@tangle-network/agent-runtime 0.333.0 → 0.334.0

package/dist/{supervisor-BfIZXA7e.js → supervisor-BObk9STz.js}

@@ -3654,14 +3654,19 @@ function cappedDoublingMs(consecutive, first, ceiling) {
 	const start = Math.max(0, first);
 	return Math.min(Math.max(start, ceiling), start * 2 ** Math.max(0, consecutive - 1));
 }
+/** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
+const FAR_RESET_PROBE_MS = 60 * 6e4;
 /**
 * When a refusal says its quota resets, as epoch ms, or `undefined` when it names no usable time.
 * The Z.ai Coding Plan's opencode refusal names one in Beijing time with no zone:
 * `Usage limit reached for 5 hour. Your limit will reset at 2026-10-18 15:17:33`. On Discovery run
 * magnetar-rust-20261018b, 219 of 324 driver attempts ended on it between 06:04Z and 22:18Z, and
 * the last refusal came at 22:18Z against `reset at 2026-10-19 06:18:14`, which is 22:18:14Z at
-* +08:00. A time with its own zone is read as written. A time in the past, or more than
-* MAX_RESET_HOLD_MS ahead, is no reset time: the caller keeps its doubling pause.
+* +08:00. A time with its own zone is read as written. A time in the past is no reset time: the
+* caller keeps its doubling pause. A time more than MAX_RESET_HOLD_MS ahead is held for only
+* FAR_RESET_PROBE_MS at a time, so a misread zone cannot hold a seat for a day, yet the spent seat
+* is not asked again every 5 minutes: on magnetar-rust-20261019c a reset beyond 6 h drew about 12
+* attempts an hour against the refusing seat.
 */
 function unavailableResumeAt(text, nowMs) {
 	const match = text.match(/\breset at (\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})(?:\.\d+)?(Z|[+-]\d{2}:?\d{2})?/u);
@@ -3669,8 +3674,8 @@ function unavailableResumeAt(text, nowMs) {
 	const zone = match[3] ?? (/Usage limit reached for \d+ hour/u.test(text) ? "+08:00" : void 0);
 	if (zone === void 0) return void 0;
 	const at = Date.parse(`${match[1]}T${match[2]}${zone.length === 5 ? `${zone.slice(0, 3)}:${zone.slice(3)}` : zone}`);
-	if (!Number.isFinite(at) || at <= nowMs || at - nowMs > 216e5) return void 0;
-	return at;
+	if (!Number.isFinite(at) || at <= nowMs) return void 0;
+	return at - nowMs > 216e5 ? nowMs + FAR_RESET_PROBE_MS : at;
 }
 /**
 * Spread a wait over `[ms / 2, ms]`. Every driver a Platform restart cut off fails within the same
@@ -3743,6 +3748,26 @@ const causeMessages = {
 * Nothing ran for the request.
 */
 const DISPATCH_NOT_ADMITTED_CODE = "DISPATCH_NOT_ADMITTED";
+/**
+* The Sandbox SDK's codes for a box that cannot be provisioned for this profile, sent with HTTP
+* 422 when the failure is deterministic: a profile file mount outside the box's writable roots,
+* refused before any box exists, and a profile-file materialization that would fail the same way
+* again. On Discovery run queens21-h22-capture-root-1-20261019c every child profile mounted
+* `/work/queens21_count.c` on a read-only root filesystem, and 154 attempts across 4 workers were
+* retried as a lost transport. The same codes at another status may be transient and are not
+* read here.
