeOwnerAcceptedExecution, ln as bridgeModelRouteRefusal, ma as errMessage, mi as providerAttemptEvidence, n as createRootHandle, ni as unsupportedProfileDimensions, nt as coordinationMcpAlias, oi as attestRuntimeOwnedScopeOwner, on as isLiveNodeStatus, p as summarizeDriverAttempts, pa as executorFailure, q as scopeRetainedOwnerPriorSpend, qr as profileMaterializationAxes$1, r as createSupervisor, rn as isPeerMailEnvelope, rt as coordinationProfileToolPrefix, s as runFinalizer, si as authoredAgentIdentity, ti as sandboxProfileMaterialization, u as HarnessTurnFailedError, ua as contentAddress, ui as inheritRuntimeOwnedExecutorAttestation, vi as runtimeOwnedExecutorMaterialization, vr as generateSpanId, w as meterRuntimeOwnedAccounting, wt as createContinuationKeeper, x as beginScopeOwnerAttempt, xi as runtimeOwnedScopeOwnerRuntime, ya as meterUsageEvent, yi as runtimeOwnedExecutorProviderEvidence, yt as CheckUnavailableError, z as bindScopeRetainedOwnerProvider } from "./supervisor-CESg1FQx.js";
+import { $n as readHarnessTranscript, $r as renderUnsupported, A as scopeOwnerExecutorNodeContext, At as bindReusableExecutorExecutionId, B as consumeScopeRetainedOwnerResult, Bt as createRouterTranscript, C as deriveNodeExecutionIdentity, Ct as checkVerdictOf, D as recordScopeOwnerMaterialization, E as recordScopeOwnerDriverAttempt, F as seatExecutionProfile, Fn as bridgeRuntimeAttachmentsKey, G as scopeRetainedOwnerContext, Gr as defineProfileMaterializationContract, H as prepareScopeRetainedOwnerSeatSwitch, Hr as assertProfileMaterialization, Ht as WORKER_TRACE_PROPAGATION, I as abandonScopeRetainedOwnerInvocation, In as bridgeStopSignalKey, It as snapshotExecutorConfig, J as scopeRetainedOwnerResourceReader, Jn as linkAbort, Jr as promptControlProfileMaterialization, K as scopeRetainedOwnerJournalRoot, Kn as RunCancellationReason, Kr as fullProfileMaterialization, L as beginScopeRetainedOwnerDrive, M as SeatChain, Mi as registerRetainedExecutorPreparation, N as SeatChainExhaustedError, Ni as retainedExecutorSeamKey, O as recordScopeOwnerPause, P as authoredSeatStages, Pt as createExecutor, Qn as persistHarnessTranscript, R as bindScopeRetainedOwnerEnvironmentId, Sa as spendFromUsageTotals, Sr as toOtelAttributes, St as bestComposite, T as meterRuntimeOwnedProviderAttempt, Tn as routerBrain, U as prepareScopeRetainedOwnerTask, V as noteScopeRetainedOwnerCoordination, W as reconcileScopeRetainedOwnerEnvironment, Wr as controlProfileMaterialization, X as scopeRetainedOwnerResult, Y as scopeRetainedOwnerRestorePoint, Yn as runAbortable, Yr as promptModelProfileMaterialization, Yt as createActivityLog, Z as scopeRetainedOwnerTurnEnded, Zt as createInbox, _ as isDriverSpec, _a as assertValidBudget, _i as runtimeOwnedExecutorExecutionBinding, _t as CONTINUATIONS_DIR, at as runtimeGraphMetadataKey, b as assertRecursiveReservationPolicy, ba as newUsageTotals, bi as runtimeOwnedPendingExecutorMaterialization, bt as admitContinuationPolicy, c as runTree, ca as parseWorkerToolTraceArtifact, cn as bridgeAdmissionRefusal, en as PEER_MAIL_WIRE_KEY, f as runDriverWithRetry, fa as detachedSnapshot, g as driverExecutorFactory, gi as runtimeOwnedDriveHarnessProviderEvidence, gr as createOtelExporter, h as driverChild, hi as recordRuntimeOwnedDriveHarnessProviderEvidence, ht as gateOnDeliverable, i as bestDelivered, ii as worktreeCliProfileMaterialization, it as providerVisibleProfile, jn as resolveAgentEnvironmentProvider, jt as captureReusableExecutorConfig, k as restoreScopeOwnerAcceptedExecution, ln as bridgeModelRouteRefusal, ma as errMessage, mi as providerAttemptEvidence, n as createRootHandle, ni as unsupportedProfileDimensions, nt as coordinationMcpAlias, oi as