@tangle-network/agent-runtime 0.334.0 → 0.336.0

package/dist/{supervisor-BObk9STz.js → supervisor-B-bkXttM.js}

@@ -1,6 +1,6 @@
 import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as isAsyncIterable$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as chargedTokens, J as deleteBoxSafe, K as cloneSpend, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as teardownExecutor, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, c as verifyAgentCandidateWorkspaceTree, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, f as verifyAgentCandidateWorkspaceArchive, ft as zeroTokenUsage, gt as withBudgetResources, ht as resourceTelemetry, it as roundBoxMinutes, j as verifyWorkspaceSnapshotArtifacts, kt as teardownSurfaces, lt as unmeteredSpend, mt as assertResources, nt as randomSuffix, o as readAgentCandidateWorkspaceArtifactFiles, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, s as verifyAgentCandidateWorkspaceArtifacts, st as throwAbort, t as assertSandboxProfileCompatibility, tt as promptCacheTokenClasses, ut as withTimeout, vt as CHILD_DEADLINE_REASON, wt as boundedChildDeadlineAt } from "./sandbox-profile-compat-CVgQWb7T.js";
+import { $ as isAsyncIterable$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as chargedTokens, J as deleteBoxSafe, K as cloneSpend, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as teardownExecutor, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, c as verifyAgentCandidateWorkspaceTree, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, f as verifyAgentCandidateWorkspaceArchive, ft as zeroTokenUsage, gt as withBudgetResources, ht as resourceTelemetry, it as roundBoxMinutes, j as verifyWorkspaceSnapshotArtifacts, kt as teardownSurfaces, lt as unmeteredSpend, mt as assertResources, nt as randomSuffix, o as readAgentCandidateWorkspaceArtifactFiles, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, s as verifyAgentCandidateWorkspaceArtifacts, st as throwAbort, t as assertSandboxProfileCompatibility, tt as promptCacheTokenClasses, ut as withTimeout, vt as CHILD_DEADLINE_REASON, wt as boundedChildDeadlineAt } from "./sandbox-profile-compat-D_ZOL80S.js";
 import { runTaskQueue } from "./task-queue.js";
 import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-DBv31uPi.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
@@ -3890,6 +3890,9 @@ var RetainedExecutionPendingError = class extends Error {
 		if (credentialRefused) credentialAdmissionRefusals.add(this);
 	}
 };
+/** The instruction a keyed continuation runs in the held session: the node's task is unchanged,
+*  and its conversation and workspace are where the budget stop left them. */
+const BUDGET_CONTINUATION_TASK = "Your previous turn reached its budget and stopped. Your manager gave you more budget to continue the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over.";
 /** The execution id of a leaf's later invocation, derived from its `execution-input` sequence so
 *  a recovery derives the same one. A first invocation keeps the node id. */
 function leafContinuationExecutionId(nodeId, inputSeq) {
@@ -5309,7 +5312,8 @@ const HARNESS_INVOCATIONS = {
 			"workspace-write",
 			"-c",
 			"approval_policy=\"never\""
-		]
+		],
+		fullAccessArgs: () => ["--dangerously-bypass-approvals-and-sandbox"]
 	},
 	opencode: {
 		command: "opencode",
@@ -5399,7 +5403,10 @@ const CODEX_REPRODUCIBLE_ARGS = [
 function buildHarnessArgs(harness, taskPrompt, options = {}) {
 	const invocation = HARNESS_INVOCATIONS[harness];
 	const args = invocation.buildArgs(taskPrompt);
-	if (options.dangerouslySkipPermissions && !options.codexReproducible) args.push(...invocation.permissionBypassArgs?.() ?? []);
+	if (options.dangerouslySkipPermissions && !options.codexReproducible) {
+		const bypass = options.fullAccess ? invocation.fullAccessArgs ?? invocation.permissionBypassArgs : invocation.permissionBypassArgs;
+		args.push(...bypass?.() ?? []);
+	}
 	if (options.codexReproducible) {
 		if (harness !== "codex") throw new Error("harnessInvocation: codexReproducible requires the Codex harness");
 		args.push(...CODEX_REPRODUCIBLE_ARGS);
@@ -6660,6 +6667,8 @@ async function runInPlaceHarness(opts) {
 			applied,
 			resourceInstructions,
 			dangerouslySkipPermissions: true,
+			fullAccess: true,
+			...opts.env ? { env: opts.env } : {},
 			...opts.harnessTimeoutMs !== void 0 ? { harnessTimeoutMs: opts.harnessTimeoutMs } : {},
 			...opts.signal ? { signal: opts.signal } : {},
 			runHarness,
@@ -6690,6 +6699,13 @@ function applyProfilePlan(plan, workspacePath, context) {
 	if (applied.unsupported.length > 0) throw new Error(`${context}: applied profile unexpectedly retained unsupported rows`);
 	return applied;
 }
+/** `process.env` with the caller's per-run overrides applied; `undefined` removes a variable. */
+function callerEnv(overrides) {
+	const env = { ...process.env };
+	for (const [name, value] of Object.entries(overrides ?? {})) if (value === void 0) delete env[name];
+	else env[name] = value;
+	return env;
+}
 /**
 * The ONE profile-to-process step both placements share: §1.5 prompt/model delivery through
 * `harnessInvocation`, the materializer's flags and environment, and the `runLocalHarness` spawn
@@ -6700,6 +6716,7 @@ async function spawnProfiledHarness(args) {
 	const invocationProfile = profileWithResourceInstructions(args.profile, args.resourceInstructions);
 	const { command, args: invocationArgs } = harnessInvocation(args.harness, invocationProfile, args.taskPrompt, {
 		dangerouslySkipPermissions: args.dangerouslySkipPermissions,
+		...args.fullAccess ? { fullAccess: true } : {},
 		...args.codexReproducible ? { codexReproducible: true } : {}
 	});
 	const harnessResult = await args.runHarness({
@@ -6711,7 +6728,7 @@ async function spawnProfiledHarness(args) {
 			args: [...invocationArgs, ...args.applied.flags.map(publicPlanString)]
 		},
 		env: {
-			...process.env,
+			...callerEnv(args.env),
 			...resolvePublicPlanEnv(args.applied.env)
 		},
 		...args.codexReproducible ? { codexReproducible: true } : {},
@@ -12350,6 +12367,7 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		else managerStop.addEventListener("abort", cancel, { once: true });
 	};
 	let destroyed = false;
+	let holdingForContinuation = false;
 	let workspaceEnvironmentId;
 	let workspaceSnapshot;
 	let workspaceProvenance;
@@ -12912,7 +12930,10 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 						complete: workspaceCoverageComplete,
