@tangle-network/agent-runtime 0.338.0 → 0.340.0

package/dist/{supervisor-CPG1I9UN.js → supervisor-VXuN2OHT.js}

@@ -1,12 +1,12 @@
-import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-B_eJr6Mb.js";
+import { i as publishExclusiveDurableFile, n as assertNoSymlinkDescendant } from "./durable-file-gNI9ILAn.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
 import { n as recordValue, t as isRecord } from "./record-value-B6bwJxLa.js";
-import { $ as hasCompleteCacheBreakdown, At as teardownExecutor, Dt as checkInIdleMs, Et as boundedChildDeadlineAt, G as addSpend, J as cloneSpend, K as addTokenUsage, L as deepFreezeCandidate, N as verifiedArtifactChunks, Ot as isDeadlineAbortReason, Q as fnv1a32Hex, Tt as armDeadlineTimer, U as hasControlCharacter, V as sha256Bytes$1, W as abortError, X as deleteBoxSafe, Y as cloneTokenUsage, Z as errorMessage, _t as resourceTelemetry, at as randomUuid, bt as CHILD_DEADLINE_REASON, c as verifyAgentCandidateWorkspaceTree, ct as stringifySafe, dt as unmeteredSpend, et as isAbortError$1, ft as withTimeout, g as verifyAgentCandidateWorkspaceArchive, gt as assertResources, ht as addResourceSpend, it as randomSuffix, j as verifyWorkspaceSnapshotArtifacts, jt as teardownSurfaces, kt as singleFlightTeardown, lt as throwAbort, mt as zeroTokenUsage, nt as mapWithConcurrency, o as readAgentCandidateWorkspaceArtifactFiles, ot as roundBoxMinutes, pt as zeroSpend, q as chargedTokens, rt as promptCacheTokenClasses, s as verifyAgentCandidateWorkspaceArtifacts, st as sleep, t as assertSandboxProfileCompatibility, tt as isAsyncIterable$1, ut as throwIfAborted, vt as withBudgetResources, wt as ROOT_DEADLINE_REASON, yt as ACCEPTED_RESULT_GRACE_MS } from "./sandbox-profile-compat-xSoVtdWw.js";
+import { $ as isAbortError$1, A as verifyWorkspaceSnapshotArtifacts, B as sha256Bytes$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as addTokenUsage, H as hasControlCharacter, I as deepFreezeCandidate, J as cloneTokenUsage, K as chargedTokens, M as verifiedArtifactChunks, Ot as teardownExecutor, Q as hasCompleteCacheBreakdown, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as abortError, W as addSpend, X as errorMessage, Y as deleteBoxSafe, Z as fnv1a32Hex, _t as withBudgetResources, at as roundBoxMinutes, c as verifyAgentCandidateWorkspaceTree, ct as throwAbort, dt as withTimeout, et as isAsyncIterable$1, ft as zeroSpend, g as verifyAgentCandidateWorkspaceArchive, gt as resourceTelemetry, ht as assertResources, it as randomUuid, kt as teardownSurfaces, lt as throwIfAborted, mt as addResourceSpend, nt as promptCacheTokenClasses, o as readAgentCandidateWorkspaceArtifactFiles, ot as sleep, pt as zeroTokenUsage, q as cloneSpend, rt as randomSuffix, s as verifyAgentCandidateWorkspaceArtifacts, st as stringifySafe, t as assertSandboxProfileCompatibility, tt as mapWithConcurrency, ut as unmeteredSpend, vt as ACCEPTED_RESULT_GRACE_MS, wt as boundedChildDeadlineAt, yt as CHILD_DEADLINE_REASON } from "./sandbox-profile-compat-DRr3JwDx.js";
 import { runTaskQueue } from "./task-queue.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
 import { t as sha256 } from "./content-digest-sBTLujlK.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-DBv31uPi.js";
+import { a as readCommittedJsonLines, n as isNoEntError, t as appendCommittedJsonLine } from "./jsonl-file-C9Kde_0Z.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferReceiptSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, agentWorkspaceSnapshotRefDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, contextTransferReceiptMatches, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
 import { isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -2886,6 +2886,8 @@ function cappedDoublingMs(consecutive, first, ceiling) {
 	const start = Math.max(0, first);
 	return Math.min(Math.max(start, ceiling), start * 2 ** Math.max(0, consecutive - 1));
 }
+/** The longest hold a refusal's own reset time may ask for: a 5-hour plan window plus a margin. */
+const MAX_RESET_HOLD_MS = 360 * 6e4;
 /** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
 const FAR_RESET_PROBE_MS = 60 * 6e4;
 /**
@@ -2907,7 +2909,7 @@ function unavailableResumeAt(text, nowMs) {
 	if (zone === void 0) return void 0;
 	const at = Date.parse(`${match[1]}T${match[2]}${zone.length === 5 ? `${zone.slice(0, 3)}:${zone.slice(3)}` : zone}`);
 	if (!Number.isFinite(at) || at <= nowMs) return void 0;
-	return at - nowMs > 216e5 ? nowMs + FAR_RESET_PROBE_MS : at;
+	return at - nowMs > MAX_RESET_HOLD_MS ? nowMs + FAR_RESET_PROBE_MS : at;
 }
 /**
 * Spread a wait over `[ms / 2, ms]`. Every driver a Platform restart cut off fails within the same
@@ -3937,18 +3939,11 @@ const sandboxActProfileMaterialization = defineProfileMaterializationContract({
 	name: "createSandboxAct",
 	axes: sandboxProfileMaterialization.axes
 });
-/** Materialization contract for a run path that only injects prompt text. */
-const promptOnlyProfileMaterialization = defineProfileMaterializationContract({
+defineProfileMaterializationContract({
 	name: "prompt-only-message",
 	axes: ["systemPrompt", "instructions"]
 });
-/**
-* Materialization contract for a run path that injects prompt text plus inline resources.
-*
-* `resourceFailOnError` is absent: it is a resolution POLICY the attaching path would have to
-* enforce, and inlining resource content does not carry it.
