@tangle-network/agent-runtime 0.348.1 → 0.349.0

package/dist/{supervise-BUOeThuB.js → supervise-BGfm2GlY.js}

@@ -1,10 +1,10 @@
 import { c as captureRunWriteContext, l as fenceRunWrite, m as __exportAll, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
-import { $n as HarnessTurnFailedError, $r as sandboxProfileMaterialization, A as beginScopeOwnerAttempt, Ai as cappedDoublingMs, An as toOtelAttributes, At as createExecutor, B as assertRecursiveReservationPolicy, Bi as executorFailure, Bn as PEER_MAIL_WIRE_KEY, Cr as bridgeAdmissionRefusal, Ct as readCommittedJsonLines, Di as RetainedExecutionPendingError, En as generateSpanId, F as coordinationMcpAlias, Fn as INBOX_RECEIPT_KEY, G as meterRuntimeOwnedAccounting, Gr as controlProfileMaterialization, Ht as codeModeArguments, I as coordinationProfileToolPrefix, In as createInbox, Ir as bridgeRuntimeAttachmentsKey, J as recordScopeOwnerDriverAttempt, Jn as createActivityLog, Jr as profileMaterializationAxes$1, Jt as routerBrain, K as meterRuntimeOwnedProviderAttempt, Ki as spendFromUsageTotals, Kr as defineProfileMaterializationContract, Kt as toolResultText, L as providerVisibleProfile, Lr as bridgeStopSignalKey, M as recordScopeOwnerMaterialization, Mi as unavailablePauseMs, Mr as RunCancellationReason, N as restoreScopeOwnerAcceptedExecution, Ni as unavailableResumeAt, Nr as linkAbort, Oi as registerRetainedExecutorPreparation, Ot as bindReusableExecutorExecutionId, P as scopeOwnerExecutorNodeContext, Pr as runAbortable, Qn as DriverAttemptsExhaustedError, R as runtimeGraphMetadataKey, Ri as detachedSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Ui as meterUsageEvent, Un as isPeerMailEnvelope, Ur as assertProfileMaterialization, Ut as codeModeModelOutput, V as deriveNodeExecutionIdentity, Vi as errMessage, Wi as newUsageTotals, Wt as createCodeModeTools, X as prepareScopeRetainedOwnerSeatSwitch, Xn as isLiveNodeStatus, Xr as promptModelProfileMaterialization, Xt as resolveAgentEnvironmentProvider, Y as recordScopeOwnerPause, Yr as promptControlProfileMaterialization, Z as scopeRetainedOwnerResourceReader, Zn as isTerminalNodeStatus, Zr as renderUnsupported, _i as runtimeOwnedPendingExecutorMaterialization, _n as WORKER_TRACE_PROPAGATION, _r as admitContinuationPolicy, a as assertRunParking, ar as upstreamUnavailableSignal, at as beginScopeRetainedOwnerDrive, br as createContinuationKeeper, bt as isNoEntError, c as sleepScopeWait, cr as authoredSeatStages, ct as scopeRetainedOwnerRestorePoint, d as runFinalizer, di as providerAttemptEvidence, dr as CheckUnavailableError, dt as bindScopeRetainedOwnerProvider, ei as unsupportedProfileDimensions, er as abandonablePending, et as abandonScopeRetainedOwnerInvocation, f as runTree, fi as recordRuntimeOwnedDriveHarnessProviderEvidence, fr as gateFactoryOnDeliverable, ft as scopeRetainedOwnerContext, g as isDriverSpec, gi as runtimeOwnedExecutorProviderEvidence, gr as CONTINUATIONS_DIR, h as driverExecutorFactory, hi as runtimeOwnedExecutorMaterialization, i as RunParkedError, ii as authoredAgentIdentity, ir as undispatchedCredentialExit, it as scopeRetainedOwnerResult, j as noteScopeOwnerPlannedExecution, ji as jitteredMs, jt as snapshotExecutorConfig, ki as retainedExecutorSeamKey, kt as captureReusableExecutorConfig, l as withRunParking, ln as persistHarnessTranscript, lr as seatExecutionProfile, lt as noteScopeRetainedOwnerCoordination, m as driverChild, mi as runtimeOwnedExecutorExecutionBinding, n as createSupervisor, nr as classifyDriverFailure, nt as prepareScopeRetainedOwnerTask, o as bindScopeParkingDrain, or as SeatChain, ot as scopeRetainedOwnerTurnEnded, p as createRootHandle, pi as runtimeOwnedDriveHarnessProviderEvidence, pt as scopeRetainedOwnerJournalRoot, q as recordScopeOwnerBarrenPause, qi as assertValidBudget, qr as fullProfileMaterialization, qt as createRouterTranscript, ri as attestRuntimeOwnedScopeOwner, rr as summarizeDriverAttempts, rt as scopeRetainedOwnerPriorSpend, si as inheritRuntimeOwnedExecutorAttestation, sr as SeatChainExhaustedError, st as reconcileScopeRetainedOwnerEnvironment, ti as worktreeCliProfileMaterialization, tr as causedByPartialFailure, tt as consumeScopeRetainedOwnerResult, u as bestDelivered, un as readHarnessTranscript, ut as bindScopeRetainedOwnerEnvironmentId, vi as runtimeOwnedScopeOwnerRuntime, vr as bestComposite, wn as createOtelExporter, wr as bridgeModelRouteRefusal, wt as upsertCommittedJsonLine, x as parseWorkerToolTraceArtifact, xt as prepareJsonlAppend, yr as checkVerdictOf, zi as contentAddress } from "./supervisor-DDy0aEtR.js";
