@tangle-network/agent-runtime 0.333.1 → 0.335.0

package/dist/{supervisor-B4sM2Xu2.js → supervisor-B-bkXttM.js}

@@ -1,6 +1,6 @@
 import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as isAsyncIterable$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as chargedTokens, J as deleteBoxSafe, K as cloneSpend, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as teardownExecutor, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, c as verifyAgentCandidateWorkspaceTree, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, f as verifyAgentCandidateWorkspaceArchive, ft as zeroTokenUsage, gt as withBudgetResources, ht as resourceTelemetry, it as roundBoxMinutes, j as verifyWorkspaceSnapshotArtifacts, kt as teardownSurfaces, lt as unmeteredSpend, mt as assertResources, nt as randomSuffix, o as readAgentCandidateWorkspaceArtifactFiles, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, s as verifyAgentCandidateWorkspaceArtifacts, st as throwAbort, t as assertSandboxProfileCompatibility, tt as promptCacheTokenClasses, ut as withTimeout, vt as CHILD_DEADLINE_REASON, wt as boundedChildDeadlineAt } from "./sandbox-profile-compat-CVgQWb7T.js";
+import { $ as isAsyncIterable$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as chargedTokens, J as deleteBoxSafe, K as cloneSpend, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as teardownExecutor, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, c as verifyAgentCandidateWorkspaceTree, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, f as verifyAgentCandidateWorkspaceArchive, ft as zeroTokenUsage, gt as withBudgetResources, ht as resourceTelemetry, it as roundBoxMinutes, j as verifyWorkspaceSnapshotArtifacts, kt as teardownSurfaces, lt as unmeteredSpend, mt as assertResources, nt as randomSuffix, o as readAgentCandidateWorkspaceArtifactFiles, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, s as verifyAgentCandidateWorkspaceArtifacts, st as throwAbort, t as assertSandboxProfileCompatibility, tt as promptCacheTokenClasses, ut as withTimeout, vt as CHILD_DEADLINE_REASON, wt as boundedChildDeadlineAt } from "./sandbox-profile-compat-D_ZOL80S.js";
 import { runTaskQueue } from "./task-queue.js";
 import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-DBv31uPi.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
@@ -3748,6 +3748,26 @@ const causeMessages = {
 * Nothing ran for the request.
 */
 const DISPATCH_NOT_ADMITTED_CODE = "DISPATCH_NOT_ADMITTED";
+/**
+* The Sandbox SDK's codes for a box that cannot be provisioned for this profile, sent with HTTP
+* 422 when the failure is deterministic: a profile file mount outside the box's writable roots,
+* refused before any box exists, and a profile-file materialization that would fail the same way
+* again. On Discovery run queens21-h22-capture-root-1-20261019c every child profile mounted
+* `/work/queens21_count.c` on a read-only root filesystem, and 154 attempts across 4 workers were
+* retried as a lost transport. The same codes at another status may be transient and are not
+* read here.
+*/
+const PROVISIONING_REFUSAL_CODES = /* @__PURE__ */ new Set(["PROFILE_FILE_MOUNT_OUTSIDE_ROOTS", "PROFILE_FILES_MATERIALIZE_FAILED"]);
+/** True for an error that is itself a deterministic provisioning refusal (see above). */
+function isProvisioningRefusal(value) {
+	try {
+		const code = readString(value, "code");
+		const status = readNumber(value, "status") ?? readNumber(value, "statusCode");
+		return code !== void 0 && status === 422 && PROVISIONING_REFUSAL_CODES.has(code);
+	} catch {
+		return false;
+	}
+}
 /** The contract-error codes that wrap a failed READ rather than name a broken answer. */
 const readFailureCodes = /* @__PURE__ */ new Set(["RETAINED_RESULT_READ_FAILED", "RETAINED_CONTROL_REF_READ_FAILED"]);
 /** Socket-level failures, by the codes Node and undici assign, plus the Sandbox SDK's own. */
@@ -3815,6 +3835,7 @@ function classifyPendingCause(cause, phase, onCredentialRefusal) {
 		}
 		if (name === "ZodError" || Array.isArray(Reflect.get(value, "issues")) || code === "JSON_BOUND_VIOLATION") return at === "admission" ? "request-rejected" : "provider-contract";
 		if (code === "DISPATCH_NOT_ADMITTED") return at === "admission" ? "request-rejected" : "provider-contract";
+		if (isProvisioningRefusal(value)) return "request-rejected";
 		if (isCredentialRefusal(value)) {
 			if (at === "execution") return "unobservable";
 			onCredentialRefusal?.();
@@ -3869,6 +3890,9 @@ var RetainedExecutionPendingError = class extends Error {
 		if (credentialRefused) credentialAdmissionRefusals.add(this);
 	}
 };
+/** The instruction a keyed continuation runs in the held session: the node's task is unchanged,
+*  and its conversation and workspace are where the budget stop left them. */
+const BUDGET_CONTINUATION_TASK = "Your previous turn reached its budget and stopped. Your manager gave you more budget to continue the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over.";
 /** The execution id of a leaf's later invocation, derived from its `execution-input` sequence so
 *  a recovery derives the same one. A first invocation keeps the node id. */
 function leafContinuationExecutionId(nodeId, inputSeq) {
@@ -5288,7 +5312,8 @@ const HARNESS_INVOCATIONS = {
 			"workspace-write",
 			"-c",
 			"approval_policy=\"never\""
-		]
+		],
+		fullAccessArgs: () => ["--dangerously-bypass-approvals-and-sandbox"]
 	},
 	opencode: {
 		command: "opencode",
@@ -5378,7 +5403,10 @@ const CODEX_REPRODUCIBLE_ARGS = [
 function buildHarnessArgs(harness, taskPrompt, options = {}) {
 	const invocation = HARNESS_INVOCATIONS[harness];
 	const args = invocation.buildArgs(taskPrompt);
-	if (options.dangerouslySkipPermissions && !options.codexReproducible) args.push(...invocation.permissionBypassArgs?.() ?? []);
+	if (options.dangerouslySkipPermissions && !options.codexReproducible) {
+		const bypass = options.fullAccess ? invocation.fullAccessArgs ?? invocation.permissionBypassArgs : invocation.permissionBypassArgs;
+		args.push(...bypass?.() ?? []);
+	}
 	if (options.codexReproducible) {
 		if (harness !== "codex") throw new Error("harnessInvocation: codexReproducible requires the Codex harness");
 		args.push(...CODEX_REPRODUCIBLE_ARGS);
@@ -6639,6 +6667,8 @@ async function runInPlaceHarness(opts) {
 			applied,
 			resourceInstructions,
 			dangerouslySkipPermissions: true,
+			fullAccess: true,
+			...opts.env ? { env: opts.env } : {},
 			...opts.harnessTimeoutMs !== void 0 ? { harnessTimeoutMs: opts.harnessTimeoutMs } : {},
 			...opts.signal ? { signal: opts.signal } : {},
 			runHarness,
@@ -6669,6 +6699,13 @@ function applyProfilePlan(plan, workspacePath, context) {
 	if (applied.unsupported.length > 0) throw new Error(`${context}: applied profile unexpectedly retained unsupported rows`);
 	return applied;
 }
+/** `process.env` with the caller's per-run overrides applied; `undefined` removes a variable. */
+function callerEnv(overrides) {
+	const env = { ...process.env };
+	for (const [name, value] of Object.entries(overrides ?? {})) if (value === void 0) delete env[name];
+	else env[name] = value;
+	return env;
+}
 /**
 * The ONE profile-to-process step both placements share: §1.5 prompt/model delivery through
 * `harnessInvocation`, the materializer's flags and environment, and the `runLocalHarness` spawn
@@ -6679,6 +6716,7 @@ async function spawnProfiledHarness(args) {
 	const invocationProfile = profileWithResourceInstructions(args.profile, args.resourceInstructions);
 	const { command, args: invocationArgs } = harnessInvocation(args.harness, invocationProfile, args.taskPrompt, {
 		dangerouslySkipPermissions: args.dangerouslySkipPermissions,
+		...args.fullAccess ? { fullAccess: true } : {},
 		...args.codexReproducible ? { codexReproducible: true } : {}
 	});
 	const harnessResult = await args.runHarness({
@@ -6690,7 +6728,7 @@ async function spawnProfiledHarness(args) {
 			args: [...invocationArgs, ...args.applied.flags.map(publicPlanString)]
 		},
 		env: {
-			...process.env,
+			...callerEnv(args.env),
 			...resolvePublicPlanEnv(args.applied.env)
 		},
 		...args.codexReproducible ? { codexReproducible: true } : {},
@@ -10138,6 +10176,14 @@ function normalizeWorkerSlotBound(value) {
 	if (!Number.isSafeInteger(value)) throw new ValidationError$1(`workerSlots must be a positive safe integer, or 0 or less for no bound, got ${String(value)}`);
 	return value;
 }
+/** At most this many stage entries are kept from a port, each a finite, non-negative number. */
+const MAX_CAPTURE_STAGES = 16;
+function captureStages(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const stages = {};
+	for (const [name, amount] of Object.entries(value).slice(0, MAX_CAPTURE_STAGES)) if (/^[A-Za-z][A-Za-z0-9]{0,63}$/u.test(name) && Number.isFinite(amount) && amount >= 0) stages[name] = amount;
+	return Object.keys(stages).length === 0 ? void 0 : Object.freeze(stages);
+}
 const checkpointSlotKeys = /* @__PURE__ */ new WeakMap();
 function checkpointSlots(port) {
 	let key = checkpointSlotKeys.get(port);
@@ -10328,9 +10374,9 @@ function trackCapture(port, work) {
 * bound, and judges coverage by the sessions alone. `onTiming` receives the queue wait and the
 * capture time of a workspace capture once it settles, whether it succeeded or failed.