-*/
-const promptResourceProfileMaterialization = defineProfileMaterializationContract({
+defineProfileMaterializationContract({
 	name: "prompt-resource-attachment",
 	axes: [
 		"systemPrompt",
@@ -4289,15 +4284,6 @@ const HARNESS_INVOCATIONS = {
 /** Every local harness, in table order — the one list `AGENT_RUNTIME_LOCAL_HARNESSES` and any
 *  other harness enumeration reads, so adding a row above is the only edit a new harness needs. */
 const LOCAL_HARNESSES = Object.keys(HARNESS_INVOCATIONS);
-/** The harness a caller gets when it expresses no preference. A composition-root default, not a
-*  capability claim: one constant so the several entry points cannot drift apart. */
-const DEFAULT_LOCAL_HARNESS = "claude-code";
-/** The CLI binary a harness id runs. The two are NOT the same string (`claude-code` runs `claude`),
-*  so anything spawning a harness — a version probe, a login check — reads it from here rather than
-*  passing the harness id as a command. */
-function localHarnessExecutable(harness) {
-	return HARNESS_INVOCATIONS[harness].command;
-}
 /**
 * Whether the harness's native control can express this reasoning effort. Admission checks read
 * this so a profile the invocation would later refuse is rejected BEFORE any workspace state is
@@ -6388,62 +6374,6 @@ function createPushTraceSource(opts = {}) {
 		}
 	};
 }
-/** A source backed by harness message PARTS (sandbox session, cli-bridge). `collect` reads the full
-*  part list and decodes the tool calls; `subscribe`, when given, streams parts live for online
-*  detection. The caller supplies how to get parts (e.g. `box.session(id).messages()` flat-mapped to
-*  parts) — keeping this module free of any substrate SDK. */
-function createPartsTraceSource(opts) {
-	const runId = opts.runId ?? `parts-${runSeq++}`;
-	const now = opts.now ?? Date.now;
-	const decode = opts.decode ?? ((part) => decodeToolPart(part, opts.harness));
-	const subs = /* @__PURE__ */ new Set();
-	const seenLive = /* @__PURE__ */ new Set();
-	let liveSeq = 0;
-	let unsub;
-	const startLive = () => {
-		if (unsub || !opts.subscribeParts) return;
-		unsub = opts.subscribeParts((part) => {
-			const step = decode(part);
-			if (!step) return;
-			if (step.callId) {
-				if (seenLive.has(step.callId)) return;
-				seenLive.add(step.callId);
-			}
-			const span = toToolSpan(step, runId, liveSeq++, now());
-			for (const fn of subs) try {
-				fn(span);
-			} catch {}
-		});
-	};
-	return {
-		onSpan(handler) {
-			subs.add(handler);
-			startLive();
-			return () => {
-				subs.delete(handler);
-				if (subs.size === 0 && unsub) {
-					unsub();
-					unsub = void 0;
-				}
-			};
-		},
-		async collect() {
-			const parts = await opts.collectParts();
-			const spans = [];
-			const seen = /* @__PURE__ */ new Set();
-			for (const part of parts) {
-				const step = decode(part);
-				if (!step) continue;
-				if (step.callId) {
-					if (seen.has(step.callId)) continue;
-					seen.add(step.callId);
-				}
-				spans.push(toToolSpan(step, runId, spans.length, now()));
-			}
-			return spans;
-		}
-	};
-}
 /**
 * Decode one part a BOX published. A box publishes every harness's tool calls in the canonical
 * `ToolPart` shape (the sandbox normalizes them), so that decoder runs first for any harness; the
@@ -6456,23 +6386,6 @@ function decodeBoxPart(part, harness) {
 	if (!p) return void 0;
 	return decodeOpencodePart(p) ?? decodeToolPart(part, harness);
 }
-/** The SANDBOX / fleet trace source: read a box session's message parts and decode the harness's tool
-*  calls into spans. `collect` (settle) is the solid path — `box.messages({sessionId})` → parts → spans;
-*  black-box harnesses aren't mid-step interruptible, so online steering is the owned-loop's job and a
-*  live `subscribe` is opt-in (pass `subscribeParts` from `streamPrompt` when the harness streams parts). */
-function sandboxSessionTraceSource(box, sessionId, opts = {}) {
-	const decode = (part) => decodeBoxPart(part, opts.harness);
-	return createPartsTraceSource({
-		collectParts: async () => {
-			return (await box.messages({ sessionId })).flatMap((m) => m.parts ? [...m.parts] : []);
-		},
-		...opts.harness ? { harness: opts.harness } : {},
-		decode,
-		...opts.subscribeParts ? { subscribeParts: opts.subscribeParts } : {},
-		runId: opts.runId ?? `box-${sessionId}`,
-		...opts.now ? { now: opts.now } : {}
-	});
-}
 //#endregion
 //#region src/runtime/supervise/bridge-protocol.ts
 /** Decode Bridge stream and materialization receipts without owning transport or executor state. */
@@ -8512,7 +8425,8 @@ function isFiniteNumber(value) {
 *    and ranks versions. A check that could not run gives no verdict ({@link CheckUnavailableError}),
 *    and the loop pauses instead of blaming the director.
 *  - ONE RESEND RULE. {@link ContinuationPolicy} is required for a manager with a check. It holds a
-*    deadline and `maxBarren`, the re-entered turns in a row that may end without progress. There
+*    deadline and `maxBarren`, the re-entered turns in a row that may end without progress before
+*    each further continuation waits a barren pause. There
 *    is no re-prompt count and no default: a retry default in source is a research decision.
 *  - ONE NOTE. {@link composeContinuationNote} writes it. Runtime owns the facts and their order;
 *    the {@link ContinuationProfile} owns every instruction word, so an optimizer can change the
@@ -11553,7 +11467,7 @@ function toOpenInferenceLine(span) {
 * `maxQueueSize`. Every span ends in exactly one of `written` or `dropped`: a non-2xx response, a
 * network error, a timeout, an OTLP `partialSuccess.rejectedSpans` count and a full queue each count
 * as drops and set `lastError`. Nothing here throws into the caller's run; `flush()` reports the
-* loss, the same rule {@link createOpenInferenceFileExporter} follows.
+* loss, the same rule `createOpenInferenceFileExporter` follows.
 */
 function createOtelExporter(config) {
 	const resolvedEndpoint = config?.endpoint ?? (typeof process !== "undefined" ? process.env.OTEL_EXPORTER_OTLP_ENDPOINT : void 0);
@@ -13264,172 +13178,6 @@ const cliInPlaceExecutor = (spec, ctx) => {
 	});
 };
 //#endregion
-//#region src/runtime/supervise/cli-process-executor.ts
-/**
-* Spawns a subprocess (`bin` + `args`). It cannot account tokens, so it is
-* `budgetExempt: true`: it remains usable as a direct executor, while budgeted supervision
-* refuses it before process execution because the CLI exposes no usage receipt. teardown is SIGTERM → SIGKILL
-* with a grace window. Streaming: yields one `iteration` event on clean exit.
-*
-* Its terminal spend is `unmeteredSpend`, NOT a zero: an unmetered runtime that reports a plain
-* `0` is indistinguishable from one that measured zero, and every ceiling downstream then reads
-* as enforced while enforcing nothing.
