@tangle-network/agent-runtime 0.338.0 → 0.339.0

package/dist/{supervisor-CPG1I9UN.js → supervisor-DHrUJhEZ.js}

@@ -1,12 +1,12 @@
-import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
+import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-gNI9ILAn.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { n as recordValue, t as isRecord } from "./record-value-B6bwJxLa.js";
-import { $ as hasCompleteCacheBreakdown, At as teardownExecutor, Dt as checkInIdleMs, Et as boundedChildDeadlineAt, G as addSpend, J as cloneSpend, K as addTokenUsage, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as isDeadlineAbortReason, Q as fnv1a32Hex, Tt as armDeadlineTimer, U as hasControlCharacter, V as sha256Bytes$1, W as abortError, X as deleteBoxSafe, Y as cloneTokenUsage, Z as errorMessage, _t as resourceTelemetry, at as randomUuid, bt as CHILD_DEADLINE_REASON, c as verifyAgentCandidateWorkspaceTree, ct as stringifySafe, dt as unmeteredSpend, et as isAbortError$1, ft as withTimeout, g as verifyAgentCandidateWorkspaceArchive, gt as assertResources, ht as addResourceSpend, it as randomSuffix, j as verifyWorkspaceSnapshotArtifacts, jt as teardownSurfaces, kt as singleFlightTeardown, lt as throwAbort, mt as zeroTokenUsage, nt as mapWithConcurrency, o as readAgentCandidateWorkspaceArtifactFiles, ot as roundBoxMinutes, pt as zeroSpend, q as chargedTokens, rt as promptCacheTokenClasses, s as verifyAgentCandidateWorkspaceArtifacts, st as sleep, t as assertSandboxProfileCompatibility, tt as isAsyncIterable$1, ut as throwIfAborted, vt as withBudgetResources, wt as ROOT_DEADLINE_REASON, yt as ACCEPTED_RESULT_GRACE_MS } from "./sandbox-profile-compat-xSoVtdWw.js";
+import { $ as hasCompleteCacheBreakdown, At as teardownSurfaces, Ct as ROOT_DEADLINE_REASON, Dt as isDeadlineAbortReason, Et as checkInIdleMs, G as addSpend, J as cloneSpend, K as addTokenUsage, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as singleFlightTeardown, Q as fnv1a32Hex, Tt as boundedChildDeadlineAt, U as hasControlCharacter, V as sha256Bytes$1, W as abortError, X as deleteBoxSafe, Y as cloneTokenUsage, Z as errorMessage, _t as resourceTelemetry, at as randomUuid, bt as CHILD_DEADLINE_REASON, c as verifyAgentCandidateWorkspaceTree, ct as stringifySafe, dt as unmeteredSpend, et as isAbortError$1, ft as withTimeout, g as verifyAgentCandidateWorkspaceArchive, gt as assertResources, ht as addResourceSpend, it as randomSuffix, j as verifyWorkspaceSnapshotArtifacts, kt as teardownExecutor, lt as throwAbort, mt as zeroTokenUsage, nt as mapWithConcurrency, o as readAgentCandidateWorkspaceArtifactFiles, ot as roundBoxMinutes, pt as zeroSpend, q as chargedTokens, rt as promptCacheTokenClasses, s as verifyAgentCandidateWorkspaceArtifacts, st as sleep, t as assertSandboxProfileCompatibility, tt as isAsyncIterable$1, ut as throwIfAborted, vt as withBudgetResources, wt as armDeadlineTimer, yt as ACCEPTED_RESULT_GRACE_MS } from "./sandbox-profile-compat-BzVBFqrz.js";
 import { runTaskQueue } from "./task-queue.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
 import { t as sha256 } from "./content-digest-sBTLujlK.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-DBv31uPi.js";
+import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-C9Kde_0Z.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferReceiptSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, agentWorkspaceSnapshotRefDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, contextTransferReceiptMatches, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
 import { isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -2886,6 +2886,8 @@ function cappedDoublingMs(consecutive, first, ceiling) {
 	const start = Math.max(0, first);
 	return Math.min(Math.max(start, ceiling), start * 2 ** Math.max(0, consecutive - 1));
 }
+/** The longest hold a refusal's own reset time may ask for: a 5-hour plan window plus a margin. */
+const MAX_RESET_HOLD_MS = 360 * 6e4;
 /** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
 const FAR_RESET_PROBE_MS = 60 * 6e4;
 /**
@@ -2907,7 +2909,7 @@ function unavailableResumeAt(text, nowMs) {
 	if (zone === void 0) return void 0;
 	const at = Date.parse(`${match[1]}T${match[2]}${zone.length === 5 ? `${zone.slice(0, 3)}:${zone.slice(3)}` : zone}`);
 	if (!Number.isFinite(at) || at <= nowMs) return void 0;
-	return at - nowMs > 216e5 ? nowMs + FAR_RESET_PROBE_MS : at;
+	return at - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : at;
 }
 /**
 * Spread a wait over `[ms / 2, ms]`. Every driver a Platform restart cut off fails within the same
@@ -4289,15 +4291,6 @@ const HARNESS_INVOCATIONS = {
 /** Every local harness, in table order — the one list `AGENT_RUNTIME_LOCAL_HARNESSES` and any
 *  other harness enumeration reads, so adding a row above is the only edit a new harness needs. */
 const LOCAL_HARNESSES = Object.keys(HARNESS_INVOCATIONS);
-/** The harness a caller gets when it expresses no preference. A composition-root default, not a
-*  capability claim: one constant so the several entry points cannot drift apart. */
-const DEFAULT_LOCAL_HARNESS = "claude-code";
-/** The CLI binary a harness id runs. The two are NOT the same string (`claude-code` runs `claude`),
-*  so anything spawning a harness — a version probe, a login check — reads it from here rather than
-*  passing the harness id as a command. */
-function localHarnessExecutable(harness) {
-	return HARNESS_INVOCATIONS[harness].command;
-}
 /**
 * Whether the harness's native control can express this reasoning effort. Admission checks read
 * this so a profile the invocation would later refuse is rejected BEFORE any workspace state is
@@ -11553,7 +11546,7 @@ function toOpenInferenceLine(span) {
 * `maxQueueSize`. Every span ends in exactly one of `written` or `dropped`: a non-2xx response, a
 * network error, a timeout, an OTLP `partialSuccess.rejectedSpans` count and a full queue each count
 * as drops and set `lastError`. Nothing here throws into the caller's run; `flush()` reports the
-* loss, the same rule {@link createOpenInferenceFileExporter} follows.
