@tangle-network/agent-runtime 0.343.4 → 0.348.1

package/dist/{runtime-CefFtXC2.js → runtime-B_40dXlF.js}

@@ -1,18 +1,18 @@
-import { o as writeAtomicDurableFile } from "./durable-file-DLcrzrjL.js";
-import { A as coordinationProfileToolPrefix, Ai as detachedFrozen, At as readPromptOptions, Dr as runAbortable, Ft as defaultSelectWinner, Ht as routerBrain, Mi as contentAddress, Mt as createSandboxLineage, N as settledToIteration, Ot as runAgentRounds, Qi as notifySandboxEventObserver, R as rollingDispatch, Yi as createSandboxTurnEventCollector, _t as readCommittedJsonLines, ar as CheckUnavailableError, bt as insideCursorNamespace, cr as verdictFromJudgeScore, d as withDriverExecutor, dt as InMemorySpawnJournal, gt as readCommittedJsonFile, hi as executableAgentSpecSnapshot, ji as detachedSnapshot, kt as assertBoxlessPromptOptions, ln as createWorktreeCliExecutor, m as isTraceAnalysisStore, mi as executableAgentProfileSnapshot, mt as isNoEntError, n as createSupervisor, or as gateOnDeliverable, pt as appendCommittedJsonLine, sr as mapExecutorResult, ut as InMemoryResultBlobStore, vt as upsertCommittedJsonLine, wt as createExecutor, xt as createExecutorRegistry, yt as withJsonlFileLock } from "./supervisor-D3M9ab1v.js";
+import { s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
+import { At as createExecutor, Ct as readCommittedJsonLines, Dt as createExecutorRegistry, Et as insideCursorNamespace, Ft as assertBoxlessPromptOptions, I as coordinationProfileToolPrefix, It as readPromptOptions, Jt as routerBrain, Li as detachedFrozen, Pr as runAbortable, Pt as runAgentRounds, Ri as detachedSnapshot, Rt as createSandboxLineage, Si as executableAgentSpecSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Vt as defaultSelectWinner, W as rollingDispatch, _ as withDriverExecutor, _t as InMemorySpawnJournal, aa as notifySandboxEventObserver, b as isTraceAnalysisStore, bt as isNoEntError, dr as CheckUnavailableError, gt as InMemoryResultBlobStore, hn as createWorktreeCliExecutor, hr as verdictFromJudgeScore, mr as mapExecutorResult, n as createSupervisor, na as createSandboxTurnEventCollector, pr as gateOnDeliverable, wt as upsertCommittedJsonLine, xi as executableAgentProfileSnapshot, yt as appendCommittedJsonLine, z as settledToIteration, zi as contentAddress } from "./supervisor-DDy0aEtR.js";
 import { i as ConfigError, m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-DodWX-cb.js";
-import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-CpJknIaL.js";
+import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-Wl_rCuzM.js";
 import { $ as isAbortError, B as sha256Bytes$1, C as WorkspaceScanLimitError, Ct as armDeadlineTimer, E as captureMaterializedWorkspace, K as chargedTokens, P as canonicalCandidateDigest$1, Q as hasCompleteCacheBreakdown, R as immutableCandidateValue, W as addSpend, X as errorMessage, Z as fnv1a32Hex, et as isAsyncIterable, ft as zeroSpend, h as markPutStreamVerified, ot as sleep, q as cloneSpend, rt as randomSuffix, st as stringifySafe, tt as mapWithConcurrency } from "./sandbox-profile-compat-_fEtHPCj.js";
 import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, p as canonicalObservedModelParts, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-t05_9Wwk.js";
-import { g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-T98ZbsEt.js";
-import { A as runBrainLoop, S as taskShapeDigest, b as recordGraphRun, f as graphFromStored, m as graphRunsFor, p as graphRegistry, t as supervise, u as digestOfGraph, v as lookupGraph } from "./supervise-BuVVC7Bl.js";
-import "./run-cancellation-CEDiqfhC.js";
+import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-COd2F2wp.js";
+import { g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-Bm6leXc6.js";