+*/
+const PROVISIONING_REFUSAL_CODES = /* @__PURE__ */ new Set(["PROFILE_FILE_MOUNT_OUTSIDE_ROOTS", "PROFILE_FILES_MATERIALIZE_FAILED"]);
+/** True for an error that is itself a deterministic provisioning refusal (see above). */
+function isProvisioningRefusal(value) {
+	try {
+		const code = readString(value, "code");
+		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
+		return code !== void 0 && status === 422 && PROVISIONING_REFUSAL_CODES.has(code);
+	} catch {
+		return false;
+	}
+}
 /** The contract-error codes that wrap a failed READ rather than name a broken answer. */
 const readFailureCodes = /* @__PURE__ */ new Set(["RETAINED_RESULT_READ_FAILED", "RETAINED_CONTROL_REF_READ_FAILED"]);
 /** Socket-level failures, by the codes Node and undici assign, plus the Sandbox SDK's own. */
@@ -3810,6 +3835,7 @@ function classifyPendingCause(cause, phase, onCredentialRefusal) {
 		}
 		if (name === "ZodError" || Array.isArray(Reflect.get(value, "issues")) || code === "JSON_BOUND_VIOLATION") return at === "admission" ? "request-rejected" : "provider-contract";
 		if (code === "DISPATCH_NOT_ADMITTED") return at === "admission" ? "request-rejected" : "provider-contract";
+		if (isProvisioningRefusal(value)) return "request-rejected";
 		if (isCredentialRefusal(value)) {
 			if (at === "execution") return "unobservable";
 			onCredentialRefusal?.();
@@ -10133,6 +10159,14 @@ function normalizeWorkerSlotBound(value) {
 	if (!Number.isSafeInteger(value)) throw new ValidationError$1(`workerSlots must be a positive safe integer, or 0 or less for no bound, got ${String(value)}`);
 	return value;
 }
+/** At most this many stage entries are kept from a port, each a finite, non-negative number. */
+const MAX_CAPTURE_STAGES = 16;
+function captureStages(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const stages = {};
+	for (const [name, amount] of Object.entries(value).slice(0, MAX_CAPTURE_STAGES)) if (/^[A-Za-z][A-Za-z0-9]{0,63}$/u.test(name) && Number.isFinite(amount) && amount >= 0) stages[name] = amount;
+	return Object.keys(stages).length === 0 ? void 0 : Object.freeze(stages);
+}
 const checkpointSlotKeys = /* @__PURE__ */ new WeakMap();
 function checkpointSlots(port) {
 	let key = checkpointSlotKeys.get(port);
@@ -10323,9 +10357,9 @@ function trackCapture(port, work) {
 * bound, and judges coverage by the sessions alone. `onTiming` receives the queue wait and the
 * capture time of a workspace capture once it settles, whether it succeeded or failed.
 */
-async function captureProviderWorkspaceSnapshot(port, context, scope = "environment", onTiming) {
+async function captureProviderWorkspaceSnapshot(port, context, scope = "environment", onTiming, parent) {
 	assertProviderWorkspaceRetentionPort(port, "provider workspace retention");
-	if (scope === "native" || onTiming === void 0) return await captureWithinSlot(port, context, scope);
+	if (scope === "native" || onTiming === void 0) return await captureWithinSlot(port, context, scope, void 0, parent);
 	return await trackCapture(port, async (ahead) => {
 		const requestedAt = Date.now();
 		let grantedAt;
@@ -10346,7 +10380,8 @@ async function captureProviderWorkspaceSnapshot(port, context, scope = "environm
 			});
 			report({
 				outcome: "captured",
-				archiveBytes: captured.snapshot.archive.byteLength
+				archiveBytes: captured.snapshot.archive.byteLength,
+				...captured.stages === void 0 ? {} : { stages: captured.stages }
 			});
 			return captured;
 		} catch (error) {
@@ -10358,7 +10393,7 @@ async function captureProviderWorkspaceSnapshot(port, context, scope = "environm
 		}
 	});
 }
-async function captureWithinSlot(port, context, scope, onGranted) {
+async function captureWithinSlot(port, context, scope, onGranted, parent) {
 	const native = scope === "native";
 	if (native && port.captureNative === void 0) throw new ValidationError$1("provider workspace retention: the port has no captureNative");
 	const timeoutMs = native ? port.nativeTimeoutMs ?? 12e4 : port.timeoutMs;
@@ -10366,6 +10401,9 @@ async function captureWithinSlot(port, context, scope, onGranted) {
