@tangle-network/agent-runtime 0.348.1 → 0.350.2

package/dist/{supervise-BUOeThuB.js → supervise-CaeZcgAW.js}

@@ -1,15 +1,16 @@
-import { c as captureRunWriteContext, l as fenceRunWrite, m as __exportAll, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile } from "./record-events-D93DkpAx.js";
-import { $n as HarnessTurnFailedError, $r as sandboxProfileMaterialization, A as beginScopeOwnerAttempt, Ai as cappedDoublingMs, An as toOtelAttributes, At as createExecutor, B as assertRecursiveReservationPolicy, Bi as executorFailure, Bn as PEER_MAIL_WIRE_KEY, Cr as bridgeAdmissionRefusal, Ct as readCommittedJsonLines, Di as RetainedExecutionPendingError, En as generateSpanId, F as coordinationMcpAlias, Fn as INBOX_RECEIPT_KEY, G as meterRuntimeOwnedAccounting, Gr as controlProfileMaterialization, Ht as codeModeArguments, I as coordinationProfileToolPrefix, In as createInbox, Ir as bridgeRuntimeAttachmentsKey, J as recordScopeOwnerDriverAttempt, Jn as createActivityLog, Jr as profileMaterializationAxes$1, Jt as routerBrain, K as meterRuntimeOwnedProviderAttempt, Ki as spendFromUsageTotals, Kr as defineProfileMaterializationContract, Kt as toolResultText, L as providerVisibleProfile, Lr as bridgeStopSignalKey, M as recordScopeOwnerMaterialization, Mi as unavailablePauseMs, Mr as RunCancellationReason, N as restoreScopeOwnerAcceptedExecution, Ni as unavailableResumeAt, Nr as linkAbort, Oi as registerRetainedExecutorPreparation, Ot as bindReusableExecutorExecutionId, P as scopeOwnerExecutorNodeContext, Pr as runAbortable, Qn as DriverAttemptsExhaustedError, R as runtimeGraphMetadataKey, Ri as detachedSnapshot, St as readCommittedJsonFile, Tt as withJsonlFileLock, Ui as meterUsageEvent, Un as isPeerMailEnvelope, Ur as assertProfileMaterialization, Ut as codeModeModelOutput, V as deriveNodeExecutionIdentity, Vi as errMessage, Wi as newUsageTotals, Wt as createCodeModeTools, X as prepareScopeRetainedOwnerSeatSwitch, Xn as isLiveNodeStatus, Xr as promptModelProfileMaterialization, Xt as resolveAgentEnvironmentProvider, Y as recordScopeOwnerPause, Yr as promptControlProfileMaterialization, Z as scopeRetainedOwnerResourceReader, Zn as isTerminalNodeStatus, Zr as renderUnsupported, _i as runtimeOwnedPendingExecutorMaterialization, _n as WORKER_TRACE_PROPAGATION, _r as admitContinuationPolicy, a as assertRunParking, ar as upstreamUnavailableSignal, at as beginScopeRetainedOwnerDrive, br as createContinuationKeeper, bt as isNoEntError, c as sleepScopeWait, cr as authoredSeatStages, ct as scopeRetainedOwnerRestorePoint, d as runFinalizer, di as providerAttemptEvidence, dr as CheckUnavailableError, dt as bindScopeRetainedOwnerProvider, ei as unsupportedProfileDimensions, er as abandonablePending, et as abandonScopeRetainedOwnerInvocation, f as runTree, fi as recordRuntimeOwnedDriveHarnessProviderEvidence, fr as gateFactoryOnDeliverable, ft as scopeRetainedOwnerContext, g as isDriverSpec, gi as runtimeOwnedExecutorProviderEvidence, gr as CONTINUATIONS_DIR, h as driverExecutorFactory, hi as runtimeOwnedExecutorMaterialization, i as RunParkedError, ii as authoredAgentIdentity, ir as undispatchedCredentialExit, it as scopeRetainedOwnerResult, j as noteScopeOwnerPlannedExecution, ji as jitteredMs, jt as snapshotExecutorConfig, ki as retainedExecutorSeamKey, kt as captureReusableExecutorConfig, l as withRunParking, ln as persistHarnessTranscript, lr as seatExecutionProfile, lt as noteScopeRetainedOwnerCoordination, m as driverChild, mi as runtimeOwnedExecutorExecutionBinding, n as createSupervisor, nr as classifyDriverFailure, nt as prepareScopeRetainedOwnerTask, o as bindScopeParkingDrain, or as SeatChain, ot as scopeRetainedOwnerTurnEnded, p as createRootHandle, pi as runtimeOwnedDriveHarnessProviderEvidence, pt as scopeRetainedOwnerJournalRoot, q as recordScopeOwnerBarrenPause, qi as assertValidBudget, qr as fullProfileMaterialization, qt as createRouterTranscript, ri as attestRuntimeOwnedScopeOwner, rr as summarizeDriverAttempts, rt as scopeRetainedOwnerPriorSpend, si as inheritRuntimeOwnedExecutorAttestation, sr as SeatChainExhaustedError, st as reconcileScopeRetainedOwnerEnvironment, ti as worktreeCliProfileMaterialization, tr as causedByPartialFailure, tt as consumeScopeRetainedOwnerResult, u as bestDelivered, un as readHarnessTranscript, ut as bindScopeRetainedOwnerEnvironmentId, vi as runtimeOwnedScopeOwnerRuntime, vr as bestComposite, wn as createOtelExporter, wr as bridgeModelRouteRefusal, wt as upsertCommittedJsonLine, x as parseWorkerToolTraceArtifact, xt as prepareJsonlAppend, yr as checkVerdictOf, zi as contentAddress } from "./supervisor-DDy0aEtR.js";
-import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
-import { Et as isDeadlineAbortReason, K as chargedTokens, Ot as teardownExecutor, W as addSpend, X as errorMessage, _t as withBudgetResources, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, gt as resourceTelemetry, kt as teardownSurfaces, mt as addResourceSpend, nt as promptCacheTokenClasses, ot as sleep, ut as unmeteredSpend, xt as DEFAULT_SUCCESSFUL_SHUTDOWN_MS } from "./sandbox-profile-compat-_fEtHPCj.js";
-import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-CyCUwHed.js";
-import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { c as budgetOverspendText, d as safeJsonText, f as createFileRunContext, l as normalizeAnalyzeOnSettle, m as withRunContext, n as createCoordinationToolsForManager, o as createCancelAcknowledger, p as createInMemoryRunContext, s as createSteerAcknowledger, t as createCoordinationTools, u as coordinationVerbNames } from "./coordination-manager-Bm6leXc6.js";
-import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-CzFhQGMa.js";
-import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-XV4aJwoQ.js";
+import { c as captureRunWriteContext, l as fenceRunWrite, m as __exportAll, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile } from "./record-events-B2GUgYdz.js";
+import { $n as HarnessTurnFailedError, A as beginScopeOwnerAttempt, Ai as registerRetainedExecutorPreparation, An as toOtelAttributes, At as createExecutor, B as assertRecursiveReservationPolicy, Bi as detachedSnapshot, Bn as PEER_MAIL_WIRE_KEY, Cr as bridgeAdmissionRefusal, Ct as readCommittedJsonLines, En as generateSpanId, F as coordinationMcpAlias, Fi as unavailableResumeAt, Fn as INBOX_RECEIPT_KEY, G as meterRuntimeOwnedAccounting, Gi as meterUsageEvent, Hi as executorFailure, Ht as codeModeArguments, I as coordinationProfileToolPrefix, In as createInbox, Ir as bridgeRuntimeAttachmentsKey, J as recordScopeOwnerDriverAttempt, Ji as spendFromUsageTotals, Jn as createActivityLog, Jr as fullProfileMaterialization, Jt as routerBrain, K as meterRuntimeOwnedProviderAttempt, Ki as newUsageTotals, Kr as controlProfileMaterialization, Kt as toolResultText, L as providerVisibleProfile, Lr as bridgeStopSignalKey, M as recordScopeOwnerMaterialization, Mi as cappedDoublingMs, Mr as RunCancellationReason, N as restoreScopeOwnerAcceptedExecution, Ni as jitteredMs, Nr as linkAbort, Ot as bindReusableExecutorExecutionId, P as scopeOwnerExecutorNodeContext, Pi as unavailablePauseMs, Pr as runAbortable, Qn as DriverAttemptsExhaustedError, Qr as renderUnsupported, R as runtimeGraphMetadataKey, St as readCommittedJsonFile, Tt as withJsonlFileLock, Ui as errMessage, Un as isPeerMailEnvelope, Ut as codeModeModelOutput, V as deriveNodeExecutionIdentity, Vi as contentAddress, Wr as assertProfileMaterialization, Wt as createCodeModeTools, X as prepareScopeRetainedOwnerSeatSwitch, Xn as isLiveNodeStatus, Xr as promptControlProfileMaterialization, Xt as resolveAgentEnvironmentProvider, Y as recordScopeOwnerPause, Yi as assertValidBudget, Yr as profileMaterializationAxes$1, Z as scopeRetainedOwnerResourceReader, Zn as isTerminalNodeStatus, Zr as promptModelProfileMaterialization, _i as runtimeOwnedExecutorProviderEvidence, _n as WORKER_TRACE_PROPAGATION, _r as admitContinuationPolicy, a as assertRunParking, ai as authoredAgentIdentity, ar as upstreamUnavailableSignal, at as beginScopeRetainedOwnerDrive, br as createContinuationKeeper, bt as isNoEntError, c as sleepScopeWait, ci as inheritRuntimeOwnedExecutorAttestation, cr as authoredSeatStages, ct as scopeRetainedOwnerRestorePoint, d as runFinalizer, dr as CheckUnavailableError, dt as bindScopeRetainedOwnerProvider, ei as sandboxProfileMaterialization, er as abandonablePending, et as abandonScopeRetainedOwnerInvocation, f as runTree, fi as providerAttemptEvidence, fr as gateFactoryOnDeliverable, ft as scopeRetainedOwnerContext, g as isDriverSpec, gi as runtimeOwnedExecutorMaterialization, gr as CONTINUATIONS_DIR, h as driverExecutorFactory, hi as runtimeOwnedExecutorExecutionBinding, i as RunParkedError, ii as attestRuntimeOwnedScopeOwner, ir as undispatchedCredentialExit, it as scopeRetainedOwnerResult, j as noteScopeOwnerPlannedExecution, ji as retainedExecutorSeamKey, jt as snapshotExecutorConfig, ki as RetainedExecutionPendingError, kt as captureReusableExecutorConfig, l as withRunParking, ln as persistHarnessTranscript, lr as seatExecutionProfile, lt as noteScopeRetainedOwnerCoordination, m as driverChild, mi as runtimeOwnedDriveHarnessProviderEvidence, n as createSupervisor, ni as worktreeCliProfileMaterialization, nr as classifyDriverFailure, nt as prepareScopeRetainedOwnerTask, o as bindScopeParkingDrain, or as SeatChain, ot as scopeRetainedOwnerTurnEnded, p as createRootHandle, pi as recordRuntimeOwnedDriveHarnessProviderEvidence, pt as scopeRetainedOwnerJournalRoot, q as recordScopeOwnerBarrenPause, qr as defineProfileMaterializationContract, qt as createRouterTranscript, rr as summarizeDriverAttempts, rt as scopeRetainedOwnerPriorSpend, sr as SeatChainExhaustedError, st as reconcileScopeRetainedOwnerEnvironment, ti as unsupportedProfileDimensions, tr as causedByPartialFailure, tt as consumeScopeRetainedOwnerResult, u as bestDelivered, un as readHarnessTranscript, ut as bindScopeRetainedOwnerEnvironmentId, vi as runtimeOwnedPendingExecutorMaterialization, vr as bestComposite, wn as createOtelExporter, wr as bridgeModelRouteRefusal, wt as upsertCommittedJsonLine, x as parseWorkerToolTraceArtifact, xt as prepareJsonlAppend, yi as runtimeOwnedScopeOwnerRuntime, yr as checkVerdictOf } from "./supervisor-C1OePYE-.js";
+import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-wuhGvpE3.js";
+import { At as teardownSurfaces, Dt as isDeadlineAbortReason, G as addSpend, St as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, Z as errorMessage, _t as resourceTelemetry, dt as unmeteredSpend, ft as withTimeout, ht as addResourceSpend, kt as teardownExecutor, pt as zeroSpend, q as chargedTokens, rt as promptCacheTokenClasses, st as sleep, tt as isAsyncIterable, vt as withBudgetResources } from "./sandbox-profile-compat-BxMQ1VXv.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, l as profileProviderModel, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile, v as harnessRunsAgent } from "./model-policy-GSxWwP-b.js";
+import { t as composeRuntimeHooks } from "./runtime-hooks-CsW2pfFk.js";
+import { c as createCancelAcknowledger, d as normalizeAnalyzeOnSettle, f as coordinationVerbNames, g as withRunContext, h as createInMemoryRunContext, l as createSteerAcknowledger, m as createFileRunContext, n as createCoordinationToolsForManager, o as resolveJsonPointer, p as safeJsonText, t as createCoordinationTools, u as budgetOverspendText } from "./coordination-manager-BkVfWlMz.js";
+import { c as writeRunCancellation, i as readRunCancellation, r as readRunCancelRequest, s as watchRunCancellation, t as applyRunCancellation } from "./run-cancellation-BLy_Zz-w.js";
+import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-CwuYeW_Z.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { isRecord } from "@tangle-network/agent-core";
+import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { closeSync, constants, fsyncSync, openSync, writeSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
@@ -18,7 +19,7 @@ import { isMaterializerHarness } from "@tangle-network/agent-profile-materialize
 import { createServer } from "node:http";
 import { ATTR, agentIdentityAttributes } from "@tangle-network/agent-trace-contract";
 import { withProfileKb } from "@tangle-network/agent-interface/profile-kb";
-//#region src/runtime/supervise/supervise-identity.ts
+// src/runtime/supervise/supervise-identity.ts
 function externalExecutionId(kind, identity) {
 	return `${kind}-${canonicalCandidateDigest({
 		kind,
@@ -107,8 +108,7 @@ function coordinationEventId(context, event) {
 		event: detachedSnapshot(durableEvent, "supervise coordination event identity")
 	});
 }
-//#endregion
-//#region src/runtime/supervise/supervise-option-capture.ts
+// src/runtime/supervise/supervise-option-capture.ts
 const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"allowedModels",
 	"analysts",
@@ -259,11 +259,13 @@ function captureSuperviseOptions(opts) {
 	assertNoUncapturedExecutableOption(decisionData);
 	const capturedData = detachedSnapshot(decisionData, "supervise options");
 	const capturedCoordination = coordination === void 0 ? void 0 : (() => {
-		const { publicUrl, onAudit, ...configuration } = coordination;
+		const { publicUrl, onAudit, onReadReady, onControlReady, ...configuration } = coordination;
 		return Object.freeze({
 			...detachedSnapshot(configuration, "supervise coordination configuration"),
 			...publicUrl === void 0 ? {} : { publicUrl },
-			...onAudit === void 0 ? {} : { onAudit }
+			...onAudit === void 0 ? {} : { onAudit },
+			...onReadReady === void 0 ? {} : { onReadReady },
+			...onControlReady === void 0 ? {} : { onControlReady }
 		});
 	})();
 	const capturedBackend = backend === void 0 ? void 0 : snapshotExecutorConfig(backend);
@@ -356,8 +358,7 @@ function captureSuperviseOptions(opts) {
 		...otel === void 0 ? {} : { otel }
 	});
 }
-//#endregion
-//#region src/runtime/supervise/otel-spans.ts
+// src/runtime/supervise/otel-spans.ts
 /**
 * Supervisor tree → OTLP spans. OPT-IN, off by default.
