@tangle-network/agent-runtime 0.333.1 → 0.335.0

package/dist/{supervise-C8oeQwrk.js → supervise-ISaRiWVe.js}

@@ -1,11 +1,11 @@
 import { n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
-import { $n as persistHarnessTranscript, $t as admitContinuationPolicy, A as bindScopeRetainedOwnerProvider, B as scopeRetainedOwnerRestorePoint, C as recordScopeOwnerPause, Ca as spendFromUsageTotals, Cr as toOtelAttributes, D as abandonScopeRetainedOwnerInvocation, Dt as createActivityLog, En as routerBrain, F as reconcileScopeRetainedOwnerEnvironment, Ft as isPeerMailEnvelope, Gr as controlProfileMaterialization, H as scopeRetainedOwnerTurnEnded, I as scopeRetainedOwnerContext, In as bridgeRuntimeAttachmentsKey, J as coordinationProfileToolPrefix, Jr as profileMaterializationAxes$1, Jt as authoredSeatStages, Kr as defineProfileMaterializationContract, Kt as SeatChain, L as scopeRetainedOwnerJournalRoot, Ln as bridgeStopSignalKey, M as noteScopeRetainedOwnerCoordination, Mn as resolveAgentEnvironmentProvider, Mt as PEER_MAIL_WIRE_KEY, N as prepareScopeRetainedOwnerSeatSwitch, Ni as registerRetainedExecutorPreparation, O as beginScopeRetainedOwnerDrive, P as prepareScopeRetainedOwnerTask, Pi as retainedExecutorSeamKey, Qt as CheckUnavailableError, R as scopeRetainedOwnerPriorSpend, Rt as isLiveNodeStatus, S as recordScopeOwnerMaterialization, Si as runtimeOwnedScopeOwnerRuntime, T as scopeOwnerExecutorNodeContext, Ur as assertProfileMaterialization, Ut as runDriverWithRetry, V as scopeRetainedOwnerResult, Vt as HarnessTurnFailedError, Wt as summarizeDriverAttempts, X as runtimeGraphMetadataKey, Xn as runAbortable, Xr as promptModelProfileMaterialization, Xt as CONTINUATIONS_DIR, Y as providerVisibleProfile, Yn as linkAbort, Yr as promptControlProfileMaterialization, Yt as seatExecutionProfile, _ as deriveNodeExecutionIdentity, _i as runtimeOwnedDriveHarnessProviderEvidence, _r as createOtelExporter, ai as worktreeCliProfileMaterialization, b as noteScopeOwnerPlannedExecution, ba as meterUsageEvent, bi as runtimeOwnedExecutorProviderEvidence, bt as WORKER_TRACE_PROPAGATION, c as runTree, ci as authoredAgentIdentity, ct as bindReusableExecutorExecutionId, d as isDriverSpec, da as contentAddress, di as inheritRuntimeOwnedExecutorAttestation, ei as renderUnsupported, er as readHarnessTranscript, ft as createExecutor, gi as recordRuntimeOwnedDriveHarnessProviderEvidence, h as beginScopeOwnerAttempt, ha as errMessage, hi as providerAttemptEvidence, i as bestDelivered, j as consumeScopeRetainedOwnerResult, k as bindScopeRetainedOwnerEnvironmentId, kt as createInbox, l as driverChild, la as parseWorkerToolTraceArtifact, ln as bridgeAdmissionRefusal, lt as captureReusableExecutorConfig, m as assertRecursiveReservationPolicy, ma as executorFailure, mt as snapshotExecutorConfig, n as createRootHandle, ni as sandboxProfileMaterialization, nn as checkVerdictOf, ot as gateOnDeliverable, pa as detachedSnapshot, q as coordinationMcpAlias, qn as RunCancellationReason, qr as fullProfileMaterialization, qt as SeatChainExhaustedError, r as createSupervisor, ri as unsupportedProfileDimensions, rn as createContinuationKeeper, s as runFinalizer, si as attestRuntimeOwnedScopeOwner, tn as bestComposite, u as driverExecutorFactory, un as bridgeModelRouteRefusal, v as meterRuntimeOwnedAccounting, va as assertValidBudget, vi as runtimeOwnedExecutorExecutionBinding, vt as createRouterTranscript, w as restoreScopeOwnerAcceptedExecution, x as recordScopeOwnerDriverAttempt, xa as newUsageTotals, xi as runtimeOwnedPendingExecutorMaterialization, y as meterRuntimeOwnedProviderAttempt, yi as runtimeOwnedExecutorMaterialization, yr as generateSpanId, z as scopeRetainedOwnerResourceReader } from "./supervisor-B4sM2Xu2.js";