 						incompleteReason: workspaceIncompleteReason
 					}),
-					destroyEnvironment
+					destroyEnvironment,
+					onHeld: () => {
+						holdingForContinuation = true;
+					}
 				});
 				const refusal = ended.unavailable;
 				const continueInvocation = invocation.retention?.continueInvocation;
@@ -12977,6 +12998,10 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 		},
 		async teardown(_grace) {
 			controller.abort();
+			if (holdingForContinuation) return {
+				destroyed: false,
+				detail: "environment held for a keyed continuation after a budget stop"
+			};
 			if (pending && cancelledExplicitly()) stopNativeExecution();
 			if (options.workspaceRetention !== void 0 && workspaceRunActive) return {
 				destroyed: false,
@@ -12997,9 +13022,27 @@ function createProviderExecutor(provider, profile, ctx, options, placement) {
 			return [{
 				provider: provider.name,
 				environmentId,
-				...preserved ? { keptFor: "evidence" } : {}
+				...preserved ? { keptFor: "evidence" } : holdingForContinuation ? { keptFor: "continuation" } : {}
 			}];
 		},
+		heldForContinuation() {
+			const held = environment;
+			if (!holdingForContinuation || held === void 0 || destroyed) return void 0;
+			return {
+				provider: provider.name,
+				environmentId: held.id,
+				release: async (signal) => {
+					if (!holdingForContinuation) return { destroyed: true };
+					holdingForContinuation = false;
+					return await destroyEnvironment(signal);
+				},
+				handOver: () => {
+					holdingForContinuation = false;
+					environment = void 0;
+					destroyed = true;
+				}
+			};
+		},
 		releaseRetained: withoutRunningHarness(async (signal) => {
 			controller.abort();
 			if (!pending) return [];
@@ -13384,7 +13427,9 @@ async function* streamProviderExecutor(args) {
 	} finally {
 		await stopEndedHarness();
 		if (!finalCopyTaken) await args.finishNativeMirror(environment, failed ? "failed" : settled !== void 0 ? "settled" : "interrupted");
-		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && !(unavailable !== void 0 && !failed) && (args.options.destroyOnSettle ?? true)) {
+		const held = source.retained && settled !== void 0 && !failed && unavailable === void 0 && args.retention?.preserveEnvironment !== true && args.retention?.holdOnSettle?.(settled.spent) === true;
+		if (held) args.onHeld();
+		if ((!source.retained || settled !== void 0 && !failed) && !(source.retained && args.retention?.preserveEnvironment) && !(unavailable !== void 0 && !failed) && !held && (args.options.destroyOnSettle ?? true)) {
 			const cleanup = await args.destroyEnvironment();
 			if (!cleanup.destroyed) {
 				const error = new Error(cleanup.detail ?? "provider environment teardown was not confirmed");
@@ -21839,6 +21884,7 @@ function createInPlaceCliExecutor(options) {
 				taskPrompt,
 				...options.harnessTimeoutMs !== void 0 ? { harnessTimeoutMs: options.harnessTimeoutMs } : {},
 				...linked ? { signal: linked } : {},
+				...options.env ? { env: options.env } : {},
 				...options.runHarness ? { runHarness: options.runHarness } : {}
 			});
 			const spent = {
@@ -25822,7 +25868,7 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 			if (!prepared) continue;
 		}
 		const priorMaterialization = [...owned].reverse().find((event) => event.kind === "materialized" || event.kind === "seat-materialized")?.receipt;
-		const continuation = latestInput !== void 0 && inputs.length > 1 && node.ownedTreeRoot === void 0 ? await leafContinuation(node, owned, latestInput, opts) : void 0;
+		const continuation = latestInput !== void 0 && inputs.length > 1 && node.ownedTreeRoot === void 0 ? await leafContinuation(node, owned, latestInput, opts) : latestInput !== void 0 && node.continues !== void 0 && admissions.length === 0 && node.ownedTreeRoot === void 0 ? heldContinuation(node, events, latestInput) : void 0;
 		recoveries.push({
 			...detachedSnapshot({
 				spawned: node,
@@ -25888,6 +25934,23 @@ async function leafContinuation(node, owned, latestInput, opts) {
 		priorSpent: priorResult.spent
 	};
 }
+/**
+* A node that continues a budget-stopped node's held environment, recovered before its own first
+* admission: it runs in the environment and session of its predecessor's last environment
+* admission, so the recovery neither creates a second environment nor leaves the held one behind.
+*/
+function heldContinuation(node, events, latestInput) {
+	const continues = node.continues;
+	const priorSession = [...events].reverse().flatMap((event) => event.id === continues.ofWorker && event.kind === "execution-admitted" && event.admission.phase === "environment" ? [event.admission] : [])[0];
+	if (priorSession === void 0 || priorSession.environmentId !== continues.environmentId) throw new RuntimeRunStateError(`cannot recover '${node.id}': '${continues.ofWorker}' has no admission for the environment it continues`);
+	return {
+		task: BUDGET_CONTINUATION_TASK,
+		inputSeq: latestInput.seq,
+		executionId: node.id,
+		priorSession,
+		priorSpent: zeroSpend()
+	};
+}
 async function assertRecordedResult(node, result, events, opts) {
 	const before = events.slice(0, events.indexOf(result));
 	const receipt = [...before].reverse().find((event) => event.kind === "materialized" || event.kind === "seat-materialized")?.receipt;
@@ -28005,6 +28068,7 @@ const pauseRecorders = /* @__PURE__ */ new WeakMap();
 const driverAttemptRecorders = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
 const retainedReleasers = /* @__PURE__ */ new WeakMap();
+const heldReleasers = /* @__PURE__ */ new WeakMap();
 const childDrains = /* @__PURE__ */ new WeakMap();
 const retainedSlotClosers = /* @__PURE__ */ new WeakMap();
 const teardownRetriers = /* @__PURE__ */ new WeakMap();
@@ -28071,6 +28135,17 @@ function unconfirmedTeardownOf(child, releasing) {
 		...child.teardownDetail === void 0 ? {} : { detail: child.teardownDetail }
 	});
 }
+/** Ten minutes: a manager that is alive decides within a turn or two; one that crashed, or a host
+*  that restarted, must not leave a paid environment running until a retire pass finds it. */
+const DEFAULT_BUDGET_STOP_HOLD_MS = 6e5;
+/**
+* @internal Release every environment this scope's settled children still hold after a budget
+* stop, at the join barrier: no later spawn of this scope can continue them. Each release journals
+* an `environment-teardown` with `heldRelease: 'scope-join'`. Never rejects.
