@tangle-network/agent-runtime 0.348.1 → 0.349.0

package/dist/{supervisor-DDy0aEtR.js → supervisor-wS9Ehz_x.js}

@@ -1,6 +1,6 @@
 import { a as publishExclusiveDurableFile, c as captureRunWriteContext, l as fenceRunWrite, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile, t as spawnJournalRecordEvents } from "./record-events-D93DkpAx.js";
 import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as isAbortError$1, B as sha256Bytes$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as addTokenUsage, H as hasControlCharacter, I as deepFreezeCandidate, J as cloneTokenUsage, K as chargedTokens, M as verifyWorkspaceSnapshotArtifacts, Ot as teardownExecutor, Q as hasCompleteCacheBreakdown, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as abortError, W as addSpend, X as errorMessage, Y as deleteBoxSafe, Z as fnv1a32Hex, _t as withBudgetResources, at as roundBoxMinutes, c as verifyAgentCandidateWorkspaceTree, ct as throwAbort, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, g as verifiedArtifactChunks, gt as resourceTelemetry, ht as assertResources, it as randomUuid, kt as teardownSurfaces, lt as throwIfAborted, mt as addResourceSpend, nt as promptCacheTokenClasses, o as readAgentCandidateWorkspaceArtifactFiles, ot as sleep, pt as zeroTokenUsage, q as cloneSpend, rt as randomSuffix, s as verifyAgentCandidateWorkspaceArtifacts, st as stringifySafe, t as assertSandboxProfileCompatibility, tt as mapWithConcurrency, ut as unmeteredSpend, v as verifyAgentCandidateWorkspaceArchive, vt as ACCEPTED_RESULT_GRACE_MS, wt as boundedChildDeadlineAt, yt as CHILD_DEADLINE_REASON } from "./sandbox-profile-compat-_fEtHPCj.js";
+import { $ as isAbortError$1, B as sha256Bytes$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as addTokenUsage, H as hasControlCharacter, I as deepFreezeCandidate, J as cloneTokenUsage, K as chargedTokens, M as verifyWorkspaceSnapshotArtifacts, Ot as teardownExecutor, Q as hasCompleteCacheBreakdown, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as abortError, W as addSpend, X as errorMessage, Y as deleteBoxSafe, Z as fnv1a32Hex, _t as withBudgetResources, at as roundBoxMinutes, c as verifyAgentCandidateWorkspaceTree, ct as throwAbort, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, g as verifiedArtifactChunks, gt as resourceTelemetry, ht as assertResources, it as randomUuid, kt as teardownSurfaces, lt as throwIfAborted, mt as addResourceSpend, nt as promptCacheTokenClasses, o as readAgentCandidateWorkspaceArtifactFiles, ot as sleep, pt as zeroTokenUsage, q as cloneSpend, rt as randomSuffix, s as verifyAgentCandidateWorkspaceArtifacts, st as stringifySafe, t as assertSandboxProfileCompatibility, tt as mapWithConcurrency, ut as unmeteredSpend, v as verifyAgentCandidateWorkspaceArchive, vt as ACCEPTED_RESULT_GRACE_MS, wt as boundedChildDeadlineAt, yt as CHILD_DEADLINE_REASON } from "./sandbox-profile-compat-DtuJWFrM.js";
 import { runTaskQueue } from "./task-queue.js";
 import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
 import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
@@ -509,7 +509,7 @@ function sandboxEventServedBackend(event) {
 /**
 * Fail the execution when the platform reports serving a model other than the exact one asked for.
 *
-* Measured motive (agent-runtime#892, live infrastructure 2026-08-17): 6 of 6 boxes whose profile
+* Measured motive (agent-runtime#892, live infrastructure): 6 of 6 boxes whose profile
 * declared `zai-coding-plan/glm-5.2` reported
 * `{"provider":"openai-compat","model":"deepseek/deepseek-v4-flash","source":"environment"}`,
 * while the materialization receipt recorded the declared model as `status: "known"`. Sending
@@ -8784,7 +8784,7 @@ function isFiniteNumber(value) {
 * The continuation: what a manager with a completion check is told when its turn ends and the
 * check is unmet, and the one rule that decides whether it is sent back.