attestRuntimeOwnedScopeOwner, on as isLiveNodeStatus, p as summarizeDriverAttempts, pa as executorFailure, q as scopeRetainedOwnerPriorSpend, qr as profileMaterializationAxes$1, r as createSupervisor, rn as isPeerMailEnvelope, rt as coordinationProfileToolPrefix, s as runFinalizer, si as authoredAgentIdentity, ti as sandboxProfileMaterialization, u as HarnessTurnFailedError, ua as contentAddress, ui as inheritRuntimeOwnedExecutorAttestation, vi as runtimeOwnedExecutorMaterialization, vr as generateSpanId, w as meterRuntimeOwnedAccounting, wt as createContinuationKeeper, x as beginScopeOwnerAttempt, xi as runtimeOwnedScopeOwnerRuntime, ya as meterUsageEvent, yi as runtimeOwnedExecutorProviderEvidence, yt as CheckUnavailableError, z as bindScopeRetainedOwnerProvider } from "./supervisor-Crul0LFI.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { $ as isAsyncIterable$1, Ot as teardownExecutor, U as addSpend, Y as errorMessage, at as sleep, dt as zeroSpend, gt as withBudgetResources, ht as resourceTelemetry, kt as teardownSurfaces, lt as unmeteredSpend, pt as addResourceSpend, ut as withTimeout, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-Dq7ujONv.js";
 import { a as readCommittedJsonLines, n as isNoEntError, r as prepareJsonlAppend } from "./jsonl-file-DBv31uPi.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { C as createFileRunContext, F as createCoordinationToolsForManager, N as coordinationVerbNames, O as applyRunCancellation, T as withRunContext, c as refreshedWake, g as progressStop, h as plateau, k as watchRunCancellation, l as resolveWakePolicy, n as createSteerAcknowledger, o as composeWakeInput, p as createProgressTracker, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as createInMemoryRunContext } from "./coordination-driver-Bx7nXmOs.js";
+import { C as createFileRunContext, F as createCoordinationToolsForManager, N as coordinationVerbNames, O as applyRunCancellation, T as withRunContext, c as refreshedWake, g as progressStop, h as plateau, k as watchRunCancellation, l as resolveWakePolicy, n as createSteerAcknowledger, o as composeWakeInput, p as createProgressTracker, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as createInMemoryRunContext } from "./coordination-driver-B2XzW5aV.js";
 import { r as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-Dqer2M4_.js";
 import { c as loadGraph, i as graphRegistry } from "./graph-registry-DAI6KNXB.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-Cu8H7aeh.js";
@@ -4830,7 +4830,6 @@ function recordRunCancellationOutcome(runDir, result, now) {
 		detail: `run settled ${result.kind === "winner" ? "winner" : result.reason} despite the abort request; nothing was terminated`
 	});
 }
-/** A quarter of token and optional dollar capacity per worker; nested managers partition again. */
 /** A per-child budget may not exceed the conserved pool it is reserved from. */
 function assertPerWorkerWithinPool(perWorker, pool) {
 	const over = (child, total, field) => child > total ? `supervise perWorker.${field} (${child}) exceeds budget.${field} (${total})` : null;
@@ -4849,6 +4848,26 @@ function assertPerWorkerWithinPool(perWorker, pool) {
 	].filter((x) => x !== null);
 	if (problems.length > 0) throw new ValidationError(`${problems.join("; ")} — a per-child ceiling cannot exceed the pool it draws from, and accepting it silently leaves the caller believing a knob is in effect when the reservation still clamps the child.`);
 }
+/** A caller's per-child budget must fit the part of the pool children may reserve: the pool less
+*  the owner's kept share per channel (`reservationPolicy.ownerShare`, the floor scope admission
+*  keeps). Larger, and not even one child is ever admitted. Without a kept share, a token or
