@tangle-network/agent-runtime 0.344.0 → 0.349.0

package/dist/{runtime-B_93oWEv.js → runtime-CsvGCQpl.js}

@@ -1,18 +1,18 @@
-import { o as writeAtomicDurableFile } from "./durable-file-DLcrzrjL.js";
-import { A as coordinationProfileToolPrefix, Ai as detachedFrozen, At as readPromptOptions, Dr as runAbortable, Ft as defaultSelectWinner, Ht as routerBrain, Mi as contentAddress, Mt as createSandboxLineage, N as settledToIteration, Ot as runAgentRounds, Qi as notifySandboxEventObserver, R as rollingDispatch, Yi as createSandboxTurnEventCollector, _t as readCommittedJsonLines, ar as CheckUnavailableError, bt as insideCursorNamespace, cr as verdictFromJudgeScore, d as withDriverExecutor, dt as InMemorySpawnJournal, gt as readCommittedJsonFile, hi as executableAgentSpecSnapshot, ji as detachedSnapshot, kt as assertBoxlessPromptOptions, ln as createWorktreeCliExecutor, m as isTraceAnalysisStore, mi as executableAgentProfileSnapshot, mt as isNoEntError, n as createSupervisor, or as gateOnDeliverable, pt as appendCommittedJsonLine, sr as mapExecutorResult, ut as InMemoryResultBlobStore, vt as upsertCommittedJsonLine, wt as createExecutor, xt as createExecutorRegistry, yt as withJsonlFileLock } from "./supervisor-D3M9ab1v.js";
+import { s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
+import { At as createExecutor, Ct as readCommittedJsonLines, Dt as createExecutorRegistry, Et as insideCursorNamespace, Ft as assertBoxlessPromptOptions, I as coordinationProfileToolPrefix, It as readPromptOptions, Jt as routerBrain, Li as detachedFrozen, Pr as runAbortable, Pt as runAgentRounds, Ri as detachedSnapshot, Rt as createSandboxLineage, Si as executableAgentSpecSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Vt as defaultSelectWinner, W as rollingDispatch, _ as withDriverExecutor, _t as InMemorySpawnJournal, aa as notifySandboxEventObserver, b as isTraceAnalysisStore, bt as isNoEntError, dr as CheckUnavailableError, gt as InMemoryResultBlobStore, hn as createWorktreeCliExecutor, hr as verdictFromJudgeScore, mr as mapExecutorResult, n as createSupervisor, na as createSandboxTurnEventCollector, pr as gateOnDeliverable, wt as upsertCommittedJsonLine, xi as executableAgentProfileSnapshot, yt as appendCommittedJsonLine, z as settledToIteration, zi as contentAddress } from "./supervisor-wS9Ehz_x.js";
 import { i as ConfigError, m as ValidationError, n as AnalystError, s as PlannerError } from "./errors-DodWX-cb.js";
-import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-CpJknIaL.js";
-import { $ as isAbortError, B as sha256Bytes$1, C as WorkspaceScanLimitError, Ct as armDeadlineTimer, E as captureMaterializedWorkspace, K as chargedTokens, P as canonicalCandidateDigest$1, Q as hasCompleteCacheBreakdown, R as immutableCandidateValue, W as addSpend, X as errorMessage, Z as fnv1a32Hex, et as isAsyncIterable, ft as zeroSpend, h as markPutStreamVerified, ot as sleep, q as cloneSpend, rt as randomSuffix, st as stringifySafe, tt as mapWithConcurrency } from "./sandbox-profile-compat-_fEtHPCj.js";
+import { D as runAgentic, E as refine, M as renderReport, N as profileChatClient, O as sample, j as observe, k as ObservationError, v as loadAuthoredStrategy, x as strategyAuthorContract, y as requestStrategySource } from "./structural-rollout-DylC_fwU.js";
+import { $ as isAbortError, B as sha256Bytes$1, C as WorkspaceScanLimitError, Ct as armDeadlineTimer, E as captureMaterializedWorkspace, K as chargedTokens, P as canonicalCandidateDigest$1, Q as hasCompleteCacheBreakdown, R as immutableCandidateValue, W as addSpend, X as errorMessage, Z as fnv1a32Hex, et as isAsyncIterable, ft as zeroSpend, h as markPutStreamVerified, ot as sleep, q as cloneSpend, rt as randomSuffix, st as stringifySafe, tt as mapWithConcurrency } from "./sandbox-profile-compat-DtuJWFrM.js";
 import { c as profileModelExecutionSettings, i as concreteModelId, l as profileProviderModel, o as enforceTokenLimits, p as canonicalObservedModelParts, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
-import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-t05_9Wwk.js";
-import { g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-T98ZbsEt.js";
-import { A as runBrainLoop, S as taskShapeDigest, b as recordGraphRun, f as graphFromStored, m as graphRunsFor, p as graphRegistry, t as supervise, u as digestOfGraph, v as lookupGraph } from "./supervise-BuVVC7Bl.js";
-import "./run-cancellation-CEDiqfhC.js";
+import { a as reconcileInterruptedSearchCalls, c as searchExecutor, r as dedicatedLane, x as runtimeShipDecision } from "./search-executor-CCb82Umc.js";
+import { g as foldCoordinationRecords, p as createInMemoryRunContext } from "./coordination-manager-B2Z_MmL9.js";
+import { M as runBrainLoop, f as graphDigest, h as graphRunsFor, m as graphRegistry, p as graphFromStored, t as supervise, u as digestOfGraph, w as taskShapeDigest, x as recordGraphRun, y as lookupGraph } from "./supervise-BGfm2GlY.js";
+import "./run-cancellation-CzFhQGMa.js";
 import { i as redactProtectedValue, r as redactProtectedReason } from "./protected-redaction-DFCeo4vg.js";
-import "./provision-supervisor-CysVhSqV.js";
-import "./delegate-CjdtLf1v.js";
-import "./graph-kgzTaNMA.js";
+import "./provision-supervisor-C4v2vqDo.js";
+import "./delegate-Dr-63jFl.js";