+import { $n as HarnessTurnFailedError, $r as sandboxProfileMaterialization, A as beginScopeOwnerAttempt, Ai as cappedDoublingMs, An as toOtelAttributes, At as createExecutor, B as assertRecursiveReservationPolicy, Bi as executorFailure, Bn as PEER_MAIL_WIRE_KEY, Cr as bridgeAdmissionRefusal, Ct as readCommittedJsonLines, Di as RetainedExecutionPendingError, En as generateSpanId, F as coordinationMcpAlias, Fn as INBOX_RECEIPT_KEY, G as meterRuntimeOwnedAccounting, Gr as controlProfileMaterialization, Ht as codeModeArguments, I as coordinationProfileToolPrefix, In as createInbox, Ir as bridgeRuntimeAttachmentsKey, J as recordScopeOwnerDriverAttempt, Jn as createActivityLog, Jr as profileMaterializationAxes$1, Jt as routerBrain, K as meterRuntimeOwnedProviderAttempt, Ki as spendFromUsageTotals, Kr as defineProfileMaterializationContract, Kt as toolResultText, L as providerVisibleProfile, Lr as bridgeStopSignalKey, M as recordScopeOwnerMaterialization, Mi as unavailablePauseMs, Mr as RunCancellationReason, N as restoreScopeOwnerAcceptedExecution, Ni as unavailableResumeAt, Nr as linkAbort, Oi as registerRetainedExecutorPreparation, Ot as bindReusableExecutorExecutionId, P as scopeOwnerExecutorNodeContext, Pr as runAbortable, Qn as DriverAttemptsExhaustedError, R as runtimeGraphMetadataKey, Ri as detachedSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Ui as meterUsageEvent, Un as isPeerMailEnvelope, Ur as assertProfileMaterialization, Ut as codeModeModelOutput, V as deriveNodeExecutionIdentity, Vi as errMessage, Wi as newUsageTotals, Wt as createCodeModeTools, X as prepareScopeRetainedOwnerSeatSwitch, Xn as isLiveNodeStatus, Xr as promptModelProfileMaterialization, Xt as resolveAgentEnvironmentProvider, Y as recordScopeOwnerPause, Yr as promptControlProfileMaterialization, Z as scopeRetainedOwnerResourceReader, Zn as isTerminalNodeStatus, Zr as renderUnsupported, _i as runtimeOwnedPendingExecutorMaterialization, _n as WORKER_TRACE_PROPAGATION, _r as admitContinuationPolicy, a as assertRunParking, ar as upstreamUnavailableSignal, at as beginScopeRetainedOwnerDrive, br as createContinuationKeeper, bt as isNoEntError, c as sleepScopeWait, cr as authoredSeatStages, ct as scopeRetainedOwnerRestorePoint, d as runFinalizer, di as providerAttemptEvidence, dr as CheckUnavailableError, dt as bindScopeRetainedOwnerProvider, ei as unsupportedProfileDimensions, er as abandonablePending, et as abandonScopeRetainedOwnerInvocation, f as runTree, fi as recordRuntimeOwnedDriveHarnessProviderEvidence, fr as gateFactoryOnDeliverable, ft as scopeRetainedOwnerContext, g as isDriverSpec, gi as runtimeOwnedExecutorProviderEvidence, gr as CONTINUATIONS_DIR, h as driverExecutorFactory, hi as runtimeOwnedExecutorMaterialization, i as RunParkedError, ii as authoredAgentIdentity, ir as undispatchedCredentialExit, it as scopeRetainedOwnerResult, j as noteScopeOwnerPlannedExecution, ji as jitteredMs, jt as snapshotExecutorConfig, ki as retainedExecutorSeamKey, kt as captureReusableExecutorConfig, l as withRunParking, ln as persistHarnessTranscript, lr as seatExecutionProfile, lt as noteScopeRetainedOwnerCoordination, m as driverChild, mi as runtimeOwnedExecutorExecutionBinding, n as createSupervisor, nr as classifyDriverFailure, nt as prepareScopeRetainedOwnerTask, o as bindScopeParkingDrain, or as SeatChain, ot as scopeRetainedOwnerTurnEnded, p as createRootHandle, pi as runtimeOwnedDriveHarnessProviderEvidence, pt as scopeRetainedOwnerJournalRoot, q as recordScopeOwnerBarrenPause, qi as assertValidBudget, qr as fullProfileMaterialization, qt as createRouterTranscript, ri as attestRuntimeOwnedScopeOwner, rr as summarizeDriverAttempts, rt as scopeRetainedOwnerPriorSpend, si as inheritRuntimeOwnedExecutorAttestation, sr as SeatChainExhaustedError, st as reconcileScopeRetainedOwnerEnvironment, ti as worktreeCliProfileMaterialization, tr as causedByPartialFailure, tt as consumeScopeRetainedOwnerResult, u as bestDelivered, un as readHarnessTranscript, ut as bindScopeRetainedOwnerEnvironmentId, vi as runtimeOwnedScopeOwnerRuntime, vr as bestComposite, wn as createOtelExporter, wr as bridgeModelRouteRefusal, wt as upsertCommittedJsonLine, x as parseWorkerToolTraceArtifact, xt as prepareJsonlAppend, yr as checkVerdictOf, zi as contentAddress } from "./supervisor-wS9Ehz_x.