 */
-async function captureProviderWorkspaceSnapshot(port, context, scope = "environment", onTiming) {
+async function captureProviderWorkspaceSnapshot(port, context, scope = "environment", onTiming, parent) {
 	assertProviderWorkspaceRetentionPort(port, "provider workspace retention");
-	if (scope === "native" || onTiming === void 0) return await captureWithinSlot(port, context, scope);
+	if (scope === "native" || onTiming === void 0) return await captureWithinSlot(port, context, scope, void 0, parent);
 	return await trackCapture(port, async (ahead) => {
 		const requestedAt = Date.now();
 		let grantedAt;
@@ -10351,7 +10397,8 @@ async function captureProviderWorkspaceSnapshot(port, context, scope = "environm
 			});
 			report({
 				outcome: "captured",
-				archiveBytes: captured.snapshot.archive.byteLength
+				archiveBytes: captured.snapshot.archive.byteLength,
+				...captured.stages === void 0 ? {} : { stages: captured.stages }
 			});
 			return captured;
 		} catch (error) {
@@ -10363,7 +10410,7 @@ async function captureProviderWorkspaceSnapshot(port, context, scope = "environm
 		}
 	});
 }
-async function captureWithinSlot(port, context, scope, onGranted) {
+async function captureWithinSlot(port, context, scope, onGranted, parent) {
 	const native = scope === "native";
 	if (native && port.captureNative === void 0) throw new ValidationError$1("provider workspace retention: the port has no captureNative");
 	const timeoutMs = native ? port.nativeTimeoutMs ?? 12e4 : port.timeoutMs;
@@ -10371,6 +10418,9 @@ async function captureWithinSlot(port, context, scope, onGranted) {
 	if (controlRef !== void 0 && (controlRef.environmentId !== context.environment.id || controlRef.provider !== context.environment.provider || context.providerSessionId != null && controlRef.sessionId !== context.providerSessionId)) throw new Error("provider workspace retention control reference names another environment or session");
 	const controller = new AbortController();
 	const clearDeadline = armDeadlineTimer(timeoutMs, () => controller.abort(/* @__PURE__ */ new Error(`provider workspace retention timed out after ${timeoutMs}ms`)), true);
+	const stopFromParent = () => controller.abort(parent?.reason);
+	if (parent?.aborted) stopFromParent();
+	else parent?.addEventListener("abort", stopFromParent, { once: true });
 	try {
 		return await runAbortable(() => withCaptureSlot(native ? nativeSlots(port) : port, controller.signal, async () => {
 			onGranted?.();
@@ -10430,15 +10480,18 @@ async function captureWithinSlot(port, context, scope, onGranted) {
 					...port.limits === void 0 ? {} : { limits: port.limits }
 				});
 			}
+			const stages = "snapshot" in result ? captureStages(result.stages) : void 0;
 			return {
 				snapshot,
 				provenance,
 				coverageComplete,
+				...stages === void 0 ? {} : { stages },
 				...coverageComplete ? {} : { incompleteReason: `provider workspace retention coverage incomplete: ${coverageGaps.join("; ")}` }
 			};
 		}), controller.signal, `provider workspace retention timed out after ${timeoutMs}ms`);
 	} finally {
 		clearDeadline();
+		parent?.removeEventListener("abort", stopFromParent);
 	}
 }
 /** Reconcile Sidecar attempts to the exact captured session executions. */
@@ -12314,6 +12367,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		else managerStop.addEventListener("abort", cancel, { once: true });
 	};
 	let destroyed = false;
+	let holdingForContinuation = false;
 	let workspaceEnvironmentId;
 	let workspaceSnapshot;
 	let workspaceProvenance;
@@ -12413,7 +12467,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				executionId: capturedExecutionId,
 				environmentId: next.id
 			}).catch(() => void 0) ?? Promise.resolve();
-			workspaceCapturePromise = Promise.all([nativeInFlight, liveInFlight]).then(() => captureProviderWorkspaceSnapshot(workspaceRetention, captureContext, "environment", reportTiming === void 0 ? void 0 : (measured) => {
+			workspaceCapturePromise = Promise.all([nativeRunningInFlight, liveInFlight]).then(() => captureProviderWorkspaceSnapshot(workspaceRetention, captureContext, "environment", reportTiming === void 0 ? void 0 : (measured) => {
 				timing = measured;
 			})).finally(async () => {
 				await started;
@@ -12467,6 +12521,8 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 	};
 	const nativePort = options.workspaceRetention?.captureNative === void 0 ? void 0 : options.workspaceRetention;
 	let nativeInFlight;
+	let nativeRunningInFlight;
+	let nativeRunningStop;
 	let nativeTimer;
 	let nativeEvents = 0;
 	let nativeEventsAtCopy;
@@ -12527,12 +12583,17 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		nativeTimer = void 0;
 		closeNativeMirror?.();
 		closeNativeMirror = void 0;
+		nativeRunningStop?.abort(/* @__PURE__ */ new Error("native session copy stopped: its turn ended"));
+		nativeRunningStop = void 0;
 		await nativeInFlight;
 	};
 	const captureNative = (next, phase, admitted, afterStop = false) => {
 		if (nativePort === void 0 || createProfile.harness === void 0) return Promise.resolve();
 		const harness = createProfile.harness;
+		const stop = phase === "running" ? new AbortController() : void 0;
+		if (stop !== void 0) nativeRunningStop = stop;
 		const tracked = (nativeInFlight ?? Promise.resolve()).then(async () => {
+			stop?.signal.throwIfAborted();
 			const controlRef = workspaceControlRef ?? admitted;
 			const sessionId = providerSessionId ?? admitted?.sessionId ?? null;
 			if (workspaceSnapshot !== void 0 && !nativeHoldsTranscript) return;
@@ -12549,7 +12610,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 					nativeSessionId: null,
 					profile: createProfile,
 					phase
-				}, "native");
+				}, "native", void 0, stop?.signal);
 				let captured = await takeCopy();
 				const settleBy = Date.now() + NATIVE_SETTLE_WINDOW_MS;
 				while (afterStop && captured.coverageComplete !== true && (captured.provenance.attempts ?? []).some((attempt) => attempt.outcome === "unknown") && Date.now() < settleBy) {
@@ -12573,14 +12634,18 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 				nativeHoldsTranscript = true;
 				nativeEventsAtCopy = eventsAtStart;
 			} catch (error) {
+				if (stop?.signal.aborted) return;
 				noteCaptureFailure(error);
 			} finally {
 				lastNativeCopyMs = Date.now() - copyStartedAt;
 			}
-		}).finally(() => {
+		}).catch(() => void 0).finally(() => {
 			if (nativeInFlight === tracked) nativeInFlight = void 0;
+			if (nativeRunningInFlight === tracked) nativeRunningInFlight = void 0;
+			if (nativeRunningStop === stop) nativeRunningStop = void 0;
 		});
 		nativeInFlight = tracked;
+		if (stop !== void 0) nativeRunningInFlight = tracked;
 		return tracked;
 	};
 	const startNativeMirror = (next) => {
@@ -12865,7 +12930,10 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						complete: workspaceCoverageComplete,
 						incompleteReason: workspaceIncompleteReason
 					}),
-					destroyEnvironment
+					destroyEnvironment,
+					onHeld: () => {
+						holdingForContinuation = true;
+					}
 				});
 				const refusal = ended.unavailable;
 				const continueInvocation = invocation.retention?.continueInvocation;
@@ -12930,6 +12998,10 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		},
 		async teardown(_grace) {
 			controller.abort();
+			if (holdingForContinuation) return {
+				destroyed: false,
+				detail: "environment held for a keyed continuation after a budget stop"
+			};
 			if (pending && cancelledExplicitly()) stopNativeExecution();
 			if (options.workspaceRetention !== void 0 && workspaceRunActive) return {
 				destroyed: false,
@@ -12950,9 +13022,27 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			return [{
 				provider: provider.name,
 				environmentId,
-				...preserved ? { keptFor: "evidence" } : {}
+				...preserved ? { keptFor: "evidence" } : holdingForContinuation ? { keptFor: "continuation" } : {}
 			}];
 		},
+		heldForContinuation() {
+			const held = environment;
+			if (!holdingForContinuation || held === void 0 || destroyed) return void 0;
+			return {
+				provider: provider.name,
+				environmentId: held.id,
+				release: async (signal) => {
+					if (!holdingForContinuation) return { destroyed: true };
+					holdingForContinuation = false;
+					return await destroyEnvironment(signal);
+				},
+				handOver: () => {
+					holdingForContinuation = false;
+					environment = void 0;
+					destroyed = true;
+				}
+			};
+		},
 		releaseRetained: withoutRunningHarness(async (signal) => {
 			controller.abort();
 			if (!pending) return [];
@@ -13147,10 +13237,17 @@ async function* streamProviderExecutor(args) {
 	const ownerTakesCapture = () => args.options.workspaceRetention?.captureNative !== void 0 && args.createProfile.harness !== void 0 && source.retained && args.retention?.preserveEnvironment === true && args.retention.onEndOfTurnWork !== void 0;
 	const handCaptureToOwner = (reported, captureOutcome, publish, beforeCapture) => {
 		args.retention?.onEndOfTurnWork?.((async () => {
+			const finalCopy = (async () => {
+				try {
+					await beforeCapture?.();
+				} catch {}
+			})();
+			let snapshot;
 			try {
-				await beforeCapture?.();
-			} catch {}