+import "./graph-DPejYB3C.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, sha256Bytes, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { CODING_HARNESSES, DEFAULT_TRACE_ANALYST_KINDS, InMemoryTraceStore, OUTPUT_VALUE, benjaminiHochberg, buildTrajectory, computeFindingId as computeFindingId$1, confidenceInterval, createTraceAnalyst, expandProfileAxes, makeFinding as makeFinding$1, pairedBootstrap, paretoFrontier, wilcoxonSignedRank, wilson } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
@@ -4586,7 +4586,7 @@ function requireSpend(rolled, id, root) {
 /**
 * Threads that run fsync for the private CAS. Node runs every fs call on libuv's pool of four
 * threads, and an fsync on a busy disk holds its thread until the filesystem journal commits. On
-* drew-gtr-pro's USB disk (2026-10-20) all four sat in jbd2_log_wait_commit and rq_qos_wait while
+* drew-gtr-pro's USB disk all four sat in jbd2_log_wait_commit and rq_qos_wait while
 * a tree capture had 16 files in flight: four fsyncs shared each journal commit, and every open,
 * read, lstat and link of the capture queued behind them, at about one file per second. On
 * threads of their own, every fsync in flight waits on the same commit and the pool stays free
@@ -5333,7 +5333,7 @@ function streamDurably(layout, digest, path, byteLength, signal) {
 * that finds its digest in flight waits for that copy, then reads the receipt. Copying it again
 * doubles the upload and, for a buffered store, the archive in memory. Reporting it pending
 * failed captures: a capture refuses on any pending object, so two captures sharing one store
-* refused each other (discovery-lab provider-retention, agent-runtime 0.325.6, 2026-10-18).
+* refused each other (discovery-lab provider-retention, agent-runtime 0.325.6).
 * A copy never waits for a pass, so a pass may wait for a copy.
 */
 function createDurableCopier(layout) {
@@ -5645,50 +5645,204 @@ function printBenchmarkReport(report) {
 	}
 }
 //#endregion
-//#region src/runtime/s3-private-cas-store.ts
-const DIGEST = /^sha256:([0-9a-f]{64})$/u;
-const BUCKET = /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/u;
-const PREFIX = /^(?:[A-Za-z0-9._-]+\/)*$/u;
-const NAMESPACE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
-const POINTER_NAME = /^(?!sha256\/)[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}(?:\/[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}){0,3}$/u;
-const POINTER_MAX_BYTES = 1024 * 1024;
+//#region src/runtime/s3-private-cas-namespace.ts
+const NAMESPACE$1 = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
+const MAX_PAGE_BYTES = 2 * 1024 * 1024;
+const fingerprint = (namespace, location, storeIdentity, objects) => `sha256:${createHash("sha256").update(JSON.stringify({
+	namespace,
+	location,
+	storeIdentity,
+	objects
+})).digest("hex")}`;
+function xmlText(text) {
+	return text.replace(/&([^;]*);/gu, (_, entity) => {
+		const named = {
+			amp: "&",
+			lt: "<",
+			gt: ">",
+			quot: "\"",
+			apos: "'"
+		};
+		if (named[entity] !== void 0) return named[entity];
+		const numeric = /^#(?:x([0-9a-f]+)|([0-9]+))$/iu.exec(entity);
+		if (!numeric) throw new Error("S3 private CAS list contains an unknown XML entity");
+		const code = Number.parseInt(numeric[1] ?? numeric[2], numeric[1] ? 16 : 10);
+		if (!Number.isSafeInteger(code) || code <= 0 || code > 1114111 || code >= 55296 && code <= 57343) throw new Error("S3 private CAS list contains an invalid XML character");
+		return String.fromCodePoint(code);
+	});
+}
+function field(text, name, optional = false) {
+	const values = [...text.matchAll(new RegExp(`<${name}>([^<]*)</${name}>`, "gu"))];
+	if (values.length !== 1) {
+		if (optional && values.length === 0) return void 0;
+		throw new Error(`S3 private CAS list has an invalid ${name}`);
+	}
+	return xmlText(values[0][1]);
+}
+async function listPage(response) {
+	const reader = response.body?.getReader();
+	if (!reader) throw new Error("S3 private CAS list returned no body");
+	const chunks = [];
+	let size = 0;
+	try {
+		while (true) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.byteLength;
+			if (size > MAX_PAGE_BYTES) throw new Error("S3 private CAS list page exceeds its bound");
+			chunks.push(value);
+		}
+	} finally {
+		await reader.cancel().catch(() => void 0);
+	}
+	const text = Buffer.concat(chunks).toString("utf8");
+	if (/<!/u.test(text) || !/^\s*(?:<\?xml[^>]*>\s*)?<ListBucketResult(?:\s[^>]*)?>[\s\S]*<\/ListBucketResult>\s*$/u.test(text)) throw new Error("S3 private CAS list returned an invalid document");
+	if (field(text, "EncodingType") !== "url") throw new Error("S3 private CAS list did not encode keys");
+	const truncated = field(text, "IsTruncated");
+	if (truncated !== "true" && truncated !== "false") throw new Error("S3 private CAS list has no completion flag");
+	const objects = [...text.matchAll(/<Contents>([\s\S]*?)<\/Contents>/gu)].map(([, row]) => {
+		const byteLength = Number(field(row, "Size"));
+		const key = decodeURIComponent(field(row, "Key"));
+		const etag = field(row, "ETag");
+		if (!Number.isSafeInteger(byteLength) || byteLength < 0 || !etag || /[\r\n]/u.test(etag)) throw new Error("S3 private CAS list has invalid object metadata");
+		return {
+			key,
+			etag,
+			byteLength
+		};
+	});
+	const count = field(text, "KeyCount");
+	if (!/^\d+$/u.test(count) || Number(count) !== objects.length) throw new Error("S3 private CAS list object count is inconsistent");
+	const next = field(text, "NextContinuationToken", true);
+	if (truncated === "true" && !next) throw new Error("S3 private CAS list omitted its next page");
+	return {
+		objects,
+		next: truncated === "true" ? next : void 0
+	};
+}
