@tangle-network/agent-runtime 0.336.0 → 0.337.0

package/dist/{supervisor-B-bkXttM.js → supervisor-D3zrWAlw.js}

@@ -1,6 +1,6 @@
 import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as isAsyncIterable$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as chargedTokens, J as deleteBoxSafe, K as cloneSpend, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as teardownExecutor, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, c as verifyAgentCandidateWorkspaceTree, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, f as verifyAgentCandidateWorkspaceArchive, ft as zeroTokenUsage, gt as withBudgetResources, ht as resourceTelemetry, it as roundBoxMinutes, j as verifyWorkspaceSnapshotArtifacts, kt as teardownSurfaces, lt as unmeteredSpend, mt as assertResources, nt as randomSuffix, o as readAgentCandidateWorkspaceArtifactFiles, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, s as verifyAgentCandidateWorkspaceArtifacts, st as throwAbort, t as assertSandboxProfileCompatibility, tt as promptCacheTokenClasses, ut as withTimeout, vt as CHILD_DEADLINE_REASON, wt as boundedChildDeadlineAt } from "./sandbox-profile-compat-D_ZOL80S.js";
+import { $ as isAsyncIterable$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as chargedTokens, J as deleteBoxSafe, K as cloneSpend, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as teardownExecutor, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as addSpend, W as addTokenUsage, X as fnv1a32Hex, Y as errorMessage, Z as hasCompleteCacheBreakdown, _t as ACCEPTED_RESULT_GRACE_MS, at as sleep, c as verifyAgentCandidateWorkspaceTree, ct as throwIfAborted, dt as zeroSpend, et as mapWithConcurrency, f as verifyAgentCandidateWorkspaceArchive, ft as zeroTokenUsage, gt as withBudgetResources, ht as resourceTelemetry, it as roundBoxMinutes, j as verifyWorkspaceSnapshotArtifacts, kt as teardownSurfaces, lt as unmeteredSpend, mt as assertResources, nt as randomSuffix, o as readAgentCandidateWorkspaceArtifactFiles, ot as stringifySafe, pt as addResourceSpend, q as cloneTokenUsage, rt as randomUuid, s as verifyAgentCandidateWorkspaceArtifacts, st as throwAbort, t as assertSandboxProfileCompatibility, tt as promptCacheTokenClasses, ut as withTimeout, vt as CHILD_DEADLINE_REASON, wt as boundedChildDeadlineAt } from "./sandbox-profile-compat-BpxJTqU8.js";
 import { runTaskQueue } from "./task-queue.js";
 import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-DBv31uPi.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
@@ -1868,6 +1868,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"seat-materialized",
 	"seat-paused",
 	"root-segment",
+	"root-reentered",
 	"paused",
 	"driver-attempt",
 	"node-inputs-resolved",
@@ -1952,6 +1953,7 @@ async function replaySpawnTree(journal, blobs, root) {
 		if (ev.kind === "trace-unpropagated") continue;
 		if (ev.kind === "seat-segment" || ev.kind === "seat-materialized" || ev.kind === "seat-paused") continue;
 		if (ev.kind === "root-segment") continue;
+		if (ev.kind === "root-reentered") continue;
 		if (ev.kind === "paused") continue;
 		if (ev.kind === "driver-attempt") continue;
 		if (ev.kind === "node-inputs-resolved") continue;
@@ -19454,6 +19456,15 @@ function checkedSeatSelection(stage, selected) {
 * best composite. There is no count cap and no caller veto: the old prompt-owned loop logged 896
 * of 1,011 rounds with no progress, and 650 recorded inputs chose seven different re-prompt counts.
 *
+* A RE-ENTERED run is one this process resumed after an earlier process drove it, usually one
+* that stopped without settling it. Its first drive is entered as `run-reentered` with the
+* workers that were open, and a drive counts toward `maxBarren` only if it began after the root
+* streamed a model event in this process: the drive that straddles the restart never counts, and
+* a root that speaks and then stays barren is refused as any other. Measured 2026-10-19 on
+* magnetar-rust-20261019f: after a host reboot the re-entered root was first driven with the
+* bare original task and no word of its three open workers, two barren continuations followed,
+* and the run settled `no-result-selected`.