-			const snapshot = await args.captureWorkspace(environment, captureOutcome);
+				snapshot = await args.captureWorkspace(environment, captureOutcome);
+			} finally {
+				await finalCopy;
+			}
 			if (publish) args.onPublishedSnapshot(snapshot);
 			if (snapshot === void 0) return;
 			await args.retention?.onEvidence?.({
@@ -13330,7 +13427,9 @@ async function* streamProviderExecutor(args) {
 	} finally {
 		await stopEndedHarness();
 		if (!finalCopyTaken) await args.finishNativeMirror(environment, failed ? "failed" : settled !== void 0 ? "settled" : "interrupted");
-		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && !(unavailable !== void 0 && !failed) && (args.options.destroyOnSettle ?? true)) {
+		const held = source.retained && settled !== void 0 && !failed && unavailable === void 0 && args.retention?.preserveEnvironment !== true && args.retention?.holdOnSettle?.(settled.spent) === true;
+		if (held) args.onHeld();
+		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && !(unavailable !== void 0 && !failed) && !held && (args.options.destroyOnSettle ?? true)) {
 			const cleanup = await args.destroyEnvironment();
 			if (!cleanup.destroyed) {
 				const error = new Error(cleanup.detail ?? "provider environment teardown was not confirmed");
@@ -19370,7 +19469,10 @@ function checkedSeatSelection(stage, selected) {
 * is being burned. Within that window it consumes neither `maxAttempts` nor the barren streak,
 * exactly like a pause, and only the deadline, the budget, and cancellation bound it. After the
 * window the failure bounds apply again, so a dead-on-arrival driver still stops, in minutes
-* rather than hours. A failure that spent tokens without delivering keeps the bounds above,
+* rather than hours. The exception is a box that was created and then failed its setup (Sandbox's
+* `PartialFailureError`): it meets the same failure on every re-entry, so a second identical
+* attempt with no progress stops with `repeated-failure` (`SAME_PARTIAL_FAILURE_LIMIT`). A failure
+* that spent tokens without delivering keeps the bounds above,
 * because that is the burn the progress rule exists to stop. Measured 2026-10-04 on Discovery run research-nqs-20261003system2: a Platform
 * restart answered `HTTP 502 ... Platform key verification unavailable` from 03:04:34 to 03:09:41Z,
 * and the coordinator's twelve attempts ran out at 03:07:12Z with no token spent, while a sibling
@@ -19400,6 +19502,40 @@ const REPEATED_FAILURE_WINDOW_MS = 5 * 6e4;
 /** Consecutive identical reconciliation failures of one pending invocation that resolve it. */
 const SAME_PENDING_LIMIT = 2;
 /**
+* Consecutive attempts that end in the same Sandbox `PartialFailureError`, with nothing gained
+* between them, that stop the loop. That error is a box that was created and then failed its
+* setup (its profile files would not materialize, it did not become ready). The retained
+* execution is bound durably to the node, so each re-entry meets the same box and the same
+* failure. Discovery run queens21-h22-capture-root-1-20261019c re-entered four such boxes 154
+* times in 37 minutes on `mkdir: cannot create directory '/work': Read-only file system`, one
+* box per root, each inside the transient-outage window that retries a failure which spent
+* nothing. A second identical attempt proves what a third would repeat; a different failure, or
+* any progress, starts the count over.
+*/
+const SAME_PARTIAL_FAILURE_LIMIT = 2;
+/** Longest cause chain read for a `PartialFailureError`; the failing box's error sits one or two wrappers down. */
+const PARTIAL_FAILURE_CAUSE_DEPTH = 6;
+/**
+* True when `error` or one of its causes is Sandbox's `PartialFailureError`. Read by name: the
+* class lives in `@tangle-network/sandbox`, which Runtime does not import, and a failure crosses
+* packages that may each hold their own copy of it, so `instanceof` would miss it.
+*/
+function causedByPartialFailure(error) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	for (let depth = 0; depth <= PARTIAL_FAILURE_CAUSE_DEPTH; depth += 1) {
+		if (!(current instanceof Error) || seen.has(current)) return false;
+		seen.add(current);
+		try {
+			if (errorProperty(current, "name") === "PartialFailureError") return true;
+			current = current.cause;
+		} catch {
+			return false;
+		}
+	}
+	return false;
+}
+/**
 * The pending invocation a failure left, when abandoning it is the resolution: the provider
 * answered and could not resolve the execution (`unobservable`), or a nested manager's recovery
 * could not be rebuilt (`nested-recovery`). A lost transport waits for the provider instead, in
@@ -19527,6 +19663,22 @@ function capacityCode(error) {
 function isUpstreamUnavailable(error) {
 	return upstreamUnavailableSignal(error) !== void 0;
 }
+/** The error and its causes (`cause`, and `errors` members), bounded and cycle-safe. */
+function causeChain(error) {
+	const chain = [];
+	const queue = [error];
+	while (queue.length > 0 && chain.length < 12) {
+		const value = queue.shift();
+		if (typeof value !== "object" || value === null || chain.includes(value)) continue;
+		chain.push(value);
+		try {
+			const errors = Reflect.get(value, "errors");
+			if (Array.isArray(errors)) queue.push(...errors);
+			queue.push(Reflect.get(value, "cause"));
+		} catch {}
+	}
+	return chain;
+}
 /**
 * Classify one driver failure. Runtime's own typed refusals are decisions and stay terminal; an
 * upstream capacity refusal is `unavailable`; anything else foreign is an accident and is
@@ -19544,6 +19696,7 @@ function classifyDriverFailure(error, signal) {
 	if (error instanceof Error && errorProperty(error, "name") === "AbortError") return "terminal";
 	if (error instanceof Error && isProviderSchemaRejection(error)) return "terminal";
 	if (isCredentialRefusal(error)) return "terminal";
+	if (causeChain(error).some(isProvisioningRefusal)) return "terminal";
 	if (error instanceof HarnessTurnFailedError) {
 		if (error.errorCode !== void 0 && DETERMINISTIC_BRIDGE_CODES.has(error.errorCode)) return "terminal";
 		if (isUpstreamUnavailable(error)) return "unavailable";
@@ -19717,6 +19870,7 @@ async function runDriverWithRetry(run) {
 	let consecutivePauses = 0;
 	let samePending;
 	let sameFailure;
+	let samePartial;
 	let abandonments = 0;
 	let pauses = 0;
 	let continuations = 0;
@@ -19851,12 +20005,17 @@ async function runDriverWithRetry(run) {
 				since: failedAt
 			};
 			const repeated = sameFailure !== void 0 && sameFailure.count >= REPEATED_FAILURE_LIMIT && failedAt - sameFailure.since >= REPEATED_FAILURE_WINDOW_MS;
+			samePartial = classification === "transient" && !progressed && pending === void 0 && causedByPartialFailure(error) ? {
+				error: failure,
+				count: samePartial?.error === failure ? samePartial.count + 1 : 1
+			} : void 0;
 			const stop = (() => {
 				if (classification === "terminal") return "terminal-error";
 				if (!retryEnabled) return "retry-disabled";
 				if (run.signal.aborted) return "aborted";
 				const byBudget = budgetStop(run.budget(), failedAt);
 				if (byBudget) return byBudget;
+				if (samePartial !== void 0 && samePartial.count >= SAME_PARTIAL_FAILURE_LIMIT) return "repeated-failure";
 				if (inOutage) return void 0;
 				if (chargedFailures >= maxAttempts) return "max-attempts";
 				if (progressed) return repeated ? "repeated-failure" : void 0;
@@ -19914,6 +20073,7 @@ async function runDriverWithRetry(run) {
 		outageSince = void 0;
 		samePending = void 0;
 		sameFailure = void 0;
+		samePartial = void 0;
 		abandonments = 0;
 		const durationMs = now() - startedAt;
 		const after = run.progress();
@@ -21724,6 +21884,7 @@ function createInPlaceCliExecutor(options) {
 				taskPrompt,
 				...options.harnessTimeoutMs !== void 0 ? { harnessTimeoutMs: options.harnessTimeoutMs } : {},
 				...linked ? { signal: linked } : {},
+				...options.env ? { env: options.env } : {},
 				...options.runHarness ? { runHarness: options.runHarness } : {}
 			});
 			const spent = {
@@ -25707,7 +25868,7 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 			if (!prepared) continue;
 		}
 		const priorMaterialization = [...owned].reverse().find((event) => event.kind === "materialized" || event.kind === "seat-materialized")?.receipt;
-		const continuation = latestInput !== void 0 && inputs.length > 1 && node.ownedTreeRoot === void 0 ? await leafContinuation(node, owned, latestInput, opts) : void 0;
+		const continuation = latestInput !== void 0 && inputs.length > 1 && node.ownedTreeRoot === void 0 ? await leafContinuation(node, owned, latestInput, opts) : latestInput !== void 0 && node.continues !== void 0 && admissions.length === 0 && node.ownedTreeRoot === void 0 ? heldContinuation(node, events, latestInput) : void 0;
 		recoveries.push({
 			...detachedSnapshot({
 				spawned: node,
@@ -25773,6 +25934,23 @@ async function leafContinuation(node, owned, latestInput, opts) {
 		priorSpent: priorResult.spent
 	};
 }
+/**
+* A node that continues a budget-stopped node's held environment, recovered before its own first
+* admission: it runs in the environment and session of its predecessor's last environment
+* admission, so the recovery neither creates a second environment nor leaves the held one behind.