+/** Generic storage operation only; ownership, holds, references and writer fencing belong to its consumer. */
+function privateCasNamespaceOperations({ request, refusal, prefix, location, storeIdentity }) {
+	const namespacePrefix = (namespace) => {
+		if (!NAMESPACE$1.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
+		return `${prefix}${namespace}/`;
+	};
+	const validObject = (object, scope) => {
+		if (!object.key.startsWith(scope) || object.key.length === scope.length || object.key.split("/").some((part) => !part || part === "." || part === "..")) throw new Error("S3 private CAS inventory contains a key outside its namespace");
+		if (!Number.isSafeInteger(object.byteLength) || object.byteLength < 0 || !object.etag || /[\r\n]/u.test(object.etag)) throw new Error("S3 private CAS inventory contains invalid object metadata");
+	};
+	const inspectNamespace = async ({ namespace, signal }) => {
+		const scope = namespacePrefix(namespace);
+		const objects = [];
+		const tokens = /* @__PURE__ */ new Set();
+		const keys = /* @__PURE__ */ new Set();
+		let next;
+		do {
+			signal?.throwIfAborted();
+			const response = await request("GET", "", {
+				query: {
+					"list-type": "2",
+					"encoding-type": "url",
+					"max-keys": "1000",
+					prefix: scope,
+					...next ? { "continuation-token": next } : {}
+				},
+				...signal ? { signal } : {}
+			});
+			if (!response.ok) throw await refusal(response, "namespace list");
+			const page = await listPage(response);
+			for (const object of page.objects) {
+				validObject(object, scope);
+				if (keys.has(object.key)) throw new Error("S3 private CAS list repeated an object");
+				keys.add(object.key);
+				objects.push(object);
+			}
+			next = page.next;
+			if (next && tokens.has(next)) throw new Error("S3 private CAS list repeated its continuation token");
+			if (next) tokens.add(next);
+		} while (next);
+		objects.sort((a, b) => a.key < b.key ? -1 : a.key > b.key ? 1 : 0);
+		return {
+			namespace,
+			location,
+			storeIdentity,
+			objects,
+			sha256: fingerprint(namespace, location, storeIdentity, objects)
+		};
+	};
+	return {
+		inspectNamespace,
+		async retireNamespace({ inventory, signal }) {
+			const { namespace, objects } = inventory;
+			const scope = namespacePrefix(namespace);
+			if (inventory.location !== location || inventory.storeIdentity !== storeIdentity || inventory.sha256 !== fingerprint(namespace, location, storeIdentity, objects)) throw new Error("S3 private CAS retirement inventory does not match this store");
+			const reviewed = /* @__PURE__ */ new Map();
+			for (const object of objects) {
+				validObject(object, scope);
+				if (reviewed.has(object.key)) throw new Error("S3 private CAS retirement inventory repeats an object");
+				reviewed.set(object.key, object);
+			}
+			const current = await inspectNamespace({
+				namespace,
+				...signal ? { signal } : {}
+			});
+			for (const object of current.objects) {
+				const prior = reviewed.get(object.key);
+				if (!prior || prior.etag !== object.etag || prior.byteLength !== object.byteLength) throw new Error("S3 private CAS namespace changed after its reviewed inventory");
+			}
+			let deletedObjects = 0;
+			let deletedBytes = 0;
+			for (const object of current.objects) {
+				signal?.throwIfAborted();
+				const check = await request("HEAD", object.key, { ...signal ? { signal } : {} });
+				if (check.status === 404) {
+					await check.body?.cancel();
+					continue;
+				}
+				if (!check.ok) throw await refusal(check, "retirement HEAD");
+				await check.body?.cancel();
+				if (check.headers.get("etag") !== object.etag || check.headers.get("content-length") === null || Number(check.headers.get("content-length")) !== object.byteLength) throw new Error("S3 private CAS object changed before retirement");
+				const response = await request("DELETE", object.key, { ...signal ? { signal } : {} });
+				if (!response.ok) throw await refusal(response, "namespace delete");
+				await response.body?.cancel();
+				const absent = await request("HEAD", object.key, { ...signal ? { signal } : {} });
+				await absent.body?.cancel();
+				if (absent.status !== 404) throw new Error("S3 private CAS object is not confirmed absent after retirement");
+				deletedObjects++;
+				deletedBytes += object.byteLength;
+				if (!Number.isSafeInteger(deletedBytes)) throw new Error("S3 private CAS retired payload bytes exceed the safe integer range");
+			}
+			const remaining = await inspectNamespace({
+				namespace,
+				...signal ? { signal } : {}
+			});
+			return {
+				namespace,
+				location,
+				deletedObjects,
+				deletedBytes,
+				remainingObjects: remaining.objects.length,
+				remainingBytes: remaining.objects.reduce((sum, object) => sum + object.byteLength, 0),
+				complete: remaining.objects.length === 0
+			};
+		}
+	};
+}
+//#endregion
+//#region src/runtime/s3-private-cas-request.ts
 const EMPTY_PAYLOAD = createHash("sha256").update("").digest("hex");
-const CONTENT_TYPE = "application/octet-stream";
-const METADATA_DIGEST = "x-amz-meta-sha256";
-const hex = (value) => createHash("sha256").update(value).digest("hex");
+const hex$1 = (value) => createHash("sha256").update(value).digest("hex");
 const hmac = (key, value) => createHmac("sha256", key).update(value).digest();
 const encode = (segment) => encodeURIComponent(segment).replace(/[!'()*]/gu, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
-/**
-* Durable private CAS bytes in one S3-compatible bucket under `<prefix><namespace>/sha256/<hex>`.
