@tangle-network/agent-runtime 0.348.1 → 0.350.2

package/dist/{supervisor-DDy0aEtR.js → supervisor-C1OePYE-.js}

@@ -1,23 +1,23 @@
-import { a as publishExclusiveDurableFile, c as captureRunWriteContext, l as fenceRunWrite, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile, t as spawnJournalRecordEvents } from "./record-events-D93DkpAx.js";
-import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-DodWX-cb.js";
-import { $ as isAbortError$1, B as sha256Bytes$1, Ct as armDeadlineTimer, Dt as singleFlightTeardown, Et as isDeadlineAbortReason, G as addTokenUsage, H as hasControlCharacter, I as deepFreezeCandidate, J as cloneTokenUsage, K as chargedTokens, M as verifyWorkspaceSnapshotArtifacts, Ot as teardownExecutor, Q as hasCompleteCacheBreakdown, St as ROOT_DEADLINE_REASON, Tt as checkInIdleMs, U as abortError, W as addSpend, X as errorMessage, Y as deleteBoxSafe, Z as fnv1a32Hex, _t as withBudgetResources, at as roundBoxMinutes, c as verifyAgentCandidateWorkspaceTree, ct as throwAbort, dt as withTimeout, et as isAsyncIterable, ft as zeroSpend, g as verifiedArtifactChunks, gt as resourceTelemetry, ht as assertResources, it as randomUuid, kt as teardownSurfaces, lt as throwIfAborted, mt as addResourceSpend, nt as promptCacheTokenClasses, o as readAgentCandidateWorkspaceArtifactFiles, ot as sleep, pt as zeroTokenUsage, q as cloneSpend, rt as randomSuffix, s as verifyAgentCandidateWorkspaceArtifacts, st as stringifySafe, t as assertSandboxProfileCompatibility, tt as mapWithConcurrency, ut as unmeteredSpend, v as verifyAgentCandidateWorkspaceArchive, vt as ACCEPTED_RESULT_GRACE_MS, wt as boundedChildDeadlineAt, yt as CHILD_DEADLINE_REASON } from "./sandbox-profile-compat-_fEtHPCj.js";
+import { a as publishExclusiveDurableFile, c as captureRunWriteContext, l as fenceRunWrite, p as sha256, r as assertNoSymlinkDescendant, s as writeAtomicDurableFile, t as spawnJournalRecordEvents } from "./record-events-B2GUgYdz.js";
+import { c as RetainedInteractiveAdmissionError, d as RetainedRunDispatchBindingError, f as RuntimeRunStateError, i as ConfigError, l as RetainedInteractiveBindingError, m as ValidationError$1, r as BackendTransportError, t as AgentEvalError$1, u as RetainedRunAdmissionError } from "./errors-wuhGvpE3.js";
+import { $ as hasCompleteCacheBreakdown, At as teardownSurfaces, B as sha256Bytes$1, Ct as ROOT_DEADLINE_REASON, Dt as isDeadlineAbortReason, Et as checkInIdleMs, G as addSpend, H as hasControlCharacter, I as deepFreezeCandidate, J as cloneSpend, K as addTokenUsage, M as verifyWorkspaceSnapshotArtifacts, Ot as singleFlightTeardown, Q as fnv1a32Hex, Tt as boundedChildDeadlineAt, U as nativeSystemPrompt, W as abortError, X as deleteBoxSafe, Y as cloneTokenUsage, Z as errorMessage, _t as resourceTelemetry, at as randomUuid, bt as CHILD_DEADLINE_REASON, c as verifyAgentCandidateWorkspaceTree, ct as stringifySafe, dt as unmeteredSpend, et as isAbortError$1, ft as withTimeout, g as verifiedArtifactChunks, gt as assertResources, ht as addResourceSpend, it as randomSuffix, kt as teardownExecutor, lt as throwAbort, mt as zeroTokenUsage, nt as mapWithConcurrency, o as readAgentCandidateWorkspaceArtifactFiles, ot as roundBoxMinutes, pt as zeroSpend, q as chargedTokens, rt as promptCacheTokenClasses, s as verifyAgentCandidateWorkspaceArtifacts, st as sleep, t as assertSandboxProfileCompatibility, tt as isAsyncIterable, ut as throwIfAborted, v as verifyAgentCandidateWorkspaceArchive, vt as withBudgetResources, wt as armDeadlineTimer, yt as ACCEPTED_RESULT_GRACE_MS } from "./sandbox-profile-compat-BxMQ1VXv.js";
 import { runTaskQueue } from "./task-queue.js";
-import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-CyCUwHed.js";
-import { i as notifyRuntimeHookEvent } from "./runtime-hooks-tXpAarhW.js";
+import { _ as agentHarness, a as concreteProfileModel, c as profileModelExecutionSettings, d as assertRouterAutoDeclaration, f as assertRouterAutoResponse, g as observedModelMatchesDeclared, h as observedModelHasSnapshot, l as profileProviderModel, m as mergeObservedModelIdentity, o as enforceTokenLimits, s as profileBridgeWireModel, t as assertExecutableAgentProfile, u as resolveRouterRetryPolicy } from "./model-policy-GSxWwP-b.js";
+import { i as notifyRuntimeHookEvent } from "./runtime-hooks-CsW2pfFk.js";
 import { AGENT_PROFILE_MATERIALIZATION_AXES, AgentEnvironmentCapabilitiesSchema, AgentExactRunControlRefSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStatusSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentNativeContextContinuationResultSchema, AgentRunCancellationAcknowledgementSchema, AgentRunCancellationRequestSchema, AgentTurnInputSchema, AgentTurnResultSchema, CanonicalStreamEventSchema, ContextTransferReceiptSchema, ContextTransferRequestSchema, InteractionAcknowledgementSchema, InteractionResponseCommandSchema, NativeContextBoundaryProofSchema, NativeContextContinuationRequestSchema, REASONING_EFFORTS, RuntimeEventEnvelopeSchema, TerminalReplayWindowSchema, TerminalSessionRefSchema, agentCandidateArtifactRefSchema, agentCandidateWorkspaceManifestMaterialSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentNativeContextContinuationResultMatchesRequest, agentProfileSchema, agentRunCancellationAcknowledgementMatchesRequest, agentRunCancellationRequestDigest, agentWorkspaceSnapshotRefDigest, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalWorkspaceCwd, contextTransferReceiptMatches, exactAgentInteractiveSessionStart, harnessTypeSchema, nativeContextContinuationTurnDigest, nativeReasoningControl, profileMaterializationAxes, profileMaterializationAxes as profileMaterializationAxes$1, renderInputPartsAsText, sha256DigestSchema, workspaceCheckpointRequestDigest, workspaceCheckpointResultMatchesRequest, workspaceCleanupAcknowledgementMatches, workspaceCleanupRequestDigest, workspaceForkRequestDigest, workspaceForkResultMatchesRequest } from "@tangle-network/agent-interface";
 import { isToolSpan, toolSpansToTraceAnalysisStore } from "@tangle-network/agent-eval";
 import { createAgentRunOutcomeTracker } from "@tangle-network/sandbox/runtime";
 import { SDKError, generateIdempotencyKey, isRecord, withRetry } from "@tangle-network/agent-core";
 import { collectAgentFinalMessageText, collectAgentResponseText } from "@tangle-network/sandbox";
-import { REDACTION_VERSION as REDACTION_VERSION$1, redact } from "@tangle-network/agent-eval/traces";
 import { z } from "zod";
+import { REDACTION_VERSION as REDACTION_VERSION$1, redact } from "@tangle-network/agent-eval/traces";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { LedgerCanonicalizationError, canonicalString, jsonDocument, merkleLeafHash, merkleRoot, merkleSalt } from "@tangle-network/agent-eval/ledger-core";
 import { appendFileSync, closeSync, constants, createReadStream, existsSync, fstatSync, fsyncSync, ftruncateSync, mkdirSync, openSync, readFileSync, readSync, statSync, writeSync } from "node:fs";
 import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
 import { spawn } from "node:child_process";
 import { access, chmod, copyFile, mkdir, mkdtemp, open, readFile, readdir, realpath, rm, rmdir, stat, symlink, writeFile } from "node:fs/promises";
-import { applyWorkspacePlan, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
+import { applyWorkspacePlan, assertWorkspacePlanSupported, hashWorkspacePlan, materializeProfile, resolveAgentProfileResources } from "@tangle-network/agent-profile-materialize";
 import { stripVTControlCharacters } from "node:util";
 import { homedir, hostname, tmpdir } from "node:os";
 import { request } from "node:http";
@@ -26,7 +26,7 @@ import { Readable } from "node:stream";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ATTR, deriveHexId, isW3CSpanId, isW3CTraceId } from "@tangle-network/agent-trace-contract";
 import { clearImmediate, setImmediate as setImmediate$1 } from "node:timers";
-//#region src/runtime/turn-input.ts
+// src/runtime/turn-input.ts
 /**
 * Copy only fields that describe a new provider turn.
 *
@@ -104,8 +104,7 @@ function promptPartFromInputPart(part) {
 		url: part.url
 	};
 }
-//#endregion
-//#region src/runtime/retained-run-binding.ts
+// src/runtime/retained-run-binding.ts
 function exactSession(environment, controlRef) {
 	if (environment.id !== controlRef.environmentId || environment.provider !== controlRef.provider) throw new Error("provider reconstructed a different retained environment");
 	if (!environment.session || !controlRef.sessionId) throw new Error("retained run control requires a provider session id");
@@ -312,13 +311,11 @@ function delay(ms, signal) {
 		signal?.addEventListener("abort", onAbort, { once: true });
 	});
 }
-//#endregion
-//#region src/record-value.ts
+// src/record-value.ts
 function recordValue(value) {
 	return isRecord(value) ? value : void 0;
 }
-//#endregion
-//#region src/runtime/harness-usage.ts
+// src/runtime/harness-usage.ts
 /**
 * Read and validate one codex `turn.completed` usage record.
 *
@@ -446,8 +443,7 @@ function describe$1(value) {
 	if (Array.isArray(value)) return "an array";
 	return typeof value;
 }
-//#endregion
-//#region src/runtime/sandbox-events.ts
+// src/runtime/sandbox-events.ts
 /**
 * Forward a sandbox event to an optional observer without letting observer
 * behavior affect the run. The observer receives a defensive copy, synchronous
@@ -509,7 +505,7 @@ function sandboxEventServedBackend(event) {
 /**
 * Fail the execution when the platform reports serving a model other than the exact one asked for.
 *
-* Measured motive (agent-runtime#892, live infrastructure 2026-08-17): 6 of 6 boxes whose profile
+* Measured motive (agent-runtime#892, live infrastructure): 6 of 6 boxes whose profile
 * declared `zai-coding-plan/glm-5.2` reported
 * `{"provider":"openai-compat","model":"deepseek/deepseek-v4-flash","source":"environment"}`,
 * while the materialization receipt recorded the declared model as `status: "known"`. Sending
@@ -1148,8 +1144,7 @@ function withoutDelta(event) {
 function asRecord(value) {
 	return value !== null && typeof value === "object" ? value : void 0;
 }
-//#endregion
-//#region src/runtime/timestamps.ts
+// src/runtime/timestamps.ts
 const validTimestamp = "2026-01-01T00:00:00.000Z";
 /** Validate a timestamp with the public runtime envelope contract. */
 function assertRuntimeTimestamp(value, label) {
@@ -1169,8 +1164,7 @@ function assertRuntimeTimestamp(value, label) {
 		throw new Error(`${label} must be a valid ISO timestamp`, { cause: error });
 	}
 }
-//#endregion
-//#region src/runtime/sandbox-transport-events.ts
+// src/runtime/sandbox-transport-events.ts
 /** Canonical Sandbox/provider wire-envelope decoding and transport identity. */
 const CANONICAL_STREAM_EVENT_TYPES = /* @__PURE__ */ new Set([
 	"child-task",
@@ -1282,8 +1276,7 @@ function optionalTimestamp(value) {
 	assertRuntimeTimestamp(value, "occurredAt");
 	return value;
 }
-//#endregion
-//#region src/runtime/sandbox-executor-output.ts
+// src/runtime/sandbox-executor-output.ts
 /** Streamed and terminal Sandbox executor output, using one tool-part projector. */
 /**
 * Fresh per-turn {@link SandboxToolPartState} for {@link mapSandboxToolEvent} — an
@@ -1627,8 +1620,7 @@ function terminalTextFromSandboxEvent(event) {
 		if (typeof value === "string") return value;
 	}
 }
-//#endregion
-//#region src/redact.ts
+// src/redact.ts
 /**
 * Redaction for values that may leave the Runtime process. The built-in
 * redactor is agent-eval's redaction core (`@tangle-network/agent-eval/traces`,
@@ -1669,8 +1661,7 @@ function resolveRedactor(redact) {
 	if (!redact) return defaultRedactor;
 	return (value) => defaultRedactor(redact(value));
 }
-//#endregion
-//#region src/runtime/supervise/spend-validation.ts
+// src/runtime/supervise/spend-validation.ts
 /** Reject malformed ceilings before they can mint capacity through negative reservations. */
 function assertValidBudget(budget, label = "budget") {
 	const safeInteger = (value, field) => {
@@ -1713,8 +1704,7 @@ function assertValidSpend(spend, label) {
 		if (spend.usdKnown !== false) throw new Error(`${label}.usdEstimated requires ${label}.usdKnown false`);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/budget-ledger.ts
+// src/runtime/supervise/budget-ledger.ts
 /**
 * The balances of one conserved budget pool, and the arithmetic that moves them. `createBudgetPool`
 * (`./budget`) owns tickets, the wait queue and the public contract; this module owns the numbers:
@@ -1972,8 +1962,7 @@ function ledgerRestore(l, root, restore) {
 		}
 	}
 }
-//#endregion
-//#region src/runtime/supervise/usage-metering.ts
+// src/runtime/supervise/usage-metering.ts
 /** Fold a normalized `UsageEvent` array into a `Spend`. Tokens and usd are separate
 *  channels; iterations come from `'iteration'` events. Pure; `ms` stays zero (the
 *  pool does not read wall-clock). */
@@ -2059,8 +2048,7 @@ async function foldUsage(events) {
 	for await (const ev of events) meterUsageEvent(totals, ev);
 	return spendFromUsageTotals(totals);
 }
-//#endregion
-//#region src/runtime/supervise/budget.ts
+// src/runtime/supervise/budget.ts
 /**
 * The conserved budget reservation pool — the invariant the whole instrument rests on (critique
 * M5/B3). One root `Budget` becomes a pool of standard quantities (tokens, usd, iterations) and
@@ -2336,8 +2324,7 @@ function describeLeakedReservation(leak) {
 	parts.push(`stage ${leak.stage}`);
 	return parts.join(", ");
 }
-//#endregion
-//#region src/runtime/supervise/error-message.ts
+// src/runtime/supervise/error-message.ts
 const maxCauseDepth = 4;
 const maxMessageLength = 32768;
 const maxPartLength = 2048;
@@ -2413,8 +2400,7 @@ function causeChain(error) {
 	}
 	return chain;
 }
-//#endregion
-//#region src/runtime/supervise/credential-refusal.ts
+// src/runtime/supervise/credential-refusal.ts
 /**
 * The account owner refused an unsupported credential route before dispatch. This is the
 * provider SDK's machine contract, not an HTTP status, class-name guess, or prose match.
@@ -2452,15 +2438,15 @@ function credentialCommandExit(error) {
 		if (typeof exitCode === "number" && Number.isInteger(exitCode) && exitCode > 0) return exitCode;
 	} catch {}
 }
-//#endregion
-//#region src/runtime/json-content-hash.ts
+// src/runtime/json-content-hash.ts
 /**
 * Stable hash for the trace payload. Not cryptographic — only used so
 * downstream eval pipelines can group iterations whose task / output is the
 * same. Bare structural hash; non-JSON values stringify via their `toString`.
 */
 function hashJson(value) {
-	return fnv1a32Hex(jsonContentText(value));
+	const str = jsonContentText(value);
+	return fnv1a32Hex(str);
 }
 /** JSON text with String fallback, including quoted JSON strings and cyclic values. */
 function jsonContentText(value) {
@@ -2472,8 +2458,7 @@ function jsonContentText(value) {
 	}
 	return str;
 }
-//#endregion
-//#region src/runtime/supervise/executor-outcome.ts
+// src/runtime/supervise/executor-outcome.ts
 const outcomeSchema = AgentTurnResultSchema.pick({
 	success: true,
 	error: true
@@ -2556,10 +2541,10 @@ function executorFailureInfra(failure) {
 /** Preserve deterministic result pointers across built-in executors and replay.
 * FNV-1a is an identity convention here, not a cryptographic integrity check. */
 function contentRef(prefix, value) {
-	return `${prefix}:${fnv1a32Hex(jsonContentText(value))}`;
+	const str = jsonContentText(value);
+	return `${prefix}:${fnv1a32Hex(str)}`;
 }
-//#endregion
-//#region src/durable/content-address.ts
+// src/durable/content-address.ts
 /** Stable content address shared by result and trace artifacts. */
 function contentAddress(artifact) {
 	return `sha256:${createHash("sha256").update(stableStringify(artifact), "utf-8").digest("hex")}`;
@@ -2569,8 +2554,7 @@ function stableStringify(value) {
 	if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
 	return `{${Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
 }
-//#endregion
-//#region src/runtime/supervise/snapshot.ts
+// src/runtime/supervise/snapshot.ts
 /** Deeply detach and freeze untrusted data at a runtime decision boundary. The clone prevents the
 * caller from mutating it later; the freeze prevents downstream code from mutating the snapshot.
 * Strings are immutable, so the snapshot shares the caller's strings instead of copying them. */
@@ -2655,8 +2639,7 @@ function deepFreeze(value, seen = /* @__PURE__ */ new Set()) {
 	for (const child of Object.values(value)) deepFreeze(child, seen);
 	return Object.freeze(value);
 }
-//#endregion
-//#region src/runtime/supervise/trace-root.ts
+// src/runtime/supervise/trace-root.ts
 /**
 * Trace roots: one Merkle root over the events a turn archived, so a single event can be proven
 * against the hash its journal record carries without reading the rest of the archive.
@@ -2853,8 +2836,7 @@ function merkleTree() {
 function storedText(event) {
 	return JSON.stringify(event) ?? "null";
 }
-//#endregion
-//#region src/runtime/supervise/upstream-unavailable.ts
+// src/runtime/supervise/upstream-unavailable.ts
 /**
 * An upstream that cannot serve NOW: how Runtime recognizes one, and how long an agent waits for it.
 *
@@ -2927,9 +2909,9 @@ function cappedDoublingMs(consecutive, first, ceiling) {
 	return Math.min(Math.max(start, ceiling), start * 2 ** Math.max(0, consecutive - 1));
 }
 /** The longest hold a refusal's own reset time may ask for: a 5-hour plan window plus a margin. */
-const MAX_RESET_HOLD_MS = 360 * 6e4;
+const MAX_RESET_HOLD_MS = 216e5;
 /** How often a refusal whose reset is beyond {@link MAX_RESET_HOLD_MS} is probed again. */
-const FAR_RESET_PROBE_MS = 60 * 6e4;
+const FAR_RESET_PROBE_MS = 36e5;
 /**
 * When a refusal says its quota resets, as epoch ms, or `undefined` when it names no usable time.
 * The Z.ai Coding Plan's opencode refusal names one in Beijing time with no zone:
@@ -2959,8 +2941,7 @@ function unavailableResumeAt(text, nowMs) {
 function jitteredMs(ms, random) {
 	return ms - Math.floor(ms / 2 * Math.min(1, Math.max(0, random())));
 }
-//#endregion
-//#region src/runtime/supervise/retained-executor.ts
+// src/runtime/supervise/retained-executor.ts
 /** Scope owns the durable writer; provider executors only publish sanitized admissions. */
 const retainedExecutorSeamKey = "runtime.retainedExecutor";
 /** @internal A capture may finish after cancellation; its durable citation remains appendable. */
@@ -3173,10 +3154,39 @@ function registerRetainedExecutorPreparation(factory, prepare) {
 function prepareRetainedExecutor(factory, input) {
 	return retainedPreparations.get(factory)?.(input);
 }
-//#endregion
-//#region src/runtime/failure-cause.ts
+// src/runtime/failure-cause.ts
 const MAX_CAUSE_CHARS = 2048;
 const MAX_CHAIN_STEPS = 12;
+const MACHINE_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
+/** @internal Validate Runtime-owned failure values on observation transports. */
+const runtimeFailureCauseSchema = z.object({
+	code: z.enum([
+		"aborted",
+		"deadline-exceeded",
+		"budget-exhausted",
+		"credential-refused",
+		"request-rejected",
+		"upstream-unavailable",
+		"transport",
+		"provider-contract",
+		"retained-unobservable",
+		"nested-recovery",
+		"platform",
+		"work-failed",
+		"unknown"
+	]),
+	owner: z.enum([
+		"provider",
+		"platform",
+		"runtime",
+		"work",
+		"caller",
+		"unknown"
+	]),
+	cause: z.string().max(MAX_CAUSE_CHARS),
+	/** The upstream or provider machine code the failure carried, when it carried one. */
+	providerCode: z.string().regex(MACHINE_CODE_PATTERN).optional()
+}).readonly();
 const retainedFailures = {
 	unobservable: {
 		code: "retained-unobservable",
@@ -3239,8 +3249,16 @@ function structuralFailure(link) {
 		code: "credential-refused",
 		owner: "caller"
 	};
-	const code = read(link, "code");
+	const code = upstreamMachineCode(link);
 	const status = read(link, "status") ?? read(link, "statusCode");
+	if (code === "SEAT_NOT_LOGGED_IN") return {
+		code: "credential-refused",
+		owner: "caller"
+	};
+	if (code === "MODEL_NOT_FOUND") return {
+		code: "request-rejected",
+		owner: "caller"
+	};
 	if (typeof code === "string" && UNAVAILABLE_CODES.has(code.toLowerCase())) return {
 		code: "upstream-unavailable",
 		owner: "platform"
@@ -3278,7 +3296,10 @@ function structuralFailure(link) {
 	};
 }
 function machineCode(value) {
-	return typeof value === "string" && /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u.test(value) ? value : void 0;
+	return typeof value === "string" && MACHINE_CODE_PATTERN.test(value) ? value : void 0;
+}
+function upstreamMachineCode(link) {
+	return machineCode(read(link, "upstreamCode")) ?? machineCode(read(link, "errorCode")) ?? machineCode(read(link, "code"));
 }
 /**
 * Classify a thrown failure. Pass the caller's signal so a cancellation the caller asked for is
@@ -3287,11 +3308,11 @@ function machineCode(value) {
 */
 function runtimeFailureCause(error, context = {}) {
 	const links = chain(error);
-	let providerCode;
-	for (const link of links) {
-		providerCode = machineCode(read(link, "code"));
-		if (providerCode !== void 0) break;
-	}
+	const providerCode = [
+		"upstreamCode",
+		"errorCode",
+		"code"
+	].flatMap((field) => links.map((link) => machineCode(read(link, field)))).find((code) => code !== void 0);
 	const failure = ({ code, owner }) => ({
 		code,
 		owner,
@@ -3326,15 +3347,10 @@ function runtimeFailureCause(error, context = {}) {
 * a failure with neither does not say who must act, so it is `unknown`, never the work's fault.