+* loss, the same rule `createOpenInferenceFileExporter` follows.
 */
 function createOtelExporter(config) {
 	const resolvedEndpoint = config?.endpoint ?? (typeof process !== "undefined" ? process.env.OTEL_EXPORTER_OTLP_ENDPOINT : void 0);
@@ -13264,172 +13257,6 @@ const cliInPlaceExecutor = (spec, ctx) => {
 	});
 };
 //#endregion
-//#region src/runtime/supervise/cli-process-executor.ts
-/**
-* Spawns a subprocess (`bin` + `args`). It cannot account tokens, so it is
-* `budgetExempt: true`: it remains usable as a direct executor, while budgeted supervision
-* refuses it before process execution because the CLI exposes no usage receipt. teardown is SIGTERM → SIGKILL
-* with a grace window. Streaming: yields one `iteration` event on clean exit.
-*
-* Its terminal spend is `unmeteredSpend`, NOT a zero: an unmetered runtime that reports a plain
-* `0` is indistinguishable from one that measured zero, and every ceiling downstream then reads
-* as enforced while enforcing nothing.
-*/
-const cliExecutor = (spec, ctx) => {
-	const seam = readSeam(ctx, "cli", "cli");
-	if (!seam.bin) throw new ValidationError$1("cliExecutor: CliSeam.bin required");
-	const traceEnv = {
-		...workerLineage({
-			harness: seam.bin,
-			nodeId: ctx.node?.nodeId,
-			label: spec.profile.name,
-			local: true
-		}).env,
-		...workerTraceEnv(ctx)
-	};
-	const controller = linkAbort(ctx.signal);
-	let proc;
-	let artifact;
-	const executionId = ctx.node?.nodeId ?? `cli-process-${randomUUID()}`;
-	const attemptId = ctx.node?.attemptId ?? newExecutionAttemptId(executionId);
-	return attestRuntimeOwnedExecutor({
-		runtime: "cli",
-		budgetExempt: true,
-		execute(task, signal) {
-			return streamCliLeaf({
-				task,
-				signal,
-				traceEnv,
-				seam,
-				controller,
-				onProc: (p) => {
-					proc = p;
-				},
-				onArtifact: (a) => {
-					artifact = a;
-				}
-			});
-		},
-		async teardown(grace) {
-			if (!proc) {
-				controller.abort();
-				return { destroyed: true };
-			}
-			const receipt = await killWithGrace(proc, grace);
-			controller.abort();
-			return receipt;
-		},
-		resultArtifact() {
-			if (!artifact) throw new ValidationError$1("cliExecutor: resultArtifact() read before stream drained");
-			return artifact;
-		}
-	}, {
-		effectiveProfile: spec.profile,
-		backend: "cli",
-		model: {
-			status: "unknown",
-			reason: "raw subprocess has no model identity contract"
-		},
-		execution: {
-			kind: "process-attempt",
-			id: executionId
-		},
-		materializer: "raw-cli-stdin",
-		plan: {
-			kind: "raw-cli-process",
-			bin: seam.bin,
-			args: seam.args ?? [],
-			cwd: seam.cwd ?? null,
-			envOverrides: seam.env ?? {},
-			ambientEnvironment: "inherited"
-		}
-	}, {
-		attemptId,
-		binding: {
-			executionId,
-			bin: seam.bin,
-			cwd: seam.cwd ?? null
-		},
-		descriptor: {
-			kind: "cli-process",
-			transport: "process",
-			backend: "cli"
-		}
-	});
-};
-async function* streamCliLeaf(args) {
-	const started = Date.now();
-	const prompt = taskToPrompt$1(args.task);
-	const proc = spawn(args.seam.bin, args.seam.args ?? [], {
-		...args.seam.cwd ? { cwd: args.seam.cwd } : {},
-		env: mergeTraceEnv(process.env, args.traceEnv, args.seam.env),
-		stdio: [
-			"pipe",
-			"pipe",
-			"pipe"
-		]
-	});
-	args.onProc(proc);
-	const onAbort = () => killWithGrace(proc, "brutalKill");
-	if (args.signal.aborted || args.controller.signal.aborted) onAbort();
-	else {
-		args.signal.addEventListener("abort", onAbort, { once: true });
-		args.controller.signal.addEventListener("abort", onAbort, { once: true });
-	}
-	let deliveryError;
-	if (proc.stdin) {
-		proc.stdin.on("error", (error) => {
-			if (error.code !== "EPIPE") deliveryError ??= error;
-		});
-		proc.stdin.write(prompt);
-		proc.stdin.end();
-	}
-	const chunks = [];
-	const errChunks = [];
-	if (proc.stdout) proc.stdout.on("data", (d) => chunks.push(d.toString("utf8")));
-	if (proc.stderr) proc.stderr.on("data", (d) => errChunks.push(d.toString("utf8")));
-	const exit = await new Promise((resolve) => {
-		proc.once("error", (err) => resolve({
-			code: null,
-			error: err
-		}));
-		proc.once("close", (code) => resolve({ code }));
-	});
-	args.signal.removeEventListener("abort", onAbort);
-	args.controller.signal.removeEventListener("abort", onAbort);
-	if (exit.error) throw new ValidationError$1(`cliExecutor: spawn failed: ${exit.error.message}`, { cause: exit.error });
-	if (exit.code !== 0) throw new ValidationError$1(`cliExecutor: ${args.seam.bin} exited ${exit.code}: ${errChunks.join("").slice(0, 200)}`);
-	if (deliveryError) throw new ValidationError$1(`cliExecutor: could not deliver the task to ${args.seam.bin}: ${deliveryError.message}`, { cause: deliveryError });
-	const out = { content: chunks.join("") };
-	args.onArtifact({
-		outRef: contentRef("cli", out),
-		out,
-		spent: unmeteredSpend(Date.now() - started)
-	});
-	yield { kind: "iteration" };
-}
-/** SIGTERM, then SIGKILL after `grace` ms (`'brutalKill'` = immediate SIGKILL,
-*  `'infinity'` = await clean exit, never escalate). */
-function killWithGrace(proc, grace) {