+*/
+async function releaseHeldEnvironments(scope) {
+	await heldReleasers.get(scope)?.();
+}
 /** @internal Admit original children before the parent acts; do not wait for their results. */
 async function startScopeRecoveries(scope) {
 	const start = recoveryStarters.get(scope);
@@ -28259,6 +28334,7 @@ function makeNestedScopeSeam(args, workerSlots, childSlot, childNodeId, childBud
 				ownerBudget: nestedBudget
 			} : {},
 			...args.deadlineCheckIn === void 0 ? {} : { deadlineCheckIn: args.deadlineCheckIn },
+			...args.budgetStopHoldMs === void 0 ? {} : { budgetStopHoldMs: args.budgetStopHoldMs },
 			signal,
 			...restored ? { resumeFrom: restored.resumeFrom } : {},
 			...args.now ? { now: args.now } : {},
@@ -28377,6 +28453,7 @@ function createScope(args) {
 		const task = detachedSnapshot(rawTask, "scope.spawn task");
 		const opts = detachedSnapshot(rawOpts, "scope.spawn options");
 		let prior;
+		let continuing;
 		let prepared;
 		const prepare = () => {
 			const agent = typeof agentOrFactory === "function" ? agentOrFactory() : agentOrFactory;
@@ -28410,14 +28487,28 @@ function createScope(args) {
 				ok: false,
 				reason: "duplicate-key"
 			};
-			if (existing?.state === "done") return {
-				ok: true,
-				handle: existing.settled.handle,
-				prior: {
-					state: "completed",
-					settled: existing.settled
-				}
-			};
+			if (existing?.state === "done") {
+				const from = children.get(existing.id);
+				const admission = opts.continueHeld === true && existing.settled.budgetViolation !== void 0 ? from?.held !== void 0 ? from.readEnvironmentAdmission?.() : void 0 : void 0;
+				if (from?.held === void 0 || admission === void 0) return {
+					ok: true,
+					handle: existing.settled.handle,
+					prior: {
+						state: "completed",
+						settled: existing.settled
+					}
+				};
+				continuing = {
+					from,
+					admission,
+					held: from.held
+				};
+				prior = {
+					state: "continued",
+					priorId: existing.id,
+					environmentId: from.held.continuation.environmentId
+				};
+			}
 			if (existing?.state === "down") prior = {
 				state: "retried",
 				priorId: existing.id,
@@ -28479,6 +28570,7 @@ function createScope(args) {
 		try {
 			const ordinal = recovery?.spawned.seq ?? spawnOrdinal++;
 			const id = recovery?.spawned.id ?? `${args.parentId}:s${ordinal}`;
+			const successorOf = opts.successorOf ?? continuing?.from.id;
 			args.pool.attribute(reservation.ticket, {
 				childId: id,
 				stage: "admitted"
@@ -28590,6 +28682,8 @@ function createScope(args) {
 					at: new Date(now()).toISOString()
 				});
 			});
+			const holdMs = args.budgetStopHoldMs ?? 6e5;
+			const holdOnSettle = opts.key !== void 0 && holdMs > 0 ? (spent) => overBudget(opts.budget, spent) || childDeadlineAtMs !== void 0 && now() > childDeadlineAtMs : void 0;
 			const retainedContext = (continuing) => ({
 				...continuing === void 0 ? {} : {
 					executionId: continuing.executionId,
@@ -28597,6 +28691,7 @@ function createScope(args) {
 					...continuing.priorSpent === void 0 ? {} : { priorSpent: continuing.priorSpent }
 				},
 				admissions,
+				...holdOnSettle === void 0 ? {} : { holdOnSettle },
 				...markRecoveryReady && continuing === void 0 ? { onReady: markRecoveryReady } : {},
 				onAdmission,
 				onResult,
@@ -28654,11 +28749,14 @@ function createScope(args) {
 				},
 				seams: {
 					...args.seams,
-					[retainedExecutorSeamKey]: retainedContext(recovery?.continuation === void 0 ? void 0 : {
+					[retainedExecutorSeamKey]: retainedContext(recovery?.continuation !== void 0 ? {
 						executionId: recovery.continuation.executionId,
 						priorSession: recovery.continuation.priorSession,
 						priorSpent: recovery.continuation.priorSpent
-					}),
+					} : continuing !== void 0 ? {
+						executionId: id,
+						priorSession: continuing.admission
+					} : void 0),
 					[nestedScopeSeamKey]: makeNestedScopeSeam(args, workerSlots, permit, id, opts.budget, childDeadlineAtMs, deferredOwner),
 					...workerTrace ? { [workerTraceSeamKey]: workerTrace } : {},
 					...interactiveBindingDir ? { [interactiveAdmissionSeamKey]: (admission) => Promise.resolve(writeWorkerInteractiveAdmission(interactiveBindingDir, id, admission, now)).then(() => void 0) } : {}
@@ -28730,7 +28828,11 @@ function createScope(args) {
 				...nestedTeardownScopes.has(executor) ? { readNestedScope: nestedTeardownScopes.get(executor) } : {},
 				...executor.harnessTranscript ? { readTranscriptAtRelease: () => persistHarnessTranscript(readHarnessTranscript(executor), args.blobs) } : {},
 				teardownAttempts: 0,
-				abortChild: (reason) => controller.abort(reason)
+				abortChild: (reason) => controller.abort(reason),
+				readEnvironmentAdmission: () => {
+					const admission = admissions.find((record) => record.phase === "environment");
+					return admission?.phase === "environment" ? admission : void 0;
+				}
 			};
 			const recordCancellation = () => {
 				if (!live.executorDone && live.acceptedResult === void 0 && executor.resultAccepted?.() !== true && controller.signal.reason instanceof RunCancellationReason) live.cancellationReason = controller.signal.reason;
@@ -28753,7 +28855,11 @@ function createScope(args) {
 					label: opts.label,
 					...opts.key !== void 0 ? { key: opts.key } : {},
 					...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
-					...opts.successorOf === void 0 ? {} : { successorOf: opts.successorOf },
+					...successorOf === void 0 ? {} : { successorOf },
