@tangle-network/agent-runtime 0.343.4 → 0.348.1

package/dist/{supervise-BuVVC7Bl.js → supervise-BUOeThuB.js}

@@ -1,11 +1,11 @@
-import { c as __exportAll, n as assertNoSymlinkDescendant, o as writeAtomicDurableFile, s as sha256 } from "./durable-file-DLcrzrjL.js";
-import { $ as beginScopeRetainedOwnerDrive, $n as upstreamUnavailableSignal, A as coordinationProfileToolPrefix, An as createInbox, Ar as bridgeStopSignalKey, B as meterRuntimeOwnedProviderAttempt, Bi as assertValidBudget, Br as fullProfileMaterialization, Bt as toolResultText, Ci as cappedDoublingMs, Ct as captureReusableExecutorConfig, D as restoreScopeOwnerAcceptedExecution, Dr as runAbortable, E as recordScopeOwnerMaterialization, Ei as unavailableResumeAt, Er as linkAbort, F as deriveNodeExecutionIdentity, G as scopeRetainedOwnerResourceReader, Gn as isTerminalNodeStatus, H as recordScopeOwnerDriverAttempt, Hn as createActivityLog, Hr as promptControlProfileMaterialization, Ht as routerBrain, Ii as meterUsageEvent, Ir as assertProfileMaterialization, It as codeModeArguments, J as abandonScopeRetainedOwnerInvocation, Jn as abandonablePending, Jr as worktreeCliProfileMaterialization, Kn as DriverAttemptsExhaustedError, Kr as sandboxProfileMaterialization, Li as newUsageTotals, Ln as isPeerMailEnvelope, Lt as codeModeModelOutput, M as runtimeGraphMetadataKey, Mi as contentAddress, Ni as executorFailure, O as scopeOwnerExecutorNodeContext, P as assertRecursiveReservationPolicy, Pi as errMessage, Pn as PEER_MAIL_WIRE_KEY, Q as scopeRetainedOwnerResult, Qn as undispatchedCredentialExit, Rr as controlProfileMaterialization, Rt as createCodeModeTools, Si as retainedExecutorSeamKey, St as bindReusableExecutorExecutionId, T as noteScopeOwnerPlannedExecution, Ti as unavailablePauseMs, Tr as RunCancellationReason, Tt as snapshotExecutorConfig, U as recordScopeOwnerPause, Ur as promptModelProfileMaterialization, V as recordScopeOwnerBarrenPause, Vr as profileMaterializationAxes$1, Vt as createRouterTranscript, W as prepareScopeRetainedOwnerSeatSwitch, Wn as isLiveNodeStatus, Wr as renderUnsupported, Wt as resolveAgentEnvironmentProvider, X as prepareScopeRetainedOwnerTask, Xn as classifyDriverFailure, Xr as attestRuntimeOwnedScopeOwner, Y as consumeScopeRetainedOwnerResult, Yn as causedByPartialFailure, Z as scopeRetainedOwnerPriorSpend, Zn as summarizeDriverAttempts, Zr as authoredAgentIdentity, _r as bridgeModelRouteRefusal, _t as readCommittedJsonLines, a as runFinalizer, ai as recordRuntimeOwnedDriveHarnessProviderEvidence, ar as CheckUnavailableError, at as bindScopeRetainedOwnerProvider, bi as RetainedExecutionPendingError, bn as generateSpanId, c as driverChild, ci as runtimeOwnedExecutorMaterialization, di as runtimeOwnedScopeOwnerRuntime, dn as WORKER_TRACE_PROPAGATION, dr as bestComposite, ei as inheritRuntimeOwnedExecutorAttestation, er as SeatChain, et as scopeRetainedOwnerTurnEnded, fr as checkVerdictOf, gr as bridgeAdmissionRefusal, gt as readCommittedJsonFile, h as parseWorkerToolTraceArtifact, ht as prepareJsonlAppend, i as bestDelivered, ii as providerAttemptEvidence, in as readHarnessTranscript, it as bindScopeRetainedOwnerEnvironmentId, j as providerVisibleProfile, ji as detachedSnapshot, k as coordinationMcpAlias, kn as INBOX_RECEIPT_KEY, kr as bridgeRuntimeAttachmentsKey, l as driverExecutorFactory, li as runtimeOwnedExecutorProviderEvidence, lr as CONTINUATIONS_DIR, mt as isNoEntError, n as createSupervisor, nr as authoredSeatStages, nt as scopeRetainedOwnerRestorePoint, o as runTree, oi as runtimeOwnedDriveHarnessProviderEvidence, or as gateOnDeliverable, ot as scopeRetainedOwnerContext, pr as createContinuationKeeper, qn as HarnessTurnFailedError, qr as unsupportedProfileDimensions, rn as