+*  iteration ceiling equal to the whole pool lets the first child take every unit, so the owner's
+*  next turn is refused as budget-exhausted while the child still holds the rest. */
+function assertPerWorkerAdmittable(perWorker, pool, ownerShare) {
+	const unreservable = (child, total, kept, field) => {
+		if (ownerShare > 0) {
+			const reservable = total - kept;
+			return child > reservable ? `supervise perWorker.${field} (${child}) exceeds the reservable budget.${field} (${reservable}: ${total} less the owner's kept ${kept} at reservationPolicy.ownerShare ${ownerShare})` : null;
+		}
+		return child >= total ? `supervise perWorker.${field} (${child}) equals the whole budget.${field} (${total}), so the first child takes every unit and the owner has none left for its next turn` : null;
+	};
+	const unadmittable = [
+		unreservable(perWorker.maxTokens, pool.maxTokens, Math.ceil(pool.maxTokens * ownerShare), "maxTokens"),
+		unreservable(perWorker.maxIterations, pool.maxIterations, Math.ceil(pool.maxIterations * ownerShare), "maxIterations"),
+		perWorker.maxUsd !== void 0 && pool.maxUsd !== void 0 && ownerShare > 0 ? unreservable(perWorker.maxUsd, pool.maxUsd, pool.maxUsd * ownerShare, "maxUsd") : null
+	].filter((x) => x !== null);
+	if (unadmittable.length > 0) throw new ValidationError(`${unadmittable.join("; ")} — lower perWorker on that channel so a child fits beside the owner's own turns; otherwise children are refused or starve at spawn hours into the run.`);
+}
 /** The slice a child gets when its manager names none: a quarter of the part of the manager's
 *  budget its children may reserve, so four default children fill that part and the manager's
 *  own share stays free for its turns. Each nested manager divides its own slice the same way. */
@@ -4973,6 +4992,17 @@ async function storedGraphTopology(dir, digest) {
 	});
 }
 /**
+* The completion check of a managed node inside a `run_graph` subtask: its submission is accepted
+* and settles it. Under the run's own check, a node's narrower result is refused for as long as
+* the run's is: on 2026-10-17 every node of test-canary-graph-tools-20261017a was refused at
+* submit_result and sent back to the run's commission until the run's deadline, so the graph never
+* settled and its caller was never woken with it.
+*/
+const graphNodeDeliverable = Object.freeze({
+	describe: "the result your task asks for; the graph hands it to the manager that ran the graph, and the run's own check judges that manager's result",
+	check: () => true
+});
+/**
 * What a `run_graph` subtask settles with once its root manager returned and its subtree closed:
 * the root's result and the graph's edge ledger. A delegates cap that refused work while the root
 * delivered nothing ended the graph, not the task, so that fails loud with the cap named, as
@@ -5145,6 +5175,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 	const perWorker = options.perWorker ?? defaultPerWorker(options.budget, ownerShare);
 	assertValidBudget(perWorker, "supervise perWorker");
 	assertPerWorkerWithinPool(perWorker, options.budget);
+	if (options.perWorker !== void 0) assertPerWorkerAdmittable(perWorker, options.budget, ownerShare);
 	const journal = options.journal ?? ctx.journal;
 	const runId = options.runId ?? ctx.runId ?? "supervise";
 	const runNamespace = ctx.namespace ?? supervisionRunNamespace(options.runDir, runId);
@@ -5355,6 +5386,8 @@ function superviseInternal(profile, task, opts, testBrain) {
 				if (subtask !== void 0 && graph !== void 0) throw new ValidationError("supervise: a node of a graph cannot start another graph; add the work as nodes");