+					...continuing === void 0 ? {} : { continues: {
+						ofWorker: continuing.from.id,
+						environmentId: continuing.admission.environmentId
+					} },
 					budget: opts.budget,
 					runtime: executor.runtime,
 					...ownedTreeRoot === void 0 ? {} : { ownedTreeRoot },
@@ -28901,7 +29007,7 @@ function createScope(args) {
 					label: opts.label,
 					...opts.assignmentId === void 0 ? {} : { assignmentId: opts.assignmentId },
 					...opts.key === void 0 ? {} : { key: opts.key },
-					...opts.successorOf === void 0 ? {} : { successorOf: opts.successorOf },
+					...successorOf === void 0 ? {} : { successorOf },
 					runtime: executor.runtime,
 					...identity ? { identity } : {},
 					agent: authoredAgentIdentity(spec.profile, identity?.profileDigest),
@@ -28911,7 +29017,13 @@ function createScope(args) {
 					startedAt
 				}
 			}, { signal: args.signal });
-			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? task, opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
+			if (continuing !== void 0) {
+				continuing.held.clearCeiling?.();
+				continuing.held.continuation.handOver();
+				continuing.from.held = void 0;
+				continuing.from.cleanupConfirmed = true;
+			}
+			const childRun = runChild(live, executor, controller, recovery?.continuation?.task ?? (continuing === void 0 ? task : "Your previous turn reached its budget and stopped. Your manager gave you more budget to continue the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over."), opts, args.pool, reservation.ticket, args.blobs, now, args.journal, args.root, () => progressSeq++, materializationCommitted, {
 				complete: async () => pendingEvidence?.complete(),
 				fail: async () => pendingEvidence?.fail()
 			}, childDeadlineAtMs, recovery !== void 0, closeRetainedWrites, budgetGranted, permit.ready, recovery?.continuation?.priorSpent, startedAt);
@@ -28942,6 +29054,11 @@ function createScope(args) {
 					};
 				}
 				live.resolved = resolution;
+				if (live.held !== void 0) if (resolution.kind === "done") {
+					const timer = setTimeout(() => void releaseHeld(live, "hold-ceiling"), holdMs);
+					timer.unref?.();
+					live.held.clearCeiling = () => clearTimeout(timer);
+				} else await releaseHeld(live, "scope-join");
 				return resolution;
 			}).finally(() => {
 				permit.release();
@@ -28963,6 +29080,32 @@ function createScope(args) {
 			throw err;
 		}
 	}
+	const heldReleases = /* @__PURE__ */ new Set();
+	/** Release the environment a settled child holds after a budget stop, once, and journal why. */
+	function releaseHeld(child, reason) {
+		const held = child.held;
+		if (held === void 0) return Promise.resolve(false);
+		child.held = void 0;
+		held.clearCeiling?.();
+		const release = (async () => {
+			const answer = await held.continuation.release().catch((error) => ({
+				destroyed: false,
+				detail: errMessage(error)
+			}));
+			if (answer.destroyed) child.cleanupConfirmed = true;
+			else if (answer.detail !== void 0) child.teardownDetail = answer.detail;
+			await appendEnvironmentTeardown(args.journal, args.root, child.id, {
+				provider: held.continuation.provider,
+				environmentId: held.continuation.environmentId,
+				destroyed: answer.destroyed,
+				...answer.detail === void 0 ? {} : { detail: answer.detail }
+			}, new Date(now()).toISOString(), reason).catch(() => void 0);
+			return true;
+		})();
+		heldReleases.add(release);
+		release.finally(() => heldReleases.delete(release));
+		return release;
+	}
 	async function commitSettlement(child, settlement, seq) {
 		const pending = finalizeSettlement(child, settlement, seq, args, now).then((delivered) => {
 			if (child.key !== void 0) recordKeyedSettlement(child.key, delivered);
@@ -29145,6 +29288,10 @@ function createScope(args) {
 		next,
 		nextResolved,
 		send,
+		releaseHeld: (nodeId, reason) => {
+			const child = children.get(nodeId);
+			return child === void 0 ? Promise.resolve(false) : releaseHeld(child, reason);
+		},
 		progress,
 		observeTree: () => {
 			const view = makeTreeView(args.parentId, children);
@@ -29209,6 +29356,10 @@ function createScope(args) {
 	admissionSeals.set(scope, () => {
 		admissionClosed = true;
 	});
+	heldReleasers.set(scope, async () => {
+		await Promise.all([...children.values()].map((child) => releaseHeld(child, "scope-join")));
+		await Promise.allSettled([...heldReleases]);
+	});
 	subtreeReaders.set(scope, () => summarizeTeam(children.values()));
 	liveTeamReaders.set(scope, () => readLiveTeam(children.values(), ownerTurns, ownerLastTurnAt));
 	runtimeOwnedProviderMeters.set(scope, async (spend, providerModel, detail, accountingOnly, alreadySpent) => meterInternal(spend, detail, providerModel, accountingOnly, true, alreadySpent));
@@ -29799,7 +29950,7 @@ async function appendReconciledFloor(journal, root, subject, settlement, settled
 }
 /** A release receipt has the same per-child sequence discipline: outside the cursor namespace and
 *  monotonic per node, so a run released in two processes keeps its receipts ordered. */
-async function appendEnvironmentTeardown(journal, root, id, receipt, at) {
+async function appendEnvironmentTeardown(journal, root, id, receipt, at, heldRelease) {
 	const seq = await nextPerNodeSeq(journal, root, "environment-teardown", id);
 	await journal.appendEvent(root, {
 		kind: "environment-teardown",
@@ -29808,10 +29959,15 @@ async function appendEnvironmentTeardown(journal, root, id, receipt, at) {
 		environmentId: receipt.environmentId,