 *
@@ -737,7 +738,8 @@ function assignBudget(attrs, value) {
 *  default) is DERIVED by content address from namespace and run id, so a resumed run rejoins its trace. */
 function normalizeTraceId(traceId, runId, namespace) {
 	if (traceId && /^[0-9a-f]{32}$/i.test(traceId)) return traceId.toLowerCase();
-	return contentAddress(traceId ?? (namespace === void 0 ? runId : `${namespace}\u0000${runId}`)).slice(7, 39);
+	const source = traceId ?? (namespace === void 0 ? runId : `${namespace}\u0000${runId}`);
+	return contentAddress(source).slice(7, 39);
 }
 function msToNano(ms) {
 	return (BigInt(Number.isFinite(ms) ? Math.floor(ms) : 0) * 1000000n).toString();
@@ -751,12 +753,11 @@ function str(value) {
 function truncate(value) {
 	return value.length > MAX_DETAIL_CHARS ? `${value.slice(0, MAX_DETAIL_CHARS)}…` : value;
 }
-//#endregion
-//#region src/runtime/supervise/root-stream.ts
+// src/runtime/supervise/root-stream.ts
 /**
 * The root manager's own provider stream, retained where Runtime owns it.
 *
-* Measured motive (agent-runtime#1233, 2026-09-15): a CHILD's full event stream — reasoning, text,
+* Measured motive (agent-runtime#1233): a CHILD's full event stream — reasoning, text,
 * and tool parts, 28k to 76k reasoning characters per child — is retained in the blob its
 * `settled` record names as `outRef`. The ROOT's stream reached nobody: `driveHarnessFromBackend`
 * drained the root executor for accounting and discarded every `progress` event, and on a
@@ -773,7 +774,7 @@ function truncate(value) {
 *
 * Durability boundary: each line is written synchronously to an `O_APPEND` descriptor before the
 * next event is drained, and the file is fsynced at every drive-attempt boundary and at close, not
-* per line. Measured 2026-09-15 on this host's APFS: an fsync per line cost 7.1 ms per event over
+* per line. An fsync per line cost 7.1 ms per event over
 * 1,000 events and 8.1 ms over 5,000 (~80 s for a root emitting ten thousand text deltas, all of
 * it serialized inside the drain loop that also meters the budget); an async `FileHandle.write`
 * still cost 0.9 to 1.1 ms per line in the thread pool the children's journal writes share; a
@@ -927,8 +928,7 @@ async function readRootStream(runDir) {
 	}
 	return records;
 }
-//#endregion
-//#region src/runtime/anytime.ts
+// src/runtime/anytime.ts
 /**
 * The best-so-far fold — the ONE definition of "how good was the run after k results", shared by
 * the post-run anytime report below and by the LIVE progress-based stop rules
@@ -1075,8 +1075,7 @@ function renderAnytimeTable(report) {
 	}
 	return lines.join("\n");
 }
-//#endregion
-//#region src/runtime/supervise/stop-rules.ts
+// src/runtime/supervise/stop-rules.ts
 /**
 *
 * PROGRESS-BASED STOP RULES — end a long-horizon run for the right reason.
@@ -1273,8 +1272,7 @@ function progressStop(tracker, rule, ledger, scope, now, stallAfterMs) {
 	});
 	return tracker.evaluate(rule, scope, stallAfterMs !== void 0 ? { stallAfterMs } : void 0);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-agent-options.ts
+// src/runtime/supervise/supervise-agent-options.ts
 /** A stop rule as a function, or the declared plateau form a record carries as data. */
 function stopRuleOf(rule) {
 	if (typeof rule === "function") return rule;
@@ -1291,8 +1289,7 @@ function supervisorTurnOptions(options) {
 		...options.onDriverAttempt ? { onDriverAttempt: options.onDriverAttempt } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/graph-edge-ledger.ts
+// src/runtime/supervise/graph-edge-ledger.ts
 var GraphEdgeLedger = class {
 	journal;
 	runId;
@@ -1407,8 +1404,7 @@ var GraphEdgeLedger = class {
 	}
 };
 const pendingKey = (parentNodeId, assignmentId) => `${parentNodeId ?? ""}\u0000${assignmentId}`;
-//#endregion
-//#region src/runtime/supervise/prompt-registry.ts
+// src/runtime/supervise/prompt-registry.ts
 /**
 *
 * The kernel prompt registry — versioned prompt text as DATA, addressed by `PromptHandle`.
@@ -1540,8 +1536,7 @@ function kernelPromptRegistry() {
 		dumbContinuationPassPrompt
 	]);
 }
-//#endregion
-//#region src/runtime/supervise/graph-topology.ts
+// src/runtime/supervise/graph-topology.ts
 /**
 * `run_graph`: a graph a manager starts as one subtask. The topology is read from model-written
 * data or a stored graph, validated exactly as `runGraph` validates a root graph, and carried on
@@ -1848,8 +1843,7 @@ function graphSubtaskOf(profile) {
 	const raw = profile.metadata?.[runtimeGraphMetadataKey];
 	return raw === void 0 ? void 0 : parseGraphSubtaskTopology(raw);
 }
-//#endregion
-//#region src/runtime/supervise/graph-flow.ts
+// src/runtime/supervise/graph-flow.ts
 /** A flow node's usable settle matched no routes edge leaving it (`unrouted`), or a fired edge named
 *  a node that still had a running worker (`target-live`). The flow spawned nothing more; the full
 *  evidence rides on the error, shaped like `GraphEdgeCapError`. */
@@ -2330,8 +2324,7 @@ function createFlowRun() {
 		failure
 	};
 }
-//#endregion
-//#region src/runtime/supervise/graph-overlay.ts
+// src/runtime/supervise/graph-overlay.ts
 /**
 * The graph layer over the managers that run one `AgentGraph`.
 *
@@ -2632,8 +2625,7 @@ function ledgerAnalyzes(ledger, edge, outcome, bytes, reason, workerId) {
 		...workerId !== void 0 ? { workerId } : {}
 	}, true);
 }
-//#endregion
-//#region src/runtime/supervise/flow-brain.ts
+// src/runtime/supervise/flow-brain.ts
 const flowBrains = /* @__PURE__ */ new WeakSet();
 /**
 * The brain of a flow graph's runtime-owned root manager. It never calls a model: every turn
@@ -2654,8 +2646,7 @@ function runtimeFlowBrain() {
 function isRuntimeFlowBrain(brain) {
 	return flowBrains.has(brain);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-budget.ts
+// src/runtime/supervise/supervise-budget.ts
 /**
 * Which of a driver's budget channels are spent, with their numbers, or `undefined` while none is.
 * The bare 'supervisor budget exhausted' named no channel: on queens21-h22-capture-root-2-20261019c
@@ -2736,8 +2727,7 @@ function unmeteredOwnerCache(total, committed) {
 		...total.cacheBreakdownKnown === false ? { cacheBreakdownKnown: false } : {}
 	};
 }
-//#endregion
-//#region src/runtime/tool-loop.ts
+// src/runtime/tool-loop.ts
 /**
 * THE canonical agentic tool-loop. One inference turn → run any requested tools → fold the
 * results back as `tool` messages → repeat, until the model answers without a tool call or the
@@ -2975,8 +2965,7 @@ async function runBrainLoop(opts) {
 		...retainedCodeMode()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/driver-budget-guards.ts
+// src/runtime/supervise/driver-budget-guards.ts
 /** Spawn-progress is impossible: the pool can't afford another worker AND nothing is in flight to
 *  await. A long-horizon driver bounded by the conserved pool stops here instead of spinning (the
 *  in-loop budget guard the turn cap alone never provided). Checks BOTH conserved channels: tokens
@@ -3016,8 +3005,7 @@ function deadlinePassed(scope, now) {
 	const b = scope.budget;
 	return b.deadlineMs > 0 && now() >= b.deadlineMs;
 }
-//#endregion
-//#region src/runtime/supervise/driver-prompt-cache.ts
+// src/runtime/supervise/driver-prompt-cache.ts
 /** The USD-denominated members of {@link PromptCacheUsage} — the schema, not a guess. Every
 *  other known member (`readTokens`, `writeTokens`, `missTokens`) is a token COUNT. */
 const PROMPT_CACHE_USD_FIELDS = /* @__PURE__ */ new Set(["readSavingsUsd"]);
@@ -3133,8 +3121,7 @@ function safeJson(v) {
 		return String(v);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/driver-tool-dispatch.ts
+// src/runtime/supervise/driver-tool-dispatch.ts
 /** Run a work tool. A throw is data to the driver (it can recover next turn), not a crash — fold
 *  the error back as a string result. null/undefined passes through (the caller treats it as "not
 *  handled" and falls to the coordination dispatch). */
@@ -3152,14 +3139,13 @@ async function runTool(tool, args) {
 		return { error: errorMessage(e) };
 	}
 }
-//#endregion
-//#region src/runtime/supervise/wake.ts
+// src/runtime/supervise/wake.ts
 /** How long a waiting manager hears nothing before Runtime wakes it to reconsider: 15 min. */
-const DEFAULT_WAKE_HEARTBEAT_MS = 15 * 6e4;
+const DEFAULT_WAKE_HEARTBEAT_MS = 9e5;
 /** How long a wake waits for more events after its first, while other workers still run: 2 s. */
 const DEFAULT_WAKE_DEBOUNCE_MS = 2e3;
 /** How long before its deadline a manager is woken once to submit its best result: 15 min. */
-const DEFAULT_DEADLINE_WARNING_MS = 15 * 6e4;
+const DEFAULT_DEADLINE_WARNING_MS = 9e5;
 /** The instruction every manager receives about waiting. */
 const WAIT_BY_ENDING_TURN = "When you are waiting for workers, end your turn. You will be woken with what happened: a worker settled, a finding, a message or answer from your lead, or the deadline approaching.";
 function resolveWakePolicy(policy) {
@@ -3218,8 +3204,7 @@ function composeWakeInput(wake, context) {
 	lines.push("", WAIT_BY_ENDING_TURN);
 	return lines.join("\n");
 }
-//#endregion
-//#region src/runtime/supervise/driver-brain-turns.ts
+// src/runtime/supervise/driver-brain-turns.ts
 /** How often a waiting driver applies operator cancels and steers between its turns. */
 const WAITING_CONTROL_POLL_MS = 5e3;
 /** The evidence fault a brain reply carries, if any: identity, transport count, or prompt cache. */
@@ -3466,8 +3451,7 @@ var DriverBrainTurns = class {
 		for (const lease of this.leases.splice(0)) lease.release();
 	}
 };
-//#endregion
-//#region src/runtime/supervise/driver-tool-surface.ts
+// src/runtime/supervise/driver-tool-surface.ts
 /** Mount this manager's coordination tools over `scope` and select exactly the granted tools. */
 async function openDriverToolSurface(opts, scope) {
 	const ownerReader = opts.spawnResourceReader ?? (opts.spawnResourceRoot === void 0 ? scopeRetainedOwnerResourceReader(scope) : void 0);
@@ -3548,8 +3532,7 @@ async function openDriverToolSurface(opts, scope) {
 		})
 	};
 }
-//#endregion
-//#region src/runtime/supervise/driver-brain-agent.ts
+// src/runtime/supervise/driver-brain-agent.ts
 /**
 * Build the intelligent recursive driver. Its `act` is the LLM tool-loop; spawn it as a
 * `driverChild` (`driver-executor.ts`) to run it inside a nested scope, recursively.