 	if (controlRef !== void 0 && (controlRef.environmentId !== context.environment.id || controlRef.provider !== context.environment.provider || context.providerSessionId != null && controlRef.sessionId !== context.providerSessionId)) throw new Error("provider workspace retention control reference names another environment or session");
 	const controller = new AbortController();
 	const clearDeadline = armDeadlineTimer(timeoutMs, () => controller.abort(/* @__PURE__ */ new Error(`provider workspace retention timed out after ${timeoutMs}ms`)), true);
+	const stopFromParent = () => controller.abort(parent?.reason);
+	if (parent?.aborted) stopFromParent();
+	else parent?.addEventListener("abort", stopFromParent, { once: true });
 	try {
 		return await runAbortable(() => withCaptureSlot(native ? nativeSlots(port) : port, controller.signal, async () => {
 			onGranted?.();
@@ -10425,15 +10463,18 @@ async function captureWithinSlot(port, context, scope, onGranted) {
 					...port.limits === void 0 ? {} : { limits: port.limits }
 				});
 			}
+			const stages = "snapshot" in result ? captureStages(result.stages) : void 0;
 			return {
 				snapshot,
 				provenance,
 				coverageComplete,
+				...stages === void 0 ? {} : { stages },
 				...coverageComplete ? {} : { incompleteReason: `provider workspace retention coverage incomplete: ${coverageGaps.join("; ")}` }
 			};
 		}), controller.signal, `provider workspace retention timed out after ${timeoutMs}ms`);
 	} finally {
 		clearDeadline();
+		parent?.removeEventListener("abort", stopFromParent);
 	}
 }
 /** Reconcile Sidecar attempts to the exact captured session executions. */
@@ -12408,7 +12449,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				executionId: capturedExecutionId,
 				environmentId: next.id
 			}).catch(() => void 0) ?? Promise.resolve();
-			workspaceCapturePromise = Promise.all([nativeInFlight, liveInFlight]).then(() => captureProviderWorkspaceSnapshot(workspaceRetention, captureContext, "environment", reportTiming === void 0 ? void 0 : (measured) => {
+			workspaceCapturePromise = Promise.all([nativeRunningInFlight, liveInFlight]).then(() => captureProviderWorkspaceSnapshot(workspaceRetention, captureContext, "environment", reportTiming === void 0 ? void 0 : (measured) => {
 				timing = measured;
 			})).finally(async () => {
 				await started;
@@ -12462,6 +12503,8 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	};
 	const nativePort = options.workspaceRetention?.captureNative === void 0 ? void 0 : options.workspaceRetention;
 	let nativeInFlight;
+	let nativeRunningInFlight;
+	let nativeRunningStop;
 	let nativeTimer;
 	let nativeEvents = 0;
 	let nativeEventsAtCopy;
@@ -12522,12 +12565,17 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		nativeTimer = void 0;
 		closeNativeMirror?.();
 		closeNativeMirror = void 0;
+		nativeRunningStop?.abort(/* @__PURE__ */ new Error("native session copy stopped: its turn ended"));
+		nativeRunningStop = void 0;
 		await nativeInFlight;
 	};
 	const captureNative = (next, phase, admitted, afterStop = false) => {
 		if (nativePort === void 0 || createProfile.harness === void 0) return Promise.resolve();
 		const harness = createProfile.harness;
+		const stop = phase === "running" ? new AbortController() : void 0;
+		if (stop !== void 0) nativeRunningStop = stop;
 		const tracked = (nativeInFlight ?? Promise.resolve()).then(async () => {
+			stop?.signal.throwIfAborted();
 			const controlRef = workspaceControlRef ?? admitted;
 			const sessionId = providerSessionId ?? admitted?.sessionId ?? null;
 			if (workspaceSnapshot !== void 0 && !nativeHoldsTranscript) return;
@@ -12544,7 +12592,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					nativeSessionId: null,
 					profile: createProfile,
 					phase
-				}, "native");
+				}, "native", void 0, stop?.signal);
 				let captured = await takeCopy();
 				const settleBy = Date.now() + NATIVE_SETTLE_WINDOW_MS;
 				while (afterStop && captured.coverageComplete !== true && (captured.provenance.attempts ?? []).some((attempt) => attempt.outcome === "unknown") && Date.now() < settleBy) {
@@ -12568,14 +12616,18 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				nativeHoldsTranscript = true;
 				nativeEventsAtCopy = eventsAtStart;