-*
-* Every write declares its SHA-256 as the signed payload hash, so the store refuses bytes that
-* do not match the digest. A write is confirmed by reading back the object's length and digest
-* metadata. Reads return raw bytes; the private CAS port verifies them.
-*/
-function createS3PrivateCasStore(options) {
-	const endpoint = new URL(options.endpoint);
-	if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.pathname !== "/" && endpoint.pathname !== "") throw new Error("S3 private CAS endpoint must be a bare https origin");
-	if (!BUCKET.test(options.bucket)) throw new Error("S3 private CAS bucket name is invalid");
-	const prefix = options.prefix ?? "";
-	if (!PREFIX.test(prefix)) throw new Error("S3 private CAS prefix must be empty or end in /");
-	if (!options.accessKeyId || !options.secretAccessKey) throw new Error("S3 private CAS needs an access key id and secret");
+/** The single signed transport for private CAS object, pointer and namespace operations. */
+function createPrivateCasS3Transport(options, endpoint) {
 	const region = options.region ?? "auto";
 	const timeoutMs = options.timeoutMs ?? 12e4;
 	const send = options.fetch ?? fetch;
-	const key = (namespace, digest) => {
-		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
-		const match = DIGEST.exec(digest);
-		if (!match) throw new Error("S3 private CAS digest must be sha256:<64 lowercase hex>");
-		return `${prefix}${namespace}/sha256/${match[1]}`;
-	};
-	const pointerKey = (namespace, name) => {
-		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
-		if (!POINTER_NAME.test(name)) throw new Error("S3 private CAS pointer name is invalid");
-		return `${prefix}${namespace}/${name}`;
-	};
-	const request = async (method, objectKey, { body, byteLength, payloadHash = EMPTY_PAYLOAD, headers = {}, signal } = {}) => {
+	const request = async (method, objectKey, { body, byteLength, payloadHash = EMPTY_PAYLOAD, headers = {}, signal, query = {} } = {}) => {
 		const path = `/${[options.bucket, ...objectKey.split("/")].map(encode).join("/")}`;
 		const url = new URL(path, endpoint);
+		const canonicalQuery = Object.entries(query).map(([name, value]) => [encode(name), encode(value)]).sort(([a, av], [b, bv]) => a < b ? -1 : a > b ? 1 : av < bv ? -1 : av > bv ? 1 : 0).map(([name, value]) => `${name}=${value}`).join("&");
+		url.search = canonicalQuery;
 		const amzDate = (/* @__PURE__ */ new Date()).toISOString().replace(/[:-]|\.\d{3}/gu, "");
 		const day = amzDate.slice(0, 8);
 		const signed = {
@@ -5701,7 +5855,7 @@ function createS3PrivateCasStore(options) {
 		const canonical = [
 			method,
 			path,
-			"",
+			canonicalQuery,
 			names.map((name) => `${name}:${signed[name].trim()}\n`).join(""),
 			names.join(";"),
 			payloadHash
@@ -5711,7 +5865,7 @@ function createS3PrivateCasStore(options) {
 			"AWS4-HMAC-SHA256",
 			amzDate,
 			scope,
-			hex(canonical)
+			hex$1(canonical)
 		].join("\n")).digest("hex");
 		const { host: _host, ...sent } = signed;
 		const deadline = AbortSignal.timeout(timeoutMs + Math.ceil((byteLength ?? (body instanceof Uint8Array ? body.byteLength : 0)) / (1024 * 1024)) * 1e3);
@@ -5741,6 +5895,59 @@ function createS3PrivateCasStore(options) {
 		detail = detail.replace(/\s+/gu, " ").slice(0, 300);
 		return /* @__PURE__ */ new Error(`S3 private CAS ${action} returned ${response.status}${detail ? `: ${detail}` : ""}`);
 	};
+	return {
+		request,
+		refusal
+	};
+}
+//#endregion
+//#region src/runtime/s3-private-cas-store.ts
+const DIGEST = /^sha256:([0-9a-f]{64})$/u;
+const BUCKET = /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/u;
+const PREFIX = /^(?:[A-Za-z0-9._-]+\/)*$/u;
+const NAMESPACE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;
+const POINTER_NAME = /^(?!sha256\/)[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}(?:\/[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}){0,3}$/u;
+const POINTER_MAX_BYTES = 1024 * 1024;
+const CONTENT_TYPE = "application/octet-stream";
+const METADATA_DIGEST = "x-amz-meta-sha256";
+const hex = (value) => createHash("sha256").update(value).digest("hex");
+/**
+* Durable private CAS bytes in one S3-compatible bucket under `<prefix><namespace>/sha256/<hex>`.