+import { A as runBrainLoop, S as taskShapeDigest, b as recordGraphRun, f as graphFromStored, m as graphRunsFor, p as graphRegistry, t as supervise, u as digestOfGraph, v as lookupGraph } from "./supervise-BUOeThuB.js";
+import "./run-cancellation-CzFhQGMa.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DFCeo4vg.js";
-import "./provision-supervisor-CysVhSqV.js";
-import "./delegate-CjdtLf1v.js";
-import "./graph-kgzTaNMA.js";
+import "./provision-supervisor-CC0HdOHo.js";
+import "./delegate-Cp5-PsaX.js";
+import "./graph-CE_pzU31.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256Bytes, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -5645,50 +5645,204 @@ function printBenchmarkReport(report) {
 	}
 }
 //#endregion
-//#region src/runtime/s3-private-cas-store.ts
-const DIGEST = /^sha256:([0-9a-f]{64})$/u;
-const BUCKET = /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/u;
-const PREFIX = /^(?:[A-Za-z0-9._-]+\/)*$/u;
-const NAMESPACE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
-const POINTER_NAME = /^(?!sha256\/)[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}(?:\/[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}){0,3}$/u;
-const POINTER_MAX_BYTES = 1024 * 1024;
+//#region src/runtime/s3-private-cas-namespace.ts
+const NAMESPACE$1 = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
+const MAX_PAGE_BYTES = 2 * 1024 * 1024;
+const fingerprint = (namespace, location, storeIdentity, objects) => `sha256:${createHash("sha256").update(JSON.stringify({
+	namespace,
+	location,
+	storeIdentity,
+	objects
+})).digest("hex")}`;
+function xmlText(text) {
+	return text.replace(/&([^;]*);/gu, (_, entity) => {
+		const named = {
+			amp: "&",
+			lt: "<",
+			gt: ">",
+			quot: "\"",
+			apos: "'"
+		};
+		if (named[entity] !== void 0) return named[entity];
+		const numeric = /^#(?:x([0-9a-f]+)|([0-9]+))$/iu.exec(entity);
+		if (!numeric) throw new Error("S3 private CAS list contains an unknown XML entity");
+		const code = Number.parseInt(numeric[1] ?? numeric[2], numeric[1] ? 16 : 10);
+		if (!Number.isSafeInteger(code) || code <= 0 || code > 1114111 || code >= 55296 && code <= 57343) throw new Error("S3 private CAS list contains an invalid XML character");
+		return String.fromCodePoint(code);
+	});
+}
+function field(text, name, optional = false) {
+	const values = [...text.matchAll(new RegExp(`<${name}>([^<]*)</${name}>`, "gu"))];
+	if (values.length !== 1) {
+		if (optional && values.length === 0) return void 0;
+		throw new Error(`S3 private CAS list has an invalid ${name}`);
+	}
+	return xmlText(values[0][1]);
+}
+async function listPage(response) {
+	const reader = response.body?.getReader();
+	if (!reader) throw new Error("S3 private CAS list returned no body");
+	const chunks = [];
+	let size = 0;
+	try {
+		while (true) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.byteLength;
+			if (size > MAX_PAGE_BYTES) throw new Error("S3 private CAS list page exceeds its bound");
+			chunks.push(value);
+		}
+	} finally {
+		await reader.cancel().catch(() => void 0);
+	}
+	const text = Buffer.concat(chunks).toString("utf8");
+	if (/<!/u.test(text) || !/^\s*(?:<\?xml[^>]*>\s*)?<ListBucketResult(?:\s[^>]*)?>[\s\S]*<\/ListBucketResult>\s*$/u.test(text)) throw new Error("S3 private CAS list returned an invalid document");
+	if (field(text, "EncodingType") !== "url") throw new Error("S3 private CAS list did not encode keys");
+	const truncated = field(text, "IsTruncated");
+	if (truncated !== "true" && truncated !== "false") throw new Error("S3 private CAS list has no completion flag");
+	const objects = [...text.matchAll(/<Contents>([\s\S]*?)<\/Contents>/gu)].map(([, row]) => {
+		const byteLength = Number(field(row, "Size"));
+		const key = decodeURIComponent(field(row, "Key"));
+		const etag = field(row, "ETag");