@@ -3699,20 +3682,19 @@ function driverInitialMessages(opts, system, task, scope) {
 		}] : []
 	];
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-agent-profile.ts
+// src/runtime/supervise/supervisor-agent-profile.ts
 /**
 * The completion check of a managed child that no `resolveDeliverable` gave a check of its own, a
 * `run_graph` node included: its accepted submission settles it, and the result goes to the manager
 * that assigned the task. The run's own check judges the run's result, never a child's narrower
 * assignment. Held to the run's check, a child's submission is refused for as long as the run's
 * is: every node of test-canary-graph-tools-20261017a, and the `delay` child of
-* test-retained-root-wake-20261018b (2026-10-18: "Expected: the canary runs to its deadline"), was
+* test-retained-root-wake-20261018b ("Expected: the canary runs to its deadline"), was
 * refused at submit_result, never settled, and its manager was never woken with it.
 *
 * It is the one check a harness manager may hold without a continuation policy: it accepts every
 * submission, so there is nothing to send the child back for. test-canary-graph-tools-20261018c and
-* -d (2026-10-18) had every harness-run graph lead refused at spawn until this exemption.
+* -d had every harness-run graph lead refused at spawn until this exemption.
 */
 const ownSubmissionDeliverable = Object.freeze({
 	describe: "the result your task asks for; it goes to the manager that assigned the task, and the run's own check judges that manager's result",
@@ -3770,7 +3752,11 @@ function assertRouterArmResourcePolicy(profile) {
 */
 function resolveSupervisorSystemPrompt(profile) {
 	const promptSystem = profile.prompt?.systemPrompt;
-	const lines = [...profile.prompt?.instructions ?? [], ...resourceInstructionLines(profile.resources?.instructions)];
+	const lines = [
+		...profile.prompt?.appendSystemPrompt === void 0 ? [] : [profile.prompt.appendSystemPrompt],
+		...profile.prompt?.instructions ?? [],
+		...resourceInstructionLines(profile.resources?.instructions)
+	];
 	if (lines.length === 0) return promptSystem;
 	return (promptSystem !== void 0 ? [promptSystem, ...lines] : lines).join("\n");
 }
@@ -3780,8 +3766,7 @@ function resolveSupervisorModelId(profile) {
 	return concreteProfileModel(profile);
 }
 /** Listener, authenticated remote endpoint, and bounded request policy for one manager. */
-//#endregion
-//#region src/runtime/supervise/supervisor-coordination-observers.ts
+// src/runtime/supervise/supervisor-coordination-observers.ts
 /** Forward the same declared observer routes to router and external manager coordination. */
 function supervisorCoordinationObservers(deps) {
 	return {
@@ -3796,13 +3781,19 @@ function supervisorCoordinationObservers(deps) {
 		...deps.stallAfterMs !== void 0 ? { stallAfterMs: deps.stallAfterMs } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-credentials.ts
+// src/runtime/supervise/coordination-credentials.ts
 /**
 * The credentials one coordination listener accepts: the manager's bearer token (random, or an HMAC
-* claim set under caller-owned signing keys), the separate read-only token, rotation and the
+* claim set under caller-owned signing keys), separate read-only and control tokens, rotation and the
 * revocation of every token it replaces.
 */
+/** Exact operator authority, independent of the manager's authored tool grants. */
+const coordinationControlToolNames = Object.freeze([
+	"observe_agent",
+	"read_journal",
+	"steer_agent",
+	"cancel_worker"
+]);
 /** The bearer token in an `Authorization` header, or an empty buffer. */
 function bearerToken(authorization) {
 	return typeof authorization === "string" && authorization.startsWith("Bearer ") ? Buffer.from(authorization.slice(7)) : Buffer.alloc(0);
@@ -3815,6 +3806,7 @@ function createCoordinationCredentials(input) {
 		keys: { ...auth.signingKeys.keys }
 	} : void 0;
 	let readerToken = Buffer.from(randomBytes(32).toString("base64url"));
+	let controllerToken = Buffer.from(randomBytes(32).toString("base64url"));
 	let token;
 	let expiresAt;
 	let headers = Object.freeze({});
@@ -3844,6 +3836,7 @@ function createCoordinationCredentials(input) {
 			text = `${payload}.${createHmac("sha256", signingKeys.keys[signingKeys.activeKeyId]).update(payload).digest("base64url")}`;
 		}
 		readerToken = Buffer.from(randomBytes(32).toString("base64url"));
+		controllerToken = Buffer.from(randomBytes(32).toString("base64url"));
 		token = Buffer.from(text);
 		headers = Object.freeze({ Authorization: `Bearer ${text}` });
 	};
@@ -3864,6 +3857,7 @@ function createCoordinationCredentials(input) {
 			return false;
 		}
 	};
+	const capabilityRefused = (supplied, expected) => input.isClosed() || supplied.length !== expected.length || !timingSafeEqual(supplied, expected) || expiresAt !== void 0 && expiresAt <= Date.now();
 	return {
 		rotate,
 		setAudience: (next) => {
@@ -3873,7 +3867,11 @@ function createCoordinationCredentials(input) {
 			if (input.scopeSignal.aborted) return "scope-stopped";
 			return valid(supplied) ? void 0 : "credential-refused";
 		},
-		readerRefused: (supplied) => supplied.length !== readerToken.length || !timingSafeEqual(supplied, readerToken) || expiresAt !== void 0 && expiresAt <= Date.now(),
+		readerRefused: (supplied) => input.scopeSignal.aborted || input.lifetimeSignal?.aborted === true || capabilityRefused(supplied, readerToken),
+		controllerRefused: (supplied) => {
+			if (input.scopeSignal.aborted || input.lifetimeSignal?.aborted) return "scope-stopped";
+			return capabilityRefused(supplied, controllerToken) ? "credential-refused" : void 0;
+		},
 		get headers() {
 			return headers;
 		},
@@ -3882,11 +3880,13 @@ function createCoordinationCredentials(input) {
 		},
 		get readerToken() {
 			return readerToken;
+		},
+		get controllerHeaders() {
+			return Object.freeze({ Authorization: `Bearer ${controllerToken.toString()}` });
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-http.ts
+// src/runtime/supervise/coordination-http.ts
 /** The JSON-RPC error a refusal carries. MCP clients put a non-2xx body into the error the agent
 *  sees, so without it the agent reads only `Error POSTing to endpoint:` and a status at best. The
 *  messages are fixed text: never a credential, a request body or an arbitrary error string. */
@@ -3930,7 +3930,7 @@ function coordinationHttpLimits(options) {
 	const requestTimeoutMs = positive("requestTimeoutMs", options.requestTimeoutMs, 9e4);
 	if (requestTimeoutMs > 2147483647) throw new ConfigError("coordination requestTimeoutMs exceeds the timer limit");
 	return {
-		maxRequestBytes: positive("maxRequestBytes", options.maxRequestBytes, 1024 * 1024),
+		maxRequestBytes: positive("maxRequestBytes", options.maxRequestBytes, 1048576),
 		requestTimeoutMs,
 		maxConcurrentRequests: positive("maxConcurrentRequests", options.maxConcurrentRequests, 32),
 		requestsPerMinute: positive("requestsPerMinute", options.requestsPerMinute, 600),
@@ -4139,8 +4139,7 @@ function coordinationHttpHandler(input) {
 		});
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-mcp-listener.ts
+// src/runtime/supervise/coordination-mcp-listener.ts
 /**
 * The HTTP side of one coordination server: which hosts and paths it answers, who may call each
 * (manager, read-only observer, one peer-mail capability), and the public address it advertises.
@@ -4151,6 +4150,7 @@ function openCoordinationListenerState() {
 		audiences: /* @__PURE__ */ new Set(),
 		paths: /* @__PURE__ */ new Set(["/mcp"]),
 		readPaths: /* @__PURE__ */ new Set(),
+		controlPaths: /* @__PURE__ */ new Set(),
 		mailPaths: /* @__PURE__ */ new Set()
 	};
 }
@@ -4190,6 +4190,31 @@ function readOnlyHandler(ctx, coord) {
 		handle: (message) => readMcp.handle(message)
 	});
 }
+/** Operator access calls the same owned-worker handlers, with no spawn/submit/stop authority. */
+function controlHandler(ctx, coord) {
+	const toolNames = new Set(coordinationControlToolNames);
+	const controlMcp = createStdioToolServer({
+		serverName: "supervisor-control",
+		serverVersion: "1",
+		tools: coord.tools.filter((tool) => toolNames.has(tool.name))
+	});
+	return coordinationHttpHandler({
+		options: ctx.opts,
+		identity: ctx.identity,
+		toolNames,
+		backgroundActions: () => 0,
+		authorize: (req) => {
+			const refused = authority(ctx, req);
+			if (refused) return refused;
+			const credential = ctx.credentials.controllerRefused(bearerToken(req.headers.authorization));
+			return credential === void 0 ? void 0 : {
+				status: 401,
+				reason: credential
+			};
+		},
+		handle: (message) => controlMcp.handle(message)
+	});
+}
 function managerHandler(ctx, mcp, servedTools, background) {
 	return coordinationHttpHandler({
 		options: ctx.opts,
@@ -4244,10 +4269,12 @@ function peerMailHandler(ctx, coord, capabilityId) {
 function createCoordinationListener(ctx, bound) {
 	const { coord } = bound;
 	const readHandler = readOnlyHandler(ctx, coord);
+	const operatorHandler = controlHandler(ctx, coord);
 	const peerHandlers = /* @__PURE__ */ new Map();
 	const mainHandler = managerHandler(ctx, bound.mcp, bound.servedTools, bound.background);
 	return createServer((req, res) => {
 		if (ctx.state.readPaths.has(req.url ?? "")) return readHandler(req, res);
+		if (ctx.state.controlPaths.has(req.url ?? "")) return operatorHandler(req, res);
 		for (const base of ctx.state.mailPaths) {
 			if (!(req.url ?? "").startsWith(base + "/")) continue;
 			const capabilityId = (req.url ?? "").slice(base.length + 1);
@@ -4266,8 +4293,7 @@ function createCoordinationListener(ctx, bound) {
 		return mainHandler(req, res);
 	});
 }
-//#endregion
-//#region src/runtime/supervise/single-flight-tools.ts
+// src/runtime/supervise/single-flight-tools.ts
 /**
 * Serve method-supplied supervisor tools on the coordination MCP as single-flight, fenced calls.
 *
@@ -4378,8 +4404,7 @@ function toolCallReceipt(tool, receipt, elapsedMs) {
 		instruction: `${tool} is still running; nothing failed. Do not call it again: its result arrives with receipt ${receipt} when you are next woken. Continue other work, or end your turn to wait.`
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-mcp-tools.ts
+// src/runtime/supervise/coordination-mcp-tools.ts
 /**
 * Which tools one coordination server serves: the options its coordination tools are built from,
 * and the granted subset of coordination verbs and node tools, fenced and single-flight.