-*/
-const cliExecutor = (spec, ctx) => {
-	const seam = readSeam(ctx, "cli", "cli");
-	if (!seam.bin) throw new ValidationError$1("cliExecutor: CliSeam.bin required");
-	const traceEnv = {
-		...workerLineage({
-			harness: seam.bin,
-			nodeId: ctx.node?.nodeId,
-			label: spec.profile.name,
-			local: true
-		}).env,
-		...workerTraceEnv(ctx)
-	};
-	const controller = linkAbort(ctx.signal);
-	let proc;
-	let artifact;
-	const executionId = ctx.node?.nodeId ?? `cli-process-${randomUUID()}`;
-	const attemptId = ctx.node?.attemptId ?? newExecutionAttemptId(executionId);
-	return attestRuntimeOwnedExecutor({
-		runtime: "cli",
-		budgetExempt: true,
-		execute(task, signal) {
-			return streamCliLeaf({
-				task,
-				signal,
-				traceEnv,
-				seam,
-				controller,
-				onProc: (p) => {
-					proc = p;
-				},
-				onArtifact: (a) => {
-					artifact = a;
-				}
-			});
-		},
-		async teardown(grace) {
-			if (!proc) {
-				controller.abort();
-				return { destroyed: true };
-			}
-			const receipt = await killWithGrace(proc, grace);
-			controller.abort();
-			return receipt;
-		},
-		resultArtifact() {
-			if (!artifact) throw new ValidationError$1("cliExecutor: resultArtifact() read before stream drained");
-			return artifact;
-		}
-	}, {
-		effectiveProfile: spec.profile,
-		backend: "cli",
-		model: {
-			status: "unknown",
-			reason: "raw subprocess has no model identity contract"
-		},
-		execution: {
-			kind: "process-attempt",
-			id: executionId
-		},
-		materializer: "raw-cli-stdin",
-		plan: {
-			kind: "raw-cli-process",
-			bin: seam.bin,
-			args: seam.args ?? [],
-			cwd: seam.cwd ?? null,
-			envOverrides: seam.env ?? {},
-			ambientEnvironment: "inherited"
-		}
-	}, {
-		attemptId,
-		binding: {
-			executionId,
-			bin: seam.bin,
-			cwd: seam.cwd ?? null
-		},
-		descriptor: {
-			kind: "cli-process",
-			transport: "process",
-			backend: "cli"
-		}
-	});
-};
-async function* streamCliLeaf(args) {
-	const started = Date.now();
-	const prompt = taskToPrompt$1(args.task);
-	const proc = spawn(args.seam.bin, args.seam.args ?? [], {
-		...args.seam.cwd ? { cwd: args.seam.cwd } : {},
-		env: mergeTraceEnv(process.env, args.traceEnv, args.seam.env),
-		stdio: [
-			"pipe",
-			"pipe",
-			"pipe"
-		]
-	});
-	args.onProc(proc);
-	const onAbort = () => killWithGrace(proc, "brutalKill");
-	if (args.signal.aborted || args.controller.signal.aborted) onAbort();
-	else {
-		args.signal.addEventListener("abort", onAbort, { once: true });
-		args.controller.signal.addEventListener("abort", onAbort, { once: true });
-	}
-	let deliveryError;
-	if (proc.stdin) {
-		proc.stdin.on("error", (error) => {
-			if (error.code !== "EPIPE") deliveryError ??= error;
-		});
-		proc.stdin.write(prompt);
-		proc.stdin.end();
-	}
-	const chunks = [];
-	const errChunks = [];
-	if (proc.stdout) proc.stdout.on("data", (d) => chunks.push(d.toString("utf8")));
-	if (proc.stderr) proc.stderr.on("data", (d) => errChunks.push(d.toString("utf8")));
-	const exit = await new Promise((resolve) => {
-		proc.once("error", (err) => resolve({
-			code: null,
-			error: err
-		}));
-		proc.once("close", (code) => resolve({ code }));
-	});
-	args.signal.removeEventListener("abort", onAbort);
-	args.controller.signal.removeEventListener("abort", onAbort);
-	if (exit.error) throw new ValidationError$1(`cliExecutor: spawn failed: ${exit.error.message}`, { cause: exit.error });
-	if (exit.code !== 0) throw new ValidationError$1(`cliExecutor: ${args.seam.bin} exited ${exit.code}: ${errChunks.join("").slice(0, 200)}`);
-	if (deliveryError) throw new ValidationError$1(`cliExecutor: could not deliver the task to ${args.seam.bin}: ${deliveryError.message}`, { cause: deliveryError });
-	const out = { content: chunks.join("") };
-	args.onArtifact({
-		outRef: contentRef("cli", out),
-		out,
-		spent: unmeteredSpend(Date.now() - started)
-	});
-	yield { kind: "iteration" };
-}
-/** SIGTERM, then SIGKILL after `grace` ms (`'brutalKill'` = immediate SIGKILL,
-*  `'infinity'` = await clean exit, never escalate). */
-function killWithGrace(proc, grace) {
-	if (proc.pid === void 0 || proc.exitCode !== null || proc.signalCode !== null) return Promise.resolve({ destroyed: true });
-	return new Promise((resolve) => {
-		let clearTimer;
-		proc.once("close", () => {
-			clearTimer?.();
-			resolve({ destroyed: true });
-		});
-		if (grace === "brutalKill") {
-			proc.kill("SIGKILL");
-			return;
-		}
-		proc.kill("SIGTERM");
-		if (grace === "infinity") return;
-		clearTimer = armDeadlineTimer(grace, () => {
-			if (proc.exitCode === null && proc.signalCode === null) proc.kill("SIGKILL");
-		}, true);
-	});
-}
-//#endregion
 //#region src/runtime/provider-placement.ts
 const placementMetadataKey = "runtimeProviderPlacement";
 /** Select exactly one declaration before any provider effects. Shared defaults carry infrastructure only. */
@@ -14505,6 +14253,8 @@ function normalizeWorkerSlotBound(value) {
 	if (!Number.isSafeInteger(value)) throw new ValidationError$1(`workerSlots must be a positive safe integer, or 0 or less for no bound, got ${String(value)}`);
 	return value;
 }
+/** Default {@link ProviderWorkspaceRetentionPort.nativeTimeoutMs}. */
+const DEFAULT_NATIVE_CAPTURE_TIMEOUT_MS = 12e4;
 /** At most this many stage entries are kept from a port, each a finite, non-negative number. */
 const MAX_CAPTURE_STAGES = 16;
 function captureStages(value) {
@@ -14744,7 +14494,7 @@ async function captureProviderWorkspaceSnapshot(port, context, scope = "environm
 async function captureWithinSlot(port, context, scope, onGranted, parent) {
 	const native = scope === "native";
 	if (native && port.captureNative === void 0) throw new ValidationError$1("provider workspace retention: the port has no captureNative");
-	const timeoutMs = native ? port.nativeTimeoutMs ?? 12e4 : port.timeoutMs;
+	const timeoutMs = native ? port.nativeTimeoutMs ?? DEFAULT_NATIVE_CAPTURE_TIMEOUT_MS : port.timeoutMs;
 	const controlRef = context.controlRef === void 0 ? void 0 : AgentExactRunControlRefSchema.parse(context.controlRef);
 	if (controlRef !== void 0 && (controlRef.environmentId !== context.environment.id || controlRef.provider !== context.environment.provider || context.providerSessionId != null && controlRef.sessionId !== context.providerSessionId)) throw new Error("provider workspace retention control reference names another environment or session");
 	const controller = new AbortController();
@@ -18667,6 +18417,172 @@ function resolveAgentEnvironmentProvider(provider, registry) {
 	return registry.require(provider);
 }
 //#endregion
+//#region src/runtime/supervise/cli-process-executor.ts
+/**
+* Spawns a subprocess (`bin` + `args`). It cannot account tokens, so it is
+* `budgetExempt: true`: it remains usable as a direct executor, while budgeted supervision
+* refuses it before process execution because the CLI exposes no usage receipt. teardown is SIGTERM → SIGKILL
+* with a grace window. Streaming: yields one `iteration` event on clean exit.