+		if (!Number.isSafeInteger(byteLength) || byteLength < 0 || !etag || /[\r\n]/u.test(etag)) throw new Error("S3 private CAS list has invalid object metadata");
+		return {
+			key,
+			etag,
+			byteLength
+		};
+	});
+	const count = field(text, "KeyCount");
+	if (!/^\d+$/u.test(count) || Number(count) !== objects.length) throw new Error("S3 private CAS list object count is inconsistent");
+	const next = field(text, "NextContinuationToken", true);
+	if (truncated === "true" && !next) throw new Error("S3 private CAS list omitted its next page");
+	return {
+		objects,
+		next: truncated === "true" ? next : void 0
+	};
+}
+/** Generic storage operation only; ownership, holds, references and writer fencing belong to its consumer. */
+function privateCasNamespaceOperations({ request, refusal, prefix, location, storeIdentity }) {
+	const namespacePrefix = (namespace) => {
+		if (!NAMESPACE$1.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
+		return `${prefix}${namespace}/`;
+	};
+	const validObject = (object, scope) => {
+		if (!object.key.startsWith(scope) || object.key.length === scope.length || object.key.split("/").some((part) => !part || part === "." || part === "..")) throw new Error("S3 private CAS inventory contains a key outside its namespace");
+		if (!Number.isSafeInteger(object.byteLength) || object.byteLength < 0 || !object.etag || /[\r\n]/u.test(object.etag)) throw new Error("S3 private CAS inventory contains invalid object metadata");
+	};
+	const inspectNamespace = async ({ namespace, signal }) => {
+		const scope = namespacePrefix(namespace);
+		const objects = [];
+		const tokens = /* @__PURE__ */ new Set();
+		const keys = /* @__PURE__ */ new Set();
+		let next;
+		do {
+			signal?.throwIfAborted();
+			const response = await request("GET", "", {
+				query: {
+					"list-type": "2",
+					"encoding-type": "url",
+					"max-keys": "1000",
+					prefix: scope,
+					...next ? { "continuation-token": next } : {}
+				},
+				...signal ? { signal } : {}
+			});
+			if (!response.ok) throw await refusal(response, "namespace list");
+			const page = await listPage(response);
+			for (const object of page.objects) {
+				validObject(object, scope);
+				if (keys.has(object.key)) throw new Error("S3 private CAS list repeated an object");
+				keys.add(object.key);
+				objects.push(object);
+			}
+			next = page.next;
+			if (next && tokens.has(next)) throw new Error("S3 private CAS list repeated its continuation token");
+			if (next) tokens.add(next);
+		} while (next);
+		objects.sort((a, b) => a.key < b.key ? -1 : a.key > b.key ? 1 : 0);
+		return {
+			namespace,
+			location,
+			storeIdentity,
+			objects,
+			sha256: fingerprint(namespace, location, storeIdentity, objects)
+		};
+	};
+	return {
+		inspectNamespace,
+		async retireNamespace({ inventory, signal }) {
+			const { namespace, objects } = inventory;
+			const scope = namespacePrefix(namespace);
+			if (inventory.location !== location || inventory.storeIdentity !== storeIdentity || inventory.sha256 !== fingerprint(namespace, location, storeIdentity, objects)) throw new Error("S3 private CAS retirement inventory does not match this store");
+			const reviewed = /* @__PURE__ */ new Map();
+			for (const object of objects) {
+				validObject(object, scope);
+				if (reviewed.has(object.key)) throw new Error("S3 private CAS retirement inventory repeats an object");
+				reviewed.set(object.key, object);
+			}
+			const current = await inspectNamespace({
+				namespace,
+				...signal ? { signal } : {}
+			});
+			for (const object of current.objects) {
+				const prior = reviewed.get(object.key);
+				if (!prior || prior.etag !== object.etag || prior.byteLength !== object.byteLength) throw new Error("S3 private CAS namespace changed after its reviewed inventory");
+			}
+			let deletedObjects = 0;
+			let deletedBytes = 0;