 */
 function reportedFailureCause(outcome) {
-	const providerCode = machineCode(outcome.errorCode);
-	return {
-		...structuralFailure({
-			...outcome.errorCode === void 0 ? {} : { code: outcome.errorCode },
-			...outcome.statusCode === void 0 ? {} : { status: outcome.statusCode }
-		}) ?? UNATTRIBUTED,
-		cause: boundedCause(outcome.error ?? "execution reported a failure"),
-		...providerCode === void 0 ? {} : { providerCode }
-	};
+	return runtimeFailureCause(Object.assign(new Error(outcome.error ?? "execution reported a failure"), {
+		errorCode: outcome.errorCode,
+		statusCode: outcome.statusCode
+	}));
 }
 /**
 * Classify a down settlement from the typed facts Runtime recorded while the cause was still a
@@ -3349,21 +3365,20 @@ function settlementFailureCause(down) {
 		...retainedFailures[down.retainedPendingCause],
 		cause
 	};
-	const providerCode = down.failure?.providerCode;
+	if (down.failure !== void 0 && down.failure.code !== "unknown") return {
+		...down.failure,
+		cause
+	};
 	return {
-		...down.failure !== void 0 && down.failure.code !== "unknown" ? {
-			code: down.failure.code,
-			owner: down.failure.owner
-		} : down.infra === false ? {
+		...down.infra === false ? {
 			code: "work-failed",
 			owner: "work"
 		} : UNATTRIBUTED,
 		cause,
-		...providerCode === void 0 ? {} : { providerCode }
+		...down.failure?.providerCode === void 0 ? {} : { providerCode: down.failure.providerCode }
 	};
 }
-//#endregion
-//#region src/runtime/sandbox-outcome.ts
+// src/runtime/sandbox-outcome.ts
 /** Map the public Sandbox outcome to Runtime's stream and verdict vocabulary. */
 function projectSandboxOutcome(outcome) {
 	if (outcome.status === "success") return {
@@ -3408,8 +3423,7 @@ function readSandboxOutcome(value) {
 	if (!outcome || typeof outcome !== "object") return void 0;
 	return outcome;
 }
-//#endregion
-//#region src/runtime/supervise/executable-spec.ts
+// src/runtime/supervise/executable-spec.ts
 /**
 * Parse one untrusted profile into the exact immutable value execution may consume.
 *
@@ -3446,8 +3460,7 @@ function executableAgentSpecSnapshot(raw, context) {
 		...execution === void 0 ? {} : { execution }
 	});
 }
-//#endregion
-//#region src/runtime/provider-observation-snapshot.ts
+// src/runtime/provider-observation-snapshot.ts
 /** Detach provider attempt observations into their immutable journal evidence shape. */
 function snapshotProviderObservations(attempts) {
 	return Object.freeze(attempts.map((attempt) => Object.freeze({
@@ -3456,8 +3469,7 @@ function snapshotProviderObservations(attempts) {
 		...attempt.providerDispatch === "not_started" ? { providerDispatch: "not_started" } : {}
 	})));
 }
-//#endregion
-//#region src/runtime/supervise/materialization.ts
+// src/runtime/supervise/materialization.ts
 const runtimeOwnedExecutorMaterializations = /* @__PURE__ */ new WeakMap();
 const runtimeOwnedScopeOwners = /* @__PURE__ */ new WeakMap();
 const runtimeOwnedExecutorProviderEvidenceState = /* @__PURE__ */ new WeakMap();
@@ -3833,8 +3845,7 @@ function providerAttemptEvidence(model) {
 		models
 	});
 }
-//#endregion
-//#region src/agent/profile-materialization.ts
+// src/agent/profile-materialization.ts
 const KNOWN_AXIS_SET = new Set(AGENT_PROFILE_MATERIALIZATION_AXES);
 /**
 * Compound AgentProfile properties and the canonical leaves they cover.
@@ -3855,7 +3866,11 @@ const compoundAxisLeaves = {
 		"version",
 		"tags"
 	],
-	prompt: ["systemPrompt", "instructions"],
+	prompt: [
+		"systemPrompt",
+		"appendSystemPrompt",
+		"instructions"
+	],
 	model: [
 		"modelDefault",
 		"modelSmall",
@@ -3894,6 +3909,7 @@ const promptModelProfileMaterialization = defineProfileMaterializationContract({
 	axes: [
 		"name",
 		"systemPrompt",
+		"appendSystemPrompt",
 		"instructions",
 		"modelDefault",
 		"modelProvider",
@@ -3920,6 +3936,7 @@ const worktreeCliProfileMaterialization = defineProfileMaterializationContract({
 	axes: [
 		"name",
 		"systemPrompt",
+		"appendSystemPrompt",
 		"instructions",
 		"modelDefault",
 		"modelProvider",
@@ -4052,13 +4069,14 @@ function assertProfileMaterializes(profile, harness, context, skip) {
 * `failOnError: false` so every dimension comes back on `plan.unsupported` and the caller decides.
 */
 function unsupportedProfileDimensions(profile, harness, dimensions, skip) {
-	return materializeProfile({
+	const query = {
 		...profile,
 		resources: {
 			...profile.resources,
 			failOnError: false
 		}
-	}, harness, skip ? { skip: [...skip] } : void 0).unsupported.filter((entry) => dimensions.includes(entry.dimension));
+	};
+	return materializeProfile(query, harness, skip ? { skip: [...skip] } : void 0).unsupported.filter((entry) => dimensions.includes(entry.dimension));
 }
 /** One clause per dimension the harness cannot execute, carrying the materializer's own reason. */
 function renderUnsupported(unsupported) {
@@ -4126,8 +4144,7 @@ function assertLeafAxis(raw, label) {
 function isAxisSupported(axis, supported) {
 	return supported.has(axis);
 }
-//#endregion
-//#region src/runtime/process-tree.ts
+// src/runtime/process-tree.ts
 const processKillGraceMs = 250;
 const processGroupExitConfirmMs = 1e3;
 const processGroupExitPollMs = 10;
@@ -4177,8 +4194,7 @@ function processGroupExists(processGroupId) {
 		return true;
 	}
 }
-//#endregion
-//#region src/mcp/codex-execution-policy.ts
+// src/mcp/codex-execution-policy.ts
 const CODEX_EXECUTION_POLICY = {
 	sessionPersistence: "ephemeral",
 	userConfig: false,
@@ -4370,22 +4386,7 @@ function buildHarnessArgs(harness, taskPrompt, options = {}) {
 	}
 	return args;
 }
-/**
-* Map a supervisor-authored `AgentProfile` + the per-task prompt onto a concrete harness
-* `command` + `args` (the §1.5 fix). UNLIKE the prompt-only `HARNESS_INVOCATIONS.buildArgs`
-* — which drops both the authored model and the system prompt — this threads the FULL
-* profile payload into argv:
-*
-*  - `profile.prompt.systemPrompt` → the PROMPT channel: a portable, harness-agnostic
-*    default that prepends the system prompt above the task prompt (`<system>\n\n<task>`),
-*    so the authored standing instructions reach EVERY harness (none of the three CLIs
-*    expose a portable replace-system-prompt flag for a one-shot non-interactive run).
-*  - `profile.prompt.instructions[]` → appended prompt sections in authored order.
-*  - `profile.model.default` → the harness's `-m <model>` selector.
-*
-* The task prompt alone is the floor; an empty/absent profile yields exactly the legacy
-* `buildArgs(taskPrompt)` shape so existing callers are byte-identical.
-*/
+/** Task/instruction preamble and model controls; native prompts are applied in the workspace plan. */
 function harnessInvocation(harness, profile, taskPrompt, options = {}) {
 	const invocation = HARNESS_INVOCATIONS[harness];
 	if (!invocation) throw new Error(`harnessInvocation: unknown harness ${String(harness)}`);
@@ -4393,14 +4394,9 @@ function harnessInvocation(harness, profile, taskPrompt, options = {}) {
 		if (!harnessProfileModel(harness, profile)) throw new Error("harnessInvocation: codexReproducible requires profile.model.default");
 		if (profile.model?.reasoningEffort === void 0) throw new Error("harnessInvocation: codexReproducible requires profile.model.reasoningEffort");
 	}
-	const systemPrompt = profile.prompt?.systemPrompt;
 	const instructions = profile.prompt?.instructions;
 	if (instructions !== void 0 && (!Array.isArray(instructions) || instructions.some((instruction) => typeof instruction !== "string"))) throw new Error("harnessInvocation: profile.prompt.instructions must be an array of strings");
-	const composedPrompt = [
-		...typeof systemPrompt === "string" && systemPrompt.trim().length > 0 ? [systemPrompt] : [],
-		...instructions?.filter((instruction) => instruction.trim().length > 0) ?? [],
-		taskPrompt
-	].join("\n\n");
+	const composedPrompt = [...instructions?.filter((instruction) => instruction.trim().length > 0) ?? [], taskPrompt].join("\n\n");
 	const args = buildHarnessArgs(harness, composedPrompt, options);
 	const model = harnessProfileModel(harness, profile);
 	if (model) args.push(...invocation.modelArgs(model));
@@ -4424,8 +4420,7 @@ function harnessProfileModel(harness, profile) {
 	if (provider !== nativeProvider) throw new Error(`harnessInvocation: ${harness} cannot materialize model provider ${JSON.stringify(provider)}; expected ${nativeProvider}`);
 	return model;
 }
-//#endregion
-//#region src/mcp/codex-diagnostics.ts
+// src/mcp/codex-diagnostics.ts
 /** Thrown when reproducible Codex exits without one valid terminal usage event. */
 var CodexExecutionDiagnosticError = class extends Error {
 	reason;
@@ -4439,7 +4434,7 @@ var CodexExecutionDiagnosticError = class extends Error {
 	}
 };
 const CODEX_FAILURE_STREAM_MAX_CHARS = 4096;
-const CODEX_AUTH_MAX_BYTES = 1024 * 1024;
+const CODEX_AUTH_MAX_BYTES = 1048576;
 const CODEX_REDACTED = "<REDACTED_CREDENTIAL>";
 const codexSensitiveEnvironmentName = /(TOKEN|KEY|SECRET|PASSWORD|CREDENTIAL|AUTH|COOKIE)/i;
 function createCodexExecutionDiagnosticError(opts) {
@@ -4533,8 +4528,7 @@ function collectStringLeaves(value, output) {
 	}
 	if (value !== null && typeof value === "object") for (const item of Object.values(value)) collectStringLeaves(item, output);
 }
-//#endregion
-//#region src/mcp/codex-execution-evidence.ts
+// src/mcp/codex-execution-evidence.ts
 const FORBIDDEN_CODEX_PROMPT_MARKERS = [
 	"<skills_instructions>",
 	"# AGENTS.md instructions",
@@ -4652,7 +4646,27 @@ function assertCodexReproducibleInvocation(command, args) {
 	const tail = args.slice(expectedPrefix.length);
 	const validModel = tail[0] === "-m" && typeof tail[1] === "string" && tail[1].length > 0 && !tail[1].startsWith("-");
 	const validReasoning = tail[2] === "-c" && typeof tail[3] === "string" && /^model_reasoning_effort="(?:none|minimal|low|medium|high|xhigh)"$/.test(tail[3]);
-	if (!hasExactPrefix || tail.length !== 4 || !validModel || !validReasoning) throw new Error("runLocalHarness: reproducible Codex invocation does not match the required isolated argv");
+	const nativeKeys = /* @__PURE__ */ new Set();
+	const nativeArgs = tail.slice(4);
+	let validNative = nativeArgs.length % 2 === 0;
+	for (let index = 0; index < nativeArgs.length; index += 2) {
+		const config = nativeArgs[index + 1] ?? "";
+		const split = config.indexOf("=");
+		const key = config.slice(0, split);
+		const value = config.slice(split + 1);
+		if (nativeArgs[index] !== "-c" || nativeKeys.has(key)) validNative = false;
+		nativeKeys.add(key);
+		if (key === "model_instructions_file") {
+			if (value !== JSON.stringify(".tangle/system-prompt.md")) validNative = false;
+		} else if (key === "developer_instructions") try {
+			const text = JSON.parse(value);
+			if (typeof text !== "string" || !text.trim()) validNative = false;
+		} catch {
+			validNative = false;
+		}
+		else validNative = false;
+	}
+	if (!hasExactPrefix || tail.length < 4 || !validModel || !validReasoning || !validNative) throw new Error("runLocalHarness: reproducible Codex invocation does not match the required isolated argv");
 }
 function codexPromptDebugArgs(execArgs, prompt) {
 	const debugArgs = ["debug", "prompt-input"];
@@ -4722,8 +4736,10 @@ function runCodexProbe(opts, args) {
 		const onAbort = () => {
 			terminate("aborted");
 		};
-		if (opts.signal) if (opts.signal.aborted) onAbort();
-		else opts.signal.addEventListener("abort", onAbort, { once: true });
+		if (opts.signal) {
+			if (opts.signal.aborted) onAbort();
+			else opts.signal.addEventListener("abort", onAbort, { once: true });
+		}
 		child.stdout?.on("data", (chunk) => {
 			stdout += String(chunk);
 		});
@@ -4784,8 +4800,7 @@ function redactJsonText(value, text) {
 	if (isRecord(value)) return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, redactJsonText(item, text)]));
 	return value;
 }
-//#endregion
-//#region src/mcp/codex-native-executable.ts
+// src/mcp/codex-native-executable.ts
 async function resolveCodexNativeExecutable(command, env) {
 	const candidates = command.includes(sep) || isAbsolute(command) ? [resolve(command)] : (env.PATH ?? "").split(delimiter).filter(Boolean).map((entry) => join(entry, command));
 	const seen = /* @__PURE__ */ new Set();
@@ -4925,8 +4940,7 @@ function sha256File(path) {
 		stream.on("end", () => resolveDigest(hash.digest("hex")));
 	});
 }
-//#endregion
-//#region src/mcp/codex-home-isolation.ts
+// src/mcp/codex-home-isolation.ts
 const CODEX_AUTH_ENV = [
 	"CODEX_ACCESS_TOKEN",
 	"CODEX_API_KEY",
@@ -5114,8 +5128,7 @@ async function normalizeReadDeniedPaths(paths) {
 	}
 	return [...normalized].sort();
 }
-//#endregion
-//#region src/mcp/codex-token-usage.ts
+// src/mcp/codex-token-usage.ts
 /**
 * Parse and validate the one terminal usage event emitted by `codex exec --json`.
 *
@@ -5147,9 +5160,8 @@ function parseCodexTokenUsage(stdout) {
 		...record.cacheWriteInputTokens === void 0 ? {} : { cacheWriteInputTokens: record.cacheWriteInputTokens }
 	};
 }
-//#endregion
-//#region src/mcp/local-harness-process.ts
-const DEFAULT_MAX_OUTPUT_BYTES = 64 * 1024 * 1024;
+// src/mcp/local-harness-process.ts
+const DEFAULT_MAX_OUTPUT_BYTES = 67108864;
 var RollingByteCapture = class {
 	maxBytes;
 	chunks = [];
@@ -5317,8 +5329,10 @@ async function runLocalHarness(options) {
 				aborted = true;
 				terminate();
 			};
-			if (options.signal) if (options.signal.aborted) onAbort();
-			else options.signal.addEventListener("abort", onAbort, { once: true });
+			if (options.signal) {
+				if (options.signal.aborted) onAbort();
+				else options.signal.addEventListener("abort", onAbort, { once: true });
+			}
 			child.stdout?.on("data", (chunk) => {
 				stdoutCapture.append(chunk);
 			});
@@ -5392,8 +5406,7 @@ async function runLocalHarness(options) {
 		await isolated.cleanup();
 	}
 }
-//#endregion
-//#region src/mcp/worktree.ts
+// src/mcp/worktree.ts
 /**
 *
 * Git worktree helpers for the in-process delegation executor. Each
@@ -5550,8 +5563,7 @@ async function removeWorktree(options) {
 	if (removalError) throw removalError;
 	if (branchError) throw branchError;
 }
-//#endregion
-//#region src/mcp/worktree-harness.ts
+// src/mcp/worktree-harness.ts
 /**
 *
 * The ONE worktree-harness execution core. The physical act — run a supervisor-authored
@@ -5596,7 +5608,7 @@ async function runWorktreeHarness(opts) {
 	opts.signal?.throwIfAborted();
 	const runHarness = opts.runHarness ?? runLocalHarness;
 	const runCommand = opts.runCommand ?? defaultRunCommand;
-	const checkTimeoutMs = opts.checkTimeoutMs ?? opts.harnessTimeoutMs ?? 300 * 1e3;
+	const checkTimeoutMs = opts.checkTimeoutMs ?? opts.harnessTimeoutMs ?? 3e5;
 	const cap = opts.checkOutputCap ?? defaultCheckOutputCap;
 	assertSupportedWorktreeProfile(opts.profile, opts.harness);
 	assertSafeProfileResourcePaths(opts.profile);
@@ -5827,7 +5839,24 @@ function prepareWorktreeProfile(profile, harness) {
 	const workspaceProfile = materializationOnlyProfile(profile);
 	assertSupportedWorktreeProfile(profile, harness);
 	assertSafeProfileResourcePaths(profile);
-	const plan = assertProfileMaterializes(workspaceProfile, harness, "runWorktreeHarness");
+	const structural = materializeProfile(harness === "opencode" ? {
+		...workspaceProfile,
+		prompt: {
+			systemPrompt: profile.prompt?.systemPrompt,
+			appendSystemPrompt: profile.prompt?.appendSystemPrompt
+		}
+	} : workspaceProfile, harness, { binds: ["systemPrompt"] });
+	assertWorkspacePlanSupported(structural);
+	const native = harness === "opencode" ? {
+		files: [],
+		flags: []
+	} : nativeSystemPrompt(harness, profile.prompt);
+	for (const file of native.files) if (structural.files.some((existing) => existing.relPath === file.relPath)) throw new Error(`profile conflicts with reserved ${file.relPath}`);
+	const plan = {
+		...structural,
+		files: [...structural.files, ...native.files],
+		flags: [...structural.flags, ...native.flags]
+	};
 	assertSafeMaterializedPaths(plan);
 	return {
 		plan,
@@ -5988,8 +6017,10 @@ async function runSettledCommand(opts) {
 			terminate().catch(fail);
 		}, opts.timeoutMs);
 		const onAbort = () => void terminate().catch(fail);
-		if (opts.signal) if (opts.signal.aborted) onAbort();
-		else opts.signal.addEventListener("abort", onAbort, { once: true });
+		if (opts.signal) {
+			if (opts.signal.aborted) onAbort();
+			else opts.signal.addEventListener("abort", onAbort, { once: true });
+		}
 		child.stdout?.on("data", (d) => stdout.push(String(d)));
 		child.stderr?.on("data", (d) => stderr.push(String(d)));
 		const finish = (fn) => {
@@ -6043,8 +6074,7 @@ async function defaultRunCommand(opts) {
 		output: result.stdout + result.stderr
 	};
 }
-//#endregion
-//#region src/runtime/supervise/executor-seams.ts
+// src/runtime/supervise/executor-seams.ts
 function assertExactConfigKeys(value, allowed, context) {
 	const unknown = Object.keys(value).filter((key) => !allowed.has(key));
 	if (unknown.length > 0) throw new ValidationError$1(`${context}: unknown fields ${unknown.sort().join(", ")}; execution behavior belongs in AgentProfile`);
@@ -6071,8 +6101,7 @@ function readOptionalMcpAttachments(ctx, key, who) {
 	if (entries === void 0 || entries.length === 0 || entries.some(([, server]) => server === null || typeof server !== "object")) throw new ValidationError$1(`${who} executor: seam ${JSON.stringify(key)} must be a non-empty map of MCP servers`);
 	return value;
 }
-//#endregion
-//#region src/runtime/supervise/bridge-config.ts
+// src/runtime/supervise/bridge-config.ts
 const bridgeSeamKey = "bridge";
 /** Internal control seam used by Runtime-owned external supervisors. A completion request stops
 * the next bridge turn; it must not abort the paid request that is already streaming. */
@@ -6156,8 +6185,7 @@ async function resolveBridgeModelCredential(credential, context) {
 		baseUrl: resolveProtectedModelBaseUrl(baseUrl, context)
 	};
 }
-//#endregion
-//#region src/runtime/supervise/abortable.ts
+// src/runtime/supervise/abortable.ts
 /** Provenance of an explicit cancellation, preserved through every abort link. */
 var RunCancellationReason = class extends Error {
 	source;
@@ -6297,8 +6325,7 @@ async function runAbortable(act, signal, fallback) {
 		});
 	});
 }
-//#endregion
-//#region src/runtime/supervise/trace-source.ts
+// src/runtime/supervise/trace-source.ts
 /** Project a normalized tool step into the canonical agent-eval `ToolSpan`. When the step carries
 *  real wall-clock (`startedAt`/`endedAt`) the span gets a true duration; otherwise it collapses to
 *  the single instant `at` (order + counts only — the historical behavior). A step whose source
@@ -6452,8 +6479,7 @@ function decodeBoxPart(part, harness) {
 	if (!p) return void 0;
 	return decodeOpencodePart(p) ?? decodeToolPart(part, harness);
 }
-//#endregion
-//#region src/runtime/supervise/bridge-protocol.ts
+// src/runtime/supervise/bridge-protocol.ts
 /** Decode Bridge stream and materialization receipts without owning transport or executor state. */
 const bridgeProfileMaterializationSchema = "cli-bridge.profile-materialization.v2";
 /**
@@ -6717,7 +6743,8 @@ function decodeBridgeToolCalls(raw) {
 		if (!call || typeof call !== "object") continue;
 		const record = call;
 		const fn = record.function;
-		const step = decodeOpenAiPart(typeof fn?.name === "string" && fn.name.length > 0 ? {
+		const named = typeof fn?.name === "string" && fn.name.length > 0;
+		const step = decodeOpenAiPart(named ? {
 			...record,
 			type: "function"
 		} : record);
@@ -6845,6 +6872,7 @@ function parseSseFrame(frame) {
 		error: bridgeUpstreamError(parsed.error, "bridgeExecutor: bridge stream error")
 	};
 	const out = {};
+	if (Object.hasOwn(parsed, "final_output")) out.finalOutput = { value: parsed.final_output };
 	if (parsed.model !== void 0) {
 		if (typeof parsed.model !== "string" || parsed.model.length === 0) throw new ValidationError$1("bridgeExecutor: bridge response model must be a non-empty string");
 		out.model = parsed.model;
@@ -6921,8 +6949,7 @@ function applyBridgeCostReceipt(out, usage) {
 	out.costKnown = false;
 	if (estimatedCost !== void 0) out.estimatedCost = estimatedCost;
 }
-//#endregion
-//#region src/runtime/codex-rollout-store.ts
+// src/runtime/codex-rollout-store.ts
 const zeroCounters = {
 	input: 0,
 	output: 0,
@@ -7399,8 +7426,7 @@ function uuidV7TimestampMs(value) {
 function naturalNumber(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
 }
-//#endregion
-//#region src/pricing/router-prices.generated.ts
+// src/pricing/router-prices.generated.ts
 /** The Router catalog file and commit these prices were copied from. */
 const ROUTER_PRICE_SOURCE = {
 	repository: "tangle-network/tangle-router",
@@ -7823,8 +7849,7 @@ const ROUTER_TOKEN_PRICES = {
 		output: 44e-7
 	}
 };
-//#endregion
-//#region src/pricing/router-prices.ts
+// src/pricing/router-prices.ts
 /**
 * Model prices from the Router's catalog, the one source of model prices.
 *
@@ -7872,8 +7897,7 @@ function priceTokens(work) {
 	].every(count$1)) return void 0;
 	return Math.max(0, work.inputTokens - cacheRead - cacheWrite) * price.input + cacheRead * (price.cachedInput ?? price.input) + cacheWrite * (price.cacheWrite ?? price.input) + work.outputTokens * price.output;
 }
-//#endregion
-//#region src/runtime/supervise/cost-estimate.ts
+// src/runtime/supervise/cost-estimate.ts
 /**
 * Pricing for work that arrived without a provider receipt.