+*
+* Its terminal spend is `unmeteredSpend`, NOT a zero: an unmetered runtime that reports a plain
+* `0` is indistinguishable from one that measured zero, and every ceiling downstream then reads
+* as enforced while enforcing nothing.
+*/
+const cliExecutor = (spec, ctx) => {
+	const seam = readSeam(ctx, "cli", "cli");
+	if (!seam.bin) throw new ValidationError$1("cliExecutor: CliSeam.bin required");
+	const traceEnv = {
+		...workerLineage({
+			harness: seam.bin,
+			nodeId: ctx.node?.nodeId,
+			label: spec.profile.name,
+			local: true
+		}).env,
+		...workerTraceEnv(ctx)
+	};
+	const controller = linkAbort(ctx.signal);
+	let proc;
+	let artifact;
+	const executionId = ctx.node?.nodeId ?? `cli-process-${randomUUID()}`;
+	const attemptId = ctx.node?.attemptId ?? newExecutionAttemptId(executionId);
+	return attestRuntimeOwnedExecutor({
+		runtime: "cli",
+		budgetExempt: true,
+		execute(task, signal) {
+			return streamCliLeaf({
+				task,
+				signal,
+				traceEnv,
+				seam,
+				controller,
+				onProc: (p) => {
+					proc = p;
+				},
+				onArtifact: (a) => {
+					artifact = a;
+				}
+			});
+		},
+		async teardown(grace) {
+			if (!proc) {
+				controller.abort();
+				return { destroyed: true };
+			}
+			const receipt = await killWithGrace(proc, grace);
+			controller.abort();
+			return receipt;
+		},
+		resultArtifact() {
+			if (!artifact) throw new ValidationError$1("cliExecutor: resultArtifact() read before stream drained");
+			return artifact;
+		}
+	}, {
+		effectiveProfile: spec.profile,
+		backend: "cli",
+		model: {
+			status: "unknown",
+			reason: "raw subprocess has no model identity contract"
+		},
+		execution: {
+			kind: "process-attempt",
+			id: executionId
+		},
+		materializer: "raw-cli-stdin",
+		plan: {
+			kind: "raw-cli-process",
+			bin: seam.bin,
+			args: seam.args ?? [],
+			cwd: seam.cwd ?? null,
+			envOverrides: seam.env ?? {},
+			ambientEnvironment: "inherited"
+		}
+	}, {
+		attemptId,
+		binding: {
+			executionId,
+			bin: seam.bin,
+			cwd: seam.cwd ?? null
+		},
+		descriptor: {
+			kind: "cli-process",
+			transport: "process",
+			backend: "cli"
+		}
+	});
+};
+async function* streamCliLeaf(args) {
+	const started = Date.now();
+	const prompt = taskToPrompt$1(args.task);
+	const proc = spawn(args.seam.bin, args.seam.args ?? [], {
+		...args.seam.cwd ? { cwd: args.seam.cwd } : {},
+		env: mergeTraceEnv(process.env, args.traceEnv, args.seam.env),
+		stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		]
+	});
+	args.onProc(proc);
+	const onAbort = () => killWithGrace(proc, "brutalKill");
+	if (args.signal.aborted || args.controller.signal.aborted) onAbort();
+	else {
+		args.signal.addEventListener("abort", onAbort, { once: true });
+		args.controller.signal.addEventListener("abort", onAbort, { once: true });
+	}
+	let deliveryError;
+	if (proc.stdin) {
+		proc.stdin.on("error", (error) => {
+			if (error.code !== "EPIPE") deliveryError ??= error;
+		});
+		proc.stdin.write(prompt);
+		proc.stdin.end();
+	}
+	const chunks = [];
+	const errChunks = [];
+	if (proc.stdout) proc.stdout.on("data", (d) => chunks.push(d.toString("utf8")));
+	if (proc.stderr) proc.stderr.on("data", (d) => errChunks.push(d.toString("utf8")));
+	const exit = await new Promise((resolve) => {
+		proc.once("error", (err) => resolve({
+			code: null,
+			error: err
+		}));
+		proc.once("close", (code) => resolve({ code }));
+	});
+	args.signal.removeEventListener("abort", onAbort);
+	args.controller.signal.removeEventListener("abort", onAbort);
+	if (exit.error) throw new ValidationError$1(`cliExecutor: spawn failed: ${exit.error.message}`, { cause: exit.error });
+	if (exit.code !== 0) throw new ValidationError$1(`cliExecutor: ${args.seam.bin} exited ${exit.code}: ${errChunks.join("").slice(0, 200)}`);
+	if (deliveryError) throw new ValidationError$1(`cliExecutor: could not deliver the task to ${args.seam.bin}: ${deliveryError.message}`, { cause: deliveryError });
+	const out = { content: chunks.join("") };
+	args.onArtifact({
+		outRef: contentRef("cli", out),
+		out,
+		spent: unmeteredSpend(Date.now() - started)
+	});
+	yield { kind: "iteration" };
+}
+/** SIGTERM, then SIGKILL after `grace` ms (`'brutalKill'` = immediate SIGKILL,
+*  `'infinity'` = await clean exit, never escalate). */
+function killWithGrace(proc, grace) {
+	if (proc.pid === void 0 || proc.exitCode !== null || proc.signalCode !== null) return Promise.resolve({ destroyed: true });
+	return new Promise((resolve) => {
+		let clearTimer;
+		proc.once("close", () => {
+			clearTimer?.();
+			resolve({ destroyed: true });
+		});
+		if (grace === "brutalKill") {
+			proc.kill("SIGKILL");
+			return;
+		}
+		proc.kill("SIGTERM");
+		if (grace === "infinity") return;
+		clearTimer = armDeadlineTimer(grace, () => {
+			if (proc.exitCode === null && proc.signalCode === null) proc.kill("SIGKILL");
+		}, true);
+	});
+}
+//#endregion
 //#region src/runtime/router-http-transport.ts
 /** Router HTTP attempts, response evidence, retries, and request cancellation. */
 function routerRequestHeaders(cfg, opts) {
@@ -19766,7 +19682,7 @@ function forTurnEvent(message) {
 	const content = message.content;
 	if (typeof content !== "string") return message;
 	const bytes = Buffer.byteLength(content);
-	if (bytes <= 262144) return message;
+	if (bytes <= TURN_CONTENT_BYTES) return message;
 	return {
 		...message,
 		content: Buffer.from(content).subarray(0, TURN_CONTENT_BYTES).toString("utf8"),
@@ -23343,6 +23259,7 @@ const outsideKinds = /* @__PURE__ */ new Set([
 	"root-segment",
 	"root-reentered",
 	"paused",
+	"barren-pause",
 	"driver-attempt",
 	"node-inputs-resolved",
 	"edge-verdict",
@@ -25444,6 +25361,7 @@ async function retireSeatEnvironment(scope, state) {
 /** Runtime-owned provider evidence is written through this private scope capability. */
 const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
 const pauseRecorders = /* @__PURE__ */ new WeakMap();
+const barrenPauseRecorders = /* @__PURE__ */ new WeakMap();
 const driverAttemptRecorders = /* @__PURE__ */ new WeakMap();
 const recoveryStarters = /* @__PURE__ */ new WeakMap();
 const retainedReleasers = /* @__PURE__ */ new WeakMap();
@@ -25468,8 +25386,6 @@ const admissionSeals = /* @__PURE__ */ new WeakMap();
 const subtreeReaders = /* @__PURE__ */ new WeakMap();
 /** Each scope's reader of its live team, for the progress its owner's lead reads mid-flight. */
 const liveTeamReaders = /* @__PURE__ */ new WeakMap();
-/** How many of a manager's direct children its summary lists; the counts always cover all. */
-const SUBTREE_RESULT_LIMIT = 8;
 /** @internal The bounded account of the children a scope spawned and everything below them.