 *
-* Measured on discovery-lab before this module (2026-09-24, 670 settled runs, 1,596 re-entries):
+* Measured on discovery-lab before this module (670 settled runs, 1,596 re-entries):
 * 1,565 re-entries followed a failed turn and resent the original task, and 31 carried note text.
 * The note Runtime wrote itself held seven fixed lines and no field for the check's verdict. Of 40
 * episodes where the director ended on its own and the outside check disagreed, 33 were told
@@ -9734,8 +9734,7 @@ const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
 *
 * A provider executor reports a failed turn as a returned outcome, not a thrown error, so without
 * this error a failed turn reads as a completed drive and never reaches the retry decision.
-* Measured 2026-09-17 on a Discovery director placed on tangle-sandbox with the opencode harness:
-* a 53-minute turn ended `status code 524`, and another ended `Invalid API key` after a platform
+* A 53-minute turn ended `status code 524`, and another ended `Invalid API key` after a platform
 * key expired mid-turn. A new turn succeeds in both cases.
 *
 * `errorCode` is the provider's machine code when it reported one. The classifier reads the code
@@ -9919,7 +9918,7 @@ function retainedAdmissionCause(error) {
 *
 * A provider SDK throws its own error classes, so an environment `create` that the platform
 * refused arrives here as neither a `BackendTransportError` nor an `AgentEvalError`, and the
-* default sends it to `transient`. Measured 2026-09-16: a Tangle Sandbox create refused
+* default sends it to `transient`. A Tangle Sandbox create refused
 * `HTTP 400 {"code":"CONFIG_ERROR"}` for a key whose budget was fully reserved retried 14-22
 * times per node while the run showed a durable intent and no other event, so eleven of twelve
 * roots sat for 25 minutes with nothing to diagnose. The status was on the error the whole time.
@@ -10745,7 +10744,7 @@ function peerMailTools(mailbox, capabilityId) {
 *
 * The worker-side receive end of the down-leg: a per-worker inbox an executor exposes as
 * `Executor.deliver`. The driver's `steer_agent` / `answer_question` land here,
-* and the worker's agent loop takes them at two points (Drew's two delivery modes):
+* and the worker's agent loop takes them at two points:
 *
 *   - QUEUED (default): the message accumulates and is taken at the next step boundary — folded
 *     into the conversation before the next think. A worker also takes before it may settle, so it
@@ -16003,7 +16002,7 @@ const STOP_STATUS_POLL_MS = 1e3;
 *
 * A retained execution outlives its local stream by design, so an aborted observer can reconnect.
 * Keeping its environment preserves the files; it must not keep the harness running. Measured on
-* Discovery: after `disco cancel` on 2026-10-04 the kept root box ran `claude --print` for two
+* Discovery: after `disco cancel` the kept root box ran `claude --print` for two
 * more minutes, untraced and charged to the subscription, until an operator stopped the box; on
 * 2026-10-03 a cancelled run kept 18 boxes whose `claude` processes ran until an operator stopped
 * them. The provider's exact cancellation stops the process; the box and its files stay.
@@ -16598,7 +16597,7 @@ const WORKSPACE_CHECKPOINT_TIMEOUT_MS = 12e4;
 *  it again. */
 const WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS = 2 * 6e4;
 /** Bound on creating and reconstructing the fork a checkpoint's capture reads: a Sandbox box
-*  created from a snapshot (measured 2026-09-24: 19 s). The capture itself is bounded by its port. */
+*  created from a snapshot (19 s). The capture itself is bounded by its port. */
 const WORKSPACE_CHECKPOINT_FORK_TIMEOUT_MS = 10 * 6e4;
 /** Write the marker. False when the environment cannot take it, so no restore can be verified. */
 async function writeWorkspaceMarker(environment, marker, signal) {
@@ -16939,7 +16938,7 @@ function stringValue(value) {
 /**
 * How long a retained stream may go without new evidence before the node publishes that it waits
 * on its exact result. Silence never ends the turn (ending there failed 18 still-running attempts
-* as `terminal-event-lost`, 2026-10-12..20); only the exact result or an abort does. The bound on
+* as `terminal-event-lost`); only the exact result or an abort does. The bound on
 * a wait that never ends is the Lab keeper's hung-root re-drive after 15 minutes without a write.