 		destroyed: receipt.destroyed,
 		...receipt.detail === void 0 ? {} : { detail: receipt.detail },
+		...heldRelease === void 0 ? {} : { heldRelease },
 		seq,
 		at
 	});
 }
+/** Whether a settled spend exceeds the budget it was given, by the channels the pool reconciles. */
+function overBudget(budget, spent) {
+	return chargedTokens(spent.tokens) > budget.maxTokens || spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
+}
 async function nextPerNodeSeq(journal, root, kind, id) {
 	return (await journal.loadTree(root) ?? []).reduce((max, event) => event.kind === kind && event.id === id ? Math.max(max, event.seq) : max, -1) + 1;
 }
@@ -30004,6 +30160,7 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 		if (teardownStarted) return;
 		teardownStarted = true;
 		try {
+			await executor.heldForContinuation?.()?.release();
 			await teardownExecutor(executor, grace, deadlineAtMs, now, live.askTeardown);
 			live.cleanupConfirmed = true;
 		} catch (error) {
@@ -30110,7 +30267,9 @@ async function runChild(live, executor, childAbort, task, opts, pool, ticket, bl
 				outRef
 			};
 		}
-		await teardownOnce(opts.shutdown ?? 5e3);
+		const held = executor.heldForContinuation?.();
+		if (held !== void 0 && live.budgetViolation !== void 0) live.held = { continuation: held };
+		else await teardownOnce(opts.shutdown ?? 5e3);
 		return {
 			kind: "done",
 			out: artifact.out,
@@ -30869,6 +31028,7 @@ function withDriverExecutor(base) {
 async function closeNestedScope(scope, controller, reason) {
 	if (!controller.signal.aborted) controller.abort(reason);
 	for (;;) if (await scope.next() === null) break;
+	await releaseHeldEnvironments(scope);
 	const view = scope.view;
 	if (view.inFlight > 0) throw new ValidationError$1(`driverExecutor: nested cleanup left ${view.inFlight} running nodes`);
 }
@@ -31362,7 +31522,7 @@ function describeRejection(error) {
 function createSupervisor() {
 	let attached;
 	async function run(root, task, opts) {
-		const { budget, rootIdentity, rootSegment, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, maxDepth, workerSlots, reservationPolicy, deadlineCheckIn, maxRestarts, withinMs, childSettleGraceMs, teardownConfirmMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
+		const { budget, rootIdentity, rootSegment, rootMaterialization, runId, journal: journalStore, blobs: blobStore, executors: executorRegistry, recoverExecutor, maxDepth, workerSlots, reservationPolicy, deadlineCheckIn, budgetStopHoldMs, maxRestarts, withinMs, childSettleGraceMs, teardownConfirmMs, resume, retainedAtSettlement: requestedRetainedAtSettlement, ownerWorkspaceRetention, now: suppliedNow, signal, hooks, workerTrace, workerTraceUnpropagated, interactiveBindingDir } = opts;
 		const input = detachedSnapshot({
 			task,
 			options: {
@@ -31510,6 +31670,7 @@ function createSupervisor() {
 					ownerBudget: opts.budget
 				} : {},
 				...deadlineCheckIn === void 0 ? {} : { deadlineCheckIn },
+				...budgetStopHoldMs === void 0 ? {} : { budgetStopHoldMs },
 				signal: controller.signal,
 				now,
 				hooks: opts.hooks,
@@ -31576,7 +31737,9 @@ function createSupervisor() {
 				clearAcceptedGrace?.();
 				const settleGraceMs = !controller.signal.aborted ? boundedSettleGrace(opts.childSettleGraceMs, rootDeadlineAtMs, now) : 0;
 				try {
-					teardownUnconfirmed = await drainLiveChildren(openScope, controller, settleGraceMs);
+					await drainLiveChildren(openScope, controller, settleGraceMs);
+					await releaseHeldEnvironments(openScope);
+					teardownUnconfirmed = unconfirmedTeardowns(openScope);
 					await settleManagerWork(openScope);
 					if (!persistence.failed && retainedAtSettlement === "release") teardownUnconfirmed = await releaseRetainedEnvironments(openScope);
 					const confirmWindowMs = opts.teardownConfirmMs ?? DEFAULT_TEARDOWN_CONFIRM_MS;
@@ -32148,6 +32311,6 @@ function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
 //#endregion
-export { readWorkerInteractiveBinding as $, FileSpawnJournal as $i, persistHarnessTranscript as $n, renderProfileMaterializationIssues as $r, admitContinuationPolicy as $t, bindScopeRetainedOwnerProvider as A, awaitAbortable$1 as Ai, providerAsExecutor as An, runWorktreeHarness as Ar, AUTHORITY_MARKERS as At, scopeRetainedOwnerRestorePoint as B, canonicalStreamEventFromSandboxEvent as Bi, startRetainedRun as Bn, CodexExecutionDiagnosticError as Br, DriverAttemptsExhaustedError as Bt, recordScopeOwnerPause as C, spendFromUsageTotals as Ca, unknownExecutionBindingReceipt as Ci, captureBeforeDestroy as Cn, toOtelAttributes as Cr, workerTraceHeaders as Ct, abandonScopeRetainedOwnerInvocation as D, promptFromAgentTurnInput as Da, projectSandboxOutcome as Di, runBrainLoop as Dn, sanitizeKnowledgeReadinessReport as Dr, createActivityLog as Dt, settledToIteration as E, resolveRedactor as Ea, executableAgentSpecSnapshot as Ei, routerBrain as En, sanitizeAgentRuntimeEvent as Er, DEFAULT_STALL_AFTER_MS as Et, reconcileScopeRetainedOwnerEnvironment as F, unavailablePauseMs as Fi, sandboxSessionTraceSource as Fn, LOCAL_HARNESSES as Fr, isPeerMailEnvelope as Ft, hostDirectoryReader as G, mapSandboxEvent as Gi, createWorkerSlots as Gn, controlProfileMaterialization as Gr, upstreamUnavailableSignal as Gt, scopeRetainedOwnerTurnEnded as H, createSandboxUsageLedger as Hi, retainedCreateMaterial as Hn, AGENT_PROFILE_MATERIALIZATION_AXES as Hr, classifyDriverFailure as Ht, scopeRetainedOwnerContext as I, unavailableSignalOfFailure as Ii, bridgeRuntimeAttachmentsKey as