-	if (proc.pid === void 0 || proc.exitCode !== null || proc.signalCode !== null) return Promise.resolve({ destroyed: true });
-	return new Promise((resolve) => {
-		let clearTimer;
-		proc.once("close", () => {
-			clearTimer?.();
-			resolve({ destroyed: true });
-		});
-		if (grace === "brutalKill") {
-			proc.kill("SIGKILL");
-			return;
-		}
-		proc.kill("SIGTERM");
-		if (grace === "infinity") return;
-		clearTimer = armDeadlineTimer(grace, () => {
-			if (proc.exitCode === null && proc.signalCode === null) proc.kill("SIGKILL");
-		}, true);
-	});
-}
-//#endregion
 //#region src/runtime/provider-placement.ts
 const placementMetadataKey = "runtimeProviderPlacement";
 /** Select exactly one declaration before any provider effects. Shared defaults carry infrastructure only. */
@@ -14505,6 +14332,8 @@ function normalizeWorkerSlotBound(value) {
 	if (!Number.isSafeInteger(value)) throw new ValidationError$1(`workerSlots must be a positive safe integer, or 0 or less for no bound, got ${String(value)}`);
 	return value;
 }
+/** Default {@link ProviderWorkspaceRetentionPort.nativeTimeoutMs}. */
+const DEFAULT_NATIVE_CAPTURE_TIMEOUT_MS = 12e4;
 /** At most this many stage entries are kept from a port, each a finite, non-negative number. */
 const MAX_CAPTURE_STAGES = 16;
 function captureStages(value) {
@@ -14744,7 +14573,7 @@ async function captureProviderWorkspaceSnapshot(port, context, scope = "environm
 async function captureWithinSlot(port, context, scope, onGranted, parent) {
 	const native = scope === "native";
 	if (native && port.captureNative === void 0) throw new ValidationError$1("provider workspace retention: the port has no captureNative");
-	const timeoutMs = native ? port.nativeTimeoutMs ?? 12e4 : port.timeoutMs;
+	const timeoutMs = native ? port.nativeTimeoutMs ?? DEFAULT_NATIVE_CAPTURE_TIMEOUT_MS : port.timeoutMs;
 	const controlRef = context.controlRef === void 0 ? void 0 : AgentExactRunControlRefSchema.parse(context.controlRef);
 	if (controlRef !== void 0 && (controlRef.environmentId !== context.environment.id || controlRef.provider !== context.environment.provider || context.providerSessionId != null && controlRef.sessionId !== context.providerSessionId)) throw new Error("provider workspace retention control reference names another environment or session");
 	const controller = new AbortController();
@@ -18667,6 +18496,172 @@ function resolveAgentEnvironmentProvider(provider, registry) {
 	return registry.require(provider);
 }
 //#endregion
+//#region src/runtime/supervise/cli-process-executor.ts
+/**
+* Spawns a subprocess (`bin` + `args`). It cannot account tokens, so it is
+* `budgetExempt: true`: it remains usable as a direct executor, while budgeted supervision
+* refuses it before process execution because the CLI exposes no usage receipt. teardown is SIGTERM → SIGKILL
+* with a grace window. Streaming: yields one `iteration` event on clean exit.
+*
+* Its terminal spend is `unmeteredSpend`, NOT a zero: an unmetered runtime that reports a plain
+* `0` is indistinguishable from one that measured zero, and every ceiling downstream then reads
+* as enforced while enforcing nothing.
+*/
+const cliExecutor = (spec, ctx) => {
+	const seam = readSeam(ctx, "cli", "cli");
+	if (!seam.bin) throw new ValidationError$1("cliExecutor: CliSeam.bin required");
+	const traceEnv = {
+		...workerLineage({
+			harness: seam.bin,
+			nodeId: ctx.node?.nodeId,
+			label: spec.profile.name,
+			local: true
+		}).env,
+		...workerTraceEnv(ctx)
+	};
+	const controller = linkAbort(ctx.signal);
+	let proc;
+	let artifact;
+	const executionId = ctx.node?.nodeId ?? `cli-process-${randomUUID()}`;
+	const attemptId = ctx.node?.attemptId ?? newExecutionAttemptId(executionId);
+	return attestRuntimeOwnedExecutor({
+		runtime: "cli",
+		budgetExempt: true,
+		execute(task, signal) {
+			return streamCliLeaf({
+				task,
+				signal,
+				traceEnv,
+				seam,
+				controller,
+				onProc: (p) => {
+					proc = p;
+				},
+				onArtifact: (a) => {
+					artifact = a;
+				}
+			});
+		},
+		async teardown(grace) {
+			if (!proc) {
+				controller.abort();
+				return { destroyed: true };
+			}
+			const receipt = await killWithGrace(proc, grace);
+			controller.abort();
+			return receipt;
+		},
+		resultArtifact() {
+			if (!artifact) throw new ValidationError$1("cliExecutor: resultArtifact() read before stream drained");
+			return artifact;
+		}
+	}, {
+		effectiveProfile: spec.profile,
+		backend: "cli",
+		model: {
+			status: "unknown",
+			reason: "raw subprocess has no model identity contract"
+		},
+		execution: {
+			kind: "process-attempt",
+			id: executionId
+		},
+		materializer: "raw-cli-stdin",
+		plan: {
+			kind: "raw-cli-process",
+			bin: seam.bin,
+			args: seam.args ?? [],
+			cwd: seam.cwd ?? null,
+			envOverrides: seam.env ?? {},
+			ambientEnvironment: "inherited"
+		}
+	}, {
+		attemptId,
+		binding: {
+			executionId,
+			bin: seam.bin,
+			cwd: seam.cwd ?? null
+		},
+		descriptor: {
+			kind: "cli-process",
+			transport: "process",
+			backend: "cli"
+		}
+	});
+};
+async function* streamCliLeaf(args) {
+	const started = Date.now();