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { Et as isDeadlineAbortReason, K as chargedTokens, Ot as teardownExecutor, W as addSpend, X as errorMessage, _t as withBudgetResources, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, gt as resourceTelemetry, kt as teardownSurfaces, mt as addResourceSpend, nt as promptCacheTokenClasses, ot as sleep, ut as unmeteredSpend, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-_fEtHPCj.js";
+import { Et as isDeadlineAbortReason, K as chargedTokens, Ot as teardownExecutor, W as addSpend, X as errorMessage, _t as withBudgetResources, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, gt as resourceTelemetry, kt as teardownSurfaces, mt as addResourceSpend, nt as promptCacheTokenClasses, ot as sleep, ut as unmeteredSpend, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-DtuJWFrM.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { c as budgetOverspendText, d as safeJsonText, f as createFileRunContext, l as normalizeAnalyzeOnSettle, m as withRunContext, n as createCoordinationToolsForManager, o as createCancelAcknowledger, p as createInMemoryRunContext, s as createSteerAcknowledger, t as createCoordinationTools, u as coordinationVerbNames } from "./coordination-manager-Bm6leXc6.js";
+import { c as budgetOverspendText, d as safeJsonText, f as createFileRunContext, l as normalizeAnalyzeOnSettle, m as withRunContext, n as createCoordinationToolsForManager, o as createCancelAcknowledger, p as createInMemoryRunContext, s as createSteerAcknowledger, t as createCoordinationTools, u as coordinationVerbNames } from "./coordination-manager-B2Z_MmL9.js";
 import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CzFhQGMa.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-XV4aJwoQ.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
@@ -756,7 +756,7 @@ function truncate(value) {
 /**
 * The root manager's own provider stream, retained where Runtime owns it.
 *
-* Measured motive (agent-runtime#1233, 2026-09-15): a CHILD's full event stream — reasoning, text,
+* Measured motive (agent-runtime#1233): a CHILD's full event stream — reasoning, text,
 * and tool parts, 28k to 76k reasoning characters per child — is retained in the blob its
 * `settled` record names as `outRef`. The ROOT's stream reached nobody: `driveHarnessFromBackend`
 * drained the root executor for accounting and discarded every `progress` event, and on a
@@ -773,7 +773,7 @@ function truncate(value) {
 *
 * Durability boundary: each line is written synchronously to an `O_APPEND` descriptor before the
 * next event is drained, and the file is fsynced at every drive-attempt boundary and at close, not
-* per line. Measured 2026-09-15 on this host's APFS: an fsync per line cost 7.1 ms per event over
+* per line. An fsync per line cost 7.1 ms per event over
 * 1,000 events and 8.1 ms over 5,000 (~80 s for a root emitting ten thousand text deltas, all of
 * it serialized inside the drain loop that also meters the budget); an async `FileHandle.write`
 * still cost 0.9 to 1.1 ms per line in the thread pool the children's journal writes share; a
@@ -3707,12 +3707,12 @@ function driverInitialMessages(opts, system, task, scope) {
 * that assigned the task. The run's own check judges the run's result, never a child's narrower
 * assignment. Held to the run's check, a child's submission is refused for as long as the run's
 * is: every node of test-canary-graph-tools-20261017a, and the `delay` child of
-* test-retained-root-wake-20261018b (2026-10-18: "Expected: the canary runs to its deadline"), was
+* test-retained-root-wake-20261018b ("Expected: the canary runs to its deadline"), was
 * refused at submit_result, never settled, and its manager was never woken with it.