In, harnessInvocation as Ir, peerMailTools as It, coordinationProfileToolPrefix as J, sandboxEventServedBackend as Ji, abortError as Jn, profileMaterializationAxes$1 as Jr, authoredSeatStages as Jt, resolveSpawnResourcePaths as K, mapSandboxToolEvent as Ki, openSlotGroup as Kn, defineProfileMaterializationContract as Kr, SeatChain as Kt, scopeRetainedOwnerJournalRoot as L, TRACE_ROOT_SCHEMA as Li, bridgeStopSignalKey as Ln, harnessSupportsReasoningEffort as Lr, peerMailVerbNames as Lt, noteScopeRetainedOwnerCoordination as M, settlementFailureCause as Mi, resolveAgentEnvironmentProvider as Mn, createWorktree as Mr, PEER_MAIL_WIRE_KEY as Mt, prepareScopeRetainedOwnerSeatSwitch as N, registerRetainedExecutorPreparation as Ni, createPushTraceSource as Nn, removeWorktree as Nr, claimsAuthority as Nt, beginScopeRetainedOwnerDrive as O, promptOptionsFromAgentTurnInput as Oa, readSandboxOutcome as Oi, LEAF_CONTINUATION_TASK as On, sanitizeRuntimeStreamEvent as Or, readWorkerProgress as Ot, prepareScopeRetainedOwnerTask as P, retainedExecutorSeamKey as Pi, decodeToolPart as Pn, DEFAULT_LOCAL_HARNESS as Pr, createPeerMailbox as Pt, attachWorker as Q, FileResultBlobStore as Qi, harnessTranscriptArtifact as Qn, promptResourceProfileMaterialization as Qr, CheckUnavailableError as Qt, scopeRetainedOwnerPriorSpend as R, TRACE_SUMMARY_SCHEMA as Ri, reconnectRetainedRun as Rn, localHarnessExecutable as Rr, isLiveNodeStatus as Rt, recordScopeOwnerMaterialization as S, spendFromUsageEvents as Sa, runtimeOwnedScopeOwnerRuntime as Si, SandboxEvidenceRetentionError as Sn, padTraceId as Sr, workerTraceEnv as St, scopeOwnerExecutorNodeContext as T, defaultRedactorIdentityMaterial as Ta, executableAgentProfileSnapshot as Ti, readPromptOptions as Tn, createRuntimeStreamEventCollector as Tr, taskToPrompt as Tt, SPAWN_RESOURCE_PATH_MAX_BYTES as U, extractLlmCallEvent as Ui, destroyInteractiveEnvironment as Un, assertProfileMaterialization as Ur, runDriverWithRetry as Ut, scopeRetainedOwnerResult as V, createSandboxToolPartState as Vi, startRetainedRunInEnvironment as Vn, terminateProcessTreeAndConfirm as Vr, HarnessTurnFailedError as Vt, environmentReader as W, isSandboxTerminalEvent as Wi, environmentGone as Wn, assertProfileMaterializes as Wr, summarizeDriverAttempts as Wt, runtimeGraphMetadataKey as X, sumSandboxUsage as Xi, runAbortable as Xn, promptModelProfileMaterialization as Xr, CONTINUATIONS_DIR as Xt, providerVisibleProfile as Y, sandboxProgressEvents as Yi, linkAbort as Yn, promptControlProfileMaterialization as Yr, seatExecutionProfile as Yt, interactiveAdmissionSeamKey as Z, decodeHarnessUsage as Zi, captureHarnessTranscript as Zn, promptOnlyProfileMaterialization as Zr, CONTINUATION_FACTS as Zt, deriveNodeExecutionIdentity as _, ReservationWaitRefused as _a, runtimeOwnedDriveHarnessProviderEvidence as _i, defaultSelectWinner as _n, createOtelExporter as _r, createSteerableSandboxSession as _t, collectDelivered as a, replaySpawnTree as aa, worktreeCliProfileMaterialization as ai, expandQuestions as an, runCodeMode as ar, rollingDispatch as at, noteScopeOwnerPlannedExecution as b, meterUsageEvent as ba, runtimeOwnedExecutorProviderEvidence as bi, createSandboxLineage as bn, loopEventToOtelSpan as br, WORKER_TRACE_PROPAGATION as bt, runTree as c, isTraceAnalysisStore as ca, authoredAgentIdentity as ci, verdictFromJudgeScore as cn, ROUTER_PRICE_SOURCE as cr, bindReusableExecutorExecutionId as ct, isDriverSpec as d, contentAddress as da, inheritRuntimeOwnedExecutorAttestation as di, addHarnessUsage as dn, readTraceContextFromEnv as dr, cliWorktreeExecutor as dt, InMemoryResultBlobStore as ea, renderUnsupported as ei, admitFinding as en, readHarnessTranscript as er, reconnectRetainedInteractiveRun as et, withDriverExecutor as f, detachedFrozen as fa, knownExecutionBindingReceipt as fi, createCodexRolloutStoreReader as fn, traceContextToEnv as fr, createExecutor as ft, createScope as g, BudgetReconcileFault as ga, recordRuntimeOwnedDriveHarnessProviderEvidence as gi, createSandboxForSpec as gn, createOpenInferenceFileExporter as gr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as gt, beginScopeOwnerAttempt as h, errMessage as ha, providerAttemptEvidence as hi, TERMINAL_DECISIONS as hn, buildRuntimeEventOtelSpans as hr, createWorktreeCliExecutor as ht, bestDelivered as i, materializeTreeView as ia, validateProfileMaterialization as ii, distillFindings as in, describeCodeModeTools as ir, queueOf as it, consumeScopeRetainedOwnerResult as j, runtimeFailureCause as ji, providerAsSandboxClient as jn, captureWorktreeDiff as jr, DEFAULT_PEER_MAIL_LIMITS as jt, bindScopeRetainedOwnerEnvironmentId as k, providerMessageText as ka, abortError$1 as ki, createAgentEnvironmentProviderRegistry as kn, runSettledCommand as kr, createInbox as kt, driverChild as l, parseWorkerToolTraceArtifact as la, authoredProfileDigest as li, bridgeAdmissionRefusal as ln, createPropagatingTraceEmitter as lr, captureReusableExecutorConfig as lt, assertRecursiveReservationPolicy as m, executorFailure as ma, newExecutionAttemptId as mi, readCodexRolloutSession as mn, buildLoopSpanNodes as mr, snapshotExecutorConfig as mt, createRootHandle as n, insideCursorNamespace as na, sandboxProfileMaterialization as ni, checkVerdictOf as nn, retainHarnessTranscript as nr, startRetainedInteractiveRun as nt, pickBestDelivered as o, WORKER_TOOL_TRACE_SCHEMA_VERSION as oa, attestRuntimeOwnedPendingExecutor as oi, failedItems as on, priceTokens as or, gateOnDeliverable as