+	const prompt = taskToPrompt$1(args.task);
+	const proc = spawn(args.seam.bin, args.seam.args ?? [], {
+		...args.seam.cwd ? { cwd: args.seam.cwd } : {},
+		env: mergeTraceEnv(process.env, args.traceEnv, args.seam.env),
+		stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		]
+	});
+	args.onProc(proc);
+	const onAbort = () => killWithGrace(proc, "brutalKill");
+	if (args.signal.aborted || args.controller.signal.aborted) onAbort();
+	else {
+		args.signal.addEventListener("abort", onAbort, { once: true });
+		args.controller.signal.addEventListener("abort", onAbort, { once: true });
+	}
+	let deliveryError;
+	if (proc.stdin) {
+		proc.stdin.on("error", (error) => {
+			if (error.code !== "EPIPE") deliveryError ??= error;
+		});
+		proc.stdin.write(prompt);
+		proc.stdin.end();
+	}
+	const chunks = [];
+	const errChunks = [];
+	if (proc.stdout) proc.stdout.on("data", (d) => chunks.push(d.toString("utf8")));
+	if (proc.stderr) proc.stderr.on("data", (d) => errChunks.push(d.toString("utf8")));
+	const exit = await new Promise((resolve) => {
+		proc.once("error", (err) => resolve({
+			code: null,
+			error: err
+		}));
+		proc.once("close", (code) => resolve({ code }));
+	});
+	args.signal.removeEventListener("abort", onAbort);
+	args.controller.signal.removeEventListener("abort", onAbort);
+	if (exit.error) throw new ValidationError$1(`cliExecutor: spawn failed: ${exit.error.message}`, { cause: exit.error });
+	if (exit.code !== 0) throw new ValidationError$1(`cliExecutor: ${args.seam.bin} exited ${exit.code}: ${errChunks.join("").slice(0, 200)}`);
+	if (deliveryError) throw new ValidationError$1(`cliExecutor: could not deliver the task to ${args.seam.bin}: ${deliveryError.message}`, { cause: deliveryError });
+	const out = { content: chunks.join("") };
+	args.onArtifact({
+		outRef: contentRef("cli", out),
+		out,
+		spent: unmeteredSpend(Date.now() - started)
+	});
+	yield { kind: "iteration" };
+}
+/** SIGTERM, then SIGKILL after `grace` ms (`'brutalKill'` = immediate SIGKILL,
+*  `'infinity'` = await clean exit, never escalate). */
+function killWithGrace(proc, grace) {
+	if (proc.pid === void 0 || proc.exitCode !== null || proc.signalCode !== null) return Promise.resolve({ destroyed: true });
+	return new Promise((resolve) => {
+		let clearTimer;
+		proc.once("close", () => {
+			clearTimer?.();
+			resolve({ destroyed: true });
+		});
+		if (grace === "brutalKill") {
+			proc.kill("SIGKILL");
+			return;
+		}
+		proc.kill("SIGTERM");
+		if (grace === "infinity") return;
+		clearTimer = armDeadlineTimer(grace, () => {
+			if (proc.exitCode === null && proc.signalCode === null) proc.kill("SIGKILL");
+		}, true);
+	});
+}
+//#endregion
 //#region src/runtime/router-http-transport.ts
 /** Router HTTP attempts, response evidence, retries, and request cancellation. */
 function routerRequestHeaders(cfg, opts) {
@@ -19766,7 +19761,7 @@ function forTurnEvent(message) {
 	const content = message.content;
 	if (typeof content !== "string") return message;
 	const bytes = Buffer.byteLength(content);
-	if (bytes <= 262144) return message;
+	if (bytes <= TURN_CONTENT_BYTES) return message;
 	return {
 		...message,
 		content: Buffer.from(content).subarray(0, TURN_CONTENT_BYTES).toString("utf8"),
@@ -25468,8 +25463,6 @@ const admissionSeals = /* @__PURE__ */ new WeakMap();
 const subtreeReaders = /* @__PURE__ */ new WeakMap();
 /** Each scope's reader of its live team, for the progress its owner's lead reads mid-flight. */
 const liveTeamReaders = /* @__PURE__ */ new WeakMap();
-/** How many of a manager's direct children its summary lists; the counts always cover all. */
-const SUBTREE_RESULT_LIMIT = 8;
 /** @internal The bounded account of the children a scope spawned and everything below them.
 *  `undefined` when the scope spawned no worker. */
 function subtreeSummaryOf(scope) {
@@ -25514,9 +25507,6 @@ function unconfirmedTeardownOf(child, releasing) {
 		...child.teardownDetail === void 0 ? {} : { detail: child.teardownDetail }
 	});
 }
-/** Ten minutes: a manager that is alive decides within a turn or two; one that crashed, or a host
-*  that restarted, must not leave a paid environment running until a retire pass finds it. */
-const DEFAULT_BUDGET_STOP_HOLD_MS = 6e5;
 /**
 * @internal Release every environment this scope's settled children still hold after a budget
 * stop, at the join barrier: no later spawn of this scope can continue them. Each release journals
@@ -27969,20 +27959,6 @@ function overBudget(budget, spent) {
 * here so the scope and the driver-executor agree on the seam without a circular import.
 */
 const nestedScopeSeamKey = "nested-scope";
-//#endregion
-//#region src/runtime/supervise/trace-evidence.ts
-/**
-* Durable structured tool evidence for supervised workers.
-*
-* The executor-owned `TraceSource` is collected before teardown, snapshotted into the shared
-* content-addressed blob store, and only then referenced by a settlement. Analysis reconstructs
-* agent-eval's bounded `TraceAnalysisStore` from those exact bytes. Worker output is never accepted
-* as a substitute for tool evidence.