+*
 * A THIRD CLASS sits between the two: the upstream said "not now". A model provider's exhausted
 * quota, a rate limit, or an overloaded service (HTTP 429, 503, 529, or the router's own codes for
 * them) is not an accident in the driver and not a decision by Runtime; the same request succeeds
@@ -19816,7 +19827,7 @@ var DriverAttemptsExhaustedError = class extends RuntimeRunStateError {
 function summarizeDriverAttempts(records) {
 	let barren = 0;
 	for (const record of records) if (record.madeProgress) barren = 0;
-	else if (record.error === void 0 && record.reentry !== void 0 && record.reentry !== "wake" && record.contract === "unmet") barren += 1;
+	else if (record.beforeModelEvent !== true && record.error === void 0 && record.reentry !== void 0 && record.reentry !== "wake" && record.contract === "unmet") barren += 1;
 	const last = records.at(-1);
 	const refused = records.filter((record) => record.classification === "unavailable");
 	return {
@@ -19875,12 +19886,14 @@ async function runDriverWithRetry(run) {
 	let pauses = 0;
 	let continuations = 0;
 	let wakes = 0;
-	let reentry;
+	let reentry = run.reentered?.first;
+	let beforeModelEvent = false;
 	const emit = async (record) => {
 		const entered = reentry === void 0 ? {} : { reentry: reentry.reason };
 		const stamped = {
 			...record,
-			...entered
+			...entered,
+			...beforeModelEvent ? { beforeModelEvent: true } : {}
 		};
 		attempts.push(stamped);
 		await run.onAttempt?.(stamped);
@@ -19918,9 +19931,10 @@ async function runDriverWithRetry(run) {
 	for (let attempt = 1;; attempt += 1) {
 		const before = run.progress();
 		const startedAt = now();
+		beforeModelEvent = run.reentered !== void 0 && run.reentered.modelEvents() === 0;
 		const admissionStop = run.signal.aborted ? "aborted" : budgetStop(run.budget(), now());
 		if (admissionStop !== void 0) {
-			if (reentry !== void 0) return;
+			if (attempts.length > 0) return;
 			throw new DriverAttemptsExhaustedError(run.signal.aborted ? run.signal.reason : new ValidationError$1(`driver admission: ${admissionStop}`), attempts, admissionStop);
 		}
 		try {
@@ -20081,7 +20095,7 @@ async function runDriverWithRetry(run) {
 		const contract = contractOf(after);
 		const contractField = contract === "none" ? {} : { contract };
 		if (progressed) barrenReentries = 0;
-		else if (reentry !== void 0 && reentry.reason !== "wake" && contract === "unmet") barrenReentries += 1;
+		else if (!beforeModelEvent && reentry !== void 0 && reentry.reason !== "wake" && contract === "unmet") barrenReentries += 1;
 		const wait = run.wait;
 		if (wait !== void 0 && contract !== "met" && !(continuation?.closed() ?? false) && !run.signal.aborted && budgetStop(run.budget(), now()) === void 0 && wait.open()) {
 			const woken = await wait.wake(attempt + 1);
@@ -28062,6 +28076,19 @@ var WorkerEvents = class {
 *
 * @stable
 */
+/**
+* The direct workers of `parentId` that a resumed journal holds open, and which of them this
+* process re-places through a retained recovery. One function, so the root's `root-reentered`
+* record and its first re-entered drive cannot disagree.
+*/
+function reenteredWorkers(resumeFrom, parentId) {
+	const live = resumeFrom.view.nodes.filter((node) => node.parent === parentId && isLiveNodeStatus(node.status)).map((node) => node.id);
+	const recovering = new Set((resumeFrom.recoveries ?? []).map((recovery) => recovery.spawned.id));
+	return {
+		live,
+		replaced: live.filter((id) => recovering.has(id))
+	};
+}
 /** Runtime-owned provider evidence is written through this private scope capability. */
 const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
 const pauseRecorders = /* @__PURE__ */ new WeakMap();
@@ -29281,7 +29308,8 @@ function createScope(args) {
 		settled: args.resumeFrom.settled,
 		view: args.resumeFrom.view,
 		keys: args.resumeFrom.keys,
-		priorSpend: args.resumeFrom.priorSpend
+		priorSpend: args.resumeFrom.priorSpend,
+		reentered: reenteredWorkers(args.resumeFrom, args.parentId)
 	} : void 0;
 	const scope = {
 		spawn,
@@ -31439,6 +31467,21 @@ async function recordRootSegment(opts, events, at, fresh) {
 		at
 	});
 }
+/**
+* Append one `root-reentered` record: this process is supervising a run an earlier process drove.