+import { A as bindScopeRetainedOwnerEnvironmentId, At as createInbox, B as scopeRetainedOwnerResourceReader, C as recordScopeOwnerMaterialization, Ca as newUsageTotals, Ci as runtimeOwnedPendingExecutorMaterialization, E as scopeOwnerExecutorNodeContext, F as prepareScopeRetainedOwnerTask, Fi as registerRetainedExecutorPreparation, Gr as assertProfileMaterialization, Gt as summarizeDriverAttempts, H as scopeRetainedOwnerResult, Ht as HarnessTurnFailedError, I as reconcileScopeRetainedOwnerEnvironment, Ii as retainedExecutorSeamKey, It as isPeerMailEnvelope, J as coordinationMcpAlias, Jr as defineProfileMaterializationContract, Jt as SeatChainExhaustedError, L as scopeRetainedOwnerContext, M as consumeScopeRetainedOwnerResult, N as noteScopeRetainedOwnerCoordination, Nt as PEER_MAIL_WIRE_KEY, O as abandonScopeRetainedOwnerInvocation, On as routerBrain, Ot as createActivityLog, P as prepareScopeRetainedOwnerSeatSwitch, Pn as resolveAgentEnvironmentProvider, Qn as runAbortable, Qr as promptModelProfileMaterialization, Qt as CONTINUATIONS_DIR, R as scopeRetainedOwnerJournalRoot, Rn as bridgeRuntimeAttachmentsKey, S as recordScopeOwnerDriverAttempt, Sa as meterUsageEvent, Si as runtimeOwnedExecutorProviderEvidence, T as restoreScopeOwnerAcceptedExecution, Ta as spendFromUsageTotals, Tr as toOtelAttributes, U as scopeRetainedOwnerTurnEnded, V as scopeRetainedOwnerRestorePoint, Wt as runDriverWithRetry, X as providerVisibleProfile, Xr as profileMaterializationAxes$1, Xt as seatExecutionProfile, Y as coordinationProfileToolPrefix, Yn as RunCancellationReason, Yr as fullProfileMaterialization, Yt as authoredSeatStages, Z as runtimeGraphMetadataKey, Zn as linkAbort, Zr as promptControlProfileMaterialization, _a as errMessage, _i as providerAttemptEvidence, ai as unsupportedProfileDimensions, an as createContinuationKeeper, b as meterRuntimeOwnedProviderAttempt, ba as assertValidBudget, bi as runtimeOwnedExecutorExecutionBinding, c as runTree, d as isDriverSpec, da as parseWorkerToolTraceArtifact, dn as bridgeAdmissionRefusal, en as CheckUnavailableError, fn as bridgeModelRouteRefusal, g as beginScopeOwnerAttempt, ga as executorFailure, h as assertRecursiveReservationPolicy, ha as detachedSnapshot, ht as snapshotExecutorConfig, i as bestDelivered, ii as sandboxProfileMaterialization, in as checkVerdictOf, j as bindScopeRetainedOwnerProvider, k as beginScopeRetainedOwnerDrive, l as driverChild, li as attestRuntimeOwnedScopeOwner, lt as bindReusableExecutorExecutionId, n as createRootHandle, ni as renderUnsupported, nr as readHarnessTranscript, pa as contentAddress, pi as inheritRuntimeOwnedExecutorAttestation, pt as createExecutor, qr as controlProfileMaterialization, qt as SeatChain, r as createSupervisor, rn as bestComposite, s as runFinalizer, si as worktreeCliProfileMaterialization, st as gateOnDeliverable, tn as admitContinuationPolicy, tr as persistHarnessTranscript, u as driverExecutorFactory, ui as authoredAgentIdentity, ut as captureReusableExecutorConfig, v as deriveNodeExecutionIdentity, vi as recordRuntimeOwnedDriveHarnessProviderEvidence, w as recordScopeOwnerPause, wi as runtimeOwnedScopeOwnerRuntime, x as noteScopeOwnerPlannedExecution, xi as runtimeOwnedExecutorMaterialization, xr as generateSpanId, xt as WORKER_TRACE_PROPAGATION, y as meterRuntimeOwnedAccounting, yi as runtimeOwnedDriveHarnessProviderEvidence, yr as createOtelExporter, yt as createRouterTranscript, z as scopeRetainedOwnerPriorSpend, zn as bridgeStopSignalKey, zt as isLiveNodeStatus } from "./supervisor-B-bkXttM.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { $ as isAsyncIterable$1, Ot as teardownExecutor, U as addSpend, Y as errorMessage, at as sleep, dt as zeroSpend, gt as withBudgetResources, ht as resourceTelemetry, kt as teardownSurfaces, lt as unmeteredSpend, pt as addResourceSpend, ut as withTimeout, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-CVgQWb7T.js";