 *
@@ -7916,8 +7940,7 @@ function priceUnreceiptedWork(work) {
 		provenance: "catalog-estimate"
 	};
 }
-//#endregion
-//#region src/runtime/supervise/bridge-session-ledger.ts
+// src/runtime/supervise/bridge-session-ledger.ts
 function newTurnTally() {
 	return {
 		text: "",
@@ -8009,6 +8032,7 @@ var BridgeSessionLedger = class {
 	turns = 0;
 	transportAttempts = 0;
 	lastText = "";
+	lastFinalOutput;
 	observedModel;
 	observedSystemFingerprint;
 	toolCalls = [];
@@ -8140,7 +8164,7 @@ var BridgeSessionLedger = class {
 		this.usd += priced.usd;
 		return priced;
 	}
-	artifact(sessionId, startedAt) {
+	artifact(sessionId, startedAt, outputFormat) {
 		const spent = {
 			iterations: this.turns,
 			tokens: this.tokens,
@@ -8152,7 +8176,8 @@ var BridgeSessionLedger = class {
 			...this.tokensProvenance === void 0 || this.tokensProvenance === "stream-receipt" ? {} : { tokensProvenance: this.tokensProvenance }
 		};
 		const { observedModel, observedSystemFingerprint, promptCache, tokensUnknownReason } = this;
-		const out = {
+		if (outputFormat === "json" && this.lastFinalOutput === void 0) throw new ValidationError$1("bridgeExecutor: successful graph turn omitted Bridge final_output JSON");
+		const out = outputFormat === "json" ? this.lastFinalOutput.value : {
 			content: this.lastText,
 			...observedModel !== void 0 ? { model: observedModel } : {},
 			...observedSystemFingerprint ? { system_fingerprint: observedSystemFingerprint } : {},
@@ -8166,15 +8191,14 @@ var BridgeSessionLedger = class {
 			outRef: contentRef("bridge", {
 				model: observedModel ?? null,
 				session: sessionId,
-				content: this.lastText
+				output: out
 			}),
 			out,
 			spent
 		};
 	}
 };
-//#endregion
-//#region src/runtime/supervise/bridge-transport.ts
+// src/runtime/supervise/bridge-transport.ts
 /** Exact Bridge run admission, HTTP transport, ordered reconnect, and acknowledged cancellation. */
 const bridgeModelCredentialHeader = "x-cli-bridge-model-credential";
 const bridgeModelBaseUrlHeader = "x-cli-bridge-model-base-url";
@@ -8721,8 +8745,7 @@ function providerDispatchFromErrorBody(body) {
 	if (typeof error !== "object" || error === null) return void 0;
 	return error.provider_dispatch === "not_started" ? "not_started" : void 0;
 }
-//#endregion
-//#region src/runtime/supervise/bridge-turn-signals.ts
+// src/runtime/supervise/bridge-turn-signals.ts
 /**
 * Why one cli-bridge turn's request is aborted: external teardown or abort, a forceful interrupt
 * steer, the turn's own deadline, or model silence. Each turn owns one, and `cleanup` detaches it.
@@ -8773,18 +8796,16 @@ var BridgeTurnSignals = class {
 		if (this.silenceTimer !== void 0) clearTimeout(this.silenceTimer);
 	}
 };
-//#endregion
-//#region src/finite-number.ts
+// src/finite-number.ts
 function isFiniteNumber(value) {
 	return typeof value === "number" && Number.isFinite(value);
 }
-//#endregion
-//#region src/runtime/supervise/continuation.ts
+// src/runtime/supervise/continuation.ts
 /**
 * The continuation: what a manager with a completion check is told when its turn ends and the
 * check is unmet, and the one rule that decides whether it is sent back.
 *
-* Measured on discovery-lab before this module (2026-09-24, 670 settled runs, 1,596 re-entries):
+* Measured on discovery-lab before this module (670 settled runs, 1,596 re-entries):
 * 1,565 re-entries followed a failed turn and resent the original task, and 31 carried note text.
 * The note Runtime wrote itself held seven fixed lines and no field for the check's verdict. Of 40
 * episodes where the director ended on its own and the outside check disagreed, 33 were told
@@ -9243,30 +9264,7 @@ function createContinuationKeeper(input) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/completion-gate.ts
-/**
-*
-* The completion-oracle: **settled ⟺ DELIVERED.**
-*
-* Foreman's one hard lesson (0/18 self-improvement deliverables) — "done" must mean a check
-* PASSED, not the agent's say-so. `gateOnDeliverable` wraps an `Executor` so its settlement
-* is `valid` ONLY when the deliverable check passes. The child still RUNS and settles (its
-* spend is conserved into the pool either way), but a child that ran WITHOUT delivering
-* settles `valid:false` — so a keep-best driver never counts it as done, and a gate never
-* inflates with self-judged wins.
-*
-* Dual-purpose by construction:
-*  - product: the agent fleet only advances on real, checked deliverables.
-*  - proof: the gate's `valid` is the honest settle — equal-k comparisons can't be gamed by an
-*    arm that "ran" without producing the artifact.
-*
-* The check is a DEPLOYABLE oracle — a test command, a state verifier, the commit0 judge —
-* read off the child's output, never the model judging itself. A throwing check is
-* fail-closed (not delivered), never a crash.
-*
-* @experimental
-*/
+// src/runtime/supervise/completion-gate.ts
 /**
 * Wrap an `Executor` so its settlement `valid` reflects the deliverable check, not the
 * inner verdict. Handles both `execute` shapes (one-shot `Promise<ExecutorResult>` and
@@ -9279,17 +9277,24 @@ function gateOnDeliverable(inner, deliverable) {
 /** Build a worker with the same check on durable acceptance and normal completion. @internal */
 function gateFactoryOnDeliverable(factory, deliverable) {
 	return (spec, ctx) => {
+		const profile = detachedSnapshot(spec.profile, "completion check profile");
+		const node = ctx.node === void 0 ? void 0 : detachedSnapshot(ctx.node, "completion check node");
 		const retention = retainedExecutorContext(ctx);
-		if (retention === void 0) return gateOnDeliverable(factory(spec, ctx), deliverable);
 		const verdicts = /* @__PURE__ */ new WeakMap();
 		const check = (result) => {
 			let verdict = verdicts.get(result);
 			if (verdict === void 0) {
-				verdict = checkDeliverable(deliverable, result);
+				verdict = checkDeliverable(deliverable, result, Object.freeze({
+					profile,
+					node,
+					signal: ctx.signal,
+					originalVerdict: result.verdict === void 0 ? void 0 : detachedSnapshot(result.verdict, "completion check original verdict")
+				}));
 				verdicts.set(result, verdict);
 			}
 			return verdict;
 		};
+		if (retention === void 0) return wrapCompletionGate(factory(spec, ctx), check);
 		const checkedRetention = (source) => ({
 			...source,
 			onResult: async (result) => source.onResult({
@@ -9307,10 +9312,10 @@ function gateFactoryOnDeliverable(factory, deliverable) {
 		}), check);
 	};
 }
-async function checkDeliverable(deliverable, result) {
+async function checkDeliverable(deliverable, result, context) {
 	let delivered;
 	try {
-		delivered = checkVerdictOf(await deliverable.check(result.out)).pass;
+		delivered = checkVerdictOf(await deliverable.check(result.out, context)).pass;
 	} catch {
 		delivered = false;
 	}
@@ -9363,6 +9368,9 @@ function wrapCompletionGate(inner, check) {
 		runtime: inner.runtime,
 		...inner.budgetExempt !== void 0 ? { budgetExempt: inner.budgetExempt } : {},
 		...inner.deliver ? { deliver: (m) => inner.deliver?.(m) } : {},
+		...inner.cancel ? { cancel: (request) => inner.cancel(request) } : {},
+		...inner.interactive ? { interactive: () => inner.interactive() } : {},
+		...inner.interactiveReady ? { interactiveReady: () => inner.interactiveReady() } : {},
 		...inner.progress ? { progress: () => inner.progress?.() } : {},
 		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
 		...inner.metered ? { metered: () => inner.metered?.() } : {},
@@ -9401,24 +9409,28 @@ function mapExecutorResult(inner, map) {
 		};
 		return mapped;
 	};
+	const mapExecution = (execution, task) => {
+		if (isAsyncIterable(execution)) return (async function* () {
+			for await (const event of execution) yield event;
+			await settle(inner.resultArtifact(), task);
+		})();
+		return (async () => settle(await execution, task))();
+	};
 	return inheritRuntimeOwnedExecutorAttestation(inner, {
 		runtime: inner.runtime,
 		...inner.budgetExempt !== void 0 ? { budgetExempt: inner.budgetExempt } : {},
 		...inner.deliver ? { deliver: (message) => inner.deliver?.(message) } : {},
+		...inner.cancel ? { cancel: (request) => inner.cancel(request) } : {},
+		...inner.interactive ? { interactive: () => inner.interactive() } : {},
+		...inner.interactiveReady ? { interactiveReady: () => inner.interactiveReady() } : {},
 		...inner.progress ? { progress: () => inner.progress?.() } : {},
 		...inner.traceSource ? { traceSource: () => inner.traceSource?.() } : {},
 		...inner.accounting ? { accounting: () => inner.accounting?.() } : {},
 		...inner.metered ? { metered: () => inner.metered?.() } : {},
 		...inner.harnessTranscript ? { harnessTranscript: () => inner.harnessTranscript?.() } : {},
 		...inner.harnessTranscriptSettled ? { harnessTranscriptSettled: () => inner.harnessTranscriptSettled?.() ?? Promise.resolve() } : {},
-		execute(task, signal) {
-			const execution = inner.execute(task, signal);
-			if (isAsyncIterable(execution)) return (async function* () {
-				for await (const event of execution) yield event;
-				await settle(inner.resultArtifact(), task);
-			})();
-			return (async () => settle(await execution, task))();
-		},
+		execute: (task, signal) => mapExecution(inner.execute(task, signal), task),
+		...inner.recover ? { recover: (task, signal) => mapExecution(inner.recover(task, signal), task) } : {},
 		teardown: (grace) => inner.teardown(grace),
 		...teardownSurfaces(inner),
 		resultArtifact() {
@@ -9460,8 +9472,7 @@ function verdictFromJudgeScore(score, threshold) {
 		...review === "" ? {} : { review }
 	});
 }
-//#endregion
-//#region src/runtime/supervise/seat-chain.ts
+// src/runtime/supervise/seat-chain.ts
 var SeatChainExhaustedError = class extends Error {
 	resumeAt;
 	constructor(resumeAt) {
@@ -9648,7 +9659,8 @@ function seatExecutionProfile(profile, stage) {
 		model: {
 			...profile.model,
 			default: stage.model,
-			provider: stage.provider
+			provider: stage.provider,
+			...stage.reasoningEffort === void 0 ? {} : { reasoningEffort: stage.reasoningEffort }
 		}
 	};
 }
@@ -9682,8 +9694,7 @@ function checkedSeatSelection(stage, selected) {
 	if (selected.backend.backend !== "provider") throw new ValidationError$1("selectSeat: selection must use a provider backend");
 	return selected;
 }
-//#endregion
-//#region src/runtime/supervise/driver-attempt-evidence.ts
+// src/runtime/supervise/driver-attempt-evidence.ts
 /** Longest cause chain read for a `PartialFailureError`; the failing box's error sits one or two wrappers down. */
 const PARTIAL_FAILURE_CAUSE_DEPTH = 6;
 /**
@@ -9727,15 +9738,16 @@ function abandonablePending(error) {
 const DETERMINISTIC_BRIDGE_CODES = /* @__PURE__ */ new Set([
 	"parse_error",
 	"not_configured",
-	"capability_denied"
+	"capability_denied",
+	"MODEL_NOT_FOUND",
+	"SEAT_NOT_LOGGED_IN"
 ]);
 /**
 * A driver's harness turn ran to its terminal result, and that result reported failure.
 *
 * A provider executor reports a failed turn as a returned outcome, not a thrown error, so without
 * this error a failed turn reads as a completed drive and never reaches the retry decision.
-* Measured 2026-09-17 on a Discovery director placed on tangle-sandbox with the opencode harness:
-* a 53-minute turn ended `status code 524`, and another ended `Invalid API key` after a platform
+* A 53-minute turn ended `status code 524`, and another ended `Invalid API key` after a platform
 * key expired mid-turn. A new turn succeeds in both cases.
 *
 * `errorCode` is the provider's machine code when it reported one. The classifier reads the code
@@ -9919,7 +9931,7 @@ function retainedAdmissionCause(error) {
 *
 * A provider SDK throws its own error classes, so an environment `create` that the platform
 * refused arrives here as neither a `BackendTransportError` nor an `AgentEvalError`, and the
-* default sends it to `transient`. Measured 2026-09-16: a Tangle Sandbox create refused
+* default sends it to `transient`. A Tangle Sandbox create refused
 * `HTTP 400 {"code":"CONFIG_ERROR"}` for a key whose budget was fully reserved retried 14-22
 * times per node while the run showed a durable intent and no other event, so eleven of twelve
 * roots sat for 25 minutes with nothing to diagnose. The status was on the error the whole time.
@@ -9974,8 +9986,7 @@ function summarizeDriverAttempts(records) {
 		...last?.repromptRefusedBy === void 0 ? {} : { repromptRefusedBy: last.repromptRefusedBy }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/node-status.ts
+// src/runtime/supervise/node-status.ts
 /** Which {@link NodeStatus} values mean the node is finished. */
 const terminalNodeStatuses = /* @__PURE__ */ new Set([
 	"done",
@@ -9998,8 +10009,7 @@ function isTerminalNodeStatus(status) {
 function isLiveNodeStatus(status) {
 	return !terminalNodeStatuses.has(status);
 }
-//#endregion
-//#region src/runtime/supervise/progress.ts
+// src/runtime/supervise/progress.ts
 /**
 *
 * The LIVE read-model of a still-RUNNING worker — what a driver can see BEFORE the worker settles.
@@ -10093,8 +10103,7 @@ function readWorkerProgress(scope, executor, now, stallAfterMs = DEFAULT_STALL_A
 		...scope.team ? { team: scope.team } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/task-prompt.ts
+// src/runtime/supervise/task-prompt.ts
 /**
 *
 * The one rule for reading a leaf task as prompt text. A `Scope` task is opaque (`unknown`) and
@@ -10123,8 +10132,7 @@ function taskToPrompt$1(task) {
 	}
 	return JSON.stringify(task);
 }
-//#endregion
-//#region src/runtime/supervise/bridge-session-stream.ts
+// src/runtime/supervise/bridge-session-stream.ts
 /** One resumable cli-bridge session as a streamed turn loop: turn 0 sends the task, each later
 *  turn fires ONLY when the inbox has a steer/answer to fold, re-calling the SAME `session_id`.
 *  Mirrors `routerToolsInlineExecutor`'s take→turn→settle loop with a full harness call per turn. */
@@ -10178,7 +10186,10 @@ async function* streamBridgeSession(args) {
 		});
 		yield* ledger.settleTurn(activeRun.profileMaterialization?.inference?.observation?.usage, harnessStore, observation, seam.providerModel);
 		yield { kind: "iteration" };
-		if (!interrupted && ledger.turn.text) ledger.lastText = ledger.turn.text;
+		if (!interrupted) {
+			if (ledger.turn.text) ledger.lastText = ledger.turn.text;
+			ledger.lastFinalOutput = ledger.turn.finalOutput;
+		}
 		if (interrupted) {
 			observation.note = `turn ${ledger.turns} interrupted, resuming`;
 			continue;
@@ -10190,7 +10201,7 @@ async function* streamBridgeSession(args) {
 		if (inbox.pendingAuthority() === 0) break;
 	}
 	observation.note = "settled";
-	args.onArtifact(ledger.artifact(args.sessionId, started));
+	args.onArtifact(ledger.artifact(args.sessionId, started, seam.outputFormat));
 }
 /** The folded text of the messages this turn took, noted on the activity log; none when empty. */
 function foldTurnMessages(turnLease, inbox, observation) {
@@ -10263,6 +10274,7 @@ async function* streamBridgeTurn(args, turn) {
 	const requestBody = {
 		model: seam.model,
 		stream: true,
+		...seam.outputFormat === "json" ? { response_format: { type: "json_object" } } : {},
 		run_id: activeRun.id,
 		session_id: args.sessionId,
 		...seam.cwd ? { cwd: seam.cwd } : {},
@@ -10372,6 +10384,10 @@ function observeChunkIdentity(chunk, ledger, args) {
 /** The model output and tool steps a chunk carried, mirrored locally before each is published. */
 function* chunkProgress(chunk, ledger, args) {
 	const { observation } = args;
+	if (chunk.finalOutput) {
+		if (ledger.turn.finalOutput !== void 0) throw new ValidationError$1("bridgeExecutor: multiple final_output values in one turn");
+		ledger.turn.finalOutput = chunk.finalOutput;
+	}
 	if (chunk.content) {
 		ledger.turn.text += chunk.content;
 		yield {
@@ -10441,8 +10457,7 @@ function mergeBridgeObservedModel(current, next) {
 	if (merged === void 0) throw new ValidationError$1(`bridgeExecutor: bridge changed response model from ${JSON.stringify(current)} to ${JSON.stringify(next)}`);
 	return merged;
 }
-//#endregion
-//#region src/runtime/supervise/peer-mail.ts
+// src/runtime/supervise/peer-mail.ts
 /**
 *
 * PEER MAIL — the sibling-to-sibling channel, and the ONE place its bounds are enforced.
@@ -10739,13 +10754,12 @@ function peerMailTools(mailbox, capabilityId) {
 		handler: () => Promise.resolve({ ...mailbox.read(capabilityId) })
 	}];
 }
-//#endregion
-//#region src/runtime/supervise/inbox.ts
+// src/runtime/supervise/inbox.ts
 /**
 *
 * The worker-side receive end of the down-leg: a per-worker inbox an executor exposes as
 * `Executor.deliver`. The driver's `steer_agent` / `answer_question` land here,
-* and the worker's agent loop takes them at two points (Drew's two delivery modes):
+* and the worker's agent loop takes them at two points:
 *
 *   - QUEUED (default): the message accumulates and is taken at the next step boundary — folded
 *     into the conversation before the next think. A worker also takes before it may settle, so it
@@ -10792,7 +10806,7 @@ function peerMailTools(mailbox, capabilityId) {
 */
 /** How long an authority message may wait unconsumed before it interrupts the turn in flight.
 *  Run 18b's queued steers took a median 52.5 min to reach a worker. */
-const AUTHORITY_PROMOTION_MS = 15 * 6e4;
+const AUTHORITY_PROMOTION_MS = 9e5;
 /** Wire key under which a sender passes its receipt callback beside a steer or answer. */
 const INBOX_RECEIPT_KEY = "receipt";
 function parseDown(msg) {
@@ -10972,8 +10986,7 @@ async function* failPendingAfter(inbox, stream) {
 		inbox.failPending(failure === void 0 ? "the recipient settled before a model turn read the message" : `the recipient's run failed before a model turn read the message: ${failure instanceof Error ? failure.message : String(failure)}`);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/worker-lineage.ts
+// src/runtime/supervise/worker-lineage.ts
 /**
 * Session lineage handed DOWN to a spawned worker: the `TANGLE_*` ids the operator's `lineage` tool
 * (tangle-tools `lineage/`) stamps at every launch, so a supervised tree shows up in the cross-box
@@ -11106,7 +11119,8 @@ function sortKeys(value) {
 }
 function recordLaunch(env, ids, options) {
 	try {
-		const dir = join(env.LINEAGE_HOME || join(homedir(), ".local", "state", "lineage"), "events");
+		const home = env.LINEAGE_HOME || join(homedir(), ".local", "state", "lineage");
+		const dir = join(home, "events");
 		if (!existsSync(dir)) return;
 		const host = lineageHost(env);
 		const common = {
@@ -11149,8 +11163,7 @@ function recordLaunch(env, ids, options) {
 		});
 	} catch {}
 }
-//#endregion
-//#region src/sanitize.ts
+// src/sanitize.ts
 /** Strip PII and large blobs from a `KnowledgeReadinessReport` for safe telemetry emission. @stable */
 function sanitizeKnowledgeReadinessReport(report, options = {}) {
 	return {
@@ -11529,8 +11542,7 @@ function createRuntimeStreamEventCollector(options = {}) {
 		}
 	};
 }
-//#endregion
-//#region src/otel-export.ts
+// src/otel-export.ts
 /**
 * OTEL span exporter — streams LoopTraceEvents to an OTLP/HTTP collector.
 *
@@ -12157,7 +12169,6 @@ function buildLoopSpanNodes(events, redact) {
 					flushRound(e.timestamp);
 				}
 				currentRoundId = void 0;
-				break;
 		}
 	}
 	flushRound(rootEnd);
@@ -12229,8 +12240,7 @@ function generateSpanId() {
 	else for (let i = 0; i < 8; i++) bytes[i] = Math.floor(Math.random() * 256);
 	return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
-//#endregion
-//#region src/mcp/trace-propagation.ts
+// src/mcp/trace-propagation.ts
 /**
 *
 * Trace context propagation across process-spawn boundaries.
@@ -12369,8 +12379,7 @@ function generateTraceId() {
 	else for (let i = 0; i < 16; i++) bytes[i] = Math.floor(Math.random() * 256);
 	return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
-//#endregion
-//#region src/runtime/supervise/worker-trace.ts
+// src/runtime/supervise/worker-trace.ts
 /**
 * Trace context handed DOWN to a spawned worker, so one supervised tree spans machines.
 *
@@ -12506,8 +12515,7 @@ function workerTraceHeaders(ctx) {
 		...env.PARENT_SPAN_ID !== void 0 ? { "x-parent-span-id": env.PARENT_SPAN_ID } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/bridge-executor.ts
+// src/runtime/supervise/bridge-executor.ts
 /** Bridge executor lifecycle, steering, materialization, and measured usage. */
 /** Resolve the exact bridge wire id from the profile and nowhere else. */
 function bridgeProfileModel(profile, context) {
@@ -12536,6 +12544,7 @@ const bridgeExecutor = (spec, ctx) => {
 		...bridgeTokenLimits.applied.maxTokens !== void 0 ? { maxTokens: bridgeTokenLimits.applied.maxTokens } : {}
 	};
 	if (!seam.bridgeUrl || !seam.bridgeBearer) throw new ValidationError$1("bridgeExecutor: bridgeUrl + bridgeBearer are required");
+	if (seam.outputFormat !== void 0 && seam.outputFormat !== "json") throw new ValidationError$1("bridgeExecutor: outputFormat must be json when supplied");
 	if (seam.timeoutMs !== void 0 && (!Number.isSafeInteger(seam.timeoutMs) || seam.timeoutMs < 1 || seam.timeoutMs > 2147483647)) throw new ValidationError$1(`bridgeExecutor: timeoutMs must be an integer from 1 to ${maxBridgeTimeoutMs}`);
 	if (seam.modelSilenceMs !== void 0 && (!Number.isSafeInteger(seam.modelSilenceMs) || seam.modelSilenceMs < 1 || seam.modelSilenceMs > 2147483647)) throw new ValidationError$1(`bridgeExecutor: modelSilenceMs must be an integer from 1 to ${maxBridgeTimeoutMs}`);
 	if (seam.maxReconnects !== void 0 && (!Number.isSafeInteger(seam.maxReconnects) || seam.maxReconnects < 0)) throw new ValidationError$1("bridgeExecutor: maxReconnects must be a nonnegative safe integer");
@@ -12775,8 +12784,7 @@ function scheduleBridgeRunStateRefresh(seam, activeRuns, observation) {
 		}
 	})();
 }
-//#endregion
-//#region src/runtime/supervise/bridge-worktree-executor.ts
+// src/runtime/supervise/bridge-worktree-executor.ts
 function bridgeWorktreeExecutor(spec, ctx, seam) {
 	const bridge = seam.bridge;
 	if (!bridge) throw new ValidationError$1("cliWorktreeExecutor: bridge transport missing");
@@ -12830,7 +12838,7 @@ function bridgeWorktreeExecutor(spec, ctx, seam) {
 			model,
 			testCmd: seam.testCmd ?? null,
 			typecheckCmd: seam.typecheckCmd ?? null,
-			checkTimeoutMs: seam.checkTimeoutMs ?? seam.harnessTimeoutMs ?? bridge.timeoutMs ?? 300 * 1e3,
+			checkTimeoutMs: seam.checkTimeoutMs ?? seam.harnessTimeoutMs ?? bridge.timeoutMs ?? 3e5,
 			checkOutputCap: seam.checkOutputCap ?? 16e3,
 			bridgeAcknowledgement: null
 		}
@@ -12877,14 +12885,15 @@ function bridgeWorktreeExecutor(spec, ctx, seam) {
 						...bridge.timeoutMs !== void 0 ? { timeoutMs: bridge.timeoutMs } : {},
 						...bridge.maxReconnects !== void 0 ? { maxReconnects: bridge.maxReconnects } : {}
 					};
-					inner = bridgeExecutor(spec, {
+					const bridgeCtx = {
 						...ctx,
 						signal: linked,
 						seams: {
 							...ctx.seams,
 							[bridgeSeamKey]: bridgeSeam
 						}
-					});
+					};
+					inner = bridgeExecutor(spec, bridgeCtx);
 					for (const msg of pending.splice(0)) inner.deliver?.(msg);
 					const run = inner.execute(task, linked);
 					if (isAsyncIterable(run)) {
@@ -12916,7 +12925,7 @@ function bridgeWorktreeExecutor(spec, ctx, seam) {
 						worktreePath: worktree.path,
 						...seam.testCmd !== void 0 ? { testCmd: seam.testCmd } : {},
 						...seam.typecheckCmd !== void 0 ? { typecheckCmd: seam.typecheckCmd } : {},
-						timeoutMs: seam.checkTimeoutMs ?? seam.harnessTimeoutMs ?? bridge.timeoutMs ?? 300 * 1e3,
+						timeoutMs: seam.checkTimeoutMs ?? seam.harnessTimeoutMs ?? bridge.timeoutMs ?? 3e5,
 						cap: seam.checkOutputCap ?? 16e3,
 						...seam.runCommand ? { runCommand: seam.runCommand } : {},
 						signal: linked
@@ -12990,8 +12999,7 @@ function bridgeOutputText(out) {
 * `AgentProfile` driving claude / codex / opencode / pi / kimi-code on its own worktree. `budgetExempt` like
 * the other CLI leaves; the authored systemPrompt + model reach the harness via §1.5.