+* Measured 2026-10-19 on magnetar-rust-20261019f: after a host reboot the re-entered root ran two
+* barren continuations and the run settled `no-result-selected`, with three workers still open in
+* the journal and no record that a restart had happened.
+*/
+async function recordRootReentered(opts, resumeFrom, at) {
+	await opts.journal.appendEvent(opts.runId, {
+		kind: "root-reentered",
+		id: opts.runId,
+		...reenteredWorkers(resumeFrom, opts.runId),
+		seq: resumeFrom.events.filter((event) => event.kind === "root-reentered").length,
+		at
+	});
+}
 function sameOptionalIdentity(recorded, requested) {
 	if (recorded === void 0 || requested === void 0) return recorded === requested;
 	return contentAddress(recorded) === contentAddress(requested);
@@ -31600,6 +31643,7 @@ function createSupervisor() {
 				prior = [...resumeFrom.events];
 				pool = createBudgetPool(opts.budget, runEpochMs, restored.poolRestore);
 				await recordRootSegment(opts, prior, runStartedAt, false);
+				await recordRootReentered(opts, resumeFrom, runStartedAt);
 			} else {
 				if (opts.rootSegment !== void 0 && changesRootProfile(opts.rootSegment)) throw new RuntimeRunStateError(`supervisor: run '${opts.runId}' has no recorded root to change the model or harness of; a new run takes them from its profile`);
 				pool = createBudgetPool(opts.budget, runStartedAtMs);
@@ -32313,4 +32357,4 @@ function isNonEmptySpend(s) {
 //#endregion
 export { attachWorker as $, decodeHarnessUsage as $i, captureHarnessTranscript as $n, promptOnlyProfileMaterialization as $r, CONTINUATION_FACTS as $t, bindScopeRetainedOwnerEnvironmentId as A, promptOptionsFromAgentTurnInput as Aa, readSandboxOutcome as Ai, LEAF_CONTINUATION_TASK as An, sanitizeRuntimeStreamEvent as Ar, createInbox as At, scopeRetainedOwnerResourceReader as B, TRACE_SUMMARY_SCHEMA as Bi, reconnectRetainedRun as Bn, localHarnessExecutable as Br, isTerminalNodeStatus as Bt, recordScopeOwnerMaterialization as C, newUsageTotals as Ca, runtimeOwnedPendingExecutorMaterialization as Ci, acquireSandbox as Cn, padSpanId as Cr, workerTraceEnv as Ct, settledToIteration as D, defaultRedactorIdentityMaterial as Da, executableAgentProfileSnapshot as Di, readPromptOptions as Dn, createRuntimeStreamEventCollector as Dr, DEFAULT_STALL_AFTER_MS as Dt, scopeOwnerExecutorNodeContext as E, defaultRedactor as Ea, unknownMaterializationReceipt as Ei, assertBoxlessPromptOptions as En, createRuntimeEventCollector as Er, taskToPrompt as Et, prepareScopeRetainedOwnerTask as F, registerRetainedExecutorPreparation as Fi, createPushTraceSource as Fn, removeWorktree as Fr, createPeerMailbox as Ft, environmentReader as G, extractLlmCallEvent as Gi, destroyInteractiveEnvironment as Gn, assertProfileMaterialization as Gr, summarizeDriverAttempts as Gt, scopeRetainedOwnerResult as H, canonicalStreamEventFromSandboxEvent as Hi, startRetainedRun as Hn, CodexExecutionDiagnosticError as Hr, HarnessTurnFailedError as Ht, reconcileScopeRetainedOwnerEnvironment as I, retainedExecutorSeamKey as Ii, decodeToolPart as In, DEFAULT_LOCAL_HARNESS as Ir, isPeerMailEnvelope as It, coordinationMcpAlias as J, mapSandboxToolEvent as Ji, openSlotGroup as Jn, defineProfileMaterializationContract as Jr, SeatChainExhaustedError as Jt, hostDirectoryReader as K, isSandboxTerminalEvent as Ki, environmentGone as Kn, assertProfileMaterializes as Kr, upstreamUnavailableSignal as Kt, scopeRetainedOwnerContext as L, unavailablePauseMs as Li, sandboxSessionTraceSource as Ln, LOCAL_HARNESSES as