@@ -4463,9 +4488,8 @@ function bindServedTools(opts, coord, fenceMs) {
 		background: () => nodeTools.background() + fencedVerbs.background()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/coordination-preflight.ts
-const MAX_RESPONSE_BYTES = 1024 * 1024;
+// src/runtime/supervise/coordination-preflight.ts
+const MAX_RESPONSE_BYTES = 1048576;
 var CoordinationPreflightError = class extends ConfigError {
 	constructor(reason) {
 		super(`coordination public endpoint preflight failed: ${reason}`);
@@ -4554,8 +4578,7 @@ async function preflightPublicCoordination(input) {
 		linked.release();
 	}
 }
-//#endregion
-//#region src/runtime/supervise/coordination-mcp.ts
+// src/runtime/supervise/coordination-mcp.ts
 /** Hosts that reach only this machine (incl. IPv4-mapped and bracketed IPv6 spellings). A name not
 *  recognizably loopback counts as REMOTE: whether it resolves to loopback is unknowable here. */
 function isLoopbackHost(host) {
@@ -4576,6 +4599,7 @@ function assertCoordinationTransport(options) {
 		for (const [id, key] of Object.entries(signingKeys.keys)) if (!/^[A-Za-z0-9_-]{1,64}$/.test(id) || typeof key !== "string" || Buffer.byteLength(key) < 32) throw new ConfigError("coordination signing keys require bounded key IDs and at least 32 secret bytes");
 	}
 	if (options.onReadReady && !options.authentication) throw new ConfigError("coordination read capability publication requires authentication");
+	if (options.onControlReady && !options.authentication) throw new ConfigError("coordination control capability publication requires authentication");
 	coordinationHttpLimits(options);
 }
 /** The longest any coordination call holds its response, whatever the request timeout: under the
@@ -4616,6 +4640,7 @@ async function bindCoordinationAddress(ctx, port, addressSignal) {
 	state.paths.add(publicAddress.pathname);
 	for (const path of state.paths) {
 		state.readPaths.add(path.replace(/\/$/, "") + "/read");
+		state.controlPaths.add(path.replace(/\/$/, "") + "/control");
 		state.mailPaths.add(path.replace(/\/$/, "") + "/mail");
 	}
 	if (configured !== void 0) await preflightPublicCoordination({
@@ -4644,6 +4669,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		identity,
 		toolNames: opts.toolNames,
 		scopeSignal: opts.scope.signal,
+		lifetimeSignal: lifetime,
 		isClosed: () => state.closed
 	});
 	const ctx = {
@@ -4716,6 +4742,14 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		get headers() {
 			return credentials.headers;
 		},
+		get control() {
+			if (!opts.authentication) throw new ConfigError("coordination control access requires authentication");
+			return {
+				...identity,
+				url: url.replace(/\/$/, "") + "/control",
+				headers: credentials.controllerHeaders
+			};
+		},
 		get credentialExpiresAt() {
 			return credentials.expiresAt;
 		},
@@ -4743,6 +4777,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 			...handle.readOnly,
 			...identity
 		}), opts.scope.signal, "read capability publication aborted");
+		await runAbortable(async () => opts.onControlReady?.(handle.control), opts.scope.signal, "control capability publication aborted");
 	} catch (error) {
 		await handle.close();
 		throw error;
@@ -4752,8 +4787,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		controls: coord
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-tool-binding.ts
+// src/runtime/supervise/supervisor-tool-binding.ts
 function createVerbSlot() {
 	let bound;
 	let waits;
@@ -4842,8 +4876,7 @@ function bindSupervisorNodeObserver(context, observeNodeEvent, onEvent) {
 		await onEvent?.(event, record);
 	};
 }
-//#endregion
-//#region src/runtime/supervise/worker-control-observer.ts
+// src/runtime/supervise/worker-control-observer.ts
 /** Observe durable worker controls while the native harness owns the manager's turn loop. */
 function observeWorkerControls(options) {
 	const { dir, coord, scope, signal, controlScope, onError } = options;
@@ -4927,8 +4960,7 @@ function observeWorkerControls(options) {
 		close: () => closing ??= finish()
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-manager-session.ts
+// src/runtime/supervise/supervisor-manager-session.ts
 /** Bind this act's node tools and serve its coordination server, then route the lead's messages. */
 async function openManagerSession(config, task, scope) {
 	const { deps } = config;
@@ -5078,15 +5110,14 @@ function observeManagerControls(config, session) {
 		}
 	});
 }
-//#endregion
-//#region src/runtime/supervise/driver-retry-loop.ts
+// src/runtime/supervise/driver-retry-loop.ts
 const DEFAULT_MAX_CONSECUTIVE_FAILURES = 3;
 const DEFAULT_MAX_ATTEMPTS = Number.POSITIVE_INFINITY;
 const DEFAULT_INITIAL_BACKOFF_MS$1 = 2e3;
 const DEFAULT_MAX_BACKOFF_MS$1 = 3e4;
 const DEFAULT_TRANSIENT_OUTAGE_MS = 9e5;
-const BARREN_PAUSE_FIRST_MS = 5 * 6e4;
-const BARREN_PAUSE_MAX_MS = 60 * 6e4;
+const BARREN_PAUSE_FIRST_MS = 3e5;
+const BARREN_PAUSE_MAX_MS = 36e5;
 /** The stops an opted-in root pauses on (`DriverRetryRun.stopPause`). `completed`, `aborted` and a
 *  declared `deadline` end the run; `supervise()` refuses `driverRetry.pauseRootStops` beside `retry-disabled`. */
 const PAUSED_STOPS = /* @__PURE__ */ new Set([
@@ -5116,7 +5147,7 @@ function barrenPauseMs(streak, maxBarren) {
 */
 const INSTANT_FAILURE_MS = 3e4;
 const REPEATED_FAILURE_LIMIT = 10;
-const REPEATED_FAILURE_WINDOW_MS = 5 * 6e4;
+const REPEATED_FAILURE_WINDOW_MS = 3e5;
 /** Consecutive identical reconciliation failures of one pending invocation that resolve it. */
 const SAME_PENDING_LIMIT = 2;
 /**
@@ -5131,7 +5162,7 @@ const SAME_PARTIAL_FAILURE_LIMIT = 2;
 /**
 * Why an aborted run stopped: `deadline` when the root's or the node's own deadline cut it, else
 * `aborted`. Read before any failure classification, which calls every failure after an abort
-* terminal: measured 2026-10-21, 61 of 62 runs that ended `terminal-error` were a deadline that cut
+* terminal: 61 of 62 runs that ended `terminal-error` were a deadline that cut
 * a turn.
 */
 function abortStop(signal) {
@@ -5639,8 +5670,7 @@ var DriverRetryLoop = class {
 		return true;
 	}
 };
-//#endregion
-//#region src/runtime/supervise/driver-retry.ts
+// src/runtime/supervise/driver-retry.ts
 /**
 * Root-driver retry — the root gets the same second chance a worker's transport already has.
 *
@@ -5672,7 +5702,7 @@ var DriverRetryLoop = class {
 *
 * WHAT COUNTS AS PROGRESS was got wrong first. Reading metered spend, settled children and an
 * accepted submission measured the filesystem and the meter, never the goal: across 1,422 settled
-* discovery-lab runs (2026-09-01) it retried the runs that produced NOTHING 629 of 827 times
+* discovery-lab runs it retried the runs that produced NOTHING 629 of 827 times
 * (76.1%) and the runs that HAD left an artifact 21 of 399 times (5.3%). So when the caller
 * declares a completion check, spend and settlements alone are NOT progress while it is unmet; only
 * a delivery (an accepted submission, a child that passed the check, the contract turning met, or a
@@ -5690,7 +5720,7 @@ var DriverRetryLoop = class {
 * `barren-pause` row per pause for an operator alarm, and re-enters. A barren streak never ends the
 * run: the check, the deadline, the budget and cancellation do. Progress resets the streak and the
 * backoff. There is no count cap and no caller veto (the old prompt-owned loop logged 896 of 1,011
-* rounds with no progress). Measured 2026-10-21 on magnetar-rust-20261021a: the barren bound
+* rounds with no progress). The barren bound
 * settled a 48-hour run `no-winner` after 14.3 hours, while its last two turns updated its pages
 * and waited on its own 2^20 prove.
 *
@@ -5713,7 +5743,7 @@ var DriverRetryLoop = class {
 * created and then failed its setup (Sandbox's `PartialFailureError`): it meets the same failure on
 * every re-entry, so a second identical attempt with no progress stops with `repeated-failure`
 * (`SAME_PARTIAL_FAILURE_LIMIT`). A failure that spent tokens without delivering keeps the bounds.
-* Measured 2026-10-04 on Discovery run research-nqs-20261003system2: a Platform restart answered
+* A Platform restart answered
 * `HTTP 502 ... Platform key verification unavailable` from 03:04:34 to 03:09:41Z, and the
 * coordinator's twelve attempts ran out at 03:07:12Z with no token spent.
 *
@@ -5731,8 +5761,7 @@ var DriverRetryLoop = class {
 * still spent pauses again with its own row, and the steer stays queued until a turn reads it.
 * After the pause the per-window counters start over and the driver is re-entered: after
 * a failure as `driver-failure` with `pausedMs`, after an admission or continuation refusal as the
-* re-entry it was about to use. Drew, 2026-10-21: "why do these runs keep failing early its
-* unacceptable!" Measured 2026-10-21 over 259 runs since 10-14: 8 of the 10 stops settled runs that
+* re-entry it was about to use. Runs must not fail early: over 259 runs, 8 of the 10 stops settled runs that
 * nobody solved or stopped, including 17 roots whose harness never streamed.
 */
 function assertContinuationPolicy(continuation) {
@@ -5778,8 +5807,7 @@ async function runDriverWithRetry(run) {
 		if (!await loop.afterCompletion(attempt, before, startedAt)) return;
 	}
 }
-//#endregion
-//#region src/runtime/supervise/reentry.ts
+// src/runtime/supervise/reentry.ts
 /** Continuity when nothing is proven: compose the full state. */
 const UNPROVEN_CONTINUITY = Object.freeze({
 	session: "new",
@@ -5842,7 +5870,7 @@ function composeReentryTask(input) {
 }
 /**
 * Why the driver is back, in one clause. The failure's own text stays in the attempt records and
-* never reaches the driver: measured 2026-09-11, a continuation told the details of a provider
+* never reaches the driver: a continuation told the details of a provider
 * failure spent two of its first four children probing the infrastructure, while its peer, told
 * only what to continue, spent all forty-five on the research.
 */
@@ -5900,8 +5928,7 @@ function taskText(task) {
 		return String(task);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/run-traces.ts
+// src/runtime/supervise/run-traces.ts
 /**
 * A manager's own run as one trace store: what the continuation's question panel reads.