+			for (const object of current.objects) {
+				signal?.throwIfAborted();
+				const check = await request("HEAD", object.key, { ...signal ? { signal } : {} });
+				if (check.status === 404) {
+					await check.body?.cancel();
+					continue;
+				}
+				if (!check.ok) throw await refusal(check, "retirement HEAD");
+				await check.body?.cancel();
+				if (check.headers.get("etag") !== object.etag || check.headers.get("content-length") === null || Number(check.headers.get("content-length")) !== object.byteLength) throw new Error("S3 private CAS object changed before retirement");
+				const response = await request("DELETE", object.key, { ...signal ? { signal } : {} });
+				if (!response.ok) throw await refusal(response, "namespace delete");
+				await response.body?.cancel();
+				const absent = await request("HEAD", object.key, { ...signal ? { signal } : {} });
+				await absent.body?.cancel();
+				if (absent.status !== 404) throw new Error("S3 private CAS object is not confirmed absent after retirement");
+				deletedObjects++;
+				deletedBytes += object.byteLength;
+				if (!Number.isSafeInteger(deletedBytes)) throw new Error("S3 private CAS retired payload bytes exceed the safe integer range");
+			}
+			const remaining = await inspectNamespace({
+				namespace,
+				...signal ? { signal } : {}
+			});
+			return {
+				namespace,
+				location,
+				deletedObjects,
+				deletedBytes,
+				remainingObjects: remaining.objects.length,
+				remainingBytes: remaining.objects.reduce((sum, object) => sum + object.byteLength, 0),
+				complete: remaining.objects.length === 0
+			};
+		}
+	};
+}
+//#endregion
+//#region src/runtime/s3-private-cas-request.ts
 const EMPTY_PAYLOAD = createHash("sha256").update("").digest("hex");
-const CONTENT_TYPE = "application/octet-stream";
-const METADATA_DIGEST = "x-amz-meta-sha256";
-const hex = (value) => createHash("sha256").update(value).digest("hex");
+const hex$1 = (value) => createHash("sha256").update(value).digest("hex");
 const hmac = (key, value) => createHmac("sha256", key).update(value).digest();
 const encode = (segment) => encodeURIComponent(segment).replace(/[!'()*]/gu, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
-/**
-* Durable private CAS bytes in one S3-compatible bucket under `<prefix><namespace>/sha256/<hex>`.
-*
-* Every write declares its SHA-256 as the signed payload hash, so the store refuses bytes that
-* do not match the digest. A write is confirmed by reading back the object's length and digest
-* metadata. Reads return raw bytes; the private CAS port verifies them.
-*/
-function createS3PrivateCasStore(options) {
-	const endpoint = new URL(options.endpoint);
-	if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.pathname !== "/" && endpoint.pathname !== "") throw new Error("S3 private CAS endpoint must be a bare https origin");
-	if (!BUCKET.test(options.bucket)) throw new Error("S3 private CAS bucket name is invalid");
-	const prefix = options.prefix ?? "";
-	if (!PREFIX.test(prefix)) throw new Error("S3 private CAS prefix must be empty or end in /");
-	if (!options.accessKeyId || !options.secretAccessKey) throw new Error("S3 private CAS needs an access key id and secret");
+/** The single signed transport for private CAS object, pointer and namespace operations. */
+function createPrivateCasS3Transport(options, endpoint) {
 	const region = options.region ?? "auto";
 	const timeoutMs = options.timeoutMs ?? 12e4;
 	const send = options.fetch ?? fetch;
-	const key = (namespace, digest) => {
-		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
-		const match = DIGEST.exec(digest);
-		if (!match) throw new Error("S3 private CAS digest must be sha256:<64 lowercase hex>");
-		return `${prefix}${namespace}/sha256/${match[1]}`;
-	};
-	const pointerKey = (namespace, name) => {