+*
+* Every write declares its SHA-256 as the signed payload hash, so the store refuses bytes that
+* do not match the digest. A write is confirmed by reading back the object's length and digest
+* metadata. Reads return raw bytes; the private CAS port verifies them.
+*/
+function createS3PrivateCasStore(options) {
+	const endpoint = new URL(options.endpoint);
+	if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.pathname !== "/" && endpoint.pathname !== "") throw new Error("S3 private CAS endpoint must be a bare https origin");
+	if (!BUCKET.test(options.bucket)) throw new Error("S3 private CAS bucket name is invalid");
+	const prefix = options.prefix ?? "";
+	if (!PREFIX.test(prefix)) throw new Error("S3 private CAS prefix must be empty or end in /");
+	if (!options.accessKeyId || !options.secretAccessKey) throw new Error("S3 private CAS needs an access key id and secret");
+	const key = (namespace, digest) => {
+		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
+		const match = DIGEST.exec(digest);
+		if (!match) throw new Error("S3 private CAS digest must be sha256:<64 lowercase hex>");
+		return `${prefix}${namespace}/sha256/${match[1]}`;
+	};
+	const pointerKey = (namespace, name) => {
+		if (!NAMESPACE.test(namespace)) throw new Error("S3 private CAS namespace is invalid");
+		if (!POINTER_NAME.test(name)) throw new Error("S3 private CAS pointer name is invalid");
+		return `${prefix}${namespace}/${name}`;
+	};
+	const { request, refusal } = createPrivateCasS3Transport(options, endpoint);
+	const namespaceOperations = privateCasNamespaceOperations({
+		request,
+		refusal,
+		prefix,
+		location: `s3://${options.bucket}/${prefix}`,
+		storeIdentity: `sha256:${hex(JSON.stringify({
+			endpoint: endpoint.origin,
+			bucket: options.bucket,
+			prefix
+		}))}`
+	});
 	/** Whether the bucket holds this exact object; refuses a same-key object of other bytes. */
 	const holds = async (objectKey, digest, byteLength, signal) => {
 		const response = await request("HEAD", objectKey, signal === void 0 ? {} : { signal });
@@ -5753,6 +5960,7 @@ function createS3PrivateCasStore(options) {
 	};
 	return {
 		location: `s3://${options.bucket}/${prefix}`,
+		...namespaceOperations,
 		async putStream({ namespace, digest, byteLength, chunks, signal }) {
 			const objectKey = key(namespace, digest);
 			if (await holds(objectKey, digest, byteLength, signal)) return;
@@ -7145,7 +7353,7 @@ function graphDesignerExtraTools(env) {
 			})();
 			if (name === "designer_history") return (async () => {
 				const args = asRecord(raw ?? {}, "designer_history");
-				const { listGraphRuns } = await import("./supervise-BuVVC7Bl.js").then((n) => n.h);
+				const { listGraphRuns } = await import("./supervise-BGfm2GlY.js").then((n) => n.g);
 				const all = await listGraphRuns(registry);
 				return { runs: (args.taskShape === void 0 ? all : all.filter((row) => row.taskDigest === taskShapeDigest(asRecord(args.taskShape, "designer_history.taskShape")))).map(summarize) };
 			})();
@@ -7156,7 +7364,7 @@ function graphDesignerExtraTools(env) {
 				if (mode === "replay") {
 					const digest = args.graphDigest;
 					if (typeof digest !== "string" || digest.length === 0) throw new ValidationError("designer_run_graph: replay mode requires graphDigest from lookup");
-					const { loadGraph } = await import("./supervise-BuVVC7Bl.js").then((n) => n.h);
+					const { loadGraph } = await import("./supervise-BGfm2GlY.js").then((n) => n.g);
 					const stored = await loadGraph(registry, digest);
 					if (!stored) throw new ValidationError(`designer_run_graph: no stored graph ${digest.slice(0, 12)} — re-lookup`);
 					const graph = env.bindCheck(graphFromStored(stored, () => {
@@ -7196,6 +7404,191 @@ function graphDesignerExtraTools(env) {
 	}
 }
 //#endregion
+//#region src/runtime/supervise/graph-session-observation.ts
+function measured(fact) {
+	return fact && !fact.partial && fact.value !== null ? fact.value : void 0;
+}
+function recordedAt(fact) {
+	const value = measured(fact);
+	return value && Number.isFinite(Date.parse(value)) ? value : void 0;
+}
+/** Project an existing canonical span run tree into an observed graph design,
+* linked to its trace run. SessionFacts supplies exclusive accounting. No
+* execution tree, transcript, or source-specific traversal parser is stored. */
+function graphFromSessionFacts(facts, options) {
+	if (!facts.length) throw new ValidationError("graphFromSessionFacts: no session facts");
+	const unknowns = ["edge traversal accounting unavailable from canonical span relationships", "span containment does not establish graph edge semantics"];
+	const spanNodes = options.spanRun?.present ? options.spanRun.nodes : [];