 *  `undefined` when the scope spawned no worker. */
 function subtreeSummaryOf(scope) {
@@ -25514,9 +25430,6 @@ function unconfirmedTeardownOf(child, releasing) {
 		...child.teardownDetail === void 0 ? {} : { detail: child.teardownDetail }
 	});
 }
-/** Ten minutes: a manager that is alive decides within a turn or two; one that crashed, or a host
-*  that restarted, must not leave a paid environment running until a retire pass finds it. */
-const DEFAULT_BUDGET_STOP_HOLD_MS = 6e5;
 /**
 * @internal Release every environment this scope's settled children still hold after a budget
 * stop, at the join barrier: no later spawn of this scope can continue them. Each release journals
@@ -25689,6 +25602,15 @@ function recordScopeOwnerPause(scope, pause) {
 	if (record === void 0) throw new ValidationError$1("scope: pause recorder is not bound to this scope");
 	return record(pause);
 }
+/**
+* @internal Journal that this scope's owner paused before a continuation because its barren
+* streak reached `continuation.maxBarren`. Recorded against the owner node.
+*/
+function recordScopeOwnerBarrenPause(scope, pause) {
+	const record = barrenPauseRecorders.get(scope);
+	if (record === void 0) throw new ValidationError$1("scope: barren pause recorder is not bound to this scope");
+	return record(pause);
+}
 /** @internal Persist the owner's driver outcome even after its scope has been aborted. */
 function recordScopeOwnerDriverAttempt(scope, attempt) {
 	const record = driverAttemptRecorders.get(scope);
@@ -27969,20 +27891,6 @@ function overBudget(budget, spent) {
 * here so the scope and the driver-executor agree on the seam without a circular import.
 */
 const nestedScopeSeamKey = "nested-scope";
-//#endregion
-//#region src/runtime/supervise/trace-evidence.ts
-/**
-* Durable structured tool evidence for supervised workers.
-*
-* The executor-owned `TraceSource` is collected before teardown, snapshotted into the shared
-* content-addressed blob store, and only then referenced by a settlement. Analysis reconstructs
-* agent-eval's bounded `TraceAnalysisStore` from those exact bytes. Worker output is never accepted
-* as a substitute for tool evidence.
-*
-* @experimental
-*/
-/** Schema version for content-addressed worker tool-trace artifacts. */
-const WORKER_TOOL_TRACE_SCHEMA_VERSION = 1;
 /** Structural guard for the official bounded trace-analysis read contract. */
 function isTraceAnalysisStore(value) {
 	if (value === null || typeof value !== "object") return false;
@@ -30089,6 +29997,17 @@ function createScope(args) {
 			at: new Date(now()).toISOString()
 		});
 	});
+	let barrenPauseSeq;
+	barrenPauseRecorders.set(scope, async (pause) => {
+		if (barrenPauseSeq === void 0) barrenPauseSeq = (await args.journal.loadTree(args.root) ?? []).filter((event) => event.kind === "barren-pause" && event.id === args.parentId).length;
+		await args.journal.appendEvent(args.root, {
+			kind: "barren-pause",
+			id: args.parentId,
+			...pause,
+			seq: barrenPauseSeq++,
+			at: new Date(now()).toISOString()
+		});
+	});
 	bindScopeOwnerMaterialization(scope, args, now);
 	if (args.resumeFrom?.recoveries?.length) recoveryStarters.set(scope, async () => {
 		const adopted = [];
@@ -30629,27 +30548,6 @@ function pickBestDelivered(delivered) {
 *  delivered (or the best delivered child carries no artifact). */
 const bestDelivered = (ctx) => pickBestDelivered(ctx.delivered)?.out;
 /**
-* Every verified distinct output, highest score first — the shape for competing hypotheses, a
-* Pareto front, or a recorded evaluator split (three judges 2:1 → both outputs survive, with
-* provenance, instead of the minority report being erased). Distinct by `outRef` (content
-* address), so identical outputs collapse to one entry. `undefined` when nothing delivered —
-* an empty collection is a no-winner, not a winner wrapping `[]`.
-*/
-const collectDelivered = (ctx) => {
-	const seen = /* @__PURE__ */ new Set();
-	const distinct = [...ctx.delivered].sort((a, b) => (b.score ?? 0) - (a.score ?? 0)).filter((w) => {
-		if (w.outRef === void 0 || seen.has(w.outRef)) return false;
-		seen.add(w.outRef);
-		return true;
-	}).map((w) => ({
-		id: w.id,
-		score: w.score,
-		outRef: w.outRef,
-		out: w.out
-	}));
-	return distinct.length > 0 ? distinct : void 0;
-};
-/**
 * Run a finalizer over a settled-worker ledger under the delivered-only invariant: filter the
 * ledger to structurally delivered children, materialize their outputs, and hand the finalizer a
 * blob reader that throws on any ref outside that set. This is the one call site both driver arms
@@ -30698,18 +30596,6 @@ async function runFinalizer(finalizer, args) {
 	});
 	return await accepted(candidate) ? candidate : void 0;
 }
-/** Keep-best finalize under the completion-oracle: return the highest-scoring DELIVERED child's
-*  output (settled `done` AND `valid` — its deliverable check passed). Returns undefined when no
-*  child delivered — an honest "the driver produced nothing", never a high-scoring result that
-*  ran without passing its check (Foreman's 0/18 lesson). `valid` is the single delivery signal,
-*  matching `defaultSelectWinner`'s valid-first rule; the oracle just doesn't fall back to an
-*  unchecked best-effort. The same argmax as the `bestDelivered` finalizer (`pickBestDelivered`);
-*  this direct form serves callers that hold a bare ledger + blob store. */
-async function finalizeBestDelivered(settled, blobs) {
-	const best = pickBestDelivered(settled.filter((w) => w.status === "done" && w.valid === true));
-	if (best === void 0) return void 0;
-	return best.outRef ? await blobs.get(best.outRef) : void 0;
-}
 //#endregion
 //#region src/runtime/supervise/run-persistence.ts
 /** One failed store operation revokes this controller's writes, never its retained executions. */