Lr, peerMailTools as Lt, consumeScopeRetainedOwnerResult as M, awaitAbortable$1 as Mi, providerAsExecutor as Mn, runWorktreeHarness as Mr, DEFAULT_PEER_MAIL_LIMITS as Mt, noteScopeRetainedOwnerCoordination as N, runtimeFailureCause as Ni, providerAsSandboxClient as Nn, captureWorktreeDiff as Nr, PEER_MAIL_WIRE_KEY as Nt, abandonScopeRetainedOwnerInvocation as O, resolveRedactor as Oa, executableAgentSpecSnapshot as Oi, routerBrain as On, sanitizeAgentRuntimeEvent as Or, createActivityLog as Ot, prepareScopeRetainedOwnerSeatSwitch as P, settlementFailureCause as Pi, resolveAgentEnvironmentProvider as Pn, createWorktree as Pr, claimsAuthority as Pt, interactiveAdmissionSeamKey as Q, sumSandboxUsage as Qi, runAbortable as Qn, promptModelProfileMaterialization as Qr, CONTINUATIONS_DIR as Qt, scopeRetainedOwnerJournalRoot as R, unavailableSignalOfFailure as Ri, bridgeRuntimeAttachmentsKey as Rn, harnessInvocation as Rr, peerMailVerbNames as Rt, recordScopeOwnerDriverAttempt as S, meterUsageEvent as Sa, runtimeOwnedExecutorProviderEvidence as Si, createSandboxLineage as Sn, loopEventToOtelSpan as Sr, readWorkerTraceContext as St, restoreScopeOwnerAcceptedExecution as T, spendFromUsageTotals as Ta, unknownExecutionBindingReceipt as Ti, captureBeforeDestroy as Tn, toOtelAttributes as Tr, workerTraceSeamKey as Tt, scopeRetainedOwnerTurnEnded as U, createSandboxToolPartState as Ui, startRetainedRunInEnvironment as Un, terminateProcessTreeAndConfirm as Ur, classifyDriverFailure as Ut, scopeRetainedOwnerRestorePoint as V, assertSandboxServedModel as Vi, recoverRetainedRun as Vn, parseCodexTokenUsage as Vr, DriverAttemptsExhaustedError as Vt, SPAWN_RESOURCE_PATH_MAX_BYTES as W, createSandboxUsageLedger as Wi, retainedCreateMaterial as Wn, AGENT_PROFILE_MATERIALIZATION_AXES as Wr, runDriverWithRetry as Wt, providerVisibleProfile as X, sandboxEventServedBackend as Xi, abortError as Xn, profileMaterializationAxes$1 as Xr, seatExecutionProfile as Xt, coordinationProfileToolPrefix as Y, notifySandboxEventObserver as Yi, RunCancellationReason as Yn, fullProfileMaterialization as Yr, authoredSeatStages as Yt, runtimeGraphMetadataKey as Z, sandboxProgressEvents as Zi, linkAbort as Zn, promptControlProfileMaterialization as Zr, subscriptionUsageLimitSignal as Zt, createScope as _, errMessage as _a, providerAttemptEvidence as _i, TERMINAL_DECISIONS as _n, buildRuntimeEventOtelSpans as _r, DEFAULT_SANDBOX_STEERING_MAX_TURNS as _t, collectDelivered as a, loadSpawnForest as aa, unsupportedProfileDimensions as ai, createContinuationKeeper as an, createCodeModeTools as ar, queueOf as at, meterRuntimeOwnedProviderAttempt as b, assertValidBudget as ba, runtimeOwnedExecutorExecutionBinding as bi, isTerminalDecision as bn, flatOtelSpan as br, createInPlaceCliExecutor as bt, runTree as c, WORKER_TOOL_TRACE_SCHEMA_VERSION as ca, attestRuntimeOwnedPendingExecutor as ci, failedItems as cn, priceTokens as cr, mapExecutorResult as ct, isDriverSpec as d, parseWorkerToolTraceArtifact as da, authoredProfileDigest as di, bridgeAdmissionRefusal as dn, createPropagatingTraceEmitter as dr, cliInPlaceExecutor as dt, FileResultBlobStore as ea, promptResourceProfileMaterialization as ei, CheckUnavailableError as en, harnessTranscriptArtifact as er, readWorkerInteractiveBinding as et, withDriverExecutor as f, workerTraceAnalysisStore as fa, finalizeRuntimeOwnedPendingExecutor as fi, bridgeModelRouteRefusal as fn, mergeTraceEnv as fr, cliWorktreeExecutor as ft, beginScopeOwnerAttempt as g, executorFailure as