 */
-//#endregion
-//#region src/runtime/supervise/in-place-cli-executor.ts
+// src/runtime/supervise/in-place-cli-executor.ts
 /**
 *
 * The in-place CLI leaf executor — a supervisor-authored `AgentProfile` driving a local
@@ -13133,8 +13141,7 @@ function executionTaskPrompt$1(task, configuredPrompt) {
 	if (typeof prompt !== "string" || prompt.length === 0) throw new ValidationError$1("createInPlaceCliExecutor: execute task produced no prompt text");
 	return prompt;
 }
-//#endregion
-//#region src/runtime/supervise/runtime-seams.ts
+// src/runtime/supervise/runtime-seams.ts
 const sandboxCaptureOutputSeamKey = "runtime.sandboxCaptureOutput";
 const routerSeamKey = "router";
 const sandboxSeamKey = "sandbox";
@@ -13142,8 +13149,7 @@ const cliWorktreeSeamKey = "cli-worktree";
 const cliInPlaceSeamKey = "cli-in-place";
 const providerSeamKey = "provider";
 const routerToolsSeamKey = "router-tools";
-//#endregion
-//#region src/runtime/supervise/worktree-cli-executor.ts
+// src/runtime/supervise/worktree-cli-executor.ts
 /**
 *
 * The worktree-CLI leaf executor — a supervisor-authored `AgentProfile` driving a local
@@ -13324,8 +13330,7 @@ function executionTaskPrompt(task, configuredPrompt) {
 	}
 	throw new ValidationError$1("createWorktreeCliExecutor: execute task must be JSON-serializable");
 }
-//#endregion
-//#region src/runtime/supervise/cli-executor-factories.ts
+// src/runtime/supervise/cli-executor-factories.ts
 /** Executor factory for a CLI harness that runs in a git worktree of the caller's checkout. */
 const cliWorktreeExecutor = (spec, ctx) => {
 	const seam = readSeam(ctx, cliWorktreeSeamKey, "cli-worktree");
@@ -13372,8 +13377,7 @@ const cliInPlaceExecutor = (spec, ctx) => {
 		...ctx.node?.attemptId !== void 0 ? { executionAttemptId: ctx.node.attemptId } : {}
 	});
 };
-//#endregion
-//#region src/runtime/provider-placement.ts
+// src/runtime/provider-placement.ts
 const placementMetadataKey = "runtimeProviderPlacement";
 /** Select exactly one declaration before any provider effects. Shared defaults carry infrastructure only. */
 function selectProviderPlacement(profile, options) {
@@ -13485,8 +13489,7 @@ function publicCreateOptions(create) {
 		...secrets === void 0 ? {} : { secretNames: Array.isArray(secrets) ? [...secrets].sort() : Object.keys(secrets).sort() }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/worker-slots.ts
+// src/runtime/supervise/worker-slots.ts
 /**
 * Worker slots: the one bound on how many spawned agents work at the same time.
 *
@@ -14110,8 +14113,7 @@ function requireDurableWorkspaceArtifacts(snapshot) {
 function isDurableArtifact(artifact) {
 	return "locator" in artifact;
 }
-//#endregion
-//#region src/runtime/retained-harness-transcript.ts
+// src/runtime/retained-harness-transcript.ts
 const digest = z.custom((value) => typeof value === "string" && /^sha256:[0-9a-f]{64}$/.test(value));
 const count = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const text = z.string().min(1);
@@ -14169,10 +14171,10 @@ const retainedSchema = z.object({
 	missing: z.array(z.string())
 });
 const defaults = {
-	maxFileBytes: 2 * 1024 * 1024,
-	maxTotalBytes: 16 * 1024 * 1024,
+	maxFileBytes: 2097152,
+	maxTotalBytes: 16777216,
 	maxFiles: 1e3,
-	maxManifestBytes: 16 * 1024 * 1024
+	maxManifestBytes: 16777216
 };
 /** Validate persisted descriptors before trusting their identity, locators, or inventory. */
 function parseRetainedHarnessTranscript(value) {
@@ -14374,8 +14376,7 @@ async function resolveHarnessTranscriptCapture(capture, options = {}) {
 		skipped
 	});
 }
-//#endregion
-//#region src/runtime/harness-transcript.ts
+// src/runtime/harness-transcript.ts
 /**
 * Persist a harness transcript receipt beside the supervisor tool trace.
 * Provider workspace retention supplies an attributed descriptor whose bytes stay in the
@@ -14418,8 +14419,8 @@ const DENY = /(^|\/)(auth\.json|\.credentials\.json|credentials|\.netrc|\.env(\.
 * resume rehydrate a ref, never the files; nothing pays for a transcript until someone opens it.
 * The bound is enforced exactly, after each read, so a child settles at or under MAX_TOTAL_BYTES.
 */
-const MAX_FILE_BYTES = 2 * 1024 * 1024;
-const MAX_TOTAL_BYTES = 16 * 1024 * 1024;
+const MAX_FILE_BYTES = 2097152;
+const MAX_TOTAL_BYTES = 16777216;
 const MAX_FILES = 1e3;
 function unavailable$2(reason) {
 	return Object.freeze({
@@ -14454,7 +14455,7 @@ function harnessTranscriptUnavailable(reason) {
 * steps are bounded (the harness stop at 30 s, each native copy by its port's `nativeTimeoutMs`,
 * 120 s by default), so this guards only an executor that never answers.
 */
-const HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS = 6 * 6e4;
+const HARNESS_TRANSCRIPT_SETTLE_TIMEOUT_MS = 36e4;
 /**
 * Wait, bounded, until the executor's transcript is final (`Executor.harnessTranscriptSettled`).
 * Never throws: on a timeout or a failure the read that follows reports what was kept.
@@ -14494,7 +14495,7 @@ const MAX_SUBAGENT_EXPORTS = 32;
 const SUBAGENT_EXPORT_SECONDS = 120;
 /** The script starts no export after SUBAGENT_EXPORT_SECONDS and bounds each one at 30 s, so it
 *  ends inside this. It is passed to `exec`, because the Sandbox SDK's default is 30 s. */
-const SUBAGENT_EXPORT_EXEC_MS = 180 * 1e3;
+const SUBAGENT_EXPORT_EXEC_MS = 18e4;
 const SUBAGENT_EXPORT_DIR = "~/.local/share/opencode/export";
 /**
 * The export, run in the box. For each sidecar record it reads the runtime home and the parent
@@ -14849,8 +14850,7 @@ function isHarnessTranscriptArtifact(value) {
 	const artifact = value;
 	return artifact.schemaVersion === 1 && typeof artifact.harness === "string" && Array.isArray(artifact.files) && artifact.files.every((file) => file !== null && typeof file === "object" && typeof file.path === "string" && typeof file.content === "string" && Number.isSafeInteger(file.bytes) && file.bytes >= 0) && Array.isArray(artifact.skipped) && artifact.skipped.every((entry) => entry !== null && typeof entry === "object" && typeof entry.path === "string" && typeof entry.reason === "string");
 }
-//#endregion
-//#region src/runtime/retained-interactive-lifecycle.ts
+// src/runtime/retained-interactive-lifecycle.ts
 const INTERACTIVE_CLEANUP_TIMEOUT_MS = 3e4;
 /** Bound on one lookup that asks the provider whether it still holds an environment. */
 const ENVIRONMENT_LOOKUP_TIMEOUT_MS = 3e4;
@@ -14960,8 +14960,7 @@ function disposeInteractiveEnvironment(environment, abortReason) {
 		process.emitWarning(failure, { code: "AGENT_RUNTIME_INTERACTIVE_CLEANUP_FAILED" });
 	});
 }
-//#endregion
-//#region src/runtime/interaction-capabilities.ts
+// src/runtime/interaction-capabilities.ts
 /**
 * Check one turn's interaction request before the provider can dispatch it.
 *
@@ -14978,8 +14977,7 @@ function assertRequestedInteractionCapabilities(providerName, requested, capabil
 	if (unsupportedKinds.length > 0) throw new Error(`provider "${providerName}" does not support requested interaction kinds: ${unsupportedKinds.join(", ")}`);
 	if (interactions.replay !== true || interactions.responseIdempotency !== true) throw new Error(`provider "${providerName}" cannot safely dispatch requested interactions without replay and response idempotency`);
 }
-//#endregion
-//#region src/runtime/retained-context-transfer.ts
+// src/runtime/retained-context-transfer.ts
 /** Validate attachment authority before admission or any provider operation. */
 function retainedContextTransferReceipt(options, provider, request) {
 	if (request === void 0) {
@@ -15015,8 +15013,7 @@ function assertRetainedContextTransferEnvironment(environment, request, receipt)
 		status: "accepted"
 	})) throw new Error("provider did not reconstruct the authoritative accepted context transfer receipt");
 }
-//#endregion
-//#region src/runtime/retained-run-control.ts
+// src/runtime/retained-run-control.ts
 /**
 * The control reference one retained handle currently believes in, with every reference it
 * has seen. A provider may expose the previous reference while a terminal read catches up;
@@ -15073,8 +15070,7 @@ var RetainedRunControl = class {
 		}
 	}
 };
-//#endregion
-//#region src/runtime/retained-run-events.ts
+// src/runtime/retained-run-events.ts
 /** The runtime's own contract checks inside the stream loop, so the catch can tell a broken
 *  answer (a verdict) from a read the provider's iterator failed (a wrapper). */
 const runtimeChecks = /* @__PURE__ */ new WeakSet();
@@ -15163,8 +15159,7 @@ async function* retainedRunEvents(session, controlRef, options, now) {
 function canonicalEvent(source) {
 	return parseCanonicalTransportEvent(source.type, source.data, source.normalized ?? source.data.normalized, "provider");
 }
-//#endregion
-//#region src/runtime/retained-run-native-continuation.ts
+// src/runtime/retained-run-native-continuation.ts
 const semanticTurnOf = ({ timeoutMs: _timeoutMs, signal: _signal, ...semanticTurn }) => semanticTurn;
 const unsupportedAdmissionControl = (provider) => /* @__PURE__ */ new Error(`provider "${provider}" does not advertise early native continuation admission control`);
 const missingContinuationAdmission = () => new RetainedRunProviderContractError("provider accepted a native continuation without an admission reference", { code: "RETAINED_NATIVE_CONTINUATION_ADMISSION_MISSING" });
@@ -15306,8 +15301,7 @@ function beginNativeContinuation(control, capabilities, request, turn) {
 		result
 	};
 }
-//#endregion
-//#region src/runtime/retained-run-handle.ts
+// src/runtime/retained-run-handle.ts
 async function snapshot(control, clock, reason, signal) {
 	if (signal?.aborted) throw abortError(signal.reason);
 	control.sync();
@@ -15454,8 +15448,7 @@ function createRetainedRunHandle(environment, session, initialControlRef, capabi
 		cancel: (options) => cancelRetainedRun(control, clock, options)
 	};
 }
-//#endregion
-//#region src/runtime/retained-run-intent.ts
+// src/runtime/retained-run-intent.ts
 /**
 * Project environment creation input into public digest material.
 *
@@ -15547,8 +15540,7 @@ function retainedTurnMaterial(input, contextTransfer) {
 		...contextTransfer === void 0 ? {} : { contextTransferRequestDigest: contextTransfer.requestDigest }
 	};
 }
-//#endregion
-//#region src/runtime/retained-run-start.ts
+// src/runtime/retained-run-start.ts
 /**
 * Mint deterministic dispatch coordinates from the two caller-supplied keys.
 * The same `(idempotencyKey, turnId)` pair yields the same coordinates in
@@ -15557,9 +15549,10 @@ function retainedTurnMaterial(input, contextTransfer) {
 * keeps provider session identifiers bounded and safe for workspace paths.
 */
 function mintRetainedIdentity(idempotencyKey, turnId) {
+	const base = `${encodeURIComponent(idempotencyKey)}:${encodeURIComponent(turnId)}`;
 	const digest = canonicalCandidateDigest({
 		kind: "retained-identity.v1",
-		base: `${encodeURIComponent(idempotencyKey)}:${encodeURIComponent(turnId)}`
+		base
 	}).slice(7);
 	return {
 		sessionId: `retained-session-${digest}`,
@@ -15927,7 +15920,8 @@ function retainedContextTransfer(value) {
 	return detachedSnapshot(parsed.data, "retained context transfer request");
 }
 function assertExactRetainedRunIntent(received, expected) {
-	if (canonicalCandidateDigest(parseRetainedRunIntent(received)) !== canonicalCandidateDigest(expected)) throw new Error("retained run intent conflicts with replay material");
+	const stableReceived = parseRetainedRunIntent(received);
+	if (canonicalCandidateDigest(stableReceived) !== canonicalCandidateDigest(expected)) throw new Error("retained run intent conflicts with replay material");
 }
 function parseRetainedRunIntent(value) {
 	const stable = detachedSnapshot(value, "retained run intent");
@@ -15991,8 +15985,7 @@ function assertRetainedCapabilityRequirements(providerName, capabilities) {
 	const retained = capabilities.retainedControl;
 	if (retained?.exactRunIdentity !== true || retained.resultIdentity !== true || retained.eventIdentity !== true || retained.cancellationIdempotency !== true || !capabilities.streaming.detach || !capabilities.streaming.replay || !capabilities.streaming.turnIdempotency) throw new Error(`provider "${providerName}" cannot control a retry-safe retained run`);
 }
-//#endregion
-//#region src/runtime/retained-native-stop.ts
+// src/runtime/retained-native-stop.ts
 /** One request per run: every caller that stops the same execution replays one provider operation,
 *  so the operation id and its reason never disagree across a teardown and a release. */
 const NATIVE_STOP_REASON = "Runtime stopped the native harness: its execution is no longer observed";
@@ -16003,7 +15996,7 @@ const STOP_STATUS_POLL_MS = 1e3;
 *
 * A retained execution outlives its local stream by design, so an aborted observer can reconnect.
 * Keeping its environment preserves the files; it must not keep the harness running. Measured on
-* Discovery: after `disco cancel` on 2026-10-04 the kept root box ran `claude --print` for two
+* Discovery: after `disco cancel` the kept root box ran `claude --print` for two
 * more minutes, untraced and charged to the subscription, until an operator stopped the box; on
 * 2026-10-03 a cancelled run kept 18 boxes whose `claude` processes ran until an operator stopped
 * them. The provider's exact cancellation stops the process; the box and its files stay.
@@ -16066,8 +16059,7 @@ function describeRetainedNativeStops(stops) {
 		return `native execution ${stop.executionId} stop unconfirmed at ${stop.at} (effect ${stop.effect}${stop.error === void 0 ? "" : `: ${stop.error}`}); it may still be running`;
 	}).join("; ");
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-retention-lifecycle.ts
+// src/runtime/environment-provider/provider-retention-lifecycle.ts
 function createProviderCaptureMirrors(options, createProfile, node, state) {
 	const nativePort = options.workspaceRetention?.captureNative === void 0 ? void 0 : options.workspaceRetention;
 	let nativeInFlight;
@@ -16357,8 +16349,7 @@ function providerWorkspaceCaptureReceipt(args, environment, snapshot, fallbackSe
 		...coverage.incompleteReason === void 0 ? {} : { incompleteReason: coverage.incompleteReason }
 	});
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-workspace-capture.ts
+// src/runtime/environment-provider/provider-workspace-capture.ts
 /** Capture the environment's workspace once per generation; later callers share that capture. */
 async function captureExecutorWorkspace(scope, next, outcome) {
 	const { state } = scope;
@@ -16442,8 +16433,7 @@ function recordCapturedWorkspace(scope, workspaceRetention, next, { snapshot, pr
 	}
 	if (workspaceRetention.requireCompleteProvenance && !coverageComplete) state.workspacePreservationRequired = true;
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-environment-teardown.ts
+// src/runtime/environment-provider/provider-environment-teardown.ts
 /** The environment id the latest durable admission names, when creation got that far. */
 function admittedEnvironmentId(retention) {
 	for (const admission of [...retention?.admissions ?? []].reverse()) {
@@ -16586,8 +16576,7 @@ async function captureBeforeDestroy$1(scope, target, signal) {
 		await awaitAbortable$1(mirrors.captureNative(target, "interrupted", admitted === void 0 ? void 0 : freezeControlRef(admitted)), signal).catch(() => void 0);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/workspace-checkpoint.ts
+// src/runtime/supervise/workspace-checkpoint.ts
 /** Workspace-relative path of the marker Runtime writes before every checkpoint. */
 const WORKSPACE_CHECKPOINT_MARKER_PATH = ".agent-runtime-checkpoint";
 /** Bound on one checkpoint: environment lookup, marker write, and the provider operation. */
@@ -16596,10 +16585,10 @@ const WORKSPACE_CHECKPOINT_TIMEOUT_MS = 12e4;
 *  A turn's own workspace capture also cuts them short when it starts. A capture cut short keeps
 *  its checkpoint, and the owner's release, bounded by `RELEASE_CHECKPOINT_CAPTURES_MS`, captures
 *  it again. */
-const WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS = 2 * 6e4;
+const WORKSPACE_CHECKPOINT_ROTATION_CAPTURES_MS = 12e4;
 /** Bound on creating and reconstructing the fork a checkpoint's capture reads: a Sandbox box
-*  created from a snapshot (measured 2026-09-24: 19 s). The capture itself is bounded by its port. */
-const WORKSPACE_CHECKPOINT_FORK_TIMEOUT_MS = 10 * 6e4;
+*  created from a snapshot (19 s). The capture itself is bounded by its port. */
+const WORKSPACE_CHECKPOINT_FORK_TIMEOUT_MS = 6e5;
 /** Write the marker. False when the environment cannot take it, so no restore can be verified. */
 async function writeWorkspaceMarker(environment, marker, signal) {
 	if (typeof environment.write !== "function") return false;
@@ -16632,8 +16621,7 @@ async function verifyWorkspaceMarker(environment, marker, signal) {
 		};
 	}
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-event-projection.ts
+// src/runtime/environment-provider/provider-event-projection.ts
 function sandboxEventFromEnvironmentEvent(event) {
 	const normalized = event.normalized;
 	const type = normalized?.type ?? event.type;
@@ -16934,15 +16922,14 @@ function isNestedUsageType(type) {
 function stringValue(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-retained-observation.ts
+// src/runtime/environment-provider/provider-retained-observation.ts
 /**
 * How long a retained stream may go without new evidence before the node publishes that it waits
 * on its exact result. Silence never ends the turn (ending there failed 18 still-running attempts
-* as `terminal-event-lost`, 2026-10-12..20); only the exact result or an abort does. The bound on
+* as `terminal-event-lost`); only the exact result or an abort does. The bound on
 * a wait that never ends is the Lab keeper's hung-root re-drive after 15 minutes without a write.
 */
-const RETAINED_AWAITING_RESULT_AFTER_MS = 8 * 6e4;
+const RETAINED_AWAITING_RESULT_AFTER_MS = 48e4;
 const RETAINED_OBSERVATION_BATCH_EVENTS = 1024;
 /**
 * After its exact result, a stream that still owes its terminal frame keeps reading only while
@@ -16954,7 +16941,7 @@ const RETAINED_TAIL_FLOW_MS = 100;
 /**
 * Why the event stream stopped short, as bounded redacted text. A settlement reason reads messages
 * and `cause` links only, never an AggregateError's members, so a wrapper that omits this hides
-* which layer lost the stream (critics-tournament-v1-158ca88e83bf:s1, 2026-10-16).
+* which layer lost the stream (critics-tournament-v1-158ca88e83bf:s1).
 */
 function observationFailureText(failure) {
 	const error = failure.error;
@@ -17183,16 +17170,14 @@ var RetainedObservation = class {
 		return !failed;
 	}
 };
-//#endregion
-//#region src/runtime/environment-provider/provider-validation-error.ts
+// src/runtime/environment-provider/provider-validation-error.ts
 var ValidationError = class extends Error {
 	constructor(message, options) {
 		super(message, options);
 		this.name = "ValidationError";
 	}
 };
-//#endregion
-//#region src/runtime/environment-provider/provider-turn-input.ts
+// src/runtime/environment-provider/provider-turn-input.ts
 /**
 * Lower the seam's prompt options onto turn fields, through the one mapper this module already
 * uses to raise a sandbox prompt into a provider turn. Reusing it is what keeps the two directions
@@ -17287,8 +17272,7 @@ function taskToPrompt(task) {
 	}
 	return JSON.stringify(task);
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-execution-source.ts
+// src/runtime/environment-provider/provider-execution-source.ts
 /** The environment, turn and identity a retained dispatch creates or replays. */
 function retainedDispatchMaterial(args, retention, selectedTurn, signal) {
 	const priorSession = retention.priorSession;
@@ -17462,8 +17446,7 @@ async function providerExecutionSource(args, turn, signal) {
 		retained: false
 	};
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-turn-observer.ts
+// src/runtime/environment-provider/provider-turn-observer.ts
 /** Reads one turn's provider events into archive, text, failures, trace steps, progress and usage. */
 var ProviderTurnObserver = class {
 	args;
@@ -17519,8 +17502,7 @@ var ProviderTurnObserver = class {
 		}
 	}
 };
-//#endregion
-//#region src/runtime/environment-provider/provider-sandbox-adapter.ts
+// src/runtime/environment-provider/provider-sandbox-adapter.ts
 /** Adapt a neutral environment provider to the `SandboxClient` interface used by existing loop paths.