 *
@@ -6033,8 +6060,7 @@ async function runTraceAnalysisStore(input) {
 	const spans = [...records === void 0 || input.root === void 0 ? [] : rootStreamToolSpans(records, input.root.id), ...(await Promise.all(input.workers.map((worker) => workerSpans(worker, input.blobs)))).flat()];
 	return spans.length === 0 ? void 0 : toolSpansToTraceAnalysisStore(spans);
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-manager-turns.ts
+// src/runtime/supervise/supervisor-manager-turns.ts
 /** The finalizer over this act's settled workers; the check it runs is recorded as a check read. */
 function managerFinalizer(deps, session) {
 	const { mcp, controls } = session;
@@ -6455,8 +6481,7 @@ async function recordManagerAttempt(loop, record) {
 	});
 	await loop.config.deps.onDriverAttempt?.(record);
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-external-manager.ts
+// src/runtime/supervise/supervisor-external-manager.ts
 /** EXTERNAL arm: a caller-driven harness uses the coordination verbs over the live scope. */
 function externalSupervisorAgent(build) {
 	const { deps, name } = build;
@@ -6585,8 +6610,7 @@ async function settleManagerOutput(config, mcp, contractDeclared, finalize, cand
 	}
 	await mcp.finishAnalysis({ status: "done" });
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-router-config.ts
+// src/runtime/supervise/supervisor-router-config.ts
 /** Validate a manager's coordination authentication and request limits before execution. */
 function assertCoordinationBinding(binding) {
 	assertCoordinationTransport(binding ?? {});
@@ -6647,8 +6671,7 @@ function routerBrainFromProfile(profile, router) {
 		...profile.model?.reasoningEffort ? { reasoningEffort: profile.model.reasoningEffort } : {}
 	});
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-agent-build.ts
+// src/runtime/supervise/supervisor-agent-build.ts
 function buildSupervisorAgent(profile, deps, testBrain) {
 	const exactProfile = agentProfileSchema.parse(profile);
 	assertExecutableAgentProfile(exactProfile, "supervisorAgent");
@@ -6779,8 +6802,7 @@ function routerSupervisorAgent(arm) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-agent.ts
+// src/runtime/supervise/supervisor-agent.ts
 /** Build a supervisor `Agent` from its profile: the brain resolves from `profile.harness`
 * (backend-as-data), the same resolution rule as every worker. */
 function supervisorAgent(profile, deps) {
@@ -6792,8 +6814,7 @@ function supervisorAgentWithTestBrain(profile, deps) {
 	const { brain, ...runtimeDeps } = deps;
 	return buildSupervisorAgent(profile, runtimeDeps, brain);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-profile-admission.ts
+// src/runtime/supervise/supervise-profile-admission.ts
 /**
 * NOT a harness-name test — `ExecutorConfig.backend` is a discriminated-union TAG naming HOW a
 * profile is materialized (bridge / sandbox / cli-worktree / cli-in-place / router / cli /
@@ -6816,9 +6837,10 @@ function backendProfileMaterialization(backend) {
 	}
 }
 function assertProfileContract(profile, contract, context, runtimeConsumesCoordinationTools = false) {
+	const materializedProfile = runtimeConsumesCoordinationTools ? providerVisibleProfile(profile) : profile;
 	assertProfileMaterialization({
 		contract,
-		changedAxes: profileMaterializationAxes$1(runtimeConsumesCoordinationTools ? providerVisibleProfile(profile) : profile),
+		changedAxes: profileMaterializationAxes$1(materializedProfile),
 		context
 	});
 }
@@ -6919,6 +6941,7 @@ const routerSupervisorProfileMaterialization = defineProfileMaterializationContr
 		"version",
 		"tags",
 		"systemPrompt",
+		"appendSystemPrompt",
 		"instructions",
 		"resourceInstructions",
 		"resourceFailOnError",
@@ -6957,8 +6980,7 @@ function isExternalSupervisor(profile) {
 function automaticDriverBackendSupported(backend, coordination) {
 	return backend.backend === "bridge" || backend.backend === "provider" && !backend.steering && coordination?.authentication !== void 0 && coordination.publicUrl !== void 0;
 }
-//#endregion
-//#region src/runtime/supervise/nested-manager-deps.ts
+// src/runtime/supervise/nested-manager-deps.ts
 /** Deps for the nested manager of a managed child: coordination wiring, policy and controls. */
 function buildNestedManagerDeps(child) {
 	const { env, seat, admitted, spawnContext } = child;
@@ -7092,8 +7114,7 @@ function nestedLogAndControlDeps(child) {
 		...options.runDir === void 0 && options.steerDir === void 0 ? {} : { controlScope: "subtree" }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-runtime-attachments.ts
+// src/runtime/supervise/supervise-runtime-attachments.ts
 /**
 * The reserved MCP alias one worker's PEER MAIL capability endpoint mounts under.
 *
@@ -7164,13 +7185,12 @@ async function providerAcceptsCoordinationAttachments(backend) {
 * A manager waits between turns, and a wake can come much later than five minutes after its last
 * turn. Claude Code 2.1.289 writes its prompt cache with a five-minute lifetime unless this variable
 * is set; a wake after the cache expired re-writes the manager's whole context, about 140K tokens
-* per turn on a Discovery root measured 2026-10-05. That root ran on a subscription and already
+* per turn on a Discovery root. That root ran on a subscription and already
 * wrote one-hour entries; the variable makes the hour hold for every claude-code manager, whatever
 * its credential. A value the caller set wins.
 */
 const CLAUDE_CODE_ONE_HOUR_CACHE = "ENABLE_PROMPT_CACHING_1H";
-//#endregion
-//#region src/runtime/supervise/supervise-worker-backend.ts
+// src/runtime/supervise/supervise-worker-backend.ts
 /**
 * Build the worker seam from a backend (WHERE workers run) + an optional completion oracle (the
 * deliverable check that makes "settled ⟺ delivered" true — the guard against "ran but didn't
@@ -7216,7 +7236,7 @@ function workerFromBackend(backend, deliverable, seams) {
 		const boundSessionId = boundBackend.backend === "bridge" ? boundBackend.sessionId : void 0;
 		const peerMailAttachment = peerMailRuntimeAttachment(profile, capturedBackend, spawnContext);
 		if (spawnContext?.peerMailUrl && boundBackend.backend === "provider" && Object.hasOwn(boundBackend.defaults?.runtimeAttachments?.mcp ?? {}, "agent-runtime-peer-mail")) throw new ValidationError("workerFromBackend: provider defaults contain the reserved peer-mail attachment alias");
-		const rawFactory = createExecutor(spawnContext?.peerMailUrl && boundBackend.backend === "provider" ? {
+		const leafBackend = spawnContext?.peerMailUrl && boundBackend.backend === "provider" ? {
 			...boundBackend,
 			steering: boundBackend.steering ?? {},
 			defaults: {
@@ -7232,7 +7252,8 @@ function workerFromBackend(backend, deliverable, seams) {
 					}
 				}
 			}
-		} : boundBackend);
+		} : boundBackend;
+		const rawFactory = createExecutor(leafBackend);
 		const baseFactory = deliverable ? gateFactoryOnDeliverable(rawFactory, deliverable) : rawFactory;
 		const executorFactory = (spec, ctx) => {
 			if (boundSessionId !== void 0 && ctx.node?.nodeId !== void 0) bridgeSessionByWorker.set(ctx.node.nodeId, boundSessionId);
@@ -7318,8 +7339,7 @@ function withModelSubstitution(agent, substitution) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/spawn-admission.ts
+// src/runtime/supervise/spawn-admission.ts
 /** Authorize one spawn and decide everything about it that does not depend on how it runs. */
 function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 	const { options, applyTraceTools, deliverable } = env.setup;
@@ -7371,7 +7391,10 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 		depth
 	});
 	const security = validateAgentProfileSecurity(authorized, env.securityPolicy);
-	if (!security.ok) throw new ValidationError(`supervise: spawned AgentProfile refused: ${security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ")}`);
+	if (!security.ok) {
+		const details = security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ");
+		throw new ValidationError(`supervise: spawned AgentProfile refused: ${details}`);
+	}
 	assertProfileModelsAllowed(authorized, options.allowedModels);
 	const selectedDeliverable = options.resolveDeliverable?.(postAuthorizationContext);
 	const childDeliverable = selectedDeliverable === void 0 ? deliverable : selectedDeliverable === null ? void 0 : captureDeliverable(selectedDeliverable, `supervise deliverable for ${JSON.stringify(spawnContext.label)}`);
@@ -7387,8 +7410,228 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 		usesRuntimeCoordination: declaredRuntimeToolNames(authorized).length > 0 || seatManagedLeaf
 	};
 }
-//#endregion
-//#region src/runtime/supervise/graph-registry.ts
+// src/runtime/supervise/graph-file-schema.ts
+const scalar = z.union([
+	z.string(),
+	z.number().finite(),
+	z.boolean(),
+	z.null()
+]);
+const pointer = z.string().regex(/^(?:\/(?:[^~]|~[01])*)*$/);
+const matchBase = {
+	node: z.string().min(1).optional(),
+	pointer
+};
+const equals = z.strictObject({
+	...matchBase,
+	equals: scalar
+});
+const oneOf = z.strictObject({
+	...matchBase,
+	in: z.array(scalar)
+});
+const exists = z.strictObject({
+	...matchBase,
+	exists: z.boolean()
+});
+const match = z.union([
+	equals,
+	oneOf,
+	exists
+]);
+/** The same data grammar as routes; no executable expressions or additional operators. */
+const graphRouteWhenSchema = z.union([match, z.strictObject({ all: z.array(match).min(1) })]);
+const parameter = z.strictObject({
+	default: z.unknown().optional(),
+	type: z.enum([
+		"string",
+		"number",
+		"integer",
+		"boolean",
+		"object",
+		"array",
+		"null"
+	]).optional()
+});
+const command = z.strictObject({
+	command: z.string().min(1),
+	timeoutMs: z.number().int().positive().optional()
+});
+const nonnegativeInteger = z.number().int().nonnegative();
+/** Authoring envelope. Canonical profiles and topology are validated by their existing owners. */
+const graphFileSchema = z.strictObject({
+	digest: z.string().min(1).optional(),
+	graph: z.string().min(1).optional(),
+	describe: z.string().optional(),
+	params: z.record(z.string().min(1), parameter).optional(),
+	nodes: z.array(z.strictObject({
+		id: z.string().min(1),
+		profile: z.record(z.string(), z.unknown()).optional(),
+		seat: z.union([z.string().min(1), z.array(z.string().min(1)).min(1)]).optional(),
+		needs: z.array(z.string().min(1)).optional()
+	})).min(1),
+	entry: z.array(z.union([z.string().min(1), z.strictObject({
+		node: z.string().min(1),
+		task: z.unknown()
+	})])).min(1).optional(),
+	edges: z.array(z.record(z.string(), z.unknown())),
+	gates: z.array(z.unknown()).optional(),
+	budget: z.strictObject({
+		maxIterations: nonnegativeInteger,
+		maxTokens: nonnegativeInteger,
+		maxUsd: z.number().finite().nonnegative().optional(),
+		deadlineMs: nonnegativeInteger.optional(),
+		resources: z.record(z.string(), z.strictObject({
+			unit: z.string().min(1),
+			limit: nonnegativeInteger
+		})).optional()
+	}),
+	check: z.union([
+		equals.extend({ describe: z.string().optional() }),
+		oneOf.extend({ describe: z.string().optional() }),
+		exists.extend({ describe: z.string().optional() }),
+		z.strictObject({
+			describe: z.string().optional(),