 			} catch (error) {
+				if (stop?.signal.aborted) return;
 				noteCaptureFailure(error);
 			} finally {
 				lastNativeCopyMs = Date.now() - copyStartedAt;
 			}
-		}).finally(() => {
+		}).catch(() => void 0).finally(() => {
 			if (nativeInFlight === tracked) nativeInFlight = void 0;
+			if (nativeRunningInFlight === tracked) nativeRunningInFlight = void 0;
+			if (nativeRunningStop === stop) nativeRunningStop = void 0;
 		});
 		nativeInFlight = tracked;
+		if (stop !== void 0) nativeRunningInFlight = tracked;
 		return tracked;
 	};
 	const startNativeMirror = (next) => {
@@ -13142,10 +13194,17 @@ async function* streamProviderExecutor(args) {
 	const ownerTakesCapture = () => args.options.workspaceRetention?.captureNative !== void 0 && args.createProfile.harness !== void 0 && source.retained && args.retention?.preserveEnvironment === true && args.retention.onEndOfTurnWork !== void 0;
 	const handCaptureToOwner = (reported, captureOutcome, publish, beforeCapture) => {
 		args.retention?.onEndOfTurnWork?.((async () => {
+			const finalCopy = (async () => {
+				try {
+					await beforeCapture?.();
+				} catch {}
+			})();
+			let snapshot;
 			try {
-				await beforeCapture?.();
-			} catch {}
-			const snapshot = await args.captureWorkspace(environment, captureOutcome);
+				snapshot = await args.captureWorkspace(environment, captureOutcome);
+			} finally {
+				await finalCopy;
+			}
 			if (publish) args.onPublishedSnapshot(snapshot);
 			if (snapshot === void 0) return;
 			await args.retention?.onEvidence?.({
@@ -19365,7 +19424,10 @@ function checkedSeatSelection(stage, selected) {
 * is being burned. Within that window it consumes neither `maxAttempts` nor the barren streak,
 * exactly like a pause, and only the deadline, the budget, and cancellation bound it. After the
 * window the failure bounds apply again, so a dead-on-arrival driver still stops, in minutes
-* rather than hours. A failure that spent tokens without delivering keeps the bounds above,
+* rather than hours. The exception is a box that was created and then failed its setup (Sandbox's
+* `PartialFailureError`): it meets the same failure on every re-entry, so a second identical
+* attempt with no progress stops with `repeated-failure` (`SAME_PARTIAL_FAILURE_LIMIT`). A failure
+* that spent tokens without delivering keeps the bounds above,
 * because that is the burn the progress rule exists to stop. Measured 2026-10-04 on Discovery run research-nqs-20261003system2: a Platform
 * restart answered `HTTP 502 ... Platform key verification unavailable` from 03:04:34 to 03:09:41Z,
 * and the coordinator's twelve attempts ran out at 03:07:12Z with no token spent, while a sibling
@@ -19395,6 +19457,40 @@ const REPEATED_FAILURE_WINDOW_MS = 5 * 6e4;
 /** Consecutive identical reconciliation failures of one pending invocation that resolve it. */
 const SAME_PENDING_LIMIT = 2;
 /**
+* Consecutive attempts that end in the same Sandbox `PartialFailureError`, with nothing gained
+* between them, that stop the loop. That error is a box that was created and then failed its
+* setup (its profile files would not materialize, it did not become ready). The retained
+* execution is bound durably to the node, so each re-entry meets the same box and the same
+* failure. Discovery run queens21-h22-capture-root-1-20261019c re-entered four such boxes 154
+* times in 37 minutes on `mkdir: cannot create directory '/work': Read-only file system`, one
+* box per root, each inside the transient-outage window that retries a failure which spent
+* nothing. A second identical attempt proves what a third would repeat; a different failure, or
+* any progress, starts the count over.
+*/
+const SAME_PARTIAL_FAILURE_LIMIT = 2;
+/** Longest cause chain read for a `PartialFailureError`; the failing box's error sits one or two wrappers down. */
+const PARTIAL_FAILURE_CAUSE_DEPTH = 6;
+/**
+* True when `error` or one of its causes is Sandbox's `PartialFailureError`. Read by name: the
+* class lives in `@tangle-network/sandbox`, which Runtime does not import, and a failure crosses
+* packages that may each hold their own copy of it, so `instanceof` would miss it.