 */
 const RETAINED_AWAITING_RESULT_AFTER_MS = 8 * 6e4;
@@ -16954,7 +16953,7 @@ const RETAINED_TAIL_FLOW_MS = 100;
 /**
 * Why the event stream stopped short, as bounded redacted text. A settlement reason reads messages
 * and `cause` links only, never an AggregateError's members, so a wrapper that omits this hides
-* which layer lost the stream (critics-tournament-v1-158ca88e83bf:s1, 2026-10-16).
+* which layer lost the stream (critics-tournament-v1-158ca88e83bf:s1).
 */
 function observationFailureText(failure) {
 	const error = failure.error;
@@ -18084,7 +18083,7 @@ var ProviderTurnSettlement = class {
 	}
 	/**
 	* A capture that fails or exceeds its deadline after settlement is a fact about the evidence,
-	* never the turn's outcome. On Runtime 0.295.4 (2026-10-03) a capture past its 1,200,000 ms
+	* never the turn's outcome. On Runtime 0.295.4 a capture past its 1,200,000 ms
 	* deadline behind a two-slot queue shared by 34 workers threw an AbortError, the driver
 	* classified it terminal, and two research roots ended with 13 and 0 children settled. With no
 	* receipt the source stays preserved and the owner reads a retention failure; the turn is not re-run.
@@ -18820,7 +18819,7 @@ function heldForContinuation(scope) {
 /** What a leaf is told when it continues after a refused turn. The session carries its
 *  conversation and the environment its files, so the instruction names neither the provider nor
 *  the refusal: a director told the details of a provider failure spent its children probing the
-*  infrastructure (discovery-lab AGENTS.md, measured 2026-09-11). */
+*  infrastructure (discovery-lab AGENTS.md). */
 const LEAF_CONTINUATION_TASK = "Your previous turn was interrupted before it finished. This is the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over.";
 //#endregion
 //#region src/runtime/environment-provider/provider-executor-admission.ts
@@ -20084,7 +20083,7 @@ function taskToMessages(task, spec, resolvedSystem) {
 * A router-brained agent (`harness` omitted or `cli-base`) runs its tool loop in this process, so
 * its whole conversation is in the loop's `messages` and nowhere else. Before this, Runtime
 * metered each turn's usage and tool-call names and kept nothing the agent said, saw, or asked a
-* tool to do: a 316-agent tree on 2026-09-24 settled with 0 of 316 transcripts, and the 37 agents
+* tool to do: a 316-agent tree settled with 0 of 316 transcripts, and the 37 agents
 * still running when its driver process stopped left no record at all (agent-runtime#1377).
 *
 * The recorder keeps each message once, in the order the model saw it, and serves two readers:
@@ -26759,7 +26758,7 @@ function hasRetriableTeardowns(scope, release) {
 * A driver's `act` returning does not stop everything that holds its scope: a supervisor tool
 * whose handler outran its response fence keeps running detached (`single-flight-tools`
 * `background()`) with the coordination verbs still bound, and a verb call reaches `spawn`
-* in-process — closing the MCP listener does not reach it. Measured 2026-09-14: such a handler
+* in-process — closing the MCP listener does not reach it. Such a handler
 * spawned `distill:all` 309 ms after the barrier had drained and released. The child was
 * admitted, took a conserved reservation, built a sandbox, ran 12.4 s of provider work, and
 * journaled its settlement 19 s after the run had already written its failure — while the live
@@ -32933,7 +32932,7 @@ async function recordRootSegment(opts, events, at, fresh) {
 }
 /**
 * Append one `root-reentered` record: this process is supervising a run an earlier process drove.