ga, newExecutionAttemptId as gi, readCodexRolloutSession as gn, buildLoopSpanNodes as gr, createWorktreeCliExecutor as gt, assertRecursiveReservationPolicy as h, detachedSnapshot as ha, knownMaterializationReceipt as hi, harnessUsageIsEmpty as hn, buildLoopOtelSpans as hr, snapshotExecutorConfig as ht, bestDelivered as i, insideCursorNamespace as ia, sandboxProfileMaterialization as ii, checkVerdictOf as in, retainHarnessTranscript as ir, freeSlots as it, bindScopeRetainedOwnerProvider as j, providerMessageText as ja, abortError$1 as ji, createAgentEnvironmentProviderRegistry as jn, runSettledCommand as jr, AUTHORITY_MARKERS as jt, beginScopeRetainedOwnerDrive as k, promptFromAgentTurnInput as ka, projectSandboxOutcome as ki, runBrainLoop as kn, sanitizeKnowledgeReadinessReport as kr, readWorkerProgress as kt, driverChild as l, captureWorkerTraceEvidence as la, attestRuntimeOwnedScopeOwner as li, passedItems as ln, routerTokenPrice as lr, bindReusableExecutorExecutionId as lt, SUBTREE_RESULT_LIMIT as m, detachedFrozen as ma, knownExecutionBindingReceipt as mi, createCodexRolloutStoreReader as mn, traceContextToEnv as mr, createExecutorRegistry as mt, createRootHandle as n, InMemoryResultBlobStore as na, renderUnsupported as ni, admitFinding as nn, readHarnessTranscript as nr, recoverRetainedInteractiveRun as nt, pickBestDelivered as o, materializeTreeView as oa, validateProfileMaterialization as oi, distillFindings as on, describeCodeModeTools as or, rollingDispatch as ot, DEFAULT_BUDGET_STOP_HOLD_MS as p, contentAddress as pa, inheritRuntimeOwnedExecutorAttestation as pi, addHarnessUsage as pn, readTraceContextFromEnv as pr, createExecutor as pt, resolveSpawnResourcePaths as q, mapSandboxEvent as qi, createWorkerSlots as qn, controlProfileMaterialization as qr, SeatChain as qt, createSupervisor as r, InMemorySpawnJournal as ra, sandboxActProfileMaterialization as ri, bestComposite as rn, resolveHarnessTranscriptCapture as rr, startRetainedInteractiveRun as rt, runFinalizer as s, replaySpawnTree as sa, worktreeCliProfileMaterialization as si, expandQuestions as sn, runCodeMode as sr, gateOnDeliverable as st, DEFAULT_MAX_DEPTH as t, FileSpawnJournal as ta, renderProfileMaterializationIssues as ti, admitContinuationPolicy as tn, persistHarnessTranscript as tr, reconnectRetainedInteractiveRun as tt, driverExecutorFactory as u, isTraceAnalysisStore as ua, authoredAgentIdentity as ui, verdictFromJudgeScore as un, ROUTER_PRICE_SOURCE as ur, captureReusableExecutorConfig as ut, deriveNodeExecutionIdentity as v, BudgetReconcileFault as va, recordRuntimeOwnedDriveHarnessProviderEvidence as vi, createSandboxForSpec as vn, createOpenInferenceFileExporter as vr, createSteerableSandboxSession as vt, recordScopeOwnerPause as w, spendFromUsageEvents as wa, runtimeOwnedScopeOwnerRuntime as wi, SandboxEvidenceRetentionError as wn, padTraceId as wr, workerTraceHeaders as wt, noteScopeOwnerPlannedExecution as x, createBudgetPool as xa, runtimeOwnedExecutorMaterialization as xi, runAgentRounds as xn, generateSpanId as xr, WORKER_TRACE_PROPAGATION as xt, meterRuntimeOwnedAccounting as y, ReservationWaitRefused as ya, runtimeOwnedDriveHarnessProviderEvidence as yi, defaultSelectWinner as yn, createOtelExporter as yr, createRouterTranscript as yt, scopeRetainedOwnerPriorSpend as z, TRACE_ROOT_SCHEMA as zi, bridgeStopSignalKey as zn, harnessSupportsReasoningEffort as zr, isLiveNodeStatus as zt };
 
-//# sourceMappingURL=supervisor-B-bkXttM.js.map
+//# sourceMappingURL=supervisor-D3zrWAlw.js.map