+*/
+function heldContinuation(node, events, latestInput) {
+	const continues = node.continues;
+	const priorSession = [...events].reverse().flatMap((event) => event.id === continues.ofWorker && event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
+	if (priorSession === void 0 || priorSession.environmentId !== continues.environmentId) throw new RuntimeRunStateError(`cannot recover '${node.id}': '${continues.ofWorker}' has no admission for the environment it continues`);
+	return {
+		task: BUDGET_CONTINUATION_TASK,
+		inputSeq: latestInput.seq,
+		executionId: node.id,
+		priorSession,
+		priorSpent: zeroSpend()
+	};
+}
 async function assertRecordedResult(node, result, events, opts) {
 	const before = events.slice(0, events.indexOf(result));
 	const receipt = [...before].reverse().find((event) => event.kind === "materialized" || event.kind === "seat-materialized")?.receipt;
@@ -27890,6 +28068,7 @@ const pauseRecorders = /* @__PURE__ */ new WeakMap();
 const driverAttemptRecorders = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
 const retainedReleasers = /* @__PURE__ */ new WeakMap();
+const heldReleasers = /* @__PURE__ */ new WeakMap();
 const childDrains = /* @__PURE__ */ new WeakMap();
 const retainedSlotClosers = /* @__PURE__ */ new WeakMap();
 const teardownRetriers = /* @__PURE__ */ new WeakMap();
@@ -27956,6 +28135,17 @@ function unconfirmedTeardownOf(child, releasing) {
 		...child.teardownDetail === void 0 ? {} : { detail: child.teardownDetail }
 	});
 }
+/** Ten minutes: a manager that is alive decides within a turn or two; one that crashed, or a host
+*  that restarted, must not leave a paid environment running until a retire pass finds it. */
+const DEFAULT_BUDGET_STOP_HOLD_MS = 6e5;
+/**
+* @internal Release every environment this scope's settled children still hold after a budget
+* stop, at the join barrier: no later spawn of this scope can continue them. Each release journals
+* an `environment-teardown` with `heldRelease: 'scope-join'`. Never rejects.
+*/
+async function releaseHeldEnvironments(scope) {
+	await heldReleasers.get(scope)?.();
+}
 /** @internal Admit original children before the parent acts; do not wait for their results. */
 async function startScopeRecoveries(scope) {
 	const start = recoveryStarters.get(scope);
@@ -28144,6 +28334,7 @@ function makeNestedScopeSeam(args, workerSlots, childSlot, childNodeId, childBud
 				ownerBudget: nestedBudget
 			} : {},
 			...args.deadlineCheckIn === void 0 ? {} : { deadlineCheckIn: args.deadlineCheckIn },
+			...args.budgetStopHoldMs === void 0 ? {} : { budgetStopHoldMs: args.budgetStopHoldMs },
 			signal,
 			...restored ? { resumeFrom: restored.resumeFrom } : {},
 			...args.now ? { now: args.now } : {},
@@ -28262,6 +28453,7 @@ function createScope(args) {
 		const task = detachedSnapshot(rawTask, "scope.spawn task");
 		const opts = detachedSnapshot(rawOpts, "scope.spawn options");
 		let prior;
+		let continuing;
 		let prepared;
 		const prepare = () => {
 			const agent = typeof agentOrFactory === "function" ? agentOrFactory() : agentOrFactory;
@@ -28295,14 +28487,28 @@ function createScope(args) {
 				ok: false,
 				reason: "duplicate-key"
 			};
-			if (existing?.state === "done") return {
-				ok: true,
-				handle: existing.settled.handle,
-				prior: {
-					state: "completed",
-					settled: existing.settled
-				}
-			};
+			if (existing?.state === "done") {
+				const from = children.get(existing.id);
+				const admission = opts.continueHeld === true && existing.settled.budgetViolation !== void 0 ? from?.held !== void 0 ? from.readEnvironmentAdmission?.() : void 0 : void 0;
+				if (from?.held === void 0 || admission === void 0) return {
+					ok: true,
+					handle: existing.settled.handle,
+					prior: {
+						state: "completed",
+						settled: existing.settled
+					}
+				};
+				continuing = {
+					from,
+					admission,
+					held: from.held
+				};
+				prior = {
+					state: "continued",
+					priorId: existing.id,
+					environmentId: from.held.continuation.environmentId
+				};
+			}
 			if (existing?.state === "down") prior = {
 				state: "retried",
 				priorId: existing.id,
@@ -28364,6 +28570,7 @@ function createScope(args) {
 		try {
 			const ordinal = recovery?.spawned.seq ?? spawnOrdinal++;
 			const id = recovery?.spawned.id ?? `${args.parentId}:s${ordinal}`;
+			const successorOf = opts.successorOf ?? continuing?.from.id;
 			args.pool.attribute(reservation.ticket, {
 				childId: id,
 				stage: "admitted"
@@ -28475,6 +28682,8 @@ function createScope(args) {
 					at: new Date(now()).toISOString()
 				});
 			});
+			const holdMs = args.budgetStopHoldMs ?? 6e5;
+			const holdOnSettle = opts.key !== void 0 && holdMs > 0 ? (spent) => overBudget(opts.budget, spent) || childDeadlineAtMs !== void 0 && now() > childDeadlineAtMs : void 0;
 			const retainedContext = (continuing) => ({
 				...continuing === void 0 ? {} : {
 					executionId: continuing.executionId,
@@ -28482,6 +28691,7 @@ function createScope(args) {
 					...continuing.priorSpent === void 0 ? {} : { priorSpent: continuing.priorSpent }
 				},
 				admissions,
+				...holdOnSettle === void 0 ? {} : { holdOnSettle },
 				...markRecoveryReady && continuing === void 0 ? { onReady: markRecoveryReady } : {},
 				onAdmission,
 				onResult,
@@ -28539,11 +28749,14 @@ function createScope(args) {
 				},
 				seams: {
 					...args.seams,
-					[retainedExecutorSeamKey]: retainedContext(recovery?.continuation === void 0 ? void 0 : {
+					[retainedExecutorSeamKey]: retainedContext(recovery?.continuation !== void 0 ? {
 						executionId: recovery.continuation.executionId,
 						priorSession: recovery.continuation.priorSession,
 						priorSpent: recovery.continuation.priorSpent
-					}),
+					} : continuing !== void 0 ? {
+						executionId: id,
+						priorSession: continuing.admission
+					} : void 0),
 					[nestedScopeSeamKey]: makeNestedScopeSeam(args, workerSlots, permit, id, opts.budget, childDeadlineAtMs, deferredOwner),
 					...workerTrace ? { [workerTraceSeamKey]: workerTrace } : {},
 					...interactiveBindingDir ? { [interactiveAdmissionSeamKey]: (admission) => Promise.resolve(writeWorkerInteractiveAdmission(interactiveBindingDir, id, admission, now)).then(() => void 0) } : {}
@@ -28615,7 +28828,11 @@ function createScope(args) {
 				...nestedTeardownScopes.has(executor) ? { readNestedScope: nestedTeardownScopes.get(executor) } : {},
 				...executor.harnessTranscript ? { readTranscriptAtRelease: () => persistHarnessTranscript(readHarnessTranscript(executor), args.blobs) } : {},
 				teardownAttempts: 0,
-				abortChild: (reason) => controller.abort(reason)
+				abortChild: (reason) => controller.abort(reason),
+				readEnvironmentAdmission: () => {
+					const admission = admissions.find((record) => record.phase === "environment");
+					return admission?.phase === "environment" ? admission : void 0;
+				}
 			};
 			const recordCancellation = () => {