-*
-* @experimental
-*/
-/** Schema version for content-addressed worker tool-trace artifacts. */
-const WORKER_TOOL_TRACE_SCHEMA_VERSION = 1;
 /** Structural guard for the official bounded trace-analysis read contract. */
 function isTraceAnalysisStore(value) {
 	if (value === null || typeof value !== "object") return false;
@@ -30629,27 +30605,6 @@ function pickBestDelivered(delivered) {
 *  delivered (or the best delivered child carries no artifact). */
 const bestDelivered = (ctx) => pickBestDelivered(ctx.delivered)?.out;
 /**
-* Every verified distinct output, highest score first — the shape for competing hypotheses, a
-* Pareto front, or a recorded evaluator split (three judges 2:1 → both outputs survive, with
-* provenance, instead of the minority report being erased). Distinct by `outRef` (content
-* address), so identical outputs collapse to one entry. `undefined` when nothing delivered —
-* an empty collection is a no-winner, not a winner wrapping `[]`.
-*/
-const collectDelivered = (ctx) => {
-	const seen = /* @__PURE__ */ new Set();
-	const distinct = [...ctx.delivered].sort((a, b) => (b.score ?? 0) - (a.score ?? 0)).filter((w) => {
-		if (w.outRef === void 0 || seen.has(w.outRef)) return false;
-		seen.add(w.outRef);
-		return true;
-	}).map((w) => ({
-		id: w.id,
-		score: w.score,
-		outRef: w.outRef,
-		out: w.out
-	}));
-	return distinct.length > 0 ? distinct : void 0;
-};
-/**
 * Run a finalizer over a settled-worker ledger under the delivered-only invariant: filter the
 * ledger to structurally delivered children, materialize their outputs, and hand the finalizer a
 * blob reader that throws on any ref outside that set. This is the one call site both driver arms
@@ -30698,18 +30653,6 @@ async function runFinalizer(finalizer, args) {
 	});
 	return await accepted(candidate) ? candidate : void 0;
 }
-/** Keep-best finalize under the completion-oracle: return the highest-scoring DELIVERED child's
-*  output (settled `done` AND `valid` — its deliverable check passed). Returns undefined when no
-*  child delivered — an honest "the driver produced nothing", never a high-scoring result that
-*  ran without passing its check (Foreman's 0/18 lesson). `valid` is the single delivery signal,
-*  matching `defaultSelectWinner`'s valid-first rule; the oracle just doesn't fall back to an
-*  unchecked best-effort. The same argmax as the `bestDelivered` finalizer (`pickBestDelivered`);
-*  this direct form serves callers that hold a bare ledger + blob store. */
-async function finalizeBestDelivered(settled, blobs) {
-	const best = pickBestDelivered(settled.filter((w) => w.status === "done" && w.valid === true));
-	if (best === void 0) return void 0;
-	return best.outRef ? await blobs.get(best.outRef) : void 0;
-}
 //#endregion
 //#region src/runtime/supervise/run-persistence.ts
 /** One failed store operation revokes this controller's writes, never its retained executions. */
@@ -31835,6 +31778,6 @@ function createSupervisor() {
 	};
 }
 //#endregion
-export { scopeRetainedOwnerPriorSpend as $, cappedDoublingMs as $i, isLiveNodeStatus as $n, parseCodexTokenUsage as $r, destroyInteractiveEnvironment as $t, recordScopeOwnerMaterialization as A, createSandboxUsageLedger as Aa, inheritRuntimeOwnedExecutorAttestation as Ai, padSpanId as An, priceTokens as Ar, SandboxEvidenceRetentionError as At, freeSlots as B, runtimeOwnedPendingExecutorMaterialization as Bi, failPendingAfter as Bn, decodeToolPart as Br, toolResultText as Bt, readWorkerInteractiveBinding as C, mapSandboxEvent as Ca, validateProfileMaterialization as Ci, buildLoopSpanNodes as Cn, checkVerdictOf as Cr, createSteerableSandboxSession as Ct, FileSpawnJournal as D, canonicalStreamEventFromSandboxEvent as Da, authoredAgentIdentity as Di, flatOtelSpan as Dn, failedItems as Dr, createSandboxForSpec as Dt, startRetainedInteractiveRun as E, terminalTextFromSandboxEvent as Ea, attestRuntimeOwnedScopeOwner as Ei, createOtelExporter as En, expandQuestions as Er, readPromptOptions as Et, providerVisibleProfile as F, decodeHarnessUsage as Fa, recordRuntimeOwnedDriveHarnessProviderEvidence as Fi, sanitizeAgentRuntimeEvent as Fn, addHarnessUsage as Fr, codeModeArguments as Ft, meterRuntimeOwnedAccounting as G, executableAgentSpecSnapshot as Gi, createPeerMailbox as Gn, signalAbortError as Gr, providerAsExecutor as Gt, rollingDispatch as H, unknownExecutionBindingReceipt as Hi, DEFAULT_PEER_MAIL_LIMITS as Hn, RunCancellationReason as Hr, routerBrain as Ht, runtimeGraphMetadataKey as I, awaitAbortable$1 as Ia, runtimeOwnedDriveHarnessProviderEvidence as Ii, sanitizeKnowledgeReadinessReport as In, createCodexRolloutStoreReader as Ir, codeModeModelOutput as It, recordScopeOwnerPause as J, runtimeFailureCause as Ji, peerMailVerbNames as Jn, runSettledCommand as Jr, reconnectRetainedRun as Jt, meterRuntimeOwnedProviderAttempt as K, projectSandboxOutcome as Ki, isPeerMailEnvelope as Kn, bridgeRuntimeAttachmentsKey as Kr, LEAF_CONTINUATION_TASK as Kt, settledToIteration as L, promptFromAgentTurnInput as La, runtimeOwnedExecutorExecutionBinding as Li, sanitizeRuntimeStreamEvent as