+import { $ as isAsyncIterable$1, Ot as teardownExecutor, U as addSpend, Y as errorMessage, at as sleep, dt as zeroSpend, gt as withBudgetResources, ht as resourceTelemetry, kt as teardownSurfaces, lt as unmeteredSpend, pt as addResourceSpend, ut as withTimeout, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-D_ZOL80S.js";
 import { a as readCommittedJsonLines, n as isNoEntError, r as prepareJsonlAppend } from "./jsonl-file-DBv31uPi.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { C as createFileRunContext, F as createCoordinationToolsForManager, N as coordinationVerbNames, O as applyRunCancellation, T as withRunContext, c as refreshedWake, g as progressStop, h as plateau, k as watchRunCancellation, l as resolveWakePolicy, n as createSteerAcknowledger, o as composeWakeInput, p as createProgressTracker, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as createInMemoryRunContext } from "./coordination-driver-NpDEfkvT.js";
+import { C as createFileRunContext, F as createCoordinationToolsForManager, N as coordinationVerbNames, O as applyRunCancellation, T as withRunContext, c as refreshedWake, g as progressStop, h as plateau, k as watchRunCancellation, l as resolveWakePolicy, n as createSteerAcknowledger, o as composeWakeInput, p as createProgressTracker, r as driverAgent, s as deadlineWarningAt, t as createCancelAcknowledger, w as createInMemoryRunContext } from "./coordination-driver-rNoFHYmZ.js";
 import { r as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-Dqer2M4_.js";
 import { c as loadGraph, i as graphRegistry } from "./graph-registry-DAI6KNXB.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-Cu8H7aeh.js";
@@ -3912,6 +3912,20 @@ const routerSupervisorProfileMaterialization = defineProfileMaterializationContr
 	]
 });
 /**
+* Which of a driver's budget channels are spent, with their numbers, or `undefined` while none is.
+* The bare 'supervisor budget exhausted' named no channel: on queens21-h22-capture-root-2-20261019c
+* workers capped at 42,000 tokens metered 7,324,356 to 13,190,478 in one turn, and nothing said so.
+*/
+function exhaustedBudgetChannels(budget, nowMs) {
+	const spent = [];
+	if (budget.tokensLeft <= 0) spent.push(`tokens: ${-budget.tokensLeft} over the cap`);
+	if (budget.usdCapped && budget.usdLeft <= 0) spent.push(`usd: ${(-budget.usdLeft).toFixed(4)} over the cap`);
+	for (const [name, resource] of Object.entries(budget.resources ?? {})) if (!resource.known) spent.push(`resource ${name}: unmetered`);
+	else if (resource.remaining <= 0) spent.push(`resource ${name}: ${-resource.remaining} ${resource.unit} over the cap`);
+	if (budget.deadlineMs > 0 && nowMs >= budget.deadlineMs) spent.push(`deadline: passed ${Math.round((nowMs - budget.deadlineMs) / 1e3)} s ago`);
+	return spent.length === 0 ? void 0 : spent.join("; ");
+}
+/**
 * The pre-flight `supervise` installs for a bridge backend. No new knob: the backend already says
 * where the bridge is, and these are the questions only the bridge can answer.
 *
@@ -3944,6 +3958,28 @@ function bridgeSpawnPreflight(seam) {
 		};
 	};
 }
+/**
+* The pre-flight for a provider backend: the provider's own `validateProfile`, before any box
+* exists. A profile the provider could never provision is refused here, and the refusal reaches
+* the manager's `spawn_worker` call naming each error's code and path, so the manager fixes the
+* profile instead of losing the worker. On Discovery run queens21-h22-capture-root-1-20261019c the
+* root wrote child profiles that mounted `/work/queens21_count.c` on a read-only root filesystem,
+* and 154 attempts across 4 workers each provisioned a box that could not take the mount.