persistHarnessTranscript, rr as seatExecutionProfile, rt as noteScopeRetainedOwnerCoordination, s as createRootHandle, si as runtimeOwnedExecutorExecutionBinding, st as scopeRetainedOwnerJournalRoot, tr as SeatChainExhaustedError, tt as reconcileScopeRetainedOwnerEnvironment, u as isDriverSpec, ui as runtimeOwnedPendingExecutorMaterialization, ur as admitContinuationPolicy, vn as createOtelExporter, vt as upsertCommittedJsonLine, w as beginScopeOwnerAttempt, wi as jitteredMs, wn as toOtelAttributes, wt as createExecutor, xi as registerRetainedExecutorPreparation, yt as withJsonlFileLock, z as meterRuntimeOwnedAccounting, zi as spendFromUsageTotals, zr as defineProfileMaterializationContract } from "./supervisor-D3M9ab1v.js";
+import { c as captureRunWriteContext, l as fenceRunWrite, m as __exportAll, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
+import { $n as HarnessTurnFailedError, $r as sandboxProfileMaterialization, A as beginScopeOwnerAttempt, Ai as cappedDoublingMs, An as toOtelAttributes, At as createExecutor, B as assertRecursiveReservationPolicy, Bi as executorFailure, Bn as PEER_MAIL_WIRE_KEY, Cr as bridgeAdmissionRefusal, Ct as readCommittedJsonLines, Di as RetainedExecutionPendingError, En as generateSpanId, F as coordinationMcpAlias, Fn as INBOX_RECEIPT_KEY, G as meterRuntimeOwnedAccounting, Gr as controlProfileMaterialization, Ht as codeModeArguments, I as coordinationProfileToolPrefix, In as createInbox, Ir as bridgeRuntimeAttachmentsKey, J as recordScopeOwnerDriverAttempt, Jn as createActivityLog, Jr as profileMaterializationAxes$1, Jt as routerBrain, K as meterRuntimeOwnedProviderAttempt, Ki as spendFromUsageTotals, Kr as defineProfileMaterializationContract, Kt as toolResultText, L as providerVisibleProfile, Lr as bridgeStopSignalKey, M as recordScopeOwnerMaterialization, Mi as unavailablePauseMs, Mr as RunCancellationReason, N as restoreScopeOwnerAcceptedExecution, Ni as unavailableResumeAt, Nr as linkAbort, Oi as registerRetainedExecutorPreparation, Ot as bindReusableExecutorExecutionId, P as scopeOwnerExecutorNodeContext, Pr as runAbortable, Qn as DriverAttemptsExhaustedError, R as runtimeGraphMetadataKey, Ri as detachedSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Ui as meterUsageEvent, Un as isPeerMailEnvelope, Ur as assertProfileMaterialization, Ut as codeModeModelOutput, V as deriveNodeExecutionIdentity, Vi as errMessage, Wi as newUsageTotals, Wt as createCodeModeTools, X as prepareScopeRetainedOwnerSeatSwitch, Xn as isLiveNodeStatus, Xr as promptModelProfileMaterialization, Xt as resolveAgentEnvironmentProvider, Y as recordScopeOwnerPause, Yr as promptControlProfileMaterialization, Z as scopeRetainedOwnerResourceReader, Zn as isTerminalNodeStatus, Zr as renderUnsupported, _i as runtimeOwnedPendingExecutorMaterialization, _n as WORKER_TRACE_PROPAGATION, _r as admitContinuationPolicy, a as assertRunParking, ar as upstreamUnavailableSignal, at as beginScopeRetainedOwnerDrive, br as createContinuationKeeper, bt as isNoEntError, c as sleepScopeWait, cr as authoredSeatStages, ct as scopeRetainedOwnerRestorePoint, d as runFinalizer, di as providerAttemptEvidence, dr as CheckUnavailableError, dt as bindScopeRetainedOwnerProvider, ei as unsupportedProfileDimensions, er as abandonablePending, et as abandonScopeRetainedOwnerInvocation, f as runTree, fi as recordRuntimeOwnedDriveHarnessProviderEvidence, fr as gateFactoryOnDeliverable, ft as scopeRetainedOwnerContext, g as isDriverSpec, gi as runtimeOwnedExecutorProviderEvidence, gr as CONTINUATIONS_DIR, h as driverExecutorFactory, hi as runtimeOwnedExecutorMaterialization, i as RunParkedError, ii as authoredAgentIdentity, ir as undispatchedCredentialExit, it as scopeRetainedOwnerResult, j as