 *
 * It is the one check a harness manager may hold without a continuation policy: it accepts every
 * submission, so there is nothing to send the child back for. test-canary-graph-tools-20261018c and
-* -d (2026-10-18) had every harness-run graph lead refused at spawn until this exemption.
+* -d had every harness-run graph lead refused at spawn until this exemption.
 */
 const ownSubmissionDeliverable = Object.freeze({
 	describe: "the result your task asks for; it goes to the manager that assigned the task, and the run's own check judges that manager's result",
@@ -5131,7 +5131,7 @@ const SAME_PARTIAL_FAILURE_LIMIT = 2;
 /**
 * Why an aborted run stopped: `deadline` when the root's or the node's own deadline cut it, else
 * `aborted`. Read before any failure classification, which calls every failure after an abort
-* terminal: measured 2026-10-21, 61 of 62 runs that ended `terminal-error` were a deadline that cut
+* terminal: 61 of 62 runs that ended `terminal-error` were a deadline that cut
 * a turn.
 */
 function abortStop(signal) {
@@ -5672,7 +5672,7 @@ var DriverRetryLoop = class {
 *
 * WHAT COUNTS AS PROGRESS was got wrong first. Reading metered spend, settled children and an
 * accepted submission measured the filesystem and the meter, never the goal: across 1,422 settled
-* discovery-lab runs (2026-09-01) it retried the runs that produced NOTHING 629 of 827 times
+* discovery-lab runs it retried the runs that produced NOTHING 629 of 827 times
 * (76.1%) and the runs that HAD left an artifact 21 of 399 times (5.3%). So when the caller
 * declares a completion check, spend and settlements alone are NOT progress while it is unmet; only
 * a delivery (an accepted submission, a child that passed the check, the contract turning met, or a
@@ -5690,7 +5690,7 @@ var DriverRetryLoop = class {
 * `barren-pause` row per pause for an operator alarm, and re-enters. A barren streak never ends the
 * run: the check, the deadline, the budget and cancellation do. Progress resets the streak and the
 * backoff. There is no count cap and no caller veto (the old prompt-owned loop logged 896 of 1,011
-* rounds with no progress). Measured 2026-10-21 on magnetar-rust-20261021a: the barren bound
+* rounds with no progress). The barren bound
 * settled a 48-hour run `no-winner` after 14.3 hours, while its last two turns updated its pages
 * and waited on its own 2^20 prove.
 *
@@ -5713,7 +5713,7 @@ var DriverRetryLoop = class {
 * created and then failed its setup (Sandbox's `PartialFailureError`): it meets the same failure on
 * every re-entry, so a second identical attempt with no progress stops with `repeated-failure`
 * (`SAME_PARTIAL_FAILURE_LIMIT`). A failure that spent tokens without delivering keeps the bounds.
-* Measured 2026-10-04 on Discovery run research-nqs-20261003system2: a Platform restart answered
+* A Platform restart answered
 * `HTTP 502 ... Platform key verification unavailable` from 03:04:34 to 03:09:41Z, and the
 * coordinator's twelve attempts ran out at 03:07:12Z with no token spent.
 *
@@ -5731,8 +5731,7 @@ var DriverRetryLoop = class {
 * still spent pauses again with its own row, and the steer stays queued until a turn reads it.
 * After the pause the per-window counters start over and the driver is re-entered: after
 * a failure as `driver-failure` with `pausedMs`, after an admission or continuation refusal as the
-* re-entry it was about to use. Drew, 2026-10-21: "why do these runs keep failing early its
-* unacceptable!" Measured 2026-10-21 over 259 runs since 10-14: 8 of the 10 stops settled runs that
+* re-entry it was about to use. Runs must not fail early: over 259 runs, 8 of the 10 stops settled runs that
 * nobody solved or stopped, including 17 roots whose harness never streamed.
 */
 function assertContinuationPolicy(continuation) {
@@ -5842,7 +5841,7 @@ function composeReentryTask(input) {
 }
 /**
 * Why the driver is back, in one clause. The failure's own text stays in the attempt records and
-* never reaches the driver: measured 2026-09-11, a continuation told the details of a provider
+* never reaches the driver: a continuation told the details of a provider
 * failure spent two of its first four children probing the infrastructure, while its peer, told
 * only what to continue, spent all forty-five on the research.