 * @experimental */
 function providerAsSandboxClient(provider, options = {}) {
@@ -17945,8 +17927,7 @@ function sessionStatusFromUnknown(status) {
 	if (status === "completed" || status === "cancelled") return status;
 	return statusFromUnknown(status);
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-turn-settlement.ts
+// src/runtime/environment-provider/provider-turn-settlement.ts
 /** What the settled turn left behind and what the teardown must still decide about. */
 var ProviderTurnSettlement = class {
 	args;
@@ -18084,7 +18065,7 @@ var ProviderTurnSettlement = class {
 	}
 	/**
 	* A capture that fails or exceeds its deadline after settlement is a fact about the evidence,
-	* never the turn's outcome. On Runtime 0.295.4 (2026-10-03) a capture past its 1,200,000 ms
+	* never the turn's outcome. On Runtime 0.295.4 a capture past its 1,200,000 ms
 	* deadline behind a two-slot queue shared by 34 workers threw an AbortError, the driver
 	* classified it terminal, and two research roots ended with 13 and 0 children settled. With no
 	* receipt the source stays preserved and the owner reads a retention failure; the turn is not re-run.
@@ -18198,8 +18179,7 @@ var ProviderTurnSettlement = class {
 		} else this.failure = this.failure instanceof Error ? Object.assign(this.failure, { cause: this.failure.cause ?? error }) : this.failure;
 	}
 };
-//#endregion
-//#region src/runtime/environment-provider/provider-usage-account.ts
+// src/runtime/environment-provider/provider-usage-account.ts
 /** What one provider invocation has spent, and what of that spend a receipt proves. */
 var ProviderUsageAccount = class {
 	args;
@@ -18363,8 +18343,7 @@ var ProviderUsageAccount = class {
 		} else if (input > 0 || output > 0 || receipt.tokensKnown === false) this.pendingUnpricedWork = true;
 	}
 };
-//#endregion
-//#region src/runtime/environment-provider/provider-invocation.ts
+// src/runtime/environment-provider/provider-invocation.ts
 /** The turn this invocation sends: the task's turn under the provider's defaults and placement rules. */
 function invocationTurn(args) {
 	const linked = args.signal;
@@ -18401,8 +18380,7 @@ async function* streamProviderExecutor(args) {
 	}
 	return settlement.end();
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-execution-loop.ts
+// src/runtime/environment-provider/provider-execution-loop.ts
 /** A new environment now backs this execution; the identity the provider issued is evidence. */
 function adoptEnvironment(scope, env) {
 	const { state, materialization } = scope;
@@ -18557,8 +18535,7 @@ async function pauseForContinuation(scope, invocation, ended, attempt, refusalsB
 		}
 	};
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-executor-state.ts
+// src/runtime/environment-provider/provider-executor-state.ts
 /** Everything one provider executor knows about its environment, capture generation and release. */
 var ProviderExecutorState = class {
 	callerSignal;
@@ -18637,8 +18614,7 @@ var ProviderExecutorState = class {
 		this.clearWorkspaceCapture();
 	}
 };
-//#endregion
-//#region src/runtime/environment-provider/provider-materialization.ts
+// src/runtime/environment-provider/provider-materialization.ts
 function providerMaterialization(provider, createProfile, node, executionId, retention, options, placement) {
 	const attemptId = node?.attemptId ?? newExecutionAttemptId(executionId);
 	const providerModel = concreteProfileModel(createProfile);
@@ -18688,8 +18664,7 @@ function providerMaterialization(provider, createProfile, node, executionId, ret
 		}
 	};
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-executor-lifecycle.ts
+// src/runtime/environment-provider/provider-executor-lifecycle.ts
 function createProviderExecutor(provider, profile, ctx, options, placement) {
 	if (options.workspaceRetention !== void 0) assertProviderWorkspaceRetentionPort(options.workspaceRetention, `providerAsExecutor(${provider.name})`);
 	const node = ctx.node === void 0 ? void 0 : detachedSnapshot(ctx.node, "provider executor node");
@@ -18820,10 +18795,9 @@ function heldForContinuation(scope) {
 /** What a leaf is told when it continues after a refused turn. The session carries its
 *  conversation and the environment its files, so the instruction names neither the provider nor
 *  the refusal: a director told the details of a provider failure spent its children probing the
-*  infrastructure (discovery-lab AGENTS.md, measured 2026-09-11). */
+*  infrastructure (discovery-lab AGENTS.md). */
 const LEAF_CONTINUATION_TASK = "Your previous turn was interrupted before it finished. This is the same task in the same session: your conversation so far and the files in your workspace are where you left them. Continue from where you stopped. Do not start over.";
-//#endregion
-//#region src/runtime/environment-provider/provider-executor-admission.ts
+// src/runtime/environment-provider/provider-executor-admission.ts
 /** Adapt an environment provider into an `ExecutorFactory` for `createExecutor`.
 *
 * `createExecutor({ backend: 'provider', provider })` is the composition most callers want; it
@@ -18856,8 +18830,7 @@ function placedProviderExecutor(provider, options, identity) {
 	if (options.placements !== void 0) throw new ValidationError("placedProviderExecutor: placements select within one provider");
 	return (spec, ctx) => createProviderExecutor(provider, spec.profile, ctx, options, identity);
 }
-//#endregion
-//#region src/runtime/environment-provider/provider-registry.ts
+// src/runtime/environment-provider/provider-registry.ts
 /** Create a registry that resolves provider names to concrete provider instances.
 * @experimental */
 function createAgentEnvironmentProviderRegistry(providers = []) {
@@ -18902,8 +18875,7 @@ function resolveAgentEnvironmentProvider(provider, registry) {
 	if (!registry) throw new ValidationError(`agent environment provider "${provider}" requires an AgentEnvironmentProviderRegistry`);
 	return registry.require(provider);
 }
-//#endregion
-//#region src/runtime/supervise/cli-process-executor.ts
+// src/runtime/supervise/cli-process-executor.ts
 /**
 * Spawns a subprocess (`bin` + `args`). It cannot account tokens, so it is
 * `budgetExempt: true`: it remains usable as a direct executor, while budgeted supervision
@@ -19068,8 +19040,7 @@ function killWithGrace(proc, grace) {
 		}, true);
 	});
 }
-//#endregion
-//#region src/runtime/router-http-transport.ts
+// src/runtime/router-http-transport.ts
 /** Router HTTP attempts, response evidence, retries, and request cancellation. */
 function routerRequestHeaders(cfg, opts) {
 	const suppliedCallId = opts?.callId;
@@ -19263,8 +19234,7 @@ function withRouterRequestTimeout(callerSignal, timeoutMs) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/router-request-body.ts
+// src/runtime/router-request-body.ts
 /** Canonical provider request lowering for buffered and streamed completions. */
 /** The OpenAI-shape request body both plain-chat transports send. One builder so the streamed
 *  completion cannot drift from the buffered one on model, ceilings, seed, or reasoning effort. */
@@ -19353,8 +19323,7 @@ function providerRequestExtras(extraBody, reservedFields) {
 	for (const field of reservedFields) delete extras[field];
 	return extras;
 }
-//#endregion
-//#region src/runtime/router-response.ts
+// src/runtime/router-response.ts
 /** Provider completion fields and measured resource accounting. */
 function parseChatResult(json, model, transportAttempts) {
 	const data = json;
@@ -19490,8 +19459,7 @@ function bufferedCompletionFields(data, measured) {
 		...typeof data.choices?.[0]?.finish_reason === "string" ? { finishReason: data.choices[0].finish_reason } : {}
 	};
 }
-//#endregion
-//#region src/runtime/router-sse-chunks.ts
+// src/runtime/router-sse-chunks.ts
 /** SSE framing and response-body ownership for Router completion chunks. */
 /**
 * Decode an SSE body into chat-completion chunks. Frames are blank-line separated; `data:` lines
@@ -19580,8 +19548,7 @@ function parseChunkFrame(frame) {
 		return;
 	}
 }
-//#endregion
-//#region src/runtime/router-streamed-completion.ts
+// src/runtime/router-streamed-completion.ts
 /** Stateful assembly of one streamed Router completion. */
 /**
 * POST `body` with `stream: true` and fold the SSE chunks into one completion. Both streamed
@@ -19670,8 +19637,7 @@ function idAlreadyOpen(calls, id) {
 	for (const call of calls.values()) if (call.id === id) return true;
 	return false;
 }
-//#endregion
-//#region src/runtime/router-client.ts
+// src/runtime/router-client.ts
 /** One OpenAI-compatible chat completion through the Tangle router, returning text + REAL token usage (`undefined` when the provider omits it — never a fabricated 0). */
 async function routerChatWithUsage(cfg, messages, opts) {
 	const url = `${cfg.routerBaseUrl.replace(/\/$/, "")}/chat/completions`;
@@ -19869,8 +19835,7 @@ function routerBrain(cfg, opts = {}) {
 		};
 	};
 }
-//#endregion
-//#region src/runtime/supervise/executor-local-cancellation.ts
+// src/runtime/supervise/executor-local-cancellation.ts
 /**
 * The honest answer for a backend with no cancel operation: the local request stopped, and
 * nothing about the remote run is known. Never `accepted` — a client that advertises provider
@@ -19884,8 +19849,7 @@ function localAbortCancellation(detail) {
 		detail
 	};
 }
-//#endregion
-//#region src/runtime/supervise/router-executor-request.ts
+// src/runtime/supervise/router-executor-request.ts
 async function runRouterTransport(context, call) {
 	try {
 		return await call();
@@ -19895,7 +19859,8 @@ async function runRouterTransport(context, call) {
 }
 function throwRouterTransportFailure(context, error) {
 	if (error instanceof ValidationError$1 || error && typeof error === "object" && "name" in error && error.name === "AbortError") throw error;
-	throw new ValidationError$1(`${context}: transport failed: ${error instanceof Error ? error.message : String(error)}`);
+	const message = error instanceof Error ? error.message : String(error);
+	throw new ValidationError$1(`${context}: transport failed: ${message}`);
 }
 function assertObservedRouterModel(observed, expected, context) {
 	if (observed !== void 0 && !observedModelMatchesDeclared(observed, expected)) throw new ValidationError$1(`${context}: provider reported model ${JSON.stringify(observed)} but AgentProfile requires ${JSON.stringify(expected)}`);
@@ -19935,8 +19900,7 @@ function routerGenerationOptions(profileExecution) {
 		...profileExecution.extraBody ? { extraBody: profileExecution.extraBody } : {}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/router-profile-execution.ts
+// src/runtime/supervise/router-profile-execution.ts
 /**
 * Materialization contract for one direct Router turn.
 *
@@ -19954,6 +19918,7 @@ const routerTurnProfileMaterialization = defineProfileMaterializationContract({
 		"version",
 		"tags",
 		"systemPrompt",
+		"appendSystemPrompt",
 		"instructions",
 		"modelDefault",
 		"modelProvider",
@@ -20027,7 +19992,11 @@ function exactRouterModel(profile, context) {
 * channel to carry that warning, so it refuses the value instead of silently running strict.
 */
 function renderRouterProfilePrompt(profile) {
-	const sections = [profile.prompt?.systemPrompt, ...profile.prompt?.instructions ?? []].filter((value) => typeof value === "string" && value.trim().length > 0);
+	const sections = [
+		profile.prompt?.systemPrompt,
+		profile.prompt?.appendSystemPrompt,
+		...profile.prompt?.instructions ?? []
+	].filter((value) => typeof value === "string" && value.trim().length > 0);
 	const resources = profile.resources;
 	if (!resources) return sections.join("\n");
 	if (resources.failOnError === false) throw new ValidationError$1("routerInlineExecutor: resources.failOnError: false requests a best-effort resource subset; the direct Router executor always fails closed on a resource it cannot inline and reports no skipped resource, so the best-effort policy is refused rather than applied as strict");
@@ -20054,7 +20023,11 @@ function renderRouterResource(kind, resource) {
 * The profile prompt is always the immutable first message. Later system-role messages are
 * preserved as per-call task context; they cannot replace or precede the profile policy. */
 function taskToMessages(task, spec, resolvedSystem) {
-	const system = resolvedSystem ?? [spec.profile.prompt?.systemPrompt, ...spec.profile.prompt?.instructions ?? []].filter((line) => typeof line === "string" && line.trim().length > 0).join("\n");
+	const system = resolvedSystem ?? [
+		spec.profile.prompt?.systemPrompt,
+		spec.profile.prompt?.appendSystemPrompt,
+		...spec.profile.prompt?.instructions ?? []
+	].filter((line) => typeof line === "string" && line.trim().length > 0).join("\n");
 	if (task && typeof task === "object" && Array.isArray(task.messages)) {
 		const supplied = task.messages.map((value, index) => {
 			if (!value || typeof value !== "object") throw new ValidationError$1(`routerInlineExecutor: messages[${index}] must be an object`);
@@ -20076,15 +20049,14 @@ function taskToMessages(task, spec, resolvedSystem) {
 		content: taskToPrompt$1(task)
 	}];
 }
-//#endregion
-//#region src/runtime/supervise/router-transcript.ts
+// src/runtime/supervise/router-transcript.ts
 /**
 * The conversation of a router-brained agent, kept as it happens.
 *
 * A router-brained agent (`harness` omitted or `cli-base`) runs its tool loop in this process, so
 * its whole conversation is in the loop's `messages` and nowhere else. Before this, Runtime
 * metered each turn's usage and tool-call names and kept nothing the agent said, saw, or asked a
-* tool to do: a 316-agent tree on 2026-09-24 settled with 0 of 316 transcripts, and the 37 agents
+* tool to do: a 316-agent tree settled with 0 of 316 transcripts, and the 37 agents
 * still running when its driver process stopped left no record at all (agent-runtime#1377).
 *
 * The recorder keeps each message once, in the order the model saw it, and serves two readers:
@@ -20107,7 +20079,7 @@ const ROUTER_TRANSCRIPT_HARNESS = "router";
 * the message says so with its full length, so a reader never takes a cut message for the whole.
 * The settled transcript keeps the full content, within the bounds of `harnessTranscriptFromLines`.
 */
-const TURN_CONTENT_BYTES = 256 * 1024;
+const TURN_CONTENT_BYTES = 262144;
 function createRouterTranscript() {
 	let turnMessages = [];
 	let started = false;
@@ -20177,8 +20149,7 @@ function forTurnEvent(message) {
 		contentCut: true
 	};
 }
-//#endregion
-//#region src/runtime/supervise/router-inline-executor.ts
+// src/runtime/supervise/router-inline-executor.ts
 const routerInlineExecutor = (spec, ctx) => {
 	const seam = readSeam(ctx, routerSeamKey, "router/inline");
 	const model = exactRouterModel(spec.profile, "routerInlineExecutor");
@@ -20308,8 +20279,7 @@ const routerInlineExecutor = (spec, ctx) => {
 	});
 	return executor;
 };
-//#endregion
-//#region src/runtime/code-mode.ts
+// src/runtime/code-mode.ts
 function positiveInteger(value, fallback, name) {
 	const result = value ?? fallback;
 	if (!Number.isSafeInteger(result) || result < 1) throw new RangeError(`code mode: ${name} must be a positive safe integer`);
@@ -20342,7 +20312,7 @@ async function runCodeMode(code, options) {
 	if (!options.callId.trim()) throw new TypeError("code mode: callId is required");
 	const concurrency = positiveInteger(options.concurrency, 4, "concurrency");
 	const maxCalls = positiveInteger(options.maxCalls, 1024, "maxCalls");
-	const memoryLimitBytes = positiveInteger(options.memoryLimitBytes, 64 * 1024 * 1024, "memoryLimitBytes");
+	const memoryLimitBytes = positiveInteger(options.memoryLimitBytes, 67108864, "memoryLimitBytes");
 	const timeoutMs = options.timeoutMs === Infinity ? Infinity : positiveInteger(options.timeoutMs, 3e5, "timeoutMs");
 	if (timeoutMs !== Infinity && timeoutMs > 2147483647) throw new RangeError("code mode: timeoutMs must be at most 2147483647 or Infinity");
 	const { CodemodeSandbox, toCodemodeIdentifier } = await import("@earendil-works/pi-codemode");
@@ -20572,8 +20542,7 @@ function codeModeModelOutput(value) {
 		}] : [])
 	};
 }
-//#endregion
-//#region src/runtime/supervise/router-tool-loop.ts
+// src/runtime/supervise/router-tool-loop.ts
 function mergePromptCache(target, cache) {
 	if (!cache) return;
 	for (const key of [
@@ -20930,8 +20899,7 @@ function settleLoop(env, state, actions, started) {
 		spent
 	};
 }
-//#endregion
-//#region src/runtime/supervise/router-tools-executor.ts
+// src/runtime/supervise/router-tools-executor.ts
 /** Compose node behavior with host state and ceilings; neither grants new tools. */
 function routerCodeModeSettings(profile, host) {
 	if (profile === false || profile === void 0 && host === void 0) return void 0;
@@ -21065,8 +21033,7 @@ const routerToolsInlineExecutor = (spec, ctx) => {
 	});
 	return executor;
 };
-//#endregion
-//#region src/runtime/iteration-events.ts
+// src/runtime/iteration-events.ts
 function emitRunLoopHook(options, event) {
 	notifyRuntimeHookEvent(options.ctx.hooks, {
 		id: `${event.runId}:${event.target}:${event.phase}${event.stepIndex === void 0 ? "" : `:${event.stepIndex}`}`,
@@ -21083,8 +21050,7 @@ async function emitTrace(emitter, event) {
 	if (!emitter) return;
 	await emitter.emit(event);
 }
-//#endregion
-//#region src/runtime/iteration-result.ts
+// src/runtime/iteration-result.ts
 function finalize(args) {
 	let selector;
 	let winner;
@@ -21284,8 +21250,7 @@ const TERMINAL_DECISIONS = [
 function isTerminalDecision(decision) {
 	return TERMINAL_DECISIONS.includes(decision);
 }
-//#endregion
-//#region src/runtime/sandbox-evidence-retention.ts
+// src/runtime/sandbox-evidence-retention.ts
 /** A failed capture keeps the live source handle available for an explicit retry. */
 var SandboxEvidenceRetentionError = class extends Error {
 	box;
@@ -21404,8 +21369,7 @@ var SandboxEvidenceTracker = class {
 		}
 	}
 };
-//#endregion
-//#region src/runtime/sandbox-acquire.ts
+// src/runtime/sandbox-acquire.ts
 /**
 * HTTP statuses where create should be retried — gateway timeouts
 * (502/503/504/522/524) where provisioning may continue server-side, plus
@@ -21463,7 +21427,7 @@ async function acquireSandbox(client, options, acquire = {}) {
 					acquire.onAcquire?.(found);
 					return await waitReadyOrDestroy(found, deadline, pollMs, acquire.signal, now, sleep$1, acquire.beforeDelete);
 				}
-				if (scan < appearScans - 1) await sleep$1(pollMs);
+				if (scan < 4) await sleep$1(pollMs);
 			}
 			attempt += 1;
 			await sleep$1(Math.min(pollMs * attempt, 15e3));
@@ -21509,8 +21473,7 @@ function isRetryable(err) {
 	if (/\b(timed out|timeout|gateway|temporarily unavailable|too many requests|ECONNRESET|ETIMEDOUT|EAI_AGAIN)\b/i.test(msg)) return true;
 	return /provision failed|edge data plane|not reachable|failed to create sandbox/i.test(msg);
 }
-//#endregion
-//#region src/runtime/sandbox-backend.ts
+// src/runtime/sandbox-backend.ts
 /**
 * Harnesses the sandbox accepts as a `backend.type`. `gemini` is a
 * `HarnessType` with no sandbox backend, so it is absent here and a profile
@@ -21583,8 +21546,7 @@ function buildBackendOptions(profile, overrides) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/sandbox-lineage.ts
+// src/runtime/sandbox-lineage.ts
 const TEARDOWN_TIMEOUT_MS$1 = 15e3;
 const DEFAULT_FORK_CONCURRENCY = 4;
 /**
@@ -21831,8 +21793,7 @@ async function destroyBounded(box, failOnError = false, beforeDelete) {
 	}
 	await withTimeout(deleteBoxSafe(box), TEARDOWN_TIMEOUT_MS$1);
 }
-//#endregion
-//#region src/runtime/iteration-sandboxes.ts
+// src/runtime/iteration-sandboxes.ts
 /**
 * Build the lineage when either lineage flag is set. Probes the legacy fork
 * capability once per run (live branching is detected on each box).
@@ -22060,8 +22021,7 @@ async function invokePrepareBox(spec, box, signal, recordMount) {
 }
 /** Shared no-op recorder for box-preparation paths that have no run manifest. */
 const noopMountRecorder = () => {};
-//#endregion
-//#region src/runtime/iteration-execution.ts
+// src/runtime/iteration-execution.ts
 async function runBatch(args) {
 	const queue = args.slice.map((task, offset) => ({
 		task,
@@ -22258,8 +22218,7 @@ async function executeIteration(args) {
 	}
 	if (slot.error instanceof ValidationError$1) throw slot.error;
 }
-//#endregion
-//#region src/runtime/prompt-options.ts
+// src/runtime/prompt-options.ts
 /** Keys the kernel owns on every prompt it sends; a caller value never carries them past here. */
 const kernelOwnedPromptKeys = /* @__PURE__ */ new Set(["sessionId", "signal"]);
 /**
@@ -22310,8 +22269,7 @@ function assertBoxlessPromptOptions(options, seam, keys = instrumentPromptKeys)
 		throw new ValidationError$1(`${seam}: promptOptions.${key} cannot apply without a box`);
 	}
 }
-//#endregion
-//#region src/runtime/agent-rounds.ts
+// src/runtime/agent-rounds.ts
 const DEFAULT_MAX_ITERATIONS = 10;
 const DEFAULT_MAX_CONCURRENCY = 4;
 /**
@@ -22380,8 +22338,10 @@ async function runAgentRounds(options) {
 	});
 	const controller = new AbortController();
 	const onOuterAbort = () => controller.abort();
-	if (options.ctx.signal) if (options.ctx.signal.aborted) controller.abort();
-	else options.ctx.signal.addEventListener("abort", onOuterAbort, { once: true });
+	if (options.ctx.signal) {
+		if (options.ctx.signal.aborted) controller.abort();
+		else options.ctx.signal.addEventListener("abort", onOuterAbort, { once: true });
+	}
 	try {
 		while (iterations.length < maxIterations) {
 			if (controller.signal.aborted) throwAbort();
@@ -22526,8 +22486,7 @@ function resolveAgentRuns(options) {
 	if (options.agentRuns && options.agentRuns.length > 0) return options.agentRuns;
 	throw new ValidationError$1("runAgentRounds: `agentRun` or non-empty `agentRuns` is required");
 }
-//#endregion
-//#region src/runtime/supervise/sandbox-session-run.ts
+// src/runtime/supervise/sandbox-session-run.ts
 function newSandboxSessionRun(args) {
 	const now = args.now ?? Date.now;
 	return {
@@ -22713,8 +22672,7 @@ function readFinalText(event) {
 	const alt = data.text;
 	return typeof alt === "string" ? alt : void 0;
 }
-//#endregion
-//#region src/runtime/supervise/sandbox-session.ts
+// src/runtime/supervise/sandbox-session.ts
 /** Ceiling on continuation turns (turn 0 is the task, each later turn a folded steer). */
 const DEFAULT_SANDBOX_STEERING_MAX_TURNS = 24;
 /** One steerable sandbox worker. The returned session is inert until `stream()` is drained. */
@@ -22960,8 +22918,7 @@ function publishSessionArtifact(run, started) {
 function isInterruptAbort(err, interrupt, external, owned) {
 	return (err instanceof DOMException && err.name === "AbortError" || typeof err === "object" && err !== null && err.name === "AbortError") && interrupt.aborted && !external.aborted && !owned.aborted;
 }
-//#endregion
-//#region src/runtime/supervise/sandbox-leaf-executor.ts
+// src/runtime/supervise/sandbox-leaf-executor.ts
 /**
 * COMPOSES `runAgentRounds` as a single-task leaf: one box, a refine driver bounded to
 * the seam's `maxIterations` (default 1), the spec's profile as the agent run.
@@ -23282,8 +23239,7 @@ function singleShotDriver(maxIterations) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/executor-config.ts
+// src/runtime/supervise/executor-config.ts
 /** Capture one public executor configuration at its call boundary. All data that selects policy,
 * model, process, limits, or backend behavior is detached and deeply frozen.