ot, SUBTREE_RESULT_LIMIT as p, detachedSnapshot as pa, knownMaterializationReceipt as pi, harnessUsageIsEmpty as pn, buildLoopOtelSpans as pr, createExecutorRegistry as pt, coordinationMcpAlias as q, notifySandboxEventObserver as qi, RunCancellationReason as qn, fullProfileMaterialization as qr, SeatChainExhaustedError as qt, createSupervisor as r, loadSpawnForest as ra, unsupportedProfileDimensions as ri, createContinuationKeeper as rn, createCodeModeTools as rr, freeSlots as rt, runFinalizer as s, captureWorkerTraceEvidence as sa, attestRuntimeOwnedScopeOwner as si, passedItems as sn, routerTokenPrice as sr, mapExecutorResult as st, DEFAULT_MAX_DEPTH as t, InMemorySpawnJournal as ta, sandboxActProfileMaterialization as ti, bestComposite as tn, resolveHarnessTranscriptCapture as tr, recoverRetainedInteractiveRun as tt, driverExecutorFactory as u, workerTraceAnalysisStore as ua, finalizeRuntimeOwnedPendingExecutor as ui, bridgeModelRouteRefusal as un, mergeTraceEnv as ur, cliInPlaceExecutor as ut, meterRuntimeOwnedAccounting as v, assertValidBudget as va, runtimeOwnedExecutorExecutionBinding as vi, isTerminalDecision as vn, flatOtelSpan as vr, createRouterTranscript as vt, restoreScopeOwnerAcceptedExecution as w, defaultRedactor as wa, unknownMaterializationReceipt as wi, assertBoxlessPromptOptions as wn, createRuntimeEventCollector as wr, workerTraceSeamKey as wt, recordScopeOwnerDriverAttempt as x, newUsageTotals as xa, runtimeOwnedPendingExecutorMaterialization as xi, acquireSandbox as xn, padSpanId as xr, readWorkerTraceContext as xt, meterRuntimeOwnedProviderAttempt as y, createBudgetPool as ya, runtimeOwnedExecutorMaterialization as yi, runAgentRounds as yn, generateSpanId as yr, createInPlaceCliExecutor as yt, scopeRetainedOwnerResourceReader as z, assertSandboxServedModel as zi, recoverRetainedRun as zn, parseCodexTokenUsage as zr, isTerminalNodeStatus as zt };
+export { attachWorker as $, decodeHarnessUsage as $i, captureHarnessTranscript as $n, promptOnlyProfileMaterialization as $r, CONTINUATION_FACTS as $t, bindScopeRetainedOwnerEnvironmentId as A, promptOptionsFromAgentTurnInput as Aa, readSandboxOutcome as Ai, LEAF_CONTINUATION_TASK as An, sanitizeRuntimeStreamEvent as Ar, createInbox as At, scopeRetainedOwnerResourceReader as B, TRACE_SUMMARY_SCHEMA as Bi, reconnectRetainedRun as Bn, localHarnessExecutable as Br, isTerminalNodeStatus as Bt, recordScopeOwnerMaterialization as C, newUsageTotals as Ca, runtimeOwnedPendingExecutorMaterialization as Ci, acquireSandbox as Cn, padSpanId as Cr, workerTraceEnv as Ct, settledToIteration as D, defaultRedactorIdentityMaterial as Da, executableAgentProfileSnapshot as Di, readPromptOptions as Dn, createRuntimeStreamEventCollector as Dr, DEFAULT_STALL_AFTER_MS as Dt, scopeOwnerExecutorNodeContext as E, defaultRedactor as Ea, unknownMaterializationReceipt as Ei, assertBoxlessPromptOptions as En, createRuntimeEventCollector as Er, taskToPrompt as Et, prepareScopeRetainedOwnerTask as F, registerRetainedExecutorPreparation as Fi, createPushTraceSource as Fn, removeWorktree as Fr, createPeerMailbox as Ft, environmentReader as G, extractLlmCallEvent as Gi, destroyInteractiveEnvironment as Gn, assertProfileMaterialization as Gr, summarizeDriverAttempts as Gt, scopeRetainedOwnerResult as H, canonicalStreamEventFromSandboxEvent as Hi, startRetainedRun as Hn, CodexExecutionDiagnosticError as Hr, HarnessTurnFailedError as Ht, reconcileScopeRetainedOwnerEnvironment as I, retainedExecutorSeamKey as Ii, decodeToolPart as In, DEFAULT_LOCAL_HARNESS as Ir, isPeerMailEnvelope as It, coordinationMcpAlias as J, mapSandboxToolEvent as Ji, openSlotGroup as Jn, defineProfileMaterializationContract as Jr, SeatChainExhaustedError as Jt, hostDirectoryReader as K, isSandboxTerminalEvent as Ki, environmentGone as Kn, assertProfileMaterializes as Kr, upstreamUnavailableSignal as Kt, scopeRetainedOwnerContext as L, unavailablePauseMs as Li, sandboxSessionTraceSource as Ln, LOCAL_HARNESSES as Lr, peerMailTools as Lt, consumeScopeRetainedOwnerResult as M, awaitAbortable$1 as Mi, providerAsExecutor as Mn, runWorktreeHarness as Mr, DEFAULT_PEER_MAIL_LIMITS as Mt, noteScopeRetainedOwnerCoordination as N, runtimeFailureCause as Ni, providerAsSandboxClient as Nn, captureWorktreeDiff as Nr, PEER_MAIL_WIRE_KEY as Nt, abandonScopeRetainedOwnerInvocation as O, resolveRedactor as Oa, executableAgentSpecSnapshot as Oi, routerBrain as On, sanitizeAgentRuntimeEvent as Or, createActivityLog as Ot, prepareScopeRetainedOwnerSeatSwitch as P, settlementFailureCause as Pi, resolveAgentEnvironmentProvider as Pn, createWorktree as Pr, claimsAuthority as Pt, interactiveAdmissionSeamKey as Q, sumSandboxUsage as Qi, runAbortable as Qn, promptModelProfileMaterialization as Qr, CONTINUATIONS_DIR as Qt, scopeRetainedOwnerJournalRoot as R, unavailableSignalOfFailure as Ri, bridgeRuntimeAttachmentsKey as Rn, harnessInvocation as Rr, peerMailVerbNames as Rt, recordScopeOwnerDriverAttempt as S, meterUsageEvent as Sa, runtimeOwnedExecutorProviderEvidence as Si, createSandboxLineage as Sn, loopEventToOtelSpan as Sr, readWorkerTraceContext as St, restoreScopeOwnerAcceptedExecution as T, spendFromUsageTotals as Ta, unknownExecutionBindingReceipt as Ti, captureBeforeDestroy as Tn, toOtelAttributes as Tr, workerTraceSeamKey as Tt, scopeRetainedOwnerTurnEnded as U, createSandboxToolPartState as Ui, startRetainedRunInEnvironment as Un, terminateProcessTreeAndConfirm as Ur, classifyDriverFailure as Ut, scopeRetainedOwnerRestorePoint as