+	const spanKey = (traceId, spanId) => JSON.stringify([traceId, spanId]);
+	const identities = /* @__PURE__ */ new Set();
+	const observations = facts.map((fact) => {
+		const roots = spanNodes.filter((node) => node.traceId === fact.traceId && node.parentNodeId === null);
+		const anchor = measured(fact.rootSpanId) ?? (roots.length === 1 ? roots[0].spanId : void 0);
+		const boundary = fact.traceId && anchor ? `span:${spanKey(fact.traceId, anchor)}` : void 0;
+		const sourceId = fact.sessionId ?? boundary;
+		const identity = boundary ?? (fact.sessionId ? `session:${fact.sessionId}` : void 0);
+		if (!identity || !sourceId || identities.has(identity)) throw new ValidationError("graphFromSessionFacts: every observation needs a unique recorded session or span identity");
+		identities.add(identity);
+		const humanCounts = measured(fact.typedTurnCounts)?.filter((entry) => entry.actor === "human");
+		if (humanCounts?.some((entry) => !Number.isSafeInteger(entry.turns) || entry.turns < 0)) throw new ValidationError("graphFromSessionFacts: invalid human turn count");
+		const humanMessages = fact.typedTurnCounts === void 0 ? measured(fact.humanTurns)?.length : humanCounts?.reduce((sum, entry) => sum + entry.turns, 0);
+		const leadMessages = measured(fact.leadMessages);
+		const inputTokens = fact.tokens.input ?? void 0;
+		const outputTokens = fact.tokens.output ?? void 0;
+		for (const [key, value] of Object.entries({
+			inputTokens,
+			outputTokens,
+			humanMessages,
+			leadMessages
+		})) if (value === void 0) unknowns.push(`${sourceId}: ${key} unavailable`);
+		else if (!Number.isSafeInteger(value) || value < 0) throw new ValidationError(`graphFromSessionFacts: invalid ${key}`);
+		return {
+			sourceId,
+			startedAt: recordedAt(fact.firstRecordAt),
+			lastRecordAt: recordedAt(fact.lastRecordAt),
+			inputTokens,
+			outputTokens,
+			humanMessages,
+			leadMessages
+		};
+	});
+	const ids = /* @__PURE__ */ new Map();
+	for (const [index, node] of spanNodes.entries()) {
+		const key = spanKey(node.traceId, node.spanId);
+		if (ids.has(key)) throw new ValidationError("graphFromSessionFacts: duplicate canonical span identity");
+		ids.set(key, `n${index}`);
+	}
+	const nodes = spanNodes.map((node) => {
+		const profile = { name: node.parentNodeId === null ? "observed-agent" : "observed-child" };
+		if (node.runtime || node.kind) profile.metadata = {
+			...node.runtime ? { runtime: node.runtime } : {},
+			...node.kind ? { spanKind: node.kind } : {}
+		};
+		return {
+			id: ids.get(spanKey(node.traceId, node.spanId)),
+			profile
+		};
+	});
+	const edges = [];
+	for (const node of spanNodes) {
+		if (node.parentNodeId === null) continue;
+		const from = ids.get(spanKey(node.traceId, node.parentNodeId));
+		if (from) edges.push({
+			from,
+			to: ids.get(spanKey(node.traceId, node.spanId))
+		});
+		else unknowns.push("canonical span run has an unresolved parent node");
+	}
+	edges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to));
+	const nodeUsage = [];
+	const joinedNodes = /* @__PURE__ */ new Set();
+	for (const [index, fact] of facts.entries()) {
+		const anchor = measured(fact.rootSpanId);
+		const matching = spanNodes.filter((node) => node.traceId === fact.traceId && (anchor === void 0 ? node.parentNodeId === null : node.spanId === anchor));
+		if (matching.length !== 1 || joinedNodes.has(spanKey(matching[0].traceId, matching[0].spanId))) {
+			unknowns.push(`${fact.sessionId}: session accounting cannot be joined to one canonical span node`);
+			continue;
+		}
+		const key = spanKey(matching[0].traceId, matching[0].spanId);
+		joinedNodes.add(key);
+		const nodeId = ids.get(key);
+		nodeUsage.push({
+			nodeId,
+			...observations[index]
+		});
+		const profile = nodes.find((node) => node.id === nodeId).profile;
+		const identity = measured(fact.agent);
+		const model = identity?.model;
+		if (model) profile.model = { default: model };
+		const harness = identity?.harness ?? fact.harness;
+		if (harness) profile.metadata = {
+			...profile.metadata,
+			harness
+		};
+	}
+	for (const node of spanNodes) {
+		const key = spanKey(node.traceId, node.spanId);
+		if (!joinedNodes.has(key)) {
+			nodeUsage.push({ nodeId: ids.get(key) });
+			unknowns.push(`${ids.get(key)}: canonical node accounting unavailable`);
+		}
+	}
+	if (!spanNodes.length) unknowns.push("topology unavailable: no canonical span run tree was supplied");
+	if (spanNodes.some((node) => node.kind == null)) unknowns.push("canonical span node kind unavailable");
+	if (options.spanRun?.orphanSpans) unknowns.push("canonical span run contains orphan spans");
+	if (!options.traceRunId) unknowns.push("trace run identity unavailable");