@@ -31835,6 +31721,6 @@ function createSupervisor() {
 	};
 }
 //#endregion
-export { scopeRetainedOwnerPriorSpend as $, cappedDoublingMs as $i, isLiveNodeStatus as $n, parseCodexTokenUsage as $r, destroyInteractiveEnvironment as $t, recordScopeOwnerMaterialization as A, createSandboxUsageLedger as Aa, inheritRuntimeOwnedExecutorAttestation as Ai, padSpanId as An, priceTokens as Ar, SandboxEvidenceRetentionError as At, freeSlots as B, runtimeOwnedPendingExecutorMaterialization as Bi, failPendingAfter as Bn, decodeToolPart as Br, toolResultText as Bt, readWorkerInteractiveBinding as C, mapSandboxEvent as Ca, validateProfileMaterialization as Ci, buildLoopSpanNodes as Cn, checkVerdictOf as Cr, createSteerableSandboxSession as Ct, FileSpawnJournal as D, canonicalStreamEventFromSandboxEvent as Da, authoredAgentIdentity as Di, flatOtelSpan as Dn, failedItems as Dr, createSandboxForSpec as Dt, startRetainedInteractiveRun as E, terminalTextFromSandboxEvent as Ea, attestRuntimeOwnedScopeOwner as Ei, createOtelExporter as En, expandQuestions as Er, readPromptOptions as Et, providerVisibleProfile as F, decodeHarnessUsage as Fa, recordRuntimeOwnedDriveHarnessProviderEvidence as Fi, sanitizeAgentRuntimeEvent as Fn, addHarnessUsage as Fr, codeModeArguments as Ft, meterRuntimeOwnedAccounting as G, executableAgentSpecSnapshot as Gi, createPeerMailbox as Gn, signalAbortError as Gr, providerAsExecutor as Gt, rollingDispatch as H, unknownExecutionBindingReceipt as Hi, DEFAULT_PEER_MAIL_LIMITS as Hn, RunCancellationReason as Hr, routerBrain as Ht, runtimeGraphMetadataKey as I, awaitAbortable$1 as Ia, runtimeOwnedDriveHarnessProviderEvidence as Ii, sanitizeKnowledgeReadinessReport as In, createCodexRolloutStoreReader as Ir, codeModeModelOutput as It, recordScopeOwnerPause as J, runtimeFailureCause as Ji, peerMailVerbNames as Jn, runSettledCommand as Jr, reconnectRetainedRun as Jt, meterRuntimeOwnedProviderAttempt as K, projectSandboxOutcome as Ki, isPeerMailEnvelope as Kn, bridgeRuntimeAttachmentsKey as Kr, LEAF_CONTINUATION_TASK as Kt, settledToIteration as L, promptFromAgentTurnInput as La, runtimeOwnedExecutorExecutionBinding as Li, sanitizeRuntimeStreamEvent as Ln, harnessUsageIsEmpty as Lr, createCodeModeTools as Lt, scopeOwnerExecutorNodeContext as M, notifySandboxEventObserver as Ma, knownMaterializationReceipt as Mi, toOtelAttributes as Mn, ROUTER_PRICE_SOURCE as Mr, TERMINAL_DECISIONS as Mt, coordinationMcpAlias as N, sandboxEventServedBackend as Na, newExecutionAttemptId as Ni, createRuntimeEventCollector as Nn, bridgeAdmissionRefusal as Nr, defaultSelectWinner as Nt, beginScopeOwnerAttempt as O, assertSandboxServedModel as Oa, authoredProfileDigest as Oi, generateSpanId as On, passedItems as Or, createSandboxLineage as Ot, coordinationProfileToolPrefix as P, sumSandboxUsage as Pa, providerAttemptEvidence as Pi, createRuntimeStreamEventCollector as Pn, bridgeModelRouteRefusal as Pr, isTerminalDecision as Pt, prepareScopeRetainedOwnerTask as Q, retainedExecutorSeamKey as Qi, readWorkerProgress as Qn, removeWorktree as Qr, retainedCreateMaterial as Qt, assertRecursiveReservationPolicy as R, promptOptionsFromAgentTurnInput as Ra, runtimeOwnedExecutorMaterialization as Ri, INBOX_RECEIPT_KEY as Rn, readCodexRolloutSession as Rr, describeCodeModeTools as Rt, attachWorker as S, createSandboxToolPartState as Sa, unsupportedProfileDimensions as Si, buildLoopOtelSpans as Sn, bestComposite as Sr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as St, recoverRetainedInteractiveRun as T, sandboxProgressEvents as Ta, attestRuntimeOwnedPendingExecutor as Ti, createOpenInferenceFileExporter as Tn, distillFindings as Tr, assertBoxlessPromptOptions as Tt, DEFAULT_BUDGET_STOP_HOLD_MS as U, unknownMaterializationReceipt as Ui, PEER_MAIL_WIRE_KEY as Un, linkAbort as Ur, createAgentEnvironmentProviderRegistry as Ut, queueOf as V, runtimeOwnedScopeOwnerRuntime as Vi, AUTHORITY_MARKERS as Vn, sandboxSessionTraceSource as Vr, createRouterTranscript as Vt, SUBTREE_RESULT_LIMIT as W, executableAgentProfileSnapshot as Wi, claimsAuthority as Wn, runAbortable as Wr, resolveAgentEnvironmentProvider as Wt, abandonScopeRetainedOwnerInvocation as X, RetainedExecutionPendingError as Xi, DEFAULT_STALL_AFTER_MS as Xn, captureWorktreeDiff as Xr, startRetainedRun as Xt, prepareScopeRetainedOwnerSeatSwitch as Y, settlementFailureCause as Yi, taskToPrompt$1 as Yn, runWorktreeHarness as Yr, recoverRetainedRun as Yt, consumeScopeRetainedOwnerResult as Z, registerRetainedExecutorPreparation as Zi, createActivityLog as Zn, createWorktree as Zr, startRetainedRunInEnvironment as Zt, captureWorkerTraceEvidence as _, spendFromUsageTotals as _a, promptResourceProfileMaterialization as _i, workerTraceSeamKey as _n, verdictFromJudgeScore as _r, createExecutorRegistry as _t, finalizeBestDelivered as a, TRACE_SUMMARY_SCHEMA as aa, localHarnessExecutable as ai, persistHarnessTranscript as an, classifyDriverFailure as ar, noteScopeRetainedOwnerCoordination as at, workerTraceAnalysisStore as b, defaultRedactorIdentityMaterial as ba, sandboxActProfileMaterialization as bi, readTraceContextFromEnv as bn, admitContinuationPolicy as br, createExecutor as bt, runTree as c, contentAddress as ca, assertProfileMaterialization as ci, retainHarnessTranscript as cn, upstreamUnavailableSignal as cr, owners as ct, driverExecutorFactory as d, BudgetReconcileFault as da, defineProfileMaterializationContract as di, createWorktreeCliExecutor as dn, authoredSeatStages as dr, loadSpawnForest as dt, jitteredMs as ea, CodexExecutionDiagnosticError as ei, environmentGone as en, isTerminalNodeStatus as er, scopeRetainedOwnerResult as et, isDriverSpec as f, ReservationWaitRefused as fa, fullProfileMaterialization as fi, createInPlaceCliExecutor as fn, seatExecutionProfile