Ln, harnessUsageIsEmpty as Lr, createCodeModeTools as Lt, scopeOwnerExecutorNodeContext as M, notifySandboxEventObserver as Ma, knownMaterializationReceipt as Mi, toOtelAttributes as Mn, ROUTER_PRICE_SOURCE as Mr, TERMINAL_DECISIONS as Mt, coordinationMcpAlias as N, sandboxEventServedBackend as Na, newExecutionAttemptId as Ni, createRuntimeEventCollector as Nn, bridgeAdmissionRefusal as Nr, defaultSelectWinner as Nt, beginScopeOwnerAttempt as O, assertSandboxServedModel as Oa, authoredProfileDigest as Oi, generateSpanId as On, passedItems as Or, createSandboxLineage as Ot, coordinationProfileToolPrefix as P, sumSandboxUsage as Pa, providerAttemptEvidence as Pi, createRuntimeStreamEventCollector as Pn, bridgeModelRouteRefusal as Pr, isTerminalDecision as Pt, prepareScopeRetainedOwnerTask as Q, retainedExecutorSeamKey as Qi, readWorkerProgress as Qn, removeWorktree as Qr, retainedCreateMaterial as Qt, assertRecursiveReservationPolicy as R, promptOptionsFromAgentTurnInput as Ra, runtimeOwnedExecutorMaterialization as Ri, INBOX_RECEIPT_KEY as Rn, readCodexRolloutSession as Rr, describeCodeModeTools as Rt, attachWorker as S, createSandboxToolPartState as Sa, unsupportedProfileDimensions as Si, buildLoopOtelSpans as Sn, bestComposite as Sr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as St, recoverRetainedInteractiveRun as T, sandboxProgressEvents as Ta, attestRuntimeOwnedPendingExecutor as Ti, createOpenInferenceFileExporter as Tn, distillFindings as Tr, assertBoxlessPromptOptions as Tt, DEFAULT_BUDGET_STOP_HOLD_MS as U, unknownMaterializationReceipt as Ui, PEER_MAIL_WIRE_KEY as Un, linkAbort as Ur, createAgentEnvironmentProviderRegistry as Ut, queueOf as V, runtimeOwnedScopeOwnerRuntime as Vi, AUTHORITY_MARKERS as Vn, sandboxSessionTraceSource as Vr, createRouterTranscript as Vt, SUBTREE_RESULT_LIMIT as W, executableAgentProfileSnapshot as Wi, claimsAuthority as Wn, runAbortable as Wr, resolveAgentEnvironmentProvider as Wt, abandonScopeRetainedOwnerInvocation as X, RetainedExecutionPendingError as Xi, DEFAULT_STALL_AFTER_MS as Xn, captureWorktreeDiff as Xr, startRetainedRun as Xt, prepareScopeRetainedOwnerSeatSwitch as Y, settlementFailureCause as Yi, taskToPrompt$1 as Yn, runWorktreeHarness as Yr, recoverRetainedRun as Yt, consumeScopeRetainedOwnerResult as Z, registerRetainedExecutorPreparation as Zi, createActivityLog as Zn, createWorktree as Zr, startRetainedRunInEnvironment as Zt, captureWorkerTraceEvidence as _, spendFromUsageTotals as _a, promptResourceProfileMaterialization as _i, workerTraceSeamKey as _n, verdictFromJudgeScore as _r, createExecutorRegistry as _t, finalizeBestDelivered as a, TRACE_SUMMARY_SCHEMA as aa, localHarnessExecutable as ai, persistHarnessTranscript as an, classifyDriverFailure as ar, noteScopeRetainedOwnerCoordination as at, workerTraceAnalysisStore as b, defaultRedactorIdentityMaterial as ba, sandboxActProfileMaterialization as bi, readTraceContextFromEnv as bn, admitContinuationPolicy as br, createExecutor as bt, runTree as c, contentAddress as ca, assertProfileMaterialization as ci, retainHarnessTranscript as cn, upstreamUnavailableSignal as cr, owners as ct, driverExecutorFactory as d, BudgetReconcileFault as da, defineProfileMaterializationContract as di, createWorktreeCliExecutor as dn, authoredSeatStages as dr, loadSpawnForest as dt, jitteredMs as ea, CodexExecutionDiagnosticError as ei, environmentGone as en, isTerminalNodeStatus as er, scopeRetainedOwnerResult as et, isDriverSpec as f, ReservationWaitRefused as fa, fullProfileMaterialization as fi, createInPlaceCliExecutor as fn, seatExecutionProfile as fr, materializeTreeView as ft, WORKER_TOOL_TRACE_SCHEMA_VERSION as g, spendFromUsageEvents as ga, promptOnlyProfileMaterialization as gi, workerTraceHeaders as gn, mapExecutorResult as gr, insideCursorNamespace as gt, replaySpawnTree as h, newUsageTotals as ha, promptModelProfileMaterialization as hi, workerTraceEnv as hn, gateOnDeliverable as hr, FileResultBlobStore as ht, collectDelivered as i, TRACE_ROOT_SCHEMA as ia, harnessSupportsReasoningEffort as ii, harnessTranscriptArtifact as in, causedByPartialFailure as ir, scopeRetainedOwnerRestorePoint as it, restoreScopeOwnerAcceptedExecution as j, extractLlmCallEvent as ja, knownExecutionBindingReceipt as ji, padTraceId as jn, routerTokenPrice as jr, captureBeforeDestroy as jt, noteScopeOwnerPlannedExecution as k, createSandboxTurnEventCollector as ka, finalizeRuntimeOwnedPendingExecutor as ki, loopEventToOtelSpan as kn, isFiniteNumber as kr, acquireSandbox as kt, createRootHandle as l, executorFailure as la, assertProfileMaterializes as li, cliInPlaceExecutor as ln, SeatChain as lr, scopeRetainedOwnerContext as lt, createScope as m, meterUsageEvent as ma, promptControlProfileMaterialization as mi, readWorkerTraceContext as mn, CheckUnavailableError as mr, InMemorySpawnJournal as mt, createSupervisor as n, unavailableResumeAt as na, LOCAL_HARNESSES as ni, openSlotGroup as nn, HarnessTurnFailedError as nr, scopeRetainedOwnerTurnEnded as nt, pickBestDelivered as o, detachedFrozen as oa, terminateProcessTreeAndConfirm as oi, readHarnessTranscript