 */
@@ -7164,7 +7163,7 @@ async function providerAcceptsCoordinationAttachments(backend) {
 * A manager waits between turns, and a wake can come much later than five minutes after its last
 * turn. Claude Code 2.1.289 writes its prompt cache with a five-minute lifetime unless this variable
 * is set; a wake after the cache expired re-writes the manager's whole context, about 140K tokens
-* per turn on a Discovery root measured 2026-10-05. That root ran on a subscription and already
+* per turn on a Discovery root. That root ran on a subscription and already
 * wrote one-hour entries; the variable makes the hour hold for every claude-code manager, whatever
 * its credential. A value the caller set wins.
 */
@@ -7415,6 +7414,7 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 */
 var graph_registry_exports = /* @__PURE__ */ __exportAll({
 	digestOfGraph: () => digestOfGraph,
+	graphCorpusSummary: () => graphCorpusSummary,
 	graphDigest: () => graphDigest,
 	graphFromStored: () => graphFromStored,
 	graphRegistry: () => graphRegistry,
@@ -7424,6 +7424,7 @@ var graph_registry_exports = /* @__PURE__ */ __exportAll({
 	lookupGraph: () => lookupGraph,
 	pickBestGraph: () => pickBestGraph,
 	recordGraphRun: () => recordGraphRun,
+	recordStoredGraphRun: () => recordStoredGraphRun,
 	storedGraphDigests: () => storedGraphDigests,
 	taskShapeDigest: () => taskShapeDigest
 });
@@ -7468,10 +7469,26 @@ function storeGraph(graph) {
 function assertRecord(record) {
 	if (typeof record.graphDigest !== "string" || record.graphDigest.length === 0) throw new ValidationError("graph-registry: record.graphDigest is required");
 	if (typeof record.taskDigest !== "string" || record.taskDigest.length === 0) throw new ValidationError("graph-registry: record.taskDigest is required");
-	if (record.outcome.kind !== "delivered" && record.outcome.kind !== "no-winner") throw new ValidationError("graph-registry: record.outcome.kind must be 'delivered' | 'no-winner'");
+	if (!Number.isFinite(Date.parse(record.startedAt))) throw new ValidationError("graph-registry: record.startedAt must be a timestamp");
+	if (![
+		"delivered",
+		"no-winner",
+		"unknown",
+		"running"
+	].includes(record.outcome.kind)) throw new ValidationError("graph-registry: invalid record.outcome.kind");
+	if ((record.outcome.kind === "delivered" || record.outcome.kind === "no-winner") && (!record.finishedAt || !Number.isFinite(Date.parse(record.finishedAt)))) throw new ValidationError("graph-registry: terminal outcomes require record.finishedAt");
+	if ((record.outcome.kind === "unknown" || record.outcome.kind === "running") && !record.outcome.reason) throw new ValidationError("graph-registry: incomplete outcomes require a reason");
+	if (record.source && (!record.source.kind || !record.source.id)) throw new ValidationError("graph-registry: source.kind and source.id are required");
+	if (record.finishedAt && (!Number.isFinite(Date.parse(record.finishedAt)) || Date.parse(record.finishedAt) < Date.parse(record.startedAt))) throw new ValidationError("graph-registry: finishedAt precedes startedAt or is invalid");
+	for (const [channel, value] of Object.entries(record.cost)) if (value !== void 0 && (typeof value !== "number" || !Number.isFinite(value) || value < 0)) throw new ValidationError(`graph-registry: invalid cost.${channel}`);
 }
 function recordKey(record) {
 	assertRecord(record);
+	if (record.source) return JSON.stringify([
+		"source",
+		record.source.kind,
+		record.source.id
+	]);
 	return JSON.stringify([
 		record.taskDigest,
 		record.graphDigest,
@@ -7488,13 +7505,58 @@ function graphRegistry(root) {
 *  Idempotent per (taskDigest, graphDigest, startedAt): a replayed append with
 *  the same key replaces the prior row rather than duplicating it. */
 async function recordGraphRun(reg, graph, record) {
+	return recordStoredGraphRun(reg, storeGraph(graph), record);
+}
+/** Store an executable graph or an observed external topology in the same registry.
+* Imported observations retain their source identity and never authorize replay.