-* Measured 2026-10-19 on magnetar-rust-20261019f: after a host reboot the re-entered root ran two
+* After a host reboot the re-entered root ran two
 * barren continuations and the run settled `no-result-selected`, with three workers still open in
 * the journal and no record that a restart had happened.
 */
@@ -33132,7 +33131,7 @@ async function joinRunChildren(join, settleGraceMs) {
 }
 /**
 * A first teardown that failed or answered late is not the provider's last word, and a run that
-* settles over it leaves the sandbox running: measured 2026-09-20, cancelling 20 Discovery lanes
+* settles over it leaves the sandbox running: cancelling 20 Discovery lanes
 * left 2 workers running. Ask again until confirmed or out of time.
 */
 async function confirmRetriableTeardowns(join, releasing) {
@@ -33588,4 +33587,4 @@ async function noWinner(settled, rejection) {
 //#endregion
 export { resolveSpawnResourcePaths as $, mapSandboxToolEvent as $i, HarnessTurnFailedError as $n, sandboxProfileMaterialization as $r, providerAsSandboxClient as $t, beginScopeOwnerAttempt as A, cappedDoublingMs as Ai, toOtelAttributes as An, readCodexRolloutSession as Ar, createExecutor as At, assertRecursiveReservationPolicy as B, executorFailure as Bi, PEER_MAIL_WIRE_KEY as Bn, LOCAL_HARNESSES as Br, TERMINAL_DECISIONS as Bt, interactiveAdmissionSeamKey as C, projectSandboxOutcome as Ci, createOpenInferenceFileExporter as Cn, bridgeAdmissionRefusal as Cr, readCommittedJsonLines as Ct, recoverRetainedInteractiveRun as D, RetainedExecutionPendingError as Di, loopEventToOtelSpan as Dn, addHarnessUsage as Dr, createExecutorRegistry as Dt, reconnectRetainedInteractiveRun as E, settlementFailureCause as Ei, generateSpanId as En, ROUTER_PRICE_SOURCE as Er, insideCursorNamespace as Et, coordinationMcpAlias as F, TRACE_ROOT_SCHEMA as Fi, INBOX_RECEIPT_KEY as Fn, signalAbortError as Fr, assertBoxlessPromptOptions as Ft, meterRuntimeOwnedAccounting as G, spendFromUsageEvents as Gi, peerMailVerbNames as Gn, controlProfileMaterialization as Gr, runCodeMode as Gt, freeSlots as H, createBudgetPool as Hi, createPeerMailbox as Hn, terminateProcessTreeAndConfirm as Hr, codeModeArguments as Ht, coordinationProfileToolPrefix as I, TRACE_SUMMARY_SCHEMA as Ii, createInbox as In, bridgeRuntimeAttachmentsKey as Ir, readPromptOptions as It, recordScopeOwnerDriverAttempt as J, defaultRedactor as Ji, createActivityLog as Jn, profileMaterializationAxes$1 as Jr, routerBrain as Jt, meterRuntimeOwnedProviderAttempt as K, spendFromUsageTotals as Ki, taskToPrompt$1 as Kn, defineProfileMaterializationContract as Kr, toolResultText as Kt, providerVisibleProfile as L, detachedFrozen as Li, failPendingAfter as Ln, bridgeStopSignalKey as Lr, createSandboxForSpec as Lt, recordScopeOwnerMaterialization as M, unavailablePauseMs as Mi, createRuntimeStreamEventCollector as Mn, RunCancellationReason as Mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Mt, restoreScopeOwnerAcceptedExecution as N, unavailableResumeAt as Ni, sanitizeKnowledgeReadinessReport as Nn, linkAbort as Nr, createSteerableSandboxSession as Nt, startRetainedInteractiveRun as