-		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
-		if (!POINTER_NAME.test(name)) throw new Error("S3 private CAS pointer name is invalid");
-		return `${prefix}${namespace}/${name}`;
-	};
-	const request = async (method, objectKey, { body, byteLength, payloadHash = EMPTY_PAYLOAD, headers = {}, signal } = {}) => {
+	const request = async (method, objectKey, { body, byteLength, payloadHash = EMPTY_PAYLOAD, headers = {}, signal, query = {} } = {}) => {
 		const path = `/${[options.bucket, ...objectKey.split("/")].map(encode).join("/")}`;
 		const url = new URL(path, endpoint);
+		const canonicalQuery = Object.entries(query).map(([name, value]) => [encode(name), encode(value)]).sort(([a, av], [b, bv]) => a < b ? -1 : a > b ? 1 : av < bv ? -1 : av > bv ? 1 : 0).map(([name, value]) => `${name}=${value}`).join("&");
+		url.search = canonicalQuery;
 		const amzDate = (/* @__PURE__ */ new Date()).toISOString().replace(/[:-]|\.\d{3}/gu, "");
 		const day = amzDate.slice(0, 8);
 		const signed = {
@@ -5701,7 +5855,7 @@ function createS3PrivateCasStore(options) {
 		const canonical = [
 			method,
 			path,
-			"",
+			canonicalQuery,
 			names.map((name) => `${name}:${signed[name].trim()}\n`).join(""),
 			names.join(";"),
 			payloadHash
@@ -5711,7 +5865,7 @@ function createS3PrivateCasStore(options) {
 			"AWS4-HMAC-SHA256",
 			amzDate,
 			scope,
-			hex(canonical)
+			hex$1(canonical)
 		].join("\n")).digest("hex");
 		const { host: _host, ...sent } = signed;
 		const deadline = AbortSignal.timeout(timeoutMs + Math.ceil((byteLength ?? (body instanceof Uint8Array ? body.byteLength : 0)) / (1024 * 1024)) * 1e3);
@@ -5741,6 +5895,59 @@ function createS3PrivateCasStore(options) {
 		detail = detail.replace(/\s+/gu, " ").slice(0, 300);
 		return /* @__PURE__ */ new Error(`S3 private CAS ${action} returned ${response.status}${detail ? `: ${detail}` : ""}`);
 	};
+	return {
+		request,
+		refusal
+	};
+}
+//#endregion
+//#region src/runtime/s3-private-cas-store.ts
+const DIGEST = /^sha256:([0-9a-f]{64})$/u;
+const BUCKET = /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/u;
+const PREFIX = /^(?:[A-Za-z0-9._-]+\/)*$/u;
+const NAMESPACE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
+const POINTER_NAME = /^(?!sha256\/)[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}(?:\/[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}){0,3}$/u;
+const POINTER_MAX_BYTES = 1024 * 1024;
+const CONTENT_TYPE = "application/octet-stream";
+const METADATA_DIGEST = "x-amz-meta-sha256";
+const hex = (value) => createHash("sha256").update(value).digest("hex");
+/**
+* Durable private CAS bytes in one S3-compatible bucket under `<prefix><namespace>/sha256/<hex>`.
+*
+* Every write declares its SHA-256 as the signed payload hash, so the store refuses bytes that
+* do not match the digest. A write is confirmed by reading back the object's length and digest
+* metadata. Reads return raw bytes; the private CAS port verifies them.
+*/
+function createS3PrivateCasStore(options) {
+	const endpoint = new URL(options.endpoint);
+	if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.pathname !== "/" && endpoint.pathname !== "") throw new Error("S3 private CAS endpoint must be a bare https origin");
+	if (!BUCKET.test(options.bucket)) throw new Error("S3 private CAS bucket name is invalid");
+	const prefix = options.prefix ?? "";
+	if (!PREFIX.test(prefix)) throw new Error("S3 private CAS prefix must be empty or end in /");
+	if (!options.accessKeyId || !options.secretAccessKey) throw new Error("S3 private CAS needs an access key id and secret");
+	const key = (namespace, digest) => {
+		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
+		const match = DIGEST.exec(digest);
+		if (!match) throw new Error("S3 private CAS digest must be sha256:<64 lowercase hex>");