 * Explicit service/function fields remain live by reference because they are executable ports,
@@ -23409,6 +23365,7 @@ function snapshotExecutorConfig(config) {
 				"maxReconnects",
 				"modelCredential",
 				"modelSilenceMs",
+				"outputFormat",
 				"sessionId",
 				"timeoutMs"
 			]), "createExecutor bridge config");
@@ -23608,8 +23565,7 @@ function requiredProviderProfileHarness(spec, seam) {
 	if (seam.defaults?.backend !== void 0 && seam.defaults.backend !== harness) throw new ValidationError$1(`createExecutor(provider, steering): provider default backend "${seam.defaults.backend}" conflicts with AgentProfile.harness "${harness}"`);
 	return harness;
 }
-//#endregion
-//#region src/runtime/supervise/executor-registry.ts
+// src/runtime/supervise/executor-registry.ts
 /**
 * The open resolver/registry. Pre-registers the three built-ins under their
 * runtime tags (`'router'`, `'sandbox'`, `'cli'`) and accepts `register(name,
@@ -23669,8 +23625,7 @@ function createExecutorRegistry() {
 		}
 	};
 }
-//#endregion
-//#region src/durable/spawn-journal/event-index.ts
+// src/durable/spawn-journal/event-index.ts
 /**
 * A trace root is valid only beside the output it commits to, with a well-formed root, artifact
 * reference and leaf count (at least the summary leaf). Records written before trace roots carry
@@ -23877,8 +23832,7 @@ function outsideCursorNamespace(ev) {
 function insideCursorNamespace(ev) {
 	return !outsideKinds.has(ev.kind);
 }
-//#endregion
-//#region src/durable/jsonl-append.ts
+// src/durable/jsonl-append.ts
 /** Commit JSONL bytes and validate their descriptor under one generation fence. @internal */
 function commitJsonLine(path, record, acknowledge) {
 	const encoded = JSON.stringify(record);
@@ -23952,8 +23906,7 @@ function readAt(fd, buffer, position) {
 		offset += read;
 	}
 }
-//#endregion
-//#region src/durable/jsonl-file.ts
+// src/durable/jsonl-file.ts
 /** Read a fixed file prefix one record at a time, never allocating the whole journal as a string.
 * A reader cannot chase concurrent appends forever. Missing files are empty only when requested;
 * corruption, short reads, and other I/O errors remain failures. Closing the iterator closes the fd. */
@@ -24072,7 +24025,7 @@ async function upsertCommittedJsonLine(path, record, key) {
 		allowWhitespaceLines: true
 	})) if (key(prior) !== id) updated.push(prior);
 	updated.push(snapshot);
-	const { writeAtomicDurableFile } = await import("./record-events-D93DkpAx.js").then((n) => n.i);
+	const { writeAtomicDurableFile } = await import("./record-events-B2GUgYdz.js").then((n) => n.i);
 	writeAtomicDurableFile(path, `${updated.map((row) => JSON.stringify(row)).join("\n")}\n`, { preserveMode: true });
 }
 /** Recover a torn tail under the same generation fence as durable publications. @internal */
@@ -24084,8 +24037,7 @@ async function prepareJsonlAppend(path) {
 function isNoEntError(error) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
-//#endregion
-//#region src/durable/spawn-journal/result-blob-store.ts
+// src/durable/spawn-journal/result-blob-store.ts
 /**
 * FS `ResultBlobStore`. One JSON file per artifact under `dir`, named by a
 * filesystem-safe encoding of the `outRef` (`sha256:<hex>` → `sha256-<hex>.json`).
@@ -24154,8 +24106,7 @@ function assertContentAddress(outRef, artifact) {
 	const expected = contentAddress(artifact);
 	if (outRef !== expected) throw new Error(`blob outRef '${outRef}' does not match the artifact content hash '${expected}'; a content-addressed store refuses a mismatched ref (breaks the replay invariant)`);
 }
-//#endregion
-//#region src/durable/in-memory-spawn-stores.ts
+// src/durable/in-memory-spawn-stores.ts
 /** In-process decision and payload retention; no acknowledged state survives process exit. */
 /**
 * In-memory `ResultBlobStore`. Content-addressed: `put` verifies the supplied
@@ -24211,8 +24162,7 @@ var InMemorySpawnJournal = class {
 		tree.index.add(event);
 	}
 };
-//#endregion
-//#region src/runtime/supervise/tree-key.ts
+// src/runtime/supervise/tree-key.ts
 /** Runtime tag used only for a child that owns another supervised scope. */
 const driverRuntime = "driver";
 const nestedDriverTreeOwners = /* @__PURE__ */ new WeakSet();
@@ -24229,8 +24179,7 @@ function attestNestedDriverTreeOwner(owner) {
 function runtimeOwnedNestedDriverTreeRoot(owner, parentTreeRoot, driverNodeId) {
 	return nestedDriverTreeOwners.has(owner) ? nestedDriverTreeRoot(parentTreeRoot, driverNodeId) : void 0;
 }
-//#endregion
-//#region src/durable/spawn-journal/settlement-evidence.ts
+// src/durable/spawn-journal/settlement-evidence.ts
 /** Copy a terminal record's overspend at the journal boundary; absent stays absent. */
 function budgetViolationOf(event) {
 	if (event.budgetViolation === void 0) return {};
@@ -24262,8 +24211,7 @@ function traceEvidenceFor(event) {
 		reason: "legacy-settlement-without-trace-evidence"
 	};
 }
-//#endregion
-//#region src/durable/spawn-journal/tree-view.ts
+// src/durable/spawn-journal/tree-view.ts
 /**
 * Materialize a recorded `TreeView` from a journaled event list for inspection. Folds
 * `spawned`/`settled`/`cancelled` into a per-node snapshot in `seq` order, then adds each
@@ -24292,28 +24240,22 @@ function materializeTreeView(events) {
 			spent: zeroSpend()
 		});
 	}
-	for (const ev of settlements) if (ev.kind === "settled") {
+	for (const ev of settlements) {
 		const node = requireNode(nodes, ev.id);
-		node.status = ev.status === "done" ? "done" : "failed";
-		node.spent = cloneSpend(ev.spent);
+		const down = ev.kind === "cancelled" || ev.status === "down";
+		node.status = ev.kind === "cancelled" ? "cancelled" : down ? "failed" : "done";
+		if (ev.spent !== void 0) node.spent = cloneSpend(ev.spent);
 		node.providerModel = copyProviderModelEvidence(ev.providerModel);
 		node.outRef = ev.outRef;
-		node.trace = traceEvidenceFor(ev);
-		node.budgetViolation = budgetViolationOf(ev).budgetViolation;
-		if (ev.retainedExecution !== void 0) node.retainedExecution = ev.retainedExecution;
-		if (ev.retainedPendingCause !== void 0) node.retainedPendingCause = ev.retainedPendingCause;
-		const settledAt = Date.parse(ev.at);
-		if (Number.isFinite(settledAt)) node.settledAt = settledAt;
-	} else {
-		const node = requireNode(nodes, ev.id);
-		node.status = "cancelled";
-		node.trace = ev.trace ?? {
+		node.failure = down ? ev.failure ?? settlementFailureCause({
+			reason: ev.reason ?? (ev.kind === "settled" ? ev.verdict?.notes : void 0) ?? "child down",
+			infra: ev.infra,
+			retainedPendingCause: ev.retainedPendingCause
+		}) : void 0;
+		node.trace = ev.kind === "cancelled" ? ev.trace ?? {
 			status: "unavailable",
 			reason: "execution-did-not-start"
-		};
-		if (ev.spent !== void 0) node.spent = cloneSpend(ev.spent);
-		node.providerModel = copyProviderModelEvidence(ev.providerModel);
-		node.outRef = ev.outRef;
+		} : traceEvidenceFor(ev);
 		node.budgetViolation = budgetViolationOf(ev).budgetViolation;
 		if (ev.retainedExecution !== void 0) node.retainedExecution = ev.retainedExecution;
 		if (ev.retainedPendingCause !== void 0) node.retainedPendingCause = ev.retainedPendingCause;
@@ -24334,7 +24276,10 @@ function materializeTreeView(events) {
 	}
 	for (const ev of [...events].filter((event) => event.kind === "reconciled").sort((a, b) => a.seq - b.seq)) {
 		const node = requireNode(nodes, ev.id);
-		if (node.status === "pending") node.spent = cloneSpend(ev.spent);
+		if (node.status === "pending") {
+			node.spent = cloneSpend(ev.spent);
+			node.failure = ev.failure;
+		}
 	}
 	for (const ev of events) {
 		if (ev.kind !== "metered") continue;
@@ -24359,6 +24304,7 @@ function freezeSnapshot(node) {
 		parent: node.parent,
 		label: node.label,
 		status: node.status,
+		...node.failure === void 0 ? {} : { failure: node.failure },
 		runtime: node.runtime,
 		budget: node.budget,
 		ownedTreeRoot: node.ownedTreeRoot,
@@ -24378,8 +24324,7 @@ function freezeSnapshot(node) {
 		spawnedAt: node.spawnedAt
 	};
 }
-//#endregion
-//#region src/durable/spawn-journal/spawn-forest.ts
+// src/durable/spawn-journal/spawn-forest.ts
 /**
 * Load every journal tree owned by one recursive supervision run and flatten its nodes/events.
 *
@@ -24480,8 +24425,7 @@ function ownedTreeRootSpawn(spawn) {
 	const { parent: _parent, ownedTreeRoot: _ownedTreeRoot, ...root } = spawn;
 	return root;
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-checkpoint-requests.ts
+// src/runtime/supervise/retained-owner-checkpoint-requests.ts
 /** Reconstruct authority for this source only; a replacement cannot own its snapshots. */
 async function checkpointHandle(state, sourceEnvironmentId, signal) {
 	const cached = state.checkpointHandles?.get(sourceEnvironmentId);
@@ -24573,8 +24517,7 @@ function pendingCheckpoints(events, state) {
 	const confirmed = new Set(events.flatMap((event) => event.kind === "workspace-checkpoint-cleanup" && event.id === state.args.nodeId && event.provider === state.provider?.name && event.confirmed ? [JSON.stringify([event.environmentId, event.checkpointId])] : []));
 	return events.filter((event) => event.kind === "workspace-checkpoint" && event.id === state.args.nodeId && event.provider === state.provider?.name && !confirmed.has(JSON.stringify([event.environmentId, event.checkpoint.checkpointId])));
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-checkpoint-capture.ts
+// src/runtime/supervise/retained-owner-checkpoint-capture.ts
 /**
 * Delete checkpoints, each only after its files are captured into the run's content-addressed
 * store; a checkpoint no capture holds is kept, and the cleanup record says why. Only the
@@ -24841,8 +24784,7 @@ async function settleCaptureForks(state) {
 	}
 	return unresolved;
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-state.ts
+// src/runtime/supervise/retained-owner-state.ts
 const owners = /* @__PURE__ */ new WeakMap();
 /** @internal Scope construction carries this private policy to every nested owner scope. */
 const retainedOwnerWorkspaceRetentionSeamKey = "runtime.retainedOwnerWorkspaceRetention";
@@ -24881,8 +24823,7 @@ function bindScopeRetainedOwnerEnvironmentId(scope, liveEnvironmentId) {
 	const state = owners.get(scope);
 	if (state) state.liveEnvironmentId = liveEnvironmentId;
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-checkpoint-rotation.ts
+// src/runtime/supervise/retained-owner-checkpoint-rotation.ts
 /**
 * Note that the owner's manager made a coordination call, and checkpoint its workspace when the
 * last checkpoint is older than {@link WORKSPACE_CHECKPOINT_MIN_INTERVAL_MS}.
@@ -24996,8 +24937,7 @@ async function checkpointOwnerWorkspace(scope, state) {
 * on the same evidence store, and the final capture spent 26.6 of its 32.6 minutes storing its
 * archive until the root's budget deadline aborted the rotation.
 */
-//#endregion
-//#region src/runtime/supervise/retained-owner-evidence.ts
+// src/runtime/supervise/retained-owner-evidence.ts
 /**
 * The workspace evidence of a retained owner's turns: which attempts hold a verified capture
 * receipt, recapture before a source is reused, and evidence debt. An accepted turn whose capture
@@ -25182,7 +25122,7 @@ async function owePendingEvidence(state, events, attempt, environmentId, failure
 /** How capture retries of owed evidence back off, measured on the run's clock. */
 const EVIDENCE_RETRY_BACKOFF_MS = {
 	initial: 3e4,
-	max: 5 * 6e4
+	max: 3e5
 };
 /** How often the retry loop reads the run's clock. Reading it costs no provider call. */
 const EVIDENCE_RETRY_TICK_MS = 1e3;
@@ -25398,8 +25338,7 @@ async function abandonInputAdmittedIntoDebt(state, indebted) {
 	delete state.taskRef;
 	state.admissions.length = 0;
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-environment-recovery.ts
+// src/runtime/supervise/retained-owner-environment-recovery.ts
 /**
 * The checkpoint a new environment of this owner starts from: the latest one journaled before
 * the invocation's input, taken from an environment the provider has since lost. Only such an
@@ -25527,8 +25466,7 @@ async function reconcileScopeRetainedOwnerEnvironment(scope) {
 		environmentId
 	};
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-turn-lifecycle.ts
+// src/runtime/supervise/retained-owner-turn-lifecycle.ts
 /** Cut short the captures a checkpoint rotation is running; each keeps its checkpoint. */
 function preemptRotationCaptures(state) {
 	state.rotationCaptures?.abort(/* @__PURE__ */ new Error("the turn's end-of-turn capture goes first; checkpoint kept"));
@@ -25605,8 +25543,7 @@ async function scopeRetainedOwnerSettled(scope) {
 	await state.releasing?.catch(() => void 0);
 	await stopOwnerEvidenceRetry(state);
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-invocation.ts
+// src/runtime/supervise/retained-owner-invocation.ts
 /** The scope owns these writers; provider adapters receive only the restricted context. */
 function registerScopeRetainedOwner(scope, args) {
 	const events = args.priorEvents.filter((event) => "id" in event && event.id === args.nodeId);
@@ -25918,8 +25855,7 @@ function consumeScopeRetainedOwnerResult(scope) {
 	if (!state?.acceptedRef) throw new ValidationError$1("retained owner has no accepted result");
 	state.acceptedConsumed = true;
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-release.ts
+// src/runtime/supervise/retained-owner-release.ts
 /** @internal Whether another owner release could still destroy what the last one left. */
 function retainedOwnerReleaseRetriable(scope) {
 	return owners.get(scope)?.releaseRetriable ?? false;
@@ -25933,7 +25869,7 @@ function retainedOwnerReleaseRetriable(scope) {
 * settled 98 minutes after its deadline. The release captures that finished there took 67 seconds
 * and 7 and 34 minutes, beside live captures of abandoned directors on the same slots.
 */
-const RELEASE_CHECKPOINT_CAPTURES_MS = 15 * 6e4;
+const RELEASE_CHECKPOINT_CAPTURES_MS = 9e5;
 /**
 * Release the owner's environment once no turn of it will run again: at the run's final
 * settlement for the root, and when a nested manager's own scope has finished. A second call while
@@ -26119,8 +26055,7 @@ function unsettledOwnerRuns(events, nodeId, environmentId) {
 	close();
 	return [...runs.values()];
 }
-//#endregion
-//#region src/mcp/tools/spawn-resource-paths.ts
+// src/mcp/tools/spawn-resource-paths.ts
 /**
 * Inline resources a manager hands a child by PATH instead of by content.
 *
@@ -26163,7 +26098,7 @@ function unsettledOwnerRuns(events, nodeId, environmentId) {
 *  - bytes that are not valid UTF-8 → refused; `content` is a string, so binary data is encoded
 *    (base64) by the manager first, exactly as it would be for a content resource
 */
-const SPAWN_RESOURCE_PATH_MAX_BYTES = 4 * 1024 * 1024;
+const SPAWN_RESOURCE_PATH_MAX_BYTES = 4194304;
 /** The host-directory reader: a manager whose workspace is a directory this process can open. */
 function hostDirectoryReader(root) {
 	return {
@@ -26424,8 +26359,7 @@ async function resolveSpawnResourcePaths(profile, source) {
 		resolved
 	};
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-resource-reader.ts
+// src/runtime/supervise/retained-owner-resource-reader.ts
 /**
 * The owner's environment as a source of by-path spawn resources.
 *
@@ -26492,8 +26426,7 @@ function scopeRetainedOwnerResourceReader(scope) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/retained-owner-seat-switch.ts
+// src/runtime/supervise/retained-owner-seat-switch.ts
 /** A committed turn is the seat boundary. Keep its native home for a same-harness provider
 * continuation; only a provider/harness change needs a new environment. */
 async function prepareScopeRetainedOwnerSeatSwitch(scope, mode) {
@@ -26548,8 +26481,7 @@ async function retireSeatEnvironment(scope, state) {
 		at: new Date(args.now()).toISOString()
 	});
 }
-//#endregion
-//#region src/runtime/supervise/scope-capabilities.ts
+// src/runtime/supervise/scope-capabilities.ts
 /** Runtime-owned provider evidence is written through this private scope capability. */
 const runtimeOwnedProviderMeters = /* @__PURE__ */ new WeakMap();
 const pauseRecorders = /* @__PURE__ */ new WeakMap();
@@ -26759,7 +26691,7 @@ function hasRetriableTeardowns(scope, release) {
 * A driver's `act` returning does not stop everything that holds its scope: a supervisor tool
 * whose handler outran its response fence keeps running detached (`single-flight-tools`
 * `background()`) with the coordination verbs still bound, and a verb call reaches `spawn`
-* in-process — closing the MCP listener does not reach it. Measured 2026-09-14: such a handler
+* in-process — closing the MCP listener does not reach it. Such a handler
 * spawned `distill:all` 309 ms after the barrier had drained and released. The child was
 * admitted, took a conserved reservation, built a sandbox, ran 12.4 s of provider work, and
 * journaled its settlement 19 s after the run had already written its failure — while the live
@@ -26819,8 +26751,7 @@ function meterRuntimeOwnedAccounting(scope, spend, detail, options) {
 	if (meter === void 0) throw new ValidationError$1("scope: Runtime-owned provider meter is not bound to this scope");
 	return meter(spend, void 0, detail, true, options?.alreadySpent === true);
 }
-//#endregion
-//#region src/runtime/supervise/dispatch.ts
+// src/runtime/supervise/dispatch.ts
 /**
 *
 * `rollingDispatch` — the REFILLING dispatch policy over a `Scope`. It keeps `width` children in
@@ -26950,8 +26881,7 @@ function queueOf(units, budget) {
 		};
 	};
 }
-//#endregion
-//#region src/runtime/supervise/scope-identity.ts
+// src/runtime/supervise/scope-identity.ts
 /** Fail before execution when a reservation policy is malformed. */
 function assertRecursiveReservationPolicy(policy) {
 	if (policy === void 0) return;
@@ -26999,8 +26929,7 @@ function isAgentSpec(value) {
 	const v = value;
 	return "profile" in v && "harness" in v;
 }
-//#endregion
-//#region src/runtime/supervise/scope-observation.ts
+// src/runtime/supervise/scope-observation.ts
 /**
 * The direct workers of `parentId` that a resumed journal holds open, and which of them this
 * process re-places through a retained recovery. One function, so the root's `root-reentered`
@@ -27150,6 +27079,7 @@ function makeTreeView(root, children) {
 		parent: root,
 		label: c.label,
 		status: c.status,
+		...c.failure === void 0 ? {} : { failure: c.failure },
 		runtime: c.runtime,
 		budget: c.budget,
 		...c.ownedTreeRoot === void 0 ? {} : { ownedTreeRoot: c.ownedTreeRoot },
@@ -27230,8 +27160,7 @@ async function readInteractiveReadyUntilWorkerEnds(readReady, workerEnded, signa
 		signal.removeEventListener("abort", onAbort);
 	}
 }
-//#endregion
-//#region src/runtime/supervise/provider-visible-profile.ts
+// src/runtime/supervise/provider-visible-profile.ts
 /** Runtime-owned coordination is mounted under this MCP alias. */
 const coordinationMcpAlias = "agent-runtime-coordination";
 /** A profile declares Runtime-owned tools with this provider-neutral prefix. */
@@ -27264,8 +27193,7 @@ function withoutRuntimeGraph(profile) {
 	const { metadata: _metadata, ...withoutMetadata } = profile;
 	return withoutMetadata;
 }
-//#endregion
-//#region src/runtime/supervise/scope-owner-materialization.ts
+// src/runtime/supervise/scope-owner-materialization.ts
 /**
 * @internal Record the execution a pending executor started for the current attempt. A bridge
 * manager whose turn ends before the bridge acknowledges it then still names its session:
@@ -27592,8 +27520,7 @@ function bindScopeOwnerMaterialization(scope, args, now) {
 		});
 	}
 }
-//#endregion
-//#region src/runtime/supervise/scope-owner-meter.ts
+// src/runtime/supervise/scope-owner-meter.ts
 /** The scope owner's own inference: debited from the shared pool, journaled, and announced. */
 var ScopeOwnerMeter = class {
 	args;
@@ -27648,8 +27575,7 @@ var ScopeOwnerMeter = class {
 		if (observeError !== void 0) throw observeError;
 	}
 };
-//#endregion
-//#region src/runtime/supervise/terminal-record.ts
+// src/runtime/supervise/terminal-record.ts
 /** The settlement fields every writer copies, in the terminal record's key order. The
 *  `reconciled` record is built from this same spread so it and the terminal record can never
 *  disagree on a field. */
@@ -27658,6 +27584,7 @@ function settlementFields(subject, settlement) {
 		spent: subject.spent,
 		...settlement.infra === void 0 ? {} : { infra: settlement.infra },
 		reason: settlement.reason,
+		...settlement.failure === void 0 ? {} : { failure: settlement.failure },
 		...settlement.retainedPendingCause === void 0 ? {} : { retainedPendingCause: settlement.retainedPendingCause },
 		...settlement.outRef ? { outRef: settlement.outRef } : {},
 		...settlement.outRef && settlement.traceRoot ? { traceRoot: settlement.traceRoot } : {},
@@ -27697,6 +27624,7 @@ function terminalDownEvent(subject, settlement, seq, at, retainedExecution) {
 */
 function settledNodeEvidence(subject, settlement, settledAt) {
 	return {
+		...settlement.kind === "down" && settlement.failure !== void 0 ? { failure: detachedSnapshot(settlement.failure, "worker failure") } : {},
 		runtime: subject.runtime,
 		startedAt: subject.startedAt,
 		settledAt,
@@ -27729,8 +27657,7 @@ function releasedChildPayload(subject, settlement, settledAt, releasedAt, retain
 		}, settledAt)
 	};
 }
-//#endregion
-//#region src/runtime/supervise/scope-settlement.ts
+// src/runtime/supervise/scope-settlement.ts
 /** Await whichever pending child settles first, returning the child (its `resolved` is set
 *  by the time this resolves because `runChild`'s `.then` sets it before the promise
 *  resolves downstream). */
@@ -27804,6 +27731,8 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 	const at = new Date(settledAt).toISOString();
 	if (settlement.metered) await appendSettlementMetering(args.journal, args.root, child.id, settlement.metered, at);
 	if (settlement.kind === "down") {
+		settlement.failure ??= settlementFailureCause(settlement);
+		child.failure = settlement.failure;
 		child.status = child.cancellationReason === void 0 ? "failed" : "cancelled";
 		child.outRef = settlement.outRef;
 		child.trace = settlement.trace;
@@ -27861,6 +27790,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 			seq
 		};
 	}
+	child.failure = void 0;
 	child.status = "done";
 	child.outRef = settlement.outRef;
 	child.spent = settlement.spent;
@@ -27928,8 +27858,7 @@ async function finalizeSettlement(child, settlement, seq, args, now) {
 * applied per child). The reservation is reconciled on EVERY path (success, abort, throw)
 * so the conserved pool can never leak a reservation.