O, registerRetainedExecutorPreparation as Oi, padSpanId as On, createCodexRolloutStoreReader as Or, bindReusableExecutorExecutionId as Ot, scopeOwnerExecutorNodeContext as P, unavailableSignalOfFailure as Pi, sanitizeRuntimeStreamEvent as Pn, runAbortable as Pr, runAgentRounds as Pt, environmentReader as Q, mapSandboxEvent as Qi, DriverAttemptsExhaustedError as Qn, sandboxActProfileMaterialization as Qr, LEAF_CONTINUATION_TASK as Qt, runtimeGraphMetadataKey as R, detachedSnapshot as Ri, AUTHORITY_MARKERS as Rn, runSettledCommand as Rr, createSandboxLineage as Rt, workerTraceAnalysisStore as S, executableAgentSpecSnapshot as Si, buildRuntimeEventOtelSpans as Sn, isFiniteNumber as Sr, readCommittedJsonFile as St, readWorkerInteractiveBinding as T, runtimeFailureCause as Ti, flatOtelSpan as Tn, priceTokens as Tr, withJsonlFileLock as Tt, queueOf as U, meterUsageEvent as Ui, isPeerMailEnvelope as Un, assertProfileMaterialization as Ur, codeModeModelOutput as Ut, deriveNodeExecutionIdentity as V, errMessage as Vi, claimsAuthority as Vn, harnessInvocation as Vr, defaultSelectWinner as Vt, rollingDispatch as W, newUsageTotals as Wi, peerMailTools as Wn, assertProfileMaterializes as Wr, createCodeModeTools as Wt, prepareScopeRetainedOwnerSeatSwitch as X, resolveRedactor as Xi, isLiveNodeStatus as Xn, promptModelProfileMaterialization as Xr, resolveAgentEnvironmentProvider as Xt, recordScopeOwnerPause as Y, defaultRedactorIdentityMaterial as Yi, readWorkerProgress as Yn, promptControlProfileMaterialization as Yr, createAgentEnvironmentProviderRegistry as Yt, scopeRetainedOwnerResourceReader as Z, createSandboxToolPartState as Zi, isTerminalNodeStatus as Zn, renderUnsupported as Zr, providerAsExecutor as Zt, withDriverExecutor as _, runtimeOwnedPendingExecutorMaterialization as _i, WORKER_TRACE_PROPAGATION as _n, admitContinuationPolicy as _r, InMemorySpawnJournal as _t, assertRunParking as a, notifySandboxEventObserver as aa, authoredProfileDigest as ai, destroyInteractiveEnvironment as an, upstreamUnavailableSignal as ar, beginScopeRetainedOwnerDrive as at, isTraceAnalysisStore as b, unknownMaterializationReceipt as bi, buildLoopOtelSpans as bn, createContinuationKeeper as br, isNoEntError as bt, sleepScopeWait as c, awaitAbortable$1 as ca, knownExecutionBindingReceipt as ci, harnessTranscriptArtifact as cn, authoredSeatStages as cr, scopeRetainedOwnerRestorePoint as ct, runFinalizer as d, providerMessageText as da, providerAttemptEvidence as di, resolveHarnessTranscriptCapture as dn, CheckUnavailableError as dr, bindScopeRetainedOwnerProvider as dt, terminalTextFromSandboxEvent as ea, unsupportedProfileDimensions as ei, reconnectRetainedRun as en, abandonablePending as er, abandonScopeRetainedOwnerInvocation as et, runTree as f, recordRuntimeOwnedDriveHarnessProviderEvidence as fi, retainHarnessTranscript as fn, gateFactoryOnDeliverable as fr, scopeRetainedOwnerContext as ft, isDriverSpec as g, runtimeOwnedExecutorProviderEvidence as gi, createInPlaceCliExecutor as gn, CONTINUATIONS_DIR as gr, InMemoryResultBlobStore as gt, driverExecutorFactory as h, runtimeOwnedExecutorMaterialization