+* A reader refreshing facts can preserve independently joined labels; an explicit
+* correction leaves preserveLabels unset and replaces the record. */
+async function recordStoredGraphRun(reg, stored, record, options = {}) {
 	assertRecord(record);
-	const stored = storeGraph(graph);
+	if (stored.observed && !record.source) throw new ValidationError("graph-registry: observed graphs require a source run identity");
+	if (!stored.observed && !record.finishedAt) throw new ValidationError("graph-registry: native graph runs require a completion timestamp");
+	if ((!stored.observed || record.traversals !== void 0) && (!Number.isSafeInteger(record.traversals) || record.traversals < 0)) throw new ValidationError("graph-registry: native graphs require metered traversals; observed counts must be non-negative integers");
+	const { digest, ...content } = stored;
+	if (graphDigest(content) !== digest) throw new ValidationError("graph-registry: stored graph content does not match its digest");
 	if (stored.digest !== record.graphDigest) throw new ValidationError(`graph-registry: record.graphDigest ${record.graphDigest} does not match the supplied graph (${stored.digest}) — record the graph that actually ran`);
 	await mkdir(join(reg.root, GRAPHS_DIR), { recursive: true });
 	return withJsonlFileLock(join(reg.root, RECORDS_FILE), async (canonicalPath) => {
-		writeAtomicDurableFile(join(reg.root, GRAPHS_DIR, `${stored.digest}.json`), JSON.stringify(stored), { preserveMode: true });
-		await upsertCommittedJsonLine(canonicalPath, record, recordKey);
+		let persisted = record;
+		if (options.preserveLabels && record.source) {
+			const prior = (await readCommittedJsonFile(canonicalPath)).find((row) => row.source?.kind === record.source.kind && row.source.id === record.source.id);
+			if (prior) {
+				const taskType = record.taskType ?? prior.taskType;
+				const priorTerminal = prior.outcome.kind === "delivered" || prior.outcome.kind === "no-winner";
+				const incomingUnassessed = record.outcome.kind === "unknown" || record.outcome.kind === "running";
+				if (priorTerminal && incomingUnassessed && prior.startedAt !== record.startedAt) throw new ValidationError("graph-registry: preserving labels requires the same task start and source identity");
+				const evidence = [...prior.evidence ?? [], ...record.evidence ?? []];
+				persisted = {
+					...record,
+					...taskType ? { taskType } : {},
+					...record.unknowns ? { unknowns: record.unknowns.filter((reason) => !(taskType && reason === "task type not explicitly labeled")) } : {},
+					...evidence.length ? { evidence: [...new Map(evidence.map((entry) => [canonicalJson$1(entry), entry])).values()] } : {},
+					...priorTerminal && incomingUnassessed ? {
+						outcome: prior.outcome,
+						finishedAt: prior.finishedAt,
+						cost: {
+							...record.cost,
+							...prior.cost.ms === void 0 ? {} : { ms: prior.cost.ms },
+							...prior.cost.mergeMs === void 0 ? {} : { mergeMs: prior.cost.mergeMs }
+						}
+					} : {}
+				};
+			}
+		}
+		assertRecord(persisted);
+		const revisionPath = join(reg.root, GRAPHS_DIR, `${stored.digest}.json`);
+		try {
+			const { digest: existingDigest, ...existing } = JSON.parse(await readFile(revisionPath, "utf8"));
+			if (existingDigest !== stored.digest || graphDigest(existing) !== stored.digest) throw new ValidationError("graph-registry: stored graph revision is immutable but its content differs");
+		} catch (error) {
+			if (!isNoEntError(error)) throw error;
+			writeAtomicDurableFile(revisionPath, JSON.stringify(stored), { preserveMode: true });
+		}
+		await upsertCommittedJsonLine(canonicalPath, persisted, recordKey);
 		return stored;
 	});
 }
@@ -7502,13 +7564,87 @@ async function recordGraphRun(reg, graph, record) {
 async function listGraphRuns(reg) {
 	return readCommittedJsonFile(join(reg.root, RECORDS_FILE));
 }
-/** Records for one task shape, newest last. */
-async function graphRunsFor(reg, taskDigest) {
-	return (await listGraphRuns(reg)).filter((row) => row.taskDigest === taskDigest);
+function observedTopology(record) {
+	return record.topologyDigest ?? (record.source ? "unknown" : record.graphDigest);
+}
+/** Records for one task shape or deterministic label query, newest last. */
+async function graphRunsFor(reg, query = {}) {
+	const filters = typeof query === "string" ? { taskDigest: query } : query;
+	return (await listGraphRuns(reg)).filter((row) => (filters.taskDigest === void 0 || row.taskDigest === filters.taskDigest) && (filters.taskType === void 0 || (row.taskType ?? "unknown") === filters.taskType) && (filters.topologyDigest === void 0 || observedTopology(row) === filters.topologyDigest) && (filters.sourceKind === void 0 || (row.source?.kind ?? "native") === filters.sourceKind));
+}
+function medianKnown(values) {
+	const known = values.filter((value) => value !== void 0 && Number.isFinite(value) && value >= 0).sort((a, b) => a - b);