 */
-//#endregion
-//#region src/runtime/supervise/scope-settlement-cursor.ts
+// src/runtime/supervise/scope-settlement-cursor.ts
 /**
 * The scope's `next()` cursor: delivers each child's settlement exactly once, stamps the cursor
 * `seq`, and tracks the settlement writes still landing so a drain can wait for them.
@@ -27994,8 +27923,7 @@ var ScopeSettlementCursor = class {
 		}
 	}
 };
-//#endregion
-//#region src/runtime/supervise/scope-child-materialization.ts
+// src/runtime/supervise/scope-child-materialization.ts
 /** Publish the execution receipt only after the child spawn is durable. */
 function createChildMaterialization({ args, spawnCommitted, identity, spec, executor, deferredOwner, attemptId, id, recovery, live, ordinal, now }) {
 	let pendingEvidence;
@@ -28125,8 +28053,7 @@ async function appendNodeMaterialization(args, id, seq, receipt, binding, now) {
 		at
 	});
 }
-//#endregion
-//#region src/runtime/supervise/scope-child-retention.ts
+// src/runtime/supervise/scope-child-retention.ts
 /** Own the retained child invocation and its durable writes. */
 function createChildRetention({ args, controller, id, ordinal, identity, recovery, opts, now, traceRoots, markRecoveryReady, childDeadlineAtMs, readLive, completeEvidence }) {
 	const retainedWrites = /* @__PURE__ */ new Set();
@@ -28278,8 +28205,7 @@ function createChildRetention({ args, controller, id, ordinal, identity, recover
 function overBudget(budget, spent) {
 	return chargedTokens(spent.tokens) > budget.maxTokens || spent.iterations > budget.maxIterations || budget.maxUsd !== void 0 && spent.usdKnown !== false && spent.usd > budget.maxUsd;
 }
-//#endregion
-//#region src/durable/spawn-journal/journal-store.ts
+// src/durable/spawn-journal/journal-store.ts
 /**
 * Append every event as one grouped publication where the journal supports it (`appendEvents`),
 * preserving legacy per-event appends otherwise — the SQL contexts' fenced head advances once.
@@ -28439,8 +28365,7 @@ var FileSpawnJournal = class {
 function journalFileStamp(stat) {
 	return `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeNs}:${stat.ctimeNs}`;
 }
-//#endregion
-//#region src/runtime/retained-interactive-handle.ts
+// src/runtime/retained-interactive-handle.ts
 function createRetainedInteractiveRunHandle(environment, inputRef, capabilities, requestedStart) {
 	const ref = freezeInteractiveRef(inputRef);
 	const source = environment.interactive(ref);
@@ -28510,8 +28435,7 @@ function exactTerminal(ref, request, terminal) {
 function sameInteractiveRef(left, right) {
 	return canonicalCandidateDigest(left) === canonicalCandidateDigest(right);
 }
-//#endregion
-//#region src/runtime/retained-interactive.ts
+// src/runtime/retained-interactive.ts
 /**
 * Start one retry-safe native coding-agent TUI without dispatching a headless turn.
 * The intent admission is durable before provider.create; the environment and
@@ -28648,12 +28572,13 @@ function interactiveRequest(options, environment, profile, requestedProfileDiges
 		...options.cols === void 0 ? {} : { cols: options.cols },
 		...options.rows === void 0 ? {} : { rows: options.rows }
 	};
+	const run = agentInteractiveSessionRunRef({
+		provider: options.provider.name,
+		environmentId: environment.id,
+		...identity
+	}, start);
 	return exactAgentInteractiveSessionStart({
-		run: agentInteractiveSessionRunRef({
-			provider: options.provider.name,
-			environmentId: environment.id,
-			...identity
-		}, start),
+		run,
 		...start
 	});
 }
@@ -28775,8 +28700,7 @@ async function destroyUnusedEnvironment(environment, cause) {
 		throw new AggregateError([cause, cleanupError], "interactive environment was invalid and could not be destroyed");
 	}
 }
-//#endregion
-//#region src/runtime/supervise/worker-interactive.ts
+// src/runtime/supervise/worker-interactive.ts
 const WORKER_BINDING_SCHEMA_VERSION = 1;
 const SPAWN_JOURNAL_FILE = "spawn-journal.jsonl";
 /** Directory containing exact per-worker interactive binding records. @stable */
@@ -28996,8 +28920,7 @@ function isUnsupportedProvider(error) {
 function isUnavailableReason(value) {
 	return value === "unknown-node" || value === "not-live" || value === "executor-exposes-no-interactive-session" || value === "provider-has-no-interactive-contract" || value === "interactive-session-not-started" || value === "interactive-binding-not-found" || value === "interactive-binding-stale" || value === "interactive-provider-not-registered";
 }
-//#endregion
-//#region src/runtime/supervise/interactive-admission.ts
+// src/runtime/supervise/interactive-admission.ts
 /**
 * Durable, credential-free admissions for Runtime-owned interactive workers.
 *
@@ -29013,7 +28936,8 @@ function workerInteractiveAdmissionFile(eventDir, workerId, phase) {
 	const dir = workerInteractiveBindingsDir(eventDir);
 	const id = stableText(workerId, "worker id");
 	assertNoSymlinkDescendant(eventDir, dir, "interactive admission");
-	return join(dir, `${canonicalCandidateDigest({ workerId: id }).slice(7).slice(0, 32)}.${phase}.admission.json`);
+	const stem = canonicalCandidateDigest({ workerId: id }).slice(7).slice(0, 32);
+	return join(dir, `${stem}.${phase}.admission.json`);
 }
 /**
 * Persist one retained-interactive admission without retaining sensitive start material.
@@ -29224,8 +29148,7 @@ function stableText(value, label) {
 	if (!text) throw new Error(`${label} is empty`);
 	return text;
 }
-//#endregion
-//#region src/runtime/supervise/scope-contract.ts
+// src/runtime/supervise/scope-contract.ts
 /**
 * The recursion seam key. A `Scope` seeds a value of this on each child's
 * `ExecutorContext.seams` so a child whose executor is a DRIVER can mount a NESTED `Scope`
@@ -29318,8 +29241,7 @@ function isToolSpanValue(value) {
 		return false;
 	}
 }
-//#endregion
-//#region src/runtime/supervise/scope-child-attempt.ts
+// src/runtime/supervise/scope-child-attempt.ts
 /**
 * One child execution's settle-once state: its output, trace and transcript evidence, its
 * teardown, and the single reconciliation of its reservation. Every settle exit of `runChild`
@@ -29473,8 +29395,7 @@ function assertReportedSpend(spent, context) {
 	const candidate = spent;
 	if (typeof candidate !== "object" || candidate === null || typeof candidate.iterations !== "number" || typeof candidate.tokens !== "object" || candidate.tokens === null) throw new ValidationError$1(`${context}: executor settled without a Spend — report what was spent or mark it unknown; a budget-exempt executor reports zero`);
 }
-//#endregion
-//#region src/runtime/supervise/scope-execution.ts
+// src/runtime/supervise/scope-execution.ts
 async function runChild(live, executor, childAbort, task, opts, pool, ticket, blobs, now, journal, journalRoot, nextProgressSeq, executionReady, executionEvidence, deadlineAtMs, recovering = false, closeRetainedWrites = async () => {}, budgetReady = void 0, slotReady = Promise.resolve(), priorSpent, startedAt) {
 	if (priorSpent !== void 0) live.spent = detachedSnapshot(priorSpent, "prior committed usage");
 	const attempt = new ChildExecutionAttempt(live, executor, childAbort, opts, pool, ticket, blobs, now, deadlineAtMs, startedAt);
@@ -29652,7 +29573,8 @@ function doneRecord(result, spent, trace, harnessTranscript, providerModel, mete
 function failureRecord(failure, trace, metered, providerModel, harnessTranscript, outRef) {
 	return {
 		...downRecord(failure.error, executorFailureInfra(failure), trace, metered, providerModel, void 0, harnessTranscript),
-		outRef
+		outRef,
+		failure: reportedFailureCause(failure)
 	};
 }
 /**
@@ -29788,8 +29710,7 @@ function isAbortError(err) {
 function isInfraError(err) {
 	return err instanceof ValidationError$1;
 }
-//#endregion
-//#region src/durable/spawn-journal/replay.ts
+// src/durable/spawn-journal/replay.ts
 /**
 * Re-feed a journaled spawn tree in strict `seq` order, rehydrating each settled
 * child's `out` from the blob store by `outRef`, and return the `Settled[]` exactly
@@ -29836,68 +29757,50 @@ async function replaySpawnTree(journal, blobs, root) {
 	const settled = [];
 	for (const ev of ordered) {
 		if (outsideCursorNamespace(ev)) continue;
-		if (ev.kind === "cancelled") {
-			settled.push({
-				kind: "down",
-				handle: handleFor(ev.id, "cancelled"),
-				reason: ev.reason,
-				...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
-				...ev.infra === void 0 ? {} : { infra: ev.infra },
-				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
-				...budgetViolationOf(ev),
-				trace: ev.trace ?? {
-					status: "unavailable",
-					reason: "execution-did-not-start"
-				},
-				...ev.harnessTranscript === void 0 ? {} : { harnessTranscript: ev.harnessTranscript },
-				...ev.retainedExecution === void 0 ? {} : { retainedExecution: ev.retainedExecution },
-				...ev.retainedPendingCause === void 0 ? {} : { retainedPendingCause: ev.retainedPendingCause },
-				...ev.subtree === void 0 ? {} : { subtree: ev.subtree },
-				...settlementTime(ev.at),
-				seq: ev.seq
-			});
-			continue;
-		}
-		if (ev.status === "down") {
-			const trace = traceEvidenceFor(ev);
-			if (trace.status === "available") await workerTraceAnalysisStore(trace, blobs);
+		const trace = ev.kind === "cancelled" ? ev.trace ?? {
+			status: "unavailable",
+			reason: "execution-did-not-start"
+		} : traceEvidenceFor(ev);
+		if (ev.kind === "settled" && trace.status === "available") await workerTraceAnalysisStore(trace, blobs);
+		const evidence = {
+			...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
+			...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
+			...budgetViolationOf(ev),
+			trace,
+			...ev.harnessTranscript === void 0 ? {} : { harnessTranscript: ev.harnessTranscript },
+			...ev.subtree === void 0 ? {} : { subtree: ev.subtree },
+			...settlementTime(ev.at),
+			seq: ev.seq
+		};
+		if (ev.kind === "cancelled" || ev.status === "down") {
+			const reason = ev.reason ?? (ev.kind === "settled" ? ev.verdict?.notes : void 0) ?? "child down";
 			settled.push({
+				...evidence,
 				kind: "down",
-				handle: handleFor(ev.id, "failed"),
-				reason: ev.reason ?? ev.verdict?.notes ?? "child down",
-				...ev.outRef === void 0 ? {} : { outRef: ev.outRef },
+				handle: handleFor(ev.id, ev.kind === "cancelled" ? "cancelled" : "failed"),
+				reason,
+				failure: ev.failure ?? settlementFailureCause({
+					reason,
+					infra: ev.infra,
+					retainedPendingCause: ev.retainedPendingCause
+				}),
 				...ev.infra === void 0 ? {} : { infra: ev.infra },
-				...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
-				...budgetViolationOf(ev),
-				trace,
-				...ev.harnessTranscript === void 0 ? {} : { harnessTranscript: ev.harnessTranscript },
 				...ev.retainedExecution === void 0 ? {} : { retainedExecution: ev.retainedExecution },
-				...ev.retainedPendingCause === void 0 ? {} : { retainedPendingCause: ev.retainedPendingCause },
-				...ev.subtree === void 0 ? {} : { subtree: ev.subtree },
-				...settlementTime(ev.at),
-				seq: ev.seq
+				...ev.retainedPendingCause === void 0 ? {} : { retainedPendingCause: ev.retainedPendingCause }
 			});
 			continue;
 		}
 		if (ev.outRef === void 0) throw new Error(`replaySpawnTree: settled-done event for '${ev.id}' (seq ${ev.seq}) has no outRef; cannot rehydrate the result the driver branched on`);
 		const out = await blobs.get(ev.outRef);
 		if (out === void 0) throw new Error(`replaySpawnTree: blob store has no artifact for outRef '${ev.outRef}' (node '${ev.id}', seq ${ev.seq})`);
-		const trace = traceEvidenceFor(ev);
-		if (trace.status === "available") await workerTraceAnalysisStore(trace, blobs);
 		settled.push({
+			...evidence,
 			kind: "done",
 			handle: handleFor(ev.id, "done"),
 			out,
 			outRef: ev.outRef,
 			verdict: ev.verdict,
-			spent: cloneSpend(ev.spent),
-			...ev.providerModel === void 0 ? {} : { providerModel: copyProviderModelEvidence(ev.providerModel) },
-			...budgetViolationOf(ev),
-			trace,
-			...ev.harnessTranscript === void 0 ? {} : { harnessTranscript: ev.harnessTranscript },
-			...ev.subtree === void 0 ? {} : { subtree: ev.subtree },
-			...settlementTime(ev.at),
-			seq: ev.seq
+			spent: cloneSpend(ev.spent)
 		});
 	}
 	return settled;
@@ -29926,8 +29829,7 @@ function copyFrozenIdentity(identity) {
 		...correlation === void 0 ? {} : { correlation }
 	});
 }
-//#endregion
-//#region src/runtime/supervise/recover-executors.ts
+// src/runtime/supervise/recover-executors.ts
 /** The environment id the node's latest durable admission names — the executor's own rule
 *  (`admittedEnvironmentId` in environment-provider.ts), read off the journal. */
 function journaledEnvironmentId(owned) {
@@ -29990,6 +29892,7 @@ async function healReleasedSlots(opts, signal, now) {
 			const settlement = {
 				kind: "down",
 				reason: floor.reason,
+				...floor.failure === void 0 ? {} : { failure: floor.failure },
 				...floor.infra === void 0 ? {} : { infra: floor.infra },
 				trace: floor.trace,
 				...floor.outRef ? { outRef: floor.outRef } : {},
@@ -30113,6 +30016,7 @@ async function prepareInterruptedExecutors(opts, events, signal, now, parentId =
 			...result.traceRoot === void 0 ? {} : { traceRoot: result.traceRoot },
 			...reason === void 0 ? {} : { reason },
 			...infra === void 0 ? {} : { infra },
+			...fault === void 0 && failure !== void 0 ? { failure: reportedFailureCause(failure) } : {},
 			spent: result.spent,
 			...budgetViolation === void 0 ? {} : { budgetViolation },
 			...result.verdict ? { verdict: result.verdict } : {},
@@ -30321,8 +30225,7 @@ async function prepareScopeResume(opts, events, signal, now, parentId = opts.run
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/scope-nesting.ts
+// src/runtime/supervise/scope-nesting.ts
 function makeNestedScopeSeam(args, workerSlots, childSlot, childNodeId, childBudget, childDeadlineAtMs, deferredOwner) {
 	const now = args.now ?? Date.now;
 	const mountScope = (nestedRoot, signal, restored) => {
@@ -30378,8 +30281,7 @@ function makeNestedScopeSeam(args, workerSlots, childSlot, childNodeId, childBud
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/worker-events.ts
+// src/runtime/supervise/worker-events.ts
 const MAX_EVENTS = 256;
 const MAX_BYTES = 262144;
 /** One worker's already-redacted live output. Accounting stays on Scope's existing usage channel. */
@@ -30449,8 +30351,7 @@ var WorkerEvents = class {
 		};
 	}
 };
-//#endregion
-//#region src/runtime/supervise/scope-child-start.ts
+// src/runtime/supervise/scope-child-start.ts
 /**
 * The records one admitted child starts with: its executor context, its handle, its live-child
 * row, its spawn journal record and hook, and the settlement chain that closes it. `scope-spawn`
@@ -30698,15 +30599,16 @@ async function resolveChildSettlement(live, ran, interactiveBindingCommitted, ho
 		};
 	}
 	live.resolved = resolution;
-	if (live.held !== void 0) if (resolution.kind === "done") {
-		const timer = setTimeout(() => void releaseHeld(live, "hold-ceiling"), holdMs);
-		timer.unref?.();
-		live.held.clearCeiling = () => clearTimeout(timer);
-	} else await releaseHeld(live, "scope-join");
+	if (live.held !== void 0) {
+		if (resolution.kind === "done") {
+			const timer = setTimeout(() => void releaseHeld(live, "hold-ceiling"), holdMs);
+			timer.unref?.();
+			live.held.clearCeiling = () => clearTimeout(timer);
+		} else await releaseHeld(live, "scope-join");
+	}
 	return resolution;
 }
-//#endregion
-//#region src/runtime/supervise/scope-key-registry.ts
+// src/runtime/supervise/scope-key-registry.ts
 /**
 * The semantic-key registry (`SpawnOpts.key`): every keyed assignment's current state, seeded
 * from the prior journal on resume and updated live as keyed children spawn and settle. This is
@@ -30778,8 +30680,7 @@ function resumedKeyState(prior, identity) {
 		identity
 	};
 }
-//#endregion
-//#region src/runtime/supervise/scope-spawn.ts
+// src/runtime/supervise/scope-spawn.ts
 /** Own child admission, keyed identity and executor startup. */
 function createScopeSpawner(deps) {
 	const spawner = new ScopeSpawner(deps);
@@ -31138,8 +31039,7 @@ function prepareOnce(request) {
 	};
 	return request.prepared;
 }
-//#endregion
-//#region src/runtime/supervise/scope-teardown.ts
+// src/runtime/supervise/scope-teardown.ts
 /** Release settled child environments and close their retained journal slots. */
 function createHeldChildRelease(args, now) {
 	const heldReleases = /* @__PURE__ */ new Set();
@@ -31283,8 +31183,7 @@ function bindChildTeardown(scope, args, children, now) {
 		for (const child of open) await closeRetainedSlot(child, "release-unconfirmed", prior);
 	});
 }
-//#endregion
-//#region src/runtime/supervise/scope-workers.ts
+// src/runtime/supervise/scope-workers.ts
 /**
 * A scope's live children as its driver addresses them: steer, read progress, cancel, read the
 * trace and interactive session, and observe the tree and event streams, nested scopes included.
@@ -31421,8 +31320,7 @@ var ScopeWorkers = class {
 		};
 	};
 };
-//#endregion
-//#region src/runtime/supervise/scope-construction.ts
+// src/runtime/supervise/scope-construction.ts
 /** Create the reactive `Scope` a driver's `Agent.act` runs inside: spawn children on an atomically reserved conserved budget, settle via the `next()` cursor, journal for replay. */
 function createScope(args) {
 	checkInIdleMs(args.deadlineCheckIn);
@@ -31607,8 +31505,7 @@ async function recoverRetainedChildren(args, children, spawn, next) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/runtime/supervise/driver-executor.ts
+// src/runtime/supervise/driver-executor.ts
 /**
 * Mark + carry a driver `Agent` so the recursive registry resolves it to the
 * driver-executor. The returned agent is SPAWNED (never run directly): its
@@ -31988,8 +31885,7 @@ function unreportedSpend(total, prior) {
 		...total.boxMinutes === void 0 ? {} : { boxMinutes: Math.max(0, total.boxMinutes - (prior.boxMinutes ?? 0)) }
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-root-handle.ts
+// src/runtime/supervise/supervisor-root-handle.ts
 /** Module-private channel from a minted `RootHandle` to its `RootControl`, so `attach`
 *  can prove a handle is ours and reach its binding without leaking the control onto the
 *  frozen `RootHandle` shape. */
@@ -32051,8 +31947,7 @@ function pushRootSignal(cascadeAbort) {
 		cascadeAbort(new RunCancellationReason("root-signal", msg.reason ?? "root signal: cancel"));
 	};
 }
-//#endregion
-//#region src/runtime/supervise/finalizer.ts
+// src/runtime/supervise/finalizer.ts
 /**
 * `SupervisorFinalizer` — the pluggable last step of a driver run: how the settled-worker ledger
 * becomes the run's output. `bestDelivered` (the default) returns the single highest-scoring
@@ -32153,8 +32048,7 @@ async function runFinalizer(finalizer, args) {
 	});
 	return await accepted(candidate) ? candidate : void 0;
 }
-//#endregion
-//#region src/runtime/supervise/run-parking.ts
+// src/runtime/supervise/run-parking.ts
 /** Read the journal's bounded parking projection. Undefined means no current parking handoff. */
 async function readRunParking(runDir) {
 	let raw;
@@ -32303,8 +32197,7 @@ function parkingRecordOf(record) {
 		wakeAt: record.wakeAt
 	};
 }
-//#endregion
-//#region src/durable/spawn-journal/provider-model-evidence.ts
+// src/durable/spawn-journal/provider-model-evidence.ts
 /**
 * Aggregate provider-served model evidence across one recursively owned journal forest.
 *
@@ -32471,8 +32364,7 @@ function servedIdentityParts(model) {
 		snapshot
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-accounting.ts
+// src/runtime/supervise/supervisor-accounting.ts
 /**
 * The run's terminal accounting, read off the one journal ledger — the honest per-channel
 * sums (input/output/usd/iterations all preserved), the named usage gaps, and the wall-clock
@@ -32611,8 +32503,7 @@ function unknownChannels(spend) {
 function isNonEmptySpend(s) {
 	return s.iterations > 0 || s.tokens.input > 0 || s.tokens.output > 0 || s.usd > 0 || s.ms > 0 || s.tokensKnown === false || s.usdKnown === false || Object.values(s.resources ?? {}).some((resource) => resource.amount > 0 || !resource.known);
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-child-join.ts
+// src/runtime/supervise/supervisor-child-join.ts
 /**
 * Drain the root scope's live set so every still-running/acquiring child is torn down
 * before `run` returns — the join barrier. Abort the cascade controller first (so each
@@ -32734,8 +32625,7 @@ function boundedSettleGrace(graceMs, deadlineAtMs, now) {
 async function drainCursor(scope) {
 	for (;;) if (await scope.next() === null) return;
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-intensity-breaker.ts
+// src/runtime/supervise/supervisor-intensity-breaker.ts
 function createIntensityBreaker(opts, trip) {
 	const max = opts.maxRestarts;
 	const within = opts.withinMs;
@@ -32791,8 +32681,7 @@ function wrapJournalForBreaker(journal, breaker) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-result.ts
+// src/runtime/supervise/supervisor-result.ts
 /**
 * Normalize an arbitrary rejection into the serializable triple the result carries. A driver may
 * reject with anything (a string, a plain object, a null-prototype value), and the whole point of
@@ -32842,8 +32731,7 @@ function deadlinePassed(pool, opts) {
 	const deadlineMs = pool.readout().deadlineMs;
 	return deadlineMs > 0 && (opts.now ?? Date.now)() >= deadlineMs;
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-root-contract.ts
+// src/runtime/supervise/supervisor-root-contract.ts
 /** A resumed process may continue only the exact root contract first recorded for this run id. Its
 *  budget is the root's, or the one the run's last budget-carrying `reopened` row recorded. */
 function assertResumeContract(events, opts) {
@@ -32933,7 +32821,7 @@ async function recordRootSegment(opts, events, at, fresh) {
 }
 /**
 * Append one `root-reentered` record: this process is supervising a run an earlier process drove.
-* Measured 2026-10-19 on magnetar-rust-20261019f: after a host reboot the re-entered root ran two
+* After a host reboot the re-entered root ran two
 * barren continuations and the run settled `no-result-selected`, with three workers still open in
 * the journal and no record that a restart had happened.