as fr, materializeTreeView as ft, WORKER_TOOL_TRACE_SCHEMA_VERSION as g, spendFromUsageEvents as ga, promptOnlyProfileMaterialization as gi, workerTraceHeaders as gn, mapExecutorResult as gr, insideCursorNamespace as gt, replaySpawnTree as h, newUsageTotals as ha, promptModelProfileMaterialization as hi, workerTraceEnv as hn, gateOnDeliverable as hr, FileResultBlobStore as ht, collectDelivered as i, TRACE_ROOT_SCHEMA as ia, harnessSupportsReasoningEffort as ii, harnessTranscriptArtifact as in, causedByPartialFailure as ir, scopeRetainedOwnerRestorePoint as it, restoreScopeOwnerAcceptedExecution as j, extractLlmCallEvent as ja, knownExecutionBindingReceipt as ji, padTraceId as jn, routerTokenPrice as jr, captureBeforeDestroy as jt, noteScopeOwnerPlannedExecution as k, createSandboxTurnEventCollector as ka, finalizeRuntimeOwnedPendingExecutor as ki, loopEventToOtelSpan as kn, isFiniteNumber as kr, acquireSandbox as kt, createRootHandle as l, executorFailure as la, assertProfileMaterializes as li, cliInPlaceExecutor as ln, SeatChain as lr, scopeRetainedOwnerContext as lt, createScope as m, meterUsageEvent as ma, promptControlProfileMaterialization as mi, readWorkerTraceContext as mn, CheckUnavailableError as mr, InMemorySpawnJournal as mt, createSupervisor as n, unavailableResumeAt as na, LOCAL_HARNESSES as ni, openSlotGroup as nn, HarnessTurnFailedError as nr, scopeRetainedOwnerTurnEnded as nt, pickBestDelivered as o, detachedFrozen as oa, terminateProcessTreeAndConfirm as oi, readHarnessTranscript as on, summarizeDriverAttempts as or, bindScopeRetainedOwnerEnvironmentId as ot, withDriverExecutor as p, createBudgetPool as pa, profileMaterializationAxes$1 as pi, WORKER_TRACE_PROPAGATION as pn, subscriptionUsageLimitSignal as pr, InMemoryResultBlobStore as pt, recordScopeOwnerDriverAttempt as q, readSandboxOutcome as qi, peerMailTools as qn, bridgeStopSignalKey as qr, providerAsSandboxClient as qt, bestDelivered as r, unavailableSignalOfFailure as ra, harnessInvocation as ri, captureHarnessTranscript as rn, abandonablePending as rr, reconcileScopeRetainedOwnerEnvironment as rt, runFinalizer as s, detachedSnapshot as sa, AGENT_PROFILE_MATERIALIZATION_AXES as si, resolveHarnessTranscriptCapture as sn, undispatchedCredentialExit as sr, bindScopeRetainedOwnerProvider as st, DEFAULT_MAX_DEPTH as t, unavailablePauseMs as ta, DEFAULT_LOCAL_HARNESS as ti, createWorkerSlots as tn, DriverAttemptsExhaustedError as tr, beginScopeRetainedOwnerDrive as tt, driverChild as u, errMessage as ua, controlProfileMaterialization as ui, cliWorktreeExecutor as un, SeatChainExhaustedError as ur, scopeRetainedOwnerJournalRoot as ut, isTraceAnalysisStore as v, assertValidBudget as va, renderProfileMaterializationIssues as vi, createPropagatingTraceEmitter as vn, CONTINUATIONS_DIR as vr, bindReusableExecutorExecutionId as vt, reconnectRetainedInteractiveRun as w, mapSandboxToolEvent as wa, worktreeCliProfileMaterialization as wi, buildRuntimeEventOtelSpans as wn, createContinuationKeeper as wr, runAgentRounds as wt, interactiveAdmissionSeamKey as x, resolveRedactor as xa, sandboxProfileMaterialization as xi, traceContextToEnv as xn, admitFinding as xr, snapshotExecutorConfig as xt, parseWorkerToolTraceArtifact as y, defaultRedactor as ya, renderUnsupported as yi, mergeTraceEnv as yn, CONTINUATION_FACTS as yr, captureReusableExecutorConfig as yt, deriveNodeExecutionIdentity as z, providerMessageText as za, runtimeOwnedExecutorProviderEvidence as zi, createInbox as zn, createPushTraceSource as zr, runCodeMode as zt };
+export { noteScopeRetainedOwnerCoordination as $, CONTINUATIONS_DIR as $n, runtimeOwnedExecutorProviderEvidence as $r, createWorktreeCliExecutor as $t, providerVisibleProfile as A, assertValidBudget as Ai, taskToPrompt$1 as An, fullProfileMaterialization as Ar, toolResultText as At, recordScopeOwnerBarrenPause as B, createSandboxUsageLedger as Bi, classifyDriverFailure as Bn, attestRuntimeOwnedScopeOwner as Br, startRetainedRun as Bt, beginScopeOwnerAttempt as C, executorFailure as Ci, DEFAULT_PEER_MAIL_LIMITS as Cn, LOCAL_HARNESSES as Cr, acquireSandbox as Ct, scopeOwnerExecutorNodeContext as D, newUsageTotals as Di, isPeerMailEnvelope as Dn, assertProfileMaterializes as Dr, codeModeModelOutput as Dt, restoreScopeOwnerAcceptedExecution as E, meterUsageEvent as Ei, createPeerMailbox as En, assertProfileMaterialization as Er, codeModeArguments as Et, freeSlots as F, mapSandboxEvent as Fi, isTerminalNodeStatus as Fn, sandboxActProfileMaterialization as Fr, providerAsExecutor as Ft, consumeScopeRetainedOwnerResult as G, awaitAbortable$1 as Gi, SeatChainExhaustedError as Gn, knownExecutionBindingReceipt as Gr, createWorkerSlots as Gt, recordScopeOwnerPause as H, notifySandboxEventObserver as Hi, undispatchedCredentialExit as Hn, authoredProfileDigest as Hr, retainedCreateMaterial as Ht, queueOf as I, mapSandboxToolEvent as Ii, DriverAttemptsExhaustedError as In, sandboxProfileMaterialization as Ir, LEAF_CONTINUATION_TASK as It, scopeRetainedOwnerResult as J, providerMessageText as Ji, subscriptionUsageLimitSignal as Jn, providerAttemptEvidence as Jr, harnessTranscriptArtifact as Jt, prepareScopeRetainedOwnerTask as K, promptFromAgentTurnInput as Ki, authoredSeatStages as Kn, knownMaterializationReceipt as Kr, openSlotGroup as Kt, rollingDispatch as L, terminalTextFromSandboxEvent as Li, HarnessTurnFailedError as Ln, unsupportedProfileDimensions as Lr, providerAsSandboxClient as Lt, settledToIteration as M, defaultRedactorIdentityMaterial as Mi, createActivityLog as Mn, promptControlProfileMaterialization as Mr, routerBrain as Mt, assertRecursiveReservationPolicy as N, resolveRedactor as Ni, readWorkerProgress as Nn, promptModelProfileMaterialization as Nr, createAgentEnvironmentProviderRegistry as