noteScopeOwnerPlannedExecution, ji as jitteredMs, jt as snapshotExecutorConfig, ki as retainedExecutorSeamKey, kt as captureReusableExecutorConfig, l as withRunParking, ln as persistHarnessTranscript, lr as seatExecutionProfile, lt as noteScopeRetainedOwnerCoordination, m as driverChild, mi as runtimeOwnedExecutorExecutionBinding, n as createSupervisor, nr as classifyDriverFailure, nt as prepareScopeRetainedOwnerTask, o as bindScopeParkingDrain, or as SeatChain, ot as scopeRetainedOwnerTurnEnded, p as createRootHandle, pi as runtimeOwnedDriveHarnessProviderEvidence, pt as scopeRetainedOwnerJournalRoot, q as recordScopeOwnerBarrenPause, qi as assertValidBudget, qr as fullProfileMaterialization, qt as createRouterTranscript, ri as attestRuntimeOwnedScopeOwner, rr as summarizeDriverAttempts, rt as scopeRetainedOwnerPriorSpend, si as inheritRuntimeOwnedExecutorAttestation, sr as SeatChainExhaustedError, st as reconcileScopeRetainedOwnerEnvironment, ti as worktreeCliProfileMaterialization, tr as causedByPartialFailure, tt as consumeScopeRetainedOwnerResult, u as bestDelivered, un as readHarnessTranscript, ut as bindScopeRetainedOwnerEnvironmentId, vi as runtimeOwnedScopeOwnerRuntime, vr as bestComposite, wn as createOtelExporter, wr as bridgeModelRouteRefusal, wt as upsertCommittedJsonLine, x as parseWorkerToolTraceArtifact, xt as prepareJsonlAppend, yr as checkVerdictOf, zi as contentAddress } from "./supervisor-DDy0aEtR.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { Et as isDeadlineAbortReason, K as chargedTokens, Ot as teardownExecutor, W as addSpend, X as errorMessage, _t as withBudgetResources, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, gt as resourceTelemetry, kt as teardownSurfaces, mt as addResourceSpend, nt as promptCacheTokenClasses, ot as sleep, ut as unmeteredSpend, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-_fEtHPCj.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { c as budgetOverspendText, d as safeJsonText, f as createFileRunContext, l as normalizeAnalyzeOnSettle, m as withRunContext, n as createCoordinationToolsForManager, o as createCancelAcknowledger, p as createInMemoryRunContext, s as createSteerAcknowledger, t as createCoordinationTools, u as coordinationVerbNames } from "./coordination-manager-T98ZbsEt.js";
-import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CEDiqfhC.js";
+import { c as budgetOverspendText, d as safeJsonText, f as createFileRunContext, l as normalizeAnalyzeOnSettle, m as withRunContext, n as createCoordinationToolsForManager, o as createCancelAcknowledger, p as createInMemoryRunContext, s as createSteerAcknowledger, t as createCoordinationTools, u as coordinationVerbNames } from "./coordination-manager-Bm6leXc6.js";
+import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CzFhQGMa.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-XV4aJwoQ.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
@@ -169,6 +169,7 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"rootHandle",
 	"router",
 	"runDir",
+	"parking",
 	"resume",
 	"segment",
 	"runContext",
@@ -790,6 +791,7 @@ const ROOT_STREAM_FILE = "root-stream.jsonl";
 /** Create the writer for `<runDir>/root-stream.jsonl`. Nothing touches disk until the first
 *  `beginAttempt`, so a run whose root never drives leaves no file and no receipt. */
 function createRootStreamSink(runDir, now) {
+	const withClaim = captureRunWriteContext();
 	const dir = resolve(runDir);
 	const path = resolve(dir, ROOT_STREAM_FILE);
 	let fd;
@@ -803,63 +805,79 @@ function createRootStreamSink(runDir, now) {
 		const needsSeparator = await prepareJsonlAppend(path);
 		seq = 0;
 		for await (const _record of readCommittedJsonLines(path, { allowMissing: true })) seq += 1;