+*/
+function causedByPartialFailure(error) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	for (let depth = 0; depth <= PARTIAL_FAILURE_CAUSE_DEPTH; depth += 1) {
+		if (!(current instanceof Error) || seen.has(current)) return false;
+		seen.add(current);
+		try {
+			if (errorProperty(current, "name") === "PartialFailureError") return true;
+			current = current.cause;
+		} catch {
+			return false;
+		}
+	}
+	return false;
+}
+/**
 * The pending invocation a failure left, when abandoning it is the resolution: the provider
 * answered and could not resolve the execution (`unobservable`), or a nested manager's recovery
 * could not be rebuilt (`nested-recovery`). A lost transport waits for the provider instead, in
@@ -19522,6 +19618,22 @@ function capacityCode(error) {
 function isUpstreamUnavailable(error) {
 	return upstreamUnavailableSignal(error) !== void 0;
 }
+/** The error and its causes (`cause`, and `errors` members), bounded and cycle-safe. */
+function causeChain(error) {
+	const chain = [];
+	const queue = [error];
+	while (queue.length > 0 && chain.length < 12) {
+		const value = queue.shift();
+		if (typeof value !== "object" || value === null || chain.includes(value)) continue;
+		chain.push(value);
+		try {
+			const errors = Reflect.get(value, "errors");
+			if (Array.isArray(errors)) queue.push(...errors);
+			queue.push(Reflect.get(value, "cause"));
+		} catch {}
+	}
+	return chain;
+}
 /**
 * Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal; an
 * upstream capacity refusal is `unavailable`; anything else foreign is an accident and is
@@ -19539,6 +19651,7 @@ function classifyDriverFailure(error, signal) {
 	if (error instanceof Error && errorProperty(error, "name") === "AbortError") return "terminal";
 	if (error instanceof Error && isProviderSchemaRejection(error)) return "terminal";
 	if (isCredentialRefusal(error)) return "terminal";
+	if (causeChain(error).some(isProvisioningRefusal)) return "terminal";
 	if (error instanceof HarnessTurnFailedError) {
 		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
 		if (isUpstreamUnavailable(error)) return "unavailable";
@@ -19712,6 +19825,7 @@ async function runDriverWithRetry(run) {
 	let consecutivePauses = 0;
 	let samePending;
 	let sameFailure;
+	let samePartial;
 	let abandonments = 0;
 	let pauses = 0;
 	let continuations = 0;
@@ -19846,12 +19960,17 @@ async function runDriverWithRetry(run) {
 				since: failedAt
 			};
 			const repeated = sameFailure !== void 0 && sameFailure.count >= REPEATED_FAILURE_LIMIT && failedAt - sameFailure.since >= REPEATED_FAILURE_WINDOW_MS;
+			samePartial = classification === "transient" && !progressed && pending === void 0 && causedByPartialFailure(error) ? {
+				error: failure,
+				count: samePartial?.error === failure ? samePartial.count + 1 : 1
+			} : void 0;
 			const stop = (() => {
 				if (classification === "terminal") return "terminal-error";
 				if (!retryEnabled) return "retry-disabled";
 				if (run.signal.aborted) return "aborted";
 				const byBudget = budgetStop(run.budget(), failedAt);
 				if (byBudget) return byBudget;
+				if (samePartial !== void 0 && samePartial.count >= SAME_PARTIAL_FAILURE_LIMIT) return "repeated-failure";
 				if (inOutage) return void 0;
 				if (chargedFailures >= maxAttempts) return "max-attempts";
 				if (progressed) return repeated ? "repeated-failure" : void 0;
@@ -19909,6 +20028,7 @@ async function runDriverWithRetry(run) {
 		outageSince = void 0;
 		samePending = void 0;
 		sameFailure = void 0;
+		samePartial = void 0;
 		abandonments = 0;
 		const durationMs = now() - startedAt;
 		const after = run.progress();
@@ -28794,7 +28914,7 @@ function createScope(args) {
 			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? task, opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
 				complete: async () => pendingEvidence?.complete(),
 				fail: async () => pendingEvidence?.fail()
-			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent);
+			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent, startedAt);
 			args.pool.attribute(reservation.ticket, { stage: "executing" });
 			const interactiveBindingCommitted = spawnCommitted.then(async () => {
 				if (args.interactiveBindingDir === void 0) return;
@@ -29839,7 +29959,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 * applied per child). The reservation is reconciled on EVERY path (success, abort, throw)
 * so the conserved pool can never leak a reservation.