Nt, coordinationMcpAlias as O, spendFromUsageEvents as Oi, peerMailTools as On, controlProfileMaterialization as Or, createCodeModeTools as Ot, deriveNodeExecutionIdentity as P, createSandboxToolPartState as Pi, isLiveNodeStatus as Pn, renderUnsupported as Pr, resolveAgentEnvironmentProvider as Pt, scopeRetainedOwnerRestorePoint as Q, verdictFromJudgeScore as Qn, runtimeOwnedExecutorMaterialization as Qr, retainHarnessTranscript as Qt, meterRuntimeOwnedAccounting as R, canonicalStreamEventFromSandboxEvent as Ri, abandonablePending as Rn, worktreeCliProfileMaterialization as Rr, reconnectRetainedRun as Rt, FileSpawnJournal as S, contentAddress as Si, AUTHORITY_MARKERS as Sn, runWorktreeHarness as Sr, createSandboxLineage as St, recordScopeOwnerMaterialization as T, createBudgetPool as Ti, claimsAuthority as Tn, terminateProcessTreeAndConfirm as Tr, defaultSelectWinner as Tt, prepareScopeRetainedOwnerSeatSwitch as U, sumSandboxUsage as Ui, upstreamUnavailableSignal as Un, finalizeRuntimeOwnedPendingExecutor as Ur, destroyInteractiveEnvironment as Ut, recordScopeOwnerDriverAttempt as V, extractLlmCallEvent as Vi, summarizeDriverAttempts as Vn, authoredAgentIdentity as Vr, startRetainedRunInEnvironment as Vt, abandonScopeRetainedOwnerInvocation as W, decodeHarnessUsage as Wi, SeatChain as Wn, inheritRuntimeOwnedExecutorAttestation as Wr, environmentGone as Wt, scopeRetainedOwnerTurnEnded as X, gateOnDeliverable as Xn, runtimeOwnedDriveHarnessProviderEvidence as Xr, readHarnessTranscript as Xt, beginScopeRetainedOwnerDrive as Y, CheckUnavailableError as Yn, recordRuntimeOwnedDriveHarnessProviderEvidence as Yr, persistHarnessTranscript as Yt, reconcileScopeRetainedOwnerEnvironment as Z, mapExecutorResult as Zn, runtimeOwnedExecutorExecutionBinding as Zr, resolveHarnessTranscriptCapture as Zt, attachWorker as _, unavailableSignalOfFailure as _i, sanitizeKnowledgeReadinessReport as _n, runAbortable as _r, createSteerableSandboxSession as _t, runTree as a, executableAgentSpecSnapshot as ai, buildLoopSpanNodes as an, isFiniteNumber as ar, loadSpawnForest as at, recoverRetainedInteractiveRun as b, detachedFrozen as bi, createInbox as bn, bridgeStopSignalKey as br, readPromptOptions as bt, driverExecutorFactory as c, runtimeFailureCause as ci, createOtelExporter as cn, bridgeAdmissionRefusal as cr, InMemorySpawnJournal as ct, createScope as d, registerRetainedExecutorPreparation as di, loopEventToOtelSpan as dn, createCodexRolloutStoreReader as dr, createExecutorRegistry as dt, runtimeOwnedPendingExecutorMaterialization as ei, createInPlaceCliExecutor as en, admitContinuationPolicy as er, bindScopeRetainedOwnerEnvironmentId as et, replaySpawnTree as f, retainedExecutorSeamKey as fi, padSpanId as fn, harnessUsageIsEmpty as fr, bindReusableExecutorExecutionId as ft, interactiveAdmissionSeamKey as g, unavailableResumeAt as gi, createRuntimeStreamEventCollector as gn, linkAbort as gr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as gt, workerTraceAnalysisStore as h, unavailablePauseMs as hi, createRuntimeEventCollector as hn, RunCancellationReason as hr, snapshotExecutorConfig as ht, runFinalizer as i, executableAgentProfileSnapshot as ii, buildLoopOtelSpans as in, failedItems as ir, scopeRetainedOwnerJournalRoot as it, runtimeGraphMetadataKey as j, defaultRedactor as ji, DEFAULT_STALL_AFTER_MS as jn, profileMaterializationAxes$1 as jr, createRouterTranscript as jt, coordinationProfileToolPrefix as k, spendFromUsageTotals as ki, peerMailVerbNames as kn, defineProfileMaterializationContract as kr, runCodeMode as kt, isDriverSpec as l, settlementFailureCause as li, flatOtelSpan as ln, bridgeModelRouteRefusal as lr, FileResultBlobStore as lt, parseWorkerToolTraceArtifact as m, jitteredMs as mi, toOtelAttributes as mn, createPushTraceSource as mr, createExecutor as mt, createSupervisor as n, unknownExecutionBindingReceipt as ni, createPropagatingTraceEmitter as nn, checkVerdictOf as nr, owners as nt, createRootHandle as o, projectSandboxOutcome as oi, buildRuntimeEventOtelSpans as on, priceTokens as or, materializeTreeView as ot, isTraceAnalysisStore as p, cappedDoublingMs as pi, padTraceId as pn, readCodexRolloutSession as pr, captureReusableExecutorConfig as pt, scopeRetainedOwnerPriorSpend as q, promptOptionsFromAgentTurnInput as qi, seatExecutionProfile as qn, newExecutionAttemptId as qr, captureHarnessTranscript as qt, bestDelivered as r, unknownMaterializationReceipt as ri, readTraceContextFromEnv as rn, createContinuationKeeper as rr, scopeRetainedOwnerContext as rt, driverChild as s, readSandboxOutcome as si, createOpenInferenceFileExporter as sn, ROUTER_PRICE_SOURCE as sr, InMemoryResultBlobStore as st, DEFAULT_MAX_DEPTH as t, runtimeOwnedScopeOwnerRuntime as ti, WORKER_TRACE_PROPAGATION as tn, bestComposite as tr, bindScopeRetainedOwnerProvider as tt, withDriverExecutor as u, RetainedExecutionPendingError as ui, generateSpanId as un, addHarnessUsage as ur, insideCursorNamespace as ut, readWorkerInteractiveBinding as v, TRACE_ROOT_SCHEMA as vi, sanitizeRuntimeStreamEvent as vn, signalAbortError as vr, runAgentRounds as vt, noteScopeOwnerPlannedExecution as w, errMessage as wi, PEER_MAIL_WIRE_KEY as wn, harnessInvocation as wr, TERMINAL_DECISIONS as wt, startRetainedInteractiveRun as x, detachedSnapshot as xi, failPendingAfter as xn, runSettledCommand as xr, createSandboxForSpec as xt, reconnectRetainedInteractiveRun as y, TRACE_SUMMARY_SCHEMA as yi, INBOX_RECEIPT_KEY as yn, bridgeRuntimeAttachmentsKey as yr, assertBoxlessPromptOptions as yt, meterRuntimeOwnedProviderAttempt as z, createSandboxTurnEventCollector as zi, causedByPartialFailure as zn, attestRuntimeOwnedPendingExecutor as zr, recoverRetainedRun as zt };
 
-//# sourceMappingURL=supervisor-CPG1I9UN.js.map
+//# sourceMappingURL=supervisor-VXuN2OHT.js.map