 				if (!live.executorDone && live.acceptedResult === void 0 && executor.resultAccepted?.() !== true && controller.signal.reason instanceof RunCancellationReason) live.cancellationReason = controller.signal.reason;
@@ -28638,7 +28855,11 @@ function createScope(args) {
 					label: opts.label,
 					...opts.key !== void 0 ? { key: opts.key } : {},
 					...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
-					...opts.successorOf === void 0 ? {} : { successorOf: opts.successorOf },
+					...successorOf === void 0 ? {} : { successorOf },
+					...continuing === void 0 ? {} : { continues: {
+						ofWorker: continuing.from.id,
+						environmentId: continuing.admission.environmentId
+					} },
 					budget: opts.budget,
 					runtime: executor.runtime,
 					...ownedTreeRoot === void 0 ? {} : { ownedTreeRoot },
@@ -28786,7 +29007,7 @@ function createScope(args) {
 					label: opts.label,
 					...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
 					...opts.key === void 0 ? {} : { key: opts.key },
-					...opts.successorOf === void 0 ? {} : { successorOf: opts.successorOf },
+					...successorOf === void 0 ? {} : { successorOf },
 					runtime: executor.runtime,
 					...identity ? { identity } : {},
 					agent: authoredAgentIdentity(spec.profile, identity?.profileDigest),
@@ -28796,10 +29017,16 @@ function createScope(args) {
 					startedAt
 				}
 			}, { signal: args.signal });
-			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? task, opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
+			if (continuing !== void 0) {
+				continuing.held.clearCeiling?.();
+				continuing.held.continuation.handOver();
+				continuing.from.held = void 0;
+				continuing.from.cleanupConfirmed = true;
+			}
+			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? (continuing === void 0 ? task : "Your previous turn reached its budget and stopped. Your manager gave you more budget to continue the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over."), opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
 				complete: async () => pendingEvidence?.complete(),
 				fail: async () => pendingEvidence?.fail()
-			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent);
+			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent, startedAt);
 			args.pool.attribute(reservation.ticket, { stage: "executing" });
 			const interactiveBindingCommitted = spawnCommitted.then(async () => {
 				if (args.interactiveBindingDir === void 0) return;
@@ -28827,6 +29054,11 @@ function createScope(args) {
 					};
 				}
 				live.resolved = resolution;
+				if (live.held !== void 0) if (resolution.kind === "done") {
+					const timer = setTimeout(() => void releaseHeld(live, "hold-ceiling"), holdMs);
+					timer.unref?.();
+					live.held.clearCeiling = () => clearTimeout(timer);
+				} else await releaseHeld(live, "scope-join");
 				return resolution;
 			}).finally(() => {
 				permit.release();
@@ -28848,6 +29080,32 @@ function createScope(args) {
 			throw err;
 		}
 	}
+	const heldReleases = /* @__PURE__ */ new Set();
+	/** Release the environment a settled child holds after a budget stop, once, and journal why. */
+	function releaseHeld(child, reason) {
+		const held = child.held;
+		if (held === void 0) return Promise.resolve(false);
+		child.held = void 0;
+		held.clearCeiling?.();
+		const release = (async () => {
+			const answer = await held.continuation.release().catch((error) => ({
+				destroyed: false,
+				detail: errMessage(error)
+			}));
+			if (answer.destroyed) child.cleanupConfirmed = true;
+			else if (answer.detail !== void 0) child.teardownDetail = answer.detail;
+			await appendEnvironmentTeardown(args.journal, args.root, child.id, {
+				provider: held.continuation.provider,
+				environmentId: held.continuation.environmentId,
+				destroyed: answer.destroyed,
+				...answer.detail === void 0 ? {} : { detail: answer.detail }
+			}, new Date(now()).toISOString(), reason).catch(() => void 0);
+			return true;
+		})();
+		heldReleases.add(release);
+		release.finally(() => heldReleases.delete(release));
+		return release;
+	}
 	async function commitSettlement(child, settlement, seq) {
 		const pending = finalizeSettlement(child, settlement, seq, args, now).then((delivered) => {
 			if (child.key !== void 0) recordKeyedSettlement(child.key, delivered);
@@ -29030,6 +29288,10 @@ function createScope(args) {
 		next,
 		nextResolved,
 		send,
+		releaseHeld: (nodeId, reason) => {
+			const child = children.get(nodeId);
+			return child === void 0 ? Promise.resolve(false) : releaseHeld(child, reason);
+		},
 		progress,
 		observeTree: () => {
 			const view = makeTreeView(args.parentId, children);
@@ -29094,6 +29356,10 @@ function createScope(args) {
 	admissionSeals.set(scope, () => {
 		admissionClosed = true;
 	});
+	heldReleasers.set(scope, async () => {
+		await Promise.all([...children.values()].map((child) => releaseHeld(child, "scope-join")));
+		await Promise.allSettled([...heldReleases]);
+	});
 	subtreeReaders.set(scope, () => summarizeTeam(children.values()));
 	liveTeamReaders.set(scope, () => readLiveTeam(children.values(), ownerTurns, ownerLastTurnAt));
 	runtimeOwnedProviderMeters.set(scope, async (spend, providerModel, detail, accountingOnly, alreadySpent) => meterInternal(spend, detail, providerModel, accountingOnly, true, alreadySpent));
@@ -29684,7 +29950,7 @@ async function appendReconciledFloor(journal, root, subject, settlement, settled
 }
 /** A release receipt has the same per-child sequence discipline: outside the cursor namespace and
 *  monotonic per node, so a run released in two processes keeps its receipts ordered. */
-async function appendEnvironmentTeardown(journal, root, id, receipt, at) {
+async function appendEnvironmentTeardown(journal, root, id, receipt, at, heldRelease) {
 	const seq = await nextPerNodeSeq(journal, root, "environment-teardown", id);
 	await journal.appendEvent(root, {
 		kind: "environment-teardown",
@@ -29693,10 +29959,15 @@ async function appendEnvironmentTeardown(journal, root, id, receipt, at) {
 		environmentId: receipt.environmentId,
 		destroyed: receipt.destroyed,
 		...receipt.detail === void 0 ? {} : { detail: receipt.detail },
+		...heldRelease === void 0 ? {} : { heldRelease },
 		seq,
 		at
 	});
 }
+/** Whether a settled spend exceeds the budget it was given, by the channels the pool reconciles. */
+function overBudget(budget, spent) {
+	return chargedTokens(spent.tokens) > budget.maxTokens || spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
+}
 async function nextPerNodeSeq(journal, root, kind, id) {
 	return (await journal.loadTree(root) ?? []).reduce((max, event) => event.kind === kind && event.id === id ? Math.max(max, event.seq) : max, -1) + 1;
 }
@@ -29844,7 +30115,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 * applied per child). The reservation is reconciled on EVERY path (success, abort, throw)
 * so the conserved pool can never leak a reservation.