as on, summarizeDriverAttempts as or, bindScopeRetainedOwnerEnvironmentId as ot, withDriverExecutor as p, createBudgetPool as pa, profileMaterializationAxes$1 as pi, WORKER_TRACE_PROPAGATION as pn, subscriptionUsageLimitSignal as pr, InMemoryResultBlobStore as pt, recordScopeOwnerDriverAttempt as q, readSandboxOutcome as qi, peerMailTools as qn, bridgeStopSignalKey as qr, providerAsSandboxClient as qt, bestDelivered as r, unavailableSignalOfFailure as ra, harnessInvocation as ri, captureHarnessTranscript as rn, abandonablePending as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, detachedSnapshot as sa, AGENT_PROFILE_MATERIALIZATION_AXES as si, resolveHarnessTranscriptCapture as sn, undispatchedCredentialExit as sr, bindScopeRetainedOwnerProvider as st, DEFAULT_MAX_DEPTH as t, unavailablePauseMs as ta, DEFAULT_LOCAL_HARNESS as ti, createWorkerSlots as tn, DriverAttemptsExhaustedError as tr, beginScopeRetainedOwnerDrive as tt, driverChild as u, errMessage as ua, controlProfileMaterialization as ui, cliWorktreeExecutor as un, SeatChainExhaustedError as ur, scopeRetainedOwnerJournalRoot as ut, isTraceAnalysisStore as v, assertValidBudget as va, renderProfileMaterializationIssues as vi, createPropagatingTraceEmitter as vn, CONTINUATIONS_DIR as vr, bindReusableExecutorExecutionId as vt, reconnectRetainedInteractiveRun as w, mapSandboxToolEvent as wa, worktreeCliProfileMaterialization as wi, buildRuntimeEventOtelSpans as wn, createContinuationKeeper as wr, runAgentRounds as wt, interactiveAdmissionSeamKey as x, resolveRedactor as xa, sandboxProfileMaterialization as xi, traceContextToEnv as xn, admitFinding as xr, snapshotExecutorConfig as xt, parseWorkerToolTraceArtifact as y, defaultRedactor as ya, renderUnsupported as yi, mergeTraceEnv as yn, CONTINUATION_FACTS as yr, captureReusableExecutorConfig as yt, deriveNodeExecutionIdentity as z, providerMessageText as za, runtimeOwnedExecutorProviderEvidence as zi, createInbox as zn, createPushTraceSource as zr, runCodeMode as zt };
+export { bindScopeRetainedOwnerEnvironmentId as $, providerMessageText as $i, CONTINUATIONS_DIR as $n, providerAttemptEvidence as $r, createInPlaceCliExecutor as $t, providerVisibleProfile as A, createBudgetPool as Ai, taskToPrompt$1 as An, controlProfileMaterialization as Ar, createRouterTranscript as At, recordScopeOwnerDriverAttempt as B, mapSandboxEvent as Bi, classifyDriverFailure as Bn, sandboxProfileMaterialization as Br, startRetainedRunInEnvironment as Bt, beginScopeOwnerAttempt as C, TRACE_ROOT_SCHEMA as Ci, DEFAULT_PEER_MAIL_LIMITS as Cn, runSettledCommand as Cr, TERMINAL_DECISIONS as Ct, scopeOwnerExecutorNodeContext as D, contentAddress as Di, isPeerMailEnvelope as Dn, terminateProcessTreeAndConfirm as Dr, createCodeModeTools as Dt, restoreScopeOwnerAcceptedExecution as E, detachedSnapshot as Ei, createPeerMailbox as En, harnessInvocation as Er, codeModeModelOutput as Et, freeSlots as F, assertValidBudget as Fi, isTerminalNodeStatus as Fn, promptModelProfileMaterialization as Fr, LEAF_CONTINUATION_TASK as Ft, prepareScopeRetainedOwnerTask as G, createSandboxUsageLedger as Gi, SeatChainExhaustedError as Gn, attestRuntimeOwnedScopeOwner as Gr, openSlotGroup as Gt, prepareScopeRetainedOwnerSeatSwitch as H, terminalTextFromSandboxEvent as Hi, undispatchedCredentialExit as Hn, validateProfileMaterialization as Hr, destroyInteractiveEnvironment as Ht, queueOf as I, defaultRedactor as Ii, DriverAttemptsExhaustedError as In, promptOnlyProfileMaterialization as Ir, providerAsSandboxClient as It, beginScopeRetainedOwnerDrive as J, sumSandboxUsage as Ji, subscriptionUsageLimitSignal as Jn, finalizeRuntimeOwnedPendingExecutor as Jr, persistHarnessTranscript as Jt, scopeRetainedOwnerPriorSpend as K, extractLlmCallEvent as Ki, authoredSeatStages as Kn, authoredAgentIdentity as Kr, captureHarnessTranscript as Kt, rollingDispatch as L, defaultRedactorIdentityMaterial as Li, HarnessTurnFailedError as Ln, promptResourceProfileMaterialization as Lr, reconnectRetainedRun as Lt, settledToIteration as M, newUsageTotals as Mi, createActivityLog as Mn, fullProfileMaterialization as Mr, createAgentEnvironmentProviderRegistry as Mt, assertRecursiveReservationPolicy as N, spendFromUsageEvents as Ni, readWorkerProgress as Nn, profileMaterializationAxes$1 as Nr, resolveAgentEnvironmentProvider as Nt, coordinationMcpAlias as O, executorFailure as Oi, peerMailTools as On, assertProfileMaterialization as Or, runCodeMode as Ot, deriveNodeExecutionIdentity as P, spendFromUsageTotals as Pi, isLiveNodeStatus as Pn, promptControlProfileMaterialization as Pr, providerAsExecutor as Pt, noteScopeRetainedOwnerCoordination as Q, promptOptionsFromAgentTurnInput as Qi, verdictFromJudgeScore as Qn, newExecutionAttemptId as Qr, createWorktreeCliExecutor as Qt, meterRuntimeOwnedAccounting as R, resolveRedactor as Ri, abandonablePending as Rn, renderUnsupported as Rr, recoverRetainedRun as Rt, FileSpawnJournal as S, unavailableSignalOfFailure as Si, AUTHORITY_MARKERS as Sn, bridgeStopSignalKey as Sr, acquireSandbox as St, recordScopeOwnerMaterialization as T, detachedFrozen as