 */
-async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent) {
+async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent, startedAt) {
 	if (priorSpent !== void 0) live.spent = detachedSnapshot(priorSpent, "prior committed usage");
 	let reconciled = false;
 	let reconciliationError;
@@ -29916,6 +30036,12 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 				throw error;
 			}
 			live.budgetViolation = pool.reconcile(ticket, spend);
+			const settledAt = now();
+			if (deadlineAtMs !== void 0 && startedAt !== void 0 && settledAt > deadlineAtMs) live.budgetViolation = { overspent: [...live.budgetViolation?.overspent ?? [], {
+				channel: "deadline",
+				reserved: deadlineAtMs - startedAt,
+				spent: settledAt - startedAt
+			}] };
 			return;
 		} catch (error) {
 			if (error instanceof BudgetReconcileFault) live.budgetViolation = error.budgetViolation;
@@ -32024,4 +32150,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { readWorkerInteractiveBinding as $, FileSpawnJournal as $i, persistHarnessTranscript as $n, renderProfileMaterializationIssues as $r, admitContinuationPolicy as $t, bindScopeRetainedOwnerProvider as A, awaitAbortable$1 as Ai, providerAsExecutor as An, runWorktreeHarness as Ar, AUTHORITY_MARKERS as At, scopeRetainedOwnerRestorePoint as B, canonicalStreamEventFromSandboxEvent as Bi, startRetainedRun as Bn, CodexExecutionDiagnosticError as Br, DriverAttemptsExhaustedError as Bt, recordScopeOwnerPause as C, spendFromUsageTotals as Ca, unknownExecutionBindingReceipt as Ci, captureBeforeDestroy as Cn, toOtelAttributes as Cr, workerTraceHeaders as Ct, abandonScopeRetainedOwnerInvocation as D, promptFromAgentTurnInput as Da, projectSandboxOutcome as Di, runBrainLoop as Dn, sanitizeKnowledgeReadinessReport as Dr, createActivityLog as Dt, settledToIteration as E, resolveRedactor as Ea, executableAgentSpecSnapshot as Ei, routerBrain as En, sanitizeAgentRuntimeEvent as Er, DEFAULT_STALL_AFTER_MS as Et, reconcileScopeRetainedOwnerEnvironment as F, unavailablePauseMs as Fi, sandboxSessionTraceSource as Fn, LOCAL_HARNESSES as Fr, isPeerMailEnvelope as Ft, hostDirectoryReader as G, mapSandboxEvent as Gi, createWorkerSlots as Gn, controlProfileMaterialization as Gr, upstreamUnavailableSignal as Gt, scopeRetainedOwnerTurnEnded as H, createSandboxUsageLedger as Hi, retainedCreateMaterial as Hn, AGENT_PROFILE_MATERIALIZATION_AXES as Hr, classifyDriverFailure as Ht, scopeRetainedOwnerContext as I, unavailableSignalOfFailure as Ii, bridgeRuntimeAttachmentsKey as In, harnessInvocation as Ir, peerMailTools as It, coordinationProfileToolPrefix as J, sandboxEventServedBackend as Ji, abortError as Jn, profileMaterializationAxes$1 as Jr, authoredSeatStages as Jt, resolveSpawnResourcePaths as K, mapSandboxToolEvent as Ki, openSlotGroup as Kn, defineProfileMaterializationContract as Kr, SeatChain as Kt, scopeRetainedOwnerJournalRoot as L, TRACE_ROOT_SCHEMA as Li, bridgeStopSignalKey as Ln, harnessSupportsReasoningEffort as Lr, peerMailVerbNames as Lt, noteScopeRetainedOwnerCoordination as M, settlementFailureCause as Mi, resolveAgentEnvironmentProvider as Mn, createWorktree as Mr, PEER_MAIL_WIRE_KEY as Mt, prepareScopeRetainedOwnerSeatSwitch as N, registerRetainedExecutorPreparation as Ni, createPushTraceSource as Nn, removeWorktree as Nr, claimsAuthority as