+	for (const issue of options.issues ?? []) {
+		const kind = issue && typeof issue === "object" && "kind" in issue ? issue.kind : void 0;
+		const reason = issue && typeof issue === "object" && "reason" in issue ? issue.reason : void 0;
+		if (typeof kind === "string") unknowns.push("workflow issue: " + kind + (kind === "source-coverage" && typeof reason === "string" ? `: ${reason.replace(/[\r\n]/g, " ").slice(0, 500)}` : ""));
+	}
+	const incompleteIssues = options.issues?.some((issue) => !issue || typeof issue !== "object" || !("kind" in issue) || issue.kind !== "source-coverage");
+	const unread = facts.some((fact) => fact.unreadRecords?.partial || (fact.unreadRecords?.value ?? 0) > 0);
+	if (unread) unknowns.push("source contains unread or partial records; total accounting unavailable");
+	const complete = options.complete !== false && !incompleteIssues && !unread;
+	if (!complete) unknowns.push("workflow selection incomplete; total accounting unavailable");
+	if (!options.taskType) unknowns.push("task type not explicitly labeled");
+	const starts = observations.flatMap((node) => node.startedAt ? [node.startedAt] : []).sort((a, b) => Date.parse(a) - Date.parse(b));
+	const startedAt = options.startedAt ?? starts[0];
+	if (!startedAt || !Number.isFinite(Date.parse(startedAt))) throw new ValidationError("graphFromSessionFacts: no recorded task start; supply an authoritative startedAt");
+	const cost = {};
+	for (const channel of [
+		"inputTokens",
+		"outputTokens",
+		"humanMessages",
+		"leadMessages"
+	]) if (complete && observations.every((node) => node[channel] !== void 0)) cost[channel] = observations.reduce((sum, node) => sum + node[channel], 0);
+	if (cost.inputTokens !== void 0 && cost.outputTokens !== void 0) cost.tokens = cost.inputTokens + cost.outputTokens;
+	const outcome = options.outcome ?? {
+		kind: "unknown",
+		reason: "no independent delivery outcome was joined"
+	};
+	if ((outcome.kind === "delivered" || outcome.kind === "no-winner") && !options.finishedAt) throw new ValidationError("graphFromSessionFacts: terminal outcomes require authoritative finishedAt");
+	if (!options.startedAt) unknowns.push("task start unconfirmed; startedAt is earliest observed activity");
+	if (options.finishedAt) {
+		const elapsed = Date.parse(options.finishedAt) - Date.parse(startedAt);
+		if (!Number.isFinite(elapsed) || elapsed < 0) throw new ValidationError("graphFromSessionFacts: invalid finishedAt");
+		if (options.startedAt) cost.ms = elapsed;
+	}
+	const merged = options.evidence?.filter((entry) => entry.kind === "pr-merged" && entry.at).map((entry) => Date.parse(entry.at)).filter(Number.isFinite).sort((a, b) => a - b)[0];
+	if (options.startedAt && merged !== void 0 && merged >= Date.parse(startedAt)) cost.mergeMs = merged - Date.parse(startedAt);
+	const content = {
+		observed: true,
+		nodes,
+		edges,
+		deliverable: {}
+	};
+	const graph = {
+		digest: graphDigest(content),
+		...content
+	};
+	return {
+		graph,
+		record: {
+			graphDigest: graph.digest,
+			...spanNodes.length ? { topologyDigest: taskShapeDigest({
+				nodes: nodes.map((node, index) => ({
+					id: node.id,
+					kind: spanNodes[index].kind ?? null
+				})),
+				edges
+			}) } : {},
+			taskDigest: taskShapeDigest(options.taskShape ?? { taskType: options.taskType ?? "unknown" }),
+			startedAt,
+			...options.finishedAt ? { finishedAt: options.finishedAt } : {},
+			outcome,
+			cost,
+			source: options.source,
+			...options.traceRunId ? { traceRunId: options.traceRunId } : {},
+			...options.observedAt ? { observedAt: options.observedAt } : {},
+			...options.taskType ? { taskType: options.taskType } : {},
+			...options.evidence ? { evidence: options.evidence } : {},
+			...nodeUsage.length ? { nodeUsage } : {},
+			unknowns
+		}
+	};
+}
+//#endregion
 //#region src/runtime/supervise/profile-registry.ts
 /**
 * `profile-registry` — named AgentProfiles with run receipts: the missing
@@ -9198,6 +9591,6 @@ function tail(s) {
 	return s.slice(-400);
 }
 //#endregion