-		fd = openSync(path, constants.O_APPEND | constants.O_CREAT | constants.O_WRONLY | (typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0), 384);
-		if (needsSeparator) writeLine(fd, "");
+		fd = fenceRunWrite(() => {
+			const writer = openSync(path, constants.O_APPEND | constants.O_CREAT | constants.O_WRONLY | (typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0), 384);
+			try {
+				if (needsSeparator) writeLine(writer, "");
+				return writer;
+			} catch (error) {
+				closeSync(writer);
+				throw error;
+			}
+		});
 	};
 	return {
 		async beginAttempt() {
-			if (closed) throw new Error("root stream: beginAttempt after close");
-			attempt += 1;
-			if (fd !== void 0) fsyncSync(fd);
-			await openOnce();
+			return withClaim(async () => {
+				if (closed) throw new Error("root stream: beginAttempt after close");
+				attempt += 1;
+				const writer = fd;
+				if (writer !== void 0) fenceRunWrite(() => fsyncSync(writer));
+				await openOnce();
+			});
 		},
 		append(event) {
-			if (closed) throw new Error("root stream: append after close");
-			if (fd === void 0) throw new Error("root stream: append before beginAttempt");
-			const at = new Date(now()).toISOString();
-			const record = {
-				seq: seq + 1,
-				at,
-				attempt,
-				event
-			};
-			let line;
-			try {
-				line = JSON.stringify(record);
-			} catch (error) {
-				line = JSON.stringify({
+			return withClaim(() => fenceRunWrite(() => {
+				if (closed) throw new Error("root stream: append after close");
+				if (fd === void 0) throw new Error("root stream: append before beginAttempt");
+				const at = new Date(now()).toISOString();
+				const record = {
+					seq: seq + 1,
+					at,
+					attempt,
+					event
+				};
+				let line;
+				try {
+					line = JSON.stringify(record);
+				} catch (error) {
+					line = JSON.stringify({
+						seq: seq + 1,
+						at,
+						attempt,
+						dropped: {
+							kind: event.kind,
+							reason: errorMessage(error)
+						}
+					});
+				}
+				if (line === void 0) line = JSON.stringify({
 					seq: seq + 1,
 					at,
 					attempt,
 					dropped: {
 						kind: event.kind,
-						reason: errorMessage(error)
+						reason: "event serialized to nothing"
 					}
 				});
-			}
-			if (line === void 0) line = JSON.stringify({
-				seq: seq + 1,
-				at,
-				attempt,
-				dropped: {
-					kind: event.kind,
-					reason: "event serialized to nothing"
-				}
-			});
-			writeLine(fd, line);
-			seq += 1;
+				writeLine(fd, line);
+				seq += 1;
+			}));
 		},
 		async close() {
-			if (closed) throw new Error("root stream: closed twice");
-			closed = true;
-			if (fd === void 0) return void 0;
-			try {
-				fsyncSync(fd);
-			} finally {
-				closeSync(fd);
-				fd = void 0;
-			}
-			return readRootStreamReceipt(dir);
+			return withClaim(async () => {
+				if (closed) throw new Error("root stream: closed twice");
+				closed = true;
+				const writer = fd;
+				if (writer === void 0) return void 0;
+				try {
+					fenceRunWrite(() => fsyncSync(writer));
+				} finally {
+					closeSync(writer);
+					fd = void 0;
+				}
+				return readRootStreamReceipt(dir);
+			});
 		}
 	};
 }
@@ -4895,7 +4913,19 @@ function observeWorkerControls(options) {
 		}
 		if (failure) throw failure.error;
 	};
-	return { close: () => closing ??= finish() };
+	return {
+		async pass() {
+			if (!active) return;
+			try {
+				cancellations?.pass("boundary");
+				await steers?.pass("boundary");
+			} catch (error) {
+				fail(error);
+			}
+			if (failure) throw failure.error;
+		},
+		close: () => closing ??= finish()
+	};
 }
 //#endregion
 //#region src/runtime/supervise/supervisor-manager-session.ts
@@ -5741,6 +5771,7 @@ async function runDriverWithRetry(run) {