V, assertSandboxServedModel as Vi, recoverRetainedRun as Vn, parseCodexTokenUsage as Vr, DriverAttemptsExhaustedError as Vt, SPAWN_RESOURCE_PATH_MAX_BYTES as W, createSandboxUsageLedger as Wi, retainedCreateMaterial as Wn, AGENT_PROFILE_MATERIALIZATION_AXES as Wr, runDriverWithRetry as Wt, providerVisibleProfile as X, sandboxEventServedBackend as Xi, abortError as Xn, profileMaterializationAxes$1 as Xr, seatExecutionProfile as Xt, coordinationProfileToolPrefix as Y, notifySandboxEventObserver as Yi, RunCancellationReason as Yn, fullProfileMaterialization as Yr, authoredSeatStages as Yt, runtimeGraphMetadataKey as Z, sandboxProgressEvents as Zi, linkAbort as Zn, promptControlProfileMaterialization as Zr, subscriptionUsageLimitSignal as Zt, createScope as _, errMessage as _a, providerAttemptEvidence as _i, TERMINAL_DECISIONS as _n, buildRuntimeEventOtelSpans as _r, DEFAULT_SANDBOX_STEERING_MAX_TURNS as _t, collectDelivered as a, loadSpawnForest as aa, unsupportedProfileDimensions as ai, createContinuationKeeper as an, createCodeModeTools as ar, queueOf as at, meterRuntimeOwnedProviderAttempt as b, assertValidBudget as ba, runtimeOwnedExecutorExecutionBinding as bi, isTerminalDecision as bn, flatOtelSpan as br, createInPlaceCliExecutor as bt, runTree as c, WORKER_TOOL_TRACE_SCHEMA_VERSION as ca, attestRuntimeOwnedPendingExecutor as ci, failedItems as cn, priceTokens as cr, mapExecutorResult as ct, isDriverSpec as d, parseWorkerToolTraceArtifact as da, authoredProfileDigest as di, bridgeAdmissionRefusal as dn, createPropagatingTraceEmitter as dr, cliInPlaceExecutor as dt, FileResultBlobStore as ea, promptResourceProfileMaterialization as ei, CheckUnavailableError as en, harnessTranscriptArtifact as er, readWorkerInteractiveBinding as et, withDriverExecutor as f, workerTraceAnalysisStore as fa, finalizeRuntimeOwnedPendingExecutor as fi, bridgeModelRouteRefusal as fn, mergeTraceEnv as fr, cliWorktreeExecutor as ft, beginScopeOwnerAttempt as g, executorFailure as ga, newExecutionAttemptId as gi, readCodexRolloutSession as gn, buildLoopSpanNodes as gr, createWorktreeCliExecutor as gt, assertRecursiveReservationPolicy as h, detachedSnapshot as ha, knownMaterializationReceipt as hi, harnessUsageIsEmpty as hn, buildLoopOtelSpans as hr, snapshotExecutorConfig as ht, bestDelivered as i, insideCursorNamespace as ia, sandboxProfileMaterialization as ii, checkVerdictOf as in, retainHarnessTranscript as ir, freeSlots as it, bindScopeRetainedOwnerProvider as j, providerMessageText as ja, abortError$1 as ji, createAgentEnvironmentProviderRegistry as jn, runSettledCommand as jr, AUTHORITY_MARKERS as jt, beginScopeRetainedOwnerDrive as k, promptFromAgentTurnInput as ka, projectSandboxOutcome as ki, runBrainLoop as kn, sanitizeKnowledgeReadinessReport as kr, readWorkerProgress as kt, driverChild as l, captureWorkerTraceEvidence as la, attestRuntimeOwnedScopeOwner as li, passedItems as ln, routerTokenPrice as lr, bindReusableExecutorExecutionId as lt, SUBTREE_RESULT_LIMIT as m, detachedFrozen as ma, knownExecutionBindingReceipt as mi, createCodexRolloutStoreReader as mn, traceContextToEnv as mr, createExecutorRegistry as mt, createRootHandle as n, InMemoryResultBlobStore as na, renderUnsupported as ni, admitFinding as nn, readHarnessTranscript as nr, recoverRetainedInteractiveRun as nt, pickBestDelivered as o, materializeTreeView as oa, validateProfileMaterialization as oi, distillFindings as on, describeCodeModeTools as or, rollingDispatch as ot, DEFAULT_BUDGET_STOP_HOLD_MS as p, contentAddress as pa, inheritRuntimeOwnedExecutorAttestation as pi, addHarnessUsage as pn, readTraceContextFromEnv as pr, createExecutor as pt, resolveSpawnResourcePaths as q, mapSandboxEvent as qi, createWorkerSlots as qn, controlProfileMaterialization as qr, SeatChain as qt, createSupervisor as r, InMemorySpawnJournal as ra, sandboxActProfileMaterialization as ri, bestComposite as rn, resolveHarnessTranscriptCapture as rr, startRetainedInteractiveRun as rt, runFinalizer as s, replaySpawnTree as sa, worktreeCliProfileMaterialization as si, expandQuestions as sn, runCodeMode as sr, gateOnDeliverable as st, DEFAULT_MAX_DEPTH as t, FileSpawnJournal as ta, renderProfileMaterializationIssues as ti, admitContinuationPolicy as tn, persistHarnessTranscript as tr, reconnectRetainedInteractiveRun as tt, driverExecutorFactory as u, isTraceAnalysisStore as ua, authoredAgentIdentity as ui, verdictFromJudgeScore as un, ROUTER_PRICE_SOURCE as ur, captureReusableExecutorConfig as ut, deriveNodeExecutionIdentity as v, BudgetReconcileFault as va, recordRuntimeOwnedDriveHarnessProviderEvidence as vi, createSandboxForSpec as vn, createOpenInferenceFileExporter as vr, createSteerableSandboxSession as vt, recordScopeOwnerPause as w, spendFromUsageEvents as wa, runtimeOwnedScopeOwnerRuntime as wi, SandboxEvidenceRetentionError as wn, padTraceId as wr, workerTraceHeaders as wt, noteScopeOwnerPlannedExecution as x, createBudgetPool as xa, runtimeOwnedExecutorMaterialization as xi, runAgentRounds as xn, generateSpanId as xr, WORKER_TRACE_PROPAGATION as xt, meterRuntimeOwnedAccounting as y, ReservationWaitRefused as ya, runtimeOwnedDriveHarnessProviderEvidence as yi, defaultSelectWinner as yn, createOtelExporter as yr, createRouterTranscript as yt, scopeRetainedOwnerPriorSpend as z, TRACE_ROOT_SCHEMA as zi, bridgeStopSignalKey as zn, harnessSupportsReasoningEffort as zr, isLiveNodeStatus as zt };
 
-//# sourceMappingURL=supervisor-BObk9STz.js.map
+//# sourceMappingURL=supervisor-B-bkXttM.js.map