+		return `${prefix}${namespace}/sha256/${match[1]}`;
+	};
+	const pointerKey = (namespace, name) => {
+		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
+		if (!POINTER_NAME.test(name)) throw new Error("S3 private CAS pointer name is invalid");
+		return `${prefix}${namespace}/${name}`;
+	};
+	const { request, refusal } = createPrivateCasS3Transport(options, endpoint);
+	const namespaceOperations = privateCasNamespaceOperations({
+		request,
+		refusal,
+		prefix,
+		location: `s3://${options.bucket}/${prefix}`,
+		storeIdentity: `sha256:${hex(JSON.stringify({
+			endpoint: endpoint.origin,
+			bucket: options.bucket,
+			prefix
+		}))}`
+	});
 	/** Whether the bucket holds this exact object; refuses a same-key object of other bytes. */
 	const holds = async (objectKey, digest, byteLength, signal) => {
 		const response = await request("HEAD", objectKey, signal === void 0 ? {} : { signal });
@@ -5753,6 +5960,7 @@ function createS3PrivateCasStore(options) {
 	};
 	return {
 		location: `s3://${options.bucket}/${prefix}`,
+		...namespaceOperations,
 		async putStream({ namespace, digest, byteLength, chunks, signal }) {
 			const objectKey = key(namespace, digest);
 			if (await holds(objectKey, digest, byteLength, signal)) return;
@@ -7145,7 +7353,7 @@ function graphDesignerExtraTools(env) {
 			})();
 			if (name === "designer_history") return (async () => {
 				const args = asRecord(raw ?? {}, "designer_history");
-				const { listGraphRuns } = await import("./supervise-BuVVC7Bl.js").then((n) => n.h);
+				const { listGraphRuns } = await import("./supervise-BUOeThuB.js").then((n) => n.h);
 				const all = await listGraphRuns(registry);
 				return { runs: (args.taskShape === void 0 ? all : all.filter((row) => row.taskDigest === taskShapeDigest(asRecord(args.taskShape, "designer_history.taskShape")))).map(summarize) };
 			})();
@@ -7156,7 +7364,7 @@ function graphDesignerExtraTools(env) {
 				if (mode === "replay") {
 					const digest = args.graphDigest;
 					if (typeof digest !== "string" || digest.length === 0) throw new ValidationError("designer_run_graph: replay mode requires graphDigest from lookup");
-					const { loadGraph } = await import("./supervise-BuVVC7Bl.js").then((n) => n.h);
+					const { loadGraph } = await import("./supervise-BUOeThuB.js").then((n) => n.h);
 					const stored = await loadGraph(registry, digest);
 					if (!stored) throw new ValidationError(`designer_run_graph: no stored graph ${digest.slice(0, 12)} — re-lookup`);
 					const graph = env.bindCheck(graphFromStored(stored, () => {
@@ -8898,10 +9106,14 @@ function createWaterfallCollector() {
 			if (typeof p.score === "number") span.score = p.score;
 		}
 	};
-	const report = () => {
-		const all = [...spans.values()].sort((a, b) => a.startMs - b.startMs);
+	const report = (opts) => {
+		const observedAtMs = opts?.nowMs ?? Date.now();
+		const all = [...spans.values()].map((span) => ({
+			...span,
+			tokens: { ...span.tokens }
+		})).sort((a, b) => a.startMs - b.startMs);
 		const start = all[0]?.startMs ?? 0;
-		const end = Math.max(start, ...all.map((s) => s.endMs ?? s.startMs));
+		const end = Math.max(start, ...all.map((s) => s.endMs ?? Math.max(s.startMs, observedAtMs)));
 		const byKind = {};
 		let totalUsd = 0;
 		const totalTokens = {
@@ -8927,13 +9139,14 @@ function createWaterfallCollector() {
 				byKind[kind] = k;
 			}
 			k.count += 1;
-			k.ms += (s.endMs ?? s.startMs) - s.startMs;
+			k.ms += (s.endMs ?? Math.max(s.startMs, observedAtMs)) - s.startMs;
 			k.usd += s.usd;
 			k.tokens.input += s.tokens.input;
 			k.tokens.output += s.tokens.output;
 		}
 		return {
 			spans: all,
+			observedAtMs,
 			totalMs: end - start,
 			totalUsd,
 			totalTokens,
@@ -8941,7 +9154,7 @@ function createWaterfallCollector() {