 		try {
 			await run.drive(attempt, loop.reentry);
 		} catch (error) {
+			if (error instanceof RunParkedError) throw error;
 			await loop.afterFailure(error, attempt, before, startedAt);
 			continue;
 		}
@@ -6063,6 +6094,9 @@ async function driveManagerTurns(inputs) {
 		reported: false
 	};
 	const { mcp } = session;
+	bindScopeParkingDrain(scope, async () => {
+		await mcp.drainResolved();
+	}, () => !session.controls.hasOpenWork({ includeSettled: false }) && session.state.nextTurnInbox.pendingAuthority() === 0);
 	const keeper = session.state.keeper;
 	const reenteredWorkers = scope.resume?.reentered;
 	const reentered = reenteredWorkers === void 0 ? void 0 : {
@@ -6073,14 +6107,26 @@ async function driveManagerTurns(inputs) {
 		modelEvents: () => loop.modelEvents
 	};
 	let driverFailed = true;
+	let parked = false;
 	try {
 		await runDriverWithRetry({
 			...reentered === void 0 ? {} : { reentered },
-			drive: (attempt, reentry) => driveManagerTurn(loop, attempt, reentry),
+			drive: async (attempt, reentry) => {
+				let handedOff = false;
+				try {
+					await driveManagerTurn(loop, attempt, reentry);
+				} catch (error) {
+					handedOff = error instanceof RunParkedError && error.runId === scope.view.root;
+					throw error;
+				} finally {
+					if (!handedOff) await loop.controlPass?.();
+				}
+			},
 			progress: () => readManagerProgress(loop),
 			budget: () => scope.budget,
 			signal: scope.signal,
 			stopSignal: session.state.stopController.signal,
+			sleep: (ms, signal) => sleepScopeWait(scope, ms, signal, "paused-root"),
 			...rootStopPause(config, session),
 			resolvePending: (failure, failures) => abandonScopeRetainedOwnerInvocation(scope, failure, failures),
 			wait: {
@@ -6098,9 +6144,14 @@ async function driveManagerTurns(inputs) {
 			onBarrenPause: (pause) => recordScopeOwnerBarrenPause(loop.session.state.scope, pause)
 		});
 		driverFailed = false;
+	} catch (error) {
+		parked = error instanceof RunParkedError && error.runId === scope.view.root;
+		throw error;
 	} finally {
-		await driveHarness.closeSeatSegment?.(scope.signal.aborted ? "cancelled" : driverFailed ? "failed" : "completed");
-		if (!loop.reported) reportManagerLoop(loop);
+		if (!parked) {
+			await driveHarness.closeSeatSegment?.(scope.signal.aborted ? "cancelled" : driverFailed ? "failed" : "completed");
+			if (!loop.reported) reportManagerLoop(loop);
+		}
 	}
 	return loop.candidate;
 }
@@ -6474,9 +6525,11 @@ async function actExternalManager(config, task, scope) {
 			contractDeclared,
 			finalize,
 			coordinationTools,
-			providerProfile
+			providerProfile,
+			controlPass: () => controlObserver?.pass() ?? Promise.resolve()
 		}));
 	} catch (error) {
+		if (error instanceof RunParkedError && error.runId === scope.view.root) throw error;
 		await mcp.finishAnalysis({
 			status: "down",
 			reason: errorMessage(error)
@@ -7163,7 +7216,7 @@ function workerFromBackend(backend, deliverable, seams) {
 		const boundSessionId = boundBackend.backend === "bridge" ? boundBackend.sessionId : void 0;
 		const peerMailAttachment = peerMailRuntimeAttachment(profile, capturedBackend, spawnContext);
 		if (spawnContext?.peerMailUrl && boundBackend.backend === "provider" && Object.hasOwn(boundBackend.defaults?.runtimeAttachments?.mcp ?? {}, "agent-runtime-peer-mail")) throw new ValidationError("workerFromBackend: provider defaults contain the reserved peer-mail attachment alias");
-		const baseFactory = createExecutor(spawnContext?.peerMailUrl && boundBackend.backend === "provider" ? {
+		const rawFactory = createExecutor(spawnContext?.peerMailUrl && boundBackend.backend === "provider" ? {
 			...boundBackend,
 			steering: boundBackend.steering ?? {},