 */
@@ -33000,8 +32888,7 @@ function rootStartedAtMs(root) {
 	if (!Number.isFinite(startedAt)) throw new RuntimeRunStateError(`supervisor: root event for '${root.id}' has an invalid timestamp '${root.at}'`);
 	return startedAt;
 }
-//#endregion
-//#region src/runtime/supervise/run-persistence.ts
+// src/runtime/supervise/run-persistence.ts
 /** One failed store operation revokes this controller's writes, never its retained executions. */
 function guardRunPersistence(journal, blobs, interrupt) {
 	let failure;
@@ -33045,8 +32932,7 @@ function guardRunPersistence(journal, blobs, interrupt) {
 		}
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-run-intake.ts
+// src/runtime/supervise/supervisor-run-intake.ts
 /** Read every caller-owned field once, then detach and freeze all decision data before the first
 *  await; stateful collaborators stay live by reference, but later opts mutation cannot redirect the run. */
 function admitSupervisorRun(task, opts) {
@@ -33104,8 +32990,7 @@ function admitSupervisorRun(task, opts) {
 		budgetStopHoldMs
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-run-join.ts
+// src/runtime/supervise/supervisor-run-join.ts
 /**
 * Join barrier: tear down every still-live child. Generalizes the kernel's
 * `finally{ Promise.allSettled(destroy) }` — a teardown throw is allSettled'd and journaled.
@@ -33132,7 +33017,7 @@ async function joinRunChildren(join, settleGraceMs) {
 }
 /**
 * A first teardown that failed or answered late is not the provider's last word, and a run that
-* settles over it leaves the sandbox running: measured 2026-09-20, cancelling 20 Discovery lanes
+* settles over it leaves the sandbox running: cancelling 20 Discovery lanes
 * left 2 workers running. Ask again until confirmed or out of time.
 */
 async function confirmRetriableTeardowns(join, releasing) {
@@ -33187,8 +33072,7 @@ function unrecoveredRetainedChildren(scope, resumeFrom) {
 	}
 	return unrecovered;
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-run-tree.ts
+// src/runtime/supervise/supervisor-run-tree.ts
 async function openRunTree(opts, now) {
 	const rootAttemptId = newExecutionAttemptId(opts.runId);
 	const runStartedAtMs = now();
@@ -33273,8 +33157,7 @@ async function beginRunTree(opts, existing, prior, runStartedAtMs, runStartedAt,
 		runEpochMs: runStartedAtMs
 	};
 }
-//#endregion
-//#region src/runtime/supervise/supervisor-run.ts
+// src/runtime/supervise/supervisor-run.ts
 /** The default recursion-depth ceiling. The conserved pool bounds depth (every level draws its
 *  slice from the one above); this only stops a runaway recursion of tiny slices. */
 const DEFAULT_MAX_DEPTH = 16;
@@ -33357,8 +33240,10 @@ function rootCascade(controller, opts) {
 		const reason = opts.signal ? abortReason(opts.signal, "caller signal aborted") : "caller signal aborted";
 		cascadeAbort(reason instanceof RunCancellationReason ? reason : new RunCancellationReason("signal", typeof reason === "string" ? reason : "caller signal aborted"));
 	};
-	if (opts.signal) if (opts.signal.aborted) onCallerAbort();
-	else opts.signal.addEventListener("abort", onCallerAbort, { once: true });
+	if (opts.signal) {
+		if (opts.signal.aborted) onCallerAbort();
+		else opts.signal.addEventListener("abort", onCallerAbort, { once: true });
+	}
 	return {
 		aborted: () => cascadeAborted,
 		abort: cascadeAbort,
@@ -33585,7 +33470,6 @@ async function noWinner(settled, rejection) {
 		reason: "no-result-selected"
 	};
 }
-//#endregion
-export { resolveSpawnResourcePaths as $, mapSandboxToolEvent as $i, HarnessTurnFailedError as $n, sandboxProfileMaterialization as $r, providerAsSandboxClient as $t, beginScopeOwnerAttempt as A, cappedDoublingMs as Ai, toOtelAttributes as An, readCodexRolloutSession as Ar, createExecutor as At, assertRecursiveReservationPolicy as B, executorFailure as Bi, PEER_MAIL_WIRE_KEY as Bn, LOCAL_HARNESSES as Br, TERMINAL_DECISIONS as Bt, interactiveAdmissionSeamKey as C, projectSandboxOutcome as Ci, createOpenInferenceFileExporter as Cn, bridgeAdmissionRefusal as Cr, readCommittedJsonLines as Ct, recoverRetainedInteractiveRun as D, RetainedExecutionPendingError as Di, loopEventToOtelSpan as Dn, addHarnessUsage as Dr, createExecutorRegistry as Dt, reconnectRetainedInteractiveRun as E, settlementFailureCause as Ei, generateSpanId as En, ROUTER_PRICE_SOURCE as Er, insideCursorNamespace as Et, coordinationMcpAlias as F, TRACE_ROOT_SCHEMA as Fi, INBOX_RECEIPT_KEY as Fn, signalAbortError as Fr, assertBoxlessPromptOptions as Ft, meterRuntimeOwnedAccounting as G, spendFromUsageEvents as Gi, peerMailVerbNames as Gn, controlProfileMaterialization as Gr, runCodeMode as Gt, freeSlots as H, createBudgetPool as Hi, createPeerMailbox as Hn, terminateProcessTreeAndConfirm as Hr, codeModeArguments as Ht, coordinationProfileToolPrefix as I, TRACE_SUMMARY_SCHEMA as Ii, createInbox as In, bridgeRuntimeAttachmentsKey as Ir, readPromptOptions as It, recordScopeOwnerDriverAttempt as J, defaultRedactor as Ji, createActivityLog as Jn, profileMaterializationAxes$1 as Jr, routerBrain as Jt, meterRuntimeOwnedProviderAttempt as K, spendFromUsageTotals as Ki, taskToPrompt$1 as Kn, defineProfileMaterializationContract as Kr, toolResultText as Kt, providerVisibleProfile as L, detachedFrozen as Li, failPendingAfter as Ln, bridgeStopSignalKey as Lr, createSandboxForSpec as Lt, recordScopeOwnerMaterialization as M, unavailablePauseMs as Mi, createRuntimeStreamEventCollector as Mn, RunCancellationReason as Mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Mt, restoreScopeOwnerAcceptedExecution as N, unavailableResumeAt as Ni, sanitizeKnowledgeReadinessReport as Nn, linkAbort as Nr, createSteerableSandboxSession as Nt, startRetainedInteractiveRun as O, registerRetainedExecutorPreparation as Oi, padSpanId as On, createCodexRolloutStoreReader as Or, bindReusableExecutorExecutionId as Ot, scopeOwnerExecutorNodeContext as P, unavailableSignalOfFailure as Pi, sanitizeRuntimeStreamEvent as Pn, runAbortable as Pr, runAgentRounds as Pt, environmentReader as Q, mapSandboxEvent as Qi, DriverAttemptsExhaustedError as Qn, sandboxActProfileMaterialization as Qr, LEAF_CONTINUATION_TASK as Qt, runtimeGraphMetadataKey as R, detachedSnapshot as Ri, AUTHORITY_MARKERS as Rn, runSettledCommand as Rr, createSandboxLineage as Rt, workerTraceAnalysisStore as S, executableAgentSpecSnapshot as Si, buildRuntimeEventOtelSpans as Sn, isFiniteNumber as Sr, readCommittedJsonFile as St, readWorkerInteractiveBinding as T, runtimeFailureCause as Ti, flatOtelSpan as Tn, priceTokens as Tr, withJsonlFileLock as Tt, queueOf as U, meterUsageEvent as Ui, isPeerMailEnvelope as Un, assertProfileMaterialization as Ur, codeModeModelOutput as Ut, deriveNodeExecutionIdentity as V, errMessage as Vi, claimsAuthority as Vn, harnessInvocation as Vr, defaultSelectWinner as Vt, rollingDispatch as W, newUsageTotals as Wi, peerMailTools as Wn, assertProfileMaterializes as Wr, createCodeModeTools as Wt, prepareScopeRetainedOwnerSeatSwitch as X, resolveRedactor as Xi, isLiveNodeStatus as Xn, promptModelProfileMaterialization as Xr, resolveAgentEnvironmentProvider as Xt, recordScopeOwnerPause as Y, defaultRedactorIdentityMaterial as Yi, readWorkerProgress as Yn, promptControlProfileMaterialization as Yr, createAgentEnvironmentProviderRegistry as Yt, scopeRetainedOwnerResourceReader as Z, createSandboxToolPartState as Zi, isTerminalNodeStatus as Zn, renderUnsupported as Zr, providerAsExecutor as Zt, withDriverExecutor as _, runtimeOwnedPendingExecutorMaterialization as _i, WORKER_TRACE_PROPAGATION as _n, admitContinuationPolicy as _r, InMemorySpawnJournal as _t, assertRunParking as a, notifySandboxEventObserver as aa, authoredProfileDigest as ai, destroyInteractiveEnvironment as an, upstreamUnavailableSignal as ar, beginScopeRetainedOwnerDrive as at, isTraceAnalysisStore as b, unknownMaterializationReceipt as bi, buildLoopOtelSpans as bn, createContinuationKeeper as br, isNoEntError as bt, sleepScopeWait as c, awaitAbortable$1 as ca, knownExecutionBindingReceipt as ci, harnessTranscriptArtifact as cn, authoredSeatStages as cr, scopeRetainedOwnerRestorePoint as ct, runFinalizer as d, providerMessageText as da, providerAttemptEvidence as di, resolveHarnessTranscriptCapture as dn, CheckUnavailableError as dr, bindScopeRetainedOwnerProvider as dt, terminalTextFromSandboxEvent as ea, unsupportedProfileDimensions as ei, reconnectRetainedRun as en, abandonablePending as er, abandonScopeRetainedOwnerInvocation as et, runTree as f, recordRuntimeOwnedDriveHarnessProviderEvidence as fi, retainHarnessTranscript as fn, gateFactoryOnDeliverable as fr, scopeRetainedOwnerContext as ft, isDriverSpec as g, runtimeOwnedExecutorProviderEvidence as gi, createInPlaceCliExecutor as gn, CONTINUATIONS_DIR as gr, InMemoryResultBlobStore as gt, driverExecutorFactory as h, runtimeOwnedExecutorMaterialization as hi, createWorktreeCliExecutor as hn, verdictFromJudgeScore as hr, materializeTreeView as ht, RunParkedError as i, extractLlmCallEvent as ia, authoredAgentIdentity as ii, retainedCreateMaterial as in, undispatchedCredentialExit as ir, scopeRetainedOwnerResult as it, noteScopeOwnerPlannedExecution as j, jitteredMs as ji, createRuntimeEventCollector as jn, createPushTraceSource as jr, snapshotExecutorConfig as jt, FileSpawnJournal as k, retainedExecutorSeamKey as ki, padTraceId as kn, harnessUsageIsEmpty as kr, captureReusableExecutorConfig as kt, withRunParking as l, promptFromAgentTurnInput as la, knownMaterializationReceipt as li, persistHarnessTranscript as ln, seatExecutionProfile as lr, noteScopeRetainedOwnerCoordination as lt, driverChild as m, runtimeOwnedExecutorExecutionBinding as mi, openSlotGroup as mn, mapExecutorResult as mr, loadSpawnForest as mt, createSupervisor as n, createSandboxTurnEventCollector as na, attestRuntimeOwnedPendingExecutor as ni, startRetainedRun as nn, classifyDriverFailure as nr, prepareScopeRetainedOwnerTask as nt, bindScopeParkingDrain as o, sumSandboxUsage as oa, finalizeRuntimeOwnedPendingExecutor as oi, environmentGone as on, SeatChain as or, scopeRetainedOwnerTurnEnded as ot, createRootHandle as p, runtimeOwnedDriveHarnessProviderEvidence as pi, createWorkerSlots as pn, gateOnDeliverable as pr, scopeRetainedOwnerJournalRoot as pt, recordScopeOwnerBarrenPause as q, assertValidBudget as qi, DEFAULT_STALL_AFTER_MS as qn, fullProfileMaterialization as qr, createRouterTranscript as qt, assertResumeLimits as r, createSandboxUsageLedger as ra, attestRuntimeOwnedScopeOwner as ri, startRetainedRunInEnvironment as rn, summarizeDriverAttempts as rr, scopeRetainedOwnerPriorSpend as rt, readRunParking as s, decodeHarnessUsage as sa, inheritRuntimeOwnedExecutorAttestation as si, captureHarnessTranscript as sn, SeatChainExhaustedError as sr, reconcileScopeRetainedOwnerEnvironment as st, DEFAULT_MAX_DEPTH as t, canonicalStreamEventFromSandboxEvent as ta, worktreeCliProfileMaterialization as ti, recoverRetainedRun as tn, causedByPartialFailure as tr, consumeScopeRetainedOwnerResult as tt, bestDelivered as u, promptOptionsFromAgentTurnInput as ua, newExecutionAttemptId as ui, readHarnessTranscript as un, subscriptionUsageLimitSignal as ur, bindScopeRetainedOwnerEnvironmentId as ut, createScope as v, runtimeOwnedScopeOwnerRuntime as vi, createPropagatingTraceEmitter as vn, bestComposite as vr, FileResultBlobStore as vt, attachWorker as w, readSandboxOutcome as wi, createOtelExporter as wn, bridgeModelRouteRefusal as wr, upsertCommittedJsonLine as wt, parseWorkerToolTraceArtifact as x, executableAgentProfileSnapshot as xi, buildLoopSpanNodes as xn, failedItems as xr, prepareJsonlAppend as xt, replaySpawnTree as y, unknownExecutionBindingReceipt as yi, readTraceContextFromEnv as yn, checkVerdictOf as yr, appendCommittedJsonLine as yt, settledToIteration as z, contentAddress as zi, DEFAULT_PEER_MAIL_LIMITS as zn, runWorktreeHarness as zr, acquireSandbox as zt };
+export { resolveSpawnResourcePaths as $, createSandboxToolPartState as $i, HarnessTurnFailedError as $n, sandboxActProfileMaterialization as $r, providerAsSandboxClient as $t, beginScopeOwnerAttempt as A, registerRetainedExecutorPreparation as Ai, toOtelAttributes as An, readCodexRolloutSession as Ar, createExecutor as At, assertRecursiveReservationPolicy as B, detachedSnapshot as Bi, PEER_MAIL_WIRE_KEY as Bn, runWorktreeHarness as Br, TERMINAL_DECISIONS as Bt, interactiveAdmissionSeamKey as C, executableAgentSpecSnapshot as Ci, createOpenInferenceFileExporter as Cn, bridgeAdmissionRefusal as Cr, readCommittedJsonLines as Ct, recoverRetainedInteractiveRun as D, runtimeFailureCauseSchema as Di, loopEventToOtelSpan as Dn, addHarnessUsage as Dr, createExecutorRegistry as Dt, reconnectRetainedInteractiveRun as E, runtimeFailureCause as Ei, generateSpanId as En, ROUTER_PRICE_SOURCE as Er, insideCursorNamespace as Et, coordinationMcpAlias as F, unavailableResumeAt as Fi, INBOX_RECEIPT_KEY as Fn, signalAbortError as Fr, assertBoxlessPromptOptions as Ft, meterRuntimeOwnedAccounting as G, meterUsageEvent as Gi, peerMailVerbNames as Gn, assertProfileMaterializes as Gr, runCodeMode as Gt, freeSlots as H, executorFailure as Hi, createPeerMailbox as Hn, harnessInvocation as Hr, codeModeArguments as Ht, coordinationProfileToolPrefix as I, unavailableSignalOfFailure as Ii, createInbox as In, bridgeRuntimeAttachmentsKey as Ir, readPromptOptions as It, recordScopeOwnerDriverAttempt as J, spendFromUsageTotals as Ji, createActivityLog as Jn, fullProfileMaterialization as Jr, routerBrain as Jt, meterRuntimeOwnedProviderAttempt as K, newUsageTotals as Ki, taskToPrompt$1 as Kn, controlProfileMaterialization as Kr, toolResultText as Kt, providerVisibleProfile as L, TRACE_ROOT_SCHEMA as Li, failPendingAfter as Ln, bridgeStopSignalKey as Lr, createSandboxForSpec as Lt, recordScopeOwnerMaterialization as M, cappedDoublingMs as Mi, createRuntimeStreamEventCollector as Mn, RunCancellationReason as Mr, DEFAULT_SANDBOX_STEERING_MAX_TURNS as Mt, restoreScopeOwnerAcceptedExecution as N, jitteredMs as Ni, sanitizeKnowledgeReadinessReport as Nn, linkAbort as Nr, createSteerableSandboxSession as Nt, startRetainedInteractiveRun as O, settlementFailureCause as Oi, padSpanId as On, createCodexRolloutStoreReader as Or, bindReusableExecutorExecutionId as Ot, scopeOwnerExecutorNodeContext as P, unavailablePauseMs as Pi, sanitizeRuntimeStreamEvent as Pn, runAbortable as Pr, runAgentRounds as Pt, environmentReader as Q, resolveRedactor as Qi, DriverAttemptsExhaustedError as Qn, renderUnsupported as Qr, LEAF_CONTINUATION_TASK as Qt, runtimeGraphMetadataKey as R, TRACE_SUMMARY_SCHEMA as Ri, AUTHORITY_MARKERS as Rn, defaultRunCommand as Rr, createSandboxLineage as Rt, workerTraceAnalysisStore as S, executableAgentProfileSnapshot as Si, buildRuntimeEventOtelSpans as Sn, isFiniteNumber as Sr, readCommittedJsonFile as St, readWorkerInteractiveBinding as T, readSandboxOutcome as Ti, flatOtelSpan as Tn, priceTokens as Tr, withJsonlFileLock as Tt, queueOf as U, errMessage as Ui, isPeerMailEnvelope as Un, terminateProcessTreeAndConfirm as Ur, codeModeModelOutput as Ut, deriveNodeExecutionIdentity as V, contentAddress as Vi, claimsAuthority as Vn, LOCAL_HARNESSES as Vr, defaultSelectWinner as Vt, rollingDispatch as W, createBudgetPool as Wi, peerMailTools as Wn, assertProfileMaterialization as Wr, createCodeModeTools as Wt, prepareScopeRetainedOwnerSeatSwitch as X, defaultRedactor as Xi, isLiveNodeStatus as Xn, promptControlProfileMaterialization as Xr, resolveAgentEnvironmentProvider as Xt, recordScopeOwnerPause as Y, assertValidBudget as Yi, readWorkerProgress as Yn, profileMaterializationAxes$1 as Yr, createAgentEnvironmentProviderRegistry as Yt, scopeRetainedOwnerResourceReader as Z, defaultRedactorIdentityMaterial as Zi, isTerminalNodeStatus as Zn, promptModelProfileMaterialization as Zr, providerAsExecutor as Zt, withDriverExecutor as _, runtimeOwnedExecutorProviderEvidence as _i, WORKER_TRACE_PROPAGATION as _n, admitContinuationPolicy as _r, InMemorySpawnJournal as _t, assertRunParking as a, createSandboxUsageLedger as aa, authoredAgentIdentity as ai, destroyInteractiveEnvironment as an, upstreamUnavailableSignal as ar, beginScopeRetainedOwnerDrive as at, isTraceAnalysisStore as b, unknownExecutionBindingReceipt as bi, buildLoopOtelSpans as bn, createContinuationKeeper as br, isNoEntError as bt, sleepScopeWait as c, sumSandboxUsage as ca, inheritRuntimeOwnedExecutorAttestation as ci, harnessTranscriptArtifact as cn, authoredSeatStages as cr, scopeRetainedOwnerRestorePoint as ct, runFinalizer as d, promptFromAgentTurnInput as da, newExecutionAttemptId as di, resolveHarnessTranscriptCapture as dn, CheckUnavailableError as dr, bindScopeRetainedOwnerProvider as dt, mapSandboxEvent as ea, sandboxProfileMaterialization as ei, reconnectRetainedRun as en, abandonablePending as er, abandonScopeRetainedOwnerInvocation as et, runTree as f, promptOptionsFromAgentTurnInput as fa, providerAttemptEvidence as fi, retainHarnessTranscript as fn, gateFactoryOnDeliverable as fr, scopeRetainedOwnerContext as ft, isDriverSpec as g, runtimeOwnedExecutorMaterialization as gi, createInPlaceCliExecutor as gn, CONTINUATIONS_DIR as gr, InMemoryResultBlobStore as gt, driverExecutorFactory as h, runtimeOwnedExecutorExecutionBinding as hi, createWorktreeCliExecutor as hn, verdictFromJudgeScore as hr, materializeTreeView as ht, RunParkedError as i, createSandboxTurnEventCollector as ia, attestRuntimeOwnedScopeOwner as ii, retainedCreateMaterial as in, undispatchedCredentialExit as ir, scopeRetainedOwnerResult as it, noteScopeOwnerPlannedExecution as j, retainedExecutorSeamKey as ji, createRuntimeEventCollector as jn, createPushTraceSource as jr, snapshotExecutorConfig as jt, FileSpawnJournal as k, RetainedExecutionPendingError as ki, padTraceId as kn, harnessUsageIsEmpty as kr, captureReusableExecutorConfig as kt, withRunParking as l, decodeHarnessUsage as la, knownExecutionBindingReceipt as li, persistHarnessTranscript as ln, seatExecutionProfile as lr, noteScopeRetainedOwnerCoordination as lt, driverChild as m, runtimeOwnedDriveHarnessProviderEvidence as mi, openSlotGroup as mn, mapExecutorResult as mr, loadSpawnForest as mt, createSupervisor as n, terminalTextFromSandboxEvent as na, worktreeCliProfileMaterialization as ni, startRetainedRun as nn, classifyDriverFailure as nr, prepareScopeRetainedOwnerTask as nt, bindScopeParkingDrain as o, extractLlmCallEvent as oa, authoredProfileDigest as oi, environmentGone as on, SeatChain as or, scopeRetainedOwnerTurnEnded as ot, createRootHandle as p, providerMessageText as pa, recordRuntimeOwnedDriveHarnessProviderEvidence as pi, createWorkerSlots as pn, gateOnDeliverable as pr, scopeRetainedOwnerJournalRoot as pt, recordScopeOwnerBarrenPause as q, spendFromUsageEvents as qi, DEFAULT_STALL_AFTER_MS as qn, defineProfileMaterializationContract as qr, createRouterTranscript as qt, assertResumeLimits as r, canonicalStreamEventFromSandboxEvent as ra, attestRuntimeOwnedPendingExecutor as ri, startRetainedRunInEnvironment as rn, summarizeDriverAttempts as rr, scopeRetainedOwnerPriorSpend as rt, readRunParking as s, notifySandboxEventObserver as sa, finalizeRuntimeOwnedPendingExecutor as si, captureHarnessTranscript as sn, SeatChainExhaustedError as sr, reconcileScopeRetainedOwnerEnvironment as st, DEFAULT_MAX_DEPTH as t, mapSandboxToolEvent as ta, unsupportedProfileDimensions as ti, recoverRetainedRun as tn, causedByPartialFailure as tr, consumeScopeRetainedOwnerResult as tt, bestDelivered as u, awaitAbortable$1 as ua, knownMaterializationReceipt as ui, readHarnessTranscript as un, subscriptionUsageLimitSignal as ur, bindScopeRetainedOwnerEnvironmentId as ut, createScope as v, runtimeOwnedPendingExecutorMaterialization as vi, createPropagatingTraceEmitter as vn, bestComposite as vr, FileResultBlobStore as vt, attachWorker as w, projectSandboxOutcome as wi, createOtelExporter as wn, bridgeModelRouteRefusal as wr, upsertCommittedJsonLine as wt, parseWorkerToolTraceArtifact as x, unknownMaterializationReceipt as xi, buildLoopSpanNodes as xn, failedItems as xr, prepareJsonlAppend as xt, replaySpawnTree as y, runtimeOwnedScopeOwnerRuntime as yi, readTraceContextFromEnv as yn, checkVerdictOf as yr, appendCommittedJsonLine as yt, settledToIteration as z, detachedFrozen as zi, DEFAULT_PEER_MAIL_LIMITS as zn, runSettledCommand as zr, acquireSandbox as zt };
 
-//# sourceMappingURL=supervisor-DDy0aEtR.js.map
+//# sourceMappingURL=supervisor-C1OePYE-.js.map