+	const middle = Math.floor(known.length / 2);
+	return {
+		count: known.length,
+		median: known.length === 0 ? null : known.length % 2 ? known[middle] : (known[middle - 1] + known[middle]) / 2
+	};
+}
+function observedGraphSummary(records) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const record of records) {
+		const key = JSON.stringify([record.taskType ?? "unknown", observedTopology(record)]);
+		const rows = groups.get(key);
+		if (rows) rows.push(record);
+		else groups.set(key, [record]);
+	}
+	const summaries = [...groups.values()].map((runs) => {
+		const assessed = runs.filter((run) => run.outcome.kind === "delivered" || run.outcome.kind === "no-winner");
+		const delivered = assessed.filter((run) => run.outcome.kind === "delivered");
+		const wall = medianKnown(assessed.map((run) => run.cost.ms));
+		const merge = medianKnown(delivered.filter((run) => run.evidence?.some((entry) => entry.kind === "pr-merged")).map((run) => run.cost.mergeMs));
+		const tokens = medianKnown(assessed.map((run) => run.cost.tokens));
+		const human = medianKnown(assessed.map((run) => run.cost.humanMessages));
+		return {
+			taskType: runs[0].taskType ?? "unknown",
+			topologyDigest: observedTopology(runs[0]),
+			delivered: delivered.length,
+			assessed: assessed.length,
+			unknown: runs.length - assessed.length,
+			deliveredRate: assessed.length ? delivered.length / assessed.length : null,
+			medianWallMs: wall.median,
+			wallMsCount: wall.count,
+			medianMergeMs: merge.median,
+			mergeMsCount: merge.count,
+			medianTokens: tokens.median,
+			tokenCount: tokens.count,
+			medianHumanMessages: human.median,
+			humanMessageCount: human.count,
+			runs
+		};
+	});
+	summaries.sort((a, b) => {
+		const delivered = (b.deliveredRate ?? -1) - (a.deliveredRate ?? -1);
+		if (delivered) return delivered;
+		for (const key of [
+			"medianWallMs",
+			"medianTokens",
+			"medianHumanMessages"
+		]) {
+			if (a[key] === b[key]) continue;
+			if (a[key] === null) return 1;
+			if (b[key] === null) return -1;
+			return a[key] - b[key];
+		}
+		return a.taskType.localeCompare(b.taskType) || a.topologyDigest.localeCompare(b.topologyDigest);
+	});
+	return {
+		recordCount: records.length,
+		groups: summaries
+	};
+}
+/** Query and rank the same registry records using the opt-in observational
+* policy: delivery rate, wall time, tokens, then human messages; unknowns last. */
+async function graphCorpusSummary(reg, query = {}) {
+	return observedGraphSummary(await graphRunsFor(reg, query));
 }
 /** The documented heuristic: delivered beats failed; among delivered, cheaper
 *  (tokens, then iterations) wins; ties go to the most recent. */
-function pickBestGraph(records) {
+function pickBestGraph(records, options = {}) {
+	if (options.policy === "observed") {
+		const group = observedGraphSummary(records).groups[0];
+		return group && pickBestGraph(group.runs);
+	}
 	const delivered = records.filter((row) => row.outcome.kind === "delivered");
 	if (delivered.length === 0) return void 0;
 	const better = (a, b) => {
@@ -7534,7 +7670,17 @@ async function loadGraph(reg, digest) {
 *  author a new one — with the reason stated either way (the decision is data). */
 async function lookupGraph(reg, taskDigest) {
 	const records = await graphRunsFor(reg, taskDigest);
-	const best = pickBestGraph(records);
+	const candidates = [];
+	const loaded = /* @__PURE__ */ new Map();
+	for (const record of records) {
+		if (!loaded.has(record.graphDigest)) loaded.set(record.graphDigest, await loadGraph(reg, record.graphDigest));
+		if (!loaded.get(record.graphDigest)?.observed) candidates.push(record);
+	}
+	if (records.length && !candidates.length) return {
+		kind: "author",
+		reason: "only observed topologies are available; author an executable graph"
+	};
+	const best = pickBestGraph(candidates);
 	if (best) {
 		const graph = await loadGraph(reg, best.graphDigest);
 		if (graph) return {
@@ -7555,6 +7701,7 @@ async function lookupGraph(reg, taskDigest) {
 /** Rehydrate a stored graph into a runnable one. The check comes from the
 *  CALLER's environment (oracles are environment, never stored). */
 function graphFromStored(stored, check) {
+	if (stored.observed) throw new ValidationError("graphFromStored: observed topology cannot be replayed");
 	return {
 		nodes: stored.nodes,
 		edges: stored.edges,
@@ -7754,7 +7901,7 @@ function registerRecovery(env, makeRecursiveWorker) {
 *   bridgeExecutor: bridge stream error: host-executor: acquire timeout after 60000ms
 *   (in_flight=4/4, queued=1)
 *
-* Measured 2026-08-22 on discovery-lab cells oscnp s2/s3: two live cells held 2 leads and up to 8
+* Two live cells held 2 leads and up to 8
 * workers on one bridge whose host executor caps live harness children at 4. A worker spawn that
 * queued past the bridge's single 60 s acquire deadline died there, and the run lost that worker
 * permanently even though a slot freed seconds later. The bridge retries nothing.