Nt, beginScopeRetainedOwnerDrive as O, promptOptionsFromAgentTurnInput as Oa, readSandboxOutcome as Oi, LEAF_CONTINUATION_TASK as On, sanitizeRuntimeStreamEvent as Or, readWorkerProgress as Ot, prepareScopeRetainedOwnerTask as P, retainedExecutorSeamKey as Pi, decodeToolPart as Pn, DEFAULT_LOCAL_HARNESS as Pr, createPeerMailbox as Pt, attachWorker as Q, FileResultBlobStore as Qi, harnessTranscriptArtifact as Qn, promptResourceProfileMaterialization as Qr, CheckUnavailableError as Qt, scopeRetainedOwnerPriorSpend as R, TRACE_SUMMARY_SCHEMA as Ri, reconnectRetainedRun as Rn, localHarnessExecutable as Rr, isLiveNodeStatus as Rt, recordScopeOwnerMaterialization as S, spendFromUsageEvents as Sa, runtimeOwnedScopeOwnerRuntime as Si, SandboxEvidenceRetentionError as Sn, padTraceId as Sr, workerTraceEnv as St, scopeOwnerExecutorNodeContext as T, defaultRedactorIdentityMaterial as Ta, executableAgentProfileSnapshot as Ti, readPromptOptions as Tn, createRuntimeStreamEventCollector as Tr, taskToPrompt as Tt, SPAWN_RESOURCE_PATH_MAX_BYTES as U, extractLlmCallEvent as Ui, destroyInteractiveEnvironment as Un, assertProfileMaterialization as Ur, runDriverWithRetry as Ut, scopeRetainedOwnerResult as V, createSandboxToolPartState as Vi, startRetainedRunInEnvironment as Vn, terminateProcessTreeAndConfirm as Vr, HarnessTurnFailedError as Vt, environmentReader as W, isSandboxTerminalEvent as Wi, environmentGone as Wn, assertProfileMaterializes as Wr, summarizeDriverAttempts as Wt, runtimeGraphMetadataKey as X, sumSandboxUsage as Xi, runAbortable as Xn, promptModelProfileMaterialization as Xr, CONTINUATIONS_DIR as Xt, providerVisibleProfile as Y, sandboxProgressEvents as Yi, linkAbort as Yn, promptControlProfileMaterialization as Yr, seatExecutionProfile as Yt, interactiveAdmissionSeamKey as Z, decodeHarnessUsage as Zi, captureHarnessTranscript as Zn, promptOnlyProfileMaterialization as Zr, CONTINUATION_FACTS as Zt, deriveNodeExecutionIdentity as _, ReservationWaitRefused as _a, runtimeOwnedDriveHarnessProviderEvidence as _i, defaultSelectWinner as _n, createOtelExporter as _r, createSteerableSandboxSession as _t, collectDelivered as a, replaySpawnTree as aa, worktreeCliProfileMaterialization as ai, expandQuestions as an, runCodeMode as ar, rollingDispatch as at, noteScopeOwnerPlannedExecution as b, meterUsageEvent as ba, runtimeOwnedExecutorProviderEvidence as bi, createSandboxLineage as bn, loopEventToOtelSpan as br, WORKER_TRACE_PROPAGATION as bt, runTree as c, isTraceAnalysisStore as ca, authoredAgentIdentity as ci, verdictFromJudgeScore as cn, ROUTER_PRICE_SOURCE as cr, bindReusableExecutorExecutionId as ct, isDriverSpec as d, contentAddress as da, inheritRuntimeOwnedExecutorAttestation as di, addHarnessUsage as dn, readTraceContextFromEnv as dr, cliWorktreeExecutor as dt, InMemoryResultBlobStore as ea, renderUnsupported as ei, admitFinding as en, readHarnessTranscript as er, reconnectRetainedInteractiveRun as et, withDriverExecutor as f, detachedFrozen as fa, knownExecutionBindingReceipt as fi, createCodexRolloutStoreReader as fn, traceContextToEnv as fr, createExecutor as ft, createScope as g, BudgetReconcileFault as ga, recordRuntimeOwnedDriveHarnessProviderEvidence as gi, createSandboxForSpec as gn, createOpenInferenceFileExporter as gr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as gt, beginScopeOwnerAttempt