+*/
+function providerSpawnPreflight(provider) {
+	const validate = provider.validateProfile?.bind(provider);
+	if (validate === void 0) return void 0;
+	return async (profile) => {
+		const result = await validate(profile);
+		const errors = result.issues.filter((issue) => issue.level === "error");
+		if (result.ok && errors.length === 0) return void 0;
+		const named = errors.map((issue) => `${issue.code}${issue.path === void 0 ? "" : ` at ${issue.path}`}: ${issue.message}`);
+		return {
+			cause: "unprovisionable-profile",
+			detail: `provider ${provider.name} cannot provision this profile: ${named.length > 0 ? named.join("; ") : "validation failed without a named error"}`
+		};
+	};
+}
 /** Refuse a Runtime-managed child whose declared tools cannot exist on its execution path. */
 function profileToolSpawnPreflight(runtimeOwnsManager, canResolveProductTools) {
 	return async (profile) => {
@@ -4203,7 +4239,10 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 			return;
 		}
 		const initialBudget = scope.budget;
-		if (!(scope.view.inFlight > 0) && (initialBudget.tokensLeft <= 0 || initialBudget.iterationsLeft <= 0 || initialBudget.usdCapped && initialBudget.usdLeft <= 0 || Object.values(initialBudget.resources ?? {}).some((resource) => !resource.known || resource.remaining <= 0) || initialBudget.deadlineMs > 0 && now() >= initialBudget.deadlineMs)) throw new ValidationError("driveHarnessFromBackend: supervisor budget exhausted");
+		if (!(scope.view.inFlight > 0)) {
+			const spent = [exhaustedBudgetChannels(initialBudget, now()), initialBudget.iterationsLeft <= 0 ? "iterations: none left" : void 0].filter((channel) => channel !== void 0).join("; ");
+			if (spent !== "") throw new ValidationError(`driveHarnessFromBackend: supervisor budget exhausted (${spent})`);
+		}
 		const canonicalDriverProfile = agentProfileSchema.parse(authoredProfile);
 		assertNoReservedCoordinationMcpAlias(canonicalDriverProfile, "driveHarnessFromBackend");
 		const stableCoordinationTools = detachedSnapshot(coordinationTools, "driveHarnessFromBackend coordination tools");
@@ -4220,7 +4259,12 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 			harness: boundBackend.backend === "sandbox" ? providerDriverProfile.harness : null
 		};
 		const turnStop = turnCap > 0 ? new AbortController() : void 0;
-		const effectiveStopSignal = turnStop === void 0 ? stopSignal : stopSignal === void 0 ? turnStop.signal : AbortSignal.any([stopSignal, turnStop.signal]);
+		const budgetStop = new AbortController();
+		const effectiveStopSignal = AbortSignal.any([
+			stopSignal,
+			turnStop?.signal,
+			budgetStop.signal
+		].filter((signal) => signal !== void 0));
 		const peerMailAttachment = peerMailRuntimeAttachment(authoredProfile, boundBackend, { peerMailUrl });
 		const attachment = {
 			transport: "http",
@@ -4372,8 +4416,9 @@ function driveHarnessFromBackend(backend, executionId, now = Date.now, maxTurns,
 			});
 			if (retainedOwner) committedOwnerSpend = addSpend(committedOwnerSpend, charge);
 			if (effectiveStopSignal?.aborted === true) return;
-			const budget = scope.budget;
-			if (budget.tokensLeft <= 0 || budget.usdCapped && budget.usdLeft <= 0 || Object.values(budget.resources ?? {}).some((resource) => !resource.known || resource.remaining <= 0) || budget.deadlineMs > 0 && now() >= budget.deadlineMs) throw new ValidationError("driveHarnessFromBackend: supervisor budget exhausted");
+			const spent = exhaustedBudgetChannels(scope.budget, now());
+			if (spent === void 0) return;
+			budgetStop.abort(`supervise: budget exhausted (${spent})`);
 		};
 		const pending = runtimeOwnedPendingExecutorMaterialization(executor);
 		let failed = false;
@@ -4768,6 +4813,7 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"perWorker",
 	"reservationPolicy",
 	"deadlineCheckIn",
+	"budgetStopHoldMs",
 	"profileGuidance",
 	"profileSecurity",
 	"registry",
@@ -5388,7 +5434,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 	if (options.driveHarness && options.resolveDriveHarness) throw new ValidationError("supervise: provide driveHarness or resolveDriveHarness, not both");