 			defaults: {
@@ -7180,6 +7233,7 @@ function workerFromBackend(backend, deliverable, seams) {
 				}
 			}
 		} : boundBackend);
+		const baseFactory = deliverable ? gateFactoryOnDeliverable(rawFactory, deliverable) : rawFactory;
 		const executorFactory = (spec, ctx) => {
 			if (boundSessionId !== void 0 && ctx.node?.nodeId !== void 0) bridgeSessionByWorker.set(ctx.node.nodeId, boundSessionId);
 			const extraSeams = seams?.();
@@ -7191,11 +7245,10 @@ function workerFromBackend(backend, deliverable, seams) {
 					...peerMailAttachment
 				} }
 			};
-			const built = baseFactory(spec, seamsForChild === ctx.seams ? ctx : {
+			return baseFactory(spec, seamsForChild === ctx.seams ? ctx : {
 				...ctx,
 				seams: seamsForChild
 			});
-			return deliverable ? gateOnDeliverable(built, deliverable) : built;
 		};
 		return {
 			name,
@@ -7666,7 +7719,7 @@ function registerRecovery(env, makeRecursiveWorker) {
 	const { options } = env.setup;
 	if (options.makeLeafAgent !== void 0 || options.backend?.backend !== "provider" || options.backend.steering) return;
 	const factory = registerRetainedExecutorPreparation(createExecutor(options.backend), ({ spawned, profile, task }) => {
-		if (!spawned.ownedTreeRoot || !spawned.parent || !spawned.assignmentId || !spawned.identity) return void 0;
+		if (!spawned.parent || !spawned.assignmentId || !spawned.identity) return void 0;
 		const execution = {
 			...spawned.identity.candidateDigest ? { candidateDigest: spawned.identity.candidateDigest } : {},
 			...spawned.identity.correlation ? { correlation: spawned.identity.correlation } : {}
@@ -7680,10 +7733,11 @@ function registerRecovery(env, makeRecursiveWorker) {
 			...spawned.key === void 0 ? {} : { key: spawned.key },
 			execution
 		}, true).executorSpec;
-		if (!spec || !isDriverSpec(spec)) return void 0;
-		return {
+		if (!spec) return void 0;
+		const factory = isDriverSpec(spec) ? driverExecutorFactory : spec.executorFactory;
+		return factory === void 0 ? void 0 : {
 			spec,
-			factory: driverExecutorFactory
+			factory
 		};
 	});
 	env.recoveryFactories.set(makeRecursiveWorker, factory);
@@ -7849,6 +7903,8 @@ function retryPreSpawnRefusals(inner, policy, hooks = {}) {
 		...inner.progress ? { progress: () => inner.progress?.() } : {},
 		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
 		...inner.metered ? { metered: () => inner.metered?.() } : {},
+		...inner.accounting ? { accounting: () => inner.accounting?.() } : {},
+		...inner.resultAccepted ? { resultAccepted: () => inner.resultAccepted?.() === true } : {},
 		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
 		...inner.harnessTranscriptSettled ? { harnessTranscriptSettled: () => inner.harnessTranscriptSettled?.() ?? Promise.resolve() } : {},
 		...inner.interactive === void 0 ? {} : { interactive: () => interactiveOf(inner) },
@@ -7857,6 +7913,7 @@ function retryPreSpawnRefusals(inner, policy, hooks = {}) {
 			const restart = () => inner.execute(task, signal);
 			return isAsyncIterable(first) ? retryStream(first, restart, signal) : retryOneShot(first, restart, signal);
 		},
+		...inner.recover ? { recover: (task, signal) => inner.recover(task, signal) } : {},
 		teardown: (grace) => inner.teardown(grace),
 		...teardownSurfaces(inner),
 		resultArtifact: () => inner.resultArtifact()
@@ -8681,7 +8738,8 @@ var ManagerDriveSession = class {
 	}
 	/** The next seat the chain grants, waiting out every pause the chain is exhausted until. */
 	async nextSeat(seatChain, scope, seatSelection, seatJournalRoot, usageLimit, now) {
-		let afterRecheck = false;
+		const paused = [...await seatSelection.journal.loadTree(seatJournalRoot) ?? []].reverse().find((event) => event.id === scope.view.root && (event.kind === "seat-paused" || event.kind === "seat-segment" && event.phase === "started"));