 */
-async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent) {
+async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent, startedAt) {
 	if (priorSpent !== void 0) live.spent = detachedSnapshot(priorSpent, "prior committed usage");
 	let reconciled = false;
 	let reconciliationError;
@@ -29889,6 +30160,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		if (teardownStarted) return;
 		teardownStarted = true;
 		try {
+			await executor.heldForContinuation?.()?.release();
 			await teardownExecutor(executor, grace, deadlineAtMs, now, live.askTeardown);
 			live.cleanupConfirmed = true;
 		} catch (error) {
@@ -29921,6 +30193,12 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 				throw error;
 			}
 			live.budgetViolation = pool.reconcile(ticket, spend);
+			const settledAt = now();
+			if (deadlineAtMs !== void 0 && startedAt !== void 0 && settledAt > deadlineAtMs) live.budgetViolation = { overspent: [...live.budgetViolation?.overspent ?? [], {
+				channel: "deadline",
+				reserved: deadlineAtMs - startedAt,
+				spent: settledAt - startedAt
+			}] };
 			return;
 		} catch (error) {
 			if (error instanceof BudgetReconcileFault) live.budgetViolation = error.budgetViolation;
@@ -29989,7 +30267,9 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 				outRef
 			};
 		}
-		await teardownOnce(opts.shutdown ?? 5e3);
+		const held = executor.heldForContinuation?.();
+		if (held !== void 0 && live.budgetViolation !== void 0) live.held = { continuation: held };
+		else await teardownOnce(opts.shutdown ?? 5e3);
 		return {
 			kind: "done",
 			out: artifact.out,
@@ -30748,6 +31028,7 @@ function withDriverExecutor(base) {
 async function closeNestedScope(scope, controller, reason) {
 	if (!controller.signal.aborted) controller.abort(reason);
 	for (;;) if (await scope.next() === null) break;
+	await releaseHeldEnvironments(scope);
 	const view = scope.view;
 	if (view.inFlight > 0) throw new ValidationError$1(`driverExecutor: nested cleanup left ${view.inFlight} running nodes`);
 }
@@ -31241,7 +31522,7 @@ function describeRejection(error) {
 function createSupervisor() {
 	let attached;
 	async function run(root, task, opts) {
-		const { budget, rootIdentity, rootSegment, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, maxDepth, workerSlots, reservationPolicy, deadlineCheckIn, maxRestarts, withinMs, childSettleGraceMs, teardownConfirmMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
+		const { budget, rootIdentity, rootSegment, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, maxDepth, workerSlots, reservationPolicy, deadlineCheckIn, budgetStopHoldMs, maxRestarts, withinMs, childSettleGraceMs, teardownConfirmMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
 		const input = detachedSnapshot({
 			task,
 			options: {
@@ -31389,6 +31670,7 @@ function createSupervisor() {
 					ownerBudget: opts.budget
 				} : {},
 				...deadlineCheckIn === void 0 ? {} : { deadlineCheckIn },
+				...budgetStopHoldMs === void 0 ? {} : { budgetStopHoldMs },
 				signal: controller.signal,
 				now,
 				hooks: opts.hooks,
@@ -31455,7 +31737,9 @@ function createSupervisor() {
 				clearAcceptedGrace?.();
 				const settleGraceMs = !controller.signal.aborted ? boundedSettleGrace(opts.childSettleGraceMs, rootDeadlineAtMs, now) : 0;
 				try {
-					teardownUnconfirmed = await drainLiveChildren(openScope, controller, settleGraceMs);
+					await drainLiveChildren(openScope, controller, settleGraceMs);
+					await releaseHeldEnvironments(openScope);
+					teardownUnconfirmed = unconfirmedTeardowns(openScope);
 					await settleManagerWork(openScope);
 					if (!persistence.failed && retainedAtSettlement === "release") teardownUnconfirmed = await releaseRetainedEnvironments(openScope);
 					const confirmWindowMs = opts.teardownConfirmMs ?? DEFAULT_TEARDOWN_CONFIRM_MS;
@@ -32027,6 +32311,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { readWorkerInteractiveBinding as $, FileSpawnJournal as $i, persistHarnessTranscript as $n, renderProfileMaterializationIssues as $r, admitContinuationPolicy as $t, bindScopeRetainedOwnerProvider as A, awaitAbortable$1 as Ai, providerAsExecutor as An, runWorktreeHarness as Ar, AUTHORITY_MARKERS as At, scopeRetainedOwnerRestorePoint as B, canonicalStreamEventFromSandboxEvent as Bi, startRetainedRun as Bn, CodexExecutionDiagnosticError as Br, DriverAttemptsExhaustedError as Bt, recordScopeOwnerPause as C, spendFromUsageTotals as Ca, unknownExecutionBindingReceipt as Ci, captureBeforeDestroy as Cn, toOtelAttributes as Cr, workerTraceHeaders as Ct, abandonScopeRetainedOwnerInvocation as D, promptFromAgentTurnInput as Da, projectSandboxOutcome as Di, runBrainLoop as Dn, sanitizeKnowledgeReadinessReport as Dr, createActivityLog as Dt, settledToIteration as E, resolveRedactor as Ea, executableAgentSpecSnapshot as Ei, routerBrain as En, sanitizeAgentRuntimeEvent as Er, DEFAULT_STALL_AFTER_MS as Et, reconcileScopeRetainedOwnerEnvironment as F, unavailablePauseMs as Fi, sandboxSessionTraceSource as Fn, LOCAL_HARNESSES as Fr, isPeerMailEnvelope as Ft, hostDirectoryReader as G, mapSandboxEvent as Gi, createWorkerSlots as Gn, controlProfileMaterialization as Gr, upstreamUnavailableSignal as Gt, scopeRetainedOwnerTurnEnded as H, createSandboxUsageLedger as Hi, retainedCreateMaterial as Hn, AGENT_PROFILE_MATERIALIZATION_AXES as Hr, classifyDriverFailure as Ht, scopeRetainedOwnerContext as I, unavailableSignalOfFailure as Ii, bridgeRuntimeAttachmentsKey as In, harnessInvocation as Ir, peerMailTools as It, coordinationProfileToolPrefix as J, sandboxEventServedBackend as Ji, abortError as Jn, profileMaterializationAxes$1 as Jr, authoredSeatStages as Jt, resolveSpawnResourcePaths as K, mapSandboxToolEvent as Ki, openSlotGroup as Kn, defineProfileMaterializationContract as Kr, SeatChain as Kt, scopeRetainedOwnerJournalRoot as L, TRACE_ROOT_SCHEMA as Li, bridgeStopSignalKey as Ln, harnessSupportsReasoningEffort as Lr, peerMailVerbNames as Lt, noteScopeRetainedOwnerCoordination as M, settlementFailureCause as Mi, resolveAgentEnvironmentProvider as Mn, createWorktree as Mr, PEER_MAIL_WIRE_KEY as Mt, prepareScopeRetainedOwnerSeatSwitch as N, registerRetainedExecutorPreparation as Ni, createPushTraceSource as Nn, removeWorktree as Nr, claimsAuthority as Nt, beginScopeRetainedOwnerDrive as O, promptOptionsFromAgentTurnInput as Oa, readSandboxOutcome as Oi, LEAF_CONTINUATION_TASK as On, sanitizeRuntimeStreamEvent as Or, readWorkerProgress as Ot, prepareScopeRetainedOwnerTask as P, retainedExecutorSeamKey as Pi, decodeToolPart as Pn, DEFAULT_LOCAL_HARNESS as Pr, createPeerMailbox as Pt, attachWorker as Q, FileResultBlobStore as Qi, harnessTranscriptArtifact as Qn, promptResourceProfileMaterialization as Qr, CheckUnavailableError as Qt, scopeRetainedOwnerPriorSpend as R, TRACE_SUMMARY_SCHEMA as Ri, reconnectRetainedRun as Rn, localHarnessExecutable as Rr, isLiveNodeStatus as Rt, recordScopeOwnerMaterialization as S, spendFromUsageEvents as Sa, runtimeOwnedScopeOwnerRuntime as Si, SandboxEvidenceRetentionError as Sn, padTraceId as Sr, workerTraceEnv as St, scopeOwnerExecutorNodeContext as T, defaultRedactorIdentityMaterial as Ta, executableAgentProfileSnapshot as Ti, readPromptOptions as Tn, createRuntimeStreamEventCollector as Tr, taskToPrompt as Tt, SPAWN_RESOURCE_PATH_MAX_BYTES as