+			all: z.array(match).min(1)
+		}),
+		z.strictObject({
+			describe: z.string().optional(),
+			command
+		})
+	]).optional(),
+	deliverable: z.strictObject({
+		describe: z.string().optional(),
+		checkRef: z.string().min(1),
+		command: command.optional(),
+		when: graphRouteWhenSchema.optional()
+	}).optional(),
+	on: z.unknown().optional()
+});
+/** Judge the flow's terminal-output map with RouteWhen's own JSON-pointer semantics. */
+function checkGraphRoute(when, output) {
+	return ("all" in when ? when.all : [when]).every((condition) => {
+		let document = output;
+		if (condition.node !== void 0) {
+			if (!output || typeof output !== "object" || !Object.hasOwn(output, condition.node)) return false;
+			document = output[condition.node];
+		}
+		const selected = resolveJsonPointer(document, condition.pointer);
+		if ("exists" in condition) return selected.found === condition.exists;
+		if (!selected.found) return false;
+		return "equals" in condition ? selected.value === condition.equals : condition.in.some((value) => value === selected.value);
+	});
+}
+// src/runtime/supervise/graph-parameters.ts
+const triggerPart = z.strictObject({ trigger: z.array(z.string()).min(1) });
+const literalPart = z.strictObject({ literal: z.string() });
+/** Explicit authored trigger slots in compiled graph data. An empty list marks fully bound data. */
+const graphTriggerBindingsSchema = z.array(z.strictObject({
+	path: z.array(z.union([z.string(), z.number().int().nonnegative()])).min(1),
+	mode: z.enum(["value", "text"]),
+	parts: z.array(z.union([literalPart, triggerPart])).min(1)
+}).superRefine((slot, context) => {
+	if (!slot.parts.some((part) => "trigger" in part) || slot.mode === "value" && (slot.parts.length !== 1 || !("trigger" in slot.parts[0]))) context.addIssue({
+		code: "custom",
+		message: "binding requires authored trigger parts; value slots require one trigger"
+	});
+}));
+function readBinding(namespace, keys, bindings) {
+	let found = bindings[namespace];
+	for (const key of keys) {
+		if (!found || typeof found !== "object" || !Object.hasOwn(found, key)) throw new ValidationError(`graph parameters: missing ${[namespace, ...keys].join(".")}`);
+		found = found[key];
+	}
+	if (found === void 0) throw new ValidationError(`graph parameters: missing ${[namespace, ...keys].join(".")}`);
+	return structuredClone(found);
+}
+function textValue(value, expression) {
+	if (value !== null && typeof value === "object") throw new ValidationError(`graph parameters: ${expression} needs a whole JSON slot`);
+	return String(value);
+}
+function pendingText(parts) {
+	return parts.map((part) => "literal" in part ? part.literal : `\${trigger.${part.trigger.join(".")}}`).join("");
+}
+/** Compile authored slots once. Inserted values are data, never recursively parsed templates. */
+function compileGraphParameters(value, bindings, options = {}) {
+	const visiting = /* @__PURE__ */ new Set();
+	const triggerBindings = [];
+	const bind = (item, path) => {
+		if (typeof item === "string") {
+			if (item.replace(/\$\{[^{}]+\}/g, "").includes("${")) throw new ValidationError("graph parameters: malformed reference");
+			const whole = /^\$\{([^{}]+)\}$/.exec(item);
+			const parts = [];
+			let cursor = 0;
+			let wholeValue;
+			let boundWhole = false;
+			for (const match of item.matchAll(/\$\{([^{}]+)\}/g)) {
+				if (match.index > cursor) parts.push({ literal: item.slice(cursor, match.index) });
+				const [namespace, ...keys] = match[1].split(".");
+				if (namespace !== "params" && namespace !== "trigger" || keys.length === 0) throw new ValidationError(`graph parameters: unsupported reference \${${match[1]}}`);
+				if (options.defer?.includes(namespace)) {
+					if (namespace === "trigger") parts.push({ trigger: keys });
+					else parts.push({ literal: match[0] });
+				} else {
+					const found = readBinding(namespace, keys, bindings);
+					if (whole) {
+						wholeValue = found;
+						boundWhole = true;
+					} else parts.push({ literal: textValue(found, match[1]) });
+				}
+				cursor = match.index + match[0].length;
+			}
+			if (boundWhole) return wholeValue;
+			if (cursor === 0) return item;
+			if (cursor < item.length) parts.push({ literal: item.slice(cursor) });
+			if (parts.some((part) => "trigger" in part)) triggerBindings.push({
+				path,
+				mode: whole ? "value" : "text",
+				parts
+			});
+			return pendingText(parts);
+		}
+		if (!item || typeof item !== "object") return item;
+		if (visiting.has(item)) throw new ValidationError("graph parameters: cyclic data is not JSON");
+		visiting.add(item);
+		const bound = Array.isArray(item) ? item.map((child, index) => bind(child, [...path, index])) : Object.fromEntries(Object.entries(item).map(([key, child]) => [key, bind(child, [...path, key])]));
+		visiting.delete(item);
+		return bound;
+	};
+	return {
+		value: bind(value, []),
+		triggerBindings
+	};
+}
+/** Legacy authored-data binding. Compiled graphs use bindCompiledGraphTriggers instead. */
+function bindGraphParameters(value, bindings, options = {}) {
+	return compileGraphParameters(value, bindings, options).value;
+}
+/** Check provenance against the exact provisional values without reading trigger data. */
+function assertGraphTriggerBindings(value, slots) {
+	const seen = /* @__PURE__ */ new Set();
+	for (const slot of graphTriggerBindingsSchema.parse(slots)) {
+		const key = JSON.stringify(slot.path.map(String));
+		if (seen.has(key)) throw new ValidationError("graph parameters: duplicate trigger binding path");
+		seen.add(key);
+		let found = value;
+		for (const key of slot.path) {
+			if (!found || typeof found !== "object" || !Object.hasOwn(found, key)) throw new ValidationError("graph parameters: trigger binding path does not exist");
+			found = found[key];
+		}
+		if (found !== pendingText(slot.parts)) throw new ValidationError("graph parameters: trigger binding does not match its provisional value");
+	}
+}
+/** Only explicitly recorded authored slots bind. Literal parameter/trigger values are untouched. */
+function bindCompiledGraphTriggers(value, slots, trigger) {
+	assertGraphTriggerBindings(value, slots);
+	const bound = structuredClone(value);
+	for (const slot of slots) {
+		let parent = bound;
+		for (const key of slot.path.slice(0, -1)) parent = parent[key];
+		parent[slot.path.at(-1)] = slot.mode === "value" ? readBinding("trigger", slot.parts[0].trigger, { trigger }) : slot.parts.map((part) => "literal" in part ? part.literal : textValue(readBinding("trigger", part.trigger, { trigger }), `trigger.${part.trigger.join(".")}`)).join("");
+	}
+	return bound;
+}
+// src/runtime/supervise/graph-registry.ts
 /**
 * `graph-registry` — the designer's memory: graphs and their outcomes as files.
 *
@@ -7415,6 +7658,7 @@ function admitSpawn(env, seat, authoredProfile, spawnContext, recovering) {
 */
 var graph_registry_exports = /* @__PURE__ */ __exportAll({
 	digestOfGraph: () => digestOfGraph,
+	graphCorpusSummary: () => graphCorpusSummary,
 	graphDigest: () => graphDigest,
 	graphFromStored: () => graphFromStored,
 	graphRegistry: () => graphRegistry,
@@ -7424,6 +7668,7 @@ var graph_registry_exports = /* @__PURE__ */ __exportAll({
 	lookupGraph: () => lookupGraph,
 	pickBestGraph: () => pickBestGraph,
 	recordGraphRun: () => recordGraphRun,
+	recordStoredGraphRun: () => recordStoredGraphRun,
 	storedGraphDigests: () => storedGraphDigests,
 	taskShapeDigest: () => taskShapeDigest
 });
@@ -7452,11 +7697,18 @@ function digestOfGraph(graph) {
 	return storeGraph(graph).digest;
 }
 function storeGraph(graph) {
+	const { describe, checkRef, command, when } = graph.deliverable;
 	const content = {
 		nodes: graph.nodes,
 		edges: graph.edges,
 		budget: graph.budget,
-		deliverable: { ...graph.deliverable.describe ? { describe: graph.deliverable.describe } : {} },
+		...graph.triggerBindings === void 0 ? {} : { triggerBindings: graph.triggerBindings },
+		deliverable: {
+			...describe ? { describe } : {},
+			...checkRef ? { checkRef } : {},
+			...command ? { command } : {},
+			...when ? { when } : {}
+		},
 		...graph.entry === void 0 ? {} : { entry: graph.entry },
 		...graph.gates === void 0 ? {} : { gates: graph.gates }
 	};
@@ -7468,10 +7720,26 @@ function storeGraph(graph) {
 function assertRecord(record) {
 	if (typeof record.graphDigest !== "string" || record.graphDigest.length === 0) throw new ValidationError("graph-registry: record.graphDigest is required");
 	if (typeof record.taskDigest !== "string" || record.taskDigest.length === 0) throw new ValidationError("graph-registry: record.taskDigest is required");
-	if (record.outcome.kind !== "delivered" && record.outcome.kind !== "no-winner") throw new ValidationError("graph-registry: record.outcome.kind must be 'delivered' | 'no-winner'");
+	if (!Number.isFinite(Date.parse(record.startedAt))) throw new ValidationError("graph-registry: record.startedAt must be a timestamp");
+	if (![
+		"delivered",
+		"no-winner",
+		"unknown",
+		"running"
+	].includes(record.outcome.kind)) throw new ValidationError("graph-registry: invalid record.outcome.kind");
+	if ((record.outcome.kind === "delivered" || record.outcome.kind === "no-winner") && (!record.finishedAt || !Number.isFinite(Date.parse(record.finishedAt)))) throw new ValidationError("graph-registry: terminal outcomes require record.finishedAt");
+	if ((record.outcome.kind === "unknown" || record.outcome.kind === "running") && !record.outcome.reason) throw new ValidationError("graph-registry: incomplete outcomes require a reason");
+	if (record.source && (!record.source.kind || !record.source.id)) throw new ValidationError("graph-registry: source.kind and source.id are required");
+	if (record.finishedAt && (!Number.isFinite(Date.parse(record.finishedAt)) || Date.parse(record.finishedAt) < Date.parse(record.startedAt))) throw new ValidationError("graph-registry: finishedAt precedes startedAt or is invalid");
+	for (const [channel, value] of Object.entries(record.cost)) if (value !== void 0 && (typeof value !== "number" || !Number.isFinite(value) || value < 0)) throw new ValidationError(`graph-registry: invalid cost.${channel}`);
 }
 function recordKey(record) {
 	assertRecord(record);
+	if (record.source) return JSON.stringify([
+		"source",
+		record.source.kind,
+		record.source.id
+	]);
 	return JSON.stringify([
 		record.taskDigest,
 		record.graphDigest,
@@ -7488,27 +7756,161 @@ function graphRegistry(root) {
 *  Idempotent per (taskDigest, graphDigest, startedAt): a replayed append with
 *  the same key replaces the prior row rather than duplicating it. */
 async function recordGraphRun(reg, graph, record) {
-	assertRecord(record);
-	const stored = storeGraph(graph);
-	if (stored.digest !== record.graphDigest) throw new ValidationError(`graph-registry: record.graphDigest ${record.graphDigest} does not match the supplied graph (${stored.digest}) — record the graph that actually ran`);
+	return recordStoredGraphRun(reg, storeGraph(graph), record);
+}
+/** Store an executable graph or an observed external topology in the same registry.
+* Imported observations retain their source identity and never authorize replay.