+		let afterRecheck = paused?.kind === "seat-paused" && Date.parse(paused.resumeAt) <= now();
 		for (;;) try {
 			const seat = await seatChain.next(usageLimit && !afterRecheck, afterRecheck);
 			this.activeSeat = seat;
@@ -8697,7 +8755,7 @@ var ManagerDriveSession = class {
 				at: new Date(now()).toISOString()
 			});
 			await seatSelection.onPause(scope.view.root, error.resumeAt, "paused");
-			await sleep(Math.max(1e3, Date.parse(error.resumeAt) - now()), scope.signal, false);
+			await sleepScopeWait(scope, Math.max(1e3, Date.parse(error.resumeAt) - now()), scope.signal, "seat-wait");
 			afterRecheck = true;
 		}
 	}
@@ -9517,7 +9575,7 @@ async function startSupervisedRun(run) {
 		cancellation?.close();
 		throw error;
 	}
-	const result = supervisor.run(agent, canonicalTask, rootRunOptions(run, runDir, hooks, recorder));
+	const result = withRunParking(options.parking, runDir, runId, setup.journal, setup.now, options.signal === void 0 ? run.durableCancellation.signal : AbortSignal.any([options.signal, run.durableCancellation.signal]), () => supervisor.run(agent, canonicalTask, rootRunOptions(run, runDir, hooks, recorder)));
 	const settle = () => settleSupervisedRun(run, result, cancellation);
 	if (!recorder) return settle();
 	try {
@@ -9725,6 +9783,7 @@ function superviseWithTestBrain(profile, task, opts) {
 	return superviseWithContext(profile, task, runtimeOptions, brain);
 }
 function superviseWithContext(profile, task, opts, brain) {
+	assertRunParking(opts.parking, opts.runDir !== void 0);
 	if (opts.driverRetry?.pauseRootStops === true && opts.driverRetry.enabled === false) throw new ValidationError("supervise: driverRetry.pauseRootStops pauses where a retry would stop; it cannot be combined with driverRetry.enabled: false");
 	if (opts.runContext?.acquire === void 0) return superviseInternal(profile, task, opts, brain);
 	const options = captureSuperviseOptions(opts);
@@ -9739,4 +9798,4 @@ function superviseWithContext(profile, task, opts, brain) {
 //#endregion
 export { noProgressFor as $, runBrainLoop as A, graphRootProfile as B, workerFromBackend as C, composeReentryTask as D, UNPROVEN_CONTINUITY as E, flowRootProfile as F, dumbContinuationFailPrompt as G, analyzesFindingsReportPrompt as H, journaledGateDecider as I, kernelPromptRegistry as J, dumbContinuationPassPrompt as K, routeFlowOf as L, createGraphOverlay as M, GraphRouteError as N, serveCoordinationMcp as O, createFlowRun as P, anyOf as Q, validateFlowGraph as R, taskShapeDigest as S, supervisorAgentWithTestBrain as T, createPromptRegistry as U, validateGraphTopology as V, delegatesWorkerBriefPrompt as W, promptHandle as X, naiveContinuationPrompt as Y, allWorkersStalled as Z, loadGraph as _, superviseRootProfile as a, renderAnytimeTable as at, recordGraphRun as b, retryPreSpawnRefusals as c, createSupervisorSpanRecorder as ct, graphDigest as d, plateau as et, graphFromStored as f, listGraphRuns as g, graph_registry_exports as h, profileGuidanceComposer as i, plateauLength as it, runtimeFlowBrain as j, driverAgent as k, withWorkerSpawnRetry as l, graphRunsFor as m, superviseFleetCapabilities as n, areaUnderCurve as nt, isPreSpawnExecutorFailure as o, readRootStream as ot, graphRegistry as p, formatPromptHandle as q, superviseWithTestBrain as r, bestSoFar as rt, resolveWorkerSpawnRetry as s, readRootStreamReceipt as st, supervise as t, anytimeReport as tt, digestOfGraph as u, lookupGraph as v, supervisorAgent as w, storedGraphDigests as x, pickBestGraph as y, defaultEdgeTraversalCap as z };
 
-//# sourceMappingURL=supervise-BuVVC7Bl.js.map
+//# sourceMappingURL=supervise-BUOeThuB.js.map