 				const ownGraph = subtask === void 0 ? void 0 : graphOverlayFor(subtask);
 				const subtreeGraph = ownGraph ?? graph;
+				const graphNode = subtreeGraph !== void 0 && selectedDeliverable === void 0;
+				const managerDeliverable = graphNode ? graphNodeDeliverable : childDeliverable;
 				const nestedDriveHarness = isExternalSupervisor(authorized) ? driveHarnessForOwner(freezeDetached({
 					runId,
 					runNamespace,
@@ -5437,11 +5470,11 @@ function superviseInternal(profile, task, opts, testBrain) {
 					...options.compaction ? { compaction: options.compaction } : {},
 					...options.driverRetry ? { driverRetry: options.driverRetry } : {},
 					...options.onDriverAttempt ? { onDriverAttempt: options.onDriverAttempt } : {},
-					...childDeliverable && !seatManagedLeaf ? { deliverable: childDeliverable } : {},
-					...childDeliverable && !seatManagedLeaf ? { onAcceptedSubmission: () => {
+					...managerDeliverable && !seatManagedLeaf ? { deliverable: managerDeliverable } : {},
+					...managerDeliverable && !seatManagedLeaf ? { onAcceptedSubmission: () => {
 						acceptedSubmission = true;
 					} } : {},
-					...childDeliverable && !seatManagedLeaf && options.continuation && isExternalSupervisor(authorized) ? {
+					...managerDeliverable && !graphNode && !seatManagedLeaf && options.continuation && isExternalSupervisor(authorized) ? {
 						continuation: options.continuation,
 						...options.runDir === void 0 ? {} : { continuationDir: resolve(options.runDir, CONTINUATIONS_DIR, "managers", encodeURIComponent(ownerId)) }
 					} : {},
@@ -5456,7 +5489,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					},
 					...options.steerDir === void 0 ? {} : { steerDir: resolve(options.steerDir) },
 					...options.runDir === void 0 && options.steerDir === void 0 ? {} : { controlScope: "subtree" }
-				}), journal, childExecution.ref, () => acceptedSubmission, recoveryFactories.get(childFactory), () => unassessedOutput, seatManagedLeaf ? childDeliverable : void 0, ownGraph ? (out) => graphSubtaskOutput(ownGraph, out) : void 0);
+				}), journal, childExecution.ref, () => acceptedSubmission, recoveryFactories.get(childFactory), () => unassessedOutput, seatManagedLeaf ? managerDeliverable : void 0, ownGraph ? (out) => graphSubtaskOutput(ownGraph, out) : void 0);
 			};
 			if (options.makeLeafAgent === void 0 && options.backend?.backend === "provider" && !options.backend.steering) {
 				const factory = registerRetainedExecutorPreparation(createExecutor(options.backend), ({ spawned, profile, task }) => {
@@ -5717,4 +5750,4 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 //#endregion
 export { dumbContinuationPassPrompt as A, defaultEdgeTraversalCap as C, createPromptRegistry as D, analyzesFindingsReportPrompt as E, serveCoordinationMcp as F, kernelPromptRegistry as M, naiveContinuationPrompt as N, delegatesWorkerBriefPrompt as O, promptHandle as P, createGraphOverlay as S, validateGraphTopology as T, readRootStream as _, superviseRootProfile as a, composeReentryTask as b, isPreSpawnExecutorFailure as c, withWorkerSpawnRetry as d, assertCoordinationBinding as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseFleetCapabilities as i, formatPromptHandle as j, dumbContinuationFailPrompt as k, resolveWorkerSpawnRetry as l, supervisorAgent as m, profileGuidanceComposer as n, superviseWithTestBrain as o, resolveSupervisorProfile as p, supervise as r, workerFromBackend as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, retryPreSpawnRefusals as u, readRootStreamReceipt as v, graphRootProfile as w, createSupervisorSpanRecorder as x, UNPROVEN_CONTINUITY as y };
 
-//# sourceMappingURL=supervise-Dt_bZSVY.js.map
+//# sourceMappingURL=supervise-ttbcgYgS.js.map