as h, errMessage as ha, providerAttemptEvidence as hi, TERMINAL_DECISIONS as hn, buildRuntimeEventOtelSpans as hr, createWorktreeCliExecutor as ht, bestDelivered as i, materializeTreeView as ia, validateProfileMaterialization as ii, distillFindings as in, describeCodeModeTools as ir, queueOf as it, consumeScopeRetainedOwnerResult as j, runtimeFailureCause as ji, providerAsSandboxClient as jn, captureWorktreeDiff as jr, DEFAULT_PEER_MAIL_LIMITS as jt, bindScopeRetainedOwnerEnvironmentId as k, providerMessageText as ka, abortError$1 as ki, createAgentEnvironmentProviderRegistry as kn, runSettledCommand as kr, createInbox as kt, driverChild as l, parseWorkerToolTraceArtifact as la, authoredProfileDigest as li, bridgeAdmissionRefusal as ln, createPropagatingTraceEmitter as lr, captureReusableExecutorConfig as lt, assertRecursiveReservationPolicy as m, executorFailure as ma, newExecutionAttemptId as mi, readCodexRolloutSession as mn, buildLoopSpanNodes as mr, snapshotExecutorConfig as mt, createRootHandle as n, insideCursorNamespace as na, sandboxProfileMaterialization as ni, checkVerdictOf as nn, retainHarnessTranscript as nr, startRetainedInteractiveRun as nt, pickBestDelivered as o, WORKER_TOOL_TRACE_SCHEMA_VERSION as oa, attestRuntimeOwnedPendingExecutor as oi, failedItems as on, priceTokens as or, gateOnDeliverable as ot, SUBTREE_RESULT_LIMIT as p, detachedSnapshot as pa, knownMaterializationReceipt as pi, harnessUsageIsEmpty as pn, buildLoopOtelSpans as pr, createExecutorRegistry as pt, coordinationMcpAlias as q, notifySandboxEventObserver as qi, RunCancellationReason as qn, fullProfileMaterialization as qr, SeatChainExhaustedError as qt, createSupervisor as r, loadSpawnForest as ra, unsupportedProfileDimensions as ri, createContinuationKeeper as rn, createCodeModeTools as rr, freeSlots as rt, runFinalizer as s, captureWorkerTraceEvidence as sa, attestRuntimeOwnedScopeOwner as si, passedItems as sn, routerTokenPrice as sr, mapExecutorResult as st, DEFAULT_MAX_DEPTH as t, InMemorySpawnJournal as ta, sandboxActProfileMaterialization as ti, bestComposite as tn, resolveHarnessTranscriptCapture as tr, recoverRetainedInteractiveRun as tt, driverExecutorFactory as u, workerTraceAnalysisStore as ua, finalizeRuntimeOwnedPendingExecutor as ui, bridgeModelRouteRefusal as un, mergeTraceEnv as ur, cliInPlaceExecutor as ut, meterRuntimeOwnedAccounting as v, assertValidBudget as va, runtimeOwnedExecutorExecutionBinding as vi, isTerminalDecision as vn, flatOtelSpan as vr, createRouterTranscript as vt, restoreScopeOwnerAcceptedExecution as w, defaultRedactor as wa, unknownMaterializationReceipt as wi, assertBoxlessPromptOptions as wn, createRuntimeEventCollector as wr, workerTraceSeamKey as wt, recordScopeOwnerDriverAttempt as x, newUsageTotals as xa, runtimeOwnedPendingExecutorMaterialization as xi, acquireSandbox as xn, padSpanId as xr, readWorkerTraceContext as xt, meterRuntimeOwnedProviderAttempt as y, createBudgetPool as ya, runtimeOwnedExecutorMaterialization as yi, runAgentRounds as yn, generateSpanId as yr, createInPlaceCliExecutor as yt, scopeRetainedOwnerResourceReader as z, assertSandboxServedModel as zi, recoverRetainedRun as zn, parseCodexTokenUsage as zr, isTerminalNodeStatus as zt };
 
-//# sourceMappingURL=supervisor-BfIZXA7e.js.map
+//# sourceMappingURL=supervisor-BObk9STz.js.map