U, extractLlmCallEvent as Ui, destroyInteractiveEnvironment as Un, assertProfileMaterialization as Ur, runDriverWithRetry as Ut, scopeRetainedOwnerResult as V, createSandboxToolPartState as Vi, startRetainedRunInEnvironment as Vn, terminateProcessTreeAndConfirm as Vr, HarnessTurnFailedError as Vt, environmentReader as W, isSandboxTerminalEvent as Wi, environmentGone as Wn, assertProfileMaterializes as Wr, summarizeDriverAttempts as Wt, runtimeGraphMetadataKey as X, sumSandboxUsage as Xi, runAbortable as Xn, promptModelProfileMaterialization as Xr, CONTINUATIONS_DIR as Xt, providerVisibleProfile as Y, sandboxProgressEvents as Yi, linkAbort as Yn, promptControlProfileMaterialization as Yr, seatExecutionProfile as Yt, interactiveAdmissionSeamKey as Z, decodeHarnessUsage as Zi, captureHarnessTranscript as Zn, promptOnlyProfileMaterialization as Zr, CONTINUATION_FACTS as Zt, deriveNodeExecutionIdentity as _, ReservationWaitRefused as _a, runtimeOwnedDriveHarnessProviderEvidence as _i, defaultSelectWinner as _n, createOtelExporter as _r, createSteerableSandboxSession as _t, collectDelivered as a, replaySpawnTree as aa, worktreeCliProfileMaterialization as ai, expandQuestions as an, runCodeMode as ar, rollingDispatch as at, noteScopeOwnerPlannedExecution as b, meterUsageEvent as ba, runtimeOwnedExecutorProviderEvidence as bi, createSandboxLineage as bn, loopEventToOtelSpan as br, WORKER_TRACE_PROPAGATION as bt, runTree as c, isTraceAnalysisStore as ca, authoredAgentIdentity as ci, verdictFromJudgeScore as cn, ROUTER_PRICE_SOURCE as cr, bindReusableExecutorExecutionId as ct, isDriverSpec as d, contentAddress as da, inheritRuntimeOwnedExecutorAttestation as di, addHarnessUsage as dn, readTraceContextFromEnv as dr, cliWorktreeExecutor as dt, InMemoryResultBlobStore as ea, renderUnsupported as ei, admitFinding as en, readHarnessTranscript as er, reconnectRetainedInteractiveRun as et, withDriverExecutor as f, detachedFrozen as fa, knownExecutionBindingReceipt as fi, createCodexRolloutStoreReader as fn, traceContextToEnv as fr, createExecutor as ft, createScope as g, BudgetReconcileFault as ga, recordRuntimeOwnedDriveHarnessProviderEvidence as gi, createSandboxForSpec as gn, createOpenInferenceFileExporter as gr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as gt, beginScopeOwnerAttempt as h, errMessage as ha, providerAttemptEvidence as hi, TERMINAL_DECISIONS as hn, buildRuntimeEventOtelSpans as hr, createWorktreeCliExecutor as ht, bestDelivered as i, materializeTreeView as ia, validateProfileMaterialization as ii, distillFindings as in, describeCodeModeTools as ir, queueOf as it, consumeScopeRetainedOwnerResult as j, runtimeFailureCause as ji, providerAsSandboxClient as jn, captureWorktreeDiff as jr, DEFAULT_PEER_MAIL_LIMITS as jt, bindScopeRetainedOwnerEnvironmentId as k, providerMessageText as ka, abortError$1 as ki, createAgentEnvironmentProviderRegistry as kn, runSettledCommand as kr, createInbox as kt, driverChild as l, parseWorkerToolTraceArtifact as la, authoredProfileDigest as li, bridgeAdmissionRefusal as ln, createPropagatingTraceEmitter as lr, captureReusableExecutorConfig as lt, assertRecursiveReservationPolicy as m, executorFailure as ma, newExecutionAttemptId as mi, readCodexRolloutSession as mn, buildLoopSpanNodes as mr, snapshotExecutorConfig as mt, createRootHandle as n, insideCursorNamespace as na, sandboxProfileMaterialization as ni, checkVerdictOf as nn, retainHarnessTranscript as nr, startRetainedInteractiveRun as nt, pickBestDelivered as o, WORKER_TOOL_TRACE_SCHEMA_VERSION as oa, attestRuntimeOwnedPendingExecutor as oi, failedItems as on, priceTokens as or, gateOnDeliverable as ot, SUBTREE_RESULT_LIMIT as p, detachedSnapshot as pa, knownMaterializationReceipt as pi, harnessUsageIsEmpty as pn, buildLoopOtelSpans as pr, createExecutorRegistry as pt, coordinationMcpAlias as q, notifySandboxEventObserver as qi, RunCancellationReason as qn, fullProfileMaterialization as qr, SeatChainExhaustedError as qt, createSupervisor as r, loadSpawnForest as ra, unsupportedProfileDimensions as ri, createContinuationKeeper as rn, createCodeModeTools as rr, freeSlots as rt, runFinalizer as s, captureWorkerTraceEvidence as sa, attestRuntimeOwnedScopeOwner as si, passedItems as sn, routerTokenPrice as sr, mapExecutorResult as st, DEFAULT_MAX_DEPTH as t, InMemorySpawnJournal as ta, sandboxActProfileMaterialization as ti, bestComposite as tn, resolveHarnessTranscriptCapture as tr, recoverRetainedInteractiveRun as tt, driverExecutorFactory as u, workerTraceAnalysisStore as ua, finalizeRuntimeOwnedPendingExecutor as ui, bridgeModelRouteRefusal as un, mergeTraceEnv as ur, cliInPlaceExecutor as ut, meterRuntimeOwnedAccounting as v, assertValidBudget as va, runtimeOwnedExecutorExecutionBinding as vi, isTerminalDecision as vn, flatOtelSpan as vr, createRouterTranscript as vt, restoreScopeOwnerAcceptedExecution as w, defaultRedactor as wa, unknownMaterializationReceipt as wi, assertBoxlessPromptOptions as wn, createRuntimeEventCollector as wr, workerTraceSeamKey as wt, recordScopeOwnerDriverAttempt as x, newUsageTotals as xa, runtimeOwnedPendingExecutorMaterialization as xi, acquireSandbox as xn, padSpanId as xr, readWorkerTraceContext as xt, meterRuntimeOwnedProviderAttempt as y, createBudgetPool as ya, runtimeOwnedExecutorMaterialization as yi, runAgentRounds as yn, generateSpanId as yr, createInPlaceCliExecutor as yt, scopeRetainedOwnerResourceReader as z, assertSandboxServedModel as zi, recoverRetainedRun as zn, parseCodexTokenUsage as zr, isTerminalNodeStatus as zt };
+export { attachWorker as $, decodeHarnessUsage as $i, captureHarnessTranscript as $n, promptOnlyProfileMaterialization as $r, CONTINUATION_FACTS as $t, bindScopeRetainedOwnerEnvironmentId as A, promptOptionsFromAgentTurnInput as Aa, readSandboxOutcome as Ai, LEAF_CONTINUATION_TASK as An, sanitizeRuntimeStreamEvent as Ar, createInbox as At, scopeRetainedOwnerResourceReader as B, TRACE_SUMMARY_SCHEMA as Bi, reconnectRetainedRun as Bn, localHarnessExecutable as Br, isTerminalNodeStatus as Bt, recordScopeOwnerMaterialization as C, newUsageTotals as Ca, runtimeOwnedPendingExecutorMaterialization as Ci, acquireSandbox as Cn, padSpanId as Cr, workerTraceEnv as Ct, settledToIteration as D, defaultRedactorIdentityMaterial as Da, executableAgentProfileSnapshot as Di, readPromptOptions as Dn, createRuntimeStreamEventCollector as Dr, DEFAULT_STALL_AFTER_MS as Dt, scopeOwnerExecutorNodeContext as E, defaultRedactor as Ea, unknownMaterializationReceipt as Ei, assertBoxlessPromptOptions as En, createRuntimeEventCollector as Er, taskToPrompt as Et, prepareScopeRetainedOwnerTask as F, registerRetainedExecutorPreparation as Fi, createPushTraceSource as Fn, removeWorktree as Fr, createPeerMailbox as Ft, environmentReader as G, extractLlmCallEvent as Gi, destroyInteractiveEnvironment as Gn, assertProfileMaterialization as Gr, summarizeDriverAttempts as Gt, scopeRetainedOwnerResult as H, canonicalStreamEventFromSandboxEvent as Hi, startRetainedRun as Hn, CodexExecutionDiagnosticError as Hr, HarnessTurnFailedError as Ht, reconcileScopeRetainedOwnerEnvironment as I, retainedExecutorSeamKey as Ii, decodeToolPart as In, DEFAULT_LOCAL_HARNESS as Ir, isPeerMailEnvelope as It, coordinationMcpAlias as J, mapSandboxToolEvent as Ji, openSlotGroup as Jn, defineProfileMaterializationContract as