 	const hasCustomDriveHarness = Boolean(options.driveHarness || options.resolveDriveHarness);
 	const spawnResourceRoot = hasCustomDriveHarness ? void 0 : rootSpawnResourceRoot(managerBackend);
-	const spawnPreflight = composeSpawnPreflights(profileToolSpawnPreflight(options.makeWorkerAgent === void 0, options.resolveSupervisorTools !== void 0), coordinationChannelSpawnPreflight(options.makeWorkerAgent === void 0, hasCustomDriveHarness, managerBackend, options.coordination), options.backend?.backend === "bridge" ? bridgeSpawnPreflight(options.backend) : void 0);
+	const spawnPreflight = composeSpawnPreflights(profileToolSpawnPreflight(options.makeWorkerAgent === void 0, options.resolveSupervisorTools !== void 0), coordinationChannelSpawnPreflight(options.makeWorkerAgent === void 0, hasCustomDriveHarness, managerBackend, options.coordination), options.backend?.backend === "bridge" ? bridgeSpawnPreflight(options.backend) : void 0, options.backend?.backend === "provider" && typeof options.backend.provider === "object" ? providerSpawnPreflight(options.backend.provider) : void 0);
 	const driverMaterialization = hasCustomDriveHarness ? options.driveHarnessMaterialization ?? fullProfileMaterialization : managerBackend && automaticDriverBackendSupported(managerBackend, options.coordination) ? backendProfileMaterialization(managerBackend) : void 0;
 	if (isExternalSupervisor(canonicalProfile) && !options.driveHarness && !options.resolveDriveHarness && (!managerBackend || !automaticDriverBackendSupported(managerBackend, options.coordination))) throw new ValidationError(`supervise: external supervisor profile.harness=${JSON.stringify(canonicalProfile.harness)} requires a local bridge, a provider with authenticated coordination.publicUrl and runtime MCP attachments, or an explicit driveHarness with reachable coordination transport`);
 	const externalManagersAvailable = hasCustomDriveHarness || managerBackend !== void 0 && automaticDriverBackendSupported(managerBackend, options.coordination);
@@ -5881,6 +5927,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 			...options.workerSlots !== void 0 ? { workerSlots: options.workerSlots } : {},
 			...options.reservationPolicy ? { reservationPolicy: options.reservationPolicy } : {},
 			...options.deadlineCheckIn === void 0 ? {} : { deadlineCheckIn: options.deadlineCheckIn },
+			...options.budgetStopHoldMs === void 0 ? {} : { budgetStopHoldMs: options.budgetStopHoldMs },
 			...ctx.resume === true || options.runDir === void 0 && options.resume === true ? { resume: true } : {},
 			...options.now ? { now: options.now } : {},
 			signal: options.signal ? AbortSignal.any([options.signal, durableCancellation.signal]) : durableCancellation.signal,
@@ -5988,4 +6035,4 @@ function withModelSubstitution(agent, substitution) {
 //#endregion
 export { dumbContinuationPassPrompt as A, defaultEdgeTraversalCap as C, createPromptRegistry as D, analyzesFindingsReportPrompt as E, serveCoordinationMcp as F, kernelPromptRegistry as M, naiveContinuationPrompt as N, delegatesWorkerBriefPrompt as O, promptHandle as P, createGraphOverlay as S, validateGraphTopology as T, readRootStream as _, superviseRootProfile as a, composeReentryTask as b, isPreSpawnExecutorFailure as c, withWorkerSpawnRetry as d, assertCoordinationBinding as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseFleetCapabilities as i, formatPromptHandle as j, dumbContinuationFailPrompt as k, resolveWorkerSpawnRetry as l, supervisorAgent as m, profileGuidanceComposer as n, superviseWithTestBrain as o, resolveSupervisorProfile as p, supervise as r, workerFromBackend as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, retryPreSpawnRefusals as u, readRootStreamReceipt as v, graphRootProfile as w, createSupervisorSpanRecorder as x, UNPROVEN_CONTINUITY as y };
 
-//# sourceMappingURL=supervise-C8oeQwrk.js.map
+//# sourceMappingURL=supervise-ISaRiWVe.js.map