-export { runPersonified as $, openSqlRunStore as $t, searchSpecDigest as A, secretEnvOfMcpServer as At, chatWorkerSeam as B, readDeclaredCheck as Bt, withUntrackedArtifacts as C, materializeLocalMcp as Ct, assertSearchSpec as D, mcpSecretEnvMetadataKey as Dt, SEARCH_SPEC_CORRELATION_KEY as E, envKeyProvider as Et, profileRegistry as F, assertDeclaredCheck as Ft, openSandboxRun as G, stopSentinel as Gt, runStrategyEvolution as H, completionAuthorizes as Ht, profileRunsForName as I, checkProgramDigest as It, runBenchmark as J, renderLeaderboardHtml as Jt, createS3PrivateCasStore as K, leaderboard as Kt, recordProfileRun as L, declaredCheckDeliverable as Lt, bestProfileFor as M, loopCampaignDispatch as Mt, loadProfile as N, loopDispatch as Nt, compileSearchSpec as O, resolveMcpServerLaunch as Ot, pickBestProfile as P, superviseDispatch as Pt, definePersona as Q, SqlRunOwnershipError as Qt, graphDesignerExtraTools as R, declaredCheckDigest as Rt, copyUntrackedIntoClone as S, connectStdioMcp as St, createFencedSqlRunContext as T, sanitizeMcpToolSchema as Tt, strategyTournament as U, deterministicCompletion as Ut, createChatSessionStore as V, runIsolatedCheck as Vt, SandboxRunAbortError as W, sentinelCompletion as Wt, equalKOnCost as X, renderLeaderboardSvg as Xt, createPrivateCasArtifactPort as Y, renderLeaderboardMarkdown as Yt, trajectoryReport as Z, renderPairwiseMarkdown as Zt, NOTE_MAX_CHARS as _, HarvestError as _t, localShell as a, loopUntil as at, composeWorkerEvidence as b, resolveSandboxClient as bt, createVerifierEnvironment as c, selectValidWinner as ct, harvestSurfaceDiffs as d, assertTraceDerivedFindings as dt, FileCorpus as et, analystsFromRegistry as f, buildSteerContext as ft, EVIDENCE_MAX_CHARS as g, inProcessSandboxClient as gt, runCoderChecks as h, observationFromRegistry as ht, jjWorkspace as i, flatWidenGate as it, connectRemoteSupervisor as j, inlineSandboxClient as jt, searchPresets as k, resolveSecretEnv as kt, boxSurfaceReader as l, verify as lt, worktreeFanout as m, registryScopeAnalyst as mt, makeFinding$1 as n, renderCorpusToInstructions as nt, runInWorkspace as o, panel as ot, failuresAnalyst as p, createScopeAnalyst as pt, printBenchmarkReport as q, pairwiseSignificance as qt, gitWorkspace as r, fanout as rt, createWaterfallCollector as s, pipeline as st, computeFindingId$1 as t, InMemoryCorpus as tt, fsSurfaceReader as u, widen as ut, VERIFY_TAIL_CHARS as v, harvestCorpus as vt, analyzeTrace as w, createMcpEnvironment as wt, settledWorkerOut as x, McpSpawnFault as xt, closingWorkerNote as y, defineLeaderboard as yt, chatTransportExecutor as z, declaredCheckJudge as zt };
+export { definePersona as $, SqlRunOwnershipError as $t, searchSpecDigest as A, resolveSecretEnv as At, chatTransportExecutor as B, declaredCheckJudge as Bt, withUntrackedArtifacts as C, connectStdioMcp as Ct, assertSearchSpec as D, envKeyProvider as Dt, SEARCH_SPEC_CORRELATION_KEY as E, sanitizeMcpToolSchema as Et, profileRegistry as F, superviseDispatch as Ft, SandboxRunAbortError as G, sentinelCompletion as Gt, createChatSessionStore as H, runIsolatedCheck as Ht, profileRunsForName as I, assertDeclaredCheck as It, printBenchmarkReport as J, pairwiseSignificance as Jt, openSandboxRun as K, stopSentinel as Kt, recordProfileRun as L, checkProgramDigest as Lt, bestProfileFor as M, inlineSandboxClient as Mt, loadProfile as N, loopCampaignDispatch as Nt, compileSearchSpec as O, mcpSecretEnvMetadataKey as Ot, pickBestProfile as P, loopDispatch as Pt, trajectoryReport as Q, renderPairwiseMarkdown as Qt, graphFromSessionFacts as R, declaredCheckDeliverable as Rt, copyUntrackedIntoClone as S, McpSpawnFault as St, createFencedSqlRunContext as T, createMcpEnvironment as Tt, runStrategyEvolution as U, completionAuthorizes as Ut, chatWorkerSeam as V, readDeclaredCheck as Vt, strategyTournament as W, deterministicCompletion as Wt, createPrivateCasArtifactPort as X, renderLeaderboardMarkdown as Xt, runBenchmark as Y, renderLeaderboardHtml as Yt, equalKOnCost as Z, renderLeaderboardSvg as Zt, NOTE_MAX_CHARS as _, inProcessSandboxClient as _t, localShell as a, flatWidenGate as at, composeWorkerEvidence as b, defineLeaderboard as bt, createVerifierEnvironment as c, pipeline as ct, harvestSurfaceDiffs as d, widen as dt, openSqlRunStore as en, runPersonified as et, analystsFromRegistry as f, assertTraceDerivedFindings as ft, EVIDENCE_MAX_CHARS as g, observationFromRegistry as gt, runCoderChecks as h, registryScopeAnalyst as ht, jjWorkspace as i, fanout as it, connectRemoteSupervisor as j, secretEnvOfMcpServer as jt, searchPresets as k, resolveMcpServerLaunch as kt, boxSurfaceReader as l, selectValidWinner as lt, worktreeFanout as m, createScopeAnalyst as mt, makeFinding$1 as n, InMemoryCorpus as nt, runInWorkspace as o, loopUntil as ot, failuresAnalyst as p, buildSteerContext as pt, createS3PrivateCasStore as q, leaderboard as qt, gitWorkspace as r, renderCorpusToInstructions as rt, createWaterfallCollector as s, panel as st, computeFindingId$1 as t, FileCorpus as tt, fsSurfaceReader as u, verify as ut, VERIFY_TAIL_CHARS as v, HarvestError as vt, analyzeTrace as w, materializeLocalMcp as wt, settledWorkerOut as x, resolveSandboxClient as xt, closingWorkerNote as y, harvestCorpus as yt, graphDesignerExtraTools as z, declaredCheckDigest as zt };
 
-//# sourceMappingURL=runtime-B_93oWEv.js.map
+//# sourceMappingURL=runtime-CsvGCQpl.js.map