Ti, claimsAuthority as Tn, LOCAL_HARNESSES as Tr, codeModeArguments as Tt, abandonScopeRetainedOwnerInvocation as U, canonicalStreamEventFromSandboxEvent as Ui, upstreamUnavailableSignal as Un, worktreeCliProfileMaterialization as Ur, environmentGone as Ut, recordScopeOwnerPause as V, mapSandboxToolEvent as Vi, summarizeDriverAttempts as Vn, unsupportedProfileDimensions as Vr, retainedCreateMaterial as Vt, consumeScopeRetainedOwnerResult as W, createSandboxTurnEventCollector as Wi, SeatChain as Wn, attestRuntimeOwnedPendingExecutor as Wr, createWorkerSlots as Wt, reconcileScopeRetainedOwnerEnvironment as X, awaitAbortable$1 as Xi, gateOnDeliverable as Xn, knownExecutionBindingReceipt as Xr, resolveHarnessTranscriptCapture as Xt, scopeRetainedOwnerTurnEnded as Y, decodeHarnessUsage as Yi, CheckUnavailableError as Yn, inheritRuntimeOwnedExecutorAttestation as Yr, readHarnessTranscript as Yt, scopeRetainedOwnerRestorePoint as Z, promptFromAgentTurnInput as Zi, mapExecutorResult as Zn, knownMaterializationReceipt as Zr, retainHarnessTranscript as Zt, attachWorker as _, retainedExecutorSeamKey as _i, sanitizeKnowledgeReadinessReport as _n, RunCancellationReason as _r, runAgentRounds as _t, runTree as a, runtimeOwnedPendingExecutorMaterialization as ai, buildRuntimeEventOtelSpans as an, isFiniteNumber as ar, materializeTreeView as at, recoverRetainedInteractiveRun as b, unavailablePauseMs as bi, createInbox as bn, signalAbortError as br, createSandboxForSpec as bt, driverExecutorFactory as c, unknownMaterializationReceipt as ci, flatOtelSpan as cn, bridgeAdmissionRefusal as cr, FileResultBlobStore as ct, createScope as d, projectSandboxOutcome as di, padSpanId as dn, createCodexRolloutStoreReader as dr, bindReusableExecutorExecutionId as dt, recordRuntimeOwnedDriveHarnessProviderEvidence as ei, WORKER_TRACE_PROPAGATION as en, admitContinuationPolicy as er, bindScopeRetainedOwnerProvider as et, replaySpawnTree as f, readSandboxOutcome as fi, padTraceId as fn, harnessUsageIsEmpty as fr, captureReusableExecutorConfig as ft, interactiveAdmissionSeamKey as g, registerRetainedExecutorPreparation as gi, sanitizeAgentRuntimeEvent as gn, sandboxSessionTraceSource as gr, createSteerableSandboxSession as gt, workerTraceAnalysisStore as h, RetainedExecutionPendingError as hi, createRuntimeStreamEventCollector as hn, decodeToolPart as hr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as ht, runFinalizer as i, runtimeOwnedExecutorProviderEvidence as ii, buildLoopSpanNodes as in, failedItems as ir, loadSpawnForest as it, runtimeGraphMetadataKey as j, meterUsageEvent as ji, DEFAULT_STALL_AFTER_MS as jn, defineProfileMaterializationContract as jr, routerBrain as jt, coordinationProfileToolPrefix as k, errMessage as ki, peerMailVerbNames as kn, assertProfileMaterializes as kr, toolResultText as kt, isDriverSpec as l, executableAgentProfileSnapshot as li, generateSpanId as ln, bridgeModelRouteRefusal as lr, insideCursorNamespace as lt, parseWorkerToolTraceArtifact as m, settlementFailureCause as mi, createRuntimeEventCollector as mn, createPushTraceSource as mr, snapshotExecutorConfig as mt, createSupervisor as n, runtimeOwnedExecutorExecutionBinding as ni, readTraceContextFromEnv as nn, checkVerdictOf as nr, scopeRetainedOwnerContext as nt, createRootHandle as o, runtimeOwnedScopeOwnerRuntime as oi, createOpenInferenceFileExporter as on, priceTokens as or, InMemoryResultBlobStore as ot, isTraceAnalysisStore as p, runtimeFailureCause as pi, toOtelAttributes as pn, readCodexRolloutSession as pr, createExecutor as pt, scopeRetainedOwnerResult as q, notifySandboxEventObserver as qi, seatExecutionProfile as qn, authoredProfileDigest as qr, harnessTranscriptArtifact as qt, bestDelivered as r, runtimeOwnedExecutorMaterialization as ri, buildLoopOtelSpans as rn, createContinuationKeeper as rr, scopeRetainedOwnerJournalRoot as rt, driverChild as s, unknownExecutionBindingReceipt as si, createOtelExporter as sn, ROUTER_PRICE_SOURCE as sr, InMemorySpawnJournal as st, DEFAULT_MAX_DEPTH as t, runtimeOwnedDriveHarnessProviderEvidence as ti, createPropagatingTraceEmitter as tn, bestComposite as tr, owners as tt, withDriverExecutor as u, executableAgentSpecSnapshot as ui, loopEventToOtelSpan as un, addHarnessUsage as ur, createExecutorRegistry as ut, readWorkerInteractiveBinding as v, cappedDoublingMs as vi, sanitizeRuntimeStreamEvent as vn, linkAbort as vr, assertBoxlessPromptOptions as vt, noteScopeOwnerPlannedExecution as w, TRACE_SUMMARY_SCHEMA as wi, PEER_MAIL_WIRE_KEY as wn, runWorktreeHarness as wr, defaultSelectWinner as wt, startRetainedInteractiveRun as x, unavailableResumeAt as xi, failPendingAfter as xn, bridgeRuntimeAttachmentsKey as xr, createSandboxLineage as xt, reconnectRetainedInteractiveRun as y, jitteredMs as yi, INBOX_RECEIPT_KEY as yn, runAbortable as yr, readPromptOptions as yt, meterRuntimeOwnedProviderAttempt as z, createSandboxToolPartState as zi, causedByPartialFailure as zn, sandboxActProfileMaterialization as zr, startRetainedRun as zt };
 
-//# sourceMappingURL=supervisor-CPG1I9UN.js.map
+//# sourceMappingURL=supervisor-DHrUJhEZ.js.map