+* A reader refreshing facts can preserve independently joined labels; an explicit
+* correction leaves preserveLabels unset and replaces the record. */
+async function recordStoredGraphRun(reg, definition, record, options = {}) {
+	const { digest, ...content } = definition;
+	const stored = {
+		...content,
+		digest: digest ?? graphDigest(content)
+	};
+	if (stored.observed && !record) throw new ValidationError("graph-registry: observed graphs require a source run identity");
+	if (record) {
+		assertRecord(record);
+		if (stored.observed && !record.source) throw new ValidationError("graph-registry: observed graphs require a source run identity");
+		if (!stored.observed && !record.finishedAt) throw new ValidationError("graph-registry: native graph runs require a completion timestamp");
+		if ((!stored.observed || record.traversals !== void 0) && (!Number.isSafeInteger(record.traversals) || record.traversals < 0)) throw new ValidationError("graph-registry: native graphs require metered traversals; observed counts must be non-negative integers");
+		if (stored.digest !== record.graphDigest) throw new ValidationError(`graph-registry: record.graphDigest ${record.graphDigest} does not match the supplied graph (${stored.digest}) — record the graph that actually ran`);
+	}
+	if (graphDigest(content) !== stored.digest) throw new ValidationError("graph-registry: stored graph content does not match its digest");
 	await mkdir(join(reg.root, GRAPHS_DIR), { recursive: true });
-	return withJsonlFileLock(join(reg.root, RECORDS_FILE), async (canonicalPath) => {
-		writeAtomicDurableFile(join(reg.root, GRAPHS_DIR, `${stored.digest}.json`), JSON.stringify(stored), { preserveMode: true });
-		await upsertCommittedJsonLine(canonicalPath, record, recordKey);
+	const file = join(reg.root, RECORDS_FILE);
+	return withJsonlFileLock(file, async (canonicalPath) => {
+		if (!record) {
+			await persistGraph(reg, stored);
+			return stored;
+		}
+		let persisted = record;
+		if (options.preserveLabels && record.source) {
+			const prior = (await readCommittedJsonFile(canonicalPath)).find((row) => row.source?.kind === record.source.kind && row.source.id === record.source.id);
+			if (prior) {
+				const taskType = record.taskType ?? prior.taskType;
+				const priorTerminal = prior.outcome.kind === "delivered" || prior.outcome.kind === "no-winner";
+				const incomingUnassessed = record.outcome.kind === "unknown" || record.outcome.kind === "running";
+				if (priorTerminal && incomingUnassessed && prior.startedAt !== record.startedAt) throw new ValidationError("graph-registry: preserving labels requires the same task start and source identity");
+				const evidence = [...prior.evidence ?? [], ...record.evidence ?? []];
+				persisted = {
+					...record,
+					...taskType ? { taskType } : {},
+					...record.unknowns ? { unknowns: record.unknowns.filter((reason) => !(taskType && reason === "task type not explicitly labeled")) } : {},
+					...evidence.length ? { evidence: [...new Map(evidence.map((entry) => [canonicalJson$1(entry), entry])).values()] } : {},
+					...priorTerminal && incomingUnassessed ? {
+						outcome: prior.outcome,
+						finishedAt: prior.finishedAt,
+						cost: {
+							...record.cost,
+							...prior.cost.ms === void 0 ? {} : { ms: prior.cost.ms },
+							...prior.cost.mergeMs === void 0 ? {} : { mergeMs: prior.cost.mergeMs }
+						}
+					} : {}
+				};
+			}
+		}
+		assertRecord(persisted);
+		await persistGraph(reg, stored);
+		await upsertCommittedJsonLine(canonicalPath, persisted, recordKey);
 		return stored;
 	});
 }
+async function persistGraph(reg, stored) {
+	const revisionPath = join(reg.root, GRAPHS_DIR, `${stored.digest}.json`);
+	try {
+		const { digest: existingDigest, ...existing } = JSON.parse(await readFile(revisionPath, "utf8"));
+		if (existingDigest !== stored.digest || graphDigest(existing) !== stored.digest) throw new ValidationError("graph-registry: stored graph revision is immutable but its content differs");
+	} catch (error) {
+		if (!isNoEntError(error)) throw error;
+		writeAtomicDurableFile(revisionPath, JSON.stringify(stored), { preserveMode: true });
+	}
+}
 /** All records, newest last. */
 async function listGraphRuns(reg) {
 	return readCommittedJsonFile(join(reg.root, RECORDS_FILE));
 }
-/** Records for one task shape, newest last. */
-async function graphRunsFor(reg, taskDigest) {
-	return (await listGraphRuns(reg)).filter((row) => row.taskDigest === taskDigest);
+function observedTopology(record) {
+	return record.topologyDigest ?? (record.source ? "unknown" : record.graphDigest);
+}
+/** Records for one task shape or deterministic label query, newest last. */
+async function graphRunsFor(reg, query = {}) {
+	const filters = typeof query === "string" ? { taskDigest: query } : query;
+	return (await listGraphRuns(reg)).filter((row) => (filters.taskDigest === void 0 || row.taskDigest === filters.taskDigest) && (filters.taskType === void 0 || (row.taskType ?? "unknown") === filters.taskType) && (filters.topologyDigest === void 0 || observedTopology(row) === filters.topologyDigest) && (filters.sourceKind === void 0 || (row.source?.kind ?? "native") === filters.sourceKind));
+}
+function medianKnown(values) {
+	const known = values.filter((value) => value !== void 0 && Number.isFinite(value) && value >= 0).sort((a, b) => a - b);
+	const middle = Math.floor(known.length / 2);
+	return {
+		count: known.length,
+		median: known.length === 0 ? null : known.length % 2 ? known[middle] : (known[middle - 1] + known[middle]) / 2
+	};
+}
+function observedGraphSummary(records) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const record of records) {
+		const key = JSON.stringify([record.taskType ?? "unknown", observedTopology(record)]);
+		const rows = groups.get(key);
+		if (rows) rows.push(record);
+		else groups.set(key, [record]);
+	}
+	const summaries = [...groups.values()].map((runs) => {
+		const assessed = runs.filter((run) => run.outcome.kind === "delivered" || run.outcome.kind === "no-winner");
+		const delivered = assessed.filter((run) => run.outcome.kind === "delivered");
+		const wall = medianKnown(assessed.map((run) => run.cost.ms));
+		const merge = medianKnown(delivered.filter((run) => run.evidence?.some((entry) => entry.kind === "pr-merged")).map((run) => run.cost.mergeMs));
+		const tokens = medianKnown(assessed.map((run) => run.cost.tokens));
+		const human = medianKnown(assessed.map((run) => run.cost.humanMessages));
+		return {
+			taskType: runs[0].taskType ?? "unknown",
+			topologyDigest: observedTopology(runs[0]),
+			delivered: delivered.length,
+			assessed: assessed.length,
+			unknown: runs.length - assessed.length,
+			deliveredRate: assessed.length ? delivered.length / assessed.length : null,
+			medianWallMs: wall.median,
+			wallMsCount: wall.count,
+			medianMergeMs: merge.median,
+			mergeMsCount: merge.count,
+			medianTokens: tokens.median,
+			tokenCount: tokens.count,
+			medianHumanMessages: human.median,
+			humanMessageCount: human.count,
+			runs
+		};
+	});
+	summaries.sort((a, b) => {
+		const delivered = (b.deliveredRate ?? -1) - (a.deliveredRate ?? -1);
+		if (delivered) return delivered;
+		for (const key of [
+			"medianWallMs",
+			"medianTokens",
+			"medianHumanMessages"
+		]) {
+			if (a[key] === b[key]) continue;
+			if (a[key] === null) return 1;
+			if (b[key] === null) return -1;
+			return a[key] - b[key];
+		}
+		return a.taskType.localeCompare(b.taskType) || a.topologyDigest.localeCompare(b.topologyDigest);
+	});
+	return {
+		recordCount: records.length,
+		groups: summaries
+	};
+}
+/** Query and rank the same registry records using the opt-in observational
+* policy: delivery rate, wall time, tokens, then human messages; unknowns last. */
+async function graphCorpusSummary(reg, query = {}) {
+	return observedGraphSummary(await graphRunsFor(reg, query));
 }
 /** The documented heuristic: delivered beats failed; among delivered, cheaper
 *  (tokens, then iterations) wins; ties go to the most recent. */
-function pickBestGraph(records) {
+function pickBestGraph(records, options = {}) {
+	if (options.policy === "observed") {
+		const group = observedGraphSummary(records).groups[0];
+		return group && pickBestGraph(group.runs);
+	}
 	const delivered = records.filter((row) => row.outcome.kind === "delivered");
 	if (delivered.length === 0) return void 0;
 	const better = (a, b) => {
@@ -7534,7 +7936,17 @@ async function loadGraph(reg, digest) {
 *  author a new one — with the reason stated either way (the decision is data). */
 async function lookupGraph(reg, taskDigest) {
 	const records = await graphRunsFor(reg, taskDigest);
-	const best = pickBestGraph(records);
+	const candidates = [];
+	const loaded = /* @__PURE__ */ new Map();
+	for (const record of records) {
+		if (!loaded.has(record.graphDigest)) loaded.set(record.graphDigest, await loadGraph(reg, record.graphDigest));
+		if (!loaded.get(record.graphDigest)?.observed) candidates.push(record);
+	}
+	if (records.length && !candidates.length) return {
+		kind: "author",
+		reason: "only observed topologies are available; author an executable graph"
+	};
+	const best = pickBestGraph(candidates);
 	if (best) {
 		const graph = await loadGraph(reg, best.graphDigest);
 		if (graph) return {
@@ -7552,19 +7964,33 @@ async function lookupGraph(reg, taskDigest) {
 		reason: records.length === 0 ? "first run for this task shape" : "no graph delivered for this task shape yet"
 	};
 }
-/** Rehydrate a stored graph into a runnable one. The check comes from the
-*  CALLER's environment (oracles are environment, never stored). */
-function graphFromStored(stored, check) {
+/** Rehydrate a stored graph, binding trigger data and an environment-owned named check. */
+function graphFromStored(stored, environment = {}) {
+	if (stored.observed) throw new ValidationError("graphFromStored: observed topology cannot be replayed");
+	const { digest: _digest, observed: _observed, triggerBindings: _triggerBindings, deliverable, ...topology } = stored.triggerBindings !== void 0 ? bindCompiledGraphTriggers(stored, stored.triggerBindings, typeof environment === "function" ? void 0 : environment.trigger ?? {}) : typeof environment === "function" ? stored : bindGraphParameters(stored, { trigger: environment.trigger ?? {} });
+	const selected = typeof environment === "function" ? environment : environment.checks && Object.hasOwn(environment.checks, deliverable.checkRef ?? "") ? environment.checks[deliverable.checkRef] : deliverable.checkRef === "command" ? deliverable.command : deliverable.checkRef === "route" && deliverable.when ? ((out, context) => context ? context.originalVerdict?.valid !== false : checkGraphRoute(deliverable.when, out)) : void 0;
+	if (!selected) throw new ValidationError(`graphFromStored: unknown checkRef ${deliverable.checkRef ?? "(missing)"}`);
+	const materialized = stored.triggerBindings === void 0 ? {} : { triggerBindings: [] };
+	if (typeof selected === "function") {
+		const { command: _command, ...description } = deliverable;
+		return {
+			...topology,
+			...materialized,
+			deliverable: {
+				...description,
+				check: selected
+			}
+		};
+	}
+	const command = selected === deliverable.command ? selected : bindGraphParameters(selected, { trigger: environment.trigger ?? {} });
 	return {
-		nodes: stored.nodes,
-		edges: stored.edges,
-		budget: stored.budget,
+		...topology,
+		...materialized,
 		deliverable: {
-			check,
-			...stored.deliverable.describe ? { describe: stored.deliverable.describe } : {}
-		},
-		...stored.entry === void 0 ? {} : { entry: stored.entry },
-		...stored.gates === void 0 ? {} : { gates: stored.gates }
+			...deliverable,
+			command,
+			check: () => false
+		}
 	};
 }
 /** Digests present on disk (integrity probe for tests and audits). */
@@ -7575,8 +8001,7 @@ async function storedGraphDigests(reg) {
 		return [];
 	}
 }
-//#endregion
-//#region src/runtime/supervise/supervise-graph-subtasks.ts
+// src/runtime/supervise/supervise-graph-subtasks.ts
 /** A stored graph's topology, from the registry `SuperviseOptions.graphRegistry` names. */
 async function storedGraphTopology(dir, digest) {
 	if (dir === void 0) throw new ValidationError("run_graph: this run names no graph registry (SuperviseOptions.graphRegistry), so a graphDigest cannot resolve; pass the graph as data");
@@ -7608,8 +8033,7 @@ async function graphSubtaskOutput(overlay, out, flowFailure) {
 		...exhaustedEdges.length === 0 ? {} : { exhaustedEdges }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/recursive-worker-factory.ts
+// src/runtime/supervise/recursive-worker-factory.ts
 /** The factory that spawns the children of one parent seat, leaf or managed. */
 function recursiveWorkerFactoryFor(env, seat) {
 	const makeRecursiveWorker = (authoredProfile, spawnContext, recovering = false) => {
@@ -7663,7 +8087,7 @@ function managedWorker(env, seat, admitted, spawnContext) {
 		unassessedOutput: false
 	};
 	const deps = buildNestedManagerDeps(child);
-	return withModelSubstitution(driverChild(authorized, ownFlow === void 0 ? supervisorAgent(authorized, deps) : supervisorAgentWithTestBrain(authorized, {
+	const nested = ownFlow === void 0 ? supervisorAgent(authorized, deps) : supervisorAgentWithTestBrain(authorized, {
 		...deps,
 		brain: runtimeFlowBrain(),
 		routeFlow: ownFlow.route,
@@ -7672,7 +8096,8 @@ function managedWorker(env, seat, admitted, spawnContext) {
 			debounceMs: 0,
 			...options.wake
 		}
-	}), journal, childExecution.ref, () => child.acceptedSubmission, env.recoveryFactories.get(child.childFactory), () => child.unassessedOutput, admitted.seatManagedLeaf ? child.managerDeliverable : void 0, ownGraph ? (out) => graphSubtaskOutput(ownGraph, out, ownFlow?.run.failure) : void 0), admitted.modelSubstitution);
+	});
+	return withModelSubstitution(driverChild(authorized, nested, journal, childExecution.ref, () => child.acceptedSubmission, env.recoveryFactories.get(child.childFactory), () => child.unassessedOutput, admitted.seatManagedLeaf ? child.managerDeliverable : void 0, ownGraph ? (out) => graphSubtaskOutput(ownGraph, out, ownFlow?.run.failure) : void 0), admitted.modelSubstitution);
 }
 /**
 * The root of a `run_graph` subtask carries its graph's topology, and its subtree runs under that
@@ -7742,8 +8167,7 @@ function registerRecovery(env, makeRecursiveWorker) {
 	});
 	env.recoveryFactories.set(makeRecursiveWorker, factory);
 }
-//#endregion
-//#region src/runtime/supervise/worker-retry.ts
+// src/runtime/supervise/worker-retry.ts
 /**
 * WORKER-SPAWN RETRY — the second chance `driverRetry` gives the root, given to a leaf.
 *
@@ -7754,7 +8178,7 @@ function registerRecovery(env, makeRecursiveWorker) {
 *   bridgeExecutor: bridge stream error: host-executor: acquire timeout after 60000ms
 *   (in_flight=4/4, queued=1)
 *
-* Measured 2026-08-22 on discovery-lab cells oscnp s2/s3: two live cells held 2 leads and up to 8
+* Two live cells held 2 leads and up to 8
 * workers on one bridge whose host executor caps live harness children at 4. A worker spawn that
 * queued past the bridge's single 60 s acquire deadline died there, and the run lost that worker
 * permanently even though a slot freed seconds later. The bridge retries nothing.