@@ -9796,6 +9943,6 @@ function superviseWithContext(profile, task, opts, brain) {
 	}, brain));
 }
 //#endregion
-export { noProgressFor as $, runBrainLoop as A, graphRootProfile as B, workerFromBackend as C, composeReentryTask as D, UNPROVEN_CONTINUITY as E, flowRootProfile as F, dumbContinuationFailPrompt as G, analyzesFindingsReportPrompt as H, journaledGateDecider as I, kernelPromptRegistry as J, dumbContinuationPassPrompt as K, routeFlowOf as L, createGraphOverlay as M, GraphRouteError as N, serveCoordinationMcp as O, createFlowRun as P, anyOf as Q, validateFlowGraph as R, taskShapeDigest as S, supervisorAgentWithTestBrain as T, createPromptRegistry as U, validateGraphTopology as V, delegatesWorkerBriefPrompt as W, promptHandle as X, naiveContinuationPrompt as Y, allWorkersStalled as Z, loadGraph as _, superviseRootProfile as a, renderAnytimeTable as at, recordGraphRun as b, retryPreSpawnRefusals as c, createSupervisorSpanRecorder as ct, graphDigest as d, plateau as et, graphFromStored as f, listGraphRuns as g, graph_registry_exports as h, profileGuidanceComposer as i, plateauLength as it, runtimeFlowBrain as j, driverAgent as k, withWorkerSpawnRetry as l, graphRunsFor as m, superviseFleetCapabilities as n, areaUnderCurve as nt, isPreSpawnExecutorFailure as o, readRootStream as ot, graphRegistry as p, formatPromptHandle as q, superviseWithTestBrain as r, bestSoFar as rt, resolveWorkerSpawnRetry as s, readRootStreamReceipt as st, supervise as t, anytimeReport as tt, digestOfGraph as u, lookupGraph as v, supervisorAgent as w, storedGraphDigests as x, pickBestGraph as y, defaultEdgeTraversalCap as z };
+export { allWorkersStalled as $, serveCoordinationMcp as A, validateFlowGraph as B, storedGraphDigests as C, supervisorAgentWithTestBrain as D, supervisorAgent as E, GraphRouteError as F, createPromptRegistry as G, graphRootProfile as H, createFlowRun as I, dumbContinuationPassPrompt as J, delegatesWorkerBriefPrompt as K, flowRootProfile as L, runBrainLoop as M, runtimeFlowBrain as N, UNPROVEN_CONTINUITY as O, createGraphOverlay as P, promptHandle as Q, journaledGateDecider as R, recordStoredGraphRun as S, workerFromBackend as T, validateGraphTopology as U, defaultEdgeTraversalCap as V, analyzesFindingsReportPrompt as W, kernelPromptRegistry as X, formatPromptHandle as Y, naiveContinuationPrompt as Z, listGraphRuns as _, superviseRootProfile as a, bestSoFar as at, pickBestGraph as b, retryPreSpawnRefusals as c, readRootStream as ct, graphCorpusSummary as d, anyOf as et, graphDigest as f, graph_registry_exports as g, graphRunsFor as h, profileGuidanceComposer as i, areaUnderCurve as it, driverAgent as j, composeReentryTask as k, withWorkerSpawnRetry as l, readRootStreamReceipt as lt, graphRegistry as m, superviseFleetCapabilities as n, plateau as nt, isPreSpawnExecutorFailure as o, plateauLength as ot, graphFromStored as p, dumbContinuationFailPrompt as q, superviseWithTestBrain as r, anytimeReport as rt, resolveWorkerSpawnRetry as s, renderAnytimeTable as st, supervise as t, noProgressFor as tt, digestOfGraph as u, createSupervisorSpanRecorder as ut, loadGraph as v, taskShapeDigest as w, recordGraphRun as x, lookupGraph as y, routeFlowOf as z };
 
-//# sourceMappingURL=supervise-BUOeThuB.js.map
+//# sourceMappingURL=supervise-BGfm2GlY.js.map