Jr, SeatChainExhaustedError as Jt, hostDirectoryReader as K, isSandboxTerminalEvent as Ki, environmentGone as Kn, assertProfileMaterializes as Kr, upstreamUnavailableSignal as Kt, scopeRetainedOwnerContext as L, unavailablePauseMs as Li, sandboxSessionTraceSource as Ln, LOCAL_HARNESSES as Lr, peerMailTools as Lt, consumeScopeRetainedOwnerResult as M, awaitAbortable$1 as Mi, providerAsExecutor as Mn, runWorktreeHarness as Mr, DEFAULT_PEER_MAIL_LIMITS as Mt, noteScopeRetainedOwnerCoordination as N, runtimeFailureCause as Ni, providerAsSandboxClient as Nn, captureWorktreeDiff as Nr, PEER_MAIL_WIRE_KEY as Nt, abandonScopeRetainedOwnerInvocation as O, resolveRedactor as Oa, executableAgentSpecSnapshot as Oi, routerBrain as On, sanitizeAgentRuntimeEvent as Or, createActivityLog as Ot, prepareScopeRetainedOwnerSeatSwitch as P, settlementFailureCause as Pi, resolveAgentEnvironmentProvider as Pn, createWorktree as Pr, claimsAuthority as Pt, interactiveAdmissionSeamKey as Q, sumSandboxUsage as Qi, runAbortable as Qn, promptModelProfileMaterialization as Qr, CONTINUATIONS_DIR as Qt, scopeRetainedOwnerJournalRoot as R, unavailableSignalOfFailure as Ri, bridgeRuntimeAttachmentsKey as Rn, harnessInvocation as Rr, peerMailVerbNames as Rt, recordScopeOwnerDriverAttempt as S, meterUsageEvent as Sa, runtimeOwnedExecutorProviderEvidence as Si, createSandboxLineage as Sn, loopEventToOtelSpan as Sr, readWorkerTraceContext as St, restoreScopeOwnerAcceptedExecution as T, spendFromUsageTotals as Ta, unknownExecutionBindingReceipt as Ti, captureBeforeDestroy as Tn, toOtelAttributes as Tr, workerTraceSeamKey as Tt, scopeRetainedOwnerTurnEnded as U, createSandboxToolPartState as Ui, startRetainedRunInEnvironment as Un, terminateProcessTreeAndConfirm as Ur, classifyDriverFailure as Ut, scopeRetainedOwnerRestorePoint as V, assertSandboxServedModel as Vi, recoverRetainedRun as Vn, parseCodexTokenUsage as Vr, DriverAttemptsExhaustedError as Vt, SPAWN_RESOURCE_PATH_MAX_BYTES as W, createSandboxUsageLedger as Wi, retainedCreateMaterial as Wn, AGENT_PROFILE_MATERIALIZATION_AXES as Wr, runDriverWithRetry as Wt, providerVisibleProfile as X, sandboxEventServedBackend as Xi, abortError as Xn, profileMaterializationAxes$1 as Xr, seatExecutionProfile as Xt, coordinationProfileToolPrefix as Y, notifySandboxEventObserver as Yi, RunCancellationReason as Yn, fullProfileMaterialization as Yr, authoredSeatStages as Yt, runtimeGraphMetadataKey as Z, sandboxProgressEvents as Zi, linkAbort as Zn, promptControlProfileMaterialization as Zr, subscriptionUsageLimitSignal as Zt, createScope as _, errMessage as _a, providerAttemptEvidence as _i, TERMINAL_DECISIONS as _n, buildRuntimeEventOtelSpans as _r, DEFAULT_SANDBOX_STEERING_MAX_TURNS as _t, collectDelivered as a, loadSpawnForest as aa, unsupportedProfileDimensions as ai, createContinuationKeeper as an, createCodeModeTools as ar, queueOf as at, meterRuntimeOwnedProviderAttempt as b, assertValidBudget as ba, runtimeOwnedExecutorExecutionBinding as bi, isTerminalDecision as bn, flatOtelSpan as br, createInPlaceCliExecutor as bt, runTree as c, WORKER_TOOL_TRACE_SCHEMA_VERSION as ca, attestRuntimeOwnedPendingExecutor as ci, failedItems as cn, priceTokens as cr, mapExecutorResult as ct, isDriverSpec as d, parseWorkerToolTraceArtifact as da, authoredProfileDigest as di, bridgeAdmissionRefusal as dn, createPropagatingTraceEmitter as dr, cliInPlaceExecutor as dt, FileResultBlobStore as ea, promptResourceProfileMaterialization as ei, CheckUnavailableError as en, harnessTranscriptArtifact as er, readWorkerInteractiveBinding as et, withDriverExecutor as f, workerTraceAnalysisStore as fa, finalizeRuntimeOwnedPendingExecutor as fi, bridgeModelRouteRefusal as fn, mergeTraceEnv as fr, cliWorktreeExecutor as ft, beginScopeOwnerAttempt as g, executorFailure as ga, newExecutionAttemptId as gi, readCodexRolloutSession as gn, buildLoopSpanNodes as gr, createWorktreeCliExecutor as gt, assertRecursiveReservationPolicy as h, detachedSnapshot as ha, knownMaterializationReceipt as hi, harnessUsageIsEmpty as hn, buildLoopOtelSpans as hr, snapshotExecutorConfig as ht, bestDelivered as i, insideCursorNamespace as ia, sandboxProfileMaterialization as ii, checkVerdictOf as in, retainHarnessTranscript as ir, freeSlots as it, bindScopeRetainedOwnerProvider as j, providerMessageText as ja, abortError$1 as ji, createAgentEnvironmentProviderRegistry as jn, runSettledCommand as jr, AUTHORITY_MARKERS as jt, beginScopeRetainedOwnerDrive as k, promptFromAgentTurnInput as ka, projectSandboxOutcome as ki, runBrainLoop as kn, sanitizeKnowledgeReadinessReport as kr, readWorkerProgress as kt, driverChild as l, captureWorkerTraceEvidence as la, attestRuntimeOwnedScopeOwner as li, passedItems as ln, routerTokenPrice as lr, bindReusableExecutorExecutionId as lt, SUBTREE_RESULT_LIMIT as m, detachedFrozen as ma, knownExecutionBindingReceipt as mi, createCodexRolloutStoreReader as mn, traceContextToEnv as mr, createExecutorRegistry as mt, createRootHandle as n, InMemoryResultBlobStore as na, renderUnsupported as ni, admitFinding as nn, readHarnessTranscript as nr, recoverRetainedInteractiveRun as nt, pickBestDelivered as o, materializeTreeView as oa, validateProfileMaterialization as oi, distillFindings as on, describeCodeModeTools as or, rollingDispatch as ot, DEFAULT_BUDGET_STOP_HOLD_MS as p, contentAddress as pa, inheritRuntimeOwnedExecutorAttestation as pi, addHarnessUsage as pn, readTraceContextFromEnv as pr, createExecutor as pt, resolveSpawnResourcePaths as q, mapSandboxEvent as qi, createWorkerSlots as qn, controlProfileMaterialization as qr, SeatChain as qt, createSupervisor as r, InMemorySpawnJournal as ra, sandboxActProfileMaterialization as ri, bestComposite as rn, resolveHarnessTranscriptCapture as rr, startRetainedInteractiveRun as rt, runFinalizer as s, replaySpawnTree as sa, worktreeCliProfileMaterialization as si, expandQuestions as sn, runCodeMode as sr, gateOnDeliverable as st, DEFAULT_MAX_DEPTH as t, FileSpawnJournal as ta, renderProfileMaterializationIssues as ti, admitContinuationPolicy as tn, persistHarnessTranscript as tr, reconnectRetainedInteractiveRun as tt, driverExecutorFactory as u, isTraceAnalysisStore as ua, authoredAgentIdentity as ui, verdictFromJudgeScore as un, ROUTER_PRICE_SOURCE as ur, captureReusableExecutorConfig as ut, deriveNodeExecutionIdentity as v, BudgetReconcileFault as va, recordRuntimeOwnedDriveHarnessProviderEvidence as vi, createSandboxForSpec as vn, createOpenInferenceFileExporter as vr, createSteerableSandboxSession as vt, recordScopeOwnerPause as w, spendFromUsageEvents as wa, runtimeOwnedScopeOwnerRuntime as wi, SandboxEvidenceRetentionError as wn, padTraceId as wr, workerTraceHeaders as wt, noteScopeOwnerPlannedExecution as x, createBudgetPool as xa, runtimeOwnedExecutorMaterialization as xi, runAgentRounds as xn, generateSpanId as xr, WORKER_TRACE_PROPAGATION as xt, meterRuntimeOwnedAccounting as y, ReservationWaitRefused as ya, runtimeOwnedDriveHarnessProviderEvidence as yi, defaultSelectWinner as yn, createOtelExporter as yr, createRouterTranscript as yt, scopeRetainedOwnerPriorSpend as z, TRACE_ROOT_SCHEMA as zi, bridgeStopSignalKey as zn, harnessSupportsReasoningEffort as zr, isLiveNodeStatus as zt };
 
-//# sourceMappingURL=supervisor-B4sM2Xu2.js.map
+//# sourceMappingURL=supervisor-B-bkXttM.js.map