@@ -7969,8 +8393,7 @@ function defaultSleep(ms, signal) {
 	if (ms <= 0 || signal?.aborted) return Promise.resolve();
 	return sleep(ms, signal);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-recursive-workers.ts
+// src/runtime/supervise/supervise-recursive-workers.ts
 function createSuperviseWorkers(setup, cancelDurableRun) {
 	const { options, canonicalProfile, rootExecution, guidanceComposer, deliverable, analysts, journal, runId, rootOwnerId, now } = setup;
 	const recoveryFactories = /* @__PURE__ */ new WeakMap();
@@ -8045,8 +8468,7 @@ function createSuperviseWorkers(setup, cancelDurableRun) {
 		graphOverlays
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-registry.ts
+// src/runtime/supervise/supervise-registry.ts
 /** Resolve one option that may be given as a value OR as a name into `opts.registry`. Both failure
 *  modes name the option, the requested name, and the table it was looked up in — a typo must not
 *  degrade into a silently unconfigured run (which for `deliverable` means "no run can ever
@@ -8104,8 +8526,7 @@ async function verifyProfilePromotions(table) {
 	const { verifySealedExperiment } = await import("@tangle-network/agent-eval/experiment");
 	for (const [name, entry] of promoted) if (!await verifySealedExperiment(entry.promotion.experiment)) throw new ValidationError(`supervise: opts.registry.profiles ${JSON.stringify(name)} cites a sealed play whose digest does not match its spec`);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-root-evidence.ts
+// src/runtime/supervise/supervise-root-evidence.ts
 /**
 * Record what a run-scoped cancel actually did, at the ONE place that observes the run's terminal
 * state: the `supervise()` settle path.
@@ -8179,8 +8600,7 @@ function rootProviderModelEvidence(observations) {
 function rootProviderModelEvidenceFromExecution(evidence) {
 	return evidence ?? rootProviderModelEvidence([]);
 }
-//#endregion
-//#region src/runtime/supervise/supervise-root-profile.ts
+// src/runtime/supervise/supervise-root-profile.ts
 /**
 * The composer `profileGuidance` selects, or `undefined` when no guidance is selected. The result
 * is re-validated as an AgentProfile, and a composition that breaks the schema is refused as a
@@ -8261,8 +8681,7 @@ function rootSpawnResourceRoot(backend) {
 	}
 	return isLoopbackHost(host) ? resolve(backend.cwd) : void 0;
 }
-//#endregion
-//#region src/runtime/supervise/driver-execution-attempt.ts
+// src/runtime/supervise/driver-execution-attempt.ts
 /** The failure a terminal artifact reports, as the error a failed harness turn raises. */
 function harnessTurnFailure(runtime, artifact) {
 	const reported = executorFailure(artifact);
@@ -8593,8 +9012,7 @@ var DriverExecutionAttempt = class {
 		});
 	}
 };
-//#endregion
-//#region src/runtime/supervise/manager-drive-session.ts
+// src/runtime/supervise/manager-drive-session.ts
 /** The profile the provider sees for `profile`, run on `seat` when one is active. */
 function seatProviderProfile(profile, seat) {
 	return providerVisibleProfile(seat ? seatExecutionProfile(profile, seat.stage) : profile);
@@ -8755,20 +9173,19 @@ var ManagerDriveSession = class {
 				at: new Date(now()).toISOString()
 			});
 			await seatSelection.onPause(scope.view.root, error.resumeAt, "paused");
-			await sleepScopeWait(scope, Math.max(1e3, Date.parse(error.resumeAt) - now()), scope.signal, "seat-wait");
+			const waitMs = Math.max(1e3, Date.parse(error.resumeAt) - now());
+			await sleepScopeWait(scope, waitMs, scope.signal, "seat-wait");
 			afterRecheck = true;
 		}
 	}
 };
-//#endregion
-//#region src/mcp/tools/coordination-request-context.ts
+// src/mcp/tools/coordination-request-context.ts
 /** The tool-call timeout Runtime asks harnesses to give its coordination server. The Tangle
 *  profile materializer writes it as `MCP_TOOL_TIMEOUT` (Claude Code) and `tool_timeout_sec`
 *  (Codex) when an attachment declares `metadata.toolTimeoutMs`, so a fenced coordination call
 *  that holds its response for its whole fence is never cut off at the 60 s harness default. */
 const COORDINATION_CLIENT_TOOL_TIMEOUT_MS = 3e5;
-//#endregion
-//#region src/runtime/supervise/supervise-driver-attempt.ts
+// src/runtime/supervise/supervise-driver-attempt.ts
 async function executeDriverAttempt(input) {
 	const { state, scope, retainedOwner, turnCap } = input;
 	if (!(scope.view.inFlight > 0)) assertDriverBudgetOpen(scope, input.now);
@@ -8923,8 +9340,7 @@ async function providerAttemptFactory(input, providerHarness) {
 		}
 	});
 }
-//#endregion
-//#region src/runtime/supervise/supervise-driver-session.ts
+// src/runtime/supervise/supervise-driver-session.ts
 /** Run a harness-brained manager through the same executor factory as its children. The manager's
 * full profile is preserved, the live coordination server is added under one reserved alias, and
 * every streamed turn is charged to the manager's scope before it may continue. */
@@ -9082,8 +9498,7 @@ async function reentryContinuity(backend, scope, retainedOwner) {
 	}
 	return UNPROVEN_CONTINUITY;
 }
-//#endregion
-//#region src/runtime/supervise/supervise-manager-harness.ts
+// src/runtime/supervise/supervise-manager-harness.ts
 /**
 * Resolve the harness that drives each manager owner: the caller's resolver or harness, claimed
 * per owner so one steerable harness never serves two managers, or one built from the backend.
@@ -9154,8 +9569,7 @@ function driveHarnessClaims() {
 		return harness;
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-spawn-preflight.ts
+// src/runtime/supervise/supervise-spawn-preflight.ts
 /**
 * The pre-flight `supervise` installs for a bridge backend. No new knob: the backend already says
 * where the bridge is, and these are the questions only the bridge can answer.
@@ -9265,8 +9679,7 @@ function composeSpawnPreflights(...preflights) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-sql-admission.ts
+// src/runtime/supervise/supervise-sql-admission.ts
 /** What a SQL run context admits, in two phases: identity and worker seam before any compute (a
 *  synchronous configuration fault), then coordinator and retained-control capabilities at start. */
 function assertSqlRunOptions(options) {
@@ -9282,8 +9695,7 @@ async function assertSqlRunProvider(options) {
 	const capabilities = await provider.capabilities();
 	if (!capabilities.retainedControl || !capabilities.streaming.turnIdempotency || !capabilities.streaming.replay || !provider.get) throw new ValidationError("supervise: SQL runContext requires retainedControl, replay, turn idempotency, and provider.get");
 }
-//#endregion
-//#region src/runtime/supervise/supervise-run-setup.ts
+// src/runtime/supervise/supervise-run-setup.ts
 function prepareSuperviseRun(profile, task, opts, testBrain) {
 	const options = captureSuperviseOptions(opts);
 	assertSqlRunOptions(options);
@@ -9469,7 +9881,10 @@ function resolveRunRegistry(options) {
 		analysts: resolveNamed("analysts", "analysts", options.analysts, options.registry?.analysts),
 		profileTable: snapshotProfileTable(options.registry?.profiles, options.allowedModels, options.makeWorkerAgent === void 0 && options.authorizeSpawn === void 0 ? (entry, context) => {
 			const security = validateAgentProfileSecurity(entry, options.profileSecurity ?? DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY);
-			if (!security.ok) throw new ValidationError(`${context}: ${security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ")}`);
+			if (!security.ok) {
+				const details = security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ");
+				throw new ValidationError(`${context}: ${details}`);
+			}
 			if (options.backend !== void 0 && options.makeLeafAgent === void 0 && declaredRuntimeToolNames(entry).length === 0) assertBackendProfileMaterialization(entry, options.backend, context);
 		} : void 0)
 	};
@@ -9536,8 +9951,7 @@ function spawnProfileComposer(options, driver, childrenCanSubmit, composeSpawnPr
 		};
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise-run-lifecycle.ts
+// src/runtime/supervise/supervise-run-lifecycle.ts
 function superviseInternal(profile, task, opts, testBrain) {
 	const setup = prepareSuperviseRun(profile, task, opts, testBrain);
 	const { options } = setup;
@@ -9763,8 +10177,7 @@ async function settleSupervisedRun(run, pending, cancellation) {
 		...rootExecution.ref === void 0 ? {} : { execution: rootExecution.ref }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervise.ts
+// src/runtime/supervise/supervise.ts
 /** Capabilities a data-only consumer may require before building an opted-in run. `graphTools`:
 *  a manager whose profile grants `run_graph` can start an agent graph as one subtask. */
 const superviseFleetCapabilities = Object.freeze({
@@ -9795,7 +10208,6 @@ function superviseWithContext(profile, task, opts, brain) {
 		...signal === void 0 ? {} : { signal }
 	}, brain));
 }
-//#endregion
-export { noProgressFor as $, runBrainLoop as A, graphRootProfile as B, workerFromBackend as C, composeReentryTask as D, UNPROVEN_CONTINUITY as E, flowRootProfile as F, dumbContinuationFailPrompt as G, analyzesFindingsReportPrompt as H, journaledGateDecider as I, kernelPromptRegistry as J, dumbContinuationPassPrompt as K, routeFlowOf as L, createGraphOverlay as M, GraphRouteError as N, serveCoordinationMcp as O, createFlowRun as P, anyOf as Q, validateFlowGraph as R, taskShapeDigest as S, supervisorAgentWithTestBrain as T, createPromptRegistry as U, validateGraphTopology as V, delegatesWorkerBriefPrompt as W, promptHandle as X, naiveContinuationPrompt as Y, allWorkersStalled as Z, loadGraph as _, superviseRootProfile as a, renderAnytimeTable as at, recordGraphRun as b, retryPreSpawnRefusals as c, createSupervisorSpanRecorder as ct, graphDigest as d, plateau as et, graphFromStored as f, listGraphRuns as g, graph_registry_exports as h, profileGuidanceComposer as i, plateauLength as it, runtimeFlowBrain as j, driverAgent as k, withWorkerSpawnRetry as l, graphRunsFor as m, superviseFleetCapabilities as n, areaUnderCurve as nt, isPreSpawnExecutorFailure as o, readRootStream as ot, graphRegistry as p, formatPromptHandle as q, superviseWithTestBrain as r, bestSoFar as rt, resolveWorkerSpawnRetry as s, readRootStreamReceipt as st, supervise as t, anytimeReport as tt, digestOfGraph as u, lookupGraph as v, supervisorAgent as w, storedGraphDigests as x, pickBestGraph as y, defaultEdgeTraversalCap as z };
+export { delegatesWorkerBriefPrompt as $, graphRouteWhenSchema as A, runtimeFlowBrain as B, storedGraphDigests as C, compileGraphParameters as D, bindGraphParameters as E, composeReentryTask as F, journaledGateDecider as G, GraphRouteError as H, serveCoordinationMcp as I, defaultEdgeTraversalCap as J, routeFlowOf as K, coordinationControlToolNames as L, supervisorAgent as M, supervisorAgentWithTestBrain as N, graphTriggerBindingsSchema as O, UNPROVEN_CONTINUITY as P, createPromptRegistry as Q, driverAgent as R, recordStoredGraphRun as S, assertGraphTriggerBindings as T, createFlowRun as U, createGraphOverlay as V, flowRootProfile as W, validateGraphTopology as X, graphRootProfile as Y, analyzesFindingsReportPrompt as Z, listGraphRuns as _, createSupervisorSpanRecorder as _t, superviseRootProfile as a, promptHandle as at, pickBestGraph as b, retryPreSpawnRefusals as c, noProgressFor as ct, graphCorpusSummary as d, areaUnderCurve as dt, dumbContinuationFailPrompt as et, graphDigest as f, bestSoFar as ft, graph_registry_exports as g, readRootStreamReceipt as gt, graphRunsFor as h, readRootStream as ht, profileGuidanceComposer as i, naiveContinuationPrompt as it, workerFromBackend as j, graphFileSchema as k, withWorkerSpawnRetry as l, plateau as lt, graphRegistry as m, renderAnytimeTable as mt, superviseFleetCapabilities as n, formatPromptHandle as nt, isPreSpawnExecutorFailure as o, allWorkersStalled as ot, graphFromStored as p, plateauLength as pt, validateFlowGraph as q, superviseWithTestBrain as r, kernelPromptRegistry as rt, resolveWorkerSpawnRetry as s, anyOf as st, supervise as t, dumbContinuationPassPrompt as tt, digestOfGraph as u, anytimeReport as ut, loadGraph as v, taskShapeDigest as w, recordGraphRun as x, lookupGraph as y, runBrainLoop as z };
 
-//# sourceMappingURL=supervise-BUOeThuB.js.map
+//# sourceMappingURL=supervise-CaeZcgAW.js.map