 		};
 	};
 	const render = (opts) => {
-		const { spans: all, totalMs, totalUsd, byKind } = report();
+		const { spans: all, observedAtMs, totalMs, totalUsd, byKind } = report(opts);
 		if (all.length === 0) return "(no spans observed)";
 		const width = opts?.width ?? 48;
 		const maxRows = opts?.maxRows ?? 60;
@@ -8951,7 +9164,7 @@ function createWaterfallCollector() {
 		const labelWidth = Math.min(24, Math.max(...all.map((s) => s.label.length)) + 1);
 		for (const s of all.slice(0, maxRows)) {
 			const offset = Math.round((s.startMs - start) * scale);
-			const dur = (s.endMs ?? s.startMs) - s.startMs;
+			const dur = (s.endMs ?? Math.max(s.startMs, observedAtMs)) - s.startMs;
 			const len = Math.max(1, Math.round(dur * scale));
 			const bar = `${" ".repeat(Math.min(offset, width))}${(s.status === "down" ? "░" : "█").repeat(Math.max(1, Math.min(len, width - Math.min(offset, width) + 1)))}`;
 			const mark = s.status === "down" ? " DOWN" : s.score !== void 0 ? ` ${(s.score * 100).toFixed(0)}%` : "";
@@ -9195,4 +9408,4 @@ function tail(s) {
 //#endregion
 export { runPersonified as $, openSqlRunStore as $t, searchSpecDigest as A, secretEnvOfMcpServer as At, chatWorkerSeam as B, readDeclaredCheck as Bt, withUntrackedArtifacts as C, materializeLocalMcp as Ct, assertSearchSpec as D, mcpSecretEnvMetadataKey as Dt, SEARCH_SPEC_CORRELATION_KEY as E, envKeyProvider as Et, profileRegistry as F, assertDeclaredCheck as Ft, openSandboxRun as G, stopSentinel as Gt, runStrategyEvolution as H, completionAuthorizes as Ht, profileRunsForName as I, checkProgramDigest as It, runBenchmark as J, renderLeaderboardHtml as Jt, createS3PrivateCasStore as K, leaderboard as Kt, recordProfileRun as L, declaredCheckDeliverable as Lt, bestProfileFor as M, loopCampaignDispatch as Mt, loadProfile as N, loopDispatch as Nt, compileSearchSpec as O, resolveMcpServerLaunch as Ot, pickBestProfile as P, superviseDispatch as Pt, definePersona as Q, SqlRunOwnershipError as Qt, graphDesignerExtraTools as R, declaredCheckDigest as Rt, copyUntrackedIntoClone as S, connectStdioMcp as St, createFencedSqlRunContext as T, sanitizeMcpToolSchema as Tt, strategyTournament as U, deterministicCompletion as Ut, createChatSessionStore as V, runIsolatedCheck as Vt, SandboxRunAbortError as W, sentinelCompletion as Wt, equalKOnCost as X, renderLeaderboardSvg as Xt, createPrivateCasArtifactPort as Y, renderLeaderboardMarkdown as Yt, trajectoryReport as Z, renderPairwiseMarkdown as Zt, NOTE_MAX_CHARS as _, HarvestError as _t, localShell as a, loopUntil as at, composeWorkerEvidence as b, resolveSandboxClient as bt, createVerifierEnvironment as c, selectValidWinner as ct, harvestSurfaceDiffs as d, assertTraceDerivedFindings as dt, FileCorpus as et, analystsFromRegistry as f, buildSteerContext as ft, EVIDENCE_MAX_CHARS as g, inProcessSandboxClient as gt, runCoderChecks as h, observationFromRegistry as ht, jjWorkspace as i, flatWidenGate as it, connectRemoteSupervisor as j, inlineSandboxClient as jt, searchPresets as k, resolveSecretEnv as kt, boxSurfaceReader as l, verify as lt, worktreeFanout as m, registryScopeAnalyst as mt, makeFinding$1 as n, renderCorpusToInstructions as nt, runInWorkspace as o, panel as ot, failuresAnalyst as p, createScopeAnalyst as pt, printBenchmarkReport as q, pairwiseSignificance as qt, gitWorkspace as r, fanout as rt, createWaterfallCollector as s, pipeline as st, computeFindingId$1 as t, InMemoryCorpus as tt, fsSurfaceReader as u, widen as ut, VERIFY_TAIL_CHARS as v, harvestCorpus as vt, analyzeTrace as w, createMcpEnvironment as wt, settledWorkerOut as x, McpSpawnFault as xt, closingWorkerNote as y, defineLeaderboard as yt, chatTransportExecutor as z, declaredCheckJudge as zt };
 
-//# sourceMappingURL=runtime-CefFtXC2.js.map
+//# sourceMappingURL=runtime-B_40dXlF.js.map