as hi, createWorktreeCliExecutor as hn, verdictFromJudgeScore as hr, materializeTreeView as ht, RunParkedError as i, extractLlmCallEvent as ia, authoredAgentIdentity as ii, retainedCreateMaterial as in, undispatchedCredentialExit as ir, scopeRetainedOwnerResult as it, noteScopeOwnerPlannedExecution as j, jitteredMs as ji, createRuntimeEventCollector as jn, createPushTraceSource as jr, snapshotExecutorConfig as jt, FileSpawnJournal as k, retainedExecutorSeamKey as ki, padTraceId as kn, harnessUsageIsEmpty as kr, captureReusableExecutorConfig as kt, withRunParking as l, promptFromAgentTurnInput as la, knownMaterializationReceipt as li, persistHarnessTranscript as ln, seatExecutionProfile as lr, noteScopeRetainedOwnerCoordination as lt, driverChild as m, runtimeOwnedExecutorExecutionBinding as mi, openSlotGroup as mn, mapExecutorResult as mr, loadSpawnForest as mt, createSupervisor as n, createSandboxTurnEventCollector as na, attestRuntimeOwnedPendingExecutor as ni, startRetainedRun as nn, classifyDriverFailure as nr, prepareScopeRetainedOwnerTask as nt, bindScopeParkingDrain as o, sumSandboxUsage as oa, finalizeRuntimeOwnedPendingExecutor as oi, environmentGone as on, SeatChain as or, scopeRetainedOwnerTurnEnded as ot, createRootHandle as p, runtimeOwnedDriveHarnessProviderEvidence as pi, createWorkerSlots as pn, gateOnDeliverable as pr, scopeRetainedOwnerJournalRoot as pt, recordScopeOwnerBarrenPause as q, assertValidBudget as qi, DEFAULT_STALL_AFTER_MS as qn, fullProfileMaterialization as qr, createRouterTranscript as qt, assertResumeLimits as r, createSandboxUsageLedger as ra, attestRuntimeOwnedScopeOwner as ri, startRetainedRunInEnvironment as rn, summarizeDriverAttempts as rr, scopeRetainedOwnerPriorSpend as rt, readRunParking as s, decodeHarnessUsage as sa, inheritRuntimeOwnedExecutorAttestation as si, captureHarnessTranscript as sn, SeatChainExhaustedError as sr, reconcileScopeRetainedOwnerEnvironment as st, DEFAULT_MAX_DEPTH as t, canonicalStreamEventFromSandboxEvent as ta, worktreeCliProfileMaterialization as ti, recoverRetainedRun as tn, causedByPartialFailure as tr, consumeScopeRetainedOwnerResult as tt, bestDelivered as u, promptOptionsFromAgentTurnInput as ua, newExecutionAttemptId as ui, readHarnessTranscript as un, subscriptionUsageLimitSignal as ur, bindScopeRetainedOwnerEnvironmentId as ut, createScope as v, runtimeOwnedScopeOwnerRuntime as vi, createPropagatingTraceEmitter as vn, bestComposite as vr, FileResultBlobStore as vt, attachWorker as w, readSandboxOutcome as wi, createOtelExporter as wn, bridgeModelRouteRefusal as wr, upsertCommittedJsonLine as wt, parseWorkerToolTraceArtifact as x, executableAgentProfileSnapshot as xi, buildLoopSpanNodes as xn, failedItems as xr, prepareJsonlAppend as xt, replaySpawnTree as y, unknownExecutionBindingReceipt as yi, readTraceContextFromEnv as yn, checkVerdictOf as yr, appendCommittedJsonLine as yt, settledToIteration as z, contentAddress as zi, DEFAULT_PEER_MAIL_LIMITS as zn, runWorktreeHarness as zr, acquireSandbox as zt };
 
-//# sourceMappingURL=supervisor-DDy0aEtR.js.map
+//# sourceMappingURL=supervisor-wS9Ehz_x.js.map